last executing test programs: 38.275614502s ago: executing program 0: r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) connect$inet(0xffffffffffffffff, 0x0, 0x0) ioctl$TUNSETOFFLOAD(r0, 0xc004743e, 0x20001400) ioctl$TUNSETOFFLOAD(r0, 0x40047459, 0x20004002) 37.859674207s ago: executing program 0: socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r0, 0x8914, &(0x7f0000000280)={'wg2\x00'}) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x0, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f00000002c0)={0xffffffffffffffff}) close(r1) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0xb, 0x7, 0x10001, 0x8, 0x1}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) close(r1) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x7, 0x10001, 0xa, 0x1}, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000000)={{r3}, 0x0, 0x0}, 0x20) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000740)={r3, &(0x7f0000000000), &(0x7f00000000c0)=""/109}, 0x20) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r4}, 0x10) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, &(0x7f0000000040)={'wg2\x00', @multicast}) 37.388124624s ago: executing program 0: r0 = syz_mount_image$bcachefs(&(0x7f0000000000), &(0x7f0000000700)='./file0\x00', 0x0, &(0x7f0000000200)=ANY=[@ANYRESOCT], 0x1, 0x5b69, &(0x7f00000009c0)="$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") r1 = open_tree(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0) renameat2(r1, &(0x7f0000000280)='./file1\x00', r1, &(0x7f0000000980)='./file0\x00', 0x0) syz_mount_image$ext4(&(0x7f0000000580)='ext4\x00', &(0x7f00000005c0)='./file0\x00', 0x1008002, &(0x7f0000000180), 0x3, 0x5eb, &(0x7f0000000c00)="$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") r2 = fspick(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0) fsconfig$FSCONFIG_SET_FLAG(r2, 0x0, &(0x7f0000000080)='ro\x00', 0x0, 0x0) syz_mount_image$vfat(&(0x7f00000002c0), &(0x7f0000000280)='./bus\x00', 0x2029c1b, 0x0, 0x1, 0x0, &(0x7f0000000080)) fsconfig$FSCONFIG_CMD_RECONFIGURE(r2, 0x7, 0x0, 0x0, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x0) mount$overlay(0x0, 0x0, 0x0, 0x0, 0x0) mkdirat(0xffffffffffffffff, 0x0, 0x0) renameat2(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x0) quotactl$Q_SETQUOTA(0xffffffff80000802, &(0x7f0000000000)=@loop={'/dev/loop', 0x0}, 0xee00, &(0x7f0000000080)) syz_mount_image$msdos(&(0x7f0000000180), &(0x7f0000000100)='.\x00', 0xa50c3d, &(0x7f00000002c0)=ANY=[], 0x14, 0x0, &(0x7f0000000000)) syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f0000000500)='./file0\x00', 0x0, &(0x7f0000000240), 0x21, 0x4a6, &(0x7f0000000a40)="$eJzs3cFPG9kZAPBvBgiEkEDaHNqqbdI0bVpFscFJUJRTemlVRZGqRj31kFBwEMLGCJs00BzI/1CpkXpq/4QeKvVQKae97233tpfsYaXsbrSrsNIevJqxIYRgYDcES/j3k55m3jzj7z2sec98gF8APetcRKxFxLGIuBcRo+3rSbvEzVbJHvfyxaPp9RePppNoNu98luTt2bXY8jWZE+3nHIqIP/4u4i/Jm3HrK6vzU5VKealdLzaqi8X6yurluerUbHm2vFAqTU5Mjl+/cq10YGM9W/3P89/O3frT///3k2fvr/36b1m3RtptW8dxkFpDH9iMk+mPiFvvIlgX9LXHc6zbHeE7SSPiexFxPr//R6MvfzUBgKOs2RyN5ujWOgBw1KV5DixJC+1cwEikaaHQyuGdieG0Uqs3Lt2vLS/MtHJlYzGQ3p+rlMfbucKxGEiy+kR+/qpe2la/EhGnI+Lvg8fzemG6Vpnp5hsfAOhhJ7at/18OttZ/AOCIG+p2BwCAQ2f9B4DeY/0HgN5j/QeA3mP9B4DeY/0HgN5j/QeAnvKH27ez0lxvf/71zIOV5fnag8sz5fp8obo8XZiuLS0WZmu12fwze6p7PV+lVlucuBrLD4uNcr1RrK+s3q3Wlhcad/PP9b5bHjiUUQEAuzl99umHSUSs3Tiel9iyl4O1Go62tNsdALqmr9sdALrGbl/Qu/yMD+ywRe9rOv6J0JOD7wtwOC7+UP4fepX8P/Qu+X/oXfL/0LuazcSe/wDQY+T4Ab//BwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgG9vJC9JWmjvBT4SaVooRJyMiLEYSO7PVcrjEXEqIj4YHBjM6hPd7jQA8JbST5L2/l8XRy+MbG89lnw1mB8j4q//vPOPh1ONxtJEdv3zzeuNJ+3rpW70HwDYy8Y6vbGOb3j54tH0RjnM/jz/TWtz0Szueru0WvqjPz8OxUBEDH+RtOst2fuVvgOIv/Y4In6w0/iTPDcy1t75dHv8LPbJQ42fvhY/zdtax+x78f0D6Av0mqfZ/HNzp/svjXP5cef7fyifod7exvy3/sb8l27Of30d5r9z+41x9b3fd2x7HPGj/p3iJ5vxkw7xL+wz/kc//un5Tm3Nf0VcjJ3jb41VbFQXi/WV1ctz1anZ8mx5oVSanJgcv37lWqmY56iLG5nqN31649Kp3cY/3CH+0B7j/8U+x//vr+/9+We7xP/Vz3d+/c/sEj9bE3+5z/hTw//tuH13Fn+mw/j3ev0v7TP+s49XZ/b5UADgENRXVuenKpXykhMnTpxsnnR7ZgLetVc3fbd7AgAAAAAAAAAAAAAAdHIY/07U7TECAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABwdH0TAAD//yyP2UE=") mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x10, 0xffffffffffffffff, 0x0) r3 = openat$dir(0xffffffffffffff9c, 0x0, 0x0, 0x0) getdents64(r3, &(0x7f0000000f80)=""/4096, 0x1000) ioctl$BTRFS_IOC_SYNC(r0, 0x9408, 0x0) mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='hugetlbfs\x00', 0x0, 0x0) chdir(&(0x7f00000001c0)='./file0\x00') 32.41175863s ago: executing program 0: mount$9p_rdma(0x0, 0x0, 0x0, 0x122440, 0x0) 29.49246821s ago: executing program 0: pipe2$9p(&(0x7f0000000280), 0x0) write$nbd(0xffffffffffffffff, 0x0, 0x0) openat$sysfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) socket(0x0, 0x0, 0x0) r0 = socket$unix(0x1, 0x1, 0x0) bind$unix(r0, &(0x7f0000366000)=@file={0x1, './file0\x00'}, 0x6e) listen(r0, 0x0) accept4(r0, 0x0, 0x0, 0x0) r1 = socket$unix(0x1, 0x1, 0x0) rt_sigreturn() prlimit64(0x0, 0x7, &(0x7f0000002040), 0x0) connect$unix(r1, &(0x7f00000001c0)=@file={0x1, './file0\x00'}, 0x6e) close(0xffffffffffffffff) 27.984498456s ago: executing program 0: r0 = socket$can_raw(0x1d, 0x3, 0x1) getsockopt$CAN_RAW_FD_FRAMES(r0, 0x65, 0x5, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000680), 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000001c0)=0x5) preadv(r1, &(0x7f0000001880)=[{&(0x7f0000001a80)=""/102400, 0x19000}], 0x1, 0x0, 0x0) fdatasync(r0) r2 = socket$inet6(0xa, 0x5, 0x0) bind$inet6(r2, &(0x7f0000000100)={0xa, 0x4e23}, 0x1c) ioctl$BTRFS_IOC_START_SYNC(r2, 0x80089418, &(0x7f0000000180)=0x0) ioctl$BTRFS_IOC_SNAP_CREATE_V2(r1, 0x50009417, &(0x7f000001aa80)={{r2}, r3, 0x1c, @inherit={0x78, &(0x7f0000000200)=ANY=[@ANYBLOB="01000000000000020600000000e8ffff980000000000000040e00000001000002000000000000000000000000000000005000000000000000300000000000000ffffff7f000000000900000000000000ff000000000000000700000000000000021500000000000024"]}, @subvolid=0x9b}) listen(r2, 0x3) r4 = socket$igmp(0x2, 0x3, 0x2) getsockopt$IPT_SO_GET_ENTRIES(r4, 0x0, 0x41, &(0x7f00000000c0)=ANY=[], &(0x7f0000001040)=0xcf) socket$inet_dccp(0x2, 0x6, 0x0) r5 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$sock_int(r5, 0x1, 0x5, &(0x7f0000000080)=0x5, 0x4) socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$inet_buf(0xffffffffffffffff, 0x0, 0x29, &(0x7f0000000000)=""/29, &(0x7f0000000040)=0x1d) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, 0x0, 0x0) setsockopt$IP_VS_SO_SET_ADD(r5, 0x0, 0x482, &(0x7f0000000000)={0x6, @private, 0x4e22, 0x2, 'wrr\x00', 0x39, 0x3ff, 0x6e}, 0x2c) syz_io_uring_setup(0x16d2, &(0x7f0000000080)={0x0, 0x0, 0x10100}, &(0x7f0000000040)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r6, r7, &(0x7f0000000000)=@IORING_OP_MKDIRAT={0x25, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}) r8 = mmap$IORING_OFF_SQES(&(0x7f0000ff7000/0x9000)=nil, 0x9000, 0x0, 0x30, r1, 0x10000000) r9 = io_uring_register$IORING_REGISTER_PERSONALITY(r1, 0x9, 0x0, 0x0) syz_io_uring_submit(r6, r8, &(0x7f00000000c0)=@IORING_OP_READ_FIXED={0x4, 0x0, 0x2004, @fd_index=0x2, 0x100, 0x1, 0x7ff, 0x0, 0x1, {0x0, r9}}) 26.048717858s ago: executing program 2: r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000001800)='/sys/class/power_supply', 0x0, 0x0) close(r0) r1 = socket$unix(0x1, 0x1, 0x0) bind$unix(r1, &(0x7f0000003000)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) listen(r1, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) connect$unix(r2, &(0x7f0000000280)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) r3 = accept4$packet(r0, 0x0, 0x0, 0x0) bind$packet(r3, 0x0, 0x0) 21.946144332s ago: executing program 2: socket$inet6_icmp(0xa, 0x2, 0x3a) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r0, &(0x7f0000000180)={0xa, 0x0, 0x0, @remote}, 0x1c) 21.746664651s ago: executing program 2: r0 = syz_mount_image$bcachefs(&(0x7f0000000000), &(0x7f0000000700)='./file0\x00', 0x0, &(0x7f0000000200)=ANY=[@ANYRESOCT], 0x1, 0x5b69, &(0x7f00000009c0)="$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") r1 = open_tree(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0) renameat2(r1, &(0x7f0000000280)='./file1\x00', r1, &(0x7f0000000980)='./file0\x00', 0x0) syz_mount_image$ext4(&(0x7f0000000580)='ext4\x00', &(0x7f00000005c0)='./file0\x00', 0x1008002, &(0x7f0000000180), 0x3, 0x5eb, &(0x7f0000000c00)="$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") r2 = fspick(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0) fsconfig$FSCONFIG_SET_FLAG(r2, 0x0, &(0x7f0000000080)='ro\x00', 0x0, 0x0) syz_mount_image$vfat(&(0x7f00000002c0), &(0x7f0000000280)='./bus\x00', 0x2029c1b, 0x0, 0x1, 0x0, &(0x7f0000000080)) fsconfig$FSCONFIG_CMD_RECONFIGURE(r2, 0x7, 0x0, 0x0, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x0) mount$overlay(0x0, 0x0, 0x0, 0x0, 0x0) mkdirat(0xffffffffffffffff, 0x0, 0x0) renameat2(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x0) quotactl$Q_SETQUOTA(0xffffffff80000802, &(0x7f0000000000)=@loop={'/dev/loop', 0x0}, 0xee00, &(0x7f0000000080)) syz_mount_image$msdos(&(0x7f0000000180), &(0x7f0000000100)='.\x00', 0xa50c3d, &(0x7f00000002c0)=ANY=[], 0x14, 0x0, &(0x7f0000000000)) syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f0000000500)='./file0\x00', 0x0, &(0x7f0000000240), 0x21, 0x4a6, &(0x7f0000000a40)="$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") mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x10, 0xffffffffffffffff, 0x0) openat$dir(0xffffffffffffff9c, 0x0, 0x0, 0x0) getdents64(0xffffffffffffffff, &(0x7f0000000f80)=""/4096, 0x1000) ioctl$BTRFS_IOC_SYNC(r0, 0x9408, 0x0) mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='hugetlbfs\x00', 0x0, 0x0) chdir(&(0x7f00000001c0)='./file0\x00') 18.696930077s ago: executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000007c0)) r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x9, '\x00', 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1cc8383f2bb9b4b5000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014002000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x1, 0x5, &(0x7f0000000040)=ANY=[], &(0x7f0000000440)='syzkaller\x00', 0x8081, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x18, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8}, 0x90) syz_mount_image$ext4(&(0x7f0000000140)='ext4\x00', &(0x7f0000000640)='./file1\x00', 0x3014850, &(0x7f00000001c0)={[{@quota}, {@barrier_val={'barrier', 0x3d, 0x1000}}, {@grpjquota}, {@norecovery}, {@dioread_lock}]}, 0x3, 0x4bd, &(0x7f0000000f00)="$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") ioctl$FS_IOC_SETFLAGS(0xffffffffffffffff, 0x40086602, &(0x7f0000000140)) writev(0xffffffffffffffff, 0x0, 0x0) r1 = fspick(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0) fsconfig$FSCONFIG_SET_FLAG(0xffffffffffffffff, 0x0, &(0x7f0000000540)='nolazytime\x00', 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x0, 0x0, 0x0, 0x8000}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="180000000008002b000000000000000018040000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b704000000000000850000004300000095"], 0x0, 0x0, 0x11, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f00000003c0)='sched_switch\x00'}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) syz_mount_image$fuse(&(0x7f0000000040), &(0x7f0000000000)='./file0\x00', 0x0, &(0x7f0000002280)={{'fd', 0x3d, r5}, 0x2c, {'rootmode', 0x3d, 0x4000}}, 0x0, 0x0, 0x0) fsconfig$FSCONFIG_CMD_RECONFIGURE(r1, 0x7, 0x0, 0x0, 0x0) syz_usb_connect$uac1(0x0, 0xa4, &(0x7f0000000300)=ANY=[@ANYBLOB="2a01000020000040b708000000000000030109029200030172e5000904000000010100000a24010000000201020c0d2407000005000000000000000c240000e9fffff5ffffffff092403f3ff00000502", @ANYRES8, @ANYBLOB="05"], 0x0) 13.726740978s ago: executing program 2: openat(0xffffffffffffff9c, &(0x7f00000001c0)='./file2\x00', 0x107042, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = syz_open_dev$sndpcmp(&(0x7f0000000000), 0x0, 0x0) mmap$snddsp_control(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x1, 0x11, r0, 0x83000000) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = socket$inet6(0xa, 0x3, 0x7) connect$inet6(r4, 0x0, 0x0) r5 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$IPT_SO_SET_REPLACE(r5, 0x0, 0x40, &(0x7f0000000000)=@filter={'filter\x00', 0x42, 0x4, 0x380, 0xffffffff, 0x98, 0x98, 0x98, 0xffffffff, 0xffffffff, 0x2e8, 0x2e8, 0x2e8, 0xffffffff, 0x4, 0x0, {[{{@ip={@private, @remote, 0x0, 0x0, 'rose0\x00', 'wg2\x00'}, 0xa00, 0x70, 0x98, 0x0, {0x100000000000000}}, @REJECT={0x28}}, {{@uncond, 0x0, 0x100, 0x128, 0x0, {}, [@common=@unspec=@helper={{0x48}, {0x0, 'snmp_trap\x00'}}, @common=@unspec=@helper={{0x48}, {0x0, 'snmp\x00'}}]}, @REJECT={0x28}}, {{@ip={@remote, @dev, 0x0, 0x0, 'batadv_slave_0\x00', 'rose0\x00'}, 0x0, 0xc8, 0x128, 0x0, {}, [@common=@inet=@socket1={{0x28}}, @common=@addrtype={{0x30}}]}, @common=@inet=@HMARK={0x60, 'HMARK\x00', 0x0, {@ipv4=@broadcast}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x3e0) sendmsg$IPCTNL_MSG_TIMEOUT_NEW(0xffffffffffffffff, &(0x7f0000005900)={0x0, 0x0, &(0x7f00000058c0)={&(0x7f0000005840)={0x34, 0x0, 0x8, 0x101, 0x0, 0x0, {}, [@CTA_TIMEOUT_NAME={0x9, 0x1, 'syz1\x00'}, @CTA_TIMEOUT_L3PROTO={0x6}, @CTA_TIMEOUT_DATA={0x4, 0x4, 0x0, 0x1, @gre}, @CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x11}]}, 0x34}}, 0x0) sendmsg$IPCTNL_MSG_TIMEOUT_DELETE(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x14, 0x2, 0x8, 0x801}, 0x14}}, 0x0) r6 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r6, 0x4018620d, 0x0) r7 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r7, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) dup3(r7, r6, 0x0) r8 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x1, 0x11, r8, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r8, 0x4018620d, &(0x7f0000000040)) ioctl$BINDER_WRITE_READ(r7, 0xc0306201, 0x0) 12.842095713s ago: executing program 2: r0 = syz_mount_image$bcachefs(&(0x7f0000000000), &(0x7f0000000700)='./file0\x00', 0x0, &(0x7f0000000200)=ANY=[@ANYRESOCT], 0x1, 0x5b69, &(0x7f00000009c0)="$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") r1 = open_tree(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0) renameat2(r1, &(0x7f0000000280)='./file1\x00', r1, &(0x7f0000000980)='./file0\x00', 0x0) syz_mount_image$ext4(&(0x7f0000000580)='ext4\x00', &(0x7f00000005c0)='./file0\x00', 0x1008002, &(0x7f0000000180), 0x3, 0x5eb, &(0x7f0000000c00)="$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") r2 = fspick(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0) fsconfig$FSCONFIG_SET_FLAG(r2, 0x0, &(0x7f0000000080)='ro\x00', 0x0, 0x0) syz_mount_image$vfat(&(0x7f00000002c0), &(0x7f0000000280)='./bus\x00', 0x2029c1b, 0x0, 0x1, 0x0, &(0x7f0000000080)) fsconfig$FSCONFIG_CMD_RECONFIGURE(r2, 0x7, 0x0, 0x0, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x0) mount$overlay(0x0, 0x0, 0x0, 0x0, 0x0) mkdirat(0xffffffffffffffff, 0x0, 0x0) renameat2(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x0) quotactl$Q_SETQUOTA(0xffffffff80000802, &(0x7f0000000000)=@loop={'/dev/loop', 0x0}, 0xee00, &(0x7f0000000080)) syz_mount_image$msdos(&(0x7f0000000180), &(0x7f0000000100)='.\x00', 0xa50c3d, &(0x7f00000002c0)=ANY=[], 0x14, 0x0, &(0x7f0000000000)) syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f0000000500)='./file0\x00', 0x0, &(0x7f0000000240), 0x21, 0x4a6, &(0x7f0000000a40)="$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") mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x10, 0xffffffffffffffff, 0x0) openat$dir(0xffffffffffffff9c, 0x0, 0x0, 0x0) getdents64(0xffffffffffffffff, &(0x7f0000000f80)=""/4096, 0x1000) ioctl$BTRFS_IOC_SYNC(r0, 0x9408, 0x0) mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='hugetlbfs\x00', 0x0, 0x0) chdir(&(0x7f00000001c0)='./file0\x00') 7.37766518s ago: executing program 1: sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000032680)=""/102392, 0x18ff8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(aes-aesni)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r2 = accept4(r1, 0x0, 0x0, 0x0) mknod$loop(0x0, 0x0, 0x1) sendmmsg$alg(r2, &(0x7f0000007140)=[{0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000080)="4a7a5ac44bc48337607985e55fbfbcc246567c44de23b7fcb6738e03840838", 0x1f}, {&(0x7f0000000300)="41b527cc49159a41ab335f3c5ac0f90700000011224a76773da22896a72a601c810000fc7d531cf7f7ac1cb841ff00000100000001830725708695ee8f50df524666bddd0e1c39b52ee31838c15736f93727094edbdd36f4b4000000000d3b4d68c5bd1a21ee1f44546807", 0x6b}], 0x2}], 0x1, 0x20000000) recvmmsg(r2, &(0x7f0000002ac0)=[{{0x0, 0x0, &(0x7f0000002940)=[{&(0x7f0000001600)=""/137, 0x89}], 0x1}}], 0x40000a4, 0x0, 0x0) add_key$keyring(0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff) setsockopt$CAIFSO_LINK_SELECT(0xffffffffffffffff, 0x114, 0x7, 0x0, 0xa0) 7.04150916s ago: executing program 3: socket$packet(0x11, 0x0, 0x300) r0 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000001c0)=@gettfilter={0x24}, 0x24}}, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(r0, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000050400aeff0f608e222b6933d100", @ANYRES32=r3, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=@bridge_delneigh={0x28, 0x1c, 0x63, 0x0, 0x0, {0x7, 0x0, 0x0, r3, 0x80, 0xbe}, [@NDA_LLADDR={0xa, 0x2, @random="63ccc7696324"}]}, 0x28}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="280000001d"], 0x28}}, 0x0) 6.361306524s ago: executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) sched_setscheduler(0x0, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000002c0)={'bridge_slave_0\x00', 0x0}) r2 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(r2, &(0x7f0000000540)={0x0, 0x88a8ffff, &(0x7f00000000c0)={&(0x7f0000000580)=ANY=[@ANYBLOB="440000001100a7cc5a8100ae541d002007000000", @ANYRES32=r1, @ANYBLOB="00000a00100000001c001a80080002802d00ff0408000200f47b0c0d"], 0x44}}, 0x0) 5.893297354s ago: executing program 3: r0 = openat$tcp_mem(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/tcp_rmem\x00', 0x1, 0x0) openat$incfs(0xffffffffffffffff, &(0x7f0000000080)='.pending_reads\x00', 0x0, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) recvmsg(r1, &(0x7f0000000180)={&(0x7f0000000080)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @local}}}, 0x80, 0x0}, 0x0) close(r2) ioctl$TIOCNOTTY(r0, 0x5450) 5.773510837s ago: executing program 4: r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{}, {0x0, 0x989680}}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) write$binfmt_script(r1, &(0x7f0000000340), 0xffffff94) sendmsg$unix(r1, &(0x7f0000000640)={0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f00000001c0)='D', 0x1}], 0x1}, 0x0) close(r1) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) rt_sigreturn() timer_settime(0x0, 0x0, &(0x7f0000000100)={{0x0, 0x3938700}, {0x0, 0x989680}}, 0x0) mknod$loop(&(0x7f0000000000)='./file0\x00', 0x1a46, 0x1) execve(&(0x7f0000000500)='./file0\x00', 0x0, 0x0) 5.472152853s ago: executing program 4: r0 = socket$unix(0x1, 0x5, 0x0) recvmmsg(r0, &(0x7f0000001d80)=[{{&(0x7f00000013c0)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @remote}}}, 0x80, 0x0}}], 0x1, 0x0, 0x0) timer_settime(0x0, 0x0, 0x0, 0x0) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(r1, 0x5450, 0x0) semget$private(0x0, 0x0, 0x0) semop(0x0, 0x0, 0x0) semctl$SETALL(0x0, 0x0, 0x11, 0x0) clock_gettime(0x0, 0x0) semtimedop(0x0, 0x0, 0x0, 0x0) openat$cgroup(0xffffffffffffff9c, 0x0, 0x200002, 0x0) socket(0x0, 0x0, 0x0) close(0xffffffffffffffff) 5.053352201s ago: executing program 4: pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x0, &(0x7f0000000000)='.