last executing test programs: 3.380013066s ago: executing program 1 (id=60): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./debug\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./debug\x00', &(0x7f00000000c0)='debugfs\x00', 0x0, 0x0) write(0xffffffffffffffff, 0x0, 0x0) close(0xffffffffffffffff) syz_emit_vhci(0x0, 0x17) syz_emit_vhci(0x0, 0x16) nanosleep(0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./debug/bluetooth/6lowpan_control\x00', 0x2, 0x0) write(r0, &(0x7f0000000500)='connect 22:aa:aa:aa:aa:aa 1', 0x1b) write(r0, 0x0, 0x0) write(r0, 0x0, 0x0) 3.319693853s ago: executing program 0 (id=61): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./dev\x00', 0x1ff) mount(&(0x7f0000000140)=@filename='devtmpfs\x00', &(0x7f0000000180)='./dev\x00', &(0x7f00000001c0)='devtmpfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./sys/module/md_mod/parameters/new_array\x00', 0x1, 0x0) write(r0, &(0x7f0000000240)='md1\n\x00', 0x4) close(r0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./dev/md1\x00', 0x4002, 0x0) ioctl(r1, 0x40480923, &(0x7f0000000300)="000000000000000000000000000000000100000000040000020000000200000001000000010000000000000000000000020000000200"/72) ioctl(r1, 0x40140921, &(0x7f0000000400)="0000000001000000020000000000000006000000") ioctl(r1, 0x40140921, &(0x7f0000000440)="0100000001000000030000000100000006000000") ioctl(r1, 0x400c0930, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000500)='./sys/block/md1/md/sync_action\x00', 0x1, 0x0) write(r2, &(0x7f0000000540)='idle\n\x00', 0x5) write(r2, &(0x7f0000000540), 0x0) close(r2) 3.207677163s ago: executing program 0 (id=62): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(&(0x7f0000000100)=@filename='sysfs\x00', &(0x7f0000000200)='./sys\x00', &(0x7f0000000300)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./sys/module/md_mod/parameters/new_array\x00', 0x1, 0x0) write(r0, &(0x7f0000000500), 0x0) close(r0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./sys/block/md0/md/metadata_version\x00', 0x1, 0x0) write(r1, &(0x7f0000000700)='none\n', 0x5) close(r1) r2 = openat(0xffffffffffffff9c, &(0x7f0000000800)='./sys/block/md0/md/level\x00', 0x1, 0x0) write(r2, &(0x7f0000000900)='raid1\n', 0x6) close(r2) r3 = openat(0xffffffffffffff9c, &(0x7f0000000a00)='./sys/block/md0/md/raid_disks\x00', 0x1, 0x0) write(r3, &(0x7f0000000b00)='2\n', 0x2) close(r3) openat(0xffffffffffffff9c, &(0x7f0000000c00)='./sys/block/md0/md/new_dev\x00', 0x1, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000e00)='./sys/block/md0/md/dev-ram0/slot\x00', 0x1, 0x0) write(r4, &(0x7f0000000f00)='0\n', 0x2) write(0xffffffffffffffff, &(0x7f0000001100)='active\n', 0x7) close(0xffffffffffffffff) r5 = openat(0xffffffffffffff9c, &(0x7f0000001200)='./sys/block/md0/md/new_dev\x00', 0x1, 0x0) write(r5, &(0x7f0000001300)='1:1\n', 0x4) close(r5) r6 = openat(0xffffffffffffff9c, &(0x7f0000001400)='./sys/block/md0/md/dev-ram1/slot\x00', 0x1, 0x0) write(r6, &(0x7f0000001500)='1\n', 0x2) close(r6) 3.068551082s ago: executing program 0 (id=63): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./sys\x00', &(0x7f0000000080)='sysfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000000100)='./dev\x00', &(0x7f0000000140)='devtmpfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./sys/module/md_mod/parameters/new_array\x00', 0x1, 0x0) write(r0, &(0x7f0000000200)='md0\x00', 0x4) close(r0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./img\x00', 0x42, 0x1b6) ftruncate(r1, 0x2000000) pwrite64(r1, &(0x7f0000000280)="6269746d04000000001000000500000000000000", 0x14, 0x1000) r2 = openat(0xffffffffffffff9c, &(0x7f0000000640)='./sys/block/md0/md/dev-loop0/size\x00', 0x0, 0x0) read(r2, &(0x7f0000000920)=""/32, 0x20) 3.068276372s ago: executing program 0 (id=64): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./sys\x00', &(0x7f0000000080)='sysfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000000100)='./dev\x00', &(0x7f0000000140)='devtmpfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./sys/module/md_mod/parameters/new_array\x00', 0x1, 0x0) write(r0, &(0x7f0000000200)='md0\x00', 0x4) close(r0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./img\x00', 0x42, 0x1b6) ftruncate(r1, 0x2000000) pwrite64(r1, &(0x7f0000000280)="6269746d04000000001000000500000000000000", 0x14, 0x1000) r2 = syz_open_dev$loop(&(0x7f00000002c0), 0x0, 0x2) ioctl$LOOP_SET_FD(r2, 0x4c00, r1) r3 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./sys/block/md0/md/dev-loop0/offset\x00', 0x0, 0x0) read(r3, &(0x7f0000000900)=""/32, 0x20) 2.989650478s ago: executing program 0 (id=65): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(&(0x7f0000000100)=@filename='sysfs\x00', &(0x7f0000000200)='./sys\x00', 0x0, 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./sys/module/md_mod/parameters/new_array\x00', 0x1, 0x0) write(r0, &(0x7f0000000500)='md0\n', 0x4) close(r0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./sys/block/md0/md/metadata_version\x00', 0x1, 0x0) write(r1, &(0x7f0000000700)='none\n', 0x5) close(r1) r2 = openat(0xffffffffffffff9c, &(0x7f0000000800)='./sys/block/md0/md/level\x00', 0x1, 0x0) write(r2, &(0x7f0000000900)='raid1\n', 0x6) close(r2) r3 = openat(0xffffffffffffff9c, &(0x7f0000000a00)='./sys/block/md0/md/raid_disks\x00', 0x1, 0x0) write(r3, &(0x7f0000000b00)='2\n', 0x2) close(r3) r4 = openat(0xffffffffffffff9c, &(0x7f0000000c00)='./sys/block/md0/md/new_dev\x00', 0x1, 0x0) write(r4, &(0x7f0000000d00)='1:0\n', 0x4) close(r4) r5 = openat(0xffffffffffffff9c, &(0x7f0000000e00)='./sys/block/md0/md/dev-ram0/slot\x00', 0x1, 0x0) write(r5, &(0x7f0000000f00)='0\n', 0x2) close(r5) r6 = openat(0xffffffffffffff9c, &(0x7f0000001000)='./sys/block/md0/md/array_state\x00', 0x1, 0x0) write(r6, &(0x7f0000001100)='active\n', 0x7) close(r6) r7 = openat(0xffffffffffffff9c, &(0x7f0000001200)='./sys/block/md0/md/new_dev\x00', 0x1, 0x0) write(r7, &(0x7f0000001300)='1:1\n', 0x4) close(r7) r8 = openat(0xffffffffffffff9c, &(0x7f0000001400)='./sys/block/md0/md/dev-ram1/slot\x00', 0x1, 0x0) write(r8, &(0x7f0000001500)='1\n', 0x2) close(r8) 2.930611268s ago: executing program 0 (id=66): r0 = syz_usb_connect(0x3, 0x40, &(0x7f0000000000)=ANY=[@ANYBLOB="12010002000000407205feca00010000000109022e0001010080fa0904000004ff00000007050102000200070581020002000705020200020007058202000200"], 0x0) syz_usb_ep_read(r0, 0x1, 0x0, 0x0) syz_usb_ep_write(r0, 0x81, 0x40, &(0x7f0000000100)="900100"/64) syz_usb_ep_write(r0, 0x81, 0x40, &(0x7f0000000200)="9101000000112233445500"/64) syz_usb_ep_read(r0, 0x1, 0x0, 0x0) nanosleep(&(0x7f0000000300)={0x0, 0x5f5e100}, 0x0) r1 = socket(0x8, 0x2, 0x0) setsockopt$sock_int(r1, 0x1, 0x8, &(0x7f0000000400), 0x4) setsockopt(r1, 0x108, 0x42020054, &(0x7f0000000500)="010000000000000000000000000000000000000000000000000000000000000000000000000000000100000000000000000000000000000000000000000000000000000000000000000000000000000005000000", 0x54) connect(r1, &(0x7f0000000600), 0xc) syz_usb_ep_write(r0, 0x82, 0x38, &(0x7f0000000700)="00000202000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000e5a883e5000000") syz_usb_ep_write(r0, 0x82, 0x38, &(0x7f0000000700)="00000202000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000e5a883e5000000") 2.847091162s ago: executing program 1 (id=69): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./sys\x00', &(0x7f0000000080)='sysfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000000100)='./dev\x00', &(0x7f0000000140)='devtmpfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./sys/module/md_mod/parameters/new_array\x00', 0x1, 0x0) write(r0, &(0x7f0000000200)='md0\x00', 0x4) close(r0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./img\x00', 0x42, 0x1b6) ftruncate(r1, 0x2000000) pwrite64(r1, &(0x7f0000000280)="6269746d04000000001000000500000000000000", 0x14, 0x1000) r2 = syz_open_dev$loop(&(0x7f00000002c0), 0x0, 0x2) ioctl$LOOP_SET_FD(r2, 0x4c00, r1) r3 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./dev/md0\x00', 0x4002, 0x0) ioctl(r3, 0x40480923, &(0x7f0000000400)="000000000000000000000000000000000100000000040000010000000100000000000000010000000000000000000000010000000100"/72) ioctl(r3, 0x40140921, &(0x7f0000000500)="0000000007000000000000000000000006000000") r4 = openat(0xffffffffffffff9c, &(0x7f0000000680)='./sys/block/md0/md/dev-loop0/slot\x00', 0x0, 0x0) read(r4, &(0x7f0000000940)=""/32, 0x20) 2.690023493s ago: executing program 1 (id=70): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./dev\x00', 0x1ff) mount(&(0x7f0000000140)=@filename='devtmpfs\x00', &(0x7f0000000180)='./dev\x00', &(0x7f00000001c0)='devtmpfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./sys/module/md_mod/parameters/new_array\x00', 0x1, 0x0) write(r0, &(0x7f0000000240)='md1\n\x00', 0x4) close(r0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./dev/md1\x00', 0x4002, 0x0) ioctl(r1, 0x40480923, &(0x7f0000000300)="000000000000000000000000000000000100000000040000020000000200000001000000010000000000000000000000020000000200"/72) ioctl(r1, 0x40140921, &(0x7f0000000400)="0000000001000000020000000000000006000000") ioctl(r1, 0x40140921, &(0x7f0000000440)="0100000001000000030000000100000006000000") ioctl(r1, 0x400c0930, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000500)='./sys/block/md1/md/sync_action\x00', 0x1, 0x0) write(r2, &(0x7f0000000540)='idle\n\x00', 0x5) write(r2, &(0x7f0000000540), 