last executing test programs: 49.148804472s ago: executing program 2 (id=3): mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000000100)='./dev\x00', &(0x7f0000000140)='devtmpfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000180)='./sys\x00', 0x1ff) mount(0x0, &(0x7f00000001c0)='./sys\x00', &(0x7f0000000200)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./sys/module/block2mtd/parameters/block2mtd\x00', 0x1, 0x0) write(r0, &(0x7f0000000280)='./dev/ram0,131072\x00', 0x12) r1 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./dev/ubi_ctrl\x00', 0x2, 0x0) ioctl(r1, 0x40186f40, &(0x7f0000000340)='\x00'/24) nanosleep(&(0x7f0000000300)={0x1}, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000380)='./dev/ubi0\x00', 0x2, 0x0) ioctl(r2, 0x40986f00, &(0x7f00000003c0)="000000000100000000001000000000000300040000000000766f6c3000"/152) mkdirat(0xffffffffffffff9c, &(0x7f0000000480)='./mnt\x00', 0x1ff) mount(&(0x7f00000004c0)=@filename='./dev/ubi0_0\x00', &(0x7f0000000500)='./mnt\x00', &(0x7f0000000540)='ubifs\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000580)='./mnt\x00', 0x400000, 0x0) 48.200691724s ago: executing program 2 (id=9): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./trace\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./trace\x00', &(0x7f0000000040)='tracefs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./trace/dynamic_events\x00', 0x2, 0x0) write(r0, &(0x7f0000000100)='e:my_eprobe raw_sy', 0x12) r1 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./trace/events/eprobes/my_eprobe/filter\x00', 0x2, 0x0) write(r1, &(0x7f0000000180)='common_pid == 999999\n', 0x15) r2 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./trace/events/eprobes/my_eprobe/enable\x00', 0x2, 0x0) write(r2, &(0x7f0000000200)='1\n', 0x2) r3 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./trace/events/timer/hrtimer_expire_entry/enable\x00', 0x2, 0x0) write(r3, &(0x7f0000000280)='1\n', 0x2) setitimer(0x0, &(0x7f00000002c0)={{0x0, 0x1}, {0x0, 0x1}}, 0x0) getpid() getpid() getpid() getpid() getpid() getpid() getpid() getpid() getpid() getpid() getpid() getpid() getpid() getpid() getpid() getpid() getpid() getpid() getpid() getpid() 48.070763864s ago: executing program 2 (id=10): r0 = openat$userio(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$USERIO_CMD_SET_PORT_TYPE(r0, &(0x7f0000000040)={0x1, 0x1}, 0x2) write$USERIO_CMD_REGISTER(r0, &(0x7f0000000080), 0x2) nanosleep(&(0x7f0000000200)={0x0, 0x2000000}, 0x0) write$USERIO_CMD_SEND_INTERRUPT(r0, &(0x7f0000000100)={0x2, 0xfa}, 0x2) write$USERIO_CMD_SEND_INTERRUPT(r0, &(0x7f0000000140), 0x2) write$USERIO_CMD_SEND_INTERRUPT(r0, &(0x7f0000000180), 0x2) nanosleep(&(0x7f0000000240)={0x0, 0x2000000}, 0x0) write$USERIO_CMD_SEND_INTERRUPT(r0, &(0x7f00000001c0)={0x2, 0xfa}, 0x2) write$USERIO_CMD_SEND_INTERRUPT(r0, &(0x7f0000000280), 0x2) write$USERIO_CMD_SEND_INTERRUPT(r0, &(0x7f00000002c0), 0x2) 32.98346856s ago: executing program 32 (id=10): r0 = openat$userio(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$USERIO_CMD_SET_PORT_TYPE(r0, &(0x7f0000000040)={0x1, 0x1}, 0x2) write$USERIO_CMD_REGISTER(r0, &(0x7f0000000080), 0x2) nanosleep(&(0x7f0000000200)={0x0, 0x2000000}, 0x0) write$USERIO_CMD_SEND_INTERRUPT(r0, &(0x7f0000000100)={0x2, 0xfa}, 0x2) write$USERIO_CMD_SEND_INTERRUPT(r0, &(0x7f0000000140), 0x2) write$USERIO_CMD_SEND_INTERRUPT(r0, &(0x7f0000000180), 0x2) nanosleep(&(0x7f0000000240)={0x0, 0x2000000}, 0x0) write$USERIO_CMD_SEND_INTERRUPT(r0, &(0x7f00000001c0)={0x2, 0xfa}, 0x2) write$USERIO_CMD_SEND_INTERRUPT(r0, &(0x7f0000000280), 0x2) write$USERIO_CMD_SEND_INTERRUPT(r0, &(0x7f00000002c0), 0x2) 28.46099812s ago: executing program 1 (id=56): mount(&(0x7f0000000040)=@filename='nfsd\x00', &(0x7f0000000000)='./nfsd\x00', &(0x7f0000000040)='nfsd\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f00000000c0)='proc\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./proc/net/rpc/auth.unix.ip/channel\x00', 0x1, 0x0) write(r0, &(0x7f0000000140)='nfsd 127.0.0.1 2147483647 my', 0x1c) close(r0) write(0xffffffffffffffff, &(0x7f00000001c0)='my_domain /tmp 2147483647 9216 0 0 0\n\x00', 0x25) close(0xffffffffffffffff) r1 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./proc/net/rpc/nfsd.fh/channel\x00', 0x1, 0x0) write(r1, &(0x7f0000000240)='my_domain 1 \\x00000000 2147483647 /tmp\n\x00', 0x27) 28.460646457s ago: executing program 1 (id=57): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./trace\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./trace\x00', &(0x7f0000000040)='tracefs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./trace/dynamic_events\x00', 0x2, 0x0) write(r0, &(0x7f0000000100)='e:my_eprobe raw_syscalls/sys_ente', 0x21) r1 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./trace/events/eprobes/my_eprobe/filter\x00', 0x2, 0x0) write(r1, &(0x7f0000000180)='common_pid == 999999\n', 0x15) r2 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./trace/events/eprobes/my_eprobe/enable\x00', 0x2, 0x0) write(r2, &(0x7f0000000200)='1\n', 0x2) r3 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./trace/events/timer/hrtimer_expire_entry/enable\x00', 0x2, 0x0) write(r3, &(0x7f0000000280)='1\n', 0x2) setitimer(0x0, &(0x7f00000002c0)={{0x0, 0x1}, {0x0, 0x1}}, 0x0) getpid() getpid() getpid() getpid() getpid() getpid() getpid() getpid() getpid() getpid() getpid() getpid() getpid() getpid() getpid() getpid() getpid() getpid() getpid() getpid() 28.370200895s ago: executing program 1 (id=59): r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./dummy.img\x00', 0x42, 0x1ff) ftruncate(r0, 0x1000000) r1 = syz_open_dev$loop(&(0x7f0000000080), 0x0, 0x2) ioctl$LOOP_SET_FD(r1, 0x4c00, r0) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000100)='./sys\x00', &(0x7f0000000140)='sysfs\x00', 0x0, 0x0) write(0xffffffffffffffff, &(0x7f00000002c0), 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./sys/block/md0/md/array_state\x00', 0x1, 0x0) write(r2, &(0x7f0000000440)='readonly\x00', 0x9) r3 = openat(0xffffffffffffff9c, &(0x7f0000000480)='./sys/block/md0/md/sync_action\x00', 0x1, 0x0) write(r3, &(0x7f00000004c0)='idle\x00', 0x5) 28.300661463s ago: executing program 1 (id=60): r0 = syz_usb_connect(0x3, 0x57, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000200000040601632090001000000010902450001010080320904000003ff0000000705010200020007058102000200070582020002000904000103ff000000070501020002000705810200020007058201000201"], 0x0) nanosleep(&(0x7f0000000300)={0x0, 0x2faf080}, 0x0) syz_usb_ep_write(r0, 0x81, 0x2, &(0x7f0000000200)="0803") syz_usb_ep_write(r0, 0x81, 0x1, &(0x7f0000000200)="01") syz_usb_ep_write(r0, 0x81, 0x2, &(0x7f0000000200)='\b\x00') syz_usb_ep_write(r0, 0x81, 0x1, &(0x7f0000000200)='\x00') syz_usb_ep_write(r0, 0x81, 0x2, &(0x7f0000000200)="0884") syz_usb_ep_write(r0, 0x81, 0x2, &(0x7f0000000200)='\b\x00') syz_usb_ep_write(r0, 0x81, 0x2, &(0x7f0000000200)='\b\x00') syz_usb_ep_write(r0, 0x81, 0x1, &(0x7f0000000200)='\b') syz_usb_ep_write(r0, 0x81, 0x2, &(0x7f0000000200)='\b\x00') syz_usb_ep_write(r0, 0x81, 0x9, &(0x7f0000000200)='\b\x00\x00\x00\x00\x00\x00\x00\x00') syz_usb_ep_write(r0, 0x81, 0x2, &(0x7f0000000200)='\b\x00') syz_usb_ep_write(r0, 0x81, 0x2, &(0x7f0000000200)='\b\x00') syz_usb_ep_write(r0, 0x81, 0x2, &(0x7f0000000200)='\b\x00') syz_usb_ep_write(r0, 0x81, 0x2, &(0x7f0000000200)='\b\x00') nanosleep(&(0x7f0000000300)={0x1}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000500)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000000500)='./dev\x00', &(0x7f0000000600)='devtmpfs\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000700)='./dev/video16\x00', 0x0, 0x0) ioctl$VIDIOC_TRY_FMT(r1, 0xc0d05640, &(0x7f0000000400)={0x1, @pix={0x100, 0x100, 0x56595559, 0x1, 0x200, 0x20000, 0x1}}) 25.030512034s ago: executing program 1 (id=72): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) fcntl$setstatus(r0, 0x4, 0x800) setsockopt$bt_l2cap_L2CAP_OPTIONS(r0, 0x6, 0x1, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x80}, 0xc) connect$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x1, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x0, 0x1}, 0xe) syz_emit_vhci(&(0x7f0000000100)=ANY=[@ANYBLOB="040f0400010d20"], 0x7) syz_emit_vhci(&(0x7f0000000200)=ANY=[@ANYBLOB="043e130100c8000000aaaaaaaaaa1000000000000000"], 0x16) nanosleep(&(0x7f0000000700)={0x0, 0x10000000}, 0x0) sendto$inet(r0, &(0x7f0000000800)='\x00', 0x1, 0x0, 0x0, 0x0) nanosleep(&(0x7f0000000900)={0x2}, 0x0) 24.171316592s ago: executing program 1 (id=73): r0 = openat$userio(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$USERIO_CMD_SET_PORT_TYPE(r0, &(0x7f0000000040)={0x1, 0x1}, 0x2) write$USERIO_CMD_REGISTER(r0, &(0x7f0000000080), 0x2) nanosleep(&(0x7f0000000000)={0x0, 0x2000000}, 0x0) write$USERIO_CMD_SEND_INTERRUPT(r0, &(0x7f0000000100)={0x2, 0xfa}, 0x2) write$USERIO_CMD_SEND_INTERRUPT(r0, &(0x7f0000000100), 0x2) write$USERIO_CMD_SEND_INTERRUPT(r0, &(0x7f0000000100), 0x2) nanosleep(&(0x7f0000000000)={0x0, 0x2000000}, 0x0) write$USERIO_CMD_SEND_INTERRUPT(r0, &(0x7f0000000100)={0x2, 0xfa}, 0x2) write$USERIO_CMD_SEND_INTERRUPT(r0, &(0x7f0000000100), 0x2) write$USERIO_CMD_SEND_INTERRUPT(r0, &(0x7f0000000100), 0x2) 11.451441285s ago: executing program 0 (id=109): r0 = syz_usb_connect(0x3, 0x2b, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000200000040402020c20001010203010902190001010080fa0904000001ffffff0007058202000200"], 0x0) nanosleep(&(0x7f0000000100)={0x3}, 0x0) syz_usb_ep_write(r0, 0x82, 0x4, &(0x7f0000000500)="33950000") r1 = syz_open_dev$video(&(0x7f0000000200), 0x0, 0x2) read(r1, &(0x7f0000000400), 0x1000) 8.445606193s ago: executing program 33 (id=73): r0 = openat$userio(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$USERIO_CMD_SET_PORT_TYPE(r0, &(0x7f0000000040)={0x1, 0x1}, 0x2) write$USERIO_CMD_REGISTER(r0, &(0x7f0000000080), 0x2) nanosleep(&(0x7f0000000000)={0x0, 0x2000000}, 0x0) write$USERIO_CMD_SEND_INTERRUPT(r0, &(0x7f0000000100)={0x2, 0xfa}, 0x2) write$USERIO_CMD_SEND_INTERRUPT(r0, &(0x7f0000000100), 0x2) write$USERIO_CMD_SEND_INTERRUPT(r0, &(0x7f0000000100), 0x2) nanosleep(&(0x7f0000000000)={0x0, 0x2000000}, 0x0) write$USERIO_CMD_SEND_INTERRUPT(r0, &(0x7f0000000100)={0x2, 0xfa}, 0x2) write$USERIO_CMD_SEND_INTERRUPT(r0, &(0x7f0000000100), 0x2) write$USERIO_CMD_SEND_INTERRUPT(r0, &(0x7f0000000100), 0x2) 8.400308829s ago: executing program 0 (id=116): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./nfsd\x00', 0x777) mount(0x0, &(0x7f0000000000)='./nfsd\x00', &(0x7f0000000100)='nfsd\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./nfsd/portlist\x00', 0x2, 0x0) write(r0, &(0x7f0000000300)='tcp 2049\n\x00', 0x9) r1 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./nfsd/threads\x00', 0x2, 0x0) write(r1, &(0x7f0000000500)='1\n\x00', 0x2) mkdirat(0xffffffffffffff9c, &(0x7f0000000600)='./mnt\x00', 0x777) mount$nfs4(&(0x7f0000000700)='127.0.0.1:/\x00', &(0x7f0000000600)='./mnt\x00', &(0x7f0000000800), 0x0, 0x0) 6.741186789s ago: executing program 0 (id=119): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./sys\x00', &(0x7f00000000c0)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./sys/module/md_mod/parameters/new_array\x00', 0x1, 0x0) write(r0, 0x0, 0x0) r1 = openat(0xffffffffffffff9c, 0x0, 0x2, 0x0) write(r1, &(0x7f00000001c0)='raid1\x00', 0x5) r2 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./sys/block/md0/md/new_dev\x00', 0x2, 0x0) write(r2, &(0x7f0000000240)='1:0\x00', 0x3) r3 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./sys/block/md0/md/dev-ram0/slot\x00', 0x2, 0x0) write(r3, &(0x7f00000002c0)='0\x00', 0x1) r4 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./sys/block/md0/md/raid_disks\x00', 0x2, 0x0) write(r4, &(0x7f0000000340)='1\x00', 0x1) r5 = openat(0xffffffffffffff9c, &(0x7f0000000380)='./sys/block/md0/md/array_state\x00', 0x2, 0x0) write(r5, &(0x7f00000003c0)='active\x00', 0x6) write(r1, &(0x7f0000000400)='raid0\x00', 0x5) 6.551444554s ago: executing program 0 (id=120): mkdirat(0xffffffffffffff9c, &(0x7f0000002000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000002000)='./sys\x00', &(0x7f0000002040)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./sys/bus/acpi/devices/PNP0A08:00/status\x00', 0x0, 0x0) read(r0, &(0x7f0000000100)=""/256, 0x100) r1 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./sys/bus/acpi/devices/PNP0A03:00/status\x00', 0x0, 0x0) read(r1, &(0x7f0000000300)=""/256, 0x100) r2 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./sys/bus/acpi/devices/PNP0C0F:00/status\x00', 0x0, 0x0) read(r2, &(0x7f0000000500)=""/256, 0x100) r3 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./sys/bus/acpi/devices/PNP0C0F:01/status\x00', 0x0, 0x0) read(r3, &(0x7f0000000700)=""/256, 0x100) openat(0xffffffffffffff9c, &(0x7f0000000800)='./sys/bus/acpi/devices/PNP0C0F:02/status\x00', 0x0, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000e00)='./sys/bus/acpi/devices/PNP0103:00/status\x00', 0x0, 0x0) read(r4, &(0x7f0000000f00)=""/256, 0x100) 6.480826069s ago: executing program 0 (id=121): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./sys\x00', &(0x7f00000000c0)='sysfs\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./sys/bus/platform/devices/ci_hdrc.0\x00', 0x0, 0x0) 6.480529536s ago: executing program 0 (id=122): syz_usb_connect(0x0, 0x1b, &(0x7f0000000000)=ANY=[@ANYBLOB="120100020000004034127856000000000000090209000001008032"], &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0}) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000001000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000001000)='./sys\x00', &(0x7f0000001100)='sysfs\x00', 0x0, 0x0) nanosleep(&(0x7f0000000300)={0x0, 0x1dcd6500}, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000001200)='./sys/bus/usb/devices/1-1/power/autosuspend_delay_ms\x00', 0x2, 0x0) write(r0, &(0x7f0000001300)='0\x00', 0x2) r1 = openat(0xffffffffffffff9c, &(0x7f0000001400)='./sys/bus/usb/devices/1-1/power/control\x00', 0x2, 0x0) write(r1, &(0x7f0000001500)='auto\x00', 0x5) r2 = openat(0xffffffffffffff9c, &(0x7f0000001600)='./sys/bus/usb/devices/2-1/power/autosuspend_delay_ms\x00', 0x2, 0x0) write(r2, &(0x7f0000001300)='0\x00', 0x2) r3 = openat(0xffffffffffffff9c, &(0x7f0000001700)='./sys/bus/usb/devices/2-1/power/control\x00', 0x2, 0x0) write(r3, &(0x7f0000001500)='auto\x00', 0x5) r4 = openat(0xffffffffffffff9c, &(0x7f0000001800)='./sys/bus/usb/devices/3-1/power/autosuspend_delay_ms\x00', 0x2, 0x0) write(r4, &(0x7f0000001300)='0\x00', 0x2) r5 = openat(0xffffffffffffff9c, &(0x7f0000001900)='./sys/bus/usb/devices/3-1/power/control\x00', 0x2, 0x0) write(r5, &(0x7f0000001500)='auto\x00', 0x5) r6 = openat(0xffffffffffffff9c, &(0x7f0000001a00)='./sys/bus/usb/devices/4-1/power/autosuspend_delay_ms\x00', 0x2, 0x0) write(r6, &(0x7f0000001300)='0\x00', 0x2) r7 = openat(0xffffffffffffff9c, &(0x7f0000001b00)='./sys/bus/usb/devices/4-1/power/control\x00', 0x2, 0x0) write(r7, &(0x7f0000001500)='auto\x00', 0x5) r8 = openat(0xffffffffffffff9c, &(0x7f0000001c00)='./sys/bus/usb/devices/5-1/power/autosuspend_delay_ms\x00', 0x2, 0x0) write(r8, &(0x7f0000001300)='0\x00', 0x2) r9 = openat(0xffffffffffffff9c, &(0x7f0000001d00)='./sys/bus/usb/devices/5-1/power/control\x00', 0x2, 0x0) write(r9, &(0x7f0000001500)='auto\x00', 0x5) nanosleep(&(0x7f0000000300)={0x1}, 0x0) 6.31905323s ago: executing program 5 (id=124): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./config\x00', &(0x7f0000000100)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000300)='./config/cluster/mycluster\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000500)='./config/cluster/mycluster/node/mynode\x00', 0x1ff) r0 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./config/cluster/mycluster/node/mynode/num\x00', 0x2, 0x0) write(r0, &(0x7f0000000700)='1\n', 0x2) r1 = openat(0xffffffffffffff9c, &(0x7f0000000800)='./config/cluster/mycluster/node/mynode/ipv4_address\x00', 0x2, 0x0) write(r1, &(0x7f0000000900)='127.0.0.1\n', 0xa) r2 = openat(0xffffffffffffff9c, &(0x7f0000000a00)='./config/cluster/mycluster/node/mynode/ipv4_port\x00', 0x2, 0x0) write(r2, &(0x7f0000000b00)='7777\n', 0x5) r3 = openat(0xffffffffffffff9c, &(0x7f0000000c00)='./config/cluster/mycluster/node/mynode/local\x00', 0x2, 0x0) write(r3, &(0x7f0000000d00)='1\n', 0x2) mkdirat(0xffffffffffffff9c, &(0x7f0000000e00)='./dlmfs\x00', 0x1ff) mount(0x0, &(0x7f0000000e00)='./dlmfs\x00', &(0x7f0000000f00)='ocfs2_dlmfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000001000)='./dlmfs/domain1\x00', 0x1ff) openat(0xffffffffffffff9c, &(0x7f0000001100)='./dlmfs/domain1/lock1\x00', 0x42, 0x1b6) 6.240959218s ago: executing program 5 (id=125): r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x42, 0x1ff) fallocate(r0, 0x0, 0x0, 0x1000000) r1 = syz_open_dev$loop(&(0x7f0000000100), 0x0, 0x0) ioctl$LOOP_SET_FD(r1, 0x4c00, r0) nanosleep(&(0x7f0000001000)={0x0, 0x5f5e100}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000200)='./sys\x00', 0x0, 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./sys/module/block2mtd/parameters/block2mtd\x00', 0x1, 0x0) write(r2, 0x0, 0x0) nanosleep(&(0x7f0000001000)={0x0, 0x5f5e100}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000800)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000000800)='./dev\x00', &(0x7f0000000900)='devtmpfs\x00', 0x0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./dev/ubi_ctrl\x00', 0x2, 0x0) ioctl(r3, 0x40186f40, &(0x7f0000000700)='\x00'/24) mkdirat(0xffffffffffffff9c, &(0x7f0000000800)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000000800)='./dev\x00', &(0x7f0000000900)='devtmpfs\x00', 0x0, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000a00)='./dev/ubi0\x00', 0x2, 0x0) ioctl(r4, 0x40986f00, &(0x7f0000000b00)="ffffffff01000000800f0000000000000300040000000000766f6c3000"/160) 5.981509693s ago: executing program 5 (id=126): syz_usb_connect(0x0, 0x3b, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000200000040cc1769190001010203010902290001010080320904000000ffffff000904000102ffffff000705810240000007050102400000"], 0x0) nanosleep(&(0x7f0000000300)={0x1}, 0x0) 3.820235314s ago: executing program 5 (id=132): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./proc\x00', &(0x7f0000000040)='proc\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./proc/sys/kernel/numa_balancing_scan_delay_ms\x00', 0x2, 0x0) write(r0, &(0x7f0000000200)='0\x00', 0x2) r1 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./proc/sys/kernel/numa_balancing_scan_size_mb\x00', 0x2, 0x0) write(r1, &(0x7f0000000400)='1024\x00', 0x5) nanosleep(&(0x7f0000000500)={0x1, 0x1dcd6500}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mbind(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x2005, &(0x7f0000000600)=0x2, 0x40, 0x0) madvise(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x17) nanosleep(&(0x7f0000000500)={0x1, 0x1dcd6500}, 0x0) madvise(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x17) 3.180165846s ago: executing program 4 (id=135): r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) sendto$inet6(r0, &(0x7f0000000000)="01040000000000006000000000081140000000000000000000000000000000010000000000000000000000000000000104d2162e00080000", 0x38, 0x0, &(0x7f0000000100)={0xa, 0x0, 0x0, @loopback}, 0x1c) nanosleep(&(0x7f0000000200)={0x0, 0x10000000}, 0x0) 2.939766428s ago: executing program 5 (id=136): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./sys\x00', &(0x7f00000000c0)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./sys/module/md_mod/parameters/new_array\x00', 0x1, 0x0) write(r0, 0x0, 0x0) r1 = openat(0xffffffffffffff9c, 0x0, 0x2, 0x0) write(r1, &(0x7f00000001c0)='raid1\x00', 0x5) r2 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./sys/block/md0/md/new_dev\x00', 0x2, 0x0) write(r2, &(0x7f0000000240)='1:0\x00', 0x3) r3 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./sys/block/md0/md/dev-ram0/slot\x00', 0x2, 0x0) write(r3, &(0x7f00000002c0)='0\x00', 0x1) r4 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./sys/block/md0/md/raid_disks\x00', 0x2, 0x0) write(r4, &(0x7f0000000340)='1\x00', 0x1) r5 = openat(0xffffffffffffff9c, &(0x7f0000000380)='./sys/block/md0/md/array_state\x00', 0x2, 0x0) write(r5, &(0x7f00000003c0)='active\x00', 0x6) write(r1, &(0x7f0000000400)='raid0\x00', 0x5) 2.831066181s ago: executing program 5 (id=137): r0 = syz_usb_connect(0x0, 0x48, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x8, 0x424, 0x12c, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x36, 0x1, 0x0, 0x0, 0x0, 0x0, "", [{{0x9, 0x4, 0x0, 0x0, 0x4, 0xff, 0xff, 0xff, 0x0, [], [{{0x9, 0x5, 0x81, 0x2, 0x200}}, {{0x9, 0x5, 0x2, 0x2, 0x200}}, {{0x9, 0x5, 0x83, 0x2, 0x200}}, {{0x9, 0x5, 0x4, 0x2, 0x200}}]}}]}}]}}, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000100)={0x7c, &(0x7f0000000200)={0x40, 0x1, 0x4, "04000001"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, &(0x7f0000000300)={0x7c, &(0x7f0000000400)={0x40, 0x10}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, &(0x7f0000000500)={0x7c, &(0x7f0000000600)={0x40, 0x0, 0xf, "0f00000100"/15}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) nanosleep(&(0x7f0000000b00)={0x0, 0x5f5e100}, 0x0) syz_usb_ep_read(r0, 0x2, 0x40, &(0x7f0000001000)=""/64) syz_usb_ep_write(r0, 0x81, 0x40, &(0x7f0000002000)="0202000100"/64) syz_usb_ep_read(r0, 0x2, 0x40, &(0x7f0000001000)=""/64) syz_usb_ep_write(r0, 0x81, 0x40, &(0x7f0000002000)="0202000100"/64) syz_usb_ep_read(r0, 0x2, 0x40, &(0x7f0000001000)=""/64) syz_usb_ep_write(r0, 0x81, 0x40, &(0x7f0000002000)="0202000100"/64) syz_usb_ep_read(r0, 0x2, 0x40, &(0x7f0000001000)=""/64) syz_usb_ep_write(r0, 0x81, 0x40, &(0x7f0000002000)="0202000100"/64) syz_usb_ep_read(r0, 0x2, 0x40, &(0x7f0000001000)=""/64) syz_usb_ep_write(r0, 0x81, 0x40, &(0x7f0000002000)="0202000100"/64) 2.830892294s ago: executing program 4 (id=138): mkdirat(0xffffffffffffff9c, &(0x7f0000002000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000002000)='./sys\x00', &(0x7f0000002040)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./sys/bus/acpi/devices/PNP0A08:00/status\x00', 0x0, 0x0) read(r0, &(0x7f0000000100)=""/256, 