last executing test programs: 1.070530846s ago: executing program 3 (id=4): setsockopt$MRT6_ADD_MIF(0xffffffffffffffff, 0x29, 0xca, &(0x7f00000000c0)={0x0, 0x0, 0x3, 0x0, 0x230d}, 0xc) setsockopt$MRT6_FLUSH(0xffffffffffffffff, 0x29, 0xd4, 0x0, 0x0) keyctl$setperm(0x5, 0x0, 0x1010) syz_open_dev$sndctrl(0x0, 0x0, 0x0) getrandom(&(0x7f0000000240)=""/286, 0xffffff9a, 0x0) r0 = syz_create_resource$binfmt(&(0x7f0000000100)='./file1\x00') r1 = openat$binfmt(0xffffffffffffff9c, r0, 0x42, 0x1ff) close(r1) execveat$binfmt(0xffffffffffffff9c, r0, 0x0, &(0x7f0000004780)={[], 0xf000}, 0x1000) 1.049205669s ago: executing program 2 (id=3): openat(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r0 = syz_io_uring_setup(0x54d, &(0x7f0000000040)={0x0, 0x3796, 0x20101, 0x805, 0x200350}, &(0x7f0000000100)=0x0, &(0x7f00000001c0)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000000400)={0x1, &(0x7f0000000200)=[{0x2e, 0x0, 0x0, 0x5}]}, 0x10) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_WRITE={0x17, 0x1, 0x2007, @fd, 0xffffffffffffff7f, 0x0, 0x0, 0x4, 0x1}) io_uring_enter(r0, 0x47bc, 0x0, 0x0, 0x0, 0x0) 1.001076329s ago: executing program 1 (id=2): r0 = syz_usb_connect(0x0, 0x1cb, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000122f0d4071040403dfe4000000010902b901010000003f0904"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$uac2(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$lan78xx(r0, 0x0, &(0x7f00000003c0)={0x34, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000340)={0x40, 0xa0, 0x4, 0x101}, 0x0}) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000740)={0x84, &(0x7f0000000340)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 900.915133ms ago: executing program 2 (id=5): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000280)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000500)=ANY=[@ANYBLOB="34010000", @ANYRES16=r1, @ANYBLOB="010000000000040000003900000008000300", @ANYRES32=r2, @ANYBLOB="08005a800400038004005a8008015a803c000180140005"], 0x134}, 0x1, 0x0, 0x0, 0x20000040}, 0x4000) 840.632122ms ago: executing program 2 (id=6): prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x6) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000380)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_open_procfs(0xffffffffffffffff, &(0x7f00000004c0)='setgroups\x00') 840.503186ms ago: executing program 0 (id=1): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) r3 = landlock_create_ruleset(&(0x7f0000000040)={0x0, 0x3}, 0x10, 0x0) landlock_restrict_self(r3, 0x9) 550.941057ms ago: executing program 0 (id=7): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt(r0, 0x84, 0x81, &(0x7f0000000000)='\x00\x00\x00\x00', 0x4) sendmmsg$inet_sctp(0xffffffffffffffff, 0x0, 0x0, 0x0) r1 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r1, 0x84, 0xd, 0x0, &(0x7f0000000280)) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) dup2(r0, r2) sendto$inet6(r2, 0x0, 0x0, 0x7ddfdbdfafa51cdd, &(0x7f0000000100)={0xa, 0x4e23, 0x2, @loopback, 0xffffffff}, 0x1c) 470.845461ms ago: executing program 0 (id=8): r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000040)={0x0, 0x6}, 0x4) bind$inet(r0, &(0x7f0000000040)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x2d}}, 0x10) setsockopt$sock_int(r0, 0x1, 0x3c, &(0x7f00000000c0)=0x1, 0x4) sendto$inet(r0, &(0x7f0000000100)='J', 0xfdbe, 0x4004084, 0x0, 0x11000a00) 470.732519ms ago: executing program 0 (id=9): r0 = syz_usb_connect(0x5, 0x24, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000ff4ae0086d04dd08f4ff080203010902120001000000000904"], 0x0) syz_usb_control_io$lan78xx(r0, 0x0, 0x0) syz_usb_control_io$lan78xx(r0, 0x0, &(0x7f0000000780)={0x34, &(0x7f0000000580)={0x20, 0x15}, 0x0, 0x0, 0x0, 0x0, 0x0}) 70.747498ms ago: executing program 3 (id=10): socket$nl_route(0x10, 0x3, 0x0) read$FUSE(0xffffffffffffffff, 0x0, 0x0) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, 0x0, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r0 = socket$kcm(0x2, 0x3, 0x2) ioctl$SIOCSIFHWADDR(r0, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @broadcast}) write$tun(0xffffffffffffffff, &(0x7f0000004000)={@val={0x8, 0x800}, @val={0x7, 0x0, 0x1, 0x0, 0x14}, @ipv4=@generic={{0x6, 0x4, 0x2, 0x2, 0xfc0, 0x64, 0x0, 0xb, 0x88, 0x0, @private=0xa0100fa, @dev={0xac, 0x14, 0x14, 0x1a}, {[@timestamp={0x44, 0x4, 