last executing test programs: 1m37.905775629s ago: executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TIPC_NL_BEARER_ADD(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="0100000000000000000015000000140001800d0001007564ce6937d0f545e9"], 0x28}}, 0x0) 1m35.801718447s ago: executing program 2: bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) syz_open_dev$dri(0x0, 0x0, 0x0) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(0xffffffffffffffff, 0xc01064b5, 0x0) ioctl$DRM_IOCTL_MODE_OBJ_GETPROPERTIES(0xffffffffffffffff, 0xc02064b9, &(0x7f0000000dc0)={0x0, 0x0}) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x0) mkdir(&(0x7f0000000540)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000340), 0x0, &(0x7f0000000080)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=@base={0x1}, 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) chdir(&(0x7f0000000140)='./bus\x00') bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='freezer.self_freezing\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000280), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000003, 0x10, 0xffffffffffffffff, 0x0) setreuid(0x0, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="d8000000180081054e81f782db4cb904021d0800fe00fe05e8fe55a10a0015000600142603600e12ffff0e007f370301a800160020000340ff5c141cc11eda4cc1d67f6f94007134cf6edb8000a0a542978ff507a290457f0189b3f3267ce06bbace8017cbed4c2ee50000f409000ed6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00350db798262f3d40fad95667e006dcdf63951f215c3f8b6ad2cbe026600bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e97", 0xc8}], 0x1}, 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0xc0189436, &(0x7f0000000140)) 1m31.848479896s ago: executing program 2: syz_emit_ethernet(0x3e, &(0x7f0000000000)={@local, @broadcast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x21, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @parameter_prob={0xc, 0x0, 0x0, 0x6, 0x6, 0x0, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @multicast2, @dev}}}}}}, 0x0) 1m30.236064602s ago: executing program 2: bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000240)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x9, 0x4, &(0x7f0000000280)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00'}, 0x70) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x9, 0x4, &(0x7f00000008c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00'}, 0x70) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000040)={@cgroup=r1, r2, 0x2, 0x2}, 0x10) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x9, 0x4, &(0x7f00000008c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00'}, 0x70) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000040)={@cgroup=r4, r5, 0x2, 0x2}, 0x10) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000240)={@cgroup=r3, r0, 0x2, 0x0, 0x4000}, 0x10) 1m29.970583746s ago: executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) r2 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000980)={0x0}, 0x10) stat(&(0x7f00000002c0)='./file1\x00', &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x0}) quotactl_fd$Q_GETQUOTA(r2, 0xffffffff80000701, r3, &(0x7f0000000400)) quotactl_fd$Q_GETQUOTA(r1, 0xffffffff80000700, r3, &(0x7f0000000480)) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r4 = getpid() sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r7 = socket$inet6(0xa, 0x3, 0x0) capset(&(0x7f0000000080), 0x0) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) ptrace$setregset(0x4205, 0xffffffffffffffff, 0x0, &(0x7f0000000040)={&(0x7f0000000000)="7d877333589d991587788cb40d5777", 0xf}) connect$inet6(0xffffffffffffffff, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(r7, 0x29, 0x23, &(0x7f0000000340)={{{@in=@private, @in=@local, 0x0, 0x0, 0x0, 0x0, 0xa}, {}, {0x1}, 0x0, 0x0, 0x1}, {{@in6=@mcast2, 0x4d3, 0x33}, 0x0, @in=@dev, 0x0, 0x0, 0x0, 0x7}}, 0xe8) sendmmsg(r7, &(0x7f0000000480), 0x2e9, 0xffd8) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x0) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(0xffffffffffffffff, 0xc0189379, &(0x7f0000000000)={{0x1, 0x1, 0x18, r0}, './file0\x00'}) r9 = socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$devlink(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_SB_PORT_POOL_GET(r9, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000005c0)={0x4c, r10, 0x1, 0x0, 0x0, {0x4f}, [{{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xab}}, {0x8}, {0x6}}]}, 0x4c}}, 0x0) getsockopt$PNPIPE_HANDLE(r8, 0x113, 0x3, &(0x7f0000000180), &(0x7f00000001c0)=0x4) 51.089905602s ago: executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) r2 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000980)={0x0}, 0x10) stat(&(0x7f00000002c0)='./file1\x00', &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x0}) quotactl_fd$Q_GETQUOTA(r2, 0xffffffff80000701, r3, &(0x7f0000000400)) quotactl_fd$Q_GETQUOTA(r1, 0xffffffff80000700, r3, &(0x7f0000000480)) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r4 = getpid() sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r7 = socket$inet6(0xa, 0x3, 0x0) capset(&(0x7f0000000080), 0x0) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) ptrace$setregset(0x4205, 0xffffffffffffffff, 0x0, &(0x7f0000000040)={&(0x7f0000000000)="7d877333589d991587788cb40d5777", 0xf}) connect$inet6(0xffffffffffffffff, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(r7, 0x29, 0x23, &(0x7f0000000340)={{{@in=@private, @in=@local, 0x0, 0x0, 0x0, 0x0, 0xa}, {}, {0x1}, 0x0, 0x0, 0x1}, {{@in6=@mcast2, 0x4d3, 0x33}, 0x0, @in=@dev, 0x0, 0x0, 0x0, 0x7}}, 0xe8) sendmmsg(r7, &(0x7f0000000480), 0x2e9, 0xffd8) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x0) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(0xffffffffffffffff, 0xc0189379, &(0x7f0000000000)={{0x1, 0x1, 0x18, r0}, './file0\x00'}) r9 = socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$devlink(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_SB_PORT_POOL_GET(r9, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000005c0)={0x4c, r10, 0x1, 0x0, 0x0, {0x4f}, [{{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xab}}, {0x8}, {0x6}}]}, 0x4c}}, 0x0) getsockopt$PNPIPE_HANDLE(r8, 0x113, 0x3, &(0x7f0000000180), &(0x7f00000001c0)=0x4) 50.147139611s ago: executing program 4: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x200) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000040)={0x1, 0x6576, 0x9, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r2, 0xc01064b3, &(0x7f0000000300)={r3}) r4 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r4, 0xc02064b2, &(0x7f0000000040)={0x6, 0xfd, 0x1f, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r4, 0xc01064b3, &(0x7f00000002c0)={r5}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r2, 0xc00464b4, &(0x7f0000000200)={r3}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r4, 0xc00464b4, &(0x7f0000000240)={r3}) r6 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000140), r0) sendmsg$NLBL_MGMT_C_ADD(r1, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000003c0)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="010000000000000000000100000006000b00020000000c000100535e7d2721239c0008000200050000"], 0x58}}, 0x0) 49.178360009s ago: executing program 4: r0 = syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000500)='./file0\x00', 0x21c916, &(0x7f0000000400), 0x1b, 0x4c5, &(0x7f0000000ec0)="$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") r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000004b64ffec850000006d000000850000000e00000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='sched_switch\x00', r1}, 0x10) sendfile(r0, 0xffffffffffffffff, 0x0, 0x0) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f0000000240)={0x0, @local, @private}, &(0x7f0000000380)=0xc) r2 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000540)='cgroup.freeze\x00', 0x0, 0x0) write$cgroup_int(r2, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x0, 0x9}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r3 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x400000000000041, 0x0) waitid(0x1, 0x0, &(0x7f0000000300), 0x20000000, &(0x7f0000000700)) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) writev(r6, &(0x7f0000000000)=[{&(0x7f0000000080)="390000001300090468fe0700000000000000ff3f04000000480100100000000004002b000a00010014a4ee1ee438d2fd000000000000007208", 0x39}], 0x1) r7 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x1, 0x4, 0xfff}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb7"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000640)={{r7}, &(0x7f00000005c0), &(0x7f0000000600)='%pi6 \x00'}, 0x20) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000008c0)={&(0x7f00000003c0)='fscache_access_volume\x00', r8}, 0x10) rt_sigsuspend(0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000400)='ext4\x00', &(0x7f0000000440)='./file0\x00', 0x0, &(0x7f0000000480), 0x1, 0x3c6, &(0x7f00000004c0)="$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") r9 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file1\x00', 0x0, 0x0) ioctl$FS_IOC_ENABLE_VERITY(r9, 0x40806685, &(0x7f0000000000)={0x1, 0x0, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x0}) 49.168762782s ago: executing program 0: r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r0, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r1, {0x2, 0x0, @dev}, 0x2}}, 0x2e) setsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f0000000540)={{{@in, @in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0xa}}, {{@in=@multicast2, 0x0, 0x32}, 0x0, @in6=@mcast2}}, 0xe8) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$L2TP_CMD_TUNNEL_GET(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x14, r3, 0x325, 0x0, 0x0, {0x8}}, 0x14}}, 0x0) 48.310444581s ago: executing program 0: openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000000080), 0x0) r0 = syz_io_uring_setup(0x239, &(0x7f0000000080)={0x0, 0x0, 0x10100}, &(0x7f0000000200)=0x0, &(0x7f00000001c0)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000380)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}) io_uring_enter(r0, 0x2def, 0x0, 0x0, 0x0, 0x0) 47.230131224s ago: executing program 0: socket$netlink(0x10, 0x3, 0xa) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) unshare(0x0) syz_open_dev$usbfs(&(0x7f0000000100), 0x203, 0x8401) ioctl$USBDEVFS_BULK(0xffffffffffffffff, 0xc0105500, &(0x7f0000000000)={{}, 0x0, 0x0, 0x0}) ioctl$VHOST_SET_VRING_BASE(0xffffffffffffffff, 0xaf01, 0x0) eventfd(0x0) ioctl$VHOST_SET_VRING_ADDR(0xffffffffffffffff, 0x4028af11, 0x0) r1 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000000), 0x88002, 0x0) read$FUSE(r1, &(0x7f0000000100)={0x2020}, 0x2020) write$UHID_DESTROY(r1, &(0x7f0000002140)={0xa313054}, 0x4) write$UHID_GET_REPORT_REPLY(r1, 0x0, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f00000000c0), 0xffffffffffffffff) r2 = add_key(&(0x7f0000000000)='ceph\x00', 0x0, &(0x7f0000000080)="1422daecbd393c6c4ea35ec10e85dfdcc1dd3cef3bedbd3ae136bf6844d33708da723ab235eee5a32c99b636428f875f6d589a", 0x33, 0xfffffffffffffffb) request_key(&(0x7f0000000040)='.request_key_auth\x00', &(0x7f0000000280)={'syz', 0x2}, &(0x7f00000002c0)='\x01\x04^', r2) request_key(0x0, &(0x7f0000000340)={'syz', 0x0}, 0x0, r2) userfaultfd(0x801) prlimit64(0x0, 0x2, &(0x7f0000000200)={0x2000000007, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) preadv2(0xffffffffffffffff, &(0x7f0000002800), 0x0, 0x0, 0x3, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000340), 0xffffffffffffffff) read$FUSE(0xffffffffffffffff, &(0x7f0000000440)={0x2020}, 0x2020) openat$pfkey(0xffffffffffffff9c, 0x0, 0x400, 0x0) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000180)='blkio.bfq.time_recursive\x00', 0x275a, 0x0) ioctl$EXT4_IOC_ALLOC_DA_BLKS(0xffffffffffffffff, 0x6611) 46.705511095s ago: executing program 3: r0 = syz_mount_image$btrfs(&(0x7f0000000200), &(0x7f0000005600)='./file0\x00', 0x800, &(0x7f0000000240), 0x0, 0x559e, &(0x7f0000005680)="$eJzs3X9sVeX9B/BzWwoN+C39jhUYfxAgBoMkyJYtjqB4MQa24eKlgsKcCEQlBivYRDcYqUWSZcaghU4EF5GQaDJjscM/FMywy7CMZfzY5hZjs4JSaZZsAzVrHDG69N77XO49l9tembNOXy/SnvPcz3me+9yT88d9X/qcGwEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAEAURUcSc9+d0f3i0ZE1X77/Hz+e+OjGn4zfvX/roVvu23T/gjMjbto5a1nf+mlN8zdsbDjS/PS+ObdGUSLdL5Htf9u136q/88bbvlsdBly+MLOtrS31lJmuJzON4QUP9vcr/FkRRVFVbIDK7PbV7E5FwQC53cbiAQf0Tuui6O7J8ya1dT01bklyYU/xS6df9VBPYKhkr6ue89dSMv27InZErp136SUKLtFM//gF96m8CADgY5mZSm9yb0ezb3Fz7eZ4PdZOxtotsXZ4h9CS37gYmXGHl5rnpHh9iOaZzESFESXnGatnz3+unYr3j7VjUeNjzLPw0GykqS41z7Wx+lDNEwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAOCzZOzxo2tWtD2y575fdtQceff9OVc+8KWOw22LT4y8eunKHWum/HTWsr7105rmb9jYcKT56X1zbo2i2nS/RKZ74kTL5b9NjZ3fvXfcG427n6vpq8yOG7bD8g6OXg87s0ZH0cq8Sk8Y9q81UZQqLKSb0Y7iwl3pnW+HAgAAAJ8nX0n/rsi1M3GwqqCdSKfJRPpfkAmL77Quiu6ePG9SW9dT45YkF/Zc/HipEuMlLzherl17/ieRF4xD/I2Pd74eDm0sGmdg8RHjef7SMWPefmty/eSvT5v7xA3PjOru+r8nZ2xJ/bGu5oUrru+tf/a6ovxfO3D+D2dO/gcAAOA/If/HxxnYYPn/jqVTt7z+i2Grft3a8MTB+h1/bv3OMzsXneq54Ud9L09N3v7o1UX5f1LBUxbl/zDjkP8roovL/wAAAPBZ9t/O/8micQY2WP5vONM3+wcHX6vr+PucxXt+9dAVi8+e/tv8U7t3DV9zR8v6uoeuLMr/M8vL/8Pypx0e/F2Y8OrRUTSz/JMKAAAAFAj/737+o4WQ1zOfHMTz+rX/vKp5380ffPMbD97zpzff/s2xA7MnrdteN/PgyzfVf1j5ve3dRfk/WV7+r/p0Xi4AAABQhuePrpw773jPucfPvtB18vDu3pMznjyzrqnvdOslLatXbTr2WlH+T5WX/0cMzcsBAAAALuDeO59bsfnVl/oe2H/X2Ck9FVc1XpK4ZduOqU0TPuq8tPfy7VuL8v/y8vL/yOw2u/Ih06kz/BVC6+goqu7fWZspHIparskVAAAAgE9IyOlbP1ixbOzOsb3jj59+rObQG4dn/2Vt55yN13RXdW/uXNZ4WdH9AkJiL3X//3Cng7D+v+D+f0Xr//MKmbv+zXZjAAAAAL6Iitfzh9vjZ765oNT375e7/n9J3cQTiba33lv11XMHzo1ZsP/7129aV9/be8+El37/wz9M/6i6KP83l5f/K/O3n+T3/wEAAMBF+F/7/r+lReMMbLD7/zdV9DWsWrd3+uota7csTCw7UH3qwdV731+w5l9Tb36+qea6A0X5v6W8/B+2o/JfXkc4P5tGR9H4/p3s3QR/Hqa7OlZor8orZE58rMeNoUe20D4ir5C2Ntbja6OjaHL/TnOs8P+h0BIrnK3JFnbFCsdCIXs95Ap7YoWOcKVtq8lON154MRSyCyzawwqKUbklEbEe75Xq0V+4YI+u3JMDAAB8oYTwnM2yVYXNKB5l2xODHTBysAMqBjugcrADhsUOiB9Y6vFoeWEhPH575yMbNjVMSb7y8NzHfvbms40T9j1+WV3v5g9f2XbvxJ3TW6YW5f9d5eX/cCqGZzal1v9HYf1/9nsNc+v/l4dCbazQHgqp+B0DUuE5MmH34fActalsj7PjcwUAAAD4XAufC1QO8TwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA/s3evcdJVd0JAj/d9INumqaNE9GMk3TUgGakaWwNw+AoaoxGRZpZddxkNBBoEGmE8FgFURtQZxziZ3ztrJnoCAoiu+qHGFeDwUhcxIw6iWLiA/Cxjq7r+h6VGM2E/XTfOkXVrS67EFDa+X7/6DpVv/O89eg69946FwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACA/xjuPfjlk4YunP0PHzace8nqqqmL/kfH6Mv+cNW3vvjUPy5b9G9h/i9GnLll3kEXHjd/wbR/6Vi++ogzQmjtKleWFC977oqvPtS613HP3jFw48wbb63fUpWpNxMP/Tr/lGfuXBxbfbF/CHeXhVCRDgypSwKVmft1sb5960LYI2wLZEu01SYl0g2HB2pCWBK2BbJVra4JoS4ncMqG+++7vDNxTU0IXwkhVKfbeKY6aaMmHRhUlQRq04HpFUngt1sT2cBPypMA7LD4Zsi+6Fe15mdo6L5ckddf5U7r2KcrPbw+MdFQPN/rR+3iTuWoSj/QukNPW0F17BIFb4+13m294N1WsJ2v8LTlfpHKfEPZui1UHcontk0aP6d9dnykPDQ19SlW0y56np9+e/6E7Un3mtdh7EDDTnkdXvrYiun9lo2+9OrNvxqz4ayaA3a0m0/lbNLc9K5WHTKvuV7zPEajfJ70grdfwbekRl+6Qghbzz17xtfnTDz7iD63PLnu1QcfrNty9pwFvzhz4nmLLj55w7/Pf6lg/t/w0fP/+HKOt+V5uWOrH9Ync/P4SF1MvFmfzM0BAACg1+gNe01Xnv/6X73+/bWtMxed/u23Dj73w71afz3i/gFVB7yxrqn1/I2ff6Vg/t9Y2vH/eMi/Lne0a0MY1ZVYNCCEvbseTwIrY3e+OyCEL3elWvMDR6UCa0PYpytxULaqVIm+sURjKvByfSYwKhVYHwOtqcDyGLgiFbg4BlalAhNiYG0qcHQMhCn54/hqfWYcJQdqYmBcshFXxbMQ3qmPraW21aZsVQAAADtJZnZYmX8351yHHc0Qp5eranrKEM/ALpqhOlVDegabnVYVraGipxrKe6ohO+6Ojx5+Qc1lPdVccBpGWX6GG9f85X2LXjzsC2P3mvj5xUMvmPKz8eGst++uerx5yYtv7XvEzesK5v/NHz3/r+6mI2UFx/9DGNv1N+Yuz0Tas/FxrXkZAAAAgB1w0R//xR61Lw85oGHT+2X3zl/7xKMrfrl5j1NOf3/c8a//8PCaxnsL5v+jSjv/P+4T6ZOTOTwSd0NMHRBCc34gqXZkYSA56t0vEwAAAIDeIHs8PnssfErmNjlFOz2fLszfup3544H/Ud3m//09/7P2jq3/+mLZBd89d0TNgKX/9GrHhBNOPvqW47/1zj4VB/yyvGD+31ra+f+1+bdJJ9bHXlw9IIS+OYEHYy87A10aY+D5I/MDmfGvjxtgcawqc2JCtqrFscS4GGhOBZYUK/FotsTe+YHMk5VtfFF2HFMyJXICAAAA8ImLuwPicfl4/n/LGSNO++vvzfrbha88eN7qCy75q+Ed80eedP/THzbMvXJp2PTmEQXz/3Hbd/5/1zy44PT+9n4hDK0IoU/6hwGP1CYLA8ZAXVkmcW9tUlefdFULa0MY2TmwdFUvZNb/r0ivMfh4TVJVDOy93y1vD+pMLKsJYWhu4IlvLz2sMzEnFcg2flpNCF/qHG268bv6Jo1Xphu/tm8IX8wJZKua0DeEzsaq0lX9r+rMdQzSVa2qDmHPnEC2quHVIcwNAPRW8X/pxNwHZ82dN3V8e3vbzF2YiDvxa8KkKe1tTROmt0+sLtKniak+561jtKBwTKVe+mZTZo2ixSsnV5aSzv5QsDm3rcyO/IIzBzP345ehyq5xHlKZd7clPeQD9y9sIuR8lSo25PJdPOTa3Eq2PYkF9cf8VaFf6DtnVtvMpvPGz549c1jyt9TshyR/43GmZFsNS2+r2u76VsLLo+hyWSkfd1sNyq1k6OxpM4bOmjtvyJRp4ye3TW47p+XQP2sZMXz410YM7RxUc/K3h5EO6q7m1Ei3Li1xWDtxpF+oyKnkk/jQkJCQ6G2J/f7L5odH77n+nOt/9tqPz+/3zdPu3fvImT889KqpD1Xve/ji24ccWDD/n/HR8//4qRM/+DPrMxQ7/t8QD/Mnj287zD8uBpaUevy/odjR/OyJAY2pQEcMdDjMDwAAwGdD3B0Z92bGndKbb1m/buOSlrk/aHin5dY17Utvuum+U39y58ATvjQ47LXhuhM+VzD/7yjt9/87af3/7NL1JxRb5v+gWKK52Pr/6WX+s+v/dxRb/z+9zH92/f8ln8L6/3OygdQmecf6/wAAwGfBJ7f+f4/L+6cvEFCQocfl/dMXCCjI0OMy/qVeIGC71/9f8+Bff6Wq35g7/qTlN/WXvPZ39xzWeuS6zTP/5Etb10+877qxt6wpmP9fUdr838L9AAAAsPv4z5ddU3H02Xff0bJu6sZxbw5+98m3lgzq80HF0Q+3j3xh4Bu3nlcw/19S2vz/k1//LxQ7/7+xWKC12MKA1v8DAACglyq2/t89Q1sa/zCm/x+eHvab5Q/ePPqnj/z898v3+/mJPyvfZ8Gxz8+8bFLB/H9VafP/eNpFeV7u2JsP65M17UJ6Tbs367M/GQAAAIDeoTw0NVWWmDdvYdSjPn6bT2eWAv2odK7vvXLt2ZtfmH7c46ev+7uaEwbvOWHaBasa/2b4gXd+ftQley7ddGrB/H9tafP/vN9lXPrYiun9lo2+9MOrN/9qzIazag7YdvwfAAAA2HVK3S8BAAAAAAAAAAAAAAB8+s7tWHzhI8uOfe+bt//F/kcseXXwbXcd+Lsh/V664qoHJq1648zJXy/4/X8Y21Wu2O//43X/4u8L/igvd2y15/X/MvdPOfH2uV1LFj5SH8L+uYGpC6fuETLX5h+cG7jvjIMGdiYWpkusefbolzoT30kHjh/yuS2dicNTgXFxkcR90oF4VcUt/VOBuLzi4+lA3B6r0oGqTOCy/sk4ytLb6pW6ZFuVpbfVxroQBuQEstvq7rqkjbL0AK9JBbID/F46EAd4ciZQnu7V7f2SXsVAXSx6Q7+kVwAA7Lbit8DKMGlKe1tz/Aofb79QkX8b5S1ZtqCw2rISm9+UWZps8crJlaWk+6S/i2671nhlqO4cwrCCr6u5Wcq6Rrlzaulh0/1RkSH3tNpbeZFyadu76aqKj6gmGVHThOntEyt7HHhLz1kOqegxy7CCyU5ulvKuTVpCLSX0pYQRlbhtSuhyvF8empr6pHL9eQw2hDw9vSJK/b1+7jp/xV4FuXluO/TKt758zE+f++CfP/9E/2+cVnP7rO+/e+KvX7//wEOOuG5C05otBfP/htLm/9W549qSuRhAR7yy3sgBIYwrcUQAAADw2XfbRbfecfr09a9MWlvx5GOPTS0fc3rl1vl3zp93ycZ7Fx9/2cErdjR+2Fm//f5vBu//b89e9dJPR+7zwA03/58nD3v8z3//8I8eeqduZZ+x7xXM/xtLm//HPViZQ8HJ3o618fr/iwaE0HVp/YYksDIO97sDQvhyV6o1lkguqH9CLNGcBFbGHSYHxRLjWvOr6hsDq1KBl+szgbWpwPoYyOyluCVkduVcWR/CYV2psfklZsQSDanAmBhoTAWaYqA5FegfA6NSgdf6ZwKtqcDDMRCm5G+rH/fPbCsAAIDtkZlnVebfDel53qqKnjKU9ZShtqcM5T1lqO4pQ7FRxPt3xAyVqZNXynIyVaZrrUnVUpAhXgx/u/tVkCE8mp8zXbCg6Xj+QfZ8g7L8DFf+4NlT1w+e/tDqzcd8beBt/zhkz4Obp9e9t+CGp3475pzrnv/TQQXz/+bS5v+1+bdJ6+vj/H/b9f+SwIOxe1fHU8cbY+D5I/MDmR0D6+Nkd3G2qtZMicykfXEsMSoGGlOBGTEwKhUYNzYTWDIwP5CZaWcbX5RtfEqmRE4AAAAAPnFxB0HcTRPn/zce9YOr3x8wccuyeTPvH9vyxMmjv3H1XT+6d/9ld767YvCAce99p2D+P6q0+X9sr19uYxfH3rzYP4S7y7b1JhsYUpcE4n6Muvjz+H3rQtgjZwdHtkRbbVKiKtVweKAm+YV6Vbqq1TXJGgPx/ikb7r/v8s7ENTUhfCVn70u2jWeqkzZq0oFBVUmgNh2YXpEE4p6fbOAn5UkAdlh2r2B8QWVOdclq6L5ckdffZ+WaoOnhFewD7SZfd7+52lWq0w9k9qlmbd/TVlAdu0TB22Otd1tvfLc1eLflfpHKfEPZui1UHcontk0aP6d9dnwk95esBXbR85z7K9VS0jvhddjx8Xvbs+p0B5pTHx/N3Zfr/nVYFqu79LEV0/stG33p1Zt/NWbDWTUHlNyNIuIPhX+05X9XPpWzeXe16pB5zfW6z5NWnye98d9Ao6cthHDZ9cfsu+TdX+/33A3Pnbqu7Maxr/7lrHs2Lf+bysNHrXv/yaGjLy+Y/7eWNv+vSN12+V3cmLMGhHBgzsZ9JG7+YwYkn4M5geRTcs/CQHLI/V/ri35yAgAAwM6W3d2R3V8wJXObnBCenicX5m/dzvxxf8WobvOX2u9j121cedLQN6474G8vOPGNv7/28Kceuv6ysnXL//vYD1avuXzxe08UzP/HffT8v2+qm47/O/7PLuL4f7d2913RfdMPdOzQruiC6tglHP/v1u7+bnP8v1uO/zv+3x3H/3vg+H+3dvenreBb0gxfujonwdff+fPfTbzpg7mN+x180lPPHDrxun+6quXuu0555b+de9601761uWD+P6O0+b/1/7pftC+7/t+4Yuv/zSi2/l+H9f8AAIBdqshCc+l5XsHqfQUZ0qv3FWTocYHAHpcYtP7fdq//t3Dkv1904Q+fb7n2nTvHXb5m07Fnvvr0utXPzFpx3Lnnv9V6112tBfP/jtLm//Hl0C+39d6y/l/j2CJVXREDMywMCAAAwO6o2A4CAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAPl2HnvbO+5d8/R/aBv1ixc1/f+v/+7/P1q594JvfuGn4L6f86RllazZcM+LMLfMOuvC4+Qum/UvH8tVHnBHClK5yZUnxsueu+OpDrXsd9+wdAzfOvPHW+i3VmXorM7d/nJc7tvphfQhLch6pi4k36zvvbAuccuLtcys6E4/Uh7B/bmDqwql7dCaW14cwODdw3xkHDexMLEyXWPPs0S91Jr6TDhw/5HNbOhOHZwJl6e5e1z/pblm6u5f3D2FATiDb3bP751eVbeO4TKA83caKuqSNGKiLRa+tS9qIgfZYYkrfEIZWhNAnXdU/VydV9UlXdU91UlWfdFUXVYcwMoRQka7quaqkqor0yB+tSqqKgb33u+XtQZ2JpVUhDM0NPPHtpYd1JmamAtnG/1NVCF/qfMmkG/9xZdJ4Zbrx/1oZwhdDCFXpEu9VJCWq0iVeqAhhz5zAto1YEcLcwGdD/PSZmPvgrLnzpo5vb2+buQsTVZm2asKkKe1tTROmt0+sTvWpmLKc9NYFH3/sm96eP6HzdvHKyZWlpCsy5Sq7unxIZd7dlt2997FftbmVbHs+CuqP+atCv9B3zqy2mU3njZ89e+aw5G+p2Q9J/vbJRJNtNay3bKtBuZUMnT1txtBZc+cNmTJt/OS2yW3ntBz6Zy0jhg//2oihnYNqTv7ujJEu/eRH+oWKnEo+ife/hIREb0uU5326Ne/un+MFX/S3dbQyVHd9QBdMK3KzlHWNcmcM+qiPOeKP8zWlxxENK5g4FGQ5pOcsLQWTiW1ZapIsXV/rCiaHuTWVd23SeL88NDX1KbYdGvLv5m7e13dg8z6d2XSlpgEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA+P/swIEAAAAAAJD/ayNUVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVYQcOBAAAAACA/F8boaqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqgo7cCwAAAAAIMzfOoyeDQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAC4FAAA//8fSxmR") chdir(&(0x7f0000000040)='./file0\x00') r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.current\x00', 