last executing test programs: 7.139328039s ago: executing program 0: r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000380)={&(0x7f0000000080)=ANY=[@ANYBLOB="9feb010018000000000000001c0000001c00000003000000010000000000000e0200000000000000000000000000000504000000002e"], 0x0, 0x37}, 0x20) bpf$MAP_CREATE(0x0, &(0x7f0000000840)=@base={0xb, 0x5, 0x4, 0x4, 0x5, 0xffffffffffffffff, 0x0, '\x00', 0x0, r0, 0x0, 0x1}, 0x48) 6.752262569s ago: executing program 0: bind$inet(0xffffffffffffffff, 0x0, 0x0) setsockopt$inet_int(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000080), 0x4) bpf$BPF_PROG_TEST_RUN(0x1c, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000680)={0xffffffffffffffff}) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_aout(r2, 0x0, 0x6a) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8d}, 0x0) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x5) futex(&(0x7f000000cffc)=0x1, 0x6, 0x0, 0x0, 0x0, 0x0) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000580)={0x18, 0x5, &(0x7f0000000140)=ANY=[@ANYBLOB="180100002100000000000000000000108500000075000000a50000002300000095"], &(0x7f0000000100)='syzkaller\x00'}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x10) splice(r0, 0x0, r2, 0x0, 0x8ec3, 0x0) readv(r1, &(0x7f0000000080)=[{&(0x7f00000078c0)=""/110, 0x6e}], 0x1) pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r1, 0x0, r5, 0x0, 0x800, 0x0) close(r2) 6.729821379s ago: executing program 2: r0 = bpf$MAP_CREATE(0x0, 0x0, 0xffffffb8) fsetxattr$trusted_overlay_redirect(r0, &(0x7f0000000140), &(0x7f0000000180)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x800, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$pppl2tp(0x18, 0x1, 0x1) syz_emit_ethernet(0x36, &(0x7f0000001800)={@link_local, @random="50a245d5cde0", @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x2, 0x0, @empty, @broadcast}, @timestamp_reply={0x11, 0xe0, 0x0, 0x0, 0x0, 0x62ea0000}}}}}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0xffffffffffffffca, &(0x7f0000000040)=0x10001) r2 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) preadv(r2, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) socket$can_j1939(0x1d, 0x2, 0x7) syz_open_dev$admmidi(0x0, 0x20, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x80383, 0x0) read$midi(0xffffffffffffffff, 0x0, 0x49) ioctl$SIOCSIFMTU(r1, 0x8922, &(0x7f0000000080)={'batadv_slave_0\x00', 0x3ff}) openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x400, 0x0) ioctl$PPPIOCSMRU1(0xffffffffffffffff, 0x40047452, &(0x7f0000000040)=0x9) r3 = syz_open_dev$rtc(&(0x7f00000000c0), 0x61, 0x200900) ioctl$RTC_SET_TIME(r3, 0x4024700a, &(0x7f0000000100)={0x0, 0x32, 0x0, 0x0, 0x9, 0x0, 0x1, 0x21}) ioctl$DRM_IOCTL_GET_MAP(r2, 0xc0286404, &(0x7f0000000140)={&(0x7f0000ff9000/0x4000)=nil}) openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) syz_mount_image$exfat(&(0x7f0000001500), &(0x7f0000000040)='./file0\x00', 0x8000, &(0x7f00000001c0)=ANY=[@ANYBLOB="00e0c6e4d9182ec69e599fd4d32ba9c5146fbc43a33914b2b1a5ce8843b193dc82dbc512b6fabfe6fbdd2a8bdeeda78e17b18f1b6e80c81cd67046e6a85e7160112d613e4c6dcab2404d58291ec130b9fd2785ce8dd5538f70998f2d50005813ba6c65cd3c25a8e730e1cd7b11cf7f6cc0fba6b670c64374abd09518ffba0c5eb2e602b1a64ac897fce7fae33878c0e57398a4cc6ce9bee1d70bef22f10c7776c2f5077cb1de63832b1bab15c6caf549a1cd58106494d92d1159033b2e27eceae339414a62aca9cf6a00c07e2a181dd9668a64b5eefc8e5ebc6564442a8d"], 0x1, 0x14fe, &(0x7f0000001580)="$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") r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='blkio.bfq.io_serviced_recursive\x00', 0x275a, 0x0) write$binfmt_script(r4, &(0x7f0000000080), 0x10010) syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x17ef, 0x6009, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x5}}}}]}}]}}, 0x0) 5.345187596s ago: executing program 4: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'syzkaller0\x00', 0xf102}) ioctl$SIOCSIFHWADDR(r0, 0x8924, &(0x7f0000000140)={'veth1\x00', @local}) 5.286574531s ago: executing program 0: r0 = syz_io_uring_setup(0x1b62, &(0x7f00000000c0)={0x0, 0x0, 0x3600}, &(0x7f0000000000), &(0x7f0000000200)) r1 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$sock_int(r1, 0x1, 0x2e, &(0x7f00000000c0)=0x1, 0x4) recvmmsg(r1, &(0x7f0000006700)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) ppoll(&(0x7f0000000280)=[{r0}], 0x1, 0x0, 0x0, 0x0) 4.747376336s ago: executing program 4: socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), 0xffffffffffffffff) socket$inet6(0xa, 0x2, 0x0) socket$nl_route(0x10, 0x3, 0x0) openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) prlimit64(0x0, 0x7, &(0x7f0000000140)={0x8, 0x8a}, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000200)) syz_init_net_socket$ax25(0x3, 0x2, 0x0) 4.558504683s ago: executing program 4: r0 = syz_usb_connect(0x0, 0x3f, &(0x7f0000000040)=ANY=[@ANYBLOB="11010000733336088dee1edb23610000000109022d0101100000000904000003fe03010009cd8d1f0002000000090505020000fcffff09058b1e20"], 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000780)={0x84, &(0x7f0000000000)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) ioctl$EVIOCGMASK(r1, 0x5b16, 0x0) 4.22985311s ago: executing program 0: r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) write(r0, &(0x7f0000000080)="29000000140005b7ff000000040860eb01cb02fcb2e4e6589b3e0ed7283f14b912685e684c42b9eeb9", 0x29) 4.159023663s ago: executing program 1: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a010400000000000000000100000008000240000000020900010073797a300000000014000000110001"], 0x50}}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)={{0x14, 0x10, 0x1, 0x2}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x5, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x10}}, 0x48}}, 0x0) socket$netlink(0x10, 0x3, 0x0) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f00000010c0)={{0x1, 0x1, 0x18, r0}, './file0\x00'}) sendmsg$SOCK_DIAG_BY_FAMILY(r2, &(0x7f0000001380)={&(0x7f0000001200)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000001340)={&(0x7f0000001240)={0xb4, 0x14, 0x100, 0x70bd28, 0x25dfdbfd, {0x18, 0x80}, [@INET_DIAG_REQ_BYTECODE={0x87, 0x1, "e42d888ca1439a3f8b9a18c6a7ef0e052812d85a1454dcc1c31aa3b590d90b8b0333fd6648ad4ea8a154bb6630d8e010e5180837e44dc47045f2f81ff084d08a2143483e3c6116758782aea1f490f818f0f9d5097a877f87989aeca5bd9b03f452e7704a71ad6ffc6b925c42cbc8e2dc831900c045c9d61c3142fa0417ec83218c52e7"}, @INET_DIAG_REQ_BYTECODE={0x18, 0x1, "382eef0b4456fecc409e8d57fa52fbf7d7ca0382"}]}, 0xb4}, 0x1, 0x0, 0x0, 0x20044814}, 0x50081) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000140)=ANY=[@ANYBLOB, @ANYRES16=r3, @ANYBLOB="010000000000000000003b00000008000300", @ANYRES32=r4, @ANYBLOB="40003300d000000008021100000108021100000050505050505000000f020000010001002d1a000000000000000019000000000000000000"], 0x5c}}, 0x0) r5 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/partitions\x00', 0x0, 0x0) read$hiddev(r5, &(0x7f00000000c0)=""/4092, 0xffc) r6 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000080)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x18, 0x18, 0x7, [@fwd, @const={0x20, 0x0, 0x0, 0xa, 0x1}]}, {0x0, [0x0, 0x0, 0x0, 0x0, 0x0]}}, 0x0, 0x37}, 0x20) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000180)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, r6, 0x0, 0x2}, 0x48) preadv(r5, &(0x7f0000001300)=[{&(0x7f0000000040)=""/17, 0x11}], 0x1, 0x0, 0x0) read$hiddev(r5, &(0x7f0000001100)=""/234, 0xea) 4.011138641s ago: executing program 0: bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000001c0)='contention_begin\x00'}, 0x10) prlimit64(0x0, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001) r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) preadv(r0, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) socket$can_bcm(0x1d, 0x2, 0x2) r1 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r1, &(0x7f0000000000), 0x10) openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x40, 0x0) r2 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r2, @ANYBLOB=',rootmode=00000000000004000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r2, &(0x7f00000021c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r2, &(0x7f0000000600)={0x50, 0x0, r3, {0x7, 0x1f}}, 0x50) syz_fuse_handle_req(r2, &(0x7f000000e3c0)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000080000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea210560000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001354c4b600", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000006340)={0x20}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r4 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x44401, 0x0) ioctl$FS_IOC_RESVSP(r4, 0x40305828, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x6}) write$FUSE_INIT(0xffffffffffffffff, 0x0, 0x0) socket(0x11, 0x800000003, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x0, 0x0, 0x0) syslog(0x9, 0x0, 0x0) 3.822305976s ago: executing program 3: syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f00000000c0)='./file1\x00', 0x58, &(0x7f0000000200)={[{@abort}, {@errors_remount}, {@nomblk_io_submit}, {@stripe={'stripe', 0x3d, 0x4ffff}}, {@norecovery}, {@minixdf}, {@nobh}]}, 0xfe, 0x7ab, &(0x7f0000001100)="$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") setxattr$trusted_overlay_upper(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000100), &(0x7f0000000900)=ANY=[], 0xfeeb, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={0xffffffffffffffff, 0x14a80, 0x12, 0x38, &(0x7f00000002c0)="24006f20a01c2500", &(0x7f00000001c0)=""/8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0) open_by_handle_at(r0, &(0x7f0000000240)=ANY=[@ANYBLOB="4b000000020000"], 0x0) 3.741462106s ago: executing program 1: r0 = syz_open_dev$I2C(&(0x7f0000000380), 0x0, 0x0) ioctl$I2C_RDWR(r0, 0x707, &(0x7f0000000700)={&(0x7f0000000780)=[{0x0, 0xf611, 0x48, &(0x7f00000004c0)="28d1b26bb6a7acfebef1215e2f0df81b500c89630977c2f97192dc5dd776f8c432cec1ca9d4897487921abb614ba8cc56df91f0e5c157d4e1bb5cb340878390f27189cf20f88c471"}], 0x1}) 3.469583023s ago: executing program 1: mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000080)=ANY=[@ANYBLOB="1500000065ffff"], 0x15) bpf$OBJ_GET_PROG(0x7, &(0x7f00000003c0)=@o_path={&(0x7f0000000380)='./file0\x00', 0x0, 0x18, r0}, 0x18) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) socket$packet(0x11, 0x3, 0x300) r2 = socket(0x10, 0x2, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$BATADV_CMD_GET_MESH(r4, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={0x0, 0x92}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffffffffffffff000000", @ANYRES32=r5, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000007c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000940)=@newqdisc={0x11c, 0x24, 0xe0b, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_bfifo={{0xa}, {0x8, 0x2, 0x200}}, @qdisc_kind_options=@q_netem={{0xa}, {0xd8, 0x2, {{0x0, 0xff13}, [@TCA_NETEM_RATE={0x14, 0x6, {0x0, 0x2, 0x100, 0x8}}, @TCA_NETEM_SLOT={0x2c, 0xc, {0x8, 0x0, 0x0, 0x3, 0xbfa9}}, @TCA_NETEM_CORRUPT={0xc, 0x4, {0xfff}}, @TCA_NETEM_JITTER64={0xc, 0xb, 0x80000000}, @TCA_NETEM_LOSS={0x58, 0x5, 0x0, 0x1, [@NETEM_LOSS_GI={0x18, 0x1, {0x4, 0x0, 0x0, 0xffffffff}}, @NETEM_LOSS_GE={0x14, 0x2, {0x1ff, 0x8}}, @NETEM_LOSS_GE={0x14, 0x2, {0x7fffffff}}, @NETEM_LOSS_GE={0x14}]}, @TCA_NETEM_DELAY_DIST={0xc, 0x2, "bb31dd582025a5bf"}]}}}]}, 0x11c}}, 0x0) 3.387341944s ago: executing program 3: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000000), r0) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r3, 0x8933, &(0x7f0000000980)={'wpan0\x00', 0x0}) sendmsg$IEEE802154_LLSEC_SETPARAMS(r1, &(0x7f0000000b80)={0x0, 0x0, &(0x7f0000000b40)={&(0x7f0000000100)={0x2c, r2, 0x5, 0x0, 0x0, {}, [@IEEE802154_ATTR_PAN_ID={0x6}, @IEEE802154_ATTR_LLSEC_KEY_MODE={0x5}, @IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r4}]}, 0x2c}}, 0x0) 3.141275649s ago: executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f00000029c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)={0x20, 0x10, 0x701, 0x0, 0x0, {0xa}, [@typed={0xc, 0x2, 0x0, 0x0, @str='nl80211\x00'}]}, 0x20}}, 0x0) recvmmsg(r0, &(0x7f0000001b40)=[{{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000140)=""/189, 0xbd}, {&(0x7f00000003c0)=""/152, 0x98}, {&(0x7f0000000480)=""/4096, 0x1000}], 0x3}}], 0x7, 0x0, 0x0) 2.859221087s ago: executing program 1: r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000200)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70200001400ffd9b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000d00)={&(0x7f0000000cc0)='mm_page_alloc\x00', r1}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder0\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x0, 0x4002011, r2, 0x0) 2.797025142s ago: executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000001ac0), 0xffffffffffffffff) sendmsg$TIPC_NL_MEDIA_SET(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000080)={0x2c, r1, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_MEDIA={0x18, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8}]}]}]}, 0x2c}}, 0x0) 2.557925606s ago: executing program 4: r0 = syz_io_uring_setup(0x1b62, &(0x7f00000000c0)={0x0, 0x0, 0x3600}, &(0x7f0000000000), &(0x7f0000000200)) r1 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$sock_int(r1, 0x1, 0x2e, &(0x7f00000000c0)=0x1, 0x4) recvmmsg(r1, &(0x7f0000006700)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) ppoll(&(0x7f0000000280)=[{r0}], 0x1, 0x0, 0x0, 0x0) 2.400478843s ago: executing program 2: r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f0000000040)={0xc, 0x0, 0x0}) ioctl$IOMMU_IOAS_UNMAP(r0, 0x3b86, &(0x7f00000000c0)={0x18, r1}) 2.375067181s ago: executing program 1: recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000000)=@newsa={0x148, 0x10, 0x633, 0x0, 0x0, {{@in=@broadcast, @in=@broadcast}, {@in=@private, 0x0, 0x32}, @in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', {}, {}, {}, 0x0, 0x0, 0x2}, [@algo_crypt={0x48, 0x2, {{'ecb(cipher_null)\x00'}}}, @replay_val={0x10}]}, 0x148}}, 0x0) 2.374140612s ago: executing program 3: getsockname$inet6(0xffffffffffffffff, 0x0, 0x0) rt_sigreturn() r0 = socket$nl_sock_diag(0x10, 0x3, 0x4) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r0, 0x10e, 0x1, &(0x7f0000000040)=0x3, 0x4) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f0000000100)={0xa, 0x4e22, 0x0, @loopback}, 0x1c) listen(r1, 0x0) ppoll(&(0x7f0000000000)=[{r1, 0x1444}], 0x1, 0x0, 0x0, 0x0) close_range(r1, 0xffffffffffffffff, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r2, &(0x7f0000000200)={0xa, 0x4e22, 0x0, @loopback}, 0x1c) 2.114058174s ago: executing program 2: r0 = socket$netlink(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000006800)={&(0x7f00000001c0)={0x30, r1, 0x615, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x1c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @empty}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x12}]}]}, 0x30}}, 0x0) 1.80555702s ago: executing program 1: socket$nl_xfrm(0x10, 0x3, 0x6) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1804000000000000000000000000000018010000", @ANYRES32, @ANYBLOB="0000000000000800b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0xc, &(0x7f0000000180)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='sys_enter\x00', r0}, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r1 = getpid() r2 = syz_pidfd_open(r1, 0x0) r3 = pidfd_getfd(r2, r2, 0x0) setns(r3, 0x66020000) pipe2$9p(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x84000) write$P9_RLERROR(r4, &(0x7f0000000400)=ANY=[@ANYBLOB="0ae0ffff060100010000"], 0xa) socket$inet6(0xa, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r5 = getpid() process_vm_readv(r5, &(0x7f0000008400)=[{&(0x7f0000000300)=""/54, 0x7ffff000}, {&(0x7f0000006180)=""/152, 0x98}], 0x2, &(0x7f0000008640)=[{&(0x7f0000008480)=""/95, 0x7ffff000}], 0x286, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000200)={0xffffffffffffffff, 0x18000000000002a0, 0x0, 0x0, 0x0, 0x0, 0x10001fff, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x50) read$snddsp(0xffffffffffffffff, 0x0, 0x0) r6 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) getsockopt$bt_BT_FLUSHABLE(r6, 0x112, 0x8, &(0x7f0000000080), &(0x7f00000000c0)=0x4) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000280)={0x1, &(0x7f0000000000)=[{0x6}]}) iopl(0x0) statx(r3, &(0x7f0000000140)='.\x00', 0x0, 0x200, &(0x7f00000013c0)) setsockopt$SO_BINDTODEVICE(0xffffffffffffffff, 0x1, 0x19, 0x0, 0x0) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) madvise(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x13) syz_mount_image$hfsplus(&(0x7f0000000000), &(0x7f0000000100)='./bus\x00', 0x2000010, &(0x7f00000013c0)=ANY=[], 0x13, 0x694, &(0x7f0000000d00)="$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") creat(&(0x7f0000000000)='./bus\x00', 0x0) r8 = open(&(0x7f0000000200)='.