0x0) close(r2) 2.540627774s ago: executing program 1 (id=75): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./sys\x00', &(0x7f0000000080)='sysfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000000100)='./dev\x00', &(0x7f0000000140)='devtmpfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./sys/module/md_mod/parameters/new_array\x00', 0x1, 0x0) write(r0, &(0x7f0000000200)='md0\x00', 0x4) close(r0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./img\x00', 0x42, 0x1b6) ftruncate(r1, 0x2000000) pwrite64(r1, &(0x7f0000000280)="6269746d04000000001000000500000000000000", 0x14, 0x1000) syz_open_dev$loop(&(0x7f00000002c0), 0x0, 0x2) r2 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./sys/block/md0/md/dev-loop0/offset\x00', 0x0, 0x0) read(r2, &(0x7f0000000900)=""/32, 0x20) 2.45093006s ago: executing program 1 (id=77): r0 = socket$inet(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000080)={'dummy0\x00'}) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000240)={'dummy0\x00', 0x1}) ioctl(r0, 0x8914, &(0x7f0000000280)="626f6e643100000000000000000000000100") ioctl(r0, 0x8983, &(0x7f0000000300)="00000000626f6e6431000000000000000000000000000000000000000100"/54) ioctl(r0, 0x8914, &(0x7f0000000340)="626f6e64312e310000000000000000000100") ioctl(r0, 0x8924, &(0x7f0000000380)="626f6e643100000000000000000000000100001122334455") 1.530241147s ago: executing program 1 (id=79): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(&(0x7f0000000100)=@filename='none\x00', &(0x7f0000000000)='./sys\x00', &(0x7f0000000200)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./sys/module/suspend/parameters/pm_test_delay\x00', 0x2, 0x0) write(r0, &(0x7f0000000400)='0\n', 0x2) close(r0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000500)='./sys/power/pm_test\x00', 0x2, 0x0) write(r1, &(0x7f0000000600)='devices\n', 0x8) close(r1) r2 = openat(0xffffffffffffff9c, &(0x7f0000000700)='./sys/power/state\x00', 0x2, 0x0) write(r2, &(0x7f0000000800)='freeze\n', 0x7) close(r2) r3 = openat(0xffffffffffffff9c, &(0x7f0000000900)='./sys/class/scsi_host/host0/scan\x00', 0x2, 0x0) write(r3, &(0x7f0000000a00)='- - -\n', 0x6) close(r3) nanosleep(&(0x7f0000000b00)={0x1}, 0x0) 1.270437614s ago: executing program 2 (id=82): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./sys\x00', &(0x7f0000000080)='sysfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000000100)='./dev\x00', &(0x7f0000000140)='devtmpfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./sys/module/md_mod/parameters/new_array\x00', 0x1, 0x0) write(r0, &(0x7f0000000200)='md0\x00', 0x4) close(r0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./img\x00', 0x42, 0x1b6) ftruncate(r1, 0x2000000) pwrite64(r1, &(0x7f0000000280)="6269746d04000000001000000500000000000000", 0x14, 0x1000) r2 = syz_open_dev$loop(&(0x7f00000002c0), 0x0, 0x2) ioctl$LOOP_SET_FD(r2, 0x4c00, r1) r3 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./dev/md0\x00', 0x4002, 0x0) ioctl(r3, 0x40480923, &(0x7f0000000400)="000000000000000000000000000000000100000000040000010000000100000000000000010000000000000000000000010000000100"/72) ioctl(r3, 0x40140921, &(0x7f0000000500)="0000000007000000000000000000000006000000") r4 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./sys/block/md0/md/dev-loop0/offset\x00', 0x0, 0x0) read(r4, &(0x7f0000000900)=""/32, 0x20) openat(0xffffffffffffff9c, &(0x7f0000000640)='./sys/block/md0/md/dev-loop0/size\x00', 0x0, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f00000006c0)='./sys/block/md0/md/dev-loop0/state\x00', 0x0, 0x0) read(r5, &(0x7f0000000960)=""/32, 0x20) 1.107292378s ago: executing program 2 (id=85): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./dev\x00', 0x1ff) mount(&(0x7f0000000140)=@filename='devtmpfs\x00', &(0x7f0000000180)='./dev\x00', &(0x7f00000001c0)='devtmpfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./sys/module/md_mod/parameters/new_array\x00', 0x1, 0x0) write(r0, &(0x7f0000000240)='md1\n\x00', 0x4) close(r0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./dev/md1\x00', 0x4002, 0x0) ioctl(r1, 0x40480923, &(0x7f0000000300)="000000000000000000000000000000000100000000040000020000000200000001000000010000000000000000000000020000000200"/72) ioctl(r1, 0x40140921, &(0x7f0000000400)="0000000001000000020000000000000006000000") ioctl(r1, 0x40140921, &(0x7f0000000440)="0100000001000000030000000100000006000000") ioctl(r1, 0x400c0930, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000500)='./sys/block/md1/md/sync_action\x00', 0x1, 0x0) write(r2, &(0x7f0000000540)='idle\n\x00', 0x5) write(r2, &(0x7f0000000540)='chec', 0x4) close(r2) 1.10691823s ago: executing program 3 (id=86): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(&(0x7f0000000100)=@filename='sysfs\x00', &(0x7f0000000200)='./sys\x00', &(0x7f0000000300)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./sys/module/md_mod/parameters/new_array\x00', 0x1, 0x0) write(r0, &(0x7f0000000500)='md', 0x2) close(r0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./sys/block/md0/md/metadata_version\x00', 0x1, 0x0) write(r1, &(0x7f0000000700)='none\n', 0x5) close(r1) r2 = openat(0xffffffffffffff9c, &(0x7f0000000800)='./sys/block/md0/md/level\x00', 0x1, 0x0) write(r2, &(0x7f0000000900)='raid1\n', 0x6) close(r2) r3 = openat(0xffffffffffffff9c, &(0x7f0000000a00)='./sys/block/md0/md/raid_disks\x00', 0x1, 0x0) write(r3, &(0x7f0000000b00)='2\n', 0x2) close(r3) openat(0xffffffffffffff9c, &(0x7f0000000c00)='./sys/block/md0/md/new_dev\x00', 0x1, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000e00)='./sys/block/md0/md/dev-ram0/slot\x00', 0x1, 0x0) write(r4, &(0x7f0000000f00)='0\n', 0x2) write(0xffffffffffffffff, &(0x7f0000001100)='active\n', 0x7) close(0xffffffffffffffff) r5 = openat(0xffffffffffffff9c, &(0x7f0000001200)='./sys/block/md0/md/new_dev\x00', 0x1, 0x0) write(r5, &(0x7f0000001300)='1:1\n', 0x4) close(r5) r6 = openat(0xffffffffffffff9c, &(0x7f0000001400)='./sys/block/md0/md/dev-ram1/slot\x00', 0x1, 0x0) write(r6, &(0x7f0000001500)='1\n', 0x2) close(r6) 948.131705ms ago: executing program 2 (id=87): mkdir(&(0x7f0000000000)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./proc\x00', &(0x7f0000000040)='proc\x00', 0x0, 0x0) mkdir(&(0x7f0000000080)='./nfsd\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./nfsd\x00', &(0x7f0000000100)='nfsd\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./proc/net/rpc/auth.unix.ip/channel\x00', 0x2, 0x0) write(r0, &(0x7f0000000280)='nfsd 127.0.0.1 2147483647 localhost\n\x00', 0x24) close(r0) r1 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./proc/net/rpc/nfsd.export/channel\x00', 0x2, 0x0) write(r1, &(0x7f0000000300)='localhost /\n\x00', 0xc) 940.097388ms ago: executing program 2 (id=88): r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000000)=@filter={'filter\x00', 0xe, 0x4, 0x260, 0xffffffff, 0x0, 0x130, 0x1c8, 0xffffffff, 0xffffffff, 0x98, 0x130, 0x1c8, 0xffffffff, 0x4, 0x0, {[{{@ip={@empty, @empty, 0x0, 0x0, '\x00', '\x00', {}, {}, 0x6}, 0x0, 0x70, 0x98}, @common=@inet=@SYNPROXY={0x28, 'SYNPROXY\x00', 0x0, {0xf, 0x7, 0x5b4}}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x2c0) syz_emit_ethernet(0x42, &(0x7f00000002c0)={@local, @remote, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x34, 0x0, 0x0, 0x0, 0x6, 0x0, @remote, @local}, {{0x1000, 0x2000, 0x1, 0x0, 0x0, 0x0, 0x8, 0x2, 0xffff, 0x0, 0x0, {[@timestamp={0x8, 0xa, 0x11223344}]}}}}}}}, 0x0) 866.415245ms ago: executing program 3 (id=89): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000100)={0x1f, 0xffff, 0x3}, 0x6) write(r0, &(0x7f0000000000)="560000002a00000000000000000101000100"/49, 0x30) write(r0, &(0x7f0000000200)="560001002a00000000000000000101000100"/49, 0x30) write(r0, &(0x7f0000000400)="560002002a00000000000000000101000100"/49, 0x30) write(r0, &(0x7f0000000600)="560003002a00000000000000000101000100"/49, 0x30) 865.747488ms ago: executing program 2 (id=90): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./proc\x00', &(0x7f0000000080)='proc\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./proc/sys/net/tipc/max_tfms\x00', 0x2, 0x0) write(r0, &(0x7f0000000100)='65521\n', 0x6) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000180), r1) sendmsg$TIPC_NL_NET_SET(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)={0x20, r2, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_NET={0xc, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ADDR={0x8, 0x2, 0x1}]}]}, 0x20}}, 0x0) sendmsg$TIPC_NL_KEY_SET(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000380)={0x68, r2, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_NODE={0x54, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_ID={0x14, 0x3, '1234567890123456'}, @TIPC_NLA_NODE_KEY={0x3c, 0x4, {'gcm(aes)\x00', 0x14, "00112233445566778899aabbccddeeff00112233"}}]}]}, 0x68}}, 0x0) nanosleep(&(0x7f0000000400)={0xb}, 0x0) 799.148326ms ago: executing program 3 (id=91): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)=@newqdisc={0x30, 0x24, 0x405, 0x0, 0x0, {0x0, 0x0, 0x0, 0x1, {0x0, 0xffff}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_ingress={0xc}]}, 0x30}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000500)=@newtfilter={0x38, 0x2c, 0x405, 0x0, 0x0, {0x0, 0x0, 0x0, 0x1, {0x1}, {0xfff1, 0xffff}, {0x300, 0x1}}, [@filter_kind_options=@f_fw={{0x7}, {0xc, 0x2, [@TCA_FW_CLASSID={0x8, 0x1, {0x1, 