0x275a, 0x0) ioctl$BTRFS_IOC_SUBVOL_SETFLAGS(r0, 0x4008941a, &(0x7f0000000080)=0x2) ioctl$BTRFS_IOC_SEND(r1, 0x40489426, &(0x7f0000000140)={{}, 0x0, 0x0, 0x0, 0xa, 0x10}) 44.949106939s ago: executing program 0: bpf$PROG_LOAD_XDP(0x5, &(0x7f00000000c0)={0x2, 0x3, &(0x7f0000000200)=ANY=[@ANYBLOB="1800000000fcff0000000000000000009500000000000000"], &(0x7f0000000000)='syzkaller\x00', 0x4, 0xab, 0xffffffffffffffff}, 0x80) 44.693664702s ago: executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000001c40)=@newtaction={0xf0, 0x30, 0x1, 0x0, 0x0, {}, [{0xdc, 0x1, [@m_police={0x6c, 0x1, 0x0, 0x0, {{0xb}, {0x40, 0x2, 0x0, 0x1, [[@TCA_POLICE_TBF={0x3c}]]}, {0x4}, {0xc}, {0xc}}}, @m_police={0x6c, 0x2, 0x0, 0x0, {{0xb}, {0x40, 0x2, 0x0, 0x1, [[@TCA_POLICE_TBF={0x3c, 0x1, {0x1}}]]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xf0}}, 0x0) 43.752999065s ago: executing program 3: r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r0, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r1, {0x2, 0x0, @dev}, 0x2}}, 0x2e) setsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f0000000540)={{{@in, @in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0xa}}, {{@in=@multicast2, 0x0, 0x32}, 0x0, @in6=@mcast2}}, 0xe8) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$L2TP_CMD_TUNNEL_GET(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x14, r3, 0x325, 0x0, 0x0, {0x8}}, 0x14}}, 0x0) 42.94890805s ago: executing program 4: syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000480)='./file0\x00', 0x0, &(0x7f00000000c0)={[{@grpquota}, {@resgid}]}, 0x9e, 0x4a3, &(0x7f00000004c0)="$eJzs3U1sFFUcAPD/bLulfNmK+AGCVtGIXy0tH3IwRowmHjQx0QPGUy2FIIUaWhMhRNED3lQS78ajiXcTTnox4sFovOrJiyEhhgtoYjJm9qvbZXfZtttdYH+/ZLbvzbzte/++edPXebvbAHrWSPaQRGyIiN8jYqiYXVxgpPjl2pUzU/9cOZOPSNPX/04K5a5eOTNVLlp+3vpiJk0j1mTJNXXqPfdWxOTMzPTJUn5s/vi7Y3OnTj999Pjkkekj0ycm9u/fs3v7wL6JvSuKL1f6msV1desHs9u2vPzm+VenDp5/++I3WXs3lI5Xx7EsWbQ1Roo/3VoPZg+Prqiym8rP2cPGqh1Jf+PCox1oEK3ri4isu/KF8T8UfbG2cmwoXvq4q40DVlWapmm9388lZ1PgNpbEDQrE8x1qCdBZ5V/02d+/5a2VecNge6YfXTd3sfgHUBb3tdJWPNJfuXeQX7iN0HYjEXHw7L9fZlu0dB/i8z8vPL5arQEAesF3ByLiqXrzv1zcUy60o7hKMvTcr5XnbYqIuyJic0TcHVEoe29E3LfE+mtXSK6f/+QuLTWmpbh8IOLZ0trW4vlfZco33FfKbcwykU8OH52Z3hURd0TEzsivyfLji7/tohWQ71/87bNyunbeXD3/y7as/vJcsNSOS/01N+gOTc5PtiP2zOWPIrb214s/qQSRRMSWiNi6zDqOPvH1tkbHbhx/E03WmVqVfhXxWLH/z8ai+Be6Kmm4Pjn+zL6JvWODMTO9a6x8Vlzvp1/Ovdao/hXF3wZZ/6+re/5XVoGHk8GIuVOnjxXWa+eWXse5Pz6pGtOLVpez+HPfRiz5/B9I3shX73t/cn7+5HjEQPJKIT9QvX+iptzEQvks/p076o//TVUtvj8ispN4e0Q8UFrEzfruoYh4OLtENon/xxceeafRscb93+SufBuVh1DT/v+vuv+Xnug79sOFRvW3dv3bU0jtLO1p5frXagOX+3MDAACAW0mu8Br4JDdaSedyo6PF1/BvjnW5mdm5+ScPz7534lDxtfLDkc+V73QNVd0PHS+kF/ITNfndEXFnRHzRt7aQH52anTnU7eChx61vMP4zf/V1u3XAqmvDOhpwizL+oXcZ/9C7jH/oXcY/9K564//DLrQD6Lik5j0ZTbkuwO3F/B96l/EPvcv4h57U8L3xuaZv+U+X/2kAnUiUPzvhZmlPlxJrV7OKyHU/wFVMfJpEtOkbpmlElhhc3tP7V/c0jqT0nzhqDjW8ZAx37OIEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADQBv8HAAD//8iN4dA=") 41.357594314s ago: executing program 4: prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f00000000c0)) membarrier(0x40, 0x0) membarrier(0x20, 0x0) 41.226457264s ago: executing program 4: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)=0x20000000010001) r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) preadv(r0, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) socket$inet6(0xa, 0x0, 0x8000000003c) socket$can_raw(0x1d, 0x3, 0x1) syz_mount_image$nilfs2(&(0x7f0000000040), &(0x7f0000000300)='./file0\x00', 0x0, &(0x7f00000002c0)=ANY=[], 0x1, 0xabb, &(0x7f0000000340)="$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") r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) setsockopt$inet_tcp_int(r1, 0x6, 0x18, &(0x7f0000000040)=0x1f, 0x4) getsockopt$inet_tcp_int(r1, 0x6, 0xb, 0x0, &(0x7f0000000300)) openat(0xffffffffffffff9c, &(0x7f0000000240)='.\x00', 0x0, 0x0) ioctl$FS_IOC_REMOVE_ENCRYPTION_KEY(0xffffffffffffffff, 0xc0185879, &(0x7f0000000080)={@desc={0x1, 0x0, @desc2}}) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuset.effective_cpus\x00', 0x275a, 0x0) socket(0x0, 0x0, 0x0) fcntl$getown(0xffffffffffffffff, 0x9) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) socket$inet6(0xa, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r2, 0x84, 0x76, &(0x7f0000444ff8)={0x0, 0x7}, 0x8) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r2, 0x84, 0x75, &(0x7f0000000000)={0x0, 0xca}, 0x8) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r2, 0x84, 0x64, &(0x7f0000000040)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) sendmmsg$inet6(r2, &(0x7f0000003c40)=[{{&(0x7f0000000080)={0xa, 0x4e23, 0x0, @loopback}, 0x1c, &(0x7f0000000240)=[{&(0x7f0000000140)="03", 0x1}], 0x1}}], 0x1, 0x0) setsockopt$inet_sctp6_SCTP_RESET_STREAMS(r2, 0x84, 0x79, &(0x7f00000001c0)=ANY=[@ANYRES32=0x0, @ANYBLOB="000012"], 0x8) 41.175880685s ago: executing program 3: mkdirat(0xffffffffffffff9c, &(0x7f0000000480)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000340)='./file0\x00', &(0x7f0000000100)='sysfs\x00', 0x0, 0x0) mount$bind(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x100000, 0x0) pivot_root(&(0x7f0000000040)='./file0\x00', &(0x7f0000000200)='./file0\x00') 41.071449646s ago: executing program 3: r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = socket$key(0xf, 0x3, 0x2) socket$key(0xf, 0x3, 0x2) sendmsg$key(r1, &(0x7f0000000000)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f00000002c0)=ANY=[@ANYBLOB="0207a20802"], 0x10}}, 0x0) bind$inet(r0, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) connect$inet(r0, &(0x7f0000000480)={0x2, 0x0, @multicast1}, 0x10) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005800000095"], 0x0}, 0x90) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x1, 0x7, 0xfff, 0x8}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x3f, &(0x7f0000000440)=ANY=[@ANYBLOB="1801000000000020000000000000000018190000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000024"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000140)='kmem_cache_free\x00', r3}, 0x10) openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) fcntl$lock(0xffffffffffffffff, 0x0, &(0x7f0000000140)) setsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, &(0x7f0000000080)={{{@in=@multicast2, @in6=@private0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xee00}, {}, {}, 0x0, 0x0, 0x1}, {{@in, 0x0, 0x32}, 0x0, @in6=@loopback, 0x0, 0x0, 0x0, 0xb7}}, 0xe8) sendmmsg(r0, &(0x7f0000000180), 0x400000000000077, 0x0) 37.944351686s ago: executing program 3: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000300)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000a00), 0xffffffffffffffff) socket(0x200000000000011, 0x0, 0x0) sendmsg$ETHTOOL_MSG_LINKSTATE_GET(r3, &(0x7f0000000c00)={0x0, 0x0, &(0x7f0000000bc0)={&(0x7f0000000000)={0x14, r4, 0x70b}, 0x14}}, 0x0) 31.041135307s ago: executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$FS_IOC_FSGETXATTR(r0, 0x801c581f, &(0x7f0000000840)={0x3, 0xc000, 0x98, 0x4, 0xff}) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, 0x0) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) readv(0xffffffffffffffff, 0x0, 0x0) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r1 = bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x0) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r1}, 0x4) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x18, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000000000018230000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70500000000000085000000a5000000180100002020640500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000a50000000800000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x44, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000000)='kfree\x00', r2}, 0x10) r3 = openat$selinux_attr(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/attr/keycreate\x00', 0x2, 0x0) write$selinux_attr(r3, 0x0, 0x0) r4 = bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000fc0)={r4, 0x58, &(0x7f00000020c0)}, 0x10) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x4, 0x4, 0x4, 0xbf25}, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x18, 0xf, &(0x7f0000000180)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r5}, {}, {}, {0x85, 0x0, 0x0, 0x16}, {0x7, 0x0}}}, &(0x7f0000000100)='GPL\x00'}, 0x90) 30.594955683s ago: executing program 1: prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f00000000c0)) membarrier(0x40, 0x0) membarrier(0x20, 0x0) 30.510306246s ago: executing program 1: bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xa, 0x7, 0x4, 0x4}, 0x48) openat$vmci(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) socket$netlink(0x10, 0x3, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) syz_init_net_socket$ax25(0x3, 0x5, 0x0) syz_mount_image$udf(&(0x7f00000000c0), &(0x7f0000000180)='./file0\x00', 0x2000002, &(0x7f0000000ec0)=ANY=[@ANYBLOB="766f6c756d653d30303030303030303030303030303030303036332c696f636861727365743d6d616363656c7469632c7569643d666f726765742c756e686964652c756d61736b3d30303030303030303030303030303030303030303030362c6e6f7672732c6e6f6164696e6963622c66696c657365743d30303030303030303030303030303030303030342c7569643d666f726765742c00b487a775c467683477dd885fc7af16aaf89c46b54d7a821d7dc02f759022"], 0x1, 0xc2d, &(0x7f00000001c0)="$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") r0 = syz_open_dev$radio(&(0x7f0000000100), 0x2, 0x2) pselect6(0x40, &(0x7f00000001c0), 0x0, &(0x7f00000002c0)={0x3ff}, 0x0, 0x0) ioctl$VIDIOC_SUBSCRIBE_EVENT(r0, 0x4020565a, &(0x7f0000000140)={0x3, 0x98f907, 0x5}) 30.215746889s ago: executing program 1: ioctl$BTRFS_IOC_SNAP_CREATE(0xffffffffffffffff, 0x800454cf, &(0x7f0000000100)={{}, "aa5752bd00ca4b1bc2b8ce91cf1c6b66037cac475f86e38faaf872509cc10a7b26b7d6c71fbe9ede3e0993802f177be6e475c47336d185dc4a58d90e74d1fbb3cd94706f0ab14c552d18160f6668d8860a122076a15c6587a85d7b251ec8a4aaddf2bbdb63ac4612821104cf2b5ce3e9af5ee43003ffe7fc06efcea356546ee749fd1e6456e4ec24250c0f6251e4d2d7df8dda45fb6c999c5ff8ebef3979149851c985c599c654fb93afa6bb7bda2b696ac138a66ae611b7bc6585eb6a5c358991fe893a408dc936dd87173f20e7a810b3397d1d73bd50674495d0e9cfcabb44c6b963e4f265804358b03c4c6b595eb15e81c26d15e316a52eadb38647db88f4dbf6628fbf21b54eb1992d9b56ae23f382759e9e7b1a160032c5ac861a85528e71ee3f4a44a8d691162a5274388e26b18185697111d252e36bb02c6f5e1dfab312348ea559c8ac14b6174573e91de5bca51583c85ffdd17f74a5cba81d49e417c37e6879b381e1eacb118a912ac41a6f1f7f8589906935c8ee8d6c7fb2a0134110bbe23deaa1511c1545d30fd2874df111a08a14fb8be2ca1ef7b2908619fdd0e13dbbc1105197398140d4d5c01e70f4493fec2b55e7c145b6668a87099641d34b4fcd1b41176ea97b16c50073da888fbf16fccda6e62352b3158bbf23081c64ad5e7436d1c11bc361aebd966427d0f496bca8b4555f8b58d81a56609aed838164545ad0b34cfbf21b127f6bb5e7b69cb7696c292e5b3f840e8dce98a436eb215315d05ac9092cabd5fc68d11aac645c5ed12840ca3f2dc082707cc37bcff2371e504d5a24eeb2bd12520e74b6322469b696eea613477c804f148cb99b1f6d9014f8d28393aa19933743369ac489afe8936fc6c80097118ce33e62275235404126f647a5472e4774d2810e9b962e86f7b7d52f190e6f7d9b75ef5448e1cd3a1b86821094c548e110e3340618f85ea007e201b35d1d75d94097fd65f39d64c84de6041b50d79cf94456ba35b6e3ed80f0312f80d01a2814749949b91b54e2c2d28cdd7a53b2930b485ec377dca3f5e0fcf188a46fa36b5d7abc4c9df60f78c021be1c82427aa95b1e077fd5d13bc556ee439dfac4b6c404b858a0fdeac7ea70479a40a3adb6f8921d0b26cdef804c469f5ad132441719707141a6e6379bd5f12b15c2b51ba54a838571bebce71dda8050b9e0bd623d3b94e06ac5d8564f3e27ff601926aec7c9962d1a7cb0e368be13ef05b3964e9ea9ab4c59e3ca5120161721d6d3ba0b70d62827b636b29ab679e6c1c7906758789911b324fef06cb991e1992b457a88e1ba8333b2bb623d65c68ae0310a4a6f9296c756b5aedc2461dd7663864b7a67deff60a451218e90b8b8d4e8cd6c8eabb90d65e8d1c23ae857f72e90ac146c6a726c452aba6c598ca2a2d4d37217f176de945d29401153fef6a1c5c139ad49b4c13aa4dfba91225e15806c0961aa48d8293bee12849206df687c98a23e10b83bdc256e7fce1da171c450792f5d970d4993d94a463296e6f1f79db1f4fdce07040532ddd220fe3c4a5f6bca87e7bd760b7b31a35b9fc71f56d4a05ce5a413b071ae392daff2ea318e3d05dade68cc42540a064da4bbe915551953e06705d60d6057cb558148c1b4e4fd847376f3ff14844a9e97aa9833f92e69a8b1051214ea8c472a5724063372a79fddfb98301aeb8ed05d3bd2483f74fd5dd2569fd8038dde1aac2afe9aec49a1ad11c509d34d147bfeef8c43e3b449e1c6f9fafbdf1412d6da01823769df5ed116deeee566db2d7ad9f007ba190eb43a59ddbe5a5582abb7bec0a5415e47294c5c96a9a8c2ec0a672a9a7b3bdd2084c0c3dece530e7dfb1f74238045ccba49eacce86dcad1bee1d264f09907c98839f5538722060dd7eac0dd9e22a909aa7389e6d899a37ca23eaa6f63ad991fbef54cc31f8d88a46a00f1b4d74fabdb75995b1c2b8f9f829fd86736b2f18650f0d4f878ad4c751e0c79f94c9d2359cb89d896a160f23a38371a257ac83d97272ef950b9eeaf8838a91bbacfcd230869551b1608eaf86ae6d07628c7db0ac2eadf89c2e5c6dd5bb156c8b257678b554ff923dcbc70c25b526f522c87c5f884e2643d69b8c5339cdd8e58855227174279964eff5aacbbc18b476c8a70ecb4a636594c1762f8771a2ae1640e355d24ba757c4c1901e4bdef65a0f13e4e85165af03b6c8b29d2fa30f43d53e9678a3fcc5d6cb13d7997c79bbf9d28b42dda0b510707a3a0e1fb7919df3d28533ea91a53742314db97275b941eff4ec9553bc863ba5da86a2bac99d250c656ffe51343672a411c0bcd3029ef33ec42292da3e9d43de15502d8b4cdcdb03adab48ca432c0a4f1629949f2dda90d2c560dd397e356f0b17ad0335254f009403b2058589a5d96647959bc84769746aeb496eb7329c3cf89abf0b765d09c7d97422461f58afdad1b6dc7c7c0a54627f4abd2b9a50c463e654e3d309cd7c7315fcfa9f8dd46404697483bee2b3b269cf112a323e9d2b07572c4b8a80cb2ced575d3b3b5c710bbdaa801ecf45d90a834166f346c70306cfae97aa9ec578396f3f27e0bea7984b04639dc1a9defdccd7d09b852d9f3cd2281a74e77367493a6b0d27302b5af11743165d8ba7ed0e0e0f50cb8024446633462285e6eb85582b117c9b60c8afa7c27aae3aa0501d4555bbf5b2e8199604f2188af02e0e99b83386c2e0cb74dade9b68f87cc22ea457f9f8b910d3fa525abfc48dde6b5216bf9ea81f8ec33acf640ed00633b60a8cdf6d19347eaaa8405f1b91b8cb13c784a0d1a0246a0696e3a1e043869e5c71b4604523b56fe78d7537bdaee8214e5751436c452a1edf76fdcfed7cf16fcef9e23d70fff4c844a7235756e6f40e702299eb374cfb7abe27147f13b059089cda2a076989e4c9d9b8ebf89fb9a646be6b3d1b841fffcc9c79cf7c57f651ec6361aaeb3d505451f06d1e3fd661484a395dfd08cba5bd68e0a79f13646b8cfa7a924f1351fee1c5de3ee6a5647ce7d7d3ab2f6ea0bc1591bed5f6801d9b1af425f527644e75108080592a0556c62166fd3d8fc044a991345950bd92dad8d39ec7b78b03743d595e3399159fef1bd3227ae1d645f5edcb4e54ce8c07920205db87edd7cff17eacfc2416e7459fa4aa9ce660d41a04697ea47d0bec76d1cfb38977e6ca23941074470cd0c570e5ce68e6bbd7ce914b58d160b8b1c0a131fcb501b5dd853bd44f0a8aec18e5332ee8849e63042f213e14f3a6cdca20c930bd3e999a486a036fa23844e96569b0ac1c5b1814032733df42fe071ff9019bd3616072c32a75817e036aacf826ca83d04e5b35bf6d3f175e434d5ef17e4172444fd5dbf92c01af728ab6e7ab1f44ba1acb97d884fb5d6c00b94c1d012aaff2531f0d06a7198439f1e22308e875e8fd4fbc32b582eb7d50c37dad014f37e16519ca63f300cc3b5c9825351651e89d9fcae54dbb023ef0b57e715489899e9a2cd2f5795eca67ffd44556a95b629924cf5dc487ecb71d4602d17e1a0dc4c3cea9c03def4afd03a639d5fa2c66be0300ee9f5ccfd18801af0daa67013fcbd7af60d9ee3b3b05603fb89a0479b55b0b1c8065cfdb2063dc8d13d3f3cdddb5bb7cf403352c3aa8efd38c4a6293ae5f0e294c5af98842512ee94bb3840c3edbcd174a0432aaa799d8737c5794a2e5848520cf3abb82beda147de1c6a8224a23f5f6a7f0d1be1a3f919aa017430b91f614d5a869384e55fe830748ec6e05651ebf9e687a63d424b2bef2b6f5e57325c5fd234fabf955bb61d4351859e1bebf72a7f240f3a19896272dc6aaa127dfad7e6d67c7d652049d40fdd4f6f2558e15cde10bf20b47efb84d415252a4504722c86033fea9cadd4d09f9d690806ae868215929326a68b8bde1de718487e1fe9a66fec9157fe1a4dc888cc3fad3672e75c76ba5ebb762fb97990315233af3b534d8e1679e7cad00b62cdba635a65542ce73e712ae827bab530e3b9c8e8270fff1f4ad011c98bdd2129b8d09d7f5c90700aa4b84fb0c1e72f0392b428d5c27db190fa13e0d187d19668f5869bec538f55b97553662cbffcd488c5f405220d1231e53192915908560111e6ec2d8c51af9d96c16de065597c1e89e689676eb24a2eeda78703a84c58be837e9e2d1f9e3fc831ed798f6b11c7c18e5e765a32bb48eb6e64d3bd28f4ee75803564524edfe76c11bcfefac07ac2dfdb952ad4781a94d3935129b16cd932064a3aaad530bf06d585d6862971da6c174569e23c882a363d0ee1a4678fe9d1e4b995f2f450234f34dc24853d2dfd3e4b5a8c3d96c10188d706e550b60c0f52dfdc689b883a49f8d3ec3630e4a93e60bdb2e1cbffb8c5fa0a56798a660731a585270544e6dfc9c8ec4b5b346c15a7808df1641b6dfd2222fc503bb2a2457dbeffb01e828fcf45d6796f0bf0217eb53a82ec6bf1103b33eee5066a3d5ac329720211519732445febee8c9d00d3c5accb01900f1fb0d4b58b958e7856338ffddea230787a459faf7538eabe1c2747d3f7d15b0ab564a66acd981184f96d3b243cb463d53c92c4b4dfea2acdce52ca43d6926f99e065c77f9907cd5f16848d455f22c80c0ab99b5871e5bf8c37b058a91c7d313a651a3488f16335570b81e80636233588ba68daa3162e688e05b4a1a973335796ff9d06cd1d271bb2a102a34d47135b37dcacbc1ae3e4b616a5706b8b0ad7b4f18ec6cd3ebc245af0761b815712305d4f4ad405664b7d1fe80db10c92bc83a20f1d8c65ffb36f5b38ed8b6b2ff54915bea3c9a46f097e720a996d187436378fe170b63f0a9923078685d7ec4ec09d4fa6ce4b759060d523779525817ddfa3e5cb1a805a535e0a385caec95ea3cdf5b961ac9e0c6525963a47c806f5762de135e5a04f081d610632fe9eedae18695fc7e2a6a2b735bf860d64eb262c37f9c57a58da5ea0d7e5c51bbd5f285a2145e7785bc76cb6771d2fc93b3f7cdd0a63e9085173786be6865e8d4690dffdb0679ffbcf6785b873512351aee67792b0c8c482abe3ec23238f84933b4b2da8901ff369bbe94e7dee3a2fe419ac627d662c23a9850b54c750ed7636dfc811499d9154115ec7bf85d41441fbe119e7f5ee6f57993f8cd3ff3ca45a5ec44f9d9add77751895046eb0b4348f94e1761b89aa7a50d5525465ca2c471063c2c1a67d6b5412a02b69abff37de8559386a2e154c0c737e1aa68610709ab64faedd9c56260306a82ab1fa49233faa666dc9c371df30bf5ad5cea9c02f6176d2ece90e84b376de00b7746f95de96d01122201ca2e99a55cab8f2e2d6a51bc5f14bbeaf4f9e390b16128a1fbe8bc672621c9124d42622d5f6970c9b21420caba81f6fcf7abbad946182961328e11e711da96dd7b2f581c2a9b1330def860b62a74b1b229bce642c9abe3ea8a1030eb952628e15707f228e8d4921b0ce16f6078efa9d3aa7dd88f42fb33fa7ac3936ac036d9020ba661bc38e7679fb4776384998076202ee2c12a4e053a86776156b0ce86378f1460e11ce0c18330a3ccddc4f4235e41a68d0bdd587b1ff1080ad11fd2609332c31874308042ff237e9bc5c3976cf53ec85277c69c3c9efabed5ceeb99f5d5fe92f13aaa616c6b716f9fd929be253f934f36728457dfe9e7319caadd4816c5a0283baeb06bf716eb47a2e019e5696fa0c6b6386eafb99046872367b3e3d8770402c2f411fd63192e5731c96ffcf10e6f0c8a21cdc37a336180047d947f271266445a79de27902d29f3089e75070bc971cf01c"}) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000940)=ANY=[@ANYBLOB="340000003b0007010000000000000000047c00000c00e10008000700040000001400018006000600880a00000800"], 0x34}}, 0x0) 30.029417321s ago: executing program 1: bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x21}, 0x90) r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wlan0\x00'}) ioctl(r0, 0x8b1a, &(0x7f0000000040)) 14.66434715s ago: executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000140)=0x15) ioctl$TIOCSTI(r0, 0x5412, &(0x7f00000002c0)=0x7e) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000180)) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000000)=0x7e) 11.190924559s ago: executing program 4: r0 = io_uring_setup(0x177c, &(0x7f0000000000)) r1 = socket(0x29, 0x2, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), r1) close_range(r0, 0xffffffffffffffff, 0x0) 7.89966021s ago: executing program 3: socket(0x28, 0x1, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18020000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb703000008000000b703000000000020850000007200000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f00000002c0)='sched_switch\x00', r0}, 0x10) fallocate(0xffffffffffffffff, 0x0, 0x0, 0x0) ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, 0x0) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000080)={'#! ', './file0'}, 0xb) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000340)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000380), 0x13f}}, 0x20) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) preadv2(r2, &(0x7f0000000080)=[{&(0x7f0000001200)=""/4096, 0x4000000}], 0x1, 0x0, 0x0, 0x0) r6 = socket$inet6(0xa, 0x3, 0x8000000003c) connect$inet6(r6, &(0x7f0000000040)={0xa, 0x0, 0x0, @remote, 0x5}, 0x1c) ioctl$BTRFS_IOC_INO_LOOKUP_USER(0xffffffffffffffff, 0xd000943e, &(0x7f0000000140)={0x0, 0x0, "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", "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"}) sendmsg(r6, &(0x7f00000000c0)={0x0, 0x952f, &(0x7f0000000100)=[{&(0x7f0000000000)="2b10", 0xffbd}], 0x1, 0x0, 0x0, 0x2c}, 0x4) 0s ago: executing program 1: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuacct.usage_sys\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f00000000c0)={'#! ', './file0'}, 0xb) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x7, 0x10012, r0, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f0000000b80)=@mangle={'mangle\x00', 0x2, 0x6, 0x530, 0xf0, 0xf0, 0x1d0, 0x1d0, 0x4b0, 0x4b0, 0x4b0, 0x4b0, 0x4b0, 0x4b0, 0x6, 0x0, {[{{@ipv6={@mcast1, @private1, [], [], 'pimreg0\x00', 'macvtap0\x00'}, 0x0, 0xa8, 0xf0, 0x0, {0x7a00000000000000}}, @SNPT={0x48, 'SNPT\x00', 0x0, {@ipv4=@empty, @ipv4=@broadcast}}}, {{@uncond, 0x0, 0xa8, 0xe0}, @common=@inet=@SET3={0x38}}, {{@ipv6={@ipv4, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, [], [], '\x00', 'bond_slave_0\x00'}, 0x0, 0xa8, 0xd0, 0x48000000}, @common=@unspec=@STANDARD={0x28}}, {{@uncond, 0x0, 0xa8, 0xf0}, @SNPT={0x48, 'SNPT\x00', 0x0, {@ipv6=@loopback, @ipv6=@loopback}}}, {{@ipv6={@ipv4={'\x00', '\xff\xff', @remote}, @local, [], [], 'pim6reg1\x00', 'batadv_slave_1\x00'}, 0x0, 0xa8, 0xd0}, @HL={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x590) syz_mount_image$hfsplus(&(0x7f0000000000), &(0x7f00000000c0)='./file0\x00', 0x80000c, &(0x7f00000004c0)=ANY=[@ANYBLOB="706172743d3078303030303030303030303030303030342c6e6c733d63703933362c73657373696f6e3d3078666666666666666666666666666637662c747970653d883b7f382c63726561746f723dddf2bd6c2c666f7263652c7569643d", @ANYRESHEX=0x0, @ANYBLOB="2c706172743d3078303030303030303030303030303030362c747970653d1f02ae0e2c756d61736b3d30303030303030303030303030303030303030303030352c63726561746f723d65fe04c22c6e6f6465636f6d706f73652c6465636f6d706f73652c666f7263652c706172743d3078303030303030303030303030303030332c6e6c733d63703933362c63726561746f723da806f61d2c62617272000000006f626a5f757365723d756d61736b2c6f626a5f757365723d045d212c004060199c39c90d5a8e7648db313879"], 0x3, 0x6da, &(0x7f0000004980)="$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") r2 = openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) socket$key(0xf, 0x3, 0x2) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x4) r4 = bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x0) r5 = inotify_add_watch(0xffffffffffffffff, &(0x7f0000000200)='.