last executing test programs: 10.796292134s ago: executing program 3 (id=1100): mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./dev\x00', 0x1ff) mount(&(0x7f00000000c0)=@filename='none\x00', &(0x7f0000000180)='./dev\x00', &(0x7f00000001c0)='devtmpfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./config\x00', 0x1ff) mount(&(0x7f00000002c0)=@filename='none\x00', &(0x7f0000000380)='./config\x00', &(0x7f00000003c0)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000480)='./sys\x00', 0x1ff) mount(&(0x7f00000004c0)=@filename='none\x00', &(0x7f0000000540)='./sys\x00', &(0x7f0000000580)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f00000005c0)='./sys/kernel/uevent_helper\x00', 0x1, 0x0) write(r0, &(0x7f0000000600)='\x00', 0x1) mkdirat(0xffffffffffffff9c, &(0x7f0000000640)='./config/dlm\x00', 0x1ff) r1 = openat(0xffffffffffffff9c, &(0x7f0000000b80)='./dev/dlm_dlm1\x00', 0x2, 0x0) write(r1, &(0x7f0000000200)="0600000000000000020000000101000003040000000000000000000000000000000000000000000000000000000000000000000000000000007f00000000000000000000000000000000000000010000007f00000000000000000000000000000000000000000000000000000000000000000000000000000072657331", 0x7c) write(r1, &(0x7f0000000300)="0600000000000000020000000201000000000000000000000100000000000000000000000000000000000000000000000000000000000000007f00000000000000000000000000000000000000010000007f00"/121, 0x78) 10.573048619s ago: executing program 0 (id=1101): socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000}, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_route(0x10, 0x3, 0x0) sendmsg$NFT_MSG_GETSETELEM(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[@ANYBLOB="340000000d00000800000000000000000a000001ae00020073"], 0x34}, 0x1, 0x0, 0x0, 0x5}, 0x8000) syz_genetlink_get_family_id$ipvs(0x0, 0xffffffffffffffff) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000000080)=ANY=[@ANYBLOB="9feb010018000000000000003c0000003c000000020000000000000002000004fff7ffff0000000003"], 0x0, 0x56}, 0x28) r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'bridge_slave_0\x00', 0x0}) bpf$BPF_PROG_DETACH(0x1c, &(0x7f0000000140)={@cgroup, 0xffffffffffffffff, 0x2f, 0x34, 0x4}, 0x20) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0xfd0f, &(0x7f00000000c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="2c00000070000100000000000000000007000000", @ANYRES32=r1, @ANYBLOB="140001800800010000000100050006"], 0x2c}}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) setsockopt$packet_fanout_data(0xffffffffffffffff, 0x107, 0x16, &(0x7f0000000100)={0x2, &(0x7f0000000180)=[{0x6c}, {0x6}]}, 0x10) sendmsg$TIPC_NL_KEY_SET(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)={0x54, 0x0, 0x1, 0x0, 0x0, {0x3}, [@TIPC_NLA_BEARER={0x40, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x100, @dev={0xac, 0x14, 0x14, 0x41}}}, {0x14, 0x2, @in={0x2, 0x0, @multicast2}}}}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz2\x00'}]}]}, 0x54}}, 0x0) 10.48672431s ago: executing program 4 (id=1104): socket$nl_netfilter(0x10, 0x3, 0xc) syz_open_dev$video(&(0x7f0000000080), 0x7, 0x0) socket$tipc(0x1e, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) sendmsg$inet(0xffffffffffffffff, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x24006000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r4, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r3, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000240)=[@cred={{0x1c}}], 0x20}, 0x80) mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000440)=@new_dev={0x4, 0x3c9, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x50}}}, &(0x7f0000000300)) r5 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi1\x00', 0x2, 0x0) ioctl$COMEDI_DEVCONFIG(r5, 0x40946400, &(0x7f0000000440)={'ni_at_a2150\x00', [0x300, 0xc0000000, 0x2, 0x1, 0xe, 0x800005, 0x7, 0x6, 