\x00', 0x0, 0x0) getdents(r8, &(0x7f0000000140)=""/104, 0x68) sendmsg$NFT_BATCH(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01010000000000000000010000000900010073797a30000000005c000000090a010400000000000000000100000008000a40000000000900020073797a32000000000900010073797a3000000000080005400000001f200011800e000100636f6e6e6c696d69740000000c0002800800014000000000400000000c0a01020000000000000000010000000900020073797a320000000014000380100000800800034000000002040400800900010073797a30"], 0xe4}}, 0x0) 1.651596007s ago: executing program 2: r0 = socket$inet6_udp(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000000000)={0xa, 0xe22, 0x0, @empty}, 0x1c) r1 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r1, &(0x7f0000000040)=@pppol2tp={0x18, 0x1, {0x0, r0, {0x2, 0x0, @private}, 0x4}}, 0x26) ioctl$PPPIOCGCHAN(r1, 0x80047437, &(0x7f0000000100)) syz_emit_ethernet(0x4c, &(0x7f00000002c0)={@broadcast, @local, @void, {@ipv6={0x86dd, @udp={0x0, 0x6, "018100", 0x16, 0x11, 0x0, @private0, @local, {[], {0x0, 0xe22, 0x16, 0x0, @gue={{0x2, 0x0, 0x0, 0x2}, "fffbff693dcd"}}}}}}}, 0x0) 1.46185188s ago: executing program 4: r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/slabinfo\x00', 0x0, 0x0) openat$vim2m(0xffffffffffffff9c, 0x0, 0x2, 0x0) r1 = socket$inet6(0xa, 0x806, 0x0) bind$inet6(r1, &(0x7f0000000100)={0xa, 0x4e23}, 0x1c) listen(r1, 0x3) read$FUSE(0xffffffffffffffff, 0x0, 0x0) syz_open_dev$tty20(0xc, 0x4, 0x1) r2 = socket$inet_dccp(0x2, 0x6, 0x0) connect$inet(r2, &(0x7f0000772000)={0x2, 0x4e23}, 0x10) r3 = accept4(r1, 0x0, 0x0, 0x0) sendmmsg(r3, &(0x7f0000001500), 0x588, 0x0) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000140)) close_range(r0, 0xffffffffffffffff, 0x0) 1.360737458s ago: executing program 3: mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0xb, 0x31, 0xffffffffffffffff, 0x0) sendmsg$AUDIT_TRIM(0xffffffffffffffff, 0x0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) mbind(&(0x7f0000006000/0x3000)=nil, 0x3000, 0x2, 0x0, 0x746, 0x4) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x5) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xb, &(0x7f0000000180)=ANY=[@ANYRESOCT=0x0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={0x0, r3}, 0x10) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f0000000280)={&(0x7f0000000240)=[0x0], 0x1, 0x80800}) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000004c0)={{}, &(0x7f00000002c0), &(0x7f0000000300)=r3}, 0x20) socket(0x26, 0x1, 0x4) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r5, &(0x7f0000000000)={0xa, 0x8000002}, 0x1c) sendto$inet6(r5, 0x0, 0x0, 0x22004001, &(0x7f0000b63fe4)={0xa, 0x2, 0x0, @loopback}, 0x1c) sendto$inet6(r5, &(0x7f0000000500)="44f9b108b1cdc885c9c533d21f474bec8bfef1df1e2da71e578dc6b91d09f7ab15378571d8e27546090000006e75436914ab717528ee4b7a9beaf908d11137c11903064e83b4951f4d433a5404970c85d92d7083fd38844cbb0c6c5eb508ddc2dc7a590aa7941b1e9eeb5a688138dea09b776cbfa784cbf550bf3274fb0d199ea95f63d491dc8af0ce46dc5ce7775da4e684000000000000eb6b923da9d0e25b80f76a873664b5753444fe05f33e5f91045540836c3cd6af10f0cd018f0c6fd86e191bc9f86d93c45088fbe0c87fbe6cbcda4662d2a12f6d00"/229, 0xe5, 0x1, 0x0, 0x0) splice(r5, 0x0, r4, 0x0, 0x7ff, 0x0) 1.249375779s ago: executing program 2: sendmsg$netlink(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000001c0)={0x34, 0x0, 0x0, 0x0, 0x0, "", [@nested={0x24, 0x0, 0x0, 0x1, [@typed={0xc, 0x0, 0x0, 0x0, @u64}, @typed={0x14, 0x0, 0x0, 0x0, @ipv6=@dev}]}]}, 0x34}], 0x1}, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'bridge0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000001c0)=ANY=[@ANYBLOB="240000001d00070f000000000000000007000000", @ANYRES32=r1, @ANYBLOB="48005200060005"], 0x24}}, 0x0) 137.240062ms ago: executing program 4: r0 = syz_usb_connect(0x0, 0x3f, &(0x7f0000000040)=ANY=[@ANYBLOB="11010000733336088dee1edb23610000000109022d0101100000000904000003fe03010009cd8d1f0002000000090505020000fcffff09058b1e20"], 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000780)={0x84, &(0x7f0000000000)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) ioctl$EVIOCGMASK(r1, 0x5b16, 0x0) 99.807216ms ago: executing program 2: bind$inet(0xffffffffffffffff, 0x0, 0x0) setsockopt$inet_int(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000080), 0x4) bpf$BPF_PROG_TEST_RUN(0x1c, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000680)={0xffffffffffffffff}) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_aout(r2, 0x0, 0x6a) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8d}, 0x0) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x5) futex(&(0x7f000000cffc)=0x1, 0x6, 0x0, 0x0, 0x0, 0x0) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000580)={0x18, 0x5, &(0x7f0000000140)=ANY=[@ANYBLOB="180100002100000000000000000000108500000075000000a50000002300000095"], &(0x7f0000000100)='syzkaller\x00'}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x10) splice(r0, 0x0, r2, 0x0, 0x8ec3, 0x0) readv(r1, &(0x7f0000000080)=[{&(0x7f00000078c0)=""/110, 0x6e}], 0x1) pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r1, 0x0, r5, 0x0, 0x800, 0x0) close(r2) 0s ago: executing program 0: r0 = bpf$MAP_CREATE(0x0, 0x0, 0xffffffb8) fsetxattr$trusted_overlay_redirect(r0, &(0x7f0000000140), &(0x7f0000000180)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x800, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$pppl2tp(0x18, 0x1, 0x1) syz_emit_ethernet(0x36, &(0x7f0000001800)={@link_local, @random="50a245d5cde0", @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x2, 0x0, @empty, @broadcast}, @timestamp_reply={0x11, 0xe0, 0x0, 0x0, 0x0, 0x62ea0000}}}}}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0xffffffffffffffca, &(0x7f0000000040)=0x10001) r2 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) preadv(r2, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) socket$can_j1939(0x1d, 0x2, 0x7) syz_open_dev$admmidi(0x0, 0x20, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x80383, 0x0) read$midi(0xffffffffffffffff, 0x0, 0x49) ioctl$SIOCSIFMTU(r1, 0x8922, &(0x7f0000000080)={'batadv_slave_0\x00', 0x3ff}) openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x400, 0x0) ioctl$PPPIOCSMRU1(0xffffffffffffffff, 0x40047452, &(0x7f0000000040)=0x9) r3 = syz_open_dev$rtc(&(0x7f00000000c0), 0x61, 0x200900) ioctl$RTC_SET_TIME(r3, 0x4024700a, &(0x7f0000000100)={0x0, 0x32, 0x0, 0x0, 0x9, 0x0, 0x1, 0x21}) ioctl$DRM_IOCTL_GET_MAP(r2, 0xc0286404, &(0x7f0000000140)={&(0x7f0000ff9000/0x4000)=nil}) openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) syz_mount_image$exfat(&(0x7f0000001500), &(0x7f0000000040)='./file0\x00', 0x8000, &(0x7f00000001c0)=ANY=[@ANYBLOB="00e0c6e4d9182ec69e599fd4d32ba9c5146fbc43a33914b2b1a5ce8843b193dc82dbc512b6fabfe6fbdd2a8bdeeda78e17b18f1b6e80c81cd67046e6a85e7160112d613e4c6dcab2404d58291ec130b9fd2785ce8dd5538f70998f2d50005813ba6c65cd3c25a8e730e1cd7b11cf7f6cc0fba6b670c64374abd09518ffba0c5eb2e602b1a64ac897fce7fae33878c0e57398a4cc6ce9bee1d70bef22f10c7776c2f5077cb1de63832b1bab15c6caf549a1cd58106494d92d1159033b2e27eceae339414a62aca9cf6a00c07e2a181dd9668a64b5eefc8e5ebc6564442a8d"], 0x1, 0x14fe, &(0x7f0000001580)="$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") r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='blkio.bfq.io_serviced_recursive\x00', 0x275a, 0x0) write$binfmt_script(r4, &(0x7f0000000080), 0x10010) syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x17ef, 0x6009, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x5}}}}]}}]}}, 0x0) kernel console output (not intermixed with test programs): rface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 109.420083][ T5110] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 109.501081][ T5108] hsr_slave_0: entered promiscuous mode [ 109.510345][ T5108] hsr_slave_1: entered promiscuous mode [ 109.540117][ T5117] hsr_slave_0: entered promiscuous mode [ 109.547146][ T5117] hsr_slave_1: entered promiscuous mode [ 109.553612][ T5117] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 109.561911][ T5117] Cannot create hsr debugfs directory [ 109.614726][ T5115] hsr_slave_0: entered promiscuous mode [ 109.622293][ T5115] hsr_slave_1: entered promiscuous mode [ 109.629788][ T5115] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 109.637692][ T5115] Cannot create hsr debugfs directory [ 109.715586][ T5109] hsr_slave_0: entered promiscuous mode [ 109.723205][ T5109] hsr_slave_1: entered promiscuous mode [ 109.731396][ T5109] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 109.739156][ T5109] Cannot create hsr debugfs directory [ 109.827183][ T5110] hsr_slave_0: entered promiscuous mode [ 109.834016][ T5110] hsr_slave_1: entered promiscuous mode [ 109.841455][ T5110] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 109.849120][ T5110] Cannot create hsr debugfs directory [ 109.937506][ T5113] Bluetooth: hci1: command tx timeout [ 109.937514][ T5123] Bluetooth: hci0: command tx timeout [ 109.948407][ T5113] Bluetooth: hci3: command tx timeout [ 110.016938][ T5123] Bluetooth: hci4: command tx timeout [ 110.016947][ T5113] Bluetooth: hci2: command tx timeout [ 110.729412][ T5108] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 110.755745][ T5108] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 110.771663][ T5108] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 110.785745][ T5108] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 110.906220][ T5117] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 110.929535][ T5117] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 110.942892][ T5117] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 110.955778][ T5117] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 111.100114][ T5110] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 111.139597][ T5110] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 111.154640][ T5110] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 111.180296][ T5110] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 111.361980][ T5115] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 111.381311][ T5115] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 111.402095][ T5115] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 111.416170][ T5115] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 111.482243][ T5108] 8021q: adding VLAN 0 to HW filter on device bond0 [ 111.633005][ T5109] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 111.685564][ T5109] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 111.698904][ T5109] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 111.715221][ T5109] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 111.734014][ T5108] 8021q: adding VLAN 0 to HW filter on device team0 [ 111.748035][ T5117] 8021q: adding VLAN 0 to HW filter on device bond0 [ 111.809983][ T51] bridge0: port 1(bridge_slave_0) entered blocking state [ 111.817625][ T51] bridge0: port 1(bridge_slave_0) entered forwarding state [ 111.864510][ T51] bridge0: port 2(bridge_slave_1) entered blocking state [ 111.872080][ T51] bridge0: port 2(bridge_slave_1) entered forwarding state [ 111.955876][ T5117] 8021q: adding VLAN 0 to HW filter on device team0 [ 112.018525][ T5113] Bluetooth: hci0: command tx timeout [ 112.018584][ T5123] Bluetooth: hci3: command tx timeout [ 112.023950][ T54] Bluetooth: hci1: command tx timeout [ 112.095758][ T51] bridge0: port 1(bridge_slave_0) entered blocking state [ 112.101599][ T5113] Bluetooth: hci4: command tx timeout [ 112.103233][ T51] bridge0: port 1(bridge_slave_0) entered forwarding state [ 112.115987][ T5113] Bluetooth: hci2: command tx timeout [ 112.173250][ T51] bridge0: port 2(bridge_slave_1) entered blocking state [ 112.180526][ T51] bridge0: port 2(bridge_slave_1) entered forwarding state [ 112.252678][ T5115] 8021q: adding VLAN 0 to HW filter on device bond0 [ 112.375328][ T5110] 8021q: adding VLAN 0 to HW filter on device bond0 [ 112.435208][ T5109] 8021q: adding VLAN 0 to HW filter on device bond0 [ 112.464090][ T29] audit: type=1400 audit(1718802270.665:115): avc: denied { sys_module } for pid=5108 comm="syz-executor.0" capability=16 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 112.523172][ T5115] 8021q: adding VLAN 0 to HW filter on device team0 [ 112.573733][ T51] bridge0: port 1(bridge_slave_0) entered blocking state [ 112.581003][ T51] bridge0: port 1(bridge_slave_0) entered forwarding state [ 112.633307][ T51] bridge0: port 2(bridge_slave_1) entered blocking state [ 112.640636][ T51] bridge0: port 2(bridge_slave_1) entered forwarding state [ 112.699127][ T5110] 8021q: adding VLAN 0 to HW filter on device team0 [ 112.725797][ T5109] 8021q: adding VLAN 0 to HW filter on device team0 [ 112.805118][ T5166] bridge0: port 1(bridge_slave_0) entered blocking state [ 112.812361][ T5166] bridge0: port 1(bridge_slave_0) entered forwarding state [ 112.826353][ T5166] bridge0: port 1(bridge_slave_0) entered blocking state [ 112.834216][ T5166] bridge0: port 1(bridge_slave_0) entered forwarding state [ 112.882335][ T5166] bridge0: port 2(bridge_slave_1) entered blocking state [ 112.889597][ T5166] bridge0: port 2(bridge_slave_1) entered forwarding state [ 112.957882][ T5166] bridge0: port 2(bridge_slave_1) entered blocking state [ 112.965149][ T5166] bridge0: port 2(bridge_slave_1) entered forwarding state [ 113.080303][ T5108] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 113.361829][ T5109] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 113.551026][ T5117] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 113.630056][ T5108] veth0_vlan: entered promiscuous mode [ 113.761186][ T5108] veth1_vlan: entered promiscuous mode [ 113.783729][ T5115] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 113.900191][ T5117] veth0_vlan: entered promiscuous mode [ 114.042332][ T5117] veth1_vlan: entered promiscuous mode [ 114.056041][ T5108] veth0_macvtap: entered promiscuous mode [ 114.074822][ T5108] veth1_macvtap: entered promiscuous mode [ 114.098281][ T5113] Bluetooth: hci0: command tx timeout [ 114.103774][ T5113] Bluetooth: hci1: command tx timeout [ 114.109309][ T54] Bluetooth: hci3: command tx timeout [ 114.118946][ T5109] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 114.171454][ T5115] veth0_vlan: entered promiscuous mode [ 114.177491][ T5113] Bluetooth: hci2: command tx timeout [ 114.182955][ T5113] Bluetooth: hci4: command tx timeout [ 114.218814][ T5108] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 114.235032][ T5108] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 114.328932][ T5108] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 114.349320][ T5108] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 114.364587][ T5108] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 114.375764][ T5108] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 114.415996][ T5115] veth1_vlan: entered promiscuous mode [ 114.464108][ T5117] veth0_macvtap: entered promiscuous mode [ 114.524820][ T5110] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 114.557412][ T5117] veth1_macvtap: entered promiscuous mode [ 114.738936][ T3431] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 114.755057][ T5115] veth0_macvtap: entered promiscuous mode [ 114.761077][ T3431] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 114.799997][ T5115] veth1_macvtap: entered promiscuous mode [ 114.832122][ T5117] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 114.843338][ T5117] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 114.857629][ T5117] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 114.906203][ T5117] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 114.917362][ T5117] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 114.931570][ T5117] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 114.952201][ T35] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 114.978778][ T35] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 114.993812][ T5117] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 115.003433][ T5117] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 115.015472][ T5117] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 115.024604][ T5117] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 115.049547][ T29] audit: type=1400 audit(1718802273.255:116): avc: denied { mounton } for pid=5108 comm="syz-executor.0" path="/dev/binderfs" dev="devtmpfs" ino=2323 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:device_t tclass=dir permissive=1 [ 115.087389][ T5115] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 115.101389][ T5115] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 115.114909][ T29] audit: type=1400 audit(1718802273.255:117): avc: denied { mount } for pid=5108 comm="syz-executor.0" name="/" dev="binder" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 115.115922][ T5115] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 115.151848][ T5115] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 115.165515][ T5115] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 115.181407][ T5115] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 115.196506][ T5115] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 115.206362][ T5115] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 115.220018][ T5115] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 115.234085][ T5115] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 115.324350][ T29] audit: type=1400 audit(1718802273.515:118): avc: denied { read write } for pid=5108 comm="syz-executor.0" name="loop0" dev="devtmpfs" ino=648 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 115.352969][ T5115] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 115.390859][ T5115] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 115.400725][ T5115] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 115.410868][ T5115] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 115.427115][ T29] audit: type=1400 audit(1718802273.525:119): avc: denied { open } for pid=5108 comm="syz-executor.0" path="/dev/loop0" dev="devtmpfs" ino=648 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 115.451543][ T29] audit: type=1400 audit(1718802273.525:120): avc: denied { ioctl } for pid=5108 comm="syz-executor.0" path="/dev/loop0" dev="devtmpfs" ino=648 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 115.482989][ T29] audit: type=1400 audit(1718802273.595:121): avc: denied { create } for pid=5196 comm="syz-executor.0" anonclass=[io_uring] scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 115.519054][ T29] audit: type=1400 audit(1718802273.615:122): avc: denied { create } for pid=5196 comm="syz-executor.0" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 115.566965][ T5110] veth0_vlan: entered promiscuous mode [ 115.591552][ T29] audit: type=1400 audit(1718802273.615:123): avc: denied { prog_load } for pid=5196 comm="syz-executor.0" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 115.620955][ T5110] veth1_vlan: entered promiscuous mode [ 115.662859][ T29] audit: type=1400 audit(1718802273.615:124): avc: denied { bpf } for pid=5196 comm="syz-executor.0" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 116.249605][ T1102] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 116.293259][ T1102] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 116.320559][ T5109] veth0_vlan: entered promiscuous mode [ 116.516183][ T5109] veth1_vlan: entered promiscuous mode [ 116.605113][ T5202] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.0'. [ 116.668954][ T5110] veth0_macvtap: entered promiscuous mode [ 116.691508][ T5110] veth1_macvtap: entered promiscuous mode [ 116.710565][ T52] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 116.724558][ T52] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 116.896442][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 116.900794][ T5110] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 116.919859][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 116.957743][ T5110] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 116.975010][ T5110] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 117.000486][ T5110] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 117.018912][ T5110] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 117.035696][ T5110] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 117.054085][ T5110] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 117.175214][ T5109] veth0_macvtap: entered promiscuous mode [ 117.259111][ T5211] loop1: detected capacity change from 0 to 256 [ 117.287580][ T5110] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 117.296293][ T5211] exfat: Deprecated parameter 'utf8' [ 117.305412][ T5211] exfat: Deprecated parameter 'namecase' [ 117.312470][ T5110] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 117.336685][ T5110] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 117.356348][ T5110] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 117.400879][ T5110] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 117.412378][ T5110] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 117.431125][ T5211] exFAT-fs (loop1): failed to load upcase table (idx : 0x00012153, chksum : 0xc3dffc2e, utbl_chksum : 0xe619d30d) [ 117.444633][ T5110] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 117.526795][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 117.539910][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 117.547556][ T29] kauditd_printk_skb: 14 callbacks suppressed [ 117.547578][ T29] audit: type=1400 audit(1718802275.755:139): avc: denied { connect } for pid=5210 comm="syz-executor.1" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 117.601475][ T5109] veth1_macvtap: entered promiscuous mode [ 117.613836][ T29] audit: type=1400 audit(1718802275.815:140): avc: denied { create } for pid=5210 comm="syz-executor.1" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 117.686823][ T5110] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 