last executing test programs: 19.497645591s ago: executing program 2: r0 = syz_open_dev$video4linux(&(0x7f0000000000), 0x0, 0x0) ioctl$F2FS_IOC_RESERVE_COMPRESS_BLOCKS(r0, 0x541b, 0x0) 9.724225188s ago: executing program 2: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) write$UHID_CREATE2(r0, &(0x7f0000000300)=ANY=[], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup(r1) setsockopt$IPT_SO_SET_REPLACE(r2, 0x4000000000000, 0x60, &(0x7f0000000000)=@raw={'raw\x00', 0xe501, 0x3, 0x228, 0x0, 0x6affffff, 0x3403000b, 0x0, 0x7, 0x3f8, 0x230, 0x230, 0x3f8, 0x223, 0x3, 0x0, {[{{@ip={@remote, @local, 0x0, 0x0, 'veth1_macvtap\x00', 'veth1_to_team\x00'}, 0x0, 0x70, 0xb8, 0x0, {0x1000000}}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'netbios-ns\x00'}}}, {{@uncond, 0x0, 0x70, 0xd8}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, 'syz0\x00', 'syz1\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x288) 9.409033478s ago: executing program 2: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ptrace$ARCH_SHSTK_LOCK(0x1e, 0x0, 0x0, 0x5003) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000880)=@base={0x9, 0x6, 0x4, 0x7fc}, 0x48) syz_fuse_handle_req(0xffffffffffffffff, &(0x7f00000003c0)="057e30aae10df4f97559054b9a301ecfe91b645115e1421774006df60cb393573839b0078ce169ec2fde0afea66b5bbefa9d4f3cd8c2458336ceb1f0efe647d6d7b1cdbd12c9b8e3a822cbd51494bf79a1dbe5c22338ce37ed467a1d3d616564cbb81faa2e935b2697c12efb0ed141fa2eaad4747725c4bf20f8975e402b03eb77d1aa3f10f512397b5037b1b4cd4b7c08c03dc5e52a066e5982969fa044125ae251f46c26e2536cc8b77e8edb251378be4beedfb8dca0d449123f57677ca3da5bdebf91b195f1a5d49d7c292f20f58d490de36d8ee0e8a86bd04c3165549465cbee7891fc747d7def370ce644db894b56bd53af0d0e261bcfa6bf72a684dafc5bcafe07ece74cbd1d5fa32716dd03f7acd4f32d935438c91e033beaf49e3963e13d05e7a8334a858639636799f04a9033193e7d18a2a4b20bcc96811bb5efe476db70a76b7456ac4e71f3e89c00da0c7761c188570c7902bf2fee1be273be8a9f7a2d7508ef2188d3ba1db4fa9d1533d2f2a288cdfe3b0c50908d56ba69e81386e7e979e9d7ff78685ffb8de6baea2451762736a2bbafa11d541790b0564aef9b0b80fa24832090b84341a9fdf712d3296f911020f8021eda8130befaaab01cbe91dfc5768e6ff31ec50dd88596832a9f5fd4f558d367f40e454d3c97ad16a7f30b93629ee2def77b99f8a17c157529b0782fd847a4c75a2302ca96bbdcff660c2cca753e1a8c60dbcfb319a1594565a2e15bb6124316e196e3cafaf1a29eef84a0908d1dc80af7e333c65736699f1254addf2ab582f5c87c4f6ca234d7ca9673dc29444044b95abdaea958274e39aeb163ee2d05bc2ade5c33a0466e14fbdf8aa70ca2964c06ee5bc57b894b0143a7a503cc43574a07958940b029678df44d6c82fa2e6937ea6aeb5b8f33c21628e3b0d623c23c2e5a3546194fea742d90c1d61f343a005b9e58c3e8292b256fd0ecca81cda433f3bb0ed633607f0b635cdd8b4919bfa37c1e99df087d3f8f3ba5dec7930657eb3a4d8febb5234e048881fbfc499fe5eb6a0ce34546f7010ae2291e6731d0798ca451387a123998e68f6f577ba4e556bb9a119011a191a6bbcf55beb1fb0b8252deeed5721b271b964534a04462720c4c03e8ea7f120cfa1be630e7fc680d1f6e067075c72f642babcacf6b00cd3fdb9f3200e4ff8935b17ebe222053c78c3752666088017c2150dd014b9578af6adb15527a483eff5bb623710ca7b37ed49ff7cf1525f296af6f27846524e4aaea7476a2d08dceeca84a1ab11e2767abff12d10deaf63681dcabe9b1fb9ebe207d8e3793dba9a73a02ebea4e3a072397a88c47795d5e88b2040c9fe3f96f66f8f7d593547c8fc8f4e75a1c20962ecf2dd1e7bddf896f2a6c5f37a8784e2bc5b10cef2feab3b6eee7430908eeadd372248041a09b0c29385cd7a75754d2c429e72bf5fdac34097bbbbb3790f86399c60cb5054fbeb8eb1241608b506beb135091c18110c1d10d9a80f4adb11a6fd3001957cae0b4f8f730cc4fa4a7328e23f390caab014cfeec0ebfd0e14021f47fe330a68680678d23e7ca1ff18e7e242f4c1e3cca51dec73c58b596c2a92267ee76d3657c1e2b34102b09fa4c59c2619148440bf26802c6f858b8eee6d8c697bad2c4d5a0f76c6a4cdd3b8fdc21e447920491ef40578b68a7a5dfda04fa235fac01ad4e824b627137dc48807100e52ec5ae2f3a3fd84d68b824033b4f0ee28a9e72333b4e209ae905d0781e4fe8116e03b1ca5c3b1ea84974cabaa0214ed15bfe01e974491e8a20f9d03ed1b73799b083f3a65e809c3ff3cf126288fc1627409d46f78b5fe8b8ba0b3ddc3ac79aecd6eee2e0cc59826e5798f48f80f0c7f549b3a656e9acbc5e51bdc3becef93533166c1d9ffe4335ec973d3d27ce5987d150f554c4095650528578fe4858b670b0786f23c886612191f89ec57970dbc0e33cd62b57a08fa940b339577fd12d07dec2ac50e9e0b27f0716b3233803153389a95df956637af8d9778e27bce49ab0a832978712a074d3f7516ad512ed0d9b43049b5990c841a7b7146a24c62fb70645b8d85b6c8863d5c6aab03638ffa4e30c8de24383cf320eee735a4fd37262d473076f495da8b2f0f028b8f178c238010738d6afb1dc2e48089e80f6a7658ad3496f1a1f7f78abdcf934c733d22abb0671a0d41b9b33a5faf99d7b82166e27df0f97a7953dcc1fb364478200253757e8311ba61cb4c78a380cdd820553c7296816210f64b34619966f1540a407c8d6e8e30788909de19ede4116d09a14ce26ad59957add80b90602855c0134ba7fe8afd4493f7cd9ced61fda7d0ae02505c046acf68d68ecd9b1507a4d4eba4c2c834777b2c3c5a8b3c06677fe468072dcab48c1ac9deec30265c7f6c5864df89e25bba52715c82e9921db601b3935f5047b8cc07351b9965b1a1f6ef36c1fba89d9d96e332eacc1e8a78e09d7d6ba30845866449ed5264f763735d4e7cc133dba4b296b2dd9331efea01e5b3d05f38055e41c49993d679ef133b9b1af435fd0ac5fad33f571c76d02c40d4e301110b4442aa134364f0456da0cf362b2c27ebd667c0969ae09dad18becba9d6918fb1e741f685735cc7078f0e6328181a83da67516fac31522f9d9fc64a4b769e57e76bfff6f9867fa2fee1e7dddd11128322210e44eeef6db7269dfa1bfbd9099dd6f8219d585c22c20483251447772719a6115ccb690609de352989610a138110c884562b65de3cf63c3ebe9adfeb53c6e4ecc637c98b60161f71952b84c6fc4cea6af0ed533144bde4f8fbab2d3ffe0b2a5d0c55ec9979ea85a25045ad3a84becf0e891b89c1a83178d7368aea4bdfa0ebd46b8e110a2972c8ac96e10ac630e89f8d76bf35b03b5ecd393d1986fc61318e08ef02721e5f2cd2fe098ebcd1bd30a8f87b2a5650b51dd50d0d78ab7fe66490f5827372f1779d3d389e9fa66bd0296f0203af010d8f76783837cdde2555a90be577626a12de47d4da638efd0017750a230485f6ade34a27284d85dd87f9db8a832c571106d8296629418777b4d933fa049f0f4e5958c193e889305074091be14c66a4bf02cdfe1e8d26a5d21fa78c5628a7ee3d7a0c550296b2f0625e2dd18d45f2d45bee6746d4462c92bc3cf50503c7479bd121393821afe1cd7144ea37f4e8e5ee21f739024ad25af9430dee006b76617725556ff8a820b767fa821629819732f086a5fdf2ccb4edae0aceb3d6dea698e798ead905a2eef9065d633b007271e93101a71cbe385f56e32b3a8fb081c5c1ab09b729f89294a0007df3a3b8e93686020d993b812c6f85fe1618db897cd67be6cd5053dc8490bbebee133d140503c4aa51eea0c156523a1d81ae849dbe5a273bfc0de94836f8160ea9f146147fc02dd7b55dca6a2a43692268ee98f51fcd2d3faa76071d9716e877b2a3dcb51a51d5359a2ee705da52b43306f1f3caf33342fc281bc9c58d1ce05ecdeca371e3a788542f8fa999e4d8e10e66f0b6053d7d4cfc6acb815628bc2409b3dec01726121c267b3ee85fd61bbbdda68ae2c13026863e4a54b93d956fe692707a179411c841ca7d2f33a5223181b18b7ba2eebdd7c2a8dec3ac2a317b5fbd996e8598c394ee627308f0e887480a8dcd59b0256b636f4c62566501a733fa74232945ba1d9e2bae347391bf9ae2da4d3af2b262b772421fd3a5cab46862ea6049f5c9c76dd8549ce0e6c31c792b81b6b21f0bcca18bb2fa6a9d4d6e0a837bb119e2e002a69d6ca95a4b2acc463076c2e05731ef0cfaea84387a6baf6737cc14a25f5329ea924090311213344625a69ee382dd4bc72e00e63329956f3e021092585c9affa06a95bd0ef653ae9ff0abed5ee561ada4f83d8ef202d9c0b2225ebe8660cc408859d45e0332f4f78f6a339bce9d12ca2bc5116a8fd4007c485f5c1c41af96c41d96db35411842d7babc05c8b228066dccb9b67f348974363be521e41fa94d2034a0bc1e87360a80606e1e1bfa8e6399601b30bf93ac41129869158bc2b791b50e51519133ab58afd4023d4d721129b1307f054103a47c49e0524ac4df511c3409fa62d8b5c1a897794600f53efdcc987e06bffd77c9fc75fb7221ef29ed2f7e3e8abcb4a1875b85bd5176a6fba9a361d8684876508443bd50e630f4c684002b15930cf81d740b880eed25d22d8de8c00066790df084fea7c5021184a210a6d24f9bc862c4e3eafbb1782fa240ecfa5959d7a681bae84e8a96a5ff45dea4f9e16dd2cff2dccc6cf4042b44b7ad1f55dc1db5998ed40a409c0e67e1e64fab423d2c00fabb8976d9dacf0c82530e356a99f75082f3411adddfe4ab1ad3b55599fa15450dd5feee23591f1ce398e4c5ae8aad71ad26ea189c333c8467d1eaba9589bb8c41bbfe8c0c173e5446bc06b578c1db849fabe5fcd8fe0fca94bdc799b53b897249826037499e8b6213d640724fda1bcc9341ac61fbea02c8f39a53c496902d5c7922f678a273cdf5ffff38ea028ae19dc72f0b0688f2b9b7d5a9c04153c10ff4168cf9f243dea03b336be778f6c79d67a2d0ade82863eaf95d6fc7f745569864f369f4b39177c356c8c393bded485df28622f01251e58f3d39498520ff90e6c670f0dce5b494cb1d78dfad108406dc5857086d386bd42bd03fe716f049407e5e55caa0e73e96c1a4f6d5791ce7195b2ce72de52ed617ecefaeeabfa9350af49d1d91f9a4b97dc0808869b916f34ee242c40fe8c8aee57b6ddb69f9a10636e481dfa059ef001bad7020266f0d74b14edce6c18ffef854768a60885bad798658a6b9d0b438c483ba159346d5ce0771f53ff18e0bd47d8583bd56237f8da2747ac7eb2a87b6e26c4820d4fe18b76e06bb6e0c0cdf478b4aecd381c2a6ca9f10ec433f0aca63a66d04f70557baf9f2844005351a21664c2430fb0002cd03bcf0b2004068a2567f91a9fbee8c6d948fb35d48527b23e1398ce9f535e2b0b33c2bc31ab737ba4b980f46f5d424e33892c8093f3cd18510a3157afc023f63ad3ba999e950747c78c06ab141a26d74ffc049a6f76c465f9f9f03a8d339a8e61fef26a5239fbc11c01a87800c81efd7b9f28ee2ab2ed88a383f5013bfd6671ea3086121b235a0cc45ccb300c02588895f8d13ec7e00a3aaaa8b0e739f666fd1b13a90b23998704859c9c76108ed7ecdc63770e6ebaa0aeb9208b92ec4e948ac7fc81cc6f305f06c2f2d8c9267463af92e185ff627eed54313fa2ee0bff2cfa8be411982fd19fa88db5ec99f238f88782f8c7a957bef14f79351b63799a4cce160357c068987a5516b04c79644c140850cddc8bd5541fcca9e30826aad864240f434bd1fc67b58e3d664f782e9e46edcb34e2db98a39c23e334e51c71c9fa466470992cc1fbc36c3c8ff4340be67f9b85a74c9114cb9fe5ca4dcbb641ea17a54ba4658aeaa515109e117625a6196dd66d3584d293b468fce63b5a9c4b9461700c74ae955539bfbbe3eccfa7d9c9f737792a9d4b978baa2e92819e88340b73c88c2900b723248b18ae9414cb37a64ef8cb8ca85cda9677d9f1e71a6b70fe3ad17f2d13c1df48d93bfa50fd939a72ea26f9fbeaa6f8af2eec91b04a8fa7dc14fec0f54fcd1c5c848b4432f979f10e661cd2d7f8ff669ce99f9813fc5440fbbeb35f1a5e5115f5ca35dcc270bdbcae07a9ae8e22aabf8178379dee08874ec7840de27815890a88fc9a3bcfa88a33f9baef9af0ae01b2bd34a907f1151cb14bc8b396bc43a60f884f425e4a04348cc645aae68db49980139ddad0fed303e40b124fd654b36c961a56c44cc3686a7529b1f1ee47da3a0f1158542337df15780444790a2ff1b57e062f0db66730c9f98de395f939f44188225211c514447f67fcbf320a34c43ce09ed272bb992db3a35ae2c3c491c36f2de88984129fcea1ffd235aff7bef7fa95d65894db9a5f1b348efcb571a81b3d73ccd07cbef052389001e4d456800e05ca53bcf3485ce05791ff65a9f7913416ae26972f34f51a3270580b81307ce31c98eda06f3b35890ce317e79a16d728cd0bb6a3835667555c0c5138cfa5305a91db1f873b2a75b82ffcb27616ee67777708f7dc2ed9ddbeb38a60f446d3ac88ded25265c25ef38b0755a9d34bab5e669b6501d8c9787aae7eced9945cad3d4d1c32fa68b48a1d773750f814631db3e088c1b5e7ffa854ea1343d94ec1343918d7a1c5a095bb72b00eb3bff210aeec0b8a581a2a13429b83a193f4d447059265b63c4b8f8ea1b9494f65e79844d956c5d80780849dc086506e9eba002e682a1bae1543f8289588c574bb6ca9a2e57b908aaffed23ecf3536abaf96fe08291f3d70773288b4698e972b0187385dfff4cba59175814e75e7e5146205c7f2d2f749583b393f46c448c152d8be50d60ed8d8bdb30fc7925656a0f90b1de967c729980815e5f19ed453fbefcff67832cb90d753410a0b18eb7504600b11b0360c3d3594d48d832160d357afc1f17dc71dccabef7bbcf1fdd55b48cb02135c32650ab07b902f36b48be9376b2dd68343eacfe80d9dab3205a393a4c6ffd405f6db323dea11be4f22ce50df1e0cfec9e9b1e23acb94d66ea787d08f615a7c7288cdf1921a13a85d885e47cf1067d89ebad5b92ce5c9da255f8d74bd2d5b78366f998cc35bf35e45d06128f1c5984fabee7542642bbf6d981b60759d3e7900e5b3d1d7310f90df0c88a600ff2f39932bf7411e61c692c9444dc9ae0dff28c0b94292c430ac4464e83ce8a29b886f45c98b8396667740c5be51e592eac0250d6e479505d36e930ca3a32cb671d58707d25b10e2660cd5e661b08e268c8bf1b3cbceb2d995a2a6fdfe5475cccc965f71baa7c84054e3bb6cbcb7167b06c708cd72ad4301e943dd1b2b2c325f682be3eaae730a8ed8bc3134b28d1ce04543bc66a529744561c42d25e65c7b5cc2a17875ebf35e53aa46e1edec29ff8d046a7e01459d9639c10d1df998cd9a12d7e50b2dc71ee7338cf71beb72d5020dc69eeafc354bf822d65ee0328eb07d04ac0d266fdb53227a158411da5ded254b3c359ee710e0278e1a06f06002538e108450fd6b11949fdc618a29baf34f232aa192230ddb318aa6d59d122257e50713fe73e6c0059399589c382dc901a8c3381139436f7331b69f457bbb38ed54daaa07a52cceb053c32690836c664b73d86261216b8610fc7b4d53dd3e5d9bcb3e25528e132911cac37e7f2618274c733b5ae02f9c27638d9e11988f1dfbb281ffd8cddf8558a481861cbe9d53a4ad8282d3587449cd51759ca397eda122d286e117d01539359870b94c98a3ce383ed1d280bcceb228acf73193e87fd3650e4dfd563cc55bfbc8626a41293cc90ef76e28e2dedaf968602d2997ae1c2752a0febe3a78f3756d40201ae13074091238324422caabe22c66b7866065264261fc2c3e0569493468d1c1c36259aedd5f078a231e72decd70f4de8532f6753287435296f33a096bc1c8b0ebb68c9f783881e45ac54159ec1c2f9e1f5cb48f96729a62d1b4fdaa89ef5de8741bca04e953534dc977e881a61281812af435206378eff173d7929ab4967e511bdc14e6a783ab647a4c257a4fcd6ba38ef32bc48a00643416d7e34f7465b3e6240589d854db4d9714e998f2edf3a03986598a52aaf647d938f4a8e07c1c29615803af6cd403d261ad6da3c1c804034b4a4eef3ea1cc8db39d9e171b3f6dd074388577a4eb901c25c8031e4592cea80b6354850657f53b2acd910ec2c5a7db6abb0153e051dadfbcdf047e35591b96b5657ca55d99ef6fb48e07c34321cd20c40b30a646132f8afcb9426fe84a790567fb847076a8762ca29cfb037e0c948edc12122a1160a55d465f5c912406a10dc0d3c1156cd207e9ffe906d267c9c870521934e1c56af460c0ad0dea9c929acf85768e22bb65eca6e25e4ec8e6edb7a6215e8c7e5fdb56c7131b156ab6a78fc808f8f17a2708ff68b37778c00b3b546004fb2b2c588d8ca8276d281026bfe896698569814410422f27421b8fc5c09d47635f17ddf6b9f56a203c991514678c18a4afabe1eeca6fce1187fffcb6ebdacfc6cac9750766ed40c80e7eceb342a3fa6f86d014949f9d111bfd96e2a39d364f2e2722f2d9ab0577befe26055890161d780e52eff4022461c1d3b019b86af28c4f02fd1f7496d8c141344ad5756bcdc45158f3af7aac227c8853f607cae412db6fa924c039859fe455857bd5fde66cc1b773c12f516401a31c80d750079247c128a103361e7f0a392d21b4b1b594307ff6b37e5a242666209ec517561e04645b92e7cf3cff1a6c76c900d12d9556e2962c535401b1e61fa85e06551ed678703fb3bf8590f2608ae3c278b8d1ac286af38061afbbc3cb27ee7adc6ad299151cd00a84506e6a97648ff99f2a9d35d8421e71589437406fa8e6def8ce34c9abe5de3481c492887176d4485dac794b84567d5ebaf68d0007cb2256a0f1ce4318f6891f750fa9696fed3525059688cf973e70d688b1759cd0f3dfb0b2a7078174b978767cbdbfc3f7d5850e2f7772e2bd6e3ed69ef13cc141238b5ee04b6615e33c42fcd6cf979a0ac848458b713b9a988c1e3fc32f2a182fc0cab2e6933e9aa5c2d77db8c6a1802b43bd8220ff0ca92229fc26a44761d00eeebec834e5f7d382b4f58a2759c56e53b163dae034ffa1970acc57165746e575470e13c4044f392ae4bea93e7d666256436507bb987a247785301274d4f262f94989cdc94b209b7499bd0cb4437525b72be79c87c6076533e4a14799a60bd3563d46ee4767108bed7e637cfed6f3139637bb01f36385dc5873eed726fbec9a87da294cc11db8b49fe45b798ae74e1a8cb0f2907eb0178d2baf5f0f88f654baab9f147741945c496ddea1cfed65a82e913a131c4ac7bb6f0d8d5d28225dab8a33c6e60c0d2b2d5dbd8c35089f13f9a2ae81ec9addaefea9b8ddabc8cdeb6437381ce346db6e14d9d1e8bb4662b508d61da77fc8d9ebebceb1c23be5d0a7bba4a48c0591333ab7779bae78ff23c4bbf8a8cf30f3120a5b63a047064d7ed7d37191cf39b6d1e8ffe3b47379767bd691cb855a9c938e9a0235a5ec9c316a6dceca63fa5fe6df0b9f0d6b38add216aaf2726d3377ab827b00b4cbf490708a0f679b8cd7caadb3dee40cc98f778917d6a6263fcc0747bf75fd676d84abb7d10087da323f95c2571139fd4c9826ad5db6ee4c246b9da20592cae11f9264bd2945aa1a427b2acefb514a2daafbbae35ff761eb1e3b98b4a1dfca348b8c4ff96325a618d677180ceb7e916654ecc2deecb4e61d01080f44b98776b1b43aebeffe2c14006dd1d78c8babf1179f42fd20d87654d3246d41e9dc633eac1741be44f8d751d8c9fd57316fe06d60872939b7a2906bb27a299a3408a51d74e5d98417f05f85fc1b332e103e79203e9fe344dc1d1572de39d914c5270c839870d2b33da5a6efc08c4f0c8227cc35a7f77c6a55f80ceef90e217c80e5ecb4c236685f5219787b01612cfbac90794e8269c07fb7ca4f7dba4defb2aae2b37f7b1696e78de15dbb1b6d4ee0cc4c0fae274b2c2de9343862de1d9847515ad235b1837daa9b814f19e895ae3966ed262e3e7add9f19009e6b61462917b29502b67e124c43538a6bcab7296529e01bb26ab8b3ef094ed057383c4f92790b6f705ae9d943c4e8dad84f6ef82b54d062713c16960fb475d74d46a1b16062563da3391cc6ff5185162c31ff7339e4837e38adab8ab911abaaa006e313dd19a1f92b4f7bede4525b154e1b9f796136a85f3602da011ae2232be902347e08ce0bbf3d23d91c4aac11c8824caafa1d1ff0343ce655802c1915f3ae7c0c670b18e56e139be66a33613afcb3b1928613b3afba9d635070af678216d57023d1911f0eb7ebddefc96f0efd8e9dc10e8a87a68393e19733ef900c6264722940750ae16f664e445414e85e98570303c6d87d7f265cfae0a1e9314fc14674c2871c0d59bbe2eddaf9330a4e2a28673af73910d6cb90790f800e89d55a2930910a8430ade9551819d83d5ea6da4e58326b7ce555d01da86ea78200f0219ec92473da95cd5a632c525ca9fbcddebb8168881cdb2f5da787d0e31881e2b17d78184f3a0bed8662486d3937dab275d050b9dd5a2ce904208a91a467afc33e10fb6c1ca788a5ef30d6e8b615ec0ae1503fea7006569559b7b155c31b196b85881c5671173c06fc5373e9fd973e7111ed45874609bf3c88c6db732210a3ea04cb68662bbc2048bb55d811482af5c658e29bd18c57ffa25e88d7297cd20d4c2b13007cfae89f4dcd90177a0806a2ceb2095333b58f828c093b9bf63cd07e3d56a446fd12e755fd651211bc160948836939c17623b317b9e935307044bab2c11879a62288e7ecbbb97f10f52516f517b7b8e44cff5964fdfaf8044065056b48db13b1365004c336afa3535af1242c9b7271b8b1ba2213fcbb80926bcd394815cd7c27e3aeb2348dc45f5e06e32f5bd56d1c472f41b564ec0939cd012028412883cc098d086fd43858747b746be72b979d175f6a6447fc5908616dec7fc6c962e12e96e09bd068acd2fcf0ce1cc26d9f82b2b91bc9aafcbf8435011f73b6a8ea1bb2f3289b23236136b31656600762feff53e607df8cf3c9a7f257b212630c19f142e4cf5094250b629cabb145c77f1f14ad60ab7617078f810a766cfa341fb7c16086609bc0a768fb1cd782606f32b83a0a55d883269a05b80275612dc571cb993ea9e447b4d32570d412203ab4c8b050b63bb5ac0f8d6f4e9a1644e4b622587b2ae125c2093bd363493d58544d6303a0de17780fcd83e993aa83f4432274eee1e6333fcdc77bcfdea95b8b9ed787723e35b71f1dbe89ff1e3e6fde146c05b6fe9eae52b472624e412253a63e7fcf1b77dbff7509eec5a55501e222f66bd84d36663cd244fa1556bd34b4c9957a93a71e63961ffc7700c5545acdd3e79da41e1cfaca0956d4978222cda23a574d691dbb6c6bd083c70c2782c045bbbe0fcaa10efbc002af6832e3fa7dda0ec8ff6ded69302d55d5a62a7ec213f16ecc5e3304a83103d1c2b21e04e3f5f3730339a630a407e8cc6a5afd2f2ed78ff992035a3783a2708195a46e565a9113be8c228ccaae3510363b475732ad48fe8ff34801f4c35132359d4c5c5bff65141f4a8684d462cf5d97b44496440fff3f7a28d28bbaa8e6db2a6064cbe9fca4679afe8ca6dd27a25c56f3e58165040f19a0455199a0ece4583f060979427f2f3495f40a83bc6ee3eaadab18705d464662b8aba9c7aa2f29114f7acc247548a85bd44723064abeee18f7f558f6d0d74fa08103dd906124454745d23005c425b260b0034372123b642a0cbebbc1a0bcf0cfc3639876eceac5f9734057ff659cfd35b1a3eaa768b86d66244aabc23a45676a59d492614f1c0011c9253e53fc7bb3e20d303afdb5b6614dcc7bbf72a339e414672aac23c2e2983083f08dbc34e3452def00f402598b6aaa4f0d896d1648b1442621993b7d0c930560cb6152b9ce59f94356726816a224fca84da5dbde6675d20f546a3e4635e82ff9575cac9160e6819f", 0x2000, 0x0) syz_usb_control_io$cdc_ncm(0xffffffffffffffff, 0x0, &(0x7f0000000b40)={0x44, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000a40)={0x20, 0x85, 0x4}, 0x0, 0x0, 0x0}) r4 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_TIMESTAMPING(r4, 0x1, 0x25, &(0x7f0000000080)=0x474c, 0x4) bind$inet(r4, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) setsockopt$inet_int(r4, 0x0, 0xc, &(0x7f0000000000)=0xb, 0x4) connect$inet(r4, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10) sendmmsg(r4, &(0x7f0000007fc0), 0x2d, 0x0) setsockopt$inet_int(r4, 0x0, 0x8, &(0x7f0000000040)=0x7ffc, 0x4) recvmmsg(r4, &(0x7f0000000040), 0x291962b, 0x45833af92e4b39ff, 0x0) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000), &(0x7f0000000380), 0xce4, r3}, 0x38) 9.361959935s ago: executing program 3: r0 = socket$inet6(0xa, 0x3, 0x20) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0xc3, &(0x7f000000cf3d)=""/195}, 0x90) sendmmsg$inet6(r0, &(0x7f0000000940)=[{{&(0x7f0000000040)={0xa, 0x0, 0x0, @dev}, 0x1c, 0x0, 0x0, &(0x7f0000000100)=[@rthdrdstopts={{0x28, 0x29, 0x2, {0x0, 0x1, '\x00', [@padn={0x1, 0x2, [0x0, 0x0]}, @pad1, @padn]}}}], 0x28}}], 0x1, 0x0) 8.918125779s ago: executing program 3: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuacct.usage_percpu_user\x00', 0x275a, 0x0) write$binfmt_aout(r0, &(0x7f0000000100)=ANY=[], 0xc1) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000005, 0x12, r0, 0x0) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r1, 0x84, 0x6, &(0x7f0000000700)={0x0, @in6={{0xa, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}}}, 0x84) 5.169112055s ago: executing program 4: syz_mount_image$vfat(&(0x7f0000000040), &(0x7f0000000000)='./file0\x00', 0x101c08a, &(0x7f0000000280)={[{@utf8no}, {@iocharset={'iocharset', 0x3d, 'iso8859-1'}}, {@fat=@fmask={'fmask', 0x3d, 0x36}}, {@uni_xlate}, {@uni_xlateno}, {@rodir}, {@shortname_lower}, {@uni_xlateno}, {@utf8}, {@fat=@tz_utc}, {@shortname_win95}, {@rodir}, {@fat=@nfs_nostale_ro}, {@rodir}, {@fat=@dos1xfloppy}, {@shortname_winnt}, {}]}, 0x6, 0x2c2, &(0x7f0000000900)="$eJzs3UFrI2UYB/Bn0skkq4fk4EkEB/Tgadnu1UuK7ILYk0sO6kGL2wVpgtBCQQWznrx68eDBTyAIfhAvfgavgjdXWHhlJjObpBuyzbqpSH+/S5++ef8zz7wd2imlbz55bXpyv4wHaS9qnVGM4lEWw+hE62GsGH0XAMD/2aOU4s80t00ui4j+7toCAHbocj//80X5y5W0BQDs0L0PPnzv4PDwzvtl2Y+702/Px9Vv9tXH+esHD+KzmMRx3IpBPI6oHxS6UT8tVOXdlNIsLyvDeHM6Ox9XyenHvzbHP/gjos7vxyCG9dCTp406/+7hnf1ybik/q/p4qTn/qMrfjkG88iS8kr+9Jh/jIt56Y6n/mzGI3z6Nz2MS9+smFvmv98vynfT9X199VLVX5bPZ+bhXz1to/0ICAAAAAAAAAAAAAAAAAAAAAAD/3s1m75xe1Pv3VEPN/jt7j6tPulG2hqv788zzWXug5f2BUkqzFD+2++vcKssyNRMX+TxezZc3FgQAAAAAAAAAAAAAAAAAAIDr6+yLL0+OJpPj0xdStLsB5BHx972I5z3OaGnk9dg8udec82gy6TTl6px8eST22jlZxMY2qot43tXIY6trv/FUz03x08/bnr3/7Dnd9ed6IcWNqIv27jo5ytavYS/akX6zUD8UEYs5RVzypMXFkTSYHydt9SUo6iJ7GCs322DrRSherovZhjmRbWrs7d/nK9eMZBevoqhXdW282xRL8Qv3xqXu5+jP409/r8js1gEAAAAAAAAAAAAAAAAAADu1+O/fNS9+szHaSb2dtQUAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAV2rx/v9bFLMmfHx6lj9jchGnZ//xJQIAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHAN/BMAAP//yChWqA==") 5.034315357s ago: executing program 0: bpf$OBJ_GET_PROG(0x7, &(0x7f0000000180)=@o_path={0x0, 0x0, 0x4008}, 0x18) bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000180)={0xffffffffffffffff, 0x7fff}, 0xc) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$tipc(r0, &(0x7f0000000240)={0x0, 0x18, &(0x7f00000000c0), 0x31}, 0x0) 4.841400608s ago: executing program 4: pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r2 = getpid() sched_setscheduler(r2, 0x1, &(0x7f0000000240)=0x1) poll(0x0, 0x0, 0xb43) r3 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r0, &(0x7f00000000c0)) readv(r0, &(0x7f0000002a40)=[{&(0x7f00000007c0)=""/4096, 0x1000}], 0x1) write$binfmt_script(r1, &(0x7f0000020240), 0x10010) 4.795947026s ago: executing program 0: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.controllers\x00', 0x275a, 0x0) r1 = mq_open(&(0x7f0000000000)='cgrvu\xf0nconTr\xb9\x14\x91\x83\xbe\x12O', 0x40, 0x0, 0x0) r2 = dup3(r0, r1, 0x0) fcntl$notify(r2, 0x402, 0x0) 4.748737596s ago: executing program 3: r0 = mq_open(&(0x7f0000000440)='\r\x00elinu\xef\xe3elinux\x00\x96\xf6\x03\n#*\xac\x05\xce\xf8D\\\x9a\xe6[]L+\xf6\v\xe8\xf2\xd3\b\x15\n\xb8F!Q9o\x1f#\xbdt\r\xfb\"\x18%\xfdM\xaf_t\xd2\xdcJ\x10\a1\xf0\xe4\xe3R\x95\xee\xe4\xbab\x1a\xdf\xb1\xbdU\xd7Lo\xe7\xac\x81\x10k\xce-\xf5@\xbb\x9d;\xe8\xf6\xffQ\x04\xaai\x92k\x1b;\xddM\xa2\xe1-\x0e\xd8\xde\x00\xff\x18\xdd\bL\xfb\xa2.