0x100) r1 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./sys/bus/acpi/devices/PNP0A03:00/status\x00', 0x0, 0x0) read(r1, &(0x7f0000000300)=""/256, 0x100) r2 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./sys/bus/acpi/devices/PNP0C0F:00/status\x00', 0x0, 0x0) read(r2, &(0x7f0000000500)=""/256, 0x100) openat(0xffffffffffffff9c, &(0x7f0000000600)='./sys/bus/acpi/devices/PNP0C0F:01/status\x00', 0x0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000e00)='./sys/bus/acpi/devices/PNP0103:00/status\x00', 0x0, 0x0) read(r3, &(0x7f0000000f00)=""/256, 0x100) 2.708996548s ago: executing program 4 (id=139): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./sys\x00', &(0x7f00000000c0)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./sys/module/md_mod/parameters/new_array\x00', 0x1, 0x0) write(r0, &(0x7f0000000140)='md0\n', 0x4) r1 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./sys/block/md0/md/level\x00', 0x1, 0x0) write(r1, &(0x7f00000001c0)='raid1\n', 0x6) openat(0xffffffffffffff9c, &(0x7f0000000200)='./sys/block/md0/md/raid_disks\x00', 0x1, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./sys/block/md0/md/new_dev\x00', 0x1, 0x0) write(r2, &(0x7f00000002c0)='1:0\n', 0x4) r3 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./sys/block/md0/md/new_dev\x00', 0x1, 0x0) write(r3, &(0x7f0000000340)='1:1\n', 0x4) r4 = openat(0xffffffffffffff9c, &(0x7f0000000380)='./sys/block/md0/md/dev-ram0/state\x00', 0x1, 0x0) write(r4, &(0x7f00000003c0)='writemostly\n', 0xc) r5 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./sys/block/md0/md/component_size\x00', 0x1, 0x0) write(r5, &(0x7f0000000440)='1024\n', 0x5) r6 = openat(0xffffffffffffff9c, &(0x7f0000000480)='./sys/block/md0/md/bitmap/location\x00', 0x1, 0x0) write(r6, &(0x7f00000004c0)='file\n', 0x5) r7 = openat(0xffffffffffffff9c, &(0x7f0000000500)='./sys/block/md0/md/array_state\x00', 0x1, 0x0) write(r7, &(0x7f0000000540)='readonly\n', 0x9) r8 = openat(0xffffffffffffff9c, &(0x7f0000000580)='./sys/block/md0/md/bitmap/backlog\x00', 0x1, 0x0) write(r8, &(0x7f00000005c0)='1024\n', 0x5) 2.43945985s ago: executing program 4 (id=140): r0 = syz_open_dev$vivid(&(0x7f0000000000), 0x3, 0x2) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc0fd565c, &(0x7f0000000100)={0x0, 0x1, 0x1, {0x9, @pix_mp={0x100, 0x100, 0x0, 0x1, 0x0, [], 0x1}}}) 2.435787904s ago: executing program 4 (id=141): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./config/usb_gadget/g1\x00', 0x1ff) write(0xffffffffffffffff, &(0x7f0000000140)='0x1d6b\x00', 0x7) r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./config/usb_gadget/g1/idProduct\x00', 0x2, 0x0) write(r0, &(0x7f00000001c0)='0x0104\x00', 0x7) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./config/usb_gadget/g1/configs/c.1\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./config/usb_gadget/g1/functions/uac2.0\x00', 0x1ff) r1 = openat(0xffffffffffffff9c, &(0x7f0000000500)='./config/usb_gadget/g1/functions/uac2.0/c_sync\x00', 0x2, 0x0) write(r1, &(0x7f0000000540)='adaptive\x00', 0x9) symlinkat(&(0x7f0000000280)='./config/usb_gadget/g1/functions/uac2.0\x00', 0xffffffffffffff9c, &(0x7f00000002c0)='./config/usb_gadget/g1/configs/c.1/uac2.0\x00') r2 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./config/usb_gadget/g1/UDC\x00', 0x2, 0x0) write(r2, &(0x7f0000000340)='dummy_udc.0\n\x00', 0xd) nanosleep(&(0x7f0000000380)={0x0, 0x1dcd6500}, 0x0) r3 = syz_open_dev$usbfs(&(0x7f00000003c0), 0x15, 0x2) ioctl$USBDEVFS_CONTROL(r3, 0xc0185500, &(0x7f0000000400)={0x21, 0x1, 0x100, 0x500, 0x1, 0x3e8, &(0x7f0000000440)="01"}) ioctl$USBDEVFS_CONTROL(r3, 0xc0185500, &(0x7f0000000480)={0x21, 0x1, 0x100, 0x600, 0x1, 0x3e8, &(0x7f0000000440)="01"}) r4 = syz_open_dev$usbfs(&(0x7f00000003c0), 0x1f, 0x2) ioctl$USBDEVFS_CONTROL(r4, 0xc0185500, &(0x7f0000000400)={0x21, 0x1, 0x100, 0x500, 0x1, 0x3e8, &(0x7f0000000440)="01"}) ioctl$USBDEVFS_CONTROL(r4, 0xc0185500, &(0x7f0000000480)={0x21, 0x1, 0x100, 0x600, 0x1, 0x3e8, &(0x7f0000000440)="01"}) 1.811018982s ago: executing program 4 (id=142): r0 = syz_usb_connect(0x0, 0x5c, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000200000040b113420000000000000109024a0001010080fa0904000008ffffff000705810200020007058202000200070583020002000705840300020007050102000200070502020002000705030200020007050402000200"], &(0x7f0000001400)={0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, &(0x7f0000002000)={0x84, &(0x7f0000002100)={0xc0, 0x2, 0x8, '\x00\x00\x00\x00\x00\x00B\a'}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, &(0x7f0000002000)={0x84, &(0x7f0000002100)={0xc0, 0x2, 0x8, '\x00\x00\x00\x00\x00\x00B\a'}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, &(0x7f0000002000)={0x84, &(0x7f0000002100)={0xc0, 0x2, 0x8, '\x00\x00\x00\x00\x00\x00B\a'}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) nanosleep(&(0x7f0000000100)={0x1}, 0x0) 459.887664ms ago: executing program 3 (id=144): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./config\x00', &(0x7f0000000100)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000300)='./config/cluster/mycluster\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000500)='./config/cluster/mycluster/node/mynode\x00', 0x1ff) r0 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./config/cluster/mycluster/node/mynode/num\x00', 0x2, 0x0) write(r0, &(0x7f0000000700)='1\n', 0x2) r1 = openat(0xffffffffffffff9c, &(0x7f0000000800)='./config/cluster/mycluster/node/mynode/ipv4_address\x00', 0x2, 0x0) write(r1, &(0x7f0000000900)='127.0.0.1\n', 0xa) r2 = openat(0xffffffffffffff9c, &(0x7f0000000a00)='./config/cluster/mycluster/node/mynode/ipv4_port\x00', 0x2, 0x0) write(r2, &(0x7f0000000b00)='7777\n', 0x5) r3 = openat(0xffffffffffffff9c, &(0x7f0000000c00)='./config/cluster/mycluster/node/mynode/local\x00', 0x2, 0x0) write(r3, &(0x7f0000000d00)='1\n', 0x2) mkdirat(0xffffffffffffff9c, &(0x7f0000000e00)='./dlmfs\x00', 0x1ff) mount(0x0, &(0x7f0000000e00)='./dlmfs\x00', &(0x7f0000000f00)='ocfs2_dlmfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000001000)='./dlmfs/domain1\x00', 0x1ff) openat(0xffffffffffffff9c, &(0x7f0000001100)='./dlmfs/domain1/lock1\x00', 0x42, 0x1b6) 321.024394ms ago: executing program 3 (id=145): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./sys\x00', &(0x7f00000000c0)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./sys/module/md_mod/parameters/new_array\x00', 0x1, 0x0) write(r0, 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./sys/block/md0/md/level\x00', 0x2, 0x0) write(r1, 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./sys/block/md0/md/new_dev\x00', 0x2, 0x0) write(r2, &(0x7f0000000240)='1:0\x00', 0x3) r3 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./sys/block/md0/md/dev-ram0/slot\x00', 0x2, 0x0) write(r3, &(0x7f00000002c0)='0\x00', 0x1) r4 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./sys/block/md0/md/raid_disks\x00', 0x2, 0x0) write(r4, &(0x7f0000000340)='1\x00', 0x1) r5 = openat(0xffffffffffffff9c, &(0x7f0000000380)='./sys/block/md0/md/array_state\x00', 0x2, 0x0) write(r5, &(0x7f00000003c0)='active\x00', 0x6) write(r1, &(0x7f0000000400)='raid0\x00', 0x5) 120.307877ms ago: executing program 3 (id=146): r0 = syz_open_procfs$namespace(0x1, &(0x7f0000000000)='ns/net\x00') r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=@setlink={0x28, 0x10, 0x1, 0x0, 0x0, {}, [@IFLA_NET_NS_FD={0x8, 0x1c, r0}]}, 0x28}}, 0x0) 120.057162ms ago: executing program 3 (id=147): mkdirat(0xffffffffffffff9c, &(0x7f0000002000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000002000)='./sys\x00', &(0x7f0000002040)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./sys/bus/acpi/devices/PNP0A08:00/status\x00', 0x0, 0x0) read(r0, &(0x7f0000000100)=""/256, 0x100) r1 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./sys/bus/acpi/devices/PNP0A03:00/status\x00', 0x0, 0x0) read(r1, &(0x7f0000000300)=""/256, 0x100) r2 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./sys/bus/acpi/devices/PNP0C0F:00/status\x00', 0x0, 0x0) read(r2, &(0x7f0000000500)=""/256, 0x100) r3 = openat(0xffffffffffffff9c, &(0x7f0000000e00)='./sys/bus/acpi/devices/PNP0103:00/status\x00', 0x0, 0x0) read(r3, &(0x7f0000000f00)=""/256, 0x100) 348.577µs ago: executing program 3 (id=148): mkdirat(0xffffffffffffff9c, &(0x7f0000002000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000002000)='./sys\x00', &(0x7f0000002040)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./sys/devices/system/cpu/cpu0/cpuidle/state0/name\x00', 0x0, 0x0) read(r0, &(0x7f0000000100)=""/256, 0x100) r1 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./sys/devices/system/cpu/cpu0/cpuidle/state0/desc\x00', 0x0, 0x0) read(r1, &(0x7f0000000300)=""/256, 0x100) r2 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./sys/devices/system/cpu/cpu0/cpuidle/state1/name\x00', 0x0, 0x0) read(r2, &(0x7f0000000500)=""/256, 0x100) r3 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./sys/devices/system/cpu/cpu0/cpuidle/state1/desc\x00', 0x0, 0x0) read(r3, &(0x7f0000000700)=""/256, 0x100) r4 = openat(0xffffffffffffff9c, &(0x7f0000000800)='./sys/devices/system/cpu/cpu0/cpuidle/state2/name\x00', 0x0, 0x0) read(r4, &(0x7f0000000900)=""/256, 0x100) r5 = openat(0xffffffffffffff9c, &(0x7f0000000a00)='./sys/devices/system/cpu/cpu0/cpuidle/state2/desc\x00', 0x0, 0x0) read(r5, &(0x7f0000000b00)=""/256, 0x100) 0s ago: executing program 3 (id=149): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc\x00', 0x1ff) mount(&(0x7f0000000100)=@filename='proc\x00', &(0x7f0000000000)='./proc\x00', &(0x7f0000000100)='proc\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./proc/sys/kernel/panic_on_warn\x00', 0x2, 0x0) write(r0, &(0x7f0000000300)='0\x00', 0x1) mkdirat(0xffffffffffffff9c, &(0x7f0000000400)='./config\x00', 0x1ff) mount(0x0, &(0x7f0000000400)='./config\x00', &(0x7f0000000500)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000600)='./config/target\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000700)='./config/target/core\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000800)='./config/target/core/rd_mcp_0\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000900)='./config/target/core/rd_mcp_0/ramdisk0\x00', 0x1ff) r1 = openat(0xffffffffffffff9c, &(0x7f0000000a00)='./config/target/core/rd_mcp_0/ramdisk0/control\x00', 0x2, 0x0) write(r1, &(0x7f0000000b00)='rd_pages=1024\x00', 0xd) r2 = openat(0xffffffffffffff9c, &(0x7f0000000c00)='./config/target/core/rd_mcp_0/ramdisk0/enable\x00', 0x2, 0x0) write(r2, &(0x7f0000000d00)='1\x00', 0x1) mkdirat(0xffffffffffffff9c, &(0x7f0000000e00)='./config/usb_gadget\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000f00)='./config/usb_gadget/g1\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000001000)='./config/usb_gadget/g1/configs\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000001100)='./config/usb_gadget/g1/configs/c.1\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000001200)='./config/usb_gadget/g1/functions\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000001300)='./config/usb_gadget/g1/functions/tcm.0\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000001500)='./config/target/usb_gadget\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000001600)='./config/target/usb_gadget/naa.1234567890\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000001700)='./config/target/usb_gadget/naa.1234567890/tpgt_1\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000001800)='./config/target/usb_gadget/naa.1234567890/tpgt_1/lun\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000001900)='./config/target/usb_gadget/naa.1234567890/tpgt_1/lun/lun_0\x00', 0x1ff) symlinkat(&(0x7f0000000900)='./config/target/core/rd_mcp_0/ramdisk0\x00', 0xffffffffffffff9c, &(0x7f0000001a00)='./config/target/usb_gadget/naa.1234567890/tpgt_1/lun/lun_0/virtual_device\x00') r3 = openat(0xffffffffffffff9c, &(0x7f0000001b00)='./config/target/usb_gadget/naa.1234567890/tpgt_1/nexus\x00', 0x2, 0x0) write(r3, &(0x7f0000001c00)='naa.1234567890\x00', 0xe) r4 = openat(0xffffffffffffff9c, &(0x7f0000001d00)='./config/target/usb_gadget/naa.1234567890/tpgt_1/enable\x00', 0x2, 0x0) write(r4, &(0x7f0000001e00)='1\x00', 0x1) symlinkat(&(0x7f0000001300)='./config/usb_gadget/g1/functions/tcm.0\x00', 0xffffffffffffff9c, &(0x7f0000001400)='./config/usb_gadget/g1/configs/c.1/tcm.0\x00') r5 = openat(0xffffffffffffff9c, &(0x7f0000001f00)='./config/usb_gadget/g1/UDC\x00', 0x2, 0x0) write(r5, &(0x7f0000002000)='dummy_udc.0\x00', 0xb) nanosleep(&(0x7f0000002100)={0x1}, 0x0) r6 = syz_open_dev$sg(&(0x7f0000002200), 0x0, 0x2) ioctl$SG_IO(r6, 0x2285, &(0x7f0000002300)={0x53, 0xfffffffe, 0xa, 0x0, @buffer={0x0, 0x18, &(0x7f0000002400)=""/24}, &(0x7f0000002500)="5f000000000000001800", 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$SG_IO(r6, 0x2285, &(0x7f0000002600)={0x53, 0xfffffffe, 0xa, 0x0, @buffer={0x0, 0x18, &(0x7f0000002700)=""/24}, &(0x7f0000002800)="5f050100000000001800", 0x0, 0x0, 0x0, 0x0, 0x0}) kernel console output (not intermixed with test programs): Warning: Permanently added '[localhost]:40556' (ED25519) to the list of known hosts. [ 40.147711][ T43] kauditd_printk_skb: 17 callbacks suppressed [ 40.147795][ T43] audit: type=1400 audit(1788448966.171:138): avc: denied { name_bind } for pid=5712 comm="sshd-session" src=30000 scontext=system_u:system_r:sshd_t tcontext=system_u:object_r:unreserved_port_t tclass=tcp_socket permissive=1 [ 40.177502][ T43] audit: type=1400 audit(1788448966.201:139): avc: denied { execute } for pid=5713 comm="sh" name="syz-executor" dev="sda1" ino=2020 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:etc_runtime_t tclass=file permissive=1 [ 40.178626][ T43] audit: type=1400 audit(1788448966.201:140): avc: denied { execute_no_trans } for pid=5713 comm="sh" path="/syz-executor" dev="sda1" ino=2020 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:etc_runtime_t tclass=file permissive=1 [ 42.623803][ T43] audit: type=1400 audit(1788448968.651:141): avc: denied { mounton } for pid=5713 comm="syz-executor" path="/syzcgroup/unified" dev="sda1" ino=2022 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1 [ 42.625421][ T43] audit: type=1400 audit(1788448968.651:142): avc: denied { mount } for pid=5713 comm="syz-executor" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 42.628329][ T5713] cgroup: Unknown subsys name 'net' [ 42.629674][ T43] audit: type=1400 audit(1788448968.651:143): avc: denied { unmount } for pid=5713 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 42.766312][ T5713] cgroup: Unknown subsys name 'cpuset' [ 42.771086][ T5713] cgroup: Unknown subsys name 'rlimit' [ 42.963062][ T43] audit: type=1400 audit(1788448968.991:144): avc: denied { setattr } for pid=5713 comm="syz-executor" name="raw-gadget" dev="devtmpfs" ino=848 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 42.963665][ T43] audit: type=1400 audit(1788448968.991:145): avc: denied { create } for pid=5713 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 42.963939][ T43] audit: type=1400 audit(1788448968.991:146): avc: denied { write } for pid=5713 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 42.964121][ T43] audit: type=1400 audit(1788448968.991:147): avc: denied { read } for pid=5713 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 43.018236][ T5717] SELinux: Context root:object_r:swapfile_t is not valid (left unmapped). Setting up swapspace version 1, size = 127995904 bytes [ 43.769082][ T5713] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 47.518110][ T43] kauditd_printk_skb: 8 callbacks suppressed [ 47.518197][ T43] audit: type=1400 audit(1788448973.541:156): avc: denied { execmem } for pid=5721 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 47.773446][ T43] audit: type=1400 audit(1788448973.801:157): avc: denied { create } for pid=5725 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 47.775183][ T43] audit: type=1400 audit(1788448973.801:158): avc: denied { read write } for pid=5725 comm="syz-executor" name="vhci" dev="devtmpfs" ino=1290 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 47.775598][ T43] audit: type=1400 audit(1788448973.801:159): avc: denied { open } for pid=5725 comm="syz-executor" path="/dev/vhci" dev="devtmpfs" ino=1290 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 47.797343][ T43] audit: type=1400 audit(1788448973.821:160): avc: denied { ioctl } for pid=5725 comm="syz-executor" path="socket:[7292]" dev="sockfs" ino=7292 ioctlcmd=0x48c9 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 47.819719][ T5734] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 47.821657][ T5734] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 47.822909][ T5734] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 47.824563][ T5734] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 47.825668][ T5734] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 47.826661][ T5734] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 47.827052][ T5734] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 47.828394][ T5738] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 47.828709][ T5738] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 47.828952][ T5734] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 47.830679][ T5734] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 47.831341][ T5734] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 47.833051][ T5740] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 47.838889][ T5741] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 47.839132][ T5741] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 47.839262][ T43] audit: type=1400 audit(1788448973.861:161): avc: denied { read } for pid=5725 comm="syz-executor" dev="nsfs" ino=4026531833 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 47.839292][ T43] audit: type=1400 audit(1788448973.861:162): avc: denied { open } for pid=5725 comm="syz-executor" path="net:[4026531833]" dev="nsfs" ino=4026531833 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 47.839298][ T5741] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 47.839913][ T43] audit: type=1400 audit(1788448973.861:163): avc: denied { mounton } for pid=5725 comm="syz-executor" path="/" dev="sda1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:root_t tclass=dir permissive=1 [ 47.840859][ T5741] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 47.841396][ T5741] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 47.846643][ T5741] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 47.847831][ T5086] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 47.882040][ T43] audit: type=1400 audit(1788448973.911:164): avc: denied { module_request } for pid=5725 comm="syz-executor" kmod="netdev-nr0" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1 [ 47.913200][ T43] audit: type=1400 audit(1788448973.941:165): avc: denied { sys_module } for pid=5725 comm="syz-executor" capability=16 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 48.547502][ T5727] bridge0: port 1(bridge_slave_0) entered blocking state [ 48.547660][ T5727] bridge0: port 1(bridge_slave_0) entered disabled state [ 48.547786][ T5727] bridge_slave_0: entered allmulticast mode [ 48.554308][ T5727] bridge_slave_0: entered promiscuous mode [ 48.559266][ T5727] bridge0: port 2(bridge_slave_1) entered blocking state [ 48.560467][ T5727] bridge0: port 2(bridge_slave_1) entered disabled state [ 48.560650][ T5727] bridge_slave_1: entered allmulticast mode [ 48.562723][ T5727] bridge_slave_1: entered promiscuous mode [ 48.607799][ T5727] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 48.618681][ T5725] bridge0: port 1(bridge_slave_0) entered blocking state [ 48.620755][ T5725] bridge0: port 1(bridge_slave_0) entered disabled state [ 48.620929][ T5725] bridge_slave_0: entered allmulticast mode [ 48.622378][ T5725] bridge_slave_0: entered promiscuous mode [ 48.625350][ T5725] bridge0: port 2(bridge_slave_1) entered blocking state [ 48.625431][ T5725] bridge0: port 2(bridge_slave_1) entered disabled state [ 48.627345][ T5725] bridge_slave_1: entered allmulticast mode [ 48.628712][ T5725] bridge_slave_1: entered promiscuous mode [ 48.635434][ T5727] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 48.680868][ T5727] team0: Port device team_slave_0 added [ 48.683083][ T5725] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 48.696428][ T5727] team0: Port device team_slave_1 added [ 48.707128][ T5725] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 48.735641][ T5727] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 48.735690][ T5727] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 48.735729][ T5727] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 48.761629][ T5725] team0: Port device team_slave_0 added [ 48.762134][ T5727] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 48.762145][ T5727] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 48.762162][ T5727] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 48.767831][ T5726] bridge0: port 1(bridge_slave_0) entered blocking state [ 48.767925][ T5726] bridge0: port 1(bridge_slave_0) entered disabled state [ 48.768010][ T5726] bridge_slave_0: entered allmulticast mode [ 48.769113][ T5726] bridge_slave_0: entered promiscuous mode [ 48.781556][ T5726] bridge0: port 2(bridge_slave_1) entered blocking state [ 48.781642][ T5726] bridge0: port 2(bridge_slave_1) entered disabled state [ 48.781974][ T5726] bridge_slave_1: entered allmulticast mode [ 48.783650][ T5726] bridge_slave_1: entered promiscuous mode [ 48.787336][ T5725] team0: Port device team_slave_1 added [ 48.800807][ T5725] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 48.800859][ T5725] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 48.800875][ T5725] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 48.832460][ T5726] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 48.838876][ T5725] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 48.838931][ T5725] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 48.838969][ T5725] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 