117.695584][ T5110] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 117.702104][ T29] audit: type=1400 audit(1718802275.845:141): avc: denied { shutdown } for pid=5210 comm="syz-executor.1" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 117.755622][ T29] audit: type=1400 audit(1718802275.855:142): avc: denied { write } for pid=5210 comm="syz-executor.1" name="/" dev="loop1" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 117.766534][ T5110] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 117.791872][ T29] audit: type=1400 audit(1718802275.855:143): avc: denied { add_name } for pid=5210 comm="syz-executor.1" name="net_prio.prioidx" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 117.799896][ T5110] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 117.813854][ C0] vkms_vblank_simulate: vblank timer overrun [ 117.834362][ T5211] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 117.947282][ T29] audit: type=1400 audit(1718802275.855:144): avc: denied { create } for pid=5210 comm="syz-executor.1" name="net_prio.prioidx" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 118.001649][ T29] audit: type=1400 audit(1718802275.855:145): avc: denied { associate } for pid=5210 comm="syz-executor.1" name="net_prio.prioidx" scontext=root:object_r:unlabeled_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 118.070654][ T5109] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 118.095631][ T29] audit: type=1400 audit(1718802275.935:146): avc: denied { prog_run } for pid=5210 comm="syz-executor.1" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 118.114921][ C0] vkms_vblank_simulate: vblank timer overrun [ 118.124115][ T29] audit: type=1400 audit(1718802275.955:147): avc: denied { read append open } for pid=5210 comm="syz-executor.1" path="/root/syzkaller-testdir1947431542/syzkaller.IcIkZP/0/file1/net_prio.prioidx" dev="loop1" ino=1048589 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 118.125994][ T5109] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 118.154145][ C0] vkms_vblank_simulate: vblank timer overrun [ 118.155357][ T29] audit: type=1400 audit(1718802276.055:148): avc: denied { write } for pid=5210 comm="syz-executor.1" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 118.244576][ T5109] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 118.286593][ T5109] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 118.331267][ T5109] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 118.366533][ T5109] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 118.386572][ T5109] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 118.409221][ T5109] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 118.445775][ T5109] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 118.532928][ T5109] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 118.554558][ T5109] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 118.583886][ T5109] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 118.594717][ T5109] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 118.604723][ T5109] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 118.615312][ T5109] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 118.625783][ T5109] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 118.636388][ T5109] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 118.668649][ T5109] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 118.744600][ T5109] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 118.794653][ T5109] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 118.827128][ T5109] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 118.856608][ T5109] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 119.078661][ T35] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 119.122871][ T35] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 119.262150][ T52] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 119.283893][ T52] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 119.453391][ T2789] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 119.488239][ T2789] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 119.721338][ T2789] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 119.764780][ T2789] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 121.856857][ T0] NOHZ tick-stop error: local softirq work is pending, handler #08!!! [ 121.927274][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 122.100191][ T5249] loop4: detected capacity change from 0 to 1024 [ 122.657330][ T5263] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.1'. [ 122.669604][ T5249] EXT4-fs: Ignoring removed orlov option [ 122.712083][ T5249] EXT4-fs (loop4): Test dummy encryption mode enabled [ 122.727835][ T5249] EXT4-fs (loop4): stripe (7) is not aligned with cluster size (16), stripe is disabled [ 122.937625][ T5249] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 123.008827][ T29] kauditd_printk_skb: 29 callbacks suppressed [ 123.008849][ T29] audit: type=1400 audit(1718802281.215:178): avc: denied { mount } for pid=5248 comm="syz-executor.4" name="/" dev="loop4" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 123.198590][ T29] audit: type=1400 audit(1718802281.405:179): avc: denied { write } for pid=5248 comm="syz-executor.4" name="/" dev="loop4" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 123.269293][ T29] audit: type=1400 audit(1718802281.465:180): avc: denied { remove_name } for pid=5248 comm="syz-executor.4" name="file0" dev="loop4" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 123.335304][ T29] audit: type=1400 audit(1718802281.465:181): avc: denied { rename } for pid=5248 comm="syz-executor.4" name="file0" dev="loop4" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 123.383261][ T5268] loop3: detected capacity change from 0 to 4096 [ 123.442739][ T29] audit: type=1400 audit(1718802281.465:182): avc: denied { add_name } for pid=5248 comm="syz-executor.4" name="bus" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 123.457395][ T5268] ntfs3: loop3: Different NTFS sector size (2048) and media sector size (512). [ 123.553126][ T29] audit: type=1400 audit(1718802281.605:183): avc: denied { create } for pid=5248 comm="syz-executor.4" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=lnk_file permissive=1 [ 123.625864][ T5109] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 123.646266][ T29] audit: type=1400 audit(1718802281.785:184): avc: denied { unmount } for pid=5109 comm="syz-executor.4" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 123.807481][ T5268] ntfs3: loop3: Failed to initialize $Extend/$ObjId. [ 123.897755][ T29] audit: type=1400 audit(1718802282.095:185): avc: denied { write } for pid=5281 comm="syz-executor.4" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 124.002332][ T29] audit: type=1400 audit(1718802282.205:186): avc: denied { write } for pid=5267 comm="syz-executor.3" name="bus" dev="loop3" ino=33 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 124.032800][ T29] audit: type=1800 audit(1718802282.205:187): pid=5284 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed(directio) comm="syz-executor.3" name="bus" dev="loop3" ino=33 res=0 errno=0 [ 125.867519][ T5298] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 128.165929][ T5319] loop4: detected capacity change from 0 to 256 [ 128.248257][ T29] kauditd_printk_skb: 18 callbacks suppressed [ 128.248280][ T29] audit: type=1400 audit(1718802286.455:206): avc: denied { write } for pid=5297 comm="syz-executor.3" name="kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 128.291692][ T5319] FAT-fs (loop4): Directory bread(block 64) failed [ 128.329851][ T5319] FAT-fs (loop4): Directory bread(block 65) failed [ 128.365297][ T5319] FAT-fs (loop4): Directory bread(block 66) failed [ 128.390896][ T5299] loop3: detected capacity change from 0 to 512 [ 128.398175][ T5319] FAT-fs (loop4): Directory bread(block 67) failed [ 128.404872][ T5319] FAT-fs (loop4): Directory bread(block 68) failed [ 128.436020][ T5319] FAT-fs (loop4): Directory bread(block 69) failed [ 128.465954][ T5319] FAT-fs (loop4): Directory bread(block 70) failed [ 128.496887][ T5319] FAT-fs (loop4): Directory bread(block 71) failed [ 128.503792][ T5319] FAT-fs (loop4): Directory bread(block 72) failed [ 128.523597][ T5299] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 128.569508][ T5319] FAT-fs (loop4): Directory bread(block 73) failed [ 128.636600][ T5299] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 128.976753][ T29] audit: type=1400 audit(1718802287.175:207): avc: denied { mount } for pid=5316 comm="syz-executor.4" name="/" dev="loop4" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dosfs_t tclass=filesystem permissive=1 [ 129.006443][ T5299] EXT4-fs (loop3): 1 orphan inode deleted [ 129.012312][ T5299] EXT4-fs (loop3): 1 truncate cleaned up [ 129.123858][ T5299] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 129.353990][ T5329] loop2: detected capacity change from 0 to 256 [ 129.594083][ T29] audit: type=1400 audit(1718802287.785:208): avc: denied { unmount } for pid=5109 comm="syz-executor.4" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dosfs_t tclass=filesystem permissive=1 [ 129.807347][ T29] audit: type=1400 audit(1718802288.005:209): avc: denied { unmount } for pid=5115 comm="syz-executor.2" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dosfs_t tclass=filesystem permissive=1 [ 129.879360][ T5110] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 130.681575][ T5349] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.3'. [ 131.423303][ T5361] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.3'. [ 131.433130][ T5361] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.3'. [ 131.567514][ T5366] loop4: detected capacity change from 0 to 512 [ 131.727352][ T5366] EXT4-fs warning (device loop4): dx_probe:874: Directory (ino: 2) htree depth 0x0002 exceedsupported value [ 131.756973][ T29] audit: type=1400 audit(1718802289.955:210): avc: denied { create } for pid=5369 comm="syz-executor.3" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 131.828127][ T5366] EXT4-fs warning (device loop4): dx_probe:879: Enable large directory feature to access it [ 131.839497][ T29] audit: type=1400 audit(1718802290.025:211): avc: denied { bind } for pid=5369 comm="syz-executor.3" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 131.871590][ T5366] EXT4-fs warning (device loop4): dx_probe:964: inode #2: comm syz-executor.4: Corrupt directory, running e2fsck is recommended [ 131.925724][ T29] audit: type=1400 audit(1718802290.025:212): avc: denied { name_bind } for pid=5369 comm="syz-executor.3" src=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=sctp_socket permissive=1 [ 131.951652][ T5366] EXT4-fs (loop4): Cannot turn on journaled quota: type 1: error -2 [ 132.003414][ T29] audit: type=1400 audit(1718802290.025:213): avc: denied { node_bind } for pid=5369 comm="syz-executor.3" saddr=::1 src=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=sctp_socket permissive=1 [ 132.021023][ T5366] EXT4-fs error (device loop4): ext4_xattr_ibody_find:2234: inode #15: comm syz-executor.4: corrupted in-inode xattr: invalid ea_ino [ 132.090298][ T29] audit: type=1400 audit(1718802290.055:214): avc: denied { write } for pid=5369 comm="syz-executor.3" laddr=::1 lport=20003 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 132.114795][ T5366] EXT4-fs (loop4): Remounting filesystem read-only [ 132.120574][ T5366] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 132.162767][ T5366] SELinux: (dev loop4, type ext4) getxattr errno 5 [ 132.226568][ T29] audit: type=1400 audit(1718802290.055:215): avc: denied { connect } for pid=5369 comm="syz-executor.3" laddr=::1 lport=20003 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 132.242370][ T5366] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 132.624997][ T5384] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.3'. [ 132.779093][ T5366] EXT4-fs warning (device sda1): __ext4_ioctl:1257: Setting inode version is not supported with metadata_csum enabled. [ 132.861738][ T5392] loop2: detected capacity change from 0 to 1024 [ 133.072741][ T5392] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 133.850456][ T5363] loop0: detected capacity change from 0 to 32768 [ 134.114092][ T5363] XFS (loop0): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 134.220293][ T5398] loop4: detected capacity change from 0 to 4096 [ 134.230504][ T5398] ======================================================= [ 134.230504][ T5398] WARNING: The mand mount option has been deprecated and [ 134.230504][ T5398] and is ignored by this kernel. Remove the mand [ 134.230504][ T5398] option from the mount to silence this warning. [ 134.230504][ T5398] ======================================================= [ 134.265484][ C1] vkms_vblank_simulate: vblank timer overrun [ 134.329611][ T29] kauditd_printk_skb: 17 callbacks suppressed [ 134.329635][ T29] audit: type=1400 audit(1718802292.535:233): avc: denied { bind } for pid=5408 comm="syz-executor.1" lport=255 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 134.426676][ T29] audit: type=1400 audit(1718802292.535:234): avc: denied { node_bind } for pid=5408 comm="syz-executor.1" saddr=172.20.20.170 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=rawip_socket permissive=1 [ 134.512260][ T29] audit: type=1400 audit(1718802292.575:235): avc: denied { connect } for pid=5408 comm="syz-executor.1" laddr=172.20.20.170 lport=255 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 134.573556][ T5413] veth0_vlan: entered allmulticast mode [ 134.606708][ T5363] XFS (loop0): Ending clean mount [ 134.638459][ T29] audit: type=1400 audit(1718802292.595:236): avc: denied { write } for pid=5408 comm="syz-executor.1" laddr=172.20.20.170 lport=255 faddr=224.0.0.1 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 134.766167][ T5115] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 134.787624][ T29] audit: type=1400 audit(1718802292.755:237): avc: denied { ioctl } for pid=5397 comm="syz-executor.4" path="/dev/snapshot" dev="devtmpfs" ino=92 ioctlcmd=0x330f scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 134.819502][ T5108] XFS (loop0): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 134.863352][ T29] audit: type=1400 audit(1718802293.045:238): avc: denied { create } for pid=5397 comm="syz-executor.4" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 134.976731][ T29] audit: type=1400 audit(1718802293.045:239): avc: denied { connect } for pid=5397 comm="syz-executor.4" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 135.037130][ T29] audit: type=1400 audit(1718802293.065:240): avc: denied { ioctl } for pid=5397 comm="syz-executor.4" path="socket:[7519]" dev="sockfs" ino=7519 ioctlcmd=0xb100 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 135.064526][ T29] audit: type=1400 audit(1718802293.175:241): avc: denied { write } for pid=5412 comm="syz-executor.3" name="vbi3" dev="devtmpfs" ino=884 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1 [ 135.179052][ T5423] loop2: detected capacity change from 0 to 256 [ 135.189876][ T5413] netlink: 36 bytes leftover after parsing attributes in process `syz-executor.3'. [ 135.280730][ T29] audit: type=1400 audit(1718802293.475:242): avc: denied { mount } for pid=5422 comm="syz-executor.2" name="/" dev="loop2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dosfs_t tclass=filesystem permissive=1 [ 136.135153][ T5434] loop3: detected capacity change from 0 to 32768 [ 136.152019][ T5434] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop3 (7:3) scanned by syz-executor.3 (5434) [ 136.193730][ T5434] BTRFS info (device loop3): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 136.204768][ T5434] BTRFS info (device loop3): using sha256 (sha256-avx2) checksum algorithm [ 136.213625][ T5434] BTRFS info (device loop3): using free-space-tree [ 136.486907][ T5455] loop2: detected capacity change from 0 to 2048 [ 136.595790][ T5455] UDF-fs: error (device loop2): udf_read_tagged: tag checksum failed, block 99: 0x27 != 0x4d [ 136.632893][ T5461] loop0: detected capacity change from 0 to 2048 [ 136.645557][ T5455] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 136.763990][ T5461] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 136.848814][ T5461] ext4 filesystem being mounted at /root/syzkaller-testdir54344347/syzkaller.FWx09P/15/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 137.052508][ T5110] BTRFS info (device loop3): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 137.337403][ T5476] loop4: detected capacity change from 0 to 1024 [ 137.512514][ T5481] loop1: detected capacity change from 0 to 256 [ 137.569307][ T5476] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 137.644624][ T5108] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 137.966202][ T5486] Bluetooth: MGMT ver 1.22 [ 138.070301][ T5488] loop3: detected capacity change from 0 to 1024 [ 138.162105][ T5488] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 138.502998][ T1250] ieee802154 phy0 wpan0: encryption failed: -22 [ 138.511132][ T1250] ieee802154 phy1 wpan1: encryption failed: -22 [ 139.263329][ T5110] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 139.532647][ T29] kauditd_printk_skb: 13 callbacks suppressed [ 139.532663][ T29] audit: type=1400 audit(1718802297.735:256): avc: denied { unmount } for pid=5108 comm="syz-executor.0" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=filesystem permissive=1 [ 139.944810][ T29] audit: type=1326 audit(1718802298.145:257): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5506 comm="syz-executor.0" exe="/root/syz-executor.0" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f32a107cf29 code=0x0 [ 139.968232][ C1] vkms_vblank_simulate: vblank timer overrun [ 139.975707][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 140.034750][ T5511] loop2: detected capacity change from 0 to 2048 [ 140.077518][ T5511] UDF-fs: error (device loop2): udf_read_tagged: tag checksum failed, block 99: 0x27 != 0x4d [ 140.095790][ T5511] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 140.168544][ T5109] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 140.188917][ T5509] loop3: detected capacity change from 0 to 4096 [ 140.220572][ T0] NOHZ tick-stop error: local softirq work is pending, handler #10!!! [ 140.297334][ T5469] I/O error, dev loop3, sector 3968 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 0 [ 140.793005][ T29] audit: type=1400 audit(1718802298.985:258): avc: denied { create } for pid=5519 comm="syz-executor.0" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 141.162842][ T29] audit: type=1400 audit(1718802299.355:259): avc: denied { create } for pid=5521 comm="syz-executor.2" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 141.316656][ T29] audit: type=1400 audit(1718802299.405:260): avc: denied { write } for pid=5521 comm="syz-executor.2" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 141.689275][ T0] NOHZ tick-stop error: local softirq work is pending, handler #140!!! [ 141.701955][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 141.747242][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 141.757122][ T0] NOHZ tick-stop error: local softirq work is pending, handler #202!!! [ 141.766100][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 