\xb6{\xb5\x85#\x88\xdc\xf0\xfd\x04\xf1\xc4 \xdeV\x80q\xf7\x04\xf5\x85T\x1f\xc2S]*\xc9lw\xd3J\xc5\xe8\x02\xcb\xbbAHxr\xac\xb77F\xdf\x1c\xcb\xd4\xce\x88L\xf1\xf9[\x98\xd4+pTx\x95\xb5\x1b]x\x1a\x95\xe1\x856\xe7`83\xb7n#\xe0\xc1_\xec\xba\xdezthU\xe3\a\x8b\xc5\x86woo\xbcnq-\x90/\xed\xff\xad+\x03\x10\t\xda\xfd\xa2\xd0\xef4\n%\xf1\xd8u\xedt\xc1-\x16\x86\x85\xb4\x96\x02\x1bI<\x1e\xbd\x1c\xd0\x19\x96h\xc3\x14\xfb\xf7\x10\xee\x91\x9e\x01G\xbf', 0x6e93ebbbcc0884f2, 0x0, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x0) mq_notify(r0, &(0x7f0000000000)) mq_timedsend(r0, 0x0, 0x0, 0x0, 0x0) 4.592457316s ago: executing program 1: r0 = socket$inet6(0xa, 0x3, 0x103) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x0, 0x0, @empty}, 0x1c) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000000)=0x655e, 0x4) sendto$inet6(r0, 0x0, 0x0, 0x0, 0x0, 0x0) setsockopt$inet6_int(r0, 0x29, 0x4a, &(0x7f0000000140)=0x89, 0x4) recvmmsg(r0, &(0x7f0000001b00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x2100, 0x0) 4.540837973s ago: executing program 2: syz_mount_image$ext4(&(0x7f0000000740)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x1810714, &(0x7f0000000140)={[{@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x200000}}, {@user_xattr}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x1000000}}, {@sb={'sb', 0x3d, 0x1}}, {@prjquota}, {@usrjquota}, {@usrjquota}, {@nojournal_checksum}, {@test_dummy_encryption}]}, 0xff, 0x468, &(0x7f0000000780)="$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") syz_mount_image$tmpfs(0x0, &(0x7f0000000040)='./file0\x00', 0x10000, 0x0, 0x3, 0x0, &(0x7f0000000000)) r0 = open(&(0x7f0000000300)='.\x00', 0x0, 0x0) mkdirat(r0, &(0x7f0000000340)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0) mkdirat(r0, &(0x7f0000000580)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38//file0\x00', 0x0) r1 = open(&(0x7f0000000300)='.\x00', 0x0, 0x0) r2 = open(&(0x7f0000000100)='.\x00', 0x0, 0x0) renameat2(r1, &(0x7f0000000000)='./file0\x00', r2, &(0x7f00000004c0)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38//file0\x00', 0x2) 4.487639466s ago: executing program 0: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) write$UHID_CREATE2(r0, &(0x7f0000000300)=ANY=[], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup(r1) setsockopt$IPT_SO_SET_REPLACE(r2, 0x4000000000000, 0x60, &(0x7f0000000000)=@raw={'raw\x00', 0xe501, 0x3, 0x228, 0x0, 0x6affffff, 0x3403000b, 0x0, 0x7, 0x3f8, 0x230, 0x230, 0x3f8, 0x223, 0x3, 0x0, {[{{@ip={@remote, @local, 0x0, 0x0, 'veth1_macvtap\x00', 'veth1_to_team\x00'}, 0x0, 0x70, 0xb8, 0x0, {0x1000000}}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'netbios-ns\x00'}}}, {{@uncond, 0x0, 0x70, 0xd8}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, 'syz0\x00', 'syz1\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x288) 4.451309433s ago: executing program 3: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) fstat(r0, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_mount_image$erofs(&(0x7f0000000180), &(0x7f0000000140)='./file1\x00', 0x1000801, &(0x7f0000000540)=ANY=[@ANYRES16=r1, @ANYBLOB="297c00f9c21980234eab918ac814309e197726715f46b50fc9faea1f129a2ec00ff000"/44, @ANYBLOB="3d8bf0955e571ed85bd72e40205496ed401eb01ba54c3a2ec565f6baf4011d1b6cc3e2148ed1e5742b70c0409b2460a9be8fe02bac9b630c48cf798f3207221bed5de4094c4ebd7a2cdc494ddb81193e47564a211318914f329065e640ff2cf61a6e53498b14d49de642ac1c9835c4f21328f118150a5eb2563fe4e1823b44bf87a12fe02c4be98933fc52966076dd4291f7358e1064699e51ed1c7be6fc8025f11f070c046f1b8cfc0bb68626fd9ed953f649f076d424c8ee174c3ce621d7ff7590627456bc7f70e3032aeac2", @ANYRES16, @ANYRESDEC=r0, @ANYRESOCT=r2, @ANYRES16=r1, @ANYRES8=r1], 0x1, 0x1f4, &(0x7f0000000880)="$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") mount$afs(0x0, &(0x7f0000000240)='./file0\x00', 0x0, 0x0, 0x0) openat$dir(0xffffffffffffff9c, &(0x7f0000000500)='.\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_open_dev$usbfs(&(0x7f0000000480), 0x77, 0x0) r3 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/power/wakeup_count', 0x0, 0x0) r4 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') mount$9p_fd(0x0, &(0x7f0000000300)='.\x00', &(0x7f0000000080), 0x0, &(0x7f0000000100)={'trans=fd,', {'rfdno', 0x3d, r3}, 0x2c, {'wfdno', 0x3d, r4}}) sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0x10001) r5 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) preadv(r5, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_START_AP(r6, &(0x7f00000001c0)={0x0, 0x0, 0x0}, 0x0) r7 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000003c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r7, 0xaf01, 0x0) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$gtp(&(0x7f0000000780), 0xffffffffffffffff) sendmsg$GTP_CMD_DELPDP(r8, &(0x7f0000000880)={0x0, 0x0, &(0x7f0000000840)={&(0x7f00000007c0)={0x2c, r9, 0x1, 0x0, 0x0, {}, [@GTPA_VERSION={0x8}, @GTPA_NET_NS_FD={0x8}, @GTPA_LINK={0x8}]}, 0x2c}}, 0x0) open(&(0x7f0000000040)='./bus\x00', 0x0, 0x0) mkdir(&(0x7f0000000400)='./file1\x00', 0x0) mkdir(&(0x7f0000000180)='./file0/file0\x00', 0x0) r10 = syz_open_dev$loop(&(0x7f0000000100), 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) ioctl$LOOP_CONFIGURE(r10, 0x1268, &(0x7f00000002c0)={0xffffffffffffffff, 0x0, {0x2a00, 0x80010000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "fee8a2ab78fc179fd1f8a0e91ddaaca7bd64c6a4b4e00d9683dda1af1ea89de2b7fb0a0100000000000000000300", "2809e8dbe108598948224ad54afac11d875397bdb22d0000b420a1a93c5240f45f819e01177d3d458dd4992861ac00", "90be8b1c551265406c7f306003d8a0f4bd00"}}) 4.341886101s ago: executing program 1: r0 = syz_open_dev$vim2m(&(0x7f0000000080), 0x7, 0x2) ioctl$vim2m_VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f0000000cc0)={0x1, @pix_mp={0x0, 0x0, 0x50323234}}) 4.216943774s ago: executing program 1: r0 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r0, &(0x7f0000000100), 0x5) 4.069184001s ago: executing program 0: r0 = socket$inet_mptcp(0x2, 0x1, 0x106) getsockopt$inet_tcp_int(r0, 0x6, 0x4, 0x0, &(0x7f0000000140)=0x2) 4.000387041s ago: executing program 1: r0 = socket$packet(0x11, 0x4000000000002, 0x300) setsockopt$packet_int(r0, 0x107, 0xa, &(0x7f0000000080)=0x1, 0x4) setsockopt$packet_int(r0, 0x107, 0x8, &(0x7f0000000200)=0xe9, 0x4) setsockopt$packet_tx_ring(r0, 0x107, 0xd, &(0x7f0000000040)=@req3={0x10000, 0x100000001, 0x10000, 0x4}, 0x1c) setsockopt$packet_tx_ring(r0, 0x107, 0xd, &(0x7f0000000400)=@req={0x5d2, 0x6, 0x8, 0x9}, 0x5a) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)) bind$inet(0xffffffffffffffff, &(0x7f0000000bc0)={0x2, 0x4e23, @private=0xa010100}, 0x10) r1 = open(&(0x7f0000000240)='./file0\x00', 0x40000, 0x9) setsockopt$packet_tx_ring(r1, 0x107, 0xd, &(0x7f0000000280)=@req3={0x4, 0x4, 0x2, 0x8c9, 0x1, 0xc2a, 0x2}, 0x1c) openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/partitions\x00', 0x0, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r2, &(0x7f0000d84000)={0xa, 0x2, 0x0, @empty}, 0x1c) clock_gettime(0x0, &(0x7f0000006580)) recvmmsg(r0, &(0x7f0000006380)=[{{0x0, 0x0, 0x0}}, {{&(0x7f0000006080)=@ieee802154={0x24, @short}, 0x80, &(0x7f0000006200)=[{&(0x7f0000006100)=""/102, 0x66}, {&(0x7f0000001100)=""/119, 0x77}], 0x2, &(0x7f0000006240)}, 0x80000001}, {{&(0x7f0000006280)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @initdev}}}, 0x80, &(0x7f0000006300), 0x0, &(0x7f0000006340)=""/18, 0x12}, 0x8}], 0x3, 0x0, 0x0) shutdown(r2, 0x1) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(r2, 0x6, 0xe, &(0x7f0000000300)={@in6={{0xa, 0x0, 0x0, @remote}}, 0x0, 0x0, 0x50, 0x0, "3f114438efdaca16d374b49a365be44d5e860ea3ba676c0b5047b80e2c3535d5bd9db3c8572560f4d1be5cd41f7716082ee3589f099942e6f1c395ddb8160381baadf27900"}, 0xd8) setsockopt$packet_int(0xffffffffffffffff, 0x107, 0x0, 0xfffffffffffffffe, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(r2, 0x6, 0xe, &(0x7f0000000100)={@in6={{0xa, 0x0, 0x0, @remote}}, 0x0, 0x0, 0x0, 0x0, "ddfd3b7ed7c6a1c172a987ae5ce3cafd64c9a736831a5912d606798fb75c9981c4b3ac0e06891ff18bc5543ed57215a3c45f9154dfa319e52a15a2b9acf80c07fb1a854dad742eef6187f2304844c296"}, 0xd8) setsockopt$inet6_tcp_int(r2, 0x6, 0x2000000000000022, &(0x7f0000000040)=0x1, 0x4) sendto$inet6(r2, &(0x7f00000000c0)="04", 0xffffff1f, 0x20000003, &(0x7f0000b63fe4)={0xa, 0x2}, 0x1c) 3.91008361s ago: executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0, 0x0}, &(0x7f0000cab000)=0xc) setresgid(0x0, r1, 0x0) setresgid(0x0, 0x0, 0x0) 3.782858937s ago: executing program 4: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuacct.usage_percpu_user\x00', 0x275a, 0x0) write$binfmt_aout(r0, &(0x7f0000000100)=ANY=[], 0xc1) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000005, 0x12, r0, 0x0) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r1, 0x84, 0x6, &(0x7f0000000700)={0x0, @in6={{0xa, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}}}, 0x84) 3.76129687s ago: executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d0000000700000000000000"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000880)={0x0, r2}, 0x10) r3 = epoll_create1(0x0) r4 = socket$unix(0x1, 0x1, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r6, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r7}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x3}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_START_AP(r5, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x90, r6, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r7}, @void}}, [@beacon=[@NL80211_ATTR_BEACON_HEAD={0x35, 0xe, {{{}, {}, @device_a, @device_b}, 0x0, @default, 0x0, @void, @void, @void, @val={0x4, 0x6}, @void, @void, @val={0x25, 0x3}, @void, @void, @void, @void, @void, @void}}], @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}], @NL80211_ATTR_BEACON_INTERVAL={0x8}, @NL80211_ATTR_DTIM_PERIOD={0x8}, @NL80211_ATTR_TX_RATES={0x24, 0x5a, 0x0, 0x1, [@NL80211_BAND_5GHZ={0x20, 0x1, 0x0, 0x1, [@NL80211_TXRATE_HE_GI={0x5}, @NL80211_TXRATE_HE={0x14}]}]}]}, 0x90}}, 0x0) close(r4) syz_mount_image$hfsplus(&(0x7f00000000c0), &(0x7f0000000100)='./file1\x00', 0x4, &(0x7f00000022c0)={[{@uid}, {@nodecompose}, {@umask={'umask', 0x3d, 0x1}}, {@barrier}, {@force}, {@force}, {@gid}, {@creator={'creator', 0x3d, "8487b548"}}, {@nobarrier}, {}]}, 0xfc, 0x6e0, &(0x7f0000000580)="$eJzs3c1vHGcdB/Dv7K7fUtE4bdIWVImoEQURkfhFKQQJJSCEfKhQBAckbiZxGiubtLJdcCME4f3aQ/+A9pAbJyTuQeUMFwRHi1MlRC+cfFs0s7Prje111nESx/D5VLPzzDzvv52Z3dnUmgD/txbOpnU/RRbOvrlebm/cm29v3JufqLPbScp0I2l1VyluJ8XHyeV0l3y23FmXL4b188Hyxe/9/T8bn3S3WvVSlW/srPfzTpIvjD6Lu/WS00ma9XqnsW3bE8nkw9u7OrS9fit9u8+/6OeUATvTCxwcts4Od/dTfej5DhwdRb7xmd32TyfH0v2YrD7n6qtD4+mO7vHb11UOAAAADtnCv0/N7af8VL0+vpnNrB/523gAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAB4qoqk2V1VS6OXPp2i9/z/8Xpf6vSRdv+wBwAAAAAAAAAAO4w9sDWeZKK3cWn3Gp/fzGbW83xvu1NU/+b/WrVxsnp9Lu9mNUtZybmsZzFrWctKZpNMD3a2vri2tjI7Qs25XWvOPTiu5mgTnhytGAAAAAAAAAD8z/tlFrb+/R8AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAJ4FRdLsrqrlZC89nUYryWSS8bLc3eSvvfQRUey28/7THwcAAAAcyOQj1Dm+mc2s5/nedqeo7vlfqu6XJ/Nubmcty1lLO0u5Vt9Dl3f9jY178+2Ne/O3yuXAQ69aTPe3h917fqUqMZXrWa72nMvVajDX0qhqlv6Z5FZvTDvH9YtPy7Yvdf1kxJFdq9dlZ+/3fkWYOPCEH4PppNXIWD8iM9XYugfBicEo7IzENz8d1ujl7qq1vacM9jSbRv+Xn5PdHsrkQ2N+acSZHavX5Xx+O+yXm8dtcqvTu0ML9SPRSBWJuYGj76W9Y5588Y+/f/9G+/bNG9dXzz6VKT1J24+J+YFIvDxCJH7wzEaitXd2Y/uOmWrnqd7mR88l+X7O5nSuZCXL+XEWs5alFPVMF+vjuXyd3jtSlx/YujJkAH3j9fvSrMv1x5SFfGfXMZ3Ot6vUYl6r6j6f5RR5O9eylDeq/+Yym6/mQi7k4sA7fGrouKu5VWd9Y39n/Zkv1YmpJL+r14ete1Eo43piIK6D19zpKm9rz9hAlF7Y+93deW18+JRbn6sTZR+/2vNoeNq2R2J2IBIv7h2Jjzrl62r79s2VG4vv7PLp2inGqvXfziSdTnff63VeecT95uFff/500Pk9xMB1rDxeXshkfSU5kbHu0Jq9vBf7V5kqXuOD9U728x78xB3PZHk+N7o9dc/U7w49U8fr73A7W5qr8l7eNW++yntlIG/w+1bydtr970MAPMOOffnY+NS/pv4y9eHUr6duTL05+a2Jr028Op6xP499vTXTfL3xavGHfJifbd3/AwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAj271vTs3F9vtpZXdE43m0KwhiXTu3FzsPcln1FpZLeon6eyrr8NK9B/584yM54kkih17yhk/ni56Tz7aX62ZnUfU5cMM1D/2WyuTA1NuDi18rE50jnejtK8uprcfmcmQwhPdYDaHnKf1W/QoDxcFjoTza7feOb/63p2vLN9afGvpraXbYxcuXJy5eOGN+fPXl9tLM93Xwx4l8CRsfW8HAAAAAAAAAAAAjooR/67gyg9/VP0fgo/09xKHPUcAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADgaFs4m9b9FJmdOTdTbm/cm2+XSy+9VbKVpNFIip8mxcfJ5XSXTA80Vwzr54Pli80kn2y11eqVb+xRrzMx0izu1ktOJ2nW6wN4oL2rB26v6M+wDNiZXuDgsP03AAD//9ev6fg=") mkdir(&(0x7f0000000000)='./file0\x00', 0x0) r8 = openat(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x0, 0x0) fsync(r8) socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$sock_int(r4, 0x1, 0x2e, &(0x7f0000000040)=0x80, 0x4) r9 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x18, 0x3, &(0x7f0000000080)=@framed, &(0x7f0000000180)='GPL\x00'}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000040)='contention_end\x00', r9}, 0x10) r10 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000100), 0x0) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r10, 0xc0145401, &(0x7f0000000140)) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r4, &(0x7f0000000080)={0xa0028000}) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000008c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(r0, &(0x7f0000000a00)={0x0, 0x0, &(0x7f0000000980)={&(0x7f0000000240)={0x44, r1, 0x1, 0x0, 0x0, {{}, {@void, @val={0x8, 0x3, r11}, @val={0xc, 0x99, {0x5ce, 0x28}}}}, [@NL80211_ATTR_IFNAME={0x14, 0x4, 'syzkaller0\x00'}, @NL80211_ATTR_IFTYPE={0x8, 0x5, 0xc}]}, 0x44}, 0x1, 0x0, 0x0, 0x1040}, 0x0) r12 = socket$nl_generic(0x10, 0x3, 0x10) r13 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000680), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r12, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r12, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r13, @ANYBLOB="010000000000000000002100000008000300", @ANYRES32=r14], 0x30}}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) 3.732928642s ago: executing program 0: sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000032680)=""/102392, 0x18ff8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(aes-aesni)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r2 = accept4(r1, 0x0, 0x0, 0x0) r3 = syz_io_uring_setup(0x0, 0x0, &(0x7f0000000100), &(0x7f0000000140)) syz_io_uring_setup(0x0, 0x0, &(0x7f0000000180)=0x0, &(0x7f00000001c0)) socket$inet6(0xa, 0x0, 0x0) syz_io_uring_submit(r4, 0x0, &(0x7f0000000040)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}) io_uring_register$IORING_REGISTER_ENABLE_RINGS(r3, 0xc, 0x0, 0x0) sendmmsg$alg(r2, &(0x7f0000007140)=[{0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000080)="4a7a5ac44bc48337607985e55fbfbcc246567c44de23b7fc", 0x18}, {&(0x7f0000000300)="41b527cc49159a41ab335f3c5ac0f90700000011224a76773da22896a72a601c810000fc7d531cf7f7ac1cb841ff00000100000001830725708695ee8f50df524666bddd0e1c39b52ee31838c15736f93727094edbdd36f4b4000000000d3b4d68c5bd1a21ee1f44546807", 0x6b}], 0x2}], 0x1, 0x0) recvmmsg(r2, &(0x7f0000002ac0)=[{{0x0, 0x0, &(0x7f0000002940)=[{&(0x7f0000001600)=""/137, 0x89}], 0x1}}], 0x40000a4, 0x0, 0x0) r5 = syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000000)={0x4c, r5, 0x1, 0x0, 0x0, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_FRAME={0x2e, 0x33, @action={{{}, {}, @device_b}, @channel_switch={0x0, 0x4, {{0x25, 0x3}, @val={0x3e, 0x1}, @val={0x76, 0xfffffe1c}}}}}]}, 0x4c}}, 0x0) 3.467968481s ago: executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x26e1, 0x0) ioctl$FS_IOC_FSSETXATTR(r0, 0x401c5820, &(0x7f0000004740)={0x74}) truncate(&(0x7f00000000c0)='./file0\x00', 0x0) 3.239971651s ago: executing program 4: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) bind$bt_l2cap(r0, &(0x7f0000000000), 0xe) setsockopt$bt_BT_DEFER_SETUP(r0, 0x112, 0x7, &(0x7f0000000040), 0x4) 3.051063994s ago: executing program 0: syz_usbip_server_init(0x3) r0 = socket$alg(0x26, 0x5, 0x0) keyctl$restrict_keyring(0x1d, 0xfffffffffffffffe, 0x0, 0x0) syz_open_procfs(0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000a80)=[{{0x0, 0x0, &(0x7f0000000100)=[{0x0}], 0x1}}], 0x1, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) read$FUSE(0xffffffffffffffff, &(0x7f00000022c0)={0x2020}, 0x2020) bind$alg(r0, &(0x7f0000000540)={0x26, 'hash\x00', 0x0, 0x0, 'poly1305-generic\x00'}, 0x58) r4 = accept4(r0, 0x0, 0x0, 0x0) sendmmsg$inet(r4, &(0x7f0000003100)=[{{0x0, 0x0, &(0x7f0000001b80)=[{&(0x7f00000005c0)="96a67b36bd06304a08a67f14f6c3881ca6167592ce060670a396f8ab05ace2caca6b2a9ecf3471d2", 0x28}, {&(0x7f0000000500)="fc484e55021886bb", 0x7fffefd8}], 0x2}}], 0x1, 0x0) 3.00085646s ago: executing program 1: r0 = open(&(0x7f0000008140)='./bus\x00', 0x60142, 0x0) r1 = open(&(0x7f0000007f80)='./bus\x00', 0x143042, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x3, &(0x7f0000008180)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f00000003c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000008040)={&(0x7f0000007fc0)='ext4_collapse_range\x00', r2}, 0x10) ftruncate(r1, 0x2007ffb) fallocate(r0, 0x8, 0x0, 0x8000) 2.997132644s ago: executing program 2: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) mkdir(&(0x7f0000000180)='./file0\x00', 0x0) openat2$dir(0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', &(0x7f0000000080)={0x0, 0x20}, 0x18) r3 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r3, 0x29, 0x23, &(0x7f00000004c0)={{{@in=@dev, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0xa}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x8000000}}, {{@in=@broadcast, 0x0, 0x2b}, 0x0, @in=@empty}}, 0xe8) r4 = socket$key(0xf, 0x3, 0x2) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x8, &(0x7f00000001c0), 0x4) sendmsg$key(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=ANY=[@ANYBLOB="02"], 0x10}}, 0x0) close(r3) sendmsg$key(0xffffffffffffffff, 0x0, 0x0) 2.851057181s ago: executing program 4: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) write$UHID_CREATE2(r0, &(0x7f0000000300)=ANY=[], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup(r1) setsockopt$IPT_SO_SET_REPLACE(r2, 0x4000000000000, 0x60, &(0x7f0000000000)=@raw={'raw\x00', 0xe501, 0x3, 0x228, 0x0, 0x6affffff, 0x3403000b, 0x0, 0x7, 0x3f8, 0x230, 0x230, 0x3f8, 0x223, 0x3, 0x0, {[{{@ip={@remote, @local, 0x0, 0x0, 'veth1_macvtap\x00', 'veth1_to_team\x00'}, 0x0, 0x70, 0xb8, 0x0, {0x1000000}}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'netbios-ns\x00'}}}, {{@uncond, 0x0, 0x70, 0xd8}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, 'syz0\x00', 'syz1\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x288) 1.926239265s ago: executing program 1: prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f00000000c0)) clock_settime(0x0, &(0x7f0000000300)={0x77359400}) 0s ago: executing program 2: pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r2 = getpid() sched_setscheduler(r2, 0x1, &(0x7f0000000240)=0x1) poll(0x0, 0x0, 0xb43) r3 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r0, &(0x7f00000000c0)) readv(r0, &(0x7f0000002a40)=[{&(0x7f00000007c0)=""/4096, 0x1000}], 0x1) write$binfmt_script(r1, &(0x7f0000020240), 0x10010) kernel console output (not intermixed with test programs): 31][ T5099] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 86.880268][ T5099] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 86.892933][ T5099] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 86.892950][ T5099] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 86.892971][ T5099] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 86.896152][ T5099] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 86.976500][ T11] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 87.027360][ T11] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 87.030723][ T5099] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 87.078641][ T5099] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 