last executing test programs: 43.929247221s ago: executing program 4: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000240)={0x0, 0x8000}, 0x4) setsockopt$packet_rx_ring(0xffffffffffffffff, 0x107, 0x5, 0x0, 0x0) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(0xffffffffffffffff, 0x8983, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r1, 0x107, 0xf, &(0x7f0000000100)=0x9, 0x4) r2 = socket$inet6_udp(0xa, 0x2, 0x0) r3 = socket$pppl2tp(0x18, 0x1, 0x1) socket$packet(0x11, 0x3, 0x300) connect$pppl2tp(r3, &(0x7f0000000040)=@pppol2tp={0x18, 0x1, {0x0, r2, {0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x4}}, 0x26) r4 = dup2(r3, r2) sendmsg$NL80211_CMD_LEAVE_OCB(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x6000}}, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$tipc(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$TIPC_CMD_ENABLE_BEARER(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="01000000000000000000010000000000000001411000d3a7fa2b9ab0001c0017000000004009000000746825000072745f77"], 0x38}}, 0x0) sendmsg$TIPC_CMD_SET_LINK_WINDOW(r4, &(0x7f00000002c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000380)={&(0x7f0000000300)={0x68, r6, 0x0, 0x70bd28, 0x25dfdbfd, {{}, {}, {0x4c, 0x18, {0x9, @media='ib\x00'}}}, [""]}, 0x68}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) getsockopt$packet_buf(r4, 0x107, 0x1, &(0x7f0000000000)=""/115, &(0x7f0000000080)=0x73) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f00000004c0)={'xfrm0\x00', 0x0}) sendto$packet(r1, &(0x7f0000000180)="0b031400e0ffe2ff02004788001ca13bb100000008007f604803", 0x10000, 0x0, &(0x7f0000000140)={0x11, 0x0, r8}, 0x14) 43.531196916s ago: executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r1, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x10, 0x4, &(0x7f0000000380)=ANY=[@ANYBLOB="1802000000c400000000000000000000850000003e00000095"], &(0x7f00000000c0)='GPL\x00'}, 0x90) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000023c0)=@base={0x12, 0x4, 0x8, 0xb}, 0x48) bpf$BPF_PROG_DETACH(0x8, &(0x7f00000001c0)={@map=r3, r2, 0x7}, 0x10) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000500)={r3, &(0x7f0000000240), &(0x7f00000004c0)=@tcp6=r1}, 0x20) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={0x0, 0x28}}, 0x40) 43.019342676s ago: executing program 4: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x8, 0x17ef, 0x6047, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x5}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000280)={0x24, 0x0, 0x0, &(0x7f0000000040)={0x0, 0x22, 0x5, {[@global=@item_4={0x3, 0x1, 0x0, "ec12b223"}]}}, 0x0}, 0x0) 40.376333412s ago: executing program 4: syz_mount_image$xfs(&(0x7f00000003c0), &(0x7f0000000000)='./file0\x00', 0x4008, &(0x7f0000000040)={[{@inode32}, {@pquota}]}, 0x1, 0x9825, &(0x7f000001c900)="$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") r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) symlinkat(&(0x7f0000000000)='.\x02\x00', r0, &(0x7f0000000180)='.\x02\x00') creat(&(0x7f0000000e00)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0) mknod$loop(&(0x7f0000000000)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, 0x1) rename(&(0x7f0000000600)='./file0\x00', &(0x7f0000000f40)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') 39.12179157s ago: executing program 0: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000680), 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000001c0)=0x5) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) preadv(r0, &(0x7f0000001880)=[{&(0x7f0000001a80)=""/102400, 0x19000}], 0x1, 0x0, 0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/partitions\x00', 0x0, 0x0) r2 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/vm/drop_caches\x00', 0x1, 0x0) sendfile(r2, r1, &(0x7f0000002080)=0x3a, 0x23b) 38.728569966s ago: executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000500)=ANY=[@ANYBLOB="1c0000001500010000000000000000000100000008000100", @ANYRES8=r0], 0x1c}}, 0x0) 38.556528812s ago: executing program 2: r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/power/pm_async', 0x2202, 0x0) sendfile(r0, r0, 0x0, 0x1) 37.333688109s ago: executing program 2: mkdirat(0xffffffffffffff9c, 0x0, 0x0) openat$dir(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000080)=[@in={0x2, 0x4e20, @empty}], 0x10) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f00000000c0)={0x0, 0x10, &(0x7f0000000040)=[@in={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x20}}]}, &(0x7f0000000100)=0x10) shutdown(r0, 0x1) 37.13073562s ago: executing program 2: creat(&(0x7f00000000c0)='./bus\x00', 0x0) mount(&(0x7f0000000380)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x1000, 0x0) r0 = creat(&(0x7f0000000080)='./file0\x00', 0x0) r1 = open(&(0x7f0000000440)='./bus\x00', 0x0, 0x0) syz_mount_image$vfat(&(0x7f00000000c0), &(0x7f0000000040)='./file2\x00', 0xc593, &(0x7f0000000240)=ANY=[], 0x1, 0x1207, &(0x7f0000001b80)="$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") fcntl$setstatus(r1, 0x4, 0x46c00) dup3(r1, r0, 0x0) io_setup(0x6, &(0x7f0000000240)=0x0) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) io_submit(r2, 0x3f0a, &(0x7f0000000540)=[&(0x7f00000000c0)={0xf04aef, 0x3d8, 0xf, 0x0, 0x0, r0, &(0x7f0000000000), 0x100a00}]) 36.927586286s ago: executing program 3: bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000640)={'ip_vti0\x00', &(0x7f0000000580)={'gre0\x00', 0x0, 0x7800, 0x0, 0x0, 0xffffffff, {{0x6, 0x4, 0x0, 0x2b, 0x18, 0x0, 0x0, 0x0, 0x0, 0x0, @loopback, @local, {[@end]}}}}}) pipe(&(0x7f0000000640)) bpf$MAP_UPDATE_CONST_STR(0x2, 0x0, 0x0) bpf$OBJ_GET_MAP(0x7, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000001100)='./file0\x00', 0x3014490, &(0x7f0000000100)={[{@nombcache}, {@usrjquota}, {@errors_remount}, {@norecovery}, {@max_batch_time={'max_batch_time', 0x3d, 0x5}}, {@mblk_io_submit}, {@minixdf}, {@barrier_val}, {@grpjquota}, {}]}, 0x45, 0x7bf, &(0x7f0000001140)="$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") openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) lseek(0xffffffffffffffff, 0x0, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='memory.events.local\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000001400), 0x208e24b) fdatasync(r0) 36.923290631s ago: executing program 0: r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$IOMMU_TEST_OP_SET_TEMP_MEMORY_LIMIT(r0, 0x3ba0, &(0x7f0000000c00)={0x48, 0x9, 0x0, 0x0, 0xfffffffc}) 36.92311303s ago: executing program 4: r0 = socket$can_raw(0x1d, 0x3, 0x1) setsockopt$CAN_RAW_FD_FRAMES(r0, 0x65, 0x9, 0x0, 0x0) 36.828764385s ago: executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)={0x58, 0x2, 0x6, 0x5, 0x0, 0x0, {}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_TYPENAME={0x13, 0x3, 'hash:net,iface\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_TIMEOUT={0x8, 0x6, 0x0}]}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x58}}, 0x0) 36.754365298s ago: executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000500)=ANY=[@ANYBLOB="1c0000001500010000000000000000000100000008000100", @ANYRES8=r0], 0x1c}}, 0x0) 36.569263975s ago: executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000001c40)=@newtaction={0xf0, 0x30, 0x1, 0x0, 0x0, {}, [{0xdc, 0x1, [@m_police={0x6c, 0x1, 0x0, 0x0, {{0xb}, {0x40, 0x2, 0x0, 0x1, [[@TCA_POLICE_TBF={0x3c}]]}, {0x4}, {0xc}, {0xc}}}, @m_police={0x6c, 0x2, 0x0, 0x0, {{0xb}, {0x40, 0x2, 0x0, 0x1, [[@TCA_POLICE_TBF={0x3c, 0x1, {0x1}}]]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xf0}}, 0x0) 36.493822032s ago: executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x1b, &(0x7f0000000000)={@remote}, 0x20) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x1b, &(0x7f0000000100)={@remote={0xfe, 0x80, '\x00', 0xffffffffffffffff}}, 0x20) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_mreq(r1, 0x29, 0x1b, &(0x7f0000000080)={@remote}, 0x14) 36.153743619s ago: executing program 3: r0 = syz_open_dev$vbi(&(0x7f0000000040), 0x2, 0x2) ioctl$VIDIOC_S_INPUT(r0, 0xc0045627, &(0x7f0000000000)) ioctl$VIDIOC_S_INPUT(r0, 0xc0045627, &(0x7f0000000300)=0x3) 35.971334406s ago: executing program 3: bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='ext4_es_insert_delayed_block\x00'}, 0x10) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='blkio.bfq.io_wait_time_recursive\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000000), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) preadv(r2, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x1, 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x64, 0x0, 0x0) sendmsg$NL80211_CMD_SET_REKEY_OFFLOAD(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, 0x0}, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) 35.449122768s ago: executing program 3: mkdirat(0xffffffffffffff9c, 0x0, 0x0) openat$dir(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000080)=[@in={0x2, 0x4e20, @empty}], 0x10) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f00000000c0)={0x0, 0x10, &(0x7f0000000040)=[@in={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x20}}]}, &(0x7f0000000100)=0x10) shutdown(r0, 0x1) 35.081789697s ago: executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000340)=@raw={'raw\x00', 0x4001, 0x3, 0x2b0, 0x138, 0x0, 0x148, 0x0, 0x148, 0x218, 0x240, 0x240, 0x218, 0x240, 0x7fffffe, 0x0, {[{{@ip={@loopback, @local, 0x0, 0x0, 'ip6gretap0\x00', 'netdevsim0\x00'}, 0x0, 0xf0, 0x138, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'lo\x00', {0x0, 0x0, 0x1ff, 0x0, 0x0, 0xed, 0x7}}}, @common=@unspec=@connlabel={{0x28}}]}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv6=@private1, 'ip6erspan0\x00'}}}, {{@ip={@local, @loopback, 0x0, 0x0, 'veth0_vlan\x00', 'macvtap0\x00'}, 0x0, 0xc0, 0xe0, 0x0, {}, [@inet=@rpfilter={{0x28}}, @inet=@rpfilter={{0x28, 'rpfilter\x00', 0x2}}]}, @unspec=@TRACE={0x20}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x310) r1 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$IPT_SO_SET_REPLACE(r1, 0x4000000000000, 0x40, &(0x7f0000000340)=@raw={'raw\x00', 0x4001, 0x3, 0x2b0, 0x138, 0x0, 0x148, 0x0, 0x148, 0x218, 0x240, 0x240, 0x218, 0x240, 0x7fffffe, 0x0, {[{{@ip={@loopback, @local, 0x0, 0x0, 'ip6gretap0\x00', 'netdevsim0\x00'}, 0x0, 0xf0, 0x138, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'lo\x00', {0x0, 0x0, 0x1ff, 0x0, 0x0, 0xed, 0x7}}}, @common=@unspec=@connlabel={{0x28}}]}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv6=@private1, 'ip6erspan0\x00'}}}, {{@ip={@local, @loopback, 0x0, 0x0, 'veth0_vlan\x00', 'macvtap0\x00'}, 0x0, 0xc0, 0xe0, 0x0, {}, [@inet=@rpfilter={{0x28}}, @inet=@rpfilter={{0x28, 'rpfilter\x00', 0x2}}]}, @unspec=@TRACE={0x20}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x310) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f0000000ac0)={&(0x7f0000000a40)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000a80)={&(0x7f0000000d40)={{0x14}, [@NFT_MSG_DELTABLE={0x80, 0x2, 0xa, 0x5, 0x0, 0x0, {0x3, 0x0, 0x5}, [@NFTA_TABLE_USERDATA={0x53, 0x6, "59e71b2c8afa07a3e3992d652e9bc41e1be11daf180e1943aa7522fb8174d7a6cd36d59681de9691d24d4694d99a58a6fcb0a6584c7564f6d17697cd351e78479952c15658c555e80732a3e833dd63"}, @NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}, @NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_DELFLOWTABLE={0x44, 0x18, 0xa, 0x201, 0x0, 0x0, {0x2, 0x0, 0x6}, [@NFTA_FLOWTABLE_HANDLE={0xc, 0x5, 0x1, 0x0, 0x1}, @NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_FLOWTABLE_FLAGS={0x8}, @NFTA_FLOWTABLE_FLAGS={0x8, 0x7, 0x1, 0x0, 0x1}, @NFTA_FLOWTABLE_FLAGS={0x8}]}, @NFT_MSG_DELOBJ={0x2c, 0x14, 0xa, 0x0, 0x0, 0x0, {0x1, 0x0, 0x3}, [@NFTA_OBJ_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_OBJ_TABLE={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWFLOWTABLE={0xfc, 0x16, 0xa, 0x5, 0x0, 0x0, {0xa, 0x0, 0x7}, [@NFTA_FLOWTABLE_HOOK={0xbc, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x4}, @NFTA_FLOWTABLE_HOOK_DEVS={0x40, 0x3, 0x0, 0x1, [{0x14, 0x1, 'ip6tnl0\x00'}, {0x14, 0x1, 'batadv_slave_0\x00'}, {0x14, 0x1, 'syz_tun\x00'}]}, @NFTA_FLOWTABLE_HOOK_DEVS={0x68, 0x3, 0x0, 0x1, [{0x14, 0x1, 'veth1\x00'}, {0x14, 0x1, 'xfrm0\x00'}, {0x14, 0x1, 'syzkaller0\x00'}, {0x14, 0x1, 'vlan1\x00'}, {0x14, 0x1, 'veth1_to_batadv\x00'}]}, @NFTA_FLOWTABLE_HOOK_NUM={0x8}]}, @NFTA_FLOWTABLE_HANDLE={0xc, 0x5, 0x1, 0x0, 0x3}, @NFTA_FLOWTABLE_HANDLE={0xc, 0x5, 0x1, 0x0, 0x4}, @NFTA_FLOWTABLE_FLAGS={0x8, 0x7, 0x1, 0x0, 0x1}, @NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz1\x00'}]}, @NFT_MSG_NEWRULE={0x1b8, 0x6, 0xa, 0x201, 0x0, 0x0, {0x3, 0x0, 0x3}, [@NFTA_RULE_EXPRESSIONS={0xac, 0x4, 0x0, 0x1, [{0x10, 0x1, 0x0, 0x1, @socket={{0xb}, @void}}, {0x30, 0x1, 0x0, 0x1, @rt={{0x7}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_RT_DREG={0x8, 0x1, 0x1, 0x0, 0x13}, @NFTA_RT_DREG={0x8, 0x1, 0x1, 0x0, 0x13}, @NFTA_RT_DREG={0x8, 0x1, 0x1, 0x0, 0x12}, @NFTA_RT_KEY={0x8, 0x2, 0x1, 0x0, 0x3}]}}}, {0x68, 0x1, 0x0, 0x1, @match={{0xa}, @val={0x58, 0x2, 0x0, 0x1, [@NFTA_MATCH_INFO={0x3a, 0x3, "f9555fec8c24dd613100cfbb6544debe63320c168f3186898fbd65569a9ccf84dc60beda587b7d430f8e547427121c6ae122f26e39f2"}, @NFTA_MATCH_REV={0x8, 0x2, 0x1, 0x0, 0x4}, @NFTA_MATCH_REV={0x8, 0x2, 0x1, 0x0, 0x86e}, @NFTA_MATCH_NAME={0x8, 0x1, ')$*\x00'}]}}}]}, @NFTA_RULE_COMPAT={0x1c, 0x5, 0x0, 0x1, [@NFTA_RULE_COMPAT_PROTO_BRIDGE={0x8, 0x1, 0x1, 0x0, 0xf9}, @NFTA_RULE_COMPAT_PROTO_IPV4={0x8, 0x1, 0x1, 0x0, 0x2f}, @NFTA_RULE_COMPAT_PROTO_IPV4={0x8, 0x1, 0x1, 0x0, 0x62}]}, @NFTA_RULE_POSITION_ID={0x8, 0xa, 0x1, 0x0, 0x3}, @NFTA_RULE_COMPAT={0x34, 0x5, 0x0, 0x1, [@NFTA_RULE_COMPAT_FLAGS={0x8}, @NFTA_RULE_COMPAT_PROTO_IPV6={0x8, 0x1, 0x1, 0x0, 0x11}, @NFTA_RULE_COMPAT_PROTO_IPV4={0x8, 0x1, 0x1, 0x0, 0x4}, @NFTA_RULE_COMPAT_FLAGS={0x8, 0x2, 0x1, 0x0, 0x2}, @NFTA_RULE_COMPAT_FLAGS={0x8, 0x2, 0x1, 0x0, 0x2}, @NFTA_RULE_COMPAT_FLAGS={0x8, 0x2, 0x1, 0x0, 0x2}]}, @NFTA_RULE_ID={0x8, 0x9, 0x1, 0x0, 0x1}, @NFTA_RULE_USERDATA={0x8b, 0x7, 0x1, 0x0, "15a55cd553ae33ffb16fc4c2ced2884df571a5853a3941ad3178a5eb88f9f3745d9d5ea290070dc041863b7919b431a4269cd4561709cb840cad340e56ddbe707df4c9bcde7dac9022950a056c76b4f2562780ba2ce6f1061a3ff4f36d16a027cccaf1b781b014bb9008442727cddedda744499c81e807c604754e0c2c2ba2253bc1f56ff3e366"}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz0\x00'}]}], {0x14}}, 0x3cc}, 0x1, 0x0, 0x0, 0x40000}, 0x4c801) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000bc0), 0xffffffffffffffff) sendmsg$NL80211_CMD_PROBE_CLIENT(0xffffffffffffffff, &(0x7f0000000cc0)={&(0x7f0000000b80)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000c80)={&(0x7f0000000c00)={0x5c, r4, 0x800, 0x70bd2c, 0x25dfdbfb, {{}, {@void, @void}}, [@NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}]}, 0x5c}, 0x1, 0x0, 0x0, 0xc801}, 0x4005) sendmsg$NFT_BATCH(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)={{0x14}, [@NFT_MSG_NEWRULE={0x50, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x24, 0x4, 0x0, 0x1, [{0x20, 0x1, 0x0, 0x1, @ct={{0x7}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_CT_KEY={0x8, 0x2, 0x1, 0x0, 0xc}, @NFTA_CT_DREG={0x8}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x78}}, 0x0) ioctl$sock_SIOCGIFVLAN_ADD_VLAN_CMD(r2, 0x8982, &(0x7f00000000c0)={0x0, 'macsec0\x00'}) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r0, 0x8983, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(r2, &(0x7f0000000a00)={&(0x7f0000000900)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f00000009c0)={&(0x7f0000000940)={0x7c, 0x0, 0x1, 0x3, 0x0, 0x0, {0xa, 0x0, 0x6}, [@CTA_TUPLE_ORIG={0x4c, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @initdev={0xac, 0x1e, 0x1, 0x0}}, {0x8, 0x2, @empty}}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x1}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x84}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x1}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x11}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x2f}}]}, @CTA_ZONE={0x6, 0x12, 0x1, 0x0, 0x2}, @CTA_HELP={0x14, 0x5, 0x0, 0x1, {0xe, 0x1, 'snmp_trap\x00'}}]}, 0x7c}, 0x1, 0x0, 0x0, 0x4048844}, 0x4002) r5 = socket$inet_sctp(0x2, 0x5, 0x84) ioctl$sock_inet_SIOCDELRT(r0, 0x890c, &(0x7f0000000000)={0x0, {0x2, 0x4e21, @loopback}, {0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x1e}}, {0x2, 0x4e21, @remote}, 0x3, 0x0, 0x0, 0x0, 0xd, 0x0, 0x6, 0x7, 0x8}) r6 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) getsockopt$bt_BT_SECURITY(r6, 0x112, 0x4, 0x0, 0x1000000000000) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000007c0)={0xffffffffffffffff, 0xe0, &(0x7f00000006c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, &(0x7f0000000100)=[0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x9, 0x3, &(0x7f0000000140)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f00000001c0)=[0x0, 0x0, 0x0], 0x0, 0x8, &(0x7f0000000240)=[{}, {}, {}, {}, {}, {}, {}, {}, {}], 0x48, 0x10, &(0x7f00000002c0), &(0x7f0000000300), 0x8, 0x10, 0x8, 0x8, &(0x7f0000000680)}}, 0x10) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$NFT_MSG_GETFLOWTABLE(r6, &(0x7f00000011c0)={&(0x7f0000000b00)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000001180)={&(0x7f0000001140)={0x20, 0x17, 0xa, 0x5, 0x0, 0x0, {0x5, 0x0, 0x2}, [@NFTA_FLOWTABLE_HOOK={0xc, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_NUM={0x8}]}]}, 0x20}, 0x1, 0x0, 0x0, 0x1}, 0x4004004) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r5, 0x8933, &(0x7f0000000800)) r9 = syz_genetlink_get_family_id$batadv(&(0x7f0000001240), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_GATEWAYS(0xffffffffffffffff, &(0x7f0000001340)={&(0x7f0000001200)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000001300)={&(0x7f0000001280)={0x44, r9, 0x100, 0xff, 0x25dfdbff, {}, [@BATADV_ATTR_MULTICAST_FANOUT={0x8}, @BATADV_ATTR_VLANID={0x6}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x100}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x1}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x5bc}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x3}]}, 0x44}, 0x1, 0x0, 0x0, 0x20004804}, 0x44011) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f0000000840)=@RTM_DELMDB={0x78, 0x55, 0x2, 0x170bd26, 0x25dfdbfc, {0x7, r7}, [@MDBA_SET_ENTRY={0x20, 0x1, {r8, 0x0, 0x1, 0x0, {@in6_addr=@private2={0xfc, 0x2, '\x00', 0x1}, 0xc5b3}}}, @MDBA_SET_ENTRY={0x20, 0x1, {0x0, 0x1, 0x0, 0x3, {@ip4=@multicast1}}}, @MDBA_SET_ENTRY={0x20, 0x1, {r8, 0x1, 0x2, 0x2, {@in6_addr=@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x800}}}]}, 0x78}, 0x1, 0x0, 0x0, 0x800}, 0xd0) r10 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r10, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a5c000000060a0b04000000000000000002000000300004802c00018008000100636d70002000028008000240000000000c00038005000100fe00000008000140000000030900010073797a30000000000900120073797a32000000001400ff011100010000000000000000000000000ac199609d9d2870426eeb77e4c842872c62096e6bf09ed9b41d7301eb4f2aa534ae847fafd1ae54e9e8e4e82d29dea33cf76e745b370f85317411f36819afd3f43e541137208c0f17b300e870fd7d547305314fbfe221ed45237809497cab13e918b26b"], 0x84}}, 0x0) sendmsg$NL80211_CMD_SET_POWER_SAVE(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f00000002c0), 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x3c, 0x0, 0x200, 0x70bd2b, 0x25dfdbfe, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_PS_STATE={0x8, 0x5d, 0x1}, @NL80211_ATTR_PS_STATE={0x8}, @NL80211_ATTR_PS_STATE={0x8}, @NL80211_ATTR_PS_STATE={0x8}]}, 0x3c}, 0x1, 0x0, 0x0, 0x14008000}, 0x4004) ioctl$sock_inet_SIOCSIFDSTADDR(r2, 0x8918, &(0x7f0000000b40)={'gretap0\x00', {0x2, 0x4e20, @initdev={0xac, 0x1e, 0x1, 0x0}}}) sendmsg$IPCTNL_MSG_EXP_GET(r10, &(0x7f0000000280)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)=ANY=[@ANYBLOB="700000000102030000000000000000000700000308000840000000000900060073797a30000000000c0001800600034000030000080005400000000008000440000000400a000b00512e393331000000200001801400018008000100ac1614bb08000200ac1414bb0600034000040000"], 0x70}, 0x1, 0x0, 0x0, 0x8000}, 0x4040000) 32.384502096s ago: executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r0, &(0x7f0000000180)={0xa, 0x4001, 0x0, @remote, 0x4000000d}, 0x1c) inotify_add_watch(0xffffffffffffffff, &(0x7f0000000200)='.