0x8, 0x56, 0xffffffff, 0x1, 0x1, 0xfffffffc, 0x10000b, 0x0, 0x5, 0x4007a, 0x3, 0x3, 0x89, 0x12, 0x7f, 0x0, 0x5, 0xe65, 0x1, 0x2000008, 0xa6b3, 0x0, 0x5]}) 10.412915434s ago: executing program 3 (id=1105): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000380)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) listen(0xffffffffffffffff, 0x0) socket$unix(0x1, 0x1, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x8001, @ipv4={'\x00', '\xff\xff', @local}, 0x1}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000002c0), 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000400)=0x1, 0x4) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x2, &(0x7f00000003c0)=@gcm_128={{0x303}, "77b40400", "bb6710bc8150e4a1a117d7b27caf00", "8c76287d", "3d8efa05fdffffff"}, 0x28) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) write$tun(r1, &(0x7f0000000340)=ANY=[], 0x141) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r1, 0x0) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000080)=@ccm_128={{0x303}, "a06adadb1e8816ec", "de0000006deed7f21d74bc440900", "9884f958", "fc4bd6b33a9b93ca"}, 0x28) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) recvfrom(r0, &(0x7f0000002800)=""/4071, 0xfffffffffffffdab, 0x17, 0x0, 0x0) writev(r0, &(0x7f00000005c0)=[{&(0x7f0000000140)="58ddb007a47a8b1f458ab677d557ca50def8e5bc61dbc50bca64f7e76268cd64007095adfef77465b69ec03139854d6f03d5f9bd019fe046035ef7049f48fcc7321c34faca94ff08f59edaf2ab55eedcc278df823564618627217a527b971bdfa0afd948a6cdb9e05ccaef35c22047246a7b97a8e1b645e51c47b296c759c8dfd56beb8fa15c800ad060ab378a269557bc053d9be903", 0x96}, {&(0x7f0000000300)="2ea63d218bc1023b2e6eceeb92d548803a43d4dddc2433c76650030c188f490311ff86da69fab1539139f6dda31739c2bb4412dd471137e2a53496c5f7707e01ccfb826f2eb96895230862e11d56c19af139de912ac5e68a99080e428443fcfba8b0460290c6275affe9953a97260b0304fd7ef159c9cd30cae1bcc75d568d353575ec3b5293fb80de85c7562804230489274831b2c17dccccc523ada66a46", 0x9f}, {&(0x7f0000000440)="63e73686513c53aec098be4b2dfc27b5be1f5f85f54c24efb8fc94ccaac29f1378e04daa49f8dcbda8b0faff57761a0ce8a311802e5dd07a159721cac7d2250f4359e04727386cc7d1a3e8bf93339f3df1340041f71046f2b1d9a80af70fb8246258d09c310af3bef017fde1fd8ce505cd4858549192a95e512257b6c676a7ebb41230e4e4fb23e9666bfdc8bc2ca77bbd11810836df4a6f3dbe3ee75c34b07c64e1af6d62d54fccb9f281eac16eca7129aa4355fd53", 0xb6}, {&(0x7f0000000500)="de21cff472aa580c2ee9f858", 0xc}, {&(0x7f00000015c0)="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", 0xe0a}], 0x5) syz_genetlink_get_family_id$ethtool(&(0x7f0000000200), r0) setsockopt$sock_int(r0, 0x1, 0x7, &(0x7f00000000c0)=0xffff1884, 0x4) close(0x4) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000680)=@getnexthop={0x20, 0x76, 0x401, 0x0, 0x0, {}, [@NHA_ID={0x8, 0x1, 0x1}]}, 0x20}}, 0x0) setreuid(0x0, 0x0) socket$inet(0x2, 0x2, 0x11) socket$pppl2tp(0x18, 0x1, 0x1) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f00000000c0)='proc\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/net/pppol2tp\x00', 0x0, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0) 10.036954928s ago: executing program 0 (id=1106): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e20, @loopback}, 0x10) listen(r0, 0x10) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./cifs\x00', 0x1ff) mount(&(0x7f0000000500)=@filename='\\\\127.0.0.1\\share\x00', &(0x7f0000000100)='./cifs\x00', &(0x7f0000000200)='cifs\x00', 0x0, &(0x7f0000000300)='unc=//127.0.0.1/share,ip=127.0.0.1,port=20000,user=root,pass=root,vers=3.0\x00') r1 = accept(r0, 0x0, 0x0) sendto$inet(r1, &(0x7f0000002000)="00000080fe534d4240000100000000000000010001000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000041000100000300000000000000000000000000000000000000000000000010000000100000001000000000000000000000000000000000008000000000000000", 0x84, 0x0, 0x0, 