\x00', 0x400) inotify_rm_watch(0xffffffffffffffff, r5) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000380)='memory.events\x00', 0x7a05, 0x1700) openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x200000, 0x0) bpf$BPF_GET_PROG_INFO(0xa, &(0x7f0000000580)={0xffffffffffffffff, 0x0, 0x0}, 0x10) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xf, &(0x7f0000000340)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r4}}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000001dc0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={0x0, r6}, 0x10) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r7, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r8, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r7, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r9 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) ioctl$FS_IOC_GETFSMAP(r9, 0xc0c0583b, &(0x7f0000000d40)={0x0, 0x2904c, 0x0, 0x10003, '\x00', [{0x0, 0x0, 0x3f000000}, {0x801, 0x0, 0x18000000, 0x0, 0x0, 0x1}]}) getdents(r2, &(0x7f0000000080)=""/54, 0x36) socket$inet6_udplite(0xa, 0x2, 0x88) kernel console output (not intermixed with test programs): 709227.687:294): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5770 comm="syz-executor.3" exe="/root/syz-executor.3" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fcfc427cf29 code=0x0 [ 136.125720][ T11] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 136.178809][ T11] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 136.228746][ T29] audit: type=1400 audit(1718709227.747:295): avc: denied { rename } for pid=5757 comm="syz-executor.4" name="file0" dev="loop4" ino=67 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 136.704873][ T29] audit: type=1400 audit(1718709228.347:296): avc: denied { read append open } for pid=5757 comm="syz-executor.4" path="/root/syzkaller-testdir3978693616/syzkaller.sIIxUb/0/file0/memory.events" dev="loop4" ino=74 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 136.997002][ T61] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 137.034007][ T5776] loop3: detected capacity change from 0 to 256 [ 137.067853][ T61] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 137.394975][ T5776] FAT-fs (loop3): error, invalid access to FAT (entry 0x00000001) [ 137.472695][ T5776] FAT-fs (loop3): Filesystem has been set read-only [ 137.481153][ T5372] XFS (loop4): Unmounting Filesystem d6f69dbd-8c5d-46be-b88e-92c0ae88ceb2 [ 137.620764][ T29] audit: type=1400 audit(1718709229.237:297): avc: denied { create } for pid=5795 comm="syz-executor.1" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 137.728004][ T29] audit: type=1400 audit(1718709229.317:298): avc: denied { getopt } for pid=5795 comm="syz-executor.1" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 138.224995][ T5805] fuse: Unknown parameter '0x0000000000000007' [ 138.631449][ T5124] Bluetooth: Frame is too long (len 10, expected len 9) [ 138.883037][ T29] audit: type=1400 audit(1718709229.867:299): avc: denied { mounton } for pid=5800 comm="syz-executor.1" path="/root/syzkaller-testdir3859937171/syzkaller.LjxYhe/1/file0" dev="sda1" ino=1940 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_home_t tclass=file permissive=1 [ 138.988211][ T2459] wlan1: Trigger new scan to find an IBSS to join [ 139.117845][ T29] audit: type=1804 audit(1718709229.917:300): pid=5805 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=ToMToU comm="syz-executor.1" name="/root/syzkaller-testdir3859937171/syzkaller.LjxYhe/1/file0" dev="sda1" ino=1940 res=1 errno=0 [ 139.232638][ T5801] loop2: detected capacity change from 0 to 4096 [ 139.456476][ T29] audit: type=1326 audit(1718709231.097:301): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5808 comm="syz-executor.1" exe="/root/syz-executor.1" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f45a347cf29 code=0x0 [ 139.550983][ T29] audit: type=1400 audit(1718709231.147:302): avc: denied { create } for pid=5811 comm="syz-executor.3" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dccp_socket permissive=1 [ 139.715412][ T29] audit: type=1400 audit(1718709231.157:303): avc: denied { bind } for pid=5811 comm="syz-executor.3" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dccp_socket permissive=1 [ 139.867270][ T29] audit: type=1400 audit(1718709231.157:304): avc: denied { name_bind } for pid=5811 comm="syz-executor.3" src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=dccp_socket permissive=1 [ 139.895357][ T29] audit: type=1400 audit(1718709231.167:305): avc: denied { node_bind } for pid=5811 comm="syz-executor.3" src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=dccp_socket permissive=1 [ 140.853403][ T2459] wlan1: Creating new IBSS network, BSSID fa:de:4e:a6:bd:6a [ 140.916816][ T5829] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2566 sclass=netlink_route_socket pid=5829 comm=syz-executor.1 [ 141.358266][ T5842] random: crng reseeded on system resumption [ 142.697688][ C0] sched: RT throttling activated [ 145.329768][ T29] kauditd_printk_skb: 8 callbacks suppressed [ 145.329787][ T29] audit: type=1400 audit(1718709236.977:314): avc: denied { create } for pid=5857 comm="syz-executor.4" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 145.475109][ T29] audit: type=1400 audit(1718709237.027:315): avc: denied { ioctl } for pid=5857 comm="syz-executor.4" path="socket:[9979]" dev="sockfs" ino=9979 ioctlcmd=0x8916 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 145.500698][ C1] vkms_vblank_simulate: vblank timer overrun [ 145.633381][ T29] audit: type=1400 audit(1718709237.247:316): avc: denied { nlmsg_tty_audit } for pid=5862 comm="syz-executor.1" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_audit_socket permissive=1 [ 145.889669][ T5863] loop1: detected capacity change from 0 to 1024 [ 145.997937][ T29] audit: type=1400 audit(1718709237.277:317): avc: denied { create } for pid=5864 comm="syz-executor.0" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_tcpdiag_socket permissive=1 [ 146.114690][ T29] audit: type=1400 audit(1718709237.487:318): avc: denied { shutdown } for pid=5864 comm="syz-executor.0" lport=54092 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 146.250060][ T29] audit: type=1400 audit(1718709237.597:319): avc: denied { read } for pid=5861 comm="syz-executor.2" name="loop-control" dev="devtmpfs" ino=647 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 146.426625][ T29] audit: type=1400 audit(1718709237.607:320): avc: denied { open } for pid=5861 comm="syz-executor.2" path="/dev/loop-control" dev="devtmpfs" ino=647 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 146.582913][ T29] audit: type=1400 audit(1718709237.627:321): avc: denied { ioctl } for pid=5861 comm="syz-executor.2" path="/dev/loop-control" dev="devtmpfs" ino=647 ioctlcmd=0x4c82 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 146.667879][ T5879] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2566 sclass=netlink_route_socket pid=5879 comm=syz-executor.2 [ 146.695276][ T29] audit: type=1400 audit(1718709238.047:322): avc: denied { read } for pid=5874 comm="syz-executor.4" name="binder0" dev="binder" ino=7 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 146.833220][ T29] audit: type=1400 audit(1718709238.067:323): avc: denied { ioctl } for pid=5874 comm="syz-executor.4" path="/dev/binderfs/binder0" dev="binder" ino=7 ioctlcmd=0x620d scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 146.908982][ T2459] hfsplus: b-tree write err: -5, ino 4 [ 146.997187][ T5888] random: crng reseeded on system resumption [ 150.702400][ T29] audit: type=1400 audit(1718709238.067:324): avc: denied { set_context_mgr } for pid=5874 comm="syz-executor.4" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=binder permissive=1 [ 150.898239][ T29] audit: type=1400 audit(1718709238.167:325): avc: denied { read write } for pid=5862 comm="syz-executor.1" name="uinput" dev="devtmpfs" ino=836 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 151.071999][ T29] audit: type=1400 audit(1718709238.167:326): avc: denied { open } for pid=5862 comm="syz-executor.1" path="/dev/uinput" dev="devtmpfs" ino=836 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 151.229821][ T29] audit: type=1400 audit(1718709238.197:327): avc: denied { map } for pid=5874 comm="syz-executor.4" path="/dev/binderfs/binder0" dev="binder" ino=7 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 151.360731][ T5907] netlink: 'syz-executor.2': attribute type 4 has an invalid length. [ 151.369012][ T29] audit: type=1400 audit(1718709238.227:328): avc: denied { call } for pid=5874 comm="syz-executor.4" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=binder permissive=1 [ 151.469345][ T29] audit: type=1400 audit(1718709238.227:329): avc: denied { transfer } for pid=5874 comm="syz-executor.4" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=binder permissive=1 [ 151.508593][ T5914] netlink: 'syz-executor.2': attribute type 4 has an invalid length. [ 151.579083][ T29] audit: type=1400 audit(1718709243.057:330): avc: denied { create } for pid=5908 comm="/dev/audio" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=isdn_socket permissive=1 [ 151.811531][ T29] audit: type=1400 audit(1718709243.127:331): avc: denied { getopt } for pid=5911 comm="syz-executor.4" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 153.108191][ T5165] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 153.224335][ T29] audit: type=1400 audit(1718709244.867:332): avc: denied { setopt } for pid=5934 comm="syz-executor.1" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 153.313419][ T29] audit: type=1400 audit(1718709244.867:333): avc: denied { read } for pid=5934 comm="syz-executor.1" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 153.354539][ T5940] loop2: detected capacity change from 0 to 16 [ 153.368020][ T5165] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 153.424111][ T5165] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 153.453627][ T5940] MTD: Attempt to mount non-MTD device "/dev/loop2" [ 153.460388][ T5165] usb 4-1: New USB device found, idVendor=1e7d, idProduct=30d4, bcdDevice= 0.00 [ 153.460425][ T5165] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 153.467558][ T5165] usb 4-1: config 0 descriptor?? [ 153.706612][ T5936] loop1: detected capacity change from 0 to 1024 [ 153.942415][ T5936] journal_path: Lookup failure for './bus' [ 154.982342][ T5936] EXT4-fs: error: could not find journal device path [ 155.041441][ T5165] arvo 0003:1E7D:30D4.0001: unknown main item tag 0x0 [ 155.067482][ T5165] arvo 0003:1E7D:30D4.0001: unknown main item tag 0x0 [ 155.093979][ T5160] I/O error, dev loop1, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 0 [ 155.183159][ T5165] arvo 0003:1E7D:30D4.0001: hidraw0: USB HID v0.00 Device [HID 1e7d:30d4] on usb-dummy_hcd.3-1/input0 [ 155.396742][ T5961] loop0: detected capacity change from 0 to 1764 [ 155.557889][ T8] usb 4-1: USB disconnect, device number 3 [ 155.639194][ T5966] loop1: detected capacity change from 0 to 512 [ 155.903817][ T29] kauditd_printk_skb: 1 callbacks suppressed [ 155.903836][ T29] audit: type=1400 audit(1718709247.507:335): avc: denied { connect } for pid=5960 comm="syz-executor.0" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 155.944542][ T5966] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 155.996355][ T5966] ext4 filesystem being mounted at /root/syzkaller-testdir3859937171/syzkaller.LjxYhe/10/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 156.047808][ T5972] netlink: 'syz-executor.4': attribute type 6 has an invalid length. [ 156.117983][ T5966] EXT4-fs (loop1): re-mounted 00000000-0000-0000-0000-000000000000 r/w. Quota mode: writeback. [ 156.186474][ T29] audit: type=1400 audit(1718709247.827:336): avc: denied { read } for pid=5962 comm="syz-executor.1" name="file1" dev="loop1" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=lnk_file permissive=1 [ 156.371547][ T5413] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 156.428719][ T5976] loop3: detected capacity change from 0 to 1764 [ 156.452508][ T29] audit: type=1400 audit(1718709248.087:337): avc: denied { write } for pid=4521 comm="syslogd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 156.597495][ T29] audit: type=1400 audit(1718709248.087:338): avc: denied { remove_name } for pid=4521 comm="syslogd" name="messages" dev="tmpfs" ino=3 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 156.760610][ T29] audit: type=1400 audit(1718709248.087:339): avc: denied { rename } for pid=4521 comm="syslogd" name="messages" dev="tmpfs" ino=3 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 158.088463][ T5983] loop0: detected capacity change from 0 to 8192 [ 158.243025][ T29] audit: type=1400 audit(1718709248.087:340): avc: denied { add_name } for pid=4521 comm="syslogd" name="messages.0" dev="tmpfs" ino=2 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 158.332450][ T5983] REISERFS warning (device loop0): super-6506 reiserfs_getopt: empty argument for "commit" [ 158.332450][ T5983] [ 158.669937][ T29] audit: type=1400 audit(1718709248.087:341): avc: denied { unlink } for pid=4521 comm="syslogd" name="messages.0" dev="tmpfs" ino=2 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 158.789998][ T29] audit: type=1400 audit(1718709248.097:342): avc: denied { create } for pid=4521 comm="syslogd" name="messages" scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 158.895627][ T29] audit: type=1400 audit(1718709249.637:343): avc: denied { setopt } for pid=5977 comm="syz-executor.0" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 159.270225][ T5999] loop4: detected capacity change from 0 to 1024 [ 159.279685][ T5996] loop3: detected capacity change from 0 to 1764 [ 159.403987][ T5996] ISOFS: root inode is unusable. Disabling Rock Ridge and switching to Joliet. [ 159.468659][ T5996] ISOFS: unable to read i-node block [ 159.474169][ T5996] isofs_fill_super: get root inode failed [ 160.652238][ T1109] hfsplus: b-tree write err: -5, ino 4 [ 160.688766][ T29] audit: type=1400 audit(1718709252.327:344): avc: denied { create } for pid=6007 comm="syz-executor.3" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 161.687471][ T29] kauditd_printk_skb: 2 callbacks suppressed [ 161.687490][ T29] audit: type=1400 audit(1718709252.677:347): avc: denied { map } for pid=6007 comm="syz-executor.3" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=12293 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 161.726231][ T5990] loop2: detected capacity change from 0 to 32768 [ 161.879376][ T29] audit: type=1400 audit(1718709252.677:348): avc: denied { read write } for pid=6007 comm="syz-executor.3" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=12293 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 162.715941][ T6025] loop0: detected capacity change from 0 to 65536 [ 162.747033][ T6024] loop4: detected capacity change from 0 to 1764 [ 162.828806][ T6025] XFS (loop0): Mounting V5 Filesystem d6f69dbd-8c5d-46be-b88e-92c0ae88ceb2 [ 162.927384][ T29] audit: type=1800 audit(1718709254.567:349): pid=6038 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed(directio) comm="syz-executor.1" name="bus" dev="sda1" ino=1966 res=0 errno=0 [ 162.938815][ T6033] tipc: Failed to obtain node identity [ 162.983001][ T6033] tipc: Enabling of bearer rejected, failed to enable media [ 163.015633][ T29] audit: type=1400 audit(1718709254.657:350): avc: denied { write } for pid=6020 comm="syz-executor.3" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 163.037083][ T6025] XFS (loop0): Ending clean mount [ 163.062899][ T6025] XFS (loop0): Quotacheck needed: Please wait. [ 163.155068][ T6025] XFS (loop0): Quotacheck: Done. [ 163.449687][ T29] audit: type=1400 audit(1718709255.067:351): avc: denied { write } for pid=6043 comm="syz-executor.4" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=key permissive=1 [ 163.854136][ T29] audit: type=1400 audit(1718709255.397:352): avc: denied { mount } for pid=6023 comm="syz-executor.0" name="/" dev="tmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 164.319810][ T29] audit: type=1400 audit(1718709255.917:353): avc: denied { rename } for pid=6023 comm="syz-executor.0" name="bus" dev="loop0" ino=35200 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=dir permissive=1 [ 164.343064][ T29] audit: type=1400 audit(1718709255.927:354): avc: denied { rmdir } for pid=6023 comm="syz-executor.0" name="file0" dev="loop0" ino=74 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=dir permissive=1 [ 164.556636][ T29] audit: type=1400 audit(1718709256.187:355): avc: denied { unlink } for pid=5274 comm="syz-executor.0" name="file1" dev="loop0" ino=70 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 164.683471][ T29] audit: type=1400 audit(1718709256.327:356): avc: denied { unlink } for pid=5274 comm="syz-executor.0" name="file1" dev="loop0" ino=69 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=lnk_file permissive=1 [ 164.719315][ T6056] loop2: detected capacity change from 0 to 8192 [ 164.776953][ T5274] XFS (loop0): Unmounting Filesystem d6f69dbd-8c5d-46be-b88e-92c0ae88ceb2 [ 165.210987][ T5165] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 165.240520][ T6056] FAT-fs (loop2): error, fat_get_cluster: invalid cluster chain (i_pos 0) [ 165.462798][ T5165] usb 4-1: New USB device found, idVendor=1604, idProduct=8001, bcdDevice=44.1f [ 165.496100][ T5165] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 165.517065][ T5165] usb 4-1: Product: syz [ 165.531332][ T5165] usb 4-1: Manufacturer: syz [ 165.563009][ T5165] usb 4-1: SerialNumber: syz [ 165.589734][ T5165] usb 4-1: config 0 descriptor?? [ 166.232141][ T928] usb 4-1: USB disconnect, device number 4 [ 166.367939][ T5165] usb 5-1: new low-speed USB device number 2 using dummy_hcd [ 166.574086][ T5165] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 166.603331][ T6093] loop1: detected capacity change from 0 to 128 [ 166.615001][ T5165] usb 5-1: New USB device found, idVendor=056a, idProduct=0093, bcdDevice= 0.00 [ 166.632836][ T5165] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 166.661425][ T6093] UDF-fs: error (device loop1): udf_read_tagged: read failed, block=256, location=256 [ 166.691981][ T5165] usb 5-1: config 0 descriptor?? [ 166.723509][ T6093] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 166.736883][ T5165] usbhid 5-1:0.0: couldn't find an input interrupt endpoint [ 167.107169][ T5165] usb 5-1: USB disconnect, device number 2 [ 169.005842][ T6099] loop0: detected capacity change from 0 to 512 [ 169.037432][ T6099] EXT4-fs (loop0): feature flags set on rev 0 fs, running e2fsck is recommended [ 169.096922][ T6099] EXT4-fs (loop0): orphan cleanup on readonly fs [ 169.112927][ T6102] loop3: detected capacity change from 0 to 1024 [ 169.120374][ T6099] EXT4-fs error (device loop0): ext4_ext_check_inode:520: inode #3: comm syz-executor.0: pblk 0 bad header/extent: invalid eh_max - magic f30a, entries 7, max 0(0), depth 0(0) [ 169.151013][ T6099] EXT4-fs error (device loop0): ext4_quota_enable:7036: comm syz-executor.0: Bad quota inode: 3, type: 0 [ 169.199032][ T6099] EXT4-fs warning (device loop0): ext4_enable_quotas:7074: Failed to enable quota tracking (type=0, err=-117, ino=3). Please run e2fsck to fix. [ 169.223117][ T6099] EXT4-fs (loop0): Cannot turn on quotas: error -117 [ 169.240643][ T6099] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 169.321024][ T29] kauditd_printk_skb: 11 callbacks suppressed [ 169.321042][ T29] audit: type=1400 audit(1718709260.967:368): avc: denied { mounton } for pid=6097 comm="syz-executor.0" path="/root/syzkaller-testdir3384662851/syzkaller.wTS8Xp/23/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0" dev="loop0" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 169.393850][ T9] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 169.505000][ T61] hfsplus: b-tree write err: -5, ino 4 [ 169.593817][ T9] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 169.637810][ T9] usb 5-1: config 0 has no interfaces? [ 169.643451][ T9] usb 5-1: New USB device found, idVendor=056a, idProduct=4001, bcdDevice= 0.00 [ 169.663053][ T9] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 169.706082][ T9] usb 5-1: config 0 descriptor?? [ 169.724125][ T6120] EXT4-fs warning (device sda1): verify_group_input:136: Cannot add at group 125 (only 8 groups) [ 169.949462][ T5274] EXT4-fs error (device loop0): ext4_readdir:258: inode #12: block 13: comm syz-executor.0: path (unknown): bad entry in directory: rec_len is smaller than minimal - offset=0, inode=12, rec_len=0, size=4096 fake=0 [ 170.025568][ T5274] EXT4-fs error (device loop0): ext4_lookup:1856: inode #2: comm syz-executor.0: deleted inode referenced: 15 [ 170.050163][ T29] audit: type=1400 audit(1718709261.687:369): avc: denied { write } for pid=6101 comm="syz-executor.4" name="kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 170.055362][ T6125] loop2: detected capacity change from 0 to 764 [ 170.079595][ T6124] loop3: detected capacity change from 0 to 128 [ 170.106922][ T5274] EXT4-fs error (device loop0): ext4_lookup:1856: inode #2: comm syz-executor.0: deleted inode referenced: 15 [ 170.124625][ T5165] usb 5-1: USB disconnect, device number 3 [ 170.158068][ T6124] UDF-fs: error (device loop3): udf_read_tagged: read failed, block=256, location=256 [ 170.243513][ T6124] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 170.519283][ T5274] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 170.715092][ T6133] loop2: detected capacity change from 0 to 2048 [ 170.725905][ T2438] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 170.736462][ T6133] UDF-fs: error (device loop2): udf_read_tagged: read failed, block=18576, location=18576 [ 170.853388][ T6133] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 170.881262][ T6136] loop3: detected capacity change from 0 to 1764 [ 170.890384][ T51] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 171.069916][ T2438] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 172.252138][ T29] audit: type=1400 audit(1718709263.887:370): avc: denied { create } for pid=6130 comm="syz-executor.1" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 172.276894][ T29] audit: type=1400 audit(1718709263.917:371): avc: denied { write } for pid=6130 comm="syz-executor.1" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 172.437167][ T2438] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 172.762781][ T2438] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 173.313881][ T6153] loop4: detected capacity change from 0 to 65536 [ 173.372735][ T6153] XFS (loop4): Mounting V5 Filesystem d6f69dbd-8c5d-46be-b88e-92c0ae88ceb2 [ 173.430265][ T6153] XFS (loop4): Ending clean mount [ 173.509765][ T6153] XFS (loop4): Quotacheck needed: Please wait. [ 173.561639][ T5118] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 173.575256][ T5118] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 173.584022][ T5118] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 173.599032][ T2438] bridge_slave_1: left allmulticast mode [ 173.604709][ T2438] bridge_slave_1: left promiscuous mode [ 173.623359][ T5118] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 173.634428][ T5118] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 173.642073][ T5118] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 173.713720][ T2438] bridge0: port 2(bridge_slave_1) entered disabled state [ 173.723603][ T29] audit: type=1804 audit(1718709265.367:372): pid=6172 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=ToMToU comm="syz-executor.2" name="/root/syzkaller-testdir262877107/syzkaller.9JxPDh/65/file0" dev="sda1" ino=1960 res=1 errno=0 [ 173.753599][ T6153] XFS (loop4): Quotacheck: Done. [ 173.773460][ T6170] syz-executor.3[6170] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 173.773674][ T6170] syz-executor.3[6170] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 173.807955][ T2438] bridge_slave_0: left allmulticast mode [ 173.854250][ T2438] bridge_slave_0: left promiscuous mode [ 173.862060][ T2438] bridge0: port 1(bridge_slave_0) entered disabled state [ 174.164315][ T6179] loop2: detected capacity change from 0 to 2048 [ 174.174657][ T6179] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 174.188217][ T6179] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 174.932354][ T6179] EXT4-fs (loop2): stripe (5) is not aligned with cluster size (16), stripe is disabled [ 174.967314][ T6179] [EXT4 FS bs=2048, gc=1, bpg=262144, ipg=32, mo=a002e01c, mo2=0002] [ 174.975854][ T6179] System zones: 0-19 [ 175.016544][ T6179] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 175.099240][ T6187] loop1: detected capacity change from 0 to 64 [ 175.271239][ T5372] XFS (loop4): Unmounting Filesystem d6f69dbd-8c5d-46be-b88e-92c0ae88ceb2 [ 175.296040][ T6179] overlayfs: failed to resolve './file2': -2 [ 175.353813][ T6179] overlay: Bad value for 'redirect_dir' [ 175.509423][ T5113] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 175.675740][ T29] audit: type=1400 audit(1718709267.307:373): avc: denied { write } for pid=6189 comm="syz-executor.2" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 175.738526][ T5118] Bluetooth: hci4: command tx timeout [ 175.897325][ T6192] loop1: detected capacity change from 0 to 1024 [ 175.926091][ T29] audit: type=1400 audit(1718709267.547:374): avc: denied { map } for pid=6193 comm="syz-executor.2" path="/dev/nullb0" dev="devtmpfs" ino=681 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 175.995925][ T29] audit: type=1400 audit(1718709267.547:375): avc: denied { execute } for pid=6193 comm="syz-executor.2" path="/dev/nullb0" dev="devtmpfs" ino=681 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 176.278635][ T2438] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 176.305941][ T2438] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 176.331208][ T2438] bond0 (unregistering): Released all slaves [ 176.443732][ T29] audit: type=1400 audit(1718709268.097:376): avc: denied { ioctl } for pid=6200 comm="syz-executor.4" path="/dev/input/event2" dev="devtmpfs" ino=838 ioctlcmd=0x4503 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 176.480797][ T6206] netlink: 160 bytes leftover after parsing attributes in process `syz-executor.4'. [ 176.633422][ T6205] netlink: 'syz-executor.1': attribute type 21 has an invalid length. [ 176.761684][ T6211] loop2: detected capacity change from 0 to 1024 [ 177.197963][ T29] audit: type=1400 audit(1718709268.837:377): avc: denied { write } for pid=6219 comm="syz-executor.4" path="socket:[12624]" dev="sockfs" ino=12624 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_tcpdiag_socket permissive=1 [ 177.238477][ T29] audit: type=1400 audit(1718709268.837:378): avc: denied { nlmsg_read } for pid=6219 comm="syz-executor.4" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_tcpdiag_socket permissive=1 [ 177.241308][ T11] hfsplus: b-tree write err: -5, ino 4 [ 177.394618][ T6223] syz-executor.1: attempt to access beyond end of device [ 177.394618][ T6223] nbd1: rw=0, sector=0, nr_sectors = 1 limit=0 [ 177.408036][ T6223] FAT-fs (nbd1): unable to read boot sector [ 177.501210][ T6224] Bluetooth: MGMT ver 1.22 [ 178.055240][ T6224] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_cmd_wq": -EINTR [ 178.058333][ T5118] Bluetooth: hci4: command tx timeout [ 178.190712][ T29] audit: type=1400 audit(1718709268.907:379): avc: denied { create } for pid=6212 comm="syz-executor.1" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 178.347890][ T29] audit: type=1400 audit(1718709268.917:380): avc: denied { connect } for pid=6212 comm="syz-executor.1" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 178.383442][ T6233] loop4: detected capacity change from 0 to 1024 [ 178.457396][ T29] audit: type=1400 audit(1718709269.127:381): avc: denied { bind } for pid=6212 comm="syz-executor.1" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 178.487474][ T2438] hsr_slave_0: left promiscuous mode [ 178.524728][ T2438] hsr_slave_1: left promiscuous mode [ 178.547359][ T29] audit: type=1400 audit(1718709269.147:382): avc: denied { write } for pid=6212 comm="syz-executor.1" path="socket:[12632]" dev="sockfs" ino=12632 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 178.582944][ T2438] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 178.591643][ T2438] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 178.613951][ T2438] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 178.639663][ T2438] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 178.854933][ T2438] veth1_macvtap: left promiscuous mode [ 178.878037][ T2438] veth0_macvtap: left promiscuous mode [ 178.942523][ T2438] veth1_vlan: left promiscuous mode [ 178.978118][ T2438] veth0_vlan: left promiscuous mode [ 178.993820][ T6240] overlayfs: missing 'lowerdir' [ 179.155918][ T6251] loop4: detected capacity change from 0 to 128 [ 179.210882][ T6251] ufs: Invalid option: "ufs" or missing value [ 179.245627][ T6251] ufs: wrong mount options [ 179.384962][ T6251] loop4: detected capacity change from 0 to 1024 [ 180.138790][ T5118] Bluetooth: hci4: command tx timeout [ 180.210840][ T6264] netlink: 72 bytes leftover after parsing attributes in process `syz-executor.3'. [ 180.338491][ T6268] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.3'. [ 180.444138][ T6270] loop3: detected capacity change from 0 to 1024 [ 180.599562][ T1109] hfsplus: b-tree write err: -5, ino 4 [ 180.708292][ T6272] loop3: detected capacity change from 0 to 64 [ 180.766572][ T2438] team0 (unregistering): Port device team_slave_1 removed [ 180.843848][ T2438] team0 (unregistering): Port device team_slave_0 removed [ 181.403006][ T6260] netlink: 'syz-executor.2': attribute type 21 has an invalid length. [ 181.458011][ T6265] netlink: 'syz-executor.1': attribute type 6 has an invalid length. [ 181.684878][ T29] kauditd_printk_skb: 6 callbacks suppressed [ 181.684897][ T29] audit: type=1400 audit(1718709273.327:389): avc: denied { write } for pid=6277 comm="syz-executor.2" name="sg0" dev="devtmpfs" ino=702 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 181.721575][ T6281] EXT4-fs warning (device sda1): verify_group_input:136: Cannot add at group 125 (only 8 groups) [ 181.878194][ T6288] ubi0: attaching mtd0 [ 181.895718][ T6288] ubi0: scanning is finished [ 181.900454][ T6288] ubi0: empty MTD device detected [ 182.041977][ T29] audit: type=1400 audit(1718709273.507:390): avc: denied { create } for pid=6277 comm="syz-executor.2" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 182.217782][ T5118] Bluetooth: hci4: command tx timeout [ 182.519653][ T6285] fuse: Invalid rootmode [ 182.580236][ T6288] ubi0 error: ubi_attach_mtd_dev: cannot spawn "ubi_bgt0d", error -4 [ 182.706379][ T6290] pimreg: entered allmulticast mode [ 182.855764][ T6299] loop2: detected capacity change from 0 to 256 [ 183.874955][ T29] audit: type=1400 audit(1718709275.487:391): avc: denied { create } for pid=6304 comm="syz-executor.4" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_connector_socket permissive=1 [ 183.901504][ T6164] chnl_net:caif_netlink_parms(): no params data found [ 184.296194][ T6318] bridge_slave_0: default FDB implementation only supports local addresses [ 185.114258][ T29] audit: type=1400 audit(1718709276.757:392): avc: denied { bind } for pid=6304 comm="syz-executor.4" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_connector_socket permissive=1 [ 185.391357][ T6164] bridge0: port 1(bridge_slave_0) entered blocking state [ 185.417640][ T6334] loop1: detected capacity change from 0 to 128 [ 185.422287][ T6164] bridge0: port 1(bridge_slave_0) entered disabled state [ 185.471217][ T6334] ufs: Invalid option: "ufs" or missing value [ 185.477330][ T6334] ufs: wrong mount options [ 185.497286][ T6164] bridge_slave_0: entered allmulticast mode [ 185.530402][ T6164] bridge_slave_0: entered promiscuous mode [ 185.588658][ T6164] bridge0: port 2(bridge_slave_1) entered blocking state [ 185.595879][ T6164] bridge0: port 2(bridge_slave_1) entered disabled state [ 185.645059][ T6334] loop1: detected capacity change from 0 to 1024 [ 185.651320][ T6164] bridge_slave_1: entered allmulticast mode [ 185.698827][ T6164] bridge_slave_1: entered promiscuous mode [ 185.875259][ T6344] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 186.051256][ T6164] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 186.131227][ T6164] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 186.211935][ T6354] fuse: Invalid rootmode [ 186.296634][ T6164] team0: Port device team_slave_0 added [ 186.368687][ T6354] pimreg: entered allmulticast mode [ 186.381601][ T6164] team0: Port device team_slave_1 added [ 186.575564][ T6362] bridge_slave_0: default FDB implementation only supports local addresses [ 186.616726][ T6164] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 186.658633][ T6164] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 186.798018][ T6164] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 186.891005][ T6164] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 186.907957][ T6164] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 187.003483][ T6164] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 187.040190][ T29] audit: type=1400 audit(1718709278.687:393): avc: denied { connect } for pid=6373 comm="syz-executor.2" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 187.059930][ C0] vkms_vblank_simulate: vblank timer overrun [ 187.203086][ T6377] xt_socket: unknown flags 0x4 [ 187.439052][ T6384] fuse: Bad value for 'fd' [ 187.494809][ T29] audit: type=1400 audit(1718709278.957:394): avc: denied { write } for pid=6380 comm="syz-executor.2" name="hwrng" dev="devtmpfs" ino=83 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:random_device_t tclass=chr_file permissive=1 [ 188.191240][ T6164] hsr_slave_0: entered promiscuous mode [ 188.198855][ T6164] hsr_slave_1: entered promiscuous mode [ 188.218025][ T29] audit: type=1400 audit(1718709279.057:395): avc: denied { create } for pid=6380 comm="syz-executor.2" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1 [ 188.277909][ T29] audit: type=1400 audit(1718709279.067:396): avc: denied { bind } for pid=6380 comm="syz-executor.2" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1 [ 188.307964][ T29] audit: type=1400 audit(1718709279.077:397): avc: denied { connect } for pid=6380 comm="syz-executor.2" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1 [ 188.376790][ T6387] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 189.715283][ T6393] binder: 6392:6393 ioctl c0306201 20000380 returned -14 [ 189.815014][ T6395] loop3: detected capacity change from 0 to 2048 [ 189.867204][ T6395] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 190.391253][ T6410] UDF-fs: error (device loop3): udf_read_inode: (ino 1345) failed !bh [ 190.972585][ T29] audit: type=1400 audit(1718709282.617:398): avc: denied { ioctl } for pid=6414 comm="syz-executor.2" path="socket:[12977]" dev="sockfs" ino=12977 ioctlcmd=0x8b32 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=isdn_socket permissive=1 [ 190.997538][ C0] vkms_vblank_simulate: vblank timer overrun [ 191.374579][ T931] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 191.414566][ T29] audit: type=1400 audit(1718709283.057:399): avc: denied { read } for pid=6423 comm="syz-executor.2" name="ppp" dev="devtmpfs" ino=694 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 191.556042][ T6426] syz-executor.4: attempt to access beyond end of device [ 191.556042][ T6426] nbd4: rw=0, sector=0, nr_sectors = 1 limit=0 [ 191.570464][ T6426] FAT-fs (nbd4): unable to read boot sector [ 191.727426][ T931] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 191.934474][ T931] usb 2-1: config 0 has no interfaces? [ 192.159150][ T6426] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_cmd_wq": -EINTR [ 192.216231][ T29] audit: type=1400 audit(1718709283.057:400): avc: denied { open } for pid=6423 comm="syz-executor.2" path="/dev/ppp" dev="devtmpfs" ino=694 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 192.258231][ T931] usb 2-1: New USB device found, idVendor=056a, idProduct=4001, bcdDevice= 0.00 [ 192.321839][ T931] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 192.443835][ T931] usb 2-1: config 0 descriptor?? [ 192.476808][ T6431] xt_ecn: cannot match TCP bits for non-tcp packets [ 192.513107][ T29] audit: type=1400 audit(1718709284.157:401): avc: denied { ioctl } for pid=6423 comm="syz-executor.2" path="/dev/ppp" dev="devtmpfs" ino=694 ioctlcmd=0x743e scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 192.856761][ T29] audit: type=1800 audit(1718709284.487:402): pid=6437 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed(directio) comm="syz-executor.3" name="bus" dev="sda1" ino=1954 res=0 errno=0 [ 193.198259][ T6164] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 194.139166][ T6164] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 194.160732][ T5165] usb 2-1: USB disconnect, device number 2 [ 194.208862][ T6164] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 194.273721][ T6446] loop3: detected capacity change from 0 to 8 [ 194.297867][ T6164] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 194.319492][ T6449] loop2: detected capacity change from 0 to 1024 [ 194.321340][ T29] audit: type=1400 audit(1718709285.947:403): avc: denied { mounton } for pid=6444 comm="syz-executor.3" path="/root/syzkaller-testdir1407174611/syzkaller.w1oXDh/75/file0" dev="fuse" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=file permissive=1 [ 194.791108][ T6446] ADFS-fs (nullb0): error: can't find an ADFS filesystem on dev nullb0. [ 194.811468][ T1241] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.818027][ T1241] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.913384][ T6164] 8021q: adding VLAN 0 to HW filter on device bond0 [ 195.015499][ T6455] loop4: detected capacity change from 0 to 40427 [ 195.028071][ T6455] F2FS-fs (loop4): Invalid log_blocksize (268), supports only 12 [ 195.035839][ T6455] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock [ 195.072484][ T6455] F2FS-fs (loop4): Found nat_bits in checkpoint [ 195.173684][ T6164] 8021q: adding VLAN 0 to HW filter on device team0 [ 195.209566][ T6455] F2FS-fs (loop4): Try to recover 1th superblock, ret: 0 [ 195.216659][ T6455] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 195.273960][ T5166] bridge0: port 1(bridge_slave_0) entered blocking state [ 195.281201][ T5166] bridge0: port 1(bridge_slave_0) entered forwarding state [ 195.392205][ T6470] xt_socket: unknown flags 0x4 [ 195.417355][ T6472] netlink: 204 bytes leftover after parsing attributes in process `syz-executor.4'. [ 195.427586][ T6472] unsupported nlmsg_type 40 [ 195.577562][ T5166] bridge0: port 2(bridge_slave_1) entered blocking state [ 195.584979][ T5166] bridge0: port 2(bridge_slave_1) entered forwarding state [ 195.658057][ T29] audit: type=1400 audit(1718709287.257:404): avc: denied { write } for pid=6452 comm="syz-executor.4" path="/root/syzkaller-testdir3978693616/syzkaller.sIIxUb/40/bus/file0" dev="loop4" ino=10 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 196.539610][ T6483] loop1: detected capacity change from 0 to 32768 [ 196.550806][ T6483] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop1 (7:1) scanned by syz-executor.1 (6483) [ 196.620445][ T6483] BTRFS info (device loop1): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 196.630751][ T6483] BTRFS info (device loop1): using crc32c (crc32c-intel) checksum algorithm [ 196.639583][ T6483] BTRFS info (device loop1): using free-space-tree [ 197.028103][ T6164] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 198.125215][ T6164] veth0_vlan: entered promiscuous mode [ 198.158237][ T5413] BTRFS info (device loop1): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 198.203907][ T6164] veth1_vlan: entered promiscuous mode [ 198.485131][ T6164] veth0_macvtap: entered promiscuous mode [ 198.558517][ T6164] veth1_macvtap: entered promiscuous mode [ 198.712324][ T6164] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 198.733934][ T6164] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 198.756133][ T6164] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 198.767248][ T6164] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 198.791145][ T6164] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 198.852644][ T6164] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 198.893926][ T6164] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 198.936475][ T6164] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 199.022761][ T6164] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 199.073675][ T6164] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 199.135276][ T6164] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 199.152036][ T6164] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 199.197399][ T6164] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 199.224825][ T6164] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 199.282661][ T6164] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 199.326079][ T6164] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 199.552624][ T6164] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 199.733729][ T6164] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 200.505475][ T6164] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 201.299424][ T6164] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 201.367872][ T6164] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 201.376620][ T6164] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 201.459157][ T29] audit: type=1326 audit(1718709293.097:405): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6543 comm="syz-executor.3" exe="/root/syz-executor.3" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fcfc427cf29 code=0x0 [ 201.506334][ T6548] loop4: detected capacity change from 0 to 2048 [ 201.574688][ T6549] loop1: detected capacity change from 0 to 8 [ 201.630570][ T6548] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 201.720614][ T29] audit: type=1400 audit(1718709293.367:406): avc: denied { mounton } for pid=6546 comm="syz-executor.4" path="/root/syzkaller-testdir3978693616/syzkaller.sIIxUb/43/file1/bus" dev="loop4" ino=1368 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:iso9660_t tclass=file permissive=1 [ 201.859753][ T6554] loop2: detected capacity change from 0 to 2048 [ 201.880799][ T1109] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 201.917414][ T6554] UDF-fs: error (device loop2): udf_read_tagged: tag checksum failed, block 99: 0x27 != 0x4d [ 201.919842][ T1109] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 201.941510][ T6549] ADFS-fs (nullb0): error: can't find an ADFS filesystem on dev nullb0. [ 201.956462][ T6554] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 201.981438][ T5118] Bluetooth: hci2: command 0x0406 tx timeout [ 202.039339][ T1049] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 202.065090][ T1049] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 202.149459][ T6558] loop4: detected capacity change from 0 to 8 [ 202.203211][ T6558] syz-executor.4: attempt to access beyond end of device [ 202.203211][ T6558] loop4: rw=2048, sector=36028797018963960, nr_sectors = 16 limit=8 [ 202.289646][ T6558] SQUASHFS error: Failed to read block 0xfffffffffffffffa: -5 [ 202.297160][ T6558] unable to read xattr id index table [ 202.952010][ T6575] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=35 sclass=netlink_route_socket pid=6575 comm=syz-executor.4 [ 204.177496][ T61] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 204.396462][ T29] audit: type=1400 audit(1718709296.027:407): avc: denied { connect } for pid=6580 comm="syz-executor.3" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 205.458117][ T6602] syz-executor.0: attempt to access beyond end of device [ 205.458117][ T6602] nbd0: rw=0, sector=0, nr_sectors = 1 limit=0 [ 205.471390][ T6602] FAT-fs (nbd0): unable to read boot sector [ 205.840959][ T29] audit: type=1400 audit(1718709296.997:408): avc: denied { create } for pid=6598 comm="syz-executor.0" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 206.148439][ T6603] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_cmd_wq": -EINTR [ 206.325796][ T29] audit: type=1400 audit(1718709296.997:409): avc: denied { connect } for pid=6598 comm="syz-executor.0" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 207.104710][ T6627] ubi0: attaching mtd0 [ 207.111909][ T6627] ubi0: scanning is finished [ 208.398566][ T6633] loop0: detected capacity change from 0 to 40427 [ 208.418261][ T6627] ubi0 error: ubi_attach_mtd_dev: cannot spawn "ubi_bgt0d", error -4 [ 208.431175][ T6633] F2FS-fs (loop0): Invalid log_blocksize (268), supports only 12 [ 208.439384][ T6633] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock [ 208.542913][ T6633] F2FS-fs (loop0): Found nat_bits in checkpoint [ 208.598317][ T6633] F2FS-fs (loop0): Try to recover 1th superblock, ret: 0 [ 208.605402][ T6633] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 208.689376][ T29] audit: type=1400 audit(1718709300.327:410): avc: denied { ioctl } for pid=6639 comm="syz-executor.3" path="socket:[13869]" dev="sockfs" ino=13869 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 208.714260][ C1] vkms_vblank_simulate: vblank timer overrun [ 208.896971][ T29] audit: type=1400 audit(1718709300.357:411): avc: denied { bind } for pid=6639 comm="syz-executor.3" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 209.082671][ T6647] syz-executor.0: attempt to access beyond end of device [ 209.082671][ T6647] loop0: rw=2049, sector=45096, nr_sectors = 128 limit=40427 [ 209.377093][ T29] audit: type=1326 audit(1718709300.427:412): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6642 comm="syz-executor.1" exe="/root/syz-executor.1" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f45a347cf29 code=0x0 [ 209.477795][ T29] audit: type=1400 audit(1718709300.637:413): avc: denied { setattr } for pid=6631 comm="syz-executor.0" name="bus" dev="loop0" ino=10 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 209.499879][ C1] vkms_vblank_simulate: vblank timer overrun [ 209.627154][ T29] audit: type=1804 audit(1718709300.767:414): pid=6647 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir735013638/syzkaller.YY06r9/6/bus/bus" dev="loop0" ino=10 res=1 errno=0 [ 209.653285][ C1] vkms_vblank_simulate: vblank timer overrun [ 209.793692][ T29] audit: type=1400 audit(1718709301.177:415): avc: denied { ioctl } for pid=6651 comm="syz-executor.3" path="socket:[13891]" dev="sockfs" ino=13891 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dccp_socket permissive=1 [ 209.818686][ C1] vkms_vblank_simulate: vblank timer overrun [ 210.040885][ T6656] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.1'. [ 210.072121][ T6656] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.1'. [ 210.592876][ T2438] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 210.673401][ T5118] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 210.694375][ T5118] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 210.705946][ T5118] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 210.738890][ T5118] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 210.757049][ T5118] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 210.764738][ T5118] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 210.929493][ T2438] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 210.949574][ T6678] loop1: detected capacity change from 0 to 8 [ 211.080162][ T5124] Bluetooth: hci2: unexpected event for opcode 0x0403 [ 211.206266][ T2438] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 211.324052][ T6678] ADFS-fs (nullb0): error: can't find an ADFS filesystem on dev nullb0. [ 211.421712][ T2438] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 211.789512][ T6704] loop1: detected capacity change from 0 to 2048 [ 211.862391][ T6704] UDF-fs: error (device loop1): udf_read_tagged: tag checksum failed, block 99: 0x27 != 0x4d [ 211.916241][ T6704] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 212.770584][ T6712] loop0: detected capacity change from 0 to 64 [ 212.857941][ T5124] Bluetooth: hci0: command tx timeout [ 212.888096][ T2438] bridge_slave_1: left allmulticast mode [ 212.894092][ T2438] bridge_slave_1: left promiscuous mode [ 212.911903][ T2438] bridge0: port 2(bridge_slave_1) entered disabled state [ 212.981884][ T2438] bridge_slave_0: left allmulticast mode [ 212.997771][ T2438] bridge_slave_0: left promiscuous mode [ 213.004904][ T2438] bridge0: port 1(bridge_slave_0) entered disabled state [ 213.361699][ T6723] fuse: Bad value for 'fd' [ 214.277634][ T6724] loop2: detected capacity change from 0 to 256 [ 214.436242][ T6724] exFAT-fs (loop2): error, invalid access to FAT (entry 0x00000005) bogus content (0x00000001) [ 214.574671][ T6724] exFAT-fs (loop2): failed to load upcase table [ 214.574867][ T6731] loop0: detected capacity change from 0 to 512 [ 214.617147][ T6724] exFAT-fs (loop2): failed to recognize exfat type [ 214.651907][ T6731] EXT4-fs (loop0): mounting ext3 file system using the ext4 subsystem [ 214.779646][ T6731] EXT4-fs (loop0): 1 truncate cleaned up [ 214.787309][ T6731] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 214.801739][ T6736] loop3: detected capacity change from 0 to 64 [ 214.937985][ T5124] Bluetooth: hci0: command tx timeout [ 215.100170][ T6164] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 215.107778][ T5124] Bluetooth: hci2: Controller not accepting commands anymore: ncmd = 0 [ 215.135195][ T5124] Bluetooth: hci2: Injecting HCI hardware error event [ 215.144233][ T5124] Bluetooth: hci2: hardware error 0x00 [ 215.150268][ T6736] syz-executor.3: attempt to access beyond end of device [ 215.150268][ T6736] loop3: rw=2049, sector=129, nr_sectors = 1 limit=64 [ 215.150563][ T6736] Buffer I/O error on dev loop3, logical block 129, lost async page write [ 216.025037][ T2438] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 216.054989][ T2438] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 216.075016][ T2438] bond0 (unregistering): Released all slaves [ 216.120359][ T6669] chnl_net:caif_netlink_parms(): no params data found [ 216.443614][ T6669] bridge0: port 1(bridge_slave_0) entered blocking state [ 216.459478][ T6669] bridge0: port 1(bridge_slave_0) entered disabled state [ 216.478320][ T6669] bridge_slave_0: entered allmulticast mode [ 216.495857][ T6669] bridge_slave_0: entered promiscuous mode [ 216.514864][ T6669] bridge0: port 2(bridge_slave_1) entered blocking state [ 216.522885][ T6746] loop1: detected capacity change from 0 to 65536 [ 216.525767][ T6669] bridge0: port 2(bridge_slave_1) entered disabled state [ 216.552747][ T6669] bridge_slave_1: entered allmulticast mode [ 216.565698][ T6669] bridge_slave_1: entered promiscuous mode [ 216.624505][ T6746] XFS (loop1): Mounting V5 Filesystem d6f69dbd-8c5d-46be-b88e-92c0ae88ceb2 [ 216.718059][ T29] audit: type=1400 audit(1718709308.367:416): avc: denied { bind } for pid=6759 comm="syz-executor.0" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 216.742548][ T29] audit: type=1400 audit(1718709308.387:417): avc: denied { setopt } for pid=6759 comm="syz-executor.0" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 216.825416][ T6746] XFS (loop1): Ending clean mount [ 216.833235][ T6746] XFS (loop1): Quotacheck needed: Please wait. [ 216.893066][ T6746] XFS (loop1): Quotacheck: Done. [ 217.022245][ T5118] Bluetooth: hci0: command tx timeout [ 217.418339][ T5124] Bluetooth: hci2: Opcode 0x0c03 failed: -110 [ 217.831815][ T6669] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 217.913816][ T6669] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 218.686760][ T6669] team0: Port device team_slave_0 added [ 218.774421][ T5413] XFS (loop1): Unmounting Filesystem d6f69dbd-8c5d-46be-b88e-92c0ae88ceb2 [ 218.796320][ T6785] loop2: detected capacity change from 0 to 512 [ 218.825969][ T6669] team0: Port device team_slave_1 added [ 218.888254][ T6785] EXT4-fs (loop2): mounting ext3 file system using the ext4 subsystem [ 218.959510][ T6785] EXT4-fs (loop2): 1 truncate cleaned up [ 218.977464][ T6785] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 219.083348][ T2438] hsr_slave_0: left promiscuous mode [ 219.098900][ T5124] Bluetooth: hci0: command tx timeout [ 219.209598][ T2438] hsr_slave_1: left promiscuous mode [ 219.247273][ T2438] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 219.273720][ T2438] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 219.298300][ T2438] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 219.316351][ T2438] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 219.340997][ T5113] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 219.428190][ T2438] veth1_macvtap: left promiscuous mode [ 219.471326][ T2438] veth0_macvtap: left promiscuous mode [ 219.527276][ T2438] veth1_vlan: left promiscuous mode [ 219.570684][ T2438] veth0_vlan: left promiscuous mode [ 219.651427][ T6804] loop0: detected capacity change from 0 to 256 [ 219.770548][ T6804] exFAT-fs (loop0): error, invalid access to FAT (entry 0x00000005) bogus content (0x00000001) [ 219.822980][ T6804] exFAT-fs (loop0): failed to load upcase table [ 219.870199][ T6804] exFAT-fs (loop0): failed to recognize exfat type [ 220.253198][ T6815] loop1: detected capacity change from 0 to 64 [ 220.477050][ T6815] syz-executor.1: attempt to access beyond end of device [ 220.477050][ T6815] loop1: rw=2049, sector=129, nr_sectors = 1 limit=64 [ 220.507766][ T6815] Buffer I/O error on dev loop1, logical block 129, lost async page write [ 220.813164][ T6822] loop1: detected capacity change from 0 to 256 [ 220.860801][ T6822] FAT-fs (loop1): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 220.885367][ T6822] FAT-fs (loop1): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 222.009502][ T29] audit: type=1400 audit(1718709313.627:418): avc: denied { bind } for pid=6821 comm="syz-executor.1" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 222.779608][ T2438] team0 (unregistering): Port device team_slave_1 removed [ 222.863868][ T2438] team0 (unregistering): Port device team_slave_0 removed [ 224.154363][ T6850] loop3: detected capacity change from 0 to 512 [ 224.174177][ T6850] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 224.213591][ T6850] EXT4-fs (loop3): 1 truncate cleaned up [ 224.226605][ T6850] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 224.250313][ T6850] CIFS: iocharset name too long [ 224.295904][ T5116] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 224.810930][ T6669] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 224.856584][ T6669] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 224.896511][ T6669] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 224.951893][ T6669] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 224.968148][ T6669] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 225.036738][ T6669] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 225.327554][ T6669] hsr_slave_0: entered promiscuous mode [ 225.377351][ T6669] hsr_slave_1: entered promiscuous mode [ 225.400766][ T6669] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 225.425005][ T6669] Cannot create hsr debugfs directory [ 225.584385][ T6879] overlayfs: missing 'lowerdir' [ 227.094946][ T6669] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 227.116137][ T6669] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 227.129453][ T6669] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 227.144680][ T6669] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 227.289895][ T6669] 8021q: adding VLAN 0 to HW filter on device bond0 [ 227.325188][ T6669] 8021q: adding VLAN 0 to HW filter on device team0 [ 227.343786][ T5164] bridge0: port 1(bridge_slave_0) entered blocking state [ 227.351042][ T5164] bridge0: port 1(bridge_slave_0) entered forwarding state [ 227.370753][ T5165] bridge0: port 2(bridge_slave_1) entered blocking state [ 227.377944][ T5165] bridge0: port 2(bridge_slave_1) entered forwarding state [ 227.714171][ T6669] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 228.105812][ T6669] veth0_vlan: entered promiscuous mode [ 228.137422][ T6669] veth1_vlan: entered promiscuous mode [ 228.222448][ T6669] veth0_macvtap: entered promiscuous mode [ 228.251546][ T6669] veth1_macvtap: entered promiscuous mode [ 228.296946][ T6669] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 228.316455][ T6669] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 228.327526][ T6669] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 228.339637][ T6669] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 228.354645][ T6669] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 228.365341][ T6669] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 228.375761][ T6669] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 228.397874][ T6669] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 228.410442][ T6669] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 228.446476][ T6669] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 228.457287][ T6669] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 228.475643][ T6669] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 228.486198][ T6669] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 228.496371][ T6669] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 228.517777][ T6669] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 228.527636][ T6669] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 228.551946][ T6669] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 228.566801][ T6669] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 228.601804][ T6669] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 228.617037][ T6669] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 228.630245][ T6669] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 228.650739][ T6669] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 228.831992][ T2459] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 228.841666][ T2459] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 228.922007][ T2438] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 228.930165][ T2438] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 230.328138][ T29] audit: type=1800 audit(1718709321.967:419): pid=6983 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz-executor.0" name="SYSV00000000" dev="hugetlbfs" ino=0 res=0 errno=0 [ 230.869436][ T29] audit: type=1326 audit(1718709322.507:420): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6989 comm="syz-executor.1" exe="/root/syz-executor.1" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f45a347cf29 code=0x0 [ 231.660568][ T29] audit: type=1326 audit(1718709322.657:421): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6989 comm="syz-executor.1" exe="/root/syz-executor.1" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f45a347cf29 code=0x0 [ 231.702551][ T29] audit: type=1400 audit(1718709323.207:422): avc: denied { create } for pid=6996 comm="syz-executor.0" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 232.064913][ T29] audit: type=1400 audit(1718709323.497:423): avc: denied { watch } for pid=6996 comm="syz-executor.0" path="/root/syzkaller-testdir735013638/syzkaller.YY06r9/18/net_prio.prioidx" dev="sda1" ino=1952 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 232.536775][ T29] audit: type=1400 audit(1718709323.567:424): avc: denied { getopt } for pid=6996 comm="syz-executor.0" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 232.707187][ T7020] ubi0: attaching mtd0 [ 232.718346][ T7020] ubi0: scanning is finished [ 233.460871][ T7020] ubi0 error: ubi_attach_mtd_dev: cannot spawn "ubi_bgt0d", error -4 [ 234.142158][ T7035] loop1: detected capacity change from 0 to 32768 [ 234.194168][ T7035] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop1 (7:1) scanned by syz-executor.1 (7035) [ 234.213135][ T7035] BTRFS info (device loop1): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 234.224362][ T7035] BTRFS info (device loop1): using crc32c (crc32c-intel) checksum algorithm [ 234.233225][ T7035] BTRFS info (device loop1): using free-space-tree [ 234.234492][ T29] audit: type=1400 audit(1718709325.877:425): avc: denied { create } for pid=7031 comm="syz-executor.0" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_tcpdiag_socket permissive=1 [ 235.073958][ T7033] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=7033 comm=syz-executor.0 [ 235.148122][ T29] audit: type=1400 audit(1718709326.337:426): avc: denied { read } for pid=7039 comm="syz-executor.3" name="cachefiles" dev="devtmpfs" ino=4 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cachefiles_device_t tclass=chr_file permissive=1 [ 235.196119][ T7033] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'. [ 235.248007][ T931] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 235.383561][ T7033] veth1_macvtap: left promiscuous mode [ 235.616832][ T29] audit: type=1400 audit(1718709326.347:427): avc: denied { open } for pid=7039 comm="syz-executor.3" path="/dev/cachefiles" dev="devtmpfs" ino=4 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cachefiles_device_t tclass=chr_file permissive=1 [ 235.687900][ T29] audit: type=1400 audit(1718709326.717:428): avc: denied { write } for pid=7031 comm="syz-executor.0" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_tcpdiag_socket permissive=1 [ 235.751324][ T931] usb 3-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 236.335199][ T2459] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 236.397479][ T29] audit: type=1400 audit(1718709326.757:429): avc: denied { read } for pid=7031 comm="syz-executor.0" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_tcpdiag_socket permissive=1 [ 236.428355][ T931] usb 3-1: New USB device found, idVendor=056a, idProduct=0026, bcdDevice= 0.40 [ 236.499671][ T931] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 236.561586][ T931] usb 3-1: Product: syz [ 236.566457][ T7076] syz-executor.3: attempt to access beyond end of device [ 236.566457][ T7076] loop3: rw=4096, sector=0, nr_sectors = 1 limit=0 [ 236.582165][ T5413] BTRFS info (device loop1): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 236.601992][ T931] usb 3-1: Manufacturer: syz [ 236.614571][ T931] usb 3-1: SerialNumber: syz [ 236.639769][ T7076] XFS (loop3): SB validate failed with error -5. [ 236.719470][ T931] usb 3-1: can't set config #1, error -71 [ 236.770708][ T931] usb 3-1: USB disconnect, device number 5 [ 236.800319][ T29] audit: type=1800 audit(1718709328.437:430): pid=7087 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz-executor.4" name="SYSV00000000" dev="hugetlbfs" ino=0 res=0 errno=0 [ 237.019416][ T29] audit: type=1400 audit(1718709328.667:431): avc: denied { create } for pid=7086 comm="syz-executor.0" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 239.478267][ T931] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 239.672429][ T931] usb 3-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 239.732248][ T931] usb 3-1: New USB device found, idVendor=056a, idProduct=0026, bcdDevice= 0.40 [ 239.760773][ T931] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 239.797961][ T931] usb 3-1: Product: syz [ 239.828085][ T931] usb 3-1: Manufacturer: syz [ 239.847833][ T931] usb 3-1: SerialNumber: syz [ 239.900077][ T931] usbhid 3-1:1.0: couldn't find an input interrupt endpoint [ 240.848069][ T931] usb 3-1: USB disconnect, device number 6 [ 241.040649][ T7143] fuse: Bad value for 'fd' [ 241.562509][ T7161] loop1: detected capacity change from 0 to 8 [ 242.036439][ T7163] loop4: detected capacity change from 0 to 32768 [ 242.045985][ T7163] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop4 (7:4) scanned by syz-executor.4 (7163) [ 242.075625][ T7163] BTRFS info (device loop4): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 242.085956][ T7163] BTRFS info (device loop4): using crc32c (crc32c-intel) checksum algorithm [ 242.095107][ T7163] BTRFS info (device loop4): using free-space-tree [ 242.837746][ T7188] xt_socket: unknown flags 0x50 [ 242.917280][ T7187] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.2'. [ 244.340971][ T7187] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.2'. [ 244.418127][ T6669] BTRFS info (device loop4): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 244.671896][ T29] audit: type=1400 audit(1718709336.307:432): avc: denied { node_bind } for pid=7195 comm="syz-executor.1" saddr=172.20.20.170 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=rawip_socket permissive=1 [ 244.700705][ T7200] loop0: detected capacity change from 0 to 64 [ 244.914775][ T7206] block nbd3: NBD_DISCONNECT [ 246.136140][ T29] audit: type=1400 audit(1718709337.777:433): avc: denied { connect } for pid=7224 comm="syz-executor.3" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 246.137615][ T7225] RDS: rds_bind could not find a transport for fe80::bb, load rds_tcp or rds_rdma? [ 246.245888][ T29] audit: type=1804 audit(1718709337.887:434): pid=7222 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir735013638/syzkaller.YY06r9/31/cgroup.controllers" dev="sda1" ino=1957 res=1 errno=0 [ 246.298878][ T7229] loop4: detected capacity change from 0 to 8 [ 246.364748][ T7222] netlink: 4068 bytes leftover after parsing attributes in process `syz-executor.0'. [ 246.819140][ T7232] loop3: detected capacity change from 0 to 32768 [ 246.830122][ T7232] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop3 (7:3) scanned by syz-executor.3 (7232) [ 246.861800][ T7232] BTRFS info (device loop3): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 246.873391][ T7232] BTRFS info (device loop3): using crc32c (crc32c-intel) checksum algorithm [ 246.882214][ T7232] BTRFS info (device loop3): using free-space-tree [ 247.135497][ T7211] loop2: detected capacity change from 0 to 32768 [ 247.392460][ T7211] XFS (loop2): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 248.002395][ T5165] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 248.280784][ T5165] usb 2-1: Using ep0 maxpacket: 32 [ 248.294450][ T5116] BTRFS info (device loop3): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 248.354499][ T5165] usb 2-1: config index 0 descriptor too short (expected 156, got 27) [ 248.394183][ T5165] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x87 has an invalid bInterval 0, changing to 7 [ 248.430175][ T7211] XFS (loop2): Ending clean mount [ 248.466554][ T5165] usb 2-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice=86.66 [ 248.480379][ T5165] usb 2-1: New USB device strings: Mfr=85, Product=120, SerialNumber=172 [ 248.505403][ T7211] XFS (loop2): Quotacheck needed: Please wait. [ 248.513285][ T5165] usb 2-1: Product: syz [ 248.551775][ T5165] usb 2-1: Manufacturer: syz [ 248.575628][ T5165] usb 2-1: SerialNumber: syz [ 248.600455][ T5165] usb 2-1: config 0 descriptor?? [ 248.641533][ T5165] ldusb 2-1:0.0: Interrupt out endpoint not found (using control endpoint instead) [ 248.661121][ T29] audit: type=1400 audit(1718709340.287:435): avc: denied { write } for pid=7274 comm="syz-executor.4" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 248.669757][ T7279] x_tables: ip6_tables: TCPOPTSTRIP target: only valid in mangle table, not raw [ 248.699841][ T7211] XFS (loop2): Quotacheck: Done. [ 248.733479][ T5165] ldusb 2-1:0.0: LD USB Device #0 now attached to major 180 minor 0 [ 248.863879][ T5113] XFS (loop2): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 248.945275][ T931] usb 2-1: USB disconnect, device number 3 [ 249.022154][ T931] ldusb 2-1:0.0: LD USB Device #0 now disconnected [ 249.093449][ T7287] loop3: detected capacity change from 0 to 1024 [ 249.113233][ T7287] EXT4-fs: Ignoring removed orlov option [ 249.123129][ T7287] EXT4-fs: Ignoring removed nomblk_io_submit option [ 249.198806][ T7287] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 249.313354][ T29] audit: type=1400 audit(1718709340.957:436): avc: denied { setattr } for pid=7284 comm="syz-executor.3" name="file1" dev="loop3" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 249.368339][ T7287] process 'syz-executor.3' launched './file0/file0' with NULL argv: empty string added [ 249.391591][ T29] audit: type=1400 audit(1718709341.007:437): avc: denied { execute } for pid=7284 comm="syz-executor.3" name="file0" dev="loop3" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 249.447174][ T29] audit: type=1400 audit(1718709341.067:438): avc: denied { execute_no_trans } for pid=7284 comm="syz-executor.3" path="/root/syzkaller-testdir1407174611/syzkaller.w1oXDh/127/file1/file0/file0" dev="loop3" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 249.615579][ T5116] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 249.883167][ T29] audit: type=1804 audit(1718709341.517:439): pid=7302 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=open_writers comm="syz-executor.1" name="/root/syzkaller-testdir3859937171/syzkaller.LjxYhe/82/file0" dev="sda1" ino=1956 res=1 errno=0 [ 250.175118][ T5124] Bluetooth: hci4: Controller not accepting commands anymore: ncmd = 0 [ 250.184663][ T5124] Bluetooth: hci4: Injecting HCI hardware error event [ 250.196192][ T5124] Bluetooth: hci4: hardware error 0x00 [ 251.021299][ T7312] ax25_connect(): syz-executor.4 uses autobind, please contact jreuter@yaina.de [ 251.110298][ T7313] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.1'. [ 251.156802][ T7313] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.1'. [ 252.766362][ T29] audit: type=1400 audit(1718709344.407:440): avc: denied { getopt } for pid=7321 comm="syz-executor.0" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 252.888416][ T5124] Bluetooth: hci4: Opcode 0x0c03 failed: -110 [ 253.618245][ T29] audit: type=1400 audit(1718709345.237:441): avc: denied { unlink } for pid=7314 comm="syz-executor.2" name="#1" dev="sda1" ino=1957 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_home_t tclass=chr_file permissive=1 [ 253.764273][ T7318] loop3: detected capacity change from 0 to 4096 [ 253.831769][ T7318] ntfs3: Invalid value for umask. [ 254.448069][ T5165] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 255.167838][ T5165] usb 2-1: Using ep0 maxpacket: 32 [ 255.183885][ T5165] usb 2-1: config index 0 descriptor too short (expected 156, got 27) [ 255.324350][ T29] audit: type=1326 audit(1718709346.887:442): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7335 comm="syz-executor.0" exe="/root/syz-executor.0" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f6bb027cf29 code=0x0 [ 255.373327][ T5165] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x87 has an invalid bInterval 0, changing to 7 [ 255.971461][ T5165] usb 2-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice=86.66 [ 255.997856][ T29] audit: type=1326 audit(1718709347.057:443): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7335 comm="syz-executor.0" exe="/root/syz-executor.0" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f6bb027cf29 code=0x0 [ 256.033655][ T5165] usb 2-1: New USB device strings: Mfr=85, Product=120, SerialNumber=172 [ 256.095538][ T5165] usb 2-1: Product: syz [ 256.100585][ T5165] usb 2-1: Manufacturer: syz [ 256.105229][ T5165] usb 2-1: SerialNumber: syz [ 256.170018][ T5165] usb 2-1: config 0 descriptor?? [ 256.192759][ T5165] ldusb 2-1:0.0: Interrupt out endpoint not found (using control endpoint instead) [ 256.222558][ T1241] ieee802154 phy0 wpan0: encryption failed: -22 [ 256.229162][ T1241] ieee802154 phy1 wpan1: encryption failed: -22 [ 256.264636][ T5165] ldusb 2-1:0.0: LD USB Device #0 now attached to major 180 minor 0 [ 256.305313][ T29] audit: type=1800 audit(1718709347.937:444): pid=7342 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed(directio) comm="syz-executor.3" name="bus" dev="sda1" ino=1953 res=0 errno=0 [ 256.402186][ T29] audit: type=1400 audit(1718709348.047:445): avc: denied { mounton } for pid=7341 comm="syz-executor.3" path="/root/syzkaller-testdir1407174611/syzkaller.w1oXDh/130/file0/bus" dev="tmpfs" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 256.434885][ T7344] loop0: detected capacity change from 0 to 4096 [ 256.548351][ T7344] NILFS (loop0): invalid segment: Checksum error in segment payload [ 256.559850][ T5165] usb 2-1: USB disconnect, device number 4 [ 256.597102][ T7344] NILFS (loop0): trying rollback from an earlier position [ 256.616107][ T5165] ldusb 2-1:0.0: LD USB Device #0 now disconnected [ 256.719283][ T7344] NILFS (loop0): recovery complete [ 256.738809][ T7350] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 257.094655][ T2438] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 257.274453][ T29] audit: type=1400 audit(1718709348.917:446): avc: denied { block_suspend } for pid=7355 comm="syz-executor.3" capability=36 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 257.545932][ T29] audit: type=1804 audit(1718709349.127:447): pid=7363 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=open_writers comm="syz-executor.4" name="/root/syzkaller-testdir709176246/syzkaller.ouDryG/14/file0" dev="sda1" ino=1936 res=1 errno=0 [ 258.059594][ T2438] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 258.258123][ T7367] netlink: 108 bytes leftover after parsing attributes in process `syz-executor.0'. [ 258.319644][ T7367] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.0'. [ 258.421199][ T2438] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 258.470195][ T7371] input: syz0 as /devices/virtual/input/input7 [ 258.565519][ T29] audit: type=1400 audit(1718709350.207:448): avc: denied { ioctl } for pid=4524 comm="acpid" path="/dev/input/event4" dev="devtmpfs" ino=2496 ioctlcmd=0x4520 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 258.666839][ T7372] loop3: detected capacity change from 0 to 4096 [ 258.727107][ T7372] ntfs3: Invalid value for umask. [ 259.746467][ T7380] loop1: detected capacity change from 0 to 1024 [ 259.795562][ T2438] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 259.977269][ T29] audit: type=1804 audit(1718709351.617:449): pid=7380 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=open_writers comm="syz-executor.1" name="/root/syzkaller-testdir3859937171/syzkaller.LjxYhe/89/file0/bus" dev="loop1" ino=26 res=1 errno=0 [ 260.139956][ T2483] hfsplus: b-tree write err: -5, ino 4 [ 260.431858][ T5118] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 260.446123][ T5118] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 260.489542][ T5118] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 260.501492][ T5118] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 260.516811][ T2438] bridge_slave_1: left allmulticast mode [ 260.527307][ T5118] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 260.545181][ T7404] loop4: detected capacity change from 0 to 2048 [ 260.553429][ T5118] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 260.581994][ T2438] bridge_slave_1: left promiscuous mode [ 260.665332][ T2438] bridge0: port 2(bridge_slave_1) entered disabled state [ 261.070989][ T29] audit: type=1804 audit(1718709352.327:450): pid=7408 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir1407174611/syzkaller.w1oXDh/135/file0" dev="sda1" ino=1949 res=1 errno=0 [ 261.458061][ T7413] loop1: detected capacity change from 0 to 64 [ 261.698692][ T2438] bridge_slave_0: left allmulticast mode [ 261.777906][ T7419] ax25_connect(): syz-executor.0 uses autobind, please contact jreuter@yaina.de [ 262.027767][ T2438] bridge_slave_0: left promiscuous mode [ 262.108338][ T7413] BFS-fs: bfs_fill_super(): loop1 is unclean, continuing [ 262.819043][ T5118] Bluetooth: hci3: command tx timeout [ 262.857060][ T2438] bridge0: port 1(bridge_slave_0) entered disabled state [ 262.879188][ T7422] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 262.938001][ T29] audit: type=1400 audit(1718709354.577:451): avc: denied { setopt } for pid=7417 comm="syz-executor.3" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 264.546888][ T29] audit: type=1400 audit(1718709356.187:452): avc: denied { create } for pid=7432 comm="syz-executor.3" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_fib_lookup_socket permissive=1 [ 264.667809][ T29] audit: type=1400 audit(1718709356.307:453): avc: denied { append } for pid=7432 comm="syz-executor.3" name="001" dev="devtmpfs" ino=723 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 264.864988][ T5118] Bluetooth: hci3: command tx timeout [ 265.646687][ T7445] loop0: detected capacity change from 0 to 4096 [ 265.684327][ T7445] ntfs3: Invalid value for umask. [ 266.028026][ T2438] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 266.103951][ T2438] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 266.123704][ T2438] bond0 (unregistering): Released all slaves [ 266.386878][ T7422] NILFS (loop4): vblocknr = 23 has abnormal lifetime: start cno (= 4294967298) > current cno (= 3) [ 266.426619][ T7422] NILFS error (device loop4): nilfs_bmap_propagate: broken bmap (inode number=4) [ 266.529947][ T7422] Remounting filesystem read-only [ 266.536206][ T61] NILFS (loop4): discard dirty page: offset=4096, ino=6 [ 266.548427][ T61] NILFS (loop4): discard dirty block: blocknr=39, size=1024 [ 266.565748][ T61] NILFS (loop4): discard dirty block: blocknr=18446744073709551615, size=1024 [ 266.587895][ T61] NILFS (loop4): discard dirty block: blocknr=18446744073709551615, size=1024 [ 266.638330][ T61] NILFS (loop4): discard dirty block: blocknr=18446744073709551615, size=1024 [ 266.668048][ T61] NILFS (loop4): discard dirty page: offset=0, ino=2 [ 266.674779][ T61] NILFS (loop4): discard dirty block: blocknr=18, size=1024 [ 266.717923][ T61] NILFS (loop4): discard dirty block: blocknr=18446744073709551615, size=1024 [ 266.726987][ T61] NILFS (loop4): discard dirty block: blocknr=18446744073709551615, size=1024 [ 266.768674][ T61] NILFS (loop4): discard dirty block: blocknr=18446744073709551615, size=1024 [ 266.791868][ T61] NILFS (loop4): discard dirty page: offset=0, ino=5 [ 266.814717][ T61] NILFS (loop4): discard dirty block: blocknr=41, size=1024 [ 266.839022][ T61] NILFS (loop4): discard