0xd7, 0x0, 0xd}]}}, "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"}}, 0xfce) 256.988µs ago: executing program 3 (id=11): r0 = syz_open_dev$sndpcmp(&(0x7f0000007640), 0x0, 0x0) ioctl$SNDRV_PCM_IOCTL_INFO(r0, 0x40084149, 0x0) 71.01µs ago: executing program 2 (id=12): r0 = openat$udambuf(0xffffffffffffff9c, &(0x7f0000000100), 0x2) r1 = memfd_create(&(0x7f0000000340)='y\x105\xfb\xf7u\x83%:r\xc2\xb9x\xa4q\xc1\xea_\x8cZ7\xe7a\xdenJ\xeb\x87\x9b\x11x\x0e\xa1\xcf\x1a\x98S7\xc9\x00\x00\x00\x00\x00\x00\a\x00\x00\x00\x00\x00\x00\x04\x879\xa24\xa9am\xde\xb2\xd3\xcbZJoa\xc4\x1acB\xaa\xc1\xfb Q\xd4\xf4\x01\xa52\xe2DG\xd4\xbd{\x9f\xa9\x97\x9b@\xdb\x00b\xe1br\xb6\x008\xe3\x10\xff\xc2\x9d\r2\x9e\x8e\x04sW\x1b\xb7\xb3\xa2\xc9&@\xca\xda\xdc\xe2/\x97X\xac\b\xb0\xc2<\x80E\x1a\xbc\xc7W\xda9VsA\xaf\xc6\xcf\xe1\xa1\xb5M\xa2\x85\xa6y\xc4J\xf1\xf7\xfcD\x95\xe3\xeb\xc7\xbc\x91\xb0\xa8\x9eo\xebF(\x9dL\x01vRk\xaacB\x14OD\\\xe8R\xe4\xcd\xec\xcc\xd1\x0fre\xe86\xcd\xeb\xc4$\x98\x06J\xd6dD\x8d_U`ji{\xab\x97\xaf;l\x1f\xaf\xb38\x14\xcb\xfa\xb3j\x92\f\xe0\x81\xa0\xa2-g\b\x99\x0e\x8d\x8d\x16\xd9w\\\xf0\xce\xb0j\x9d\'\x93\xef\x1d\xa0H\xd9\xbd\xd9\xaf\x12\x00\x00\x00\x00\x00\x00\x00\x00\x00', 0x2) ftruncate(r1, 0xffff) fcntl$addseals(r1, 0x409, 0x7) r2 = ioctl$UDMABUF_CREATE(r0, 0x40187542, &(0x7f0000000140)={r1, 0x0, 0x0, 0x4000}) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x3000007, 0x11, r2, 0x0) ioctl$DMA_BUF_SET_NAME_A(r2, 0x40046201, &(0x7f0000000040)='smaps\x00') r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000300), 0x800, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) syz_open_procfs(0x0, &(0x7f0000000000)='smaps\x00') ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) 0s ago: executing program 3 (id=13): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x18, 0xf, &(0x7f0000000200)=ANY=[@ANYRESDEC, @ANYBLOB="0000000000000000b702000014000000b7020000000000008500"], 0x0, 0x10007, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x6}, 0x94) r0 = syz_open_dev$loop(&(0x7f0000000100), 0x2, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='blkio.bfq.idle_time\x00', 0x275a, 0x0) write$binfmt_misc(r1, &(0x7f0000000040), 0xe09) ioctl$LOOP_CONFIGURE(r0, 0x4c0a, &(0x7f00000002c0)={r1, 0x0, {0x2a00, 0x80010000, 0x0, 0x2, 0x0, 0x0, 0x0, 0xb, 0x1c, "fee8a2ab78fc979fd1e00db6072000001ea89de2b4410000e60080b8785d960000100000000000000000000000000000000000527000", "2809e8dbe108598948224ad44afac11d875397bdb22d0000b420a1a93c5240f45f819ef6167d3d458dd4992861ac00", "f4bd000000801900000000000000000000000000000000000000000100", [0x0, 0x2000000000001]}}) kernel console output (not intermixed with test programs): Warning: Permanently added '[localhost]:33427' (ED25519) to the list of known hosts. [ 45.790182][ T40] audit: type=1400 audit(1773428496.173:62): avc: denied { name_bind } for pid=5906 comm="sshd-session" src=30000 scontext=system_u:system_r:sshd_t tcontext=system_u:object_r:unreserved_port_t tclass=tcp_socket permissive=1 [ 45.827917][ T40] audit: type=1400 audit(1773428496.213:63): avc: denied { execute } for pid=5907 comm="sh" name="syz-executor" dev="sda1" ino=2020 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:etc_runtime_t tclass=file permissive=1 [ 45.835268][ T40] audit: type=1400 audit(1773428496.213:64): avc: denied { execute_no_trans } for pid=5907 comm="sh" path="/syz-executor" dev="sda1" ino=2020 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:etc_runtime_t tclass=file permissive=1 [ 47.998881][ T40] audit: type=1400 audit(1773428498.383:65): avc: denied { mounton } for pid=5907 comm="syz-executor" path="/syzcgroup/unified" dev="sda1" ino=2022 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1 [ 48.009346][ T40] audit: type=1400 audit(1773428498.393:66): avc: denied { mount } for pid=5907 comm="syz-executor" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 48.011352][ T5907] cgroup: Unknown subsys name 'net' [ 48.186141][ T5907] cgroup: Unknown subsys name 'cpuset' [ 48.190352][ T5907] cgroup: Unknown subsys name 'rlimit' [ 48.420436][ T5916] SELinux: Context root:object_r:swapfile_t is not valid (left unmapped). Setting up swapspace version 1, size = 127995904 bytes [ 49.117663][ T5907] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 51.966392][ T40] kauditd_printk_skb: 15 callbacks suppressed [ 51.966405][ T40] audit: type=1400 