48.858309][ T5726] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 48.886656][ T5727] hsr_slave_0: entered promiscuous mode [ 48.887218][ T5727] hsr_slave_1: entered promiscuous mode [ 48.919792][ T5726] team0: Port device team_slave_0 added [ 48.962196][ T5726] team0: Port device team_slave_1 added [ 48.994082][ T5730] bridge0: port 1(bridge_slave_0) entered blocking state [ 48.994248][ T5730] bridge0: port 1(bridge_slave_0) entered disabled state [ 48.994390][ T5730] bridge_slave_0: entered allmulticast mode [ 48.996489][ T5730] bridge_slave_0: entered promiscuous mode [ 49.019410][ T5725] hsr_slave_0: entered promiscuous mode [ 49.020060][ T5725] hsr_slave_1: entered promiscuous mode [ 49.020898][ T5725] debugfs: 'hsr0' already exists in 'hsr' [ 49.020991][ T5725] Cannot create hsr debugfs directory [ 49.028225][ T5730] bridge0: port 2(bridge_slave_1) entered blocking state [ 49.028441][ T5730] bridge0: port 2(bridge_slave_1) entered disabled state [ 49.028661][ T5730] bridge_slave_1: entered allmulticast mode [ 49.029577][ T5730] bridge_slave_1: entered promiscuous mode [ 49.049352][ T5726] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 49.049436][ T5726] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 49.049500][ T5726] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 49.051566][ T5726] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 49.051585][ T5726] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 49.051606][ T5726] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 49.086442][ T5730] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 49.105326][ T5730] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 49.157200][ T5730] team0: Port device team_slave_0 added [ 49.191180][ T5730] team0: Port device team_slave_1 added [ 49.207531][ T5726] hsr_slave_0: entered promiscuous mode [ 49.208049][ T5726] hsr_slave_1: entered promiscuous mode [ 49.208386][ T5726] debugfs: 'hsr0' already exists in 'hsr' [ 49.208400][ T5726] Cannot create hsr debugfs directory [ 49.244372][ T5730] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 49.244421][ T5730] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 49.245618][ T5730] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 49.267745][ T5730] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 49.267807][ T5730] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 49.267852][ T5730] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 49.396446][ T5730] hsr_slave_0: entered promiscuous mode [ 49.397269][ T5730] hsr_slave_1: entered promiscuous mode [ 49.397973][ T5730] debugfs: 'hsr0' already exists in 'hsr' [ 49.397994][ T5730] Cannot create hsr debugfs directory [ 49.471778][ T5727] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 49.481623][ T5727] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 49.507245][ T5727] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 49.514106][ T5727] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 49.514880][ T5727] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 49.524379][ T5727] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 49.543504][ T5727] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 49.548386][ T5727] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 49.622513][ T5725] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 49.630470][ T5725] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 49.631342][ T5725] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 49.634973][ T5725] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 49.639517][ T5725] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 49.645287][ T5725] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 49.649395][ T5725] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 49.653972][ T5725] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 49.712961][ T5726] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 49.718333][ T5726] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 49.719553][ T5726] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 49.724819][ T5726] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 49.726416][ T5726] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 49.731153][ T5726] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 49.733763][ T5726] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 49.738145][ T5726] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 49.809432][ T5730] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 49.815373][ T5730] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 49.816060][ T5730] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 49.819731][ T5730] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 49.820680][ T5730] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 49.824179][ T5730] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 49.831323][ T5730] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 49.835880][ T5730] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 49.880931][ T5725] 8021q: adding VLAN 0 to HW filter on device bond0 [ 49.881487][ T5735] Bluetooth: hci1: command tx timeout [ 49.881636][ T5086] Bluetooth: hci0: command tx timeout [ 49.883960][ T5727] 8021q: adding VLAN 0 to HW filter on device bond0 [ 49.891036][ T5086] Bluetooth: hci3: command tx timeout [ 49.924419][ T5727] 8021q: adding VLAN 0 to HW filter on device team0 [ 49.926318][ T5725] 8021q: adding VLAN 0 to HW filter on device team0 [ 49.939232][ T226] bridge0: port 1(bridge_slave_0) entered blocking state [ 49.939395][ T226] bridge0: port 1(bridge_slave_0) entered forwarding state [ 49.942888][ T226] bridge0: port 1(bridge_slave_0) entered blocking state [ 49.942936][ T226] bridge0: port 1(bridge_slave_0) entered forwarding state [ 49.952434][ T5726] 8021q: adding VLAN 0 to HW filter on device bond0 [ 49.959733][ T226] bridge0: port 2(bridge_slave_1) entered blocking state [ 49.959864][ T226] bridge0: port 2(bridge_slave_1) entered forwarding state [ 49.960763][ T5086] Bluetooth: hci2: command tx timeout [ 49.969230][ T226] bridge0: port 2(bridge_slave_1) entered blocking state [ 49.969560][ T226] bridge0: port 2(bridge_slave_1) entered forwarding state [ 49.996279][ T5726] 8021q: adding VLAN 0 to HW filter on device team0 [ 50.015929][ T226] bridge0: port 1(bridge_slave_0) entered blocking state [ 50.016012][ T226] bridge0: port 1(bridge_slave_0) entered forwarding state [ 50.043633][ T5730] 8021q: adding VLAN 0 to HW filter on device bond0 [ 50.048111][ T226] bridge0: port 2(bridge_slave_1) entered blocking state [ 50.048284][ T226] bridge0: port 2(bridge_slave_1) entered forwarding state [ 50.063951][ T5725] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 50.090709][ T5730] 8021q: adding VLAN 0 to HW filter on device team0 [ 50.097732][ T75] bridge0: port 1(bridge_slave_0) entered blocking state [ 50.097856][ T75] bridge0: port 1(bridge_slave_0) entered forwarding state [ 50.107570][ T226] bridge0: port 2(bridge_slave_1) entered blocking state [ 50.107668][ T226] bridge0: port 2(bridge_slave_1) entered forwarding state [ 50.164127][ T5730] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 50.325957][ T5727] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 50.369115][ T5727] veth0_vlan: entered promiscuous mode [ 50.384458][ T5727] veth1_vlan: entered promiscuous mode [ 50.405004][ T5725] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 50.418588][ T5730] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 50.438132][ T5727] veth0_macvtap: entered promiscuous mode [ 50.455598][ T5727] veth1_macvtap: entered promiscuous mode [ 50.466417][ T5725] veth0_vlan: entered promiscuous mode [ 50.482354][ T5726] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 50.489351][ T5725] veth1_vlan: entered promiscuous mode [ 50.512548][ T5727] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 50.525678][ T5730] veth0_vlan: entered promiscuous mode [ 50.527749][ T5727] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 50.538962][ T5730] veth1_vlan: entered promiscuous mode [ 50.547672][ T5725] veth0_macvtap: entered promiscuous mode [ 50.554054][ T5725] veth1_macvtap: entered promiscuous mode [ 50.571822][ T5726] veth0_vlan: entered promiscuous mode [ 50.588454][ T5726] veth1_vlan: entered promiscuous mode [ 50.593926][ T5725] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 50.614987][ T5725] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 50.661006][ T5827] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 50.661638][ T5730] veth0_macvtap: entered promiscuous mode [ 50.667964][ T143] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 50.668027][ T143] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 50.701353][ T5730] veth1_macvtap: entered promiscuous mode [ 50.712779][ T5726] veth0_macvtap: entered promiscuous mode [ 50.732307][ T5726] veth1_macvtap: entered promiscuous mode [ 50.744269][ T226] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 50.746391][ T226] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 50.754223][ T38] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 50.754265][ T5730] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 50.754290][ T38] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 50.769482][ T5730] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 50.775274][ T5726] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 50.798082][ T5727] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 50.800801][ T5726] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 50.803143][ T13] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 50.803495][ T13] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 50.803929][ T13] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 50.809073][ T13] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 50.875267][ T143] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 50.875314][ T143] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 50.901750][ T13] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 50.901824][ T13] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 50.901871][ T13] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 50.901905][ T13] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 50.901940][ T13] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 50.901977][ T13] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 50.902011][ T13] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 50.902047][ T13] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 50.944686][ T5776] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 50.945409][ T5776] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 50.945466][ T5776] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 50.981584][ T143] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 50.981895][ T143] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 51.001860][ T75] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 51.001898][ T75] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 51.003053][ T5881] nvme_tcp: queue 0: invalid maxh2cdata returned 0 [ 51.064023][ T75] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 51.064088][ T75] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 51.085403][ T75] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 51.085477][ T75] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 51.298896][ T5898] dlm: no local IP address has been set [ 51.298957][ T5898] dlm: cannot start dlm midcomms -107 [ 51.317384][ T5894] ftl_cs: FTL header not found. [ 51.362630][ T5894] block2mtd: mtd1: [./dev/ram0] erase_size = 128KiB [131072] [ 51.363827][ T5902] ubi0: attaching mtd0 [ 51.365832][ T5902] ubi0: scanning is finished [ 51.365848][ T5902] ubi0: empty MTD device detected [ 51.427727][ T5908] Invalid source name [ 51.427795][ T5908] UBIFS error (pid: 5908): cannot open "./dev/ubi0_0", error -22 [ 51.559171][ T5902] ubi0: attached mtd0 (name "mtdram test device", size 0 MiB) [ 51.559229][ T5902] ubi0: PEB size: 4096 bytes (4 KiB), LEB size: 3968 bytes [ 51.559273][ T5902] ubi0: min./max. I/O unit sizes: 1/64, sub-page size 1 [ 51.559298][ T5902] ubi0: VID header offset: 64 (aligned 64), data offset: 128 [ 51.559375][ T5902] ubi0: good PEBs: 32, bad PEBs: 0, corrupted PEBs: 0 [ 51.559388][ T5902] ubi0: user volume: 0, internal volumes: 1, max. volumes count: 23 [ 51.559397][ T5902] ubi0: max/mean erase counter: 0/0, WL threshold: 4096, image sequence number: 493561092 [ 51.559410][ T5902] ubi0: available PEBs: 28, total reserved PEBs: 4, PEBs reserved for bad PEB handling: 0 [ 51.559685][ T5909] ubi0: background thread "ubi_bgt0d" started, PID 5909 [ 51.590758][ T5811] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 51.752396][ T5811] usb 5-1: New USB device found, idVendor=0a12, idProduct=0001, bcdDevice= 0.00 [ 51.754931][ T5811] usb 5-1: config 1 has an invalid descriptor of length 7, skipping remainder of the config [ 51.754977][ T5811] usb 5-1: config 1 interface 1 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 51.757559][ T5811] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 51.757576][ T5811] usb 5-1: Product: syz [ 51.757584][ T5811] usb 5-1: Manufacturer: syz [ 51.757591][ T5811] usb 5-1: SerialNumber: syz [ 51.961094][ T5735] Bluetooth: hci3: command tx timeout [ 51.961190][ T5731] Bluetooth: hci0: command tx timeout [ 51.961235][ T5731] Bluetooth: hci1: command tx timeout [ 52.022953][ T67] Bluetooth: hci4: unexpected event for opcode 0x0c03 [ 52.040641][ T67] Bluetooth: hci2: command tx timeout [ 52.273657][ T67] Bluetooth: hci4: unexpected event for opcode 0x1003 [ 52.320486][ T5889] NFSD: Unable to initialize client recovery tracking! (-110) [ 52.321283][ T5889] NFSD: Is nfsdcld running? If not, enable CONFIG_NFSD_LEGACY_CLIENT_TRACKING. [ 52.321300][ T5889] NFSD: starting 90-second grace period (net f0000413) [ 52.490463][ T5834] psmouse serio2: Failed to reset mouse on : -5 [ 52.525662][ T5086] Bluetooth: hci4: CSR: Setting up dongle with HCI ver=6 rev=0000 [ 52.525729][ T5086] Bluetooth: hci4: LMP ver=6 subver=0000; manufacturer=0 [ 52.525869][ T5086] Bluetooth: hci4: CSR: Unbranded CSR clone detected; adding workarounds and force-suspending once... [ 52.526268][ T5086] Bluetooth: hci4: CSR: Couldn't suspend the device for our Barrot 8041a02 receive-issue workaround [ 52.527121][ T5086] Bluetooth: hci4: HCI Delete Stored Link Key command is advertised, but not supported. [ 52.527134][ T5086] Bluetooth: hci4: HCI Read Default Erroneous Data Reporting command is advertised, but not supported. [ 52.527143][ T5086] Bluetooth: hci4: HCI Set Event Filter command not supported. [ 52.685594][ T43] kauditd_printk_skb: 77 callbacks suppressed [ 52.685708][ T43] audit: type=1400 audit(1788448978.711:243): avc: denied { unmount } for pid=5727 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfsd_fs_t tclass=filesystem permissive=1 [ 52.776592][ T67] Bluetooth: hci4: unexpected event for opcode 0x1009 [ 52.990433][ T5826] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 53.028311][ T67] Bluetooth: hci4: unexpected event for opcode 0x1002 [ 53.171744][ T5826] usb 6-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 53.176971][ T5826] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 53.181790][ T5826] usb 6-1: Product: syz [ 53.181804][ T5826] usb 6-1: Manufacturer: syz [ 53.181812][ T5826] usb 6-1: SerialNumber: syz [ 53.219184][ T43] audit: type=1400 audit(1700000000.489:244): avc: denied { firmware_load } for pid=5826 comm="kworker/0:3" path="/lib/firmware/ath9k_htc/htc_9271-1.4.0.fw" dev="sda1" ino=313 scontext=system_u:system_r:kernel_t tcontext=system_u:object_r:lib_t tclass=system permissive=1 [ 53.229836][ T5826] usb 6-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 53.282012][ T43] audit: type=1400 audit(1700000000.559:245): avc: denied { bind } for pid=5904 comm="syz.0.8" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 53.282737][ T43] audit: type=1400 audit(1700000000.559:246): avc: denied { write } for pid=5904 comm="syz.0.8" path="socket:[8660]" dev="sockfs" ino=8660 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 53.332365][ T5086] Bluetooth: hci4: Opcode 0x0c03 failed: -71 [ 53.341222][ T5879] usb 5-1: USB disconnect, device number 2 [ 53.592555][ T43] audit: type=1400 audit(1700000000.869:247): avc: denied { read write } for pid=5927 comm="syz.3.13" name="uhid" dev="devtmpfs" ino=1293 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 53.592940][ T43] audit: type=1400 audit(1700000000.869:248): avc: denied { open } for pid=5927 comm="syz.3.13" path="/dev/uhid" dev="devtmpfs" ino=1293 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 53.615480][ T5879] wiimote 0005:057E:0306.0002: hidraw1: BLUETOOTH HID v0.00 Gamepad [syz0] on syz0 [ 53.616613][ T5879] wiimote 0005:057E:0306.0002: New device registered [ 54.040440][ T5086] Bluetooth: hci3: command tx timeout [ 54.040486][ T5086] Bluetooth: hci0: command tx timeout [ 54.040521][ T5086] Bluetooth: hci1: command tx timeout [ 54.110599][ T65] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 54.120454][ T5086] Bluetooth: hci2: command tx timeout [ 54.262206][ T65] usb 5-1: New USB device found, idVendor=046d, idProduct=08f0, bcdDevice= 0.00 [ 54.265519][ T65] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 54.265588][ T65] usb 5-1: Product: syz [ 54.265601][ T65] usb 5-1: Manufacturer: syz [ 54.265613][ T65] usb 5-1: SerialNumber: syz [ 54.274325][ T65] gspca_main: STV06xx-2.14.0 probing 046d:08f0 [ 54.274440][ T65] gspca_stv06xx: st6422 sensor detected [ 54.425570][ T5927] wiimote 0005:057E:0306.0002: Device removed [ 54.527974][ T43] audit: type=1400 audit(1700000001.799:249): avc: denied { read write } for pid=5931 comm="syz.0.14" name="video1" dev="devtmpfs" ino=953 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1 [ 54.536162][ T43] audit: type=1400 audit(1700000001.799:250): avc: denied { open } for pid=5931 comm="syz.0.14" path="/dev/video1" dev="devtmpfs" ino=953 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1 [ 54.536202][ T43] audit: type=1400 audit(1700000001.799:251): avc: denied { ioctl } for pid=5931 comm="syz.0.14" path="/dev/video1" dev="devtmpfs" ino=953 ioctlcmd=0x5608 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1 [ 54.681889][ T5879] wiimote 0005:057E:0306.0002: detected device: Nintendo Wii Remote (Gen 1) [ 54.703966][ T5879] input: Nintendo Wii Remote Accelerometer as /devices/virtual/misc/uhid/0005:057E:0306.0002/input/input8 [ 54.722946][ T5879] input: Nintendo Wii Remote IR as /devices/virtual/misc/uhid/0005:057E:0306.0002/input/input9 [ 54.740975][ T5879] input: Nintendo Wii Remote as /devices/virtual/misc/uhid/0005:057E:0306.0002/input/input7 [ 55.010330][ T5834] misc userio: Buffer overflowed, userio client isn't keeping up [ 55.488229][ T65] STV06xx 5-1:1.0: probe with driver STV06xx failed with error -71 [ 55.493531][ T65] usb 5-1: USB disconnect, device number 3 [ 55.495436][ T5937] warning: `syz.1.12' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 55.524846][ T43] audit: type=1400 audit(1700000002.799:252): avc: denied { sys_module } for pid=5922 comm="syz.1.12" capability=16 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 56.120486][ T67] Bluetooth: hci0: command tx timeout [ 56.120543][ T67] Bluetooth: hci3: command tx timeout [ 56.120790][ T5086] Bluetooth: hci1: command tx timeout [ 56.200595][ T5731] Bluetooth: hci2: command tx timeout [ 56.281313][ T5826] usb 6-1: Service connection timeout for: 262 [ 56.281356][ T5826] ath9k_htc 6-1:1.0: ath9k_htc: Unable to initialize HTC services [ 56.299923][ T5826] ath9k_htc: Failed to initialize the device [ 56.304314][ T5826] usb 6-1: ath9k_htc: USB layer deinitialized [ 56.445796][ T5811] usb 6-1: USB disconnect, device number 2 [ 57.012114][ T5945] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 57.150800][ T5945] md: could not open device unknown-block(1,0). [ 57.460438][ T65] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 57.631209][ T65] usb 5-1: New USB device found, idVendor=0a12, idProduct=0001, bcdDevice= 0.00 [ 57.632650][ T65] usb 5-1: config 1 interface 1 altsetting 0 endpoint 0x3 has an invalid bInterval 0, changing to 7 [ 57.632683][ T65] usb 5-1: config 1 interface 1 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 57.635343][ T65] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 57.635370][ T65] usb 5-1: Product: syz [ 57.635384][ T65] usb 5-1: Manufacturer: syz [ 57.635398][ T65] usb 5-1: SerialNumber: syz [ 57.976098][ T5953] nvme_tcp: queue 0: failed to receive icresp, error -104 [ 58.068415][ T43] kauditd_printk_skb: 4 callbacks suppressed [ 58.068719][ T43] audit: type=1800 audit(1700000005.339:257): pid=5963 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.1.22" name="local" dev="configfs" ino=8688 res=0 errno=0 [ 58.071962][ T43] audit: type=1400 audit(1700000005.349:258): avc: denied { write } for pid=5962 comm="syz.1.22" name="spaces" dev="configfs" ino=9908 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 58.072607][ T43] audit: type=1400 audit(1700000005.349:259): avc: denied { write } for pid=5962 comm="syz.1.22" name="nodes" dev="configfs" ino=10047 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 58.074167][ T43] audit: type=1400 audit(1700000005.349:260): avc: denied { allowed } for pid=5962 comm="syz.1.22" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 58.083357][ T43] audit: type=1400 audit(1700000005.359:261): avc: denied { create } for pid=5962 comm="syz.1.22" anonclass=[io_uring] scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 58.084455][ T43] audit: type=1400 audit(1700000005.359:262): avc: denied { map } for pid=5962 comm="syz.1.22" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=10049 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 58.084641][ T43] audit: type=1400 audit(1700000005.359:263): avc: denied { read write } for pid=5962 comm="syz.1.22" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=10049 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 58.094960][ T5964] dlm: no