87.109409][ T5099] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 87.143306][ T5099] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 87.280359][ T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 87.301600][ T5210] loop3: detected capacity change from 0 to 256 [ 87.310029][ T45] cfg80211: failed to load regulatory.db [ 87.317696][ T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 87.499147][ T0] NOHZ tick-stop error: local softirq work is pending, handler #10!!! [ 87.515554][ T5210] FAT-fs (loop3): Directory bread(block 64) failed [ 87.554601][ T5210] FAT-fs (loop3): Directory bread(block 65) failed [ 87.575112][ T5210] FAT-fs (loop3): Directory bread(block 66) failed [ 87.593148][ T5210] FAT-fs (loop3): Directory bread(block 67) failed [ 87.635328][ T5210] FAT-fs (loop3): Directory bread(block 68) failed [ 87.670296][ T5210] FAT-fs (loop3): Directory bread(block 69) failed [ 87.692847][ T5210] FAT-fs (loop3): Directory bread(block 70) failed [ 87.708026][ T35] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 87.725235][ T5210] FAT-fs (loop3): Directory bread(block 71) failed [ 87.741804][ T5210] FAT-fs (loop3): Directory bread(block 72) failed [ 87.754713][ T0] NOHZ tick-stop error: local softirq work is pending, handler #142!!! [ 87.776373][ T35] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 87.790162][ T5210] FAT-fs (loop3): Directory bread(block 73) failed [ 87.921881][ T61] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 87.944279][ T0] NOHZ tick-stop error: local softirq work is pending, handler #282!!! [ 87.974122][ T61] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 88.180445][ T29] kauditd_printk_skb: 29 callbacks suppressed [ 88.180463][ T29] audit: type=1400 audit(1718224394.346:156): avc: denied { unmount } for pid=5106 comm="syz-executor.3" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dosfs_t tclass=filesystem permissive=1 [ 88.272891][ T29] audit: type=1400 audit(1718224394.406:157): avc: denied { create } for pid=5217 comm="syz-executor.1" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 88.389379][ T29] audit: type=1400 audit(1718224394.416:158): avc: denied { setopt } for pid=5217 comm="syz-executor.1" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 88.487445][ T29] audit: type=1400 audit(1718224394.416:159): avc: denied { write } for pid=5217 comm="syz-executor.1" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 88.655890][ T29] audit: type=1400 audit(1718224394.826:160): avc: denied { ioctl } for pid=5225 comm="syz-executor.2" path="socket:[7508]" dev="sockfs" ino=7508 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 88.713648][ T5227] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.2'. [ 88.772895][ T29] audit: type=1400 audit(1718224394.876:161): avc: denied { block_suspend } for pid=5220 comm="syz-executor.4" capability=36 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 88.864691][ T29] audit: type=1400 audit(1718224394.956:162): avc: denied { create } for pid=5224 comm="syz-executor.3" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 89.034831][ T29] audit: type=1400 audit(1718224394.976:163): avc: denied { ioctl } for pid=5224 comm="syz-executor.3" path="socket:[6859]" dev="sockfs" ino=6859 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 89.174543][ T29] audit: type=1400 audit(1718224395.026:164): avc: denied { read write } for pid=5229 comm="syz-executor.1" name="fuse" dev="devtmpfs" ino=99 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fuse_device_t tclass=chr_file permissive=1 [ 89.198093][ C1] vkms_vblank_simulate: vblank timer overrun [ 89.259982][ T5113] Bluetooth: hci5: sending frame failed (-49) [ 89.269435][ T4478] Bluetooth: hci5: Opcode 0x1003 failed: -49 [ 89.339239][ T29] audit: type=1400 audit(1718224395.026:165): avc: denied { open } for pid=5229 comm="syz-executor.1" path="/dev/fuse" dev="devtmpfs" ino=99 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fuse_device_t tclass=chr_file permissive=1 [ 89.485127][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 90.883916][ T5277] loop0: detected capacity change from 0 to 256 [ 90.948737][ T5273] loop1: detected capacity change from 0 to 4096 [ 91.012506][ T5273] ntfs3: loop1: Different NTFS sector size (2048) and media sector size (512). [ 91.022857][ T5282] loop4: detected capacity change from 0 to 128 [ 91.441801][ T5285] netlink: 36 bytes leftover after parsing attributes in process `syz-executor.3'. [ 91.588956][ T5273] ntfs3: loop1: Mark volume as dirty due to NTFS errors [ 92.210797][ T5273] ntfs3: loop1: ino=1e, "file1" failed to parse mft record [ 92.240099][ T5273] ntfs3: loop1: ino=1e, "file1" attr_set_size [ 93.076550][ T5312] loop2: detected capacity change from 0 to 1764 [ 93.167099][ T5319] loop0: detected capacity change from 0 to 256 [ 93.190644][ T29] kauditd_printk_skb: 42 callbacks suppressed [ 93.190660][ T29] audit: type=1400 audit(1718224399.346:208): avc: denied { mount } for pid=5307 comm="syz-executor.2" name="/" dev="loop2" ino=1920 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:iso9660_t tclass=filesystem permissive=1 [ 93.356075][ T29] audit: type=1400 audit(1718224399.526:209): avc: denied { create } for pid=5307 comm="syz-executor.2" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 93.401217][ T29] audit: type=1400 audit(1718224399.526:210): avc: denied { getopt } for pid=5287 comm="syz-executor.3" lport=2 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 93.428936][ T5312] Zero length message leads to an empty skb [ 93.707881][ T29] audit: type=1400 audit(1718224399.876:211): avc: denied { mounton } for pid=5307 comm="syz-executor.2" path="/root/syzkaller-testdir3271060627/syzkaller.vZDs06/10/file0/file0" dev="loop2" ino=1986 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:iso9660_t tclass=file permissive=1 [ 93.763251][ T5326] loop4: detected capacity change from 0 to 128 [ 93.783821][ T0] NOHZ tick-stop error: local softirq work is pending, handler #10!!! [ 93.825255][ T0] NOHZ tick-stop error: local softirq work is pending, handler #48!!! [ 93.833557][ T0] NOHZ tick-stop error: local softirq work is pending, handler #48!!! [ 93.865875][ T5327] iso9660: Corrupted directory entry in block 2 of inode 1920 [ 93.928283][ T29] audit: type=1400 audit(1718224399.936:212): avc: denied { mount } for pid=5307 comm="syz-executor.2" name="/" dev="ramfs" ino=7701 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ramfs_t tclass=filesystem permissive=1 [ 93.954314][ T5324] iso9660: Corrupted directory entry in block 2 of inode 1920 [ 94.078016][ T29] audit: type=1400 audit(1718224400.246:213): avc: denied { create } for pid=5328 comm="syz-executor.0" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 94.340659][ T5313] loop1: detected capacity change from 0 to 32768 [ 94.432176][ T29] audit: type=1400 audit(1718224400.596:214): avc: denied { read } for pid=5332 comm="syz-executor.4" name="snapshot" dev="devtmpfs" ino=92 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 94.467593][ T5333] loop3: detected capacity change from 0 to 16 [ 94.543613][ T29] audit: type=1400 audit(1718224400.626:215): avc: denied { open } for pid=5332 comm="syz-executor.4" path="/dev/snapshot" dev="devtmpfs" ino=92 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 94.587790][ T5333] erofs: (device loop3): mounted with root inode @ nid 36. [ 94.645980][ T5333] SELinux: (dev loop3, type erofs) getxattr errno 117 [ 94.683983][ T0] NOHZ tick-stop error: local softirq work is pending, handler #10!!! [ 94.719712][ T29] audit: type=1400 audit(1718224400.836:216): avc: denied { setattr } for pid=5309 comm="syz-executor.1" name="file0" dev="loop1" ino=32 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 94.721601][ T5336] loop4: detected capacity change from 0 to 4096 [ 94.810913][ T29] audit: type=1400 audit(1718224400.926:217): avc: denied { unmount } for pid=5101 comm="syz-executor.2" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:iso9660_t tclass=filesystem permissive=1 [ 94.858283][ T5336] ======================================================= [ 94.858283][ T5336] WARNING: The mand mount option has been deprecated and [ 94.858283][ T5336] and is ignored by this kernel. Remove the mand [ 94.858283][ T5336] option from the mount to silence this warning. [ 94.858283][ T5336] ======================================================= [ 95.391749][ T5349] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 95.498314][ T5354] trusted_key: encrypted key: instantiation of keys using provided decrypted data is disabled since CONFIG_USER_DECRYPTED_DATA is set to false [ 95.574312][ T5356] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.3'. [ 96.858015][ T5362] loop3: detected capacity change from 0 to 16 [ 96.866472][ T0] NOHZ tick-stop error: local softirq work is pending, handler #08!!! [ 96.866753][ T0] NOHZ tick-stop error: local softirq work is pending, handler #08!!! [ 96.981879][ T5362] erofs: (device loop3): mounted with root inode @ nid 36. [ 97.034308][ T5362] SELinux: (dev loop3, type erofs) getxattr errno 117 [ 97.262172][ T5370] serio: Serial port pts0 [ 97.347934][ T35] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 97.471903][ T5113] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 97.481163][ T5113] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 97.510101][ T5113] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 97.534355][ T5113] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 97.542895][ T5113] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 97.551415][ T5113] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 97.618456][ T35] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 97.716210][ T35] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 97.959866][ T35] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 98.057000][ T5394] loop0: detected capacity change from 0 to 512 [ 98.128530][ T5394] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 98.174654][ T5396] trusted_key: encrypted key: instantiation of keys using provided decrypted data is disabled since CONFIG_USER_DECRYPTED_DATA is set to false [ 98.208060][ T5394] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 98.328803][ T5394] EXT4-fs (loop0): 1 orphan inode deleted [ 98.377442][ T5394] EXT4-fs (loop0): 1 truncate cleaned up [ 98.417510][ T5394] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 98.465854][ T29] kauditd_printk_skb: 10 callbacks suppressed [ 98.465872][ T29] audit: type=1400 audit(1718224404.636:228): avc: denied { map } for pid=5390 comm="syz-executor.0" path="/root/syzkaller-testdir3021745630/syzkaller.R5dTqn/16/bus/pids.current" dev="loop0" ino=17 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 98.501269][ T5405] loop1: detected capacity change from 0 to 256 [ 98.511818][ T5390] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1217: group 0, block bitmap and bg descriptor inconsistent: 191 vs 220 free clusters [ 98.553654][ T5390] EXT4-fs (loop0): Remounting filesystem read-only [ 98.614391][ T29] audit: type=1400 audit(1718224404.636:229): avc: denied { create } for pid=5390 comm="syz-executor.0" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 98.694655][ T5405] FAT-fs (loop1): Directory bread(block 64) failed [ 98.701259][ T5405] FAT-fs (loop1): Directory bread(block 65) failed [ 98.712513][ T29] audit: type=1400 audit(1718224404.756:230): avc: denied { getopt } for pid=5390 comm="syz-executor.0" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 98.738019][ T5114] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 98.741309][ T5405] FAT-fs (loop1): Directory bread(block 66) failed [ 98.822436][ T5405] FAT-fs (loop1): Directory bread(block 67) failed [ 98.824281][ T29] audit: type=1400 audit(1718224404.816:231): avc: denied { search } for pid=4748 comm="dhcpcd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 98.853556][ T5405] FAT-fs (loop1): Directory bread(block 68) failed [ 98.854291][ T29] audit: type=1400 audit(1718224404.816:232): avc: denied { read } for pid=4748 comm="dhcpcd" name="n68" dev="tmpfs" ino=1860 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 98.874141][ T35] bridge_slave_1: left allmulticast mode [ 98.884131][ T29] audit: type=1400 audit(1718224404.816:233): avc: denied { open } for pid=4748 comm="dhcpcd" path="/run/udev/data/n68" dev="tmpfs" ino=1860 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 98.904467][ T5405] FAT-fs (loop1): Directory bread(block 69) failed [ 98.910554][ T29] audit: type=1400 audit(1718224404.816:234): avc: denied { getattr } for pid=4748 comm="dhcpcd" path="/run/udev/data/n68" dev="tmpfs" ino=1860 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 98.942614][ T29] audit: type=1400 audit(1718224404.956:235): avc: denied { ioctl } for pid=5408 comm="syz-executor.4" path="socket:[7867]" dev="sockfs" ino=7867 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 98.971299][ T35] bridge_slave_1: left promiscuous mode [ 98.977264][ T5405] FAT-fs (loop1): Directory bread(block 70) failed [ 98.983822][ T5405] FAT-fs (loop1): Directory bread(block 71) failed [ 98.994604][ T35] bridge0: port 2(bridge_slave_1) entered disabled state [ 99.007158][ T29] audit: type=1400 audit(1718224405.066:236): avc: denied { write } for pid=5411 comm="syz-executor.3" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 99.045065][ T5405] FAT-fs (loop1): Directory bread(block 72) failed [ 99.061256][ T5405] FAT-fs (loop1): Directory bread(block 73) failed [ 99.064950][ T29] audit: type=1400 audit(1718224405.196:237): avc: denied { create } for pid=5411 comm="syz-executor.3" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_tcpdiag_socket permissive=1 [ 99.083854][ T35] bridge_slave_0: left allmulticast mode [ 99.097370][ T35] bridge_slave_0: left promiscuous mode [ 99.116226][ T35] bridge0: port 1(bridge_slave_0) entered disabled state [ 99.357020][ T5417] loop0: detected capacity change from 0 to 1024 [ 100.694360][ T5113] Bluetooth: hci2: command tx timeout [ 101.235805][ T1039] kworker/u8:6: attempt to access beyond end of device [ 101.235805][ T1039] loop1: rw=1, sector=1224, nr_sectors = 608 limit=256 [ 101.319604][ T1039] kworker/u8:6: attempt to access beyond end of device [ 101.319604][ T1039] loop1: rw=1, sector=1864, nr_sectors = 3556 limit=256 [ 102.120218][ T5432] trusted_key: encrypted key: instantiation of keys using provided decrypted data is disabled since CONFIG_USER_DECRYPTED_DATA is set to false [ 102.139039][ T35] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 102.213951][ T35] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 102.233794][ T35] bond0 (unregistering): Released all slaves [ 102.272673][ T35] bond1 (unregistering): Released all slaves [ 102.401263][ C1] hrtimer: interrupt took 1039264 ns [ 102.706657][ T5113] Bluetooth: hci2: command tx timeout [ 103.481687][ T5448] loop1: detected capacity change from 0 to 512 [ 103.604069][ T5448] EXT4-fs error (device loop1): __ext4_fill_super:5447: inode #2: comm syz-executor.1: iget: special inode unallocated [ 103.660411][ T5448] EXT4-fs (loop1): get root inode failed [ 103.685888][ T5448] EXT4-fs (loop1): mount failed [ 103.954393][ T29] kauditd_printk_skb: 11 callbacks suppressed [ 103.954412][ T29] audit: type=1400 audit(1718224410.116:249): avc: denied { create } for pid=5444 comm="syz-executor.4" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dccp_socket permissive=1 [ 104.108691][ T5379] chnl_net:caif_netlink_parms(): no params data found [ 107.646163][ T5113] Bluetooth: hci2: command tx timeout [ 108.242091][ T12] hfsplus: b-tree write err: -5, ino 4 [ 108.284698][ T35] hsr_slave_0: left promiscuous mode [ 108.339083][ T29] audit: type=1400 audit(1718224414.506:250): avc: denied { write } for pid=5436 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1409 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 108.413767][ T35] hsr_slave_1: left promiscuous mode [ 108.420985][ T35] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 108.442337][ T35] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 108.465012][ T29] audit: type=1400 audit(1718224414.506:251): avc: denied { add_name } for pid=5436 comm="dhcpcd-run-hook" name="resolv.conf.eth1.link" scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 108.507407][ T35] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 108.575961][ T35] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 108.576652][ T29] audit: type=1400 audit(1718224414.506:252): avc: denied { create } for pid=5436 comm="dhcpcd-run-hook" name="resolv.conf.eth1.link" scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 108.638093][ T5449] sctp: [Deprecated]: syz-executor.4 (pid 5449) Use of int in maxseg socket option. [ 108.638093][ T5449] Use struct sctp_assoc_value instead [ 108.724441][ T29] audit: type=1400 audit(1718224414.506:253): avc: denied { write } for pid=5436 comm="dhcpcd-run-hook" path="/run/dhcpcd/hook-state/resolv.conf.eth1.link" dev="tmpfs" ino=1953 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 108.753547][ T35] veth1_macvtap: left promiscuous mode [ 108.753865][ T35] veth0_macvtap: left promiscuous mode [ 108.786254][ T35] veth1_vlan: left promiscuous mode [ 108.792117][ T35] veth0_vlan: left promiscuous mode [ 108.984051][ T29] audit: type=1400 audit(1718224414.506:254): avc: denied { append } for pid=5436 comm="dhcpcd-run-hook" name="resolv.conf.eth1.link" dev="tmpfs" ino=1953 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 109.163841][ T29] audit: type=1400 audit(1718224414.556:255): avc: denied { name_bind } for pid=5463 comm="syz-executor.1" src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=udp_socket permissive=1 [ 109.376452][ T29] audit: type=1400 audit(1718224415.086:256): avc: denied { remove_name } for pid=5469 comm="rm" name="resolv.conf.eth1.link" dev="tmpfs" ino=1953 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 109.610988][ T29] audit: type=1400 audit(1718224415.086:257): avc: denied { unlink } for pid=5469 comm="rm" name="resolv.conf.eth1.link" dev="tmpfs" ino=1953 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 109.675302][ T5113] Bluetooth: hci2: command tx timeout [ 109.689251][ T5479] loop1: detected capacity change from 0 to 8 [ 112.350067][ T29] audit: type=1400 audit(1718224415.826:258): avc: denied { mount } for pid=5475 comm="syz-executor.0" name="/" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=filesystem permissive=1 [ 112.483600][ T29] audit: type=1400 audit(1718224418.636:259): avc: denied { remount } for pid=5475 comm="syz-executor.0" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 112.832470][ T29] audit: type=1400 audit(1718224418.996:260): avc: denied { unmount } for pid=5114 comm="syz-executor.0" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=filesystem permissive=1 [ 112.886168][ T5476] loop4: detected capacity change from 0 to 1764 [ 113.037270][ T29] audit: type=1400 audit(1718224419.206:261): avc: denied { create } for pid=5482 comm="syz-executor.1" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 113.526177][ T5488] overlayfs: failed to resolve './file1:/': -2 [ 113.585761][ T5489] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 114.256345][ T29] audit: type=1400 audit(1718224419.696:262): avc: denied { mounton } for pid=5481 comm="syz-executor.3" path="/root/syzkaller-testdir2857484941/syzkaller.a5w31T/24/file0" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=dir permissive=1 [ 114.572558][ T5490] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 0 [ 114.893455][ T29] audit: type=1400 audit(1718224421.056:263): avc: denied { write } for pid=5491 comm="syz-executor.3" path="socket:[8422]" dev="sockfs" ino=8422 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 114.974533][ T5492] Bluetooth: MGMT ver 1.22 [ 115.687910][ T5492] Bluetooth: hci3: service_discovery: too big uuid_count value 65535 [ 115.773136][ T29] audit: type=1400 audit(1718224421.146:264): avc: denied { create } for pid=5493 comm="syz-executor.4" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 115.911060][ T29] audit: type=1400 audit(1718224421.206:265): avc: denied { create } for pid=5493 comm="syz-executor.4" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 116.033550][ T29] audit: type=1400 audit(1718224421.216:266): avc: denied { setopt } for pid=5493 comm="syz-executor.4" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 116.137102][ T29] audit: type=1400 audit(1718224421.226:267): avc: denied { bind } for pid=5493 comm="syz-executor.4" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 116.237753][ T29] audit: type=1400 audit(1718224422.196:268): avc: denied { write } for pid=5497 comm="syz-executor.4" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 116.302552][ T29] audit: type=1400 