0x0) sendto$inet(r1, &(0x7f0000002100)="00000078fe534d4240000100160000c00100010001000000000000000100000000000000000000000000000001000000000000000000000000000000000000000000000009000000480030004e544c4d535350000200000000000000000000000002082000"/118, 0x76, 0x0, 0x0, 0x0) sendto$inet(r1, 0x0, 0x0, 0x0, 0x0, 0x0) accept(r0, 0x0, 0x0) 9.693895456s ago: executing program 1 (id=1107): r0 = socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f00000001c0)={{}, &(0x7f0000000100)=0x7d8, 0x0}, 0x20) sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000300)=ANY=[@ANYBLOB="180000002f00090028bd7000010000000400000004000e807227a285226a369ad2648f59e6f7494173a72bae01f0ce3c73ff9504ca379bad6f47075343c921595187dccfce91742a4f7c1ac0732692b49824a182c9e72f75072495403a40b560ae582f02692a1906e0c200ad37e41ffab64703de8019c7a1aed46ae083ad11b1f3e714957651b6278991f358b0ff042cee096621bc8caed13f25bb7a9bd0268c808eb83e923e62a83fb5f012ad48c05c2792b4d82867eebbf70bc6d118286a7888284035271f0d9c8594ff191e51f487d76eaa0eae6531757c20c64e206a1cbb9f0429b498416b3c38"], 0x18}, 0x1, 0x0, 0x0, 0x42804}, 0x10) 9.290861677s ago: executing program 1 (id=1108): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x101}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = socket$can_raw(0x1d, 0x3, 0x1) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x41, &(0x7f00000001c0)=0x59ca, 0x4) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000040)={'vcan0\x00'}) setsockopt$CAN_RAW_LOOPBACK(r0, 0x65, 0x3, &(0x7f0000000100), 0x4) sendmsg$can_raw(r0, 0x0, 0x40008d5) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) setsockopt$CAN_RAW_ERR_FILTER(r0, 0x65, 0x2, &(0x7f00000000c0)=0x7, 0x4) write$cgroup_pid(0xffffffffffffffff, &(0x7f00000002c0)=r1, 0x12) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, 0x0}, 0x0) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_START_AP(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r6, @ANYBLOB="a183000000000000000005"], 0x1c}}, 0x0) sendmsg$NLBL_MGMT_C_ADDDEF(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[], 0x4c}, 0x1, 0x0, 0x0, 0x24008000}, 0x4040000) (fail_nth: 6) 9.287889261s ago: executing program 4 (id=1109): socket$nl_netfilter(0x10, 0x3, 0xc) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = socket$kcm(0xa, 0x3, 0x87) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) r2 = getpid() r3 = syz_pidfd_open(r2, 0x0) r4 = gettid() timer_create(0x4, &(0x7f0000533fa0)={0x0, 0x17, 0x800000000004, @tid=r4}, &(0x7f0000bbdffc)) r5 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r5, &(0x7f0000000100)=@name={0x1e, 0x2, 0x0, {{0x42}}}, 0x10) r6 = socket$tipc(0x1e, 0x2, 0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040), 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) setsockopt$TIPC_GROUP_JOIN(r6, 0x10f, 0x87, &(0x7f0000000180)={0x42, 0x0, 0x2, 0xf5ff}, 0x10) sendmsg$tipc(r6, &(0x7f00000000c0)={&(0x7f00000001c0)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x0, 0x4}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x4804}, 0x4810) setns(r3, 0x24020000) syz_clone(0xb21e0000, 0x0, 0x0, 0x0, 0x0, 0x0) syz_usb_disconnect(0xffffffffffffffff) futex(0x0, 0x6, 0x0, 0x0, 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) dup2(r0, r1) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) r7 = socket(0x10, 0x3, 0x0) write$tun(r1, &(0x7f0000000240)=ANY=[@ANYBLOB="034886dd010000000000140000006000000003088700fe88a43de1a400000000000000007d01ff020000000000000000000000000001", @ANYRES16=r7, @ANYRES32=r0], 0xfdef) sched_setscheduler(0x0, 0x1, 0x0) prlimit64(0x0, 0x7, &(0x7f0000000040), 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000023c0)=ANY=[@ANYBLOB="1200000001000000080000000b"], 0x50) 8.104385754s ago: executing program 1 (id=1111): r0 = syz_ublk_setup_io_uring(0x1d, &(0x7f0000000040)={0x0, 0x30b5, 0x0, 0x3, 