\x00', &(0x7f0000000040), 0x0, &(0x7f00000000c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r3}}) splice(r2, 0x0, r1, 0x0, 0xffffffffffff8000, 0x0) r4 = syz_init_net_socket$ax25(0x3, 0x2, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x0, 0x3, &(0x7f0000000580)=@framed={{0x18, 0x5}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x0, 0x10, &(0x7f0000000580)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000700)='kmem_cache_free\x00', r5}, 0x10) syz_mount_image$exfat(&(0x7f0000000280), &(0x7f00000000c0)='./file2\x00', 0x3000cd0, &(0x7f0000000440)=ANY=[], 0x1, 0x1509, &(0x7f0000002d40)="$eJzs3Am4TmX3MPC17vveHDI8Sea97rV5kuEmSUJJMiRJEpI5IUmSJEkcMiUhCRlPkjlkTicd8zxkTjp5JUkSkinc33VUn7f3fft6p//n/b9n/a5rX+deZ++1nrXPup7z7L2v65xvuwyt1rB65XrMDP8M/esCf/6SCAAJADAAALIDQAAAZXKUyZG2P5PGxH/qRcT/kPrTr3YH4mqS+advMv/0Teafvsn80zeZf/om80/fZP7pm8xfiHRtZt5rZUu/mzz//19O/SvJ8vmfLuDv7ZD5/7fR/9DRMv/0Teafvsn80zeZf/pz5RYsuKp9iKtP3v/pm8xfiHTt3/5Mef3Zq/1MW7Z/YBNCCCGEEEIIIYQQQgghhBBCCCGEEEIIIYQQQgghhBBCCCGEEEIIIYQQQgghhBBCCCGEEEIIIYQQQgghhBBCCCGEEEIIIYQQQgghhBBCCCGEEEIIIYQQQgghhBBCCCGEEEIIIYQQQgghhBBCCCGEEEIIIYQQQgghhBBCCCGEEEIIIf4/OOuvMADw6/pq9yWEEEIIIYQQQoh/H//+1e5ACCGEEEIIIYQQ//MQFGgwEEAGyAgJkAkywzWQBbJCNsgOMbgWcsB1kBOuh1yQG/JAXsgH+aEAhEBggSGCglAI4nADFIYboQgUhWJQHByUgJJwE5SCm6E03AJl4FYoC7dBOSh/+TXT3AmV4C6oDHdDFagK1aA63AM14F6oCfdBLbgfasMDUAcehLrwENSD+tAAHoaG8Ag0gsbQBJpCM2gOLf4gPyn738p/EbrDS9ADekIi9ILe8DL0gb7QD/rDAHgFBsKrMAheg8EwBIbC6zAM3oDh8CaMgJEwCt6C0TAGxsI4GA8TIAnehonwDkyCdx/JClNgKkyD6TADZsJ7MAtmwxx4H+bCPJgPSZkWwiJYDB/AEvgQkuEjWAofQwosg+WwAlbCKlgNa2AtrIP1sAE2wibYDFtgK3wC22A77ICdsAt2wx74FPbCZ7APPodU/OIfzD/z23zoioCAChUaNJgBM2ACJmBmzIxZMAtmw2wYwxjmwByYE3NiLsyFeTAPJmI+LIAFkJCQkbEgFsQ4xrEwFsYiWASLYTF06LAklsRSeNF7XxrLYBksi2WxHJbH8ng73o4VsSJWwkpYGStjFayC1bAa3oP34L1YE2tiLayFtbE21sE6WBfrYj2shw2wATbEhtgIG2ETbILNsBm2wBbYEltiK2yFbbANtsW22A7bYXtsjx2wA3bEjtgJO2Fn7IxdsAt2xRfwBXwRX8SX8CXsiVVUL+yNvbEP9sF+2B/74ys4EF/FV/E1HIxDcCi+jq/jGzgcT+MIHImjcBRWVGNwLI5DVhMwCZMwI0zESTgJJ+MUnILTcDrOwJk4E2fhbJyN7+NcnIfzcAEuwEW4GBfjEvwQkzEZl+IZTMFluBxX4EpchStxDa7FNbgeN+B63ISbcAtuwU/wE9yO23En7sTduBs/xU/xM/wMB2MqpuJ+3I8H8AAexIN4CA/hYTyMR/AIHsWjeAyP4XE8gSfxBJ7CU3gaz+BZADiP5/ECXsBLeCntza/SGGVUBpVBJagElVllVllUFpVNZVMxFVM5VA6VU+VUuVQulUflUflUPlVAFVCkSLGKVEFVUMVVXBVWhVURVUQVU8WUU06VVCVVKVVKlValVRl1qyqrblPlVHnV2t2ublcVVRtXSd2lKqvKqoqqqqqp6qq6qqFqqJqqpqqlaqnaqraqox5UdVUv7If1VdpkGqoh2EgNxSaqqWqmmqs38FHVUg3HVqq1aqMeVyNxBLZTLV179ZTqoMZiR/WMGofPqs5qAnZRz6uu6gXVTb2ouqtWrofqqSZjL9VbTcM+qq/qp/qrWVhVpU2smnpNvZhxiBqqXleL8A01XL2pRqiRapR6S41WY9RYNU6NVxNUknpbTVTvqEnqXTVZTVFT1TQ1Xc1QM9V7apaareao99VcNU+DWqAWqkVqsfpALVEfqmT1kVqqPlYpaplarlaolWqVWq3WqLVqnVqvNqiNapParLaoreoTtU1tVzvUTrVL7VZ71Kdqr/pM7VOfq1T1hdqv/qQOqC/VQfWVOqS+VofVN+qI+lYdVd+pY+p7dVydUCfVD+qU+lGdVmfUWXVOnVc/qQvqorqkvAKNWmmtjQ50Bp1RJ+hMOrO+RmfRWXU2nV3H9LU6h75O59TX61w6t85j8up8Or8uoENN2mrWkS6oC+m4vkEX1jfqIrqoLqaLa6dL6JL6Jl1K36xL61t0GX2rLqtv0+V0eV3Bg75DV9R36kr6Ll1Z362r6Kq6mq6u79E19L26pr5P19L369r6AV1HP6jr6od0PV1fN9AP64b6Ed1IN9ZNdFPdTDfXLfSjuqV+TLfSrXUb/bhuq5/Q7fSTur1+SnfQT+uO+hndST+rO+vndBf9vO6qX9Dd9EV9SXvdQ/fUibqX7q1f1n10X91P99cD9Ct6oH5VD9Kv6cF6iB6qX9fD9Bt6uH5Tj9Aj9Sj9lh6tx+ixepweryfoJP22nqjf0ZP0u3qynqKn6ml6up6h+/1Sac7fkf/O38gfdPnVt+it+hO9TW/XO/ROvUvv1nv0Hr1X79X79D6dqlP1fr1fH9AH9EF9UB/Sh/RhfVgf0Uf0UX1UH9PH9HF9Qp/TP+hT+kd9Wp/RZ/Q5fV6f1xd++RmAQaOMNsYEJoPJaBJMJpPZXGOymKwmm8luYuZak8NcZ3Ka600uk9vkMXlNPpPfFDChIWMNm8gUNIVM3NxgCpsbTRFT1BQzxY0zJUxJc9O/nP9H/bUwLUxL09K0Mq1MG9PGtDVtTTvTzrQ37U0H08F0NB1NJ9PJdDadTRfTxXQ1XU030810N91ND9PDJJpE09u8bPqYvqaf6W8GmFfMQDPQDDKDzGAz2Aw1Q80wM8wMN8PNCDPCjDKjzGgz2ow1Y814M94k+exmoploJplJZrKZbKYOyG6mm+lmpplpZplZZo6ZY+aauWa+mW8WmoVmsVlslpglJtkkm6VmqUkxy8wys8KsMKvMKrPGrDHrzDqzwWwwm8wmk2K2mq1mm9lmdpgdZpfZZfaYPWav2Wv2mX0m1aSa/Wa/OWAOmIPmoDlkDpnD5rA5Yo6Yo+aoOWaOmePmuDlpTppT5pQ5bU6bs+asOW/OmwvmgrlkLqVd9gUqUIEJTJAhyBAkBAlB5iBzkCXIEmQLsgWxIBbkCHIEOYPrg1xB7iBPkDfIF+QPCgRhQIENOIiCgkGhIB7cEBQObgyKBEWDYkHxwAUlgpLBTUGp4OagdHBLUCa4NSgb3BaUC8oHFYLbgzuCisGdQaXgrqBycHdQJagaVAuqB/cENYJ7g5rBfUGt4P6gdvBAUCd4MKgbPBTUC+oHDYKHg4bBI0GjoHHQJGgaNAuaBy3+rfW9P537Mdcj7Bkmhr3C3uHLYZ+wb9gv7B8OCF8JB4avhoPC18LB4ZBwaPh6OCx8IxwevhmOCEeGo8K3wtHhmHBsOC4cH04Ik8K3w4nhO+Gk8N1wcjglnBpMC6eHM8KZ4XvhrHB2OCd8P5wbzgvnhwvCheGiEH++JIbk8KNwafhxmBIuC5eHK8KV4apwdbgmXBuuC9eHG8KN4aYyA38+NNwWbg93hDvDXeHucE/4abg3/CzcF34epoZfhPvDP4UHwi/Dg+FX4aHw6/Bw+E14JPw2PBp+Fx4Lvw+PhyfCk+EP4anwx/B0eCY8G54Lz4c/hRfCi+Gl0Kdd3Kd9vJMhQxkoAyVQAmWmzJSFslA2ykYxilEOykE5KSflolyUh/JQPspHBagApWFiKkgFKU5xKkyFqQgVoWJUjBw5KkklqRSVotJUmspQGSpLZakclaMKVIHuoDvoTrqT7qK76G66m6pSVapO1akG1aCaVJNqUS2qTbWpDtWhulSX6lE9akANqCE1pEbUiJpQE2pGzagFtaCW1JJaUStqQ22oLbWldtSO2lN76kAdqCN1pE7UiTpTZ+pCXagrdaVu1I26U3fqQT0okRKpN/WmPtSH+lE/GkADaCANpEE0iAbTYBpKQ2kYDaPhNJxG0EgaRW/RaBpDY2kcjacJlERJNJEm0iSaRJNpMk2lqTSdptNMmkmzaBbNoTk0l+bSfJpPC2khLabFtISWUDIl01JaSimUQstpOa2klbSaVtNaWkvraT1tpI20mTbTVtpK22gb7aAdtIt20R7aQ3tpL+2jfZRKqbSf9tMBOkAH6SAdokN0mA7TETpCR+koHaNjdJyO00k6SafoFJ2m03SWztJ5+oku0EW6RJ4SbCab2V5js9isNpvNbv8yzmPz2nw2vy1gQ5vL5v5NTNbaIraoLWaLW2dL2JL2pr+Ky9nytoK93d5hK9o7bSVbzmaCP49r2HttTXufrWXvt9XtPb+Ja9sHbB37iK1rG9t6tqltYJvbhvYR28g2tk1sU9vMNrdt7RO2nX3StrdPJXSwT/95bNPiJfZDu9aus+vtBrvXfmbP2nP2iP3Wnrc/2R62px1gX7ED7at2kH3NDrZDfhsD2FH2LTvajrFj7Tg73k74q3iqnWan2xl2pn3PzrKz/ypebD+wc22ynW8X2IV20eU4radk+5Fdaj+2KXaZXW5X2JV2lV1t1/zfXlfYTXaz3WL32E/tNrvd7rA77S67+3Kcdh777Oc21X5hD9tv7AH7pT1oj9pD9uvLcdr5HbXf2WP2e3vcnrAn7Q/2lP3RnrZnLp9/2rn/YC/aS9ZbYGTFmg0HnIEzcgJn4sx8DWfhrJyNs3OMr+UcfB3n5Os5F+fmPJyX83F+LsAhE1tmjrggF+I438CF+UYuwkW5GBdnxyW4JN/EpfhmLs23cBm+lcvybVyOy3MFvp3v4Ip8J1fiu7gy381VuCpX4+p8D9fge7km38e1+H6uzQ9wHX6Q6/JDXI/rcwN+mBvyI9yIG3MTbsrNuDm34Ee5JT/Grbg1t+HHuS0/we34SW7PT3EHfpo78jPciZ/lzvwcd+HnuSu/wN34Re7OL3EP7smJ3It788vch/tyP+7PA/gVHsiv8iB+jQfzEB7Kr/MwfoOH85s8gkfyKH6LR/MYHsvjeDxP4CR+myfyOzyJ3+XJPIWn8jSezjN4Jr/Hs3g2z+H3eS7P4/m8gBfyIl7MH/AS/pCT+SNeyh9zCi/j5byCV/IqXs1reC2v4/W8gTfyJt7MW3grf8LbeDvv4J28i3fzHv6U9/JnvI8/51T+gvfzn/gAf8kH+Ss+xF/zYf6Gj/C3fJS/42P8PR/nE3ySf+BT/COf5jN8ls/xef6JL/BFvsSeIcJIRToyURBliDJGCVGmKHN0TZQlyhpli7JHsejaKEd0XZQzuj7KFeWO8kR5o3xR/qhAFEYU2YijKCoYFYri0Q1R4ejGqEhUNCoWFY9cVCIqGd0UlYpujkpHt0RlolujstFtUbmofFQhuj26I6oY3RlViu6KKkd3R1WiqlG1qHp0T1QjujeqGd0X1Yruj0pHD0R1ogejutFDUb2oftQgejhqGD0SNYoaR02iplGzqHnUIno0ahk9FrWKWkdtosejttETUbvoyah99FTUIXr6yv6iwc+fpn+xPzHqFelfnpDdpxfGF8UXxz+IL4l/GE+OfxRfGv84nhJfFl8eXxFfGV8VXx1fE18bXxdfH98Q3xjfFN8c3xL3vnpGcJh2IwzGBS6Dy+gSXCaX2V3jsrisLpvL7mLuWpfDXedyuutdLpfb5XF5XT6X3xVwoSNnHbvIFXSFXNzd4Aq7G10RV9QVc8WdcyVcSdfctXAtXEv3mGvlWrs27nH3uHvCPeGeTPilcdfRPeM6uWddZ/ece84977q6F1w396Lr7l5yPVxPl+gSXW/X2/VxfVw/188NcAPcQDfQDXKD3GA32A11Q90wN8wNd8PdCDfCjXKj3Gg32o11Y914N94luSQ30U10k9wkN9lNdlPdVDfdTXcz3Uw3y81yc9wcN9fNdfPdfLfQLXSL3WK3xC1xyS7ZLXVLXYpLccvdcrfSrXSr3Wq31q116916t9FtdJvdZrfVbXXb3Da3w+1wu9wut8ftcXvdXrfP7XOpLtXtd/vdAXfAHXRfuUPua3fYfeOOuG/dUfedO+a+d8fdCXfSeX3K/ehOuzPurDvnzruf3AV30V1y3iXF3o5NjL0TmxR7NzY5NiU2NTYtNj02IzYz9l5sVmx2bE7s/djc2LzY/NiC2MLYotji2AexJbEPY8mxj2JLYx/HUmLLYstjK2IrY6ti3uffFvmCvpCP+xt8YX+jL+KL+mK+uHe+hC/pb/Kl/M2+tL/Fl/G3+rL+Nl/Ol/cVfGPfxDf1zXxz38I/6lv6x3wr39q38Y/7tv4J384/6dv7p3wH/7Tv6J/xnfyzvrN/znfxz8/7Zcq+u3/J9/A9faLv5Xv7l30f39f38/39AP+KH+hf9YP8a36wH+KH+tf9MP+GH+7f9CP8SD/Kv+VH+zF+rB/nx/sJPsm/7Sf6d/wk/66f7Kf4qX6an+5n+Jn+PT/Lz/Zz/Pt+rp/n5/sFfqFf5Bf7D/wS/6FP9h/5pf5jn+KX+eV+hV/pV/nVfo1f69f59X6D3+g3+c1+i9/qP/Hb/Ha/w+/0u/xuv8d/6vf6z/w+/7lP9V/4/f5P/oD/0h/0X/lD/mt/2H/jj/hv/VH/nT/mv/fH/Ql/0v/gT/kf/Wl/xp/15/x5/5O/4C/6S/I3a0IIIYQQfxf9B/t7/Y3vqV+2NL0BIOv2vIf+subGXD+v+6q9HWIA8FTPLvV/3erXT0xM/OXYFA1BoQUAELuSnwGuxMugDTwB7aE1lPqb/fVVFS5f9/2/6sdvBcgMkOnXnLTbo1/jK/Vv/p36jT/g362/7Of6CwCKFLqSk1b41/hK/dK/U39329+vf7n/TF8mAbT6s5wscCW+Ur8kPAZPQ/vfHCmEEEIIIYQQQvysrzrf9Q/uPy/fn+czv837Nf6j+/M/UOlf7V8IIYQQQgghhBB/7NkXuj35aPv2rTv9Ny8y/me08R+wQAD4D2hDFv/5i6v9m0kIIYQQQgjx73blov9qdyKEEEIIIYQQQgghhBBCCCGEEEIIIYQQQgghhBBCCCGEEEIIIYQQQqRf//x/CFN/98FX+xyFEEIIIYQQQgghhBBCCCGEEEIIIYQQQgghhBBCCCGEEEIIIYQQQgghhBBCCCGEEEKIq+3/BAAA//+0FVXr") r6 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file2\x00', 0x107c42, 0x0) pwritev2(r6, &(0x7f0000000500)=[{&(0x7f0000000140)='\x00', 0x1}], 0x1, 0x0, 0x0, 0x0) r7 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000100), 0x400000, 0x0) setsockopt$inet6_IPV6_DSTOPTS(r7, 0x29, 0x3b, &(0x7f0000000200)={0x0, 0x6, '\x00', [@enc_lim={0x4, 0x1, 0x40}, @enc_lim={0x4, 0x1, 0x3}, @generic={0x40}, @hao={0xc9, 0x10, @mcast1}, @calipso={0x7, 0x18, {0x3, 0x4, 0x9, 0x3, [0x2, 0x7]}}]}, 0x40) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000080)={'syztnl0\x00', &(0x7f0000000040)={'syztnl1\x00', 0x0, 0x40, 0x40, 0x8, 0x0, {{0x6, 0x4, 0x1, 0x3, 0x18, 0x67, 0x0, 0x0, 0x0, 0x0, @dev={0xac, 0x14, 0x14, 0x1b}, @local, {[@end]}}}}}) sendmsg$TCPDIAG_GETSOCK(r7, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000740)={0xec, 0x12, 0x0, 0x0, 0x0, {0x23, 0x8, 0x0, 0x0, {0x4e21, 0x4e1e, [0x20, 0x4, 0x0, 0x5], [0x1, 0x81, 0x800, 0xfbc0], r8, [0x0, 0x4]}, 0x5, 0x10001}, [@INET_DIAG_REQ_BYTECODE={0x71, 0x1, "c24c9e0c99e838289a6447755be32578ab4547c8a294712c61bc7c2abf81dd91280d46b78567779458c1b9ba3007beb2d2d61c61e803a1989c60ec070ea08dbf9bce25493248c4517d55da34e4337c75160499d25ba3a2c17f899bfa2c58422a8a5c88f778925e341d1e2cf910"}, @INET_DIAG_REQ_BYTECODE={0x5, 0x1, "c1"}, @INET_DIAG_REQ_BYTECODE={0x24, 0x1, "8e2396eb699d2a25fd3c34ae32004b20a307cffb68257ef771e00a7bf4c06355"}]}, 0xec}, 0x1, 0x0, 0x0, 0x1}, 0x801) r9 = syz_open_dev$evdev(&(0x7f0000000240), 0x7, 0x105080) ppoll(&(0x7f0000000280)=[{r9}, {0xffffffffffffffff, 0x49}, {r4, 0x180}, {r4, 0x8000}, {r7}, {r4, 0x80}], 0x6, &(0x7f00000002c0)={0x77359400}, &(0x7f0000000300)={[0x3]}, 0x8) r10 = openat$mice(0xffffffffffffff9c, &(0x7f0000000340), 0x800) bpf$MAP_CREATE(0x0, &(0x7f0000000380)=@bloom_filter={0x1e, 0x5, 0x0, 0x6, 0x188, r10, 0x5, '\x00', r8}, 0x48) accept$ax25(r4, 0x0, 0x0) 4.861797s ago: executing program 1: prctl$PR_SCHED_CORE(0x3e, 0x0, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001) r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) preadv(r0, &(0x7f0000000580)=[{&(0x7f0000000640)=""/102396, 0xfffffd6e}, {&(0x7f0000019740)=""/242}], 0x2, 0x0, 0x0) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) iopl(0x3) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040), 0x13f}}, 0x20) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r3 = openat$cgroup_int(r2, &(0x7f0000000140)='cpuset.memory_spread_page\x00', 0x2, 0x0) r4 = openat$cgroup_procs(r2, &(0x7f00000000c0)='tasks\x00', 0x2, 0x0) sendfile(r4, r3, 0x0, 0x4) sendfile(r3, r4, 0x0, 0x0) r5 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000000)=[{0x6}]}) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, 0x0, 0x0) close_range(r5, 0xffffffffffffffff, 0x0) sendmsg$NL80211_CMD_JOIN_IBSS(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, 0x0}, 0x0) sendmsg$NL80211_CMD_SET_BSS(0xffffffffffffffff, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0xf8fe3326746cd6dd}, 0x0) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000240), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x280000b, 0x28011, 0xffffffffffffffff, 0x0) dup(0xffffffffffffffff) 4.849580032s ago: executing program 3: chdir(&(0x7f0000000240)='./file0\x00') prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) syz_mount_image$btrfs(&(0x7f0000005100), &(0x7f0000005140)='./file0\x00', 0x16, &(0x7f0000000080), 0x1, 0x5124, &(0x7f000000a2c0)="$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") chdir(&(0x7f0000000240)='./file0\x00') mkdirat(0xffffffffffffffff, &(0x7f0000000200)='./bus\x00', 0x0) lsetxattr$system_posix_acl(&(0x7f0000000400)='.\x00', &(0x7f0000002440)='system.posix_acl_default\x00', 0x0, 0x5c, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = creat(&(0x7f00000001c0)='./file0\x00', 0x0) write$P9_RLINK(r3, &(0x7f0000000080)={0x7}, 0x7) lsetxattr$security_ima(&(0x7f0000000100)='./file0\x00', &(0x7f0000000300), &(0x7f0000000000)=@md5={0x1, "1bc1120b4367acaaba77705abf88d3f9"}, 0x11, 0x0) sched_setscheduler(0x0, 0x1, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000200)='./bus\x00', 0x40942, 0x0) renameat(0xffffffffffffffff, &(0x7f0000000040)='./file0\x00', 0xffffffffffffffff, &(0x7f0000000180)='./file0\x00') r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cpuacct.usage_percpu\x00', 0x275a, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001c40)={0x0, 0x3, &(0x7f0000001300)=ANY=[@ANYBLOB="1800000001000000000000000000000095"], 0x0}, 0x90) r5 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./cgroup\x00', 0x0, 0x0) r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001c40)={0x8, 0x3, &(0x7f0000001300)=ANY=[], &(0x7f0000000240)='syzkaller\x00'}, 0x90) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000180)={r6, r5, 0x16, 0x0, @val=@tcx={@prog_fd}}, 0x40) r7 = socket$vsock_stream(0x28, 0x1, 0x0) setsockopt$SO_VM_SOCKETS_BUFFER_MIN_SIZE(r7, 0x28, 0x1, &(0x7f0000000040), 0x8) write$snddsp(r4, &(0x7f00000000c0)="8e", 0x1) 4.018832967s ago: executing program 4: socket$inet(0x2, 0x0, 0x0) bind$inet(0xffffffffffffffff, 0x0, 0x0) socket$unix(0x1, 0x0, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) epoll_create(0x0) openat$audio(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$SNDCTL_DSP_SETFMT(0xffffffffffffffff, 0xc0045005, 0x0) syz_open_dev$video4linux(&(0x7f0000000740), 0x0, 0x0) ioctl$VIDIOC_QUERY_DV_TIMINGS(0xffffffffffffffff, 0x80845663, 0x0) syz_io_uring_setup(0x0, 0x0, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0) close(0xffffffffffffffff) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000800000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000140)='contention_end\x00', r0}, 0x10) write$binfmt_aout(0xffffffffffffffff, &(0x7f0000000000)=ANY=[], 0xff2e) bind$packet(0xffffffffffffffff, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, 0x14) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r1, &(0x7f0000000100)={0x1f, 0xffff}, 0x6) r2 = socket$packet(0x11, 0x3, 0x300) getsockopt$packet_buf(r2, 0x107, 0x17, 0x0, &(0x7f00000000c0)) write$binfmt_misc(r1, &(0x7f0000000080)=ANY=[@ANYBLOB="1f00030007"], 0xd) 3.73257982s ago: executing program 1: r0 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r0, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r0, 0xc01064b5, &(0x7f0000000140)={&(0x7f0000000100)=[0x0], 0x1}) ioctl$DRM_IOCTL_MODE_GETPLANE(0xffffffffffffffff, 0xc02064b6, &(0x7f00000001c0)={r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_SETPLANE(r0, 0xc03064b7, &(0x7f00000000c0)={r1, 0x0, r2, 0x0, 0x0, 0x0, 0xc8df}) 2.885746361s ago: executing program 1: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = getpid() process_vm_readv(r0, &(0x7f0000008400)=[{&(0x7f0000000300)=""/54, 0x7ffff000}, {&(0x7f0000006180)=""/152, 0x98}], 0x2, &(0x7f0000008640)=[{&(0x7f0000008480)=""/95, 0x7ffff000}], 0x286, 0x0) ioctl$PIO_SCRNMAP(0xffffffffffffffff, 0x4b41, &(0x7f0000002080)) syz_emit_ethernet(0x3e, &(0x7f0000000000)={@broadcast, @empty, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x67, 0x0, @rand_addr, @broadcast}, @time_exceeded={0x21, 0x0, 0x0, 0x12, 0x0, 0x2802, {0x5, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @multicast2}}}}}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000080)=@newqdisc={0x24, 0x14, 0x0, 0x0, 0x0, {0x2}}, 0x24}}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_int(r1, 0x29, 0xb, &(0x7f0000000040)=0x9, 0x4) bind$inet6(r1, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c) recvmmsg(r1, &(0x7f0000000040), 0x400000000000284, 0x2, 0x0) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x42, &(0x7f0000000100)=0x1e79, 0x4) sendto$inet6(r1, 0x0, 0x0, 0x0, &(0x7f0000000300)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c) 2.805650063s ago: executing program 4: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001) r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) preadv(r0, &(0x7f0000000580)=[{&(0x7f0000000640)=""/102396, 0xfffffd6e}, {&(0x7f0000019740)=""/242}], 0x2, 0x0, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) setsockopt$netlink_NETLINK_RX_RING(r1, 0x10e, 0xb, &(0x7f0000000340), 0x10) sendmsg$NFT_MSG_GETSETELEM(0xffffffffffffffff, 0x0, 0x0) socket$inet_smc(0x2b, 0x1, 0x0) socket$packet(0x11, 0x0, 0x300) setsockopt$packet_int(0xffffffffffffffff, 0x107, 0x0, 0x0, 0x0) syz_emit_ethernet(0x0, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) socket$netlink(0x10, 0x3, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) r2 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$smc(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$SMC_PNETID_DEL(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)={0x40, r3, 0x1, 0x0, 0x0, {0x2, 0x2, 0x2}, [@SMC_PNETID_IBNAME={0x9, 0x3, 'syz2\x00'}, @SMC_PNETID_NAME={0x9, 0x1, 'syz0\x00'}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'ip6_vti0\x00'}]}, 0x40}, 0x1, 0x40030000000000}, 0x0) 2.697203894s ago: executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) sched_setscheduler(0x0, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000002c0)={'bridge_slave_0\x00', 0x0}) r2 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(r2, &(0x7f0000000540)={0x0, 0x88a8ffff, &(0x7f00000000c0)={&(0x7f0000000580)=ANY=[@ANYBLOB="440000001100a7cc5a8100ae541d002007000000", @ANYRES32=r1, @ANYBLOB="00000a00100000001c001a80080002802d00ff0408000200f47b0c0d"], 0x44}}, 0x0) 1.476538702s ago: executing program 1: r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x18, 0x5, &(0x7f0000000140)=ANY=[@ANYBLOB="180100002100000000000000000000108500000075000000a50000002300000095"], &(0x7f0000000000)='GPL\x00'}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x10) r2 = socket$inet6(0xa, 0x1000080002, 0x100000000000088) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000040)=@framed, &(0x7f0000000000)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x48}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$MAP_CREATE(0x100000000000000, &(0x7f00000001c0)=@base={0x5}, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x1f, 0x3, &(0x7f0000000700)=ANY=[], &(0x7f00000000c0)='syzkaller\x00', 0xd3c7, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x17, 0x4, &(0x7f0000000000)=@framed={{}, [@ldst={0x3, 0x0, 0x3, 0x1}]}, &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) ioctl$sock_SIOCBRDELBR(r3, 0x89a1, &(0x7f0000000300)='geneve0\x00') bind$bt_hci(r4, &(0x7f0000000040)={0x1f, 0xffff, 0x3}, 0x6) write$binfmt_misc(r4, &(0x7f0000000000)=ANY=[@ANYBLOB='\"\x00\x00\x00\a'], 0xd) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000040)=@framed={{}, [@call={0x85, 0x0, 0x0, 0x2a}, @printk={@ld}]}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000000)='global_dirty_state\x00', r5}, 0x10) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000580)='memory.events\x00', 0x100002, 0x0) bind$inet6(r2, &(0x7f0000000140)={0xa, 0x4e23}, 0x1c) setsockopt$inet6_udp_int(0xffffffffffffffff, 0x11, 0x100000000a, &(0x7f00000003c0)=0x800000001, 0x4) bpf$MAP_CREATE(0x0, &(0x7f0000000500)=@base={0x6, 0x4, 0x0, 0x5, 0x1106}, 0x48) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x4008840, &(0x7f0000000180)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @local}}, 0x1c) sendto$inet6(0xffffffffffffffff, &(0x7f0000000000)="17", 0x1, 0x0, 0x0, 0x0) sendmsg$nl_route(r6, &(0x7f0000000380)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000340)={&(0x7f0000000740)=@ipv6_newnexthop={0xfc, 0x68, 0x100, 0x0, 0x25dfdc03, {0xa, 0x0, 0x1, 0x0, 0x9}}, 0xfc}}, 0x40000001) write(0xffffffffffffffff, &(0x7f0000000100)="52000300010007", 0x7) read$nci(r0, 0x0, 0x0) 69.030728ms ago: executing program 3: socket$nl_netfilter(0x10, 0x3, 0xc) r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = syz_open_pts(0xffffffffffffffff, 0x0) ioctl$TIOCSTI(r1, 0x540c, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x4) r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)={0x1b, 0x0, 0x0, 0x40000}, 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500400000000000bf91000000000000b7020000000000008500000084000000b70000000000000095"], &(0x7f0000001dc0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x2d) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@abs, 0x6e) getsockopt(0xffffffffffffffff, 0x28, 0x6, &(0x7f0000001680)=""/59, &(0x7f0000000000)=0x3b) sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r7 = socket$inet6(0xa, 0x3, 0x7) connect$inet6(r7, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(r7, 0x29, 0x23, &(0x7f0000000340)={{{@in6=@dev, @in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0xa}, {}, {}, 0x0, 0x0, 0x1}, {{@in=@empty, 0x0, 0x33}, 0x0, @in=@dev={0xac, 0x14, 0x14, 0x3}, 0x0, 0x0, 0x0, 0x7}}, 0xe8) sendmmsg(r7, &(0x7f0000000480), 0x2e9, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000040)={0xffffffffffffffff}, 0x111}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000180)={0x3, 0x40, 0xfa02, {{0x6000000, 0x0, 0x0, @mcast2}, {0xa, 0x0, 0x0, @mcast2={0xff, 0x5}}, r8}}, 0x48) r9 = openat(0xffffffffffffffff, &(0x7f0000000240)='.