audit(1718224422.196:269): avc: denied { nlmsg_write } for pid=5497 comm="syz-executor.4" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 116.691214][ T5510] loop3: detected capacity change from 0 to 256 [ 116.712954][ T5510] exfat: Unknown parameter '˙˙˙˙˙˙0xffffffffffffffff0xffffffffffffffff˙˙' [ 116.791284][ T29] audit: type=1400 audit(1718224422.956:270): avc: denied { write } for pid=5511 comm="syz-executor.1" name="tcp" dev="proc" ino=4026532974 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_net_t tclass=file permissive=1 [ 116.943141][ T35] team0 (unregistering): Port device team_slave_1 removed [ 117.380729][ T5517] binder: 5513:5517 ioctl c0306201 0 returned -14 [ 117.528807][ T35] team0 (unregistering): Port device team_slave_0 removed [ 120.134205][ C0] sched: RT throttling activated [ 120.857098][ T5538] loop3: detected capacity change from 0 to 256 [ 122.708178][ T5538] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0x4f8593fa, utbl_chksum : 0xe619d30d) [ 124.715758][ T5542] loop4: detected capacity change from 0 to 32768 [ 124.816839][ T29] audit: type=1400 audit(1718224430.986:271): avc: denied { create } for pid=5540 comm="syz-executor.4" name="memory.numa_stat" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 125.024008][ T29] audit: type=1400 audit(1718224430.986:272): avc: denied { read append open } for pid=5540 comm="syz-executor.4" path="/root/syzkaller-testdir3008466927/syzkaller.AlCRaW/25/file0/memory.numa_stat" dev="loop4" ino=7 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 125.556955][ T29] audit: type=1400 audit(1718224431.726:273): avc: denied { bind } for pid=5550 comm="syz-executor.1" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dccp_socket permissive=1 [ 125.585925][ T29] audit: type=1400 audit(1718224431.746:274): avc: denied { name_bind } for pid=5550 comm="syz-executor.1" src=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=dccp_socket permissive=1 [ 125.611975][ T29] audit: type=1400 audit(1718224431.746:275): avc: denied { node_bind } for pid=5550 comm="syz-executor.1" src=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=dccp_socket permissive=1 [ 125.649132][ T29] audit: type=1400 audit(1718224431.806:276): avc: denied { listen } for pid=5550 comm="syz-executor.1" lport=20003 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dccp_socket permissive=1 [ 125.682725][ T29] audit: type=1400 audit(1718224431.856:277): avc: denied { connect } for pid=5550 comm="syz-executor.1" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dccp_socket permissive=1 [ 125.720775][ T29] audit: type=1400 audit(1718224431.856:278): avc: denied { name_connect } for pid=5550 comm="syz-executor.1" dest=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=dccp_socket permissive=1 [ 125.822192][ T29] audit: type=1400 audit(1718224431.986:279): avc: denied { accept } for pid=5550 comm="syz-executor.1" lport=20003 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dccp_socket permissive=1 [ 125.890152][ T29] audit: type=1400 audit(1718224431.986:280): avc: denied { read } for pid=5550 comm="syz-executor.1" laddr=::1 lport=20003 faddr=::1 fport=59696 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dccp_socket permissive=1 [ 127.410272][ T5571] xt_hashlimit: overflow, try lower: 3/0 [ 127.955096][ T5379] bridge0: port 1(bridge_slave_0) entered blocking state [ 128.003677][ T5379] bridge0: port 1(bridge_slave_0) entered disabled state [ 128.057632][ T5379] bridge_slave_0: entered allmulticast mode [ 128.119535][ T5379] bridge_slave_0: entered promiscuous mode [ 128.196300][ T5379] bridge0: port 2(bridge_slave_1) entered blocking state [ 128.262165][ T5379] bridge0: port 2(bridge_slave_1) entered disabled state [ 128.324536][ T5379] bridge_slave_1: entered allmulticast mode [ 128.332308][ T5379] bridge_slave_1: entered promiscuous mode [ 128.760723][ T5379] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 128.933914][ T5379] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 130.664435][ T5591] binder: 5585:5591 ioctl c0306201 0 returned -14 [ 131.710325][ T29] kauditd_printk_skb: 6 callbacks suppressed [ 131.710344][ T29] audit: type=1400 audit(1718224437.876:287): avc: denied { write } for pid=5594 comm="syz-executor.1" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 132.014362][ T5379] team0: Port device team_slave_0 added [ 132.107488][ T5379] team0: Port device team_slave_1 added [ 132.579124][ T5379] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 132.594584][ T5379] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 132.638961][ T5113] Bluetooth: hci1: Controller not accepting commands anymore: ncmd = 0 [ 132.656641][ T5113] Bluetooth: hci1: Injecting HCI hardware error event [ 132.669757][ T4478] Bluetooth: hci1: hardware error 0x00 [ 132.864530][ T5379] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 133.040347][ T5379] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 133.095980][ T5379] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 133.147245][ T5622] loop4: detected capacity change from 0 to 256 [ 133.202323][ T5622] exFAT-fs (loop4): failed to load upcase table (idx : 0x00010000, chksum : 0x4f8593fa, utbl_chksum : 0xe619d30d) [ 133.417727][ T1239] ieee802154 phy0 wpan0: encryption failed: -22 [ 133.439296][ T1239] ieee802154 phy1 wpan1: encryption failed: -22 [ 133.508530][ T5379] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 133.869610][ T5621] loop3: detected capacity change from 0 to 8192 [ 133.961754][ T5379] hsr_slave_0: entered promiscuous mode [ 134.026755][ T5379] hsr_slave_1: entered promiscuous mode [ 134.119901][ T29] audit: type=1400 audit(1718224440.276:288): avc: denied { create } for pid=5626 comm="syz-executor.1" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 134.144579][ T5379] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 134.208352][ T5379] Cannot create hsr debugfs directory [ 134.298617][ T29] audit: type=1400 audit(1718224440.346:289): avc: denied { ioctl } for pid=5626 comm="syz-executor.1" path="socket:[8715]" dev="sockfs" ino=8715 ioctlcmd=0x89ef scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 134.627533][ T29] audit: type=1400 audit(1718224440.796:290): avc: denied { create } for pid=5630 comm="syz-executor.1" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_connector_socket permissive=1 [ 134.761764][ T5631] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.1'. [ 134.832465][ T5631] netlink: 52 bytes leftover after parsing attributes in process `syz-executor.1'. [ 134.926926][ T5631] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.1'. [ 135.024345][ T4478] Bluetooth: hci1: Opcode 0x0c03 failed: -110 [ 135.031214][ T5631] vlan0: entered allmulticast mode [ 135.096484][ T5631] veth0_vlan: entered allmulticast mode [ 135.139712][ T29] audit: type=1400 audit(1718224441.306:291): avc: denied { create } for pid=5637 comm="syz-executor.3" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 135.299089][ T29] audit: type=1400 audit(1718224441.346:292): avc: denied { connect } for pid=5637 comm="syz-executor.3" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 135.345435][ T5634] lo: entered promiscuous mode [ 135.357881][ T5634] lo: entered allmulticast mode [ 135.432140][ T5634] tunl0: entered promiscuous mode [ 135.443051][ T29] audit: type=1400 audit(1718224441.396:293): avc: denied { write } for pid=5637 comm="syz-executor.3" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 135.514055][ T5634] tunl0: entered allmulticast mode [ 135.543971][ T5634] gre0: entered promiscuous mode [ 135.573636][ T5634] gre0: entered allmulticast mode [ 135.587441][ T29] audit: type=1400 audit(1718224441.706:294): avc: denied { create } for pid=5612 comm="syz-executor.0" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1 [ 135.661992][ T5640] loop3: detected capacity change from 0 to 512 [ 135.703118][ T5634] gretap0: entered promiscuous mode [ 135.715969][ T29] audit: type=1400 audit(1718224441.846:295): avc: denied { create } for pid=5612 comm="syz-executor.0" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 135.751269][ T5634] gretap0: entered allmulticast mode [ 135.785449][ T5640] EXT4-fs (loop3): bad s_min_extra_isize: 65535 [ 135.823369][ T5634] erspan0: entered promiscuous mode [ 135.853004][ T29] audit: type=1400 audit(1718224441.976:296): avc: denied { connect } for pid=5612 comm="syz-executor.0" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 135.875595][ T5634] erspan0: entered allmulticast mode [ 135.916939][ T5634] ip_vti0: entered promiscuous mode [ 135.952905][ T5634] ip_vti0: entered allmulticast mode [ 135.994663][ T5634] ip6_vti0: entered promiscuous mode [ 136.054562][ T5634] ip6_vti0: entered allmulticast mode [ 136.112921][ T5634] sit0: entered promiscuous mode [ 136.144534][ T5634] sit0: entered allmulticast mode [ 136.245131][ T5634] ip6tnl0: entered promiscuous mode [ 136.264399][ T5634] ip6tnl0: entered allmulticast mode [ 136.303554][ T5642] loop3: detected capacity change from 0 to 512 [ 136.321850][ T5634] ip6gre0: entered promiscuous mode [ 136.355943][ T5634] ip6gre0: entered allmulticast mode [ 136.411710][ T5642] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 136.495745][ T5634] syz_tun: entered promiscuous mode [ 136.503854][ T5634] syz_tun: entered allmulticast mode [ 136.512212][ T5642] EXT4-fs (loop3): 1 truncate cleaned up [ 136.559032][ T5642] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 136.615068][ T5634] ip6gretap0: entered promiscuous mode [ 136.620575][ T5634] ip6gretap0: entered allmulticast mode [ 136.734958][ T5634] bridge0: port 2(bridge_slave_1) entered disabled state [ 136.744150][ T5634] bridge0: port 1(bridge_slave_0) entered disabled state [ 136.845329][ T5634] bridge0: entered promiscuous mode [ 136.850579][ T5634] bridge0: entered allmulticast mode [ 136.975247][ T5634] vcan0: entered promiscuous mode [ 136.982825][ T5634] vcan0: entered allmulticast mode [ 137.117703][ T5634] bond0: entered promiscuous mode [ 137.177555][ T5634] bond_slave_0: entered promiscuous mode [ 137.218836][ T5634] bond_slave_1: entered promiscuous mode [ 137.286274][ T5634] bond0: entered allmulticast mode [ 137.339042][ T5634] bond_slave_0: entered allmulticast mode [ 137.404289][ T5634] bond_slave_1: entered allmulticast mode [ 137.513697][ T5634] team0: entered promiscuous mode [ 137.562942][ T5634] team_slave_0: entered promiscuous mode [ 137.598968][ T5634] team_slave_1: entered promiscuous mode [ 137.632828][ T5634] team0: entered allmulticast mode [ 137.660132][ T5634] team_slave_0: entered allmulticast mode [ 137.705765][ T5634] team_slave_1: entered allmulticast mode [ 137.782018][ T5634] dummy0: entered promiscuous mode [ 137.813449][ T5634] dummy0: entered allmulticast mode [ 137.885074][ T5634] nlmon0: entered promiscuous mode [ 137.901438][ T5634] nlmon0: entered allmulticast mode [ 137.952103][ T5634] caif0: entered promiscuous mode [ 137.976382][ T5634] caif0: entered allmulticast mode [ 138.013181][ T5634] batadv0: entered promiscuous mode [ 138.038311][ T5634] batadv0: entered allmulticast mode [ 138.105111][ T5634] vxcan0: entered promiscuous mode [ 138.118022][ T5634] vxcan0: entered allmulticast mode [ 138.159332][ T5634] vxcan1: entered promiscuous mode [ 138.175042][ T5634] vxcan1: entered allmulticast mode [ 138.200787][ T5634] veth0: entered promiscuous mode [ 138.224303][ T5634] veth0: entered allmulticast mode [ 138.278058][ T5634] veth1: entered promiscuous mode [ 138.283145][ T5634] veth1: entered allmulticast mode [ 138.356240][ T5634] wg0: entered promiscuous mode [ 138.374929][ T5634] wg0: entered allmulticast mode [ 138.406814][ T5634] wg1: entered promiscuous mode [ 138.411695][ T5634] wg1: entered allmulticast mode [ 138.501347][ T5634] wg2: entered promiscuous mode [ 138.520361][ T5634] wg2: entered allmulticast mode [ 138.558755][ T5634] veth0_to_bridge: entered promiscuous mode [ 138.590331][ T5634] veth0_to_bridge: entered allmulticast mode [ 138.669981][ T5634] veth1_to_bridge: entered promiscuous mode [ 138.696481][ T5634] veth1_to_bridge: entered allmulticast mode [ 138.786257][ T5634] veth0_to_bond: entered promiscuous mode [ 138.792013][ T5634] veth0_to_bond: entered allmulticast mode [ 138.881545][ T5634] veth1_to_bond: entered promiscuous mode [ 138.919130][ T5634] veth1_to_bond: entered allmulticast mode [ 138.971517][ T5634] veth0_to_team: entered promiscuous mode [ 139.004089][ T5634] veth0_to_team: entered allmulticast mode [ 139.105695][ T5634] veth1_to_team: entered promiscuous mode [ 139.111454][ T5634] veth1_to_team: entered allmulticast mode [ 139.233541][ T5634] veth0_to_batadv: entered promiscuous mode [ 139.254467][ T5634] veth0_to_batadv: entered allmulticast mode [ 139.313925][ T5634] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 139.386594][ T5634] batadv_slave_0: entered promiscuous mode [ 139.392443][ T5634] batadv_slave_0: entered allmulticast mode [ 139.451336][ T5634] veth1_to_batadv: entered promiscuous mode [ 139.483386][ T5634] veth1_to_batadv: entered allmulticast mode [ 139.539042][ T5634] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 139.609797][ T5634] batadv_slave_1: entered promiscuous mode [ 139.639506][ T5634] batadv_slave_1: entered allmulticast mode [ 139.709837][ T5634] xfrm0: entered promiscuous mode [ 139.740985][ T5634] xfrm0: entered allmulticast mode [ 139.782774][ T5634] veth0_to_hsr: entered promiscuous mode [ 139.815288][ T5634] veth0_to_hsr: entered allmulticast mode [ 139.855433][ T5634] hsr_slave_0: entered allmulticast mode [ 139.916476][ T5634] veth1_to_hsr: entered promiscuous mode [ 139.922146][ T5634] veth1_to_hsr: entered allmulticast mode [ 140.002632][ T5634] hsr_slave_1: entered allmulticast mode [ 140.066481][ T5634] hsr0: entered promiscuous mode [ 140.071471][ T5634] hsr0: entered allmulticast mode [ 140.156813][ T5634] veth1_virt_wifi: entered promiscuous mode [ 140.162768][ T5634] veth1_virt_wifi: entered allmulticast mode [ 140.240115][ T5634] veth0_virt_wifi: entered promiscuous mode [ 140.277786][ T5634] veth0_virt_wifi: entered allmulticast mode [ 140.375750][ T5634] net veth1_virt_wifi virt_wifi0: entered promiscuous mode [ 140.413915][ T5634] net veth1_virt_wifi virt_wifi0: entered allmulticast mode [ 140.456067][ T5634] veth1_vlan: entered allmulticast mode [ 140.594969][ T5634] vlan0: entered promiscuous mode [ 140.651302][ T5634] vlan1: entered promiscuous mode [ 140.676738][ T5634] vlan1: entered allmulticast mode [ 140.696855][ T5634] macvlan0: entered promiscuous mode [ 140.705076][ T5634] macvlan0: entered allmulticast mode [ 140.766063][ T5634] macvlan1: entered promiscuous mode [ 140.774070][ T5634] macvlan1: entered allmulticast mode [ 140.856634][ T5634] ipvlan0: entered promiscuous mode [ 140.865385][ T5634] ipvlan0: entered allmulticast mode [ 140.874018][ T5634] ipvlan1: entered promiscuous mode [ 140.881973][ T5634] ipvlan1: entered allmulticast mode [ 140.965334][ T5634] veth1_macvtap: entered allmulticast mode [ 141.019291][ T5634] veth0_macvtap: entered allmulticast mode [ 141.076842][ T5634] macvtap0: entered promiscuous mode [ 141.087715][ T5634] macvtap0: entered allmulticast mode [ 141.113887][ T5634] macsec0: entered promiscuous mode [ 141.123099][ T5634] macsec0: entered allmulticast mode [ 141.179060][ T5634] geneve0: entered promiscuous mode [ 141.221274][ T5634] geneve0: entered allmulticast mode [ 141.256332][ T5634] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 141.294273][ T5634] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 141.320485][ T5634] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 141.330991][ T5634] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 141.346163][ T5634] geneve1: entered promiscuous mode [ 141.355604][ T5634] geneve1: entered allmulticast mode [ 141.450050][ T5634] netdevsim netdevsim1 netdevsim0: entered promiscuous mode [ 141.466182][ T5634] netdevsim netdevsim1 netdevsim0: entered allmulticast mode [ 141.518551][ T5106] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 141.534937][ T5634] netdevsim netdevsim1 netdevsim1: entered promiscuous mode [ 141.562288][ T5634] netdevsim netdevsim1 netdevsim1: entered allmulticast mode [ 141.598535][ T5634] netdevsim netdevsim1 netdevsim2: entered promiscuous mode [ 141.612243][ T5634] netdevsim netdevsim1 netdevsim2: entered allmulticast mode [ 141.649719][ T5634] netdevsim netdevsim1 netdevsim3: entered promiscuous mode [ 141.668290][ T5634] netdevsim netdevsim1 netdevsim3: entered allmulticast mode [ 141.712669][ T5634] mac80211_hwsim hwsim2 wlan0: entered promiscuous mode [ 141.730017][ T5634] mac80211_hwsim hwsim2 wlan0: entered allmulticast mode [ 141.855512][ T5634] mac80211_hwsim hwsim3 wlan1: entered promiscuous mode [ 141.872726][ T5634] mac80211_hwsim hwsim3 wlan1: entered allmulticast mode [ 141.903366][ T29] audit: type=1400 audit(1718224448.066:297): avc: denied { create } for pid=5657 comm="syz-executor.3" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 141.986706][ T29] audit: type=1400 audit(1718224448.116:298): avc: denied { getopt } for pid=5657 comm="syz-executor.3" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 142.021322][ T5634] syz-executor.1 (5634) used greatest stack depth: 21744 bytes left [ 142.100137][ T5650] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.4'. [ 142.124272][ T5654] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.0'. [ 142.694147][ T5663] loop3: detected capacity change from 0 to 32768 [ 143.885633][ T29] audit: type=1400 audit(1718224450.056:299): avc: denied { nlmsg_write } for pid=5674 comm="syz-executor.1" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_tcpdiag_socket permissive=1 [ 144.200824][ T29] audit: type=1400 audit(1718224450.366:300): avc: denied { bind } for pid=5681 comm="syz-executor.0" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 144.353927][ T29] audit: type=1400 audit(1718224450.366:301): avc: denied { name_bind } for pid=5681 comm="syz-executor.0" src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=rawip_socket permissive=1 [ 144.522531][ T29] audit: type=1400 audit(1718224450.366:302): avc: denied { node_bind } for pid=5681 comm="syz-executor.0" saddr=ff02::1 src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=rawip_socket permissive=1 [ 144.730413][ T29] audit: type=1400 audit(1718224450.436:303): avc: denied { write } for pid=5681 comm="syz-executor.0" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 144.764799][ T5686] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.4'. [ 144.774129][ T5686] netlink: 52 bytes leftover after parsing attributes in process `syz-executor.4'. [ 144.888902][ T5686] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.4'. [ 144.930586][ T5686] vlan0: entered allmulticast mode [ 144.998556][ T5686] veth0_vlan: entered allmulticast mode [ 145.316608][ T29] audit: type=1400 audit(1718224451.486:304): avc: denied { create } for pid=5700 comm="syz-executor.1" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 145.661682][ T29] audit: type=1400 audit(1718224451.826:305): avc: denied { read } for pid=5700 comm="syz-executor.1" name="ppp" dev="devtmpfs" ino=694 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 145.713480][ T5696] lo: entered promiscuous mode [ 145.723900][ T5696] lo: entered allmulticast mode [ 145.798435][ T5696] tunl0: entered promiscuous mode [ 145.824543][ T29] audit: type=1400 audit(1718224451.826:306): avc: denied { open } for pid=5700 comm="syz-executor.1" path="/dev/ppp" dev="devtmpfs" ino=694 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 145.854277][ T5696] tunl0: entered allmulticast mode [ 145.904777][ T5696] gre0: entered promiscuous mode [ 145.925024][ T5696] gre0: entered allmulticast mode [ 145.998975][ T5696] gretap0: entered promiscuous mode [ 146.030762][ T5696] gretap0: entered allmulticast mode [ 146.097572][ T5696] erspan0: entered promiscuous mode [ 146.137525][ T5696] erspan0: entered allmulticast mode [ 146.234884][ T5696] ip_vti0: entered promiscuous mode [ 146.244314][ T5696] ip_vti0: entered allmulticast mode [ 146.282814][ T5696] ip6_vti0: entered promiscuous mode [ 146.321298][ T5696] ip6_vti0: entered allmulticast mode [ 146.373008][ T5696] sit0: entered promiscuous mode [ 146.413132][ T5696] sit0: entered allmulticast mode [ 146.475754][ T5696] ip6tnl0: entered promiscuous mode [ 146.480992][ T5696] ip6tnl0: entered allmulticast mode [ 146.547788][ T5696] ip6gre0: entered promiscuous mode [ 146.553024][ T5696] ip6gre0: entered allmulticast mode [ 146.662660][ T5696] syz_tun: entered promiscuous mode [ 146.680930][ T5696] syz_tun: entered allmulticast mode [ 146.721973][ T5696] ip6gretap0: entered promiscuous mode [ 146.746615][ T5696] ip6gretap0: entered allmulticast mode [ 146.815665][ T5696] bridge0: port 