last executing test programs: 0s ago: executing program 1 (id=2): r0 = openat$udambuf(0xffffffffffffff9c, &(0x7f0000000100), 0x2) r1 = memfd_create(&(0x7f0000000340)='y\x105\xfb\xf7u\x83%:r\xc2\xb9x\xa4q\xc1\xea_\x8cZ7\xe7a\xdenJ\xeb\x87\x9b\x11x\x0e\xa1\xcf\x1a\x98S7\xc9\x00\x00\x00\x00\x00\x00\a\x00\x00\x00\x00\x00\x00\x04\x879\xa24\xa9am\xde\xb2\xd3\xcbZJoa\xc4\x1acB\xaa\xc1\xfb Q\xd4\xf4\x01\xa52\xe2DG\xd4\xbd{\x9f\xa9\x97\x9b@\xdb\x00b\xe1br\xb6\x008\xe3\x10\xff\xc2\x9d\r2\x9e\x8e\x04sW\x1b\xb7\xb3\xa2\xc9&@\xca\xda\xdc\xe2/\x97X\xac\b\xb0\xc2<\x80E\x1a\xbc\xc7W\xda9VsA\xaf\xc6\xcf\xe1\xa1\xb5M\xa2\x85\xa6y\xc4J\xf1\xf7\xfcD\x95\xe3\xeb\xc7\xbc\x91\xb0\xa8\x9eo\xebF(\x9dL\x01vRk\xaacB\x14OD\\\xe8R\xe4\xcd\xec\xcc\xd1\x0fre\xe86\xcd\xeb\xc4$\x98\x06J\xd6dD\x8d_U`ji{\xab\x97\xaf;l\x1f\xaf\xb38\x14\xcb\xfa\xb3j\x92\f\xe0\x81\xa0\xa2-g\b\x99\x0e\x8d\x8d\x16\xd9w\\\xf0\xce\xb0j\x9d\'\x93\xef\x1d\xa0H\xd9\xbd\xd9\xaf\x12\x00\x00\x00\x00\x00\x00\x00\x00\x00', 0x2) ftruncate(r1, 0xffff) fcntl$addseals(r1, 0x409, 0x7) r2 = ioctl$UDMABUF_CREATE(r0, 0x40187542, &(0x7f0000000140)={r1, 0x0, 0x0, 0x4000}) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x3000007, 0x11, r2, 0x0) r3 = syz_open_procfs$pagemap(0x0, &(0x7f0000000200)) ioctl$PAGEMAP_SCAN(r3, 0xc0606610, &(0x7f0000000140)={0x60, 0x0, &(0x7f0000001000/0x3000)=nil, &(0x7f0000f96000/0x1000)=nil, 0x7ffffffa, 0x0, 0x0, 0x6, 0x0, 0x2, 0x7, 0x18}) kernel console output (not intermixed with test programs): Warning: Permanently added '[localhost]:30876' (ED25519) to the list of known hosts. [ 45.439707][ T40] audit: type=1400 audit(1766029828.116:62): avc: denied { name_bind } for pid=5903 comm="sshd-session" src=30000 scontext=system_u:system_r:sshd_t tcontext=system_u:object_r:unreserved_port_t tclass=tcp_socket permissive=1 [ 45.470247][ T40] audit: type=1400 audit(1766029828.156:63): avc: denied { execute } for pid=5904 comm="sh" name="syz-executor" dev="sda1" ino=2020 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:etc_runtime_t tclass=file permissive=1 [ 45.476883][ T40] audit: type=1400 audit(1766029828.156:64): avc: denied { execute_no_trans } for pid=5904 comm="sh" path="/syz-executor" dev="sda1" ino=2020 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:etc_runtime_t tclass=file permissive=1 [ 47.385954][ T40] audit: type=1400 audit(1766029830.066:65): avc: denied { mounton } for pid=5904 comm="syz-executor" path="/syzcgroup/unified" dev="sda1" ino=2022 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1 [ 47.393785][ T40] audit: type=1400 audit(1766029830.076:66): avc: denied { mount } for pid=5904 comm="syz-executor" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 47.402423][ T5904] cgroup: Unknown subsys name 'net' [ 47.484164][ T5904] cgroup: Unknown subsys name 'cpuset' [ 47.487940][ T5904] cgroup: Unknown subsys name 'rlimit' [ 47.697864][ T5917] SELinux: Context root:object_r:swapfile_t is not valid (left unmapped). Setting up swapspace version 1, size = 127995904 bytes [ 48.334520][ T5904] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 51.464439][ T40] kauditd_printk_skb: 15 callbacks suppressed [ 51.464449][ T40] audit: type=1400 audit(1766029834.136:82): avc: denied { execmem } for pid=5925 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 51.573716][ T40] audit: type=1400 audit(1766029834.256:83): avc: denied { create } for pid=5929 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 51.581003][ T40] audit: type=1400 audit(1766029834.256:84): avc: denied { read write } for pid=5929 comm="syz-executor" name="vhci" dev="devtmpfs" ino=1291 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 51.588180][ T40] audit: type=1400 audit(1766029834.256:85): avc: denied { open } for pid=5929 comm="syz-executor" path="/dev/vhci" dev="devtmpfs" ino=1291 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 51.602787][ T64] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 51.603105][ T40] audit: type=1400 audit(1766029834.276:86): avc: denied { ioctl } for pid=5929 comm="syz-executor" path="socket:[1799]" dev="sockfs" ino=1799 