0x158}, &(0x7f0000000100)=0x0, &(0x7f0000000500)=0x0, &(0x7f0000000140)=0x0) syz_ublk_add_dev(r0, r1, r2, r3, &(0x7f0000000640)={0x2e, 0x14, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000004c0)=@new_dev={0x1, 0x33d, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x187}}}, &(0x7f0000000480)=0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) r6 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) r7 = dup(r6) write$6lowpan_enable(r7, &(0x7f0000000000)='0', 0xfffffd2c) r8 = openat$userio(0xffffffffffffff9c, &(0x7f0000000080), 0x20742, 0x0) r9 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='fd/3\x00') mount$9p_fd(0x0, &(0x7f0000000340)='.\x00', &(0x7f0000000400), 0x6, &(0x7f00000000c0)={'trans=fd,', {'rfdno', 0x3d, r9}, 0x2c, {'wfdno', 0x3d, r8}}) syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) syz_emit_ethernet(0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x8) r10 = openat$tcp_mem(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/net/ipv4/tcp_wmem\x00', 0x8, 0x0) sendfile(0xffffffffffffffff, r10, 0x0, 0x2) r11 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r11, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeeb, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r12, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r13, &(0x7f0000000000), 0x651, 0x0) r14 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000400)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x7, '\x00', 0x0, 0x0}, 0x50) r15 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="1b00000000000000000000000000040000000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000000000000001000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00'/28], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x1, 0x1c, &(0x7f0000000d80)=@ringbuf={{0x18, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000}, {{0x18, 0x1, 0x1, 0x0, r15}, {0x7, 0x0, 0xb, 0x7}, {}, {0x85, 0x0, 0x0, 0x5}}, {{0x5, 0x0, 0x3}}, [@snprintf={{0x7, 0x0, 0xb, 0x2}, {0x3, 0x3, 0x3, 0xa, 0x9}, {0x5, 0x0, 0xb, 0x9, 0x0, 0x8}, {0x3, 0x3, 0x3, 0xa, 0xa}, {0x5, 0x1, 0xb, 0x9, 0x8}, {0x7, 0x0, 0x0, 0x8}, {0x7, 0x1, 0xb, 0x4, 0x9}, {}, {}, {0x18, 0x7, 0x2, 0x0, r14}, {}, {0x46, 0x8, 0xfff0, 0x76}}], {{}, {0x6, 0x0, 0x5, 0x7}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) getsockopt$inet_mtu(r9, 0x0, 0xa, &(0x7f0000000200), &(0x7f00000002c0)=0x4) r16 = dup(r5) syz_ublk_setup_queues(r16, r4, &(0x7f0000000180)={0x0, 0x1, 0x0, 0x3, 0x255}, &(0x7f0000000800)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x7ffffe, 0x400, 0x2100, 0x10000004, 0x0, r16}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x11e0, 0x1, 0xfffffffd, 0xaf}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xf911, 0x0, 0x0, 0x1f0}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x455e, 0x8200, 0x2, 0x250}}], 0x1, &(0x7f0000000340)={0x2e, 0x44, 0x0, 0xffffffffffffffff, 0xc0107520, 0x0, 0x0, 0x0, 0x0, {}, 0x1f, 0x0, '\x00', {0xfffa, 0x0, 0x0, 0x0}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x1, 0x0, 0x0, &(0x7f0000000000)='GPL\x00', 0x9, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x36, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000}, 0x94) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000000240)={0x1, &(0x7f0000000280)=[{0x20, 0x4, 0x9, 0xfffff038}]}, 0x10) 8.084509768s ago: executing program 0 (id=1112): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x10}, 0x0) socket(0x2b, 0x843256725ea7f505, 0xe9) r1 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r1, &(0x7f0000000000)={0x18, 0x0, {0x1, @empty, 'lo\x00'}}, 0x1e) ioctl$PPPIOCGCHAN(r1, 0x80047437, &(0x7f0000000040)) r2 = openat$ppp(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) ioctl$PPPIOCNEWUNIT(r2, 0xc004743e, &(0x7f00000000c0)) r3 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl(r3, 0x40047438, &(0x7f0000000040)) write$ppp(r2, &(0x7f0000000200)='\x00\x00', 