2(bridge_slave_1) entered disabled state [ 146.823741][ T5696] bridge0: port 1(bridge_slave_0) entered disabled state [ 146.957824][ T5696] bridge0: entered promiscuous mode [ 146.963071][ T5696] bridge0: entered allmulticast mode [ 147.014732][ T5696] vcan0: entered promiscuous mode [ 147.044533][ T5696] vcan0: entered allmulticast mode [ 147.090023][ T5696] bond0: entered promiscuous mode [ 147.124403][ T5696] bond_slave_0: entered promiscuous mode [ 147.141120][ T5696] bond_slave_1: entered promiscuous mode [ 147.181132][ T5696] bond0: entered allmulticast mode [ 147.201140][ T5696] bond_slave_0: entered allmulticast mode [ 147.221396][ T5696] bond_slave_1: entered allmulticast mode [ 147.283507][ T5696] team0: entered promiscuous mode [ 147.292525][ T5696] team_slave_0: entered promiscuous mode [ 147.313112][ T5696] team_slave_1: entered promiscuous mode [ 147.339493][ T5696] team0: entered allmulticast mode [ 147.374701][ T5696] team_slave_0: entered allmulticast mode [ 147.390729][ T5696] team_slave_1: entered allmulticast mode [ 147.434848][ T5696] dummy0: entered promiscuous mode [ 147.472562][ T5696] dummy0: entered allmulticast mode [ 147.545776][ T5696] nlmon0: entered promiscuous mode [ 147.568124][ T5696] nlmon0: entered allmulticast mode [ 147.599760][ T5696] caif0: entered promiscuous mode [ 147.619726][ T5691] loop0: detected capacity change from 0 to 40427 [ 147.625534][ T5696] caif0: entered allmulticast mode [ 147.641020][ T5691] F2FS-fs (loop0): Invalid log_blocksize (268), supports only 12 [ 147.650844][ T5691] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock [ 147.665530][ T5696] batadv0: entered promiscuous mode [ 147.695293][ T5696] batadv0: entered allmulticast mode [ 147.731892][ T5696] vxcan0: entered promiscuous mode [ 147.739592][ T5691] F2FS-fs (loop0): Found nat_bits in checkpoint [ 147.764377][ T5696] vxcan0: entered allmulticast mode [ 147.833296][ T5696] vxcan1: entered promiscuous mode [ 147.838628][ T5696] vxcan1: entered allmulticast mode [ 147.866872][ T5691] F2FS-fs (loop0): f2fs_check_nid_range: out-of-range nid=1, run fsck to fix. [ 147.879939][ T5696] veth0: entered promiscuous mode [ 147.899453][ T5696] veth0: entered allmulticast mode [ 147.952024][ T5696] veth1: entered promiscuous mode [ 147.980305][ T5696] veth1: entered allmulticast mode [ 147.999265][ T5720] loop3: detected capacity change from 0 to 2048 [ 148.035830][ T5696] wg0: entered promiscuous mode [ 148.061866][ T5696] wg0: entered allmulticast mode [ 148.131588][ T5720] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 148.245021][ T5696] wg1: entered promiscuous mode [ 148.271461][ T5696] wg1: entered allmulticast mode [ 148.450398][ T5696] wg2: entered promiscuous mode [ 148.482650][ T5696] wg2: entered allmulticast mode [ 148.565859][ T5696] veth0_to_bridge: entered promiscuous mode [ 148.632724][ T5696] veth0_to_bridge: entered allmulticast mode [ 148.737597][ T5696] veth1_to_bridge: entered promiscuous mode [ 148.790992][ T5696] veth1_to_bridge: entered allmulticast mode [ 148.845222][ T5696] veth0_to_bond: entered promiscuous mode [ 148.881436][ T5696] veth0_to_bond: entered allmulticast mode [ 148.937397][ T5696] veth1_to_bond: entered promiscuous mode [ 148.979523][ T5696] veth1_to_bond: entered allmulticast mode [ 149.012807][ T5696] veth0_to_team: entered promiscuous mode [ 149.034439][ T5696] veth0_to_team: entered allmulticast mode [ 149.685285][ T5696] veth1_to_team: entered promiscuous mode [ 149.724371][ T29] kauditd_printk_skb: 2 callbacks suppressed [ 149.724389][ T29] audit: type=1400 audit(1718224455.886:309): avc: denied { write } for pid=5719 comm="syz-executor.3" path="/root/syzkaller-testdir2857484941/syzkaller.a5w31T/43/file0/bus" dev="loop3" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 149.764297][ T5696] veth1_to_team: entered allmulticast mode [ 149.894869][ T5696] veth0_to_batadv: entered promiscuous mode [ 149.900818][ T5696] veth0_to_batadv: entered allmulticast mode [ 149.916660][ T29] audit: type=1400 audit(1718224455.936:310): avc: denied { read write } for pid=5719 comm="syz-executor.3" name="file1" dev="loop3" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 149.944280][ T29] audit: type=1400 audit(1718224455.936:311): avc: denied { open } for pid=5719 comm="syz-executor.3" path="/root/syzkaller-testdir2857484941/syzkaller.a5w31T/43/file0/file1" dev="loop3" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 150.010544][ T5696] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 150.196379][ T5696] batadv_slave_0: entered promiscuous mode [ 150.208419][ T5106] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 150.214311][ T5696] batadv_slave_0: entered allmulticast mode [ 150.245407][ T5113] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 150.267821][ T5113] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 150.279913][ T5113] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 150.300340][ T5696] veth1_to_batadv: entered promiscuous mode [ 150.316707][ T5113] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 150.330796][ T5696] veth1_to_batadv: entered allmulticast mode [ 150.337686][ T5113] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 150.355309][ T5113] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 150.381676][ T5696] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 150.431959][ T5696] batadv_slave_1: entered promiscuous mode [ 150.469132][ T5696] batadv_slave_1: entered allmulticast mode [ 150.536974][ T5696] xfrm0: entered promiscuous mode [ 150.542043][ T5696] xfrm0: entered allmulticast mode [ 150.589634][ T5696] veth0_to_hsr: entered promiscuous mode [ 150.599110][ T5696] veth0_to_hsr: entered allmulticast mode [ 150.622207][ T5696] hsr_slave_0: entered allmulticast mode [ 150.662664][ T5696] veth1_to_hsr: entered promiscuous mode [ 150.679857][ T5696] veth1_to_hsr: entered allmulticast mode [ 150.735520][ T5696] hsr_slave_1: entered allmulticast mode [ 150.771101][ T5696] hsr0: entered promiscuous mode [ 150.788743][ T5696] hsr0: entered allmulticast mode [ 150.825245][ T5696] veth1_virt_wifi: entered promiscuous mode [ 150.844394][ T5696] veth1_virt_wifi: entered allmulticast mode [ 150.899362][ T5696] veth0_virt_wifi: entered promiscuous mode [ 150.923253][ T5696] veth0_virt_wifi: entered allmulticast mode [ 150.977531][ T5696] net veth1_virt_wifi virt_wifi0: entered promiscuous mode [ 150.986421][ T5696] net veth1_virt_wifi virt_wifi0: entered allmulticast mode [ 150.995829][ T5696] veth1_vlan: entered allmulticast mode [ 151.062334][ T5696] vlan0: entered promiscuous mode [ 151.074158][ T5696] vlan1: entered promiscuous mode [ 151.087021][ T5696] vlan1: entered allmulticast mode [ 151.097608][ T5696] macvlan0: entered promiscuous mode [ 151.102926][ T5696] macvlan0: entered allmulticast mode [ 151.137118][ T5696] macvlan1: entered promiscuous mode [ 151.149103][ T5696] macvlan1: entered allmulticast mode [ 151.172578][ T5696] ipvlan0: entered promiscuous mode [ 151.184563][ T5696] ipvlan0: entered allmulticast mode [ 151.191195][ T5696] ipvlan1: entered promiscuous mode [ 151.198467][ T5696] ipvlan1: entered allmulticast mode [ 151.209891][ T5696] veth1_macvtap: entered allmulticast mode [ 151.229360][ T5696] veth0_macvtap: entered allmulticast mode [ 151.254135][ T5696] macvtap0: entered promiscuous mode [ 151.262453][ T5696] macvtap0: entered allmulticast mode [ 151.279525][ T45] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 151.289987][ T5696] macsec0: entered promiscuous mode [ 151.300761][ T5696] macsec0: entered allmulticast mode [ 151.335710][ T5696] geneve0: entered promiscuous mode [ 151.341019][ T5696] geneve0: entered allmulticast mode [ 151.375594][ T5696] netdevsim netdevsim4 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 151.389859][ T5696] netdevsim netdevsim4 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 151.403005][ T5696] netdevsim netdevsim4 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 151.413867][ T5696] netdevsim netdevsim4 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 151.428598][ T5696] geneve1: entered promiscuous mode [ 151.442511][ T5696] geneve1: entered allmulticast mode [ 151.468973][ T5696] netdevsim netdevsim4 netdevsim0: entered promiscuous mode [ 151.482499][ T5696] netdevsim netdevsim4 netdevsim0: entered allmulticast mode [ 151.501608][ T5696] netdevsim netdevsim4 netdevsim1: entered promiscuous mode [ 151.510296][ T5696] netdevsim netdevsim4 netdevsim1: entered allmulticast mode [ 151.516939][ T45] usb 4-1: Using ep0 maxpacket: 8 [ 151.532611][ T5696] netdevsim netdevsim4 netdevsim2: entered promiscuous mode [ 151.544490][ T5696] netdevsim netdevsim4 netdevsim2: entered allmulticast mode [ 151.567744][ T5696] netdevsim netdevsim4 netdevsim3: entered promiscuous mode [ 151.573928][ T45] usb 4-1: config 32 interface 0 altsetting 0 endpoint 0x85 has an invalid bInterval 0, changing to 7 [ 151.580245][ T5696] netdevsim netdevsim4 netdevsim3: entered allmulticast mode [ 151.599647][ T45] usb 4-1: New USB device found, idVendor=19b5, idProduct=0021, bcdDevice=98.c7 [ 151.611547][ T45] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 151.631117][ T5696] mac80211_hwsim hwsim10 wlan0: entered promiscuous mode [ 151.645986][ T5696] mac80211_hwsim hwsim10 wlan0: entered allmulticast mode [ 151.708816][ T5696] mac80211_hwsim hwsim11 wlan1: entered promiscuous mode [ 151.717947][ T5696] mac80211_hwsim hwsim11 wlan1: entered allmulticast mode [ 151.730957][ T5696] bond1: entered promiscuous mode [ 151.741730][ T5696] bond1: entered allmulticast mode [ 151.885095][ T45] usb 4-1: string descriptor 0 read error: -71 [ 151.973642][ T45] hub 4-1:32.0: USB hub found [ 151.997958][ T45] hub 4-1:32.0: config failed, can't read hub descriptor (err -22) [ 152.331474][ T51] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 152.464395][ T4478] Bluetooth: hci5: command tx timeout [ 152.726874][ T45] usb 4-1: USB disconnect, device number 2 [ 153.075574][ T51] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 153.708407][ T29] audit: type=1400 audit(1718224459.866:312): avc: denied { ioctl } for pid=5762 comm="syz-executor.1" path="socket:[9079]" dev="sockfs" ino=9079 ioctlcmd=0x890b scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 154.098155][ T29] audit: type=1400 audit(1718224460.266:313): avc: denied { search } for pid=4516 comm="syslogd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 154.337730][ T29] audit: type=1400 audit(1718224460.506:314): avc: denied { read } for pid=5766 comm="syz-executor.3" name="msr" dev="devtmpfs" ino=87 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 154.339035][ T51] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 154.375611][ T29] audit: type=1400 audit(1718224460.506:315): avc: denied { open } for pid=5766 comm="syz-executor.3" path="/dev/cpu/0/msr" dev="devtmpfs" ino=87 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 154.546475][ T4478] Bluetooth: hci5: command tx timeout [ 154.725262][ T51] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 156.624393][ T4478] Bluetooth: hci5: command tx timeout [ 158.338686][ T5784] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.1'. [ 158.389124][ T5784] netlink: 52 bytes leftover after parsing attributes in process `syz-executor.1'. [ 158.400405][ T5784] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.1'. [ 158.430420][ T5784] syz-executor.1 (5784) used greatest stack depth: 21728 bytes left [ 158.473246][ T5798] loop4: detected capacity change from 0 to 256 [ 158.535059][ T5792] sit1: entered promiscuous mode [ 158.552379][ T5792] sit1: entered allmulticast mode [ 158.588564][ T5379] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 158.704391][ T5113] Bluetooth: hci5: command tx timeout [ 158.809508][ T5798] FAT-fs (loop4): Directory bread(block 64) failed [ 158.854519][ T5798] FAT-fs (loop4): Directory bread(block 65) failed [ 158.876846][ T5798] FAT-fs (loop4): Directory bread(block 66) failed [ 158.883492][ T5798] FAT-fs (loop4): Directory bread(block 67) failed [ 158.890257][ T5798] FAT-fs (loop4): Directory bread(block 68) failed [ 158.934925][ T5798] FAT-fs (loop4): Directory bread(block 69) failed [ 158.942929][ T5798] FAT-fs (loop4): Directory bread(block 70) failed [ 159.025023][ T5798] FAT-fs (loop4): Directory bread(block 71) failed [ 159.036454][ T5798] FAT-fs (loop4): Directory bread(block 72) failed [ 159.074485][ T5798] FAT-fs (loop4): Directory bread(block 73) failed [ 159.113765][ T5802] unknown channel width for channel at 909000KHz? [ 159.688326][ T5807] netlink: 'syz-executor.1': attribute type 1 has an invalid length. [ 159.751226][ T5736] chnl_net:caif_netlink_parms(): no params data found [ 159.763562][ T5809] netlink: 'syz-executor.1': attribute type 24 has an invalid length. [ 162.749921][ T29] audit: type=1326 audit(1718224468.916:316): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5797 comm="syz-executor.4" exe="/root/syz-executor.4" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f461b27cea9 code=0x0 [ 162.919857][ T51] bridge_slave_1: left allmulticast mode [ 162.954977][ T51] bridge_slave_1: left promiscuous mode [ 162.960929][ T51] bridge0: port 2(bridge_slave_1) entered disabled state [ 163.212053][ T3817] kworker/u8:8: attempt to access beyond end of device [ 163.212053][ T3817] loop4: rw=1, sector=1224, nr_sectors = 608 limit=256 [ 163.275354][ T51] bridge_slave_0: left allmulticast mode [ 163.281027][ T51] bridge_slave_0: left promiscuous mode [ 163.362429][ T51] bridge0: port 1(bridge_slave_0) entered disabled state [ 163.383658][ T3817] kworker/u8:8: attempt to access beyond end of device [ 163.383658][ T3817] loop4: rw=1, sector=1864, nr_sectors = 3556 limit=256 [ 164.394307][ T29] audit: type=1400 audit(1718224470.556:317): avc: denied { setopt } for pid=5823 comm="syz-executor.3" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 164.845739][ T4478] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 164.857416][ T4478] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 164.884260][ T4478] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 164.915118][ T4478] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 164.933677][ T4478] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 164.947311][ T4478] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 166.260891][ T51] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 166.293881][ T51] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 166.334842][ T51] bond0 (unregistering): Released all slaves [ 167.024504][ T5113] Bluetooth: hci2: command tx timeout [ 167.183041][ T5858] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 167.230793][ T29] audit: type=1400 audit(1718224473.336:318): avc: denied { read } for pid=5857 comm="syz-executor.1" name="kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 167.409888][ T29] audit: type=1400 audit(1718224473.336:319): avc: denied { open } for pid=5857 comm="syz-executor.1" path="/dev/kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 167.532598][ T5866] loop3: detected capacity change from 0 to 256 [ 167.582258][ T29] audit: type=1400 audit(1718224473.346:320): avc: denied { ioctl } for pid=5857 comm="syz-executor.1" path="/dev/kvm" dev="devtmpfs" ino=84 ioctlcmd=0xae01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 167.649277][ T5736] bridge0: port 1(bridge_slave_0) entered blocking state [ 167.714373][ T5736] bridge0: port 1(bridge_slave_0) entered disabled state [ 167.721635][ T5736] bridge_slave_0: entered allmulticast mode [ 167.759451][ T29] audit: type=1400 audit(1718224473.566:321): avc: denied { read } for pid=5857 comm="syz-executor.1" name="cec1" dev="devtmpfs" ino=868 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 167.826913][ T5736] bridge_slave_0: entered promiscuous mode [ 167.941383][ T29] audit: type=1400 audit(1718224473.576:322): avc: denied { open } for pid=5857 comm="syz-executor.1" path="/dev/cec1" dev="devtmpfs" ino=868 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 167.969374][ T5736] bridge0: port 2(bridge_slave_1) entered blocking state [ 168.034633][ T5736] bridge0: port 2(bridge_slave_1) entered disabled state [ 168.043781][ T5736] bridge_slave_1: entered allmulticast mode [ 168.094475][ T29] audit: type=1400 audit(1718224473.616:323): avc: denied { ioctl } for pid=5857 comm="syz-executor.1" path="/dev/cec1" dev="devtmpfs" ino=868 ioctlcmd=0x6104 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 168.104474][ T5736] bridge_slave_1: entered promiscuous mode [ 168.306455][ T5871] loop3: detected capacity change from 0 to 256 [ 168.306572][ T5873] loop1: detected capacity change from 0 to 256 [ 168.429915][ T5871] FAT-fs (loop3): Directory bread(block 64) failed [ 168.470831][ T5871] FAT-fs (loop3): Directory bread(block 65) failed [ 168.486059][ T5871] FAT-fs (loop3): Directory bread(block 66) failed [ 168.494395][ T5871] FAT-fs (loop3): Directory bread(block 67) failed [ 168.578833][ T5871] FAT-fs (loop3): Directory bread(block 68) failed [ 168.585351][ T5873] FAT-fs (loop1): Directory bread(block 64) failed [ 168.608760][ T5873] FAT-fs (loop1): Directory bread(block 65) failed [ 168.614382][ T5871] FAT-fs (loop3): Directory bread(block 69) failed [ 168.615805][ T51] hsr_slave_0: left promiscuous mode [ 168.642259][ T5873] FAT-fs (loop1): Directory bread(block 66) failed [ 168.670035][ T5871] FAT-fs (loop3): Directory bread(block 70) failed [ 168.674711][ T5873] FAT-fs (loop1): Directory bread(block 67) failed [ 168.684330][ T5871] FAT-fs (loop3): Directory bread(block 71) failed [ 168.690988][ T5871] FAT-fs (loop3): Directory bread(block 72) failed [ 168.714894][ T51] hsr_slave_1: left promiscuous mode [ 168.721522][ T5873] FAT-fs (loop1): Directory bread(block 68) failed [ 168.724041][ T5871] FAT-fs (loop3): Directory bread(block 73) failed [ 168.734543][ T5873] FAT-fs (loop1): Directory bread(block 69) failed [ 168.755229][ T5873] FAT-fs (loop1): Directory bread(block 70) failed [ 168.764869][ T51] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 168.789117][ T5873] FAT-fs (loop1): Directory bread(block 71) failed [ 168.796096][ T51] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 168.812905][ T5873] FAT-fs (loop1): Directory bread(block 72) failed [ 168.845058][ T51] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 168.874960][ T5873] FAT-fs (loop1): Directory bread(block 73) failed [ 168.895111][ T51] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 169.263499][ T51] veth1_macvtap: left promiscuous mode [ 169.279750][ T51] veth0_macvtap: left promiscuous mode [ 169.290038][ T51] veth1_vlan: left promiscuous mode [ 169.295808][ T5113] Bluetooth: hci2: command tx timeout [ 169.314443][ T51] veth0_vlan: left promiscuous mode [ 170.223157][ T29] audit: type=1326 audit(1718224476.376:324): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5869 comm="syz-executor.3" exe="/root/syz-executor.3" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fc61f47cea9 code=0x0 [ 170.819235][ T953] kworker/u8:5: attempt to access beyond end of device [ 170.819235][ T953] loop3: rw=1, sector=1224, nr_sectors = 608 limit=256 [ 170.926112][ T953] kworker/u8:5: attempt to access beyond end of device [ 170.926112][ T953] loop3: rw=1, sector=1864, nr_sectors = 3556 limit=256 [ 171.352666][ T5113] Bluetooth: hci2: command tx timeout [ 171.792408][ T5905] loop3: detected capacity change from 0 to 512 [ 171.909318][ T5905] EXT4-fs warning (device loop3): ext4_multi_mount_protect:318: fsck is running on the filesystem [ 171.940810][ T5905] EXT4-fs warning (device loop3): ext4_multi_mount_protect:318: MMP failure info: last update time: 1669132786, last update node: dvyukov-desk.muc.corp.google.com, last update device: loop4 [ 172.172455][ T51] team0 (unregistering): Port device team_slave_1 removed [ 172.328516][ T51] team0 (unregistering): Port device team_slave_0 removed [ 173.371870][ T5914] loop3: detected capacity change from 0 to 256 [ 173.397568][ T5736] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 173.424877][ T5113] Bluetooth: hci2: command tx timeout [ 173.452432][ T5910] smc: net device wg0 applied user defined pnetid SYZ0 [ 173.464943][ T5911] smc: net device wg0 erased user defined pnetid SYZ0 [ 173.488284][ T5736] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 173.919189][ T5736] team0: Port device team_slave_0 added [ 174.015096][ T5921] netlink: 209852 bytes leftover after parsing attributes in process `syz-executor.3'. [ 174.058212][ T5921] net_ratelimit: 2 callbacks suppressed [ 174.058230][ T5921] openvswitch: netlink: Message has 3068 unknown bytes. [ 174.074128][ T5736] team0: Port device team_slave_1 added [ 174.383637][ T29] audit: type=1400 audit(1718224480.536:325): avc: denied { write } for pid=5922 comm="syz-executor.4" name="vmci" dev="devtmpfs" ino=682 