last executing test programs: 1m26.088443373s ago: executing program 0: mlockall(0x1) mremap(&(0x7f0000ff5000/0x2000)=nil, 0x2000, 0x5000000, 0x3, &(0x7f0000ffd000/0x1000)=nil) socket$unix(0x1, 0x1, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_inet_SIOCADDRT(r0, 0x5452, &(0x7f0000000140)={0x2000000, {0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x2, 0x0, @loopback}, {0x2, 0x0, @broadcast}}) 1m23.822947187s ago: executing program 4: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001) r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) preadv(r0, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = socket$inet_sctp(0x2, 0x1, 0x84) sendto$inet(r1, &(0x7f0000000140)='^', 0x34000, 0x0, &(0x7f0000004ff0)={0x2, 0x0, @rand_addr=0xfffffffffffffffe}, 0x10) listen(r1, 0xda90) accept4(r1, 0x0, 0x0, 0x0) 1m23.719207849s ago: executing program 2: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000000018105e04da070000000000010902240001000000000904000009030000000921000000012222000905810308"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f00000001c0)={0x24, 0x0, 0x0, &(0x7f0000000000)={0x0, 0x22, 0x22, {[@global=@item_012={0x2, 0x1, 0x0, "2313"}, @global=@item_012={0x2, 0x1, 0x0, "e53f"}, @global=@item_4={0x3, 0x1, 0x0, '\f\x00'}, @local=@item_012={0x2, 0x2, 0x0, "9000"}, @global=@item_4={0x3, 0x1, 0x0, "0900be00"}, @main=@item_4={0x3, 0x0, 0x8}, @local=@item_4={0x3, 0x2, 0x0, "09007a15"}, @local=@item_4={0x3, 0x2, 0x0, "5d8c3dda"}]}}, 0x0}, 0x0) r1 = syz_open_dev$hidraw(&(0x7f0000000080), 0x0, 0x0) read$hidraw(r1, 0x0, 0x2) syz_usb_ep_write(r0, 0x81, 0x1, &(0x7f0000000000)='B') 1m20.437745069s ago: executing program 2: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) r1 = socket$inet6_sctp(0xa, 0x801, 0x84) connect$inet6(r1, &(0x7f0000000100)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @rand_addr=0x64010102}}, 0x1c) shutdown(r1, 0x1) r2 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r2, 0x84, 0xc, &(0x7f0000000240)=@assoc_value={0x0}, &(0x7f0000000080)=0x8) getsockopt$inet_sctp6_SCTP_ASSOCINFO(r1, 0x84, 0x71, &(0x7f0000000140)={r3}, &(0x7f0000000180)=0x14) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r0, 0x84, 0x72, &(0x7f0000000240)={r3, 0x0, 0x10}, 0xc) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r0, &(0x7f0000000180)="1a", 0x1, 0x0, &(0x7f0000000480)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x0) r4 = openat$tun(0xffffffffffffff9c, 0x0, 0xc1842, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x8, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b405000000000000711095000000000006000000000000009500000000000000"], &(0x7f0000003ff6)='GPL\x00', 0x5, 0xc9, &(0x7f0000000080)=""/201, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10, 0xffffffffffffffff}, 0x90) write$cgroup_devices(r4, &(0x7f0000000140)=ANY=[@ANYBLOB="1e0308004d8c71ef2885634a8270e7112c"], 0xffdd) r5 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_udp_int(r5, 0x11, 0x66, &(0x7f00000004c0)=0x9, 0x4) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$devlink(&(0x7f00000001c0), 0xffffffffffffffff) syz_emit_ethernet(0x46, &(0x7f0000000480)=ANY=[@ANYBLOB="ffffffffffe3ffffffffffff86dd600111fa00101100fe8000000000000000000000000000bbfe8000000000"], 0x0) r6 = landlock_create_ruleset(&(0x7f0000000040)={0x0, 0x3}, 0x10, 0x0) landlock_restrict_self(r6, 0x0) sendto$inet6(r0, &(0x7f0000000080)="90", 0x1, 0x0, 0x0, 0xf) 1m20.231809266s ago: executing program 4: r0 = syz_open_dev$sndpcmc(&(0x7f00000016c0), 0x0, 0x0) ioctl$SNDRV_PCM_IOCTL_HW_PARAMS_OLD(r0, 0xc0fc4111, &(0x7f0000000040)={0x0, [], [{0x0, 0x0, 0x1, 0x1}]}) 1m20.087381959s ago: executing program 2: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) dup3(r1, r0, 0x0) sendmsg$NL80211_CMD_DEL_KEY(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000200)={0x14, 0x0, 0x0, 0x0, 0x0, {{}, {@void, @void}}}, 0x14}}, 0x0) 1m19.828326372s ago: executing program 2: r0 = openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000000080), 0x0) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x0) r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000018c0), 0x1) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r1, 0xc08c5332, &(0x7f0000000280)={0x0, 0x0, 0x0, 'queue1\x00'}) write$sndseq(r1, &(0x7f0000000000)=[{0x84, 0x77, 0x0, 0x0, @tick, {}, {}, @raw32}], 0xffc8) close_range(r0, 0xffffffffffffffff, 0x0) r2 = socket(0x11, 0x800000003, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r2, 0x8933, &(0x7f0000000600)={'team0\x00', 0x0}) r4 = socket$netlink(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r2, 0x8933, &(0x7f00000000c0)={'batadv_slave_0\x00'}) sendmsg$nl_route_sched(r4, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000000)=@newqdisc={0xa4, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x12, r3, {0x0, 0xfff2}, {0xffff, 0xffff}, {0xfff3}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x74, 0x2, [@TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4], 0x0, [0x8, 0x4]}}, @TCA_TAPRIO_ATTR_SCHED_CLOCKID={0x8}, @TCA_TAPRIO_ATTR_SCHED_ENTRY_LIST={0x10, 0x2, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, [@TCA_TAPRIO_SCHED_ENTRY_INTERVAL={0x8, 0x4, 0x4000000}]}]}]}}]}, 0xa4}}, 0x0) 1m19.82474334s ago: executing program 1: r0 = signalfd4(0xffffffffffffffff, &(0x7f00000000c0), 0x8, 0x0) r1 = socket$nl_crypto(0x10, 0x3, 0x15) dup3(r1, r0, 0x0) sendmsg$DEVLINK_CMD_PORT_SPLIT(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)={0x14}, 0x14}}, 0x0) 1m19.715476728s ago: executing program 4: r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f0000000500)={0xa, 0x2, 0x0, @empty}, 0x1c) listen(r1, 0x0) connect$inet(r0, &(0x7f00000001c0)={0x2, 0x2, @dev}, 0x10) r2 = accept4(r1, 0x0, 0x0, 0x0) setsockopt$ARPT_SO_SET_ADD_COUNTERS(r2, 0x0, 0x61, 0x0, 0x0) pipe2(0x0, 0x0) ioctl$BTRFS_IOC_QGROUP_CREATE(r1, 0x5450, 0x0) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) openat$cgroup_netprio_ifpriomap(0xffffffffffffffff, &(0x7f0000000040), 0x2, 0x0) accept(0xffffffffffffffff, 0x0, 0x0) accept$unix(0xffffffffffffffff, 0x0, 0x0) getpeername(0xffffffffffffffff, 0x0, 0x0) fstatfs(0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f00000002c0)) socket$inet_icmp_raw(0x2, 0x3, 0x1) write$FUSE_ENTRY(0xffffffffffffffff, &(0x7f00000005c0)={0x90, 0x0, 0x0, {0x0, 0x1, 0x4, 0x0, 0x0, 0x0, {0x1, 0x0, 0x0, 0x0, 0x2, 0x201, 0x4, 0x7, 0x7fff, 0x0, 0x7fffffff, 0x0, 0x0, 0xb00000}}}, 0x90) setsockopt$inet6_IPV6_DSTOPTS(0xffffffffffffffff, 0x29, 0x3b, 0x0, 0xfffffd8e) pivot_root(&(0x7f0000000200)='./file0\x00', &(0x7f0000000380)='./file0\x00') ioctl$BTRFS_IOC_TREE_SEARCH(r1, 0xd0009411, 0x0) r3 = accept4$inet(0xffffffffffffffff, 0x0, 0x0, 0x180000) getsockopt$SO_TIMESTAMP(r3, 0x1, 0x3e, 0x0, &(0x7f0000000100)) ioctl$KIOCSOUND(0xffffffffffffffff, 0x4b2f, 0x100000001) 1m19.584677114s ago: executing program 1: pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$USBDEVFS_GET_SPEED(r0, 0x551f) 1m19.350099341s ago: executing program 1: r0 = syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000300)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) syz_usb_disconnect(r0) 1m19.313437979s ago: executing program 4: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000000018105e04da070000000000010902240001000000000904000009030000000921000000012222000905810308"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f00000001c0)={0x24, 0x0, 0x0, &(0x7f0000000000)={0x0, 0x22, 0x22, {[@global=@item_012={0x2, 0x1, 0x0, "2313"}, @global=@item_012={0x2, 0x1, 0x0, "e53f"}, @global=@item_4={0x3, 0x1, 0x0, '\f\x00'}, @local=@item_012={0x2, 0x2, 0x0, "9000"}, @global=@item_4={0x3, 0x1, 0x0, "0900be00"}, @main=@item_4={0x3, 0x0, 0x8}, @local=@item_4={0x3, 0x2, 0x0, "09007a15"}, @local=@item_4={0x3, 0x2, 0x0, "5d8c3dda"}]}}, 0x0}, 0x0) r1 = syz_open_dev$hidraw(&(0x7f0000000080), 0x0, 0x0) read$hidraw(r1, 0x0, 0x2) syz_usb_ep_write(r0, 0x81, 0x1, &(0x7f0000000000)='B') 1m19.221111932s ago: executing program 2: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001) r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) preadv(r0, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = socket$inet_sctp(0x2, 0x1, 0x84) sendto$inet(r1, &(0x7f0000000140)='^', 0x34000, 0x0, &(0x7f0000004ff0)={0x2, 0x0, @rand_addr=0xfffffffffffffffe}, 0x10) listen(r1, 0xda90) accept4(r1, 0x0, 0x0, 0x0) 1m18.993395471s ago: executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$can_bcm(0x1d, 0x2, 0x2) r2 = dup2(r0, r1) sendmsg$NFULNL_MSG_CONFIG(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)={0x1c, 0x1, 0x4, 0x801, 0x0, 0x0, {}, [@NFULA_CFG_CMD={0x5}]}, 0x1c}}, 0x8004) syz_genetlink_get_family_id$ethtool(&(0x7f0000000280), r2) 1m18.51434888s ago: executing program 0: r0 = openat$vcs(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$RTC_IRQP_READ(r0, 0x8004700b, 0x0) 1m16.714426646s ago: executing program 0: r0 = socket(0x1d, 0x2, 0x6) r1 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f00000000c0)={'vcan0\x00', 0x0}) bind$can_j1939(r0, &(0x7f0000000000)={0x1d, r2, 0x1}, 0x18) sendmsg$ETHTOOL_MSG_LINKSTATE_GET(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000004c0)=ANY=[], 0x14}}, 0x0) sendmsg$NL80211_CMD_GET_MPP(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={0x0}}, 0x0) sendmsg$NL80211_CMD_NEW_INTERFACE(r0, &(0x7f000000cf40)={0x0, 0x0, &(0x7f000000cf00)={0x0}}, 0x0) 1m16.71431956s ago: executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x2) sendmsg$DEVLINK_CMD_TRAP_POLICER_GET(r0, &(0x7f0000000200)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000040)={0x14}, 0x14}}, 0x0) 1m16.56281425s ago: executing program 1: r0 = openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000000080), 0x0) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x0) r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000018c0), 0x1) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r1, 0xc08c5332, &(0x7f0000000280)={0x0, 0x0, 0x0, 'queue1\x00'}) write$sndseq(r1, &(0x7f0000000000)=[{0x84, 0x77, 0x0, 0x0, @tick, {}, {}, @raw32}], 0xffc8) close_range(r0, 0xffffffffffffffff, 0x0) r2 = socket(0x11, 0x800000003, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r2, 0x8933, &(0x7f0000000600)={'team0\x00', 0x0}) r4 = socket$netlink(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r2, 0x8933, &(0x7f00000000c0)={'batadv_slave_0\x00'}) sendmsg$nl_route_sched(r4, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000000)=@newqdisc={0xa4, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x12, r3, {0x0, 0xfff2}, {0xffff, 0xffff}, {0xfff3}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x74, 0x2, [@TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4], 0x0, [0x8, 0x4]}}, @TCA_TAPRIO_ATTR_SCHED_CLOCKID={0x8}, @TCA_TAPRIO_ATTR_SCHED_ENTRY_LIST={0x10, 0x2, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, [@TCA_TAPRIO_SCHED_ENTRY_INTERVAL={0x8, 0x4, 0x4000000}]}]}]}}]}, 0xa4}}, 0x0) 1m16.110260065s ago: executing program 4: r0 = socket$nl_rdma(0x10, 0x3, 0x14) r1 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) getsockopt$WPAN_WANTACK(r1, 0x0, 0x0, 0x0, &(0x7f0000001740)) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r3 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r3, 0x8914, 0x0) write$tun(r2, &(0x7f00000000c0)=ANY=[@ANYBLOB="034886dd010000000000000000006000"], 0xfdef) bind$802154_dgram(0xffffffffffffffff, 0x0, 0x0) sendmsg$RDMA_NLDEV_CMD_PORT_GET(0xffffffffffffffff, 0x0, 0x8000) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, 0x0, 0x0) getsockname$netlink(0xffffffffffffffff, &(0x7f0000000580), &(0x7f00000005c0)=0xc) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x0) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000004850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000002cc0)={&(0x7f0000000340)='kfree\x00', r5}, 0x10) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000002c0)={0x38, 0x1403, 0x1, 0x0, 0x0, "", [{{0x9, 0x2, 'syz0\x00'}, {0x8, 0x41, 'siw\x00'}, {0x14, 0x33, 'vlan0\x00'}}]}, 0x38}}, 0x0) 1m15.196752753s ago: executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x11, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000300)={'bond0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000700)=@newlink={0x54, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r2}, [@IFLA_LINKINFO={0x34, 0x12, 0x0, 0x1, @bond={{0x9}, {0x24, 0x2, 0x0, 0x1, [@IFLA_BOND_AD_SELECT={0x5}, @IFLA_BOND_ALL_SLAVES_ACTIVE={0x5, 0x11, 0x1}, @IFLA_BOND_ARP_INTERVAL={0x8, 0x7, 0x3}, @IFLA_BOND_AD_ACTOR_SYS_PRIO={0x6, 0x18, 0xfff9}]}}}]}, 0x54}}, 0x0) 49.078817851s ago: executing program 2: r0 = openat$nci(0xffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$BTRFS_IOC_QGROUP_CREATE(0xffffffffffffffff, 0x4010942a, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) write$binfmt_elf64(r0, 0x0, 0x0) 48.393490681s ago: executing program 1: r0 = socket$inet_mptcp(0x2, 0x1, 0x106) listen(r0, 0x0) accept4(r0, 0x0, 0x0, 0x0) shutdown(r0, 0x0) 45.932621079s ago: executing program 4: r0 = socket$unix(0x1, 0x2, 0x0) setsockopt$sock_attach_bpf(r0, 0x1, 0x10, &(0x7f0000000000), 0x4) 45.130743066s ago: executing program 0: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) r1 = socket$inet6_sctp(0xa, 0x801, 0x84) connect$inet6(r1, &(0x7f0000000100)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @rand_addr=0x64010102}}, 0x1c) shutdown(r1, 0x1) r2 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r2, 0x84, 0xc, &(0x7f0000000240)=@assoc_value={0x0}, &(0x7f0000000080)=0x8) getsockopt$inet_sctp6_SCTP_ASSOCINFO(r1, 0x84, 0x71, &(0x7f0000000140)={r3}, &(0x7f0000000180)=0x14) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r0, 0x84, 0x72, &(0x7f0000000240)={r3, 0x0, 0x10}, 0xc) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r0, &(0x7f0000000180)="1a", 0x1, 0x0, &(0x7f0000000480)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x0) r4 = openat$tun(0xffffffffffffff9c, 0x0, 0xc1842, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x8, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b405000000000000711095000000000006000000000000009500000000000000"], &(0x7f0000003ff6)='GPL\x00', 0x5, 0xc9, &(0x7f0000000080)=""/201, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10, 0xffffffffffffffff}, 0x90) write$cgroup_devices(r4, &(0x7f0000000140)=ANY=[@ANYBLOB="1e0308004d8c71ef2885634a8270e7112c"], 0xffdd) r5 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_udp_int(r5, 0x11, 0x66, &(0x7f00000004c0)=0x9, 0x4) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$devlink(&(0x7f00000001c0), 0xffffffffffffffff) syz_emit_ethernet(0x46, &(0x7f0000000480)=ANY=[@ANYBLOB="ffffffffffe3ffffffffffff86dd600111fa00101100fe8000000000000000000000000000bbfe8000000000"], 0x0) landlock_create_ruleset(&(0x7f0000000040)={0x0, 0x3}, 0x10, 0x0) open(&(0x7f00009e1000)='./file0\x00', 0x8060, 0x0) sendto$inet6(r0, &(0x7f0000000080)="90", 0x1, 0x0, 0x0, 0xf) 42.301882632s ago: executing program 3: r0 = socket(0x11, 0x3, 0x0) sendmsg$BATADV_CMD_GET_MCAST_FLAGS(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={0x0}}, 0x0) 32.242517612s ago: executing program 3: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) connect$packet(0xffffffffffffffff, &(0x7f0000000640)={0x2, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, 0x70) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) sendmsg$IEEE802154_LLSEC_LIST_DEVKEY(r0, &(0x7f0000000640)={0x0, 0x0, 0x0}, 0x0) 31.963248463s ago: executing program 3: mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_int(r0, &(0x7f00000000c0)='cpuset.mems\x00', 0x2, 0x0) preadv(r1, 0x0, 0x0, 0x0, 0x0) 31.473994541s ago: executing program 3: r0 = socket$inet6(0x10, 0x3, 0x0) recvmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) r1 = openat$full(0xffffffffffffff9c, 0x0, 0x0, 0x0) openat$random(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) openat$zero(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TUNGETDEVNETNS(r1, 0x5421, 0x20000000) r2 = openat$fuse(0xffffffffffffff9c, 0x0, 0x2, 0x0) eventfd(0x0) fgetxattr(0xffffffffffffffff, &(0x7f0000000080)=@known='trusted.overlay.redirect\x00', 0x0, 0x0) openat(0xffffffffffffffff, 0x0, 0x0, 0x0) r3 = socket(0x1, 0x3, 0x0) recvmsg$inet_nvme(r3, &(0x7f00000014c0)={&(0x7f0000000080)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @mcast2}}}, 0xd1, 0x0}, 0x0) close(r4) socket(0x0, 0x0, 0x0) ioctl$sock_SIOCBRDELBR(0xffffffffffffffff, 0x89a1, 0x0) ioctl$FS_IOC_READ_VERITY_METADATA(r2, 0x5450, 0x0) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000000000)=0x0) getpgrp(r5) ioctl$TUNSETTXFILTER(r0, 0x5451, 0x0) 30.372900252s ago: executing program 3: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001) openat$hwrng(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) syz_open_dev$ndb(0x0, 0x0, 0x0) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) r0 = socket$inet_sctp(0x2, 0x1, 0x84) sendto$inet(r0, &(0x7f0000000140)='^', 0x34000, 0x0, &(0x7f0000004ff0)={0x2, 0x0, @rand_addr=0xfffffffffffffffe}, 0x10) listen(r0, 0xda90) accept4(r0, 0x0, 0x0, 0x0) 0s ago: executing program 3: r0 = syz_open_dev$loop(&(0x7f0000000500), 0x0, 0x0) ioctl(r0, 0x2, &(0x7f0000000740)) kernel console output (not intermixed with test programs): bogus dirent @ nid 36 [ 734.371850][ T9085] erofs: (device loop1): erofs_fill_dentries: bogus dirent @ nid 36 [ 734.416200][ T9085] erofs: (device loop1): erofs_fill_dentries: bogus dirent @ nid 36 [ 734.469522][ T9085] erofs: (device loop1): erofs_fill_dentries: bogus dirent @ nid 36 [ 734.475786][ T9253] veth1_vlan: entered promiscuous mode [ 734.506272][ T9085] erofs: (device loop1): erofs_fill_dentries: bogus dirent @ nid 36 [ 734.541802][ T9085] erofs: (device loop1): erofs_fill_dentries: bogus dirent @ nid 36 [ 734.874829][ T9460] loop3: detected capacity change from 0 to 32768 [ 734.907747][ T9460] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop3 (7:3) scanned by syz-executor.3 (9460) [ 734.918337][ T9085] erofs: (device loop1): erofs_fill_dentries: bogus dirent @ nid 36 [ 734.945377][ T9460] BTRFS info (device loop3): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 734.956958][ T9460] BTRFS info (device loop3): using crc32c (crc32c-intel) checksum algorithm [ 734.967149][ T9460] BTRFS info (device loop3): using free-space-tree [ 734.988536][ T9085] erofs: (device loop1): erofs_fill_dentries: bogus dirent @ nid 36 [ 735.043307][ T9085] erofs: (device loop1): erofs_fill_dentries: bogus dirent @ nid 36 [ 735.074401][ T9253] veth0_macvtap: entered promiscuous mode [ 735.102326][ T9253] veth1_macvtap: entered promiscuous mode [ 735.121579][ T9085] erofs: (device loop1): erofs_fill_dentries: bogus dirent @ nid 36 [ 735.162910][ T9253] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 735.178910][ T9253] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 735.189174][ T9253] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 735.216809][ T9253] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 735.238519][ T9085] erofs: (device loop1): erofs_fill_dentries: bogus dirent @ nid 36 [ 735.296847][ T9253] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 735.298132][ T9085] erofs: (device loop1): erofs_fill_dentries: bogus dirent @ nid 36 [ 735.317028][ T9085] erofs: (device loop1): erofs_fill_dentries: bogus dirent @ nid 36 [ 735.326445][ T9085] erofs: (device loop1): erofs_fill_dentries: bogus dirent @ nid 36 [ 735.336219][ T9085] erofs: (device loop1): erofs_fill_dentries: bogus dirent @ nid 36 [ 735.341517][ T9253] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 735.349230][ T9085] erofs: (device loop1): erofs_fill_dentries: bogus dirent @ nid 36 [ 735.363928][ T9085] erofs: (device loop1): erofs_fill_dentries: bogus dirent @ nid 36 [ 735.384962][ T9085] erofs: (device loop1): erofs_fill_dentries: bogus dirent @ nid 36 [ 735.395208][ T9085] erofs: (device loop1): erofs_fill_dentries: bogus dirent @ nid 36 [ 735.405077][ T9085] erofs: (device loop1): erofs_fill_dentries: bogus dirent @ nid 36 [ 735.413250][ T9253] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 735.426410][ T9085] erofs: (device loop1): erofs_fill_dentries: bogus dirent @ nid 36 [ 735.434823][ T9253] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 735.446492][ T9085] erofs: (device loop1): erofs_fill_dentries: bogus dirent @ nid 36 [ 735.456155][ T9253] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 735.463610][ T1703] usb 3-1: USB disconnect, device number 14 [ 735.480179][ T9085] erofs: (device loop1): erofs_fill_dentries: bogus dirent @ nid 36 [ 735.496707][ T9253] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 735.513069][ T9085] erofs: (device loop1): erofs_fill_dentries: bogus dirent @ nid 36 [ 735.530399][ T9253] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 735.552183][ T9085] erofs: (device loop1): erofs_fill_dentries: bogus dirent @ nid 36 [ 735.570086][ T9253] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 735.590357][ T9085] erofs: (device loop1): erofs_fill_dentries: bogus dirent @ nid 36 [ 735.614000][ T9253] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 735.698152][ T9085] erofs: (device loop1): erofs_fill_dentries: bogus dirent @ nid 36 [ 735.908003][ T9085] erofs: (device loop1): erofs_fill_dentries: bogus dirent @ nid 36 [ 735.927406][ T9253] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 735.927715][ T9085] erofs: (device loop1): erofs_fill_dentries: bogus dirent @ nid 36 [ 736.375286][ T9085] erofs: (device loop1): erofs_fill_dentries: bogus dirent @ nid 36 [ 736.708235][ T9253] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 736.731221][ T9253] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 736.857432][ T9085] erofs: (device loop1): erofs_fill_dentries: bogus dirent @ nid 36 [ 736.865841][ T9253] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 736.868016][ T9085] erofs: (device loop1): erofs_fill_dentries: bogus dirent @ nid 36 [ 736.892328][ T9253] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 736.925634][ T9085] erofs: (device loop1): erofs_fill_dentries: bogus dirent @ nid 36 [ 736.926812][ T9253] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 736.957257][ T9085] erofs: (device loop1): erofs_fill_dentries: bogus dirent @ nid 36 [ 736.963940][ T9253] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 736.995646][ T9253] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 737.026055][ T9085] erofs: (device loop1): erofs_fill_dentries: bogus dirent @ nid 36 [ 737.048010][ T9085] erofs: (device loop1): erofs_fill_dentries: bogus dirent @ nid 36 [ 737.049922][ T9253] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 737.105849][ T9085] erofs: (device loop1): erofs_fill_dentries: bogus dirent @ nid 36 [ 737.116126][ T9253] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 737.131281][ T9085] erofs: (device loop1): erofs_fill_dentries: bogus dirent @ nid 36 [ 737.146764][ T9253] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 737.168584][ T9085] erofs: (device loop1): erofs_fill_dentries: bogus dirent @ nid 36 [ 737.180901][ T9253] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 737.195838][ T9085] erofs: (device loop1): erofs_fill_dentries: bogus dirent @ nid 36 [ 737.218436][ T9085] erofs: (device loop1): erofs_fill_dentries: bogus dirent @ nid 36 [ 737.231451][ T9085] erofs: (device loop1): erofs_fill_dentries: bogus dirent @ nid 36 [ 737.233568][ T9253] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 737.241189][ T9085] erofs: (device loop1): erofs_fill_dentries: bogus dirent @ nid 36 [ 737.256875][ T9085] erofs: (device loop1): erofs_fill_dentries: bogus dirent @ nid 36 [ 737.282695][ T9085] erofs: (device loop1): erofs_fill_dentries: bogus dirent @ nid 36 [ 737.319032][ T8737] BTRFS info (device loop3): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 737.322067][ T9085] erofs: (device loop1): erofs_fill_dentries: bogus dirent @ nid 36 [ 737.362854][ T29] audit: type=1804 audit(1717524524.578:490): pid=9485 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir3199956676/syzkaller.h5Vz5v/108/cgroup.controllers" dev="sda1" ino=1954 res=1 errno=0 [ 737.402929][ T9085] erofs: (device loop1): erofs_fill_dentries: bogus dirent @ nid 36 [ 737.454493][ T9253] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 737.472494][ T9085] erofs: (device loop1): erofs_fill_dentries: bogus dirent @ nid 36 [ 737.495797][ T9085] erofs: (device loop1): erofs_fill_dentries: bogus dirent @ nid 36 [ 737.504045][ T9253] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 737.505018][ T29] audit: type=1800 audit(1717524524.578:491): pid=9485 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed(directio) comm="syz-executor.2" name="cgroup.controllers" dev="sda1" ino=1954 res=0 errno=0 [ 737.552095][ T9085] erofs: (device loop1): erofs_fill_dentries: bogus dirent @ nid 36 [ 737.556848][ T9253] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 737.607192][ T9253] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 737.640915][ T9085] erofs: (device loop1): erofs_fill_dentries: bogus dirent @ nid 36 [ 737.682314][ T9487] loop2: detected capacity change from 0 to 256 [ 737.688365][ T9085] erofs: (device loop1): erofs_fill_dentries: bogus dirent @ nid 36 [ 737.745277][ T9085] erofs: (device loop1): erofs_fill_dentries: bogus dirent @ nid 36 [ 737.808308][ T9085] erofs: (device loop1): erofs_fill_dentries: bogus dirent @ nid 36 [ 737.815534][ T9487] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0x1a9973fb, utbl_chksum : 0xe619d30d) [ 737.848471][ T9085] erofs: (device loop1): erofs_fill_dentries: bogus dirent @ nid 36 [ 737.880039][ T9085] erofs: (device loop1): erofs_fill_dentries: bogus dirent @ nid 36 [ 737.918384][ T29] audit: type=1400 audit(1717524525.138:492): avc: denied { write } for pid=9486 comm="syz-executor.2" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=key permissive=1 [ 737.962973][ T9085] erofs: (device loop1): erofs_fill_dentries: bogus dirent @ nid 36 [ 738.018911][ T9085] erofs: (device loop1): erofs_fill_dentries: bogus dirent @ nid 36 [ 738.068725][ T9085] erofs: (device loop1): erofs_fill_dentries: bogus dirent @ nid 36 [ 738.087642][ T9487] Core dump to core aborted: cannot preserve file permissions [ 738.124250][ T9085] erofs: (device loop1): erofs_fill_dentries: bogus dirent @ nid 36 [ 738.161860][ T9085] erofs: (device loop1): erofs_fill_dentries: bogus dirent @ nid 36 [ 738.208868][ T5154] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 738.209052][ T9085] erofs: (device loop1): erofs_fill_dentries: bogus dirent @ nid 36 [ 738.238404][ T5154] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 738.287797][ T9085] erofs: (device loop1): erofs_fill_dentries: bogus dirent @ nid 36 [ 738.344174][ T9085] erofs: (device loop1): erofs_fill_dentries: bogus dirent @ nid 36 [ 738.398174][ T9085] erofs: (device loop1): erofs_fill_dentries: bogus dirent @ nid 36 [ 738.442918][ T5180] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 738.448207][ T9085] erofs: (device loop1): erofs_fill_dentries: bogus dirent @ nid 36 [ 738.451073][ T5180] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 738.508377][ T9085] erofs: (device loop1): erofs_fill_dentries: bogus dirent @ nid 36 [ 738.527731][ T9085] erofs: (device loop1): erofs_fill_dentries: bogus dirent @ nid 36 [ 738.580504][ T9085] erofs: (device loop1): erofs_fill_dentries: bogus dirent @ nid 36 [ 738.618598][ T9085] erofs: (device loop1): erofs_fill_dentries: bogus dirent @ nid 36 [ 738.640346][ T9085] erofs: (device loop1): erofs_fill_dentries: bogus dirent @ nid 36 [ 738.683563][ T9085] erofs: (device loop1): erofs_fill_dentries: bogus dirent @ nid 36 [ 738.707128][ T9085] erofs: (device loop1): erofs_fill_dentries: bogus dirent @ nid 36 [ 738.728491][ T9085] erofs: (device loop1): erofs_fill_dentries: bogus dirent @ nid 36 [ 738.761466][ T9085] erofs: (device loop1): erofs_fill_dentries: bogus dirent @ nid 36 [ 738.796226][ T9085] erofs: (device loop1): erofs_fill_dentries: bogus dirent @ nid 36 [ 738.842158][ T9085] erofs: (device loop1): erofs_fill_dentries: bogus dirent @ nid 36 [ 738.882337][ T29] audit: type=1326 audit(1717524526.098:493): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9493 comm="syz-executor.3" exe="/root/syz-executor.3" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f23c947cf69 code=0x0 [ 738.885132][ T9085] erofs: (device loop1): erofs_fill_dentries: bogus dirent @ nid 36 [ 738.968709][ T9085] erofs: (device loop1): erofs_fill_dentries: bogus dirent @ nid 36 [ 739.049424][ T9085] erofs: (device loop1): erofs_fill_dentries: bogus dirent @ nid 36 [ 739.288553][ T9085] erofs: (device loop1): erofs_fill_dentries: bogus dirent @ nid 36 [ 739.322574][ T9085] erofs: (device loop1): erofs_fill_dentries: bogus dirent @ nid 36 [ 741.226908][ T9085] erofs: (device loop1): erofs_fill_dentries: bogus dirent @ nid 36 [ 741.236094][ T9085] erofs: (device loop1): erofs_fill_dentries: bogus dirent @ nid 36 [ 741.349286][ T9085] erofs: (device loop1): erofs_fill_dentries: bogus dirent @ nid 36 [ 741.361765][ T9085] erofs: (device loop1): erofs_fill_dentries: bogus dirent @ nid 36 [ 741.375793][ T9085] erofs: (device loop1): erofs_fill_dentries: bogus dirent @ nid 36 [ 741.417156][ T9085] erofs: (device loop1): erofs_fill_dentries: bogus dirent @ nid 36 [ 741.427887][ T9085] erofs: (device loop1): erofs_fill_dentries: bogus dirent @ nid 36 [ 741.535494][ T9085] erofs: (device loop1): erofs_fill_dentries: bogus dirent @ nid 36 [ 741.626303][ T9085] erofs: (device loop1): erofs_fill_dentries: bogus dirent @ nid 36 [ 741.650198][ T9085] erofs: (device loop1): erofs_fill_dentries: bogus dirent @ nid 36 [ 741.704497][ T9085] erofs: (device loop1): erofs_fill_dentries: bogus dirent @ nid 36 [ 741.732257][ T9085] erofs: (device loop1): erofs_fill_dentries: bogus dirent @ nid 36 [ 741.800696][ T9085] erofs: (device loop1): erofs_fill_dentries: bogus dirent @ nid 36 [ 741.823145][ T9085] erofs: (device loop1): erofs_fill_dentries: bogus dirent @ nid 36 [ 742.047545][ T9085] erofs: (device loop1): erofs_fill_dentries: bogus dirent @ nid 36 [ 742.083210][ T9085] erofs: (device loop1): erofs_fill_dentries: bogus dirent @ nid 36 [ 742.101015][ T9085] erofs: (device loop1): erofs_fill_dentries: bogus dirent @ nid 36 [ 742.159574][ T9085] erofs: (device loop1): erofs_fill_dentries: bogus dirent @ nid 36 [ 742.196499][ T9085] erofs: (device loop1): erofs_fill_dentries: bogus dirent @ nid 36 [ 742.242138][ T9085] erofs: (device loop1): erofs_fill_dentries: bogus dirent @ nid 36 [ 742.261459][ T9085] erofs: (device loop1): erofs_fill_dentries: bogus dirent @ nid 36 [ 742.272684][ T9085] erofs: (device loop1): erofs_fill_dentries: bogus dirent @ nid 36 [ 742.283238][ T9085] erofs: (device loop1): erofs_fill_dentries: bogus dirent @ nid 36 [ 742.292837][ T9085] erofs: (device loop1): erofs_fill_dentries: bogus dirent @ nid 36 [ 742.304094][ T9085] erofs: (device loop1): erofs_fill_dentries: bogus dirent @ nid 36 [ 742.344292][ T9085] erofs: (device loop1): erofs_fill_dentries: bogus dirent @ nid 36 [ 742.375727][ T9085] erofs: (device loop1): erofs_fill_dentries: bogus dirent @ nid 36 [ 742.396467][ T9085] erofs: (device loop1): erofs_fill_dentries: bogus dirent @ nid 36 [ 742.881845][ T9516] loop4: detected capacity change from 0 to 32768 [ 742.904131][ T9516] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop4 (7:4) scanned by syz-executor.4 (9516) [ 742.924257][ T9519] loop3: detected capacity change from 0 to 32768 [ 742.959721][ T9085] erofs: (device loop1): erofs_fill_dentries: bogus dirent @ nid 36 [ 743.006496][ T9085] erofs: (device loop1): erofs_fill_dentries: bogus dirent @ nid 36 [ 743.067208][ T9085] erofs: (device loop1): erofs_fill_dentries: bogus dirent @ nid 36 [ 743.102033][ T9085] erofs: (device loop1): erofs_fill_dentries: bogus dirent @ nid 36 [ 743.144837][ T9085] erofs: (device loop1): erofs_fill_dentries: bogus dirent @ nid 36 [ 743.218895][ T9085] erofs: (device loop1): erofs_fill_dentries: bogus dirent @ nid 36 [ 743.276764][ T9519] BTRFS: device /dev/loop3 (7:3) using temp-fsid c586f4b5-f2b2-44b2-986a-ca3a6f182bf7 [ 743.286436][ T9519] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop3 (7:3) scanned by syz-executor.3 (9519) [ 743.305440][ T9516] BTRFS info (device loop4): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 743.316276][ T9516] BTRFS info (device loop4): using crc32c (crc32c-intel) checksum algorithm [ 743.324652][ T9519] BTRFS info (device loop3): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 743.325153][ T9516] BTRFS info (device loop4): using free-space-tree [ 743.335193][ T9519] BTRFS info (device loop3): using crc32c (crc32c-intel) checksum algorithm [ 743.335245][ T9519] BTRFS info (device loop3): using free-space-tree [ 744.185476][ T9085] erofs: (device loop1): erofs_fill_dentries: bogus dirent @ nid 36 [ 744.206742][ T29] audit: type=1804 audit(1717524531.418:494): pid=9521 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir1255768882/syzkaller.CJZNP1/112/cgroup.controllers" dev="sda1" ino=1967 res=1 errno=0 [ 744.318370][ T9085] erofs: (device loop1): erofs_fill_dentries: bogus dirent @ nid 36 [ 744.353446][ T9085] erofs: (device loop1): erofs_fill_dentries: bogus dirent @ nid 36 [ 744.366792][ T29] audit: type=1800 audit(1717524531.418:495): pid=9521 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed(directio) comm="syz-executor.0" name="cgroup.controllers" dev="sda1" ino=1967 res=0 errno=0 [ 744.417761][ T9085] erofs: (device loop1): erofs_fill_dentries: bogus dirent @ nid 36 [ 744.475499][ T9085] erofs: (device loop1): erofs_fill_dentries: bogus dirent @ nid 36 [ 744.512849][ T9085] erofs: (device loop1): erofs_fill_dentries: bogus dirent @ nid 36 [ 744.533640][ T9085] erofs: (device loop1): erofs_fill_dentries: bogus dirent @ nid 36 [ 744.575143][ T9554] netlink: 256 bytes leftover after parsing attributes in process `syz-executor.2'. [ 744.595949][ T9085] erofs: (device loop1): erofs_fill_dentries: bogus dirent @ nid 36 [ 744.638639][ T9085] erofs: (device loop1): erofs_fill_dentries: bogus dirent @ nid 36 [ 744.678657][ T9085] erofs: (device loop1): erofs_fill_dentries: bogus dirent @ nid 36 [ 744.727873][ T9085] erofs: (device loop1): erofs_fill_dentries: bogus dirent @ nid 36 [ 744.758341][ T9085] erofs: (device loop1): erofs_fill_dentries: bogus dirent @ nid 36 [ 745.002210][ T9085] erofs: (device loop1): erofs_fill_dentries: bogus dirent @ nid 36 [ 748.268322][ T9085] erofs: (device loop1): erofs_fill_dentries: bogus dirent @ nid 36 [ 748.371852][ T9085] erofs: (device loop1): erofs_fill_dentries: bogus dirent @ nid 36 [ 748.394561][ T9085] erofs: (device loop1): erofs_fill_dentries: bogus dirent @ nid 36 [ 748.416800][ T9085] erofs: (device loop1): erofs_fill_dentries: bogus dirent @ nid 36 [ 748.767013][ T8737] BTRFS info (device loop3): last unmount of filesystem c586f4b5-f2b2-44b2-986a-ca3a6f182bf7 [ 748.963682][ T9253] BTRFS info (device loop4): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 749.062091][ T9578] loop0: detected capacity change from 0 to 256 [ 749.215239][ T9578] exFAT-fs (loop0): failed to load upcase table (idx : 0x00010000, chksum : 0x1a9973fb, utbl_chksum : 0xe619d30d) [ 749.601416][ T9578] Core dump to core aborted: cannot preserve file permissions [ 749.878304][ T12] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 750.369227][ T12] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 750.870012][ T12] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 751.178798][ T12] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 751.184823][ T9593] netlink: 256 bytes leftover after parsing attributes in process `syz-executor.2'. [ 751.276093][ T29] audit: type=1804 audit(1717524538.488:496): pid=9590 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir1255768882/syzkaller.CJZNP1/116/cgroup.controllers" dev="sda1" ino=1948 res=1 errno=0 [ 751.351124][ T29] audit: type=1800 audit(1717524538.488:497): pid=9590 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed(directio) comm="syz-executor.0" name="cgroup.controllers" dev="sda1" ino=1948 res=0 errno=0 [ 751.374218][ C0] vkms_vblank_simulate: vblank timer overrun [ 751.733633][ T29] audit: type=1326 audit(1717524538.918:498): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9596 comm="syz-executor.4" exe="/root/syz-executor.4" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7faef487cf69 code=0x0 [ 751.975496][ T9603] loop0: detected capacity change from 0 to 32768 [ 752.080631][ T9603] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop0 (7:0) scanned by syz-executor.0 (9603) [ 752.106866][ T9603] BTRFS info (device loop0): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 752.107166][ T12] bridge_slave_1: left allmulticast mode [ 752.117239][ T9603] BTRFS info (device loop0): using crc32c (crc32c-intel) checksum algorithm [ 752.131511][ T9603] BTRFS info (device loop0): using free-space-tree [ 752.213750][ T12] bridge_slave_1: left promiscuous mode [ 752.243164][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 752.639543][ T12] bridge_slave_0: left allmulticast mode [ 752.640529][ T5121] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 752.645260][ T12] bridge_slave_0: left promiscuous mode [ 752.645593][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 752.733433][ T5121] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 752.743169][ T5121] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 752.753748][ T5121] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 752.988806][ T1253] ieee802154 phy0 wpan0: encryption failed: -22 [ 752.995277][ T1253] ieee802154 phy1 wpan1: encryption failed: -22 [ 753.522138][ T5118] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 753.534079][ T5118] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 753.583623][ T9634] input: syz0 as /devices/virtual/input/input31 [ 753.675858][ T7939] BTRFS info (device loop0): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 753.741850][ T9634] loop4: detected capacity change from 0 to 64 [ 754.123145][ T9634] vivid-008: disconnect [ 754.460468][ T9636] netlink: 36 bytes leftover after parsing attributes in process `syz-executor.4'. [ 754.747141][ T9622] vivid-008: reconnect [ 755.203505][ T9643] loop4: detected capacity change from 0 to 4096 [ 755.253409][ T9644] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 755.352986][ T29] audit: type=1400 audit(1717524542.568:499): avc: denied { ioctl } for pid=9642 comm="syz-executor.4" path="/root/syzkaller-testdir1773879992/syzkaller.aaRMJt/4/file0/bus" dev="loop4" ino=18 ioctlcmd=0x5005 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 755.587171][ T5118] Bluetooth: hci3: command 0x0406 tx timeout [ 755.593466][ T5121] Bluetooth: hci2: command tx timeout [ 755.702781][ T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 755.737943][ T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 755.773731][ T12] bond0 (unregistering): Released all slaves [ 755.813732][ T9638] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 755.822058][ T9638] IPv6: NLM_F_CREATE should be set when creating new route [ 755.829387][ T9638] IPv6: NLM_F_CREATE should be set when creating new route [ 756.223980][ T9655] netlink: 256 bytes leftover after parsing attributes in process `syz-executor.3'. [ 756.365936][ T29] audit: type=1804 audit(1717524543.578:500): pid=9656 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir3199956676/syzkaller.h5Vz5v/120/cgroup.controllers" dev="sda1" ino=1962 res=1 errno=0 [ 756.473455][ T29] audit: type=1800 audit(1717524543.578:501): pid=9656 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed(directio) comm="syz-executor.2" name="cgroup.controllers" dev="sda1" ino=1962 res=0 errno=0 [ 756.683951][ T29] audit: type=1326 audit(1717524543.898:502): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9660 comm="syz-executor.3" exe="/root/syz-executor.3" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f23c947cf69 code=0x0 [ 756.952992][ T12] hsr_slave_0: left promiscuous mode [ 756.998232][ T12] hsr_slave_1: left promiscuous mode [ 757.014707][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 757.032723][ T12] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 757.049092][ T9665] loop2: detected capacity change from 0 to 4096 [ 757.065013][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 757.075180][ T12] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 757.093208][ T9665] ntfs3: loop2: Different NTFS sector size (1024) and media sector size (512). [ 757.207056][ T12] veth1_macvtap: left promiscuous mode [ 757.461527][ T12] veth0_macvtap: left promiscuous mode [ 757.484887][ T12] veth1_vlan: left promiscuous mode [ 757.667309][ T5121] Bluetooth: hci2: command tx timeout [ 758.231047][ T12] veth0_vlan: left promiscuous mode [ 758.772842][ T29] audit: type=1400 audit(1717524545.978:503): avc: denied { recv } for pid=7939 comm="syz-executor.0" saddr=10.128.0.169 src=30006 daddr=10.128.1.38 dest=58456 netif=eth0 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=1 [ 759.276839][ T29] audit: type=1400 audit(1717524546.488:504): avc: denied { egress } for pid=24 comm="ksoftirqd/1" saddr=fe80::1b daddr=ff02::2 netif=teql0 scontext=system_u:object_r:unlabeled_t tcontext=system_u:object_r:netif_t tclass=netif permissive=1 [ 759.316294][ T29] audit: type=1400 audit(1717524546.488:505): avc: denied { sendto } for pid=24 comm="ksoftirqd/1" saddr=fe80::1b daddr=ff02::2 netif=teql0 scontext=system_u:object_r:unlabeled_t tcontext=system_u:object_r:node_t tclass=node permissive=1 [ 759.339427][ C0] vkms_vblank_simulate: vblank timer overrun [ 759.746739][ T5121] Bluetooth: hci2: command tx timeout [ 760.513668][ T9676] loop3: detected capacity change from 0 to 32768 [ 760.543604][ T9676] gfs2: Bad value for 'commit' [ 760.727551][ T12] team0 (unregistering): Port device team_slave_1 removed [ 761.975118][ T5121] Bluetooth: hci2: command tx timeout [ 762.029881][ T12] team0 (unregistering): Port device team_slave_0 removed [ 762.364788][ T9698] netlink: 256 bytes leftover after parsing attributes in process `syz-executor.3'. [ 762.728621][ T29] audit: type=1804 audit(1717524549.928:506): pid=9700 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir7386598/syzkaller.SibFyS/40/cgroup.controllers" dev="sda1" ino=1959 res=1 errno=0 [ 762.774858][ T29] audit: type=1800 audit(1717524549.928:507): pid=9700 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed(directio) comm="syz-executor.3" name="cgroup.controllers" dev="sda1" ino=1959 res=0 errno=0 [ 765.497811][ T29] audit: type=1326 audit(1717524552.718:508): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9712 comm="syz-executor.2" exe="/root/syz-executor.2" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fadb087cf69 code=0x0 [ 766.141206][ T9624] chnl_net:caif_netlink_parms(): no params data found [ 766.599777][ T9728] loop4: detected capacity change from 0 to 32768 [ 766.630023][ T9728] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop4 (7:4) scanned by syz-executor.4 (9728) [ 766.671040][ T9728] BTRFS info (device loop4): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 766.681453][ T9728] BTRFS info (device loop4): using crc32c (crc32c-intel) checksum algorithm [ 766.690273][ T9728] BTRFS info (device loop4): using free-space-tree [ 766.759605][ T9734] netlink: 256 bytes leftover after parsing attributes in process `syz-executor.0'. [ 767.099288][ T9624] bridge0: port 1(bridge_slave_0) entered blocking state [ 767.118932][ T9624] bridge0: port 1(bridge_slave_0) entered disabled state [ 767.126337][ T9624] bridge_slave_0: entered allmulticast mode [ 767.211904][ T9624] bridge_slave_0: entered promiscuous mode [ 767.282273][ T9624] bridge0: port 2(bridge_slave_1) entered blocking state [ 767.582712][ T9624] bridge0: port 2(bridge_slave_1) entered disabled state [ 767.724632][ T9624] bridge_slave_1: entered allmulticast mode [ 767.808443][ T9624] bridge_slave_1: entered promiscuous mode [ 768.041433][ T9757] loop3: detected capacity change from 0 to 4096 [ 768.087094][ T9757] ntfs3: loop3: Different NTFS sector size (1024) and media sector size (512). [ 768.307747][ T9253] BTRFS info (device loop4): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 768.973312][ T9624] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 769.115040][ T9624] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 769.650933][ T9624] team0: Port device team_slave_0 added [ 769.739002][ T9624] team0: Port device team_slave_1 added [ 770.007318][ T29] audit: type=1326 audit(1717524557.218:509): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9768 comm="syz-executor.0" exe="/root/syz-executor.0" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f2b6687cf69 code=0x0 [ 770.125505][ T9624] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 770.144857][ T9624] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 770.232571][ T9624] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 770.286481][ T9624] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 770.327879][ T9624] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 770.418320][ T9624] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 771.819134][ T9624] hsr_slave_0: entered promiscuous mode [ 771.935475][ T9624] hsr_slave_1: entered promiscuous mode [ 772.019916][ T9624] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 772.082231][ T9624] Cannot create hsr debugfs directory [ 774.528106][ T9801] loop4: detected capacity change from 0 to 32768 [ 774.566056][ T9801] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop4 (7:4) scanned by syz-executor.4 (9801) [ 774.653049][ T9801] BTRFS info (device loop4): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 774.663391][ T9801] BTRFS info (device loop4): using crc32c (crc32c-intel) checksum algorithm [ 774.672216][ T9801] BTRFS info (device loop4): using free-space-tree [ 775.187493][ T9812] loop2: detected capacity change from 0 to 32768 [ 775.208883][ T9812] BTRFS: device /dev/loop2 (7:2) using temp-fsid 62b52866-85b7-44c2-8cf4-53f6cd309f87 [ 775.218624][ T9812] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop2 (7:2) scanned by syz-executor.2 (9812) [ 775.381892][ T9812] BTRFS info (device loop2): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 775.392207][ T9812] BTRFS info (device loop2): using crc32c (crc32c-intel) checksum algorithm [ 775.401071][ T9812] BTRFS info (device loop2): using free-space-tree [ 775.559539][ T7752] usb 1-1: new high-speed USB device number 10 using dummy_hcd [ 775.766735][ T7752] usb 1-1: Using ep0 maxpacket: 16 [ 778.233228][ T9812] workqueue: Failed to create a rescuer kthread for wq "btrfs-qgroup-rescan": -EINTR [ 778.336467][ T9812] BTRFS error (device loop2): open_ctree failed [ 778.562717][ T9253] BTRFS info (device loop4): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 778.606772][ T7752] usb 1-1: unable to read config index 0 descriptor/all [ 778.613904][ T7752] usb 1-1: can't read configurations, error -71 [ 779.364385][ T29] audit: type=1326 audit(1717524566.578:510): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9851 comm="syz-executor.3" exe="/root/syz-executor.3" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f23c947cf69 code=0x0 [ 779.469499][ T9624] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 779.526306][ T9624] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 779.633488][ T9624] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 779.677645][ T9850] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 779.715400][ T9624] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 781.119894][ T9624] 8021q: adding VLAN 0 to HW filter on device bond0 [ 781.335963][ T9624] 8021q: adding VLAN 0 to HW filter on device team0 [ 781.473787][ T7210] bridge0: port 1(bridge_slave_0) entered blocking state [ 781.481024][ T7210] bridge0: port 1(bridge_slave_0) entered forwarding state [ 781.569515][ T5154] bridge0: port 2(bridge_slave_1) entered blocking state [ 781.576886][ T5154] bridge0: port 2(bridge_slave_1) entered forwarding state [ 782.082494][ T9870] loop4: detected capacity change from 0 to 4096 [ 782.176195][ T9870] ntfs3: loop4: Different NTFS sector size (1024) and media sector size (512). [ 783.556815][ T9881] loop3: detected capacity change from 0 to 32768 [ 784.031466][ T9881] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop3 (7:3) scanned by syz-executor.3 (9881) [ 784.102835][ T9881] BTRFS info (device loop3): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 784.117761][ T9881] BTRFS info (device loop3): using crc32c (crc32c-intel) checksum algorithm [ 784.126515][ T9881] BTRFS info (device loop3): using free-space-tree [ 784.661622][ T9624] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 785.812019][ T9624] veth0_vlan: entered promiscuous mode [ 785.833632][ T8737] BTRFS info (device loop3): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 785.878574][ T9624] veth1_vlan: entered promiscuous mode [ 786.234167][ T9624] veth0_macvtap: entered promiscuous mode [ 786.752638][ T9624] veth1_macvtap: entered promiscuous mode [ 787.103329][ T9624] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 787.176609][ T9624] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 787.234120][ T9624] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 787.266655][ T9624] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 787.315126][ T9624] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 787.395034][ T9624] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 787.423486][ T9624] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 787.473574][ T9624] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 787.504212][ T9624] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 787.519239][ T9624] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 787.533963][ T9624] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 787.544900][ T5180] usb 1-1: new high-speed USB device number 12 using dummy_hcd [ 787.558606][ T9624] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 787.624350][ T9624] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 787.664960][ T9624] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 787.702446][ T9624] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 787.729700][ T9624] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 787.740902][ T5180] usb 1-1: Using ep0 maxpacket: 16 [ 788.139453][ T9925] loop3: detected capacity change from 0 to 32768 [ 788.155765][ T5180] usb 1-1: config index 0 descriptor too short (expected 25183, got 36) [ 788.181254][ T5180] usb 1-1: config 116 has too many interfaces: 121, using maximum allowed: 32 [ 788.190352][ T9624] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 788.190384][ T9624] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 788.190412][ T9624] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 788.223534][ T9925] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop3 (7:3) scanned by syz-executor.3 (9925) [ 788.247777][ T5180] usb 1-1: config 116 has an invalid descriptor of length 0, skipping remainder of the config [ 788.249152][ T9925] BTRFS info (device loop3): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 788.266777][ T5180] usb 1-1: config 116 has 0 interfaces, different from the descriptor's value: 121 [ 788.268637][ T9925] BTRFS info (device loop3): using crc32c (crc32c-intel) checksum algorithm [ 788.286700][ T9925] BTRFS info (device loop3): using free-space-tree [ 788.291251][ T5180] usb 1-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 788.302729][ T5180] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 788.347033][ T9624] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 788.357956][ T9624] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 788.395248][ T9624] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 788.466914][ T9624] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 788.509129][ T9624] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 788.556767][ T9624] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 788.570506][ T9921] IPVS: set_ctl: invalid protocol: 92 100.1.1.1:4 [ 788.629056][ T9624] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 792.448506][ T8737] BTRFS info (device loop3): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 792.639061][ T5180] usb 1-1: string descriptor 0 read error: -71 [ 792.659488][ T9624] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 792.687035][ T5180] usb 1-1: USB disconnect, device number 12 [ 792.711449][ T9624] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 792.777279][ T9624] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 792.786070][ T9624] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 793.466383][ T5165] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 793.530432][ T5165] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 793.748838][ T79] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 793.780047][ T79] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 793.876430][ T9949] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 794.225708][ T29] audit: type=1326 audit(1717524581.428:511): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9956 comm="syz-executor.3" exe="/root/syz-executor.3" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f23c947cf69 code=0x0 [ 794.917346][ T9968] loop0: detected capacity change from 0 to 32768 [ 794.943096][ T9968] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop0 (7:0) scanned by syz-executor.0 (9968) [ 794.998781][ T9968] BTRFS info (device loop0): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 795.009192][ T9968] BTRFS info (device loop0): using crc32c (crc32c-intel) checksum algorithm [ 795.017984][ T9968] BTRFS info (device loop0): using free-space-tree [ 795.041383][ T5118] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 795.062882][ T5118] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 795.096351][ T5118] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 795.120801][ T5118] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 795.131275][ T5118] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 795.140946][ T5118] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 795.231870][ T35] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 796.378655][ T7939] BTRFS info (device loop0): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 796.488940][ T35] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 796.939504][ T35] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 797.193346][ T5121] Bluetooth: hci4: command tx timeout [ 797.359778][ T35] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 797.446079][ T9992] loop1: detected capacity change from 0 to 4096 [ 797.476986][ T9992] ntfs3: loop1: Different NTFS sector size (1024) and media sector size (512). [ 799.315269][ T5121] Bluetooth: hci4: command tx timeout [ 800.029570][T10004] loop4: detected capacity change from 0 to 32768 [ 800.118452][T10004] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop4 (7:4) scanned by syz-executor.4 (10004) [ 800.171606][T10004] BTRFS info (device loop4): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 800.182040][T10004] BTRFS info (device loop4): using crc32c (crc32c-intel) checksum algorithm [ 800.193519][T10004] BTRFS info (device loop4): using free-space-tree [ 800.794656][ T9969] chnl_net:caif_netlink_parms(): no params data found [ 801.365677][ T5121] Bluetooth: hci4: command tx timeout [ 801.403767][ T35] bridge_slave_1: left allmulticast mode [ 801.774548][ T35] bridge_slave_1: left promiscuous mode [ 801.817044][ T35] bridge0: port 2(bridge_slave_1) entered disabled state [ 801.928119][ T35] bridge_slave_0: left allmulticast mode [ 801.974977][ T35] bridge_slave_0: left promiscuous mode [ 801.998429][ T35] bridge0: port 1(bridge_slave_0) entered disabled state [ 802.027171][ T9253] BTRFS info (device loop4): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 802.958762][T10043] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 803.456806][ T5121] Bluetooth: hci4: command tx timeout [ 803.651599][ T29] audit: type=1326 audit(1717524590.868:512): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10046 comm="syz-executor.4" exe="/root/syz-executor.4" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7faef487cf69 code=0x0 [ 803.849875][ T35] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 803.882520][ T35] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 803.918546][ T35] bond0 (unregistering): Released all slaves [ 804.648292][ T1703] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 804.704871][T10053] loop3: detected capacity change from 0 to 32768 [ 804.716306][T10053] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop3 (7:3) scanned by syz-executor.3 (10053) [ 804.746032][T10053] BTRFS info (device loop3): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 804.756426][T10053] BTRFS info (device loop3): using crc32c (crc32c-intel) checksum algorithm [ 804.765597][T10053] BTRFS info (device loop3): using free-space-tree [ 804.886685][ T1703] usb 2-1: Using ep0 maxpacket: 32 [ 804.910928][ T1703] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 804.956593][ T1703] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 805.006354][ T29] audit: type=1804 audit(1717524592.218:513): pid=10071 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=open_writers comm="syz-executor.4" name="/root/syzkaller-testdir1773879992/syzkaller.aaRMJt/18/cgroup.controllers" dev="sda1" ino=1963 res=1 errno=0 [ 805.045009][ T1703] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x2 has an invalid bInterval 0, changing to 7 [ 805.108962][ T1703] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 805.174390][ T1703] usb 2-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 5 [ 805.196674][ T29] audit: type=1800 audit(1717524592.218:514): pid=10071 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed(directio) comm="syz-executor.4" name="cgroup.controllers" dev="sda1" ino=1963 res=0 errno=0 [ 806.019235][ T9969] bridge0: port 1(bridge_slave_0) entered blocking state [ 806.053446][ T9969] bridge0: port 1(bridge_slave_0) entered disabled state [ 806.088959][ T9969] bridge_slave_0: entered allmulticast mode [ 806.131489][ T9969] bridge_slave_0: entered promiscuous mode [ 806.147755][ T1703] usb 2-1: New USB device found, idVendor=1b96, idProduct=000a, bcdDevice= 0.00 [ 806.156903][ T1703] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 806.276155][ T9969] bridge0: port 2(bridge_slave_1) entered blocking state [ 806.320986][ T8737] BTRFS info (device loop3): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 806.349152][ T9969] bridge0: port 2(bridge_slave_1) entered disabled state [ 806.391969][ T9969] bridge_slave_1: entered allmulticast mode [ 806.446442][ T9969] bridge_slave_1: entered promiscuous mode [ 806.506755][ T1703] usb 2-1: config 0 descriptor?? [ 807.043953][T10080] loop0: detected capacity change from 0 to 4096 [ 807.249182][T10080] ntfs3: loop0: Different NTFS sector size (1024) and media sector size (512). [ 807.347535][ T1703] ntrig 0003:1B96:000A.0005: hidraw0: USB HID v0.00 Device [HID 1b96:000a] on usb-dummy_hcd.1-1/input0 [ 807.464563][ T9969] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 807.544319][ T9969] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 807.675654][T10056] loop1: detected capacity change from 0 to 4096 [ 807.828227][ T35] hsr_slave_0: left promiscuous mode [ 807.879086][T10085] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 807.911332][ T35] hsr_slave_1: left promiscuous mode [ 807.990663][ T35] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 808.037758][ T35] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 808.068133][ T35] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 808.087080][ T35] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 808.967981][T10087] loop4: detected capacity change from 0 to 32768 [ 809.042940][T10087] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop4 (7:4) scanned by syz-executor.4 (10087) [ 809.350050][ T35] veth1_macvtap: left promiscuous mode [ 809.378106][ T1703] usb 2-1: USB disconnect, device number 5 [ 809.387398][T10087] BTRFS info (device loop4): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 809.397819][T10087] BTRFS info (device loop4): using crc32c (crc32c-intel) checksum algorithm [ 809.407775][T10087] BTRFS info (device loop4): using free-space-tree [ 809.432008][ T35] veth0_macvtap: left promiscuous mode [ 809.458558][ T35] veth1_vlan: left promiscuous mode [ 809.464023][ T35] veth0_vlan: left promiscuous mode [ 811.072507][ T35] pimreg (unregistering): left allmulticast mode [ 811.155757][ T9253] BTRFS info (device loop4): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 811.156834][T10121] loop1: detected capacity change from 0 to 256 [ 811.199751][T10121] exfat: Bad value for 'uid' [ 811.387645][T10121] loop1: detected capacity change from 0 to 256 [ 811.503081][T10121] FAT-fs (loop1): Directory bread(block 64) failed [ 811.537847][T10121] FAT-fs (loop1): Directory bread(block 65) failed [ 811.547789][T10121] FAT-fs (loop1): Directory bread(block 66) failed [ 811.585854][T10121] FAT-fs (loop1): Directory bread(block 67) failed [ 811.597968][T10121] FAT-fs (loop1): Directory bread(block 68) failed [ 811.609192][T10121] FAT-fs (loop1): Directory bread(block 69) failed [ 811.640155][T10121] FAT-fs (loop1): Directory bread(block 70) failed [ 811.652132][T10121] FAT-fs (loop1): Directory bread(block 71) failed [ 811.684922][T10121] FAT-fs (loop1): Directory bread(block 72) failed [ 811.712158][T10121] FAT-fs (loop1): Directory bread(block 73) failed [ 812.715636][T10113] loop0: detected capacity change from 0 to 32768 [ 812.745119][T10113] gfs2: Bad value for 'commit' [ 813.149940][ T35] team0 (unregistering): Port device team_slave_1 removed [ 813.370190][ T35] team0 (unregistering): Port device team_slave_0 removed [ 813.701603][ T29] audit: type=1326 audit(1717524600.918:515): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10126 comm="syz-executor.0" exe="/root/syz-executor.0" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f2b6687cf69 code=0x0 [ 814.323795][ T1253] ieee802154 phy0 wpan0: encryption failed: -22 [ 814.336703][ T1253] ieee802154 phy1 wpan1: encryption failed: -22 [ 815.503163][T10133] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.1'. [ 815.582195][ T9969] team0: Port device team_slave_0 added [ 815.625483][ T9969] team0: Port device team_slave_1 added [ 816.201829][T10139] loop3: detected capacity change from 0 to 32768 [ 816.213860][T10139] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop3 (7:3) scanned by syz-executor.3 (10139) [ 816.242140][T10139] BTRFS info (device loop3): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 816.252485][T10139] BTRFS info (device loop3): using crc32c (crc32c-intel) checksum algorithm [ 816.261458][T10139] BTRFS info (device loop3): using free-space-tree [ 816.353168][ T9969] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 816.394221][ T9969] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 816.457333][ T9969] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 816.812759][ T9969] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 818.832260][ T9969] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 818.858290][ C1] vkms_vblank_simulate: vblank timer overrun [ 819.172822][T10151] loop1: detected capacity change from 0 to 4096 [ 819.186918][ T8737] BTRFS info (device loop3): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 819.197416][ T9969] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 819.197462][T10151] ntfs3: loop1: Different NTFS sector size (1024) and media sector size (512). [ 819.379078][T10151] ntfs3: loop1: Failed to read $UpCase (-4). [ 819.633594][ T9969] hsr_slave_0: entered promiscuous mode [ 819.697193][ T9969] hsr_slave_1: entered promiscuous mode [ 819.773181][ T9969] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 819.781177][ T9969] Cannot create hsr debugfs directory [ 820.214780][T10172] loop1: detected capacity change from 0 to 32768 [ 820.227475][T10172] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop1 (7:1) scanned by syz-executor.1 (10172) [ 820.259904][T10172] BTRFS info (device loop1): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 820.270369][T10172] BTRFS info (device loop1): using crc32c (crc32c-intel) checksum algorithm [ 820.279237][T10172] BTRFS info (device loop1): using free-space-tree [ 821.771847][T10190] pimreg: entered allmulticast mode [ 821.808221][ T9624] BTRFS info (device loop1): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 822.215114][T10208] loop3: detected capacity change from 0 to 256 [ 822.286107][T10208] exFAT-fs (loop3): failed to load upcase table (idx : 0x0000fe7f, chksum : 0x39626d3b, utbl_chksum : 0xe619d30d) [ 822.351197][ T29] audit: type=1800 audit(1717524609.568:516): pid=10208 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed(directio) comm="syz-executor.3" name="file2" dev="loop3" ino=1048800 res=0 errno=0 [ 823.192385][ T9969] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 823.242647][ T9969] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 823.265923][T10218] loop3: detected capacity change from 0 to 256 [ 823.278724][T10218] exfat: Bad value for 'uid' [ 823.291740][ T29] audit: type=1401 audit(1717524610.508:517): op=security_bounded_transition seresult=denied oldcontext=root:sysadm_r:sysadm_t newcontext=system_u:object_r:hugetlbfs_t [ 823.314631][ T9969] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 823.337459][T10220] input: syz0 as /devices/virtual/input/input32 [ 823.363870][ T9969] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 823.376880][T10218] loop3: detected capacity change from 0 to 256 [ 823.486788][T10203] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 823.564768][T10218] FAT-fs (loop3): Directory bread(block 64) failed [ 823.593336][T10218] FAT-fs (loop3): Directory bread(block 65) failed [ 823.619525][T10218] FAT-fs (loop3): Directory bread(block 66) failed [ 823.644849][T10218] FAT-fs (loop3): Directory bread(block 67) failed [ 823.670117][T10218] FAT-fs (loop3): Directory bread(block 68) failed [ 823.735096][T10218] FAT-fs (loop3): Directory bread(block 69) failed [ 823.773637][T10218] FAT-fs (loop3): Directory bread(block 70) failed [ 824.005435][T10218] FAT-fs (loop3): Directory bread(block 71) failed [ 824.108507][T10222] loop0: detected capacity change from 0 to 32768 [ 824.117426][T10222] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop0 (7:0) scanned by syz-executor.0 (10222) [ 824.147188][T10222] BTRFS info (device loop0): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 824.160526][T10222] BTRFS info (device loop0): using crc32c (crc32c-intel) checksum algorithm [ 824.169368][T10222] BTRFS info (device loop0): using free-space-tree [ 824.189240][T10218] FAT-fs (loop3): Directory bread(block 72) failed [ 824.196643][T10218] FAT-fs (loop3): Directory bread(block 73) failed [ 825.247670][ T9969] 8021q: adding VLAN 0 to HW filter on device bond0 [ 825.314198][ T9969] 8021q: adding VLAN 0 to HW filter on device team0 [ 825.676938][ T1703] bridge0: port 1(bridge_slave_0) entered blocking state [ 825.684213][ T1703] bridge0: port 1(bridge_slave_0) entered forwarding state [ 825.721618][ T1703] bridge0: port 2(bridge_slave_1) entered blocking state [ 825.728915][ T1703] bridge0: port 2(bridge_slave_1) entered forwarding state [ 826.635946][ T7939] BTRFS info (device loop0): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 826.805822][ T9969] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 827.449296][T10253] loop3: detected capacity change from 0 to 32768 [ 827.504344][T10253] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop3 (7:3) scanned by syz-executor.3 (10253) [ 827.527303][T10253] BTRFS info (device loop3): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 827.540276][T10253] BTRFS info (device loop3): using crc32c (crc32c-intel) checksum algorithm [ 827.549084][T10253] BTRFS info (device loop3): using free-space-tree [ 827.744854][T10254] pimreg: entered allmulticast mode [ 828.959760][ T8737] BTRFS info (device loop3): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 829.012540][ T9969] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 829.405108][ T9969] veth0_vlan: entered promiscuous mode [ 829.461105][T10283] loop0: detected capacity change from 0 to 4096 [ 829.481495][ T9969] veth1_vlan: entered promiscuous mode [ 829.508044][ T29] audit: type=1401 audit(1717524616.728:518): op=security_bounded_transition seresult=denied oldcontext=root:sysadm_r:sysadm_t newcontext=system_u:object_r:hugetlbfs_t [ 829.535293][T10283] ntfs3: loop0: Different NTFS sector size (1024) and media sector size (512). [ 829.641010][T10285] input: syz0 as /devices/virtual/input/input33 [ 829.769089][ T9969] veth0_macvtap: entered promiscuous mode [ 829.847629][ T9969] veth1_macvtap: entered promiscuous mode [ 829.994193][ T9969] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 830.041449][ T9969] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 830.087095][ T9969] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 830.168245][ T9969] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 830.508406][T10290] loop3: detected capacity change from 0 to 256 [ 830.520934][ T9969] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 830.576142][ T9969] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 830.605427][T10290] exFAT-fs (loop3): failed to load upcase table (idx : 0x0000fe7f, chksum : 0x39626d3b, utbl_chksum : 0xe619d30d) [ 830.641431][ T9969] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 830.694280][ T29] audit: type=1800 audit(1717524617.908:519): pid=10290 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed(directio) comm="syz-executor.3" name="file2" dev="loop3" ino=1048822 res=0 errno=0 [ 830.729418][ T9969] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 830.778984][ T9969] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 830.829656][ T9969] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 830.876054][ T9969] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 830.934418][ T9969] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 831.015361][ T9969] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 831.061883][ T9969] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 831.073050][ T9969] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 831.108981][ T9969] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 831.146621][ T9969] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 831.156625][ T9969] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 831.169509][ T9969] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 831.179593][ T9969] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 831.192060][ T9969] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 831.203949][ T9969] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 831.220633][ T9969] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 831.232449][ T9969] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 831.255458][ T9969] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 831.406708][ T9969] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 831.631902][ T9969] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 831.646590][ T9969] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 831.655360][ T9969] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 831.820228][ T5118] Bluetooth: hci5: command 0x0406 tx timeout [ 831.923184][ T9969] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 832.674849][T10299] loop3: detected capacity change from 0 to 32768 [ 832.687246][T10299] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop3 (7:3) scanned by syz-executor.3 (10299) [ 832.715130][T10299] BTRFS info (device loop3): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 832.725503][T10299] BTRFS info (device loop3): using crc32c (crc32c-intel) checksum algorithm [ 832.734712][T10299] BTRFS info (device loop3): using free-space-tree [ 832.945269][T10316] loop1: detected capacity change from 0 to 256 [ 832.961343][T10316] exfat: Bad value for 'uid' [ 834.232092][T10307] loop1: detected capacity change from 0 to 256 [ 834.299532][ T8737] BTRFS info (device loop3): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 834.369077][ T25] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 834.398203][ T25] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 834.418888][T10307] FAT-fs (loop1): Directory bread(block 64) failed [ 834.487518][T10307] FAT-fs (loop1): Directory bread(block 65) failed [ 834.528818][T10307] FAT-fs (loop1): Directory bread(block 66) failed [ 834.548896][T10307] FAT-fs (loop1): Directory bread(block 67) failed [ 834.564354][T10307] FAT-fs (loop1): Directory bread(block 68) failed [ 834.574886][ T7885] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 834.611331][ T7885] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 834.612472][T10307] FAT-fs (loop1): Directory bread(block 69) failed [ 834.646114][T10307] FAT-fs (loop1): Directory bread(block 70) failed [ 834.676730][T10307] FAT-fs (loop1): Directory bread(block 71) failed [ 834.691441][T10307] FAT-fs (loop1): Directory bread(block 72) failed [ 834.734310][T10307] FAT-fs (loop1): Directory bread(block 73) failed [ 835.026854][T10314] Bluetooth: hci0: Opcode 0x0c03 failed: -110 [ 835.269647][ T25] usb 3-1: new high-speed USB device number 15 using dummy_hcd [ 835.487114][ T25] usb 3-1: Using ep0 maxpacket: 32 [ 835.502384][ T25] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 835.533211][ T25] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 835.563872][ T25] usb 3-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 835.585789][ T25] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 835.634877][ T25] usb 3-1: config 0 descriptor?? [ 835.658689][ T25] hub 3-1:0.0: USB hub found [ 836.280062][T10338] loop4: detected capacity change from 0 to 32768 [ 836.330974][ T25] hub 3-1:0.0: config failed, can't read hub descriptor (err -22) [ 836.341552][T10338] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop4 (7:4) scanned by syz-executor.4 (10338) [ 836.391183][T10338] BTRFS info (device loop4): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 836.401689][T10338] BTRFS info (device loop4): using crc32c (crc32c-intel) checksum algorithm [ 836.410618][T10338] BTRFS info (device loop4): using free-space-tree [ 836.592222][ T25] usbhid 3-1:0.0: can't add hid device: -71 [ 836.619556][ T25] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 836.681763][ T25] usb 3-1: USB disconnect, device number 15 [ 838.159560][ T9253] BTRFS info (device loop4): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 838.216330][ T29] audit: type=1401 audit(1717524625.428:520): op=security_bounded_transition seresult=denied oldcontext=root:sysadm_r:sysadm_t newcontext=system_u:object_r:hugetlbfs_t [ 838.258009][T10370] input: syz0 as /devices/virtual/input/input34 [ 838.264678][T10371] loop3: detected capacity change from 0 to 256 [ 838.364496][T10371] exFAT-fs (loop3): failed to load upcase table (idx : 0x0000fe7f, chksum : 0x39626d3b, utbl_chksum : 0xe619d30d) [ 838.461710][ T29] audit: type=1800 audit(1717524625.678:521): pid=10371 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed(directio) comm="syz-executor.3" name="file2" dev="loop3" ino=1048847 res=0 errno=0 [ 839.370959][T10386] kvm: emulating exchange as write [ 839.813274][T10389] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.1'. [ 840.255357][T10396] mmap: syz-executor.0 (10396) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 842.050490][T10418] loop1: detected capacity change from 0 to 2048 [ 842.220851][T10418] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 843.018816][T10414] loop4: detected capacity change from 0 to 4096 [ 843.086589][T10414] ntfs3: loop4: Different NTFS sector size (1024) and media sector size (512). [ 843.167798][T10428] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=10428 comm=syz-executor.1 [ 846.832985][T10446] loop4: detected capacity change from 0 to 256 [ 846.933582][T10446] exfat: Unknown parameter '01777777777777777777777ÿÿÿÿÿÿÿÿÿÿÿÿÿ' [ 847.758073][T10467] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=10467 comm=syz-executor.2 [ 849.229858][ T29] audit: type=1800 audit(1717524636.448:522): pid=10482 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed(directio) comm="syz-executor.1" name="bus" dev="sda1" ino=1954 res=0 errno=0 [ 849.306438][ T29] audit: type=1800 audit(1717524636.478:523): pid=10482 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed(directio) comm="syz-executor.1" name="bus" dev="sda1" ino=1954 res=0 errno=0 [ 850.927434][T10494] loop1: detected capacity change from 0 to 512 [ 851.336736][ T45] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 851.369119][ T5118] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 851.399446][ T5118] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 851.410961][ T5118] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 851.421785][ T5118] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 851.433689][ T5118] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 851.443500][ T5118] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 851.591069][ T11] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 851.647018][ T45] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 851.661696][ T45] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 851.693113][ T45] usb 4-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 851.733669][ T45] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 851.786915][ T45] usb 4-1: config 0 descriptor?? [ 851.985575][ T11] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 852.255152][ T11] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 852.522461][ T11] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 852.646843][ T45] usb 4-1: string descriptor 0 read error: -71 [ 852.669229][ T45] uclogic 0003:256C:006D.0006: failed retrieving string descriptor #200: -71 [ 852.700988][ T45] uclogic 0003:256C:006D.0006: failed retrieving pen parameters: -71 [ 852.739591][ T45] uclogic 0003:256C:006D.0006: failed probing pen v2 parameters: -71 [ 852.779070][ T45] uclogic 0003:256C:006D.0006: failed probing parameters: -71 [ 852.805574][ T45] uclogic 0003:256C:006D.0006: probe with driver uclogic failed with error -71 [ 852.859227][ T45] usb 4-1: USB disconnect, device number 5 [ 853.403970][T10512] netlink: 36 bytes leftover after parsing attributes in process `syz-executor.4'. [ 853.555894][ T5118] Bluetooth: hci4: command tx timeout [ 854.213902][ T11] bridge_slave_1: left allmulticast mode [ 854.270060][ T11] bridge_slave_1: left promiscuous mode [ 854.316919][ T11] bridge0: port 2(bridge_slave_1) entered disabled state [ 854.402300][ T11] bridge_slave_0: left allmulticast mode [ 854.408372][ T11] bridge_slave_0: left promiscuous mode [ 854.414441][ T11] bridge0: port 1(bridge_slave_0) entered disabled state [ 855.587994][ T5118] Bluetooth: hci4: command tx timeout [ 856.211846][T10530] slcan: can't register candev [ 856.229881][T10530] Falling back ldisc for ptm0. [ 856.414017][T10537] loop4: detected capacity change from 0 to 512 [ 856.485682][T10537] EXT4-fs: Ignoring removed mblk_io_submit option [ 856.633529][T10537] EXT4-fs: Mount option(s) incompatible with ext2 [ 856.747338][ T1703] usb 1-1: new high-speed USB device number 13 using dummy_hcd [ 856.969578][ T1703] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 856.989429][ T1703] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 857.008733][ T1703] usb 1-1: New USB device found, idVendor=0fc5, idProduct=b080, bcdDevice= 0.00 [ 857.018371][ T1703] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 857.050121][ T1703] usb 1-1: config 0 descriptor?? [ 857.377722][ T11] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 857.421936][ T11] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 857.481535][ T11] bond0 (unregistering): Released all slaves [ 857.538608][ T1703] hid-led 0003:0FC5:B080.0007: unknown main item tag 0x0 [ 857.564328][ T1703] hid-led 0003:0FC5:B080.0007: unknown main item tag 0x0 [ 857.583434][ T1703] hid-led 0003:0FC5:B080.0007: unknown main item tag 0x0 [ 857.666809][ T5118] Bluetooth: hci4: command tx timeout [ 857.825424][T10499] chnl_net:caif_netlink_parms(): no params data found [ 858.282788][ T1703] usb 1-1: USB disconnect, device number 13 [ 858.935227][ T11] hsr_slave_0: left promiscuous mode [ 858.972112][ T11] hsr_slave_1: left promiscuous mode [ 858.993751][ T11] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 859.005651][ T11] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 859.015682][ T11] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 859.023890][ T11] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 859.087168][ T11] veth1_macvtap: left promiscuous mode [ 859.104445][ T11] veth0_macvtap: left promiscuous mode [ 859.132818][ T11] veth1_vlan: left promiscuous mode [ 859.151420][ T11] veth0_vlan: left promiscuous mode [ 859.762286][ T5118] Bluetooth: hci4: command tx timeout [ 861.304411][ T29] audit: type=1400 audit(1717524648.508:524): avc: denied { read } for pid=10573 comm="syz-executor.1" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 862.348817][ T5164] usb 1-1: new high-speed USB device number 14 using dummy_hcd [ 862.569071][ T5164] usb 1-1: config index 0 descriptor too short (expected 65316, got 36) [ 862.589261][ T5164] usb 1-1: config 0 has too many interfaces: 255, using maximum allowed: 32 [ 862.629479][ T5164] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 862.648341][ T5164] usb 1-1: config 0 has 0 interfaces, different from the descriptor's value: 255 [ 862.674124][ T5164] usb 1-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 862.695056][ T5164] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 862.750267][ T5164] usb 1-1: config 0 descriptor?? [ 862.778751][ T11] team0 (unregistering): Port device team_slave_1 removed [ 863.060959][ T11] team0 (unregistering): Port device team_slave_0 removed [ 865.341912][T10558] netlink: 36 bytes leftover after parsing attributes in process `syz-executor.3'. [ 865.359066][T10499] bridge0: port 1(bridge_slave_0) entered blocking state [ 865.387655][T10499] bridge0: port 1(bridge_slave_0) entered disabled state [ 865.426872][T10499] bridge_slave_0: entered allmulticast mode [ 865.448656][T10499] bridge_slave_0: entered promiscuous mode [ 865.485782][T10499] bridge0: port 2(bridge_slave_1) entered blocking state [ 865.527710][T10499] bridge0: port 2(bridge_slave_1) entered disabled state [ 865.535866][T10499] bridge_slave_1: entered allmulticast mode [ 865.560977][T10499] bridge_slave_1: entered promiscuous mode [ 865.587342][T10592] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'. [ 865.699672][ T1703] usb 1-1: USB disconnect, device number 14 [ 866.060523][T10499] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 866.074362][T10600] loop0: detected capacity change from 0 to 4096 [ 866.113505][T10499] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 866.295085][T10600] NILFS (loop0): broken superblock, retrying with spare superblock (blocksize = 1024) [ 866.422388][T10600] NILFS (loop0): broken superblock, retrying with spare superblock (blocksize = 4096) [ 867.228889][T10611] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 867.300445][T10499] team0: Port device team_slave_0 added [ 867.318397][ T29] audit: type=1800 audit(1717524654.528:525): pid=10600 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed(directio) comm="syz-executor.0" name="bus" dev="loop0" ino=18 res=0 errno=0 [ 867.400562][T10499] team0: Port device team_slave_1 added [ 867.421607][ T29] audit: type=1800 audit(1717524654.568:526): pid=10600 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed(directio) comm="syz-executor.0" name="bus" dev="loop0" ino=18 res=0 errno=0 [ 867.801555][T10499] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 867.840543][T10499] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 867.907308][T10499] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 867.954355][T10499] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 867.984617][T10499] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 868.064117][T10499] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 868.235812][T10615] loop4: detected capacity change from 0 to 512 [ 868.323539][T10499] hsr_slave_0: entered promiscuous mode [ 868.394494][T10499] hsr_slave_1: entered promiscuous mode [ 868.431986][T10615] loop4: detected capacity change from 0 to 512 [ 868.454474][T10499] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 868.466133][T10499] Cannot create hsr debugfs directory [ 868.666644][ T784] usb 1-1: new low-speed USB device number 15 using dummy_hcd [ 868.925827][ T784] usb 1-1: config index 0 descriptor too short (expected 1307, got 27) [ 868.944365][ T784] usb 1-1: config 0 has an invalid interface number: 0 but max is -1 [ 868.999681][ T784] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 0 [ 869.032121][ T784] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x84 is Bulk; changing to Interrupt [ 869.142292][T10615] EXT4-fs (loop4): Test dummy encryption mode enabled [ 869.172723][ T784] usb 1-1: string descriptor 0 read error: -22 [ 869.185498][ T784] usb 1-1: New USB device found, idVendor=0460, idProduct=0008, bcdDevice=c3.de [ 869.204138][T10615] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 869.229947][ T784] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 869.265200][ T784] usb 1-1: config 0 descriptor?? [ 869.286871][T10615] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 869.315800][T10625] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 869.342136][ T784] hub 1-1:0.0: bad descriptor, ignoring hub [ 869.375746][ T784] hub 1-1:0.0: probe with driver hub failed with error -5 [ 869.405958][T10615] EXT4-fs (loop4): ext4_check_descriptors: Checksum for group 0 failed (20423!