0x2) 7.198114793s ago: executing program 0 (id=1114): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./debug\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./debug\x00', &(0x7f0000000040)='debugfs\x00', 0x0, 0x0) openat(0xffffffffffffff9c, 0x0, 0x2, 0x0) mmap(&(0x7f0000010000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mbind(&(0x7f0000010000/0x1000)=nil, 0x1000, 0x2002, 0x0, 0x2, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./null\x00', 0x42, 0x1ff) write(r0, &(0x7f0000010000), 0x1000) mmap(&(0x7f0000003000/0x400000)=nil, 0x400000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000000200)='./dev\x00', &(0x7f0000000240)='devtmpfs\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./dev/zero\x00', 0x0, 0x0) readv(r1, &(0x7f0000004000)=[{&(0x7f0000003000)}, {0x0}, {&(0x7f0000003000)}, {0x0}, {&(0x7f0000003000)}, {&(0x7f0000003000)}, {&(0x7f0000003000)}, {&(0x7f0000003000)}, {&(0x7f0000003000)}, {0x0}, {0x0}, {&(0x7f0000003000)}, {0x0}, {&(0x7f0000003000)}, {&(0x7f0000003000)}, {&(0x7f0000003000)}, {0x0}], 0x11) readv(r1, 0x0, 0x0) readv(r1, &(0x7f0000004000)=[{&(0x7f0000003000)}, {&(0x7f0000003000)}, {0x0}], 0x3) readv(r1, 0x0, 0x0) readv(r1, &(0x7f0000004000)=[{0x0}, {0x0}, {&(0x7f0000003000)}, {0x0}, {&(0x7f0000003000)}, {&(0x7f0000003000)}, {&(0x7f0000003000)}, {&(0x7f0000003000)}], 0x8) readv(r1, &(0x7f0000004000)=[{&(0x7f0000003000), 0x400000}, {&(0x7f0000003000), 0x400000}, {&(0x7f0000003000), 0x400000}, {&(0x7f0000003000), 0x400000}, {&(0x7f0000003000), 0x400000}, {&(0x7f0000003000), 0x400000}, {&(0x7f0000003000), 0x400000}, {&(0x7f0000003000), 0x400000}, {&(0x7f0000003000), 0x400000}, {&(0x7f0000003000), 0x400000}, {&(0x7f0000003000), 0x400000}, {&(0x7f0000003000), 0x400000}, {&(0x7f0000003000), 0x400000}, {&(0x7f0000003000), 0x400000}, {&(0x7f0000003000), 0x400000}, {&(0x7f0000003000), 0x400000}, {&(0x7f0000003000), 0x400000}, {&(0x7f0000003000), 0x400000}, {&(0x7f0000003000), 0x400000}, {&(0x7f0000003000), 0x400000}], 0x14) readv(r1, &(0x7f0000004000)=[{&(0x7f0000003000), 0x400000}, {&(0x7f0000003000), 0x400000}, {&(0x7f0000003000), 0x400000}, {&(0x7f0000003000), 0x400000}, {&(0x7f0000003000), 0x400000}, {&(0x7f0000003000), 0x400000}, {&(0x7f0000003000), 0x400000}, {&(0x7f0000003000), 0x400000}, {&(0x7f0000003000), 0x400000}, {&(0x7f0000003000), 0x400000}, {&(0x7f0000003000), 0x400000}, {&(0x7f0000003000), 0x400000}, {&(0x7f0000003000), 0x400000}, {&(0x7f0000003000), 0x400000}, {&(0x7f0000003000), 0x400000}, {&(0x7f0000003000), 0x400000}, {&(0x7f0000003000), 0x400000}, {&(0x7f0000003000), 0x400000}, {&(0x7f0000003000), 0x400000}, {&(0x7f0000003000), 0x400000}], 0x14) readv(r1, &(0x7f0000004000)=[{&(0x7f0000003000), 0x400000}, {&(0x7f0000003000), 0x400000}, {&(0x7f0000003000), 0x400000}, {&(0x7f0000003000), 0x400000}, {&(0x7f0000003000), 0x400000}, {&(0x7f0000003000), 0x400000}, {&(0x7f0000003000), 0x400000}, {&(0x7f0000003000), 0x400000}, {&(0x7f0000003000), 0x400000}, {&(0x7f0000003000), 0x400000}, {&(0x7f0000003000), 0x400000}, {&(0x7f0000003000), 0x400000}, {&(0x7f0000003000), 0x400000}, {&(0x7f0000003000), 0x400000}, {&(0x7f0000003000), 0x400000}, {&(0x7f0000003000), 0x400000}, {&(0x7f0000003000), 0x400000}, {&(0x7f0000003000), 0x400000}, {&(0x7f0000003000), 0x400000}, {&(0x7f0000003000), 0x400000}], 0x14) readv(r1, &(0x7f0000004000)=[{&(0x7f0000003000), 0x400000}, {&(0x7f0000003000), 0x400000}, {&(0x7f0000003000), 0x400000}, {&(0x7f0000003000), 0x400000}, {&(0x7f0000003000), 0x400000}, {&(0x7f0000003000), 0x400000}, {&(0x7f0000003000), 0x400000}, {&(0x7f0000003000), 0x400000}, {&(0x7f0000003000), 0x400000}, {&(0x7f0000003000), 0x400000}, {&(0x7f0000003000), 0x400000}, {&(0x7f0000003000), 0x400000}, {&(0x7f0000003000), 0x400000}, {&(0x7f0000003000), 0x400000}, {&(0x7f0000003000), 0x400000}, {&(0x7f0000003000), 