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 175.227461][ T5736] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 175.227487][ T5736] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 175.227517][ T5736] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 175.230131][ T5736] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 175.230148][ T5736] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 175.230177][ T5736] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 175.811599][ T29] audit: type=1400 audit(1718224481.976:326): avc: denied { read } for pid=5937 comm="syz-executor.3" name="autofs" dev="devtmpfs" ino=98 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 175.913412][ T29] audit: type=1400 audit(1718224482.006:327): avc: denied { open } for pid=5937 comm="syz-executor.3" path="/dev/autofs" dev="devtmpfs" ino=98 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 175.996814][ T29] audit: type=1400 audit(1718224482.156:328): avc: denied { write } for pid=5938 comm="syz-executor.4" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=key permissive=1 [ 176.049117][ T5736] hsr_slave_0: entered promiscuous mode [ 176.095650][ T5736] hsr_slave_1: entered promiscuous mode [ 176.130540][ T5736] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 176.191389][ T5736] Cannot create hsr debugfs directory [ 176.224237][ T29] audit: type=1400 audit(1718224482.386:329): avc: denied { mount } for pid=5937 comm="syz-executor.3" name="/" dev="tmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 176.249592][ T5831] chnl_net:caif_netlink_parms(): no params data found [ 176.374491][ T29] audit: type=1400 audit(1718224482.536:330): avc: denied { unmount } for pid=5937 comm="syz-executor.3" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 176.417538][ T5917] loop1: detected capacity change from 0 to 32768 [ 176.504069][ T29] audit: type=1400 audit(1718224482.576:331): avc: denied { ioctl } for pid=5937 comm="syz-executor.3" path="/dev/autofs" dev="devtmpfs" ino=98 ioctlcmd=0x9374 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 176.569822][ T5917] read_mapping_page failed! [ 176.607471][ T5917] jfs_mount: Failed to read AGGREGATE_I [ 176.630805][ T5917] Mount JFS Failure: -5 [ 176.679532][ T5917] jfs_mount failed w/return code = -5 [ 177.681258][ T5956] smc: net device wg0 applied user defined pnetid SYZ0 [ 177.705748][ T5958] smc: net device wg0 erased user defined pnetid SYZ0 [ 178.237678][ T5968] netlink: 'syz-executor.3': attribute type 10 has an invalid length. [ 178.253251][ T5968] netlink: 132 bytes leftover after parsing attributes in process `syz-executor.3'. [ 178.539017][ T5831] bridge0: port 1(bridge_slave_0) entered blocking state [ 178.560896][ T5831] bridge0: port 1(bridge_slave_0) entered disabled state [ 178.582958][ T5831] bridge_slave_0: entered allmulticast mode [ 178.618573][ T5831] bridge_slave_0: entered promiscuous mode [ 178.740872][ T5831] bridge0: port 2(bridge_slave_1) entered blocking state [ 178.774454][ T5831] bridge0: port 2(bridge_slave_1) entered disabled state [ 178.814694][ T5831] bridge_slave_1: entered allmulticast mode [ 178.822499][ T5831] bridge_slave_1: entered promiscuous mode [ 179.146082][ T4478] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 179.156616][ T4478] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 179.166370][ T4478] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 179.181013][ T4478] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 179.189322][ T4478] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 179.197748][ T4478] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 179.262972][ T5831] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 179.281754][ T5831] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 179.398651][ T5831] team0: Port device team_slave_0 added [ 179.502151][ T5831] team0: Port device team_slave_1 added [ 179.759619][ T5831] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 179.781534][ T5831] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 179.845801][ T5831] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 179.919777][ T5984] loop1: detected capacity change from 0 to 2048 [ 179.997106][ T5831] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 180.020401][ T5984] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 180.065410][ T5831] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 180.186857][ T5831] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 180.223453][ T5974] loop3: detected capacity change from 0 to 32768 [ 180.310068][ T51] bridge_slave_1: left allmulticast mode [ 180.344246][ T51] bridge_slave_1: left promiscuous mode [ 180.415342][ T51] bridge0: port 2(bridge_slave_1) entered disabled state [ 180.469822][ T51] bridge_slave_0: left allmulticast mode [ 180.507155][ T51] bridge_slave_0: left promiscuous mode [ 180.528483][ T51] bridge0: port 1(bridge_slave_0) entered disabled state [ 180.546436][ T29] audit: type=1400 audit(1718224486.716:332): avc: denied { remove_name } for pid=5973 comm="syz-executor.3" name="file1" dev="loop3" ino=4 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 180.660261][ T29] audit: type=1400 audit(1718224486.746:333): avc: denied { unlink } for pid=5973 comm="syz-executor.3" name="file1" dev="loop3" ino=4 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 181.113158][ T51] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 181.157813][ T29] audit: type=1400 audit(1718224487.316:334): avc: denied { write } for pid=4516 comm="syslogd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 181.190337][ T51] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 181.229273][ T51] bond0 (unregistering): Released all slaves [ 181.245321][ T29] audit: type=1400 audit(1718224487.316:335): avc: denied { remove_name } for pid=4516 comm="syslogd" name="messages" dev="tmpfs" ino=3 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 181.284354][ T4478] Bluetooth: hci0: command tx timeout [ 181.370350][ T29] audit: type=1400 audit(1718224487.316:336): avc: denied { rename } for pid=4516 comm="syslogd" name="messages" dev="tmpfs" ino=3 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 181.495207][ T29] audit: type=1400 audit(1718224487.316:337): avc: denied { add_name } for pid=4516 comm="syslogd" name="messages.0" dev="tmpfs" ino=2 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 181.636653][ T29] audit: type=1400 audit(1718224487.316:338): avc: denied { unlink } for pid=4516 comm="syslogd" name="messages.0" dev="tmpfs" ino=2 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 181.686206][ T5991] smc: net device wg0 applied user defined pnetid SYZ0 [ 181.724320][ T29] audit: type=1400 audit(1718224487.356:339): avc: denied { create } for pid=4516 comm="syslogd" name="messages" scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 181.873699][ T5991] smc: net device wg0 erased user defined pnetid SYZ0 [ 182.041673][ T5098] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 182.104388][ T29] audit: type=1400 audit(1718224488.236:340): avc: denied { read } for pid=5995 comm="syz-executor.3" name="usbmon0" dev="devtmpfs" ino=702 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 182.182748][ T29] audit: type=1400 audit(1718224488.236:341): avc: denied { open } for pid=5995 comm="syz-executor.3" path="/dev/usbmon0" dev="devtmpfs" ino=702 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 182.252972][ T5831] hsr_slave_0: entered promiscuous mode [ 182.315493][ T5831] hsr_slave_1: entered promiscuous mode [ 182.325501][ T5831] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 182.333541][ T5999] capability: warning: `syz-executor.3' uses deprecated v2 capabilities in a way that may be insecure [ 182.345262][ T5831] Cannot create hsr debugfs directory [ 182.379288][ T51] hsr_slave_0: left promiscuous mode [ 182.386436][ T51] hsr_slave_1: left promiscuous mode [ 182.417322][ T51] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 182.465248][ T51] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 182.936534][ T51] team0 (unregistering): Port device team_slave_1 removed [ 182.978196][ T51] team0 (unregistering): Port device team_slave_0 removed [ 183.344345][ T4478] Bluetooth: hci0: command tx timeout [ 183.410434][ T5978] chnl_net:caif_netlink_parms(): no params data found [ 183.620152][ T6014] smc: net device wg0 applied user defined pnetid SYZ0 [ 183.724432][ T6014] smc: net device wg0 erased user defined pnetid SYZ0 [ 183.986421][ T5736] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 184.057557][ T5736] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 184.225662][ T5736] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 184.299224][ T5736] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 184.751735][ T6040] loop3: detected capacity change from 0 to 132 [ 184.819682][ T5978] bridge0: port 1(bridge_slave_0) entered blocking state [ 184.904097][ T5978] bridge0: port 1(bridge_slave_0) entered disabled state [ 184.949959][ T5978] bridge_slave_0: entered allmulticast mode [ 184.978996][ T5978] bridge_slave_0: entered promiscuous mode [ 185.053948][ T5978] bridge0: port 2(bridge_slave_1) entered blocking state [ 185.100249][ T5978] bridge0: port 2(bridge_slave_1) entered disabled state [ 185.103017][ T6045] loop1: detected capacity change from 0 to 512 [ 185.124606][ T5978] bridge_slave_1: entered allmulticast mode [ 185.144840][ T5978] bridge_slave_1: entered promiscuous mode [ 185.165664][ T6046] loop3: detected capacity change from 0 to 2048 [ 185.373422][ T6046] Alternate GPT is invalid, using primary GPT. [ 185.411307][ T6046] loop3: p1 p2 p3 [ 185.424761][ T4478] Bluetooth: hci0: command tx timeout [ 185.567773][ T6045] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 185.668706][ T5978] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 185.687457][ T6045] ext4 filesystem being mounted at /root/syzkaller-testdir2148744786/syzkaller.vXZgWF/63/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 185.767770][ T5978] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 186.367497][ T5978] team0: Port device team_slave_0 added [ 186.396704][ T5978] team0: Port device team_slave_1 added [ 186.709760][ T29] kauditd_printk_skb: 3 callbacks suppressed [ 186.709779][ T29] audit: type=1400 audit(1718224492.876:345): avc: denied { create } for pid=6042 comm="syz-executor.1" name="file2" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=dir permissive=1 [ 186.822724][ T29] audit: type=1400 audit(1718224492.916:346): avc: denied { unmount } for pid=5106 comm="syz-executor.3" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=filesystem permissive=1 [ 186.947308][ T29] audit: type=1400 audit(1718224493.026:347): avc: denied { watch watch_reads } for pid=6042 comm="syz-executor.1" path="/root/syzkaller-testdir2148744786/syzkaller.vXZgWF/63/file0" dev="loop1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 187.005736][ T5978] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 187.033092][ T5978] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 187.120515][ T5978] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 187.327624][ T29] audit: type=1400 audit(1718224493.486:348): avc: denied { listen } for pid=6059 comm="syz-executor.3" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 187.445482][ T5978] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 187.477546][ T5978] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 187.504533][ T4478] Bluetooth: hci0: command tx timeout [ 187.559026][ T5978] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 187.624492][ T5110] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 187.861679][ T5110] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0xFF has an invalid bInterval 0, changing to 7 [ 187.876323][ T5098] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 187.901787][ T5110] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0xFF has invalid wMaxPacketSize 0 [ 187.944453][ T5110] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 187.993141][ T5110] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 187.994645][ T5978] hsr_slave_0: entered promiscuous mode [ 188.018427][ T5978] hsr_slave_1: entered promiscuous mode [ 188.034669][ T5110] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 188.050386][ T5978] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 188.060249][ T5978] Cannot create hsr debugfs directory [ 188.078479][ T5110] usb 4-1: config 0 descriptor?? [ 188.347405][ T51] bridge0: port 2(bridge_slave_1) entered disabled state [ 188.362878][ T51] bridge0: port 1(bridge_slave_0) entered disabled state [ 188.714062][ T5110] plantronics 0003:047F:FFFF.0001: unknown main item tag 0x0 [ 188.744473][ T5110] plantronics 0003:047F:FFFF.0001: unknown main item tag 0x0 [ 188.778741][ T5110] plantronics 0003:047F:FFFF.0001: No inputs registered, leaving [ 188.862113][ T5110] plantronics 0003:047F:FFFF.0001: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.3-1/input0 [ 189.060034][ T51] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 189.072030][ T5110] usb 4-1: USB disconnect, device number 3 [ 189.083786][ T51] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 189.108802][ T51] bond0 (unregistering): Released all slaves [ 189.163562][ T51] bond1 (unregistering): Released all slaves [ 189.700667][ T5736] 8021q: adding VLAN 0 to HW filter on device bond0 [ 189.796455][ T5831] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 190.086079][ T5831] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 190.358984][ T5831] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 190.487909][ T5736] 8021q: adding VLAN 0 to HW filter on device team0 [ 190.588628][ T5831] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 190.863585][ T51] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 190.885704][ T51] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 190.927174][ T29] audit: type=1400 audit(1718224497.086:349): avc: denied { connect } for pid=6090 comm="syz-executor.3" lport=58 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 191.826400][ T51] team0 (unregistering): Port device team_slave_1 removed [ 191.901634][ T51] team0 (unregistering): Port device team_slave_0 removed [ 191.941745][ T8] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 192.159435][ T8] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0xFF has an invalid bInterval 0, changing to 7 [ 192.170706][ T8] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0xFF has invalid wMaxPacketSize 0 [ 192.181136][ T8] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 192.198234][ T8] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 192.208632][ T8] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 192.244737][ T8] usb 4-1: config 0 descriptor?? [ 192.569194][ T6094] warning: `syz-executor.1' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 192.606191][ T45] bridge0: port 1(bridge_slave_0) entered blocking state [ 192.614795][ T45] bridge0: port 1(bridge_slave_0) entered forwarding state [ 192.744679][ T8] plantronics 0003:047F:FFFF.0002: unknown main item tag 0x0 [ 192.778379][ T8] plantronics 0003:047F:FFFF.0002: unknown main item tag 0x0 [ 192.794061][ T8] plantronics 0003:047F:FFFF.0002: No inputs registered, leaving [ 192.881076][ T8] plantronics 0003:047F:FFFF.0002: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.3-1/input0 [ 193.094065][ T784] bridge0: port 2(bridge_slave_1) entered blocking state [ 193.102494][ T784] bridge0: port 2(bridge_slave_1) entered forwarding state [ 193.232377][ T8] usb 4-1: USB disconnect, device number 4 [ 193.921745][ T29] audit: type=1400 audit(1718224500.086:350): avc: denied { read write } for pid=6122 comm="syz-executor.1" name="uhid" dev="devtmpfs" ino=1083 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 194.065141][ T29] audit: type=1400 audit(1718224500.086:351): avc: denied { open } for pid=6122 comm="syz-executor.1" path="/dev/uhid" dev="devtmpfs" ino=1083 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 194.198773][ T29] audit: type=1400 audit(1718224500.206:352): avc: denied { ioctl } for pid=6122 comm="syz-executor.1" path="socket:[10834]" dev="sockfs" ino=10834 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 194.279773][ T29] audit: type=1400 audit(1718224500.226:353): avc: denied { bind } for pid=6122 comm="syz-executor.1" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 194.325850][ T5831] 8021q: adding VLAN 0 to HW filter on device bond0 [ 194.345510][ T5978] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 194.428606][ T5978] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 194.480960][ T5978] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 194.516815][ T6135] loop3: detected capacity change from 0 to 256 [ 194.536433][ T5978] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 194.750238][ T5831] 8021q: adding VLAN 0 to HW filter on device team0 [ 194.791746][ T1239] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.814866][ T1239] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.869937][ T8] bridge0: port 1(bridge_slave_0) entered blocking state [ 194.877188][ T8] bridge0: port 1(bridge_slave_0) entered forwarding state [ 194.884430][ T29] audit: type=1400 audit(1718224501.036:354): avc: denied { ioctl } for pid=6133 comm="syz-executor.3" path="/dev/dri/card1" dev="devtmpfs" ino=630 ioctlcmd=0x64be scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 194.929248][ T5736] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 194.960370][ T5731] bridge0: port 2(bridge_slave_1) entered blocking state [ 194.967617][ T5731] bridge0: port 2(bridge_slave_1) entered forwarding state [ 195.046777][ T29] audit: type=1400 audit(1718224501.206:355): avc: denied { write } for pid=6133 comm="syz-executor.3" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 195.239757][ T29] audit: type=1400 audit(1718224501.406:356): avc: denied { read } for pid=6143 comm="syz-executor.1" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 195.631810][ T5736] veth0_vlan: entered promiscuous mode [ 195.799629][ T5978] 8021q: adding VLAN 0 to HW filter on device bond0 [ 195.881884][ T29] audit: type=1804 audit(1718224502.046:357): pid=6149 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=open_writers comm="syz-executor.1" name="/root/syzkaller-testdir2148744786/syzkaller.vXZgWF/74/cgroup.controllers" dev="sda1" ino=1948 res=1 errno=0 [ 195.922637][ T6149] netlink: 'syz-executor.1': attribute type 11 has an invalid length. [ 195.948820][ T5736] veth1_vlan: entered promiscuous mode [ 196.253349][ T5978] 8021q: adding VLAN 0 to HW filter on device team0 [ 196.387328][ T5731] bridge0: port 1(bridge_slave_0) entered blocking state [ 196.394775][ T5731] bridge0: port 1(bridge_slave_0) entered forwarding state [ 196.461936][ T5736] veth0_macvtap: entered promiscuous mode [ 196.513929][ T5651] bridge0: port 2(bridge_slave_1) entered blocking state [ 196.521233][ T5651] bridge0: port 2(bridge_slave_1) entered forwarding state [ 196.774091][ T5736] veth1_macvtap: entered promiscuous mode [ 197.142125][ T5831] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 197.251506][ T5978] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 197.289793][ T5978] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 197.322211][ T5646] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 197.420430][ T5736] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 197.467119][ T5736] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 197.502124][ T5736] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 197.554692][ T5646] usb 2-1: Using ep0 maxpacket: 32 [ 197.572846][ T5646] usb 2-1: config 0 has no interfaces? [ 197.601384][ T5646] usb 2-1: New USB device found, idVendor=1557, idProduct=8150, bcdDevice=29.ed [ 197.615965][ T5736] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 197.640304][ T5646] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 197.672488][ T5736] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 197.692092][ T5646] usb 2-1: Product: syz [ 197.696427][ T5646] usb 2-1: Manufacturer: syz [ 197.712374][ T5736] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 197.721384][ T5646] usb 2-1: SerialNumber: syz [ 197.771562][ T5646] usb 2-1: config 0 descriptor?? [ 197.811669][ T5736] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 197.851397][ T5736] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 197.884221][ T5736] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 197.919341][ T5736] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 198.107759][ T29] audit: type=1400 audit(1718224504.256:358): avc: denied { create } for pid=6173 comm="syz-executor.3" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_crypto_socket permissive=1 [ 