0x1}}]}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000800)=@deltfilter={0x38, 0x2c, 0x5, 0x0, 0x0, {0x0, 0x0, 0x0, 0x1, {0x1}, {0xfff1, 0xffff}, {0x300, 0x1}}, [@filter_kind_options=@f_fw={{0x7}, {0xc, 0x2, [@TCA_FW_CLASSID={0x8, 0x1, {0x1, 0x1}}]}}]}, 0x38}}, 0x0) 798.706636ms ago: executing program 3 (id=92): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(&(0x7f0000000040)=@filename='none\x00', &(0x7f0000000080)='./sys\x00', &(0x7f00000000c0)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./sys/bus/platform/devices/pcspkr\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000200)='./sys/bus/platform/devices/serial8250\x00', 0x0, 0x0) r1 = openat(r0, &(0x7f0000000300)='driver_override\x00', 0x1, 0x0) write(r1, &(0x7f0000000400)='r8a66597_udc\x00', 0xd) r2 = openat(0xffffffffffffff9c, &(0x7f0000000500)='./sys/bus/platform/drivers/r8a66597_udc\x00', 0x0, 0x0) r3 = openat(r2, &(0x7f0000000600)='bind\x00', 0x1, 0x0) write(r3, &(0x7f0000000700)='pcspkr\x00', 0x7) 749.386965ms ago: executing program 3 (id=93): setns(0xc9, 0x0) r0 = socket(0x1f, 0x3, 0x1) bind(r0, &(0x7f0000000300)=@generic={0x1f, "ffff0300"}, 0x6) write(r0, &(0x7f0000000400)="4a00ffff11003ee0b4fdddd685986a49e00588f1ba6f01", 0x17) syz_emit_vhci(&(0x7f0000000500)=@HCI_EVENT_PKT={0x4, @hci_ev_cmd_complete={{0xe, 0xc}, @hci_rp_read_local_features={{0x1}, {0x0, "ffffffffffffffff"}}}}, 0xf) syz_emit_vhci(&(0x7f0000000510)=@HCI_EVENT_PKT={0x4, @hci_ev_cmd_complete={{0xe, 0xc}, @hci_rp_le_read_local_features={{0x1}, {0x0, "ffffffffffffffff"}}}}, 0xf) syz_emit_vhci(&(0x7f0000000520)=@HCI_EVENT_PKT={0x4, @hci_ev_cmd_complete={{0xe, 0xa}, @hci_rp_le_read_buffer_size_v2={{0x1}, {0x0, 0x100, 0xa, 0x100, 0xa}}}}, 0xd) nanosleep(&(0x7f0000000600)={0x0, 0x5f5e100}, 0x0) setns(0xc9, 0x0) nanosleep(&(0x7f0000000b00)={0x0, 0x2faf080}, 0x0) r1 = socket(0x1f, 0x5, 0x8) setsockopt$sock_timeval(r1, 0x1, 0x15, &(0x7f0000000700)={0x0, 0x3e8}, 0x10) bind(r1, &(0x7f0000000800)=@generic={0x1f, "0000000000000100"}, 0xa) setsockopt(r1, 0x112, 0x7, &(0x7f0000000750)="01000000", 0x4) connect(r1, &(0x7f0000000900)=@generic={0x1f, "0102030405060100"}, 0xa) nanosleep(&(0x7f0000000a00)={0x0, 0x5f5e100}, 0x0) 2.92901ms ago: executing program 3 (id=94): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000100)='./sys\x00', &(0x7f0000000200)='sysfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000300)='./debug\x00', 0x1ff) mount(0x0, &(0x7f0000000300)='./debug\x00', &(0x7f0000000400)='debugfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000500)='./sys/bus/netdevsim/new_device\x00', 0x1, 0x0) write(r0, &(0x7f0000000600)='100 1 1\x00', 0x7) close(r0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000700)='./debug/netdevsim/netdevsim100/take_snapshot\x00', 0x1, 0x0) write(r1, &(0x7f0000000800)='1\x00', 0x2) close(r1) r2 = openat(0xffffffffffffff9c, &(0x7f0000000900)='./sys/bus/netdevsim/del_device\x00', 0x1, 0x0) write(r2, &(0x7f0000000a00)='100\x00', 0x4) close(r2) 0s ago: executing program 2 (id=95): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000080)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./sys/module/cfg80211/parameters/bss_entries_limit\x00', 0x2, 0x0) write(r0, &(0x7f0000000200)='1\n', 0x2) close(r0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000680), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000003540)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r1, &(0x7f0000003740)={0x0, 0x0, &(0x7f0000003700)={&(0x7f0000000080)={0x54, r2, 0x1, 0x70bd27, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_FRAME={0x35, 0x33, @beacon={{{0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x1}, {0xe}, @broadcast, @device_a, @random="2668e8a3b755", {0x8, 0x6}}, 0x1, @random=0x5, 0x7683, @void, @void, @void, @val={0x4, 0x6, {0x2, 0x7, 0x2, 0x8337}}, @void, @val={0x5, 0x3, {0xf1, 0xff, 0x1}}, @void, @void, @void, @void, @void, @void, @void}}]}, 0x54}, 0x1, 0x0, 0x0, 0x20040040}, 0x8800) nanosleep(&(0x7f0000000800)={0x0, 0x2faf080}, 0x0) sendmsg$NL80211_CMD_FRAME(r1, &(0x7f0000003840)={0x0, 0x0, &(0x7f0000003800)={&(0x7f0000000880)={0x54, r2, 0x1, 0x70bd27, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_FRAME={0x35, 0x33, @beacon={{{0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x1}, {0xe}, @broadcast, @device_b, @random="2668e8a3b756", {0x8, 0x6}}, 0x1, @random=0x5, 0x7683, @void, @void, @void, @val={0x4, 0x6, {0x2, 0x7, 0x2, 0x8337}}, @void, @val={0x5, 0x3, {0xf1, 0xff, 0x1}}, @void, @void, @void, @void, @void, @void, @void}}]}, 0x54}, 0x1, 0x0, 0x0, 0x20040040}, 0x8800) nanosleep(&(0x7f0000000800)={0x0, 0x2faf080}, 0x0) kernel console output (not intermixed with test programs): Warning: Permanently added '[localhost]:8514' (ED25519) to the list of known hosts. [ 39.915464][ T43] kauditd_printk_skb: 17 callbacks suppressed [ 39.915478][ T43] audit: type=1400 audit(1790053388.614:138): avc: denied { name_bind } for pid=5718 comm="sshd-session" src=30000 scontext=system_u:system_r:sshd_t tcontext=system_u:object_r:unreserved_port_t tclass=tcp_socket permissive=1 [ 39.959369][ T43] audit: type=1400 audit(1790053388.654:139): avc: denied { execute } for pid=5719 comm="sh" name="syz-executor" dev="sda1" ino=2020 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:etc_runtime_t tclass=file permissive=1 [ 39.960179][ T43] audit: type=1400 audit(1790053388.654:140): avc: denied { execute_no_trans } for pid=5719 comm="sh" path="/syz-executor" dev="sda1" ino=2020 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:etc_runtime_t tclass=file permissive=1 [ 42.655943][ T43] audit: type=1400 audit(1790053391.354:141): avc: denied { mounton } for pid=5719 comm="syz-executor" path="/syzcgroup/unified" dev="sda1" ino=2022 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1 [ 42.659531][ T43] audit: type=1400 audit(1790053391.354:142): avc: denied { mount } for pid=5719 comm="syz-executor" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 42.660371][ T5719] cgroup: Unknown subsys name 'net' [ 42.661428][ T43] audit: type=1400 audit(1790053391.354:143): avc: denied { unmount } for pid=5719 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 42.855169][ T5719] cgroup: Unknown subsys name 'cpuset' [ 42.857831][ T5719] cgroup: Unknown subsys name 'rlimit' [ 43.016322][ T43] audit: type=1400 audit(1790053391.714:144): avc: denied { setattr } for pid=5719 comm="syz-executor" name="raw-gadget" dev="devtmpfs" ino=848 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 43.016852][ T43] audit: type=1400 audit(1790053391.714:145): avc: denied { create } for pid=5719 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 43.017094][ T43] audit: type=1400 audit(1790053391.714:146): avc: denied { write } for pid=5719 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 43.017436][ T43] audit: type=1400 audit(1790053391.714:147): avc: denied { read } for pid=5719 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 43.070631][ T5725] SELinux: Context root:object_r:swapfile_t is not valid (left unmapped). Setting up swapspace version 1, size = 127995904 bytes [ 43.751481][ T5719] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 47.472348][ T43] kauditd_printk_skb: 10 callbacks suppressed [ 47.472361][ T43] audit: type=1400 audit(1790053396.164:158): avc: denied { execmem } for pid=5727 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 47.649165][ T43] audit: type=1400 audit(1790053396.344:159): avc: denied { create } for pid=5731 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 47.649568][ T43] audit: type=1400 audit(1790053396.344:160): avc: denied { read write } for pid=5731 comm="syz-executor" name="vhci" dev="devtmpfs" ino=1290 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 47.649953][ T43] audit: type=1400 audit(1790053396.344:161): avc: denied { open } for pid=5731 comm="syz-executor" path="/dev/vhci" dev="devtmpfs" ino=1290 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 47.659280][ T43] audit: type=1400 audit(1790053396.354:162): avc: denied { ioctl } for pid=5732 comm="syz-executor" path="socket:[7314]" dev="sockfs" ino=7314 ioctlcmd=0x48c9 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 47.671760][ T5733] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 47.672892][ T5733] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 47.690024][ T5738] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 47.690451][ T5738] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 47.692328][ T5741] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 47.694552][ T5741] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 47.695744][ T5741] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 47.696155][ T5741] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 47.698001][ T5741] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 47.698243][ T5741] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 47.699130][ T5741] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 47.701658][ T5741] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 47.701899][ T5741] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 47.702842][ T5741] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 47.703132][ T5741] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 47.703606][ T5741] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 47.704124][ T5745] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 47.705722][ T5741] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 47.710711][ T43] audit: type=1400 audit(1790053396.404:163): avc: denied { read } for pid=5732 comm="syz-executor" dev="nsfs" ino=4026531833 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 47.713619][ T43] audit: type=1400 audit(1790053396.404:164): avc: denied { open } for pid=5732 comm="syz-executor" path="net:[4026531833]" dev="nsfs" ino=4026531833 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 47.717598][ T5741] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 47.718000][ T5741] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 47.721549][ T43] audit: type=1400 audit(1790053396.414:165): avc: denied { mounton } for pid=5732 comm="syz-executor" path="/" dev="sda1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:root_t tclass=dir permissive=1 [ 47.724923][ T43] audit: type=1400 audit(1790053396.424:166): avc: denied { module_request } for pid=5732 comm="syz-executor" kmod="netdev-nr3" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1 [ 47.747910][ T43] audit: type=1400 audit(1790053396.444:167): avc: denied { sys_module } for pid=5732 comm="syz-executor" capability=16 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 48.301586][ T5734] bridge0: port 1(bridge_slave_0) entered blocking state [ 48.301666][ T5734] bridge0: port 1(bridge_slave_0) entered disabled state [ 48.301725][ T5734] bridge_slave_0: entered allmulticast mode [ 48.303099][ T5734] bridge_slave_0: entered promiscuous mode [ 48.330564][ T5734] bridge0: port 2(bridge_slave_1) entered blocking state [ 48.330684][ T5734] bridge0: port 2(bridge_slave_1) entered disabled state [ 48.330779][ T5734] bridge_slave_1: entered allmulticast mode [ 48.331986][ T5734] bridge_slave_1: entered promiscuous mode [ 48.342897][ T5731] bridge0: port 1(bridge_slave_0) entered blocking state [ 48.342992][ T5731] bridge0: port 1(bridge_slave_0) entered disabled state [ 48.343083][ T5731] bridge_slave_0: entered allmulticast mode [ 48.343916][ T5731] bridge_slave_0: entered promiscuous mode [ 48.364212][ T5732] bridge0: port 1(bridge_slave_0) entered blocking state [ 48.364283][ T5732] bridge0: port 1(bridge_slave_0) entered disabled state [ 48.364413][ T5732] bridge_slave_0: entered allmulticast mode [ 48.366316][ T5732] bridge_slave_0: entered promiscuous mode [ 48.378316][ T5731] bridge0: port 2(bridge_slave_1) entered blocking state [ 48.378500][ T5731] bridge0: port 2(bridge_slave_1) entered disabled state [ 48.378814][ T5731] bridge_slave_1: entered allmulticast mode [ 48.380012][ T5731] bridge_slave_1: entered promiscuous mode [ 48.390655][ T5732] bridge0: port 2(bridge_slave_1) entered blocking state [ 48.390788][ T5732] bridge0: port 2(bridge_slave_1) entered disabled state [ 48.391013][ T5732] bridge_slave_1: entered allmulticast mode [ 48.392544][ T5732] bridge_slave_1: entered promiscuous mode [ 48.442987][ T5734] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 48.444994][ T5732] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 48.453206][ T5734] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 48.467291][ T5732] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 48.468671][ T5731] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 48.479672][ T5740] bridge0: port 1(bridge_slave_0) entered blocking state [ 48.479795][ T5740] bridge0: port 1(bridge_slave_0) entered disabled state [ 48.479876][ T5740] bridge_slave_0: entered allmulticast mode [ 48.480589][ T5740] bridge_slave_0: entered promiscuous mode [ 48.491440][ T5731] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 48.492512][ T5734] team0: Port device team_slave_0 added [ 48.499613][ T5732] team0: Port device team_slave_0 added [ 48.500866][ T5732] team0: Port device team_slave_1 added [ 48.501075][ T5740] bridge0: port 2(bridge_slave_1) entered blocking state [ 48.501142][ T5740] bridge0: port 2(bridge_slave_1) entered disabled state [ 48.501359][ T5740] bridge_slave_1: entered allmulticast mode [ 48.502105][ T5740] bridge_slave_1: entered promiscuous mode [ 48.511361][ T5734] team0: Port device team_slave_1 added [ 48.557626][ T5731] team0: Port device team_slave_0 added [ 48.558050][ T5734] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 48.558059][ T5734] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 48.558071][ T5734] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 48.559671][ T5731] team0: Port device team_slave_1 added [ 48.560025][ T5732] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 48.560032][ T5732] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 48.560044][ T5732] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 48.563037][ T5740] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 48.575320][ T5734] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 48.575329][ T5734] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 48.575342][ T5734] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 48.580812][ T5732] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 48.580820][ T5732] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 48.580833][ T5732] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 48.582428][ T5740] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 48.586990][ T5731] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 48.586998][ T5731] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 48.587011][ T5731] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 48.588242][ T5731] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 48.588250][ T5731] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 48.588261][ T5731] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 48.603831][ T5740] team0: Port device team_slave_0 added [ 48.620630][ T5740] team0: Port device team_slave_1 added [ 48.649101][ T5734] hsr_slave_0: entered promiscuous mode [ 48.649651][ T5734] hsr_slave_1: entered promiscuous mode [ 48.662546][ T5732] hsr_slave_0: entered promiscuous mode [ 48.663339][ T5732] hsr_slave_1: entered promiscuous mode [ 48.663952][ T5732] debugfs: 'hsr0' already exists in 'hsr' [ 48.664024][ T5732] Cannot create hsr debugfs directory [ 48.683015][ T5740] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 48.683025][ T5740] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 48.683037][ T5740] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 48.688332][ T5731] hsr_slave_0: entered promiscuous mode [ 48.689811][ T5731] hsr_slave_1: entered promiscuous mode [ 48.690333][ T5731] debugfs: 'hsr0' already exists in 'hsr' [ 48.690349][ T5731] Cannot create hsr debugfs directory [ 48.698041][ T5740] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 48.698051][ T5740] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 48.698070][ T5740] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 48.807460][ T5740] hsr_slave_0: entered promiscuous mode [ 48.807935][ T5740] hsr_slave_1: entered promiscuous mode [ 48.808251][ T5740] debugfs: 'hsr0' already exists in 'hsr' [ 48.808262][ T5740] Cannot create hsr debugfs directory [ 49.011014][ T5734] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 49.017979][ T5734] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 49.022024][ T5734] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 49.026267][ T5734] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 49.033120][ T5734] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 49.036272][ T5734] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 49.037263][ T5734] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 49.040143][ T5734] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 49.069927][ T5732] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 49.071898][ T5732] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 49.072666][ T5732] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 49.077479][ T5732] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 49.084067][ T5734] bridge0: port 2(bridge_slave_1) entered blocking state [ 49.084143][ T5734] bridge0: port 2(bridge_slave_1) entered forwarding state [ 49.084438][ T5734] bridge0: port 1(bridge_slave_0) entered blocking state [ 49.084694][ T5734] bridge0: port 1(bridge_slave_0) entered forwarding state [ 49.086309][ T5732] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 49.089548][ T5732] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 49.090176][ T5732] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 49.092070][ T5732] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 49.122597][ T5732] bridge0: port 2(bridge_slave_1) entered blocking state [ 49.122953][ T5732] bridge0: port 2(bridge_slave_1) entered forwarding state [ 49.123058][ T5732] bridge0: port 1(bridge_slave_0) entered blocking state [ 49.123100][ T5732] bridge0: port 1(bridge_slave_0) entered forwarding state [ 49.147834][ T5731] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 49.151714][ T5731] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 49.159391][ T5731] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 49.161081][ T5731] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 49.163656][ T5731] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 49.166852][ T5731] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 49.177154][ T5731] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 