ioctlcmd=0x48c9 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 51.607385][ T5938] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 51.616681][ T5944] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 51.617666][ T5938] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 51.620434][ T5944] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 51.623259][ T5938] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 51.625906][ T5944] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 51.627104][ T5946] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 51.627576][ T5946] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 51.627720][ T5938] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 51.628448][ T5938] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 51.629025][ T5945] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 51.629925][ T5945] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 51.631092][ T5939] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 51.634328][ T40] audit: type=1400 audit(1766029834.316:87): avc: denied { read } for pid=5929 comm="syz-executor" dev="nsfs" ino=4026531833 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 51.636666][ T5947] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 51.640168][ T5938] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 51.642068][ T5939] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 51.643517][ T40] audit: type=1400 audit(1766029834.316:88): avc: denied { open } for pid=5929 comm="syz-executor" path="net:[4026531833]" dev="nsfs" ino=4026531833 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 51.643559][ T40] audit: type=1400 audit(1766029834.316:89): avc: denied { mounton } for pid=5929 comm="syz-executor" path="/" dev="sda1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:root_t tclass=dir permissive=1 [ 51.644547][ T5938] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 51.644980][ T5938] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 51.649457][ T5938] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 51.850287][ T40] audit: type=1400 audit(1766029834.536:90): avc: denied { module_request } for pid=5930 comm="syz-executor" kmod="rtnl-link-nicvf" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1 [ 51.891588][ T5930] chnl_net:caif_netlink_parms(): no params data found [ 51.907575][ T5936] chnl_net:caif_netlink_parms(): no params data found [ 51.969275][ T5931] chnl_net:caif_netlink_parms(): no params data found [ 52.018246][ T5930] bridge0: port 1(bridge_slave_0) entered blocking state [ 52.021276][ T5930] bridge0: port 1(bridge_slave_0) entered disabled state [ 52.023917][ T5930] bridge_slave_0: entered allmulticast mode [ 52.027777][ T5930] bridge_slave_0: entered promiscuous mode [ 52.060715][ T5930] bridge0: port 2(bridge_slave_1) entered blocking state [ 52.062996][ T5930] bridge0: port 2(bridge_slave_1) entered disabled state [ 52.065480][ T5930] bridge_slave_1: entered allmulticast mode [ 52.069254][ T5930] bridge_slave_1: entered promiscuous mode [ 52.078540][ T5929] chnl_net:caif_netlink_parms(): no params data found [ 52.111682][ T5936] bridge0: port 1(bridge_slave_0) entered blocking state [ 52.113969][ T5936] bridge0: port 1(bridge_slave_0) entered disabled state [ 52.116223][ T5936] bridge_slave_0: entered allmulticast mode [ 52.118784][ T5936] bridge_slave_0: entered promiscuous mode [ 52.142173][ T5936] bridge0: port 2(bridge_slave_1) entered blocking state [ 52.144487][ T5936] bridge0: port 2(bridge_slave_1) entered disabled state [ 52.146819][ T5936] bridge_slave_1: entered allmulticast mode [ 52.149402][ T5936] bridge_slave_1: entered promiscuous mode [ 52.158821][ T5930] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 52.187999][ T5930] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 52.210661][ T5931] bridge0: port 1(bridge_slave_0) entered blocking state [ 52.213376][ T5931] bridge0: port 1(bridge_slave_0) entered disabled state [ 52.215737][ T5931] bridge_slave_0: entered allmulticast mode [ 52.218791][ T5931] bridge_slave_0: entered promiscuous mode [ 52.228535][ T5931] bridge0: port 2(bridge_slave_1) entered blocking state [ 52.231159][ T5931] bridge0: port 2(bridge_slave_1) entered disabled state [ 52.233790][ T5931] bridge_slave_1: entered allmulticast mode [ 52.236685][ T5931] bridge_slave_1: entered promiscuous mode [ 52.241930][ T5936] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 52.245890][ T5929] bridge0: port 1(bridge_slave_0) entered blocking state [ 52.248202][ T5929] bridge0: port 1(bridge_slave_0) entered disabled state [ 52.250970][ T5929] bridge_slave_0: entered allmulticast mode [ 52.253614][ T5929] bridge_slave_0: entered promiscuous mode [ 52.262082][ T5929] bridge0: port 2(bridge_slave_1) entered blocking state [ 52.264343][ T5929] bridge0: port 2(bridge_slave_1) entered disabled state [ 52.266684][ T5929] bridge_slave_1: entered allmulticast mode [ 52.269282][ T5929] bridge_slave_1: entered promiscuous mode [ 52.278055][ T5936] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 52.287222][ T5930] team0: Port device team_slave_0 added [ 52.297001][ T5930] team0: Port device team_slave_1 added [ 52.312984][ T5931] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 52.335966][ T5936] team0: Port device team_slave_0 added [ 52.338880][ T5931] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 52.343216][ T5929] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 52.353053][ T5930] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 52.355250][ T5930] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 52.364515][ T5930] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 52.370718][ T5936] team0: Port device team_slave_1 added [ 52.374601][ T5929] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 52.401165][ T5930] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 52.403419][ T5930] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 52.412160][ T5930] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 52.422912][ T5931] team0: Port device team_slave_0 added [ 52.425736][ T5929] team0: Port device team_slave_0 added [ 52.432877][ T5929] team0: Port device team_slave_1 added [ 52.435586][ T5931] team0: Port device team_slave_1 added [ 52.437651][ T5936] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 52.440137][ T5936] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 52.450074][ T5936] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 52.456063][ T5936] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 52.458968][ T5936] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 52.469600][ T5936] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 52.506549][ T5929] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 52.508823][ T5929] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 52.516780][ T5929] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 52.526098][ T5929] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 52.528428][ T5929] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 52.536367][ T5929] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 52.543652][ T5931] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 52.545866][ T5931] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 52.554107][ T5931] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 52.570090][ T5931] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 52.572332][ T5931] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 52.580600][ T5931] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 52.586986][ T5930] hsr_slave_0: entered promiscuous mode [ 52.589305][ T5930] hsr_slave_1: entered promiscuous mode [ 52.612439][ T5936] hsr_slave_0: entered promiscuous mode [ 52.614662][ T5936] hsr_slave_1: entered promiscuous mode [ 52.616942][ T5936] debugfs: 'hsr0' already exists in 'hsr' [ 52.618857][ T5936] Cannot create hsr debugfs directory [ 52.649140][ T5929] hsr_slave_0: entered promiscuous mode [ 52.651459][ T5929] hsr_slave_1: entered promiscuous mode [ 52.653525][ T5929] debugfs: 'hsr0' already exists in 'hsr' [ 52.655321][ T5929] Cannot create hsr debugfs directory [ 52.671901][ T5931] hsr_slave_0: entered promiscuous mode [ 52.674183][ T5931] hsr_slave_1: entered promiscuous mode [ 52.676228][ T5931] debugfs: 'hsr0' already exists in 'hsr' [ 52.678060][ T5931] Cannot create hsr debugfs directory [ 52.917471][ T5930] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 52.925573][ T5930] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 52.930468][ T5930] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 52.939240][ T5930] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 52.965837][ T5929] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 52.983403][ T5929] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 52.987585][ T5929] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 52.997226][ T5929] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 53.023437][ T5936] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 53.030866][ T5936] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 53.036080][ T5936] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 53.050792][ T5936] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 53.098656][ T5931] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 53.105617][ T5931] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 53.112764][ T5931] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 53.118012][ T5931] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 53.136441][ T5930] 8021q: adding VLAN 0 to HW filter on device bond0 [ 53.156686][ T5930] 8021q: adding VLAN 0 to HW filter on device team0 [ 53.164551][ T1240] bridge0: port 1(bridge_slave_0) entered blocking state [ 53.167203][ T1240] bridge0: port 1(bridge_slave_0) entered forwarding state [ 53.181917][ T1240] bridge0: port 2(bridge_slave_1) entered blocking state [ 53.184245][ T1240] bridge0: port 2(bridge_slave_1) entered forwarding state [ 53.199416][ T5929] 8021q: adding VLAN 0 to HW filter on device bond0 [ 53.234648][ T5936] 8021q: adding VLAN 0 to HW filter on device bond0 [ 53.237730][ T5929] 8021q: adding VLAN 0 to HW filter on device team0 [ 53.252491][ T61] bridge0: port 1(bridge_slave_0) entered blocking state [ 53.255189][ T61] bridge0: port 1(bridge_slave_0) entered forwarding state [ 53.263920][ T61] bridge0: port 2(bridge_slave_1) entered blocking state [ 53.266450][ T61] bridge0: port 2(bridge_slave_1) entered forwarding state [ 53.274593][ T5936] 8021q: adding VLAN 0 to HW filter on device team0 [ 53.283587][ T61] bridge0: port 1(bridge_slave_0) entered blocking state [ 53.285863][ T61] bridge0: port 1(bridge_slave_0) entered forwarding state [ 53.288126][ T40] audit: type=1400 audit(1766029835.966:91): avc: denied { sys_module } for pid=5930 comm="syz-executor" capability=16 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 53.292904][ T61] bridge0: port 2(bridge_slave_1) entered blocking state [ 53.296360][ T61] bridge0: port 2(bridge_slave_1) entered forwarding state [ 53.316200][ T5931] 8021q: adding VLAN 0 to HW filter on device bond0 [ 53.354709][ T5931] 8021q: adding VLAN 0 to HW filter on device team0 [ 53.364927][ T1145] bridge0: port 1(bridge_slave_0) entered blocking state [ 53.367819][ T1145] bridge0: port 1(bridge_slave_0) entered forwarding state [ 53.378746][ T61] bridge0: port 2(bridge_slave_1) entered blocking state [ 53.382114][ T61] bridge0: port 2(bridge_slave_1) entered forwarding state [ 53.406673][ T5930] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 53.435412][ T5930] veth0_vlan: entered promiscuous mode [ 53.446931][ T5930] veth1_vlan: entered promiscuous mode [ 53.467423][ T5929] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 53.488343][ T5930] veth0_macvtap: entered promiscuous mode [ 53.496760][ T5930] veth1_macvtap: entered promiscuous mode [ 53.511595][ T5936] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 53.516870][ T5930] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 53.526847][ T5929] veth0_vlan: entered promiscuous mode [ 53.531337][ T5930] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 53.538967][ T1197] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 