\x00', 0x10000a0) r1 = syz_io_uring_setup(0x1f87, &(0x7f0000000080)={0x0, 0x0, 0x13580}, &(0x7f0000000100)=0x0, &(0x7f0000000280)=0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000040)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x0, 0x0, 0x7, 0x0, 0x0}) io_uring_enter(r1, 0x50, 0x0, 0x0, 0x0, 0x0) io_uring_register$IORING_REGISTER_PBUF_RING(r1, 0x1a, &(0x7f0000000000)={0x0}, 0x1) r4 = syz_open_dev$vbi(&(0x7f0000000000), 0x3, 0x2) write(r4, &(0x7f0000000080), 0x0) ioctl$VIDIOC_S_FMT(r4, 0xc0d05605, &(0x7f00000002c0)={0x5, @vbi}) r5 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000001c0)='cpuacct.usage_percpu_user\x00', 0x275a, 0x0) capset(&(0x7f0000000080)={0x20071026}, &(0x7f0000000040)={0x200000, 0x200000}) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000300)={&(0x7f0000000440)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x7c, 0x7c, 0x2, [@var, @func_proto={0x0, 0x6, 0x0, 0xd, 0x0, [{}, {}, {}, {}, {}, {}]}, @func, @volatile, @volatile, @const={0x0, 0x0, 0x0, 0xa, 0x2}]}}, 0x0, 0x96}, 0x20) r6 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@struct]}}, &(0x7f0000000040)=""/247, 0x26, 0xf7, 0x1}, 0x20) syz_mount_image$iso9660(&(0x7f0000000040), &(0x7f0000000000)='./bus\x00', 0xa0c4cc, &(0x7f0000000dc0)=ANY=[@ANYRES8=0x0, @ANYBLOB="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", @ANYRESHEX, @ANYRES16], 0x1, 0x5a9, &(0x7f0000000540)="$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") ioctl$USBDEVFS_BULK(r5, 0xc0185502, &(0x7f0000000c00)={{{0x5}}, 0x0, 0x7, 0x0}) r7 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000500)={0x6, 0x3, &(0x7f0000000200)=@framed, &(0x7f0000000280)='GPL\x00', 0x5, 0xe2, &(0x7f00000002c0)=""/226, 0x0, 0x0, '\x00', 0x0, 0x25, r6, 0x8, 0x0, 0x0, 0x10, &(0x7f00000004c0), 0x2}, 0x80) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000a00)={r7, 0xd8, &(0x7f0000000900)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000001000), 0x8, 0x0, 0x8, 0x2, 0x0}}, 0x10) 32.150465029s ago: executing program 1: syz_mount_image$tmpfs(0x0, &(0x7f00000000c0)='./file0\x00', 0x10, 0x0, 0x0, 0x0, &(0x7f0000000000)) mount$nfs4(0x0, &(0x7f0000000400)='./file0\x00', &(0x7f0000000440), 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="6673633d8f"]) 32.009058052s ago: executing program 1: r0 = syz_open_dev$usbfs(&(0x7f0000003f00), 0x1ff, 0xa401) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$USBDEVFS_SUBMITURB(r1, 0x8038550a, &(0x7f0000000040)=@urb_type_control={0x2, {}, 0x0, 0x0, &(0x7f0000000240)={0x20, 0x3}, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 31.880496684s ago: executing program 1: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x8, 0x17ef, 0x6047, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x5}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000280)={0x24, 0x0, 0x0, &(0x7f0000000040)={0x0, 0x22, 0x5, {[@global=@item_4={0x3, 0x1, 0x0, "ec12b223"}]}}, 0x0}, 0x0) 30.028936898s ago: executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000500)=ANY=[@ANYBLOB="1c0000001500010000000000000000000100000008000100", @ANYRES8=r0], 0x1c}}, 0x0) 6.89701356s ago: executing program 4: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = getpid() process_vm_readv(r0, &(0x7f0000008400)=[{&(0x7f0000000300)=""/54, 0x7ffff000}, {&(0x7f0000006180)=""/152, 0x98}], 0x2, &(0x7f0000008640)=[{&(0x7f0000008480)=""/95, 0x7ffff000}], 0x286, 0x0) add_key$user(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd) socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, 0x0, 0x0) open(0x0, 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000640)={0xffffffffffffffff, 0x2f08, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) socket$inet6_udp(0xa, 0x2, 0x0) migrate_pages(0x0, 0x3, &(0x7f00000002c0)=0x7f, &(0x7f0000000300)=0xa) 6.542629143s ago: executing program 0: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x6) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000240)=0x1) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x5) bpf$PROG_LOAD(0x5, 0x0, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000002100)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffffffffffe89}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r3, 0x0, 0xcc0, 0x0, &(0x7f0000000040)="2b1c52ac82e71ea05b0c5e43ede4", 0x0, 0xb20c, 0x0, 0x0, 0xe8, 0x0, &(0x7f0000000280)="dd"}, 0x48) 6.468638734s ago: executing program 2: syz_mount_image$udf(&(0x7f0000000e00), &(0x7f0000000180)='./file1\x00', 0x4040, &(0x7f00000015c0)=ANY=[@ANYBLOB='lastblock=00000000000000000000,umask=00000000000000000000002,dmode=00000000000000000077777,novrs,shortad,shortad,undelete,iocharset=cp437,shortad,umask=00000000000000000000006,dmode=00000000000000000000011,fileset=00000000000000000011,uid=', @ANYBLOB="303030304e303030303030303030303030462ca0179058936d6561737572652c00", @ANYRESDEC=0x0, @ANYBLOB="cdf7c0c4ada580d5d36bd90806b670b73bb5112f75ca483652cf9b8a22555c3af34a84c5747ac51aa890ca205a0f27d7dde81ad3a01f21810b6de2d56be05416c54e1c6e8459e1643b129327581f7716b38db3d3f3bbeb6d1b846a2aad654e1795850a1f82ac738387d9c3009d18eb2a78258fcc4ac4eb6a12a5650e10ebf077d9ab33f24de7cbffe0", @ANYRESHEX], 0x2, 0xc36, &(0x7f0000001780)="$eJzs3U9sHNd9B/DfGy3FldxWTOwoThoXm7ZIZcVy9S+mYhXuqqbZBpBlIhRzC8AVSakLUyRBUo1spAXdSw89BCiKHnIi0BoFUjQwmiLokWldILn4UOTUE9HCRlD0wBYBcgoYzOxbcUlRNiOSEmV9Pjb13Z15b/a9eesZWdCbFwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABAxB+8cun0mfSwWwEAPEhXRr96+qz7PwA8Vq76/38AAAAAAAAAAAAAADjoUhTxZKSYu7KWxqv3HfXL7b5bt8eGhrevdiRVNQ9V5cuf+pmz585/6YXBC9283J75kPp77bPx2ujVS42XZ2/OzU8tLExNNsZm2hOzk1M7PsJu6291sjoBjZuv35q8fn2hcfb5c5t23x74oP+J4wMXB5899Uy37NjQ8PDoRpF6b/nafTek414zPA5HEacixXPf/UlqRUQRuz8X9Qc79lsdqTpxsurE2NBw1ZHpdmtmsdw50j0RRUSjp1Kze462H4uo9T3QPtxbM2KpbH7Z4JNl90bnWvOta9NTjZHW/GJ7sT07M5I6rS3704giLqSI5YhY7b/7cH1RRC1SfPvYWroWEYe65+GL1cTge7ej2Mc+7kDZzkZfxHLxCIzZAdYfRbwaKX767omYyNeZ6lrzhYhXy/x+xNtlvhSRyi/G+Yj3t/ke8WiqRRF/WY7/xbU0WV0PuteVy19rfGXm+mxP2e515Ze8P9x1pXhI94cjW/LBOODXpnoU0aqu+Gvp/n+zAwAAAAAAAAAAAAAAAMBeOxJFfCZSvPIff1LNK45qXvqxi4N/OPCrvXPGn/6I45Rln4+IpWJnc3IP54mBI2kkpYc8l/hxVo8i/jTP/3vrYTcGAAAAAAAAAAAAAAAAAADgsVbEjyPFi++dSMvRu6Z4e+ZG42rr2nRnVdju2r/dNdPX19fXG6mTzZzjOZdyLudcybmaM4pcP2cz53jOpZzLOVdyruaMQ7l+zmbO8ZxLOZdzruRczRm1XD9nM+d4zqWcyzlXcq7mjAOydi8AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAwMdJEUX8PFJ86xtrKVJENCPGo5Mr/Q+7dQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABAqT8V8b1I0fij5p1ttYhI1b8dJ8pfzkfzcJmfjOZgmS9F81LOVpW15lsPof3sTl8q4keRor/+zp0Bz+Pf13l352sQb39z491na5081N058EH/E8ePXRwc/o2n7/U6bdeAk5fbM7duN8aGhodHezbX8qd/smfbQP7cYm+6TkQsvPHm663p6an5+39RfgV2Uf0RepFqj0tPvaheRO1+q9fioTd+t33nMVDe/9+PFL/73n92b/id+389fqXz7s4dPn72Zxv3/xe3HmiH9//a1nr5/l/e07e7/z/Zs+3F/LuRvlpEffHmXN/xiPrCG2+eat9s3Zi6MTVz/vTpLw8Ofvnc6b7DEfXr7empnld7croAAAAAAAAAAAAAAAAAHpxUxO9HitaP1lIjIm5X87UGLg4+e+qZQ3Gomm+1ad72a6NXLzVenr05Nz+1sDA12RibaU/MTk7t9OPq1XSvsaHhfenMRzqyz+0/Un95du6N+faNP17cdv/R+qVrC4vzrYntd8eRKCKavVtOVg0eGxquGj3dbs1UVUe2nUz/y+tLRfxXpJg430ifz9vy/P+tM/w3zf9f2nqgfZr//4mebeVnplTEzyLF7/zV0/H5qp1H465zlsv9XaQ4eeFzuVwcLst129B5rkBnZmBZ9v8ixT/9fHPZ7nzIJzfKntnxiX1ElON/LFJ87y++E7+Zt21+/sP2439064H2afyf6tl2dNPzCnbddfL4n4oULz35TvxW3vZhz//oPnvjRC585/kc+zT+n+rZNpA/97f3pusAAAAAAAAAAACPtL5UxN9Hih8M19ILedtO/v7f5NYD7dPf//p0z7bJvVmv6CNf7PqkAgAAAMAB0ZeK+HGkuLH4zp051Jvnf/fM//y9jfmfQ2nL3urP+X6tem7AXv75X6+B/Lnju+82AAAAAAAAAAAAAAAAAAAAHCgpFfFCXk99vGdd9+3WU1+JFK/8z3NVuRTpeBQb5QeqX+tXZmdOXZqenp1oLbauTU81RudaE1Nl3acixdrffi7XLar11bvrzXfWeN9Yi30+Ugz/Q7dsZy327trkT22UPVOW/USk+O9/3Fy2u471pzbKni3L/k2k+Pq/bF/2+EbZc2XZ70SKH3690S17tCzbfT7qpzfKPj8xW+zxiAAAAAAAAAAAAAAAAAAAAPA46ktF/Hmk+N+by3fm8uf1//t63lbe/mbPev9b3K7W+R+o1v+/1+v7Wf+/eq7A0r0+FQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAPp5SFPFmpJi7spZW+sv3HfXL7Zlbt8eGhrevdiRVNQ9V5cuf+pmz585/6YXBC9388Pp77TPx2ujVS42XZ2/OzU8tLExNNsZm2hOzk1M7PsJu6291sjoBjZuv35q8fn2hcfb5c5t23x74oP+J4wMXB5899Uy37NjQ8Fu9ZWp99/3pd0n32H44ivjrSPHcd3+SftAfUcTuz8VHfHf225GqEyerTowNDVcdmW63ZhbLnSPdE1FENHoqNbvnaGMshkd79u/lWOxKM2KpbH7Z4JNl90bnWvOta9NTjZHW/GJ7sT07M5I6rS3704giLqSI5YhY7b/7cH1RxOuR4tvH1tK/9kcc6p6HL14Z/erps/duR7GPfdyBsp2Nvojl4hEYswOsP4r450jx03dPxL/1R9Si8xNfiHi1zO9HvB2d8U7lF+N8xPvbfI94NNWiiP8vx//iWnq3v7wedK8rl7/W+MrM9dmest3ryiN/f3iQDvi1qR5F/LC64q+lf/ffNQAAAAAAAAAAAAAAAMABUsSvR4oX3zuRqvnBd+YUt2duNK62rk13pvV15/5150yvr6+vN1InmznHcy7lXM65knM1ZxS5fs5mmfX19fH8finncs6VnKs541Cun7OZczznUs7lnCs5V3NGLdfP2cw5nnMp53LOlZyrOeOAzN0DAAAAAAAAAAAAAAAAAAA+XorqnxTf+sZaWu/vrC89Hp1csR7ox94vAgAA//+Ydfe9") openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='io.stat\x00', 0x275a, 0x0) mkdir(&(0x7f0000000100)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000980)='./file0\x00', &(0x7f0000000000)='proc\x00', 0x0, 0x0) chroot(&(0x7f0000000180)='./file0\x00') r0 = socket$inet6(0xa, 0x3, 0x4) setsockopt$inet6_group_source_req(r0, 0x29, 0x2e, &(0x7f00000006c0)={0x1, {{0xa, 0x0, 0x0, @mcast2}}, {{0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @broadcast}}}}, 0x108) setsockopt$inet6_group_source_req(r0, 0x29, 0x2e, &(0x7f0000000180)={0x1, {{0xa, 0x0, 0x0, @mcast1}}, {{0xa, 0x0, 0x0, @empty}}}, 0x108) setsockopt$inet6_MCAST_JOIN_GROUP(r0, 0x29, 0x2a, 0x0, 0x0) setsockopt$inet6_MCAST_MSFILTER(r0, 0x29, 0x30, 0x0, 0x0) syz_mount_image$vfat(&(0x7f0000000280), &(0x7f00000002c0)='./file0\x00', 0x0, &(0x7f0000000300), 0x1, 0x257, &(0x7f0000000340)="$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") r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/fs/nfs', 0x0, 0x0) getdents(r1, &(0x7f0000000440)=""/238, 0x82) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, 0x0, &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='mmap_lock_acquire_returned\x00', r2}, 0x10) getdents64(r1, &(0x7f0000002f40)=""/4098, 0x1002) 5.035729455s ago: executing program 3: mount_setattr(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000d40)={0x3000b1}, 0x20) 0s ago: executing program 1: r0 = fsopen(&(0x7f00000003c0)='ext3\x00', 0x0) r1 = syz_open_dev$cec(&(0x7f0000000340), 0xffffffffffffffff, 0x0) ioctl$IOC_PR_PREEMPT(r1, 0x40046109, &(0x7f0000000040)={0xd0}) close_range(r0, 0xffffffffffffffff, 0x0) kernel console output (not intermixed with test programs): ive=1 [ 176.910781][ T6797] EXT4-fs error (device loop2): ext4_validate_block_bitmap:440: comm syz-executor.2: bg 0: block 234: padding at end of block bitmap is not set [ 176.946314][ T6797] EXT4-fs (loop2): Remounting filesystem read-only [ 177.072148][ T5111] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop2 ino=11 [ 177.096002][ T53] Bluetooth: hci3: command tx timeout [ 177.123091][ T5111] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop2 ino=11 [ 177.167525][ T2848] bridge_slave_1: left allmulticast mode [ 177.173340][ T2848] bridge_slave_1: left promiscuous mode [ 177.179775][ T5111] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop2 ino=11 [ 177.180173][ T2848] bridge0: port 2(bridge_slave_1) entered disabled state [ 177.223357][ T5111] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop2 ino=11 [ 177.252510][ T5111] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop2 ino=11 [ 177.272964][ T2848] bridge_slave_0: left allmulticast mode [ 177.275868][ T5111] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop2 ino=11 [ 177.288450][ T2848] bridge_slave_0: left promiscuous mode [ 177.295558][ T2848] bridge0: port 1(bridge_slave_0) entered disabled state [ 177.324459][ T5111] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop2 ino=11 [ 177.673461][ T6814] netlink: 'syz-executor.4': attribute type 1 has an invalid length. [ 177.693274][ T6814] netlink: 'syz-executor.4': attribute type 2 has an invalid length. [ 178.064787][ T2848] bond0 (unregistering): Released all slaves [ 178.297662][ T6806] loop1: detected capacity change from 0 to 32768 [ 178.414417][ T6806] XFS (loop1): Mounting V5 Filesystem ca7e2101-b8f1-4838-8e2d-7637b90620e6 [ 178.442145][ T6820] loop4: detected capacity change from 0 to 2048 [ 178.466687][ T5117] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 178.485991][ T5117] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 178.495647][ T5117] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 178.504955][ T5117] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 178.507907][ T6820] udf: Unknown parameter 'œ' [ 178.513098][ T5117] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 178.530653][ T5117] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 178.561739][ T5111] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 178.603610][ T6806] XFS (loop1): Ending clean mount [ 178.953904][ T29] audit: type=1400 audit(1717247859.569:536): avc: denied { ioctl } for pid=6805 comm="syz-executor.1" path="/root/syzkaller-testdir1763999871/syzkaller.i7hAzY/128/file0/cpuacct.stat" dev="loop1" ino=1289 ioctlcmd=0x5880 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 179.079445][ T5103] XFS (loop1): Unmounting Filesystem ca7e2101-b8f1-4838-8e2d-7637b90620e6 [ 179.176593][ T5117] Bluetooth: hci3: command tx timeout [ 179.195399][ T2848] hsr_slave_0: left promiscuous mode [ 179.218005][ T2848] hsr_slave_1: left promiscuous mode [ 179.264284][ T2848] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 179.286689][ T2848] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 179.346890][ T2848] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 179.354339][ T2848] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 179.487006][ T2848] veth1_macvtap: left promiscuous mode [ 179.493569][ T2848] veth0_macvtap: left promiscuous mode [ 179.516223][ T2848] veth1_vlan: left promiscuous mode [ 179.521661][ T2848] veth0_vlan: left promiscuous mode [ 179.898752][ T53] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 179.922437][ T53] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 179.930975][ T53] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 179.933084][ T6839] unsupported nla_type 25944 [ 179.991178][ T53] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 179.999852][ T29] audit: type=1400 audit(1717247860.619:537): avc: denied { create } for pid=6838 comm="syz-executor.1" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 180.034009][ T29] audit: type=1400 audit(1717247860.629:538): avc: denied { getopt } for pid=6838 comm="syz-executor.1" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 180.051261][ T6839] netlink: 176 bytes leftover after parsing attributes in process `syz-executor.1'. [ 180.053903][ T53] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 180.074679][ T53] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 180.174416][ T6842] loop4: detected capacity change from 0 to 4096 [ 180.183719][ T6842] ntfs3: loop4: Different NTFS sector size (4096) and media sector size (512). [ 180.311100][ T29] audit: type=1800 audit(1717247860.929:539): pid=6842 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed(directio) comm="syz-executor.4" name="bus" dev="loop4" ino=33 res=0 errno=0 [ 180.346355][ T29] audit: type=1800 audit(1717247860.929:540): pid=6842 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed(directio) comm="syz-executor.4" name="bus" dev="loop4" ino=33 res=0 errno=0 [ 180.534204][ T29] audit: type=1400 audit(1717247861.159:541): avc: denied { connect } for pid=6845 comm="syz-executor.4" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 180.621003][ T53] Bluetooth: hci0: command tx timeout [ 180.795421][ T2848] team0 (unregistering): Port device team_slave_1 removed [ 180.858712][ T2848] team0 (unregistering): Port device team_slave_0 removed [ 181.009798][ T6851] syz-executor.4 uses obsolete (PF_INET,SOCK_PACKET) [ 181.262328][ T53] Bluetooth: hci3: command tx timeout [ 181.574954][ T6854] loop1: detected capacity change from 0 to 8 [ 181.821687][ T6859] x_tables: ip6_tables: TCPMSS target: only valid for protocol 6 [ 182.035588][ T6829] chnl_net:caif_netlink_parms(): no params data found [ 182.137221][ T53] Bluetooth: hci4: command tx timeout [ 182.208733][ T2848] IPVS: stop unused estimator thread 0... [ 182.271946][ T6745] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 182.359618][ T6745] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 182.514735][ T6745] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 182.540381][ T6745] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 182.553353][ T6829] bridge0: port 1(bridge_slave_0) entered blocking state [ 182.560658][ T6873] loop4: detected capacity change from 0 to 4096 [ 182.586244][ T6829] bridge0: port 1(bridge_slave_0) entered disabled state [ 182.603732][ T6829] bridge_slave_0: entered allmulticast mode [ 182.615549][ T6829] bridge_slave_0: entered promiscuous mode [ 182.628640][ T6829] bridge0: port 2(bridge_slave_1) entered blocking state [ 