49.179264][ T5731] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 49.198318][ T72] bridge0: port 1(bridge_slave_0) entered disabled state [ 49.198958][ T72] bridge0: port 2(bridge_slave_1) entered disabled state [ 49.200201][ T72] bridge0: port 1(bridge_slave_0) entered disabled state [ 49.200453][ T72] bridge0: port 2(bridge_slave_1) entered disabled state [ 49.237465][ T5740] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 49.239528][ T5740] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 49.243060][ T5740] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 49.247635][ T5740] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 49.251722][ T5734] 8021q: adding VLAN 0 to HW filter on device bond0 [ 49.255519][ T5740] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 49.257226][ T5740] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 49.259104][ T5740] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 49.260687][ T5740] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 49.287196][ T5734] 8021q: adding VLAN 0 to HW filter on device team0 [ 49.305347][ T5732] 8021q: adding VLAN 0 to HW filter on device bond0 [ 49.308181][ T37] bridge0: port 1(bridge_slave_0) entered blocking state [ 49.308235][ T37] bridge0: port 1(bridge_slave_0) entered forwarding state [ 49.320514][ T37] bridge0: port 2(bridge_slave_1) entered blocking state [ 49.320560][ T37] bridge0: port 2(bridge_slave_1) entered forwarding state [ 49.341803][ T5732] 8021q: adding VLAN 0 to HW filter on device team0 [ 49.357091][ T72] bridge0: port 1(bridge_slave_0) entered blocking state [ 49.357136][ T72] bridge0: port 1(bridge_slave_0) entered forwarding state [ 49.360955][ T5731] 8021q: adding VLAN 0 to HW filter on device bond0 [ 49.380891][ T72] bridge0: port 2(bridge_slave_1) entered blocking state [ 49.380937][ T72] bridge0: port 2(bridge_slave_1) entered forwarding state [ 49.407601][ T5731] 8021q: adding VLAN 0 to HW filter on device team0 [ 49.421845][ T5740] 8021q: adding VLAN 0 to HW filter on device bond0 [ 49.428616][ T72] bridge0: port 1(bridge_slave_0) entered blocking state [ 49.428705][ T72] bridge0: port 1(bridge_slave_0) entered forwarding state [ 49.438982][ T72] bridge0: port 2(bridge_slave_1) entered blocking state [ 49.439060][ T72] bridge0: port 2(bridge_slave_1) entered forwarding state [ 49.460205][ T5740] 8021q: adding VLAN 0 to HW filter on device team0 [ 49.469229][ T72] bridge0: port 1(bridge_slave_0) entered blocking state [ 49.469303][ T72] bridge0: port 1(bridge_slave_0) entered forwarding state [ 49.486669][ T74] bridge0: port 2(bridge_slave_1) entered blocking state [ 49.486716][ T74] bridge0: port 2(bridge_slave_1) entered forwarding state [ 49.541913][ T5740] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 49.717263][ T5732] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 49.721460][ T5734] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 49.746297][ T5747] Bluetooth: hci1: command tx timeout [ 49.746440][ T5747] Bluetooth: hci0: command tx timeout [ 49.746500][ T5747] Bluetooth: hci3: command tx timeout [ 49.746618][ T65] Bluetooth: hci2: command tx timeout [ 49.763073][ T5731] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 49.772107][ T5732] veth0_vlan: entered promiscuous mode [ 49.785606][ T5740] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 49.788708][ T5732] veth1_vlan: entered promiscuous mode [ 49.808123][ T5734] veth0_vlan: entered promiscuous mode [ 49.829703][ T5731] veth0_vlan: entered promiscuous mode [ 49.838332][ T5731] veth1_vlan: entered promiscuous mode [ 49.841097][ T5734] veth1_vlan: entered promiscuous mode [ 49.848526][ T5732] veth0_macvtap: entered promiscuous mode [ 49.858909][ T5732] veth1_macvtap: entered promiscuous mode [ 49.861891][ T5740] veth0_vlan: entered promiscuous mode [ 49.866117][ T5740] veth1_vlan: entered promiscuous mode [ 49.880996][ T5731] veth0_macvtap: entered promiscuous mode [ 49.889515][ T5732] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 49.892717][ T5732] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 49.894630][ T5731] veth1_macvtap: entered promiscuous mode [ 49.913015][ T5734] veth0_macvtap: entered promiscuous mode [ 49.915092][ T5731] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 49.918184][ T5731] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 49.927326][ T5740] veth0_macvtap: entered promiscuous mode [ 49.928804][ T5734] veth1_macvtap: entered promiscuous mode [ 49.942704][ T13] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 49.943465][ T5740] veth1_macvtap: entered promiscuous mode [ 49.978042][ T5740] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 49.979405][ T5734] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 49.986667][ T5734] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 49.994177][ T5808] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 50.003149][ T5740] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 50.028779][ T74] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 50.028797][ T74] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 50.051558][ T74] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 50.051571][ T74] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 50.084911][ T1168] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 50.084924][ T1168] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 50.092611][ T13] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 50.092862][ T13] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 50.092997][ T13] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 50.093091][ T13] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 50.102430][ T13] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 50.106767][ T13] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 50.106802][ T13] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 50.106833][ T13] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 50.108812][ T72] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 50.108823][ T72] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 50.128309][ T99] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 50.128321][ T99] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 50.148359][ T5732] soft_limit_in_bytes is deprecated and will be removed. Writing any value to this file has no effect. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 50.159755][ T99] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 50.159772][ T99] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 50.163439][ T12] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 50.163474][ T12] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 50.163501][ T12] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 50.163529][ T12] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 50.163555][ T12] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 50.163582][ T12] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 50.209854][ T72] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 50.209872][ T72] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 50.219614][ T72] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 50.219632][ T72] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 50.282106][ T5884] Bluetooth: MGMT ver 1.23 [ 50.320401][ T5885] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 50.540364][ T5889] infiniband syz0: set active [ 50.540958][ T5889] infiniband syz0: added veth0 [ 50.558660][ T5889] smbdirect: ib_dev[syz0]: added: IB_CA max_fast_reg_page_list_len=512 device_cap_flags=0x1c001223c76 kernel_cap_flags=0x14 page_size_cap=0xfffff000 [ 50.558689][ T5889] smbdirect: ib_dev[syz0]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=32 max_cqe=32767 max_qp_wr=1048576 max_send_sge=32 max_recv_sge=32 [ 50.558710][ T5889] smbdirect: ib_dev[syz0]PORT[1]: iwarp=0 ib=0 roce=1 v1=0 v2=1 core_cap_flags=0x803005 [ 50.581103][ T5889] RDS/IB: syz0: added [ 50.581220][ T5889] smc: adding ib device syz0 with port count 1 [ 50.581256][ T5889] smc: ib device syz0 port 1 has no pnetid [ 50.663303][ T5907] netlink: 8 bytes leftover after parsing attributes in process `syz.0.10'. [ 50.784169][ T5914] bonding: bond1 is being created... [ 50.815937][ T5914] bond1: (slave dummy0): making interface the new active one [ 50.817894][ T5914] bond1: (slave dummy0): Enslaving as an active interface with an up link [ 50.825330][ T5914] 8021q: adding VLAN 0 to HW filter on device bond1 [ 51.617494][ T5926] 8021q: adding VLAN 0 to HW filter on device bond0 [ 51.771036][ T5937] udc dummy_udc.0: failed to start g1: -19 [ 51.778155][ T5937] UDC core: g1: couldn't find an available UDC or it's busy [ 51.822364][ T65] Bluetooth: hci3: command tx timeout [ 51.822395][ T65] Bluetooth: hci0: command tx timeout [ 51.822495][ T5745] Bluetooth: hci2: command tx timeout [ 51.955052][ T5892] infiniband syz1: set active [ 51.955120][ T5892] infiniband syz1: added veth1 [ 51.955990][ T5892] workqueue: Failed to create a rescuer kthread for wq "ib_mad1": -EINTR [ 51.957914][ T5892] infiniband syz1: Couldn't open port 1 [ 51.958006][ T5892] smbdirect: ib_dev[syz1]: added: IB_CA max_fast_reg_page_list_len=512 device_cap_flags=0x1c001223c76 kernel_cap_flags=0x14 page_size_cap=0xfffff000 [ 51.958023][ T5892] smbdirect: ib_dev[syz1]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=32 