audit(1773428502.353:82): avc: denied { execmem } for pid=5922 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 52.089458][ T40] audit: type=1400 audit(1773428502.473:83): avc: denied { create } for pid=5926 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 52.106596][ T40] audit: type=1400 audit(1773428502.473:84): avc: denied { read write } for pid=5926 comm="syz-executor" name="vhci" dev="devtmpfs" ino=1291 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 52.114365][ T40] audit: type=1400 audit(1773428502.473:85): avc: denied { open } for pid=5926 comm="syz-executor" path="/dev/vhci" dev="devtmpfs" ino=1291 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 52.120054][ T5928] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 52.122553][ T40] audit: type=1400 audit(1773428502.483:86): avc: denied { ioctl } for pid=5926 comm="syz-executor" path="socket:[6022]" dev="sockfs" ino=6022 ioctlcmd=0x48c9 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 52.124981][ T5931] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 52.126885][ T5928] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 52.134419][ T5937] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 52.136872][ T5928] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 52.139311][ T5937] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 52.141406][ T5928] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 52.143787][ T5935] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 52.143875][ T5937] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 52.144368][ T5937] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 52.144674][ T5937] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 52.146348][ T5928] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 52.148953][ T5935] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 52.151186][ T5931] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 52.152437][ T5928] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 52.156626][ T40] audit: type=1400 audit(1773428502.543:87): avc: denied { read } for pid=5933 comm="syz-executor" dev="nsfs" ino=4026531833 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 52.157618][ T5931] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 52.157795][ T5938] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 52.163291][ T40] audit: type=1400 audit(1773428502.543:88): avc: denied { open } for pid=5933 comm="syz-executor" path="net:[4026531833]" dev="nsfs" ino=4026531833 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 52.166422][ T63] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 52.178547][ T40] audit: type=1400 audit(1773428502.543:89): avc: denied { mounton } for pid=5933 comm="syz-executor" path="/" dev="sda1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:root_t tclass=dir permissive=1 [ 52.185814][ T63] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 52.197868][ T63] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 52.388442][ T40] audit: type=1400 audit(1773428502.773:90): avc: denied { module_request } for pid=5939 comm="syz-executor" kmod="rtnl-link-nicvf" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1 [ 52.440334][ T5939] chnl_net:caif_netlink_parms(): no params data found [ 52.506214][ T5926] chnl_net:caif_netlink_parms(): no params data found [ 52.529458][ T5933] chnl_net:caif_netlink_parms(): no params data found [ 52.564207][ T5930] chnl_net:caif_netlink_parms(): no params data found [ 52.577213][ T5939] bridge0: port 1(bridge_slave_0) entered blocking state [ 52.580443][ T5939] bridge0: port 1(bridge_slave_0) entered disabled state [ 52.584734][ T5939] bridge_slave_0: entered allmulticast mode [ 52.588808][ T5939] bridge_slave_0: entered promiscuous mode [ 52.618910][ T5939] bridge0: port 2(bridge_slave_1) entered blocking state [ 52.621237][ T5939] bridge0: port 2(bridge_slave_1) entered disabled state [ 52.623944][ T5939] bridge_slave_1: entered allmulticast mode [ 52.626583][ T5939] bridge_slave_1: entered promiscuous mode [ 52.678269][ T5939] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 52.686504][ T5933] bridge0: port 1(bridge_slave_0) entered blocking state [ 52.688850][ T5933] bridge0: port 1(bridge_slave_0) entered disabled state [ 52.691164][ T5933] bridge_slave_0: entered allmulticast mode [ 52.693956][ T5933] bridge_slave_0: entered promiscuous mode [ 52.697061][ T5933] bridge0: port 2(bridge_slave_1) entered blocking state [ 52.699396][ T5933] bridge0: port 2(bridge_slave_1) entered disabled state [ 52.701678][ T5933] bridge_slave_1: entered allmulticast mode [ 52.704567][ T5933] bridge_slave_1: entered promiscuous mode [ 52.712100][ T5939] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 52.715356][ T5926] bridge0: port 1(bridge_slave_0) entered blocking state [ 52.718543][ T5926] bridge0: port 1(bridge_slave_0) entered disabled state [ 52.721714][ T5926] bridge_slave_0: entered allmulticast mode [ 52.725894][ T5926] bridge_slave_0: entered promiscuous mode [ 52.731133][ T5926] bridge0: port 2(bridge_slave_1) entered blocking state [ 52.734383][ T5926] bridge0: port 2(bridge_slave_1) entered disabled state [ 52.737157][ T5926] bridge_slave_1: entered allmulticast mode [ 52.740067][ T5926] bridge_slave_1: entered promiscuous mode [ 52.773920][ T5930] bridge0: port 1(bridge_slave_0) entered blocking state [ 52.776246][ T5930] bridge0: port 1(bridge_slave_0) entered disabled state [ 52.778554][ T5930] bridge_slave_0: entered allmulticast mode [ 52.781190][ T5930] bridge_slave_0: entered promiscuous mode [ 52.789799][ T5930] bridge0: port 2(bridge_slave_1) entered blocking state [ 52.792146][ T5930] bridge0: port 2(bridge_slave_1) entered disabled state [ 52.794625][ T5930] bridge_slave_1: entered allmulticast mode [ 52.797240][ T5930] bridge_slave_1: entered promiscuous mode [ 52.802051][ T5933] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 52.806583][ T5933] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 52.841880][ T5939] team0: Port device team_slave_0 added [ 52.854719][ T5939] team0: Port device team_slave_1 added [ 52.859115][ T5926] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 52.869140][ T5933] team0: Port device team_slave_0 added [ 52.883525][ T5926] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 52.889074][ T5930] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 52.893833][ T5933] team0: Port device team_slave_1 added [ 52.917085][ T5930] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 52.920404][ T5939] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 52.922634][ T5939] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 52.931315][ T5939] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 52.936497][ T5939] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 52.938736][ T5939] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 52.947015][ T5939] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 52.980212][ T5926] team0: Port device team_slave_0 added [ 52.989427][ T5933] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 52.992137][ T5933] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 53.002874][ T5933] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 53.016038][ T5933] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 53.018954][ T5933] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 53.029713][ T5933] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 53.046272][ T5926] team0: Port device team_slave_1 added [ 53.049229][ T5930] team0: Port device team_slave_0 added [ 53.054080][ T5939] hsr_slave_0: entered promiscuous mode [ 53.056352][ T5939] hsr_slave_1: entered promiscuous mode [ 53.066445][ T5930] team0: Port device team_slave_1 added [ 53.100343][ T5926] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 53.102594][ T5926] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 53.110849][ T5926] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 53.118879][ T5930] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 53.121140][ T5930] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 53.129876][ T5930] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 53.142895][ T5930] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 53.145224][ T5930] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 53.153432][ T5930] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 53.165829][ T5926] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 53.168155][ T5926] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 53.176434][ T5926] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 53.184057][ T5933] hsr_slave_0: entered promiscuous mode [ 53.186334][ T5933] hsr_slave_1: entered