141.775095][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 142.054281][ T5537] fuse: Bad value for 'user_id' [ 142.114013][ T29] audit: type=1400 audit(1718802300.315:261): avc: denied { bind } for pid=5528 comm="syz-executor.2" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 142.252002][ T29] audit: type=1400 audit(1718802300.415:262): avc: denied { create } for pid=5532 comm="syz-executor.0" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 142.431335][ T29] audit: type=1400 audit(1718802300.455:263): avc: denied { ioctl } for pid=5528 comm="syz-executor.2" path="socket:[8771]" dev="sockfs" ino=8771 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 142.462139][ T29] audit: type=1400 audit(1718802300.515:264): avc: denied { setopt } for pid=5532 comm="syz-executor.0" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 142.510006][ T5159] kernel write not supported for file /media0 (pid: 5159 comm: kworker/1:3) [ 142.549242][ T29] audit: type=1400 audit(1718802300.565:265): avc: denied { write } for pid=5528 comm="syz-executor.2" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 143.242970][ T5555] loop0: detected capacity change from 0 to 512 [ 143.253073][ T5544] loop1: detected capacity change from 0 to 512 [ 143.332296][ T5556] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.4'. [ 143.355883][ T5544] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 143.365370][ T5555] EXT4-fs warning (device loop0): dx_probe:874: Directory (ino: 2) htree depth 0x0002 exceedsupported value [ 143.389052][ T5555] EXT4-fs warning (device loop0): dx_probe:879: Enable large directory feature to access it [ 143.397943][ T5560] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.2'. [ 143.401322][ T5555] EXT4-fs warning (device loop0): dx_probe:964: inode #2: comm syz-executor.0: Corrupt directory, running e2fsck is recommended [ 143.437744][ T5555] EXT4-fs (loop0): Cannot turn on journaled quota: type 1: error -2 [ 143.487111][ T5555] EXT4-fs error (device loop0): ext4_xattr_ibody_find:2234: inode #15: comm syz-executor.0: corrupted in-inode xattr: invalid ea_ino [ 143.514562][ T5544] EXT4-fs (loop1): 1 orphan inode deleted [ 143.545945][ T5544] EXT4-fs (loop1): 1 truncate cleaned up [ 143.590152][ T5555] EXT4-fs (loop0): Remounting filesystem read-only [ 143.600005][ T5544] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 143.624630][ T5555] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 143.706652][ T5555] SELinux: (dev loop0, type ext4) getxattr errno 5 [ 143.762065][ T5555] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 144.018789][ T5543] kvm: emulating exchange as write [ 144.171412][ T5555] EXT4-fs warning (device sda1): __ext4_ioctl:1257: Setting inode version is not supported with metadata_csum enabled. [ 144.442624][ T5117] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 144.643041][ T29] kauditd_printk_skb: 1 callbacks suppressed [ 144.643083][ T29] audit: type=1400 audit(1718802302.845:267): avc: denied { execute } for pid=5575 comm="syz-executor.3" path=2F6D656D66643AB3BF409CFBB24D6CD21A4CABA1613E03F504F47154131DC9D6139F21978D049E41862D8342C4273A44DCABF0E6B7EDCC85031A31056D29F7878938A9C591CF4A0B766AE0508E724178F49A31213640E0472A5B815AE136E048B16213E70CF5ECA2BD05D5BADDF5C56E636CFE1E6DD04189D60232D7F13DF6608C90809B91C364285F6699E9B4D45884473B78E8768D01B9B699A86AFBBC16FAEF63ADB8A07490945FB19605AD4293EA247CF1A98CFAC9D73D285BE58444E8402E06F74F9FD47AB0A4AC4ADA202864656C6574656429 dev="hugetlbfs" ino=7871 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:hugetlbfs_t tclass=file permissive=1 [ 144.812593][ T5581] fuse: Bad value for 'user_id' [ 144.852306][ T29] audit: type=1400 audit(1718802302.955:268): avc: denied { ioctl } for pid=5575 comm="syz-executor.3" path="anon_inode:[userfaultfd]" dev="anon_inodefs" ino=7876 ioctlcmd=0xaa3f scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 144.997015][ T3438] bond0: (slave bond_slave_0): interface is now down [ 145.023818][ T3438] bond0: (slave bond_slave_1): interface is now down [ 145.074952][ T29] audit: type=1400 audit(1718802303.275:269): avc: denied { create } for pid=5580 comm="syz-executor.1" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dccp_socket permissive=1 [ 145.082448][ T3438] bond0: now running without any active interface! [ 145.162489][ T5177] kernel write not supported for file /media0 (pid: 5177 comm: kworker/1:5) [ 145.331195][ T29] audit: type=1400 audit(1718802303.525:270): avc: denied { bind } for pid=5580 comm="syz-executor.1" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dccp_socket permissive=1 [ 145.402228][ T5587] loop0: detected capacity change from 0 to 1024 [ 145.412715][ T29] audit: type=1400 audit(1718802303.525:271): avc: denied { name_bind } for pid=5580 comm="syz-executor.1" src=20004 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=dccp_socket permissive=1 [ 145.468751][ T29] audit: type=1400 audit(1718802303.535:272): avc: denied { node_bind } for pid=5580 comm="syz-executor.1" saddr=fc00:: src=20004 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=dccp_socket permissive=1 [ 145.503358][ T5587] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 145.703162][ T29] audit: type=1400 audit(1718802303.895:273): avc: denied { ioctl } for pid=5590 comm="syz-executor.3" path="socket:[8871]" dev="sockfs" ino=8871 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 145.918513][ T5569] loop2: detected capacity change from 0 to 32768 [ 145.983093][ T5599] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.3'. [ 146.136556][ T29] audit: type=1400 audit(1718802304.335:274): avc: denied { create } for pid=5568 comm="syz-executor.2" name="file1" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=dir permissive=1 [ 146.182008][ T5596] loop1: detected capacity change from 0 to 4096 [ 146.202830][ T5596] ntfs3: Bad value for 'uid' [ 146.385691][ T5603] loop4: detected capacity change from 0 to 1024 [ 146.401604][ T5108] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 146.428753][ T5603] EXT4-fs: Ignoring removed orlov option [ 146.490713][ T5603] EXT4-fs (loop4): Test dummy encryption mode enabled [ 146.555661][ T5603] EXT4-fs (loop4): stripe (7) is not aligned with cluster size (16), stripe is disabled [ 146.560206][ T5608] loop3: detected capacity change from 0 to 64 [ 146.629595][ T5603] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 146.903396][ T5109] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 147.130870][ T29] audit: type=1800 audit(1718802305.335:275): pid=5613 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed(directio) comm="syz-executor.0" name="bus" dev="sda1" ino=1951 res=0 errno=0 [ 147.495375][ T5617] loop3: detected capacity change from 0 to 1024 [ 147.602455][ T5621] loop0: detected capacity change from 0 to 8 [ 147.838272][ T5621] SQUASHFS error: Failed to read block 0x63a: -5 [ 147.845199][ T5621] SQUASHFS error: Unable to read metadata cache entry [638] [ 147.923732][ T5621] SQUASHFS error: Unable to read directory block [26067d:ffff] [ 148.221946][ T5629] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 149.044314][ T29] audit: type=1400 audit(1718802307.245:276): avc: denied { setopt } for pid=5622 comm="syz-executor.4" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 149.137672][ T5630] warning: `syz-executor.2' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 149.688630][ T29] audit: type=1400 audit(1718802307.865:277): avc: denied { write } for pid=5622 comm="syz-executor.4" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 150.052070][ T29] audit: type=1400 audit(1718802308.255:278): avc: denied { getopt } for pid=5643 comm="syz-executor.2" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 150.247950][ T5645] loop0: detected capacity change from 0 to 2048 [ 150.340324][ T29] audit: type=1800 audit(1718802308.535:279): pid=5650 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed(directio) comm="syz-executor.2" name="file0" dev="sda1" ino=1953 res=0 errno=0 [ 150.640708][ T5645] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 150.678019][ T5645] ext4 filesystem being mounted at /root/syzkaller-testdir54344347/syzkaller.FWx09P/26/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 151.779183][ T29] audit: type=1400 audit(1718802308.985:280): avc: denied { execute } for pid=5649 comm="syz-executor.2" path=2F6D656D66643A73656375726974792E73656C696E7578202864656C6574656429 dev="tmpfs" ino=37 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 151.847346][ T5660] loop1: detected capacity change from 0 to 64 [ 152.115446][ T29] audit: type=1400 audit(1718802310.315:281): avc: denied { mount } for pid=5661 comm="syz-executor.2" name="/" dev="ramfs" ino=7997 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ramfs_t tclass=filesystem permissive=1 [ 152.414866][ T5108] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 152.482574][ T29] audit: type=1400 audit(1718802310.685:282): avc: denied { unmount } for pid=5115 comm="syz-executor.2" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ramfs_t tclass=filesystem permissive=1 [ 152.918519][ T5675] netlink: 'syz-executor.0': attribute type 25 has an invalid length. [ 152.959291][ T5675] netlink: 'syz-executor.0': attribute type 7 has an invalid length. [ 154.257018][ T5698] loop4: detected capacity change from 0 to 2048 [ 154.402239][ T5698] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 154.465358][ T5670] loop3: detected capacity change from 0 to 32768 [ 154.556844][ T5698] ext4 filesystem being mounted at /root/syzkaller-testdir2780687106/syzkaller.XhwjvJ/35/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 154.644352][ T5670] XFS (loop3): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 154.945411][ T5668] loop1: detected capacity change from 0 to 40427 [ 155.043912][ T5668] F2FS-fs (loop1): invalid crc value [ 155.086418][ T5668] F2FS-fs (loop1): Found nat_bits in checkpoint [ 155.276367][ T5670] XFS (loop3): Ending clean mount [ 155.414509][ T5713] loop0: detected capacity change from 0 to 128 [ 155.419092][ T5109] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 155.474614][ T5668] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 155.486038][ T5713] qnx6: wrong signature (magic) at position (0x2000) - will try alternative position (0x0000). [ 155.519947][ T5110] XFS (loop3): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 155.526186][ T5713] qnx6: wrong signature (magic) in superblock #1. [ 155.537916][ T5713] qnx6: unable to read the first superblock [ 156.685351][ T29] audit: type=1400 audit(1718802314.875:283): avc: denied { read } for pid=5723 comm="syz-executor.0" name="sg0" dev="devtmpfs" ino=695 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 156.755197][ T29] audit: type=1400 audit(1718802314.915:284): avc: denied { ioctl } for pid=5723 comm="syz-executor.0" path="/dev/sg0" dev="devtmpfs" ino=695 ioctlcmd=0x2203 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 157.538974][ T29] audit: type=1400 audit(1718802315.745:285): avc: denied { create } for pid=5733 comm="syz-executor.1" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 157.645103][ T29] audit: type=1400 audit(1718802315.785:286): avc: denied { setopt } for pid=5733 comm="syz-executor.1" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 157.702680][ T5718] loop4: detected capacity change from 0 to 32768 [ 157.730645][ T5732] loop3: detected capacity change from 0 to 256 [ 157.858934][ T5113] Bluetooth: hci0: command tx timeout [ 157.930948][ T29] audit: type=1400 audit(1718802316.135:287): avc: denied { remount } for pid=5717 comm="syz-executor.4" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 158.231996][ T5736] loop0: detected capacity change from 0 to 4096 [ 158.263595][ T5742] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.1'. [ 158.304975][ T5736] ntfs3: loop0: Different NTFS sector size (1024) and media sector size (512). [ 158.525014][ T29] audit: type=1400 audit(1718802316.725:288): avc: denied { create } for pid=5735 comm="syz-executor.0" name="file7" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=chr_file permissive=1 [ 159.278518][ T5752] loop0: detected capacity change from 0 to 128 [ 159.350830][ T5752] qnx6: wrong signature (magic) at position (0x2000) - will try alternative position (0x0000). [ 159.397549][ T5752] qnx6: wrong signature (magic) in superblock #1. [ 159.416665][ T5752] qnx6: unable to read the first superblock [ 159.495163][ T29] audit: type=1400 audit(1718802317.695:289): avc: denied { write } for pid=5756 comm="syz-executor.1" name="001" dev="devtmpfs" ino=711 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 159.516242][ T5757] usb usb1: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 159.519944][ T5161] I/O error, dev loop0, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 0 [ 159.974697][ T29] audit: type=1400 audit(1718802318.165:290): avc: denied { create } for pid=5765 comm="syz-executor.2" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 160.066167][ T29] audit: type=1400 audit(1718802318.225:291): avc: denied { connect } for pid=5765 comm="syz-executor.2" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 161.523384][ T29] audit: type=1400 audit(1718802319.725:292): avc: denied { create } for pid=5765 comm="syz-executor.2" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 161.721824][ T29] kauditd_printk_skb: 1 callbacks suppressed [ 161.721846][ T29] audit: type=1400 audit(1718802319.925:294): avc: denied { setopt } for pid=5778 comm="syz-executor.0" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 162.056523][ T29] audit: type=1400 audit(1718802320.255:295): avc: denied { read } for pid=5780 comm="syz-executor.0" name="v4l-subdev3" dev="devtmpfs" ino=861 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 162.207629][ T29] audit: type=1400 audit(1718802320.255:296): avc: denied { open } for pid=5780 comm="syz-executor.0" path="/dev/v4l-subdev3" dev="devtmpfs" ino=861 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 162.337449][ T29] audit: type=1400 audit(1718802320.295:297): avc: denied { ioctl } for pid=5780 comm="syz-executor.0" path="/dev/v4l-subdev3" dev="devtmpfs" ino=861 ioctlcmd=0x5602 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 162.515488][ T29] audit: type=1400 audit(1718802320.665:298): avc: denied { setopt } for pid=5780 comm="syz-executor.0" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 163.451157][ T5799] usb usb1: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 163.744014][ T29] audit: type=1400 audit(1718802321.945:299): avc: denied { write } for pid=5792 comm="syz-executor.2" name="vhost-vsock" dev="devtmpfs" ino=1085 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 164.036943][ T5808] capability: warning: `syz-executor.4' uses 32-bit capabilities (legacy support in use) [ 164.203707][ T29] audit: type=1400 audit(1718802322.405:300): avc: denied { getopt } for pid=5812 comm="syz-executor.1" lport=58 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 164.742421][ T29] audit: type=1400 audit(1718802322.945:301): avc: denied { create } for pid=5818 comm="syz-executor.4" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 164.977030][ T29] audit: type=1400 audit(1718802323.155:302): avc: denied { read } for pid=5817 comm="syz-executor.1" name="uinput" dev="devtmpfs" ino=836 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 165.097534][ T5820] loop4: detected capacity change from 0 to 4096 [ 165.126564][ T29] audit: type=1400 audit(1718802323.165:303): avc: denied { open } for pid=5817 comm="syz-executor.1" path="/dev/uinput" dev="devtmpfs" ino=836 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 165.238861][ T5820] ntfs3: loop4: Failed to load $MFT (-22). [ 165.330197][ T5820] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.4'. [ 165.550590][ T5823] loop1: detected capacity change from 0 to 64 [ 165.804359][ T5835] usb usb1: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 165.901424][ T5837] capability: warning: `syz-executor.3' uses deprecated v2 capabilities in a way that may be insecure [ 166.940026][ T29] kauditd_printk_skb: 8 callbacks suppressed [ 166.940047][ T29] audit: type=1400 audit(1718802325.135:312): avc: denied { read } for pid=5850 comm="syz-executor.4" name="ppp" dev="devtmpfs" ino=694 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 167.095535][ T29] audit: type=1400 audit(1718802325.135:313): avc: denied { open } for pid=5850 comm="syz-executor.4" path="/dev/ppp" dev="devtmpfs" ino=694 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 171.557926][ T29] audit: type=1400 audit(1718802325.155:314): avc: denied { ioctl } for pid=5850 comm="syz-executor.4" path="/dev/ppp" dev="devtmpfs" ino=694 ioctlcmd=0x743e scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 171.715304][ T29] audit: type=1400 audit(1718802325.235:315): avc: denied { sqpoll } for pid=5847 comm="syz-executor.0" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 171.830958][ T29] audit: type=1400 audit(1718802329.985:316): avc: denied { egress } for pid=16 comm="ksoftirqd/0" saddr=fe80::1c daddr=ff02::2 netif=teql0 scontext=system_u:object_r:unlabeled_t tcontext=system_u:object_r:netif_t tclass=netif permissive=1 [ 172.337084][ T29] audit: type=1400 audit(1718802329.985:317): avc: denied { sendto } for pid=16 comm="ksoftirqd/0" saddr=fe80::1c daddr=ff02::2 netif=teql0 scontext=system_u:object_r:unlabeled_t tcontext=system_u:object_r:node_t tclass=node permissive=1 [ 172.815257][ T5864] loop0: detected capacity change from 0 to 4096 [ 172.888939][ T29] audit: type=1400 audit(1718802331.095:318): avc: denied { read } for pid=5865 comm="syz-executor.3" name="usbmon0" dev="devtmpfs" ino=706 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 172.954592][ T5864] ntfs3: loop0: Failed to load $MFT (-22). [ 172.990671][ T29] audit: type=1400 audit(1718802331.095:319): avc: denied { open } for pid=5865 comm="syz-executor.3" path="/dev/usbmon0" dev="devtmpfs" ino=706 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 173.091864][ T29] audit: type=1400 audit(1718802331.285:320): avc: denied { mount } for pid=5867 comm="syz-executor.4" name="/" dev="tmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 173.305855][ T5864] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.0'. [ 173.334753][ T29] audit: type=1400 audit(1718802331.535:321): avc: denied { unmount } for pid=5109 comm="syz-executor.4" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 173.570168][ T29] audit: type=1400 audit(1718802331.765:322): avc: denied { connect } for pid=5877 comm="syz-executor.4" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 173.641205][ T29] audit: type=1400 audit(1718802331.845:323): avc: denied { shutdown } for pid=5877 comm="syz-executor.4" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 175.166582][ T29] audit: type=1400 audit(1718802333.365:324): avc: denied { mounton } for pid=5896 comm="syz-executor.4" path="/root/syzkaller-testdir2780687106/syzkaller.XhwjvJ/47/file0" dev="sda1" ino=1952 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_home_t tclass=file permissive=1 [ 175.629151][ T5113] Bluetooth: hci4: command tx timeout [ 177.482071][ T5916] loop2: detected capacity change from 0 to 4096 [ 178.442639][ T29] audit: type=1400 audit(1718802336.625:325): avc: denied { setopt } for pid=5921 comm="syz-executor.4" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 178.839826][ T5916] ntfs3: loop2: Failed to load $MFT (-22). [ 180.255917][ T29] audit: type=1400 audit(1718802336.695:326): avc: denied { map } for pid=5921 comm="syz-executor.4" path="socket:[9431]" dev="sockfs" ino=9431 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 180.280082][ T29] audit: type=1400 audit(1718802336.695:327): avc: denied { read } for pid=5921 comm="syz-executor.4" path="socket:[9431]" dev="sockfs" ino=9431 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 180.307848][ T5161] I/O error, dev loop2, sector 3968 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 0 [ 182.426626][ T54] Bluetooth: hci4: command tx timeout [ 183.361348][ T29] audit: type=1400 audit(1718802341.545:328): avc: denied { create } for pid=5947 comm="syz-executor.3" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_home_t tclass=blk_file permissive=1 [ 183.667117][ T29] audit: type=1400 audit(1718802341.865:329): avc: denied { setopt } for pid=5952 comm="syz-executor.0" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 184.288596][ T5956] loop0: detected capacity change from 0 to 2048 [ 184.355812][ T5958] loop1: detected capacity change from 0 to 8 [ 184.358412][ T5956] UDF-fs: error (device loop0): udf_read_tagged: tag checksum failed, block 99: 0x27 != 0x4d [ 184.446835][ T5956] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 184.575013][ T5958] input: syz0 as /devices/virtual/input/input6 [ 184.648152][ T29] audit: type=1400 audit(1718802342.845:330): avc: denied { read } for pid=4522 comm="acpid" name="event4" dev="devtmpfs" ino=2380 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 184.733462][ T5963] loop4: detected capacity change from 0 to 512 [ 184.753796][ T29] audit: type=1400 audit(1718802342.845:331): avc: denied { open } for pid=4522 comm="acpid" path="/dev/input/event4" dev="devtmpfs" ino=2380 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 184.804771][ T29] audit: type=1400 audit(1718802342.845:332): avc: denied { ioctl } for pid=4522 comm="acpid" path="/dev/input/event4" dev="devtmpfs" ino=2380 ioctlcmd=0x4520 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 184.904312][ T5963] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 184.927159][ T5963] ext4 filesystem being mounted at /root/syzkaller-testdir2780687106/syzkaller.XhwjvJ/51/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 184.951095][ T29] audit: type=1804 audit(1718802342.925:333): pid=5956 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir54344347/syzkaller.FWx09P/51/file0/bus" dev="loop0" ino=1367 res=1 errno=0 [ 185.015008][ T29] audit: type=1800 audit(1718802342.925:334): pid=5956 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed(directio) comm="syz-executor.0" name="bus" dev="loop0" ino=1367 res=0 errno=0 [ 185.091977][ T29] audit: type=1804 audit(1718802343.045:335): pid=5964 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir54344347/syzkaller.FWx09P/51/file0/bus" dev="loop0" ino=1367 res=1 errno=0 [ 185.189549][ T29] audit: type=1800 audit(1718802343.045:336): pid=5964 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed(directio) comm="syz-executor.0" name="bus" dev="loop0" ino=1367 res=0 errno=0 [ 185.301045][ T29] audit: type=1400 audit(1718802343.295:337): avc: denied { create } for pid=5962 comm="syz-executor.4" name="cpuacct.usage_sys" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 185.403235][ T5951] loop2: detected capacity change from 0 to 32768 [ 185.416591][ T29] audit: type=1400 audit(1718802343.375:338): avc: denied { read append open } for pid=5962 comm="syz-executor.4" path="/root/syzkaller-testdir2780687106/syzkaller.XhwjvJ/51/bus/cpuacct.usage_sys" dev="loop4" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 185.592911][ T5948] loop3: detected capacity change from 0 to 32768 [ 185.710788][ T5109] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 185.733891][ T5166] XFS (loop3): filesystem is marked as having an internal log; do not specify logdev on the mount command line. [ 185.773843][ T5948] XFS (loop3): SB validate failed with error -22. [ 186.147083][ C1] dccp_v4_rcv: dropped packet with invalid checksum [ 186.953420][ T5995] loop2: detected capacity change from 0 to 512 [ 186.982414][ T5995] EXT4-fs: Ignoring removed oldalloc option [ 187.044426][ T5995] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 187.148130][ T5995] EXT4-fs warning (device loop2): ext4_expand_extra_isize_ea:2855: Unable to expand inode 11. Delete some EAs or run e2fsck. [ 187.234851][ T5995] EXT4-fs (loop2): 1 truncate cleaned up [ 187.285114][ T5995] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 188.270264][ T6009] loop4: detected capacity change from 0 to 1024 [ 188.315333][ T6011] loop3: detected capacity change from 0 to 512 [ 188.419705][ T5161] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 0 [ 188.519810][ T6011] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 188.725483][ T6011] ext4 filesystem being mounted at /root/syzkaller-testdir3296802946/syzkaller.UMPlLR/57/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 189.222416][ T5110] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 189.814732][ T6016] "syz-executor.1" (6016) uses obsolete ecb(arc4) skcipher [ 189.840351][ T6019] loop3: detected capacity change from 0 to 1024 [ 190.078236][ T29] kauditd_printk_skb: 8 callbacks suppressed [ 190.078258][ T29] audit: type=1400 audit(1718802348.285:347): avc: denied { read } for pid=6022 comm="syz-executor.4" name="cachefiles" dev="devtmpfs" ino=4 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cachefiles_device_t tclass=chr_file permissive=1 [ 190.127678][ T3431] hfsplus: b-tree write err: -5, ino 4 [ 190.197368][ T29] audit: type=1400 audit(1718802348.325:348): avc: denied { open } for pid=6022 comm="syz-executor.4" path="/dev/cachefiles" dev="devtmpfs" ino=4 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cachefiles_device_t tclass=chr_file permissive=1 [ 190.624786][ T6029] loop4: detected capacity change from 0 to 512 [ 190.715733][ T6029] EXT4-fs (loop4): mounting ext2 file system using the ext4 subsystem [ 190.827730][ T6029] EXT4-fs (loop4): warning: checktime reached, running e2fsck is recommended [ 190.915359][ T6029] EXT4-fs error (device loop4): ext4_validate_block_bitmap:431: comm syz-executor.4: bg 0: block 18: invalid block bitmap [ 191.248640][ T6029] EXT4-fs error (device loop4) in ext4_mb_clear_bb:6551: Corrupt filesystem [ 191.285757][ T6029] EXT4-fs (loop4): 1 truncate cleaned up [ 192.324559][ T6029] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 192.757447][ T6029] ext2 filesystem being mounted at /root/syzkaller-testdir2780687106/syzkaller.XhwjvJ/57/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 193.082665][ T5109] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 193.262996][ T6028] loop3: detected capacity change from 0 to 32768 [ 193.433463][ T5159] XFS (loop3): filesystem is marked as having an internal log; do not specify logdev on the mount command line. [ 193.469350][ T6041] loop1: detected capacity change from 0 to 512 [ 193.511267][ T6041] EXT4-fs: Ignoring removed oldalloc option [ 193.544786][ T6028] XFS (loop3): SB validate failed with error -22. [ 193.566299][ T6053] loop4: detected capacity change from 0 to 16 [ 193.587795][ T6041] EXT4-fs (loop1): revision level too high, forcing read-only mode [ 193.600215][ T6041] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=8842c11c, mo2=0002] [ 193.612909][ T6041] EXT4-fs (loop1): couldn't mount RDWR because of unsupported optional features (80) [ 193.623246][ T6041] EXT4-fs (loop1): Skipping orphan cleanup due to unknown ROCOMPAT features [ 193.636849][ T6041] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 193.776642][ T6041] EXT4-fs warning (device loop1): dx_probe:874: Directory (ino: 2) htree depth 0x0002 exceedsupported value [ 193.788955][ T6053] erofs: (device loop4): mounted with root inode @ nid 36. [ 193.876175][ T6041] EXT4-fs warning (device loop1): dx_probe:879: Enable large directory feature to access it [ 193.959767][ T6041] EXT4-fs warning (device loop1): dx_probe:964: inode #2: comm syz-executor.1: Corrupt directory, running e2fsck is recommended [ 194.043222][ T6056] loop0: detected capacity change from 0 to 512 [ 194.055248][ T6044] EXT4-fs warning (device loop1): dx_probe:874: Directory (ino: 2) htree depth 0x0002 exceedsupported value [ 194.186150][ T6056] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 194.199117][ T6044] EXT4-fs warning (device loop1): dx_probe:879: Enable large directory feature to access it [ 194.251752][ T6056] ext4 filesystem being mounted at /root/syzkaller-testdir54344347/syzkaller.FWx09P/54/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 194.313256][ T6059] syz-executor.4: attempt to access beyond end of device [ 194.313256][ T6059] loop4: rw=0, sector=8, nr_sectors = 16 limit=16 [ 194.358573][ T6044] EXT4-fs warning (device loop1): dx_probe:964: inode #2: comm syz-executor.1: Corrupt directory, running e2fsck is recommended [ 194.534951][ T6059] syz-executor.4: attempt to access beyond end of device [ 194.534951][ T6059] loop4: rw=0, sector=8, nr_sectors = 16 limit=16 [ 194.775574][ T5108] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 194.799513][ T6062] loop3: detected capacity change from 0 to 512 [ 194.866013][ T6062] EXT4-fs (loop3): blocks per group (71) and clusters per group (20800) inconsistent [ 195.310118][ T6067] "syz-executor.3" (6067) uses obsolete ecb(arc4) skcipher [ 195.320085][ T6065] loop0: detected capacity change from 0 to 128 [ 195.822569][ T5117] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 198.272070][ T29] audit: type=1400 audit(1718802356.445:349): avc: denied { getopt } for pid=6076 comm="syz-executor.4" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 199.116518][ T29] audit: type=1400 audit(1718802357.295:350): avc: denied { write } for pid=6094 comm="syz-executor.3" name="event2" dev="devtmpfs" ino=838 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 199.194551][ T6098] "syz-executor.4" (6098) uses obsolete ecb(arc4) skcipher [ 199.447521][ T29] audit: type=1400 audit(1718802357.625:351): avc: denied { read } for pid=6094 comm="syz-executor.3" name="autofs" dev="devtmpfs" ino=98 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 199.565190][ T29] audit: type=1400 audit(1718802357.625:352): avc: denied { open } for pid=6094 comm="syz-executor.3" path="/dev/autofs" dev="devtmpfs" ino=98 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 199.992804][ T1250] ieee802154 phy0 wpan0: encryption failed: -22 [ 200.004741][ T1250] ieee802154 phy1 wpan1: encryption failed: -22 [ 200.015586][ T29] audit: type=1400 audit(1718802358.225:353): avc: denied { read } for pid=6094 comm="syz-executor.3" path="socket:[10683]" dev="sockfs" ino=10683 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 200.641963][ T6112] loop4: detected capacity change from 0 to 764 [ 200.777476][ T6112] rock: corrupted directory entry. extent=32, offset=2044, size=237 [ 200.976291][ T29] audit: type=1400 audit(1718802359.065:354): avc: denied { ioctl } for pid=6109 comm="syz-executor.4" path="socket:[10704]" dev="sockfs" ino=10704 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 201.027651][ T6118] mmap: syz-executor.0 (6118) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 201.138670][ T29] audit: type=1400 audit(1718802359.345:355): avc: denied { getopt } for pid=6115 comm="syz-executor.0" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 201.159253][ T6116] netlink: 184 bytes leftover after parsing attributes in process `syz-executor.0'. [ 201.169422][ T6116] netlink: 'syz-executor.0': attribute type 1 has an invalid length. [ 202.313860][ T6125] loop1: detected capacity change from 0 to 64 [ 202.458205][ T29] audit: type=1800 audit(1718802360.645:356): pid=6125 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed(directio) comm="syz-executor.1" name="bus" dev="loop1" ino=21 res=0 errno=0 [ 203.794179][ T6118] loop0: detected capacity change from 0 to 32768 [ 204.054525][ C0] dccp_v4_rcv: dropped packet with invalid checksum [ 207.052960][ T6153] loop4: detected capacity change from 0 to 2048 [ 207.238716][ T6153] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 207.317609][ T6153] ext4 filesystem being mounted at /root/syzkaller-testdir2780687106/syzkaller.XhwjvJ/67/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 207.385298][ T6161] loop3: detected capacity change from 0 to 2048 [ 207.414223][ T6168] loop0: detected capacity change from 0 to 512 [ 207.418310][ T6170] netlink: 36 bytes leftover after parsing attributes in process `syz-executor.1'. [ 207.467621][ T6168] EXT4-fs error (device loop0): ext4_xattr_ibody_find:2234: inode #12: comm syz-executor.0: corrupted in-inode xattr: invalid ea_ino [ 207.624695][ T6168] EXT4-fs error (device loop0): ext4_orphan_get:1397: comm syz-executor.0: couldn't read orphan inode 12 (err -117) [ 207.714900][ T5109] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 207.729895][ T6168] EXT4-fs (loop0): mounted filesystem 00000005-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 208.374817][ T5108] EXT4-fs (loop0): unmounting filesystem 00000005-0000-0000-0000-000000000000. [ 208.590799][ T29] audit: type=1400 audit(1718802366.775:357): avc: denied { map } for pid=6189 comm="syz-executor.1" path="socket:[9866]" dev="sockfs" ino=9866 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tcp_socket permissive=1 [ 209.079224][ T29] audit: type=1400 audit(1718802367.275:358): avc: denied { execute } for pid=6195 comm="syz-executor.4" path="/dev/adsp1" dev="devtmpfs" ino=1103 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sound_device_t tclass=chr_file permissive=1 [ 209.284898][ T6202] netlink: 36 bytes leftover after parsing attributes in process `syz-executor.0'. [ 209.412653][ T29] audit: type=1400 audit(1718802367.605:359): avc: denied { create } for pid=6196 comm="syz-executor.1" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 209.689555][ T6210] netlink: 'syz-executor.4': attribute type 1 has an invalid length. [ 209.736701][ T6210] netlink: 9344 bytes leftover after parsing attributes in process `syz-executor.4'. [ 209.780728][ T6210] netlink: 'syz-executor.4': attribute type 1 has an invalid length. [ 213.347417][ T6240] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 213.357526][ T6240] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 213.586039][ T6241] loop4: detected capacity change from 0 to 4096 [ 215.018027][ T6237] sched: RT throttling activated [ 215.139894][ T6241] ntfs3: loop4: Different NTFS sector size (4096) and media sector size (512). [ 215.291691][ T6241] ntfs3: loop4: Failed to initialize $Extend/$Reparse. [ 215.884559][ T6247] loop0: detected capacity change from 0 to 256 [ 215.954942][ T6247] exfat: Deprecated parameter 'utf8' [ 216.027294][ T6247] exfat: Deprecated parameter 'namecase' [ 216.208392][ T6247] exFAT-fs (loop0): failed to load upcase table (idx : 0x00010000, chksum : 0x1a9973fb, utbl_chksum : 0xe619d30d) [ 216.436558][ T29] audit: type=1400 audit(1718802374.605:360): avc: denied { name_bind } for pid=6244 comm="syz-executor.3" src=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:reserved_port_t tclass=tcp_socket permissive=1 [ 216.596862][ T29] audit: type=1400 audit(1718802374.685:361): avc: denied { setattr } for pid=6246 comm="syz-executor.0" name="file0" dev="loop0" ino=1048607 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 216.843933][ T29] audit: type=1400 audit(1718802374.775:362): avc: denied { mounton } for pid=6246 comm="syz-executor.0" path="/root/syzkaller-testdir54344347/syzkaller.FWx09P/72/file0/file0" dev="loop0" ino=1048607 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 217.075185][ T6262] loop3: detected capacity change from 0 to 128 [ 217.115662][ T29] audit: type=1400 audit(1718802375.125:363): avc: denied { remove_name } for pid=5108 comm="syz-executor.0" name="file0" dev="loop0" ino=1048612 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 217.276530][ T29] audit: type=1400 audit(1718802375.125:364): avc: denied { unlink } for pid=5108 comm="syz-executor.0" name="file0" dev="loop0" ino=1048612 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 217.381294][ T29] audit: type=1400 audit(1718802375.175:365): avc: denied { rmdir } for pid=5108 comm="syz-executor.0" name="file0" dev="loop0" ino=1048607 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 217.503824][ T29] audit: type=1326 audit(1718802375.435:366): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6261 comm="syz-executor.4" exe="/root/syz-executor.4" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6d2fa7cf29 code=0x7ffc0000 [ 217.627099][ T6267] loop3: detected capacity change from 0 to 128 [ 217.666901][ T29] audit: type=1326 audit(1718802375.455:367): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6261 comm="syz-executor.4" exe="/root/syz-executor.4" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6d2fa7cf29 code=0x7ffc0000 [ 217.707045][ T6267] FAT-fs (loop3): Invalid FSINFO signature: 0x41615252, 0x614101ff (sector = 1) [ 217.844040][ T29] audit: type=1326 audit(1718802375.485:368): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6261 comm="syz-executor.4" exe="/root/syz-executor.4" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f6d2fa7cf29 code=0x7ffc0000 [ 217.991436][ T29] audit: type=1326 audit(1718802375.535:369): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6261 comm="syz-executor.4" exe="/root/syz-executor.4" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6d2fa7cf29 code=0x7ffc0000 [ 218.512179][ T5113] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 218.530706][ T5113] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 218.546234][ T5113] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 218.567954][ T5113] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 218.582427][ T5113] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 218.599704][ T5113] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 218.865168][ T3431] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 219.177752][ T6279] Bluetooth: MGMT ver 1.22 [ 219.234175][ T3431] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 219.566909][ T3431] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 219.589034][ T6283] loop3: detected capacity change from 0 to 764 [ 219.675490][ T6283] rock: corrupted directory entry. extent=32, offset=2044, size=237 [ 219.933907][ T3431] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 219.955701][ T54] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 219.972984][ T54] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 219.994744][ T54] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 220.015195][ T54] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 220.035358][ T54] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 220.043419][ T54] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 220.657964][ T5113] Bluetooth: hci0: command tx timeout [ 220.970259][ T3431] bridge_slave_1: left allmulticast mode [ 220.987766][ T3431] bridge_slave_1: left promiscuous mode [ 221.009643][ T3431] bridge0: port 2(bridge_slave_1) entered disabled state [ 221.101843][ T3431] bridge_slave_0: left