0x400000}, {&(0x7f0000003000), 0x400000}, {&(0x7f0000003000), 0x400000}, {&(0x7f0000003000), 0x400000}, {&(0x7f0000003000), 0x400000}], 0x14) readv(r1, &(0x7f0000004000)=[{&(0x7f0000003000), 0x400000}, {&(0x7f0000003000), 0x400000}, {&(0x7f0000003000), 0x400000}, {&(0x7f0000003000), 0x400000}, {&(0x7f0000003000), 0x400000}, {&(0x7f0000003000), 0x400000}, {&(0x7f0000003000), 0x400000}, {&(0x7f0000003000), 0x400000}, {&(0x7f0000003000), 0x400000}, {&(0x7f0000003000), 0x400000}, {&(0x7f0000003000), 0x400000}, {&(0x7f0000003000), 0x400000}, {&(0x7f0000003000), 0x400000}, {&(0x7f0000003000), 0x400000}, {&(0x7f0000003000), 0x400000}, {&(0x7f0000003000), 0x400000}, {&(0x7f0000003000), 0x400000}, {&(0x7f0000003000), 0x400000}, {&(0x7f0000003000), 0x400000}, {&(0x7f0000003000), 0x400000}], 0x14) getpid() write(r0, &(0x7f0000010000), 0x1000) 6.709389912s ago: executing program 2 (id=1116): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./sys\x00', &(0x7f00000000c0)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000500)='./sys/block/md0/md/resync_start\x00', 0x1, 0x0) write(r0, &(0x7f0000000540), 0x0) 6.458153501s ago: executing program 3 (id=1117): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./sys\x00', &(0x7f00000000c0)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./sys/module/md_mod/parameters/new_array\x00', 0x1, 0x0) write(r0, &(0x7f0000000140)='md0\n', 0x4) r1 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./sys/block/md0/md/level\x00', 0x1, 0x0) write(r1, &(0x7f00000001c0)='raid1\n', 0x6) r2 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./sys/block/md0/md/raid_disks\x00', 0x1, 0x0) write(r2, &(0x7f0000000240)='2\n', 0x2) write(0xffffffffffffffff, &(0x7f00000002c0)='1:0\n', 0x4) r3 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./sys/block/md0/md/new_dev\x00', 0x1, 0x0) write(r3, &(0x7f0000000340)='1:1\n', 0x4) r4 = openat(0xffffffffffffff9c, &(0x7f0000000380)='./sys/block/md0/md/dev-ram0/slot\x00', 0x1, 0x0) write(r4, &(0x7f00000003c0)='0\n', 0x2) r5 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./sys/block/md0/md/dev-ram1/slot\x00', 0x1, 0x0) write(r5, &(0x7f0000000440)='1\n', 0x2) r6 = openat(0xffffffffffffff9c, &(0x7f0000000480)='./sys/block/md0/md/dev-ram0/state\x00', 0x1, 0x0) write(r6, &(0x7f00000004c0)='writemostly\n', 0xc) r7 = openat(0xffffffffffffff9c, &(0x7f0000000500)='./sys/block/md0/md/resync_start\x00', 0x1, 0x0) write(r7, &(0x7f0000000540)='none\n', 0x5) r8 = openat(0xffffffffffffff9c, &(0x7f0000000580)='./sys/block/md0/md/array_state\x00', 0x1, 0x0) write(r8, &(0x7f00000005c0)='readonly\n', 0x9) openat(0xffffffffffffff9c, &(0x7f0000000600)='./sys/block/md0/md/bitmap/location\x00', 0x1, 0x0) 6.433059606s ago: executing program 2 (id=1118): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ed) r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f00000005c0)=[@in6={0xa, 0x4e24, 0x9, @local, 0x10001}, @in6={0xa, 0x4e24, 0x8, @loopback, 0xfffffff9}, @in={0x2, 0x4e22, @remote}, @in6={0xa, 0x4e23, 0x0, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x58a}, @in6={0xa, 0x4e21, 0x9, @remote, 0x1}, @in6={0xa, 0x4e21, 0x0, @private0={0xfc, 0x0, '\x00', 0x1}, 0x8001}, @in={0x2, 0x4e21, @local}, @in={0x2, 0x4e22, @multicast2}], 0xbc) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) r2 = socket(0x2, 0x80805, 0x0) r3 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000300), 0x103000, 0x0) getsockname$packet(r2, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000480)=0x14) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r4 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r4, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r5 = fsopen(&(0x7f0000000280)='ceph\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r5, 0x1, &(0x7f0000000b40)='source', &(0x7f0000000040)='c:::\x00', 0x0) r6 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000000400), 0x1, 0x0) writev(r6, &(0x7f00000025c0)=[{&(0x7f0000000240)='4', 0x1}, {0x0, 0x900}], 0x2) ioctl$INCFS_IOC_PERMIT_FILL(r1, 0x40046721, &(0x7f0000000340)={r2}) ioctl$XFS_IOC_PATH_TO_HANDLE(r2, 0xc0385869, &(0x7f0000000540)={r3, &(0x7f0000000680)='b\x90{\xc3/dev\x01\x00,\x14\x00\x00idiC#D#\x00\xae6\xb3\x1fO\xa13Hs\xf8\x028lu\xe0P/<\xd0y.