182.636214][ T6829] bridge0: port 2(bridge_slave_1) entered disabled state [ 182.643455][ T6829] bridge_slave_1: entered allmulticast mode [ 182.651230][ T6829] bridge_slave_1: entered promiscuous mode [ 182.697492][ T53] Bluetooth: hci0: command tx timeout [ 182.815889][ T6829] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 182.875953][ T2848] netdevsim netdevsim1 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 182.888028][ T2848] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 182.913609][ T6829] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 183.025652][ T5117] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 183.044299][ T5117] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 183.053214][ T2848] netdevsim netdevsim1 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 183.056033][ T5117] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 183.066637][ T2848] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 183.086668][ T5117] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 183.100208][ T5117] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 183.111080][ T5117] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 183.160578][ T6880] x_tables: ip6_tables: TCPMSS target: only valid for protocol 6 [ 183.220787][ T6829] team0: Port device team_slave_0 added [ 183.236280][ T6829] team0: Port device team_slave_1 added [ 183.299966][ T2848] netdevsim netdevsim1 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 183.310834][ T2848] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 183.385276][ T6829] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 183.394102][ T6829] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 183.425550][ T6829] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 183.482526][ T6835] chnl_net:caif_netlink_parms(): no params data found [ 183.534312][ T2848] netdevsim netdevsim1 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 183.551934][ T2848] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 183.573403][ T6829] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 183.581693][ T6829] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 183.619827][ T6829] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 183.924331][ T6829] hsr_slave_0: entered promiscuous mode [ 183.937354][ T6829] hsr_slave_1: entered promiscuous mode [ 183.954385][ T6829] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 183.963277][ T6829] Cannot create hsr debugfs directory [ 184.209232][ T6835] bridge0: port 1(bridge_slave_0) entered blocking state [ 184.219839][ T6835] bridge0: port 1(bridge_slave_0) entered disabled state [ 184.224833][ T5117] Bluetooth: hci4: command tx timeout [ 184.227131][ T6835] bridge_slave_0: entered allmulticast mode [ 184.236971][ T6885] loop4: detected capacity change from 0 to 32768 [ 184.240366][ T6835] bridge_slave_0: entered promiscuous mode [ 184.275094][ T6885] XFS (loop4): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 184.305970][ T6835] bridge0: port 2(bridge_slave_1) entered blocking state [ 184.313270][ T6835] bridge0: port 2(bridge_slave_1) entered disabled state [ 184.320677][ T6835] bridge_slave_1: entered allmulticast mode [ 184.330262][ T6835] bridge_slave_1: entered promiscuous mode [ 184.334843][ T6885] XFS (loop4): Ending clean mount [ 184.399258][ T5104] XFS (loop4): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 184.497719][ T2848] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 184.607760][ T6835] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 184.707192][ T6899] loop4: detected capacity change from 0 to 16 [ 184.724858][ T2848] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 184.737898][ T6899] erofs: (device loop4): mounted with root inode @ nid 36. [ 184.752310][ T6835] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 184.776280][ T5117] Bluetooth: hci0: command tx timeout [ 184.814146][ T6745] 8021q: adding VLAN 0 to HW filter on device bond0 [ 184.860683][ T2848] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 184.910611][ T6835] team0: Port device team_slave_0 added [ 184.948620][ T6835] team0: Port device team_slave_1 added [ 185.011346][ T2848] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 185.031501][ T6902] x_tables: ip6_tables: TCPMSS target: only valid for protocol 6 [ 185.141785][ T6835] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 185.148870][ T6835] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 185.180107][ T5117] Bluetooth: hci1: command tx timeout [ 185.187351][ T6835] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 185.262530][ T6835] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 185.272899][ T6835] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 185.311017][ T6835] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 185.399912][ T6906] evm: overlay not supported [ 185.419567][ T6745] 8021q: adding VLAN 0 to HW filter on device team0 [ 185.459959][ T6906] overlayfs: failed to get inode (-116) [ 185.561498][ T6829] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 185.617842][ T5157] bridge0: port 1(bridge_slave_0) entered blocking state [ 185.625049][ T5157] bridge0: port 1(bridge_slave_0) entered forwarding state [ 185.698594][ T6910] netlink: 'syz-executor.4': attribute type 1 has an invalid length. [ 185.707209][ T6910] netlink: 'syz-executor.4': attribute type 2 has an invalid length. [ 185.727383][ T6835] hsr_slave_0: entered promiscuous mode [ 185.734327][ T6835] hsr_slave_1: entered promiscuous mode [ 185.742953][ T6835] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 185.752331][ T6835] Cannot create hsr debugfs directory [ 185.778803][ T6829] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 185.807955][ T5211] bridge0: port 2(bridge_slave_1) entered blocking state [ 185.815156][ T5211] bridge0: port 2(bridge_slave_1) entered forwarding state [ 185.947279][ T6829] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 186.042541][ T6876] chnl_net:caif_netlink_parms(): no params data found [ 186.107619][ T6829] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 186.263462][ T6915] loop4: detected capacity change from 0 to 2048 [ 186.297225][ T5117] Bluetooth: hci4: command tx timeout [ 186.311474][ T6745] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 186.312329][ T6915] udf: Unknown parameter 'œ' [ 186.389727][ T2848] bridge_slave_1: left allmulticast mode [ 186.395429][ T2848] bridge_slave_1: left promiscuous mode [ 186.401663][ T2848] bridge0: port 2(bridge_slave_1) entered disabled state [ 186.420141][ T2848] bridge_slave_0: left allmulticast mode [ 186.426166][ T2848] bridge_slave_0: left promiscuous mode [ 186.431981][ T2848] bridge0: port 1(bridge_slave_0) entered disabled state [ 186.463893][ T2848] bridge_slave_1: left allmulticast mode [ 186.472107][ T2848] bridge_slave_1: left promiscuous mode [ 186.478045][ T2848] bridge0: port 2(bridge_slave_1) entered disabled state [ 186.498524][ T2848] bridge_slave_0: left allmulticast mode [ 186.504218][ T2848] bridge_slave_0: left promiscuous mode [ 186.512005][ T2848] bridge0: port 1(bridge_slave_0) entered disabled state [ 186.538263][ T2848] bridge_slave_1: left allmulticast mode [ 186.543942][ T2848] bridge_slave_1: left promiscuous mode [ 186.550808][ T2848] bridge0: port 2(bridge_slave_1) entered disabled state [ 186.568899][ T2848] bridge_slave_0: left allmulticast mode [ 186.574574][ T2848] bridge_slave_0: left promiscuous mode [ 186.582143][ T2848] bridge0: port 1(bridge_slave_0) entered disabled state [ 186.857466][ T5117] Bluetooth: hci0: command tx timeout [ 187.109295][ T6918] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=6918 comm=syz-executor.4 [ 187.125361][ T29] audit: type=1400 audit(1717247867.749:542): avc: denied { read } for pid=6917 comm="syz-executor.4" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_tcpdiag_socket permissive=1 [ 187.256646][ T5117] Bluetooth: hci1: command tx timeout [ 187.828095][ T6920] loop4: detected capacity change from 0 to 32768 [ 187.904694][ T6920] XFS (loop4): Mounting V5 Filesystem ca7e2101-b8f1-4838-8e2d-7637b90620e6 [ 187.952352][ T6920] XFS (loop4): Ending clean mount [ 188.032800][ T5104] XFS (loop4): Unmounting Filesystem ca7e2101-b8f1-4838-8e2d-7637b90620e6 [ 188.363730][ T2848] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 188.376125][ T5117] Bluetooth: hci4: command tx timeout [ 188.394475][ T6930] loop4: detected capacity change from 0 to 4096 [ 188.402111][ T2848] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 188.419035][ T2848] bond0 (unregistering): Released all slaves [ 188.550982][ T2848] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 188.573206][ T2848] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 188.589484][ T2848] bond0 (unregistering): Released all slaves [ 188.958531][ T6876] bridge0: port 1(bridge_slave_0) entered blocking state [ 188.966050][ T6876] bridge0: port 1(bridge_slave_0) entered disabled state [ 188.988964][ T6876] bridge_slave_0: entered allmulticast mode [ 189.002445][ T6876] bridge_slave_0: entered promiscuous mode [ 189.069904][ T6940] x_tables: ip6_tables: TCPMSS target: only valid for protocol 6 [ 189.136435][ T6876] bridge0: port 2(bridge_slave_1) entered blocking state [ 189.153218][ T6876] bridge0: port 2(bridge_slave_1) entered disabled state [ 189.163787][ T6876] bridge_slave_1: entered allmulticast mode [ 189.174475][ T6876] bridge_slave_1: entered promiscuous mode [ 189.254926][ T6829] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 189.337900][ T5117] Bluetooth: hci1: command tx timeout [ 189.340839][ T6829] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 189.440250][ T6876] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 189.491660][ T6829] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 189.514830][ T6876] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 189.564436][ T6745] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 189.584652][ T6829] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 189.694208][ T6876] team0: Port device team_slave_0 added [ 189.714261][ T6876] team0: Port device team_slave_1 added [ 189.912889][ T6876] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 189.920403][ T6876] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 189.948205][ T6876] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 189.982638][ T6876] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 189.998528][ T6876] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 190.021614][ T6942] loop4: detected capacity change from 0 to 32768 [ 190.026444][ T6876] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 190.100799][ T6942] XFS (loop4): Mounting V5 Filesystem ca7e2101-b8f1-4838-8e2d-7637b90620e6 [ 190.174985][ T6942] XFS (loop4): Ending clean mount [ 190.302039][ T5104] XFS (loop4): Unmounting Filesystem ca7e2101-b8f1-4838-8e2d-7637b90620e6 [ 190.383433][ T6876] hsr_slave_0: entered promiscuous mode [ 190.396259][ T6876] hsr_slave_1: entered promiscuous mode [ 190.402591][ T6876] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 190.410419][ T6876] Cannot create hsr debugfs directory [ 190.426973][ T6835] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 190.490437][ T6835] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 190.502737][ T6835] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 190.513487][ T6835] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 190.571347][ T2848] hsr_slave_0: left promiscuous mode [ 190.578205][ T2848] hsr_slave_1: left promiscuous mode [ 190.584500][ T2848] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 190.592685][ T2848] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 190.601106][ T2848] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 190.608957][ T2848] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 190.628319][ T2848] hsr_slave_0: left promiscuous mode [ 190.634345][ T2848] hsr_slave_1: left promiscuous mode [ 190.640426][ T2848] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 190.648538][ T2848] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 190.659861][ T2848] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 190.667381][ T2848] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 190.681275][ T2848] hsr_slave_0: left promiscuous mode [ 190.687326][ T2848] hsr_slave_1: left promiscuous mode [ 190.693303][ T2848] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 190.702619][ T2848] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 190.710571][ T2848] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 190.718208][ T2848] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 190.779954][ T2848] veth1_macvtap: left promiscuous mode [ 190.785508][ T2848] veth0_macvtap: left promiscuous mode [ 190.791562][ T2848] veth1_vlan: left promiscuous mode [ 190.798023][ T2848] veth1_macvtap: left promiscuous mode [ 190.803527][ T2848] veth0_macvtap: left promiscuous mode [ 190.809399][ T2848] veth1_vlan: left promiscuous mode [ 190.814715][ T2848] veth0_vlan: left promiscuous mode [ 190.821923][ T2848] veth1_macvtap: left promiscuous mode [ 190.827591][ T2848] veth0_macvtap: left promiscuous mode [ 190.834775][ T2848] veth1_vlan: left promiscuous mode [ 190.840241][ T2848] veth0_vlan: left promiscuous mode [ 191.243729][ T2848] pim6reg9 (unregistering): left allmulticast mode [ 191.426260][ T5117] Bluetooth: hci1: command tx timeout [ 191.881465][ T2848] team0 (unregistering): Port device team_slave_1 removed [ 191.957464][ T2848] team0 (unregistering): Port device team_slave_0 removed [ 192.858025][ T6958] loop4: detected capacity change from 0 to 16 [ 192.884523][ T6958] erofs: (device loop4): mounted with root inode @ nid 36. [ 193.172758][ T6962] overlayfs: failed to get inode (-116) [ 193.336742][ T29] audit: type=1400 audit(1717247873.959:543): avc: denied { bind } for pid=6963 comm="syz-executor.4" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 193.365949][ T2848] team0 (unregistering): Port device team_slave_1 removed [ 193.377867][ T29] audit: type=1400 audit(1717247873.959:544): avc: denied { name_bind } for pid=6963 comm="syz-executor.4" src=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=sctp_socket permissive=1 [ 193.413416][ T29] audit: type=1400 audit(1717247873.959:545): avc: denied { node_bind } for pid=6963 comm="syz-executor.4" saddr=::1 src=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=sctp_socket permissive=1 [ 193.450205][ T29] audit: type=1400 audit(1717247873.959:546): avc: denied { name_connect } for pid=6963 comm="syz-executor.4" dest=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=sctp_socket permissive=1 [ 193.482720][ T6966] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=6966 comm=syz-executor.4 [ 193.510826][ T2848] team0 (unregistering): Port device team_slave_0 removed [ 193.733664][ T6971] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.4'. [ 193.825457][ T6973] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=6973 comm=syz-executor.4 [ 194.572127][ T6977] loop4: detected capacity change from 0 to 32768 [ 194.595983][ T6977] XFS (loop4): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 194.676793][ T6977] XFS (loop4): Ending clean mount [ 194.729864][ T6977] XFS (loop4): Quotacheck needed: Please wait. [ 194.786131][ T1245] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.799270][ T1245] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.834496][ T6977] XFS (loop4): Quotacheck: Done. [ 194.895496][ T2848] team0 (unregistering): Port device team_slave_1 removed [ 194.976892][ T2848] team0 (unregistering): Port device team_slave_0 removed [ 195.060592][ T5104] XFS (loop4): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 195.638637][ T45] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 195.691872][ T6745] veth0_vlan: entered promiscuous mode [ 195.830033][ T45] usb 5-1: New USB device found, idVendor=9710, idProduct=7730, bcdDevice=96.33 [ 195.845209][ T45] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 195.869489][ T6745] veth1_vlan: entered promiscuous mode [ 195.896264][ T45] usb 5-1: config 0 descriptor?? [ 196.013194][ T6829] 8021q: adding VLAN 0 to HW filter on device bond0 [ 196.087017][ T6829] 8021q: adding VLAN 0 to HW filter on device team0 [ 196.163683][ T5155] bridge0: port 1(bridge_slave_0) entered blocking state [ 196.170898][ T5155] bridge0: port 1(bridge_slave_0) entered forwarding state [ 196.241597][ T6745] veth0_macvtap: entered promiscuous mode [ 196.270545][ T5155] bridge0: port 2(bridge_slave_1) entered blocking state [ 196.277790][ T5155] bridge0: port 2(bridge_slave_1) entered forwarding state [ 196.300240][ T6745] veth1_macvtap: entered promiscuous mode [ 196.544213][ T6745] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 196.556333][ T6745] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 196.587930][ T6745] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 196.642077][ T6745] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 196.657558][ T6745] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 196.669325][ T6745] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 196.739908][ T6835] 8021q: adding VLAN 0 to HW filter on device bond0 [ 196.779570][ T6745] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 196.802623][ T6745] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 196.809296][ T29] audit: type=1400 audit(1717247877.429:547): avc: denied { remount } for pid=6987 comm="syz-executor.4" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 196.816201][ T6745] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 196.842091][ T6745] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 196.855334][ T6876] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 196.870760][ T6876] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 196.874132][ T45] usb 5-1: Cannot set autoneg [ 196.888956][ T6876] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 196.899895][ T45] MOSCHIP usb-ethernet driver 5-1:0.0: probe with driver MOSCHIP usb-ethernet driver failed with error -71 [ 196.917092][ T45] usb 5-1: USB disconnect, device number 5 [ 196.943672][ T6876] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 197.103746][ T6835] 8021q: adding VLAN 0 to HW filter on device team0 [ 197.143166][ T5157] bridge0: port 1(bridge_slave_0) entered blocking state [ 197.150348][ T5157] bridge0: port 1(bridge_slave_0) entered forwarding state [ 197.219438][ T5157] bridge0: port 2(bridge_slave_1) entered blocking state [ 197.226708][ T5157] bridge0: port 2(bridge_slave_1) entered forwarding state [ 197.355469][ T2848] IPVS: stop unused estimator thread 0... [ 197.377769][ T2848] IPVS: stop unused estimator thread 0... [ 197.438100][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 197.477028][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 197.502403][ T6829] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 197.621760][ T4862] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 197.641766][ T4862] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 197.656363][ T6995] loop4: detected capacity change from 0 to 4096 [ 197.771910][ T6876] 8021q: adding VLAN 0 to HW filter on device bond0 [ 197.864443][ T29] audit: type=1800 audit(1717247878.479:548): pid=6995 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed(directio) comm="syz-executor.4" name="bus" dev="loop4" ino=33 res=0 errno=0 [ 197.913920][ T6876] 8021q: adding VLAN 0 to HW filter on device team0 [ 197.977048][ T5109] bridge0: port 1(bridge_slave_0) entered blocking state [ 197.984320][ T5109] bridge0: port 1(bridge_slave_0) entered forwarding state [ 198.037553][ T6829] veth0_vlan: entered promiscuous mode [ 198.066026][ T929] bridge0: port 2(bridge_slave_1) entered blocking state [ 198.073161][ T929] bridge0: port 2(bridge_slave_1) entered forwarding state [ 198.181855][ T6829] veth1_vlan: entered promiscuous mode [ 198.364063][ T6835] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 198.410857][ T29] audit: type=1400 audit(1717247879.029:549): avc: denied { create } for pid=7004 comm="syz-executor.4" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 198.450522][ T6876] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 198.472739][ T29] audit: type=1400 audit(1717247879.059:550): avc: denied { setopt } for pid=7004 comm="syz-executor.4" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 198.602674][ T6829] veth0_macvtap: entered promiscuous mode [ 198.670729][ T6829] veth1_macvtap: entered promiscuous mode [ 198.784323][ T6829] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 198.805027][ T7011] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=7011 comm=syz-executor.4 [ 198.836851][ T6829] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 198.872160][ T6829] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 198.895952][ T6829] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 198.918559][ T6829] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 198.988764][ T6829] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 199.004897][ T6829] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 199.015037][ T6829] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 199.027747][ T6829] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 199.061726][ T6829] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 199.082207][ T6835] veth0_vlan: entered promiscuous mode [ 199.134256][ T6835] veth1_vlan: entered promiscuous mode [ 199.147221][ T6829] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 199.159659][ T6829] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 199.164112][ T6999] loop0: detected capacity change from 0 to 32768 [ 199.174658][ T6829] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 199.197098][ T6829] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 199.211833][ T6999] gfs2: fsid=syz:syz: Trying to join cluster "lock_nolock", "syz:syz" [ 199.226168][ T6999] gfs2: fsid=syz:syz: Now mounting FS (format 1801)... [ 199.245959][ T6999] gfs2: fsid=syz:syz.s: journal 0 mapped with 16 extents in 0ms [ 199.377967][ T6876] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 199.508495][ T6999] gfs2: fsid=syz:syz.s: first mount done, others may mount [ 199.655042][ T6835] veth0_macvtap: entered promiscuous mode [ 199.699214][ T35] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 199.707249][ T35] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 199.766904][ T6835] veth1_macvtap: entered promiscuous mode [ 199.845841][ T5152] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 199.853707][ T5152] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 199.874377][ T6835] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 199.898996][ T6835] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 199.911300][ T6835] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 199.923027][ T6835] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 199.933091][ T6835] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 199.943680][ T6835] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 199.957733][ T6835] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 199.981353][ T6876] veth0_vlan: entered promiscuous mode [ 199.995598][ T6835] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 200.009141][ T6835] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 200.020963][ T6835] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 200.032268][ T6835] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 200.042170][ T6835] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 200.052834][ T6835] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 200.066613][ T6835] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 200.076075][ T5155] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 200.119355][ T6835] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 200.130721][ T6835] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 200.148975][ T6835] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 200.160070][ T6835] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 200.178834][ T6876] veth1_vlan: entered promiscuous mode [ 200.282976][ T5155] usb 5-1: New USB device found, idVendor=9710, idProduct=7730, bcdDevice=96.33 [ 200.305885][ T5155] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 200.334285][ T5155] usb 5-1: config 0 descriptor?? [ 200.371414][ T7031] loop3: detected capacity change from 0 to 256 [ 200.409970][ T6876] veth0_macvtap: entered promiscuous mode [ 200.442709][ T7031] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0x1aabf3fb, utbl_chksum : 0xe619d30d) [ 200.468481][ T6876] veth1_macvtap: entered promiscuous mode [ 200.581093][ T2848] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 200.612160][ T2848] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 200.658167][ T6876] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 200.683433][ T6876] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 200.726295][ T6876] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 200.750056][ T6876] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 200.771376][ T6876] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 200.798240][ T6876] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 200.804395][ T29] audit: type=1400 audit(1717247881.419:551): avc: denied { rename } for pid=7030 comm="syz-executor.3" name="file0" dev="loop3" ino=1048632 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 200.824405][ T6876] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 200.870923][ T29] audit: type=1400 audit(1717247881.469:552): avc: denied { reparent } for pid=7030 comm="syz-executor.3" name="file0" dev="loop3" ino=1048632 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 200.874791][ T6876] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 200.952594][ T6876] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 201.018199][ T6876] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 201.045808][ T6876] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 201.058110][ T6876] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 201.069382][ T6876] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 201.079560][ T6876] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 201.090181][ T6876] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 201.103483][ T6876] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 201.114636][ T6876] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 201.132937][ T6876] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 201.187497][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 201.207668][ T6876] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 201.226366][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 201.235199][ T6876] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 201.259169][ T6876] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 201.278692][ T6876] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 201.377856][ T7027] loop0: detected capacity change from 0 to 32768 [ 201.418432][ T29] audit: type=1400 audit(1717247882.029:553): avc: denied { ioctl } for pid=7035 comm="syz-executor.3" path="socket:[17198]" dev="sockfs" ino=17198 ioctlcmd=0x8912 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 201.420706][ T5155] usb 5-1: Cannot set autoneg [ 201.469417][ T7027] XFS (loop0): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 201.494225][ T5155] MOSCHIP usb-ethernet driver 5-1:0.0: probe with driver MOSCHIP usb-ethernet driver failed with error -71 [ 201.545132][ T5155] usb 5-1: USB disconnect, device number 6 [ 201.629503][ T7027] XFS (loop0): Ending clean mount [ 201.696650][ T7027] XFS (loop0): Quotacheck needed: Please wait. [ 201.807387][ T7051] x_tables: ip6_tables: TCPMSS target: only valid for protocol 6 [ 201.821564][ T4862] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 201.836959][ T4862] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 201.864216][ T7027] XFS (loop0): Quotacheck: Done. [ 201.920547][ T5211] IPVS: starting estimator thread 0... [ 201.986801][ T53] Bluetooth: hci2: command 0x0406 tx timeout [ 202.028994][ T2848] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 202.043894][ T7053] IPVS: using max 19 ests per chain, 45600 per kthread [ 202.080850][ T2848] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 202.369827][ T6745] XFS (loop0): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 202.490556][ T29] audit: type=1326 audit(1717247883.099:554): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7062 comm="syz-executor.1" exe="/root/syz-executor.1" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2ccd07cee9 code=0x7fc00000 [ 202.552542][ T29] audit: type=1400 audit(1717247883.139:555): avc: denied { read } for pid=7062 comm="syz-executor.1" path="socket:[17455]" dev="sockfs" ino=17455 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 202.576319][ T29] audit: type=1326 audit(1717247883.139:556): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7062 comm="syz-executor.1" exe="/root/syz-executor.1" sig=0 arch=c000003e syscall=291 compat=0 ip=0x7f2ccd07cee9 code=0x7fc00000 [ 202.607732][ T7074] loop3: detected capacity change from 0 to 256 [ 202.620304][ T29] audit: type=1326 audit(1717247883.239:557): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7062 comm="syz-executor.1" exe="/root/syz-executor.1" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2ccd07cee9 code=0x7fc00000 [ 202.709636][ T7074] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0x1aabf3fb, utbl_chksum : 0xe619d30d) [ 202.830481][ T7080] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.4'. [ 203.109586][ T7087] x_tables: ip6_tables: TCPMSS target: only valid for protocol 6 [ 203.149332][ T45] IPVS: starting estimator thread 0... [ 203.276009][ T7090] IPVS: using max 16 ests per chain, 38400 per kthread [ 203.306448][ T5211] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 203.558285][ T5211] usb 3-1: New USB device found, idVendor=9710, idProduct=7730, bcdDevice=96.33 [ 203.594643][ T5211] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 203.614565][ T5211] usb 3-1: config 0 descriptor?? [ 203.737629][ T7105] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.3'. [ 204.170311][ T7118] loop1: detected capacity change from 0 to 256 [ 204.259501][ T7118] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0x1aabf3fb, utbl_chksum : 0xe619d30d) [ 204.420107][ T7124] x_tables: ip6_tables: TCPMSS target: only valid for protocol 6 [ 204.557318][ T5157] IPVS: starting estimator thread 0... [ 204.633723][ T7086] loop0: detected capacity change from 0 to 32768 [ 204.661320][ T7086] gfs2: fsid=syz:syz: Trying to join cluster "lock_nolock", "syz:syz" [ 204.674444][ T5211] usb 3-1: Cannot set autoneg [ 204.679443][ T7126] IPVS: using max 31 ests per chain, 74400 per kthread [ 204.687447][ T5211] MOSCHIP usb-ethernet driver 3-1:0.0: probe with driver MOSCHIP usb-ethernet driver failed with error -71 [ 204.703060][ T5211] usb 3-1: USB disconnect, device number 5 [ 204.719620][ T7086] gfs2: fsid=syz:syz: Now mounting FS (format 1801)... [ 204.729176][ T29] audit: type=1326 audit(1717247885.349:558): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7127 comm="syz-executor.4" exe="/root/syz-executor.4" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff0ba87cee9 code=0x7ffc0000 [ 204.773025][ T7086] gfs2: fsid=syz:syz.s: journal 0 mapped with 16 extents in 0ms [ 204.854121][ T29] audit: type=1326 audit(1717247885.349:559): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7127 comm="syz-executor.4" exe="/root/syz-executor.4" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff0ba87cee9 code=0x7ffc0000 [ 204.910893][ T29] audit: type=1326 audit(1717247885.379:560): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7127 comm="syz-executor.4" exe="/root/syz-executor.4" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7ff0ba87cee9 code=0x7ffc0000 [ 204.940600][ T29] audit: type=1326 audit(1717247885.379:561): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7127 comm="syz-executor.4" exe="/root/syz-executor.4" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff0ba87cee9 code=0x7ffc0000 [ 205.049671][ T7086] gfs2: fsid=syz:syz.s: first mount done, others may mount [ 205.069292][ T29] audit: type=1326 audit(1717247885.399:562): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7127 comm="syz-executor.4" exe="/root/syz-executor.4" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7ff0ba87cee9 code=0x7ffc0000 [ 205.131378][ T29] audit: type=1326 audit(1717247885.399:563): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7127 comm="syz-executor.4" exe="/root/syz-executor.4" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff0ba87cee9 code=0x7ffc0000 [ 205.232861][ T29] audit: type=1326 audit(1717247885.429:564): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7127 comm="syz-executor.4" exe="/root/syz-executor.4" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7ff0ba87cee9 code=0x7ffc0000 [ 205.258925][ T29] audit: type=1326 audit(1717247885.429:565): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7127 comm="syz-executor.4" exe="/root/syz-executor.4" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff0ba87cee9 code=0x7ffc0000 [ 205.343438][ T29] audit: type=1326 audit(1717247885.449:566): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7127 comm="syz-executor.4" exe="/root/syz-executor.4" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff0ba87cee9 code=0x7ffc0000 [ 205.433132][ T29] audit: type=1326 audit(1717247885.499:567): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7127 comm="syz-executor.4" exe="/root/syz-executor.4" sig=0 arch=c000003e syscall=118 compat=0 ip=0x7ff0ba87cee9 code=0x7ffc0000 [ 205.496484][ T7140] netlink: 148 bytes leftover after parsing attributes in process `syz-executor.3'. [ 205.776037][ T7150] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.0'. [ 205.857966][ T7154] loop4: detected capacity change from 0 to 64 [ 205.886015][ T7154] hfs: unable to parse mount options [ 206.122396][ T7162] netlink: 'syz-executor.1': attribute type 3 has an invalid length. [ 206.130849][ T7162] netlink: 'syz-executor.1': attribute type 1 has an invalid length. [ 206.139436][ T7162] netlink: 181400 bytes leftover after parsing attributes in process `syz-executor.1'. [ 206.426122][ T7167] loop2: detected capacity change from 0 to 512 [ 206.514545][ T7167] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 207.202719][ T7167] ext4 filesystem being mounted at /root/syzkaller-testdir3715608136/syzkaller.iiaEGc/6/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 207.266949][ T5211] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 207.516577][ T5211] usb 1-1: New USB device found, idVendor=9710, idProduct=7730, bcdDevice=96.33 [ 207.558085][ T5211] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 207.582449][ T5211] usb 1-1: config 0 descriptor?? [ 207.622660][ T6835] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 208.983294][ T5211] usb 1-1: Cannot set autoneg [ 208.989463][ T5211] MOSCHIP usb-ethernet driver 1-1:0.0: probe with driver MOSCHIP usb-ethernet driver failed with error -71 [ 209.011097][ T5211] usb 1-1: USB disconnect, device number 5 [ 209.040097][ T7204] loop3: detected capacity change from 0 to 764 [ 209.091101][ T7209] netlink: 'syz-executor.4': attribute type 3 has an invalid length. [ 209.099361][ T7209] netlink: 'syz-executor.4': attribute type 1 has an invalid length. [ 209.107608][ T7209] netlink: 181400 bytes leftover after parsing attributes in process `syz-executor.4'. [ 210.422120][ T7229] xt_TCPMSS: Only works on TCP SYN packets [ 210.448245][ T29] kauditd_printk_skb: 24 callbacks suppressed [ 210.448264][ T29] audit: type=1400 audit(1717247891.069:592): avc: denied { connect } for pid=7226 comm="syz-executor.2" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 210.482801][ T7231] netlink: 'syz-executor.0': attribute type 6 has an invalid length. [ 210.599539][ T7235] loop0: detected capacity change from 0 to 512 [ 210.620969][ T7235] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 210.635623][ T7235] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 210.832217][ T7235] EXT4-fs error (device loop0): __ext4_iget:4906: inode #15: block 1803188595: comm syz-executor.0: invalid block [ 210.865022][ T7235] EXT4-fs error (device loop0): ext4_orphan_get:1397: comm syz-executor.0: couldn't read orphan inode 15 (err -117) [ 210.919877][ T7235] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 212.509712][ T7251] overlayfs: workdir is in-use as upperdir/workdir of another mount, mount with '-o index=off' to override exclusive upperdir protection. [ 212.537243][ T6745] EXT4-fs error (device loop0): ext4_readdir:258: inode #11: block 54: comm syz-executor.0: path /root/syzkaller-testdir3997314021/syzkaller.aNV9ML/8/file0/lost+found: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=0, rec_len=0, size=1024 fake=0 [ 212.611429][ T6745] EXT4-fs error (device loop0): ext4_empty_dir:3126: inode #11: block 54: comm syz-executor.0: bad entry in directory: rec_len is smaller than minimal - offset=5120, inode=0, rec_len=0, size=1024 fake=0 [ 212.673754][ T6745] EXT4-fs error (device loop0): ext4_readdir:258: inode #11: block 54: comm syz-executor.0: path /root/syzkaller-testdir3997314021/syzkaller.aNV9ML/8/file0/lost+found: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=0, rec_len=0, size=1024 fake=0 [ 212.725271][ T6745] EXT4-fs error (device loop0): ext4_empty_dir:3126: inode #11: block 54: comm syz-executor.0: bad entry in directory: rec_len is smaller than minimal - offset=5120, inode=0, rec_len=0, size=1024 fake=0 [ 212.769277][ T6745] EXT4-fs error (device loop0): ext4_readdir:258: inode #11: block 54: comm syz-executor.0: path /root/syzkaller-testdir3997314021/syzkaller.aNV9ML/8/file0/lost+found: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=0, rec_len=0, size=1024 fake=0 [ 212.785988][ T7259] loop2: detected capacity change from 0 to 256 [ 212.823905][ T6745] EXT4-fs error (device loop0): ext4_empty_dir:3126: inode #11: block 54: comm syz-executor.0: bad entry in directory: rec_len is smaller than minimal - offset=5120, inode=0, rec_len=0, size=1024 fake=0 [ 212.849423][ T7261] loop4: detected capacity change from 0 to 256 [ 212.861875][ T6745] EXT4-fs error (device loop0): ext4_readdir:258: inode #11: block 54: comm syz-executor.0: path /root/syzkaller-testdir3997314021/syzkaller.aNV9ML/8/file0/lost+found: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=0, rec_len=0, size=1024 fake=0 [ 212.921723][ T6745] EXT4-fs error (device loop0): ext4_empty_dir:3126: inode #11: block 54: comm syz-executor.0: bad entry in directory: rec_len is smaller than minimal - offset=5120, inode=0, rec_len=0, size=1024 fake=0 [ 212.968967][ T6745] EXT4-fs error (device loop0): ext4_readdir:258: inode #11: block 54: comm syz-executor.0: path /root/syzkaller-testdir3997314021/syzkaller.aNV9ML/8/file0/lost+found: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=0, rec_len=0, size=1024 fake=0 [ 213.051024][ T6745] EXT4-fs error (device loop0): ext4_empty_dir:3126: inode #11: block 54: comm syz-executor.0: bad entry in directory: rec_len is smaller than minimal - offset=5120, inode=0, rec_len=0, size=1024 fake=0 [ 213.244857][ T7272] netlink: 'syz-executor.3': attribute type 23 has an invalid length. [ 214.383376][ T7281] xt_TCPMSS: Only works on TCP SYN packets [ 214.765904][ T7289] overlayfs: workdir is in-use as upperdir/workdir of another mount, mount with '-o index=off' to override exclusive upperdir protection. [ 214.792174][ T7296] loop2: detected capacity change from 0 to 256 [ 214.851088][ T6745] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 215.041842][ T2848] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 215.275521][ T7310] xt_TCPMSS: Only works on TCP SYN packets [ 215.307300][ T2848] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 216.291840][ T2848] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 216.439665][ T7322] loop4: detected capacity change from 0 to 256 [ 216.605181][ T2848] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 216.620131][ T29] audit: type=1400 audit(1717247897.239:593): avc: denied { connect } for pid=7327 comm="syz-executor.3" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 216.657828][ T7329] overlayfs: workdir is in-use as upperdir/workdir of another mount, mount with '-o index=off' to override exclusive upperdir protection. [ 216.686139][ T29] audit: type=1400 audit(1717247897.259:594): avc: denied { bind } for pid=7327 comm="syz-executor.3" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 216.707779][ T29] audit: type=1400 audit(1717247897.269:595): avc: denied { write } for pid=7327 comm="syz-executor.3" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 216.880029][ T7333] input: syz1 as /devices/virtual/input/input6 [ 217.307486][ T2848] bridge_slave_1: left allmulticast mode [ 217.316636][ T2848] bridge_slave_1: left promiscuous mode [ 217.332774][ T2848] bridge0: port 2(bridge_slave_1) entered disabled state [ 217.374801][ T2848] bridge_slave_0: left allmulticast mode [ 217.398305][ T2848] bridge_slave_0: left promiscuous mode [ 217.412872][ T2848] bridge0: port 1(bridge_slave_0) entered disabled state [ 217.451388][ T7338] loop4: detected capacity change from 0 to 4096 [ 217.462900][ T7338] ntfs3: loop4: Different NTFS sector size (1024) and media sector size (512). [ 217.573671][ T7338] ntfs3: loop4: Failed to initialize $Extend/$ObjId. [ 217.670887][ T7320] loop1: detected capacity change from 0 to 32768 [ 217.758691][ T29] audit: type=1400 audit(1717247898.359:596): avc: denied { create } for pid=7337 comm="syz-executor.4" name="file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=lnk_file permissive=1 [ 217.831824][ T29] audit: type=1400 audit(1717247898.449:597): avc: denied { link } for pid=7319 comm="syz-executor.1" name="file1" dev="loop1" ino=4 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 217.902300][ T29] audit: type=1400 audit(1717247898.459:598): avc: denied { unlink } for pid=7337 comm="syz-executor.4" name="file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" dev="loop4" ino=34 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=lnk_file permissive=1 [ 218.568683][ T2848] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 218.597238][ T2848] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 218.621014][ T2848] bond0 (unregistering): Released all slaves [ 218.872689][ T29] audit: type=1400 audit(1717247899.439:599): avc: denied { create } for pid=7360 comm="syz-executor.4" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_home_t tclass=blk_file permissive=1 [ 218.916905][ T29] audit: type=1400 audit(1717247899.449:600): avc: denied { write } for pid=7360 comm="syz-executor.4" name="file0" dev="sda1" ino=1959 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_home_t tclass=blk_file permissive=1 [ 218.955174][ T29] audit: type=1400 audit(1717247899.449:601): avc: denied { open } for pid=7360 comm="syz-executor.4" path="/root/syzkaller-testdir1303640629/syzkaller.x3oI2p/174/file0" dev="sda1" ino=1959 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_home_t tclass=blk_file permissive=1 [ 218.984653][ T29] audit: type=1400 audit(1717247899.509:602): avc: denied { ioctl } for pid=7360 comm="syz-executor.4" path="/root/syzkaller-testdir1303640629/syzkaller.x3oI2p/174/file0" dev="sda1" ino=1959 ioctlcmd=0x9425 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_home_t tclass=blk_file permissive=1 [ 219.731229][ T7369] input: syz1 as /devices/virtual/input/input7 [ 219.755623][ T7370] overlayfs: workdir is in-use as upperdir/workdir of another mount, mount with '-o index=off' to override exclusive upperdir protection. [ 219.893871][ T7375] vivid-002: disconnect [ 219.918391][ T7371] vivid-002: reconnect [ 220.326159][ T7384] kvm: pic: non byte read [ 221.044413][ T5152] Bluetooth: hci2: Opcode 0x0c1a failed: -110 [ 221.044596][ T5152] Bluetooth: hci2: Error when powering off device on rfkill (-110) [ 221.050441][ T53] Bluetooth: hci2: command 0x0406 tx timeout [ 222.741947][ T7414] loop4: detected capacity change from 0 to 2048 [ 222.813672][ T7414] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 222.852071][ T7421] vivid-002: disconnect [ 222.860710][ T7417] vivid-002: reconnect [ 222.886693][ T29] kauditd_printk_skb: 1 callbacks suppressed [ 222.886711][ T29] audit: type=1400 audit(1717247903.509:604): avc: denied { read } for pid=7422 comm="syz-executor.3" name="sg0" dev="devtmpfs" ino=695 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 222.963878][ T29] audit: type=1400 audit(1717247903.579:605): avc: denied { open } for pid=7422 comm="syz-executor.3" path="/dev/sg0" dev="devtmpfs" ino=695 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 223.116488][ T29] audit: type=1400 audit(1717247903.729:606): avc: denied { write } for pid=7429 comm="syz-executor.1" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=key permissive=1 [ 223.416338][ T5117] Bluetooth: hci0: command 0x0c1a tx timeout [ 223.424463][ T5152] Bluetooth: hci0: Opcode 0x0c1a failed: -110 [ 223.445874][ T5152] Bluetooth: hci0: Error when powering off device on rfkill (-110) [ 224.135188][ T7448] loop4: detected capacity change from 0 to 512 [ 224.168575][ T7448] EXT4-fs error (device loop4): ext4_get_journal_inode:5752: comm syz-executor.4: inode #196608: comm syz-executor.4: iget: illegal inode # [ 224.180588][ T29] audit: type=1400 audit(1717247904.789:607): avc: denied { accept } for pid=7449 comm="syz-executor.2" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 224.206288][ T7448] EXT4-fs (loop4): no journal found [ 224.303499][ T7432] loop3: detected capacity change from 0 to 32768 [ 224.458730][ T7460] vivid-002: disconnect [ 224.485357][ T7452] vivid-002: reconnect [ 224.507236][ T7461] cgroup: noprefix used incorrectly [ 224.571547][ T7432] bcachefs (loop3): mounting version 1.7: mi_btree_bitmap opts=metadata_checksum=none,data_checksum=none,nojournal_transaction_names [ 224.602381][ T7432] bcachefs (loop3): recovering from clean shutdown, journal seq 8 [ 224.665469][ T7432] bcachefs (loop3): alloc_read... done [ 224.677667][ T7432] bcachefs (loop3): stripes_read... done [ 224.696630][ T7432] bcachefs (loop3): snapshots_read... done [ 224.721728][ T7468] netlink: 32 bytes leftover after parsing attributes in process `syz-executor.1'. [ 224.733502][ T7432] bcachefs (loop3): journal_replay... done [ 224.754959][ T7432] bcachefs (loop3): resume_logged_ops... done [ 224.776899][ T7432] bcachefs (loop3): going read-write [ 224.790237][ T7432] bcachefs (loop3): done starting filesystem [ 224.870890][ T6829] bcachefs (loop3): shutting down [ 224.884387][ T6829] bcachefs (loop3): going read-only [ 224.891595][ T6829] bcachefs (loop3): finished waiting for writes to stop [ 224.908128][ T6829] bcachefs (loop3): flushing journal and stopping allocators, journal seq 8 [ 224.921628][ T6829] bcachefs (loop3): flushing journal and stopping allocators complete, journal seq 8 [ 224.954302][ T6829] bcachefs (loop3): shutdown complete, journal seq 9 [ 224.965053][ T6829] bcachefs (loop3): marking filesystem clean [ 225.009697][ T7478] loop2: detected capacity change from 0 to 1024 [ 225.060894][ T6829] bcachefs (loop3): shutdown complete [ 225.222622][ T7484] ipip0: entered promiscuous mode [ 225.237338][ T7484] ipip0: entered allmulticast mode [ 225.302357][ T7487] vivid-008: disconnect [ 225.322264][ T7485] vivid-008: reconnect [ 225.443544][ T61] hfsplus: b-tree write err: -5, ino 4 [ 225.511923][ T5152] Bluetooth: hci4: Opcode 0x0c1a failed: -110 [ 225.518298][ T5152] Bluetooth: hci4: Error when powering off device on rfkill (-110) [ 225.524536][ T53] Bluetooth: hci4: command 0x0c1a tx timeout [ 225.607431][ T7493] netlink: 32 bytes leftover after parsing attributes in process `syz-executor.1'. [ 225.804134][ T7499] loop2: detected capacity change from 0 to 512 [ 225.860827][ T7499] EXT4-fs error (device loop2): ext4_get_journal_inode:5752: comm syz-executor.2: inode #196608: comm syz-executor.2: iget: illegal inode # [ 225.910557][ T7499] EXT4-fs (loop2): no journal found [ 226.350769][ T7509] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.1'. [ 226.504749][ T7513] ipip0: entered promiscuous mode [ 226.518114][ T7513] ipip0: entered allmulticast mode [ 226.527465][ T7495] loop4: detected capacity change from 0 to 32768 [ 226.612467][ T29] audit: type=1400 audit(1717247907.229:608): avc: denied { ioctl } for pid=7519 comm="syz-executor.1" path="/dev/sg0" dev="devtmpfs" ino=695 ioctlcmd=0x227d scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 226.701364][ T29] audit: type=1400 audit(1717247907.309:609): avc: denied { view } for pid=7522 comm="syz-executor.2" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=key permissive=1 [ 226.861337][ T7495] bcachefs (loop4): mounting version 1.7: mi_btree_bitmap opts=metadata_checksum=none,data_checksum=none,nojournal_transaction_names [ 226.906799][ T7495] bcachefs (loop4): recovering from clean shutdown, journal seq 8 [ 226.955321][ T7529] loop2: detected capacity change from 0 to 256 [ 226.991811][ T7495] bcachefs (loop4): alloc_read... done [ 227.017462][ T7495] bcachefs (loop4): stripes_read... done [ 227.045848][ T7495] bcachefs (loop4): snapshots_read... done [ 227.055667][ T7495] bcachefs (loop4): journal_replay... done [ 227.067284][ T7495] bcachefs (loop4): resume_logged_ops... done [ 227.080307][ T7495] bcachefs (loop4): going read-write [ 227.107994][ T7495] bcachefs (loop4): done starting filesystem [ 227.271208][ T5104] bcachefs (loop4): shutting down [ 227.281248][ T5104] bcachefs (loop4): going read-only [ 227.295847][ T5104] bcachefs (loop4): finished waiting for writes to stop [ 227.304484][ T5104] bcachefs (loop4): flushing journal and stopping allocators, journal seq 8 [ 227.325897][ T5104] bcachefs (loop4): flushing journal and stopping allocators complete, journal seq 8 [ 227.359373][ T5104] bcachefs (loop4): shutdown complete, journal seq 9 [ 227.386230][ T5104] bcachefs (loop4): marking filesystem clean [ 227.459163][ T5104] bcachefs (loop4): shutdown complete [ 227.575823][ T5117] Bluetooth: hci1: command 0x0c1a tx timeout [ 227.583357][ T5152] Bluetooth: hci1: Opcode 0x0c1a failed: -110 [ 227.592174][ T5152] Bluetooth: hci1: Error when powering off device on rfkill (-110) [ 228.117170][ T7532] loop1: detected capacity change from 0 to 32768 [ 228.158766][ T7547] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.3'. [ 228.165992][ T7532] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop1 (7:1) scanned by syz-executor.1 (7532) [ 228.171486][ T7547] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.3'. [ 228.202637][ T7532] BTRFS info (device loop1): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 228.219866][ T7532] BTRFS info (device loop1): using crc32c (crc32c-intel) checksum algorithm [ 228.230316][ T7532] BTRFS info (device loop1): using free-space-tree [ 228.392359][ T53] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 228.410332][ T53] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 228.423013][ T53] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 228.439038][ T53] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 228.460099][ T53] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 228.474579][ T53] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 228.513345][ T5117] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 228.523996][ T5117] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 228.540329][ T5117] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 228.552679][ T7532] BTRFS info (device loop1): checking UUID tree [ 228.579487][ T5117] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 228.589073][ T5117] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 228.596829][ T5117] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 228.824811][ T2848] hsr_slave_0: left promiscuous mode [ 228.868123][ T2848] hsr_slave_1: left promiscuous mode [ 228.878725][ T7571] syz-executor.4: attempt to access beyond end of device [ 228.878725][ T7571] nbd4: rw=0, sector=0, nr_sectors = 1 limit=0 [ 228.894433][ T2848] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 228.921532][ T2848] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 228.937690][ T2848] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 228.961756][ T2848] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 229.054452][ T2848] veth1_macvtap: left promiscuous mode [ 229.099202][ T2848] veth0_macvtap: left promiscuous mode [ 229.104982][ T2848] veth1_vlan: left promiscuous mode [ 229.136608][ T2848] veth0_vlan: left promiscuous mode [ 229.379694][ T6876] BTRFS info (device loop1): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 229.879032][ T53] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 229.892243][ T53] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 229.911983][ T53] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 230.047033][ T53] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 230.061873][ T53] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 230.071503][ T53] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 230.281463][ T29] audit: type=1400 audit(1717247910.899:610): avc: denied { accept } for pid=7583 comm="syz-executor.1" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 230.501410][ T7574] loop3: detected capacity change from 0 to 32768 [ 230.699555][ T53] Bluetooth: hci3: command tx timeout [ 230.740235][ T7574] bcachefs (loop3): mounting version 1.7: mi_btree_bitmap opts=metadata_checksum=none,data_checksum=none,nojournal_transaction_names [ 230.744767][ T7597] loop4: detected capacity change from 0 to 8 [ 230.754446][ T7574] bcachefs (loop3): recovering from clean shutdown, journal seq 8 [ 230.812357][ T7574] bcachefs (loop3): alloc_read... done [ 230.819915][ T7574] bcachefs (loop3): stripes_read... done [ 230.830849][ T7574] bcachefs (loop3): snapshots_read... done [ 230.851834][ T29] audit: type=1400 audit(1717247911.459:611): avc: denied { read } for pid=7596 comm="syz-executor.4" name="file1" dev="loop4" ino=5 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 230.856611][ T7597] SQUASHFS error: Failed to read block 0x4e8: -5 [ 230.881991][ T7574] bcachefs (loop3): journal_replay... done [ 230.885648][ T29] audit: type=1800 audit(1717247911.499:612): pid=7597 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz-executor.4" name="file1" dev="loop4" ino=5 res=0 errno=0 [ 230.893114][ T7574] bcachefs (loop3): resume_logged_ops... done [ 230.915665][ T7574] bcachefs (loop3): going read-write [ 230.934580][ T7574] bcachefs (loop3): done starting filesystem [ 230.948150][ T7597] syz-executor.4 (7597) used greatest stack depth: 21216 bytes left [ 230.996204][ T2848] team0 (unregistering): Port device team_slave_1 removed [ 231.048032][ T6829] bcachefs (loop3): shutting down [ 231.053330][ T6829] bcachefs (loop3): going read-only [ 231.081975][ T6829] bcachefs (loop3): finished waiting for writes to stop [ 231.098459][ T6829] bcachefs (loop3): flushing journal and stopping allocators, journal seq 8 [ 231.113163][ T2848] team0 (unregistering): Port device team_slave_0 removed [ 231.118169][ T6829] bcachefs (loop3): flushing journal and stopping allocators complete, journal seq 8 [ 231.152958][ T6829] bcachefs (loop3): shutdown complete, journal seq 9 [ 231.160580][ T6829] bcachefs (loop3): marking filesystem clean [ 231.231763][ T6829] bcachefs (loop3): shutdown complete [ 231.395220][ T7606] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.4'. [ 232.145908][ T53] Bluetooth: hci4: command tx timeout [ 232.778124][ T7624] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.1'. [ 232.778833][ T53] Bluetooth: hci3: command tx timeout [ 232.925212][ T7610] loop4: detected capacity change from 0 to 32768 [ 232.968401][ T7610] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop4 (7:4) scanned by syz-executor.4 (7610) [ 233.084980][ T7610] BTRFS info (device loop4): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 233.128187][ T7610] BTRFS info (device loop4): using crc32c (crc32c-intel) checksum algorithm [ 233.137420][ T7341] chnl_net:caif_netlink_parms(): no params data found [ 233.145729][ T7610] BTRFS info (device loop4): using free-space-tree [ 233.261180][ T7610] BTRFS info (device loop4): checking UUID tree [ 233.448896][ T2848] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 233.501379][ T29] audit: type=1400 audit(1717247914.119:613): avc: denied { map } for pid=7609 comm="syz-executor.4" path="/root/syzkaller-testdir1303640629/syzkaller.x3oI2p/197/file0/cpu.stat" dev="loop4" ino=263 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 233.585186][ T29] audit: type=1400 audit(1717247914.119:614): avc: denied { execute } for pid=7609 comm="syz-executor.4" path="/root/syzkaller-testdir1303640629/syzkaller.x3oI2p/197/file0/cpu.stat" dev="loop4" ino=263 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 233.769920][ T2848] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 233.775289][ T7630] loop3: detected capacity change from 0 to 32768 [ 233.928818][ T5104] BTRFS info (device loop4): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 233.990605][ T2848] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 234.081870][ T7579] chnl_net:caif_netlink_parms(): no params data found [ 234.138714][ T7630] bcachefs (loop3): mounting version 1.7: mi_btree_bitmap opts=metadata_checksum=none,data_checksum=none,nojournal_transaction_names [ 234.155429][ T7630] bcachefs (loop3): recovering from clean shutdown, journal seq 8 [ 234.231542][ T53] Bluetooth: hci4: command tx timeout [ 234.269961][ T2848] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 234.340932][ T7630] bcachefs (loop3): alloc_read... done [ 234.355733][ T7630] bcachefs (loop3): stripes_read... done [ 234.361620][ T7630] bcachefs (loop3): snapshots_read... done [ 234.376510][ T7341] bridge0: port 1(bridge_slave_0) entered blocking state [ 234.383700][ T7341] bridge0: port 1(bridge_slave_0) entered disabled state [ 234.406231][ T7630] bcachefs (loop3): journal_replay... done [ 234.412156][ T7630] bcachefs (loop3): resume_logged_ops... done [ 234.418636][ T7341] bridge_slave_0: entered allmulticast mode [ 234.436895][ T7341] bridge_slave_0: entered promiscuous mode [ 234.445856][ T7630] bcachefs (loop3): going read-write [ 234.466548][ T7341] bridge0: port 2(bridge_slave_1) entered blocking state [ 234.480627][ T7630] bcachefs (loop3): done starting filesystem [ 234.481830][ T7341] bridge0: port 2(bridge_slave_1) entered disabled state [ 234.506090][ T7341] bridge_slave_1: entered allmulticast mode [ 234.513997][ T7341] bridge_slave_1: entered promiscuous mode [ 234.613138][ T6829] bcachefs (loop3): shutting down [ 234.620571][ T6829] bcachefs (loop3): going read-only [ 234.629657][ T6829] bcachefs (loop3): finished waiting for writes to stop [ 234.642589][ T7666] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.4'. [ 234.653309][ T6829] bcachefs (loop3): flushing journal and stopping allocators, journal seq 8 [ 234.686457][ T6829] bcachefs (loop3): flushing journal and stopping allocators complete, journal seq 8 [ 234.724109][ T6829] bcachefs (loop3): shutdown complete, journal seq 9 [ 234.748649][ T6829] bcachefs (loop3): marking filesystem clean [ 234.748962][ T7341] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 234.799862][ T7633] loop1: detected capacity change from 0 to 32768 [ 234.812267][ T7341] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 234.840953][ T6829] bcachefs (loop3): shutdown complete [ 234.857114][ T53] Bluetooth: hci3: command tx timeout [ 235.116883][ T7579] bridge0: port 1(bridge_slave_0) entered blocking state [ 235.124076][ T7579] bridge0: port 1(bridge_slave_0) entered disabled state [ 235.509770][ T7579] bridge_slave_0: entered allmulticast mode [ 235.751445][ T7579] bridge_slave_0: entered promiscuous mode [ 235.998495][ T7341] team0: Port device team_slave_0 added [ 236.011335][ T7341] team0: Port device team_slave_1 added [ 236.077907][ T7579] bridge0: port 2(bridge_slave_1) entered blocking state [ 236.117159][ T7579] bridge0: port 2(bridge_slave_1) entered disabled state [ 236.124540][ T7579] bridge_slave_1: entered allmulticast mode [ 236.137924][ T7579] bridge_slave_1: entered promiscuous mode [ 236.295784][ T53] Bluetooth: hci4: command tx timeout [ 236.313187][ T7341] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 236.720526][ T7341] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 236.751810][ T7341] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 236.773763][ T7341] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 236.792871][ T7341] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 236.828367][ T7341] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 236.881867][ T7579] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 236.935424][ T7579] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 236.946342][ T53] Bluetooth: hci3: command tx timeout [ 236.964003][ T2848] bridge_slave_1: left allmulticast mode [ 236.978579][ T2848] bridge_slave_1: left promiscuous mode [ 236.990268][ T2848] bridge0: port 2(bridge_slave_1) entered disabled state [ 237.010352][ T2848] bridge_slave_0: left allmulticast mode [ 237.023390][ T2848] bridge_slave_0: left promiscuous mode [ 237.031166][ T2848] bridge0: port 1(bridge_slave_0) entered disabled state [ 237.229597][ T7693] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.3'. [ 237.886782][ T2848] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 237.900672][ T2848] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 237.924444][ T2848] bond0 (unregistering): Released all slaves [ 237.961322][ T7689] workqueue: Failed to create a rescuer kthread for wq "bond1": -EINTR [ 238.035902][ T7703] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.3'. [ 238.351588][ T7579] team0: Port device team_slave_0 added [ 238.375845][ T53] Bluetooth: hci4: command tx timeout [ 238.393368][ T7341] hsr_slave_0: entered promiscuous mode [ 238.419833][ T7341] hsr_slave_1: entered promiscuous mode [ 238.481825][ T7579] team0: Port device team_slave_1 added [ 238.771831][ T7579] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 238.793974][ T7579] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 238.857409][ T7579] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 238.945400][ T7579] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 238.974313][ T7579] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 239.062416][ T7707] loop4: detected capacity change from 0 to 32768 [ 239.065966][ T7579] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 239.114268][ T2848] hsr_slave_0: left promiscuous mode [ 239.141035][ T2848] hsr_slave_1: left promiscuous mode [ 239.155581][ T2848] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 239.175941][ T2848] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 239.196797][ T2848] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 239.219248][ T2848] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 239.301182][ T2848] veth1_macvtap: left promiscuous mode [ 239.324835][ T2848] veth0_macvtap: left promiscuous mode [ 239.327988][ T7716] loop1: detected capacity change from 0 to 32768 [ 239.335962][ T2848] veth1_vlan: left promiscuous mode [ 239.342186][ T2848] veth0_vlan: left promiscuous mode [ 239.382247][ T7716] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop1 (7:1) scanned by syz-executor.1 (7716) [ 239.436000][ T7716] BTRFS info (device loop1): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 239.456642][ T7716] BTRFS info (device loop1): using sha256 (sha256-avx2) checksum algorithm [ 239.488158][ T7716] BTRFS info (device loop1): using free-space-tree [ 240.103048][ T7712] loop3: detected capacity change from 0 to 32768 [ 240.180930][ T6876] BTRFS info (device loop1): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 240.664808][ T7739] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 241.965748][ T2848] team0 (unregistering): Port device team_slave_1 removed [ 242.022492][ T2848] team0 (unregistering): Port device team_slave_0 removed [ 242.753344][ T7753] workqueue: Failed to create a rescuer kthread for wq "bond0": -EINTR [ 242.770152][ T7760] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.3'. [ 243.025183][ T7762] loop1: detected capacity change from 0 to 32768 [ 243.079631][ T7579] hsr_slave_0: entered promiscuous mode [ 243.096810][ T7579] hsr_slave_1: entered promiscuous mode [ 243.101984][ T7762] XFS (loop1): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 243.123692][ T7579] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 243.157001][ T7579] Cannot create hsr debugfs directory [ 244.391122][ T7762] XFS (loop1): Ending clean mount [ 244.443551][ T7785] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 244.518828][ T2848] IPVS: stop unused estimator thread 0... [ 244.754702][ T6876] XFS (loop1): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 244.861100][ T7787] loop3: detected capacity change from 0 to 256 [ 244.971203][ T29] audit: type=1400 audit(1717247925.589:615): avc: denied { create } for pid=7786 comm="syz-executor.3" name="#17" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_home_t tclass=chr_file permissive=1 [ 245.024494][ T29] audit: type=1400 audit(1717247925.619:616): avc: denied { link } for pid=7786 comm="syz-executor.3" name="#17" dev="sda1" ino=1938 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_home_t tclass=chr_file permissive=1 [ 245.055317][ T29] audit: type=1400 audit(1717247925.619:617): avc: denied { rename } for pid=7786 comm="syz-executor.3" name="#18" dev="sda1" ino=1938 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_home_t tclass=chr_file permissive=1 [ 245.160615][ T7776] loop4: detected capacity change from 0 to 32768 [ 245.216195][ T7776] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop4 (7:4) scanned by syz-executor.4 (7776) [ 245.279038][ T7789] Invalid ELF section header overflow [ 245.287080][ T29] audit: type=1400 audit(1717247925.899:618): avc: denied { module_load } for pid=7788 comm="syz-executor.3" path=2F6D656D66643A1037202864656C6574656429 dev="tmpfs" ino=1133 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=system permissive=1 [ 245.321390][ T7776] BTRFS info (device loop4): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 245.351379][ T7776] BTRFS info (device loop4): using sha256 (sha256-avx2) checksum algorithm [ 245.362866][ T29] audit: type=1400 audit(1717247925.919:619): avc: denied { execute } for pid=7790 comm="syz-executor.1" path="/root/syzkaller-testdir2879799982/syzkaller.1ab6iF/71/file0/bus" dev="tmpfs" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 245.369764][ T7776] BTRFS info (device loop4): using free-space-tree [ 245.415197][ T7341] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 245.430599][ T7797] snd_dummy snd_dummy.0: control 0:0:0:syz0:0 is already present [ 245.537337][ T7341] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 245.557341][ T7341] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 245.628455][ T5104] BTRFS info (device loop4): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 245.639228][ T7341] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 246.800463][ T7818] loop3: detected capacity change from 0 to 256 [ 247.195962][ T29] audit: type=1400 audit(1717247927.809:620): avc: denied { read } for pid=7819 comm="syz-executor.1" name="card1" dev="devtmpfs" ino=630 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 247.272673][ T29] audit: type=1400 audit(1717247927.809:621): avc: denied { open } for pid=7819 comm="syz-executor.1" path="/dev/dri/card1" dev="devtmpfs" ino=630 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 247.321200][ T29] audit: type=1400 audit(1717247927.849:622): avc: denied { ioctl } for pid=7819 comm="syz-executor.1" path="/dev/dri/card1" dev="devtmpfs" ino=630 ioctlcmd=0x64a0 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 247.361701][ T7341] 8021q: adding VLAN 0 to HW filter on device bond0 [ 247.422406][ T7341] 8021q: adding VLAN 0 to HW filter on device team0 [ 247.459023][ T7579] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 247.492054][ T7579] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 247.515473][ T7826] loop4: detected capacity change from 0 to 256 [ 247.534534][ T7826] exFAT-fs (loop4): failed to load upcase table (idx : 0x000104d0, chksum : 0x60d18cac, utbl_chksum : 0xe619d30d) [ 247.561695][ T7579] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 247.600608][ T929] bridge0: port 1(bridge_slave_0) entered blocking state [ 247.607824][ T929] bridge0: port 1(bridge_slave_0) entered forwarding state [ 247.714865][ T7579] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 247.750127][ T5152] bridge0: port 2(bridge_slave_1) entered blocking state [ 247.757377][ T5152] bridge0: port 2(bridge_slave_1) entered forwarding state [ 248.000982][ T7392] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 248.230058][ T7392] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 248.255206][ T7833] loop4: detected capacity change from 0 to 1024 [ 248.334453][ T7833] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 248.492641][ T7392] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 248.559019][ T5104] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 248.753873][ T7392] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 248.891239][ T7579] 8021q: adding VLAN 0 to HW filter on device bond0 [ 248.902409][ T5117] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 248.905565][ T7846] netlink: 'syz-executor.1': attribute type 1 has an invalid length. [ 248.914332][ T5117] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 248.933692][ T7846] netlink: 112860 bytes leftover after parsing attributes in process `syz-executor.1'. [ 248.947556][ T5117] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 248.959041][ T5117] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 248.967240][ T5117] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 248.974624][ T7341] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 248.974730][ T5117] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 249.149213][ T7848] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.1'. [ 249.174410][ T7579] 8021q: adding VLAN 0 to HW filter on device team0 [ 249.210412][ T7341] veth0_vlan: entered promiscuous mode [ 249.237497][ T5211] bridge0: port 1(bridge_slave_0) entered blocking state [ 249.244708][ T5211] bridge0: port 1(bridge_slave_0) entered forwarding state [ 249.333026][ T5211] bridge0: port 2(bridge_slave_1) entered blocking state [ 249.340287][ T5211] bridge0: port 2(bridge_slave_1) entered forwarding state [ 249.359950][ T7341] veth1_vlan: entered promiscuous mode [ 249.415195][ T7856] loop4: detected capacity change from 0 to 256 [ 249.441234][ T7856] exFAT-fs (loop4): failed to load upcase table (idx : 0x000104d0, chksum : 0x60d18cac, utbl_chksum : 0xe619d30d) [ 249.477920][ T7392] bridge_slave_1: left allmulticast mode [ 249.483626][ T7392] bridge_slave_1: left promiscuous mode [ 249.494734][ T7392] bridge0: port 2(bridge_slave_1) entered disabled state [ 249.514757][ T7392] bridge_slave_0: left allmulticast mode [ 249.520721][ T7392] bridge_slave_0: left promiscuous mode [ 249.533099][ T7392] bridge0: port 1(bridge_slave_0) entered disabled state [ 249.565880][ T45] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 249.776229][ T45] usb 2-1: Using ep0 maxpacket: 16 [ 249.796111][ T45] usb 2-1: New USB device found, idVendor=067b, idProduct=27a1, bcdDevice=90.6b [ 249.826637][ T45] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 249.834716][ T45] usb 2-1: Product: syz [ 249.852381][ T45] usb 2-1: Manufacturer: syz [ 249.857133][ T45] usb 2-1: SerialNumber: syz [ 249.871808][ T45] usb 2-1: config 0 descriptor?? [ 249.884740][ T45] plusb 2-1:0.0: probe with driver plusb failed with error -22 [ 250.236466][ T7392] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 250.272447][ T7392] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 250.292627][ T7392] bond0 (unregistering): Released all slaves [ 250.462874][ T7341] veth0_macvtap: entered promiscuous mode [ 250.542950][ T7341] veth1_macvtap: entered promiscuous mode [ 250.729258][ T7341] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 250.743931][ T7341] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 250.760997][ T7341] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 250.775911][ T7341] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 250.791887][ T7341] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 250.803822][ T7341] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 250.825373][ T7341] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 250.900855][ T5152] usb 2-1: USB disconnect, device number 3 [ 250.960946][ T7341] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 250.982756][ T7341] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 250.992893][ T7341] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 251.004789][ T7341] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 251.014982][ T7341] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 251.037622][ T7341] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 