allmulticast mode [ 221.117811][ T3431] bridge_slave_0: left promiscuous mode [ 221.136559][ T3431] bridge0: port 1(bridge_slave_0) entered disabled state [ 221.345368][ T6309] netlink: 184 bytes leftover after parsing attributes in process `syz-executor.1'. [ 221.362298][ T6309] netlink: 'syz-executor.1': attribute type 1 has an invalid length. [ 221.525697][ T6311] sd 0:0:1:0: device reset [ 221.531048][ T29] kauditd_printk_skb: 44 callbacks suppressed [ 221.531070][ T29] audit: type=1400 audit(1718802379.725:414): avc: denied { ioctl } for pid=6310 comm="syz-executor.4" path="/root/syzkaller-testdir2780687106/syzkaller.XhwjvJ/86/file0/file0" dev="fuse" ino=0 ioctlcmd=0x2284 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=blk_file permissive=1 [ 222.103784][ T5113] Bluetooth: hci5: command tx timeout [ 222.743666][ T5113] Bluetooth: hci0: command tx timeout [ 222.841948][ T6309] loop1: detected capacity change from 0 to 32768 [ 223.118654][ T3431] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 223.167028][ T6309] bcachefs (loop1): mounting version 1.7: mi_btree_bitmap opts=nojournal_transaction_names [ 223.200974][ T6309] bcachefs (loop1): recovering from clean shutdown, journal seq 14 [ 223.239307][ T3431] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 223.266091][ T3431] bond0 (unregistering): Released all slaves [ 223.886128][ T6337] loop4: detected capacity change from 0 to 65536 [ 223.918926][ T6309] bcachefs (loop1): alloc_read... done [ 223.925667][ T6309] bcachefs (loop1): stripes_read... done [ 223.931807][ T6309] bcachefs (loop1): snapshots_read... done [ 223.977404][ T6309] bcachefs (loop1): journal_replay... done [ 223.981376][ T6337] XFS (loop4): Mounting V5 Filesystem d6f69dbd-8c5d-46be-b88e-92c0ae88ceb2 [ 223.983513][ T6309] bcachefs (loop1): resume_logged_ops... done [ 224.002682][ T6309] bcachefs (loop1): going read-write [ 224.035066][ T6273] chnl_net:caif_netlink_parms(): no params data found [ 224.078878][ T6309] bcachefs (loop1): done starting filesystem [ 224.092765][ T6337] XFS (loop4): Ending clean mount [ 224.127485][ T6337] XFS (loop4): Quotacheck needed: Please wait. [ 224.176748][ T5113] Bluetooth: hci5: command tx timeout [ 224.289903][ T6337] XFS (loop4): Quotacheck: Done. [ 224.489356][ T5117] bcachefs (loop1): shutting down [ 224.527439][ T5117] bcachefs (loop1): going read-only [ 224.717161][ T5117] bcachefs (loop1): finished waiting for writes to stop [ 224.856003][ T29] audit: type=1400 audit(1718802383.035:415): avc: denied { create } for pid=6336 comm="syz-executor.4" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 224.876205][ T5113] Bluetooth: hci0: command tx timeout [ 225.492357][ T5117] bcachefs (loop1): flushing journal and stopping allocators, journal seq 14 [ 225.525186][ T5109] XFS (loop4): Unmounting Filesystem d6f69dbd-8c5d-46be-b88e-92c0ae88ceb2 [ 225.546591][ T29] audit: type=1400 audit(1718802383.045:416): avc: denied { getopt } for pid=6336 comm="syz-executor.4" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 225.634226][ T5117] bcachefs (loop1): flushing journal and stopping allocators complete, journal seq 14 [ 225.782824][ T5117] bcachefs (loop1): shutdown complete, journal seq 15 [ 225.802026][ T5117] bcachefs (loop1): marking filesystem clean [ 226.049577][ T5117] bcachefs (loop1): shutdown complete [ 226.258728][ T5113] Bluetooth: hci5: command tx timeout [ 226.529834][ T6273] bridge0: port 1(bridge_slave_0) entered blocking state [ 226.568127][ T6273] bridge0: port 1(bridge_slave_0) entered disabled state [ 226.575380][ T6273] bridge_slave_0: entered allmulticast mode [ 226.640419][ T6273] bridge_slave_0: entered promiscuous mode [ 226.896663][ T5113] Bluetooth: hci0: command tx timeout [ 226.962552][ T6273] bridge0: port 2(bridge_slave_1) entered blocking state [ 227.027519][ T6273] bridge0: port 2(bridge_slave_1) entered disabled state [ 227.088941][ T6273] bridge_slave_1: entered allmulticast mode [ 227.118946][ T6273] bridge_slave_1: entered promiscuous mode [ 227.319114][ T3431] hsr_slave_0: left promiscuous mode [ 227.357692][ T3431] hsr_slave_1: left promiscuous mode [ 227.415175][ T3431] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 227.423569][ T3431] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 227.467961][ T3431] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 227.475468][ T3431] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 227.611751][ T3431] veth1_macvtap: left promiscuous mode [ 227.629982][ T3431] veth0_macvtap: left promiscuous mode [ 227.635885][ T3431] veth1_vlan: left promiscuous mode [ 227.651764][ T3431] veth0_vlan: left promiscuous mode [ 228.336576][ T5113] Bluetooth: hci5: command tx timeout [ 228.584976][ T6372] loop1: detected capacity change from 0 to 16 [ 228.635702][ T6372] erofs: (device loop1): mounted with root inode @ nid 36. [ 229.230139][ T6372] syz-executor.1: attempt to access beyond end of device [ 229.230139][ T6372] loop1: rw=0, sector=8, nr_sectors = 16 limit=16 [ 229.369948][ T6372] syz-executor.1: attempt to access beyond end of device [ 229.369948][ T6372] loop1: rw=0, sector=8, nr_sectors = 16 limit=16 [ 229.607201][ T6375] sd 0:0:1:0: device reset [ 229.877697][ T6366] loop4: detected capacity change from 0 to 32768 [ 229.906261][ T6379] syz-executor.3[6379] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 229.906920][ T6379] syz-executor.3[6379] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 230.386810][ T29] audit: type=1326 audit(1718802388.585:417): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6378 comm="syz-executor.3" exe="/root/syz-executor.3" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7ff71627cf29 code=0x0 [ 230.686149][ T6380] loop3: detected capacity change from 0 to 1024 [ 230.899681][ T6385] loop1: detected capacity change from 0 to 16 [ 230.941942][ T6385] erofs: (device loop1): mounted with root inode @ nid 36. [ 230.949983][ T6380] hfsplus: request for non-existent node 3 in B*Tree [ 230.986604][ T6380] hfsplus: request for non-existent node 3 in B*Tree [ 231.021468][ T3431] team0 (unregistering): Port device team_slave_1 removed [ 231.232665][ T6380] hfsplus: bad catalog folder thread [ 231.254199][ T6380] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.3'. [ 231.287288][ T3431] team0 (unregistering): Port device team_slave_0 removed [ 231.321551][ T6380] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.3'. [ 231.343453][ T6391] loop4: detected capacity change from 0 to 256 [ 231.399127][ T6391] exfat: Deprecated parameter 'utf8' [ 231.419051][ T6391] exfat: Deprecated parameter 'namecase' [ 231.487328][ T6391] exFAT-fs (loop4): failed to load upcase table (idx : 0x00010000, chksum : 0x1a9973fb, utbl_chksum : 0xe619d30d) [ 232.511907][ T6395] loop1: detected capacity change from 0 to 256 [ 232.761273][ T5113] Bluetooth: hci1: command 0x0406 tx timeout [ 232.765713][ T5123] Bluetooth: hci2: command 0x0406 tx timeout [ 232.770074][ T5113] Bluetooth: hci3: command 0x0406 tx timeout [ 234.164222][ T29] audit: type=1400 audit(1718802392.365:418): avc: denied { append } for pid=6398 comm="syz-executor.3" name="ppp" dev="devtmpfs" ino=694 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 234.450467][ T6290] chnl_net:caif_netlink_parms(): no params data found [ 234.625071][ T6273] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 234.753977][ T6273] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 235.047338][ T45] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 235.204152][ T6273] team0: Port device team_slave_0 added [ 235.297824][ T45] usb 4-1: Using ep0 maxpacket: 16 [ 235.400956][ T45] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 235.422815][ T45] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 235.437059][ T45] usb 4-1: New USB device found, idVendor=17ef, idProduct=6009, bcdDevice= 0.00 [ 235.446175][ T45] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 235.479121][ T45] usb 4-1: config 0 descriptor?? [ 235.514818][ T6273] team0: Port device team_slave_1 added [ 235.873451][ T6290] bridge0: port 1(bridge_slave_0) entered blocking state [ 235.917361][ T6290] bridge0: port 1(bridge_slave_0) entered disabled state [ 235.951338][ T6290] bridge_slave_0: entered allmulticast mode [ 235.981256][ T6290] bridge_slave_0: entered promiscuous mode [ 236.138147][ T6290] bridge0: port 2(bridge_slave_1) entered blocking state [ 236.165120][ T6290] bridge0: port 2(bridge_slave_1) entered disabled state [ 236.195005][ T6290] bridge_slave_1: entered allmulticast mode [ 236.215133][ T6290] bridge_slave_1: entered promiscuous mode [ 236.380174][ T6273] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 236.426010][ T6273] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 236.499788][ T6273] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 236.633888][ T29] audit: type=1326 audit(1718802394.835:419): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6408 comm="syz-executor.1" exe="/root/syz-executor.1" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4eb187cf29 code=0x7ffc0000 [ 236.697284][ T29] audit: type=1326 audit(1718802394.835:420): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6408 comm="syz-executor.1" exe="/root/syz-executor.1" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4eb187cf29 code=0x7ffc0000 [ 236.704362][ T6290] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 236.812219][ T29] audit: type=1326 audit(1718802394.835:421): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6408 comm="syz-executor.1" exe="/root/syz-executor.1" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f4eb187cf29 code=0x7ffc0000 [ 236.834284][ T6273] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 236.876699][ T6273] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 236.936527][ T29] audit: type=1326 audit(1718802394.865:422): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6408 comm="syz-executor.1" exe="/root/syz-executor.1" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4eb187cf29 code=0x7ffc0000 [ 236.998793][ T29] audit: type=1326 audit(1718802394.865:423): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6408 comm="syz-executor.1" exe="/root/syz-executor.1" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4eb187cf29 code=0x7ffc0000 [ 237.016725][ T6273] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 237.090410][ T54] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 237.109763][ T54] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 237.144019][ T54] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 237.159940][ T45] usbhid 4-1:0.0: can't add hid device: -71 [ 237.173250][ T54] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 237.184189][ T45] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 237.192705][ T54] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 237.201661][ T54] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 237.237652][ T6290] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 237.247035][ T45] usb 4-1: USB disconnect, device number 2 [ 237.278002][ T29] audit: type=1326 audit(1718802394.895:424): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6408 comm="syz-executor.1" exe="/root/syz-executor.1" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f4eb187cf29 code=0x7ffc0000 [ 237.343848][ T29] audit: type=1326 audit(1718802394.895:425): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6408 comm="syz-executor.1" exe="/root/syz-executor.1" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4eb187cf29 code=0x7ffc0000 [ 237.401567][ T29] audit: type=1326 audit(1718802394.895:426): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6408 comm="syz-executor.1" exe="/root/syz-executor.1" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f4eb187a6a7 code=0x7ffc0000 [ 237.516822][ T29] audit: type=1326 audit(1718802394.895:427): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6408 comm="syz-executor.1" exe="/root/syz-executor.1" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f4eb1840379 code=0x7ffc0000 [ 237.585510][ T6290] team0: Port device team_slave_0 added [ 237.619264][ T29] audit: type=1326 audit(1718802394.895:428): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6408 comm="syz-executor.1" exe="/root/syz-executor.1" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f4eb187a6a7 code=0x7ffc0000 [ 238.352299][ T6420] loop1: detected capacity change from 0 to 65536 [ 238.415208][ T3431] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 238.431230][ T6420] XFS (loop1): Mounting V5 Filesystem d6f69dbd-8c5d-46be-b88e-92c0ae88ceb2 [ 238.515044][ T6420] XFS (loop1): Ending clean mount [ 238.523056][ T6420] XFS (loop1): Quotacheck needed: Please wait. [ 238.543739][ T6290] team0: Port device team_slave_1 added [ 238.600947][ T6418] netlink: 209852 bytes leftover after parsing attributes in process `syz-executor.3'. [ 238.631891][ T6420] XFS (loop1): Quotacheck: Done. [ 238.633797][ T6273] hsr_slave_0: entered promiscuous mode [ 238.700473][ T6273] hsr_slave_1: entered promiscuous mode [ 239.635901][ T5126] Bluetooth: hci1: command tx timeout [ 239.689972][ T5117] XFS (loop1): Unmounting Filesystem d6f69dbd-8c5d-46be-b88e-92c0ae88ceb2 [ 239.723889][ T3431] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 239.938011][ T6290] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 239.957975][ T6290] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 239.990983][ T6290] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 240.237315][ T3431] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 240.323690][ T6290] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 240.336683][ T6290] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 240.426479][ T6290] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 240.640476][ T3431] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 241.127432][ T6290] hsr_slave_0: entered promiscuous mode [ 241.137863][ T6290] hsr_slave_1: entered promiscuous mode [ 241.166502][ T6290] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 241.174139][ T6290] Cannot create hsr debugfs directory [ 241.357189][ T6434] loop1: detected capacity change from 0 to 64 [ 241.746293][ T6440] syz-executor.1: attempt to access beyond end of device [ 241.746293][ T6440] loop1: rw=34817, sector=4172, nr_sectors = 22 limit=64 [ 241.750140][ T5126] Bluetooth: hci1: command tx timeout [ 241.762207][ T6440] syz-executor.1: attempt to access beyond end of device [ 241.762207][ T6440] loop1: rw=34817, sector=4196, nr_sectors = 166 limit=64 [ 241.781452][ T6440] syz-executor.1: attempt to access beyond end of device [ 241.781452][ T6440] loop1: rw=34817, sector=4363, nr_sectors = 22 limit=64 [ 242.113818][ T6440] syz-executor.1: attempt to access beyond end of device [ 242.113818][ T6440] loop1: rw=34817, sector=4388, nr_sectors = 29 limit=64 [ 242.234097][ T6440] syz-executor.1: attempt to access beyond end of device [ 242.234097][ T6440] loop1: rw=34817, sector=4418, nr_sectors = 32 limit=64 [ 242.645070][ T6440] syz-executor.1: attempt to access beyond end of device [ 242.645070][ T6440] loop1: rw=34817, sector=4452, nr_sectors = 12 limit=64 [ 242.766330][ T6440] syz-executor.1: attempt to access beyond end of device [ 242.766330][ T6440] loop1: rw=34817, sector=4468, nr_sectors = 20 limit=64 [ 242.906180][ T6440] syz-executor.1: attempt to access beyond end of device [ 242.906180][ T6440] loop1: rw=34817, sector=4489, nr_sectors = 235 limit=64 [ 243.143401][ T1102] kworker/u8:6: attempt to access beyond end of device [ 243.143401][ T1102] loop1: rw=1, sector=65, nr_sectors = 1 limit=64 [ 243.176752][ T1102] Buffer I/O error on dev loop1, logical block 65, lost async page write [ 243.206757][ T1102] kworker/u8:6: attempt to access beyond end of device [ 243.206757][ T1102] loop1: rw=1, sector=66, nr_sectors = 1 limit=64 [ 243.242003][ T1102] Buffer I/O error on dev loop1, logical block 66, lost async page write [ 243.296594][ T1102] Buffer I/O error on dev loop1, logical block 67, lost async page write [ 243.310356][ T1102] Buffer I/O error on dev loop1, logical block 68, lost async page write [ 243.346101][ T1102] Buffer I/O error on dev loop1, logical block 72, lost async page write [ 243.375412][ T3431] bridge_slave_1: left allmulticast mode [ 243.386625][ T1102] Buffer I/O error on dev loop1, logical block 73, lost async page write [ 243.410203][ T3431] bridge_slave_1: left promiscuous mode [ 243.426960][ T1102] Buffer I/O error on dev loop1, logical block 76, lost async page write [ 243.435462][ T1102] Buffer I/O error on dev loop1, logical block 77, lost async page write [ 243.444546][ T3431] bridge0: port 2(bridge_slave_1) entered disabled state [ 243.471244][ T3431] bridge_slave_0: left allmulticast mode [ 243.479139][ T3431] bridge_slave_0: left promiscuous mode [ 243.495102][ T3431] bridge0: port 1(bridge_slave_0) entered disabled state [ 243.507170][ T1102] Buffer I/O error on dev loop1, logical block 158, lost async page write [ 243.528949][ T1102] Buffer I/O error on dev loop1, logical block 159, lost async page write [ 243.565306][ T29] kauditd_printk_skb: 12 callbacks suppressed [ 243.565324][ T29] audit: type=1400 audit(1718802401.765:441): avc: denied { write } for pid=6444 comm="syz-executor.3" name="hwrng" dev="devtmpfs" ino=83 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:random_device_t tclass=chr_file permissive=1 [ 243.777057][ T5126] Bluetooth: hci1: command tx timeout [ 244.467045][ T3431] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 244.480686][ T3431] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 244.500791][ T3431] bond0 (unregistering): Released all slaves [ 244.613031][ T6273] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 244.854618][ T6273] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 245.059958][ T6273] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 245.143185][ T6410] chnl_net:caif_netlink_parms(): no params data found [ 245.202182][ T6273] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 245.380542][ T3431] hsr_slave_0: left promiscuous mode [ 245.397443][ T3431] hsr_slave_1: left promiscuous mode [ 245.412334][ T3431] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 245.440020][ T3431] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 245.450127][ T3431] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 245.457892][ T3431] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 245.490982][ T3431] veth1_macvtap: left promiscuous mode [ 245.496868][ T3431] veth0_macvtap: left promiscuous mode [ 245.502787][ T3431] veth1_vlan: left promiscuous mode [ 245.508585][ T3431] veth0_vlan: left promiscuous mode [ 245.861999][ T5126] Bluetooth: hci1: command tx timeout [ 246.419924][ T3431] team0 (unregistering): Port device team_slave_1 removed [ 246.488354][ T3431] team0 (unregistering): Port device team_slave_0 removed [ 247.527191][ T6410] bridge0: port 1(bridge_slave_0) entered blocking state [ 247.534529][ T6410] bridge0: port 1(bridge_slave_0) entered disabled state [ 247.544359][ T6410] bridge_slave_0: entered allmulticast mode [ 247.552913][ T6410] bridge_slave_0: entered promiscuous mode [ 247.589170][ T6410] bridge0: port 2(bridge_slave_1) entered blocking state [ 247.605359][ T6410] bridge0: port 2(bridge_slave_1) entered disabled state [ 247.615817][ T6410] bridge_slave_1: entered allmulticast mode [ 