\x00', 0x408400, 0x0) fchmod(r9, 0x0) write$RDMA_USER_CM_CMD_MIGRATE_ID(r0, &(0x7f0000000440)={0x12, 0x10, 0xfa00, {0x0, r8, r0}}, 0x18) 50.833254ms ago: executing program 4: r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x18, 0x5, &(0x7f0000000140)=ANY=[@ANYBLOB="180100002100000000000000000000108500000075000000a50000002300000095"], &(0x7f0000000000)='GPL\x00'}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x10) r2 = socket$inet6(0xa, 0x1000080002, 0x100000000000088) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000040)=@framed, &(0x7f0000000000)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x48}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$MAP_CREATE(0x100000000000000, &(0x7f00000001c0)=@base={0x5}, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x1f, 0x3, &(0x7f0000000700)=ANY=[], &(0x7f00000000c0)='syzkaller\x00', 0xd3c7, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x17, 0x4, &(0x7f0000000000)=@framed={{}, [@ldst={0x3, 0x0, 0x3, 0x1}]}, &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) ioctl$sock_SIOCBRDELBR(r3, 0x89a1, &(0x7f0000000300)='geneve0\x00') bind$bt_hci(r4, &(0x7f0000000040)={0x1f, 0xffff, 0x3}, 0x6) write$binfmt_misc(r4, &(0x7f0000000000)=ANY=[@ANYBLOB='\"\x00\x00\x00\a'], 0xd) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000040)=@framed={{}, [@call={0x85, 0x0, 0x0, 0x2a}, @printk={@ld}]}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000000)='global_dirty_state\x00', r5}, 0x10) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000580)='memory.events\x00', 0x100002, 0x0) bind$inet6(r2, &(0x7f0000000140)={0xa, 0x4e23}, 0x1c) setsockopt$inet6_udp_int(0xffffffffffffffff, 0x11, 0x100000000a, &(0x7f00000003c0)=0x800000001, 0x4) bpf$MAP_CREATE(0x0, &(0x7f0000000500)=@base={0x6, 0x4, 0x0, 0x5, 0x1106}, 0x48) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x4008840, &(0x7f0000000180)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @local}}, 0x1c) sendto$inet6(0xffffffffffffffff, &(0x7f0000000000)="17", 0x1, 0x0, 0x0, 0x0) sendmsg$nl_route(r6, &(0x7f0000000380)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000340)={&(0x7f0000000740)=@ipv6_newnexthop={0xfc, 0x68, 0x100, 0x0, 0x25dfdc03, {0xa, 0x0, 0x1, 0x0, 0x9}}, 0xfc}}, 0x40000001) r7 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) write(r7, &(0x7f0000000100)="52000300010007", 0x7) read$nci(r0, 0x0, 0x0) 0s ago: executing program 1: mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x0, 0x10, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x3, 0x8000000003c) connect$inet6(r0, &(0x7f0000000140)={0xa, 0x0, 0x0, @remote, 0x5}, 0x1c) sendmsg(r0, &(0x7f00000000c0)={0x0, 0x953c, &(0x7f0000000100)=[{&(0x7f0000000000)="2b10", 0xffbd}], 0x1, 0x0, 0x0, 0x2c}, 0x4) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x10, 0x0, 0x0) kernel console output (not intermixed with test programs): :aa:aa:3e) already exists on: batadv_slave_0 [ 114.536024][ T29] audit: type=1400 audit(1717519726.692:119): avc: denied { open } for pid=5119 comm="syz-executor.2" path="/dev/loop2" dev="devtmpfs" ino=650 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 114.549270][ T5106] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 114.586682][ T29] audit: type=1400 audit(1717519726.692:120): avc: denied { ioctl } for pid=5119 comm="syz-executor.2" path="/dev/loop2" dev="devtmpfs" ino=650 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 114.594297][ T5106] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 114.648348][ T5105] veth1_macvtap: entered promiscuous mode [ 114.663543][ T5112] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 114.674421][ T5112] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 114.684434][ T5112] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 114.695369][ T5112] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 114.712663][ T5112] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 114.741251][ T5112] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 114.755157][ T5112] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 114.769285][ T5112] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 114.779766][ T5106] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 114.794439][ T5106] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 114.804865][ T5106] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 114.828379][ T5106] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 114.841956][ T5106] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 114.883890][ T5115] veth0_vlan: entered promiscuous mode [ 114.898630][ T5112] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 114.909047][ T29] audit: type=1400 audit(1717519727.162:121): avc: denied { create } for pid=5196 comm="syz-executor.2" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 114.919198][ T5112] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 114.941003][ T5112] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 114.956638][ T5112] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 114.980066][ T5106] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 114.991944][ T5106] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 115.005684][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 115.014567][ T5106] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 115.024516][ T5106] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 115.079818][ T5105] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 115.097655][ T5105] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 115.108960][ T5105] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 115.119578][ T5105] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 115.129674][ T5105] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 115.140860][ T5105] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 115.153515][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 115.162012][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 115.181987][ T5105] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 115.214071][ T5105] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 115.225939][ T5105] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 115.237627][ T5105] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 115.250442][ T5105] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 115.260866][ T5105] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 115.275080][ T5105] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 115.299103][ T5105] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 115.315885][ T5115] veth1_vlan: entered promiscuous mode [ 115.396370][ T5105] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 115.405505][ T5105] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 115.414480][ T5105] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 115.424181][ T5105] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 115.785579][ T5115] veth0_macvtap: entered promiscuous mode [ 115.799300][ T962] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 115.815350][ T962] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 115.832280][ T5200] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 115.909451][ T5115] veth1_macvtap: entered promiscuous mode [ 115.931195][ T962] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 115.962308][ T962] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 116.038635][ T5115] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 116.051302][ T2807] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 116.059992][ T2807] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 116.069533][ T5115] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 116.082748][ T5115] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 116.093348][ T5115] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 116.106954][ T5115] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 116.117759][ T5115] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 116.127826][ T5115] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 116.139053][ T5115] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 116.153773][ T5115] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 116.221433][ T5115] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 116.237248][ T5115] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 116.247312][ T5115] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 116.257863][ T5115] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 116.268599][ T5115] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 116.281111][ T5115] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 116.296184][ T5115] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 116.308119][ T5115] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 116.327699][ T5115] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 116.343377][ T29] audit: type=1400 audit(1717519728.592:122): avc: denied { mounton } for pid=5112 comm="syz-executor.3" path="/dev/binderfs" dev="devtmpfs" ino=2323 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:device_t tclass=dir permissive=1 [ 116.397344][ T5115] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 116.417747][ T5115] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 116.428656][ T5115] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 116.442448][ T5115] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 116.466168][ T2807] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 116.476424][ T2807] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 116.582518][ T29] audit: type=1400 audit(1717519728.822:123): avc: denied { create } for pid=5202 comm="syz-executor.2" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 116.664433][ T5203] syz-executor.2 uses obsolete (PF_INET,SOCK_PACKET) [ 116.678488][ T5160] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 116.712373][ T29] audit: type=1400 audit(1717519728.862:124): avc: denied { read write } for pid=5202 comm="syz-executor.2" name="uinput" dev="devtmpfs" ino=836 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 116.716772][ T5160] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 116.793275][ T29] audit: type=1400 audit(1717519728.862:125): avc: denied { open } for pid=5202 comm="syz-executor.2" path="/dev/uinput" dev="devtmpfs" ino=836 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 116.793912][ T4478] Bluetooth: hci5: sending frame failed (-49) [ 116.819447][ T29] audit: type=1400 audit(1717519728.942:126): avc: denied { ioctl } for pid=5202 comm="syz-executor.2" path="socket:[6804]" dev="sockfs" ino=6804 ioctlcmd=0x8946 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 116.850188][ T5111] Bluetooth: hci5: Opcode 0x1003 failed: -49 [ 116.928856][ T29] audit: type=1400 audit(1717519729.172:127): avc: denied { ioctl } for pid=5202 comm="syz-executor.2" path="/dev/uinput" dev="devtmpfs" ino=836 ioctlcmd=0x5564 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 116.965757][ T5072] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 116.974426][ T5203] input: syz1 as /devices/virtual/input/input5 [ 116.994452][ T5072] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 117.047482][ T29] audit: type=1400 audit(1717519729.292:128): avc: denied { read } for pid=4519 comm="acpid" name="event4" dev="devtmpfs" ino=2324 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 117.150968][ T29] audit: type=1400 audit(1717519729.292:129): avc: denied { open } for pid=4519 comm="acpid" path="/dev/input/event4" dev="devtmpfs" ino=2324 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 117.191625][ T5205] netlink: 96 bytes leftover after parsing attributes in process `syz-executor.2'. [ 117.265889][ T29] audit: type=1400 audit(1717519729.292:130): avc: denied { ioctl } for pid=4519 comm="acpid" path="/dev/input/event4" dev="devtmpfs" ino=2324 ioctlcmd=0x4520 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 117.400141][ T29] audit: type=1400 audit(1717519729.362:131): avc: denied { ioctl } for pid=5202 comm="syz-executor.2" path="socket:[6904]" dev="sockfs" ino=6904 ioctlcmd=0x8982 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 117.557752][ T51] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 117.599499][ T51] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 117.831094][ T29] audit: type=1400 audit(1717519730.062:132): avc: denied { prog_load } for pid=5213 comm="syz-executor.2" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 117.900246][ T5159] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 117.955650][ T5159] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 118.063634][ T5217] loop0: detected capacity change from 0 to 2048 [ 118.186627][ T5217] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 118.548522][ T5221] capability: warning: `syz-executor.1' uses deprecated v2 capabilities in a way that may be insecure [ 118.674586][ T5221] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 119.724214][ T5234] syz-executor.0[5234] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 119.724485][ T5234] syz-executor.0[5234] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 119.791874][ T5234] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.0'. [ 120.068998][ T0] NOHZ tick-stop error: local softirq work is pending, handler #140!!! [ 120.079192][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 120.284513][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 120.303048][ T0] NOHZ tick-stop error: local softirq work is pending, handler #08!!! [ 120.311322][ T0] NOHZ tick-stop error: local softirq work is pending, handler #08!!! [ 120.378502][ T0] NOHZ tick-stop error: local softirq work is pending, handler #140!!! [ 120.389246][ T0] NOHZ tick-stop error: local softirq work is pending, handler #48!!! [ 121.196886][ T5237] loop1: detected capacity change from 0 to 512 [ 121.205569][ T5237] ======================================================= [ 121.205569][ T5237] WARNING: The mand mount option has been deprecated and [ 121.205569][ T5237] and is ignored by this kernel. Remove the mand [ 121.205569][ T5237] option from the mount to silence this warning. [ 121.205569][ T5237] ======================================================= [ 121.334474][ T5237] EXT4-fs (loop1): feature flags set on rev 0 fs, running e2fsck is recommended [ 121.756002][ T5237] EXT4-fs (loop1): warning: maximal mount count reached, running e2fsck is recommended [ 121.757484][ T29] kauditd_printk_skb: 31 callbacks suppressed [ 121.757507][ T29] audit: type=1400 audit(1717519733.992:164): avc: denied { create } for pid=5243 comm="syz-executor.0" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 123.632210][ T29] audit: type=1400 audit(1717519734.002:165): avc: denied { getopt } for pid=5243 comm="syz-executor.0" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 123.656350][ T5237] EXT4-fs: error -4 creating inode table initialization thread [ 123.673898][ T5237] EXT4-fs (loop1): mount failed [ 123.774200][ T5231] pimreg: entered allmulticast mode [ 124.048201][ T29] audit: type=1400 audit(1717519734.102:166): avc: denied { connect } for pid=5243 comm="syz-executor.0" lport=7 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 124.884714][ T5254] loop0: detected capacity change from 0 to 512 [ 126.014646][ T5251] sched: RT throttling activated [ 126.517432][ T5126] I/O error, dev loop0, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 0 [ 126.574837][ T29] audit: type=1400 audit(1717519734.112:167): avc: denied { write } for pid=5243 comm="syz-executor.0" laddr=::1 lport=7 faddr=::1 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 126.617249][ T29] audit: type=1400 audit(1717519736.362:168): avc: denied { create } for pid=5250 comm="syz-executor.0" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 126.643836][ T29] audit: type=1400 audit(1717519736.362:169): avc: denied { connect } for pid=5250 comm="syz-executor.0" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 126.685583][ T29] audit: type=1400 audit(1717519736.362:170): avc: denied { write } for pid=5250 comm="syz-executor.0" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 126.705558][ T29] audit: type=1400 audit(1717519736.772:171): avc: denied { write } for pid=5250 comm="syz-executor.0" name="001" dev="devtmpfs" ino=729 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 127.196906][ T2807] Bluetooth: hci5: Frame reassembly failed (-84) [ 127.209252][ T2807] Bluetooth: hci5: Frame reassembly failed (-84) [ 127.355490][ T5265] input: syz1 as /devices/virtual/input/input6 [ 127.436776][ T29] audit: type=1400 audit(1717519739.672:172): avc: denied { create } for pid=5255 comm="syz-executor.2" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 127.862698][ T5270] loop1: detected capacity change from 0 to 8 [ 127.883615][ T5270] MTD: Attempt to mount non-MTD device "/dev/loop1" [ 128.745516][ T5270] cramfs: root is not a directory [ 128.798380][ T29] audit: type=1400 audit(1717519741.042:173): avc: denied { create } for pid=5255 comm="syz-executor.2" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 128.839498][ T5265] netlink: 96 bytes leftover after parsing attributes in process `syz-executor.4'. [ 129.021691][ T29] audit: type=1400 audit(1717519741.132:174): avc: denied { ioctl } for pid=5267 comm="syz-executor.1" path="socket:[7466]" dev="sockfs" ino=7466 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 129.180174][ T29] audit: type=1400 audit(1717519741.412:175): avc: denied { write } for pid=5255 comm="syz-executor.2" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 129.204225][ T4478] Bluetooth: hci5: command 0x1003 tx timeout [ 129.211267][ T5111] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 129.378477][ T29] audit: type=1400 audit(1717519741.632:176): avc: denied { write } for pid=5255 comm="syz-executor.2" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 129.379008][ T5264] netlink: 104 bytes leftover after parsing attributes in process `syz-executor.2'. [ 129.545325][ T29] audit: type=1400 audit(1717519741.632:177): avc: denied { nlmsg_write } for pid=5255 comm="syz-executor.2" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 129.960779][ T5279] syz-executor.0[5279] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 129.961025][ T5279] syz-executor.0[5279] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 130.000203][ T5279] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.0'. [ 130.796757][ T29] audit: type=1400 audit(1717519742.942:178): avc: denied { ioctl } for pid=5273 comm="syz-executor.1" path="socket:[7490]" dev="sockfs" ino=7490 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 130.934909][ T29] audit: type=1400 audit(1717519743.152:179): avc: denied { create } for pid=5283 comm="syz-executor.3" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=caif_socket permissive=1 [ 131.072377][ T29] audit: type=1400 audit(1717519743.302:180): avc: denied { read } for pid=5282 comm="syz-executor.4" name="kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 131.097023][ T5285] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 131.175951][ T29] audit: type=1400 audit(1717519743.302:181): avc: denied { open } for pid=5282 comm="syz-executor.4" path="/dev/kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 131.588109][ T5287] loop3: detected capacity change from 0 to 32768 [ 131.603219][ T5287] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop3 (7:3) scanned by syz-executor.3 (5287) [ 131.728948][ T5287] BTRFS info (device loop3): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 131.739937][ T5287] BTRFS info (device loop3): using crc32c (crc32c-intel) checksum algorithm [ 131.751001][ T5287] BTRFS info (device loop3): using free-space-tree [ 132.024178][ T5307] netlink: 'syz-executor.4': attribute type 2 has an invalid length. [ 132.174931][ T5307] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 132.782365][ T29] kauditd_printk_skb: 1 callbacks suppressed [ 132.782417][ T29] audit: type=1400 audit(1717519744.772:183): avc: denied { write } for pid=5286 comm="syz-executor.3" name="file0" dev="loop3" ino=257 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 133.502748][ T45] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 133.513355][ T29] audit: type=1400 audit(1717519744.772:184): avc: denied { add_name } for pid=5286 comm="syz-executor.3" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 133.534924][ T5292] pimreg: entered allmulticast mode [ 133.645831][ T29] audit: type=1400 audit(1717519744.772:185): avc: denied { create } for pid=5286 comm="syz-executor.3" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 133.772305][ T45] usb 1-1: Using ep0 maxpacket: 16 [ 133.797413][ T29] audit: type=1400 audit(1717519744.782:186): avc: denied { write } for pid=5286 comm="syz-executor.3" name="file0" dev="loop3" ino=258 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 133.823570][ T45] usb 1-1: config 0 has no interfaces? [ 133.833691][ T45] usb 1-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 133.860307][ T45] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 133.890395][ T29] audit: type=1400 audit(1717519744.782:187): avc: denied { open } for pid=5286 comm="syz-executor.3" path="/root/syzkaller-testdir3917187125/syzkaller.fQg66r/6/file0/file0/file0" dev="loop3" ino=258 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 133.948144][ T5112] BTRFS info (device loop3): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 133.998898][ T45] usb 1-1: config 0 descriptor?? [ 134.101994][ T29] audit: type=1400 audit(1717519744.982:188): avc: denied { read write open } for pid=5286 comm="syz-executor.3" path="/root/syzkaller-testdir3917187125/syzkaller.fQg66r/6/file0/file0/bus" dev="loop3" ino=263 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 134.286163][ T29] audit: type=1400 audit(1717519745.192:189): avc: denied { setopt } for pid=5286 comm="syz-executor.3" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 134.615256][ T5332] input: syz0 as /devices/virtual/input/input7 [ 134.685624][ T5334] loop4: detected capacity change from 0 to 8 [ 134.694322][ T5334] MTD: Attempt to mount non-MTD device "/dev/loop4" [ 135.312562][ T5334] cramfs: root is not a directory [ 135.852070][ T29] audit: type=1400 audit(1717519746.132:190): avc: denied { setcurrent } for pid=5324 comm="syz-executor.2" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 135.971840][ T29] audit: type=1401 audit(1717519746.132:191): op=security_bounded_transition seresult=denied oldcontext=root:sysadm_r:sysadm_t newcontext=system_u:object_r:hugetlbfs_t [ 136.050670][ T1156] usb 1-1: USB disconnect, device number 2 [ 136.382005][ T5338] netlink: 104 bytes leftover after parsing attributes in process `syz-executor.1'. [ 137.134748][ T5349] syz-executor.4[5349] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 137.135017][ T5349] syz-executor.4[5349] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 137.172236][ T5349] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.4'. [ 138.132943][ T29] audit: type=1400 audit(1717519750.382:192): avc: denied { create } for pid=5340 comm="syz-executor.0" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 138.469247][ T1249] ieee802154 phy0 wpan0: encryption failed: -22 [ 138.482279][ T1249] ieee802154 phy1 wpan1: encryption failed: -22 [ 138.505393][ T29] audit: type=1400 audit(1717519750.742:193): avc: denied { bind } for pid=5352 comm="syz-executor.1" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 138.662434][ T29] audit: type=1400 audit(1717519750.782:194): avc: denied { accept } for pid=5352 comm="syz-executor.1" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 138.726148][ T29] audit: type=1400 audit(1717519750.802:195): avc: denied { write } for pid=5352 comm="syz-executor.1" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 140.696751][ T29] audit: type=1400 audit(1717519750.802:196): avc: denied { getopt } for pid=5352 comm="syz-executor.1" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 141.013419][ T5365] loop4: detected capacity change from 0 to 32768 [ 141.062381][ T29] audit: type=1400 audit(1717519750.872:197): avc: denied { read } for pid=5352 comm="syz-executor.1" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 141.082505][ T29] audit: type=1400 audit(1717519751.232:198): avc: denied { create } for pid=5352 comm="syz-executor.1" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dccp_socket permissive=1 [ 141.102558][ T5365] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop4 (7:4) scanned by syz-executor.4 (5365) [ 141.118943][ T29] audit: type=1400 audit(1717519752.192:199): avc: denied { write } for pid=5358 comm="syz-executor.0" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 141.144735][ T29] audit: type=1400 audit(1717519752.202:200): avc: denied { connect } for pid=5358 comm="syz-executor.0" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 141.186832][ T29] audit: type=1400 audit(1717519752.202:201): avc: denied { name_connect } for pid=5358 comm="syz-executor.0" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=sctp_socket permissive=1 [ 141.330687][ T5365] BTRFS info (device loop4): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 141.341214][ T5365] BTRFS info (device loop4): using crc32c (crc32c-intel) checksum algorithm [ 141.350024][ T5365] BTRFS info (device loop4): using free-space-tree [ 141.984475][ T5373] loop3: detected capacity change from 0 to 512 [ 142.014365][ T5352] net_ratelimit: 2 callbacks suppressed [ 142.014390][ T5352] dccp_close: ABORT with 220 bytes unread [ 142.836895][ T5373] EXT4-fs (loop3): feature flags set on rev 0 fs, running e2fsck is recommended [ 142.973004][ T5393] netlink: 104 bytes leftover after parsing attributes in process `syz-executor.2'. [ 143.034199][ T5373] workqueue: Failed to create a rescuer kthread for wq "ext4-rsv-conversion": -EINTR [ 143.047350][ T5373] EXT4-fs: failed to create workqueue [ 143.094330][ T5106] BTRFS info (device loop4): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 143.248051][ T5373] EXT4-fs (loop3): mount failed [ 143.261994][ T29] kauditd_printk_skb: 12 callbacks suppressed [ 143.262010][ T29] audit: type=1400 audit(1717519755.332:214): avc: denied { read } for pid=5394 comm="syz-executor.1" name="ptp0" dev="devtmpfs" ino=1074 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 143.318036][ T29] audit: type=1400 audit(1717519755.332:215): avc: denied { open } for pid=5394 comm="syz-executor.1" path="/dev/ptp0" dev="devtmpfs" ino=1074 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 144.026446][ T5402] netlink: 104 bytes leftover after parsing attributes in process `syz-executor.0'. [ 144.678879][ T5412] syz-executor.4[5412] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 144.679128][ T5412] syz-executor.4[5412] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 144.717301][ T5412] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.4'. [ 145.442216][ T25] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 145.450029][ C1] raw-gadget.0 gadget.3: ignoring, device is not running [ 145.692254][ T25] usb 4-1: device descriptor read/64, error -32 [ 145.759186][ T5416] netlink: 104 bytes leftover after parsing attributes in process `syz-executor.2'. [ 145.999112][ T25] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 146.223416][ T25] usb 4-1: Using ep0 maxpacket: 16 [ 146.259960][ T25] usb 4-1: config 0 has no interfaces? [ 146.271581][ T25] usb 4-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 146.329043][ T25] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 146.430585][ T25] usb 4-1: config 0 descriptor?? [ 146.472651][ T5419] loop4: detected capacity change from 0 to 512 [ 146.578721][ T5419] EXT4-fs: Ignoring removed oldalloc option [ 146.864520][ T5419] EXT4-fs error (device loop4): ext4_xattr_inode_iget:435: comm syz-executor.4: Parent and EA inode have the same ino 15 [ 146.882413][ T5419] EXT4-fs warning (device loop4): ext4_expand_extra_isize_ea:2855: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 146.896033][ T5419] EXT4-fs error (device loop4): ext4_xattr_inode_iget:435: comm syz-executor.4: Parent and EA inode have the same ino 15 [ 146.928505][ T5426] loop1: detected capacity change from 0 to 256 [ 146.968422][ T5426] exfat: Bad value for 'uid' [ 147.298062][ T5428] loop0: detected capacity change from 0 to 32768 [ 147.327572][ T5428] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop0 (7:0) scanned by syz-executor.0 (5428) [ 147.351580][ T5428] BTRFS info (device loop0): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 147.361898][ T5428] BTRFS info (device loop0): using crc32c (crc32c-intel) checksum algorithm [ 147.371146][ T5428] BTRFS info (device loop0): using free-space-tree [ 147.388684][ T5419] EXT4-fs (loop4): 1 orphan inode deleted [ 147.399706][ T5419] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 148.726393][ T29] audit: type=1400 audit(1717519760.062:216): avc: denied { read } for pid=5432 comm="syz-executor.2" name="card1" dev="devtmpfs" ino=630 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 148.937254][ T5424] loop1: detected capacity change from 0 to 256 [ 148.990651][ T29] audit: type=1400 audit(1717519760.062:217): avc: denied { open } for pid=5432 comm="syz-executor.2" path="/dev/dri/card1" dev="devtmpfs" ino=630 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 149.016855][ T29] audit: type=1400 audit(1717519760.072:218): avc: denied { ioctl } for pid=5432 comm="syz-executor.2" path="/dev/dri/card1" dev="devtmpfs" ino=630 ioctlcmd=0x640d scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 149.168502][ T8] usb 4-1: USB disconnect, device number 3 [ 150.042939][ T5424] FAT-fs (loop1): Directory bread(block 64) failed [ 150.083428][ T5424] FAT-fs (loop1): Directory bread(block 65) failed [ 150.343862][ T5448] dccp_close: ABORT with 220 bytes unread [ 150.365862][ T5424] FAT-fs (loop1): Directory bread(block 66) failed [ 150.413718][ T5424] FAT-fs (loop1): Directory bread(block 67) failed [ 150.471666][ T5105] BTRFS info (device loop0): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 150.740384][ T5424] FAT-fs (loop1): Directory bread(block 68) failed [ 150.787621][ T5424] FAT-fs (loop1): Directory bread(block 69) failed [ 151.169033][ T5462] loop3: detected capacity change from 0 to 512 [ 151.558826][ T5424] FAT-fs (loop1): Directory bread(block 70) failed [ 151.898803][ T5424] FAT-fs (loop1): Directory bread(block 71) failed [ 151.961277][ T5424] FAT-fs (loop1): Directory bread(block 72) failed [ 151.985394][ T5106] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 151.992270][ T5424] FAT-fs (loop1): Directory bread(block 73) failed [ 152.420586][ T5469] syz-executor.3[5469] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 152.420835][ T5469] syz-executor.3[5469] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 152.457036][ T5469] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.3'. [ 153.705522][ T29] audit: type=1400 audit(1717519765.932:219): avc: denied { mount } for pid=5422 comm="syz-executor.1" name="/" dev="loop1" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dosfs_t tclass=filesystem permissive=1 [ 153.793175][ T29] audit: type=1400 audit(1717519765.992:220): avc: denied { name_bind } for pid=5466 comm="syz-executor.2" src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=udp_socket permissive=1 [ 153.946319][ T29] audit: type=1400 audit(1717519766.112:221): avc: denied { unmount } for pid=5115 comm="syz-executor.1" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dosfs_t tclass=filesystem permissive=1 [ 154.121369][ T5479] loop4: detected capacity change from 0 to 64 [ 154.432966][ T29] audit: type=1400 audit(1717519766.602:222): avc: denied { write } for pid=5477 comm="syz-executor.4" name="/" dev="loop4" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 154.569023][ T29] audit: type=1400 audit(1717519766.632:223): avc: denied { add_name } for pid=5477 comm="syz-executor.4" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 154.722318][ T29] audit: type=1400 audit(1717519766.632:224): avc: denied { remount } for pid=5477 comm="syz-executor.4" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 154.824242][ T29] audit: type=1400 audit(1717519766.632:225): avc: denied { associate } for pid=5477 comm="syz-executor.4" name="file0" scontext=root:object_r:unlabeled_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 155.030820][ T29] audit: type=1400 audit(1717519766.652:226): avc: denied { create } for pid=5477 comm="syz-executor.4" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 155.197828][ T5489] netlink: 104 bytes leftover after parsing attributes in process `syz-executor.3'. [ 155.222346][ T29] audit: type=1400 audit(1717519766.722:227): avc: denied { read } for pid=5477 comm="syz-executor.4" name="loop-control" dev="devtmpfs" ino=647 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 155.355709][ T29] audit: type=1400 audit(1717519766.722:228): avc: denied { open } for pid=5477 comm="syz-executor.4" path="/dev/loop-control" dev="devtmpfs" ino=647 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 155.508459][ T29] audit: type=1400 audit(1717519766.732:229): avc: denied { ioctl } for pid=5477 comm="syz-executor.4" path="/dev/loop-control" dev="devtmpfs" ino=647 ioctlcmd=0x4c81 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 155.914714][ T5498] loop4: detected capacity change from 0 to 32768 [ 155.974437][ T5498] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop4 (7:4) scanned by syz-executor.4 (5498) [ 156.117463][ T5498] BTRFS info (device loop4): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 156.127784][ T5498] BTRFS info (device loop4): using crc32c (crc32c-intel) checksum algorithm [ 156.136533][ T5498] BTRFS info (device loop4): using free-space-tree [ 156.207287][ T5111] block nbd0: Receive control failed (result -107) [ 156.531960][ T5511] loop2: detected capacity change from 0 to 512 [ 156.595617][ T5511] EXT4-fs (loop2): feature flags set on rev 0 fs, running e2fsck is recommended [ 156.605806][ T5501] nbd0: detected capacity change from 0 to 15960 [ 156.621980][ T5499] block nbd0: shutting down sockets [ 157.873247][ T5511] EXT4-fs (loop2): warning: maximal mount count reached, running e2fsck is recommended [ 157.988371][ T5511] EXT4-fs error (device loop2): ext4_orphan_get:1394: comm syz-executor.2: inode #15: comm syz-executor.2: iget: illegal inode # [ 158.011722][ T5106] BTRFS info (device loop4): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 158.065657][ T5511] EXT4-fs error (device loop2): ext4_orphan_get:1397: comm syz-executor.2: couldn't read orphan inode 15 (err -117) [ 158.104544][ T5511] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 158.503472][ T5535] syz-executor.0[5535] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 158.504413][ T5535] syz-executor.0[5535] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 158.683433][ T5535] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.0'. [ 159.086879][ T5488] Bluetooth: hci0: Opcode 0x0c03 failed: -110 [ 159.269870][ T5528] EXT4-fs error (device loop2): ext4_validate_block_bitmap:431: comm ext4lazyinit: bg 0: block 19: invalid block bitmap [ 159.384002][ T5119] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 159.552736][ T5534] loop3: detected capacity change from 0 to 512 [ 159.568676][ T5534] EXT4-fs: Ignoring removed oldalloc option [ 159.690172][ T5541] loop1: detected capacity change from 0 to 256 [ 159.739040][ T5534] EXT4-fs error (device loop3): ext4_xattr_inode_iget:435: comm syz-executor.3: Parent and EA inode have the same ino 15 [ 159.760089][ T5541] exfat: Bad value for 'uid' [ 159.848070][ T5534] EXT4-fs error (device loop3): ext4_xattr_inode_iget:435: comm syz-executor.3: Parent and EA inode have the same ino 15 [ 160.198676][ T5534] EXT4-fs (loop3): 1 orphan inode deleted [ 160.207594][ T5534] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 161.520789][ T5539] dccp_close: ABORT with 220 bytes unread [ 161.704325][ T5342] I/O error, dev loop1, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 0 [ 161.749785][ T5534] input: syz1 as /devices/virtual/input/input9 [ 161.772197][ T29] kauditd_printk_skb: 12 callbacks suppressed [ 161.772221][ T29] audit: type=1400 audit(1717519773.962:242): avc: denied { append } for pid=5531 comm="syz-executor.3" path="/root/syzkaller-testdir3917187125/syzkaller.fQg66r/13/file0/file0/rdma.current" dev="loop3" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 161.921587][ T5538] loop1: detected capacity change from 0 to 256 [ 162.774799][ T29] audit: type=1400 audit(1717519775.022:243): avc: denied { create } for pid=5560 comm="syz-executor.4" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 162.798503][ T5538] FAT-fs (loop1): Directory bread(block 64) failed [ 162.810666][ T5538] FAT-fs (loop1): Directory bread(block 65) failed [ 162.819725][ T5538] FAT-fs (loop1): Directory bread(block 66) failed [ 162.827078][ T5538] FAT-fs (loop1): Directory bread(block 67) failed [ 162.837744][ T5538] FAT-fs (loop1): Directory bread(block 68) failed [ 162.849607][ T5538] FAT-fs (loop1): Directory bread(block 69) failed [ 162.860856][ T5538] FAT-fs (loop1): Directory bread(block 70) failed [ 162.894859][ T5538] FAT-fs (loop1): Directory bread(block 71) failed [ 162.903093][ T5538] FAT-fs (loop1): Directory bread(block 72) failed [ 163.003562][ T5538] FAT-fs (loop1): Directory bread(block 73) failed [ 163.052302][ T29] audit: type=1400 audit(1717519775.282:244): avc: denied { bind } for pid=5560 comm="syz-executor.4" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 163.176777][ T29] audit: type=1400 audit(1717519775.282:245): avc: denied { getopt } for pid=5560 comm="syz-executor.4" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 163.537601][ T5567] loop2: detected capacity change from 0 to 32768 [ 163.622590][ T5567] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop2 (7:2) scanned by syz-executor.2 (5567) [ 163.760456][ T5567] BTRFS info (device loop2): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 163.770797][ T5567] BTRFS info (device loop2): using crc32c (crc32c-intel) checksum algorithm [ 163.779723][ T5567] BTRFS info (device loop2): using free-space-tree [ 165.288512][ T29] audit: type=1400 audit(1717519777.532:246): avc: denied { map } for pid=5588 comm="syz-executor.1" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=7793 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 165.312993][ C0] vkms_vblank_simulate: vblank timer overrun [ 165.372251][ T29] audit: type=1400 audit(1717519777.562:247): avc: denied { read write } for pid=5588 comm="syz-executor.1" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=7793 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 165.488267][ T5119] BTRFS info (device loop2): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 165.507017][ T5592] netlink: 104 bytes leftover after parsing attributes in process `syz-executor.0'. [ 165.571177][ T5112] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 165.820383][ T5590] loop1: detected capacity change from 0 to 4096 [ 165.907309][ T5590] ntfs3: loop1: Mark volume as dirty due to NTFS errors [ 165.956459][ T5590] ntfs3: loop1: Failed to load $MFT (-2). [ 166.152344][ T5126] I/O error, dev loop1, sector 3968 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 0 [ 167.517293][ T5613] syz-executor.2[5613] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 167.518203][ T5613] syz-executor.2[5613] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 167.972163][ T5613] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.2'. [ 168.586419][ T29] audit: type=1400 audit(1717519780.832:248): avc: denied { create } for pid=5611 comm="syz-executor.1" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1 [ 168.675908][ T5615] loop1: detected capacity change from 0 to 256 [ 168.937259][ T5615] exFAT-fs (loop1): failed to load upcase table (idx : 0x0000fe7f, chksum : 0x39626d3b, utbl_chksum : 0xe619d30d) [ 169.212178][ T5604] Bluetooth: hci0: Opcode 0x0c03 failed: -110 [ 169.257683][ T5623] loop3: detected capacity change from 0 to 256 [ 169.277662][ T29] audit: type=1400 audit(1717519781.522:249): avc: denied { read append } for pid=5611 comm="syz-executor.1" name="file2" dev="loop1" ino=1048595 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 169.301626][ C0] vkms_vblank_simulate: vblank timer overrun [ 169.304739][ T5623] exfat: Bad value for 'uid' [ 169.361122][ T29] audit: type=1800 audit(1717519781.522:250): pid=5615 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed(directio) comm="syz-executor.1" name="file2" dev="loop1" ino=1048595 res=0 errno=0 [ 169.522324][ T29] audit: type=1400 audit(1717519781.762:251): avc: denied { read } for pid=5611 comm="syz-executor.1" name="mice" dev="devtmpfs" ino=832 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:mouse_device_t tclass=chr_file permissive=1 [ 169.563268][ T29] audit: type=1400 audit(1717519781.762:252): avc: denied { open } for pid=5611 comm="syz-executor.1" path="/dev/input/mice" dev="devtmpfs" ino=832 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:mouse_device_t tclass=chr_file permissive=1 [ 169.588531][ C0] vkms_vblank_simulate: vblank timer overrun [ 169.682912][ T29] audit: type=1400 audit(1717519781.772:253): avc: denied { accept } for pid=5611 comm="syz-executor.1" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1 [ 169.708994][ C0] vkms_vblank_simulate: vblank timer overrun [ 170.006613][ T5629] loop2: detected capacity change from 0 to 32768 [ 170.047870][ T5629] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop2 (7:2) scanned by syz-executor.2 (5629) [ 170.077235][ T5629] BTRFS info (device loop2): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 170.088831][ T5629] BTRFS info (device loop2): using crc32c (crc32c-intel) checksum algorithm [ 170.099971][ T5629] BTRFS info (device loop2): using free-space-tree [ 170.847354][ T5627] loop4: detected capacity change from 0 to 4096 [ 171.428153][ T5627] ntfs3: loop4: Mark volume as dirty due to NTFS errors [ 172.273176][ T5627] ntfs3: loop4: Failed to load $MFT (-2). [ 172.625279][ T5119] BTRFS info (device loop2): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 172.642685][ T5650] netlink: 104 bytes leftover after parsing attributes in process `syz-executor.0'. [ 173.498559][ T5659] loop1: detected capacity change from 0 to 512 [ 177.908345][ T29] audit: type=1400 audit(1717519790.132:254): avc: denied { read write } for pid=5676 comm="syz-executor.3" name="video1" dev="devtmpfs" ino=849 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1 [ 178.322928][ T5680] syz-executor.1[5680] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 178.323177][ T5680] syz-executor.1[5680] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 178.381906][ T5680] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.1'. [ 178.414797][ T29] audit: type=1400 audit(1717519790.152:255): avc: denied { open } for pid=5676 comm="syz-executor.3" path="/dev/video1" dev="devtmpfs" ino=849 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1 [ 179.382276][ T29] audit: type=1400 audit(1717519791.622:256): avc: denied { create } for pid=5676 