local IP address has been set [ 58.094980][ T5964] dlm: cannot start dlm midcomms -107 [ 58.420396][ T5834] misc userio: Buffer overflowed, userio client isn't keeping up [ 58.848386][ T5811] usb 5-1: USB disconnect, device number 4 [ 58.850938][ T5731] Bluetooth: hci4: CSR: Local version failed (-71) [ 58.929179][ T5967] loop0: detected capacity change from 0 to 32768 [ 59.397105][ T43] audit: type=1400 audit(1700000006.669:264): avc: denied { write } for pid=5971 comm="syz.0.26" name="cluster" dev="configfs" ino=1062 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 59.402406][ T43] audit: type=1400 audit(1700000006.669:265): avc: denied { write } for pid=5971 comm="syz.0.26" name="node" dev="configfs" ino=8041 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 59.403861][ T43] audit: type=1800 audit(1700000006.669:266): pid=5972 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.0.26" name="num" dev="configfs" ino=8044 res=0 errno=0 [ 59.416611][ T5972] o2cb: This node has not been configured. [ 59.416627][ T5972] o2cb: Cluster check failed. Fix errors before retrying. [ 59.416649][ T5972] (syz.0.26,5972,2):user_dlm_register:674 ERROR: status = -22 [ 59.416677][ T5972] (syz.0.26,5972,2):dlmfs_mkdir:437 ERROR: Error -22 could not register domain "domain1" [ 59.710365][ T65] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 59.881365][ T65] usb 5-1: New USB device found, idVendor=045e, idProduct=0291, bcdDevice= 1.14 [ 59.882612][ T65] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 59.882634][ T65] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 59.884989][ T65] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 59.885008][ T65] usb 5-1: Product: syz [ 59.885018][ T65] usb 5-1: Manufacturer: syz [ 59.885027][ T65] usb 5-1: SerialNumber: syz [ 59.895024][ T65] xpad 5-1:1.0: probe with driver xpad failed with error -5 [ 60.151346][ T5826] usb 5-1: USB disconnect, device number 5 [ 60.670422][ T5976] NFSD: Unable to initialize client recovery tracking! (-110) [ 60.670479][ T5976] NFSD: Is nfsdcld running? If not, enable CONFIG_NFSD_LEGACY_CLIENT_TRACKING. [ 60.670523][ T5976] NFSD: starting 90-second grace period (net f00004b2) [ 60.961504][ T5981] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 61.064399][ T5981] md: could not open device unknown-block(1,0). [ 61.340378][ T65] usb 8-1: new high-speed USB device number 2 using dummy_hcd [ 61.360394][ T30] usb 6-1: new full-speed USB device number 3 using dummy_hcd [ 61.490935][ T65] usb 8-1: New USB device found, idVendor=0424, idProduct=012c, bcdDevice= 0.00 [ 61.492052][ T65] usb 8-1: config 1 interface 0 altsetting 1 bulk endpoint 0x81 has invalid maxpacket 64 [ 61.492073][ T65] usb 8-1: config 1 interface 0 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 64 [ 61.492084][ T65] usb 8-1: config 1 interface 0 altsetting 1 bulk endpoint 0x1 has invalid maxpacket 64 [ 61.492096][ T65] usb 8-1: config 1 interface 0 altsetting 1 bulk endpoint 0x2 has invalid maxpacket 64 [ 61.492106][ T65] usb 8-1: config 1 interface 0 has no altsetting 0 [ 61.492122][ T65] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 61.497633][ T5983] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 61.497804][ T5983] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 61.497978][ T5983] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 61.498077][ T5983] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 61.508853][ T65] usb 8-1: probing VID:PID(0424:012C) [ 61.511934][ T65] usb 8-1: vub300 testing BULK IN EndPoint(0) 81 [ 61.511953][ T65] usb 8-1: vub300 testing BULK IN EndPoint(1) 82 [ 61.511965][ T65] usb 8-1: vub300 testing BULK OUT EndPoint(2) 01 [ 61.511978][ T65] usb 8-1: vub300 testing BULK OUT EndPoint(3) 02 [ 61.511991][ T65] usb 8-1: vub300 SMALL packets using EndPoints 01 81 02 82 [ 61.513775][ T30] usb 6-1: not running at top speed; connect to a high speed hub [ 61.513803][ T30] usb 6-1: New USB device found, idVendor=0000, idProduct=0000, bcdDevice= 0.00 [ 61.515050][ T30] usb 6-1: config 1 interface 1 altsetting 0 endpoint 0x81 has invalid maxpacket 512, setting to 64 [ 61.515092][ T30] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 61.526237][ T30] gspca_main: spca501-2.14.0 probing 0000:0000 [ 61.830319][ T5834] misc userio: Buffer overflowed, userio client isn't keeping up [ 61.905596][ T65] usb 8-1: operating_mode = IRQs 4-bit 48 MHz with 64 byte USB packets [ 62.109757][ T65] vub300 8-1:1.0: probe with driver vub300 failed with error -22 [ 62.250490][ T30] gspca_spca501: reg write: error -110 [ 62.250556][ T30] spca501 6-1:1.0: Reg write failed for 0x01,0x06,0x13 [ 62.250644][ T30] spca501 6-1:1.0: probe with driver spca501 failed with error -22 [ 62.252097][ T30] uvcvideo 6-1:1.0: Found UVC 1.00 device (0000:0000) [ 62.254167][ T30] uvcvideo 6-1:1.0: UVC non compliance - GET_DEF(PROBE) not supported. Enabling workaround. [ 62.254543][ T30] uvcvideo 6-1:1.1: Failed to query (GET_CUR) UVC probe control : -32 (exp. 26). [ 62.254569][ T30] uvcvideo 6-1:1.1: Failed to initialize the device (-5). [ 62.254902][ T30] uvcvideo 6-1:1.0: probe with driver uvcvideo failed with error -5 [ 63.035416][ T5994] infiniband rxe0: set active [ 63.036690][ T5994] infiniband rxe0: added veth0 [ 63.046864][ T5994] smbdirect: ib_dev[rxe0]: added: IB_CA max_fast_reg_page_list_len=512 device_cap_flags=0x1c001223c76 kernel_cap_flags=0x14 page_size_cap=0xfffff000 [ 63.046957][ T5994] smbdirect: ib_dev[rxe0]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=32 max_cqe=32767 max_qp_wr=1048576 max_send_sge=32 max_recv_sge=32 [ 63.047766][ T5994] smbdirect: ib_dev[rxe0]PORT[1]: iwarp=0 ib=0 roce=1 v1=0 v2=1 core_cap_flags=0x803005 [ 63.070805][ T5994] RDS/IB: rxe0: added [ 63.071009][ T5994] smc: adding ib device rxe0 with port count 1 [ 63.071108][ T5994] smc: ib device rxe0 port 1 has no pnetid [ 63.765409][ T9] usb 6-1: USB disconnect, device number 3 [ 63.771726][ T6004] Zero length message leads to an empty skb [ 63.807489][ T6006] loop0: detected capacity change from 0 to 32768 [ 63.862161][ T43] kauditd_printk_skb: 14 callbacks suppressed [ 63.862320][ T43] audit: type=1400 audit(1700000011.139:281): avc: denied { mount } for pid=6007 comm="syz.0.35" name="/" dev="rpc_pipefs" ino=8067 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:rpc_pipefs_t tclass=filesystem permissive=1 [ 64.118165][ T9] usb 8-1: USB disconnect, device number 2 [ 64.326760][ T6015] page: refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x108000 [ 64.326828][ T6015] flags: 0x57ff00000000000(node=1|zone=2|lastcpupid=0x7ff) [ 64.326890][ T6015] raw: 057ff00000000000 0000000000000000 dead000000000122 0000000000000000 [ 64.326904][ T6015] raw: 0000000000000000 0000000000000000 00000001ffffffff 0000000000000000 [ 64.326911][ T6015] page dumped because: unmovable page [ 64.326918][ T6015] page_owner tracks the page as allocated [ 64.326924][ T6015] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x29c2(GFP_NOWAIT|__GFP_HIGHMEM|__GFP_IO|__GFP_FS|__GFP_ZERO), pid 1, tgid 1 (swapper/0), ts 9096187120 [ 64.326946][ T6015] post_alloc_hook+0xfd/0x120 [ 64.326966][ T6015] get_page_from_freelist+0x110d/0x35d0 [ 64.326984][ T6015] __alloc_frozen_pages_noprof+0x2eb/0x3300 [ 64.327003][ T6015] alloc_pages_mpol+0x201/0x550 [ 64.327018][ T6015] alloc_pages_noprof+0x1a/0x160 [ 64.327034][ T6015] __vmalloc_node_range_noprof+0x833/0x1420 [ 64.327051][ T6015] __vmalloc_node_noprof+0xad/0xf0 [ 64.327067][ T6015] tpg_alloc+0x166/0x9b0 [ 64.327081][ T6015] vivid_probe.cold+0x2166/0x921e [ 64.327097][ T6015] platform_probe+0x106/0x1d0 [ 64.327113][ T6015] really_probe+0x241/0xa60 [ 64.327124][ T6015] __driver_probe_device+0x210/0x460 [ 64.327135][ T6015] driver_probe_device+0x4a/0x140 [ 64.327145][ T6015] __driver_attach+0x21f/0x5b0 [ 64.327156][ T6015] bus_for_each_dev+0x13e/0x1d0 [ 64.327171][ T6015] bus_add_driver+0x305/0x5b0 [ 64.327188][ T6015] page_owner free stack trace missing [ 64.328130][ T43] audit: type=1400 audit(1700000011.599:282): avc: denied { read } for pid=5119 comm="syslogd" name="log" dev="sda1" ino=2010 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:var_t tclass=lnk_file permissive=1 [ 64.328200][ T43] audit: type=1400 audit(1700000011.599:283): avc: denied { search } for pid=5119 comm="syslogd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 64.328553][ T43] audit: type=1400 audit(1700000011.599:284): avc: denied { write search } for pid=5119 comm="syslogd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 64.328716][ T43] audit: type=1400 audit(1700000011.599:285): avc: denied { add_name } for pid=5119 comm="syslogd" name="messages" scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 64.328860][ T43] audit: type=1400 audit(1700000011.599:286): avc: denied { create } for pid=5119 comm="syslogd" name="messages" scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 64.329348][ T43] audit: type=1400 audit(1700000011.599:287): avc: denied { append open } for pid=5119 comm="syslogd" path="/tmp/messages" dev="tmpfs" ino=5 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 64.329697][ T43] audit: type=1400 audit(1700000011.599:288): avc: denied { getattr } for pid=5119 comm="syslogd" path="/tmp/messages" dev="tmpfs" ino=5 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 64.470767][ T5875] wiimote 0005:057E:0306.0003: hidraw1: BLUETOOTH HID v0.00 Gamepad [syz0] on syz0 [ 64.471590][ T5875] wiimote 0005:057E:0306.0003: New device registered [ 64.502750][ T9] usb 8-1: new high-speed USB device number 3 using dummy_hcd [ 64.671259][ T9] usb 8-1: New USB device found, idVendor=2040, idProduct=4900, bcdDevice= 0.00 [ 64.674242][ T9] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 64.674264][ T9] usb 8-1: Product: syz [ 64.674274][ T9] usb 8-1: Manufacturer: syz [ 64.674285][ T9] usb 8-1: SerialNumber: syz [ 64.885054][ T9] hdpvr 8-1:1.0: firmware version 0x0 dated [ 64.885116][ T9] hdpvr 8-1:1.0: untested firmware, the driver might not work. [ 65.020953][ T6008] NFSD: Unable to initialize client recovery tracking! (-110) [ 65.021014][ T6008] NFSD: Is nfsdcld running? If not, enable CONFIG_NFSD_LEGACY_CLIENT_TRACKING. [ 65.021054][ T6008] NFSD: starting 90-second grace period (net f00004a6) [ 65.204767][ T43] audit: type=1400 audit(1700000012.479:289): avc: denied { unmount } for pid=5725 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:rpc_pipefs_t tclass=filesystem permissive=1 [ 65.210646][ T5834] misc userio: Buffer overflowed, userio client isn't keeping up [ 65.296715][ T6020] wiimote 0005:057E:0306.0003: Device removed [ 65.480453][ T5875] wiimote 0005:057E:0306.0003: detected device: Nintendo Wii Remote (Gen 1) [ 65.489846][ T5875] input: Nintendo Wii Remote Accelerometer as /devices/virtual/misc/uhid/0005:057E:0306.0003/input/input11 [ 65.495165][ T5875] input: Nintendo Wii Remote IR as /devices/virtual/misc/uhid/0005:057E:0306.0003/input/input12 [ 65.503961][ T5875] input: Nintendo Wii Remote as /devices/virtual/misc/uhid/0005:057E:0306.0003/input/input10 [ 65.530671][ T852] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 65.681440][ T852] usb 5-1: New USB device found, idVendor=0cf3, idProduct=9375, bcdDevice= 1.00 [ 65.684145][ T852] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 65.684165][ T852] usb 5-1: Product: syz [ 65.684179][ T852] usb 5-1: Manufacturer: syz [ 65.684188][ T852] usb 5-1: SerialNumber: syz [ 66.099858][ T852] usb 5-1: Direct firmware load for ath6k/AR6004/hw1.3/bdata.bin failed with error -2 [ 66.102327][ T852] usb 5-1: Falling back to sysfs fallback for: ath6k/AR6004/hw1.3/bdata.bin [ 66.102391][ T43] audit: type=1400 audit(1700000013.379:290): avc: denied { firmware_load } for pid=852 comm="kworker/1:2" scontext=system_u:system_r:kernel_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1 [ 67.427069][ T5086] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 67.431689][ T5086] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 67.433115][ T5086] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 67.433989][ T5086] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 67.434514][ T5086] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 67.711686][ T9] hdpvr 8-1:1.0: Could not setup controls [ 67.714077][ T9] hdpvr 8-1:1.0: registering videodev failed [ 67.725962][ T9] hdpvr 8-1:1.0: probe with driver hdpvr failed with error -71 [ 67.729847][ T9] usb 8-1: USB disconnect, device number 3 [ 67.984828][ T6035] bridge0: port 1(bridge_slave_0) entered blocking state [ 67.984965][ T6035] bridge0: port 1(bridge_slave_0) entered disabled state [ 67.985029][ T6035] bridge_slave_0: entered allmulticast mode [ 67.985834][ T6035] bridge_slave_0: entered promiscuous mode [ 67.988254][ T6035] bridge0: port 2(bridge_slave_1) entered blocking state [ 67.988322][ T6035] bridge0: port 2(bridge_slave_1) entered disabled state [ 67.988470][ T6035] bridge_slave_1: entered allmulticast mode [ 67.989281][ T6035] bridge_slave_1: entered promiscuous mode [ 68.004446][ T6035] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 68.005994][ T6035] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 68.019178][ T6035] team0: Port device team_slave_0 added [ 68.020842][ T6035] team0: Port device team_slave_1 added [ 68.034855][ T6035] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 68.034914][ T6035] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 68.035117][ T6035] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 68.036396][ T6035] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 68.036405][ T6035] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 68.036420][ T6035] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 68.059328][ T6035] hsr_slave_0: entered promiscuous mode [ 68.059757][ T6035] hsr_slave_1: entered promiscuous mode [ 68.060052][ T6035] debugfs: 'hsr0' already exists in 'hsr' [ 68.060062][ T6035] Cannot create hsr debugfs directory [ 68.156871][ T6035] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 68.162665][ T6035] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 68.163581][ T6035] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 68.171195][ T6035] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 68.174744][ T6035] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 68.181662][ T6035] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 68.182535][ T6035] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 68.192477][ T6035] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 68.224661][ T6035] bridge0: port 2(bridge_slave_1) entered blocking state [ 68.225123][ T6035] bridge0: port 2(bridge_slave_1) entered forwarding state [ 68.226099][ T6035] bridge0: port 1(bridge_slave_0) entered blocking state [ 68.226222][ T6035] bridge0: port 1(bridge_slave_0) entered forwarding state [ 68.287785][ T6035] 8021q: adding VLAN 0 to HW filter on device bond0 [ 68.299373][ T75] bridge0: port 1(bridge_slave_0) entered disabled state [ 68.303302][ T75] bridge0: port 2(bridge_slave_1) entered disabled state [ 68.318540][ T6035] 8021q: adding VLAN 0 to HW filter on device team0 [ 68.333105][ T75] bridge0: port 1(bridge_slave_0) entered blocking state [ 68.333254][ T75] bridge0: port 1(bridge_slave_0) entered forwarding state [ 68.334697][ T75] bridge0: port 2(bridge_slave_1) entered blocking state [ 68.334777][ T75] bridge0: port 2(bridge_slave_1) entered forwarding state [ 68.357777][ T6065] kAFS: No cell specified [ 68.399196][ T6069] ubi: mtd0 is already attached to ubi0 [ 68.453756][ T6073] ubi0 error: ubi_create_volume: not enough PEBs, only 28 available [ 68.453884][ T6073] ubi0 error: ubi_create_volume: cannot create volume 0, error -28 [ 68.506592][ T6077] ubi0 error: ubi_open_volume: cannot open device 0, volume 0, error -19 [ 68.506671][ T6077] UBIFS error (pid: 6077): cannot open "ubi0_0", error -19 [ 68.617754][ T6035] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 68.780035][ T6035] veth0_vlan: entered promiscuous mode [ 68.784455][ T6035] veth1_vlan: entered promiscuous mode [ 68.803182][ T6035] veth0_macvtap: entered promiscuous mode [ 68.806135][ T6035] veth1_macvtap: entered promiscuous mode [ 68.817987][ T6035] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 68.824397][ T6035] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 68.863960][ T5827] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 68.864193][ T5827] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 68.864347][ T5827] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 68.864464][ T5827] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 68.897211][ T38] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 68.897271][ T38] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 68.927727][ T38] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 68.931880][ T38] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 68.979874][ T6098] loop0: detected capacity change from 0 to 32768 [ 69.151085][ T6063] syz.3.44 (6063): drop_caches: 3 [ 69.290397][ T30] usb 9-1: new high-speed USB device number 2 using dummy_hcd [ 69.410459][ T5834] misc userio: Buffer overflowed, userio client isn't keeping up [ 69.410946][ T6061] NFSD: Unable to initialize client recovery tracking! (-110) [ 69.410957][ T6061] NFSD: Is nfsdcld running? If not, enable CONFIG_NFSD_LEGACY_CLIENT_TRACKING. [ 69.410964][ T6061] NFSD: starting 90-second grace period (net f0000413) [ 69.441551][ T30] usb 9-1: New USB device found, idVendor=1e7d, idProduct=30d4, bcdDevice= 1.00 [ 69.445060][ T30] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 69.445086][ T30] usb 9-1: Product: syz [ 69.445099][ T30] usb 9-1: Manufacturer: syz [ 69.445111][ T30] usb 9-1: SerialNumber: syz [ 69.480675][ T5086] Bluetooth: hci4: command tx timeout [ 70.890409][ T6105] NFSD: Unable to initialize client recovery tracking! (-110) [ 70.890504][ T6105] NFSD: Is nfsdcld running? If not, enable CONFIG_NFSD_LEGACY_CLIENT_TRACKING. [ 70.890527][ T6105] NFSD: starting 90-second grace period (net f0000413) [ 71.180418][ T43] kauditd_printk_skb: 9 callbacks suppressed [ 71.180527][ T43] audit: type=1400 audit(1700000018.449:300): avc: denied { create } for pid=6108 comm="syz.3.54" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 71.181483][ T43] audit: type=1400 audit(1700000018.459:301): avc: denied { bind } for pid=6108 comm="syz.3.54" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 71.183128][ T43] audit: type=1400 audit(1700000018.459:302): avc: denied { listen } for pid=6108 comm="syz.3.54" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 71.183912][ T43] audit: type=1400 audit(1700000018.459:303): avc: denied { connect } for pid=6108 comm="syz.3.54" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 71.406376][ T1441] ieee802154 phy0 wpan0: encryption failed: -22 [ 71.406489][ T1441] ieee802154 phy1 wpan1: encryption failed: -22 [ 71.414608][ T57] cfg80211: failed to load regulatory.db [ 71.460517][ T5819] usb 8-1: new full-speed USB device number 4 using dummy_hcd [ 71.512669][ T5834] input: PS/2 Generic Mouse as /devices/serio2/input/input6 [ 71.560364][ T5086] Bluetooth: hci4: command tx timeout [ 71.612049][ T5819] usb 8-1: not running at top speed; connect to a high speed hub [ 71.612108][ T5819] usb 8-1: New USB device found, idVendor=0000, idProduct=0000, bcdDevice= 0.00 [ 71.614005][ T5819] usb 8-1: config 1 interface 1 altsetting 0 endpoint 0x81 has invalid maxpacket 512, setting to 64 [ 71.614032][ T5819] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 71.618049][ T5819] gspca_main: spca501-2.14.0 probing 0000:0000 [ 71.732157][ T5834] psmouse serio2: Failed to enable mouse on [ 71.863194][ T43] audit: type=1400 audit(1700000019.139:304): avc: denied { write } for pid=6116 comm="syz.0.58" name="spaces" dev="configfs" ino=9908 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 71.915647][ T43] audit: type=1400 audit(1700000019.189:305): avc: denied { write } for pid=6116 comm="syz.0.58" name="nodes" dev="configfs" ino=10961 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 71.919227][ T6122] loop0: detected capacity change from 0 to 32768 [ 71.925723][ T6117] dlm: Using TCP for communications [ 71.934541][ T6117] dlm: dlm1: joining the lockspace group... [ 71.975517][ T6117] dlm: dlm1: group event done 0 [ 71.979395][ T6124] dlm: dlm1: dlm_recover 1226019925764414067 [ 71.985593][ T6124] dlm: dlm1: add member 1 [ 71.987766][ T6124] dlm: dlm1: dlm_recover_members 1 nodes [ 71.989805][ T6124] dlm: dlm1: generation 1 slots 1 1:1 [ 71.991697][ T6124] dlm: dlm1: dlm_recover_directory [ 71.994419][ T6124] dlm: dlm1: dlm_recover_directory 0 in 0 new [ 71.998866][ T6124] dlm: dlm1: enable_locking error -4 [ 72.000716][ T6124] dlm: dlm1: do_ls_recovery 1226019925764414067 interrupted and should be queued to run again [ 72.000752][ T6124] dlm: dlm1: dlm_recover 1226019925764414068 [ 72.000775][ T6124] dlm: dlm1: dlm_recover_members 1 nodes [ 72.000792][ T6124] dlm: dlm1: generation 2 slots 1 1:1 [ 72.000799][ T6124] dlm: dlm1: dlm_recover_directory [ 72.000809][ T6124] dlm: dlm1: dlm_recover_directory 0 in 0 new [ 72.001000][ T6124] dlm: dlm1: dlm_recover 1226019925764414068 generation 2 done: 0 ms [ 72.001063][ T6117] dlm: dlm1: join complete [ 72.005850][ T6116] dlm: dlm1: no userland control daemon, stopping lockspace [ 72.006269][ T6116] dlm: dlm user daemon left 1 lockspaces [ 72.220636][ T5933] usb 6-1: new high-speed USB device number 4 using dummy_hcd [ 72.260752][ T30] usbhid 9-1:1.0: can't add hid device: -71 [ 72.260860][ T30] usbhid 9-1:1.0: probe with driver usbhid failed with error -71 [ 72.263161][ T30] usb 9-1: USB disconnect, device number 2 [ 72.371207][ T5933] usb 6-1: New USB device found, idVendor=1660, idProduct=0932, bcdDevice= 1.00 [ 72.372269][ T5933] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 72.381621][ T5933] dvb-usb: found a 'Medion MD95700 (MDUSBTV-HYBRID)' in warm state. [ 72.381698][ T5933] usb 6-1: setting power ON [ 72.740801][ T5819] gspca_spca501: reg write: error -110 [ 72.740852][ T5819] spca501 8-1:1.0: Reg write failed for 