53.543849][ T1197] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 53.546879][ T1197] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 53.554716][ T5931] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 53.557734][ T1197] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 53.561868][ T5929] veth1_vlan: entered promiscuous mode [ 53.624873][ T5936] veth0_vlan: entered promiscuous mode [ 53.625252][ T1197] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 53.629230][ T1197] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 53.646550][ T5929] veth0_macvtap: entered promiscuous mode [ 53.655525][ T5929] veth1_macvtap: entered promiscuous mode [ 53.655599][ T46] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 53.661103][ T5931] veth0_vlan: entered promiscuous mode [ 53.665141][ T46] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 53.668230][ T5936] veth1_vlan: entered promiscuous mode [ 53.674431][ T5931] veth1_vlan: entered promiscuous mode [ 53.681606][ T5929] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 53.693001][ T5929] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 53.700612][ T5938] Bluetooth: hci3: command tx timeout [ 53.700713][ T5947] Bluetooth: hci1: command tx timeout [ 53.703799][ T64] Bluetooth: hci2: command tx timeout [ 53.704930][ T5939] Bluetooth: hci0: command tx timeout [ 53.708551][ T1151] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 53.717795][ T1151] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 53.720457][ T5930] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 53.735876][ T1151] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 53.743054][ T1151] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 53.755618][ T5931] veth0_macvtap: entered promiscuous mode [ 53.772596][ T6023] ------------[ cut here ]------------ [ 53.773424][ T5931] veth1_macvtap: entered promiscuous mode [ 53.774483][ T6023] WARNING: fs/exec.c:118 at path_noexec+0x1ca/0x230, CPU#1: syz.1.2/6023 [ 53.779699][ T6023] Modules linked in: [ 53.782074][ T6023] CPU: 1 UID: 0 PID: 6023 Comm: syz.1.2 Not tainted syzkaller #0 PREEMPT(full) [ 53.785037][ T6023] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 53.788499][ T6023] RIP: 0010:path_noexec+0x1ca/0x230 [ 53.790279][ T6023] Code: ff 83 e3 02 48 89 de e8 94 19 81 ff 48 85 db 41 0f 95 c4 e8 b8 1e 81 ff 44 89 e0 5b 5d 41 5c e9 bc 5b 3d 09 e8 a7 1e 81 ff 90 <0f> 0b 90 e9 47 ff ff ff e8 89 f8 ea ff e9 a8 fe ff ff e8 7f f8 ea [ 53.793866][ T5936] veth0_macvtap: entered promiscuous mode [ 53.796388][ T6023] RSP: 0018:ffffc90004a87c60 EFLAGS: 00010283 [ 53.800804][ T5936] veth1_macvtap: entered promiscuous mode [ 53.802684][ T6023] RAX: 00000000000000cd RBX: ffff88801f2d2560 RCX: ffffc900077a1000 [ 53.803776][ T5931] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 53.805263][ T6023] RDX: 0000000000080000 RSI: ffffffff823dc7e9 RDI: 0000000000000007 [ 53.805272][ T6023] RBP: 0000000000000000 R08: 0000000000000007 R09: 0000000000000000 [ 53.813834][ T6023] R10: 0000000000000000 R11: ffff8880259ed4b0 R12: 0000200000000000 [ 53.816398][ T6023] R13: 0000000000000001 R14: 0000000000000002 R15: 0000000000000000 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 53.818945][ T6023] FS: 00007f47d42886c0(0000) GS:ffff8880d69f6000(0000) knlGS:0000000000000000 [ 53.822316][ T6023] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 53.824944][ T6023] CR2: 000000110c386f56 CR3: 00000000557d2000 CR4: 0000000000352ef0 [ 53.827510][ T6023] Call Trace: [ 53.828630][ T6023] [ 53.829741][ T6023] do_mmap+0xd23/0x1210 [ 53.831130][ T6023] ? __pfx_do_mmap+0x10/0x10 [ 53.832691][ T6023] ? __pfx_down_write_killable+0x10/0x10 [ 53.835644][ T6023] ? __might_fault+0xe3/0x190 [ 53.837211][ T6023] vm_mmap_pgoff+0x29e/0x470 [ 53.838733][ T6023] ? __pfx_vm_mmap_pgoff+0x10/0x10 [ 53.840556][ T6023] ? __fget_files+0x20e/0x3c0 [ 53.841285][ T5931] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 53.842126][ T6023] ksys_mmap_pgoff+0x32c/0x5c0 [ 53.846814][ T6023] __x64_sys_mmap+0x125/0x190 [ 53.848372][ T6023] do_syscall_64+0xcd/0xf80 [ 53.850214][ T6023] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 53.852201][ T6023] RIP: 0033:0x7f47d338f7c9 [ 53.853666][ T6023] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 53.860005][ T6023] RSP: 002b:00007f47d4288038 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 53.862731][ T6023] RAX: ffffffffffffffda RBX: 00007f47d35e5fa0 RCX: 00007f47d338f7c9 [ 53.865007][ T5936] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 53.865290][ T6023] RDX: 0000000003000007 RSI: 0000000000003000 RDI: 0000200000000000 [ 53.865299][ T6023] RBP: 00007f47d3413f91 R08: 0000000000000005 R09: 0000000000000000 [ 53.873466][ T6023] R10: 0000000000000011 R11: 0000000000000246 R12: 0000000000000000 [ 53.876035][ T6023] R13: 00007f47d35e6038 R14: 00007f47d35e5fa0 R15: 00007ffccd60c768 [ 53.879148][ T6023] [ 53.880320][ T6023] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 53.882671][ T6023] CPU: 1 UID: 0 PID: 6023 Comm: syz.1.2 Not tainted syzkaller #0 PREEMPT(full) [ 53.885587][ T6023] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 53.889017][ T6023] Call Trace: [ 53.890131][ T6023] [ 53.891109][ T6023] dump_stack_lvl+0x3d/0x1f0 [ 53.892665][ T6023] vpanic+0x640/0x6f0 [ 53.893989][ T6023] ? path_noexec+0x1ca/0x230 [ 53.895505][ T6023] panic+0xca/0xd0 [ 53.896754][ T6023] ? __pfx_panic+0x10/0x10 [ 53.898222][ T6023] check_panic_on_warn+0xab/0xb0 [ 53.899837][ T6023] __warn+0x108/0x3c0 [ 53.901165][ T6023] __report_bug+0x2a0/0x520 [ 53.902676][ T6023] ? path_noexec+0x1ca/0x230 [ 53.904200][ T6023] ? __pfx___report_bug+0x10/0x10 [ 53.905860][ T6023] ? arch_get_unmapped_area_topdown+0x60b/0xa00 [ 53.907891][ T6023] ? path_noexec+0x1ca/0x230 [ 53.909423][ T6023] report_bug+0xb2/0x220 [ 53.910817][ T6023] ? path_noexec+0x1ca/0x230 [ 53.912381][ T6023] handle_bug+0x127/0x260 [ 53.913811][ T6023] exc_invalid_op+0x17/0x50 [ 53.915303][ T6023] asm_exc_invalid_op+0x1a/0x20 [ 53.916913][ T6023] RIP: 0010:path_noexec+0x1ca/0x230 [ 53.918611][ T6023] Code: ff 83 e3 02 48 89 de e8 94 19 81 ff 48 85 db 41 0f 95 c4 e8 b8 1e 81 ff 44 89 e0 5b 5d 41 5c e9 bc 5b 3d 09 e8 a7 1e 81 ff 90 <0f> 0b 90 e9 47 ff ff ff e8 89 f8 ea ff e9 a8 fe ff ff e8 7f f8 ea [ 53.924787][ T6023] RSP: 0018:ffffc90004a87c60 EFLAGS: 00010283 [ 53.926757][ T6023] RAX: 00000000000000cd RBX: ffff88801f2d2560 RCX: ffffc900077a1000 [ 53.929312][ T6023] RDX: 0000000000080000 RSI: ffffffff823dc7e9 RDI: 0000000000000007 [ 53.931860][ T6023] RBP: 0000000000000000 R08: 0000000000000007 R09: 0000000000000000 [ 53.934442][ T6023] R10: 0000000000000000 R11: ffff8880259ed4b0 R12: 0000200000000000 [ 53.937007][ T6023] R13: 0000000000000001 R14: 0000000000000002 R15: 0000000000000000 [ 53.939553][ T6023] ? path_noexec+0x1c9/0x230 [ 53.941078][ T6023] do_mmap+0xd23/0x1210 [ 53.942448][ T6023] ? __pfx_do_mmap+0x10/0x10 [ 53.943973][ T6023] ? __pfx_down_write_killable+0x10/0x10 [ 53.945809][ T6023] ? __might_fault+0xe3/0x190 [ 53.947349][ T6023] vm_mmap_pgoff+0x29e/0x470 [ 53.948878][ T6023] ? __pfx_vm_mmap_pgoff+0x10/0x10 [ 53.950548][ T6023] ? __fget_files+0x20e/0x3c0 [ 53.952084][ T6023] ksys_mmap_pgoff+0x32c/0x5c0 [ 53.953654][ T6023] __x64_sys_mmap+0x125/0x190 [ 53.955214][ T6023] do_syscall_64+0xcd/0xf80 [ 53.956726][ T6023] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 53.958650][ T6023] RIP: 0033:0x7f47d338f7c9 [ 53.960132][ T6023] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 53.966285][ T6023] RSP: 002b:00007f47d4288038 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 53.968955][ T6023] RAX: ffffffffffffffda RBX: 00007f47d35e5fa0 RCX: 00007f47d338f7c9 [ 53.971541][ T6023] RDX: 0000000003000007 RSI: 0000000000003000 RDI: 0000200000000000 [ 53.974107][ T6023] RBP: 00007f47d3413f91 R08: 0000000000000005 R09: 0000000000000000 [ 53.976664][ T6023] R10: 0000000000000011 R11: 0000000000000246 R12: 0000000000000000 [ 53.979215][ T6023] R13: 00007f47d35e6038 R14: 00007f47d35e5fa0 R15: 00007ffccd60c768 [ 53.981796][ T6023] [ 53.983390][ T6023] Kernel Offset: disabled [ 53.984818][ T6023] Rebooting in 86400 seconds..