max_cqe=32767 max_qp_wr=1048576 max_send_sge=32 max_recv_sge=32 [ 51.958044][ T5892] smbdirect: ib_dev[syz1]PORT[1]: iwarp=0 ib=0 roce=1 v1=0 v2=1 core_cap_flags=0x803005 [ 51.969675][ T5892] RDS/IB: syz1: added [ 51.969701][ T5892] smc: adding ib device syz1 with port count 1 [ 51.969711][ T5892] smc: ib device syz1 port 1 has no pnetid [ 52.302978][ T5745] Bluetooth: hci1: command tx timeout [ 52.328671][ T5951] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 52.447252][ T5951] md/raid1:md1: active with 1 out of 2 mirrors [ 52.447790][ T5951] md1: detected capacity change from 0 to 2048 [ 52.459110][ T5956] md: check of RAID array md1 [ 52.487857][ T5956] md: md1: check done. [ 52.529808][ T5960] bonding: bond1 is being created... [ 52.593411][ T5960] bonding: bond1 already exists [ 52.593717][ T5963] bond1: option mode: unable to set because the bond device has slaves [ 52.594510][ T5960] bond1: (slave dummy0): Error: Device is in use and cannot be enslaved [ 52.594522][ T5960] bond1: option slaves: unable to set because the bond device is up [ 52.596337][ T43] kauditd_printk_skb: 120 callbacks suppressed [ 52.596351][ T43] audit: type=1400 audit(1790053401.294:288): avc: denied { unmount } for pid=5732 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=filesystem permissive=1 [ 52.655309][ T5969] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 52.664283][ T5971] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 52.680065][ T5971] loop0: detected capacity change from 0 to 65536 [ 52.752470][ T5973] md: couldn't update array info. -22 [ 52.777352][ T5969] md/raid1:md0: active with 1 out of 2 mirrors [ 52.777665][ T5969] md0: detected capacity change from 0 to 2048 [ 52.782716][ T5973] md: could not open device unknown-block(1,2). [ 52.782745][ T5973] md: md_import_device returned -16 [ 52.806909][ T5978] md: recover of RAID array md0 [ 52.833274][ T5978] md: md0: recover done. [ 52.833490][ T5980] md: recover of RAID array md1 [ 52.837708][ T5980] md: md1: recover done. [ 53.086981][ T5984] md: could not open device unknown-block(1,1). [ 53.129495][ T43] audit: type=1400 audit(1790053401.824:289): avc: denied { mount } for pid=5989 comm="syz.2.33" name="/" dev="nfsd" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfsd_fs_t tclass=filesystem permissive=1 [ 53.133703][ T43] audit: type=1400 audit(1790053401.834:290): avc: denied { search } for pid=5989 comm="syz.2.33" name="/" dev="nfsd" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfsd_fs_t tclass=dir permissive=1 [ 53.133857][ T43] audit: type=1400 audit(1790053401.834:291): avc: denied { read write } for pid=5989 comm="syz.2.33" name="versions" dev="nfsd" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfsd_fs_t tclass=file permissive=1 [ 53.134031][ T43] audit: type=1400 audit(1790053401.834:292): avc: denied { open } for pid=5989 comm="syz.2.33" path="/4/nfsd/versions" dev="nfsd" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfsd_fs_t tclass=file permissive=1 [ 53.135333][ T43] audit: type=1400 audit(1790053401.834:293): avc: denied { search } for pid=5989 comm="syz.2.33" name="/" dev="nfsd" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfsd_fs_t tclass=dir permissive=1 [ 53.415905][ T5994] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 53.432379][ T5994] md: couldn't update array info. -22 [ 53.493001][ T5996] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 53.513064][ T5996] md: couldn't update array info. -22 [ 53.619320][ T6000] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 53.653922][ T6000] md: couldn't update array info. -22 [ 53.713092][ T6007] md: couldn't update array info. -22 [ 53.713532][ T6000] md: could not open device unknown-block(7,0). [ 53.713559][ T6000] md: md_import_device returned -16 [ 53.716565][ T6005] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 53.743002][ T6007] md: could not open device unknown-block(1,2). [ 53.743051][ T6007] md: md_import_device returned -16 [ 53.781011][ T6011] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 53.792499][ T6007] md: could not open device unknown-block(1,3). [ 53.792547][ T6007] md: md_import_device returned -16 [ 53.803256][ T6011] md: couldn't update array info. -22 [ 53.863185][ T6011] md: could not open device unknown-block(1,0). [ 53.863218][ T6011] md: md_import_device returned -16 [ 53.863704][ T6018] md: could not open device unknown-block(1,1). [ 53.863736][ T6018] md: md_import_device returned -16 [ 53.902329][ T5745] Bluetooth: hci2: command tx timeout [ 53.902361][ T5745] Bluetooth: hci0: command tx timeout [ 53.902380][ T5745] Bluetooth: hci3: command tx timeout [ 53.923534][ T6013] md: could not open device unknown-block(1,1). [ 53.944755][ T6019] md: check of RAID array md0 [ 53.955737][ T6021] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 53.980580][ T6019] md: md0: check done. [ 53.985522][ T6021] md: couldn't update array info. -22 [ 54.007661][ T6023] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 54.043040][ T6023] md: couldn't update array info. -22 [ 54.061751][ T6028] bonding: bond1 is being created... [ 54.081044][ T6028] bond1: (slave dummy0): making interface the new active one [ 54.081956][ T6028] bond1: (slave dummy0): Enslaving as an active interface with an up link [ 54.085422][ T6028] 8021q: adding VLAN 0 to HW filter on device bond1 [ 54.092664][ T6023] md: could not open device unknown-block(7,0). [ 54.092693][ T6023] md: md_import_device returned -16 [ 54.235936][ T6037] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 54.263245][ T6037] md: couldn't update array info. -22 [ 54.284486][ T6037] md: could not open device unknown-block(7,0). [ 54.284519][ T6037] md: md_import_device returned -16 [ 54.366341][ T6039] md: couldn't update array info. -22 [ 54.383615][ T5991] NFSD: Unable to initialize client recovery tracking! (-110) [ 54.383633][ T5991] NFSD: Is nfsdcld running? If not, enable CONFIG_NFSD_LEGACY_CLIENT_TRACKING. [ 54.383642][ T5991] NFSD: starting 90-second grace period (net f00005a6) [ 54.384291][ T5747] Bluetooth: hci1: command tx timeout [ 54.384458][ T6039] md: could not open device unknown-block(1,2). [ 54.384484][ T6039] md: md_import_device returned -16 [ 54.402875][ T6039] md: could not open device unknown-block(1,3). [ 54.402921][ T6039] md: md_import_device returned -16 [ 54.456725][ T6047] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 54.527612][ T6041] md: could not open device unknown-block(1,1). [ 54.544278][ T6049] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 54.575039][ T6049] md: couldn't update array info. -22 [ 54.594830][ T6051] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 54.612590][ T6049] md: could not open device unknown-block(1,0). [ 54.612633][ T6049] md: md_import_device returned -16 [ 54.615776][ T43] audit: type=1400 audit(1790053403.314:294): avc: denied { unmount } for pid=5740 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfsd_fs_t tclass=filesystem permissive=1 [ 54.648639][ T6053] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 54.663631][ T6049] md: could not open device unknown-block(1,1). [ 54.663682][ T6049] md: md_import_device returned -16 [ 54.663697][ T6053] md: couldn't update array info. -22 [ 54.693295][ T6053] md: could not open device unknown-block(7,0). [ 54.693326][ T6053] md: md_import_device returned -16 [ 54.745510][ T6061] md: check of RAID array md0 [ 54.755514][ T6062] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 54.772413][ T6062] md: couldn't update array info. -22 [ 54.789265][ T6061] md: md0: check done. [ 54.822454][ T6062] md: could not open device unknown-block(7,0). [ 54.825224][ T6062] md: md_import_device returned -16 [ 54.873938][ T43] audit: type=1400 audit(1790053403.574:295): avc: denied { sys_module } for pid=6058 comm="syz.2.57" capability=16 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 54.903731][ T6071] md: couldn't update array info. -22 [ 54.922527][ T6071] md: could not open device unknown-block(1,2). [ 54.922575][ T6071] md: md_import_device returned -16 [ 54.943539][ T6071] md: could not open device unknown-block(1,3). [ 54.943583][ T6071] md: md_import_device returned -16 [ 55.082758][ T6078] md: could not open device unknown-block(1,1). [ 55.129883][ T6086] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 55.174543][ T6088] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 55.265864][ T43] audit: type=1400 audit(1790053403.964:296): avc: denied { read write } for pid=6092 comm="syz.0.66" name="raw-gadget" dev="devtmpfs" ino=848 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 55.265987][ T43] audit: type=1400 audit(1790053403.964:297): avc: denied { open } for pid=6092 comm="syz.0.66" path="/dev/raw-gadget" dev="devtmpfs" ino=848 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 55.305152][ T6095] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 55.342754][ T6095] md: couldn't update array info. -22 [ 55.403524][ T6097] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 55.404544][ T6099] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 55.462943][ T6095] md: could not open device unknown-block(1,0). [ 55.462971][ T6095] md: md_import_device returned -16 [ 55.463804][ T6101] md: could not open device unknown-block(1,1). [ 55.463833][ T6101] md: md_import_device returned -16 [ 