247.624956][ T6410] bridge_slave_1: entered promiscuous mode [ 247.762353][ T6410] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 247.783509][ T6410] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 247.934295][ T6410] team0: Port device team_slave_0 added [ 247.992756][ T6410] team0: Port device team_slave_1 added [ 248.126338][ T6410] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 248.134166][ T6410] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 248.160499][ T6410] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 248.202037][ T6410] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 248.212757][ T6410] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 248.243808][ T6410] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 248.255477][ T6273] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 248.315726][ T6273] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 248.339818][ T6273] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 248.493208][ T6273] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 248.588440][ T6410] hsr_slave_0: entered promiscuous mode [ 248.606606][ T6410] hsr_slave_1: entered promiscuous mode [ 248.613437][ T6410] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 248.629482][ T6410] Cannot create hsr debugfs directory [ 248.703557][ T6290] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 248.786413][ T6290] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 248.813087][ T6290] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 248.888844][ T6290] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 249.405602][ T6273] 8021q: adding VLAN 0 to HW filter on device bond0 [ 249.573690][ T6273] 8021q: adding VLAN 0 to HW filter on device team0 [ 249.643602][ T5166] bridge0: port 1(bridge_slave_0) entered blocking state [ 249.650993][ T5166] bridge0: port 1(bridge_slave_0) entered forwarding state [ 249.712988][ T6290] 8021q: adding VLAN 0 to HW filter on device bond0 [ 249.771148][ T5166] bridge0: port 2(bridge_slave_1) entered blocking state [ 249.778466][ T5166] bridge0: port 2(bridge_slave_1) entered forwarding state [ 249.950160][ T6290] 8021q: adding VLAN 0 to HW filter on device team0 [ 250.070137][ T45] bridge0: port 1(bridge_slave_0) entered blocking state [ 250.077423][ T45] bridge0: port 1(bridge_slave_0) entered forwarding state [ 250.097055][ T6410] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 250.139529][ T6410] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 250.165166][ T5178] bridge0: port 2(bridge_slave_1) entered blocking state [ 250.172459][ T5178] bridge0: port 2(bridge_slave_1) entered forwarding state [ 250.200960][ T6410] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 250.238836][ T29] audit: type=1400 audit(1718802408.445:442): avc: denied { sys_module } for pid=6273 comm="syz-executor.2" capability=16 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 250.305591][ T6410] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 250.806771][ T6273] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 250.911601][ T6410] 8021q: adding VLAN 0 to HW filter on device bond0 [ 251.011090][ T6410] 8021q: adding VLAN 0 to HW filter on device team0 [ 251.144011][ T929] bridge0: port 1(bridge_slave_0) entered blocking state [ 251.151371][ T929] bridge0: port 1(bridge_slave_0) entered forwarding state [ 251.252818][ T6273] veth0_vlan: entered promiscuous mode [ 251.282522][ T929] bridge0: port 2(bridge_slave_1) entered blocking state [ 251.289929][ T929] bridge0: port 2(bridge_slave_1) entered forwarding state [ 251.390133][ T6273] veth1_vlan: entered promiscuous mode [ 251.499638][ T6290] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 251.594304][ T6410] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 251.764657][ T6273] veth0_macvtap: entered promiscuous mode [ 251.854778][ T6273] veth1_macvtap: entered promiscuous mode [ 252.044560][ T6273] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 252.067862][ T6273] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 252.080759][ T6273] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 252.091597][ T6273] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 252.109346][ T6273] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 252.128197][ T6273] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 252.148721][ T6273] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 252.225055][ T6273] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 252.257167][ T6273] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 252.276522][ T6273] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 252.314342][ T6273] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 252.334628][ T6273] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 252.375348][ T6273] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 252.424490][ T6273] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 252.482535][ T6273] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 252.512787][ T6273] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 252.533090][ T6273] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 252.546463][ T6273] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 252.657473][ T6290] veth0_vlan: entered promiscuous mode [ 252.746026][ T6410] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 252.803756][ T6290] veth1_vlan: entered promiscuous mode [ 253.290870][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 253.319387][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 253.342268][ T6290] veth0_macvtap: entered promiscuous mode [ 253.425531][ T6290] veth1_macvtap: entered promiscuous mode [ 253.460126][ T6476] loop1: detected capacity change from 0 to 256 [ 253.693604][ T6290] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 253.716934][ T3438] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 253.724836][ T3438] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 253.736570][ T6290] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 253.787157][ T6290] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 253.836503][ T6290] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 253.860758][ T6290] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 253.887786][ T6290] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 253.906897][ T6290] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 253.946654][ T6290] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 253.983333][ T6290] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 254.015562][ T6290] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 254.042708][ T6290] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 254.099712][ T29] audit: type=1400 audit(1718802412.295:443): avc: denied { wake_alarm } for pid=6481 comm="syz-executor.3" capability=35 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 254.146684][ T6290] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 254.190334][ T6290] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 254.236873][ T6290] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 254.282663][ T6290] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 254.324070][ T6290] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 254.379017][ T6290] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 254.439011][ T6290] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 254.832057][ T6290] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 254.872272][ T6290] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 254.906488][ T6290] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 254.915266][ T6290] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 255.276947][ T6410] veth0_vlan: entered promiscuous mode [ 255.388451][ T6410] veth1_vlan: entered promiscuous mode [ 255.575374][ T6410] veth0_macvtap: entered promiscuous mode [ 255.613367][ T6410] veth1_macvtap: entered promiscuous mode [ 255.622504][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 255.646537][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 255.832896][ T6410] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 255.869334][ T6410] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 255.887028][ T6410] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 255.904750][ T6410] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 255.915021][ T6410] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 255.930245][ T6410] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 255.942873][ T6410] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 255.953642][ T6410] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 255.965223][ T29] audit: type=1400 audit(1718802414.155:444): avc: denied { write } for pid=6493 comm="syz-executor.3" path="socket:[12230]" dev="sockfs" ino=12230 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 256.002617][ T6410] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 256.013605][ T6410] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 256.043350][ T6410] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 256.089241][ T2789] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 256.126877][ T2789] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 256.143521][ T6410] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 256.182187][ T6410] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 256.186586][ T929] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 256.206662][ T6410] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 256.228032][ T6410] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 256.246149][ T6410] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 256.373470][ T6410] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 256.424381][ T6410] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 256.467343][ T929] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 255, changing to 11 [ 256.489090][ T6410] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 256.521056][ T929] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 59391, setting to 1024 [ 256.532677][ T6410] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 256.563768][ T6410] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 256.576140][ T6410] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 256.610386][ T929] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 256.614826][ T6410] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 256.624108][ T6496] syz-executor.3 (pid 6496) is setting deprecated v1 encryption policy; recommend upgrading to v2. [ 257.243012][ T6410] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 257.288615][ T6410] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 257.333254][ T6410] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 257.559867][ T929] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 257.569287][ T929] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 257.581243][ T929] usb 3-1: config 0 descriptor?? [ 257.591034][ T6495] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 257.675492][ T6496] fscrypt (sda1, inode 1944): Missing crypto API support for AES-128-CBC-CTS (API name: "cts(cbc(aes))") [ 257.828736][ T6496] fscrypt (sda1, inode 1944): Missing crypto API support for AES-128-CBC-CTS (API name: "cts(cbc(aes))") [ 258.229439][ T6522] loop0: detected capacity change from 0 to 16 [ 258.261292][ T3438] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 258.281623][ T6522] erofs: (device loop0): mounted with root inode @ nid 36. [ 258.316586][ T3438] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 258.331091][ T929] plantronics 0003:047F:FFFF.0001: unknown main item tag 0x0 [ 258.379730][ T929] plantronics 0003:047F:FFFF.0001: unknown main item tag 0x0 [ 258.656182][ T929] plantronics 0003:047F:FFFF.0001: No inputs registered, leaving [ 259.421144][ T2789] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 259.478690][ T2789] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 259.536765][ T29] audit: type=1400 audit(1718802417.715:445): avc: denied { read } for pid=6531 comm="syz-executor.1" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 259.898280][ T929] plantronics 0003:047F:FFFF.0001: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.2-1/input0 [ 259.899051][ T6495] Bluetooth: MGMT ver 1.22 [ 260.072006][ T6534] loop0: detected capacity change from 0 to 4096 [ 260.344949][ T929] usb 3-1: USB disconnect, device number 2 [ 260.540260][ T6534] ntfs3: Unknown parameter '1844674407370955161500000000000000000000000Xcv:Q"Co"'ή_0-%+ t6P'k;/|%T9i(%Z@G~ͱ\%S:UVTOvO7MfOJjN"Bn]XZ [ 260.540260][ T6534] o*e4bL*' [ 260.556554][ T29] audit: type=1400 audit(1718802418.745:446): avc: denied { remount } for pid=6533 comm="syz-executor.0" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 260.801727][ T6551] loop4: detected capacity change from 0 to 64 [ 260.852759][ T29] audit: type=1804 audit(1718802419.035:447): pid=6544 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=open_writers comm="syz-executor.4" name="/root/syzkaller-testdir3475662086/syzkaller.jT1xTk/0/file0" dev="sda1" ino=1962 res=1 errno=0 [ 261.404827][ T1250] ieee802154 phy0 wpan0: encryption failed: -22 [ 261.411209][ T1250] ieee802154 phy1 wpan1: encryption failed: -22 [ 262.626127][ T29] audit: type=1400 audit(1718802420.815:448): avc: denied { create } for pid=6587 comm="syz-executor.0" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1 [ 262.826648][ T929] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 262.963310][ T6595] loop4: detected capacity change from 0 to 4096 [ 263.279051][ T929] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 255, changing to 11 [ 263.302543][ T929] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 59391, setting to 1024 [ 263.338585][ T929] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 264.146958][ T6595] ntfs3: Unknown parameter '1844674407370955161500000000000000000000000Xcv:Q"Co"'ή_0-%+ t6P'k;/|%T9i(%Z@G~ͱ\%S:UVTOvO7MfOJjN"Bn]XZ [ 264.146958][ T6595] o*e4bL*' [ 264.476568][ T929] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 264.485698][ T929] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 264.557905][ T929] usb 2-1: config 0 descriptor?? [ 264.566289][ T6586] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 265.655574][ T929] plantronics 0003:047F:FFFF.0002: unknown main item tag 0x0 [ 265.714633][ T929] plantronics 0003:047F:FFFF.0002: unknown main item tag 0x0 [ 265.939197][ T929] plantronics 0003:047F:FFFF.0002: No inputs registered, leaving [ 266.008524][ T929] plantronics 0003:047F:FFFF.0002: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.1-1/input0 [ 266.072950][ T6624] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.3'. [ 266.491461][ T45] usb 2-1: USB disconnect, device number 2 [ 266.917972][ T5165] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 267.107799][ T8] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 267.146560][ T5165] usb 3-1: Using ep0 maxpacket: 16 [ 267.198991][ T5165] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 267.220240][ T5165] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 267.234061][ T5165] usb 3-1: New USB device found, idVendor=17ef, idProduct=6009, bcdDevice= 0.00 [ 267.243375][ T5165] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 267.259539][ T5165] usb 3-1: config 0 descriptor?? [ 267.346815][ T8] usb 5-1: Using ep0 maxpacket: 8 [ 267.355654][ T8] usb 5-1: config index 0 descriptor too short (expected 301, got 45) [ 267.395201][ T8] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 267.430373][ T8] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 267.463711][ T8] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 267.494474][ T8] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 267.536856][ T8] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 267.588443][ T8] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 267.871953][ T8] usb 5-1: GET_CAPABILITIES returned 0 [ 267.896558][ T8] usbtmc 5-1:16.0: can't read capabilities [ 268.071667][ T6659] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.1'. [ 268.093865][ T8] usb 5-1: USB disconnect, device number 2 [ 268.758436][ T5165] usbhid 3-1:0.0: can't add hid device: -71 [ 268.796780][ T5165] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 268.871790][ T5165] usb 3-1: USB disconnect, device number 3 [ 269.020542][ T29] audit: type=1400 audit(1718802427.215:449): avc: denied { setopt } for pid=6671 comm="syz-executor.3" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_tcpdiag_socket permissive=1 [ 269.664574][ T6685] syz-executor.1[6685] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 269.664829][ T6685] syz-executor.1[6685] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 270.019788][ T29] audit: type=1400 audit(1718802428.215:450): avc: denied { listen } for pid=6690 comm="syz-executor.4" lport=20003 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dccp_socket permissive=1 [ 270.473868][ T29] audit: type=1326 audit(1718802428.285:451): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6684 comm="syz-executor.1" exe="/root/syz-executor.1" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f4eb187cf29 code=0x0 [ 270.858169][ T29] audit: type=1400 audit(1718802428.315:452): avc: denied { connect } for pid=6690 comm="syz-executor.4" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dccp_socket permissive=1 [ 270.896839][ T29] audit: type=1400 audit(1718802428.315:453): avc: denied { name_connect } for pid=6690 comm="syz-executor.4" dest=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=dccp_socket permissive=1 [ 270.944162][ T29] audit: type=1400 audit(1718802428.675:454): avc: denied { accept } for pid=6690 comm="syz-executor.4" lport=20003 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dccp_socket permissive=1 [ 271.016443][ T29] audit: type=1400 audit(1718802428.715:455): avc: denied { write } for pid=6690 comm="syz-executor.4" laddr=::ffff:127.0.0.1 lport=20003 faddr=::ffff:127.0.0.1 fport=55168 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dccp_socket permissive=1 [ 271.177972][ T6685] loop1: detected capacity change from 0 to 1024 [ 271.284342][ T6685] hfsplus: request for non-existent node 3 in B*Tree [ 271.316769][ T6685] hfsplus: request for non-existent node 3 in B*Tree [ 376.556393][ C0] rcu: INFO: rcu_preempt detected stalls on CPUs/tasks: [ 376.563510][ C0] rcu: Tasks blocked on level-0 rcu_node (CPUs 0-1): P6687/1:b..l P3431/1:b..l P6694/1:b..l [ 376.574530][ C0] rcu: (detected by 0, t=10502 jiffies, g=27357, q=567 ncpus=2) [ 376.582280][ C0] task:syz-executor.3 state:R running task stack:27088 pid:6694 tgid:6692 ppid:5110 flags:0x00004002 [ 376.595573][ C0] Call Trace: [ 376.598905][ C0] [ 376.601864][ C0] __schedule+0xf15/0x5d00 [ 376.606341][ C0] ? __pfx_mark_lock+0x10/0x10 [ 376.611155][ C0] ? __read_once_word_nocheck+0x9/0x20 [ 376.616670][ C0] ? mark_lock+0xb5/0xc60 [ 376.621061][ C0] ? __pfx___schedule+0x10/0x10 [ 376.625970][ C0] ? mark_held_locks+0x9f/0xe0 [ 376.630836][ C0] ? lockdep_hardirqs_on+0x7c/0x110 [ 376.636080][ C0] ? preempt_schedule_thunk+0x1a/0x30 [ 376.641487][ C0] preempt_schedule_common+0x44/0xc0 [ 376.646831][ C0] preempt_schedule_thunk+0x1a/0x30 [ 376.652073][ C0] ? unwind_next_frame+0x11ff/0x23a0 [ 376.657420][ C0] ? unwind_next_frame+0x1c8b/0x23a0 [ 376.662766][ C0] unwind_next_frame+0x1c90/0x23a0 [ 376.667954][ C0] ? save_stack+0x162/0x1f0 [ 376.672497][ C0] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 376.678698][ C0] arch_stack_walk+0x100/0x170 [ 376.683618][ C0] ? __reset_page_owner+0x8d/0x400 [ 376.688782][ C0] stack_trace_save+0x95/0xd0 [ 376.693513][ C0] ? __pfx_stack_trace_save+0x10/0x10 [ 376.698959][ C0] save_stack+0x162/0x1f0 [ 376.703341][ C0] ? __pfx_save_stack+0x10/0x10 [ 376.708237][ C0] ? __pfx_lock_acquire+0x10/0x10 [ 376.713325][ C0] __reset_page_owner+0x8d/0x400 [ 376.718322][ C0] free_unref_folios+0x991/0x1310 [ 376.723405][ C0] ? perf_trace_mm_lru_activate+0x410/0x460 [ 376.729359][ C0] ? __page_cache_release+0x77f/0xe10 [ 376.734788][ C0] folios_put_refs+0x487/0x6d0 [ 376.739616][ C0] ? __pfx_folios_put_refs+0x10/0x10 [ 376.745055][ C0] ? lru_add_drain_cpu+0x454/0x860 [ 376.750210][ C0] free_pages_and_swap_cache+0x45f/0x510 [ 376.755899][ C0] ? __pfx_free_pages_and_swap_cache+0x10/0x10 [ 376.762121][ C0] ? __pfx___might_resched+0x10/0x10 [ 376.767452][ C0] __tlb_batch_free_encoded_pages+0xf9/0x290 [ 376.773503][ C0] tlb_finish_mmu+0x168/0x7b0 [ 376.778230][ C0] exit_mmap+0x3d1/0xb20 [ 376.782534][ C0] ? __pfx_exit_mmap+0x10/0x10 [ 376.787356][ C0] __mmput+0x12a/0x4d0 [ 376.791475][ C0] mmput+0x62/0x70 [ 376.795246][ C0] do_exit+0x9b7/0x2ba0 [ 376.799459][ C0] ? get_signal+0x8f2/0x2710 [ 376.804112][ C0] ? __pfx_do_exit+0x10/0x10 [ 376.808794][ C0] ? do_raw_spin_lock+0x12d/0x2c0 [ 376.813877][ C0] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 376.819318][ C0] do_group_exit+0xd3/0x2a0 [ 376.823889][ C0] get_signal+0x2616/0x2710 [ 376.828458][ C0] ? up_write+0x209/0x520 [ 376.832837][ C0] ? __pfx_get_signal+0x10/0x10 [ 376.837762][ C0] ? vm_mmap_pgoff+0xf2/0x360 [ 376.842511][ C0] arch_do_signal_or_restart+0x90/0x7e0 [ 376.848136][ C0] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 376.854355][ C0] ? ksys_mmap_pgoff+0x85/0x5d0 [ 376.859280][ C0] ? kcov_ioctl+0x25d/0x730 [ 376.863840][ C0] syscall_exit_to_user_mode+0x14a/0x2a0 [ 376.869526][ C0] do_syscall_64+0xda/0x250 [ 376.874083][ C0] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 376.880059][ C0] RIP: 0033:0x7ff71627cf29 [ 376.884528][ C0] RSP: 002b:00007ff716fe80c8 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 376.892984][ C0] RAX: 0000000020000000 RBX: 00007ff7163b3f80 RCX: 00007ff71627cf29 [ 376.900997][ C0] RDX: 000000000000000b RSI: 0000000000fbe000 RDI: 0000000020000000 [ 376.909002][ C0] RBP: 00007ff7162ec074 R08: ffffffffffffffff R09: 0000000000000000 [ 376.917013][ C0] R10: 0000000000000031 R11: 0000000000000246 R12: 0000000000000000 [ 376.925027][ C0] R13: 000000000000000b R14: 00007ff7163b3f80 R15: 00007ffccb49f338 [ 376.933040][ C0] [ 376.936092][ C0] task:kworker/u8:9 state:R running task stack:23936 pid:3431 tgid:3431 ppid:2 flags:0x00004000 [ 376.947887][ C0] Workqueue: bat_events batadv_nc_worker [ 376.953591][ C0] Call Trace: [ 376.956905][ C0] [ 376.959881][ C0] __schedule+0xf15/0x5d00 [ 376.964371][ C0] ? __pfx_mark_lock+0x10/0x10 [ 376.969185][ C0] ? hlock_class+0x4e/0x130 [ 376.973732][ C0] ? __pfx___schedule+0x10/0x10 [ 376.978663][ C0] ? mark_held_locks+0x9f/0xe0 [ 376.983485][ C0] preempt_schedule_irq+0x51/0x90 [ 376.988575][ C0] irqentry_exit+0x36/0x90 [ 376.993037][ C0] asm_sysvec_reschedule_ipi+0x1a/0x20 [ 376.998556][ C0] RIP: 0010:kasan_check_range+0x12/0x1a0 [ 377.004243][ C0] Code: 0f 1f 84 00 00 00 00 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 66 0f 1f 00 48 85 f6 0f 84 50 01 00 00 48 89 f8 41 54 <44> 0f b6 c2 48 01 f0 55 53 0f 82 c6 00 00 00 48 b8 ff ff ff ff ff [ 377.023914][ C0] RSP: 0018:ffffc9000ad77ab8 EFLAGS: 00000202 [ 377.030038][ C0] RAX: ffffffff8fe46f90 RBX: 0000000000000001 RCX: ffffffff816bcb99 [ 377.038053][ C0] RDX: 0000000000000000 RSI: 0000000000000008 RDI: ffffffff8fe46f90 [ 377.046068][ C0] RBP: 1ffff920015aef5b R08: 0000000000000001 R09: 0000000000000000 [ 377.054080][ C0] R10: 0000000000000001 R11: 0000000000000002 R12: ffffffff8dbb1920 [ 377.062092][ C0] R13: 0000000000000000 R14: 000000000003d94c R15: 0000000000000001 [ 377.070105][ C0] ? lock_release+0xa9/0x6c0 [ 377.074762][ C0] lock_release+0xa9/0x6c0 [ 377.079247][ C0] ? batadv_nc_worker+0x8e9/0x10f0 [ 377.084419][ C0] ? __pfx_lock_release+0x10/0x10 [ 377.089500][ C0] ? __pfx___lock_acquire+0x10/0x10 [ 377.094761][ C0] batadv_nc_worker+0x8ee/0x10f0 [ 377.099764][ C0] ? __pfx_batadv_nc_worker+0x10/0x10 [ 377.105187][ C0] ? __pfx_lock_release+0x10/0x10 [ 377.110278][ C0] process_one_work+0x9fb/0x1b60 [ 377.115267][ C0] ? __pfx_batadv_iv_send_outstanding_bat_ogm_packet+0x10/0x10 [ 377.122883][ C0] ? __pfx_process_one_work+0x10/0x10 [ 377.128305][ C0] ? assign_work+0x1a0/0x250 [ 377.132947][ C0] worker_thread+0x6c8/0xf70 [ 377.137582][ C0] ? __kthread_parkme+0x148/0x220 [ 377.142660][ C0] ? __pfx_worker_thread+0x10/0x10 [ 377.147812][ C0] kthread+0x2c1/0x3a0 [ 377.151940][ C0] ? _raw_spin_unlock_irq+0x23/0x50 [ 377.157187][ C0] ? __pfx_kthread+0x10/0x10 [ 377.161826][ C0] ret_from_fork+0x45/0x80 [ 377.166311][ C0] ? __pfx_kthread+0x10/0x10 [ 377.170957][ C0] ret_from_fork_asm+0x1a/0x30 [ 377.175801][ C0] [ 377.178852][ C0] task:syz-executor.1 state:R running task stack:25920 pid:6687 tgid:6684 ppid:5117 flags:0x00004002 [ 377.190641][ C0] Call Trace: [ 377.193952][ C0] [ 377.196931][ C0] __schedule+0xf15/0x5d00 [ 377.201402][ C0] ? __pfx_mark_lock+0x10/0x10 [ 377.206227][ C0] ? __pfx___schedule+0x10/0x10 [ 377.211140][ C0] ? mark_lock+0xb5/0xc60 [ 377.215530][ C0] ? __pfx___lock_acquire+0x10/0x10 [ 377.220786][ C0] ? mark_held_locks+0x9f/0xe0 [ 377.225611][ C0] preempt_schedule_irq+0x51/0x90 [ 377.230717][ C0] irqentry_exit+0x36/0x90 [ 377.235180][ C0] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 377.241211][ C0] RIP: 0010:count_memcg_event_mm.part.0+0xfc/0x340 [ 377.247785][ C0] Code: 01 00 00 00 44 89 e6 48 89 df e8 af 38 1f 00 9c 5b 81 e3 00 02 00 00 31 ff 48 89 de e8 bd ed bb ff 48 85 db 0f 85 21 02 00 00 7f f2 bb ff e8 4a 08 16 09 31 ff 89 c3 89 c6 e8 6f ed bb ff 85 [ 377.267437][ C0] RSP: 0018:ffffc9000339f6f8 EFLAGS: 00000246 [ 377.273545][ C0] RAX: 0000000000040000 RBX: 0000000000000000 RCX: ffffc90009e7c000 [ 377.281558][ C0] RDX: 0000000000040000 RSI: ffffffff81d1f4c7 RDI: 0000000000000007 [ 377.289566][ C0] RBP: 0000000000000200 R08: 0000000000000007 R09: 0000000000000000 [ 377.297589][ C0] R10: 0000000000000000 R11: 0000000000000001 R12: 0000000000000017 [ 377.305620][ C0] R13: 0000000000000000 R14: ffff8880229982f8 R15: 0000000000000000 [ 377.313674][ C0] ? count_memcg_event_mm.part.0+0x2f7/0x340 [ 377.319719][ C0] ? count_memcg_event_mm.part.0+0x2f7/0x340 [ 377.325750][ C0] handle_mm_fault+0x1b8/0xa00 [ 377.330593][ C0] __get_user_pages+0x473/0x1490 [ 377.335597][ C0] ? __pfx___get_user_pages+0x10/0x10 [ 377.341019][ C0] ? __lock_acquire+0x14f4/0x3b30 [ 377.346108][ C0] __gup_longterm_locked+0x243/0x2790 [ 377.351554][ C0] ? __pfx___gup_longterm_locked+0x10/0x10 [ 377.357417][ C0] ? __pfx_lock_acquire+0x10/0x10 [ 377.362497][ C0] ? rwsem_read_trylock+0x12d/0x250 [ 377.367736][ C0] ? __pfx_rwsem_read_trylock+0x10/0x10 [ 377.373325][ C0] ? sanity_check_pinned_pages+0x372/0x11f0 [ 377.379278][ C0] pin_user_pages_remote+0xee/0x150 [ 377.384525][ C0] ? __pfx_pin_user_pages_remote+0x10/0x10 [ 377.390386][ C0] ? down_read+0xc9/0x330 [ 377.394763][ C0] ? unpin_user_pages_dirty_lock+0x45d/0x4e0 [ 377.400803][ C0] ? copy_page_to_iter+0x160/0x180 [ 377.405975][ C0] process_vm_rw_core.constprop.0+0x439/0xa10 [ 377.412110][ C0] ? __pfx_process_vm_rw_core.constprop.0+0x10/0x10 [ 377.418773][ C0] process_vm_rw+0x301/0x360 [ 377.423437][ C0] ? __pfx_process_vm_rw+0x10/0x10 [ 377.428612][ C0] ? find_held_lock+0x2d/0x110 [ 377.433432][ C0] ? find_held_lock+0x2d/0x110 [ 377.438249][ C0] ? __pfx___cant_migrate+0x10/0x10 [ 377.443503][ C0] __x64_sys_process_vm_readv+0xe2/0x1c0 [ 377.449194][ C0] ? syscall_trace_enter+0x1ce/0x240 [ 377.454521][ C0] do_syscall_64+0xcd/0x250 [ 377.459068][ C0] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 377.465008][ C0] RIP: 0033:0x7f4eb187cf29 [ 377.469455][ C0] RSP: 002b:00007f4eb26900c8 EFLAGS: 00000246 ORIG_RAX: 0000000000000136 [ 377.477905][ C0] RAX: ffffffffffffffda RBX: 00007f4eb19b4050 RCX: 00007f4eb187cf29 [ 377.485934][ C0] RDX: 0000000000000002 RSI: 0000000020008400 RDI: 0000000000000117 [ 377.493945][ C0] RBP: 00007f4eb18ec074 R08: 0000000000000286 R09: 0000000000000000 [ 377.501956][ C0] R10: 0000000020008640 R11: 0000000000000246 R12: 0000000000000000 [ 377.509960][ C0] R13: 000000000000006e R14: 00007f4eb19b4050 R15: 00007ffeb3a30e08 [ 377.517997][ C0] [ 377.521046][ C0] rcu: rcu_preempt kthread starved for 10596 jiffies! g27357 f0x0 RCU_GP_WAIT_FQS(5) ->state=0x0 ->cpu=1 [ 377.532276][ C0] rcu: Unless rcu_preempt kthread gets sufficient CPU time, OOM is now expected behavior. [ 377.542356][ C0] rcu: RCU grace-period kthread stack dump: [ 377.548263][ C0] task:rcu_preempt state:R running task stack:26848 pid:17 tgid:17 ppid:2 flags:0x00004000 [ 377.560046][ C0] Call Trace: [ 377.563349][ C0] [ 377.566320][ C0] __schedule+0xf15/0x5d00 [ 377.570824][ C0] ? __pfx___lock_acquire+0x10/0x10 [ 377.576089][ C0] ? __pfx___schedule+0x10/0x10 [ 377.581019][ C0] ? schedule+0x298/0x350 [ 377.585412][ C0] ? __pfx_lock_release+0x10/0x10 [ 377.590510][ C0] ? __pfx___mod_timer+0x10/0x10 [ 377.595468][ C0] ? lock_acquire+0x1b1/0x560 [ 377.600176][ C0] ? lockdep_init_map_type+0x16d/0x7d0 [ 377.605667][ C0] schedule+0xe7/0x350 [ 377.609789][ C0] schedule_timeout+0x136/0x2a0 [ 377.614666][ C0] ? __pfx_schedule_timeout+0x10/0x10 [ 377.620071][ C0] ? __pfx_process_timeout+0x10/0x10 [ 377.625381][ C0] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 377.631220][ C0] ? prepare_to_swait_event+0xf0/0x470 [ 377.636712][ C0] rcu_gp_fqs_loop+0x1eb/0xb00 [ 377.641509][ C0] ? __pfx_rcu_gp_fqs_loop+0x10/0x10 [ 377.647173][ C0] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 377.653012][ C0] rcu_gp_kthread+0x271/0x380 [ 377.657720][ C0] ? __pfx_rcu_gp_kthread+0x10/0x10 [ 377.662948][ C0] ? lockdep_hardirqs_on+0x7c/0x110 [ 377.668165][ C0] ? __kthread_parkme+0x148/0x220 [ 377.673224][ C0] ? __pfx_rcu_gp_kthread+0x10/0x10 [ 377.678549][ C0] kthread+0x2c1/0x3a0 [ 377.682646][ C0] ? _raw_spin_unlock_irq+0x23/0x50 [ 377.687885][ C0] ? __pfx_kthread+0x10/0x10 [ 377.692507][ C0] ret_from_fork+0x45/0x80 [ 377.696951][ C0] ? __pfx_kthread+0x10/0x10 [ 377.701562][ C0] ret_from_fork_asm+0x1a/0x30 [ 377.706363][ C0] [ 377.709395][ C0] rcu: Stack dump where RCU GP kthread last ran: [ 377.715748][ C0] Sending NMI from CPU 0 to CPUs 1: [ 377.720977][ C1] NMI backtrace for cpu 1 [ 377.720997][ C1] CPU: 1 PID: 35 Comm: kworker/u8:2 Not tainted 6.10.0-rc3-syzkaller-00044-g2ccbdf43d5e7 #0 [ 377.721025][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024 [ 377.721041][ C1] Workqueue: events_unbound toggle_allocation_gate [ 377.721079][ C1] RIP: 0010:unwind_next_frame+0xbb/0x23a0 [ 377.721120][ C1] Code: 48 48 89 44 24 20 48 8d 43 38 48 89 c2 48 89 44 24 10 48 b8 00 00 00 00 00 fc ff df 48 c1 ea 03 80 3c 02 00 0f 85 21 1d 00 00 <48> 8b 43 38 bf 01 00 00 00 48 89 44 24 18 e8 e2 04 21 00 48 8d 43 [ 377.721144][ C1] RSP: 0018:ffffc90000a18568 EFLAGS: 00000246 [ 377.721161][ C1] RAX: dffffc0000000000 RBX: ffffc90000a185e8 RCX: ffffffff813cd746 [ 377.721178][ C1] RDX: 1ffff920001430c4 RSI: ffffffff813cd76b RDI: 0000000000000005 [ 377.721194][ C1] RBP: 0000000000000001 R08: 0000000000000005 R09: 0000000000000000 [ 377.721209][ C1] R10: 0000000000000001 R11: 0000000000000006 R12: ffffc90000a185e8 [ 377.721224][ C1] R13: ffffffff817984e0 R14: ffffc90000a186a8 R15: ffff88801828bc00 [ 377.721241][ C1] FS: 0000000000000000(0000) GS:ffff8880b9300000(0000) knlGS:0000000000000000 [ 377.721264][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 377.721281][ C1] CR2: 00007f4451756d58 CR3: 000000000d97a000 CR4: 00000000003506f0 [ 377.721296][ C1] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 377.721311][ C1] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 377.721326][ C1] Call Trace: [ 377.721334][ C1] [ 377.721341][ C1] ? show_regs+0x8c/0xa0 [ 377.721376][ C1] ? nmi_cpu_backtrace+0x1d8/0x390 [ 377.721406][ C1] ? nmi_cpu_backtrace_handler+0xc/0x20 [ 377.721438][ C1] ? nmi_handle+0x1a9/0x5c0 [ 377.721474][ C1] ? unwind_next_frame+0xbb/0x23a0 [ 377.721510][ C1] ? default_do_nmi+0x6a/0x160 [ 377.721543][ C1] ? exc_nmi+0x170/0x1e0 [ 377.721574][ C1] ? end_repeat_nmi+0xf/0x53 [ 377.721606][ C1] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 377.721643][ C1] ? unwind_next_frame+0x46/0x23a0 [ 377.721678][ C1] ? unwind_next_frame+0x6b/0x23a0 [ 377.721713][ C1] ? unwind_next_frame+0xbb/0x23a0 [ 377.721749][ C1] ? unwind_next_frame+0xbb/0x23a0 [ 377.721785][ C1] ? unwind_next_frame+0xbb/0x23a0 [ 377.721821][ C1] [ 377.721828][ C1] [ 377.721836][ C1] ? worker_thread+0x6c8/0xf70 [ 377.721859][ C1] ? worker_thread+0x6c8/0xf70 [ 377.721887][ C1] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 377.721921][ C1] arch_stack_walk+0x100/0x170 [ 377.721947][ C1] ? worker_thread+0x6c8/0xf70 [ 377.721971][ C1] stack_trace_save+0x95/0xd0 [ 377.722003][ C1] ? __pfx_stack_trace_save+0x10/0x10 [ 377.722036][ C1] ? stack_trace_save+0x95/0xd0 [ 377.722067][ C1] ? __pfx_stack_trace_save+0x10/0x10 [ 377.722098][ C1] ? stack_depot_save_flags+0x28/0x8f0 [ 377.722135][ C1] kasan_save_stack+0x33/0x60 [ 377.722170][ C1] ? kasan_save_stack+0x33/0x60 [ 377.722203][ C1] ? kasan_save_track+0x14/0x30 [ 377.722236][ C1] ? __kasan_slab_alloc+0x89/0x90 [ 377.722271][ C1] ? kmem_cache_alloc_node_noprof+0x153/0x310 [ 377.722295][ C1] ? kmalloc_reserve+0x18b/0x2c0 [ 377.722328][ C1] ? __alloc_skb+0x164/0x380 [ 377.722362][ C1] ? skb_copy+0x17a/0x340 [ 377.722385][ C1] ? mac80211_hwsim_tx_frame_no_nl.isra.0+0xb97/0x1310 [ 377.722415][ C1] ? mac80211_hwsim_tx_frame+0x1eb/0x2a0 [ 377.722441][ C1] ? mac80211_hwsim_beacon_tx+0x592/0xa00 [ 377.722467][ C1] ? __iterate_interfaces+0x2d2/0x580 [ 377.722502][ C1] ? ieee80211_iterate_active_interfaces_atomic+0x71/0x1b0 [ 377.722540][ C1] ? mac80211_hwsim_beacon+0x105/0x200 [ 377.722575][ C1] ? __hrtimer_run_queues+0x20c/0xcc0 [ 377.722603][ C1] ? hrtimer_run_softirq+0x17d/0x350 [ 377.722631][ C1] ? handle_softirqs+0x216/0x8f0 [ 377.722658][ C1] ? irq_exit_rcu+0xbb/0x120 [ 377.722684][ C1] ? sysvec_apic_timer_interrupt+0x95/0xb0 [ 377.722722][ C1] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 377.722754][ C1] ? smp_call_function_many_cond+0x4ec/0x1420 [ 377.722782][ C1] ? on_each_cpu_cond_mask+0x40/0x90 [ 377.722809][ C1] ? text_poke_bp_batch+0x22b/0x760 [ 377.722836][ C1] ? text_poke_finish+0x30/0x40 [ 377.722884][ C1] ? arch_jump_label_transform_apply+0x1c/0x30 [ 377.722918][ C1] ? jump_label_update+0x1d7/0x400 [ 377.722953][ C1] ? static_key_disable_cpuslocked+0x154/0x1c0 [ 377.722990][ C1] ? static_key_disable+0x1a/0x20 [ 377.723023][ C1] ? toggle_allocation_gate+0x143/0x250 [ 377.723061][ C1] ? process_one_work+0x9fb/0x1b60 [ 377.723085][ C1] ? worker_thread+0x6c8/0xf70 [ 377.723116][ C1] kasan_save_track+0x14/0x30 [ 377.723152][ C1] __kasan_slab_alloc+0x89/0x90 [ 377.723208][ C1] kmem_cache_alloc_node_noprof+0x153/0x310 [ 377.723235][ C1] ? kmalloc_reserve+0x18b/0x2c0 [ 377.723272][ C1] kmalloc_reserve+0x18b/0x2c0 [ 377.723309][ C1] __alloc_skb+0x164/0x380 [ 377.723348][ C1] ? __pfx___alloc_skb+0x10/0x10 [ 377.723387][ C1] ? __pfx_lock_acquire+0x10/0x10 [ 377.723426][ C1] ? lockdep_hardirqs_on+0x7c/0x110 [ 377.723452][ C1] ? do_raw_spin_lock+0x12d/0x2c0 [ 377.723481][ C1] skb_copy+0x17a/0x340 [ 377.723508][ C1] mac80211_hwsim_tx_frame_no_nl.isra.0+0xb97/0x1310 [ 377.723544][ C1] ? __pfx_mac80211_hwsim_tx_frame_no_nl.isra.0+0x10/0x10 [ 377.723576][ C1] ? timekeeping_debug_get_ns+0x3e0/0x5b0 [ 377.723615][ C1] ? lockdep_hardirqs_on+0x7c/0x110 [ 377.723642][ C1] ? read_tsc+0x9/0x20 [ 377.723671][ C1] ? timekeeping_debug_get_ns+0x334/0x5b0 [ 377.723712][ C1] ? mac80211_hwsim_monitor_rx+0x1cd/0x850 [ 377.723754][ C1] mac80211_hwsim_tx_frame+0x1eb/0x2a0 [ 377.723785][ C1] mac80211_hwsim_beacon_tx+0x592/0xa00 [ 377.723817][ C1] ? find_held_lock+0x2d/0x110 [ 377.723848][ C1] __iterate_interfaces+0x2d2/0x580 [ 377.723891][ C1] ? __pfx_mac80211_hwsim_beacon_tx+0x10/0x10 [ 377.723922][ C1] ? __pfx_mac80211_hwsim_beacon_tx+0x10/0x10 [ 377.723953][ C1] ? __pfx_mac80211_hwsim_beacon+0x10/0x10 [ 377.723992][ C1] ieee80211_iterate_active_interfaces_atomic+0x71/0x1b0 [ 377.724038][ C1] mac80211_hwsim_beacon+0x105/0x200 [ 377.724077][ C1] __hrtimer_run_queues+0x20c/0xcc0 [ 377.724111][ C1] ? __pfx___hrtimer_run_queues+0x10/0x10 [ 377.724144][ C1] ? ktime_get_update_offsets_now+0x201/0x310 [ 377.724187][ C1] hrtimer_run_softirq+0x17d/0x350 [ 377.724219][ C1] handle_softirqs+0x216/0x8f0 [ 377.724251][ C1] ? __pfx_handle_softirqs+0x10/0x10 [ 377.724283][ C1] irq_exit_rcu+0xbb/0x120 [ 377.724313][ C1] sysvec_apic_timer_interrupt+0x95/0xb0 [ 377.724367][ C1] [ 377.724375][ C1] [ 377.724382][ C1] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 377.724418][ C1] RIP: 0010:smp_call_function_many_cond+0x4ec/0x1420 [ 377.724450][ C1] Code: 4d 48 b8 00 00 00 00 00 fc ff df 4d 89 f4 4c 89 f5 49 c1 ec 03 83 e5 07 49 01 c4 83 c5 03 e8 bb 37 0c 00 f3 90 41 0f b6 04 24 <40> 38 c5 7c 08 84 c0 0f 85 f7 0c 00 00 8b 43 08 31 ff 83 e0 01 41 [ 377.724475][ C1] RSP: 0018:ffffc90000ab7908 EFLAGS: 00000293 [ 377.724493][ C1] RAX: 0000000000000000 RBX: ffff8880b9246740 RCX: ffffffff8181adbb [ 377.724510][ C1] RDX: ffff88801828bc00 RSI: ffffffff8181ad95 RDI: 0000000000000005 [ 377.724527][ C1] RBP: 0000000000000003 R08: 0000000000000005 R09: 0000000000000000 [ 377.724542][ C1] R10: 0000000000000001 R11: 0000000000000006 R12: ffffed1017248ce9 [ 377.724559][ C1] R13: 0000000000000001 R14: ffff8880b9246748 R15: ffff8880b933fdc0 [ 377.724578][ C1] ? smp_call_function_many_cond+0x50b/0x1420 [ 377.724608][ C1] ? smp_call_function_many_cond+0x4e5/0x1420 [ 377.724676][ C1] ? smp_call_function_many_cond+0x4e5/0x1420 [ 377.724711][ C1] ? __pfx_smp_call_function_many_cond+0x10/0x10 [ 377.724744][ C1] ? __pfx___text_poke+0x10/0x10 [ 377.724771][ C1] ? __pfx_do_sync_core+0x10/0x10 [ 377.724798][ C1] on_each_cpu_cond_mask+0x40/0x90 [ 377.724829][ C1] text_poke_bp_batch+0x22b/0x760 [ 377.724860][ C1] ? arch_jump_label_transform_apply+0x17/0x30 [ 377.724900][ C1] ? __pfx_text_poke_bp_batch+0x10/0x10 [ 377.724929][ C1] ? __jump_label_patch+0x1db/0x400 [ 377.724962][ C1] ? arch_jump_label_transform_queue+0xc0/0x120 [ 377.725000][ C1] text_poke_finish+0x30/0x40 [ 377.725030][ C1] arch_jump_label_transform_apply+0x1c/0x30 [ 377.725065][ C1] jump_label_update+0x1d7/0x400 [ 377.725101][ C1] static_key_disable_cpuslocked+0x154/0x1c0 [ 377.725141][ C1] static_key_disable+0x1a/0x20 [ 377.725177][ C1] toggle_allocation_gate+0x143/0x250 [ 377.725218][ C1] ? __pfx_toggle_allocation_gate+0x10/0x10 [ 377.725261][ C1] process_one_work+0x9fb/0x1b60 [ 377.725290][ C1] ? __pfx_lock_acquire+0x10/0x10 [ 377.725329][ C1] ? __pfx_process_one_work+0x10/0x10 [ 377.725357][ C1] ? assign_work+0x1a0/0x250 [ 377.725398][ C1] worker_thread+0x6c8/0xf70 [ 377.725428][ C1] ? __pfx_worker_thread+0x10/0x10 [ 377.725453][ C1] kthread+0x2c1/0x3a0 [ 377.725485][ C1] ? _raw_spin_unlock_irq+0x23/0x50 [ 377.725523][ C1] ? __pfx_kthread+0x10/0x10 [ 377.725554][ C1] ret_from_fork+0x45/0x80 [ 377.725591][ C1] ? __pfx_kthread+0x10/0x10 [ 377.725622][ C1] ret_from_fork_asm+0x1a/0x30 [ 377.725665][ C1]