promiscuous mode [ 53.188466][ T5933] debugfs: 'hsr0' already exists in 'hsr' [ 53.190382][ T5933] Cannot create hsr debugfs directory [ 53.231505][ T5930] hsr_slave_0: entered promiscuous mode [ 53.234050][ T5930] hsr_slave_1: entered promiscuous mode [ 53.236176][ T5930] debugfs: 'hsr0' already exists in 'hsr' [ 53.238088][ T5930] Cannot create hsr debugfs directory [ 53.284776][ T5926] hsr_slave_0: entered promiscuous mode [ 53.287049][ T5926] hsr_slave_1: entered promiscuous mode [ 53.289209][ T5926] debugfs: 'hsr0' already exists in 'hsr' [ 53.291078][ T5926] Cannot create hsr debugfs directory [ 53.497439][ T5939] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 53.514988][ T5939] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 53.518922][ T5939] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 53.529278][ T5939] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 53.562859][ T5930] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 53.570294][ T5930] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 53.584194][ T5930] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 53.588326][ T5930] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 53.614904][ T5933] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 53.621861][ T5933] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 53.626320][ T5933] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 53.630781][ T5933] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 53.681558][ T5939] 8021q: adding VLAN 0 to HW filter on device bond0 [ 53.691946][ T5939] 8021q: adding VLAN 0 to HW filter on device team0 [ 53.698292][ T5926] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 53.706338][ T55] bridge0: port 1(bridge_slave_0) entered blocking state [ 53.708766][ T55] bridge0: port 1(bridge_slave_0) entered forwarding state [ 53.712765][ T5926] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 53.717404][ T5926] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 53.721317][ T5926] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 53.739597][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 53.741985][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 53.769373][ T5930] 8021q: adding VLAN 0 to HW filter on device bond0 [ 53.789589][ T5930] 8021q: adding VLAN 0 to HW filter on device team0 [ 53.799815][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 53.802162][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 53.816281][ T5933] 8021q: adding VLAN 0 to HW filter on device bond0 [ 53.819602][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 53.821917][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 53.850386][ T40] audit: type=1400 audit(1773428504.233:91): avc: denied { sys_module } for pid=5939 comm="syz-executor" capability=16 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 53.865093][ T5933] 8021q: adding VLAN 0 to HW filter on device team0 [ 53.875198][ T83] bridge0: port 1(bridge_slave_0) entered blocking state [ 53.878091][ T83] bridge0: port 1(bridge_slave_0) entered forwarding state [ 53.886451][ T1261] bridge0: port 2(bridge_slave_1) entered blocking state [ 53.889753][ T1261] bridge0: port 2(bridge_slave_1) entered forwarding state [ 53.901388][ T5926] 8021q: adding VLAN 0 to HW filter on device bond0 [ 53.930634][ T5926] 8021q: adding VLAN 0 to HW filter on device team0 [ 53.940646][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 53.943783][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 53.952030][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 53.955248][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 53.981383][ T5939] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 53.993916][ T5930] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 54.056794][ T5939] veth0_vlan: entered promiscuous mode [ 54.060436][ T5930] veth0_vlan: entered promiscuous mode [ 54.066934][ T5939] veth1_vlan: entered promiscuous mode [ 54.070742][ T5930] veth1_vlan: entered promiscuous mode [ 54.076278][ T5933] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 54.116397][ T5933] veth0_vlan: entered promiscuous mode [ 54.122911][ T5939] veth0_macvtap: entered promiscuous mode [ 54.128263][ T5930] veth0_macvtap: entered promiscuous mode [ 54.134416][ T5939] veth1_macvtap: entered promiscuous mode [ 54.138503][ T5930] veth1_macvtap: entered promiscuous mode [ 54.144033][ T5933] veth1_vlan: entered promiscuous mode [ 54.159517][ T5939] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 54.168423][ T5926] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 54.174852][ T5939] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 54.180117][ T5930] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 54.188355][ T1261] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 54.192911][ T5930] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 54.204594][ T5937] Bluetooth: hci0: command tx timeout [ 54.205296][ T63] Bluetooth: hci2: command tx timeout [ 54.208621][ T1261] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 54.212614][ T1261] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 54.216493][ T63] Bluetooth: hci3: command tx timeout [ 54.216643][ T63] Bluetooth: hci1: command tx timeout [ 54.226514][ T5933] veth0_macvtap: entered promiscuous mode [ 54.230507][ T1261] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 54.233842][ T1261] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 54.250142][ T1261] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 54.253056][ T1261] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 54.260077][ T5933] veth1_macvtap: entered promiscuous mode [ 54.265159][ T1261] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 54.311132][ T1145] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 54.316978][ T1145] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 54.321123][ T1145] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 54.322151][ T5933] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 54.323599][ T1145] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 54.331130][ T5926] veth0_vlan: entered promiscuous mode [ 54.339759][ T5933] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 54.354388][ T55] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 54.356901][ T55] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 54.362238][ T1145] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 54.374540][ T1145] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 54.377417][ T1145] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 54.382942][ T5926] veth1_vlan: entered promiscuous mode [ 54.388568][ T1261] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 54.391125][ T1261] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 54.391782][ T1145] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 54.426410][ T5939] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 54.443011][ T1145] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 54.447842][ T1145] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 54.451754][ T5926] veth0_macvtap: entered promiscuous mode [ 54.469881][ T55] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 54.470705][ T5926] veth1_macvtap: entered promiscuous mode [ 54.472449][ T55] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 54.494624][ T5926] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 54.499464][ T5926] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 54.505461][ T1261] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 54.514966][ T1261] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 54.544319][ T1261] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 54.548104][ T1261] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 54.564555][ T1261] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 54.570149][ T1261] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 54.595479][ T6018] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5'. [ 54.609911][ T6018] netlink: 36 bytes leftover after parsing attributes in process `syz.2.5'. [ 54.616110][ T55] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 54.619180][ T55] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 54.893201][ T2298] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 55.056441][ T2298] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 55.059790][ T2298] usb 6-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 55.065820][ T2298] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 55.072362][ T2298] usb 6-1: config 0 descriptor?? [ 55.078551][ T2298] pwc: Askey VC010 type 2 USB webcam detected. [ 55.283276][ T29] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 