55.463842][ T6099] md: couldn't update array info. -22 [ 55.463950][ T6097] md: could not open device unknown-block(7,0). [ 55.463993][ T6097] md: md_import_device returned -16 [ 55.464007][ T6100] md: couldn't update array info. -22 [ 55.464068][ T6103] md: could not open device unknown-block(7,0). [ 55.464091][ T6103] md: md_import_device returned -16 [ 55.522538][ T5841] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 55.545624][ T6108] md: check of RAID array md0 [ 55.563564][ T6106] md: couldn't update array info. -22 [ 55.601556][ T6108] md: md0: check done. [ 55.618572][ T6113] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 55.624643][ T6106] md: could not open device unknown-block(1,2). [ 55.624672][ T6106] md: md_import_device returned -16 [ 55.643123][ T6111] md: could not open device unknown-block(1,1). [ 55.644377][ T6114] md: could not open device unknown-block(1,3). [ 55.644417][ T6114] md: md_import_device returned -16 [ 55.679452][ T5841] usb 5-1: New USB device found, idVendor=0572, idProduct=cafe, bcdDevice= 1.00 [ 55.681355][ T5841] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 55.700005][ T6120] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 55.760305][ T6121] md: could not open device unknown-block(1,0). [ 55.812389][ T6116] md: could not open device unknown-block(1,1). [ 55.984003][ T5747] Bluetooth: hci3: command tx timeout [ 55.984031][ T5747] Bluetooth: hci0: command tx timeout [ 55.984047][ T5747] Bluetooth: hci2: command tx timeout [ 56.665536][ T6137] PM: suspend entry (s2idle) [ 56.697580][ T6139] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 56.742837][ T6139] md: couldn't update array info. -22 [ 56.750524][ T13] Filesystems sync: 0.083 seconds [ 56.788785][ T6139] md: could not open device unknown-block(1,0). [ 56.788840][ T6139] md: md_import_device returned -16 [ 56.789409][ T6139] md: could not open device unknown-block(1,1). [ 56.789449][ T6139] md: md_import_device returned -16 [ 56.850994][ T6147] md: could not open device unknown-block(1,0). [ 56.883214][ T6142] md: could not open device unknown-block(1,1). [ 56.957823][ T6150] md: check of RAID array md0 [ 56.960049][ T6149] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 56.984004][ T6152] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 57.003790][ T6149] md: couldn't update array info. -22 [ 57.024413][ T6150] md: md0: check done. [ 57.032573][ T6154] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 57.042466][ T6149] md: could not open device unknown-block(7,0). [ 57.042515][ T6149] md: md_import_device returned -16 [ 57.062886][ T6154] md: couldn't update array info. -22 [ 57.102420][ T6156] md: couldn't update array info. -22 [ 57.152445][ T6156] md: could not open device unknown-block(1,2). [ 57.152498][ T6156] md: md_import_device returned -16 [ 57.192529][ T6156] md: could not open device unknown-block(1,3). [ 57.192558][ T6156] md: md_import_device returned -16 [ 57.282345][ T6158] md: could not open device unknown-block(1,1). [ 57.321755][ T6165] ip_tables: iptables: counters copy to user failed while replacing table [ 57.334816][ T6167] Bluetooth: MGMT ver 1.23 [ 57.342367][ T6167] Bluetooth: MGMT ver 1.23 [ 57.343475][ T6167] Bluetooth: MGMT ver 1.23 [ 57.379559][ T6169] tipc: Started in network mode [ 57.379572][ T6169] tipc: Node identity 1, cluster identity 4711 [ 57.379579][ T6169] tipc: Node number set to 1 [ 57.449761][ T6173] r8a66597_udc pcspkr: error -EINVAL: invalid resource (null) [ 57.449780][ T6173] r8a66597_udc pcspkr: probe with driver r8a66597_udc failed with error -22 [ 57.486248][ T6137] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 57.486368][ T6137] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 57.491864][ T6175] Bluetooth: ISO socket layer initialized [ 57.496914][ T6137] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 57.503756][ T6137] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 57.503858][ T6137] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 57.505296][ T6137] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 57.506996][ T6137] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 57.507058][ T6137] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 57.507775][ T6137] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 57.508980][ T6137] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 57.509009][ T6137] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 57.518052][ T6137] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 58.245222][ C3] ------------[ cut here ]------------ [ 58.245233][ C3] !oldest [ 58.245237][ C3] WARNING: net/wireless/scan.c:513 at __cfg80211_bss_update+0x19d8/0x2450, CPU#3: syz.2.95/6180 [ 58.251478][ C3] Modules linked in: [ 58.253191][ C3] CPU: 3 UID: 0 PID: 6180 Comm: syz.2.95 Not tainted syzkaller #0 PREEMPT(full) [ 58.256070][ C3] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 58.259199][ C3] RIP: 0010:__cfg80211_bss_update+0x19d8/0x2450 [ 58.261150][ C3] Code: 00 31 ff 41 89 c5 89 c6 e8 45 de ec f6 45 85 ed 0f 85 65 f9 ff ff e8 c7 e3 ec f6 90 0f 0b 90 e9 57 f9 ff ff e8 b9 e3 ec f6 90 <0f> 0b 90 e9 fc fa ff ff e8 ab e3 ec f6 48 8b 44 24 08 48 8d 88 ac [ 58.267177][ C3] RSP: 0018:ffffc90000708368 EFLAGS: 00010287 [ 58.269034][ C3] RAX: 00000000000000d2 RBX: ffffffff91457604 RCX: ffffc900024f8000 [ 58.271410][ C3] RDX: 0000000000040000 RSI: ffffffff8b1f3ed7 RDI: ffff88802ac9a580 [ 58.273884][ C3] RBP: ffff8880556c2c88 R08: 0000000000000005 R09: 0000000000000000 [ 58.276270][ C3] R10: 0000000000000001 R11: 0000000000000000 R12: ffff8880556c2c00 [ 58.278561][ C3] R13: 0000000000000000 R14: dffffc0000000000 R15: ffff888059f10190 [ 58.281112][ C3] FS: 00007fd6acea66c0(0000) GS:ffff8880d5e53000(0000) knlGS:0000000000000000 [ 58.283650][ T5808] netdevsim netdevsim100 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 58.286540][ C3] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 58.288544][ C3] CR2: 00007fd6abf892c0 CR3: 000000005a813000 CR4: 0000000000352ef0 [ 58.291045][ C3] Call Trace: [ 58.292214][ C3] [ 58.293235][ C3] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 58.294940][ C3] ? cfg80211_inform_single_bss_data+0x557/0x1dc0 [ 58.296939][ C3] cfg80211_inform_single_bss_data+0x770/0x1dc0 [ 58.298887][ C3] ? __pfx_cfg80211_inform_single_bss_data+0x10/0x10 [ 58.300938][ C3] ? unwind_next_frame+0xbd/0x2090 [ 58.302643][ C3] ? __lock_acquire+0x5c0/0x1f40 [ 58.304196][ C3] ? cfg80211_inform_bss_data+0x230/0x3c20 [ 58.305984][ C3] cfg80211_inform_bss_data+0x230/0x3c20 [ 58.307739][ C3] ? lock_acquire+0x1d1/0x380 [ 58.309212][ C3] ? unwind_next_frame+0xbd/0x2090 [ 58.310835][ C3] ? __pfx_cfg80211_inform_bss_data+0x10/0x10 [ 58.312838][ C3] ? __lock_acquire+0x5c0/0x1f40 [ 58.314398][ C3] ? __css_rstat_updated+0x1ce/0x590 [ 58.316012][ C3] ? __lock_acquire+0x5c0/0x1f40 [ 58.317582][ C3] ? __lock_acquire+0x5c0/0x1f40 [ 58.319106][ C3] ? __lock_acquire+0x5c0/0x1f40 [ 58.320641][ C3] cfg80211_inform_bss_frame_data+0x245/0x7c0 [ 58.322597][ C3] ieee80211_bss_info_update+0x310/0xab0 [ 58.324350][ C3] ? __pfx_ieee80211_bss_info_update+0x10/0x10 [ 58.326279][ C3] ? debug_object_activate+0x343/0x4b0 [ 58.327945][ C3] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 58.329738][ C3] ? debug_object_activate+0x343/0x4b0 [ 58.331406][ C3] ? ieee80211_get_channel_khz+0x14a/0x1e0 [ 58.333307][ C3] ieee80211_scan_rx+0x4e6/0xb60 [ 58.334834][ C3] ? __lock_acquire+0x5c0/0x1f40 [ 58.336382][ C3] __ieee80211_rx_handle_packet+0xbab/0xfc0 [ 58.338213][ C3] ? __pfx___ieee80211_rx_handle_packet+0x10/0x10 [ 58.340207][ C3] ? kcov_remote_start+0x3bf/0x6d0 [ 58.341818][ C3] ? lockdep_hardirqs_on+0x7d/0x110 [ 58.343530][ C3] ? ieee80211_clean_skb+0x1a7/0x740 [ 58.345193][ C3] ieee80211_rx_list+0xf19/0x2160 [ 58.346760][ C3] ? lock_acquire+0x1d1/0x380 [ 58.348218][ C3] ? ieee80211_rx_napi+0x9a/0x400 [ 58.349779][ C3] ? __pfx_ieee80211_rx_list+0x10/0x10 [ 58.351479][ C3] ieee80211_rx_napi+0xdc/0x400 [ 58.353096][ C3] ? __pfx_ieee80211_rx_napi+0x10/0x10 [ 58.354793][ C3] ? lockdep_hardirqs_on+0x7d/0x110 [ 58.356370][ C3] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 58.358110][ C3] ieee80211_handle_queued_frames+0xc8/0x120 [ 58.359875][ C3] tasklet_action_common+0x2de/0x3d0 [ 58.361432][ C3] handle_softirqs+0x1e6/0x9d0 [ 58.362960][ C3] ? __pfx_handle_softirqs+0x10/0x10 [ 58.364613][ C3] ? irqtime_account_delta+0x9a/0x110 [ 58.366278][ C3] ? __ieee80211_tx_skb_tid_band+0x2dc/0x720 [ 58.368145][ C3] do_softirq+0xaf/0xf0 [ 58.369424][ C3] [ 58.370373][ C3] [ 58.371318][ C3] __local_bh_enable_ip+0xff/0x120 [ 58.372986][ C3] ieee80211_tx_skb_tid+0x1c4/0x550 [ 58.374620][ C3] ieee80211_mgmt_tx+0x143e/0x26a0 [ 58.376210][ C3] ? __alloc_skb+0xd0/0x710 [ 58.377623][ C3] ? __pfx_ieee80211_mgmt_tx+0x10/0x10 [ 58.379312][ C3] cfg80211_mlme_mgmt_tx+0x800/0x15b0 [ 58.380965][ C3] nl80211_tx_mgmt+0xa73/0x1010 [ 58.382575][ C3] ? __pfx_nl80211_tx_mgmt+0x10/0x10 [ 58.384231][ C3] ? nl80211_pre_doit+0x19a/0xae0 [ 58.385785][ C3] genl_family_rcv_msg_doit+0x214/0x300 [ 58.387531][ C3] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 58.389389][ C3] ? bpf_lsm_capable+0x9/0x10 [ 58.390849][ C3] ? security_capable+0x80/0x260 [ 58.392472][ C3] ? ns_capable+0xd2/0xf0 [ 58.393794][ C3] genl_rcv_msg+0x560/0x800 [ 58.395234][ C3] ? __pfx_genl_rcv_msg+0x10/0x10 [ 58.396824][ C3] ? __lock_acquire+0x5c0/0x1f40 [ 58.398394][ C3] ? __pfx_nl80211_pre_doit+0x10/0x10 [ 58.400056][ C3] ? __pfx_nl80211_tx_mgmt+0x10/0x10 [ 58.401725][ C3] ? __pfx_nl80211_post_doit+0x10/0x10 [ 58.403352][ C3] netlink_rcv_skb+0x159/0x420 [ 58.404704][ C3] ? __pfx_genl_rcv_msg+0x10/0x10 [ 58.406131][ C3] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 58.407776][ C3] ? netlink_deliver_tap+0x1ae/0xcc0 [ 58.409445][ C3] genl_rcv+0x28/0x40 [ 58.410733][ C3] netlink_unicast+0x585/0x850 [ 58.412338][ C3] ? __pfx_netlink_unicast+0x10/0x10 [ 58.413985][ C3] netlink_sendmsg+0x8b0/0xda0 [ 58.415527][ C3] ? __pfx_netlink_sendmsg+0x10/0x10 [ 58.417159][ C3] ? selinux_socket_sendmsg+0x198/0x2f0 [ 58.418841][ C3] ____sys_sendmsg+0xa4d/0xbe0 [ 58.420271][ C3] ? __pfx_netlink_sendmsg+0x10/0x10 [ 58.421937][ C3] ? __pfx_____sys_sendmsg+0x10/0x10 [ 58.423663][ C3] ___sys_sendmsg+0x190/0x1e0 [ 58.425835][ C3] ? __pfx____sys_sendmsg+0x10/0x10 [ 58.427488][ C3] ? futex_wait+0x11e/0x370 [ 58.428929][ C3] ? find_held_lock+0x2b/0x80 [ 58.430448][ C3] __sys_sendmsg+0x160/0x210 [ 58.431932][ C3] ? __pfx___sys_sendmsg+0x10/0x10 [ 58.433618][ C3] do_syscall_64+0x123/0x790 [ 58.435111][ C3] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 58.436980][ C3] RIP: 0033:0x7fd6abf9e159 [ 58.438415][ C3] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 58.444417][ C3] RSP: 002b:00007fd6acea6028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 58.447013][ C3] RAX: ffffffffffffffda RBX: 00007fd6ac225fa0 RCX: 00007fd6abf9e159 [ 58.449453][ C3] RDX: 0000000000008800 RSI: 0000200000003740 RDI: 0000000000000003 [ 58.451940][ C3] RBP: 00007fd6ac03506b R08: 0000000000000000 R09: 0000000000000000 [ 58.454443][ C3] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 58.456874][ C3] R13: 00007fd6ac226038 R14: 00007fd6ac225fa0 R15: 00007fff18206c38 [ 58.459321][ C3] [ 58.460318][ C3] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 58.462588][ C3] CPU: 3 UID: 0 PID: 6180 Comm: syz.2.95 Not tainted syzkaller #0 PREEMPT(full) [ 58.465388][ C3] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 58.468554][ C3] Call Trace: [ 58.469630][ C3] [ 58.470575][ C3] dump_stack_lvl+0x100/0x190 [ 58.472084][ C3] vpanic+0x553/0x970 [ 58.473333][ C3] ? __pfx_vpanic+0x10/0x10 [ 58.474751][ C3] panic+0xd1/0xe0 [ 58.475925][ C3] ? __pfx_panic+0x10/0x10 [ 58.477326][ C3] check_panic_on_warn.cold+0x19/0x34 [ 58.479000][ C3] ? __cfg80211_bss_update+0x19d8/0x2450 [ 58.480796][ C3] __warn.cold+0x191/0x318 [ 58.482288][ C3] __report_bug+0x30f/0x440 [ 58.483694][ C3] ? __cfg80211_bss_update+0x19d8/0x2450 [ 58.485434][ C3] ? __pfx___report_bug+0x10/0x10 [ 58.487016][ C3] ? netlink_sendmsg+0x8b0/0xda0 [ 58.488555][ C3] ? ____sys_sendmsg+0xa4d/0xbe0 [ 58.490104][ C3] ? ___sys_sendmsg+0x190/0x1e0 [ 58.491623][ C3] ? __sys_sendmsg+0x160/0x210 [ 58.493016][ C3] ? do_syscall_64+0x123/0x790 [ 58.494499][ C3] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 58.496388][ C3] ? __cfg80211_bss_update+0x19d8/0x2450 [ 58.498075][ C3] report_bug+0xb3/0x220 [ 58.499378][ C3] ? __cfg80211_bss_update+0x19d8/0x2450 [ 58.501081][ C3] handle_bug+0x16a/0x2a0 [ 58.502460][ C3] exc_invalid_op+0x17/0x50 [ 58.503877][ C3] asm_exc_invalid_op+0x1a/0x20 [ 58.505404][ C3] RIP: 0010:__cfg80211_bss_update+0x19d8/0x2450 [ 58.507339][ C3] Code: 00 31 ff 41 89 c5 89 c6 e8 45 de ec f6 45 85 ed 0f 85 65 f9 ff ff e8 c7 e3 ec f6 90 0f 0b 90 e9 57 f9 ff ff e8 b9 e3 ec f6 90 <0f> 0b 90 e9 fc fa ff ff e8 ab e3 ec f6 48 8b 44 24 08 48 8d 88 ac [ 58.513165][ C3] RSP: 0018:ffffc90000708368 EFLAGS: 00010287 [ 58.515065][ C3] RAX: 00000000000000d2 RBX: ffffffff91457604 RCX: ffffc900024f8000 [ 58.517457][ C3] RDX: 0000000000040000 RSI: ffffffff8b1f3ed7 RDI: ffff88802ac9a580 [ 58.520083][ C3] RBP: ffff8880556c2c88 R08: 0000000000000005 R09: 0000000000000000 [ 58.522554][ C3] R10: 0000000000000001 R11: 0000000000000000 R12: ffff8880556c2c00 [ 58.524967][ C3] R13: 0000000000000000 R14: dffffc0000000000 R15: ffff888059f10190 [ 58.527517][ C3] ? __cfg80211_bss_update+0x19d7/0x2450 [ 58.529283][ C3] ? __cfg80211_bss_update+0x19d7/0x2450 [ 58.531051][ C3] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 58.532745][ C3] ? cfg80211_inform_single_bss_data+0x557/0x1dc0 [ 58.534752][ C3] cfg80211_inform_single_bss_data+0x770/0x1dc0 [ 58.536705][ C3] ? __pfx_cfg80211_inform_single_bss_data+0x10/0x10 [ 58.538681][ C3] ? unwind_next_frame+0xbd/0x2090 [ 58.540250][ C3] ? __lock_acquire+0x5c0/0x1f40 [ 58.541776][ C3] ? cfg80211_inform_bss_data+0x230/0x3c20 [ 58.543542][ C3] cfg80211_inform_bss_data+0x230/0x3c20 [ 58.545263][ C3] ? lock_acquire+0x1d1/0x380 [ 58.546687][ C3] ? unwind_next_frame+0xbd/0x2090 [ 58.548218][ C3] ? __pfx_cfg80211_inform_bss_data+0x10/0x10 [ 58.550041][ C3] ? __lock_acquire+0x5c0/0x1f40 [ 58.551589][ C3] ? __css_rstat_updated+0x1ce/0x590 [ 58.553232][ C3] ? __lock_acquire+0x5c0/0x1f40 [ 58.554726][ C3] ? __lock_acquire+0x5c0/0x1f40 [ 58.556211][ C3] ? __lock_acquire+0x5c0/0x1f40 [ 58.557687][ C3] cfg80211_inform_bss_frame_data+0x245/0x7c0 [ 58.559497][ C3] ieee80211_bss_info_update+0x310/0xab0 [ 58.561163][ C3] ? __pfx_ieee80211_bss_info_update+0x10/0x10 [ 58.563044][ C3] ? debug_object_activate+0x343/0x4b0 [ 58.564662][ C3] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 58.566482][ C3] ? debug_object_activate+0x343/0x4b0 [ 58.568224][ C3] ? ieee80211_get_channel_khz+0x14a/0x1e0 [ 58.570043][ C3] ieee80211_scan_rx+0x4e6/0xb60 [ 58.571563][ C3] ? __lock_acquire+0x5c0/0x1f40 [ 58.573052][ C3] __ieee80211_rx_handle_packet+0xbab/0xfc0 [ 58.574798][ C3] ? __pfx___ieee80211_rx_handle_packet+0x10/0x10 [ 58.576712][ C3] ? kcov_remote_start+0x3bf/0x6d0 [ 58.578278][ C3] ? lockdep_hardirqs_on+0x7d/0x110 [ 58.579842][ C3] ? ieee80211_clean_skb+0x1a7/0x740 [ 58.581457][ C3] ieee80211_rx_list+0xf19/0x2160 [ 58.583040][ C3] ? lock_acquire+0x1d1/0x380 [ 58.584514][ C3] ? ieee80211_rx_napi+0x9a/0x400 [ 58.586022][ C3] ? __pfx_ieee80211_rx_list+0x10/0x10 [ 58.587654][ C3] ieee80211_rx_napi+0xdc/0x400 [ 58.589125][ C3] ? __pfx_ieee80211_rx_napi+0x10/0x10 [ 58.590803][ C3] ? lockdep_hardirqs_on+0x7d/0x110 [ 58.592434][ C3] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 58.594254][ C3] ieee80211_handle_queued_frames+0xc8/0x120 [ 58.596040][ C3] tasklet_action_common+0x2de/0x3d0 [ 58.597644][ C3] handle_softirqs+0x1e6/0x9d0 [ 58.599111][ C3] ? __pfx_handle_softirqs+0x10/0x10 [ 58.600720][ C3] ? irqtime_account_delta+0x9a/0x110 [ 58.602386][ C3] ? __ieee80211_tx_skb_tid_band+0x2dc/0x720 [ 58.604215][ C3] do_softirq+0xaf/0xf0 [ 58.605471][ C3] [ 58.606360][ C3] [ 58.607277][ C3] __local_bh_enable_ip+0xff/0x120 [ 58.608804][ C3] ieee80211_tx_skb_tid+0x1c4/0x550 [ 58.610407][ C3] ieee80211_mgmt_tx+0x143e/0x26a0 [ 58.611981][ C3] ? __alloc_skb+0xd0/0x710 [ 58.613354][ C3] ? __pfx_ieee80211_mgmt_tx+0x10/0x10 [ 58.614996][ C3] cfg80211_mlme_mgmt_tx+0x800/0x15b0 [ 58.616620][ C3] nl80211_tx_mgmt+0xa73/0x1010 [ 58.618094][ C3] ? __pfx_nl80211_tx_mgmt+0x10/0x10 [ 58.619717][ C3] ? nl80211_pre_doit+0x19a/0xae0 [ 58.621284][ C3] genl_family_rcv_msg_doit+0x214/0x300 [ 58.622967][ C3] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 58.624809][ C3] ? bpf_lsm_capable+0x9/0x10 [ 58.626234][ C3] ? security_capable+0x80/0x260 [ 58.627696][ C3] ? ns_capable+0xd2/0xf0 [ 58.629020][ C3] genl_rcv_msg+0x560/0x800 [ 58.630439][ C3] ? __pfx_genl_rcv_msg+0x10/0x10 [ 58.631953][ C3] ? __lock_acquire+0x5c0/0x1f40 [ 58.633415][ C3] ? __pfx_nl80211_pre_doit+0x10/0x10 [ 58.635023][ C3] ? __pfx_nl80211_tx_mgmt+0x10/0x10 [ 58.636615][ C3] ? __pfx_nl80211_post_doit+0x10/0x10 [ 58.638273][ C3] netlink_rcv_skb+0x159/0x420 [ 58.639725][ C3] ? __pfx_genl_rcv_msg+0x10/0x10 [ 58.641242][ C3] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 58.642865][ C3] ? netlink_deliver_tap+0x1ae/0xcc0 [ 58.644461][ C3] genl_rcv+0x28/0x40 [ 58.645698][ C3] netlink_unicast+0x585/0x850 [ 58.647210][ C3] ? __pfx_netlink_unicast+0x10/0x10 [ 58.648781][ C3] netlink_sendmsg+0x8b0/0xda0 [ 58.650250][ C3] ? __pfx_netlink_sendmsg+0x10/0x10 [ 58.651874][ C3] ? selinux_socket_sendmsg+0x198/0x2f0 [ 58.653552][ C3] ____sys_sendmsg+0xa4d/0xbe0 [ 58.655016][ C3] ? __pfx_netlink_sendmsg+0x10/0x10 [ 58.656644][ C3] ? __pfx_____sys_sendmsg+0x10/0x10 [ 58.658275][ C3] ___sys_sendmsg+0x190/0x1e0 [ 58.659726][ C3] ? __pfx____sys_sendmsg+0x10/0x10 [ 58.661319][ C3] ? futex_wait+0x11e/0x370 [ 58.662757][ C3] ? find_held_lock+0x2b/0x80 [ 58.664216][ C3] __sys_sendmsg+0x160/0x210 [ 58.665642][ C3] ? __pfx___sys_sendmsg+0x10/0x10 [ 58.667211][ C3] do_syscall_64+0x123/0x790 [ 58.668637][ C3] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 58.670446][ C3] RIP: 0033:0x7fd6abf9e159 [ 58.671824][ C3] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 58.677503][ C3] RSP: 002b:00007fd6acea6028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 58.680049][ C3] RAX: ffffffffffffffda RBX: 00007fd6ac225fa0 RCX: 00007fd6abf9e159 [ 58.682647][ C3] RDX: 0000000000008800 RSI: 0000200000003740 RDI: 0000000000000003 [ 58.685081][ C3] RBP: 00007fd6ac03506b R08: 0000000000000000 R09: 0000000000000000 [ 58.687500][ C3] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 58.689901][ C3] R13: 00007fd6ac226038 R14: 00007fd6ac225fa0 R15: 00007fff18206c38 [ 58.692380][ C3] [ 58.693973][ C3] Kernel Offset: disabled [ 58.695353][ C3] Rebooting in 86400 seconds..