251.057902][ T7341] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 251.088880][ T7875] netlink: 'syz-executor.1': attribute type 1 has an invalid length. [ 251.105048][ T7875] netlink: 112860 bytes leftover after parsing attributes in process `syz-executor.1'. [ 251.111851][ T5117] Bluetooth: hci0: command tx timeout [ 251.210517][ T7341] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 251.242976][ T7341] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 251.271438][ T7341] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 251.296074][ T7341] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 251.380334][ T7392] hsr_slave_0: left promiscuous mode [ 251.403337][ T7392] hsr_slave_1: left promiscuous mode [ 251.424043][ T7392] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 251.448803][ T7392] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 251.462022][ T7887] loop1: detected capacity change from 0 to 256 [ 251.472734][ T7392] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 251.480734][ T7392] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 251.493197][ T7887] exFAT-fs (loop1): failed to load upcase table (idx : 0x000104d0, chksum : 0x60d18cac, utbl_chksum : 0xe619d30d) [ 251.548220][ T7392] veth1_macvtap: left promiscuous mode [ 251.553819][ T7392] veth0_macvtap: left promiscuous mode [ 251.574500][ T7392] veth1_vlan: left promiscuous mode [ 251.585959][ T7392] veth0_vlan: left promiscuous mode [ 252.845471][ T29] audit: type=1400 audit(1717247933.459:623): avc: denied { ioctl } for pid=7905 comm="syz-executor.4" path="/dev/autofs" dev="devtmpfs" ino=98 ioctlcmd=0x937d scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 253.068300][ T7902] loop1: detected capacity change from 0 to 40427 [ 253.133566][ T7902] F2FS-fs (loop1): Found nat_bits in checkpoint [ 253.135461][ T7392] team0 (unregistering): Port device team_slave_1 removed [ 253.188061][ T53] Bluetooth: hci0: command tx timeout [ 253.245199][ T7915] loop4: detected capacity change from 0 to 256 [ 253.254102][ T7392] team0 (unregistering): Port device team_slave_0 removed [ 253.276468][ T7915] exFAT-fs (loop4): failed to load upcase table (idx : 0x00010000, chksum : 0x36e00b20, utbl_chksum : 0xe619d30d) [ 253.309373][ T7902] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 253.339984][ T29] audit: type=1400 audit(1717247933.959:624): avc: denied { setopt } for pid=7914 comm="syz-executor.4" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 253.956842][ T7920] syz-executor.1: attempt to access beyond end of device [ 253.956842][ T7920] loop1: rw=2049, sector=53256, nr_sectors = 8 limit=40427 [ 254.296270][ T29] audit: type=1800 audit(1717247934.429:625): pid=7920 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed(directio) comm="syz-executor.1" name="bus" dev="loop1" ino=10 res=0 errno=0 [ 254.318058][ C1] vkms_vblank_simulate: vblank timer overrun [ 254.413619][ T7922] loop4: detected capacity change from 0 to 256 [ 254.434071][ T7922] exFAT-fs (loop4): failed to load upcase table (idx : 0x000104d0, chksum : 0x60d18cac, utbl_chksum : 0xe619d30d) [ 254.540984][ T6876] syz-executor.1: attempt to access beyond end of device [ 254.540984][ T6876] loop1: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 254.559606][ T6876] F2FS-fs (loop1): Stopped filesystem due to reason: 3 [ 254.952759][ T7926] loop4: detected capacity change from 0 to 256 [ 254.978217][ T7926] exFAT-fs (loop4): failed to load upcase table (idx : 0x000104d0, chksum : 0x60d18cac, utbl_chksum : 0xe619d30d) [ 255.217268][ T7843] chnl_net:caif_netlink_parms(): no params data found [ 255.256424][ T53] Bluetooth: hci0: command tx timeout [ 255.359481][ T7579] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 255.380640][ T7932] loop1: detected capacity change from 0 to 1764 [ 255.475313][ T7932] ISOFS: root inode is unusable. Disabling Rock Ridge and switching to Joliet. [ 255.487982][ T7932] ISOFS: unable to read i-node block [ 255.493389][ T7932] isofs_fill_super: get root inode failed [ 255.649116][ T7843] bridge0: port 1(bridge_slave_0) entered blocking state [ 255.687016][ T7843] bridge0: port 1(bridge_slave_0) entered disabled state [ 255.715061][ T7843] bridge_slave_0: entered allmulticast mode [ 255.729213][ T7843] bridge_slave_0: entered promiscuous mode [ 255.754788][ T7843] bridge0: port 2(bridge_slave_1) entered blocking state [ 255.763862][ T7843] bridge0: port 2(bridge_slave_1) entered disabled state [ 255.790020][ T7843] bridge_slave_1: entered allmulticast mode [ 255.801278][ T7843] bridge_slave_1: entered promiscuous mode [ 255.903092][ T5152] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 255.936137][ T5152] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 255.974014][ T7392] IPVS: stop unused estimator thread 0... [ 256.014254][ T7843] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 256.039752][ T7579] veth0_vlan: entered promiscuous mode [ 256.068821][ T7843] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 256.095604][ T958] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 256.114933][ T958] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 256.195215][ T7843] team0: Port device team_slave_0 added [ 256.226687][ T1245] ieee802154 phy0 wpan0: encryption failed: -22 [ 256.233051][ T1245] ieee802154 phy1 wpan1: encryption failed: -22 [ 256.254695][ T7579] veth1_vlan: entered promiscuous mode [ 256.287754][ T7843] team0: Port device team_slave_1 added [ 256.427211][ T7843] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 256.434206][ T7843] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 256.514870][ T7935] loop4: detected capacity change from 0 to 40427 [ 256.521718][ T7843] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 256.536913][ T7935] F2FS-fs (loop4): Invalid Fs Meta Ino: node(1) meta(2) root(0) [ 256.547530][ T7843] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 256.554666][ T7935] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock [ 256.569131][ T7843] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 256.599016][ T7843] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 256.615920][ T7935] F2FS-fs (loop4): invalid crc value [ 256.632366][ T7935] F2FS-fs (loop4): Found nat_bits in checkpoint [ 256.764309][ T7950] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.0'. [ 256.808980][ T7843] hsr_slave_0: entered promiscuous mode [ 256.822616][ T7843] hsr_slave_1: entered promiscuous mode [ 256.837911][ T7935] F2FS-fs (loop4): Try to recover 1th superblock, ret: 0 [ 256.862792][ T7843] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 256.865894][ T7935] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 256.880165][ T7843] Cannot create hsr debugfs directory [ 256.947725][ T7579] veth0_macvtap: entered promiscuous mode [ 256.973244][ T7579] veth1_macvtap: entered promiscuous mode [ 257.076900][ T5104] syz-executor.4: attempt to access beyond end of device [ 257.076900][ T5104] loop4: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 257.104679][ T7941] loop1: detected capacity change from 0 to 32768 [ 257.105847][ T29] audit: type=1800 audit(1717247937.709:626): pid=7955 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed(directio) comm="syz-executor.0" name="file1" dev="sda1" ino=1939 res=0 errno=0 [ 257.117117][ T5104] F2FS-fs (loop4): Stopped filesystem due to reason: 3 [ 257.141058][ T7941] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop1 (7:1) scanned by syz-executor.1 (7941) [ 257.185976][ T7941] BTRFS info (device loop1): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 257.196371][ T7941] BTRFS info (device loop1): using crc32c (crc32c-intel) checksum algorithm [ 257.205517][ T7941] BTRFS info (device loop1): using free-space-tree [ 257.249493][ T29] audit: type=1400 audit(1717247937.859:627): avc: denied { setattr } for pid=7954 comm="syz-executor.0" name="/" dev="fuse" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=chr_file permissive=1 [ 257.323384][ T7955] loop0: detected capacity change from 0 to 512 [ 257.336481][ T53] Bluetooth: hci0: command tx timeout [ 257.355331][ T7955] EXT4-fs (loop0): blocks per group (95) and clusters per group (32768) inconsistent [ 257.366015][ T7579] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 257.378207][ T29] audit: type=1400 audit(1717247937.969:628): avc: denied { mounton } for pid=7954 comm="syz-executor.0" path="/root/syzkaller-testdir2608790608/syzkaller.GaYxqb/4/file1" dev="fuse" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=chr_file permissive=1 [ 257.407918][ T7579] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 257.411862][ T7941] BTRFS info (device loop1): checking UUID tree [ 257.422762][ T7579] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 257.435751][ T7579] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 257.452561][ T7579] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 257.463377][ T7579] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 257.488070][ T7579] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 257.567911][ T29] audit: type=1400 audit(1717247938.179:629): avc: denied { sqpoll } for pid=7954 comm="syz-executor.0" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 257.673236][ T7579] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 257.685230][ T7579] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 257.711097][ T7579] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 257.736942][ T7579] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 257.755732][ T7579] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 257.767639][ T7579] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 257.782403][ T7579] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 257.803670][ T6876] BTRFS info (device loop1): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 257.841361][ T7579] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 257.859322][ T7579] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 257.895040][ T7579] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 257.905957][ T7579] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 258.399338][ T8] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 258.419358][ T29] audit: type=1400 audit(1717247939.029:630): avc: denied { read } for pid=7977 comm="syz-executor.1" name="mice" dev="devtmpfs" ino=832 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:mouse_device_t tclass=chr_file permissive=1 [ 258.428110][ T8] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 258.458291][ T29] audit: type=1400 audit(1717247939.069:631): avc: denied { open } for pid=7977 comm="syz-executor.1" path="/dev/input/mice" dev="devtmpfs" ino=832 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:mouse_device_t tclass=chr_file permissive=1 [ 258.669656][ T29] audit: type=1400 audit(1717247939.069:632): avc: denied { write } for pid=7977 comm="syz-executor.1" name="mice" dev="devtmpfs" ino=832 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:mouse_device_t tclass=chr_file permissive=1 [ 258.773276][ T45] kernel write not supported for file /input/mice (pid: 45 comm: kworker/1:1) [ 259.904747][ T7984] loop1: detected capacity change from 0 to 512 [ 259.913161][ T7984] EXT4-fs: Ignoring removed nobh option [ 259.923622][ T7984] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 259.957783][ T4862] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 259.965642][ T4862] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 259.988286][ T7984] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback. [ 260.009040][ T7843] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 260.016538][ T7984] ext4 filesystem being mounted at /root/syzkaller-testdir2879799982/syzkaller.1ab6iF/92/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 260.058912][ T7843] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 260.104124][ T7974] loop4: detected capacity change from 0 to 32768 [ 260.111742][ T7843] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 260.117590][ T7974] XFS: attr2 mount option is deprecated. [ 260.124148][ T7974] XFS: ikeep mount option is deprecated. [ 260.158051][ T7843] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 260.164859][ T29] audit: type=1400 audit(1717247940.779:633): avc: denied { create } for pid=7983 comm="syz-executor.1" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 260.185857][ T7974] XFS: noikeep mount option is deprecated. [ 260.269168][ T7974] XFS (loop4): Mounting V5 Filesystem a2f82aab-77f8-4286-afd4-a8f747a74bab [ 260.287791][ T7993] loop2: detected capacity change from 0 to 1024 [ 260.397013][ T7974] XFS (loop4): Ending clean mount [ 260.430175][ T7974] XFS (loop4): Quotacheck needed: Please wait. [ 260.507235][ T7974] XFS (loop4): Quotacheck: Done. [ 260.552738][ T29] audit: type=1400 audit(1717247941.169:634): avc: denied { setattr } for pid=7973 comm="syz-executor.4" path="/root/syzkaller-testdir1303640629/syzkaller.x3oI2p/240/file1" dev="loop4" ino=1056 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 260.558790][ T6876] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000d40000. [ 260.641381][ T5104] XFS (loop4): Unmounting Filesystem a2f82aab-77f8-4286-afd4-a8f747a74bab [ 260.659573][ T7976] loop0: detected capacity change from 0 to 40427 [ 260.671095][ T7843] 8021q: adding VLAN 0 to HW filter on device bond0 [ 260.750646][ T7976] F2FS-fs (loop0): Found nat_bits in checkpoint [ 260.793896][ T7843] 8021q: adding VLAN 0 to HW filter on device team0 [ 260.811915][ T8] bridge0: port 1(bridge_slave_0) entered blocking state [ 260.819166][ T8] bridge0: port 1(bridge_slave_0) entered forwarding state [ 260.845381][ T8] bridge0: port 2(bridge_slave_1) entered blocking state [ 260.852742][ T8] bridge0: port 2(bridge_slave_1) entered forwarding state [ 260.950062][ T8006] loop1: detected capacity change from 0 to 512 [ 260.982939][ T8006] EXT4-fs: Ignoring removed nobh option [ 261.002680][ T61] hfsplus: b-tree write err: -5, ino 4 [ 261.018707][ T8006] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 261.038602][ T7843] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 261.059591][ T8006] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback. [ 261.097907][ T8006] ext4 filesystem being mounted at /root/syzkaller-testdir2879799982/syzkaller.1ab6iF/93/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 261.657573][ T7843] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 261.706686][ T6876] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000d40000. [ 261.839359][ T7843] veth0_vlan: entered promiscuous mode [ 261.889176][ T7843] veth1_vlan: entered promiscuous mode [ 261.935372][ T8035] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.0'. [ 262.034221][ T7843] veth0_macvtap: entered promiscuous mode [ 262.062644][ T7843] veth1_macvtap: entered promiscuous mode [ 262.126027][ T45] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 262.153058][ T7843] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 262.167407][ T7843] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 262.181013][ T7843] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 262.211883][ T7843] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 262.235723][ T7843] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 262.250945][ T7843] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 262.262589][ T7843] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 262.273351][ T7843] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 262.295585][ T7843] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 262.353794][ T7843] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 262.366198][ T45] usb 3-1: Using ep0 maxpacket: 8 [ 262.381344][ T45] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 1536, setting to 1024 [ 262.383429][ T7843] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 262.434334][ T45] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 262.465525][ T45] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 262.481162][ T7843] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 262.500507][ T45] usb 3-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 262.535794][ T45] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 262.550441][ T7843] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 262.554985][ T45] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 262.600502][ T7843] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 262.663811][ T7843] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 262.714849][ T7843] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 262.726099][ T7843] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 262.840348][ T7843] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 262.881275][ T45] usb 3-1: GET_CAPABILITIES returned 0 [ 262.898949][ T45] usbtmc 3-1:16.0: can't read capabilities [ 263.057729][ T8048] loop0: detected capacity change from 0 to 1024 [ 263.070523][ T7843] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 263.104376][ T8048] syz-executor.0: attempt to access beyond end of device [ 263.104376][ T8048] loop0: rw=2057, sector=262, nr_sectors = 65274 limit=1024 [ 263.107834][ T7843] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 263.125099][ T8048] syz-executor.0: attempt to access beyond end of device [ 263.125099][ T8048] loop0: rw=1, sector=262, nr_sectors = 2048 limit=1024 [ 263.163408][ T5152] usb 3-1: USB disconnect, device number 6 [ 263.190015][ T8048] syz-executor.0: attempt to access beyond end of device [ 263.190015][ T8048] loop0: rw=1, sector=2310, nr_sectors = 2048 limit=1024 [ 263.209522][ T7843] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 263.244148][ T8048] syz-executor.0: attempt to access beyond end of device [ 263.244148][ T8048] loop0: rw=1, sector=4358, nr_sectors = 2048 limit=1024 [ 263.244752][ T7843] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 263.306239][ T8048] syz-executor.0: attempt to access beyond end of device [ 263.306239][ T8048] loop0: rw=1, sector=6406, nr_sectors = 2048 limit=1024 [ 263.335399][ T8048] syz-executor.0: attempt to access beyond end of device [ 263.335399][ T8048] loop0: rw=1, sector=8454, nr_sectors = 2048 limit=1024 [ 263.369753][ T8048] syz-executor.0: attempt to access beyond end of device [ 263.369753][ T8048] loop0: rw=1, sector=10502, nr_sectors = 2048 limit=1024 [ 263.397188][ T8048] syz-executor.0: attempt to access beyond end of device [ 263.397188][ T8048] loop0: rw=1, sector=12550, nr_sectors = 2048 limit=1024 [ 263.415391][ T8048] syz-executor.0: attempt to access beyond end of device [ 263.415391][ T8048] loop0: rw=1, sector=14598, nr_sectors = 2048 limit=1024 [ 263.432587][ T8048] syz-executor.0: attempt to access beyond end of device [ 263.432587][ T8048] loop0: rw=1, sector=16646, nr_sectors = 2048 limit=1024 [ 263.675209][ T5158] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 263.723105][ T5158] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 263.840275][ T5211] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 263.866808][ T5211] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 264.244873][ T8067] snd_dummy snd_dummy.0: control 0:0:0:syz0:0 is already present [ 264.725641][ T8077] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.4'. [ 264.772989][ T8079] loop0: detected capacity change from 0 to 256 [ 264.819176][ T8079] exFAT-fs (loop0): failed to load upcase table (idx : 0x000104d0, chksum : 0x60d18cac, utbl_chksum : 0xe619d30d) [ 264.964509][ T29] audit: type=1400 audit(1717247945.579:635): avc: denied { write } for pid=8082 comm="syz-executor.2" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 265.128998][ T29] audit: type=1400 audit(1717247945.729:636): avc: denied { getopt } for pid=8084 comm="syz-executor.4" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 265.514084][ T8095] loop2: detected capacity change from 0 to 512 [ 265.540704][ T8095] EXT4-fs: Ignoring removed nobh option [ 265.560970][ T29] audit: type=1400 audit(1717247946.179:637): avc: denied { create } for pid=8097 comm="syz-executor.3" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 265.620513][ T8095] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 265.648913][ T29] audit: type=1400 audit(1717247946.209:638): avc: denied { setopt } for pid=8097 comm="syz-executor.3" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 265.671091][ T29] audit: type=1400 audit(1717247946.219:639): avc: denied { connect } for pid=8097 comm="syz-executor.3" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 265.725023][ T8095] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback. [ 265.778654][ T8095] ext4 filesystem being mounted at /root/syzkaller-testdir805815681/syzkaller.Zknk0M/6/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 266.146992][ T45] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 266.297641][ T7579] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000d40000. [ 266.388857][ T45] usb 5-1: Using ep0 maxpacket: 8 [ 266.420469][ T45] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 266.505485][ T45] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 266.568553][ T45] usb 5-1: New USB device found, idVendor=17ef, idProduct=6047, bcdDevice= 0.00 [ 266.599813][ T8036] syz-executor.1 (8036): drop_caches: 1 [ 266.610605][ T45] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 266.671825][ T45] usb 5-1: config 0 descriptor?? [ 268.030867][ T45] lenovo 0003:17EF:6047.0004: hidraw0: USB HID v0.00 Device [HID 17ef:6047] on usb-dummy_hcd.4-1/input0 [ 268.046758][ T45] usb 5-1: USB disconnect, device number 7 [ 268.454230][ T8112] loop3: detected capacity change from 0 to 32768 [ 268.520636][ T29] audit: type=1400 audit(1717247949.139:640): avc: denied { shutdown } for pid=8140 comm="syz-executor.0" laddr=::ffff:172.20.20.32 lport=20000 faddr=::ffff:172.20.20.32 fport=20000 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 268.585524][ T8112] XFS (loop3): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 268.674062][ T29] audit: type=1400 audit(1717247949.289:641): avc: denied { read } for pid=8147 comm="syz-executor.2" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 268.898872][ T8112] XFS (loop3): Ending clean mount [ 269.007595][ T8112] XFS (loop3): Quotacheck needed: Please wait. [ 269.183040][ T8112] XFS (loop3): Quotacheck: Done. [ 269.258930][ T7843] XFS (loop3): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 271.323445][ T8150] loop4: detected capacity change from 0 to 32768 [ 271.420276][ T8150] XFS (loop4): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 271.579136][ T8150] XFS (loop4): Ending clean mount [ 271.623283][ T8150] XFS (loop4): Quotacheck needed: Please wait. [ 271.744325][ T8150] XFS (loop4): Quotacheck: Done. [ 271.762454][ T8161] syz-executor.0 (8161): drop_caches: 1 [ 271.780539][ T5157] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 271.883231][ T5104] XFS (loop4): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 271.896665][ T8198] loop2: detected capacity change from 0 to 8192 [ 272.025792][ T5157] usb 2-1: Using ep0 maxpacket: 8 [ 272.041356][ T5157] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 272.044328][ T8202] loop3: detected capacity change from 0 to 2048 [ 272.085801][ T5157] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 272.102981][ T5157] usb 2-1: New USB device found, idVendor=17ef, idProduct=6047, bcdDevice= 0.00 [ 272.103766][ T8202] EXT4-fs: Ignoring removed mblk_io_submit option [ 272.112684][ T5157] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 272.163068][ T5157] usb 2-1: config 0 descriptor?? [ 272.185071][ T8202] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 272.252106][ T29] audit: type=1400 audit(1717247952.869:642): avc: denied { unmount } for pid=7579 comm="syz-executor.2" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=filesystem permissive=1 [ 272.389221][ T8212] EXT4-fs error (device loop3): ext4_validate_block_bitmap:440: comm syz-executor.3: bg 0: block 234: padding at end of block bitmap is not set [ 272.477060][ T8212] EXT4-fs (loop3): Remounting filesystem read-only [ 272.559723][ T29] audit: type=1400 audit(1717247953.179:643): avc: denied { setopt } for pid=8213 comm="syz-executor.4" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 272.619574][ T7843] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 272.653998][ T5157] lenovo 0003:17EF:6047.0005: hidraw0: USB HID v0.00 Device [HID 17ef:6047] on usb-dummy_hcd.1-1/input0 [ 272.858755][ T5157] usb 2-1: USB disconnect, device number 4 [ 274.078487][ T8235] syz-executor.1 (8235): drop_caches: 1 [ 274.240395][ T8235] syz-executor.1 (8235): drop_caches: 1 [ 275.579870][ T8247] loop1: detected capacity change from 0 to 32768 [ 275.620798][ T8247] XFS (loop1): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 275.718067][ T8247] XFS (loop1): Ending clean mount [ 275.733725][ T8247] XFS (loop1): Quotacheck needed: Please wait. [ 275.821112][ T8247] XFS (loop1): Quotacheck: Done. [ 276.021659][ T6876] XFS (loop1): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 276.525334][ T8259] loop1: detected capacity change from 0 to 164 [ 276.829876][ T29] audit: type=1400 audit(1717247957.449:644): avc: denied { append } for pid=8263 comm="syz-executor.1" name="001" dev="devtmpfs" ino=711 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 277.185789][ T929] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 277.385789][ T929] usb 2-1: Using ep0 maxpacket: 8 [ 277.405813][ T929] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 277.425725][ T929] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 277.435515][ T929] usb 2-1: New USB device found, idVendor=17ef, idProduct=6047, bcdDevice= 0.00 [ 277.465713][ T929] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 277.477154][ T929] usb 2-1: config 0 descriptor?? [ 277.935294][ T929] lenovo 0003:17EF:6047.0006: hidraw0: USB HID v0.00 Device [HID 17ef:6047] on usb-dummy_hcd.1-1/input0 [ 278.158377][ T5158] usb 2-1: USB disconnect, device number 5 [ 302.937726][ T5117] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 302.949574][ T5110] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 302.958603][ T5117] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 302.967500][ T5110] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 302.967824][ T5117] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 302.977274][ T5110] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 302.991419][ T5117] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 302.993447][ T5110] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 303.006866][ T5110] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 303.007074][ T5117] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 303.014305][ T5110] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 303.028143][ T5117] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 303.146755][ T5110] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 303.163646][ T5110] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 303.173735][ T5110] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 303.185995][ T5110] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 303.196065][ T5110] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 303.203751][ T5110] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 304.177879][ T5110] Bluetooth: hci8: unexpected cc 0x0c03 length: 249 > 1 [ 304.189255][ T5110] Bluetooth: hci8: unexpected cc 0x1003 length: 249 > 9 [ 304.198470][ T5110] Bluetooth: hci8: unexpected cc 0x1001 length: 249 > 9 [ 304.210111][ T5110] Bluetooth: hci8: unexpected cc 0x0c23 length: 249 > 4 [ 304.225334][ T5110] Bluetooth: hci8: unexpected cc 0x0c25 length: 249 > 3 [ 304.233033][ T5110] Bluetooth: hci8: unexpected cc 0x0c38 length: 249 > 2 [ 305.096264][ T5110] Bluetooth: hci6: command tx timeout [ 305.103015][ T5110] Bluetooth: hci5: command tx timeout [ 305.255848][ T5110] Bluetooth: hci7: command tx timeout [ 306.295923][ T5110] Bluetooth: hci8: command tx timeout [ 307.176117][ T53] Bluetooth: hci5: command tx timeout [ 307.183735][ T5110] Bluetooth: hci6: command tx timeout [ 307.341895][ T5110] Bluetooth: hci7: command tx timeout [ 308.375795][ T5110] Bluetooth: hci8: command tx timeout [ 309.194128][ T53] Bluetooth: hci9: unexpected cc 0x0c03 length: 249 > 1 [ 309.204654][ T53] Bluetooth: hci9: unexpected cc 0x1003 length: 249 > 9 [ 309.214700][ T53] Bluetooth: hci9: unexpected cc 0x1001 length: 249 > 9 [ 309.225813][ T53] Bluetooth: hci9: unexpected cc 0x0c23 length: 249 > 4 [ 309.234750][ T53] Bluetooth: hci9: unexpected cc 0x0c25 length: 249 > 3 [ 309.242314][ T53] Bluetooth: hci9: unexpected cc 0x0c38 length: 249 > 2 [ 309.260129][ T5117] Bluetooth: hci5: command tx timeout [ 309.266963][ T53] Bluetooth: hci6: command tx timeout [ 309.419627][ T53] Bluetooth: hci7: command tx timeout [ 310.455930][ T53] Bluetooth: hci8: command tx timeout [ 311.335898][ T53] Bluetooth: hci9: command tx timeout [ 311.341941][ T5113] Bluetooth: hci5: command tx timeout [ 311.348831][ T5110] Bluetooth: hci6: command tx timeout [ 311.495994][ T53] Bluetooth: hci7: command tx timeout [ 312.541987][ T5113] Bluetooth: hci8: command tx timeout [ 313.416235][ T5113] Bluetooth: hci9: command tx timeout [ 315.496243][ T5113] Bluetooth: hci9: command tx timeout [ 317.584536][ T5113] Bluetooth: hci9: command tx timeout [ 317.662546][ T1245] ieee802154 phy0 wpan0: encryption failed: -22 [ 317.668989][ T1245] ieee802154 phy1 wpan1: encryption failed: -22 [ 355.583052][ T5117] Bluetooth: hci4: command 0x0406 tx timeout [ 355.590253][ T5117] Bluetooth: hci3: command 0x0406 tx timeout [ 368.297462][ T5113] Bluetooth: hci10: unexpected cc 0x0c03 length: 249 > 1 [ 368.308535][ T5113] Bluetooth: hci10: unexpected cc 0x1003 length: 249 > 9 [ 368.319446][ T5113] Bluetooth: hci10: unexpected cc 0x1001 length: 249 > 9 [ 368.346792][ T5113] Bluetooth: hci10: unexpected cc 0x0c23 length: 249 > 4 [ 368.357880][ T5113] Bluetooth: hci10: unexpected cc 0x0c25 length: 249 > 3 [ 368.371197][ T5113] Bluetooth: hci10: unexpected cc 0x0c38 length: 249 > 2 [ 368.424167][ T5117] Bluetooth: hci11: unexpected cc 0x0c03 length: 249 > 1 [ 368.440784][ T5110] Bluetooth: hci12: unexpected cc 0x0c03 length: 249 > 1 [ 368.452836][ T5110] Bluetooth: hci12: unexpected cc 0x1003 length: 249 > 9 [ 368.463720][ T5117] Bluetooth: hci12: unexpected cc 0x1001 length: 249 > 9 [ 368.471199][ T5110] Bluetooth: hci11: unexpected cc 0x1003 length: 249 > 9 [ 368.480112][ T5110] Bluetooth: hci11: unexpected cc 0x1001 length: 249 > 9 [ 368.493298][ T5110] Bluetooth: hci11: unexpected cc 0x0c23 length: 249 > 4 [ 368.501132][ T5117] Bluetooth: hci12: unexpected cc 0x0c23 length: 249 > 4 [ 368.508525][ T5110] Bluetooth: hci11: unexpected cc 0x0c25 length: 249 > 3 [ 368.530660][ T5110] Bluetooth: hci11: unexpected cc 0x0c38 length: 249 > 2 [ 368.533669][ T5117] Bluetooth: hci12: unexpected cc 0x0c25 length: 249 > 3 [ 368.549962][ T5117] Bluetooth: hci12: unexpected cc 0x0c38 length: 249 > 2 [ 369.163244][ T53] Bluetooth: hci13: unexpected cc 0x0c03 length: 249 > 1 [ 369.175024][ T53] Bluetooth: hci13: unexpected cc 0x1003 length: 249 > 9 [ 369.201449][ T53] Bluetooth: hci13: unexpected cc 0x1001 length: 249 > 9 [ 369.211250][ T53] Bluetooth: hci13: unexpected cc 0x0c23 length: 249 > 4 [ 369.222388][ T53] Bluetooth: hci13: unexpected cc 0x0c25 length: 249 > 3 [ 369.231086][ T53] Bluetooth: hci13: unexpected cc 0x0c38 length: 249 > 2 [ 370.455860][ T5117] Bluetooth: hci10: command tx timeout [ 370.615944][ T53] Bluetooth: hci11: command tx timeout [ 370.625203][ T5117] Bluetooth: hci12: command tx timeout [ 371.345979][ T5117] Bluetooth: hci13: command tx timeout [ 372.536026][ T5117] Bluetooth: hci10: command tx timeout [ 372.695825][ T53] Bluetooth: hci11: command tx timeout [ 372.702785][ T5117] Bluetooth: hci12: command tx timeout [ 373.416150][ T5117] Bluetooth: hci13: command tx timeout [ 374.298061][ T5110] Bluetooth: hci14: unexpected cc 0x0c03 length: 249 > 1 [ 374.310006][ T5110] Bluetooth: hci14: unexpected cc 0x1003 length: 249 > 9 [ 374.325039][ T5110] Bluetooth: hci14: unexpected cc 0x1001 length: 249 > 9 [ 374.341149][ T5110] Bluetooth: hci14: unexpected cc 0x0c23 length: 249 > 4 [ 374.349576][ T5110] Bluetooth: hci14: unexpected cc 0x0c25 length: 249 > 3 [ 374.359173][ T5110] Bluetooth: hci14: unexpected cc 0x0c38 length: 249 > 2 [ 374.616065][ T5117] Bluetooth: hci10: command tx timeout [ 374.775909][ T5110] Bluetooth: hci11: command tx timeout [ 374.782617][ T5117] Bluetooth: hci12: command tx timeout [ 375.496022][ T5117] Bluetooth: hci13: command tx timeout [ 376.055917][ T5117] Bluetooth: hci0: command 0x0406 tx timeout [ 376.456301][ T53] Bluetooth: hci14: command tx timeout [ 376.700137][ T53] Bluetooth: hci10: command tx timeout [ 376.855873][ T53] Bluetooth: hci12: command tx timeout [ 376.861408][ T53] Bluetooth: hci11: command tx timeout [ 377.575912][ T53] Bluetooth: hci13: command tx timeout [ 378.535988][ T53] Bluetooth: hci14: command tx timeout [ 379.106683][ T1245] ieee802154 phy0 wpan0: encryption failed: -22 [ 379.113038][ T1245] ieee802154 phy1 wpan1: encryption failed: -22 [ 380.615993][ T53] Bluetooth: hci14: command tx timeout [ 382.696152][ T53] Bluetooth: hci14: command tx timeout [ 422.615947][ T30] INFO: task syz-executor.4:8213 blocked for more than 143 seconds. [ 422.623975][ T30] Not tainted 6.10.0-rc1-syzkaller-00267-gcc8ed4d0a848 #0 [ 422.635657][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 422.644438][ T30] task:syz-executor.4 state:D stack:25600 pid:8213 tgid:8213 ppid:5104 flags:0x00000006 2024/06/01 13:21:43 SYZFATAL: failed to recv *flatrpc.HostMessageRaw: EOF [ 422.663231][ T30] Call Trace: [ 422.680431][ T30] [ 422.683400][ T30] __schedule+0xf15/0x5d00 [ 422.707230][ T30] ? __pfx___lock_acquire+0x10/0x10 [ 422.712502][ T30] ? __pfx___schedule+0x10/0x10 [ 422.723586][ T30] ? schedule+0x298/0x350 [ 422.728073][ T30] ? __pfx_lock_release+0x10/0x10 [ 422.733126][ T30] ? __mutex_lock+0x5b3/0x9c0 [ 422.746177][ T30] ? __mutex_trylock_common+0x78/0x250 [ 422.751691][ T30] schedule+0xe7/0x350 [ 422.756012][ T30] schedule_preempt_disabled+0x13/0x30 [ 422.761503][ T30] __mutex_lock+0x5b8/0x9c0 [ 422.776002][ T30] ? lock_acquire+0x1b1/0x560 [ 422.780735][ T30] ? raw_release+0x1c6/0xae0 [ 422.785352][ T30] ? __pfx___mutex_lock+0x10/0x10 [ 422.793073][ T30] ? raw_release+0x1c1/0xae0 [ 422.805673][ T30] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 422.811094][ T30] ? raw_release+0x1c6/0xae0 [ 422.823026][ T30] raw_release+0x1c6/0xae0 [ 422.827912][ T30] __sock_release+0xb0/0x270 [ 422.832536][ T30] ? __pfx_sock_close+0x10/0x10 [ 422.837687][ T30] sock_close+0x1c/0x30 [ 422.841869][ T30] __fput+0x408/0xbb0 [ 422.851881][ T30] __fput_sync+0x47/0x50 [ 422.857168][ T30] __x64_sys_close+0x86/0x100 [ 422.861888][ T30] do_syscall_64+0xcd/0x250 [ 422.872732][ T30] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 422.881750][ T30] RIP: 0033:0x7ff0ba87bdda [ 422.892482][ T30] RSP: 002b:00007ffda1f726b0 EFLAGS: 00000293 ORIG_RAX: 0000000000000003 [ 422.903698][ T30] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 00007ff0ba87bdda [ 422.920653][ T30] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000003 [ 422.930206][ T30] RBP: ffffffffffffffff R08: 00007ff0ba800000 R09: 0000000000000001 [ 422.938836][ T30] R10: 0000000000000001 R11: 0000000000000293 R12: 00007ff0ba9b3fa0 [ 422.952948][ T30] R13: 00007ff0ba9b3fac R14: 0000000000000032 R15: 00007ff0ba9b59a0 [ 422.960996][ T30] [ 422.964100][ T30] INFO: task syz-executor.2:8216 blocked for more than 143 seconds. [ 422.973731][ T30] Not tainted 6.10.0-rc1-syzkaller-00267-gcc8ed4d0a848 #0 [ 422.995845][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 423.031638][ T30] task:syz-executor.2 state:D stack:29232 pid:8216 tgid:8215 ppid:7579 flags:0x00000006 [ 423.055735][ T30] Call Trace: [ 423.059049][ T30] [ 423.061994][ T30] __schedule+0xf15/0x5d00 [ 423.085862][ T30] ? __pfx___lock_acquire+0x10/0x10 [ 423.091124][ T30] ? __pfx___lock_acquire+0x10/0x10 [ 423.115808][ T30] ? __pfx___schedule+0x10/0x10 [ 423.120731][ T30] ? schedule+0x298/0x350 [ 423.125091][ T30] ? __pfx_lock_release+0x10/0x10 [ 423.134660][ T30] ? __mutex_lock+0x5b3/0x9c0 [ 423.139577][ T30] ? __mutex_trylock_common+0x78/0x250 [ 423.145077][ T30] schedule+0xe7/0x350 [ 423.150719][ T30] schedule_preempt_disabled+0x13/0x30 [ 423.156390][ T30] __mutex_lock+0x5b8/0x9c0 [ 423.160945][ T30] ? do_ipv6_setsockopt+0x2162/0x47b0 [ 423.166539][ T30] ? __pfx___mutex_lock+0x10/0x10 [ 423.171603][ T30] ? __might_fault+0xe3/0x190 [ 423.176598][ T30] ? do_ipv6_setsockopt+0x2162/0x47b0 [ 423.182008][ T30] ? rtnl_lock+0x9/0x20 [