=33349) [ 869.425845][ T784] input: USB Acecad 302 Tablet 0460:0008 as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/input/input35 [ 869.438452][T10615] EXT4-fs (loop4): group descriptors corrupted! [ 869.503519][ C0] usb_acecad 1-1:0.0: can't resubmit intr, dummy_hcd.0-1/input0, status -1 [ 869.622614][ T784] usb 1-1: USB disconnect, device number 15 [ 869.622714][ C0] usb_acecad 1-1:0.0: can't resubmit intr, dummy_hcd.0-1/input0, status -19 [ 869.884243][T10615] EXT4-fs: Can't set or change test_dummy_encryption on remount [ 870.019951][T10634] netlink: 36 bytes leftover after parsing attributes in process `syz-executor.1'. [ 870.294495][T10635] syz-executor.4[10635] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 870.294751][T10635] syz-executor.4[10635] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 871.130739][T10499] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 871.201768][T10499] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 871.236727][ T45] usb 1-1: new high-speed USB device number 16 using dummy_hcd [ 871.252742][T10499] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 871.316118][T10499] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 871.456686][ T45] usb 1-1: Using ep0 maxpacket: 16 [ 871.482877][ T45] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 871.520504][ T45] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 871.576799][ T45] usb 1-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 871.609246][ T45] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 871.641156][ T45] usb 1-1: config 0 descriptor?? [ 871.824638][T10499] 8021q: adding VLAN 0 to HW filter on device bond0 [ 871.931765][T10499] 8021q: adding VLAN 0 to HW filter on device team0 [ 871.988348][ T931] bridge0: port 1(bridge_slave_0) entered blocking state [ 871.995639][ T931] bridge0: port 1(bridge_slave_0) entered forwarding state [ 872.052991][ T931] bridge0: port 2(bridge_slave_1) entered blocking state [ 872.060321][ T931] bridge0: port 2(bridge_slave_1) entered forwarding state [ 872.105858][ T45] microsoft 0003:045E:07DA.0008: No inputs registered, leaving [ 872.157686][ T45] microsoft 0003:045E:07DA.0008: hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.0-1/input0 [ 872.196267][ T45] microsoft 0003:045E:07DA.0008: no inputs found [ 872.208988][ T45] microsoft 0003:045E:07DA.0008: could not initialize ff, continuing anyway [ 872.364196][T10662] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 872.395416][T10661] netlink: 36 bytes leftover after parsing attributes in process `syz-executor.1'. [ 872.426050][T10662] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 873.088579][T10669] loop4: detected capacity change from 0 to 2048 [ 873.167442][T10499] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 873.250606][T10669] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 873.557858][T10499] veth0_vlan: entered promiscuous mode [ 873.640017][T10499] veth1_vlan: entered promiscuous mode [ 873.727044][T10684] Driver unsupported XDP return value 0 on prog (id 268) dev N/A, expect packet loss! [ 873.999970][ T931] usb 1-1: USB disconnect, device number 16 [ 874.028731][T10499] veth0_macvtap: entered promiscuous mode [ 874.829321][ T29] audit: type=1400 audit(1717524661.738:527): avc: denied { ioctl } for pid=10667 comm="syz-executor.4" path="socket:[43230]" dev="sockfs" ino=43230 ioctlcmd=0x8941 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_tcpdiag_socket permissive=1 [ 875.051534][T10499] veth1_macvtap: entered promiscuous mode [ 875.255083][T10499] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 875.306938][T10499] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 875.317199][ T9253] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 875.336028][T10499] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 875.379958][ T29] audit: type=1400 audit(1717524662.598:528): avc: denied { write } for pid=10691 comm="syz-executor.1" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 875.402517][T10499] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 875.436620][T10499] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 875.462790][T10499] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 875.489367][T10499] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 875.510668][T10499] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 875.526051][T10499] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 875.537002][T10499] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 875.559782][T10499] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 875.587136][T10499] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 875.626414][T10499] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 875.668561][T10499] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 875.697539][T10499] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 875.730248][T10499] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 875.750231][T10499] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 875.778905][ T1253] ieee802154 phy0 wpan0: encryption failed: -22 [ 875.785345][ T1253] ieee802154 phy1 wpan1: encryption failed: -22 [ 875.826807][T10499] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 875.837531][T10499] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 875.847645][T10499] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 875.859402][T10499] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 875.880329][T10499] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 875.920077][T10499] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 875.949491][T10499] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 875.975758][T10499] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 876.005352][T10499] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 876.081500][T10499] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 876.147442][T10499] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 876.156233][T10499] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 876.191018][T10499] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 876.254660][T10700] netlink: 36 bytes leftover after parsing attributes in process `syz-executor.0'. [ 876.618065][T10703] x_tables: eb_tables: AUDIT.0 target: invalid size 8 (kernel) != (user) 0 [ 876.667108][ T25] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 876.693788][ T25] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 876.836236][ T7752] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 876.852422][ T7752] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 877.131479][ T29] audit: type=1400 audit(1717524664.348:529): avc: denied { bind } for pid=10711 comm="syz-executor.2" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 877.578741][T10718] loop0: detected capacity change from 0 to 1024 [ 877.660079][T10714] loop4: detected capacity change from 0 to 4096 [ 877.717855][ T7752] usb 3-1: new high-speed USB device number 16 using dummy_hcd [ 877.761725][T10714] NILFS (loop4): broken superblock, retrying with spare superblock (blocksize = 1024) [ 877.826880][ T5118] Bluetooth: hci2: command 0x0406 tx timeout [ 877.854845][T10714] NILFS (loop4): broken superblock, retrying with spare superblock (blocksize = 4096) [ 877.895511][ T5400] hfsplus: b-tree write err: -5, ino 4 [ 877.906936][ T7752] usb 3-1: Using ep0 maxpacket: 16 [ 877.919329][ T7752] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 877.945763][ T7752] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 877.981300][ T7752] usb 3-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 878.015058][ T7752] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 878.034626][ T29] audit: type=1400 audit(1717524665.248:530): avc: denied { create } for pid=10709 comm="syz-executor.1" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 878.058475][ T7752] usb 3-1: config 0 descriptor?? [ 878.079015][T10722] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 878.164336][ T29] audit: type=1800 audit(1717524665.378:531): pid=10714 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed(directio) comm="syz-executor.4" name="bus" dev="loop4" ino=18 res=0 errno=0 [ 878.578248][ T7752] microsoft 0003:045E:07DA.0009: No inputs registered, leaving [ 878.609845][ T7752] microsoft 0003:045E:07DA.0009: hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.2-1/input0 [ 878.648094][ T7752] microsoft 0003:045E:07DA.0009: no inputs found [ 878.697310][ T7752] microsoft 0003:045E:07DA.0009: could not initialize ff, continuing anyway [ 878.811074][T10729] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 878.849693][T10729] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 878.940325][T10732] netlink: 36 bytes leftover after parsing attributes in process `syz-executor.1'. [ 880.451378][ T7752] usb 3-1: USB disconnect, device number 16 [ 880.512468][T10730] loop0: detected capacity change from 0 to 32768 [ 880.985319][T10764] bond0: option ad_select: unable to set because the bond device is up [ 880.988281][ T1109] bond0: (slave bond_slave_0): interface is now down [ 881.039687][ T1109] bond0: (slave bond_slave_1): interface is now down [ 881.050832][T10730] bcachefs (loop0): mounting version 1.7: mi_btree_bitmap opts=metadata_checksum=none,data_checksum=none,nojournal_transaction_names [ 881.119841][T10730] bcachefs (loop0): recovering from clean shutdown, journal seq 10 [ 881.128887][ T1109] bond0: now running without any active interface! [ 881.349468][T10730] bcachefs (loop0): alloc_read... done [ 881.371224][T10730] bcachefs (loop0): stripes_read... done [ 881.389947][T10730] bcachefs (loop0): snapshots_read... done [ 881.428381][T10730] bcachefs (loop0): journal_replay... done [ 881.440729][T10730] bcachefs (loop0): resume_logged_ops... done [ 881.452276][T10730] bcachefs (loop0): going read-write [ 881.538066][T10730] bcachefs (loop0): done starting filesystem [ 882.116723][ T7939] bcachefs (loop0): shutting down [ 882.122840][ T7939] bcachefs (loop0): going read-only [ 882.152812][ T7939] bcachefs (loop0): finished waiting for writes to stop [ 882.297116][ T7939] bcachefs (loop0): flushing journal and stopping allocators, journal seq 12 [ 882.449133][ T7939] bcachefs (loop0): flushing journal and stopping allocators complete, journal seq 12 [ 882.552866][ T7939] bcachefs (loop0): shutdown complete, journal seq 13 [ 882.605554][ T7939] bcachefs (loop0): marking filesystem clean [ 882.872791][ T7939] bcachefs (loop0): shutdown complete [ 884.352770][T10792] loop1: detected capacity change from 0 to 2048 [ 884.511025][ T45] usb 3-1: new high-speed USB device number 17 using dummy_hcd [ 884.525256][T10792] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 884.602405][T10798] (unnamed net_device) (uninitialized): option ad_actor_sys_prio: mode dependency failed, not supported in mode balance-rr(0) [ 885.016882][ T45] usb 3-1: Using ep0 maxpacket: 16 [ 886.163392][ T45] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 886.180095][ T45] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 886.193079][ T45] usb 3-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 886.202362][ T45] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 886.223508][ T45] usb 3-1: config 0 descriptor?? [ 886.236128][ T9624] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 886.672614][ T45] microsoft 0003:045E:07DA.000A: No inputs registered, leaving [ 886.707667][ T45] microsoft 0003:045E:07DA.000A: hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.2-1/input0 [ 886.748902][ T45] microsoft 0003:045E:07DA.000A: no inputs found [ 886.762463][ T45] microsoft 0003:045E:07DA.000A: could not initialize ff, continuing anyway [ 886.928995][T10822] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 886.975516][T10822] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 887.091870][ T29] audit: type=1326 audit(1717524674.308:532): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10825 comm="syz-executor.1" exe="/root/syz-executor.1" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f0fe807cf69 code=0x0 [ 888.064733][T10810] loop0: detected capacity change from 0 to 32768 [ 888.118978][ T45] usb 3-1: USB disconnect, device number 17 [ 888.280363][ T29] audit: type=1400 audit(1717524675.498:533): avc: denied { getopt } for pid=10841 comm="syz-executor.2" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 888.291406][T10842] pimreg: entered allmulticast mode [ 888.388037][T10842] pimreg: left allmulticast mode [ 888.597500][T10810] bcachefs (loop0): mounting version 1.7: mi_btree_bitmap opts=metadata_checksum=none,data_checksum=none,nojournal_transaction_names [ 888.633649][T10810] bcachefs (loop0): recovering from clean shutdown, journal seq 10 [ 888.699806][T10810] bcachefs (loop0): alloc_read... done [ 888.710499][T10810] bcachefs (loop0): stripes_read... done [ 888.716916][T10810] bcachefs (loop0): snapshots_read... done [ 888.756979][T10810] bcachefs (loop0): journal_replay... done [ 888.763010][T10810] bcachefs (loop0): resume_logged_ops... done [ 888.773905][T10851] (unnamed net_device) (uninitialized): option ad_actor_sys_prio: mode dependency failed, not supported in mode balance-rr(0) [ 888.793726][T10810] bcachefs (loop0): going read-write [ 888.825662][T10810] bcachefs (loop0): done starting filesystem [ 889.398713][ T29] audit: type=1326 audit(1717524676.618:534): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10862 comm="syz-executor.3" exe="/root/syz-executor.3" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f23c947a6e7 code=0x7ffc0000 [ 889.435437][T10810] syz-executor.0 (10810) used greatest stack depth: 19464 bytes left [ 889.526345][ T29] audit: type=1326 audit(1717524676.618:535): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10862 comm="syz-executor.3" exe="/root/syz-executor.3" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f23c94403c9 code=0x7ffc0000 [ 889.569547][ T7939] bcachefs (loop0): shutting down [ 889.574657][ T7939] bcachefs (loop0): going read-only [ 889.635583][ T29] audit: type=1326 audit(1717524676.618:536): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10862 comm="syz-executor.3" exe="/root/syz-executor.3" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f23c947a6e7 code=0x7ffc0000 [ 889.691210][ T7939] bcachefs (loop0): finished waiting for writes to stop [ 889.730807][ T29] audit: type=1326 audit(1717524676.618:537): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10862 comm="syz-executor.3" exe="/root/syz-executor.3" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f23c94403c9 code=0x7ffc0000 [ 889.754998][ T7939] bcachefs (loop0): flushing journal and stopping allocators, journal seq 13 [ 889.807814][ T7939] bcachefs (loop0): flushing journal and stopping allocators complete, journal seq 15 [ 889.842596][ T7939] bcachefs (loop0): shutdown complete, journal seq 16 [ 889.866970][ T29] audit: type=1326 audit(1717524676.618:538): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10862 comm="syz-executor.3" exe="/root/syz-executor.3" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f23c947a6e7 code=0x7ffc0000 [ 889.896074][ T7939] bcachefs (loop0): marking filesystem clean [ 889.917525][ T29] audit: type=1326 audit(1717524676.618:539): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10862 comm="syz-executor.3" exe="/root/syz-executor.3" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f23c94403c9 code=0x7ffc0000 [ 889.961097][ T29] audit: type=1326 audit(1717524676.618:540): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10862 comm="syz-executor.3" exe="/root/syz-executor.3" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f23c947a6e7 code=0x7ffc0000 [ 890.019914][ T29] audit: type=1326 audit(1717524676.618:541): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10862 comm="syz-executor.3" exe="/root/syz-executor.3" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f23c94403c9 code=0x7ffc0000 [ 890.059546][ T7939] bcachefs (loop0): shutdown complete [ 890.086980][ T931] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 890.276963][ T931] usb 4-1: Using ep0 maxpacket: 16 [ 890.296295][ T931] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 890.335109][ T931] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 890.383938][ T931] usb 4-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 890.412643][ T931] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 890.454231][ T931] usb 4-1: config 0 descriptor?? [ 890.944003][ T931] microsoft 0003:045E:07DA.000B: No inputs registered, leaving [ 890.981621][ T931] microsoft 0003:045E:07DA.000B: hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.3-1/input0 [ 891.016030][ T931] microsoft 0003:045E:07DA.000B: no inputs found [ 891.045988][ T931] microsoft 0003:045E:07DA.000B: could not initialize ff, continuing anyway [ 891.191899][T10883] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 891.230951][T10883] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 891.350999][T10885] (unnamed net_device) (uninitialized): option ad_actor_sys_prio: mode dependency failed, not supported in mode balance-rr(0) [ 891.597078][ T931] usb 4-1: USB disconnect, device number 6 [ 892.086654][ T1703] usb 