comm="syz-executor.3" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 180.092642][ T29] audit: type=1400 audit(1717519792.312:257): avc: denied { ioctl } for pid=5676 comm="syz-executor.3" path="socket:[7892]" dev="sockfs" ino=7892 ioctlcmd=0x7453 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 180.169162][ T25] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 180.614848][ T5690] loop1: detected capacity change from 0 to 256 [ 180.724100][ T5694] TCP: request_sock_subflow_v6: Possible SYN flooding on port [fe80::aa]:20002. Sending cookies. [ 180.793920][ T29] audit: type=1400 audit(1717519793.002:258): avc: denied { write } for pid=5692 comm="syz-executor.0" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 180.873163][ T5690] exFAT-fs (loop1): failed to load upcase table (idx : 0x0000fe7f, chksum : 0x39626d3b, utbl_chksum : 0xe619d30d) [ 180.974425][ T29] audit: type=1800 audit(1717519793.002:259): pid=5694 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed(directio) comm="syz-executor.0" name="bus" dev="sda1" ino=1962 res=0 errno=0 [ 180.996683][ C0] vkms_vblank_simulate: vblank timer overrun [ 181.153988][ T5693] loop4: detected capacity change from 0 to 32768 [ 181.164139][ T5693] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop4 (7:4) scanned by syz-executor.4 (5693) [ 181.184071][ T29] audit: type=1800 audit(1717519793.312:260): pid=5690 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed(directio) comm="syz-executor.1" name="file2" dev="loop1" ino=1048596 res=0 errno=0 [ 181.222696][ T5693] BTRFS info (device loop4): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 181.233063][ T5693] BTRFS info (device loop4): using crc32c (crc32c-intel) checksum algorithm [ 181.241826][ T5693] BTRFS info (device loop4): using free-space-tree [ 181.317243][ T5698] loop3: detected capacity change from 0 to 2048 [ 181.374195][ T5698] EXT4-fs: Ignoring removed nomblk_io_submit option [ 181.388014][ T5698] EXT4-fs: Ignoring removed mblk_io_submit option [ 181.451450][ T5698] EXT4-fs (loop3): unsupported descriptor size 32768 [ 181.797613][ T5125] I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 0 [ 182.252195][ T29] audit: type=1400 audit(1717519794.192:261): avc: denied { setattr } for pid=5691 comm="syz-executor.4" name="file0" dev="loop4" ino=258 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 182.691780][ T29] audit: type=1400 audit(1717519794.712:262): avc: denied { read write } for pid=5711 comm="syz-executor.2" name="sg0" dev="devtmpfs" ino=695 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 182.733539][ T29] audit: type=1400 audit(1717519794.712:263): avc: denied { open } for pid=5711 comm="syz-executor.2" path="/dev/sg0" dev="devtmpfs" ino=695 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 182.884869][ T5106] BTRFS info (device loop4): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 182.949199][ T5727] loop1: detected capacity change from 0 to 256 [ 183.020806][ T5727] exfat: Bad value for 'uid' [ 183.158778][ T5727] loop1: detected capacity change from 0 to 256 [ 183.335344][ T5727] FAT-fs (loop1): Directory bread(block 64) failed [ 183.399920][ T5727] FAT-fs (loop1): Directory bread(block 65) failed [ 183.407212][ T5727] FAT-fs (loop1): Directory bread(block 66) failed [ 183.442499][ T5727] FAT-fs (loop1): Directory bread(block 67) failed [ 183.520996][ T29] kauditd_printk_skb: 1 callbacks suppressed [ 183.521023][ T29] audit: type=1400 audit(1717519795.732:265): avc: denied { setopt } for pid=5736 comm="syz-executor.4" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 183.550022][ T5727] FAT-fs (loop1): Directory bread(block 68) failed [ 183.572664][ T5727] FAT-fs (loop1): Directory bread(block 69) failed [ 183.584811][ T5735] loop3: detected capacity change from 0 to 256 [ 183.592312][ T5727] FAT-fs (loop1): Directory bread(block 70) failed [ 183.603490][ T5727] FAT-fs (loop1): Directory bread(block 71) failed [ 183.646588][ T5727] FAT-fs (loop1): Directory bread(block 72) failed [ 183.701741][ T5738] smc: net device ip6_vti0 applied user defined pnetid SYZ0 [ 183.725808][ T5727] FAT-fs (loop1): Directory bread(block 73) failed [ 183.786403][ T29] audit: type=1400 audit(1717519796.032:266): avc: denied { map } for pid=5736 comm="syz-executor.4" path="/dev/hwrng" dev="devtmpfs" ino=83 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:random_device_t tclass=chr_file permissive=1 [ 183.860022][ T5735] exFAT-fs (loop3): failed to load upcase table (idx : 0x0000fe7f, chksum : 0x39626d3b, utbl_chksum : 0xe619d30d) [ 183.876307][ T29] audit: type=1400 audit(1717519796.052:267): avc: denied { execute } for pid=5736 comm="syz-executor.4" path="/dev/hwrng" dev="devtmpfs" ino=83 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:random_device_t tclass=chr_file permissive=1 [ 183.975648][ T5741] netlink: 104 bytes leftover after parsing attributes in process `syz-executor.2'. [ 184.325326][ T5727] syz-executor.1: attempt to access beyond end of device [ 184.325326][ T5727] loop1: rw=524288, sector=1160, nr_sectors = 4 limit=256 [ 184.352756][ T29] audit: type=1800 audit(1717519796.592:268): pid=5735 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed(directio) comm="syz-executor.3" name="file2" dev="loop3" ino=1048598 res=0 errno=0 [ 184.400411][ T5727] syz-executor.1: attempt to access beyond end of device [ 184.400411][ T5727] loop1: rw=0, sector=1160, nr_sectors = 4 limit=256 [ 184.531954][ T29] audit: type=1800 audit(1717519796.772:269): pid=5727 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz-executor.1" name="file0" dev="loop1" ino=1048597 res=0 errno=0 [ 185.269888][ T29] audit: type=1804 audit(1717519797.512:270): pid=5745 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir1988735407/syzkaller.g16wk1/24/cgroup.controllers" dev="sda1" ino=1967 res=1 errno=0 [ 185.709183][ T29] audit: type=1800 audit(1717519797.512:271): pid=5745 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed(directio) comm="syz-executor.0" name="cgroup.controllers" dev="sda1" ino=1967 res=0 errno=0 [ 187.882297][ T25] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 188.365763][ T5767] loop0: detected capacity change from 0 to 32768 [ 188.384582][ T25] usb 4-1: Using ep0 maxpacket: 16 [ 188.398946][ T5767] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop0 (7:0) scanned by syz-executor.0 (5767) [ 188.440445][ T5767] BTRFS info (device loop0): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 188.450941][ T5767] BTRFS info (device loop0): using crc32c (crc32c-intel) checksum algorithm [ 188.460380][ T5767] BTRFS info (device loop0): using free-space-tree [ 188.915884][ T25] usb 4-1: device descriptor read/all, error -71 [ 190.479716][ T1156] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 191.504320][ T5105] BTRFS info (device loop0): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 191.673812][ T1156] usb 5-1: Using ep0 maxpacket: 16 [ 191.917383][ T1156] usb 5-1: unable to read config index 0 descriptor/all [ 191.957455][ T1156] usb 5-1: can't read configurations, error -71 [ 192.449725][ T5816] netlink: 104 bytes leftover after parsing attributes in process `syz-executor.4'. [ 192.971820][ T29] audit: type=1326 audit(1717519805.212:272): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5808 comm="syz-executor.2" exe="/root/syz-executor.2" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f507787cf69 code=0x0 [ 192.995186][ C0] vkms_vblank_simulate: vblank timer overrun [ 195.531696][ T5822] loop1: detected capacity change from 0 to 512 [ 195.587159][ T5822] EXT4-fs (loop1): feature flags set on rev 0 fs, running e2fsck is recommended [ 195.813956][ T5822] EXT4-fs (loop1): warning: maximal mount count reached, running e2fsck is recommended [ 196.089252][ T5822] EXT4-fs error (device loop1): ext4_orphan_get:1394: comm syz-executor.1: inode #15: comm syz-executor.1: iget: illegal inode # [ 196.178637][ T5822] EXT4-fs error (device loop1): ext4_orphan_get:1397: comm syz-executor.1: couldn't read orphan inode 15 (err -117) [ 196.220762][ T5822] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 199.754657][ T5837] Bluetooth: hci0: Opcode 0x0c03 failed: -110 [ 199.929224][ T1249] ieee802154 phy0 wpan0: encryption failed: -22 [ 199.962355][ T1249] ieee802154 phy1 wpan1: encryption failed: -22 [ 200.830907][ T5115] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 200.972841][ T5160] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 201.123955][ T5870] loop1: detected capacity change from 0 to 512 [ 201.201450][ T5160] usb 1-1: Using ep0 maxpacket: 16 [ 201.234339][ T5160] usb 1-1: config index 0 descriptor too short (expected 25183, got 36) [ 201.280075][ T5160] usb 1-1: config 116 has too many interfaces: 121, using maximum allowed: 32 [ 201.319908][ T5160] usb 1-1: config 116 has an invalid descriptor of length 0, skipping remainder of the config [ 201.360764][ T5160] usb 1-1: config 116 has 0 interfaces, different from the descriptor's value: 121 [ 201.413772][ T5160] usb 1-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 201.467322][ T5160] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 201.685840][ T5870] EXT4-fs (loop1): Test dummy encryption mode enabled [ 201.769374][ T5870] EXT4-fs error (device loop1): ext4_xattr_ibody_find:2234: inode #12: comm syz-executor.1: corrupted in-inode xattr: invalid ea_ino [ 201.774019][ T5860] IPVS: set_ctl: invalid protocol: 92 100.1.1.1:4 [ 201.795675][ T29] audit: type=1400 audit(1717519814.012:273): avc: denied { setopt } for pid=5854 comm="syz-executor.0" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 201.863619][ T5870] EXT4-fs error (device loop1): ext4_orphan_get:1397: comm syz-executor.1: couldn't read orphan inode 12 (err -117) [ 201.974737][ T5870] EXT4-fs (loop1): mounted filesystem 00000005-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 202.331742][ T5889] Zero length message leads to an empty skb [ 202.373617][ T29] audit: type=1400 audit(1717519814.602:274): avc: denied { create } for pid=5869 comm="syz-executor.1" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=dir permissive=1 [ 202.395318][ C0] vkms_vblank_simulate: vblank timer overrun [ 202.560479][ T29] audit: type=1326 audit(1717519814.762:275): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5880 comm="syz-executor.4" exe="/root/syz-executor.4" sig=31 arch=c000003e syscall=39 compat=0 ip=0x7fcc2d27a6e7 code=0x0 [ 202.774168][ T5870] fscrypt: AES-256-CBC-CTS using implementation "cts-cbc-aes-aesni" [ 203.292159][ C0] hrtimer: interrupt took 146798 ns [ 203.384269][ T29] audit: type=1400 audit(1717519815.632:276): avc: denied { write } for pid=5869 comm="syz-executor.1" name="file0" dev="loop1" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=dir permissive=1 [ 203.560780][ T5870] fscrypt: AES-256-XTS using implementation "xts-aes-aesni-avx" [ 203.588006][ T29] audit: type=1400 audit(1717519815.632:277): avc: denied { add_name } for pid=5869 comm="syz-executor.1" name="file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=dir permissive=1 [ 203.637686][ C0] vkms_vblank_simulate: vblank timer overrun [ 205.033818][ T5160] usb 1-1: string descriptor 0 read error: -71 [ 205.086550][ T5160] usb 1-1: USB disconnect, device number 3 [ 205.285648][ T5115] EXT4-fs (loop1): unmounting filesystem 00000005-0000-0000-0000-000000000000. [ 205.458072][ T5918] loop4: detected capacity change from 0 to 512 [ 206.062783][ T5913] netlink: 44 bytes leftover after parsing attributes in process `syz-executor.4'. [ 207.030454][ T5918] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 207.125783][ T5918] EXT4-fs warning (device loop4): ext4_multi_mount_protect:397: Unable to create kmmpd thread for loop4. [ 207.453407][ T5931] loop0: detected capacity change from 0 to 512 [ 207.465691][ T5931] EXT4-fs (loop0): feature flags set on rev 0 fs, running e2fsck is recommended [ 207.491311][ T5931] EXT4-fs (loop0): warning: maximal mount count reached, running e2fsck is recommended [ 207.516954][ T5931] EXT4-fs error (device loop0): ext4_orphan_get:1394: comm syz-executor.0: inode #15: comm syz-executor.0: iget: illegal inode # [ 207.579463][ T5931] EXT4-fs error (device loop0): ext4_orphan_get:1397: comm syz-executor.0: couldn't read orphan inode 15 (err -117) [ 207.649011][ T5931] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 208.334050][ T5915] EXT4-fs error (device loop0): ext4_validate_block_bitmap:431: comm syz-executor.0: bg 0: block 19: invalid block bitmap [ 208.537614][ T5923] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 208.845854][ T5105] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 208.948419][ T5949] netlink: 104 bytes leftover after parsing attributes in process `syz-executor.1'. [ 209.027557][ T29] audit: type=1326 audit(1717519821.262:278): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5947 comm="syz-executor.2" exe="/root/syz-executor.2" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f507787cf69 code=0x0 [ 209.761427][ T5959] loop4: detected capacity change from 0 to 512 [ 209.789358][ T5959] EXT4-fs: Ignoring removed oldalloc option [ 209.888815][ T5959] EXT4-fs error (device loop4): ext4_xattr_inode_iget:435: comm syz-executor.4: Parent and EA inode have the same ino 15 [ 209.974231][ T5959] EXT4-fs error (device loop4): ext4_xattr_inode_iget:435: comm syz-executor.4: Parent and EA inode have the same ino 15 [ 210.122990][ T5959] EXT4-fs (loop4): 1 orphan inode deleted [ 210.132566][ T5959] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 211.571967][ T29] audit: type=1400 audit(1717519823.812:279): avc: denied { create } for pid=5965 comm="syz-executor.1" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 211.670205][ T5972] loop2: detected capacity change from 0 to 512 [ 211.695273][ T5959] input: syz1 as /devices/virtual/input/input10 [ 211.702306][ T29] audit: type=1400 audit(1717519823.902:280): avc: denied { bind } for pid=5965 comm="syz-executor.1" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 211.747503][ T29] audit: type=1400 audit(1717519823.972:281): avc: denied { write } for pid=5965 comm="syz-executor.1" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 211.772461][ T5972] EXT4-fs: Ignoring removed oldalloc option [ 211.868100][ T29] audit: type=1400 audit(1717519824.032:282): avc: denied { setopt } for pid=5965 comm="syz-executor.1" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 211.999060][ T5972] EXT4-fs error (device loop2): ext4_xattr_inode_iget:435: comm syz-executor.2: Parent and EA inode have the same ino 15 [ 212.051878][ T5972] EXT4-fs error (device loop2): ext4_xattr_inode_iget:435: comm syz-executor.2: Parent and EA inode have the same ino 15 [ 212.185082][ T5972] EXT4-fs (loop2): 1 orphan inode deleted [ 212.188088][ T29] audit: type=1800 audit(1717519824.432:283): pid=5982 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed(directio) comm="syz-executor.3" name="cgroup.controllers" dev="sda1" ino=1966 res=0 errno=0 [ 212.233985][ T5972] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 212.274040][ T5972] input: syz1 as /devices/virtual/input/input11 [ 212.351666][ T29] audit: type=1804 audit(1717519824.502:284): pid=5979 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=ToMToU comm="syz-executor.3" name="/root/syzkaller-testdir3917187125/syzkaller.fQg66r/30/cgroup.controllers" dev="sda1" ino=1966 res=1 errno=0 [ 212.654115][ T29] audit: type=1400 audit(1717519824.842:285): avc: denied { read } for pid=5965 comm="syz-executor.1" name="binder0" dev="binder" ino=16 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 212.733142][ T29] audit: type=1400 audit(1717519824.872:286): avc: denied { open } for pid=5965 comm="syz-executor.1" path="/dev/binderfs/binder0" dev="binder" ino=16 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 212.828813][ T29] audit: type=1400 audit(1717519824.932:287): avc: denied { ioctl } for pid=5965 comm="syz-executor.1" path="/dev/binderfs/binder0" dev="binder" ino=16 ioctlcmd=0x620d scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 214.411116][ T5119] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 215.673470][ T5996] Bluetooth: hci0: Opcode 0x0c03 failed: -110 [ 215.773464][ T6013] netlink: 104 bytes leftover after parsing attributes in process `syz-executor.1'. [ 217.287585][ T5106] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 217.562204][ T29] kauditd_printk_skb: 1 callbacks suppressed [ 217.562230][ T29] audit: type=1804 audit(1717519829.802:289): pid=6024 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir1988735407/syzkaller.g16wk1/37/cgroup.controllers" dev="sda1" ino=1951 res=1 errno=0 [ 217.597152][ C0] vkms_vblank_simulate: vblank timer overrun [ 217.689086][ T29] audit: type=1800 audit(1717519829.802:290): pid=6024 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed(directio) comm="syz-executor.0" name="cgroup.controllers" dev="sda1" ino=1951 res=0 errno=0 [ 218.496036][ T6042] loop4: detected capacity change from 0 to 512 [ 218.567677][ T6042] EXT4-fs: Ignoring removed oldalloc option [ 218.842304][ T6042] EXT4-fs error (device loop4): ext4_xattr_inode_iget:435: comm syz-executor.4: Parent and EA inode have the same ino 15 [ 218.873470][ T6042] EXT4-fs error (device loop4): ext4_xattr_inode_iget:435: comm syz-executor.4: Parent and EA inode have the same ino 15 [ 218.980164][ T6042] EXT4-fs (loop4): 1 orphan inode deleted [ 219.011092][ T6042] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 219.588387][ T6042] input: syz1 as /devices/virtual/input/input12 [ 221.933568][ T29] audit: type=1326 audit(1717519834.182:291): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6066 comm="syz-executor.0" exe="/root/syz-executor.0" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f051047cf69 code=0x0 [ 221.957813][ C0] vkms_vblank_simulate: vblank timer overrun [ 222.041391][ T6071] input: syz1 as /devices/virtual/input/input13 [ 222.155485][ T5106] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 222.694157][ T6078] netlink: 104 bytes leftover after parsing attributes in process `syz-executor.4'. [ 223.077544][ T29] audit: type=1804 audit(1717519835.322:292): pid=6080 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=open_writers comm="syz-executor.1" name="/root/syzkaller-testdir3328707978/syzkaller.lbPbP0/31/cgroup.controllers" dev="sda1" ino=1948 res=1 errno=0 [ 223.160497][ T29] audit: type=1800 audit(1717519835.372:293): pid=6080 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed(directio) comm="syz-executor.1" name="cgroup.controllers" dev="sda1" ino=1948 res=0 errno=0 [ 223.304205][ T6065] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 223.586531][ T6088] loop1: detected capacity change from 0 to 16 [ 223.737997][ T6088] erofs: (device loop1): mounted with root inode @ nid 36. [ 223.905593][ T6088] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop1 ino=46 [ 223.961708][ T6088] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop1 ino=46 [ 224.023071][ T29] audit: type=1400 audit(1717519836.272:294): avc: denied { mounton } for pid=6087 comm="syz-executor.1" path="/root/syzkaller-testdir3328707978/syzkaller.lbPbP0/32/file1/file0" dev="loop1" ino=46 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 224.053749][ C0] vkms_vblank_simulate: vblank timer overrun [ 224.062991][ T6088] fuse: Bad value for 'fd' [ 226.229869][ T6109] loop1: detected capacity change from 0 to 512 [ 226.249148][ T6109] EXT4-fs: Ignoring removed oldalloc option [ 226.497931][ T6109] EXT4-fs error (device loop1): ext4_xattr_inode_iget:435: comm syz-executor.1: Parent and EA inode have the same ino 15 [ 226.528822][ T6109] EXT4-fs error (device loop1): ext4_xattr_inode_iget:435: comm syz-executor.1: Parent and EA inode have the same ino 15 [ 226.574661][ T6109] EXT4-fs (loop1): 1 orphan inode deleted [ 226.600577][ T6109] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 226.833915][ T6109] input: syz1 as /devices/virtual/input/input14 [ 227.172751][ T29] audit: type=1326 audit(1717519839.412:295): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6116 comm="syz-executor.2" exe="/root/syz-executor.2" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f507787cf69 code=0x0 [ 227.196487][ C0] vkms_vblank_simulate: vblank timer overrun [ 227.508892][ T29] audit: type=1804 audit(1717519839.752:296): pid=6124 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=open_writers comm="syz-executor.4" name="/root/syzkaller-testdir412985945/syzkaller.FIMkPJ/42/cgroup.controllers" dev="sda1" ino=1948 res=1 errno=0 [ 227.716309][ T29] audit: type=1800 audit(1717519839.752:297): pid=6124 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed(directio) comm="syz-executor.4" name="cgroup.controllers" dev="sda1" ino=1948 res=0 errno=0 [ 227.823186][ T53] Bluetooth: hci1: command 0x0406 tx timeout [ 227.829825][ T5116] Bluetooth: hci4: command 0x0406 tx timeout [ 227.836073][ T5116] Bluetooth: hci2: command 0x0406 tx timeout [ 227.847396][ T53] Bluetooth: hci3: command 0x0406 tx timeout [ 228.480515][ T6138] loop3: detected capacity change from 0 to 256 [ 228.697253][ T6142] netlink: 104 bytes leftover after parsing attributes in process `syz-executor.2'. [ 230.687737][ T6131] Bluetooth: hci0: Opcode 0x0c03 failed: -110 [ 231.208206][ T5115] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 231.831304][ T29] audit: type=1804 audit(1717519844.072:298): pid=6163 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir1988735407/syzkaller.g16wk1/47/cgroup.controllers" dev="sda1" ino=1965 res=1 errno=0 [ 231.962919][ T29] audit: type=1800 audit(1717519844.102:299): pid=6163 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed(directio) comm="syz-executor.0" name="cgroup.controllers" dev="sda1" ino=1965 res=0 errno=0 [ 232.679367][ T6170] loop3: detected capacity change from 0 to 512 [ 232.722608][ T6170] EXT4-fs: Ignoring removed oldalloc option [ 232.761287][ T6156] loop2: detected capacity change from 0 to 32768 [ 232.804923][ T6170] EXT4-fs error (device loop3): ext4_xattr_inode_iget:435: comm syz-executor.3: Parent and EA inode have the same ino 15 [ 232.835478][ T29] audit: type=1400 audit(1717519845.062:300): avc: denied { setopt } for pid=6173 comm="syz-executor.1" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 232.876644][ T6170] EXT4-fs error (device loop3): ext4_xattr_inode_iget:435: comm syz-executor.3: Parent and EA inode have the same ino 15 [ 232.896973][ T6170] EXT4-fs (loop3): 1 orphan inode deleted [ 232.933215][ T6170] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 233.024253][ T6170] input: syz1 as /devices/virtual/input/input15 [ 233.440996][ T6156] bcachefs (loop2): mounting version 1.7: mi_btree_bitmap opts=metadata_checksum=none,data_checksum=none,nojournal_transaction_names [ 233.488810][ T6153] loop4: detected capacity change from 0 to 32768 [ 233.524913][ T6156] bcachefs (loop2): recovering from clean shutdown, journal seq 8 [ 233.806635][ T6156] bcachefs (loop2): alloc_read... done [ 233.831547][ T6156] bcachefs (loop2): stripes_read... done [ 233.835625][ T6153] bcachefs (a46a46fb-710c-4d8a-8a40-d337fbcdfe7d): filesystem UUID already open [ 233.891853][ T6153] bcachefs (a46a46fb-710c-4d8a-8a40-d337fbcdfe7d): shutdown complete [ 233.898462][ T6156] bcachefs (loop2): snapshots_read... done [ 234.278025][ T6156] bcachefs (loop2): journal_replay... done [ 234.612974][ T6156] bcachefs (loop2): resume_logged_ops... done [ 234.746603][ T6156] bcachefs (loop2): going read-write [ 234.894663][ T6156] bcachefs (loop2): bch2_copygc_start(): error creating copygc thread EINTR [ 235.213927][ T6156] bcachefs (loop2): error starting copygc thread [ 235.220679][ T6156] bcachefs (loop2): going read-only [ 235.227984][ T6156] bcachefs (loop2): finished waiting for writes to stop [ 235.236605][ T6156] bcachefs (loop2): flushing journal and stopping allocators, journal seq 8 [ 235.246270][ T6156] bcachefs (loop2): flushing journal and stopping allocators complete, journal seq 8 [ 235.298298][ T6156] bcachefs (loop2): shutdown complete, journal seq 9 [ 235.314497][ T6156] bcachefs (loop2): marking filesystem clean [ 235.390622][ T6156] bcachefs (loop2): bch2_fs_start(): error starting filesystem EINTR [ 235.432211][ T6156] bcachefs (loop2): shutting down [ 235.844377][ T6203] netlink: 104 bytes leftover after parsing attributes in process `syz-executor.1'. [ 236.024554][ T6156] bcachefs (loop2): shutdown complete [ 236.701005][ T5112] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 237.334370][ T6220] loop4: detected capacity change from 0 to 512 [ 237.343326][ T6220] EXT4-fs: Ignoring removed oldalloc option [ 237.403104][ T29] audit: type=1804 audit(1717519849.632:301): pid=6219 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir3917187125/syzkaller.fQg66r/45/cgroup.controllers" dev="sda1" ino=1965 res=1 errno=0 [ 237.458174][ T6220] EXT4-fs error (device loop4): ext4_xattr_inode_iget:435: comm syz-executor.4: Parent and EA inode have the same ino 15 [ 237.489277][ T29] audit: type=1800 audit(1717519849.632:302): pid=6219 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed(directio) comm="syz-executor.3" name="cgroup.controllers" dev="sda1" ino=1965 res=0 errno=0 [ 237.537308][ T6220] EXT4-fs error (device loop4): ext4_xattr_inode_iget:435: comm syz-executor.4: Parent and EA inode have the same ino 15 [ 237.558923][ T6220] EXT4-fs (loop4): 1 orphan inode deleted [ 237.610329][ T6220] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 237.796375][ T6220] input: syz1 as /devices/virtual/input/input16 [ 239.372382][ T6209] Bluetooth: hci0: Opcode 0x0c03 failed: -110 [ 242.086978][ T6250] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 242.716464][ T5106] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 243.341318][ T6250] Bluetooth: MGMT ver 1.22 [ 244.402629][ T29] audit: type=1400 audit(1717519856.632:303): avc: denied { bind } for pid=6249 comm="syz-executor.0" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 244.423986][ C0] vkms_vblank_simulate: vblank timer overrun [ 244.607881][ T29] audit: type=1400 audit(1717519856.632:304): avc: denied { name_bind } for pid=6249 comm="syz-executor.0" src=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=rawip_socket permissive=1 [ 244.804437][ T29] audit: type=1400 audit(1717519856.632:305): avc: denied { node_bind } for pid=6249 comm="syz-executor.0" src=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=rawip_socket permissive=1 [ 244.944674][ T6257] Bluetooth: MGMT ver 1.22 [ 248.613708][ T29] audit: type=1400 audit(1717519860.862:306): avc: denied { execute } for pid=6276 comm="syz-executor.1" path=2F6D656D66643A1A6A7E97C1202864656C6574656429 dev="tmpfs" ino=1115 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 250.273846][ T29] audit: type=1401 audit(1717519862.512:307): op=security_bounded_transition seresult=denied oldcontext=root:sysadm_r:sysadm_t newcontext=system_u:object_r:hugetlbfs_t [ 251.851404][ T6297] input: syz0 as /devices/virtual/input/input17 [ 252.111177][ T6299] input: syz1 as /devices/virtual/input/input18 [ 253.139516][ T6315] netlink: 104 bytes leftover after parsing attributes in process `syz-executor.1'. [ 257.039242][ T6337] loop4: detected capacity change from 0 to 4096 [ 257.173074][ T6337] ntfs3: loop4: Mark volume as dirty due to NTFS errors [ 257.210444][ T6337] ntfs3: loop4: Failed to load $MFT (-2). [ 257.569196][ T29] audit: type=1401 audit(1717519869.812:308): op=security_bounded_transition seresult=denied oldcontext=root:sysadm_r:sysadm_t newcontext=system_u:object_r:hugetlbfs_t [ 259.116254][ T6359] input: syz0 as /devices/virtual/input/input19 [ 259.300676][ T6350] loop2: detected capacity change from 0 to 4096 [ 259.403958][ T6350] ntfs3: loop2: Mark volume as dirty due to NTFS errors [ 259.565229][ T6350] ntfs3: loop2: Failed to load $MFT (-2). [ 259.961821][ T29] audit: type=1400 audit(1717519872.202:309): avc: denied { unmount } for pid=5105 comm="syz-executor.0" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=filesystem permissive=1 [ 261.355094][ T1249] ieee802154 phy0 wpan0: encryption failed: -22 [ 261.361560][ T1249] ieee802154 phy1 wpan1: encryption failed: -22 [ 262.764116][ T6386] netlink: 104 bytes leftover after parsing attributes in process `syz-executor.4'. [ 262.909076][ T6381] loop0: detected capacity change from 0 to 512 [ 262.966457][ T6381] EXT4-fs: Ignoring removed oldalloc option [ 263.135127][ T6381] EXT4-fs error (device loop0): ext4_xattr_inode_iget:435: comm syz-executor.0: Parent and EA inode have the same ino 15 [ 263.188749][ T6381] EXT4-fs error (device loop0): ext4_xattr_inode_iget:435: comm syz-executor.0: Parent and EA inode have the same ino 15 [ 263.274543][ T6381] EXT4-fs (loop0): 1 orphan inode deleted [ 263.308543][ T6381] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 263.461501][ T6381] input: syz1 as /devices/virtual/input/input20 [ 265.949291][ T6405] loop4: detected capacity change from 0 to 4096 [ 266.074083][ T6405] ntfs3: loop4: Mark volume as dirty due to NTFS errors [ 266.130231][ T6415] loop2: detected capacity change from 0 to 8 [ 266.160635][ T6405] ntfs3: loop4: Failed to load $MFT (-2). [ 266.418079][ T5105] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 266.546754][ T29] audit: type=1804 audit(1717519878.792:310): pid=6417 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir3917187125/syzkaller.fQg66r/57/cgroup.controllers" dev="sda1" ino=1959 res=1 errno=0 [ 266.575290][ C1] vkms_vblank_simulate: vblank timer overrun [ 266.662253][ T29] audit: type=1800 audit(1717519878.792:311): pid=6417 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed(directio) comm="syz-executor.3" name="cgroup.controllers" dev="sda1" ino=1959 res=0 errno=0 [ 266.782329][ T29] audit: type=1401 audit(1717519879.022:312): op=security_bounded_transition seresult=denied oldcontext=root:sysadm_r:sysadm_t newcontext=system_u:object_r:hugetlbfs_t [ 266.926209][ T6422] input: syz0 as /devices/virtual/input/input21 [ 273.038416][ T6460] loop0: detected capacity change from 0 to 512 [ 273.061133][ T6463] pimreg: entered allmulticast mode [ 273.070866][ T6460] EXT4-fs: Ignoring removed oldalloc option [ 273.333880][ T6460] EXT4-fs error (device loop0): ext4_xattr_inode_iget:435: comm syz-executor.0: Parent and EA inode have the same ino 15 [ 273.388742][ T29] audit: type=1400 audit(1717519885.632:313): avc: denied { read write } for pid=6471 comm="syz-executor.1" name="rdma_cm" dev="devtmpfs" ino=1081 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 273.414606][ T6473] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.1'. [ 273.427762][ T29] audit: type=1400 audit(1717519885.662:314): avc: denied { open } for pid=6471 comm="syz-executor.1" path="/dev/infiniband/rdma_cm" dev="devtmpfs" ino=1081 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 273.512254][ T6460] EXT4-fs error (device loop0): ext4_xattr_inode_iget:435: comm syz-executor.0: Parent and EA inode have the same ino 15 [ 273.556283][ T6460] EXT4-fs (loop0): 1 orphan inode deleted [ 273.567898][ T6460] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 273.600457][ T6460] input: syz1 as /devices/virtual/input/input22 [ 273.717502][ T6477] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 273.725040][ T6477] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 273.731776][ T6477] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 273.738388][ T6477] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 273.744961][ T6477] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 273.751463][ T6477] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 273.758069][ T6477] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 273.765716][ T6477] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 273.772383][ T6477] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 273.779809][ T6477] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 273.924868][ T6473] bond1: entered promiscuous mode [ 274.035676][ T6475] bond1: (slave lo): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 274.127489][ T6468] loop3: detected capacity change from 0 to 4096 [ 274.144323][ T6468] ntfs3: loop3: Mark volume as dirty due to NTFS errors [ 274.155117][ T6468] ntfs3: loop3: Failed to load $MFT (-2). [ 274.173914][ T29] audit: type=1400 audit(1717519886.412:315): avc: denied { write } for pid=6478 comm="syz-executor.2" name="unix" dev="proc" ino=4026533196 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_net_t tclass=file permissive=1 [ 274.321749][ T29] audit: type=1400 audit(1717519886.562:316): avc: denied { watch watch_reads } for pid=6478 comm="syz-executor.2" path="/proc/6478/net/unix" dev="proc" ino=4026533196 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_net_t tclass=file permissive=1 [ 274.799004][ T29] audit: type=1400 audit(1717519887.032:317): avc: denied { getopt } for pid=6485 comm="syz-executor.3" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 274.866912][ T6482] loop1: detected capacity change from 0 to 8 [ 276.752368][ T29] audit: type=1401 audit(1717519888.992:318): op=security_bounded_transition seresult=denied oldcontext=root:sysadm_r:sysadm_t newcontext=system_u:object_r:hugetlbfs_t [ 276.771634][ T6496] netlink: 104 bytes leftover after parsing attributes in process `syz-executor.3'. [ 276.886644][ T5105] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 276.966089][ T6497] input: syz0 as /devices/virtual/input/input23 [ 278.110776][ T6504] loop4: detected capacity change from 0 to 32768 [ 278.197255][ T6504] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop4 (7:4) scanned by syz-executor.4 (6504) [ 278.233325][ T6504] BTRFS info (device loop4): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 278.243557][ T6504] BTRFS info (device loop4): using crc32c (crc32c-intel) checksum algorithm [ 278.252355][ T6504] BTRFS info (device loop4): using free-space-tree [ 280.148314][ T5106] BTRFS info (device loop4): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 280.889602][ T29] audit: type=1400 audit(1717519893.132:319): avc: denied { create } for pid=6528 comm="syz-executor.1" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 282.620756][ T29] audit: type=1400 audit(1717519894.862:320): avc: denied { ioctl } for pid=6528 comm="syz-executor.1" path="socket:[10226]" dev="sockfs" ino=10226 ioctlcmd=0x8946 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 283.223726][ T6561] loop2: detected capacity change from 0 to 512 [ 283.231634][ T6561] EXT4-fs: Ignoring removed oldalloc option [ 283.475986][ T6561] EXT4-fs error (device loop2): ext4_xattr_inode_iget:435: comm syz-executor.2: Parent and EA inode have the same ino 15 [ 283.537254][ T6561] EXT4-fs error (device loop2): ext4_xattr_inode_iget:435: comm syz-executor.2: Parent and EA inode have the same ino 15 [ 283.565418][ T6553] loop4: detected capacity change from 0 to 4096 [ 283.599222][ T6561] EXT4-fs (loop2): 1 orphan inode deleted [ 283.621493][ T6553] ntfs3: loop4: Mark volume as dirty due to NTFS errors [ 283.653648][ T6553] ntfs3: loop4: Failed to load $MFT (-2). [ 283.669192][ T6561] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 283.915070][ T6561] input: syz1 as /devices/virtual/input/input24 [ 284.797456][ T6570] loop4: detected capacity change from 0 to 32768 [ 284.838872][ T6570] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop4 (7:4) scanned by syz-executor.4 (6570) [ 284.867959][ T6570] BTRFS info (device loop4): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 284.878513][ T6570] BTRFS info (device loop4): using crc32c (crc32c-intel) checksum algorithm [ 284.887393][ T6570] BTRFS info (device loop4): using free-space-tree [ 286.297274][ T6597] netlink: 104 bytes leftover after parsing attributes in process `syz-executor.1'. [ 286.314615][ T5106] BTRFS info (device loop4): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 287.304955][ T5119] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 289.789042][ T6611] pimreg: entered allmulticast mode [ 290.071067][ T29] audit: type=1400 audit(1717519902.312:321): avc: denied { ioctl } for pid=6622 comm="syz-executor.4" path="/dev/vhost-vsock" dev="devtmpfs" ino=1085 ioctlcmd=0x9439 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 290.500628][ T6630] vivid-002: disconnect [ 290.931298][ T6612] vivid-002: reconnect [ 291.838080][ T6638] loop1: detected capacity change from 0 to 32768 [ 291.862333][ T6638] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop1 (7:1) scanned by syz-executor.1 (6638) [ 291.884566][ T6638] BTRFS info (device loop1): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 291.897600][ T6638] BTRFS info (device loop1): using crc32c (crc32c-intel) checksum algorithm [ 291.906424][ T6638] BTRFS info (device loop1): using free-space-tree [ 293.260484][ T6639] loop4: detected capacity change from 0 to 4096 [ 293.363416][ T6639] ntfs3: loop4: Mark volume as dirty due to NTFS errors [ 293.398959][ T6639] ntfs3: loop4: Failed to load $MFT (-2). [ 293.402838][ T5115] BTRFS info (device loop1): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 293.471544][ T6673] loop0: detected capacity change from 0 to 16 [ 293.491382][ T6673] erofs: Unknown parameter '00000000000000016832' [ 293.587946][ T6674] netlink: 104 bytes leftover after parsing attributes in process `syz-executor.2'. [ 295.665879][ T29] audit: type=1400 audit(1717519907.912:322): avc: denied { bind } for pid=6680 comm="syz-executor.4" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 295.741677][ T6681] ieee802154 phy0 wpan0: encryption failed: -22 [ 295.755091][ T29] audit: type=1400 audit(1717519907.942:323): avc: denied { write } for pid=6680 comm="syz-executor.4" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 295.841024][ T29] audit: type=1400 audit(1717519907.982:324): avc: denied { write } for pid=6680 comm="syz-executor.4" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 296.148911][ T29] audit: type=1400 audit(1717519908.142:325): avc: denied { bind } for pid=6680 comm="syz-executor.4" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 297.265141][ T6688] loop1: detected capacity change from 0 to 512 [ 297.300040][ T6688] EXT4-fs: Ignoring removed oldalloc option [ 297.451555][ T6688] EXT4-fs error (device loop1): ext4_xattr_inode_iget:435: comm syz-executor.1: Parent and EA inode have the same ino 15 [ 297.488168][ T6688] EXT4-fs error (device loop1): ext4_xattr_inode_iget:435: comm syz-executor.1: Parent and EA inode have the same ino 15 [ 297.507650][ T6688] EXT4-fs (loop1): 1 orphan inode deleted [ 297.517505][ T6688] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 299.592913][ T6688] input: syz1 as /devices/virtual/input/input25 [ 299.731235][ T6697] pimreg: entered allmulticast mode [ 300.447996][ T6719] loop3: detected capacity change from 0 to 32768 [ 300.478877][ T6719] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop3 (7:3) scanned by syz-executor.3 (6719) [ 300.495748][ T6719] BTRFS info (device loop3): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 300.508351][ T6719] BTRFS info (device loop3): using crc32c (crc32c-intel) checksum algorithm [ 300.517250][ T6719] BTRFS info (device loop3): using free-space-tree [ 302.091905][ T6713] Bluetooth: hci0: Opcode 0x0c03 failed: -110 [ 302.209022][ T5112] BTRFS info (device loop3): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 302.450143][ T6740] loop2: detected capacity change from 0 to 4096 [ 302.465133][ T5115] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 302.553364][ T6740] ntfs3: loop2: Mark volume as dirty due to NTFS errors [ 302.593019][ T6740] ntfs3: loop2: Failed to load $MFT (-2). [ 302.929862][ T6755] netlink: 104 bytes leftover after parsing attributes in process `syz-executor.1'. [ 306.934910][ T6782] loop4: detected capacity change from 0 to 32768 [ 306.964204][ T6782] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop4 (7:4) scanned by syz-executor.4 (6782) [ 306.999359][ T6782] BTRFS info (device loop4): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 307.009681][ T6782] BTRFS info (device loop4): using crc32c (crc32c-intel) checksum algorithm [ 307.018460][ T6782] BTRFS info (device loop4): using free-space-tree [ 307.219536][ T6787] loop1: detected capacity change from 0 to 512 [ 307.271479][ T6787] EXT4-fs: Ignoring removed oldalloc option [ 307.313690][ T6787] EXT4-fs error (device loop1): ext4_xattr_inode_iget:435: comm syz-executor.1: Parent and EA inode have the same ino 15 [ 307.327655][ T6787] EXT4-fs error (device loop1): ext4_xattr_inode_iget:435: comm syz-executor.1: Parent and EA inode have the same ino 15 [ 307.343749][ T6787] EXT4-fs (loop1): 1 orphan inode deleted [ 307.352769][ T6787] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 307.436125][ T6787] input: syz1 as /devices/virtual/input/input26 [ 308.705069][ T29] audit: type=1400 audit(1717519920.952:326): avc: denied { setopt } for pid=6803 comm="syz-executor.2" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 308.840162][ T5106] BTRFS info (device loop4): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 309.991031][ T6818] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 310.001834][ T6815] loop2: detected capacity change from 0 to 4096 [ 310.236443][ T6815] ntfs3: loop2: Mark volume as dirty due to NTFS errors [ 310.280696][ T6815] ntfs3: loop2: Failed to load $MFT (-2). [ 311.794621][ T8] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 311.835171][ T5115] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 312.092183][ T8] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 255, changing to 11 [ 312.123907][ T8] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 59391, setting to 1024 [ 312.181840][ T8] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 312.240041][ T8] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 312.285443][ T8] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 312.338070][ T8] usb 5-1: config 0 descriptor?? [ 312.385872][ T6827] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 313.675195][ T8] usbhid 5-1:0.0: can't add hid device: -71 [ 313.692328][ T8] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 313.732987][ T8] usb 5-1: USB disconnect, device number 5 [ 313.895592][ T6846] netlink: 104 bytes leftover after parsing attributes in process `syz-executor.1'. [ 314.036004][ T6843] loop2: detected capacity change from 0 to 4096 [ 314.315834][ T6849] loop3: detected capacity change from 0 to 32768 [ 314.340306][ T6849] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop3 (7:3) scanned by syz-executor.3 (6849) [ 314.354477][ T6843] ntfs3: loop2: Different NTFS sector size (1024) and media sector size (512). [ 314.453501][ T6849] BTRFS info (device loop3): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 314.464514][ T6849] BTRFS info (device loop3): using crc32c (crc32c-intel) checksum algorithm [ 314.473410][ T6849] BTRFS info (device loop3): using free-space-tree [ 317.582189][ T29] audit: type=1400 audit(1717519929.662:327): avc: denied { remove_name } for pid=6841 comm="syz-executor.2" name="bus" dev="loop2" ino=33 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 317.718755][ T5112] BTRFS info (device loop3): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 317.729796][ T29] audit: type=1400 audit(1717519929.662:328): avc: denied { unlink } for pid=6841 comm="syz-executor.2" name="bus" dev="loop2" ino=33 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 318.286007][ T6884] loop2: detected capacity change from 0 to 512 [ 318.372493][ T29] audit: type=1400 audit(1717519930.592:329): avc: denied { remount } for pid=6881 comm="syz-executor.2" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 319.042903][ T29] audit: type=1326 audit(1717519931.292:330): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6887 comm="syz-executor.2" exe="/root/syz-executor.2" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f507787cf69 code=0x0 [ 319.766149][ T6894] loop3: detected capacity change from 0 to 32768 [ 319.811187][ T6894] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop3 (7:3) scanned by syz-executor.3 (6894) [ 319.900514][ T6896] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=6896 comm=syz-executor.0 [ 320.188208][ T6898] loop2: detected capacity change from 0 to 256 [ 320.338882][ T6898] FAT-fs (loop2): Directory bread(block 64) failed [ 320.367690][ T6898] FAT-fs (loop2): Directory bread(block 65) failed [ 320.407714][ T6898] FAT-fs (loop2): Directory bread(block 66) failed [ 320.439088][ T6898] FAT-fs (loop2): Directory bread(block 67) failed [ 320.479616][ T6898] FAT-fs (loop2): Directory bread(block 68) failed [ 320.537536][ T6898] FAT-fs (loop2): Directory bread(block 69) failed [ 320.564696][ T6898] FAT-fs (loop2): Directory bread(block 70) failed [ 320.612294][ T6898] FAT-fs (loop2): Directory bread(block 71) failed [ 320.639322][ T6898] FAT-fs (loop2): Directory bread(block 72) failed [ 320.684288][ T6898] FAT-fs (loop2): Directory bread(block 73) failed [ 320.853947][ T29] audit: type=1400 audit(1717519933.102:331): avc: denied { setopt } for pid=6897 comm="syz-executor.2" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 321.095222][ T6894] BTRFS info (device loop3): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 321.105628][ T6894] BTRFS info (device loop3): using crc32c (crc32c-intel) checksum algorithm [ 321.114438][ T6894] BTRFS info (device loop3): using free-space-tree [ 321.132288][ T29] audit: type=1400 audit(1717519933.362:332): avc: denied { read } for pid=6903 comm="syz-executor.0" name="ppp" dev="devtmpfs" ino=694 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 321.230541][ T29] audit: type=1400 audit(1717519933.362:333): avc: denied { open } for pid=6903 comm="syz-executor.0" path="/dev/ppp" dev="devtmpfs" ino=694 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 321.351324][ T29] audit: type=1400 audit(1717519933.362:334): avc: denied { ioctl } for pid=6903 comm="syz-executor.0" path="/dev/ppp" dev="devtmpfs" ino=694 ioctlcmd=0x743e scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 322.813071][ T1249] ieee802154 phy0 wpan0: encryption failed: -22 [ 322.819575][ T1249] ieee802154 phy1 wpan1: encryption failed: -22 [ 323.004716][ T5112] BTRFS info (device loop3): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 323.518442][ T29] audit: type=1400 audit(1717519935.752:335): avc: denied { name_bind } for pid=6934 comm="syz-executor.1" src=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:reserved_port_t tclass=tcp_socket permissive=1 [ 323.547382][ C0] net_ratelimit: 47 callbacks suppressed [ 323.547410][ C0] TCP: request_sock_TCP: Possible SYN flooding on port [::]:2. Sending cookies. [ 324.177072][ T6945] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.1'. [ 324.191954][ T6948] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.2'. [ 324.320019][ T6948] batman_adv: batadv1: Adding interface: netdevsim0 [ 324.351008][ T6948] batman_adv: batadv1: The MTU of interface netdevsim0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 324.403139][ T6948] batman_adv: batadv1: Interface activated: netdevsim0 [ 324.531987][ T29] audit: type=1400 audit(1717519936.772:336): avc: denied { bind } for pid=6953 comm="syz-executor.3" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 324.619915][ T29] audit: type=1804 audit(1717519936.812:337): pid=6952 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=open_writers comm="syz-executor.1" name="/root/syzkaller-testdir3328707978/syzkaller.lbPbP0/75/cgroup.controllers" dev="sda1" ino=1952 res=1 errno=0 [ 324.736942][ T29] audit: type=1400 audit(1717519936.832:338): avc: denied { connect } for pid=6953 comm="syz-executor.3" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 324.752916][ T6929] loop0: detected capacity change from 0 to 32768 [ 325.213427][ T6929] bcachefs (loop0): mounting version 1.7: mi_btree_bitmap opts=metadata_checksum=none,data_checksum=none,nojournal_transaction_names [ 325.266891][ T6929] bcachefs (loop0): recovering from clean shutdown, journal seq 8 [ 325.403699][ T6929] bcachefs (loop0): alloc_read... done [ 325.422950][ T6929] bcachefs (loop0): stripes_read... done [ 325.428899][ T6929] bcachefs (loop0): snapshots_read... done [ 325.456907][ T6988] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.2'. [ 325.514815][ T6929] bcachefs (loop0): journal_replay... done [ 325.520865][ T6929] bcachefs (loop0): resume_logged_ops... done [ 325.563829][ T6929] bcachefs (loop0): going read-write [ 325.592197][ T6991] batman_adv: batadv1: Interface deactivated: netdevsim0 [ 325.624736][ T6929] bcachefs (loop0): done starting filesystem [ 325.635452][ T6991] batman_adv: batadv1: Removing interface: netdevsim0 [ 325.702470][ T6991] batman_adv: batadv2: Adding interface: netdevsim0 [ 325.709139][ T6991] batman_adv: batadv2: The MTU of interface netdevsim0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 325.742826][ T6991] batman_adv: batadv2: Interface activated: netdevsim0 [ 325.821973][ T29] audit: type=1400 audit(1717519938.062:339): avc: denied { rename } for pid=6928 comm="syz-executor.0" name="file1" dev="loop0" ino=4100 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=lnk_file permissive=1 [ 326.157028][ T7008] warning: `syz-executor.2' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 326.194303][ T6929] bcachefs (loop0): going read-only [ 326.229842][ T6929] bcachefs (loop0): finished waiting for writes to stop [ 326.284535][ T6929] bcachefs (loop0): flushing journal and stopping allocators, journal seq 9 [ 326.348649][ T6929] bcachefs (loop0): flushing journal and stopping allocators complete, journal seq 11 [ 326.449599][ T6929] bcachefs (loop0): shutdown complete, journal seq 12 [ 326.466569][ T6929] bcachefs (loop0): marking filesystem clean [ 326.512415][ T29] audit: type=1400 audit(1717519938.752:340): avc: denied { quotamod } for pid=6928 comm="syz-executor.0" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 326.564132][ T29] audit: type=1400 audit(1717519938.782:341): avc: denied { ioctl } for pid=7019 comm="syz-executor.3" path="user:[4026531837]" dev="nsfs" ino=4026531837 ioctlcmd=0x9421 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 326.691889][ T29] audit: type=1400 audit(1717519938.932:342): avc: denied { mount } for pid=6928 comm="syz-executor.0" name="/" dev="hugetlbfs" ino=12518 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:hugetlbfs_t tclass=filesystem permissive=1 [ 326.776512][ T5105] bcachefs (loop0): dirent points to inode that does not point back: [ 326.776512][ T5105] u64s 7 type dirent 4096:6783475523080972787:U32_MAX len 0 ver 0: file1 -> 4101 type reg [ 326.776512][ T5105] inum: 4101 mode=100755 [ 326.776512][ T5105] flags= (15300000) [ 326.776512][ T5105] journal_seq=4 [ 326.776512][ T5105] bi_size=10 [ 326.776512][ T5105] bi_sectors=8 [ 326.776512][ T5105] bi_version=0 [ 326.776512][ T5105] bi_atime=2336883131 [ 326.776512][ T5105] bi_ctime=2346883235 [ 326.776512][ T5105] bi_mtime=2336883131 [ 326.776512][ T5105] bi_otime=2336883131 [ 326.776512][ T5105] bi_uid=0 [ 326.776512][ T5105] bi_gid=256 [ 326.776512][ T5105] bi_nlink=0 [ 326.776512][ T5105] bi_generation=0 [ 326.776512][ T5105] bi_dev=0 [ 326.776512][ T5105] bi_data_checksum=0 [ 326.776512][ T5105] bi_compression=0 [ 326.776512][ T5105] bi_project=0 [ 326.776512][ T5105] bi_background_compression=0 [ 326.776512][ T5105] bi_data_replicas=0 [ 326.776512][ T5105] bi_promote_target=0 [ 326.776512][ T5105] bi_foreground_target=0 [ 326.776512][ T5105] bi_background_target=0 [ 326.776512][ T5105] bi_erasure_code=0 [ 326.776512][ T5105] bi_fields_set=4096 [ 326.776512][ T5105] bi_dir=6783475523080972787 [ 326.776512][ T5105] bi_dir_offset=0 [ 326.776512][ T5105] bi_subvol=0 [ 326.776512][ T5105] bi_parent_subvol=0 [ 326.776512][ T5105] bi_nocow=0 [ 326.776512][ T5105] [ 326.963481][ T5105] bcachefs (loop0): inconsistency detected - emergency read only at journal seq 12 [ 326.975396][ C1] TCP: request_sock_TCP: Possible SYN flooding on port [::]:2. Sending cookies. [ 327.010024][ T29] audit: type=1400 audit(1717519939.252:343): avc: denied { search } for pid=4516 comm="syslogd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 327.241163][ T5118] Bluetooth: hci4: unexpected event for opcode 0x080f [ 327.269538][ T29] audit: type=1400 audit(1717519939.512:344): avc: denied { getopt } for pid=7035 comm="syz-executor.3" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 327.308498][ T7034] xt_TPROXY: Can be used only with -p tcp or -p udp [ 327.426242][ T7034] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.1'. [ 327.461054][ T5105] bcachefs (loop0): shutting down [ 327.484471][ T5159] IPVS: starting estimator thread 0... [ 327.582825][ T7041] IPVS: using max 15 ests per chain, 36000 per kthread [ 327.670326][ T11] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 327.765692][ T5105] bcachefs (loop0): shutdown complete [ 328.017137][ T11] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 328.289772][ T11] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 328.499706][ T11] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 328.553163][ T29] kauditd_printk_skb: 3 callbacks suppressed [ 328.553194][ T29] audit: type=1400 audit(1717519940.792:348): avc: denied { setopt } for pid=7060 comm="syz-executor.2" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 328.963242][ T11] bridge_slave_1: left allmulticast mode [ 328.982307][ T11] bridge_slave_1: left promiscuous mode [ 329.003664][ T11] bridge0: port 2(bridge_slave_1) entered disabled state [ 329.137059][ T11] bridge_slave_0: left allmulticast mode [ 329.153628][ T11] bridge_slave_0: left promiscuous mode [ 329.184533][ T11] bridge0: port 1(bridge_slave_0) entered disabled state [ 329.355094][ T7072] loop2: detected capacity change from 0 to 512 [ 329.414027][ T7072] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 329.484908][ T7072] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 329.517460][ T7072] ext4 filesystem being mounted at /root/syzkaller-testdir936375333/syzkaller.OZt5Fb/88/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 330.495367][ T7084] EXT4-fs (loop2): re-mounted 00000000-0000-0000-0000-000000000000 r/w. Quota mode: writeback. [ 330.518584][ T29] audit: type=1400 audit(1717519942.542:349): avc: denied { mounton } for pid=7071 comm="syz-executor.2" path="/root/syzkaller-testdir936375333/syzkaller.OZt5Fb/88/file1/file0" dev="loop2" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 331.236754][ T7058] loop1: detected capacity change from 0 to 32768 [ 331.243681][ T25] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 331.264736][ T5114] Bluetooth: hci4: Controller not accepting commands anymore: ncmd = 0 [ 331.274503][ T5114] Bluetooth: hci4: Injecting HCI hardware error event [ 331.288979][ T5114] Bluetooth: hci4: hardware error 0x00 [ 331.430791][ T25] usb 3-1: config 1 has an invalid descriptor of length 255, skipping remainder of the config [ 331.461873][ T25] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 331.506607][ T25] usb 3-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 331.547278][ T25] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 331.572805][ T25] usb 3-1: SerialNumber: syz [ 331.893058][ T11] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 331.923288][ T11] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 331.955990][ T11] bond0 (unregistering): Released all slaves [ 332.065051][ T7078] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1217: group 0, block bitmap and bg descriptor inconsistent: 41 vs 39667 free clusters [ 332.640875][ T4478] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 332.660060][ T4478] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 332.674940][ T4478] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 332.703119][ T4478] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 332.714463][ T4478] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 332.726933][ T4478] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 332.757978][ T29] audit: type=1400 audit(1717519944.992:350): avc: denied { mounton } for pid=7097 comm="syz-executor.0" path="/" dev="sda1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:root_t tclass=dir permissive=1 [ 333.005155][ T25] usb 3-1: 0:2 : does not exist [ 333.010930][ T25] usb 3-1: unit 5 not found! [ 333.048006][ T29] audit: type=1326 audit(1717519945.282:351): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7102 comm="syz-executor.4" exe="/root/syz-executor.4" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcc2d27cf69 code=0x7ffc0000 [ 333.106715][ T29] audit: type=1326 audit(1717519945.282:352): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7102 comm="syz-executor.4" exe="/root/syz-executor.4" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcc2d27cf69 code=0x7ffc0000 [ 333.159042][ T29] audit: type=1326 audit(1717519945.352:353): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7102 comm="syz-executor.4" exe="/root/syz-executor.4" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fcc2d27cf69 code=0x7ffc0000 [ 333.197270][ T5119] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 333.283381][ T29] audit: type=1326 audit(1717519945.352:354): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7102 comm="syz-executor.4" exe="/root/syz-executor.4" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcc2d27cf69 code=0x7ffc0000 [ 333.345619][ T5114] Bluetooth: hci4: Opcode 0x0c03 failed: -110 [ 333.481116][ T29] audit: type=1326 audit(1717519945.352:355): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7102 comm="syz-executor.4" exe="/root/syz-executor.4" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcc2d27cf69 code=0x7ffc0000 [ 335.692194][ T5114] Bluetooth: hci0: command tx timeout [ 336.653464][ T7106] xt_CT: You must specify a L4 protocol and not use inversions on it [ 336.670053][ T25] usb 3-1: USB disconnect, device number 2 [ 336.761907][ T29] audit: type=1326 audit(1717519945.372:356): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7102 comm="syz-executor.4" exe="/root/syz-executor.4" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fcc2d27cf69 code=0x7ffc0000 [ 336.903139][ T29] audit: type=1326 audit(1717519945.372:357): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7102 comm="syz-executor.4" exe="/root/syz-executor.4" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcc2d27cf69 code=0x7ffc0000 [ 337.012836][ T29] audit: type=1326 audit(1717519945.382:358): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7102 comm="syz-executor.4" exe="/root/syz-executor.4" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcc2d27cf69 code=0x7ffc0000 [ 337.113521][ T29] audit: type=1326 audit(1717519945.472:359): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7102 comm="syz-executor.4" exe="/root/syz-executor.4" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcc2d27cf69 code=0x7ffc0000 [ 337.166897][ T29] audit: type=1326 audit(1717519945.472:360): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7102 comm="syz-executor.4" exe="/root/syz-executor.4" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcc2d27cf69 code=0x7ffc0000 [ 337.222097][ T29] audit: type=1326 audit(1717519945.482:361): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7102 comm="syz-executor.4" exe="/root/syz-executor.4" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fcc2d27cf69 code=0x7ffc0000 [ 337.246561][ T29] audit: type=1326 audit(1717519945.482:362): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7102 comm="syz-executor.4" exe="/root/syz-executor.4" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcc2d27cf69 code=0x7ffc0000 [ 337.284012][ T11] hsr_slave_0: left promiscuous mode [ 337.295319][ T11] hsr_slave_1: left promiscuous mode [ 337.305333][ T11] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 337.315378][ T11] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 337.332313][ T29] audit: type=1326 audit(1717519945.482:363): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7102 comm="syz-executor.4" exe="/root/syz-executor.4" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcc2d27cf69 code=0x7ffc0000 [ 337.369521][ T29] audit: type=1326 audit(1717519945.482:364): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7102 comm="syz-executor.4" exe="/root/syz-executor.4" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fcc2d27cf69 code=0x7ffc0000 [ 337.395575][ T11] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 337.411000][ T11] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 337.492353][ T29] audit: type=1326 audit(1717519945.482:365): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7102 comm="syz-executor.4" exe="/root/syz-executor.4" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcc2d27cf69 code=0x7ffc0000 [ 337.529761][ T11] veth1_macvtap: left promiscuous mode [ 337.555379][ T11] veth0_macvtap: left promiscuous mode [ 337.582379][ T11] veth1_vlan: left promiscuous mode [ 337.589790][ T11] veth0_vlan: left promiscuous mode [ 337.754055][ T5114] Bluetooth: hci0: command tx timeout [ 338.248034][ T11] pimreg (unregistering): left allmulticast mode [ 339.218513][ T7119] loop2: detected capacity change from 0 to 32768 [ 339.578504][ T7134] evm: overlay not supported [ 339.586771][ T7119] bcachefs (loop2): mounting version 1.7: mi_btree_bitmap opts=metadata_checksum=none,data_checksum=none,nojournal_transaction_names [ 339.609406][ T7119] bcachefs (loop2): recovering from clean shutdown, journal seq 8 [ 339.687017][ T7119] bcachefs (loop2): alloc_read... done [ 339.699591][ T7119] bcachefs (loop2): stripes_read... done [ 339.707622][ T7119] bcachefs (loop2): snapshots_read... done [ 339.734501][ T7119] bcachefs (loop2): journal_replay... done [ 339.748384][ T7119] bcachefs (loop2): resume_logged_ops... done [ 339.760058][ T7119] bcachefs (loop2): going read-write [ 339.793918][ T7119] bcachefs (loop2): done starting filesystem [ 339.822374][ T5114] Bluetooth: hci0: command tx timeout [ 340.009979][ T11] team0 (unregistering): Port device team_slave_1 removed [ 340.117832][ T11] team0 (unregistering): Port device team_slave_0 removed [ 340.124865][ T7119] bcachefs (loop2): going read-only [ 340.147731][ T7119] bcachefs (loop2): finished waiting for writes to stop [ 340.179103][ T7119] bcachefs (loop2): flushing journal and stopping allocators, journal seq 9 [ 340.268405][ T7119] bcachefs (loop2): flushing journal and stopping allocators complete, journal seq 11 [ 340.302666][ T7119] bcachefs (loop2): shutdown complete, journal