dirty block: blocknr=18446744073709551615, size=1024 [ 266.872007][ T61] NILFS (loop4): discard dirty block: blocknr=18446744073709551615, size=1024 [ 266.936834][ T61] NILFS (loop4): discard dirty block: blocknr=18446744073709551615, size=1024 [ 266.946097][ T29] audit: type=1400 audit(1718709358.577:454): avc: denied { setopt } for pid=7456 comm="syz-executor.0" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 266.966358][ T5118] Bluetooth: hci3: command tx timeout [ 267.046920][ T6669] NILFS (loop4): disposed unprocessed dirty file(s) when stopping log writer [ 267.138914][ T6669] NILFS (loop4): discard dirty page: offset=0, ino=6 [ 267.146940][ T6669] NILFS (loop4): discard dirty block: blocknr=35, size=1024 [ 267.243824][ T6669] NILFS (loop4): discard dirty block: blocknr=36, size=1024 [ 267.279413][ T6669] NILFS (loop4): discard dirty block: blocknr=37, size=1024 [ 267.338785][ T6669] NILFS (loop4): discard dirty block: blocknr=38, size=1024 [ 267.349716][ T6669] NILFS (loop4): discard dirty page: offset=0, ino=4 [ 267.356436][ T6669] NILFS (loop4): discard dirty block: blocknr=40, size=1024 [ 267.363985][ T6669] NILFS (loop4): discard dirty block: blocknr=18446744073709551615, size=1024 [ 267.382357][ T6669] NILFS (loop4): discard dirty block: blocknr=18446744073709551615, size=1024 [ 267.412038][ T6669] NILFS (loop4): discard dirty block: blocknr=18446744073709551615, size=1024 [ 267.448263][ T6669] NILFS (loop4): discard dirty page: offset=0, ino=3 [ 267.470511][ T6669] NILFS (loop4): discard dirty block: blocknr=42, size=1024 [ 267.524391][ T6669] NILFS (loop4): discard dirty block: blocknr=43, size=1024 [ 267.600163][ T6669] NILFS (loop4): discard dirty block: blocknr=44, size=1024 [ 267.634708][ T6669] NILFS (loop4): discard dirty block: blocknr=18446744073709551615, size=1024 [ 267.765979][ T29] audit: type=1400 audit(1718709359.267:455): avc: denied { connect } for pid=7462 comm="syz-executor.0" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 267.818670][ T6669] NILFS (loop4): discard dirty page: offset=196608, ino=3 [ 267.826041][ T6669] NILFS (loop4): discard dirty block: blocknr=18446744073709551615, size=1024 [ 267.852361][ T6669] NILFS (loop4): discard dirty block: blocknr=18446744073709551615, size=1024 [ 268.394987][ T6669] NILFS (loop4): discard dirty block: blocknr=49, size=1024 [ 268.428476][ T6669] NILFS (loop4): discard dirty block: blocknr=18446744073709551615, size=1024 [ 268.485230][ T29] audit: type=1326 audit(1718709359.327:456): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7461 comm="syz-executor.3" exe="/root/syz-executor.3" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fcfc427cf29 code=0x0 [ 268.512974][ T29] audit: type=1326 audit(1718709359.457:457): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7461 comm="syz-executor.3" exe="/root/syz-executor.3" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fcfc427cf29 code=0x0 [ 268.754770][ T7480] netlink: 'syz-executor.3': attribute type 8 has an invalid length. [ 268.763832][ T7480] netlink: 'syz-executor.3': attribute type 9 has an invalid length. [ 268.974391][ T2438] hsr_slave_0: left promiscuous mode [ 269.018313][ T5118] Bluetooth: hci3: command tx timeout [ 269.027395][ T2438] hsr_slave_1: left promiscuous mode [ 269.055373][ T2438] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 269.094014][ T2438] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 269.134561][ T2438] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 269.135127][ T29] audit: type=1804 audit(1718709360.777:458): pid=7490 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=ToMToU comm="syz-executor.3" name="/root/syzkaller-testdir1407174611/syzkaller.w1oXDh/142/file0" dev="fuse" ino=1 res=1 errno=0 [ 269.157077][ T2438] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 269.248885][ T2438] veth1_macvtap: left promiscuous mode [ 269.255017][ T2438] veth0_macvtap: left promiscuous mode [ 269.268447][ T2438] veth1_vlan: left promiscuous mode [ 269.284044][ T2438] veth0_vlan: left promiscuous mode [ 269.748557][ T2438] pimreg (unregistering): left allmulticast mode [ 269.901456][ T7486] loop1: detected capacity change from 0 to 32768 [ 270.415739][ T7494] loop0: detected capacity change from 0 to 4096 [ 270.458326][ T7494] ntfs3: Invalid value for umask. [ 270.973622][ T29] audit: type=1400 audit(1718709362.617:459): avc: denied { write } for pid=7506 comm="syz-executor.3" name="udp" dev="proc" ino=4026532892 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_net_t tclass=file permissive=1 [ 271.562608][ T29] audit: type=1400 audit(1718709363.167:460): avc: denied { getopt } for pid=7516 comm="syz-executor.1" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 272.484950][ T2438] team0 (unregistering): Port device team_slave_1 removed [ 272.843796][ T2438] team0 (unregistering): Port device team_slave_0 removed [ 273.637954][ T5165] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 273.956872][ T5165] usb 2-1: New USB device found, idVendor=08fd, idProduct=0002, bcdDevice=ca.fd [ 273.967329][ T5165] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 273.976288][ T5165] usb 2-1: Product: syz [ 273.981182][ T5165] usb 2-1: Manufacturer: syz [ 273.986106][ T5165] usb 2-1: SerialNumber: syz [ 274.206036][ T7530] block nbd3: NBD_DISCONNECT [ 274.796479][ T5165] usb 2-1: config 0 descriptor?? [ 274.949450][ T5165] usb 2-1: can't set config #0, error -71 [ 274.958576][ T5165] usb 2-1: USB disconnect, device number 5 [ 275.274145][ T7537] loop1: detected capacity change from 0 to 1024 [ 275.319321][ T7537] EXT4-fs: Ignoring removed orlov option [ 275.325160][ T7537] EXT4-fs: Ignoring removed nomblk_io_submit option [ 275.510493][ T7537] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 276.065418][ T7548] loop0: detected capacity change from 0 to 2048 [ 276.065484][ T7400] chnl_net:caif_netlink_parms(): no params data found [ 276.122458][ T7548] UDF-fs: warning (device loop0): udf_load_vrs: No anchor found [ 276.190309][ T5413] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 276.208758][ T7548] UDF-fs: Scanning with blocksize 512 failed [ 276.246526][ T29] audit: type=1400 audit(1718709367.787:461): avc: denied { connect } for pid=7541 comm="syz-executor.4" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 276.343664][ T7548] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 276.659432][ T29] audit: type=1400 audit(1718709368.297:462): avc: denied { mounton } for pid=7547 comm="syz-executor.0" path="/root/syzkaller-testdir735013638/syzkaller.YY06r9/52/file0/file0" dev="loop0" ino=833 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:iso9660_t tclass=dir permissive=1 [ 276.730926][ T7549] netdevsim netdevsim4 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 276.749610][ T7568] loop1: detected capacity change from 0 to 1024 [ 276.788815][ T7400] bridge0: port 1(bridge_slave_0) entered blocking state [ 276.816668][ T7568] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 276.883278][ T7400] bridge0: port 1(bridge_slave_0) entered disabled state [ 276.895679][ T7400] bridge_slave_0: entered allmulticast mode [ 276.906448][ T7400] bridge_slave_0: entered promiscuous mode [ 276.917420][ T29] audit: type=1400 audit(1718709368.557:463): avc: denied { link } for pid=7564 comm="syz-executor.1" name="file0" dev="loop1" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 276.922001][ T7400] bridge0: port 2(bridge_slave_1) entered blocking state [ 276.949181][ T7400] bridge0: port 2(bridge_slave_1) entered disabled state [ 276.956446][ T7400] bridge_slave_1: entered allmulticast mode [ 276.964465][ T7400] bridge_slave_1: entered promiscuous mode [ 276.975959][ T7568] Quota error (device loop1): find_tree_dqentry: Cycle in quota tree detected: block 4 index 0 [ 277.038687][ T7568] Quota error (device loop1): qtree_read_dquot: Can't read quota structure for id 0 [ 277.082804][ T7568] EXT4-fs error (device loop1): ext4_acquire_dquot:6858: comm syz-executor.1: Failed to acquire dquot type 0 [ 277.185686][ T7400] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 277.215901][ T7400] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 277.247325][ T5413] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 277.411084][ T7400] team0: Port device team_slave_0 added [ 277.459820][ T7400] team0: Port device team_slave_1 added [ 281.285846][ T7599] block nbd1: NBD_DISCONNECT [ 282.028514][ T7400] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 282.076244][ T7400] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 282.150742][ T29] audit: type=1400 audit(1718709373.787:464): avc: denied { connect } for pid=7608 comm="syz-executor.0" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 282.157921][ T7400] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 282.227111][ T29] audit: type=1400 audit(1718709373.857:465): avc: denied { nlmsg_read } for pid=7609 comm="syz-executor.4" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_tcpdiag_socket permissive=1 [ 282.425950][ T7400] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 282.476063][ T7400] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 282.526797][ T7616] loop0: detected capacity change from 0 to 256 [ 282.576650][ T7616] exfat: Deprecated parameter 'namecase' [ 282.614408][ T7400] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 282.623640][ T7618] loop1: detected capacity change from 0 to 512 [ 282.662905][ T7616] exFAT-fs (loop0): failed to load upcase table (idx : 0x00010000, chksum : 0xb89b369d, utbl_chksum : 0xe619d30d) [ 282.912735][ T7400] hsr_slave_0: entered promiscuous mode [ 282.922562][ T7619] loop4: detected capacity change from 0 to 4096 [ 283.000989][ T7400] hsr_slave_1: entered promiscuous mode [ 283.022860][ T7619] NILFS (loop4): invalid segment: Checksum error in segment payload [ 283.051085][ T7619] NILFS (loop4): trying rollback from an earlier position [ 283.127122][ T7400] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 283.151057][ T7400] Cannot create hsr debugfs directory [ 283.168993][ T7619] NILFS (loop4): recovery complete [ 283.185454][ T7623] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 284.032006][ T7639] bridge0: port 2(bridge_slave_1) entered disabled state [ 284.042166][ T7639] bridge0: port 1(bridge_slave_0) entered disabled state [ 284.401810][ T7639] bridge0: port 2(bridge_slave_1) entered blocking state [ 284.410273][ T7639] bridge0: port 2(bridge_slave_1) entered forwarding state [ 284.419887][ T7639] bridge0: port 1(bridge_slave_0) entered blocking state [ 284.427260][ T7639] bridge0: port 1(bridge_slave_0) entered forwarding state [ 284.508254][ T7639] bridge0: entered promiscuous mode [ 284.532659][ T7639] bridge0: entered allmulticast mode [ 284.587535][ T7654] loop0: detected capacity change from 0 to 1024 [ 284.654778][ T7654] EXT4-fs: Ignoring removed orlov option [ 284.702811][ T7654] EXT4-fs: Ignoring removed nomblk_io_submit option [ 285.116100][ T7665] block nbd3: NBD_DISCONNECT [ 285.781099][ T7654] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 285.938783][ T7673] loop1: detected capacity change from 0 to 64 [ 286.167405][ T6164] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 286.230974][ T7679] loop4: detected capacity change from 0 to 512 [ 286.252674][ T7673] hfs: walked past end of dir [ 286.260491][ T7681] capability: warning: `syz-executor.3' uses deprecated v2 capabilities in a way that may be insecure [ 286.315024][ T7679] EXT4-fs (loop4): feature flags set on rev 0 fs, running e2fsck is recommended [ 286.367512][ T7679] EXT4-fs (loop4): blocks per group (3008) and clusters per group (32768) inconsistent [ 286.809635][ T7690] ax25_connect(): syz-executor.3 uses autobind, please contact jreuter@yaina.de [ 288.388780][ T7696] loop0: detected capacity change from 0 to 2048 [ 288.646179][ T7400] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 288.735574][ T7400] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 288.791358][ T7400] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 288.932098][ T7400] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 289.080330][ T7703] netlink: 9 bytes leftover after parsing attributes in process `syz-executor.4'. [ 289.115066][ T29] audit: type=1400 audit(1718709380.757:466): avc: denied { setopt } for pid=7705 comm="syz-executor.0" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 289.242265][ T7703] gretap0: entered promiscuous mode [ 289.353706][ T7710] loop4: detected capacity change from 0 to 512 [ 289.476586][ T7710] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 289.785136][ T7400] 8021q: adding VLAN 0 to HW filter on device bond0 [ 289.900038][ T7400] 8021q: adding VLAN 0 to HW filter on device team0 [ 289.932413][ T928] bridge0: port 1(bridge_slave_0) entered blocking state [ 289.939598][ T928] bridge0: port 1(bridge_slave_0) entered forwarding state [ 289.965553][ T7703] fs-verity (loop4, inode 15): Unknown hash algorithm number: 0 [ 290.014435][ T928] bridge0: port 2(bridge_slave_1) entered blocking state [ 290.021805][ T928] bridge0: port 2(bridge_slave_1) entered forwarding state [ 290.513940][ T29] audit: type=1400 audit(1718709382.157:467): avc: denied { mounton } for pid=7728 comm="syz-executor.0" path="/root/syzkaller-testdir735013638/syzkaller.YY06r9/66/file0" dev="sda1" ino=1944 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_home_t tclass=fifo_file permissive=1 [ 291.164134][ T7742] block nbd0: NBD_DISCONNECT [ 291.950032][ T7741] loop3: detected capacity change from 0 to 1024 [ 292.032836][ T7741] EXT4-fs: Ignoring removed orlov option [ 292.082544][ T7400] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 292.090622][ T7741] EXT4-fs: Ignoring removed nomblk_io_submit option [ 292.151101][ T7741] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 292.366445][ T7400] veth0_vlan: entered promiscuous mode [ 292.446598][ T7400] veth1_vlan: entered promiscuous mode [ 292.568141][ T5116] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 292.591981][ T7761] loop0: detected capacity change from 0 to 47 [ 292.628351][ T7400] veth0_macvtap: entered promiscuous mode [ 292.694901][ T7400] veth1_macvtap: entered promiscuous mode [ 292.790565][ T7400] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 292.828893][ T7400] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 292.886377][ T7764] loop1: detected capacity change from 0 to 2048 [ 292.894403][ T7400] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 292.927539][ T7400] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 292.967850][ T7400] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 292.981368][ T7764] UDF-fs: error (device loop1): udf_read_tagged: tag checksum failed, block 99: 0x27 != 0x4d [ 293.016899][ T7400] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 293.038982][ T7764] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 293.060648][ T7400] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 293.108829][ T7400] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 293.141240][ T7400] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 293.176887][ T7400] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 293.180681][ T6669] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 293.202031][ T7400] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 293.259656][ T7400] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 293.304306][ T7400] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 293.314618][ T7400] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 293.328583][ T7400] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 293.341667][ T7400] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 293.367798][ T7400] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 293.387309][ T7400] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 293.420530][ T7400] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 293.469644][ T7400] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 293.512580][ T7400] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 293.545231][ T29] audit: type=1400 audit(1718709385.187:468): avc: denied { create } for pid=7780 comm="syz-executor.4" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 293.576175][ T7400] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 293.663584][ T29] audit: type=1400 audit(1718709385.217:469): avc: denied { setopt } for pid=7780 comm="syz-executor.4" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 293.774569][ T29] audit: type=1400 audit(1718709385.217:470): avc: denied { write } for pid=7780 comm="syz-executor.4" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 294.036144][ T2438] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 294.083371][ T2438] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 294.235173][ T2438] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 294.273707][ T2438] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 295.706410][ T7812] loop4: detected capacity change from 0 to 1024 [ 295.740994][ T7812] EXT4-fs: Ignoring removed orlov option [ 295.772508][ T7812] EXT4-fs: Ignoring removed nomblk_io_submit option [ 295.934094][ T967] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 296.030027][ T7812] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 296.167276][ T7788] loop0: detected capacity change from 0 to 32768 [ 296.236998][ T7788] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop0 (7:0) scanned by syz-executor.0 (7788) [ 296.289522][ T967] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 296.473505][ T7788] BTRFS info (device loop0): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 296.512585][ T7788] BTRFS info (device loop0): using sha256 (sha256-avx2) checksum algorithm [ 296.562158][ T7788] BTRFS info (device loop0): using free-space-tree [ 296.579567][ T6669] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 296.649360][ T967] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 297.092319][ T967] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 297.248198][ T29] audit: type=1400 audit(1718709388.877:471): avc: denied { write } for pid=7846 comm="syz-executor.4" name="card0" dev="devtmpfs" ino=629 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 297.373108][ T7788] BTRFS error (device loop0): open_ctree failed [ 297.381370][ T7847] netlink: 40 bytes leftover after parsing attributes in process `syz-executor.4'. [ 297.386946][ T7850] loop3: detected capacity change from 0 to 47 [ 297.697603][ T7853] loop4: detected capacity change from 0 to 512 [ 297.788396][ T967] bridge_slave_1: left allmulticast mode [ 297.814471][ T967] bridge_slave_1: left promiscuous mode [ 297.825102][ T7853] EXT4-fs (loop4): feature flags set on rev 0 fs, running e2fsck is recommended [ 297.863722][ T967] bridge0: port 2(bridge_slave_1) entered disabled state [ 297.885867][ T7853] EXT4-fs (loop4): blocks per group (3008) and clusters per group (32768) inconsistent [ 297.980592][ T967] bridge_slave_0: left allmulticast mode [ 297.986307][ T967] bridge_slave_0: left promiscuous mode [ 298.012411][ T967] bridge0: port 1(bridge_slave_0) entered disabled state [ 298.032133][ T5117] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 298.087893][ T5117] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 298.119616][ T5117] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 298.185462][ T5117] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 298.199303][ T5117] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 298.208239][ T5117] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 299.265877][ T5118] Bluetooth: hci1: command 0x0406 tx timeout [ 299.524202][ T7876] loop3: detected capacity change from 0 to 256 [ 299.613626][ T7876] exfat: Deprecated parameter 'namecase' [ 299.775963][ T7876] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0xb89b369d, utbl_chksum : 0xe619d30d) [ 300.298057][ T5124] Bluetooth: hci3: command tx timeout [ 300.329662][ T7886] loop4: detected capacity change from 0 to 512 [ 300.590645][ T7886] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 300.820231][ T7886] fs-verity (loop4, inode 15): Unknown