0x01,0x16,0x11 [ 72.740916][ T5819] spca501 8-1:1.0: probe with driver spca501 failed with error -22 [ 72.743736][ T5819] uvcvideo 8-1:1.0: Found UVC 1.00 device (0000:0000) [ 72.745644][ T5819] uvcvideo 8-1:1.0: UVC non compliance - GET_DEF(PROBE) not supported. Enabling workaround. [ 72.745999][ T5819] uvcvideo 8-1:1.1: Failed to query (GET_CUR) UVC probe control : -32 (exp. 26). [ 72.746027][ T5819] uvcvideo 8-1:1.1: Failed to initialize the device (-5). [ 72.752119][ T5819] uvcvideo 8-1:1.0: probe with driver uvcvideo failed with error -5 [ 72.755869][ T5776] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 72.807142][ T5819] input: syz0 as /devices/virtual/misc/uhid/0018:0B05:0101.0004/input/input15 [ 72.826336][ T5776] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 72.842771][ T5819] asus 0018:0B05:0101.0004: input,hidraw1: I2C HID v0.00 Mouse [syz0] on syz1 [ 72.875053][ T5776] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 72.923483][ T5776] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 73.027183][ T43] audit: type=1400 audit(1700000020.299:306): avc: denied { search } for pid=5439 comm="dhcpcd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 73.027287][ T43] audit: type=1400 audit(1700000020.299:307): avc: denied { search } for pid=5439 comm="dhcpcd" name="udev" dev="tmpfs" ino=9 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 73.027527][ T43] audit: type=1400 audit(1700000020.299:308): avc: denied { search } for pid=5439 comm="dhcpcd" name="data" dev="tmpfs" ino=14 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 73.045485][ T5776] bridge_slave_1: left allmulticast mode [ 73.045516][ T5776] bridge_slave_1: left promiscuous mode [ 73.046670][ T5776] bridge0: port 2(bridge_slave_1) entered disabled state [ 73.055385][ T5776] bridge_slave_0: left allmulticast mode [ 73.055411][ T5776] bridge_slave_0: left promiscuous mode [ 73.055586][ T5776] bridge0: port 1(bridge_slave_0) entered disabled state [ 73.157308][ T5776] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 73.166254][ T5776] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 73.170094][ T5776] bond0 (unregistering): Released all slaves [ 73.251352][ T43] audit: type=1400 audit(1700000020.519:309): avc: denied { read } for pid=6138 comm="dhcpcd-run-hook" name="resolv.conf" dev="tmpfs" ino=1840 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 73.367641][ T5439] 8021q: adding VLAN 0 to HW filter on device eth2 [ 73.434998][ T5624] usb 8-1: USB disconnect, device number 4 [ 73.535196][ T5439] 8021q: adding VLAN 0 to HW filter on device eth3 [ 73.557473][ T5776] hsr_slave_0: left promiscuous mode [ 73.559735][ T5776] hsr_slave_1: left promiscuous mode [ 73.566453][ T5776] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 73.566512][ T5776] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 73.571523][ T5776] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 73.571537][ T5776] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 73.583146][ T5776] veth1_macvtap: left promiscuous mode [ 73.583547][ T5776] veth0_macvtap: left promiscuous mode [ 73.583653][ T5776] veth1_vlan: left promiscuous mode [ 73.583752][ T5776] veth0_vlan: left promiscuous mode [ 73.633249][ T5819] asus 0018:0B05:0101.0004: Asus failed to start multitouch: -5 [ 73.644793][ T5086] Bluetooth: hci4: command tx timeout [ 73.662940][ T5819] asus 0018:0B05:0101.0004: probe with driver asus failed with error -5 [ 73.753228][ T5776] team0 (unregistering): Port device team_slave_1 removed [ 73.759494][ T5776] team0 (unregistering): Port device team_slave_0 removed [ 73.850619][ T5827] netdevsim netdevsim4 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 73.851796][ T5827] netdevsim netdevsim4 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 73.851819][ T5827] netdevsim netdevsim4 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 73.851837][ T5827] netdevsim netdevsim4 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 73.914893][ T6154] tipc: Started in network mode [ 73.915030][ T6154] tipc: Node identity 7f000001, cluster identity 4711 [ 73.929381][ T6154] tipc: New replicast peer: 127.0.0.1 [ 73.930158][ T6154] tipc: Enabled bearer , priority 10 [ 74.037105][ T5439] 8021q: adding VLAN 0 to HW filter on device eth4 [ 74.187568][ T6174] loop0: detected capacity change from 0 to 32768 [ 74.193195][ T5439] 8021q: adding VLAN 0 to HW filter on device eth5 [ 74.441812][ T5933] dvb-usb: bulk message failed: -110 (2/0) [ 74.445473][ T5933] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 74.449843][ T5933] dvbdev: DVB: registering new adapter (Medion MD95700 (MDUSBTV-HYBRID)) [ 74.453614][ T5933] usb 6-1: media controller created [ 74.461624][ T5933] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 74.470437][ T5624] usb 9-1: new high-speed USB device number 3 using dummy_hcd [ 74.477602][ T5933] usb 6-1: selecting invalid altsetting 6 [ 74.477662][ T5933] usb 6-1: digital interface selection failed (-22) [ 74.477693][ T5933] dvb-usb: no frontend was attached by 'Medion MD95700 (MDUSBTV-HYBRID)' [ 74.482504][ T5933] usb 6-1: setting power OFF [ 74.630785][ T5624] usb 9-1: New USB device found, idVendor=03e8, idProduct=0004, bcdDevice= 0.00 [ 74.632025][ T5624] usb 9-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 4096, setting to 1024 [ 74.632046][ T5624] usb 9-1: config 1 interface 0 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 1024 [ 74.632064][ T5624] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 74.640164][ T5624] gspca_main: se401-2.14.0 probing 03e8:0004 [ 75.040578][ T5624] gspca_se401: Frame size: 320x240 bayer [ 75.052103][ T9] tipc: Node number set to 2130706433 [ 75.120511][ T5819] usb 8-1: new high-speed USB device number 5 using dummy_hcd [ 75.216997][ T5933] dvb-usb: bulk message failed: -71 (2/0) [ 75.217056][ T5933] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully initialized and connected. [ 75.217106][ T5933] usb 6-1: setting power ON [ 75.219266][ T5933] dvb-usb: bulk message failed: -71 (2/0) [ 75.224776][ T5933] usb 6-1: analog interface selection failed (-71) [ 75.251891][ T5624] input: se401 as /devices/platform/dummy_hcd.4/usb9/9-1/input/input16 [ 75.262484][ T5086] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci3/hci3:200' [ 75.262562][ T5086] CPU: 0 UID: 0 PID: 5086 Comm: kworker/u34:1 Not tainted syzkaller #0 PREEMPT(full) [ 75.262596][ T5086] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 75.262608][ T5086] Workqueue: hci3 hci_rx_work [ 75.262636][ T5086] Call Trace: [ 75.262641][ T5086] [ 75.262647][ T5086] dump_stack_lvl+0x100/0x190 [ 75.262672][ T5086] sysfs_warn_dup.cold+0x1c/0x28 [ 75.262694][ T5086] sysfs_create_dir_ns+0x24b/0x2b0 [ 75.262722][ T5086] ? __pfx_sysfs_create_dir_ns+0x10/0x10 [ 75.262740][ T5086] ? find_held_lock+0x2b/0x80 [ 75.262761][ T5086] ? kobject_add_internal+0x25f/0x930 [ 75.262782][ T5086] ? kobject_add_internal+0x25f/0x930 [ 75.262803][ T5086] ? do_raw_spin_unlock+0x145/0x1e0 [ 75.262824][ T5086] kobject_add_internal+0x2c8/0x930 [ 75.262846][ T5086] kobject_add+0x16a/0x1e0 [ 75.262866][ T5086] ? __pfx_kobject_add+0x10/0x10 [ 75.262884][ T5086] ? class_to_subsys+0x10f/0x150 [ 75.262904][ T5086] ? kobject_put+0xb9/0x640 [ 75.262938][ T5086] ? _raw_spin_unlock+0x28/0x50 [ 75.262963][ T5086] device_add+0x294/0x1970 [ 75.262978][ T5086] ? __pfx_dev_set_name+0x10/0x10 [ 75.262996][ T5086] ? __pfx_device_add+0x10/0x10 [ 75.263012][ T5086] ? mgmt_send_event_skb+0x2fb/0x460 [ 75.263031][ T5086] hci_conn_add_sysfs+0x1a3/0x260 [ 75.263049][ T5086] le_conn_complete_evt+0x122f/0x2130 [ 75.263075][ T5086] ? __pfx_le_conn_complete_evt+0x10/0x10 [ 75.263097][ T5086] ? hci_event_packet+0x186/0xcd0 [ 75.263122][ T5086] hci_le_conn_complete_evt+0x23c/0x3a0 [ 75.263145][ T5086] ? skb_pull_data+0x15f/0x1e0 [ 75.263163][ T5086] hci_le_meta_evt+0x34a/0x5f0 [ 75.263190][ T5086] ? __pfx_hci_le_conn_complete_evt+0x10/0x10 [ 75.263218][ T5086] hci_event_packet+0x51c/0xcd0 [ 75.263239][ T5086] ? __pfx_hci_le_meta_evt+0x10/0x10 [ 75.263254][ T5086] ? __pfx_hci_event_packet+0x10/0x10 [ 75.263278][ T5086] ? lockdep_hardirqs_on+0x7d/0x110 [ 75.263299][ T5086] hci_rx_work+0x451/0xfc0 [ 75.263323][ T5086] process_one_work+0xac7/0x1b10 [ 75.263351][ T5086] ? __pfx_process_one_work+0x10/0x10 [ 75.263372][ T5086] ? lock_acquire+0x1d1/0x380 [ 75.263391][ T5086] ? __pfx_hci_rx_work+0x10/0x10 [ 75.263413][ T5086] worker_thread+0x5ef/0xe50 [ 75.263439][ T5086] ? kthread+0x13a/0x450 [ 75.263456][ T5086] ? __pfx_worker_thread+0x10/0x10 [ 75.263474][ T5086] kthread+0x373/0x450 [ 75.263491][ T5086] ? __pfx_kthread+0x10/0x10 [ 75.263510][ T5086] ret_from_fork+0x730/0xd60 [ 75.263527][ T5086] ? __pfx_ret_from_fork+0x10/0x10 [ 75.263543][ T5086] ? __switch_to+0x800/0x10f0 [ 75.263561][ T5086] ? __pfx_kthread+0x10/0x10 [ 75.263580][ T5086] ret_from_fork_asm+0x1a/0x30 [ 75.263603][ T5086] [ 75.263730][ T5086] kobject: kobject_add_internal failed for hci3:200 with -EEXIST, don't try to register things with the same name in the same directory. [ 75.263756][ T5086] Bluetooth: hci3: failed to register connection device [ 75.280158][ T5933] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully deinitialized and disconnected. [ 75.280664][ T5933] dvb_usb_cxusb 6-1:1.0: probe with driver dvb_usb_cxusb failed with error -71 [ 75.282961][ T5819] usb 8-1: New USB device found, idVendor=1234, idProduct=5678, bcdDevice= 1.00 [ 75.295049][ T5819] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 75.295065][ T5819] usb 8-1: Product: syz [ 75.295072][ T5819] usb 8-1: Manufacturer: syz [ 75.295079][ T5819] usb 8-1: SerialNumber: syz [ 75.305212][ T5933] usb 6-1: USB disconnect, device number 4 [ 75.345995][ T5819] input: syz syz as /devices/platform/dummy_hcd.3/usb8/8-1/8-1:1.0/input/input17 [ 75.720425][ T5731] Bluetooth: hci4: command tx timeout [ 76.280418][ T6184] NFSD: Unable to initialize client recovery tracking! (-110) [ 76.280493][ T6184] NFSD: Is nfsdcld running? If not, enable CONFIG_NFSD_LEGACY_CLIENT_TRACKING. [ 76.280523][ T6184] NFSD: starting 90-second grace period (net f00004a6) [ 77.320363][ T5731] Bluetooth: hci3: command 0x2016 tx timeout [ 77.616588][ T5624] usb 9-1: USB disconnect, device number 3 [ 77.861652][ T1357] usb 8-1: USB disconnect, device number 5 [ 77.980299][ T5624] usb 9-1: new high-speed USB device number 4 using dummy_hcd [ 78.130907][ T5624] usb 9-1: New USB device found, idVendor=03e8, idProduct=0004, bcdDevice= 0.00 [ 78.131813][ T5624] usb 9-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 4096, setting to 1024 [ 78.131831][ T5624] usb 9-1: config 1 interface 0 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 1024 [ 78.131850][ T5624] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 78.138553][ T5624] gspca_main: se401-2.14.0 probing 03e8:0004 [ 78.270350][ T1357] usb 8-1: new high-speed USB device number 6 using dummy_hcd [ 78.396109][ T43] kauditd_printk_skb: 20 callbacks suppressed [ 78.397764][ T43] audit: type=1400 audit(1700000025.669:330): avc: denied { map } for pid=6207 comm="syz.4.76" path="/dev/video0" dev="devtmpfs" ino=952 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1 [ 78.422569][ T1357] usb 8-1: New USB device found, idVendor=0525, idProduct=1080, bcdDevice= 1.00 [ 78.426925][ T1357] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 78.470911][ T5624] usb 9-1: reset high-speed USB device number 4 using dummy_hcd [ 78.644687][ T1357] net1080 8-1:1.0 usb0: register 'net1080' at usb-dummy_hcd.3-1, NetChip TurboCONNECT, 1a:c9:a7:21:e1:63 [ 78.721507][ T43] audit: type=1400 audit(1700000025.999:331): avc: denied { write } for pid=6215 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 78.731353][ T5933] misc userio: Buffer overflowed, userio client isn't keeping up [ 78.786854][ T43] audit: type=1400 audit(1700000026.059:332): avc: denied { write } for pid=6218 comm="rm" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 79.400396][ T5086] Bluetooth: hci3: command 0x2016 tx timeout [ 79.890909][ T6229] CIFS: Attempting to mount //127.0.0.1/share [ 80.142369][ T5624] gspca_se401: read req failed req 0x06 error -19 [ 80.149491][ T5624] usb 9-1: USB disconnect, device number 4 [ 80.223729][ T6226] syz.0.78 (6226): drop_caches: 3 [ 80.726176][ T6229] CIFS: VFS: cifs_mount failed w/return code = -112 [ 80.801542][ T6224] NFSD: Unable to initialize client recovery tracking! (-110) [ 80.801610][ T6224] NFSD: Is nfsdcld running? If not, enable CONFIG_NFSD_LEGACY_CLIENT_TRACKING. [ 80.801643][ T6224] NFSD: starting 90-second grace period (net f00004a6) [ 81.001089][ T5875] usb 9-1: new high-speed USB device number 5 using dummy_hcd [ 81.150901][ T5875] usb 9-1: New USB device found, idVendor=1e7d, idProduct=2dbe, bcdDevice= 1.00 [ 81.153556][ T5875] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 81.153574][ T5875] usb 9-1: Product: syz [ 81.153582][ T5875] usb 9-1: Manufacturer: syz [ 81.153589][ T5875] usb 9-1: SerialNumber: syz [ 82.090373][ T5933] misc userio: Buffer overflowed, userio client isn't keeping up [ 83.770935][ T5875] usbhid 9-1:1.0: can't add hid device: -71 [ 83.771108][ T5875] usbhid 9-1:1.0: probe with driver usbhid failed with error -71 [ 83.773602][ T5875] usb 9-1: USB disconnect, device number 5 [ 83.888513][ T6239] lo speed is unknown, defaulting to 1000 [ 83.889590][ T6239] lo speed is unknown, defaulting to 1000 [ 83.890094][ T6239] lo speed is unknown, defaulting to 1000 [ 83.898038][ T10] usb 8-1: USB disconnect, device number 6 [ 83.909516][ T10] net1080 8-1:1.0 usb0: unregister 'net1080' usb-dummy_hcd.3-1, NetChip TurboCONNECT [ 83.970168][ T6248] syz_tun: entered promiscuous mode [ 83.977318][ T6248] vlan0: entered promiscuous mode [ 84.025562][ T43] audit: type=1400 audit(1700000031.299:333): avc: denied { read } for pid=6250 comm="syz.3.84" name="kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 84.025877][ T43] audit: type=1400 audit(1700000031.299:334): avc: denied { open } for pid=6250 comm="syz.3.84" path="/dev/kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 84.029511][ T43] audit: type=1400 audit(1700000031.299:335): avc: denied { ioctl } for pid=6250 comm="syz.3.84" path="/dev/kvm" dev="devtmpfs" ino=84 ioctlcmd=0xae01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 84.060031][ T43] audit: type=1400 audit(1700000031.329:336): avc: denied { write } for pid=6249 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 84.112194][ T6239] infiniband syz0: set active [ 84.112270][ T6239] infiniband syz0: added lo [ 84.113928][ T9] lo speed is unknown, defaulting to 1000 [ 84.115717][ T43] audit: type=1400 audit(1700000031.389:337): avc: denied { write } for pid=6255 comm="rm" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 84.145901][ T6239] smbdirect: ib_dev[syz0]: added: IB_CA max_fast_reg_page_list_len=512 device_cap_flags=0x1c001223c76 kernel_cap_flags=0x14 page_size_cap=0xfffff000 [ 84.146033][ T6239] smbdirect: ib_dev[syz0]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=32 max_cqe=32767 max_qp_wr=1048576 max_send_sge=32 max_recv_sge=32 [ 84.147898][ T6239] smbdirect: ib_dev[syz0]PORT[1]: iwarp=0 ib=0 roce=1 v1=0 v2=1 core_cap_flags=0x803005 [ 84.188597][ T6239] RDS/IB: syz0: added [ 84.188681][ T6239] smc: adding ib device syz0 with port count 1 [ 84.188764][ T6239] smc: ib device syz0 port 1 has no pnetid [ 84.190239][ T5875] lo speed is unknown, defaulting to 1000 [ 84.199257][ T6239] lo speed is unknown, defaulting to 1000 [ 84.330154][ T6239] lo speed is unknown, defaulting to 1000 [ 84.400468][ T6268] ubi: mtd0 is already attached to ubi0 [ 84.400991][ T43] audit: type=1400 audit(1700000031.679:338): avc: denied { mounton } for pid=6265 comm="syz.0.89" path="/29/dev" dev="devtmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=dir permissive=1 [ 84.430383][ T1357] usb 8-1: new high-speed USB device number 7 using dummy_hcd [ 84.435320][ T6239] lo speed is unknown, defaulting to 1000 [ 84.591095][ T1357] usb 8-1: Using ep0 maxpacket: 8 [ 84.591919][ T1357] usb 8-1: New USB device found, idVendor=0525, idProduct=d292, bcdDevice= 0.07 [ 84.592990][ T1357] usb 8-1: config index 0 descriptor too short (expected 5924, got 36) [ 84.593008][ T1357] usb 8-1: config 250 has an invalid interface number: 228 but max is -1 [ 84.593018][ T1357] usb 8-1: config 250 has 1 interface, different from the descriptor's value: 0 [ 84.593028][ T1357] usb 8-1: config 250 has no interface number 0 [ 84.593057][ T1357] usb 8-1: config 250 interface 228 altsetting 255 endpoint 0x1 has invalid maxpacket 65280, setting to 1024 [ 84.593071][ T1357] usb 8-1: config 250 interface 228 altsetting 255 bulk endpoint 0x1 has invalid maxpacket 1024 [ 84.593083][ T1357] usb 8-1: config 250 interface 228 altsetting 255 endpoint 0x82 has invalid maxpacket 30768, setting to 1024 [ 84.593095][ T1357] usb 8-1: config 250 interface 228 altsetting 255 bulk endpoint 0x82 has invalid maxpacket 1024 [ 84.593106][ T1357] usb 8-1: config 250 interface 228 altsetting 255 has 2 endpoint descriptors, different from the interface descriptor's value: 17 [ 84.593119][ T1357] usb 8-1: config 250 interface 228 has no altsetting 0 [ 84.594422][ T1357] usb 8-1: New USB device strings: Mfr=0, Product=106, SerialNumber=59 [ 84.594439][ T1357] usb 8-1: Product: syz [ 84.594446][ T1357] usb 8-1: SerialNumber: syz [ 84.602046][ T1357] hub 8-1:250.228: bad descriptor, ignoring hub [ 84.602064][ T1357] hub 8-1:250.228: probe with driver hub failed with error -5 [ 84.645067][ T6239] lo speed is unknown, defaulting to 1000 [ 84.810617][ T43] audit: type=1400 audit(1700000032.079:339): avc: denied { mounton } for pid=6274 comm="syz.4.91" path="/15/proc" dev="tmpfs" ino=104 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 84.820514][ T1357] usblp 8-1:250.228: usblp0: USB Bidirectional printer dev 7 if 228 alt 255 proto 3 vid 0x0525 pid 0xD292 [ 84.852878][ T6277] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 85.057881][ T43] audit: type=1400 audit(1700000032.329:340): avc: denied { read write } for pid=6263 comm="syz.3.88" name="lp0" dev="devtmpfs" ino=2958 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:printer_device_t tclass=chr_file permissive=1 [ 85.058265][ T43] audit: type=1400 audit(1700000032.329:341): avc: denied { open } for pid=6263 comm="syz.3.88" path="/dev/usb/lp0" dev="devtmpfs" ino=2958 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:printer_device_t tclass=chr_file permissive=1 [ 85.253982][ T43] audit: type=1400 audit(1700000032.529:342): avc: denied { create } for pid=6283 comm="syz.4.94" name="loop10" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 85.255589][ T6284] loop10: detected capacity change from 0 to 32768 [ 85.272371][ T6284] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 85.500470][ T5933] misc userio: Buffer overflowed, userio client isn't keeping up [ 85.589245][ T6295] ubi: mtd0 is already attached to ubi0 [ 85.589906][ T6295] ubi0 error: ubi_create_volume: volume "vol0" exists (ID 0) [ 85.589933][ T6295] ubi0 error: ubi_create_volume: cannot create volume 1, error -17 [ 85.782074][ T6299] usb 1-1: usbfs: process 6299 (syz.4.99) did not claim interface 0 before use [ 85.782445][ T6299] usb 1-1: usbfs: process 6299 (syz.4.99) did not claim interface 0 before use [ 86.314129][ T6303] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 86.431325][ T6304] md: could not open device unknown-block(1,0). [ 86.432004][ T6303] md: could not open device unknown-block(1,1). [ 86.468934][ T6303] md: pers->run() failed ... [ 87.070442][ T9] usb 9-1: new high-speed USB device number 6 using dummy_hcd [ 87.230816][ T9] usb 9-1: New USB device found, idVendor=2040, idProduct=4900, bcdDevice= 0.00 [ 87.233228][ T9] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 87.233243][ T9] usb 9-1: Product: syz [ 87.233250][ T9] usb 9-1: Manufacturer: syz [ 87.233257][ T9] usb 9-1: SerialNumber: syz [ 87.442342][ T9] hdpvr 9-1:1.0: firmware version 0x0 dated [ 87.442394][ T9] hdpvr 9-1:1.0: untested firmware, the driver might not work. [ 88.285205][ T5875] usb 8-1: USB disconnect, device number 7 [ 88.291365][ T5875] usblp0: removed [ 88.322315][ T6317] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 88.441302][ T6317] md: could not open device unknown-block(1,0). [ 88.480469][ T6317] md: could not open device unknown-block(1,1). [ 88.518185][ T6317] md/raid1:md0: active with 1 out of 2 mirrors [ 88.519198][ T6317] md0: detected capacity change from 0 to 2048 [ 88.679516][ T6331] usb 1-1: usbfs: process 6331 (syz.3.108) did not claim interface 0 before use [ 88.679900][ T6331] usb 1-1: usbfs: process 6331 (syz.3.108) did not claim interface 0 before use [ 88.755298][ T6328] ubi: mtd0 is already attached to ubi0 [ 88.756329][ T6328] ubi0 error: ubi_create_volume: volume "vol0" exists (ID 0) [ 88.756360][ T6328] ubi0 error: ubi_create_volume: cannot create volume 1, error -17 [ 88.870685][ T5933] misc userio: Buffer overflowed, userio client isn't keeping up [ 89.034202][ T43] kauditd_printk_skb: 22 callbacks suppressed [ 89.034332][ T43] audit: type=1400 audit(1700000036.309:365): avc: denied { write } for pid=6338 comm="rm" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 89.235546][ T43] audit: type=1400 audit(1700000036.509:366): avc: denied { write } for pid=6343 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 89.291060][ T43] audit: type=1400 audit(1700000036.569:367): avc: denied { write } for pid=6349 comm="rm" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 89.389593][ T43] audit: type=1400 audit(1700000036.659:368): avc: denied { write } for pid=6355 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 89.452157][ T43] audit: type=1400 audit(1700000036.729:369): avc: denied { write } for pid=6360 comm="rm" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 90.270273][ T5826] usb 8-1: new high-speed USB device number 8 using dummy_hcd [ 90.421218][ T5826] usb 8-1: New USB device found, idVendor=0000, idProduct=0000, bcdDevice= 1.00 [ 90.424477][ T5826] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=0 [ 90.424495][ T5826] usb 8-1: Product: syz [ 90.424503][ T5826] usb 8-1: Manufacturer: syz [ 90.435493][ T5826] gspca_main: spca501-2.14.0 probing 0000:0000 [ 91.340526][ T5826] gspca_spca501: reg write: error -110 [ 91.340636][ T5826] spca501 8-1:1.0: Reg write failed for 0x05,0x22,0x04 [ 91.340711][ T5826] spca501 8-1:1.0: probe with driver spca501 failed with error -22 [ 91.342852][ T5826] usbhid 8-1:1.0: can't add hid device: -32 [ 91.342909][ T5826] usbhid 8-1:1.0: probe with driver usbhid failed with error -32 [ 91.844270][ T9] hdpvr 9-1:1.0: Could not setup controls [ 91.844585][ T9] hdpvr 9-1:1.0: registering videodev failed [ 91.867098][ T9] hdpvr 9-1:1.0: probe with driver hdpvr failed with error -71 [ 91.879872][ T9] usb 9-1: USB disconnect, device number 6 [ 91.964030][ T5731] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 91.970161][ T5731] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 91.975171][ T5731] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 91.980068][ T5731] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 91.983973][ T5731] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 92.314599][ T6376] lo speed is unknown, defaulting to 1000 [ 92.644408][ T6376] bridge0: port 1(bridge_slave_0) entered blocking state [ 92.644517][ T6376] bridge0: port 1(bridge_slave_0) entered disabled state [ 92.644710][ T6376] bridge_slave_0: entered allmulticast mode [ 92.645733][ T6376] bridge_slave_0: entered promiscuous mode [ 92.651236][ T6376] bridge0: port 2(bridge_slave_1) entered blocking state [ 92.651297][ T6376] bridge0: port 2(bridge_slave_1) entered disabled state [ 92.651418][ T6376] bridge_slave_1: entered allmulticast mode [ 92.652298][ T6376] bridge_slave_1: entered promiscuous mode [ 92.671840][ T6376] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 92.673720][ T6376] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 92.689502][ T6376] team0: Port device team_slave_0 added [ 92.691355][ T6376] team0: Port device team_slave_1 added [ 92.707036][ T6376] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 92.708521][ T6376] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 92.708547][ T6376] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 92.710584][ T6376] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 92.710595][ T6376] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 92.710614][ T6376] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 92.746926][ T6376] hsr_slave_0: entered promiscuous mode [ 92.748108][ T6376] hsr_slave_1: entered promiscuous mode [ 92.748611][ T6376] debugfs: 'hsr0' already exists in 'hsr' [ 92.748628][ T6376] Cannot create hsr debugfs directory [ 92.870432][ T6376] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 92.875873][ T6376] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 92.876944][ T6376] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 92.882155][ T6376] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 92.883019][ T6376] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 92.889006][ T6376] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 92.890107][ T6376] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 92.894283][ T6376] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 92.910367][ T6376] bridge0: port 2(bridge_slave_1) entered blocking state [ 92.910518][ T6376] bridge0: port 2(bridge_slave_1) entered forwarding state [ 92.910721][ T6376] bridge0: port 1(bridge_slave_0) entered blocking state [ 92.910799][ T6376] bridge0: port 1(bridge_slave_0) entered forwarding state [ 92.944860][ T6376] 8021q: adding VLAN 0 to HW filter on device bond0 [ 92.950979][ T75] bridge0: port 1(bridge_slave_0) entered disabled state [ 92.954156][ T75] bridge0: port 2(bridge_slave_1) entered disabled state [ 92.964767][ T6376] 8021q: adding VLAN 0 to HW filter on device team0 [ 92.968109][ T75] bridge0: port 1(bridge_slave_0) entered blocking state [ 92.968175][ T75] bridge0: port 1(bridge_slave_0) entered forwarding state [ 92.978196][ T75] bridge0: port 2(bridge_slave_1) entered blocking state [ 92.978382][ T75] bridge0: port 2(bridge_slave_1) entered forwarding state [ 93.046078][ T9] usb 8-1: USB disconnect, device number 8 [ 93.091653][ T6374] NFSD: Unable to initialize client recovery tracking! (-110) [ 93.091728][ T6374] NFSD: Is nfsdcld running? If not, enable CONFIG_NFSD_LEGACY_CLIENT_TRACKING. [ 93.091774][ T6374] NFSD: starting 90-second grace period (net f00004a6) [ 93.102370][ T5933] misc userio: Buffer overflowed, userio client isn't keeping up [ 93.271848][ T6376] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 93.280884][ T6408] ubi: mtd0 is already attached to ubi0 [ 93.282075][ T6408] ubi0 error: ubi_create_volume: volume "vol0" exists (ID 0) [ 93.282114][ T6408] ubi0 error: ubi_create_volume: cannot create volume 1, error -17 [ 93.412447][ T6424] usb 1-1: usbfs: process 6424 (syz.3.118) did not claim interface 0 before use [ 93.412742][ T6424] usb 1-1: usbfs: process 6424 (syz.3.118) did not claim interface 0 before use [ 93.471593][ T6376] veth0_vlan: entered promiscuous mode [ 93.482558][ T6376] veth1_vlan: entered promiscuous mode [ 93.511572][ T6376] veth0_macvtap: entered promiscuous mode [ 93.517650][ T6376] veth1_macvtap: entered promiscuous mode [ 93.542873][ T6376] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 93.552372][ T6376] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 93.620326][ T5776] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.620661][ T5776] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.624656][ T5776] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.624690][ T5776] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.648422][ T63] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 93.651425][ T63] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 93.676527][ T75] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 93.676583][ T75] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 93.759728][ T6431] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 93.834074][ T6431] md: md0: raid1 would not accept array [ 93.871140][ T6431] md: could not open device unknown-block(1,0). [ 93.931963][ T6431] md: could not open device unknown-block(1,1). [ 93.946459][ T6442] NFSD: Failed to start, no listeners configured. [ 93.986711][ T43] audit: type=1800 audit(1700000041.259:370): pid=6447 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.5.124" name="num" dev="configfs" ino=11885 res=0 errno=0 [ 93.988257][ T43] audit: type=1800 audit(1700000041.259:371): pid=6447 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.5.124" name="ipv4_address" dev="configfs" ino=11886 res=0 errno=0 [ 93.989614][ T43] audit: type=1800 audit(1700000041.259:372): pid=6447 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.5.124" name="ipv4_port" dev="configfs" ino=11887 res=0 errno=0 [ 93.993979][ T43] audit: type=1800 audit(1700000041.269:373): pid=6447 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.5.124" name="local" dev="configfs" ino=11888 res=0 errno=0 [ 94.000673][ T43] audit: type=1400 audit(1700000041.269:374): avc: denied { write } for pid=6446 comm="syz.5.124" name="/" dev="ocfs2_dlmfs" ino=12665 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 94.000850][ T6447] o2cb: Local heartbeat has not been started. [ 94.000860][ T6447] o2cb: Cluster check failed. Fix errors before retrying. [ 94.000878][ T6447] (syz.5.124,6447,2):user_dlm_register:674 ERROR: status = -22 [ 94.000902][ T6447] (syz.5.124,6447,2):dlmfs_mkdir:437 ERROR: Error -22 could not register domain "domain1" [ 94.044157][ T5731] Bluetooth: hci1: command tx timeout [ 94.228085][ T6452] ubi: mtd0 is already attached to ubi0 [ 94.229251][ T6452] ubi0 error: ubi_create_volume: volume "vol0" exists (ID 0) [ 94.230391][ T6452] ubi0 error: ubi_create_volume: cannot create volume 1, error -17 [ 94.560421][ T42] usb 10-1: new high-speed USB device number 2 using dummy_hcd [ 94.711325][ T42] usb 10-1: New USB device found, idVendor=17cc, idProduct=1969, bcdDevice= 1.00 [ 94.712168][ T42] usb 10-1: config 1 interface 0 altsetting 1 bulk endpoint 0x81 has invalid maxpacket 64 [ 94.712186][ T42] usb 10-1: config 1 interface 0 altsetting 1 bulk endpoint 0x1 has invalid maxpacket 64 [ 94.713787][ T42] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 94.713802][ T42] usb 10-1: Product: syz [ 94.713809][ T42] usb 10-1: Manufacturer: syz [ 94.713817][ T42] usb 10-1: SerialNumber: syz [ 95.247158][ T5933] input: PS/2 Generic Mouse as /devices/serio3/input/input19 [ 95.470398][ T5819] usb 8-1: new high-speed USB device number 9 using dummy_hcd [ 95.480731][ T5933] psmouse serio3: Failed to enable mouse on [ 95.640885][ T5819] usb 8-1: Using ep0 maxpacket: 8 [ 95.644695][ T5819] usb 8-1: New USB device found, idVendor=0424, idProduct=012c, bcdDevice= 0.00 [ 95.645994][ T5819] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 95.649652][ T5819] usb 8-1: config 0 descriptor?? [ 95.654053][ T5819] usb 8-1: probing VID:PID(0424:012C) [ 95.655040][ T5819] usb 8-1: vub300 testing BULK IN EndPoint(0) 81 [ 95.655055][ T5819] usb 8-1: vub300 testing BULK OUT EndPoint(1) 02 [ 95.655065][ T5819] usb 8-1: vub300 testing BULK IN EndPoint(2) 83 [ 95.655074][ T5819] usb 8-1: vub300 testing BULK OUT EndPoint(3) 04 [ 95.655083][ T5819] usb 8-1: vub300 LARGE packets using EndPoints 02 81 04 83 [ 95.923448][ T42] snd-usb-caiaq 10-1:1.0: can't set alt interface. [ 95.923502][ T42] usb 10-1: unable to init card! (ret=-5) [ 95.924245][ T42] snd-usb-caiaq 10-1:1.0: probe with driver snd-usb-caiaq failed with error -5 [ 95.925649][ T42] usb 10-1: USB disconnect, device number 2 [ 96.055523][ T5819] usb 8-1: operating_mode = IRQs 4-bit 48 MHz with 512 byte USB packets [ 96.130792][ T5731] Bluetooth: hci1: command tx timeout [ 96.256635][ T5819] usb 8-1: USB vub300 remote SDIO host controller[0]connected with SD/SDIO card inserted [ 96.517301][ T5776] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 96.594490][ T5776] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 96.687324][ T5776] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 96.768199][ T43] audit: type=1800 audit(1700000044.039:375): pid=6474 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.4.133" name="num" dev="configfs" ino=11913 res=0 errno=0 [ 96.768400][ T5776] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 96.768932][ T43] audit: type=1800 audit(1700000044.039:376): pid=6474 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.4.133" name="ipv4_address" dev="configfs" ino=11914 res=0 errno=0 [ 96.769425][ T43] audit: type=1800 audit(1700000044.039:377): pid=6474 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.4.133" name="ipv4_port" dev="configfs" ino=11915 res=0 errno=0 [ 96.769927][ T43] audit: type=1800 audit(1700000044.039:378): pid=6474 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.4.133" name="local" dev="configfs" ino=11916 res=0 errno=0 [ 96.771131][ T43] audit: type=1400 audit(1700000044.049:379): avc: denied { write } for pid=6473 comm="syz.4.133" name="/" dev="ocfs2_dlmfs" ino=11917 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 96.771202][ T6474] o2cb: Local heartbeat has not been started. [ 96.771208][ T6474] o2cb: Cluster check failed. Fix errors before retrying. [ 96.771219][ T6474] (syz.4.133,6474,3):user_dlm_register:674 ERROR: status = -22 [ 96.771231][ T6474] (syz.4.133,6474,3):dlmfs_mkdir:437 ERROR: Error -22 could not register domain "domain1" [ 96.934514][ T5776] bridge_slave_1: left allmulticast mode [ 96.934574][ T5776] bridge_slave_1: left promiscuous mode [ 96.935304][ T5776] bridge0: port 2(bridge_slave_1) entered disabled state [ 96.944269][ T5776] bridge_slave_0: left allmulticast mode [ 96.944340][ T5776] bridge_slave_0: left promiscuous mode [ 96.945207][ T5776] bridge0: port 1(bridge_slave_0) entered disabled state [ 97.028620][ T6478] ubi: mtd0 is already attached to ubi0 [ 97.030089][ T6478] ubi0 error: ubi_create_volume: volume "vol0" exists (ID 0) [ 97.030144][ T6478] ubi0 error: ubi_create_volume: cannot create volume 1, error -17 [ 97.108297][ T5776] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 97.118738][ T5776] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 97.126541][ T5776] bond0 (unregistering): Released all slaves [ 97.159562][ T43] audit: type=1400 audit(1700000044.429:380): avc: denied { create } for pid=6481 comm="syz.4.135" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 97.173289][ T43] audit: type=1400 audit(1700000044.449:381): avc: denied { write } for pid=6481 comm="syz.4.135" lport=58 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 97.239182][ T43] audit: type=1400 audit(1700000044.509:382): avc: denied { write } for pid=6484 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 97.304390][ T43] audit: type=1400 audit(1700000044.579:383): avc: denied { write } for pid=6487 comm="rm" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 97.359563][ T5439] 8021q: adding VLAN 0 to HW filter on device eth6 [ 97.497952][ T43] audit: type=1400 audit(1700000044.769:384): avc: denied { write } for pid=6494 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 97.606956][ T6502] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 97.657159][ T5439] 8021q: adding VLAN 0 to HW filter on device eth7 [ 97.700442][ T5811] usb 10-1: new high-speed USB device number 3 using dummy_hcd [ 97.714342][ T6502] md: md0: raid1 would not accept array [ 97.722994][ T6502] md: could not open device unknown-block(1,1). [ 97.729368][ T6505] md: could not open device unknown-block(1,0). [ 97.777114][ T5776] hsr_slave_0: left promiscuous mode [ 97.780735][ T5776] hsr_slave_1: left promiscuous mode [ 97.781645][ T5776] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 97.781666][ T5776] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 97.784202][ T5776] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 97.784222][ T5776] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 97.807119][ T5776] veth1_macvtap: left promiscuous mode [ 97.807172][ T5776] veth0_macvtap: left promiscuous mode [ 97.807250][ T5776] veth1_vlan: left promiscuous mode [ 97.807285][ T5776] veth0_vlan: left promiscuous mode [ 97.850384][ T5811] usb 10-1: Using ep0 maxpacket: 8 [ 97.851156][ T5811] usb 10-1: New USB device found, idVendor=0424, idProduct=012c, bcdDevice= 0.00 [ 97.852342][ T5811] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 97.856063][ T5811] usb 10-1: config 0 descriptor?? [ 97.866569][ T5811] usb 10-1: probing VID:PID(0424:012C) [ 97.872683][ T5811] usb 10-1: vub300 testing BULK IN EndPoint(0) 81 [ 97.872752][ T5811] usb 10-1: vub300 testing BULK OUT EndPoint(1) 02 [ 97.872795][ T5811] usb 10-1: vub300 testing BULK IN EndPoint(2) 83 [ 97.872830][ T5811] usb 10-1: vub300 testing BULK OUT EndPoint(3) 04 [ 97.872862][ T5811] usb 10-1: vub300 LARGE packets using EndPoints 02 81 04 83 [ 97.955681][ T5819] usb 8-1: SET_CLOCK_SPEED 200kHz failed with retval=-32 [ 98.017514][ T5776] team0 (unregistering): Port device team_slave_1 removed [ 98.030598][ T5776] team0 (unregistering): Port device team_slave_0 removed [ 98.100109][ T5439] 8021q: adding VLAN 0 to HW filter on device eth8 [ 98.202923][ T5731] Bluetooth: hci1: command tx timeout [ 98.266365][ T5811] usb 10-1: operating_mode = IRQs 4-bit 48 MHz with 512 byte USB packets [ 98.322655][ T5439] 8021q: adding VLAN 0 to HW filter on device eth9 [ 98.467912][ T5811] usb 10-1: USB vub300 remote SDIO host controller[0]connected with SD/SDIO card inserted [ 98.720617][ T5933] usb 9-1: new high-speed USB device number 7 using dummy_hcd [ 98.870977][ T5933] usb 9-1: New USB device found, idVendor=13b1, idProduct=0042, bcdDevice= 0.00 [ 98.871938][ T5933] usb 9-1: config 1 interface 0 altsetting 0 endpoint 0x84 has an invalid bInterval 0, changing to 7 [ 98.871968][ T5933] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 98.892873][ T5933] usb 9-1: Warning: ath10k USB support is incomplete, don't expect anything to work! [ 99.290011][ T5776] usb 9-1: Unsupported hardware version: 0x7420000 [ 99.290065][ T5776] usb 9-1: could not get hw params (-22) [ 99.290346][ T5776] usb 9-1: could not probe fw (-22) [ 99.735179][ T6541] ubi: mtd0 is already attached to ubi0 [ 99.737086][ T6541] ubi0 error: ubi_create_volume: volume "vol0" exists (ID 0) [ 99.737149][ T6541] ubi0 error: ubi_create_volume: cannot create volume 1, error -17 [ 99.807777][ T5834] usb 8-1: SET_CLOCK_SPEED 200kHz failed with retval=-19 [ 99.810642][ T5819] usb 8-1: USB disconnect, device number 9 [ 99.879680][ T5819] USB vub300 remote SDIO host controller[0] now disconnected [ 99.934077][ T6546] o2cb: Local heartbeat has not been started. [ 99.934138][ T6546] o2cb: Cluster check failed. Fix errors before retrying. [ 99.934185][ T6546] (syz.3.144,6546,0):user_dlm_register:674 ERROR: status = -22 [ 99.934201][ T6546] (syz.3.144,6546,0):dlmfs_mkdir:437 ERROR: Error -22 could not register domain "domain1" [ 100.103062][ T5811] usb 10-1: SET_CLOCK_SPEED 200kHz failed with retval=-32 [ 100.290324][ T5731] Bluetooth: hci1: command tx timeout [ 100.377216][ T6559] se_device not configured yet, cannot port link [ 100.386470][ T6559] [ 100.387333][ T6559] ====================================================== [ 100.390732][ T6559] WARNING: possible circular locking dependency detected [ 100.393655][ T6559] syzkaller #0 Not tainted [ 100.395575][ T6559] ------------------------------------------------------ [ 100.398007][ T6559] syz.3.149/6559 is trying to acquire lock: SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 100.400686][ T6559] ffffffff9047b920 (tpg_instances_lock){+.+.}-{4:4}, at: tcm_alloc+0x20/0x440 [ 100.404945][ T6559] [ 100.404945][ T6559] but task is already holding lock: [ 100.408149][ T6559] ffff88801379a390 (&gi->lock){+.+.}-{4:4}, at: config_usb_cfg_link+0x57/0x3a0 [ 100.411488][ T6559] [ 100.411488][ T6559] which lock already depends on the new lock. [ 100.411488][ T6559] [ 100.414941][ T6559] [ 100.414941][ T6559] the existing dependency chain (in reverse order) is: [ 100.417956][ T6559] [ 100.417956][ T6559] -> #2 (&gi->lock){+.+.}-{4:4}: [ 100.420309][ T6559] lock_acquire+0x1d1/0x380 [ 100.422041][ T6559] __mutex_lock+0x1a4/0x1bd0 [ 100.424322][ T6559] config_usb_cfg_link+0x57/0x3a0 [ 100.427641][ T6559] configfs_symlink+0x540/0x11f0 [ 100.430178][ T6559] vfs_symlink+0x178/0x4d0 [ 100.432100][ T6559] filename_symlinkat+0x2a6/0x560 [ 100.434691][ T6559] __x64_sys_symlinkat+0x9c/0xe0 [ 100.437232][ T6559] do_syscall_64+0x123/0x790 [ 100.439732][ T6559] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 100.443973][ T6559] [ 100.443973][ T6559] -> #1 (&sb->s_type->i_mutex_key#25){++++}-{4:4}: [ 100.449269][ T6559] lock_acquire+0x1d1/0x380 [ 100.451502][ T6559] down_write+0x8b/0x1f0 [ 100.453769][ T6559] configfs_depend_item_unlocked+0xf3/0x6a0 [ 100.456700][ T6559] usbg_make_tpg+0x251/0x610 [ 100.459136][ T6559] target_fabric_make_tpg+0xab/0x8c0 [ 100.461948][ T6559] configfs_mkdir+0x525/0xd40 [ 100.464810][ T6559] vfs_mkdir+0x364/0x850 [ 100.467582][ T6559] filename_mkdirat+0x48b/0x5e0 [ 100.470396][ T6559] __x64_sys_mkdirat+0x89/0xc0 [ 100.472192][ T6559] do_syscall_64+0x123/0x790 [ 100.475325][ T6559] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 100.478751][ T6559] [ 100.478751][ T6559] -> #0 (tpg_instances_lock){+.+.}-{4:4}: [ 100.482858][ T6559] check_prev_add+0xeb/0xe60 [ 100.485353][ T6559] __lock_acquire+0x1492/0x1ec0 [ 100.488027][ T6559] lock_acquire+0x1d1/0x380 [ 100.490646][ T6559] __mutex_lock+0x1a4/0x1bd0 [ 100.493237][ T6559] tcm_alloc+0x20/0x440 [ 100.495592][ T6559] usb_get_function+0x5e/0xd0 [ 100.498302][ T6559] config_usb_cfg_link+0x1ed/0x3a0 [ 100.501360][ T6559] configfs_symlink+0x540/0x11f0 [ 100.504052][ T6559] vfs_symlink+0x178/0x4d0 [ 100.506654][ T6559] filename_symlinkat+0x2a6/0x560 [ 100.509682][ T6559] __x64_sys_symlinkat+0x9c/0xe0 [ 100.512964][ T6559] do_syscall_64+0x123/0x790 [ 100.515887][ T6559] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 100.518991][ T6559] [ 100.518991][ T6559] other info that might help us debug this: [ 100.518991][ T6559] [ 100.523987][ T6559] Chain exists of: [ 100.523987][ T6559] tpg_instances_lock --> &sb->s_type->i_mutex_key#25 --> &gi->lock [ 100.523987][ T6559] [ 100.531158][ T6559] Possible unsafe locking scenario: [ 100.531158][ T6559] [ 100.534718][ T6559] CPU0 CPU1 [ 100.537354][ T6559] ---- ---- [ 100.539860][ T6559] lock(&gi->lock); [ 100.542365][ T6559] lock(&sb->s_type->i_mutex_key#25); [ 100.546152][ T6559] lock(&gi->lock); [ 100.549427][ T6559] lock(tpg_instances_lock); [ 100.551194][ T6559] [ 100.551194][ T6559] *** DEADLOCK *** [ 100.551194][ T6559] [ 100.553955][ T6559] locks held by syz.3.149/6559: 3, last CPU#3: [ 100.556769][ T6559] #0: ffff888023ee2460 (sb_writers#13){.+.+}-{0:0}, at: filename_create+0x10d/0x400 [ 100.561112][ T6559] #1: ffff888039ace500 (&sb->s_type->i_mutex_key#25){++++}-{4:4}, at: configfs_symlink+0x3c0/0x11f0 [ 100.566248][ T6559] #2: ffff88801379a390 (&gi->lock){+.+.