55.443452][ T29] usb 5-1: Using ep0 maxpacket: 8 [ 55.447787][ T29] usb 5-1: New USB device found, idVendor=046d, idProduct=08dd, bcdDevice=ff.f4 [ 55.450662][ T29] usb 5-1: New USB device strings: Mfr=8, Product=2, SerialNumber=3 [ 55.454805][ T29] usb 5-1: Product: syz [ 55.456198][ T29] usb 5-1: Manufacturer: syz [ 55.457764][ T29] usb 5-1: SerialNumber: syz [ 55.460657][ T29] usb 5-1: config 0 descriptor?? [ 55.464555][ T29] gspca_main: gspca_zc3xx-2.14.0 probing 046d:08dd [ 55.479292][ T2298] pwc: recv_control_msg error -32 req 02 val 2b00 [ 55.482446][ T2298] pwc: recv_control_msg error -32 req 02 val 2700 [ 55.492635][ T2298] pwc: recv_control_msg error -32 req 02 val 2c00 [ 55.496927][ T2298] pwc: recv_control_msg error -32 req 04 val 1000 [ 55.499471][ T2298] pwc: recv_control_msg error -32 req 04 val 1300 [ 55.501999][ T2298] pwc: recv_control_msg error -32 req 04 val 1400 [ 55.504711][ T2298] pwc: recv_control_msg error -32 req 02 val 2000 [ 55.507259][ T2298] pwc: recv_control_msg error -32 req 02 val 2100 [ 55.510811][ T2298] pwc: recv_control_msg error -32 req 04 val 1500 [ 55.513779][ T2298] pwc: recv_control_msg error -32 req 02 val 2500 [ 55.516333][ T2298] pwc: recv_control_msg error -32 req 02 val 2400 [ 55.518886][ T2298] pwc: recv_control_msg error -32 req 02 val 2600 [ 55.521404][ T2298] pwc: recv_control_msg error -32 req 02 val 2900 [ 55.540564][ T6042] loop2: detected capacity change from 0 to 7 [ 55.546111][ T5927] Dev loop2: unable to read RDB block 7 [ 55.548052][ T5927] loop2: unable to read partition table [ 55.550019][ T5927] loop2: partition table beyond EOD, truncated [ 55.554262][ T6042] Dev loop2: unable to read RDB block 7 [ 55.554784][ T6044] ------------[ cut here ]------------ [ 55.556158][ T6042] loop2: unable to read partition table [ 55.558072][ T6044] ((d_inode(path->dentry))->i_flags & (1 << 19)) && !(path->mnt->mnt_sb->s_iflags & 0x00000002) [ 55.559918][ T6044] WARNING: fs/exec.c:118 at path_noexec+0x1cf/0x230, CPU#2: syz.2.12/6044 [ 55.559988][ T6042] loop2: partition table beyond EOD, [ 55.563598][ T6044] Modules linked in: SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 55.567665][ T6042] truncated [ 55.568413][ T6044] CPU: 2 UID: 0 PID: 6044 Comm: syz.2.12 Not tainted syzkaller #0 PREEMPT(full) [ 55.569761][ T6042] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑච) failed (rc=-5) [ 55.570924][ T6044] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 55.580279][ T6044] RIP: 0010:path_noexec+0x1cf/0x230 [ 55.581966][ T6044] Code: 58 31 ff 83 e3 02 48 89 de 48 d1 eb e8 9a d6 7d ff 83 e3 01 e8 b2 db 7d ff 89 d8 5b 5d 41 5c c3 cc cc cc cc e8 a2 db 7d ff 90 <0f> 0b 90 e9 46 ff ff ff e8 44 5f ea ff e9 a3 fe ff ff e8 3a 5f ea [ 55.588287][ T6044] RSP: 0018:ffffc90004597bd8 EFLAGS: 00010283 [ 55.590516][ T6044] RAX: 00000000000000cb RBX: 0000000000000000 RCX: ffffc900078b2000 [ 55.593650][ T6044] RDX: 0000000000080000 RSI: ffffffff828adbfe RDI: ffff888031fca4c0 [ 55.596447][ T6044] RBP: ffff88801fa87520 R08: 0000000000000007 R09: 0000000000000000 [ 55.599030][ T6044] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000080000 [ 55.601737][ T6044] R13: 0000000000000001 R14: ffff88803162e748 R15: 0000000000000000 [ 55.604392][ T6044] FS: 00007fac1f77a6c0(0000) GS:ffff8880d6545000(0000) knlGS:0000000000000000 [ 55.607373][ T6044] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 55.609538][ T6044] CR2: 000000110c3d601b CR3: 0000000058264000 CR4: 0000000000352ef0 [ 55.612268][ T6044] Call Trace: [ 55.613538][ T6044] [ 55.614534][ T6044] do_mmap+0x857/0x12f0 [ 55.615935][ T6044] ? __pfx_do_mmap+0x10/0x10 [ 55.617482][ T6044] ? __pfx_down_write_killable+0x10/0x10 [ 55.619352][ T6044] vm_mmap_pgoff+0x29e/0x470 [ 55.620884][ T6044] ? __pfx_vm_mmap_pgoff+0x10/0x10 [ 55.622579][ T6044] ? __fget_files+0x215/0x3d0 [ 55.624251][ T6044] ? __fget_files+0x21f/0x3d0 [ 55.625768][ T6044] ksys_mmap_pgoff+0x3c8/0x650 [ 55.627374][ T6044] ? __x64_sys_futex+0x34f/0x4d0 [ 55.629016][ T6044] ? __x64_sys_futex+0x358/0x4d0 [ 55.630627][ T6044] ? __pfx_ksys_mmap_pgoff+0x10/0x10 [ 55.632347][ T6044] ? xfd_validate_state+0x129/0x190 [ 55.634216][ T6044] __x64_sys_mmap+0x125/0x190 [ 55.635784][ T6044] do_syscall_64+0x106/0xf80 [ 55.637458][ T6044] ? clear_bhb_loop+0x40/0x90 [ 55.639316][ T6044] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 