3-1: new high-speed USB device number 18 using dummy_hcd [ 892.216835][ T5180] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 892.276599][ T1703] usb 3-1: Using ep0 maxpacket: 8 [ 892.289908][ T1703] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 1536, setting to 1024 [ 892.334722][ T29] kauditd_printk_skb: 20 callbacks suppressed [ 892.334748][ T29] audit: type=1326 audit(1717524679.548:562): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10897 comm="syz-executor.0" exe="/root/syz-executor.0" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f2b6687cf69 code=0x0 [ 892.335557][ T1703] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 892.442382][ T5180] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 892.474657][ T1703] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 892.499011][ T5180] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 892.516563][ T1703] usb 3-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 892.539706][ T5180] usb 2-1: New USB device found, idVendor=1e7d, idProduct=30d4, bcdDevice= 0.00 [ 892.573475][ T5180] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 892.583977][ T1703] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 892.608755][ T1703] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 892.618482][ T5180] usb 2-1: config 0 descriptor?? [ 892.879038][ T1703] usb 3-1: GET_CAPABILITIES returned 0 [ 892.889581][ T1703] usbtmc 3-1:16.0: can't read capabilities [ 893.076426][ T5180] arvo 0003:1E7D:30D4.000C: unknown main item tag 0x0 [ 893.096377][ T1703] usb 3-1: USB disconnect, device number 18 [ 893.110538][ T5180] arvo 0003:1E7D:30D4.000C: unknown main item tag 0x0 [ 893.140908][ T5180] arvo 0003:1E7D:30D4.000C: unknown main item tag 0x0 [ 893.174381][ T5180] arvo 0003:1E7D:30D4.000C: unknown main item tag 0x0 [ 893.199999][ T5180] arvo 0003:1E7D:30D4.000C: unknown main item tag 0x0 [ 893.223459][ T5180] arvo 0003:1E7D:30D4.000C: unknown main item tag 0x0 [ 893.245356][ T5180] arvo 0003:1E7D:30D4.000C: unknown main item tag 0x0 [ 893.295988][ T5180] arvo 0003:1E7D:30D4.000C: hidraw0: USB HID v0.00 Device [HID 1e7d:30d4] on usb-dummy_hcd.1-1/input0 [ 893.537025][ T1703] usb 2-1: USB disconnect, device number 6 [ 894.254008][T10920] (unnamed net_device) (uninitialized): option ad_actor_sys_prio: mode dependency failed, not supported in mode balance-rr(0) [ 895.056830][ T29] audit: type=1326 audit(1717524682.268:563): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10931 comm="syz-executor.3" exe="/root/syz-executor.3" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f23c947cf69 code=0x0 [ 895.246928][ T25] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 895.457409][ T25] usb 5-1: Using ep0 maxpacket: 16 [ 895.482188][ T25] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 895.519330][ T25] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 895.572176][ T25] usb 5-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 895.614084][ T25] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 895.645548][ T25] usb 5-1: config 0 descriptor?? [ 895.864223][T10952] (unnamed net_device) (uninitialized): option ad_actor_sys_prio: mode dependency failed, not supported in mode balance-rr(0) [ 896.397026][T10934] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 896.482019][ T25] microsoft 0003:045E:07DA.000D: No inputs registered, leaving [ 896.495170][ T25] microsoft 0003:045E:07DA.000D: hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.4-1/input0 [ 896.497228][T10934] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 896.516600][ T25] microsoft 0003:045E:07DA.000D: no inputs found [ 896.523137][ T25] microsoft 0003:045E:07DA.000D: could not initialize ff, continuing anyway [ 896.639421][ T25] usb 5-1: USB disconnect, device number 7 [ 896.677478][T10960] xt_CT: You must specify a L4 protocol and not use inversions on it [ 897.473765][T10946] loop0: detected capacity change from 0 to 32768 [ 897.910575][T10946] bcachefs (loop0): mounting version 1.7: mi_btree_bitmap opts=metadata_checksum=none,data_checksum=none,nojournal_transaction_names [ 897.954947][T10946] bcachefs (loop0): recovering from clean shutdown, journal seq 10 [ 898.036282][T10946] bcachefs (loop0): alloc_read... done [ 898.067679][T10946] bcachefs (loop0): stripes_read... done [ 898.073558][T10946] bcachefs (loop0): snapshots_read... done [ 898.134376][T10946] bcachefs (loop0): journal_replay... done [ 898.160450][T10946] bcachefs (loop0): resume_logged_ops... done [ 898.183897][T10946] bcachefs (loop0): going read-write [ 898.232498][T10946] bcachefs (loop0): done starting filesystem [ 898.527963][ T25] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 898.736715][ T25] usb 2-1: Using ep0 maxpacket: 32 [ 898.782860][ T25] usb 2-1: config 4 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 898.833089][ T25] usb 2-1: config 4 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 898.892384][ T25] usb 2-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 898.946099][ T25] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 898.972007][T10946] syz-executor.0 (10946) used greatest stack depth: 18336 bytes left [ 899.049526][ T25] hub 2-1:4.0: USB hub found [ 899.164338][ T7939] bcachefs (loop0): shutting down [ 899.196728][ T7939] bcachefs (loop0): going read-only [ 899.246593][ T7939] bcachefs (loop0): finished waiting for writes to stop [ 899.267297][ T25] hub 2-1:4.0: 2 ports detected [ 899.317218][ T7939] bcachefs (loop0): flushing journal and stopping allocators, journal seq 12 [ 899.407913][ T7939] bcachefs (loop0): flushing journal and stopping allocators complete, journal seq 14 [ 899.461016][ T7939] bcachefs (loop0): shutdown complete, journal seq 15 [ 899.504073][ T7939] bcachefs (loop0): marking filesystem clean [ 899.637707][ T7939] bcachefs (loop0): shutdown complete [ 899.678652][ T25] hub 2-1:4.0: set hub depth failed [ 899.707223][ T25] usb 2-1: USB disconnect, device number 7 [ 899.973805][T10985] loop2: detected capacity change from 0 to 256 [ 901.920417][ T45] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 902.141030][ T29] audit: type=1326 audit(1717524689.348:564): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10994 comm="syz-executor.1" exe="/root/syz-executor.1" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f0fe807cf69 code=0x0 [ 902.184758][ T45] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 902.213312][ T45] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 902.241685][ T45] usb 4-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 902.276792][ T45] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 902.310479][ T45] usb 4-1: config 0 descriptor?? [ 902.957060][ T45] usb 4-1: language id specifier not provided by device, defaulting to English [ 903.351545][ T45] uclogic 0003:256C:006D.000E: interface is invalid, ignoring [ 903.426958][ T7752] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 903.553068][ T5165] usb 4-1: USB disconnect, device number 7 [ 903.637076][ T7752] usb 2-1: Using ep0 maxpacket: 16 [ 903.651169][ T7752] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 903.689809][ T7752] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 903.726946][ T7752] usb 2-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 903.736178][ T7752] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 903.760907][ T7752] usb 2-1: config 0 descriptor?? [ 904.216257][ T7752] microsoft 0003:045E:07DA.000F: No inputs registered, leaving [ 904.248499][ T7752] microsoft 0003:045E:07DA.000F: hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.1-1/input0 [ 904.272961][ T7752] microsoft 0003:045E:07DA.000F: no inputs found [ 904.280371][ T7752] microsoft 0003:045E:07DA.000F: could not initialize ff, continuing anyway [ 904.447923][T11021] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 904.471925][T11021] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 906.429421][ T7752] usb 2-1: USB disconnect, device number 8 [ 906.616424][ T29] audit: type=1400 audit(1717524693.828:565): avc: denied { write } for pid=11028 comm="syz-executor.3" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 906.706711][ T29] audit: type=1326 audit(1717524693.918:566): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11030 comm="syz-executor.2" exe="/root/syz-executor.2" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f5b8967cf69 code=0x0 [ 906.816360][T11029] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 906.885270][T11029] infiniband syz0: RDMA CMA: cma_listen_on_dev, error -98 [ 911.206677][ T25] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 911.446630][ T25] usb 5-1: Using ep0 maxpacket: 16 [ 911.468371][ T25] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 911.511945][ T25] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 911.554527][ T25] usb 5-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 911.593138][ T25] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 911.625508][ T25] usb 5-1: config 0 descriptor?? [ 912.123653][ T25] microsoft 0003:045E:07DA.0010: No inputs registered, leaving [ 912.171634][ T25] microsoft 0003:045E:07DA.0010: hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.4-1/input0 [ 912.216903][ T25] microsoft 0003:045E:07DA.0010: no inputs found [ 912.229109][ T25] microsoft 0003:045E:07DA.0010: could not initialize ff, continuing anyway [ 912.450358][T11081] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 912.517190][T11081] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 913.903258][ T45] usb 5-1: USB disconnect, device number 8 [ 914.253862][T11106] (unnamed net_device) (uninitialized): option ad_actor_sys_prio: mode dependency failed, not supported in mode balance-rr(0) [ 914.620749][ T29] audit: type=1400 audit(1717524701.838:567): avc: denied { create } for pid=11120 comm="syz-executor.0" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 914.707355][ T29] audit: type=1400 audit(1717524701.838:568): avc: denied { ioctl } for pid=11120 comm="syz-executor.0" path="socket:[45200]" dev="sockfs" ino=45200 ioctlcmd=0x89e2 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 914.823651][ T29] audit: type=1400 audit(1717524701.838:569): avc: denied { write } for pid=11120 comm="syz-executor.0" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=socket permissive=1 [ 915.347143][ T29] audit: type=1400 audit(1717524702.558:570): avc: denied { write } for pid=11134 comm="syz-executor.0" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 915.406689][ T45] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 915.628496][ T45] usb 4-1: Using ep0 maxpacket: 16 [ 915.644089][ T45] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 915.683727][ T45] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 915.684720][T11144] (unnamed net_device) (uninitialized): option ad_actor_sys_prio: mode dependency failed, not supported in mode balance-rr(0) [ 915.732485][ T45] usb 4-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 915.764783][ T45] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 915.833746][ T45] usb 4-1: config 0 descriptor?? [ 916.293187][ T45] microsoft 0003:045E:07DA.0011: No inputs registered, leaving [ 916.332627][ T45] microsoft 0003:045E:07DA.0011: hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.3-1/input0 [ 916.414610][ T45] microsoft 0003:045E:07DA.0011: no inputs found [ 916.430460][ T45] microsoft 0003:045E:07DA.0011: could not initialize ff, continuing anyway [ 916.757486][ T25] usb 4-1: USB disconnect, device number 8 [ 917.709968][T11180] (unnamed net_device) (uninitialized): option ad_actor_sys_prio: mode dependency failed, not supported in mode balance-rr(0) [ 917.928407][ T29] audit: type=1400 audit(1717524705.148:571): avc: denied { write } for pid=11181 comm="syz-executor.1" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 918.406901][ T25] usb 2-1: new high-speed USB device number 9 using dummy_hcd [ 918.633890][ T25] usb 2-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 918.661472][ T25] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 918.699039][ T25] usb 2-1: Product: syz [ 918.709122][ T25] usb 2-1: Manufacturer: syz [ 918.717190][ T25] usb 2-1: SerialNumber: syz [ 918.740282][ T25] usb 2-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 918.916934][ T5165] usb 3-1: new high-speed USB device number 19 using dummy_hcd [ 918.941974][ T1703] usb 2-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 919.106949][ T5165] usb 3-1: Using ep0 maxpacket: 16 [ 919.127667][ T5165] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 919.175781][ T5165] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 920.873893][ T1703] ath9k_htc 2-1:1.0: ath9k_htc: Target is unresponsive [ 921.424774][ T5165] usb 3-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 921.536710][ T5165] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 921.652850][ T7752] usb 2-1: USB disconnect, device number 9 [ 921.679672][ T1703] ath9k_htc: Failed to initialize the device [ 921.730418][ T5165] usb 3-1: config 0 descriptor?? [ 921.778692][ T5165] usb 3-1: can't set config #0, error -71 [ 921.789527][ T7752] usb 2-1: ath9k_htc: USB layer deinitialized [ 921.822441][ T5165] usb 3-1: USB disconnect, device number 19 [ 921.975988][ C1] TCP: request_sock_TCP: Possible SYN flooding on port [::]:2. Sending cookies. [ 922.248256][T11206] (unnamed net_device) (uninitialized): option ad_actor_sys_prio: mode dependency failed, not supported in mode balance-rr(0) [ 922.754904][ C0] TCP: request_sock_TCP: Possible SYN flooding on port [::]:2. Sending cookies. [ 923.276959][ T7752] usb 2-1: new high-speed USB device number 10 using dummy_hcd [ 923.493757][ T29] audit: type=1400 audit(1717524710.708:572): avc: denied { read } for pid=11231 comm="syz-executor.0" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 923.516973][ T1703] usb 5-1: new high-speed USB device number 9 using dummy_hcd [ 923.527083][ T7752] usb 2-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 923.536186][ T7752] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 923.606195][ T7752] usb 2-1: Product: syz [ 923.629495][ T7752] usb 2-1: Manufacturer: syz [ 923.634362][ T7752] usb 2-1: SerialNumber: syz [ 923.661281][ T7752] usb 2-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 923.722932][ T931] usb 2-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 923.752592][ T1703] usb 5-1: Using ep0 maxpacket: 16 [ 923.825465][ T1703] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 923.871774][ T1703] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 923.952112][ T1703] usb 5-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 924.005608][ T1703] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 924.016666][T11238] (unnamed net_device) (uninitialized): option ad_actor_sys_prio: mode dependency failed, not supported in mode balance-rr(0) [ 924.085494][ T1703] usb 5-1: config 0 descriptor?? [ 924.700166][ T1703] microsoft 0003:045E:07DA.0012: No inputs registered, leaving [ 924.771662][ T1703] microsoft 0003:045E:07DA.0012: hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.4-1/input0 [ 924.863719][ T1703] microsoft 0003:045E:07DA.0012: no inputs found [ 924.929053][ T1703] microsoft 0003:045E:07DA.0012: could not initialize ff, continuing anyway [ 925.089968][ C0] hrtimer: interrupt took 15568714 ns [ 925.287507][ T1703] usb 5-1: USB disconnect, device number 9 [ 925.358703][ T29] audit: type=1400 audit(1717524712.568:573): avc: denied { ioctl } for pid=11242 comm="syz-executor.0" path="socket:[45398]" dev="sockfs" ino=45398 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 927.325913][T11260] siw: device registration error -23 [ 937.922375][ T1253] ieee802154 phy0 wpan0: encryption failed: -22 [ 937.936600][ T1253] ieee802154 phy1 wpan1: encryption failed: -22 [ 948.419846][ T931] ath9k_htc 2-1:1.0: ath9k_htc: Target is unresponsive [ 952.758383][T11264] (unnamed net_device) (uninitialized): option ad_actor_sys_prio: mode dependency failed, not supported in mode balance-rr(0) [ 953.941297][ T45] usb 4-1: new high-speed USB device number 9 using dummy_hcd [ 954.226859][ T45] usb 4-1: Using ep0 maxpacket: 16 [ 954.248505][ T45] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 954.310621][ T45] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 954.415929][ T45] usb 4-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 954.500089][ T45] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 954.598054][ T45] usb 4-1: config 0 descriptor?? [ 955.078851][ T45] microsoft 0003:045E:07DA.0013: No inputs registered, leaving [ 955.178407][ T45] microsoft 0003:045E:07DA.0013: hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.3-1/input0 [ 955.226150][T11280] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 955.257241][T11280] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 955.316573][ T45] microsoft 0003:045E:07DA.0013: no inputs found [ 955.322993][ T45] microsoft 0003:045E:07DA.0013: could not initialize ff, continuing anyway [ 955.706978][ T25] usb 4-1: USB disconnect, device number 9 [ 956.228359][ T5121] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 956.252322][ T5121] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 