hash algorithm number: 0 [ 301.151601][ T7885] loop3: detected capacity change from 0 to 32768 [ 301.172819][ T7885] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop3 (7:3) scanned by syz-executor.3 (7885) [ 301.297390][ T7885] BTRFS info (device loop3): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 301.316225][ T7885] BTRFS info (device loop3): using sha256 (sha256-avx2) checksum algorithm [ 301.345591][ T7885] BTRFS info (device loop3): using free-space-tree [ 301.405746][ T967] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 301.435809][ T967] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 301.480608][ T967] bond0 (unregistering): Released all slaves [ 301.568961][ T7884] netlink: 9 bytes leftover after parsing attributes in process `syz-executor.4'. [ 301.798535][ T29] audit: type=1400 audit(1718709393.447:472): avc: denied { ioctl } for pid=7883 comm="syz-executor.3" path="/root/syzkaller-testdir1407174611/syzkaller.w1oXDh/168/file0/memory.current" dev="loop3" ino=263 ioctlcmd=0x9426 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 302.427883][ T5124] Bluetooth: hci3: command tx timeout [ 302.969838][ T5116] BTRFS info (device loop3): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 303.567808][ T5114] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 303.779867][ T5114] usb 2-1: New USB device found, idVendor=08fd, idProduct=0002, bcdDevice=ca.fd [ 303.818472][ T5114] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 303.847637][ T5114] usb 2-1: Product: syz [ 303.859949][ T5114] usb 2-1: Manufacturer: syz [ 303.872510][ T5114] usb 2-1: SerialNumber: syz [ 303.917375][ T5114] usb 2-1: config 0 descriptor?? [ 304.151211][ T6669] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 304.445940][ T5124] Bluetooth: hci5: urb ffff88802338bb00 submission failed (2) [ 304.459860][ T5124] Bluetooth: hci3: command tx timeout [ 304.924112][ T7928] loop4: detected capacity change from 0 to 512 [ 304.986537][ T7928] EXT4-fs (loop4): invalid journal inode [ 305.141981][ T5273] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 0 [ 305.561705][ T29] audit: type=1400 audit(1718709397.207:473): avc: denied { mounton } for pid=7941 comm="syz-executor.3" path="/root/syzkaller-testdir1407174611/syzkaller.w1oXDh/170/file0" dev="sysfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=dir permissive=1 [ 305.658814][ T29] audit: type=1400 audit(1718709397.257:474): avc: denied { unmount } for pid=5116 comm="syz-executor.3" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=filesystem permissive=1 [ 305.736679][ T7947] loop4: detected capacity change from 0 to 2048 [ 305.873933][ T7948] syz-executor.3[7948] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 305.874245][ T7948] syz-executor.3[7948] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 305.897120][ T7954] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 306.036138][ T25] usb 2-1: USB disconnect, device number 6 [ 306.537974][ T5124] Bluetooth: hci3: command tx timeout [ 310.393028][ T8000] loop1: detected capacity change from 0 to 32768 [ 310.425030][ T8000] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop1 (7:1) scanned by syz-executor.1 (8000) [ 310.519133][ T8000] BTRFS info (device loop1): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 310.529523][ T8000] BTRFS info (device loop1): using sha256 (sha256-avx2) checksum algorithm [ 310.569947][ T8000] BTRFS info (device loop1): using free-space-tree [ 310.580369][ T8000] workqueue: max_active 1733 requested for btrfs-worker is out of range, clamping between 1 and 512 [ 310.596283][ T8000] workqueue: max_active 1733 requested for btrfs-delalloc is out of range, clamping between 1 and 512 [ 310.655818][ T8000] workqueue: max_active 1733 requested for btrfs-endio is out of range, clamping between 1 and 512 [ 310.693816][ T8000] workqueue: max_active 1733 requested for btrfs-endio-meta is out of range, clamping between 1 and 512 [ 310.715087][ T8000] workqueue: max_active 1733 requested for btrfs-rmw is out of range, clamping between 1 and 512 [ 310.727216][ T8000] workqueue: max_active 1733 requested for btrfs-endio-write is out of range, clamping between 1 and 512 [ 310.740408][ T8000] workqueue: max_active 1733 requested for btrfs-compressed-write is out of range, clamping between 1 and 512 [ 311.032548][ T29] audit: type=1400 audit(1718709402.667:475): avc: denied { getopt } for pid=7993 comm="syz-executor.1" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 311.267659][ T7954] NILFS (loop4): vblocknr = 23 has abnormal lifetime: start cno (= 4294967298) > current cno (= 3) [ 311.298001][ T7954] NILFS error (device loop4): nilfs_bmap_propagate: broken bmap (inode number=4) [ 311.310341][ T5413] BTRFS info (device loop1): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 311.336551][ T7954] Remounting filesystem read-only [ 312.827149][ T8043] loop1: detected capacity change from 0 to 47 [ 314.196330][ T29] audit: type=1400 audit(1718709405.837:476): avc: denied { listen } for pid=8049 comm="syz-executor.1" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 316.276605][ T8069] loop1: detected capacity change from 0 to 2048 [ 316.326349][ T8069] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 316.622824][ T8072] openvswitch: netlink: Key type 6401 is out of range max 32 [ 317.663899][ T1241] ieee802154 phy0 wpan0: encryption failed: -22 [ 317.670983][ T1241] ieee802154 phy1 wpan1: encryption failed: -22 [ 332.472762][ T5118] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 332.487464][ T5118] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 332.498418][ T5118] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 332.507041][ T5118] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 332.521386][ T5118] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 332.529670][ T5118] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 334.619049][ T5118] Bluetooth: hci5: command tx timeout [ 335.104289][ T5118] Bluetooth: hci0: command 0x0406 tx timeout [ 335.812957][ T5118] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 335.836738][ T5118] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 335.851946][ T5118] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 335.869138][ T5118] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 335.877114][ T5118] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 335.884983][ T5118] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 336.697788][ T5118] Bluetooth: hci5: command tx timeout [ 337.978685][ T5118] Bluetooth: hci6: command tx timeout [ 338.784654][ T5118] Bluetooth: hci5: command tx timeout [ 339.248016][ T5124] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 339.268005][ T5124] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 339.288013][ T5124] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 339.301570][ T5124] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 339.309784][ T5124] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 339.317331][ T5124] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 340.058029][ T5124] Bluetooth: hci6: command tx timeout [ 340.064560][ T2483] NILFS (loop4): discard dirty page: offset=0, ino=6 [ 340.080412][ T2483] NILFS (loop4): discard dirty block: blocknr=35, size=1024 [ 340.088140][ T2483] NILFS (loop4): discard dirty block: blocknr=36, size=1024 [ 340.095446][ T2483] NILFS (loop4): discard dirty block: blocknr=37, size=1024 [ 340.103276][ T2483] NILFS (loop4): discard dirty block: blocknr=38, size=1024 [ 340.111396][ T2483] NILFS (loop4): discard dirty page: offset=0, ino=2 [ 340.118513][ T2483] NILFS (loop4): discard dirty block: blocknr=18, size=1024 [ 340.125818][ T2483] NILFS (loop4): discard dirty block: blocknr=18446744073709551615, size=1024 [ 340.135806][ T2483] NILFS (loop4): discard dirty block: blocknr=18446744073709551615, size=1024 [ 340.145504][ T2483] NILFS (loop4): discard dirty block: blocknr=18446744073709551615, size=1024 [ 340.857850][ T5124] Bluetooth: hci5: command tx timeout [ 341.417861][ T5124] Bluetooth: hci7: command tx timeout [ 342.138214][ T5124] Bluetooth: hci6: command tx timeout [ 343.506243][ T5124] Bluetooth: hci7: command tx timeout [ 344.218087][ T5124] Bluetooth: hci6: command tx timeout [ 345.180680][ T61] NILFS (loop4): discard dirty page: offset=0, ino=5 [ 345.187420][ T61] NILFS (loop4): discard dirty block: blocknr=41, size=1024 [ 345.215120][ T61] NILFS (loop4): discard dirty block: blocknr=18446744073709551615, size=1024 [ 345.230940][ T61] NILFS (loop4): discard dirty block: blocknr=18446744073709551615, size=1024 [ 345.242773][ T61] NILFS (loop4): discard dirty block: blocknr=18446744073709551615, size=1024 [ 345.251948][ T61] NILFS (loop4): discard dirty page: offset=0, ino=3 [ 345.266636][ T61] NILFS (loop4): discard dirty block: blocknr=42, size=1024 [ 345.283941][ T61] NILFS (loop4): discard dirty block: blocknr=43, size=1024 [ 345.292423][ T61] NILFS (loop4): discard dirty block: blocknr=44, size=1024 [ 345.300165][ T61] NILFS (loop4): discard dirty block: blocknr=18446744073709551615, size=1024 [ 345.309378][ T61] NILFS (loop4): discard dirty page: offset=0, ino=4 [ 345.316078][ T61] NILFS (loop4): discard dirty block: blocknr=40, size=1024 [ 345.329263][ T61] NILFS (loop4): discard dirty block: blocknr=18446744073709551615, size=1024 [ 345.338731][ T61] NILFS (loop4): discard dirty block: blocknr=18446744073709551615, size=1024 [ 345.347599][ T61] NILFS (loop4): discard dirty block: blocknr=18446744073709551615, size=1024 [ 345.579274][ T5124] Bluetooth: hci7: command tx timeout [ 347.101616][ T5117] Bluetooth: hci8: unexpected cc 0x0c03 length: 249 > 1 [ 347.116634][ T5117] Bluetooth: hci8: unexpected cc 0x1003 length: 249 > 9 [ 347.126340][ T5117] Bluetooth: hci8: unexpected cc 0x1001 length: 249 > 9 [ 347.140252][ T5117] Bluetooth: hci8: unexpected cc 0x0c23 length: 249 > 4 [ 347.154550][ T5117] Bluetooth: hci8: unexpected cc 0x0c25 length: 249 > 3 [ 347.162187][ T5117] Bluetooth: hci8: unexpected cc 0x0c38 length: 249 > 2 [ 347.657858][ T5124] Bluetooth: hci7: command tx timeout [ 349.258271][ T5124] Bluetooth: hci8: command tx timeout [ 351.338032][ T5124] Bluetooth: hci8: command tx timeout [ 353.418949][ T5124] Bluetooth: hci8: command tx timeout [ 355.507859][ T5124] Bluetooth: hci8: command tx timeout [ 361.767625][ T5117] Bluetooth: hci9: unexpected cc 0x0c03 length: 249 > 1 [ 361.780073][ T5117] Bluetooth: hci9: unexpected cc 0x1003 length: 249 > 9 [ 361.795130][ T5117] Bluetooth: hci9: unexpected cc 0x1001 length: 249 > 9 [ 361.806201][ T5117] Bluetooth: hci9: unexpected cc 0x0c23 length: 249 > 4 [ 361.818638][ T5117] Bluetooth: hci9: unexpected cc 0x0c25 length: 249 > 3 [ 361.826189][ T5117] Bluetooth: hci9: unexpected cc 0x0c38 length: 249 > 2 [ 363.898279][ T5124] Bluetooth: hci9: command tx timeout [ 365.977848][ T5124] Bluetooth: hci9: command tx timeout [ 368.058431][ T5124] Bluetooth: hci9: command tx timeout [ 370.138396][ T5124] Bluetooth: hci9: command tx timeout [ 370.538248][ T2459] NILFS (loop4): discard dirty page: offset=4096, ino=6 [ 370.546737][ T2459] NILFS (loop4): discard dirty block: blocknr=39, size=1024 [ 370.570660][ T2459] NILFS (loop4): discard dirty block: blocknr=18446744073709551615, size=1024 [ 370.586367][ T2459] NILFS (loop4): discard dirty block: blocknr=18446744073709551615, size=1024 [ 370.595596][ T2459] NILFS (loop4): discard dirty block: blocknr=18446744073709551615, size=1024 [ 375.666553][ T2483] NILFS (loop4): discard dirty page: offset=196608, ino=3 [ 375.679996][ T2483] NILFS (loop4): discard dirty block: blocknr=18446744073709551615, size=1024 [ 375.716559][ T2483] NILFS (loop4): discard dirty block: blocknr=18446744073709551615, size=1024 [ 375.726887][ T2483] NILFS (loop4): discard dirty block: blocknr=49, size=1024 [ 375.734337][ T2483] NILFS (loop4): discard dirty block: blocknr=18446744073709551615, size=1024 [ 379.102845][ T1241] ieee802154 phy0 wpan0: encryption failed: -22 [ 379.110162][ T1241] ieee802154 phy1 wpan1: encryption failed: -22 [ 397.854084][ T5117] Bluetooth: hci10: unexpected cc 0x0c03 length: 249 > 1 [ 397.869506][ T5117] Bluetooth: hci10: unexpected cc 0x1003 length: 249 > 9 [ 397.879767][ T5117] Bluetooth: hci10: unexpected cc 0x1001 length: 249 > 9 [ 397.888828][ T5117] Bluetooth: hci10: unexpected cc 0x0c23 length: 249 > 4 [ 397.905232][ T5117] Bluetooth: hci10: unexpected cc 0x0c25 length: 249 > 3 [ 397.914325][ T5117] Bluetooth: hci10: unexpected cc 0x0c38 length: 249 > 2 [ 399.977888][ T5124] Bluetooth: hci10: command tx timeout [ 400.894572][ T5117] Bluetooth: hci11: unexpected cc 0x0c03 length: 249 > 1 [ 400.908112][ T5117] Bluetooth: hci11: unexpected cc 0x1003 length: 249 > 9 [ 400.918462][ T5117] Bluetooth: hci11: unexpected cc 0x1001 length: 249 > 9 [ 400.928817][ T5117] Bluetooth: hci11: unexpected cc 0x0c23 length: 249 > 4 [ 400.936782][ T5117] Bluetooth: hci11: unexpected cc 0x0c25 length: 249 > 3 [ 400.946350][ T5117] Bluetooth: hci11: unexpected cc 0x0c38 length: 249 > 2 [ 402.058110][ T5117] Bluetooth: hci10: command tx timeout [ 403.018098][ T5117] Bluetooth: hci11: command tx timeout [ 404.147909][ T5117] Bluetooth: hci10: command tx timeout [ 404.277259][ T5124] Bluetooth: hci12: unexpected cc 0x0c03 length: 249 > 1 [ 404.291739][ T5124] Bluetooth: hci12: unexpected cc 0x1003 length: 249 > 9 [ 404.302259][ T5124] Bluetooth: hci12: unexpected cc 0x1001 length: 249 > 9 [ 404.315455][ T5124] Bluetooth: hci12: unexpected cc 0x0c23 length: 249 > 4 [ 404.323921][ T5124] Bluetooth: hci12: unexpected cc 0x0c25 length: 249 > 3 [ 404.331726][ T5124] Bluetooth: hci12: unexpected cc 0x0c38 length: 249 > 2 [ 405.097811][ T5124] Bluetooth: hci11: command tx timeout [ 406.218190][ T5124] Bluetooth: hci10: command tx timeout [ 406.378087][ T5124] Bluetooth: hci12: command tx timeout [ 407.193752][ T5124] Bluetooth: hci11: command tx timeout [ 408.457937][ T5124] Bluetooth: hci12: command tx timeout [ 409.257831][ T5124] Bluetooth: hci11: command tx timeout [ 410.537811][ T5124] Bluetooth: hci12: command tx timeout [ 412.164668][ T5117] Bluetooth: hci13: unexpected cc 0x0c03 length: 249 > 1 [ 412.176247][ T5117] Bluetooth: hci13: unexpected cc 0x1003 length: 249 > 9 [ 412.185361][ T5117] Bluetooth: hci13: unexpected cc 0x1001 length: 249 > 9 [ 412.196653][ T5117] Bluetooth: hci13: unexpected cc 0x0c23 length: 249 > 4 [ 412.204870][ T5117] Bluetooth: hci13: unexpected cc 0x0c25 length: 249 > 3 [ 412.218556][ T5117] Bluetooth: hci13: unexpected cc 0x0c38 length: 249 > 2 [ 412.617817][ T5117] Bluetooth: hci12: command tx timeout [ 414.298242][ T5117] Bluetooth: hci13: command tx timeout [ 416.378048][ T5117] Bluetooth: hci13: command tx timeout [ 418.457827][ T5117] Bluetooth: hci13: command tx timeout [ 420.537953][ T5117] Bluetooth: hci13: command tx timeout [ 422.145160][ T5117] Bluetooth: hci3: command 0x0406 tx timeout [ 426.716904][ T5117] Bluetooth: hci14: unexpected cc 0x0c03 length: 249 > 1 [ 426.732468][ T5117] Bluetooth: hci14: unexpected cc 0x1003 length: 249 > 9 [ 426.742346][ T5117] Bluetooth: hci14: unexpected cc 0x1001 length: 249 > 9 [ 426.751155][ T5117] Bluetooth: hci14: unexpected cc 0x0c23 length: 249 > 4 [ 426.759254][ T5117] Bluetooth: hci14: unexpected cc 0x0c25 length: 249 > 3 [ 426.766835][ T5117] Bluetooth: hci14: unexpected cc 0x0c38 length: 249 > 2 [ 428.857989][ T5124] Bluetooth: hci14: command tx timeout [ 430.938218][ T5124] Bluetooth: hci14: command tx timeout [ 433.018003][ T5124] Bluetooth: hci14: command tx timeout [ 435.098023][ T5124] Bluetooth: hci14: command tx timeout [ 440.552658][ T1241] ieee802154 phy0 wpan0: encryption failed: -22 [ 440.559116][ T1241] ieee802154 phy1 wpan1: encryption failed: -22 [ 457.977862][ T5124] Bluetooth: hci5: command 0x0406 tx timeout [ 462.919590][ T5118] Bluetooth: hci15: unexpected cc 0x0c03 length: 249 > 1 [ 462.933553][ T5118] Bluetooth: hci15: unexpected cc 0x1003 length: 249 > 9 [ 462.943143][ T5118] Bluetooth: hci15: unexpected cc 0x1001 length: 249 > 9 [ 462.959111][ T5118] Bluetooth: hci15: unexpected cc 0x0c23 length: 249 > 4 [ 462.967495][ T5118] Bluetooth: hci15: unexpected cc 0x0c25 length: 249 > 3 [ 462.975229][ T5118] Bluetooth: hci15: unexpected cc 0x0c38 length: 249 > 2 [ 463.101197][ T8119] Bluetooth: hci7: command 0x0406 tx timeout [ 463.108016][ T5118] Bluetooth: hci6: command 0x0406 tx timeout [ 463.580509][ T30] INFO: task kworker/u8:5:967 blocked for more than 143 seconds. [ 463.589212][ T30] Not tainted 6.10.0-rc3-syzkaller-00044-g2ccbdf43d5e7 #0 [ 463.596941][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. 2024/06/18 11:19:15 SYZFATAL: failed to recv *flatrpc.HostMessageRaw: EOF [ 463.621637][ T30] task:kworker/u8:5 state:D stack:22736 pid:967 tgid:967 ppid:2 flags:0x00004000 [ 463.677775][ T30] Workqueue: netns cleanup_net [ 463.682625][ T30] Call Trace: [ 463.685926][ T30] [ 463.707792][ T30] __schedule+0xf15/0x5d00 [ 463.712275][ T30] ? __pfx___lock_acquire+0x10/0x10 [ 463.727771][ T30] ? __pfx___lock_acquire+0x10/0x10 [ 463.733034][ T30] ? remove_proc_entry+0x2d4/0x540 [ 463.750592][ T30] ? __pfx___schedule+0x10/0x10 [ 463.755514][ T30] ? schedule+0x298/0x350 [ 463.767756][ T30] ? __pfx_lock_release+0x10/0x10 [ 463.772929][ T30] ? __mutex_lock+0x5b3/0x9c0 [ 463.777631][ T30] ? __mutex_trylock_common+0x78/0x250 [ 463.793255][ T30] schedule+0xe7/0x350 [ 463.797365][ T30] schedule_preempt_disabled+0x13/0x30 [ 463.817795][ T30] __mutex_lock+0x5b8/0x9c0 [ 463.822456][ T30] ? ppp_exit_net+0xae/0x3b0 [ 463.827072][ T30] ? __pfx___mutex_lock+0x10/0x10 [ 463.847784][ T30] ? __pfx_lock_release+0x10/0x10 [ 463.854753][ T30] ? __pfx_ppp_exit_net+0x10/0x10 [ 463.877753][ T30] ? ppp_exit_net+0xae/0x3b0 [ 463.882581][ T30] ppp_exit_net+0xae/0x3b0 [ 463.887031][ T30] ? __pfx_ppp_exit_net+0x10/0x10 [ 463.907753][ T30] ? __pfx___might_resched+0x10/0x10 [ 463.913141][ T30] ? ip_vs_sync_net_cleanup+0x72/0xb0 [ 463.928157][ T30] ? __ip_vs_dev_cleanup_batch+0xb1/0x290 [ 463.933942][ T30] ? __pfx_ppp_exit_net+0x10/0x10 [ 463.947809][ T30] ops_exit_list+0xb0/0x180 [ 463.954145][ T30] cleanup_net+0x5b7/0xbf0 [ 463.969549][ T30] ? __pfx_cleanup_net+0x10/0x10 [ 463.974539][ T30] process_one_work+0x9fb/0x1b60 [ 463.987801][ T30] ? __pfx_batadv_nc_worker+0x10/0x10 [ 463.993237][ T30] ? __pfx_process_one_work+0x10/0x10 [ 464.017745][ T30] ? assign_work+0x1a0/0x250 [ 464.022407][ T30] worker_thread+0x6c8/0xf70 [ 464.027017][ T30] ? __kthread_parkme+0x148/0x220 [ 464.037816][ T30] ? __pfx_worker_thread+0x10/0x10 [ 464.042981][ T30] kthread+0x2c1/0x3a0 [ 464.047073][ T30] ? _raw_spin_unlock_irq+0x23/0x50 [ 464.079171][ T30] ? __pfx_kthread+0x10/0x10 [ 464.083826][ T30] ret_from_fork+0x45/0x80 [ 464.097792][ T30] ? __pfx_kthread+0x10/0x10 [ 464.102439][ T30] ret_from_fork_asm+0x1a/0x30 [ 464.107237][ T30] [ 464.128233][ T30] INFO: task dhcpcd:4753 blocked for more than 143 seconds. [ 464.135558][ T30] Not tainted 6.10.0-rc3-syzkaller-00044-g2ccbdf43d5e7 #0 [ 464.159574][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 464.177738][ T30] task:dhcpcd state:D stack:23384 pid:4753 tgid:4753 ppid:4752 flags:0x00000002 [ 464.197813][ T30] Call Trace: [ 464.201130][ T30] [ 464.204074][ T30] __schedule+0xf15/0x5d00 [ 464.218207][ T30] ? __pfx___lock_acquire+0x10/0x10 [ 464.223461][ T30] ? __pfx___lock_acquire+0x10/0x10 [ 464.247749][ T30] ? __pfx___schedule+0x10/0x10 [ 464.252664][ T30] ? schedule+0x298/0x350 [ 464.257021][ T30] ? __pfx_lock_release+0x10/0x10 [ 464.277803][ T30] ? __mutex_lock+0x5b3/0x9c0 [ 464.282536][ T30] ? __mutex_trylock_common+0x78/0x250 [ 464.299101][ T30] schedule+0xe7/0x350 [ 464.303233][ T30] schedule_preempt_disabled+0x13/0x30 [ 464.317808][ T30] __mutex_lock+0x5b8/0x9c0 [ 464.322375][ T30] ? devinet_ioctl+0x26e/0x1f10 [ 464.327251][ T30] ? __pfx___mutex_lock+0x10/0x10 [ 464.347779][ T30] ? __pfx_lock_release+0x10/0x10 [ 464.352873][ T30] ? security_capable+0x98/0xd0 [ 464.367752][ T30] ? devinet_ioctl+0x26e/0x1f10 [ 464.372665][ T30] devinet_ioctl+0x26e/0x1f10 [ 464.377364][ T30] ? __might_fault+0xe3/0x190 [ 464.394526][ T30] ? __pfx_devinet_ioctl+0x10/0x10