}-{4:4}, at: config_usb_cfg_link+0x57/0x3a0 [ 100.570508][ T6559] [ 100.570508][ T6559] stack backtrace: [ 100.572544][ T6559] CPU: 3 UID: 0 PID: 6559 Comm: syz.3.149 Not tainted syzkaller #0 PREEMPT(full) [ 100.575685][ T6559] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 100.579115][ T6559] Call Trace: [ 100.580307][ T6559] [ 100.581414][ T6559] dump_stack_lvl+0x100/0x190 [ 100.583366][ T6559] print_circular_bug.cold+0x178/0x1be [ 100.585332][ T6559] check_noncircular+0x146/0x160 [ 100.587005][ T6559] check_prev_add+0xeb/0xe60 [ 100.588683][ T6559] __lock_acquire+0x1492/0x1ec0 [ 100.590301][ T6559] lock_acquire+0x1d1/0x380 [ 100.591852][ T6559] ? tcm_alloc+0x20/0x440 [ 100.593586][ T6559] ? __pfx___might_resched+0x10/0x10 [ 100.596232][ T6559] ? config_usb_cfg_link+0x57/0x3a0 [ 100.599291][ T6559] __mutex_lock+0x1a4/0x1bd0 [ 100.601625][ T6559] ? tcm_alloc+0x20/0x440 [ 100.603731][ T6559] ? tcm_alloc+0x20/0x440 [ 100.605745][ T6559] ? __mutex_lock+0x26c/0x1bd0 [ 100.608160][ T6559] ? config_usb_cfg_link+0x57/0x3a0 [ 100.611024][ T6559] ? __pfx___mutex_lock+0x10/0x10 [ 100.613544][ T6559] ? __pfx_selinux_inode_permission+0x10/0x10 [ 100.616453][ T6559] ? tcm_alloc+0x20/0x440 [ 100.618636][ T6559] tcm_alloc+0x20/0x440 [ 100.620664][ T6559] usb_get_function+0x5e/0xd0 [ 100.623280][ T6559] config_usb_cfg_link+0x1ed/0x3a0 [ 100.626283][ T6559] ? mntput_no_expire+0xe7/0x220 [ 100.628616][ T6559] configfs_symlink+0x540/0x11f0 [ 100.630907][ T6559] ? __pfx_configfs_symlink+0x10/0x10 [ 100.633465][ T6559] vfs_symlink+0x178/0x4d0 [ 100.635261][ T6559] filename_symlinkat+0x2a6/0x560 [ 100.638520][ T6559] ? __pfx_filename_symlinkat+0x10/0x10 [ 100.641658][ T6559] ? strncpy_from_user+0x19d/0x2d0 [ 100.644385][ T6559] ? do_getname+0x191/0x390 [ 100.646603][ T6559] __x64_sys_symlinkat+0x9c/0xe0 [ 100.648972][ T6559] do_syscall_64+0x123/0x790 [ 100.651084][ T6559] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 100.654401][ T6559] RIP: 0033:0x7f7f3c59e159 [ 100.657262][ T6559] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 100.666954][ T6559] RSP: 002b:00007f7f3d48e028 EFLAGS: 00000246 ORIG_RAX: 000000000000010a [ 100.670518][ T6559] RAX: ffffffffffffffda RBX: 00007f7f3c825fa0 RCX: 00007f7f3c59e159 [ 100.673352][ T6559] RDX: 0000200000001400 RSI: ffffffffffffff9c RDI: 0000200000001300 [ 100.676321][ T6559] RBP: 00007f7f3c635024 R08: 0000000000000000 R09: 0000000000000000 [ 100.679130][ T6559] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 100.682087][ T6559] R13: 00007f7f3c826038 R14: 00007f7f3c825fa0 R15: 00007fff43e9e4d8 [ 100.685659][ T6559] [ 100.850337][ C2] BUG: sleeping func ** replaying previous printk message ** [ 100.850337][ C2] BUG: sleeping function called from invalid context at kernel/workqueue.c:4561 [ 100.850392][ C2] in_atomic(): 1, irqs_disabled(): 0, non_block: 0, pid: 0, name: swapper/2 [ 100.850429][ C2] preempt_count: 101, expected: 0 [ 100.850455][ C2] RCU nest depth: 0, expected: 0 [ 100.850481][ C2] INFO: lockdep is turned off. [ 100.850501][ C2] Preemption disabled at: [ 100.850522][ C2] [] kmem_cache_alloc_node_noprof+0xda/0x6e0 [ 100.850574][ C2] CPU: 2 UID: 0 PID: 0 Comm: swapper/2 Not tainted syzkaller #0 PREEMPT(full) [ 100.850596][ C2] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 100.850607][ C2] Call Trace: [ 100.850613][ C2] [ 100.850621][ C2] dump_stack_lvl+0x100/0x190 [ 100.850649][ C2] __might_resched.cold+0x1dc/0x222 [ 100.850673][ C2] ? __pfx___might_resched+0x10/0x10 [ 100.850692][ C2] ? kfree_const+0x5f/0x70 [ 100.850719][ C2] ? __pfx_vub300_inactivity_timer_expired+0x10/0x10 [ 100.850749][ C2] cancel_delayed_work_sync+0xb8/0xf0 [ 100.850771][ C2] mmc_free_host+0x19/0x30 [ 100.850799][ C2] vub300_inactivity_timer_expired+0x42f/0x550 [ 100.850826][ C2] call_timer_fn+0x198/0x5f0 [ 100.850845][ C2] ? __pfx_call_timer_fn+0x10/0x10 [ 100.850861][ C2] ? __raise_softirq_irqoff+0x59/0xa0 [ 100.850883][ C2] ? rcu_is_watching+0x13/0xc0 [ 100.850913][ C2] ? rcu_is_watching+0x13/0xc0 [ 100.850939][ C2] ? __pfx_vub300_inactivity_timer_expired+0x10/0x10 [ 100.850964][ C2] __run_timers+0x757/0xb00 [ 100.850985][ C2] ? __pfx___run_timers+0x10/0x10 [ 100.851001][ C2] ? clockevents_program_event+0x1bf/0x820 [ 100.851021][ C2] ? lock_release+0x24d/0x310 [ 100.851040][ C2] ? _raw_spin_lock_irq+0x45/0x50 [ 100.851070][ C2] run_timer_base+0x114/0x190 [ 100.851088][ C2] ? __pfx_run_timer_base+0x10/0x10 [ 100.851107][ C2] run_timer_softirq+0x1a/0x50 [ 100.851124][ C2] handle_softirqs+0x1e6/0x9d0 [ 100.851144][ C2] ? __pfx_handle_softirqs+0x10/0x10 [ 100.851161][ C2] ? _raw_spin_unlock+0x28/0x50 [ 100.851186][ C2] ? __hrtimer_rearm_deferred+0x9b/0x7b0 [ 100.851214][ C2] __irq_exit_rcu+0x194/0x210 [ 100.851233][ C2] irq_exit_rcu+0x9/0x30 [ 100.851251][ C2] sysvec_apic_timer_interrupt+0xa3/0xc0 [ 100.851271][ C2] [ 100.851281][ C2] [ 100.851288][ C2] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 100.851310][ C2] RIP: 0010:pv_native_safe_halt+0xf/0x20 [ 100.851331][ C2] Code: 28 9c 02 e9 c3 4f 03 00 0f 1f 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa eb 07 0f 00 2d c3 56 1c 00 fb f4 cc cc cc cc 66 2e 0f 1f 84 00 00 00 00 00 66 90 90 90 90 90 90 [ 100.851349][ C2] RSP: 0018:ffffc90000197e00 EFLAGS: 00000246 [ 100.851366][ C2] RAX: 00000000000ef624 RBX: ffff88801f69a580 RCX: ffffffff8bcf6115 [ 100.851380][ C2] RDX: 0000000000000001 RSI: ffffffff8c620e00 RDI: ffffffff81e0468e [ 100.851393][ C2] RBP: ffffed1003ed34b0 R08: 0000000000000000 R09: ffffed100d4c67bd [ 100.851405][ C2] R10: ffff88806a633deb R11: ffffffff81d72f09 R12: 0000000000000000 [ 100.851418][ C2] R13: 0000000000000000 R14: 1ffff92000032fc4 R15: dffffc0000000000 [ 100.851432][ C2] ? finish_task_switch.isra.0+0x149/0x10d0 [ 100.851452][ C2] ? ct_kernel_exit+0x125/0x180 [ 100.851471][ C2] ? do_idle+0x3ae/0x5b0 [ 100.851493][ C2] default_idle+0x9/0x10 [ 100.851513][ C2] default_idle_call+0x6c/0xb0 [ 100.851535][ C2] do_idle+0x3ae/0x5b0 [ 100.851557][ C2] ? __pfx_do_idle+0x10/0x10 [ 100.851579][ C2] cpu_startup_entry+0x4f/0x60 [ 100.851599][ C2] start_secondary+0x21d/0x2d0 [ 100.851619][ C2] ? __pfx_start_secondary+0x10/0x10 [ 100.851639][ C2] common_startup_64+0x13e/0x158 [ 100.851664][ C2] [ 100.851680][ C2] ODEBUG: object ffffc90000658a60 is NOT on stack ffffc90000190000, but annotated. [ 100.852162][ C2] ------------[ cut here ]------------ [ 100.852171][ C2] 1 [ 100.852176][ C2] WARNING: lib/debugobjects.c:672 at lookup_object_or_alloc.part.0.cold+0x19/0x40, CPU#2: swapper/2/0 [ 101.000201][ C2] Modules linked in: [ 101.001522][ C2] CPU: 2 UID: 0 PID: 0 Comm: swapper/2 Tainted: G W syzkaller #0 PREEMPT(full) [ 101.005533][ C2] Tainted: [W]=WARN [ 101.007615][ C2] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 101.011762][ C2] RIP: 0010:lookup_object_or_alloc.part.0.cold+0x19/0x40 [ 101.014193][ C2] Code: c4 60 5b 5d 41 5c 41 5d 41 5e 41 5f e9 89 08 9c 0a 83 c5 01 89 2d 00 8d 7c 1a 4c 89 e6 48 c7 c7 c0 19 62 8c e8 81 bb eb ff 90 <0f> 0b 90 e9 82 53 fd 03 83 c5 01 89 2d df 8c 7c 1a 49 39 c4 73 da [ 101.020969][ C2] RSP: 0018:ffffc900006588f0 EFLAGS: 00010082 [ 101.023232][ C2] RAX: 0000000000000050 RBX: ffff8880344bcb60 RCX: 0000000000000000 [ 101.026529][ C2] RDX: 0000000000000050 RSI: ffffffff81e9e5d9 RDI: fffff520000cb10f [ 101.029065][ C2] RBP: 0000000000000001 R08: 0000000000000007 R09: 0000000000000000 [ 101.031636][ C2] R10: 0000000000000102 R11: 000000000000abb7 R12: ffffc90000658a60 [ 101.034326][ C2] R13: ffff88801f69a580 R14: 0000000000000001 R15: 0000000000000000 [ 101.036787][ C2] FS: 0000000000000000(0000) GS:ffff8880d5d61000(0000) knlGS:0000000000000000 [ 101.039997][ C2] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 101.042755][ C2] CR2: 00007f7f3c5eb840 CR3: 0000000026643000 CR4: 0000000000352ef0 [ 101.046521][ C2] Call Trace: [ 101.047714][ C2] [ 101.048638][ C2] __debug_object_init+0x2a9/0x3d0 [ 101.050232][ C2] ? rcu_is_watching+0x13/0xc0 [ 101.051774][ C2] ? __pfx___debug_object_init+0x10/0x10 [ 101.053587][ C2] ? do_raw_spin_lock+0x128/0x260 [ 101.055741][ C2] ? lockdep_init_map_type+0x5c/0x250 [ 101.058266][ C2] ? lockdep_init_map_type+0x5c/0x250 [ 101.060542][ C2] ? __init_swait_queue_head+0xca/0x150 [ 101.063080][ C2] __synchronize_srcu+0x1c3/0x300 [ 101.065157][ C2] ? __pfx___synchronize_srcu+0x10/0x10 [ 101.067109][ C2] ? ktime_get_mono_fast_ns+0x1c3/0x3f0 [ 101.069280][ C2] ? synchronize_srcu+0xa8/0x380 [ 101.071320][ C2] wakeup_source_unregister.part.0+0x12c/0x540 [ 101.073497][ C2] ? __pfx_mmc_host_classdev_release+0x10/0x10 [ 101.076127][ C2] wakeup_source_unregister+0x1f/0x30 [ 101.078478][ C2] mmc_host_classdev_release+0x42/0x120 [ 101.080828][ C2] ? __pfx_mmc_host_classdev_release+0x10/0x10 [ 101.083986][ C2] device_release+0xd2/0x270 [ 101.086623][ C2] kobject_put+0x1f7/0x640 [ 101.088926][ C2] ? __pfx_vub300_inactivity_timer_expired+0x10/0x10 [ 101.092280][ C2] put_device+0x1f/0x30 [ 101.094648][ C2] vub300_inactivity_timer_expired+0x42f/0x550 [ 101.097919][ C2] call_timer_fn+0x198/0x5f0 [ 101.100333][ C2] ? __pfx_call_timer_fn+0x10/0x10 [ 101.102893][ C2] ? __raise_softirq_irqoff+0x59/0xa0 [ 101.105428][ C2] ? rcu_is_watching+0x13/0xc0 [ 101.107545][ C2] ? rcu_is_watching+0x13/0xc0 [ 101.109482][ C2] ? __pfx_vub300_inactivity_timer_expired+0x10/0x10 [ 101.111922][ C2] __run_timers+0x757/0xb00 [ 101.114147][ C2] ? __pfx___run_timers+0x10/0x10 [ 101.116646][ C2] ? clockevents_program_event+0x1bf/0x820 [ 101.118606][ C2] ? lock_release+0x24d/0x310 [ 101.120463][ C2] ? _raw_spin_lock_irq+0x45/0x50 [ 101.122823][ C2] run_timer_base+0x114/0x190 [ 101.125509][ C2] ? __pfx_run_timer_base+0x10/0x10 [ 101.128041][ C2] run_timer_softirq+0x1a/0x50 [ 101.130863][ C2] handle_softirqs+0x1e6/0x9d0 [ 101.132983][ C2] ? __pfx_handle_softirqs+0x10/0x10 [ 101.135249][ C2] ? _raw_spin_unlock+0x28/0x50 [ 101.137381][ C2] ? __hrtimer_rearm_deferred+0x9b/0x7b0 [ 101.140271][ C2] __irq_exit_rcu+0x194/0x210 [ 101.142981][ C2] irq_exit_rcu+0x9/0x30 [ 101.145295][ C2] sysvec_apic_timer_interrupt+0xa3/0xc0 [ 101.147831][ C2] [ 101.149165][ C2] [ 101.150459][ C2] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 101.153033][ C2] RIP: 0010:pv_native_safe_halt+0xf/0x20 [ 101.155830][ C2] Code: 28 9c 02 e9 c3 4f 03 00 0f 1f 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa eb 07 0f 00 2d c3 56 1c 00 fb f4 cc cc cc cc 66 2e 0f 1f 84 00 00 00 00 00 66 90 90 90 90 90 90 [ 101.164758][ C2] RSP: 0018:ffffc90000197e00 EFLAGS: 00000246 [ 101.167287][ C2] RAX: 00000000000ef624 RBX: ffff88801f69a580 RCX: ffffffff8bcf6115 [ 101.170270][ C2] RDX: 0000000000000001 RSI: ffffffff8c620e00 RDI: ffffffff81e0468e [ 101.174602][ C2] RBP: ffffed1003ed34b0 R08: 0000000000000000 R09: ffffed100d4c67bd [ 101.178472][ C2] R10: ffff88806a633deb R11: ffffffff81d72f09 R12: 0000000000000000 [ 101.181786][ C2] R13: 0000000000000000 R14: 1ffff92000032fc4 R15: dffffc0000000000 [ 101.185196][ C2] ? finish_task_switch.isra.0+0x149/0x10d0 [ 101.187893][ C2] ? ct_kernel_exit+0x125/0x180 [ 101.190073][ C2] ? do_idle+0x3ae/0x5b0 [ 101.192169][ C2] default_idle+0x9/0x10 [ 101.194450][ C2] default_idle_call+0x6c/0xb0 [ 101.196639][ C2] do_idle+0x3ae/0x5b0 [ 101.198457][ C2] ? __pfx_do_idle+0x10/0x10 [ 101.200401][ C2] cpu_startup_entry+0x4f/0x60 [ 101.202041][ C2] start_secondary+0x21d/0x2d0 [ 101.203749][ C2] ? __pfx_start_secondary+0x10/0x10 [ 101.206118][ C2] common_startup_64+0x13e/0x158 [ 101.208228][ C2] [ 101.209547][ C2] irq event stamp: 1203101 [ 101.211408][ C2] hardirqs last enabled at (1203101): [] do_idle+0x3ae/0x5b0 [ 101.214746][ C2] hardirqs last disabled at (1203100): [] do_idle+0x13c/0x5b0 [ 101.217729][ C2] softirqs last enabled at (1203030): [] __irq_exit_rcu+0x194/0x210 [ 101.220987][ C2] softirqs last disabled at (1202969): [] __irq_exit_rcu+0x194/0x210 [ 101.224276][ C2] ---[ end trace 0000000000000000 ]--- [ 101.226513][ C2] BUG: scheduling while atomic: swapp ** replaying previous printk message ** [ 101.226513][ C2] BUG: scheduling while atomic: swapper/2/0/0x00000102 [ 101.226558][ C2] INFO: lockdep is turned off. [ 101.226593][ C2] Modules linked in: [ 101.226602][ C2] Preemption disabled at: [ 101.226605][ C2] [] kmem_cache_alloc_node_noprof+0xda/0x6e0 [ 101.226655][ C2] CPU: 2 UID: 0 PID: 0 Comm: swapper/2 Tainted: G W syzkaller #0 PREEMPT(full) [ 101.226673][ C2] Tainted: [W]=WARN [ 101.226677][ C2] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 101.226684][ C2] Call Trace: [ 101.226690][ C2] [ 101.226696][ C2] dump_stack_lvl+0x100/0x190 [ 101.226713][ C2] ? kmem_cache_alloc_node_noprof+0xda/0x6e0 [ 101.226725][ C2] __schedule_bug.cold+0xc9/0xf4 [ 101.226740][ C2] __schedule+0x406c/0x6920 [ 101.226753][ C2] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 101.226768][ C2] ? kvm_sched_clock_read+0x11/0x20 [ 101.226781][ C2] ? sched_clock_cpu+0x6c/0x570 [ 101.226798][ C2] ? __queue_delayed_work+0x35c/0x450 [ 101.226818][ C2] ? __pfx_sched_clock_cpu+0x10/0x10 [ 101.226836][ C2] ? __pfx___schedule+0x10/0x10 [ 101.226846][ C2] ? rcu_is_watching+0x13/0xc0 [ 101.226861][ C2] ? schedule+0x225/0x2c0 [ 101.226871][ C2] ? lock_release+0x24d/0x310 [ 101.226882][ C2] schedule+0xdd/0x2c0 [ 101.226893][ C2] schedule_timeout+0x1b2/0x280 [ 101.226909][ C2] ? __pfx_schedule_timeout+0x10/0x10 [ 101.226927][ C2] ? rcu_is_watching+0x13/0xc0 [ 101.226941][ C2] ? rcu_is_watching+0x13/0xc0 [ 101.226956][ C2] __wait_for_common+0x2e7/0x4c0 [ 101.226968][ C2] ? __pfx_schedule_timeout+0x10/0x10 [ 101.226985][ C2] ? __pfx___wait_for_common+0x10/0x10 [ 101.226998][ C2] ? lockdep_init_map_type+0x5c/0x250 [ 101.227011][ C2] __synchronize_srcu+0x216/0x300 [ 101.227024][ C2] ? __pfx___synchronize_srcu+0x10/0x10 [ 101.227036][ C2] ? __pfx_wakeme_after_rcu+0x10/0x10 [ 101.227053][ C2] ? ktime_get_mono_fast_ns+0x1c3/0x3f0 [ 101.227066][ C2] ? synchronize_srcu+0xa8/0x380 [ 101.227079][ C2] wakeup_source_unregister.part.0+0x12c/0x540 [ 101.227093][ C2] ? __pfx_mmc_host_classdev_release+0x10/0x10 [ 101.227112][ C2] wakeup_source_unregister+0x1f/0x30 [ 101.227123][ C2] mmc_host_classdev_release+0x42/0x120 [ 101.227141][ C2] ? __pfx_mmc_host_classdev_release+0x10/0x10 [ 101.227159][ C2] device_release+0xd2/0x270 [ 101.227175][ C2] kobject_put+0x1f7/0x640 [ 101.227190][ C2] ? __pfx_vub300_inactivity_timer_expired+0x10/0x10 [ 101.227208][ C2] put_device+0x1f/0x30 [ 101.227222][ C2] vub300_inactivity_timer_expired+0x42f/0x550 [ 101.227240][ C2] call_timer_fn+0x198/0x5f0 [ 101.227251][ C2] ? __pfx_call_timer_fn+0x10/0x10 [ 101.227261][ C2] ? __raise_softirq_irqoff+0x59/0xa0 [ 101.227276][ C2] ? rcu_is_watching+0x13/0xc0 [ 101.227290][ C2] ? rcu_is_watching+0x13/0xc0 [ 101.227304][ C2] ? __pfx_vub300_inactivity_timer_expired+0x10/0x10 [ 101.227322][ C2] __run_timers+0x757/0xb00 [ 101.227335][ C2] ? __pfx___run_timers+0x10/0x10 [ 101.227346][ C2] ? clockevents_program_event+0x1bf/0x820 [ 101.227363][ C2] ? lock_release+0x24d/0x310 [ 101.227376][ C2] ? _raw_spin_lock_irq+0x45/0x50 [ 101.227395][ C2] run_timer_base+0x114/0x190 [ 101.227407][ C2] ? __pfx_run_timer_base+0x10/0x10 [ 101.227419][ C2] run_timer_softirq+0x1a/0x50 [ 101.227431][ C2] handle_softirqs+0x1e6/0x9d0 [ 101.227444][ C2] ? __pfx_handle_softirqs+0x10/0x10 [ 101.227455][ C2] ? _raw_spin_unlock+0x28/0x50 [ 101.227472][ C2] ? __hrtimer_rearm_deferred+0x9b/0x7b0 [ 101.227490][ C2] __irq_exit_rcu+0x194/0x210 [ 101.227501][ C2] irq_exit_rcu+0x9/0x30 [ 101.227512][ C2] sysvec_apic_timer_interrupt+0xa3/0xc0 [ 101.227524][ C2] [ 101.227528][ C2] [ 101.227532][ C2] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 101.227546][ C2] RIP: 0010:pv_native_safe_halt+0xf/0x20 [ 101.227559][ C2] Code: 28 9c 02 e9 c3 4f 03 00 0f 1f 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa eb 07 0f 00 2d c3 56 1c 00 fb f4 cc cc cc cc 66 2e 0f 1f 84 00 00 00 00 00 66 90 90 90 90 90 90 [ 101.227577][ C2] RSP: 0018:ffffc90000197e00 EFLAGS: 00000246 [ 101.227587][ C2] RAX: 00000000000ef624 RBX: ffff88801f69a580 RCX: ffffffff8bcf6115 [ 101.227595][ C2] RDX: 0000000000000001 RSI: ffffffff8c620e00 RDI: ffffffff81e0468e [ 101.227603][ C2] RBP: ffffed1003ed34b0 R08: 0000000000000000 R09: ffffed100d4c67bd [ 101.227610][ C2] R10: ffff88806a633deb R11: ffffffff81d72f09 R12: 0000000000000000 [ 101.227618][ C2] R13: 0000000000000000 R14: 1ffff92000032fc4 R15: dffffc0000000000 [ 101.227626][ C2] ? finish_task_switch.isra.0+0x149/0x10d0 [ 101.227640][ C2] ? ct_kernel_exit+0x125/0x180 [ 101.227654][ C2] ? do_idle+0x3ae/0x5b0 [ 101.227667][ C2] default_idle+0x9/0x10 [ 101.227680][ C2] default_idle_call+0x6c/0xb0 [ 101.227694][ C2] do_idle+0x3ae/0x5b0 [ 101.227708][ C2] ? __pfx_do_idle+0x10/0x10 [ 101.227722][ C2] cpu_startup_entry+0x4f/0x60 [ 101.227736][ C2] start_secondary+0x21d/0x2d0 [ 101.227749][ C2] ? __pfx_start_secondary+0x10/0x10 [ 101.227761][ C2] common_startup_64+0x13e/0x158 [ 101.227779][ C2] [ 101.227797][ T0] bad: scheduling from the idle thread! [ 101.227805][ T0] CPU: 2 UID: 0 PID: 0 Comm: swapper/2 Tainted: G W syzkaller #0 PREEMPT(full) [ 101.227822][ T0] Tainted: [W]=WARN [ 101.227826][ T0] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 101.227832][ T0] Call Trace: [ 101.227836][ T0] [ 101.227840][ T0] dump_stack_lvl+0x100/0x190 [ 101.227857][ T0] dequeue_task_idle+0x2a/0xc0 [ 101.227869][ T0] __schedule+0x39b8/0x6920 [ 101.227879][ T0] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 101.227894][ T0] ? sched_clock_cpu+0x6c/0x570 [ 101.227912][ T0] ? __queue_delayed_work+0x35c/0x450 [ 101.227930][ T0] ? __pfx_sched_clock_cpu+0x10/0x10 [ 101.227949][ T0] ? __pfx___schedule+0x10/0x10 [ 101.227960][ T0] ? rcu_is_watching+0x13/0xc0 [ 101.227974][ T0] ? schedule+0x225/0x2c0 [ 101.227984][ T0] ? lock_release+0x24d/0x310 [ 101.227996][ T0] schedule+0xdd/0x2c0 [ 101.228006][ T0] schedule_timeout+0x1b2/0x280 [ 101.228023][ T0] ? __pfx_schedule_timeout+0x10/0x10 [ 101.228041][ T0] ? rcu_is_watching+0x13/0xc0 [ 101.228057][ T0] ? rcu_is_watching+0x13/0xc0 [ 101.228072][ T0] __wait_for_common+0x2e7/0x4c0 [ 101.228084][ T0] ? __pfx_schedule_timeout+0x10/0x10 [ 101.228103][ T0] ? __pfx___wait_for_common+0x10/0x10 [ 101.228116][ T0] ? lockdep_init_map_type+0x5c/0x250 [ 101.228129][ T0] __synchronize_srcu+0x216/0x300 [ 101.228143][ T0] ? __pfx___synchronize_srcu+0x10/0x10 [ 101.228155][ T0] ? __pfx_wakeme_after_rcu+0x10/0x10 [ 101.228173][ T0] ? ktime_get_mono_fast_ns+0x1c3/0x3f0 [ 101.228185][ T0] ? synchronize_srcu+0xa8/0x380 [ 101.228198][ T0] wakeup_source_unregister.part.0+0x12c/0x540 [ 101.228210][ T0] ? __pfx_mmc_host_classdev_release+0x10/0x10 [ 101.228229][ T0] wakeup_source_unregister+0x1f/0x30 [ 101.228241][ T0] mmc_host_classdev_release+0x42/0x120 [ 101.228259][ T0] ? __pfx_mmc_host_classdev_release+0x10/0x10 [ 101.228278][ T0] device_release+0xd2/0x270 [ 101.228293][ T0] kobject_put+0x1f7/0x640 [ 101.228308][ T0] ? __pfx_vub300_inactivity_timer_expired+0x10/0x10 [ 101.228327][ T0] put_device+0x1f/0x30 [ 101.228364][ T0] vub300_inactivity_timer_expired+0x42f/0x550 [ 101.228384][ T0] call_timer_fn+0x198/0x5f0 [ 101.228395][ T0] ? __pfx_call_timer_fn+0x10/0x10 [ 101.228405][ T0] ? __raise_softirq_irqoff+0x59/0xa0 [ 101.228419][ T0] ? rcu_is_watching+0x13/0xc0 [ 101.228434][ T0] ? rcu_is_watching+0x13/0xc0 [ 101.228449][ T0] ? __pfx_vub300_inactivity_timer_expired+0x10/0x10 [ 101.228467][ T0] __run_timers+0x757/0xb00 [ 101.228480][ T0] ? __pfx___run_timers+0x10/0x10 [ 101.228492][ T0] ? clockevents_program_event+0x1bf/0x820 [ 101.228508][ T0] ? lock_release+0x24d/0x310 [ 101.228521][ T0] ? _raw_spin_lock_irq+0x45/0x50 [ 101.228539][ T0] run_timer_base+0x114/0x190 [ 101.228551][ T0] ? __pfx_run_timer_base+0x10/0x10 [ 101.228563][ T0] run_timer_softirq+0x1a/0x50 [ 101.228580][ T0] handle_softirqs+0x1e6/0x9d0 [ 101.228593][ T0] ? __pfx_handle_softirqs+0x10/0x10 [ 101.228604][ T0] ? _raw_spin_unlock+0x28/0x50 [ 101.228623][ T0] ? __hrtimer_rearm_deferred+0x9b/0x7b0 [ 101.228641][ T0] __irq_exit_rcu+0x194/0x210 [ 101.228652][ T0] irq_exit_rcu+0x9/0x30 [ 101.228663][ T0] sysvec_apic_timer_interrupt+0xa3/0xc0 [ 101.228676][ T0] [ 101.228680][ T0] [ 101.228684][ T0] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 101.228698][ T0] RIP: 0010:pv_native_safe_halt+0xf/0x20 [ 101.228712][ T0] Code: 28 9c 02 e9 c3 4f 03 00 0f 1f 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa eb 07 0f 00 2d c3 56 1c 00 fb f4 cc cc cc cc 66 2e 0f 1f 84 00 00 00 00 00 66 90 90 90 90 90 90 [ 101.228725][ T0] RSP: 0018:ffffc90000197e00 EFLAGS: 00000246 [ 101.228736][ T0] RAX: 00000000000ef624 RBX: ffff88801f69a580 RCX: ffffffff8bcf6115 [ 101.228745][ T0] RDX: 0000000000000001 RSI: ffffffff8c620e00 RDI: ffffffff81e0468e [ 101.228753][ T0] RBP: ffffed1003ed34b0 R08: 0000000000000000 R09: ffffed100d4c67bd [ 101.228761][ T0] R10: ffff88806a633deb R11: ffffffff81d72f09 R12: 0000000000000000 [ 101.228769][ T0] R13: 0000000000000000 R14: 1ffff92000032fc4 R15: dffffc0000000000 [ 101.228778][ T0] ? finish_task_switch.isra.0+0x149/0x10d0 [ 101.228794][ T0] ? ct_kernel_exit+0x125/0x180 [ 101.228808][ T0] ? do_idle+0x3ae/0x5b0 [ 101.228823][ T0] default_idle+0x9/0x10 [ 101.228838][ T0] default_idle_call+0x6c/0xb0 [ 101.228854][ T0] do_idle+0x3ae/0x5b0 [ 101.228868][ T0] ? __pfx_do_idle+0x10/0x10 [ 101.228885][ T0] cpu_startup_entry+0x4f/0x60 [ 101.228901][ T0] start_secondary+0x21d/0x2d0 [ 101.228914][ T0] ? __pfx_start_secondary+0x10/0x10 [ 101.228927][ T0] common_startup_64+0x13e/0x158 [ 101.228947][ T0] [ 101.228997][ T0] ------------[ cut here ]------------ [ 101.229003][ T0] IS_ENABLED(CONFIG_DEBUG_ENTRY) && this_cpu_read(hardirq_stack_inuse) [ 101.229011][ T0] WARNING: arch/x86/kernel/process_64.c:616 at __switch_to+0xd52/0x10f0, CPU#2: swapper/2/0 [ 101.310371][ T5776] usb 10-1: reset high-speed USB device number 3 using dummy_hcd [ 101.592824][ T0] Modules linked in: [ 101.594129][ T0] CPU: 2 UID: 0 PID: 0 Comm: swapper/2 Tainted: G W syzkaller #0 PREEMPT(full) [ 101.597588][ T0] Tainted: [W]=WARN [ 101.598963][ T0] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 101.602679][ T0] RIP: 0010:__switch_to+0xd52/0x10f0 [ 101.604771][ T0] Code: ff ff e8 c1 13 60 00 48 89 de 48 89 ef e8 96 3d 03 00 e9 6b fa ff ff e8 ac 13 60 00 41 8e dd e9 60 f7 ff ff e8 9f 13 60 00 90 <0f> 0b 90 e9 e7 f2 ff ff e8 91 13 60 00 41 8e c5 e9 b4 f6 ff ff e8 [ 101.611459][ T0] RSP: 0018:ffffc900034b7be0 EFLAGS: 00010012 [ 101.613320][ T0] RAX: 0000000040000000 RBX: ffff8880255f0000 RCX: 0000000000000002 [ 101.615837][ T0] RDX: ffff88801f69a580 RSI: ffffffff81abdc71 RDI: ffff88801f69a580 [ 101.618635][ T0] RBP: ffff88801f69a580 R08: 0000000000000001 R09: 0000000000000000 [ 101.621966][ T0] R10: 0000000000000001 R11: 0000000000000000 R12: 0000000000000001 [ 101.625167][ T0] R13: 0000000000000002 R14: ffff88806a63bf00 R15: ffff8880255f168c [ 101.628327][ T0] FS: 0000000000000000(0000) GS:ffff8880d5d61000(0000) knlGS:0000000000000000 [ 101.631123][ T0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 101.633231][ T0] CR2: 00007f7f3c5eb840 CR3: 0000000026643000 CR4: 0000000000352ef0 [ 101.635735][ T0] Call Trace: [ 101.636820][ T0] irq event stamp: 1203101 [ 101.638286][ T0] hardirqs last enabled