198.225487][ T29] audit: type=1400 audit(1718224504.286:359): avc: denied { bind } for pid=6173 comm="syz-executor.3" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 198.297831][ T5831] veth0_vlan: entered promiscuous mode [ 198.547212][ T5831] veth1_vlan: entered promiscuous mode [ 198.560374][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 198.613025][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 198.859555][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 198.910135][ T5978] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 198.912924][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 199.078987][ T5831] veth0_macvtap: entered promiscuous mode [ 199.091807][ T6187] raw_sendmsg: syz-executor.3 forgot to set AF_INET. Fix it! [ 199.182938][ T5831] veth1_macvtap: entered promiscuous mode [ 199.292557][ T5831] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 199.341732][ T5831] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 199.376898][ T5831] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 199.400592][ T5831] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 199.450035][ T5831] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 199.529371][ T5831] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 199.569284][ T5831] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 199.591103][ T5831] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 199.634231][ T5831] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 199.688761][ T5831] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 199.791818][ T5831] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 199.832420][ T29] kauditd_printk_skb: 2 callbacks suppressed [ 199.832481][ T29] audit: type=1400 audit(1718224505.976:362): avc: denied { mount } for pid=6201 comm="syz-executor.3" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 199.884458][ T5831] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 199.923194][ T5161] usb 2-1: USB disconnect, device number 2 [ 199.925709][ T5831] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 199.964309][ T5831] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 200.268570][ T6213] loop1: detected capacity change from 0 to 256 [ 201.165790][ T6213] FAT-fs (loop1): Directory bread(block 64) failed [ 201.284467][ T6213] FAT-fs (loop1): Directory bread(block 65) failed [ 201.319675][ T6213] FAT-fs (loop1): Directory bread(block 66) failed [ 201.350261][ T6213] FAT-fs (loop1): Directory bread(block 67) failed [ 201.382765][ T6213] FAT-fs (loop1): Directory bread(block 68) failed [ 201.392768][ T6213] FAT-fs (loop1): Directory bread(block 69) failed [ 201.425279][ T6213] FAT-fs (loop1): Directory bread(block 70) failed [ 201.431834][ T6213] FAT-fs (loop1): Directory bread(block 71) failed [ 201.482933][ T6213] FAT-fs (loop1): Directory bread(block 72) failed [ 201.535853][ T6213] FAT-fs (loop1): Directory bread(block 73) failed [ 201.559483][ T5978] veth0_vlan: entered promiscuous mode [ 201.588259][ T3817] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 201.637045][ T3817] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 201.672861][ T5978] veth1_vlan: entered promiscuous mode [ 201.816620][ T3817] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 201.914404][ T3817] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 202.020943][ T4478] Bluetooth: hci3: command 0x0406 tx timeout [ 202.288502][ T5978] veth0_macvtap: entered promiscuous mode [ 203.100137][ T29] audit: type=1326 audit(1718224509.266:363): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6211 comm="syz-executor.1" exe="/root/syz-executor.1" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f801167cea9 code=0x0 [ 203.214117][ T5978] veth1_macvtap: entered promiscuous mode [ 203.547242][ T12] kworker/u8:1: attempt to access beyond end of device [ 203.547242][ T12] loop1: rw=1, sector=1224, nr_sectors = 608 limit=256 [ 203.564336][ T5978] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 203.623564][ T5978] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 203.638893][ T12] kworker/u8:1: attempt to access beyond end of device [ 203.638893][ T12] loop1: rw=1, sector=1864, nr_sectors = 3556 limit=256 [ 203.703721][ T5978] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 203.759923][ T5978] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 203.812778][ T5978] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 203.855198][ T5978] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 203.908672][ T5978] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 203.973547][ T5978] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 204.070918][ T5978] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 204.083999][ T5978] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 204.119382][ T5978] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 204.198181][ T5978] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 204.229927][ T5978] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 204.244341][ T5646] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 204.282174][ T5978] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 204.309145][ T6249] netlink: 'syz-executor.3': attribute type 10 has an invalid length. [ 204.347401][ T6249] batman_adv: batadv0: Adding interface: wlan0 [ 204.386068][ T6249] batman_adv: batadv0: The MTU of interface wlan0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 204.445287][ T5646] usb 3-1: Using ep0 maxpacket: 32 [ 204.471088][ T5646] usb 3-1: config 0 has no interfaces? [ 204.508747][ T5646] usb 3-1: New USB device found, idVendor=1557, idProduct=8150, bcdDevice=29.ed [ 204.523042][ T6249] batman_adv: batadv0: Interface activated: wlan0 [ 204.574733][ T5646] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 204.600696][ T5978] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 204.628500][ T5646] usb 3-1: Product: syz [ 204.632689][ T5646] usb 3-1: Manufacturer: syz [ 204.667902][ T5978] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 204.677103][ T5646] usb 3-1: SerialNumber: syz [ 204.733807][ T5646] usb 3-1: config 0 descriptor?? [ 204.738890][ T5978] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 204.785858][ T5978] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 205.342026][ T5978] batman_adv: The newly added mac address (08:02:11:00:00:00) already exists on: wlan0 [ 205.365897][ T5978] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 205.495851][ T5539] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 205.511771][ T5539] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 205.651324][ T29] audit: type=1400 audit(1718224511.816:364): avc: denied { setopt } for pid=6267 comm="syz-executor.3" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 205.695638][ T6256] 9pnet_fd: p9_fd_create_tcp (6256): problem connecting socket to 127.0.0.1 [ 205.778891][ T953] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 205.832421][ T953] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 205.881598][ T6266] loop0: detected capacity change from 0 to 8 [ 206.065752][ T29] audit: type=1400 audit(1718224512.226:365): avc: denied { write } for pid=6271 comm="syz-executor.3" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 206.172045][ T6266] SQUASHFS error: zlib decompression failed, data probably corrupt [ 206.184494][ T6266] SQUASHFS error: Failed to read block 0x4e8: -5 [ 206.244256][ T29] audit: type=1800 audit(1718224512.406:366): pid=6266 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz-executor.0" name="file1" dev="loop0" ino=5 res=0 errno=0 [ 206.380021][ T29] audit: type=1400 audit(1718224512.546:367): avc: denied { map } for pid=6265 comm="syz-executor.0" path="/root/syzkaller-testdir3514857955/syzkaller.0NsiHN/7/file0/file1" dev="loop0" ino=5 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 206.554033][ T29] audit: type=1400 audit(1718224512.716:368): avc: denied { setopt } for pid=6265 comm="syz-executor.0" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 206.618514][ T29] audit: type=1400 audit(1718224512.786:369): avc: denied { create } for pid=6281 comm="syz-executor.4" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 206.720196][ T29] audit: type=1400 audit(1718224512.816:370): avc: denied { bind } for pid=6281 comm="syz-executor.4" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 206.850650][ T29] audit: type=1400 audit(1718224512.826:371): avc: denied { wake_alarm } for pid=6265 comm="syz-executor.0" capability=35 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 206.966537][ T5725] usb 3-1: USB disconnect, device number 2 [ 207.743936][ T6291] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.0'. [ 207.792491][ T6291] netlink: 'syz-executor.0': attribute type 20 has an invalid length. [ 208.341707][ T6280] loop1: detected capacity change from 0 to 32768 [ 208.435155][ T6280] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop1 (7:1) scanned by syz-executor.1 (6280) [ 208.506702][ T29] audit: type=1400 audit(1718224514.676:372): avc: denied { create } for pid=6299 comm="syz-executor.3" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 208.605230][ T6302] 9pnet_fd: Insufficient options for proto=fd [ 208.673852][ T29] audit: type=1400 audit(1718224514.836:373): avc: denied { create } for pid=6301 comm="syz-executor.2" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 208.678418][ T6280] BTRFS info (device loop1): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 208.812770][ T6280] BTRFS info (device loop1): using sha256 (sha256-avx2) checksum algorithm [ 208.844421][ T6280] BTRFS info (device loop1): using free-space-tree [ 209.315369][ T6327] PM: Enabling pm_trace changes system date and time during resume. [ 209.315369][ T6327] PM: Correct system time has to be restored manually after resume. [ 209.515904][ T5098] BTRFS info (device loop1): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 209.666749][ T6332] overlayfs: failed to resolve './file0': -2 [ 210.169345][ T6331] input: syz1 as /devices/virtual/input/input5 [ 210.563509][ T6349] loop1: detected capacity change from 0 to 512 [ 210.698939][ T6351] netlink: 'syz-executor.3': attribute type 10 has an invalid length. [ 210.898739][ T6353] loop4: detected capacity change from 0 to 128 [ 211.200339][ T6353] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 211.232305][ T6353] ext4 filesystem being mounted at /root/syzkaller-testdir1744808199/syzkaller.rDEkPx/5/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 211.307162][ T29] kauditd_printk_skb: 11 callbacks suppressed [ 211.307180][ T29] audit: type=1400 audit(1718224517.466:385): avc: denied { write } for pid=6354 comm="syz-executor.0" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 212.017110][ T6353] EXT4-fs error (device loop4): ext4_validate_block_bitmap:423: comm syz-executor.4: bg 0: bad block bitmap checksum [ 212.039362][ T6361] loop2: detected capacity change from 0 to 1024 [ 212.155941][ T6361] hfsplus: failed to load root directory [ 212.307944][ T5978] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 212.978085][ T29] audit: type=1400 audit(1718224519.146:386): avc: denied { bind } for pid=6360 comm="syz-executor.2" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 213.208442][ T6378] netlink: 'syz-executor.2': attribute type 4 has an invalid length. [ 213.378331][ T6387] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'. [ 213.394551][ T6369] netlink: 'syz-executor.2': attribute type 4 has an invalid length. [ 213.744370][ T6388] input: syz1 as /devices/virtual/input/input6 [ 215.587191][ T29] audit: type=1400 audit(1718224521.756:387): avc: denied { ioctl } for pid=6393 comm="syz-executor.4" path="socket:[13158]" dev="sockfs" ino=13158 ioctlcmd=0x5411 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1 [ 216.593260][ T6404] loop4: detected capacity change from 0 to 128 [ 216.650933][ T6404] VFS: could not find a valid V7 on loop4. [ 216.806654][ T6402] openvswitch: netlink: nsh attribute has 4 unknown bytes. [ 216.882810][ T29] audit: type=1400 audit(1718224523.036:388): avc: denied { write } for pid=6410 comm="syz-executor.0" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_crypto_socket permissive=1 [ 217.310268][ T29] audit: type=1800 audit(1718224523.466:389): pid=6409 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed(directio) comm="syz-executor.3" name="file1" dev="sda1" ino=1932 res=0 errno=0 [ 217.505192][ T6419] netlink: 'syz-executor.1': attribute type 1 has an invalid length. [ 217.557346][ T6419] netlink: 191384 bytes leftover after parsing attributes in process `syz-executor.1'. [ 218.158377][ T6404] loop4: detected capacity change from 0 to 4096 [ 218.349424][ T6429] program syz-executor.1 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 218.774037][ T6433] loop1: detected capacity change from 0 to 128 [ 219.004324][ T5815] I/O error, dev loop1, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 0 [ 219.035106][ T29] audit: type=1400 audit(1718224525.186:390): avc: denied { bind } for pid=6434 comm="syz-executor.3" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 219.177190][ T6404] NILFS (loop4): error -4 creating segctord thread [ 219.915814][ T6443] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.4'. [ 220.141089][ T6426] loop2: detected capacity change from 0 to 32768 [ 220.299855][ T6426] bcachefs (/dev/loop2): error validating superblock: Invalid superblock section members_v2: device 0: too many buckets (got 191310728265856, max 2147483583) [ 220.299855][ T6426] members_v2 (size 152): [ 220.299855][ T6426] Device: 0 [ 220.299855][ T6426] Label: (none) [ 220.299855][ T6426] UUID: 9b24efed-6a70-49cb-9057-2c46291a785d [ 220.299855][ T6426] Size: 6628735701552726016 [ 220.299855][ T6426] read errors: 0 [ 220.299855][ T6426] write errors: 0 [ 220.299855][ T6426] checksum errors: 0 [ 220.299855][ T6426] seqread iops: 0 [ 220.299855][ T6426] seqwrite iops: 0 [ 220.299855][ T6426] randread iops: 0 [ 220.299855][ T6426] randwrite iops: 0 [ 220.299855][ T6426] Bucket size: 131072 [ 220.299855][ T6426] First bucket: 0 [ 220.299855][ T6426] Buckets: 191310728265856 [ 220.299855][ T6426] Last mount: 1714681272 [ 220.299855][ T6426] Last superblock write: 41 [ 220.299855][ T6426] State: rw [ 220.299855][ T6426] Data allowed: journal,btree,user [ 220.299855][ T6426] Has data: (none) [ 220.299855][ T6426] Btree allocated bitmap blocksize:256 [ 220.299855][ T6426] Btree allocated bitmap: 00000000000000000000000100010000100 [ 221.087272][ T6450] loop4: detected capacity change from 0 to 512 [ 222.964905][ T6450] EXT4-fs: Ignoring removed orlov option [ 222.970681][ T6450] EXT4-fs: Ignoring removed nomblk_io_submit option [ 223.450895][ T6446] openvswitch: netlink: nsh attribute has 4 unknown bytes. [ 223.499454][ T6450] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 223.506041][ T6457] openvswitch: netlink: nsh attr 2048 is out of range max 3 [ 223.623355][ T6450] EXT4-fs (loop4): revision level too high, forcing read-only mode [ 223.938198][ T6450] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=c040e128, mo2=0002] [ 223.975253][ T6450] EXT4-fs (loop4): orphan cleanup on readonly fs [ 224.038860][ T6450] Quota error (device loop4): v2_read_header: Failed header read: expected=8 got=0 [ 224.074611][ T6450] EXT4-fs warning (device loop4): ext4_enable_quotas:7074: Failed to enable quota tracking (type=1, err=-22, ino=4). Please run e2fsck to fix. [ 224.187044][ T6450] EXT4-fs (loop4): Cannot turn on quotas: error -22 [ 224.300961][ T6450] EXT4-fs error (device loop4): ext4_validate_block_bitmap:440: comm syz-executor.4: bg 0: block 40: padding at end of block bitmap is not set [ 224.337718][ T6450] EXT4-fs (loop4): Remounting filesystem read-only [ 224.367604][ T6450] EXT4-fs (loop4): 1 truncate cleaned up [ 224.389369][ T6450] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 224.409028][ T6450] SELinux: (dev loop4, type ext4) getxattr errno 5 [ 224.427643][ T6450] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 224.630907][ T6468] loop2: detected capacity change from 0 to 512 [ 224.651050][ T6468] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 224.849428][ T6468] EXT4-fs warning (device loop2): ext4_expand_extra_isize_ea:2855: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 224.942611][ T6468] EXT4-fs (loop2): 1 truncate cleaned up [ 224.978984][ T6468] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 225.376255][ T29] audit: type=1400 audit(1718224531.546:391): avc: denied { ioctl } for pid=6467 comm="syz-executor.2" path="/root/syzkaller-testdir2084142226/syzkaller.XpZi5f/14/file2/.pending_reads" dev="loop2" ino=18 ioctlcmd=0x6607 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 225.407551][ T6468] EXT4-fs warning (device loop2): ext4_group_extend:1884: will only finish group (8193 blocks, 7937 new) [ 225.429933][ T6468] EXT4-fs warning (device loop2): ext4_group_extend:1890: can't read last block, resize aborted [ 225.735573][ T6484] x_tables: ip6_tables: TCPMSS target: only valid for protocol 6 [ 225.802275][ T6484] loop1: detected capacity change from 0 to 2048 [ 225.947520][ T5831] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 226.442024][ T6488] netlink: 'syz-executor.4': attribute type 22 has an invalid length. [ 226.687099][ T6492] SET target dimension over the limit! [ 227.536350][ T29] audit: type=1400 audit(1718224533.686:392): avc: denied { create } for pid=6496 comm="syz-executor.4" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 227.764123][ T29] audit: type=1400 audit(1718224533.686:393): avc: denied { setopt } for pid=6496 comm="syz-executor.4" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 227.864815][ T6497] loop4: detected capacity change from 0 to 2048 [ 227.875499][ T6497] udf: Unknown parameter 'i˙˙˙˙rseŚ' [ 227.922745][ T29] audit: type=1400 audit(1718224534.086:394): avc: denied { bind } for pid=6505 comm="syz-executor.3" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 227.947592][ T29] audit: type=1400 audit(1718224534.106:395): avc: denied { name_bind } for pid=6505 comm="syz-executor.3" src=512 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=icmp_socket permissive=1 [ 227.972820][ T29] audit: type=1400 audit(1718224534.106:396): avc: denied { node_bind } for pid=6505 comm="syz-executor.3" src=512 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=icmp_socket permissive=1 [ 228.070069][ T6506] lo: left promiscuous mode [ 228.105253][ T6506] lo: left allmulticast mode [ 228.487604][ T6517] fuse: Bad value for 'fd' [ 228.551254][ T29] audit: type=1400 audit(1718224534.716:397): avc: denied { setopt } for pid=6516 comm="syz-executor.1" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 228.642141][ T6519] loop2: detected capacity change from 0 to 512 [ 228.749438][ T6519] EXT4-fs error (device loop2): ext4_xattr_ibody_find:2234: inode #15: comm syz-executor.2: corrupted in-inode xattr: bad e_name length [ 228.952417][ T6524] process 'syz-executor.1' launched './file0' with NULL argv: empty string added [ 228.986367][ T6519] EXT4-fs error (device loop2): ext4_orphan_get:1397: comm syz-executor.2: couldn't read orphan inode 15 (err -117) [ 229.072533][ T6519] EXT4-fs (loop2): mounted filesystem 00000004-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 229.105684][ T6519] EXT4-fs error (device loop2): ext4_read_inline_dir:1559: inode #12: block 7: comm syz-executor.2: path /root/syzkaller-testdir2084142226/syzkaller.XpZi5f/17/file0/file0: bad entry in directory: rec_len is smaller than minimal - offset=24, inode=67108877, rec_len=0, size=80 fake=0 [ 231.099871][ T6539] x_tables: ip6_tables: TCPMSS target: only valid for protocol 6 [ 231.162007][ T6539] loop4: detected capacity change from 0 to 2048 [ 231.222135][ T5831] EXT4-fs (loop2): unmounting filesystem 00000004-0000-0000-0000-000000000000. [ 232.983046][ T6549] fuse: Bad value for 'fd' [ 233.152715][ T29] audit: type=1400 audit(1718224539.316:398): avc: denied { setopt } for pid=6550 comm="syz-executor.3" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 233.802094][ T5815] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 0 [ 233.874245][ T29] audit: type=1400 audit(1718224540.036:399): avc: denied { ioctl } for pid=6554 comm="syz-executor.1" path="socket:[14537]" dev="sockfs" ino=14537 ioctlcmd=0x8921 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 234.045762][ T29] audit: type=1804 audit(1718224540.216:400): pid=6553 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir3514857955/syzkaller.0NsiHN/29/bus" dev="sda1" ino=1940 res=1 errno=0 [ 234.084559][ T6558] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.4'. [ 234.442229][ T6562] loop2: detected capacity change from 0 to 4096 [ 234.485440][ T6562] ntfs3: loop2: Different NTFS sector size (4096) and