55.641809][ T6044] RIP: 0033:0x7fac1e99c799 [ 55.643718][ T6044] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 55.649908][ T6044] RSP: 002b:00007fac1f77a028 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 55.652727][ T6044] RAX: ffffffffffffffda RBX: 00007fac1ec15fa0 RCX: 00007fac1e99c799 [ 55.655363][ T6044] RDX: 0000000003000007 RSI: 0000000000003000 RDI: 0000200000000000 [ 55.657962][ T6044] RBP: 00007fac1ea32c99 R08: 0000000000000005 R09: 0000000000000000 [ 55.660550][ T6044] R10: 0000000000000011 R11: 0000000000000246 R12: 0000000000000000 [ 55.663261][ T6044] R13: 00007fac1ec16038 R14: 00007fac1ec15fa0 R15: 00007ffee21cf318 [ 55.665876][ T6044] [ 55.666929][ T6044] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 55.669288][ T6044] CPU: 2 UID: 0 PID: 6044 Comm: syz.2.12 Not tainted syzkaller #0 PREEMPT(full) [ 55.672191][ T6044] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 55.675524][ T6044] Call Trace: [ 55.676649][ T6044] [ 55.677710][ T6044] dump_stack_lvl+0x100/0x190 [ 55.679297][ T6044] vpanic+0x552/0x970 [ 55.680641][ T6044] ? __pfx_vpanic+0x10/0x10 [ 55.682159][ T6044] panic+0xd1/0xe0 [ 55.683441][ T6044] ? __pfx_panic+0x10/0x10 [ 55.684930][ T6044] check_panic_on_warn.cold+0x19/0x34 [ 55.686701][ T6044] ? path_noexec+0x1cf/0x230 [ 55.688321][ T6044] __warn.cold+0x191/0x348 [ 55.689808][ T6044] __report_bug+0x296/0x3d0 [ 55.691336][ T6044] ? path_noexec+0x1cf/0x230 [ 55.692876][ T6044] ? __pfx___report_bug+0x10/0x10 [ 55.694554][ T6044] ? arch_get_unmapped_area_topdown+0x559/0xa50 [ 55.696614][ T6044] ? avc_has_perm_noaudit+0x11e/0x3b0 [ 55.698392][ T6044] ? path_noexec+0x1cf/0x230 [ 55.699931][ T6044] report_bug+0xb2/0x220 [ 55.701335][ T6044] ? path_noexec+0x1cf/0x230 [ 55.702863][ T6044] handle_bug+0x16a/0x2a0 [ 55.704314][ T6044] exc_invalid_op+0x17/0x50 [ 55.705820][ T6044] asm_exc_invalid_op+0x1a/0x20 [ 55.707434][ T6044] RIP: 0010:path_noexec+0x1cf/0x230 [ 55.709081][ T6044] Code: 58 31 ff 83 e3 02 48 89 de 48 d1 eb e8 9a d6 7d ff 83 e3 01 e8 b2 db 7d ff 89 d8 5b 5d 41 5c c3 cc cc cc cc e8 a2 db 7d ff 90 <0f> 0b 90 e9 46 ff ff ff e8 44 5f ea ff e9 a3 fe ff ff e8 3a 5f ea [ 55.715399][ T6044] RSP: 0018:ffffc90004597bd8 EFLAGS: 00010283 [ 55.717404][ T6044] RAX: 00000000000000cb RBX: 0000000000000000 RCX: ffffc900078b2000 [ 55.719986][ T6044] RDX: 0000000000080000 RSI: ffffffff828adbfe RDI: ffff888031fca4c0 [ 55.722555][ T6044] RBP: ffff88801fa87520 R08: 0000000000000007 R09: 0000000000000000 [ 55.725159][ T6044] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000080000 [ 55.727753][ T6044] R13: 0000000000000001 R14: ffff88803162e748 R15: 0000000000000000 [ 55.730343][ T6044] ? path_noexec+0x1ce/0x230 [ 55.731886][ T6044] ? path_noexec+0x1ce/0x230 [ 55.733438][ T6044] do_mmap+0x857/0x12f0 [ 55.734814][ T6044] ? __pfx_do_mmap+0x10/0x10 [ 55.736355][ T6044] ? __pfx_down_write_killable+0x10/0x10 [ 55.738164][ T6044] vm_mmap_pgoff+0x29e/0x470 [ 55.739705][ T6044] ? __pfx_vm_mmap_pgoff+0x10/0x10 [ 55.741427][ T6044] ? __fget_files+0x215/0x3d0 [ 55.743014][ T6044] ? __fget_files+0x21f/0x3d0 [ 55.744588][ T6044] ksys_mmap_pgoff+0x3c8/0x650 [ 55.746174][ T6044] ? __x64_sys_futex+0x34f/0x4d0 [ 55.747777][ T6044] ? __x64_sys_futex+0x358/0x4d0 [ 55.749390][ T6044] ? __pfx_ksys_mmap_pgoff+0x10/0x10 [ 55.751086][ T6044] ? xfd_validate_state+0x129/0x190 [ 55.752779][ T6044] __x64_sys_mmap+0x125/0x190 [ 55.754308][ T6044] do_syscall_64+0x106/0xf80 [ 55.755821][ T6044] ? clear_bhb_loop+0x40/0x90 [ 55.757346][ T6044] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 55.759290][ T6044] RIP: 0033:0x7fac1e99c799 [ 55.760767][ T6044] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 55.766947][ T6044] RSP: 002b:00007fac1f77a028 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 55.769632][ T6044] RAX: ffffffffffffffda RBX: 00007fac1ec15fa0 RCX: 00007fac1e99c799 [ 55.772136][ T6044] RDX: 0000000003000007 RSI: 0000000000003000 RDI: 0000200000000000 [ 55.774701][ T6044] RBP: 00007fac1ea32c99 R08: 0000000000000005 R09: 0000000000000000 [ 55.777306][ T6044] R10: 0000000000000011 R11: 0000000000000246 R12: 0000000000000000 [ 55.779885][ T6044] R13: 00007fac1ec16038 R14: 00007fac1ec15fa0 R15: 00007ffee21cf318 [ 55.782467][ T6044] [ 55.784049][ T6044] Kernel Offset: disabled [ 55.785474][ T6044] Rebooting in 86400 seconds..