seq 12 [ 340.313092][ T7119] bcachefs (loop2): marking filesystem clean [ 340.499098][ T5119] bcachefs (loop2): dirent points to inode that does not point back: [ 340.499098][ T5119] u64s 7 type dirent 4096:6783475523080972787:U32_MAX len 0 ver 0: file1 -> 4101 type reg [ 340.499098][ T5119] inum: 4101 mode=100755 [ 340.499098][ T5119] flags= (15300000) [ 340.499098][ T5119] journal_seq=4 [ 340.499098][ T5119] bi_size=10 [ 340.499098][ T5119] bi_sectors=8 [ 340.499098][ T5119] bi_version=0 [ 340.499098][ T5119] bi_atime=2336883131 [ 340.499098][ T5119] bi_ctime=2346883235 [ 340.499098][ T5119] bi_mtime=2336883131 [ 340.499098][ T5119] bi_otime=2336883131 [ 340.499098][ T5119] bi_uid=0 [ 340.499098][ T5119] bi_gid=256 [ 340.499098][ T5119] bi_nlink=0 [ 340.499098][ T5119] bi_generation=0 [ 340.499098][ T5119] bi_dev=0 [ 340.499098][ T5119] bi_data_checksum=0 [ 340.499098][ T5119] bi_compression=0 [ 340.499098][ T5119] bi_project=0 [ 340.499098][ T5119] bi_background_compression=0 [ 340.499098][ T5119] bi_data_replicas=0 [ 340.499098][ T5119] bi_promote_target=0 [ 340.499098][ T5119] bi_foreground_target=0 [ 340.499098][ T5119] bi_background_target=0 [ 340.499098][ T5119] bi_erasure_code=0 [ 340.499098][ T5119] bi_fields_set=4096 [ 340.499098][ T5119] bi_dir=6783475523080972787 [ 340.499098][ T5119] bi_dir_offset=0 [ 340.499098][ T5119] bi_subvol=0 [ 340.499098][ T5119] bi_parent_subvol=0 [ 340.499098][ T5119] bi_nocow=0 [ 340.499098][ T5119] [ 340.666937][ T5119] bcachefs (loop2): inconsistency detected - emergency read only at journal seq 12 [ 341.202789][ T7148] netlink: 5 bytes leftover after parsing attributes in process `syz-executor.3'. [ 341.508043][ T5119] bcachefs (loop2): shutting down [ 341.828603][ T5119] bcachefs (loop2): shutdown complete [ 341.902664][ T4478] Bluetooth: hci0: command tx timeout [ 343.358259][ T7097] chnl_net:caif_netlink_parms(): no params data found [ 344.047350][ T7097] bridge0: port 1(bridge_slave_0) entered blocking state [ 344.072888][ T7097] bridge0: port 1(bridge_slave_0) entered disabled state [ 344.080234][ T7097] bridge_slave_0: entered allmulticast mode [ 344.104787][ T7097] bridge_slave_0: entered promiscuous mode [ 344.161961][ T7097] bridge0: port 2(bridge_slave_1) entered blocking state [ 344.193864][ T7097] bridge0: port 2(bridge_slave_1) entered disabled state [ 344.218450][ T7097] bridge_slave_1: entered allmulticast mode [ 344.250841][ T7097] bridge_slave_1: entered promiscuous mode [ 344.472974][ T7161] loop4: detected capacity change from 0 to 32768 [ 344.569546][ T7161] read_mapping_page failed! [ 344.571278][ T7097] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 344.592674][ T7161] jfs_mount: Failed to read AGGREGATE_I [ 344.598285][ T7161] Mount JFS Failure: -5 [ 344.634741][ T7161] jfs_mount failed w/return code = -5 [ 344.655109][ T7097] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 344.881369][ T7097] team0: Port device team_slave_0 added [ 345.079369][ T11] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 345.167135][ T7097] team0: Port device team_slave_1 added [ 345.356836][ T11] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 345.700170][ T11] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 345.778761][ T7097] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 345.822532][ T7097] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 345.878903][ T7171] loop3: detected capacity change from 0 to 32768 [ 345.904222][ T7097] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 345.969506][ T29] kauditd_printk_skb: 60 callbacks suppressed [ 345.969531][ T29] audit: type=1400 audit(1717519958.212:426): avc: denied { create } for pid=7175 comm="syz-executor.4" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_crypto_socket permissive=1 [ 345.979379][ T7097] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 346.072379][ T29] audit: type=1400 audit(1717519958.222:427): avc: denied { write } for pid=7175 comm="syz-executor.4" path="socket:[12930]" dev="sockfs" ino=12930 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_crypto_socket permissive=1 [ 346.096139][ T7171] XFS (loop3): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 346.155225][ T7097] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 346.215495][ T7171] XFS (loop3): Ending clean mount [ 346.258809][ T7097] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 346.290947][ T7171] XFS (loop3): Quotacheck needed: Please wait. [ 346.303181][ T11] batman_adv: batadv2: Interface deactivated: netdevsim0 [ 346.385805][ T11] batman_adv: batadv2: Removing interface: netdevsim0 [ 346.423221][ T11] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 346.557526][ T7171] XFS (loop3): Quotacheck: Done. [ 346.687224][ T29] audit: type=1400 audit(1717519958.932:428): avc: denied { relabelfrom } for pid=7181 comm="syz-executor.1" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tun_socket permissive=1 [ 346.752123][ T29] audit: type=1400 audit(1717519958.952:429): avc: denied { relabelto } for pid=7181 comm="syz-executor.1" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tun_socket permissive=1 [ 347.019301][ T7097] hsr_slave_0: entered promiscuous mode [ 347.049640][ T7097] hsr_slave_1: entered promiscuous mode [ 347.096822][ T7097] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 347.123831][ T7097] Cannot create hsr debugfs directory [ 347.604187][ T11] bridge_slave_1: left allmulticast mode [ 347.609919][ T11] bridge_slave_1: left promiscuous mode [ 347.627539][ T29] audit: type=1400 audit(1717519959.872:430): avc: denied { read } for pid=7197 comm="syz-executor.1" name="msr" dev="devtmpfs" ino=87 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 347.633341][ T11] bridge0: port 2(bridge_slave_1) entered disabled state [ 347.684929][ T29] audit: type=1400 audit(1717519959.882:431): avc: denied { open } for pid=7197 comm="syz-executor.1" path="/dev/cpu/0/msr" dev="devtmpfs" ino=87 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 347.777132][ T5114] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 347.777926][ T11] bridge_slave_0: left allmulticast mode [ 347.863071][ T5114] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 347.986518][ T5114] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 348.068329][ T5114] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 348.078863][ T11] bridge_slave_0: left promiscuous mode [ 348.160368][ T5114] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 348.174033][ T5114] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 348.178969][ T11] bridge0: port 1(bridge_slave_0) entered disabled state [ 348.376416][ T29] audit: type=1326 audit(1717519960.612:432): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7197 comm="syz-executor.1" exe="/root/syz-executor.1" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fa220c7cf69 code=0x0 [ 348.505216][ T7199] 9pnet_fd: Insufficient options for proto=fd [ 348.827930][ T5112] XFS (loop3): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 351.016517][ T4478] Bluetooth: hci4: command tx timeout [ 351.604683][ T7216] loop1: detected capacity change from 0 to 64 [ 352.287214][ T11] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 352.338577][ T11] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 352.372907][ T11] bond0 (unregistering): Released all slaves [ 352.480335][ T7227] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.3'. [ 353.112526][ T4478] Bluetooth: hci4: command tx timeout [ 353.443497][ T11] hsr_slave_0: left promiscuous mode [ 353.453538][ T11] hsr_slave_1: left promiscuous mode [ 353.487085][ T11] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 353.495536][ T11] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 353.528468][ T11] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 353.545979][ T11] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 353.637361][ T11] veth1_macvtap: left promiscuous mode [ 353.660783][ T11] veth0_macvtap: left promiscuous mode [ 353.673784][ T11] veth1_vlan: left promiscuous mode [ 353.688907][ T11] veth0_vlan: left promiscuous mode [ 354.307775][ T11] pimreg (unregistering): left allmulticast mode [ 354.316089][ T7251] loop4: detected capacity change from 0 to 256 [ 354.345451][ T7251] exFAT-fs (loop4): failed to load upcase table (idx : 0x0000fe7f, chksum : 0x39626d3b, utbl_chksum : 0xe619d30d) [ 354.411758][ T29] audit: type=1800 audit(1717519966.642:433): pid=7251 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed(directio) comm="syz-executor.4" name="file2" dev="loop4" ino=1048601 res=0 errno=0 [ 354.609306][ T29] audit: type=1326 audit(1717519966.852:434): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7252 comm="syz-executor.1" exe="/root/syz-executor.1" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fa220c7cf69 code=0x0 [ 354.889508][ T7255] loop3: detected capacity change from 0 to 32768 [ 354.903395][ T7255] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop3 (7:3) scanned by syz-executor.3 (7255) [ 354.924885][ T7255] BTRFS info (device loop3): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 354.937529][ T7255] BTRFS info (device loop3): using crc32c (crc32c-intel) checksum algorithm [ 354.946459][ T7255] BTRFS info (device loop3): using free-space-tree [ 355.182791][ T4478] Bluetooth: hci4: command tx timeout [ 356.517076][ T5112] BTRFS info (device loop3): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 356.793210][ T11] team0 (unregistering): Port device team_slave_1 removed [ 356.955275][ T11] team0 (unregistering): Port device team_slave_0 removed [ 357.262339][ T4478] Bluetooth: hci4: command tx timeout [ 358.327602][ T7298] Bluetooth: MGMT ver 1.22 [ 464.591968][ C0] rcu: INFO: rcu_preempt detected stalls on CPUs/tasks: [ 464.598998][ C0] rcu: Tasks blocked on level-0 rcu_node (CPUs 0-1): P7307/1:b..l [ 464.607579][ C0] rcu: (detected by 0, t=10502 jiffies, g=28361, q=253 ncpus=2) [ 464.615343][ C0] task:syz-executor.1 state:R running task stack:26544 pid:7307 tgid:7304 ppid:5115 flags:0x00000006 [ 464.628591][ C0] Call Trace: [ 464.631933][ C0] [ 464.634922][ C0] __schedule+0xf15/0x5d00 [ 464.639421][ C0] ? __pfx___lock_acquire+0x10/0x10 [ 464.644691][ C0] ? __pfx___lock_acquire+0x10/0x10 [ 464.649977][ C0] ? __pfx_stack_trace_save+0x10/0x10 [ 464.655411][ C0] ? __pfx_mark_lock+0x10/0x10 [ 464.660244][ C0] ? __pfx___schedule+0x10/0x10 [ 464.665160][ C0] ? __might_fault+0x13b/0x190 [ 464.669975][ C0] ? mark_held_locks+0x9f/0xe0 [ 464.674808][ C0] preempt_schedule_irq+0x51/0x90 [ 464.679908][ C0] irqentry_exit+0x36/0x90 [ 464.684374][ C0] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 464.690414][ C0] RIP: 0010:write_comp_data+0x34/0x90 [ 464.695861][ C0] Code: 48 8b 15 ff fa 75 7e 65 8b 05 00 fb 75 7e a9 00 01 ff 00 74 0f f6 c4 01 74 59 8b 82 1c 16 00 00 85 c0 74 4f 8b 82 f8 15 00 00 <83> f8 03 75 44 48 8b 82 00 16 00 00 8b 92 fc 15 00 00 48 8b 38 48 [ 464.715524][ C0] RSP: 0018:ffffc900032ef3c0 EFLAGS: 00000246 [ 464.721652][ C0] RAX: 0000000000000002 RBX: 00000000ffffa878 RCX: ffffffff88bd1f72 [ 464.729668][ C0] RDX: ffff88802b8ada00 RSI: 0000000000000000 RDI: 0000000000000005 [ 464.737685][ C0] RBP: 0000000000003c50 R08: 0000000000000005 R09: 0000000000000000 [ 464.745697][ C0] R10: 00000000ffffa878 R11: 0000000000000001 R12: 00000000000041c8 [ 464.753716][ C0] R13: dffffc0000000000 R14: ffff88802cf2fdc0 R15: 0000000000009950 [ 464.761734][ C0] ? skb_copy_bits+0x3a2/0x7a0 [ 464.766588][ C0] skb_copy_bits+0x3a2/0x7a0 [ 464.771231][ C0] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 464.777188][ C0] nf_ct_frag6_gather+0x3b8/0x29e0 [ 464.782378][ C0] ? __pfx_nf_ct_frag6_gather+0x10/0x10 [ 464.787996][ C0] ? __pfx_lock_acquire+0x10/0x10 [ 464.793094][ C0] ipv6_defrag+0x1df/0x470 [ 464.797582][ C0] ? __pfx_ipv6_defrag+0x10/0x10 [ 464.802590][ C0] nf_hook_slow+0xbb/0x200 [ 464.807063][ C0] __ip6_local_out+0x42a/0x900 [ 464.811877][ C0] ? __pfx___ip6_local_out+0x10/0x10 [ 464.817211][ C0] ? __pfx_dst_output+0x10/0x10 [ 464.822114][ C0] ? ip6_setup_cork+0xbdc/0x1370 [ 464.827111][ C0] ip6_local_out+0x2a/0x4a0 [ 464.831667][ C0] ip6_send_skb+0xcd/0x2d0 [ 464.836149][ C0] ip6_push_pending_frames+0xe0/0x110 [ 464.841588][ C0] rawv6_sendmsg+0x2f14/0x4340 [ 464.846423][ C0] ? __pfx_rawv6_sendmsg+0x10/0x10 [ 464.851595][ C0] ? avc_has_perm_noaudit+0x143/0x3a0 [ 464.857047][ C0] ? avc_has_perm+0x11b/0x1c0 [ 464.861792][ C0] ? __pfx_avc_has_perm+0x10/0x10 [ 464.866885][ C0] ? __pfx___lock_acquire+0x10/0x10 [ 464.872151][ C0] ? sock_has_perm+0x25a/0x2f0 [ 464.877053][ C0] ? __pfx_sock_has_perm+0x10/0x10 [ 464.882223][ C0] ? __import_iovec+0x1fd/0x6e0 [ 464.887136][ C0] ? __pfx_rawv6_sendmsg+0x10/0x10 [ 464.892307][ C0] ? inet_sendmsg+0x119/0x140 [ 464.897038][ C0] inet_sendmsg+0x119/0x140 [ 464.901609][ C0] ____sys_sendmsg+0xa09/0xc90 [ 464.906435][ C0] ? copy_msghdr_from_user+0x10b/0x160 [ 464.911953][ C0] ? __pfx_____sys_sendmsg+0x10/0x10 [ 464.917299][ C0] ? __pfx___lock_acquire+0x10/0x10 [ 464.922576][ C0] ___sys_sendmsg+0x135/0x1e0 [ 464.927308][ C0] ? __pfx____sys_sendmsg+0x10/0x10 [ 464.932596][ C0] ? __might_fault+0x13b/0x190 [ 464.937416][ C0] ? __fget_light+0x173/0x210 [ 464.942151][ C0] __sys_sendmsg+0x117/0x1f0 [ 464.946793][ C0] ? __pfx___sys_sendmsg+0x10/0x10 [ 464.951960][ C0] ? _raw_spin_unlock_irq+0x23/0x50 [ 464.957233][ C0] ? lockdep_hardirqs_on+0x7c/0x110 [ 464.962538][ C0] do_syscall_64+0xcd/0x250 [ 464.967118][ C0] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 464.973084][ C0] RIP: 0033:0x7fa220c7cf69 [ 464.977562][ C0] RSP: 002b:00007fa221a4b0c8 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 464.986079][ C0] RAX: ffffffffffffffda RBX: 00007fa220db3fa0 RCX: 00007fa220c7cf69 [ 464.994094][ C0] RDX: 0000000000000004 RSI: 00000000200000c0 RDI: 0000000000000003 [ 465.002110][ C0] RBP: 00007fa220cda706 R08: 0000000000000000 R09: 0000000000000000 [ 465.010120][ C0] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 465.018133][ C0] R13: 000000000000000b R14: 00007fa220db3fa0 R15: 00007ffd66062cb8 [ 465.026156][ C0] [ 465.029205][ C0] rcu: rcu_preempt kthread starved for 10538 jiffies! g28361 f0x0 RCU_GP_WAIT_FQS(5) ->state=0x0 ->cpu=1 [ 465.040451][ C0] rcu: Unless rcu_preempt kthread gets sufficient CPU time, OOM is now expected behavior. [ 465.050452][ C0] rcu: RCU grace-period kthread stack dump: [ 465.056394][ C0] task:rcu_preempt state:R running task stack:27312 pid:17 tgid:17 ppid:2 flags:0x00004000 [ 465.068195][ C0] Call Trace: [ 465.071507][ C0] [ 465.074474][ C0] __schedule+0xf15/0x5d00 [ 465.078962][ C0] ? __pfx___lock_acquire+0x10/0x10 [ 465.084233][ C0] ? __pfx___schedule+0x10/0x10 [ 465.089145][ C0] ? schedule+0x298/0x350 [ 465.093541][ C0] ? __pfx_lock_release+0x10/0x10 [ 465.098645][ C0] ? __pfx___mod_timer+0x10/0x10 [ 465.103633][ C0] ? lock_acquire+0x1b1/0x560 [ 465.108376][ C0] ? lockdep_init_map_type+0x16d/0x7d0 [ 465.113904][ C0] schedule+0xe7/0x350 [ 465.118066][ C0] schedule_timeout+0x136/0x2a0 [ 465.122978][ C0] ? __pfx_schedule_timeout+0x10/0x10 [ 465.128408][ C0] ? __pfx_process_timeout+0x10/0x10 [ 465.133830][ C0] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 465.139696][ C0] ? prepare_to_swait_event+0xf0/0x470 [ 465.145228][ C0] rcu_gp_fqs_loop+0x1eb/0xb00 [ 465.150144][ C0] ? __pfx_rcu_gp_fqs_loop+0x10/0x10 [ 465.155494][ C0] ? _raw_spin_unlock_irq+0x2e/0x50 [ 465.160764][ C0] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 465.166636][ C0] rcu_gp_kthread+0x271/0x380 [ 465.171396][ C0] ? __pfx_rcu_gp_kthread+0x10/0x10 [ 465.176656][ C0] ? lockdep_hardirqs_on+0x7c/0x110 [ 465.182009][ C0] ? __kthread_parkme+0x148/0x220 [ 465.187097][ C0] ? __pfx_rcu_gp_kthread+0x10/0x10 [ 465.192357][ C0] kthread+0x2c1/0x3a0 [ 465.196487][ C0] ? _raw_spin_unlock_irq+0x23/0x50 [ 465.201754][ C0] ? __pfx_kthread+0x10/0x10 [ 465.206401][ C0] ret_from_fork+0x45/0x80 [ 465.210883][ C0] ? __pfx_kthread+0x10/0x10 [ 465.215529][ C0] ret_from_fork_asm+0x1a/0x30 [ 465.220369][ C0] [ 465.223423][ C0] rcu: Stack dump where RCU GP kthread last ran: [ 465.229789][ C0] Sending NMI from CPU 0 to CPUs 1: [ 465.235050][ C1] NMI backtrace for cpu 1 [ 465.235067][ C1] CPU: 1 PID: 7300 Comm: syz-executor.3 Not tainted 6.10.0-rc2-syzkaller-00007-gf06ce441457d #0 [ 465.235097][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/02/2024 [ 465.235111][ C1] RIP: 0010:hlock_class+0x32/0x130 [ 465.235148][ C1] Code: ff df 53 48 89 fb 48 83 c7 20 48 89 fa 48 c1 ea 03 0f b6 04 02 84 c0 74 08 3c 03 0f 8e da 00 00 00 0f b7 5b 20 66 81 e3 ff 1f <0f> b7 db be 08 00 00 00 48 89 d8 48 c1 e8 06 48 8d 3c c5 c0 b2 26 [ 465.235174][ C1] RSP: 0018:ffffc9000319f750 EFLAGS: 00000006 [ 465.235195][ C1] RAX: 0000000000000000 RBX: 00000000000001bd RCX: 0000000000000003 [ 465.235212][ C1] RDX: 1ffff1100bb2aca0 RSI: ffff88805d9564e0 RDI: ffff88805d956500 [ 465.235230][ C1] RBP: ffffc9000319f8a0 R08: 0000000000000000 R09: 0000000000000001 [ 465.235247][ C1] R10: ffffffff9426b2f7 R11: 0000000000000000 R12: ffff88805d955a00 [ 465.235264][ C1] R13: 0000000000000008 R14: 0000000000000003 R15: 1ffff92000633ef2 [ 465.235282][ C1] FS: 00007ff59ed756c0(0000) GS:ffff8880b9300000(0000) knlGS:0000000000000000 [ 465.235309][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 465.235328][ C1] CR2: 00007fa220da4188 CR3: 0000000028b4e000 CR4: 00000000003506f0 [ 465.235345][ C1] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 465.235362][ C1] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 465.235379][ C1] Call Trace: [ 465.235388][ C1] [ 465.235397][ C1] ? show_regs+0x8c/0xa0 [ 465.235435][ C1] ? nmi_cpu_backtrace+0x1d8/0x390 [ 465.235465][ C1] ? nmi_cpu_backtrace_handler+0xc/0x20 [ 465.235500][ C1] ? nmi_handle+0x1a9/0x5c0 [ 465.235540][ C1] ? hlock_class+0x32/0x130 [ 465.235571][ C1] ? default_do_nmi+0x6a/0x160 [ 465.235604][ C1] ? exc_nmi+0x170/0x1e0 [ 465.235635][ C1] ? end_repeat_nmi+0xf/0x53 [ 465.235689][ C1] ? hlock_class+0x32/0x130 [ 465.235719][ C1] ? hlock_class+0x32/0x130 [ 465.235750][ C1] ? hlock_class+0x32/0x130 [ 465.235780][ C1] [ 465.235787][ C1] [ 465.235796][ C1] mark_lock+0xb5/0xc60 [ 465.235839][ C1] ? hlock_class+0x4e/0x130 [ 465.235869][ C1] ? mark_lock+0xb5/0xc60 [ 465.235905][ C1] ? __pfx_mark_lock+0x10/0x10 [ 465.235943][ C1] ? __pfx_mark_lock+0x10/0x10 [ 465.235981][ C1] ? irqentry_exit+0x3b/0x90 [ 465.236005][ C1] ? lockdep_hardirqs_on+0x7c/0x110 [ 465.236048][ C1] __lock_acquire+0x12b1/0x3b30 [ 465.236090][ C1] ? hlock_class+0x4e/0x130 [ 465.236120][ C1] ? __pfx___lock_acquire+0x10/0x10 [ 465.236158][ C1] ? mark_lock+0xb5/0xc60 [ 465.236194][ C1] ? __pfx___lock_acquire+0x10/0x10 [ 465.236233][ C1] ? __pfx_mark_lock+0x10/0x10 [ 465.236271][ C1] lock_acquire+0x1b1/0x560 [ 465.236310][ C1] ? __might_fault+0xe3/0x190 [ 465.236336][ C1] ? __pfx_lock_acquire+0x10/0x10 [ 465.236377][ C1] ? __pfx___might_resched+0x10/0x10 [ 465.236405][ C1] ? __lock_acquire+0x14f4/0x3b30 [ 465.236444][ C1] ? __might_fault+0xe3/0x190 [ 465.236469][ C1] __might_fault+0x11b/0x190 [ 465.236494][ C1] ? __might_fault+0xe3/0x190 [ 465.236518][ C1] copy_fpstate_to_sigframe+0x156/0xaa0 [ 465.236555][ C1] ? __pfx___lock_acquire+0x10/0x10 [ 465.236594][ C1] ? __pfx___lock_acquire+0x10/0x10 [ 465.236633][ C1] ? __pfx_copy_fpstate_to_sigframe+0x10/0x10 [ 465.236668][ C1] ? __pfx___futex_wait+0x10/0x10 [ 465.236695][ C1] ? find_held_lock+0x2d/0x110 [ 465.236726][ C1] get_sigframe+0x455/0x930 [ 465.236757][ C1] ? __pfx_get_sigframe+0x10/0x10 [ 465.236786][ C1] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 465.236821][ C1] x64_setup_rt_frame+0x129/0xce0 [ 465.236854][ C1] ? __pfx___rseq_handle_notify_resume+0x10/0x10 [ 465.236883][ C1] ? __pfx_x64_setup_rt_frame+0x10/0x10 [ 465.236917][ C1] arch_do_signal_or_restart+0x5e6/0x7e0 [ 465.236950][ C1] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 465.236984][ C1] ? __do_sys_rt_sigreturn+0x167/0x230 [ 465.237016][ C1] ? __pfx___do_sys_rt_sigreturn+0x10/0x10 [ 465.237051][ C1] syscall_exit_to_user_mode+0x14a/0x2a0 [ 465.237077][ C1] do_syscall_64+0xda/0x250 [ 465.237104][ C1] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 465.237137][ C1] RIP: 0033:0x7ff59e07cf67 [ 465.237156][ C1] Code: 14 25 28 00 00 00 75 05 48 83 c4 28 c3 e8 e1 20 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 <0f> 05 48 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 [ 465.237181][ C1] RSP: 002b:00007ff59ed75178 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 465.237204][ C1] RAX: 00000000000000ca RBX: 00007ff59e1b3fa8 RCX: 00007ff59e07cf69 [ 465.237222][ C1] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007ff59e1b3fa8 [ 465.237238][ C1] RBP: 00007ff59e1b3fa0 R08: 00007ff59ed756c0 R09: 00007ff59ed756c0 [ 465.237256][ C1] R10: 0000000000000000 R11: 0000000000000246 R12: 00007ff59e1b3fac [ 465.237272][ C1] R13: 000000000000000b R14: 00007ffcfe8eaa10 R15: 00007ffcfe8eaaf8 [ 465.237294][ C1]