media sector size (512). [ 234.543654][ T6567] tipc: Started in network mode [ 234.549121][ T6567] tipc: Node identity fffffffc, cluster identity 4711 [ 234.580763][ T6567] tipc: Node number set to 4294967292 [ 234.903317][ T29] audit: type=1400 audit(1718224541.066:401): avc: denied { write } for pid=6572 comm="syz-executor.4" name="nullb0" dev="devtmpfs" ino=681 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 235.014316][ T29] audit: type=1400 audit(1718224541.116:402): avc: denied { map } for pid=6572 comm="syz-executor.4" path="/dev/nullb0" dev="devtmpfs" ino=681 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 235.086702][ T29] audit: type=1400 audit(1718224541.116:403): avc: denied { execute } for pid=6572 comm="syz-executor.4" path="/dev/nullb0" dev="devtmpfs" ino=681 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 235.149686][ T6575] fuse: Bad value for 'fd' [ 236.903463][ T29] audit: type=1400 audit(1718224543.056:404): avc: denied { lock } for pid=6588 comm="syz-executor.1" path="socket:[14609]" dev="sockfs" ino=14609 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=unix_dgram_socket permissive=1 [ 237.431058][ T6586] loop2: detected capacity change from 0 to 4096 [ 237.820689][ T6586] ntfs3: loop2: failed to convert "0000" to default [ 237.878294][ T6586] ntfs3: loop2: failed to convert name for inode 1e. [ 238.892829][ T6603] loop2: detected capacity change from 0 to 64 [ 242.014350][ T6610] fuse: Bad value for 'fd' [ 242.044618][ T6610] x_tables: ip6_tables: TCPMSS target: only valid for protocol 6 [ 242.606066][ T6614] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.0'. [ 242.885170][ T6617] netlink: 'syz-executor.0': attribute type 22 has an invalid length. [ 243.161967][ T29] audit: type=1400 audit(1718224549.326:405): avc: denied { create } for pid=6621 comm="syz-executor.0" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 244.208037][ T29] audit: type=1400 audit(1718224550.376:406): avc: denied { create } for pid=6634 comm="syz-executor.1" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1 [ 246.658045][ T6657] loop4: detected capacity change from 0 to 512 [ 246.682005][ T6657] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 246.716465][ T6657] EXT4-fs (loop4): 1 truncate cleaned up [ 246.723900][ T6657] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 246.762433][ T6657] EXT4-fs error (device loop4): __ext4_remount:6503: comm syz-executor.4: Abort forced by user [ 246.774947][ T6657] EXT4-fs (loop4): Remounting filesystem read-only [ 246.789559][ T6657] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop4 ino=15 [ 246.799568][ T6657] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop4 ino=15 [ 246.810084][ T29] audit: type=1400 audit(1718224552.986:407): avc: denied { rename } for pid=6656 comm="syz-executor.4" name="file1" dev="loop4" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 246.855925][ T5978] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 255.407835][ T6693] fuse: Bad value for 'fd' [ 255.735290][ T6700] SELinux: security_context_str_to_sid (staff_u) failed with errno=-22 [ 255.843743][ T6704] binder: BINDER_SET_CONTEXT_MGR already set [ 255.850254][ T6704] binder: 6699:6704 ioctl 4018620d 20000040 returned -16 [ 256.246770][ T1239] ieee802154 phy0 wpan0: encryption failed: -22 [ 256.253236][ T1239] ieee802154 phy1 wpan1: encryption failed: -22 [ 256.955797][ T6718] TCP: request_sock_TCP: Possible SYN flooding on port [::]:20002. Sending cookies. [ 258.546225][ T6733] fuse: Bad value for 'fd' [ 259.231185][ T6733] x_tables: ip6_tables: TCPMSS target: only valid for protocol 6 [ 260.218686][ T29] audit: type=1400 audit(1718224566.376:408): avc: denied { setopt } for pid=6745 comm="syz-executor.3" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 262.566198][ T6758] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.4'. [ 264.334016][ T29] audit: type=1400 audit(1718224570.446:409): avc: denied { write } for pid=6775 comm="syz-executor.4" name="hwrng" dev="devtmpfs" ino=83 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:random_device_t tclass=chr_file permissive=1 [ 272.411402][ T29] audit: type=1400 audit(1718224572.276:410): avc: denied { write } for pid=6775 comm="syz-executor.4" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 272.480301][ T29] audit: type=1400 audit(1718224572.416:411): avc: denied { read } for pid=6775 comm="syz-executor.4" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 273.219547][ T29] audit: type=1400 audit(1718224579.386:412): avc: denied { name_bind } for pid=6793 comm="syz-executor.1" src=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:reserved_port_t tclass=tcp_socket permissive=1 [ 273.473998][ T29] audit: type=1400 audit(1718224579.416:413): avc: denied { read } for pid=6793 comm="syz-executor.1" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 277.299830][ T4478] Bluetooth: hci5: command 0x0406 tx timeout [ 277.403830][ T6808] loop4: detected capacity change from 0 to 256 [ 277.807685][ T29] audit: type=1400 audit(1718224583.966:414): avc: denied { getopt } for pid=6813 comm="syz-executor.1" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 277.931103][ T29] audit: type=1800 audit(1718224583.966:415): pid=6815 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed(directio) comm="syz-executor.1" name="bus" dev="sda1" ino=1947 res=0 errno=0 [ 278.089055][ T29] audit: type=1400 audit(1718224584.256:416): avc: denied { read } for pid=6824 comm="syz-executor.1" lport=259 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 278.113624][ T6826] loop2: detected capacity change from 0 to 512 [ 278.299201][ T6831] 9pnet_fd: Insufficient options for proto=fd [ 278.463464][ T6826] EXT4-fs (loop2): Test dummy encryption mode enabled [ 278.605686][ T6826] EXT4-fs error (device loop2): ext4_xattr_ibody_find:2234: inode #12: comm syz-executor.2: corrupted in-inode xattr: invalid ea_ino [ 278.629456][ T6826] EXT4-fs error (device loop2): ext4_orphan_get:1397: comm syz-executor.2: couldn't read orphan inode 12 (err -117) [ 278.668315][ T6826] EXT4-fs (loop2): mounted filesystem 00000005-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 278.962263][ T29] audit: type=1400 audit(1718224585.126:417): avc: denied { setopt } for pid=6853 comm="syz-executor.0" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 279.102721][ T6826] fscrypt: AES-256-CBC-CTS using implementation "cts-cbc-aes-aesni" [ 279.296923][ T29] audit: type=1400 audit(1718224585.466:418): avc: denied { write } for pid=6823 comm="syz-executor.2" name=131377C5FC35D41454D5D41D29AD1A6029598146E6BE166E41AD0DBD4054033C9F33BBDA8224A2F3D772E7636E48B33CBF708372E8F1B9933EC5127743BE2206209EF02DF9CBF2F6E880D338 dev="loop2" ino=19 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=dir permissive=1 [ 279.501504][ T5831] EXT4-fs (loop2): unmounting filesystem 00000005-0000-0000-0000-000000000000. [ 279.524332][ T29] audit: type=1400 audit(1718224585.466:419): avc: denied { add_name } for pid=6823 comm="syz-executor.2" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=dir permissive=1 [ 279.614832][ T29] audit: type=1400 audit(1718224585.466:420): avc: denied { remove_name } for pid=6823 comm="syz-executor.2" name="file0" dev="loop2" ino=20 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=dir permissive=1 [ 279.683774][ T29] audit: type=1400 audit(1718224585.466:421): avc: denied { rename } for pid=6823 comm="syz-executor.2" name="file0" dev="loop2" ino=20 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=dir permissive=1 [ 279.792251][ T29] audit: type=1400 audit(1718224585.466:422): avc: denied { reparent } for pid=6823 comm="syz-executor.2" name="file0" dev="loop2" ino=20 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=dir permissive=1 [ 281.248688][ T29] audit: type=1400 audit(1718224585.466:423): avc: denied { rmdir } for pid=6823 comm="syz-executor.2" name="file0" dev="loop2" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=dir permissive=1 [ 282.498355][ T6851] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.3'. [ 387.554083][ C0] rcu: INFO: rcu_preempt self-detected stall on CPU [ 387.560722][ C0] rcu: 0-...!: (10500 ticks this GP) idle=34fc/1/0x4000000000000000 softirq=22657/32922 fqs=0 [ 387.572346][ C0] rcu: (t=10501 jiffies g=26029 q=208 ncpus=2) [ 387.578594][ C0] rcu: rcu_preempt kthread timer wakeup didn't happen for 10500 jiffies! g26029 f0x0 RCU_GP_WAIT_FQS(5) ->state=0x402 [ 387.590925][ C0] rcu: Possible timer handling issue on cpu=1 timer-softirq=14604 [ 387.598815][ C0] rcu: rcu_preempt kthread starved for 10501 jiffies! g26029 f0x0 RCU_GP_WAIT_FQS(5) ->state=0x402 ->cpu=1 [ 387.610190][ C0] rcu: Unless rcu_preempt kthread gets sufficient CPU time, OOM is now expected behavior. [ 387.620160][ C0] rcu: RCU grace-period kthread stack dump: [ 387.626044][ C0] task:rcu_preempt state:I stack:27680 pid:17 tgid:17 ppid:2 flags:0x00004000 [ 387.636233][ C0] Call Trace: [ 387.639513][ C0] [ 387.642450][ C0] __schedule+0xf15/0x5d00 [ 387.646910][ C0] ? __pfx___lock_acquire+0x10/0x10 [ 387.652131][ C0] ? __pfx___schedule+0x10/0x10 [ 387.656999][ C0] ? schedule+0x298/0x350 [ 387.661342][ C0] ? __pfx_lock_release+0x10/0x10 [ 387.666383][ C0] ? __pfx___mod_timer+0x10/0x10 [ 387.671327][ C0] ? lock_acquire+0x1b1/0x560 [ 387.676019][ C0] ? lockdep_init_map_type+0x16d/0x7d0 [ 387.681495][ C0] schedule+0xe7/0x350 [ 387.685581][ C0] schedule_timeout+0x136/0x2a0 [ 387.690445][ C0] ? __pfx_schedule_timeout+0x10/0x10 [ 387.695832][ C0] ? __pfx_process_timeout+0x10/0x10 [ 387.701133][ C0] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 387.706957][ C0] ? prepare_to_swait_event+0xf0/0x470 [ 387.712434][ C0] rcu_gp_fqs_loop+0x1eb/0xb00 [ 387.717216][ C0] ? __pfx_rcu_gp_fqs_loop+0x10/0x10 [ 387.722517][ C0] ? _raw_spin_unlock_irq+0x2e/0x50 [ 387.727731][ C0] rcu_gp_kthread+0x271/0x380 [ 387.732423][ C0] ? __pfx_rcu_gp_kthread+0x10/0x10 [ 387.737636][ C0] ? lockdep_hardirqs_on+0x7c/0x110 [ 387.742847][ C0] ? __kthread_parkme+0x148/0x220 [ 387.747885][ C0] ? __pfx_rcu_gp_kthread+0x10/0x10 [ 387.753099][ C0] kthread+0x2c1/0x3a0 [ 387.757182][ C0] ? _raw_spin_unlock_irq+0x23/0x50 [ 387.762401][ C0] ? __pfx_kthread+0x10/0x10 [ 387.767002][ C0] ret_from_fork+0x45/0x80 [ 387.771437][ C0] ? __pfx_kthread+0x10/0x10 [ 387.776038][ C0] ret_from_fork_asm+0x1a/0x30 [ 387.780825][ C0] [ 387.783889][ C0] CPU: 0 PID: 6879 Comm: syz-executor.1 Not tainted 6.10.0-rc3-syzkaller-00022-gcea2a26553ac #0 [ 387.794310][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024 [ 387.804368][ C0] RIP: 0010:smp_call_function_many_cond+0x4e7/0x1420 [ 387.811068][ C0] Code: 0c 00 85 ed 74 4d 48 b8 00 00 00 00 00 fc ff df 4d 89 f4 4c 89 f5 49 c1 ec 03 83 e5 07 49 01 c4 83 c5 03 e8 bb 37 0c 00 f3 90 <41> 0f b6 04 24 40 38 c5 7c 08 84 c0 0f 85 f7 0c 00 00 8b 43 08 31 [ 387.830685][ C0] RSP: 0018:ffffc90004237b80 EFLAGS: 00000246 [ 387.836763][ C0] RAX: 0000000000040000 RBX: ffff8880b9344980 RCX: ffffc9000356a000 [ 387.844745][ C0] RDX: 0000000000040000 RSI: ffffffff8181ad95 RDI: 0000000000000005 [ 387.852726][ C0] RBP: 0000000000000003 R08: 0000000000000005 R09: 0000000000000000 [ 387.860706][ C0] R10: 0000000000000001 R11: 0000000000000002 R12: ffffed1017268931 [ 387.868681][ C0] R13: 0000000000000001 R14: ffff8880b9344988 R15: ffff8880b923fdc0 [ 387.876661][ C0] FS: 00007f80123986c0(0000) GS:ffff8880b9200000(0000) knlGS:0000000000000000 [ 387.885599][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 387.892193][ C0] CR2: 00007f80117ab910 CR3: 00000000253ee000 CR4: 00000000003506f0 [ 387.900172][ C0] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 387.908147][ C0] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 387.916123][ C0] Call Trace: [ 387.919406][ C0] [ 387.922255][ C0] ? show_regs+0x8c/0xa0 [ 387.926518][ C0] ? rcu_dump_cpu_stacks+0x2a9/0x4c0 [ 387.931835][ C0] ? rcu_sched_clock_irq+0xa15/0x3100 [ 387.937217][ C0] ? timekeeping_advance+0x96e/0xf20 [ 387.942518][ C0] ? __pfx_lock_release+0x10/0x10 [ 387.947559][ C0] ? __pfx_lock_release+0x10/0x10 [ 387.952600][ C0] ? __pfx_rcu_sched_clock_irq+0x10/0x10 [ 387.958255][ C0] ? __asan_memcpy+0x3c/0x60 [ 387.962874][ C0] ? cgroup_rstat_updated+0x2a/0xb20 [ 387.968179][ C0] ? update_process_times+0x175/0x220 [ 387.973565][ C0] ? __pfx_update_process_times+0x10/0x10 [ 387.979298][ C0] ? update_wall_time+0x1c/0x40 [ 387.984172][ C0] ? tick_nohz_handler+0x376/0x530 [ 387.989301][ C0] ? __pfx_tick_nohz_handler+0x10/0x10 [ 387.994785][ C0] ? __hrtimer_run_queues+0x657/0xcc0 [ 388.000173][ C0] ? __pfx___hrtimer_run_queues+0x10/0x10 [ 388.005907][ C0] ? ktime_get_update_offsets_now+0x201/0x310 [ 388.011998][ C0] ? hrtimer_interrupt+0x31b/0x800 [ 388.017126][ C0] ? __sysvec_apic_timer_interrupt+0x10f/0x450 [ 388.023317][ C0] ? sysvec_apic_timer_interrupt+0x90/0xb0 [ 388.029150][ C0] [ 388.032094][ C0] [ 388.035030][ C0] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 388.041205][ C0] ? smp_call_function_many_cond+0x4e5/0x1420 [ 388.047290][ C0] ? smp_call_function_many_cond+0x4e7/0x1420 [ 388.053374][ C0] ? __pfx_smp_call_function_many_cond+0x10/0x10 [ 388.059717][ C0] ? mark_held_locks+0x9f/0xe0 [ 388.064502][ C0] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 388.070329][ C0] clock_was_set+0x646/0x850 [ 388.074938][ C0] ? __pfx_clock_was_set+0x10/0x10 [ 388.080067][ C0] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 388.085906][ C0] do_settimeofday64+0x3b7/0x5d0 [ 388.090874][ C0] ? __pfx_do_settimeofday64+0x10/0x10 [ 388.096353][ C0] ? rtnl_calcit.isra.0+0x2a/0x4d0 [ 388.101497][ C0] ? capable+0xd4/0x110 [ 388.105665][ C0] do_sys_settimeofday64+0x1dc/0x260 [ 388.110966][ C0] __x64_sys_clock_settime+0x1bf/0x2a0 [ 388.116448][ C0] ? __pfx___x64_sys_clock_settime+0x10/0x10 [ 388.122441][ C0] ? syscall_user_dispatch+0x7a/0x130 [ 388.127829][ C0] do_syscall_64+0xcd/0x250 [ 388.132348][ C0] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 388.138261][ C0] RIP: 0033:0x7f801167cea9 [ 388.142694][ C0] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 e1 20 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 [ 388.162326][ C0] RSP: 002b:00007f80123980c8 EFLAGS: 00000246 ORIG_RAX: 00000000000000e3 [ 388.170757][ C0] RAX: ffffffffffffffda RBX: 00007f80117b3f80 RCX: 00007f801167cea9 [ 388.178744][ C0] RDX: 0000000000000000 RSI: 0000000020000300 RDI: 0000000000000000 [ 388.186726][ C0] RBP: 00007f80116ebff4 R08: 0000000000000000 R09: 0000000000000000 [ 388.194705][ C0] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 388.202684][ C0] R13: 000000000000000b R14: 00007f80117b3f80 R15: 00007ffc5ff1a158 [ 388.210668][ C0] [ 388.213705][ C0] Sending NMI from CPU 0 to CPUs 1: [ 388.218918][ C1] NMI backtrace for cpu 1 [ 388.218929][ C1] CPU: 1 PID: 6849 Comm: syz-executor.3 Not tainted 6.10.0-rc3-syzkaller-00022-gcea2a26553ac #0 [ 388.218952][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024 [ 388.218963][ C1] RIP: 0010:kasan_check_range+0x150/0x1a0 [ 388.218991][ C1] Code: c0 01 49 89 d3 48 39 d0 74 11 80 38 00 74 ef 4d 8d 1c 2c 48 85 c0 48 89 c2 75 93 48 89 da 4c 89 d8 4c 29 da e9 2c ff ff ff 5b 01 00 00 00 5d 41 5c c3 cc cc cc cc b8 01 00 00 00 c3 cc cc cc [ 388.219010][ C1] RSP: 0018:ffffc90000a18a70 EFLAGS: 00000046 [ 388.219031][ C1] RAX: fffffbfff284dc59 RBX: 0000000000000001 RCX: ffffffff816ae5ae [ 388.219045][ C1] RDX: fffffbfff284dc59 RSI: 0000000000000008 RDI: ffffffff9426e2c0 [ 388.219058][ C1] RBP: fffffbfff284dc58 R08: 0000000000000000 R09: fffffbfff284dc58 [ 388.219072][ C1] R10: ffffffff9426e2c7 R11: 0000000000000004 R12: ffffed10055c615b [ 388.219085][ C1] R13: 0000000000000001 R14: ffff88802ae30b80 R15: 0000000000000002 [ 388.219099][ C1] FS: 0000000000000000(0000) GS:ffff8880b9300000(0000) knlGS:0000000000000000 [ 388.219119][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 388.219134][ C1] CR2: 0000001b32591000 CR3: 000000005ec98000 CR4: 00000000003506f0 [ 388.219148][ C1] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 388.219160][ C1] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 388.219174][ C1] Call Trace: [ 388.219182][ C1] [ 388.219189][ C1] ? show_regs+0x8c/0xa0 [ 388.219223][ C1] ? nmi_cpu_backtrace+0x1d8/0x390 [ 388.219247][ C1] ? nmi_cpu_backtrace_handler+0xc/0x20 [ 388.219272][ C1] ? nmi_handle+0x1a9/0x5c0 [ 388.219299][ C1] ? kasan_check_range+0x150/0x1a0 [ 388.219321][ C1] ? default_do_nmi+0x6a/0x160 [ 388.219346][ C1] ? exc_nmi+0x170/0x1e0 [ 388.219369][ C1] ? end_repeat_nmi+0xf/0x53 [ 388.219395][ C1] ? hlock_class+0x4e/0x130 [ 388.219418][ C1] ? kasan_check_range+0x150/0x1a0 [ 388.219440][ C1] ? kasan_check_range+0x150/0x1a0 [ 388.219461][ C1] ? kasan_check_range+0x150/0x1a0 [ 388.219482][ C1] [ 388.219488][ C1] [ 388.219495][ C1] hlock_class+0x4e/0x130 [ 388.219517][ C1] __lock_acquire+0xc5d/0x3b30 [ 388.219547][ C1] ? __pfx___lock_acquire+0x10/0x10 [ 388.219574][ C1] ? __pfx___lock_acquire+0x10/0x10 [ 388.219602][ C1] lock_acquire+0x1b1/0x560 [ 388.219629][ C1] ? debug_object_activate+0x199/0x540 [ 388.219654][ C1] ? __pfx_lock_acquire+0x10/0x10 [ 388.219681][ C1] ? debug_object_activate+0x13e/0x540 [ 388.219704][ C1] ? __pfx_lock_release+0x10/0x10 [ 388.219731][ C1] ? __pfx___lock_acquire+0x10/0x10 [ 388.219758][ C1] ? __pfx_advance_sched+0x10/0x10 [ 388.219785][ C1] _raw_spin_lock_irqsave+0x3a/0x60 [ 388.219811][ C1] ? debug_object_activate+0x199/0x540 [ 388.219834][ C1] debug_object_activate+0x199/0x540 [ 388.219859][ C1] ? __pfx_debug_object_activate+0x10/0x10 [ 388.219884][ C1] ? do_raw_spin_lock+0x12d/0x2c0 [ 388.219905][ C1] ? __pfx_advance_sched+0x10/0x10 [ 388.219930][ C1] ? enqueue_hrtimer+0x25/0x3c0 [ 388.219951][ C1] enqueue_hrtimer+0x25/0x3c0 [ 388.219974][ C1] __hrtimer_run_queues+0xaac/0xcc0 [ 388.219999][ C1] ? __pfx___hrtimer_run_queues+0x10/0x10 [ 388.220027][ C1] ? ktime_get_update_offsets_now+0x201/0x310 [ 388.220057][ C1] hrtimer_interrupt+0x31b/0x800 [ 388.220083][ C1] __sysvec_apic_timer_interrupt+0x10f/0x450 [ 388.220113][ C1] sysvec_apic_timer_interrupt+0x90/0xb0 [ 388.220143][ C1] [ 388.220149][ C1] [ 388.220156][ C1] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 388.220182][ C1] RIP: 0010:__sanitizer_cov_trace_pc+0x0/0x60 [ 388.220205][ C1] Code: be b0 01 00 00 e8 a0 ff ff ff 31 c0 c3 cc cc cc cc 66 0f 1f 84 00 00 00 00 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 0f 1e fa 65 48 8b 15 e4 f3 75 7e 65 8b 05 e5 f3 75 7e a9 00 01 [ 388.220224][ C1] RSP: 0018:ffffc900030777e8 EFLAGS: 00000246 [ 388.220240][ C1] RAX: 0000000000000000 RBX: 0000000000000000 RCX: ffffffff81c321a1 [ 388.220253][ C1] RDX: ffff88802ae30000 RSI: 0000000000000000 RDI: 0000000000000007 [ 388.220266][ C1] RBP: ffffea00019ec180 R08: 0000000000000007 R09: 0000000000000000 [ 388.220279][ C1] R10: 0000000000000000 R11: 0000000000000003 R12: 0000000000000000 [ 388.220291][ C1] R13: dffffc0000000000 R14: 0000000000000000 R15: ffffea00019ec180 [ 388.220307][ C1] ? const_folio_flags+0x41/0x1f0 [ 388.220336][ C1] const_folio_flags+0x4f/0x1f0 [ 388.220361][ C1] folio_mark_accessed+0x9f/0xb20 [ 388.220391][ C1] ? __pfx_folio_mark_accessed+0x10/0x10 [ 388.220419][ C1] ? __pfx___page_table_check_pte_clear+0x10/0x10 [ 388.220443][ C1] ? const_folio_flags.constprop.0+0x56/0x150 [ 388.220464][ C1] ? noop_dirty_folio+0x5e/0xb0 [ 388.220482][ C1] unmap_page_range+0x124f/0x41e0 [ 388.220511][ C1] ? __pfx_unmap_page_range+0x10/0x10 [ 388.220535][ C1] ? uprobe_munmap+0x20/0x570 [ 388.220557][ C1] unmap_single_vma+0x194/0x2b0 [ 388.220581][ C1] unmap_vmas+0x22f/0x490 [ 388.220605][ C1] ? __pfx_unmap_vmas+0x10/0x10 [ 388.220628][ C1] ? __pfx_lock_release+0x10/0x10 [ 388.220655][ C1] ? lru_add_drain_cpu+0x454/0x860 [ 388.220675][ C1] exit_mmap+0x1b8/0xb20 [ 388.220701][ C1] ? __pfx_exit_mmap+0x10/0x10 [ 388.220732][ C1] __mmput+0x12a/0x4d0 [ 388.220755][ C1] mmput+0x62/0x70 [ 388.220775][ C1] do_exit+0x9b7/0x2ba0 [ 388.220803][ C1] ? __pfx_do_exit+0x10/0x10 [ 388.220827][ C1] ? preempt_schedule_thunk+0x1a/0x30 [ 388.220850][ C1] do_group_exit+0xd3/0x2a0 [ 388.220876][ C1] __x64_sys_exit_group+0x3e/0x50 [ 388.220903][ C1] do_syscall_64+0xcd/0x250 [ 388.220924][ C1] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 388.220949][ C1] RIP: 0033:0x7fc61f47cea9 [ 388.220963][ C1] Code: Unable to access opcode bytes at 0x7fc61f47ce7f. [ 388.220972][ C1] RSP: 002b:00007ffc10c15d98 EFLAGS: 00000246 ORIG_RAX: 00000000000000e7 [ 388.220991][ C1] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007fc61f47cea9 [ 388.221004][ C1] RDX: 0000000000000064 RSI: 0000000000000000 RDI: 0000000000000000 [ 388.221021][ C1] RBP: 0000000000000001 R08: 0000001e00000000 R09: 0000000000000000 [ 388.221034][ C1] R10: 0000000000000001 R11: 0000000000000246 R12: 0000000000000001 [ 388.221047][ C1] R13: 0000000000000000 R14: 00007ffc10c15e70 R15: 0000000000000001 [ 388.221062][ C1]