956.277071][ T5121] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 956.345478][ T5121] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 956.375653][ T5121] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 956.383700][ T5121] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 956.648578][T11286] random: crng reseeded on system resumption [ 956.686738][ T29] audit: type=1400 audit(1717524743.858:574): avc: denied { append } for pid=11284 comm="syz-executor.3" name="snapshot" dev="devtmpfs" ino=92 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 956.864829][ T29] audit: type=1400 audit(1717524743.868:575): avc: denied { open } for pid=11284 comm="syz-executor.3" path="/dev/snapshot" dev="devtmpfs" ino=92 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 958.864898][ T5118] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 958.881174][ T5118] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 958.891979][ T5118] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 958.920032][ T5118] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 958.932249][ T5118] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 958.941901][ T5118] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 959.466278][ T53] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 959.480517][ T53] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 959.490211][ T53] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 959.507477][ T53] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 959.516140][ T53] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 959.531368][ T53] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 959.804259][T11296] Bluetooth: hci8: unexpected cc 0x0c03 length: 249 > 1 [ 959.819258][T11296] Bluetooth: hci8: unexpected cc 0x1003 length: 249 > 9 [ 959.848063][T11296] Bluetooth: hci8: unexpected cc 0x1001 length: 249 > 9 [ 959.861022][T11296] Bluetooth: hci8: unexpected cc 0x0c23 length: 249 > 4 [ 959.871335][T11296] Bluetooth: hci8: unexpected cc 0x0c25 length: 249 > 3 [ 959.881140][T11296] Bluetooth: hci8: unexpected cc 0x0c38 length: 249 > 2 [ 969.839303][ T9633] Bluetooth: hci2: command tx timeout [ 971.917009][T11296] Bluetooth: hci2: command tx timeout [ 972.556955][T11296] Bluetooth: hci8: command tx timeout [ 972.565224][ T5121] Bluetooth: hci7: command tx timeout [ 972.571644][ T5118] Bluetooth: hci6: command tx timeout [ 974.006609][T11296] Bluetooth: hci2: command tx timeout [ 974.640219][T11296] Bluetooth: hci8: command tx timeout [ 974.645801][ T5121] Bluetooth: hci6: command tx timeout [ 974.651675][ T9633] Bluetooth: hci7: command tx timeout [ 975.456743][ T5121] Bluetooth: hci4: command 0x0406 tx timeout [ 976.078409][ T5121] Bluetooth: hci2: command tx timeout [ 976.721282][ T5121] Bluetooth: hci6: command tx timeout [ 976.731937][T11296] Bluetooth: hci8: command tx timeout [ 976.737598][ T9633] Bluetooth: hci7: command tx timeout [ 978.797424][ T5118] Bluetooth: hci6: command tx timeout [ 978.802931][ T5118] Bluetooth: hci8: command tx timeout [ 978.808725][ T5121] Bluetooth: hci7: command tx timeout [ 999.644070][ T1253] ieee802154 phy0 wpan0: encryption failed: -22 [ 999.650942][ T1253] ieee802154 phy1 wpan1: encryption failed: -22 [ 1003.413289][ T29] audit: type=1400 audit(1717524790.508:576): avc: denied { recv } for pid=5164 comm="kworker/0:6" saddr=10.128.0.169 src=36726 daddr=10.128.1.38 dest=22 netif=eth0 scontext=system_u:system_r:sshd_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=1 [ 1004.404352][T11296] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 1004.419412][T11296] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 1004.432423][T11296] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 1004.450054][T11296] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 1004.460175][T11296] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 1004.468209][T11296] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 1006.576853][T11296] Bluetooth: hci1: command tx timeout [ 1008.636616][T11296] Bluetooth: hci1: command tx timeout [ 1010.726780][T11296] Bluetooth: hci1: command tx timeout [ 1012.796707][T11296] Bluetooth: hci1: command tx timeout [ 1020.768772][ T5118] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 1020.783796][ T5118] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 1020.793350][ T5118] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 1020.804454][ T5118] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 1020.819248][ T5118] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 1020.827081][ T5118] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 1021.553586][T11296] Bluetooth: hci9: unexpected cc 0x0c03 length: 249 > 1 [ 1021.568998][T11296] Bluetooth: hci9: unexpected cc 0x1003 length: 249 > 9 [ 1021.604522][T11296] Bluetooth: hci9: unexpected cc 0x1001 length: 249 > 9 [ 1021.646695][T11296] Bluetooth: hci9: unexpected cc 0x0c23 length: 249 > 4 [ 1021.657735][T11296] Bluetooth: hci9: unexpected cc 0x0c25 length: 249 > 3 [ 1021.677301][T11296] Bluetooth: hci9: unexpected cc 0x0c38 length: 249 > 2 [ 1022.978697][ T5118] Bluetooth: hci5: command tx timeout [ 1023.758920][ T5118] Bluetooth: hci9: command tx timeout [ 1024.064604][T11296] Bluetooth: hci10: unexpected cc 0x0c03 length: 249 > 1 [ 1024.080623][T11296] Bluetooth: hci10: unexpected cc 0x1003 length: 249 > 9 [ 1024.092088][T11296] Bluetooth: hci10: unexpected cc 0x1001 length: 249 > 9 [ 1024.102849][T11296] Bluetooth: hci10: unexpected cc 0x0c23 length: 249 > 4 [ 1024.111539][T11296] Bluetooth: hci10: unexpected cc 0x0c25 length: 249 > 3 [ 1024.119661][T11296] Bluetooth: hci10: unexpected cc 0x0c38 length: 249 > 2 [ 1024.818306][ T5118] Bluetooth: hci11: unexpected cc 0x0c03 length: 249 > 1 [ 1024.831050][ T5118] Bluetooth: hci11: unexpected cc 0x1003 length: 249 > 9 [ 1024.840406][ T5118] Bluetooth: hci11: unexpected cc 0x1001 length: 249 > 9 [ 1024.850705][ T5118] Bluetooth: hci11: unexpected cc 0x0c23 length: 249 > 4 [ 1024.864147][ T5118] Bluetooth: hci11: unexpected cc 0x0c25 length: 249 > 3 [ 1024.873802][ T5118] Bluetooth: hci11: unexpected cc 0x0c38 length: 249 > 2 [ 1025.036994][T11296] Bluetooth: hci5: command tx timeout [ 1025.842661][T11296] Bluetooth: hci9: command tx timeout [ 1026.236977][T11296] Bluetooth: hci10: command tx timeout [ 1026.957043][T11296] Bluetooth: hci11: command tx timeout [ 1027.113192][T11296] Bluetooth: hci5: command tx timeout [ 1027.916995][T11296] Bluetooth: hci9: command tx timeout [ 1028.316995][T11296] Bluetooth: hci10: command tx timeout [ 1029.036889][T11296] Bluetooth: hci11: command tx timeout [ 1029.196995][T11296] Bluetooth: hci5: command tx timeout [ 1029.996905][T11296] Bluetooth: hci9: command tx timeout [ 1030.397040][T11296] Bluetooth: hci10: command tx timeout [ 1031.118366][T11296] Bluetooth: hci11: command tx timeout [ 1032.486668][T11296] Bluetooth: hci10: command tx timeout [ 1033.197676][T11296] Bluetooth: hci11: command tx timeout [ 1061.286248][ T1253] ieee802154 phy0 wpan0: encryption failed: -22 [ 1061.292774][ T1253] ieee802154 phy1 wpan1: encryption failed: -22 [ 1069.458271][T11296] Bluetooth: hci12: unexpected cc 0x0c03 length: 249 > 1 [ 1069.472790][T11296] Bluetooth: hci12: unexpected cc 0x1003 length: 249 > 9 [ 1069.486935][T11296] Bluetooth: hci12: unexpected cc 0x1001 length: 249 > 9 [ 1069.498505][T11296] Bluetooth: hci12: unexpected cc 0x0c23 length: 249 > 4 [ 1069.512198][T11296] Bluetooth: hci12: unexpected cc 0x0c25 length: 249 > 3 [ 1069.520588][T11296] Bluetooth: hci12: unexpected cc 0x0c38 length: 249 > 2 [ 1071.606694][T11296] Bluetooth: hci12: command tx timeout [ 1073.676729][T11296] Bluetooth: hci12: command tx timeout [ 1075.751345][T11296] Bluetooth: hci12: command tx timeout [ 1077.836857][T11296] Bluetooth: hci12: command tx timeout [ 1085.550039][ T5118] Bluetooth: hci13: unexpected cc 0x0c03 length: 249 > 1 [ 1085.565562][ T5118] Bluetooth: hci13: unexpected cc 0x1003 length: 249 > 9 [ 1085.647019][ T5118] Bluetooth: hci13: unexpected cc 0x1001 length: 249 > 9 [ 1085.656131][ T5118] Bluetooth: hci13: unexpected cc 0x0c23 length: 249 > 4 [ 1085.668859][ T5118] Bluetooth: hci13: unexpected cc 0x0c25 length: 249 > 3 [ 1085.684026][ T5118] Bluetooth: hci13: unexpected cc 0x0c38 length: 249 > 2 [ 1086.319097][T11296] Bluetooth: hci14: unexpected cc 0x0c03 length: 249 > 1 [ 1086.332523][T11296] Bluetooth: hci14: unexpected cc 0x1003 length: 249 > 9 [ 1086.344140][T11296] Bluetooth: hci14: unexpected cc 0x1001 length: 249 > 9 [ 1086.354906][T11296] Bluetooth: hci14: unexpected cc 0x0c23 length: 249 > 4 [ 1086.365243][T11296] Bluetooth: hci14: unexpected cc 0x0c25 length: 249 > 3 [ 1086.387045][T11296] Bluetooth: hci14: unexpected cc 0x0c38 length: 249 > 2 [ 1087.756727][ T5118] Bluetooth: hci13: command tx timeout [ 1088.484617][ T5118] Bluetooth: hci14: command tx timeout [ 1088.678156][T11296] Bluetooth: hci15: unexpected cc 0x0c03 length: 249 > 1 [ 1088.691764][T11296] Bluetooth: hci15: unexpected cc 0x1003 length: 249 > 9 [ 1088.703318][T11296] Bluetooth: hci15: unexpected cc 0x1001 length: 249 > 9 [ 1088.714467][T11296] Bluetooth: hci15: unexpected cc 0x0c23 length: 249 > 4 [ 1088.725022][T11296] Bluetooth: hci15: unexpected cc 0x0c25 length: 249 > 3 [ 1088.733190][T11296] Bluetooth: hci15: unexpected cc 0x0c38 length: 249 > 2 [ 1089.574296][ T5118] Bluetooth: hci16: unexpected cc 0x0c03 length: 249 > 1 [ 1089.597178][ T5118] Bluetooth: hci16: unexpected cc 0x1003 length: 249 > 9 [ 1089.609063][ T5118] Bluetooth: hci16: unexpected cc 0x1001 length: 249 > 9 [ 1089.620538][ T5118] Bluetooth: hci16: unexpected cc 0x0c23 length: 249 > 4 [ 1089.629334][ T5118] Bluetooth: hci16: unexpected cc 0x0c25 length: 249 > 3 [ 1089.639120][ T5118] Bluetooth: hci16: unexpected cc 0x0c38 length: 249 > 2 [ 1089.836707][ T5118] Bluetooth: hci13: command tx timeout [ 1090.556630][ T5118] Bluetooth: hci14: command tx timeout [ 1090.893757][T11343] Bluetooth: hci15: command tx timeout [ 1091.757044][T11343] Bluetooth: hci16: command tx timeout [ 1091.907140][T11343] Bluetooth: hci13: command tx timeout [ 1092.636869][T11343] Bluetooth: hci14: command tx timeout [ 1092.900880][T11343] Bluetooth: hci8: command 0x0406 tx timeout [ 1092.907296][ T9631] Bluetooth: hci2: command 0x0406 tx timeout [ 1092.913372][ T9631] Bluetooth: hci6: command 0x0406 tx timeout [ 1092.929826][ T9631] Bluetooth: hci7: command 0x0406 tx timeout [ 1092.957494][ T5118] Bluetooth: hci15: command tx timeout [ 1093.856548][ T5121] Bluetooth: hci16: command tx timeout [ 1094.013843][ T5121] Bluetooth: hci13: command tx timeout [ 1094.718173][ T9633] Bluetooth: hci14: command tx timeout [ 1095.036905][ T9633] Bluetooth: hci15: command tx timeout [ 1095.917031][ T9633] Bluetooth: hci16: command tx timeout [ 1097.118944][ T9633] Bluetooth: hci15: command tx timeout [ 1098.002674][T11296] Bluetooth: hci16: command tx timeout [ 1098.194418][ T931] ath9k_htc: Failed to initialize the device [ 1105.517025][ T30] INFO: task hwrng:757 blocked for more than 143 seconds. [ 1105.524231][ T30] Not tainted 6.10.0-rc2-syzkaller-00007-gf06ce441457d #0 [ 1105.576649][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 1105.585393][ T30] task:hwrng state:D stack:29664 pid:757 tgid:757 ppid:2 flags:0x00004000 2024/06/04 18:14:52 SYZFATAL: failed to recv *flatrpc.HostMessageRaw: EOF [ 1105.666326][ T30] Call Trace: [ 1105.756650][ T30] [ 1105.759656][ T30] __schedule+0xf15/0x5d00 [ 1105.764160][ T30] ? __pfx___lock_acquire+0x10/0x10 [ 1105.846702][ T30] ? __pfx___lock_acquire+0x10/0x10 [ 1105.886823][ T30] ? __pfx___schedule+0x10/0x10 [ 1105.891784][ T30] ? schedule+0x298/0x350 [ 1105.896181][ T30] ? __pfx_lock_release+0x10/0x10 [ 1105.936474][ T30] ? __mutex_lock+0x5b3/0x9c0 [ 1105.941303][ T30] ? __mutex_trylock_common+0x78/0x250 [ 1106.018307][ T30] schedule+0xe7/0x350 [ 1106.022487][ T30] schedule_preempt_disabled+0x13/0x30 [ 1106.061397][ T30] __mutex_lock+0x5b8/0x9c0 [ 1106.066023][ T30] ? hwrng_fillfn+0xb8/0x380 [ 1106.102809][ T30] ? __pfx___mutex_lock+0x10/0x10 [ 1106.113138][ T30] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 1106.163693][ T30] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 1106.186713][ T30] ? hwrng_fillfn+0xb8/0x380 [ 1106.191407][ T30] hwrng_fillfn+0xb8/0x380 [ 1106.195903][ T30] ? __pfx_hwrng_fillfn+0x10/0x10 [ 1106.256647][ T30] kthread+0x2c1/0x3a0 [ 1106.260819][ T30] ? _raw_spin_unlock_irq+0x23/0x50 [ 1106.307018][ T30] ? __pfx_kthread+0x10/0x10 [ 1106.311713][ T30] ret_from_fork+0x45/0x80 [ 1106.316200][ T30] ? __pfx_kthread+0x10/0x10 [ 1106.370417][ T30] ret_from_fork_asm+0x1a/0x30 [ 1106.375309][ T30] [ 1106.417320][ T30] [ 1106.417320][ T30] Showing all locks held in the system: [ 1106.425116][ T30] 7 locks held by kworker/u8:0/11: [ 1106.478375][ T30] #0: ffff8880162d3148 ((wq_completion)netns){+.+.}-{0:0}, at: process_one_work+0x12bf/0x1b60 [ 1106.526900][ T30] #1: ffffc90000107d80 (net_cleanup_work){+.+.}-{0:0}, at: process_one_work+0x957/0x1b60 [ 1106.598299][ T30] #2: ffffffff8f7361d0 (pernet_ops_rwsem){++++}-{3:3}, at: cleanup_net+0xbb/0xbf0 [ 1106.654825][ T30] #3: ffff88805bd980e8 (&dev->mutex){....}-{3:3}, at: devlink_pernet_pre_exit+0x12d/0x2b0 [ 1106.696575][ T30] #4: ffff88801aeb6250 (&devlink->lock_key#32){+.+.}-{3:3}, at: devlink_pernet_pre_exit+0x137/0x2b0 [ 1106.756621][ T30] #5: ffffffff8f74b468 (rtnl_mutex){+.+.}-{3:3}, at: nsim_destroy+0x6f/0x6a0 [ 1106.765650][ T30] #6: ffffffff8da55590 (cpu_hotplug_lock){++++}-{0:0}, at: unregister_netdevice_many_notify+0x531/0x19f0 [ 1106.866653][ T30] 1 lock held by khungtaskd/30: [ 1106.871582][ T30] #0: ffffffff8dbb18e0 (rcu_read_lock){....}-{1:2}, at: debug_show_all_locks+0x75/0x340 [ 1106.960050][ T30] 3 locks held by kworker/1:1/45: [ 1106.982784][ T30] #0: ffff888015480948 ((wq_completion)events){+.+.}-{0:0}, at: process_one_work+0x12bf/0x1b60 [ 1107.035265][ T30] #1: ffffc90000b57d80 ((linkwatch_work).work){+.+.}-{0:0}, at: process_one_work+0x957/0x1b60 [ 1107.087132][ T30] #2: ffffffff8f74b468 (rtnl_mutex){+.+.}-{3:3}, at: linkwatch_event+0x51/0xc0 [ 1107.096336][ T30] 1 lock held by hwrng/757: [ 1107.146726][ T30] #0: ffffffff8e7dc0a8 (reading_mutex){+.+.}-{3:3}, at: hwrng_fillfn+0xb8/0x380 [ 1107.156007][ T30] 2 locks held by kworker/0:3/931: [ 1107.246516][ T30] 5 locks held by kworker/u8:6/1051: [ 1107.251891][ T30] 2 locks held by getty/4841: [ 1107.277478][ T30] #0: ffff888029ee80a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x24/0x80 [ 1107.325976][ T30] #1: ffffc900031232f0 (&ldata->atomic_read_lock){+.+.}-{3:3}, at: n_tty_read+0xfc8/0x1490 [ 1107.366517][ T30] 2 locks held by syz-fuzzer/5252: [ 1107.371701][ T30] 3 locks held by kworker/0:6/5164: [ 1107.446612][ T30] 8 locks held by kworker/0:7/5165: [ 1107.451887][ T30] 3 locks held by kworker/0:5/7752: [ 1107.486696][ T30] 3 locks held by kworker/u8:12/7885: [ 1107.495332][ T30] #0: ffff88802ab51148 ((wq_completion)ipv6_addrconf){+.+.}-{0:0}, at: process_one_work+0x12bf/0x1b60 [ 1107.576701][ T30] #1: ffffc900034bfd80 ((work_completion)(&(&net->ipv6.addr_chk_work)->work)){+.+.}-{0:0}, at: process_one_work+0x957/0x1b60 [ 1107.646733][ T30] #2: ffffffff8f74b468 (rtnl_mutex){+.+.}-{3:3}, at: addrconf_verify_work+0x12/0x30 [ 1107.656375][ T30] 1 lock held by syz-executor.2/11225: [ 1107.697548][ T30] 2 locks held by syz-executor.2/11282: [ 1107.703253][ T30] #0: ffffffff8f7361d0 (pernet_ops_rwsem){++++}-{3:3}, at: copy_net_ns+0x2cb/0x670 [ 1107.796722][ T30] #1: ffffffff8f74b468 (rtnl_mutex){+.+.}-{3:3}, at: ip_tunnel_init_net+0x218/0x780 [ 1107.846664][ T30] 2 locks held by syz-executor.1/11289: [ 1107.852376][ T30] #0: ffffffff8f7361d0 (pernet_ops_rwsem){++++}-{3:3}, at: copy_net_ns+0x2cb/0x670 [ 1107.906672][ T30] #1: ffffffff8f74b468 (rtnl_mutex){+.+.}-{3:3}, at: ip_tunnel_init_net+0x218/0x780 [ 1107.916352][ T30] 2 locks held by syz-executor.4/11293: [ 1107.986467][ T30] #0: ffffffff8f7361d0 (pernet_ops_rwsem){++++}-{3:3}, at: copy_net_ns+0x2cb/0x670 [ 1107.996024][ T30] #1: ffffffff8f74b468 (rtnl_mutex){+.+.}-{3:3}, at: ip_tunnel_init_net+0x218/0x780 [ 1108.086708][ T30] 5 locks held by syz-executor.0/11295: [ 1108.092417][ T30] #0: ffffffff8f7361d0 (pernet_ops_rwsem){++++}-{3:3}, at: copy_net_ns+0x2cb/0x670 [ 1108.167169][ T30] #1: ffffffff8f3bf850 (devices_rwsem){++++}-{3:3}, at: rdma_dev_init_net+0x234/0x530 [ 1108.209370][ T30] #2: ffffffff8f3bf5d0 (rdma_nets_rwsem){++++}-{3:3}, at: rdma_dev_init_net+0x2a7/0x530 [ 1108.256630][ T30] #3: ffff8880201a4f30 (&device->compat_devs_mutex){+.+.}-{3:3}, at: add_one_compat_dev+0x112/0x720 [ 1108.296638][ T30] #4: ffffffff8f74b468 (rtnl_mutex){+.+.}-{3:3}, at: ib_get_eth_speed+0x118/0xb50 [ 1108.306101][ T30] 2 locks held by syz-executor.3/11314: [ 1108.386644][ T30] #0: ffffffff8f7361d0 (pernet_ops_rwsem){++++}-{3:3}, at: copy_net_ns+0x2cb/0x670 [ 1108.396199][ T30] #1: ffffffff8f74b468 (rtnl_mutex){+.+.}-{3:3}, at: register_nexthop_notifier+0x1b/0x70 [ 1108.474264][ T30] 2 locks held by syz-executor.2/11318: [ 1108.526482][ T30] #0: ffffffff8f7361d0 (pernet_ops_rwsem){++++}-{3:3}, at: copy_net_ns+0x2cb/0x670 [ 1108.536032][ T30] #1: ffffffff8f74b468 (rtnl_mutex){+.+.}-{3:3}, at: register_nexthop_notifier+0x1b/0x70