at (1203101): [] do_idle+0x3ae/0x5b0 [ 101.641274][ T0] hardirqs last disabled at (1203100): [] do_idle+0x13c/0x5b0 [ 101.645120][ T0] softirqs last enabled at (1203030): [] __irq_exit_rcu+0x194/0x210 [ 101.648603][ T0] softirqs last disabled at (1202969): [] __irq_exit_rcu+0x194/0x210 [ 101.651643][ T0] ---[ end trace 0000000000000000 ]--- [ 101.653823][ C2] ======== ** replaying previous printk message ** [ 101.653823][ C2] ================================================================== [ 101.653844][ C2] BUG: KASAN: stack-out-of-bounds in cfg80211_inform_bss_data+0x219/0x3c20 [ 101.653864][ C2] Write of size 6 at addr ffffc90000658848 by task kworker/u33:6/143 [ 101.653873][ C2] [ 101.653881][ C2] CPU: 2 UID: 0 PID: 143 Comm: kworker/u33:6 Tainted: G W syzkaller #0 PREEMPT(full) [ 101.653897][ C2] Tainted: [W]=WARN [ 101.653902][ C2] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 101.653910][ C2] Workqueue: events_unbound nsim_dev_trap_report_work [ 101.653926][ C2] Call Trace: [ 101.653930][ C2] [ 101.653936][ C2] dump_stack_lvl+0x100/0x190 [ 101.653952][ C2] print_report+0x13d/0x4b0 [ 101.653968][ C2] ? _raw_spin_lock_irqsave+0x52/0x60 [ 101.653986][ C2] ? cfg80211_inform_bss_data+0x219/0x3c20 [ 101.653999][ C2] kasan_report+0xdf/0x1c0 [ 101.654012][ C2] ? cfg80211_inform_bss_data+0x219/0x3c20 [ 101.654032][ C2] kasan_check_range+0x10f/0x1e0 [ 101.654047][ C2] __asan_memcpy+0x3c/0x60 [ 101.654063][ C2] cfg80211_inform_bss_data+0x219/0x3c20 [ 101.654077][ C2] ? rcu_is_watching+0x13/0xc0 [ 101.654092][ C2] ? lock_release+0x24d/0x310 [ 101.654105][ C2] ? __schedule+0x1259/0x6920 [ 101.654117][ C2] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 101.654131][ C2] ? __pfx_cfg80211_inform_bss_data+0x10/0x10 [ 101.654145][ C2] ? sched_clock_cpu+0x6c/0x570 [ 101.654163][ C2] ? __queue_delayed_work+0x35c/0x450 [ 101.654180][ C2] ? __pfx_sched_clock_cpu+0x10/0x10 [ 101.654198][ C2] ? __pfx___schedule+0x10/0x10 [ 101.654208][ C2] ? rcu_is_watching+0x13/0xc0 [ 101.654222][ C2] ? schedule+0x225/0x2c0 [ 101.654232][ C2] ? lock_release+0x24d/0x310 [ 101.654244][ C2] ? schedule+0xdd/0x2c0 [ 101.654255][ C2] ? rcu_is_watching+0x13/0xc0 [ 101.654269][ C2] ? rcu_is_watching+0x13/0xc0 [ 101.654283][ C2] ? __wait_for_common+0x2e7/0x4c0 [ 101.654296][ C2] cfg80211_inform_bss_frame_data+0x245/0x7c0 [ 101.654312][ C2] ieee80211_bss_info_update+0x310/0xab0 [ 101.654330][ C2] ? __pfx_ieee80211_bss_info_update+0x10/0x10 [ 101.654345][ C2] ? __synchronize_srcu+0x216/0x300 [ 101.654357][ C2] ? __pfx___synchronize_srcu+0x10/0x10 [ 101.654370][ C2] ? ieee80211_get_channel_khz+0x14a/0x1e0 [ 101.654383][ C2] ieee80211_scan_rx+0x4e6/0xb60 [ 101.654398][ C2] __ieee80211_rx_handle_packet+0xbab/0xfc0 [ 101.654418][ C2] ? __pfx_mmc_host_classdev_release+0x10/0x10 [ 101.654435][ C2] ? device_release+0xd2/0x270 [ 101.654449][ C2] ? __pfx___ieee80211_rx_handle_packet+0x10/0x10 [ 101.654467][ C2] ? trace_irq_enable.constprop.0+0x122/0x160 [ 101.654482][ C2] ? ieee80211_clean_skb+0x1a7/0x740 [ 101.654497][ C2] ieee80211_rx_list+0xf19/0x2160 [ 101.654515][ C2] ? __pfx_ieee80211_rx_list+0x10/0x10 [ 101.654530][ C2] ? lock_acquire+0x31e/0x380 [ 101.654542][ C2] ieee80211_rx_napi+0xdc/0x400 [ 101.654558][ C2] ? __pfx_ieee80211_rx_napi+0x10/0x10 [ 101.654574][ C2] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 101.654585][ C2] ieee80211_handle_queued_frames+0xc8/0x120 [ 101.654600][ C2] tasklet_action_common+0x2de/0x3d0 [ 101.654614][ C2] handle_softirqs+0x1e6/0x9d0 [ 101.654626][ C2] ? __pfx_handle_softirqs+0x10/0x10 [ 101.654637][ C2] ? __pfx_handle_softirqs+0x10/0x10 [ 101.654647][ C2] ? __hrtimer_rearm_deferred+0x9b/0x7b0 [ 101.654664][ C2] ? __alloc_skb+0x5b7/0x710 [ 101.654682][ C2] do_softirq+0xaf/0xf0 [ 101.654694][ C2] [ 101.654697][ C2] [ 101.654701][ C2] __local_bh_enable_ip+0xff/0x120 [ 101.654713][ C2] __alloc_skb+0x5db/0x710 [ 101.654728][ C2] ? __alloc_skb+0x5b7/0x710 [ 101.654742][ C2] ? __pfx___alloc_skb+0x10/0x10 [ 101.654757][ C2] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 101.654772][ C2] nsim_dev_trap_report_work+0x2af/0xd20 [ 101.654785][ C2] ? rcu_is_watching+0x13/0xc0 [ 101.654798][ C2] ? lock_acquire+0x31e/0x380 [ 101.654810][ C2] process_one_work+0xac7/0x1b10 [ 101.654827][ C2] ? irqentry_exit+0x24d/0xa10 [ 101.654839][ C2] ? __pfx_process_one_work+0x10/0x10 [ 101.654853][ C2] ? kthread_data+0x53/0xc0 [ 101.654868][ C2] ? __pfx_nsim_dev_trap_report_work+0x10/0x10 [ 101.654881][ C2] worker_thread+0x5ef/0xe50 [ 101.654897][ C2] ? kthread+0x13a/0x450 [ 101.654911][ C2] ? __pfx_worker_thread+0x10/0x10 [ 101.654925][ C2] kthread+0x373/0x450 [ 101.654939][ C2] ? __pfx_kthread+0x10/0x10 [ 101.654953][ C2] ret_from_fork+0x730/0xd60 [ 101.654965][ C2] ? __pfx_ret_from_fork+0x10/0x10 [ 101.654976][ C2] ? __switch_to+0x800/0x10f0 [ 101.654991][ C2] ? __pfx_kthread+0x10/0x10 [ 101.655005][ C2] ret_from_fork_asm+0x1a/0x30 [ 101.655019][ C2] [ 101.655023][ C2] [ 101.655030][ C2] The buggy address belongs to a 0-page vmalloc region starting at 0xffffc90000651000 allocated at irq_init_percpu_irqstack+0x22f/0x380 [ 101.655051][ C2] The buggy address belongs to the physical page: [ 101.655056][ C2] page: refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x6a608 [ 101.655068][ C2] flags: 0xfff00000002000(reserved|node=0|zone=1|lastcpupid=0x7ff) [ 101.655084][ C2] raw: 00fff00000002000 ffffea0001a98208 ffffea0001a98208 0000000000000000 [ 101.655093][ C2] raw: 0000000000000000 0000000000000000 00000001ffffffff 0000000000000000 [ 101.655099][ C2] page dumped because: kasan: bad access detected [ 101.655104][ C2] page_owner info is not present (never set?) [ 101.655108][ C2] [ 101.655111][ C2] Memory state around the buggy address: [ 101.655130][ C2] ffffc90000658700: f1 f1 01 f2 04 f2 04 f2 00 f2 f2 f2 00 00 00 f2 [ 101.655138][ C2] ffffc90000658780: f2 f2 f2 f2 00 00 00 00 f3 f3 f2 f2 f2 f2 00 00 [ 101.655146][ C2] >ffffc90000658800: 01 f2 f2 f2 f2 f2 00 00 00 f1 f1 f1 f1 00 00 00 [ 101.655152][ C2] ^ [ 101.655159][ C2] ffffc90000658880: 00 00 f2 f2 f2 f2 00 00 f3 f3 f3 f3 f3 00 00 00 [ 101.655166][ C2] ffffc90000658900: 00 00 f3 f3 f3 f3 00 00 00 00 00 00 00 00 00 00 [ 101.655171][ C2] ================================================================== [ 101.656183][ T0] Oops: general protection fault, probably for non-canonical address 0xdffffbff8b49c2b0: 0000 [#1] SMP KASAN NOPTI [ 101.750551][ T5776] usb 10-1: device descriptor read/64, error -32 [ 101.882004][ T0] CPU: 2 UID: 0 PID: 0 Comm: swapper/2 Tainted: G B W syzkaller #0 PREEMPT(full) [ 101.886041][ T0] Tainted: [B]=BAD_PAGE, [W]=WARN [ 101.887832][ T0] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 101.891043][ T0] RIP: 0010:__schedule+0x127c/0x6920 [ 101.892749][ T0] Code: 89 ee e8 57 e1 a5 f5 48 89 c7 e8 8f f4 06 f6 bf 01 00 00 00 e8 e5 62 06 f6 48 8b 8d d0 fe ff ff 48 b8 00 00 00 00 00 fc ff df <48> c7 04 01 00 00 00 00 48 8b 45 d0 65 48 2b 05 a8 b6 bb 08 0f 85 [ 101.900128][ T0] RSP: 0018:ffffc900006586c8 EFLAGS: 00010202 [ 101.902623][ T0] RAX: dffffc0000000000 RBX: ffffc90000658900 RCX: ffffffff8b49c2b0 [ 101.905458][ T0] RDX: 0000000000000000 RSI: ffffffff8c620e00 RDI: ffffffff8e6b6930 [ 101.908037][ T0] RBP: ffffc90000658818 R08: 0000000000000000 R09: fffffbfff2289fab [ 101.910466][ T0] R10: ffffffff9144fd5f R11: ffffffff81d72f09 R12: 0000000080000000 [ 101.913245][ T0] R13: 1ffff920000cb0db R14: ffff88806a630000 R15: ffffc90000658c28 [ 101.916795][ T0] FS: 0000000000000000(0000) GS:ffff8880d5d61000(0000) knlGS:0000000000000000 [ 101.920417][ T0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 101.922521][ T0] CR2: 00007f7f3c5eb840 CR3: 0000000026643000 CR4: 0000000000352ef0 [ 101.925061][ T0] Call Trace: [ 101.926134][ T0] [ 101.927058][ T0] ? __pfx_ieee80211_rx_handlers+0x10/0x10 [ 101.929042][ T0] ? __pfx_cfg80211_inform_bss_data+0x10/0x10 [ 101.931244][ T0] ? sched_clock_cpu+0x6c/0x570 [ 101.933187][ T0] ? __queue_delayed_work+0x35c/0x450 [ 101.935202][ T0] ? update_sd_lb_stats.constprop.0+0x2b5f/0x44c0 [ 101.937495][ T0] ? rcu_is_watching+0x13/0xc0 [ 101.939115][ T0] ? trace_irq_enable.constprop.0+0x122/0x160 [ 101.941061][ T0] ? rcu_is_watching+0x13/0xc0 [ 101.942617][ T0] ? trace_irq_enable.constprop.0+0x122/0x160 [ 101.944882][ T0] ? rcu_is_watching+0x13/0xc0 [ 101.946733][ T0] ? trace_irq_enable.constprop.0+0x122/0x160 [ 101.949061][ T0] ? unwind_next_frame+0x3c8/0x2090 [ 101.951093][ T0] ? ret_from_fork_asm+0x1a/0x30 [ 101.952784][ T0] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 101.954716][ T0] ? arch_stack_walk+0x94/0xf0 [ 101.956268][ T0] ? ret_from_fork_asm+0x1a/0x30 [ 101.957932][ T0] ? rcu_core+0x5eb/0x1260 [ 101.959617][ T0] ? stack_trace_save+0x8e/0xc0 [ 101.962176][ T0] ? __pfx_stack_trace_save+0x10/0x10 [ 101.964817][ T0] ? slab_free_after_rcu_debug+0x4c/0x170 [ 101.967129][ T0] ? stack_depot_save_flags+0x27/0x9f0 [ 101.969319][ T0] ? kasan_save_stack+0x30/0x50 [ 101.971370][ T0] ? kasan_save_track+0x14/0x30 [ 101.973518][ T0] ? kasan_save_free_info+0x3b/0x70 [ 101.975656][ T0] ? __kasan_slab_free+0x5f/0x80 [ 101.977511][ T0] ? rcu_core+0x5eb/0x1260 [ 101.979162][ T0] ? kasan_save_stack+0x3f/0x50 [ 101.980700][ T0] ? kasan_save_stack+0x30/0x50 [ 101.982247][ T0] ? kasan_save_track+0x14/0x30 [ 101.983785][ T0] ? kasan_save_free_info+0x3b/0x70 [ 101.985441][ T0] ? __kasan_slab_free+0x5f/0x80 [ 101.987102][ T0] ? slab_free_after_rcu_debug+0xdf/0x170 [ 101.989304][ T0] ? rcu_core+0x5f0/0x1260 [ 101.990978][ T0] ? handle_softirqs+0x1e6/0x9d0 [ 101.992893][ T0] ? do_softirq+0xaf/0xf0 [ 101.994293][ T0] ? __local_bh_enable_ip+0xff/0x120 [ 101.995984][ T0] ? __alloc_skb+0x5db/0x710 [ 101.997540][ T0] ? nsim_dev_trap_report_work+0x2af/0xd20 [ 101.999398][ T0] ? process_one_work+0xac7/0x1b10 [ 102.000450][ T5776] usb 10-1: reset high-speed USB device number 3 using dummy_hcd [ 102.003607][ T0] ? worker_thread+0x5ef/0xe50 [ 102.005329][ T0] ? kthread+0x373/0x450 [ 102.006690][ T0] ? ret_from_fork+0x730/0xd60 [ 102.008364][ T0] ? ret_from_fork_asm+0x1a/0x30 [ 102.009979][ T0] ? rcu_is_watching+0x13/0xc0 [ 102.011555][ T0] ? rcu_core+0x5eb/0x1260 [ 102.013356][ T0] ? rcu_is_watching+0x13/0xc0 [ 102.015615][ T0] ? rcu_is_watching+0x13/0xc0 [ 102.017717][ T0] ? trace_rcu_utilization+0x14b/0x240 [ 102.019843][ T0] ? rcu_core+0x846/0x1260 [ 102.021305][ T0] ? kvm_sched_clock_read+0x11/0x20 [ 102.022947][ T0] ? sched_clock+0x3a/0x60 [ 102.024400][ T0] ? sched_clock_cpu+0x6c/0x570 [ 102.025895][ T0] ? __pfx_sched_clock_cpu+0x10/0x10 [ 102.027537][ T0] ? __pfx_sched_balance_domains+0x10/0x10 [ 102.029567][ T0] ? rcu_is_watching+0x13/0xc0 [ 102.031230][ T0] ? irqtime_account_delta+0x9a/0x110 [ 102.033234][ T0] ? handle_softirqs+0x7ee/0x9d0 [ 102.035255][ T0] ? __pfx_handle_softirqs+0x10/0x10 [ 102.037650][ T0] ? __pfx_handle_softirqs+0x10/0x10 [ 102.039945][ T0] ? __hrtimer_rearm_deferred+0x9b/0x7b0 [ 102.041942][ T0] ? __alloc_skb+0x5b7/0x710 [ 102.043510][ T0] ? do_softirq+0xaf/0xf0 [ 102.045154][ T0] [ 102.046174][ T0] Modules linked in: [ 102.047682][ T5878] kernel tried to execute NX-protected page - exploit attempt? (uid: 0) [ 102.047741][ C2] WARNING: stack going in the wrong direction? at sysvec_apic_timer_interrupt+0xa3/0xc0 [ 102.055496][ T5878] BUG: unable to handle page fault for address: ffffc900027e0000 [ 102.059004][ T5878] #PF: supervisor instruction fetch in kernel mode [ 102.061375][ T5878] #PF: error_code(0x0011) - permissions violation [ 102.063946][ T5878] PGD 1c000067 P4D 1c000067 PUD 1d695067 PMD 102aba067 PTE 80000000249d8163 [ 102.066840][ T5878] Oops: Oops: 0011 [#2] SMP KASAN NOPTI [ 102.069201][ T5878] CPU: 0 UID: 0 PID: 5878 Comm: kworker/0:4 Tainted: G B D W syzkaller #0 PREEMPT(full) [ 102.074011][ T5878] Tainted: [B]=BAD_PAGE, [D]=DIE, [W]=WARN [ 102.076128][ T5878] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 102.080781][ T5878] Workqueue: rcu_gp srcu_invoke_callbacks [ 102.083337][ T5878] RIP: 0010:0xffffc900027e0000 [ 102.085343][ T5878] Code: Unable to access opcode bytes at 0xffffc900027dffd6. [ 102.088418][ T5878] RSP: 0018:ffffc90003447b48 EFLAGS: 00010246 [ 102.091171][ T5878] RAX: ffffc900027e0000 RBX: ffff88806a438640 RCX: 0000000000000001 [ 102.094581][ T5878] RDX: 1ffff110054b52b4 RSI: 0000000000000200 RDI: ffffc90000658a60 [ 102.098156][ T5878] RBP: 1ffff92000688f6e R08: 0000000000000000 R09: 0000000000000000 [ 102.102034][ T5878] R10: 0000000000000000 R11: ffffffff81d72f09 R12: ffffc90003447b90 [ 102.105792][ T5878] R13: dffffc0000000000 R14: ffffc90000658a68 R15: ffffc90000658a60 [ 102.109166][ T5878] FS: 0000000000000000(0000) GS:ffff8880d5b61000(0000) knlGS:0000000000000000 [ 102.112747][ T5878] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 102.115812][ T5878] CR2: ffffc900027dffd6 CR3: 000000000eb96000 CR4: 0000000000352ef0 [ 102.119806][ T5878] Call Trace: [ 102.121334][ T5878] [ 102.122624][ T5878] ? srcu_invoke_callbacks+0x384/0x5e0 [ 102.124844][ T5878] ? __pfx_srcu_invoke_callbacks+0x10/0x10 [ 102.127194][ T5878] ? lock_acquire+0x31e/0x380 [ 102.129100][ T5878] ? process_one_work+0x906/0x1b10 [ 102.130391][ T5776] usb 10-1: device descriptor read/64, error -32 [ 102.134321][ T5878] ? rcu_is_watching+0x13/0xc0 [ 102.136368][ T5878] ? process_one_work+0x906/0x1b10 [ 102.138621][ T5878] ? lock_release+0x24d/0x310 [ 102.140494][ T5878] ? process_one_work+0xac7/0x1b10 [ 102.142464][ T5878] ? irqentry_exit+0x24d/0xa10 [ 102.144391][ T5878] ? __pfx_process_one_work+0x10/0x10 [ 102.146492][ T5878] ? kthread_data+0x53/0xc0 [ 102.148298][ T5878] ? __pfx_srcu_invoke_callbacks+0x10/0x10 [ 102.150881][ T5878] ? worker_thread+0x5ef/0xe50 [ 102.153397][ T5878] ? __pfx_worker_thread+0x10/0x10 [ 102.155577][ T5878] ? kthread+0x13a/0x450 [ 102.157279][ T5878] ? __pfx_worker_thread+0x10/0x10 [ 102.159310][ T5878] ? kthread+0x373/0x450 [ 102.161098][ T5878] ? __pfx_kthread+0x10/0x10 [ 102.163293][ T5878] ? ret_from_fork+0x730/0xd60 [ 102.165917][ T5878] ? __pfx_ret_from_fork+0x10/0x10 [ 102.168741][ T5878] ? __switch_to+0x800/0x10f0 [ 102.170936][ T5878] ? __pfx_kthread+0x10/0x10 [ 102.172819][ T5878] ? ret_from_fork_asm+0x1a/0x30 [ 102.174795][ T5878] [ 102.176046][ T5878] Modules linked in: [ 102.177626][ T5878] CR2: ffffc900027e0000 [ 102.179335][ T5878] ---[ end trace 00000000000 ** replaying previous printk message ** [ 102.179335][ T5878] ---[ end trace 0000000000000000 ]--- [ 102.179418][ T0] BUG: unable to handle page fault for address: 0000000000038cfe [ 102.179432][ T0] #PF: supervisor instruction fetch in kernel mode [ 102.179439][ T0] #PF: error_code(0x0010) - not-present page [ 102.179446][ T0] PGD 0 P4D 0 [ 102.179456][ T0] Oops: Oops: 0010 [#3] SMP KASAN NOPTI [ 102.179470][ T0] CPU: 2 UID: 0 PID: 0 Comm: swapper/2 Tainted: G B D W syzkaller #0 PREEMPT(full) [ 102.179486][ T0] Tainted: [B]=BAD_PAGE, [D]=DIE, [W]=WARN [ 102.179494][ T0] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 102.179500][ T0] RIP: 0010:0x38cfe [ 102.179509][ T0] Code: Unable to access opcode bytes at 0x38cd4. [ 102.179514][ T0] RSP: 0018:ffffc90000658498 EFLAGS: 00010006 [ 102.179523][ T0] RAX: 0000000000000003 RBX: dffffc0000000000 RCX: ffffffff8bcf657f [ 102.179530][ T0] RDX: 0000000000000002 RSI: ffffffff8bfe9be0 RDI: ffffffff8c620e80 [ 102.179537][ T0] RBP: ffffffff828b7274 R08: 0000000000000000 R09: ffffed100d4c67bd [ 102.179544][ T0] R10: ffff88806a633deb R11: 0000000000000002 R12: 0000000000000000 [ 102.179550][ T0] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 102.179557][ T0] FS: 0000000000000000(0000) GS:ffff8880d5d61000(0000) knlGS:0000000000000000 [ 102.179582][ T0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 102.179592][ T0] CR2: 0000000000038cfe CR3: 0000000026643000 CR4: 0000000000352ef0 [ 102.179599][ T0] Call Trace: [ 102.179605][ T0] [ 102.179610][ T0] ? rcu_is_watching+0x13/0xc0 [ 102.179627][ T0] ? unwind_next_frame+0x3be/0x2090 [ 102.179642][ T0] ? rcu_is_watching+0x13/0xc0 [ 102.179655][ T0] ? rcu_is_watching+0x13/0xc0 [ 102.179669][ T0] ? unwind_next_frame+0x3be/0x2090 [ 102.179683][ T0] ? rcu_is_watching+0x13/0xc0 [ 102.179696][ T0] ? unwind_next_frame+0x3be/0x2090 [ 102.179710][ T0] ? lock_release+0x24d/0x310 [ 102.179721][ T0] ? unwind_next_frame+0x3c8/0x2090 [ 102.179735][ T0] ? sysvec_apic_timer_interrupt+0xa3/0xc0 [ 102.179748][ T0] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 102.179767][ T0] ? arch_stack_walk+0x94/0xf0 [ 102.179780][ T0] ? __page_table_check_zero+0x284/0x410 [ 102.179795][ T0] ? stack_trace_save+0x8e/0xc0 [ 102.179810][ T0] ? rcu_is_watching+0x13/0xc0 [ 102.179824][ T0] ? unwind_next_frame+0x3be/0x2090 [ 102.179838][ T0] ? rcu_is_watching+0x13/0xc0 [ 102.179852][ T0] ? rcu_is_watching+0x13/0xc0 [ 102.179866][ T0] ? unwind_next_frame+0x3be/0x2090 [ 102.179880][ T0] ? rcu_is_watching+0x13/0xc0 [ 102.179893][ T0] ? rcu_is_watching+0x13/0xc0 [ 102.179909][ T0] ? unwind_next_frame+0x3be/0x2090 [ 102.179924][ T0] ? rcu_is_watching+0x13/0xc0 [ 102.179938][ T0] ? unwind_next_frame+0x3be/0x2090 [ 102.179952][ T0] ? lock_release+0x24d/0x310 [ 102.179963][ T0] ? unwind_next_frame+0x3c8/0x2090 [ 102.179977][ T0] ? sysvec_apic_timer_interrupt+0xa3/0xc0 [ 102.179989][ T0] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 102.180006][ T0] ? arch_stack_walk+0x94/0xf0 [ 102.180020][ T0] ? __page_table_check_zero+0x284/0x410 [ 102.180034][ T0] ? kfree_skbmem+0x19a/0x210 [ 102.180047][ T0] ? stack_trace_save+0x8e/0xc0 [ 102.180063][ T0] ? __pfx_stack_trace_save+0x10/0x10 [ 102.180079][ T0] ? stack_depot_save_flags+0x27/0x9f0 [ 102.180091][ T0] ? kasan_save_free_info+0x3b/0x70 [ 102.180107][ T0] ? __kasan_slab_free+0x5f/0x80 [ 102.180118][ T0] ? kfree+0x22b/0x6d0 [ 102.180131][ T0] ? skb_free_head+0xb9/0x160 [ 102.180146][ T0] ? kfree_skbmem+0x19a/0x210 [ 102.180158][ T0] ? kasan_save_stack+0x3f/0x50 [ 102.180169][ T0] ? kasan_save_stack+0x30/0x50 [ 102.180182][ T0] ? kasan_save_track+0x14/0x30 [ 102.180193][ T0] ? kasan_save_free_info+0x3b/0x70 [ 102.180210][ T0] ? __kasan_slab_free+0x5f/0x80 [ 102.180221][ T0] ? kmem_cache_free+0x127/0x6c0 [ 102.180236][ T0] ? kfree_skbmem+0x19a/0x210 [ 102.180248][ T0] ? consume_skb+0xd1/0x110 [ 102.180259][ T0] ? mac80211_hwsim_tx_frame+0x1bf/0x250 [ 102.180272][ T0] ? mac80211_hwsim_beacon_tx+0x56c/0xa00 [ 102.180285][ T0] ? __iterate_interfaces+0x2e6/0x650 [ 102.180298][ T0] ? ieee80211_iterate_active_interfaces_atomic+0x71/0x1b0 [ 102.180312][ T0] ? mac80211_hwsim_beacon+0xe5/0x2a0 [ 102.180329][ T0] ? __hrtimer_run_queues+0x462/0x9c0 [ 102.180384][ T0] ? hrtimer_run_softirq+0x1ca/0x360 [ 102.180402][ T0] ? handle_softirqs+0x1e6/0x9d0 [ 102.180419][ T0] ? __irq_exit_rcu+0x194/0x210 [ 102.180430][ T0] ? irq_exit_rcu+0x9/0x30 [ 102.180443][ T0] ? sysvec_apic_timer_interrupt+0xa3/0xc0 [ 102.180458][ T0] ? rcu_is_watching+0x13/0xc0 [ 102.180473][ T0] ? ieee80211_get_buffered_bc+0x4fe/0x8d0 [ 102.180490][ T0] ? rcu_is_watching+0x13/0xc0 [ 102.180506][ T0] ? ieee80211_get_buffered_bc+0x4fe/0x8d0 [ 102.180522][ T0] ? lock_release+0x24d/0x310 [ 102.180535][ T0] ? ieee80211_get_buffered_bc+0x508/0x8d0 [ 102.180552][ T0] ? rcu_is_watching+0x13/0xc0 [ 102.180567][ T0] ? trace_pelt_se_tp+0x143/0x1a0 [ 102.180586][ T0] ? kvm_sched_clock_read+0x11/0x20 [ 102.180598][ T0] ? sched_clock+0x3a/0x60 [ 102.180616][ T0] ? sched_clock_cpu+0x6c/0x570 [ 102.180636][ T0] ? psi_group_change+0x457/0xa20 [ 102.180648][ T0] ? enqueue_task+0x1dc/0x4f0 [ 102.180664][ T0] ? rcu_is_watching+0x13/0xc0 [ 102.180679][ T0] ? enqueue_task+0x1dc/0x4f0 [ 102.180695][ T0] ? lock_release+0x24d/0x310 [ 102.180707][ T0] ? tracing_record_taskinfo_sched_switch+0xac/0x560 [ 102.180725][ T0] ? try_to_wake_up+0xd8d/0x1c90 [ 102.180738][ T0] ? rcu_is_watching+0x13/0xc0 [ 102.180754][ T0] ? try_to_wake_up+0xd8d/0x1c90 [ 102.180767][ T0] ? lock_release+0x24d/0x310 [ 102.180779][ T0] ? lock_release+0x24d/0x310 [ 102.180791][ T0] ? do_raw_spin_unlock+0x145/0x1e0 [ 102.180806][ T0] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 102.180819][ T0] ? try_to_wake_up+0x158/0x1c90 [ 102.180833][ T0] ? kvm_sched_clock_read+0x11/0x20 [ 102.180845][ T0] ? sched_clock+0x3a/0x60 [ 102.180863][ T0] ? sched_clock_cpu+0x6c/0x570 [ 102.180882][ T0] ? __pfx_sched_clock_cpu+0x10/0x10 [ 102.180902][ T0] ? handle_softirqs+0x1e6/0x9d0 [ 102.180916][ T0] ? rcu_is_watching+0x13/0xc0 [ 102.180933][ T0] ? irqtime_account_delta+0x9a/0x110 [ 102.180951][ T0] ? handle_softirqs+0x7ee/0x9d0 [ 102.180964][ T0] ? __pfx_handle_softirqs+0x10/0x10 [ 102.180976][ T0] ? _raw_spin_unlock+0x28/0x50 [ 102.180995][ T0] ? __hrtimer_rearm_deferred+0x9b/0x7b0 [ 102.181014][ T0] ? irq_exit_rcu+0x15/0x30 [ 102.181025][ T0] ? sysvec_apic_timer_interrupt+0xa3/0xc0 [ 102.181038][ T0] [ 102.181043][ T0] WARNING: stack recursion on stack type 2 [ 102.181049][ T0] Modules linked in: [ 102.181058][ T0] CR2: 0000000000038cfe [ 102.181065][ T0] ---[ end trace 0000000000000000 ]--- [ 102.181071][ T0] RIP: 0010:__schedule+0x127c/0x6920 [ 102.181083][ T0] Code: 89 ee e8 57 e1 a5 f5 48 89 c7 e8 8f f4 06 f6 bf 01 00 00 00 e8 e5 62 06 f6 48 8b 8d d0 fe ff ff 48 b8 00 00 00 00 00 fc ff df <48> c7 04 01 00 00 00 00 48 8b 45 d0 65 48 2b 05 a8 b6 bb 08 0f 85 [ 102.181096][ T0] RSP: 0018:ffffc900006586c8 EFLAGS: 00010202 [ 102.181106][ T0] RAX: dffffc0000000000 RBX: ffffc90000658900 RCX: ffffffff8b49c2b0 [ 102.181114][ T0] RDX: 0000000000000000 RSI: ffffffff8c620e00 RDI: ffffffff8e6b6930 [ 102.181122][ T0] RBP: ffffc90000658818 R08: 0000000000000000 R09: fffffbfff2289fab [ 102.181130][ T0] R10: ffffffff9144fd5f R11: ffffffff81d72f09 R12: 0000000080000000 [ 102.181138][ T0] R13: 1ffff920000cb0db R14: ffff88806a630000 R15: ffffc90000658c28 [ 102.181146][ T0] FS: 0000000000000000(0000) GS:ffff8880d5d61000(0000) knlGS:0000000000000000 [ 102.181172][ T0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 102.181183][ T0] CR2: 0000000000038cfe CR3: 0000000026643000 CR4: 0000000000352ef0 [ 102.181193][ T0] Kernel panic - not syncing: Fatal exception [ 103.542374][ T0] Shutting down cpus with NMI [ 103.544500][ T0] Kernel Offset: disabled [ 103.545891][ T0] Rebooting in 86400 seconds..