\xbdSi7\xb1\xff\r\xc33\x17\xd3\\\xd0\xb0\x01\x00\x00\x00\x00\x00\x00\x00\xe7@@\xd8\x1b\xd4J.\x92\x89\xbd\xdd\x82\x88\xcc\x7f\xf2\xc2\x89\x03\x05\xfae\xd8\xc5\xf9\xc8\x04\xa3\xa5J\xda.p\xe3H\x85oAU\x15\x99\\\xa3\x86*LG\xbfC\x17\xba\xa5)\xde\xb1\xe4\xef\xd3\xa5\xb5\xf1\x1dG\x90\xdf\xe7l\x95\xb3\x85%~c\xb8\xd2c\xa0\x12\xd6\xa7\xcc\xaa\xa2uT\x8b\xd0\xea\x18a\x01\xe1\xde\xd2\x93B\b\x96\v\xf9?\xe9\xc7D\x98\x0f\x18\f\xf4\x81\xde\xaf\xa4\xddcw\xf9\x8c\x959f\t\a\x00\x00\x00\x00\x00\x00\x00', 0x121100, &(0x7f0000000440)={@align=0x7fff, {0xfffa, 0x4bd0, 0x8, 0x2}}, 0xd0, &(0x7f0000000100), &(0x7f0000000140)=0x8}) r8 = gettid() fsconfig$FSCONFIG_CMD_CREATE(r5, 0x6, 0x0, 0x0, 0x0) tkill(r8, 0xb) ioctl$SCSI_IOCTL_GET_IDLUN(r7, 0x5382, &(0x7f00000000c0)) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r1, 0x84, 0x1f, &(0x7f0000000180)={0x0, @in={{0x2, 0x4e23, @multicast2}}, 0x1ff, 0x86}, 0x90) mount(0x0, &(0x7f0000000040)='./sys\x00', &(0x7f0000000080)='sysfs\x00', 0x0, 0x0) write(0xffffffffffffffff, &(0x7f0000000400)='wwnn=0x3333333333333333,wwpn=0x4444444444444444', 0x2f) ptrace$peek(0x3, 0x0, &(0x7f0000000240)) memfd_create(&(0x7f0000000180)='[\v\xdbX\xae[\x1a\xa9\xfd\xfa\xad\xd1md\xc8\x85HX\x96\xa7f\x9ae\xe0\x00\x00\x00\x00\xfb\xff\x00\x00\x81\x9eG\xd9,\xe2\xc6a\x9f\xe8\xf1\xb3\x86\xe2+Op\xd0\xa2\x82\x1eb;(\xb5\xe1jS\xd6\x91%||\xa0\x8ez\xadT\xc8\f\xe5\x89\xbf3:\x99\x1e\x15n\xc3\xcf\xd3\xae\xd2\a\x11\xa9\xa5^\xff\xf5\x95\xd2q#\xc6\xca\x97\x9d\xcb\x1e\x80\xd6\xd5%N&\xf8#\x80z\t\x00\x00\x00\x00\x00\x00\x00\x9b\x01\xf9t\xbb\x1er\x04\xdb\xd3\xcd\xfd\xbdnC\xec#]\xbf\xa2\xa2H\x86\x86[8\x05\xfe\xdc\x11\x04\xa1u\x81', 0x0) 6.352816829s ago: executing program 1 (id=1119): openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x801, 0x0) mknodat(0xffffffffffffff9c, &(0x7f00000000c0)='./file2\x00', 0x81c0, 0x0) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000240)={0xffffffffffffffff, 0x0, &(0x7f0000000000)=""/3, 0x2}, 0x20) connect$llc(0xffffffffffffffff, &(0x7f0000000240)={0x1a, 0x20, 0x4, 0x4a, 0x2, 0x7, @remote}, 0x10) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000ff1000/0x2000)=nil, &(0x7f0000ff5000/0x3000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff5000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) r0 = io_uring_setup(0x524, &(0x7f0000000040)={0x0, 0x3cb1, 0x1c080, 0xa, 0x20002f7}) syz_io_uring_setup(0x4175, &(0x7f0000000180)={0x0, 0x136f, 0x11000, 0x2, 0x2d0}, &(0x7f0000000140), &(0x7f0000000400), &(0x7f0000000000)) io_uring_enter(r0, 0x2219, 0x7721, 0x16, 0x0, 0x0) execveat(0xffffffffffffff9c, &(0x7f0000000280)='./file2\x00', 0x0, 0x0, 0x0) symlink(&(0x7f0000002040)='./file0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0\x00', &(0x7f00000001c0)='./file0\x00') 6.277292009s ago: executing program 4 (id=1120): mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./dev\x00', 0x1ff) mount(0x0, 0x0, 0x0, 0x0, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x1ff) mount(0x0, 0x0, 0x0, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000480)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000540)='./sys\x00', &(0x7f0000000580)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, 0x0, 0x1, 0x0) write(r0, 0x0, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x1ff) mkdirat(0xffffffffffffff9c, 0x0, 0x1ff) mkdirat(0xffffffffffffff9c, 0x0, 0x1ff) mkdirat(0xffffffffffffff9c, 0x0, 0x1ff) r1 = openat(0xffffffffffffff9c, 0x0, 0x1, 0x0) write(r1, 0x0, 0x0) r2 = openat(0xffffffffffffff9c, 0x0, 0x1, 0x0) write(r2, 0x0, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x1ff) mkdirat(0xffffffffffffff9c, 0x0, 0x1ff) nanosleep(0x0, 0x0) r3 = openat(0xffffffffffffff9c, 0x0, 0x1, 0x0) write(r3, &(0x7f00000008c0)='0', 0x1) r4 = openat(0xffffffffffffff9c, &(0x7f0000000900)='./sys/kernel/dlm/dlm1/control\x00', 0x1, 0x0) write(r4, &(0x7f0000000940)='1', 0x1) nanosleep(&(0x7f0000000500)={0x1}, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000b00)='./sys/kernel/dlm/dlm1/control\x00', 0x1, 0x0) write(r5, &(0x7f0000000b40)='1', 0x1) 4.708795151s ago: executing program 3 (id=1121): syz_clone3(&(0x7f000000dd80)={0x100000, 0x0, 0x0, 0x0, {0x13}, 0x0, 0x0, 0x0, 0x0}, 0x58) r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000000)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x2, 0x1c, &(0x7f0000000300)=@ringbuf={{0x18, 0x8, 0x0, 0x0, 0x1000}, {{0x18, 0x1, 0x1, 0x0, r1}}, {}, [@snprintf={{0x7, 0x0, 0xb, 0x2}, {0x3, 0x3, 0x3, 0xa, 0x9, 0xfe00}, {0x5, 0x0, 0xb, 0x9, 0x0, 0x8}, {0x3, 0x3, 0x3, 0xa, 0xa}, {0x6, 0x1, 0xb, 0x8, 0x9}, {0x4, 0x0, 0x0, 0x8}, {}, {}, {}, {0x18, 0x8, 0x2, 0x0, r0}, {}, {0x46, 0x0, 0x0, 0x76}}], {{}, {0x6, 0x0, 0x7, 0x8}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x38, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) pause() syz_clone3(&(0x7f000000dd80)={0xa04400, 0x0, 0x0, 0x0, {0x12}, 0x0, 0x0, 0x0, 0x0}, 0x58) syz_clone3(&(0x7f000000dd80)={0x100000, 0x0, 0x0, 0x0, {0x13}, 0x0, 0x0, 0x0, 0x0}, 0x58) (async) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000000)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) (async) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x2, 0x1c, &(0x7f0000000300)=@ringbuf={{0x18, 0x8, 0x0, 0x0, 0x1000}, {{0x18, 0x1, 0x1, 0x0, r1}}, {}, [@snprintf={{0x7, 0x0, 0xb, 0x2}, {0x3, 0x3, 0x3, 0xa, 0x9, 0xfe00}, {0x5, 0x0, 0xb, 0x9, 0x0, 0x8}, {0x3, 0x3, 0x3, 0xa, 0xa}, {0x6, 0x1, 0xb, 0x8, 0x9}, {0x4, 0x0, 0x0, 0x8}, {}, {}, {}, {0x18, 0x8, 0x2, 0x0, r0}, {}, {0x46, 0x0, 0x0, 0x76}}], {{}, {0x6, 0x0, 0x7, 0x8}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x38, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) pause() (async) syz_clone3(&(0x7f000000dd80)={0xa04400, 0x0, 0x0, 0x0, {0x12}, 0x0, 0x0, 0x0, 0x0}, 0x58) (async) 4.449466565s ago: executing program 0 (id=1122): read$FUSE(0xffffffffffffffff, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000380)=0x7) r0 = getpid() bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000c80)=@bpf_ext={0x1c, 0x1d, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000ff7f0000000000000500000018120000", @ANYRES32, @ANYBLOB="0000000000000000b703000000000000850000000c000000b70000000000000018010000786c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000fcffffff850000000600000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000018000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000001000000850000008200000018110000", @ANYRES32, @ANYBLOB="000000006c9c9d28183fa265befd63afec49e9eeda00000000b702cbecfc562d96220c506ecd5446841b87000000000000"], &(0x7f0000000740)='GPL\x00', 0x7, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000940)={0x1, 0x3}, 0x8, 0x10, &(0x7f0000000980)={0x5, 0xa, 0x40, 0x6}, 0x10, 0x2cb0c, 0xffffffffffffffff, 0x1, 0x0, &(0x7f0000000c40)=[{0x0, 0x1, 0x5, 0x5}], 0x10, 0x1}, 0x94) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0x6, 0x3, &(0x7f0000000d80)=ANY=[@ANYBLOB="1800000003000000000000000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x20000000}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000040)={r1, 0x0, 0x94, 0x0, 0x0, 0x0, 0x0, 0x0, 0x63, 0x0, &(0x7f00000000c0)='\x00', 0x0}, 0x48) sched_setscheduler(r0, 0x1, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) r2 = syz_init_net_socket$x25(0x9, 0x5, 0x0) ioctl$SIOCX25SDTEFACILITIES(r2, 0x89eb, &(0x7f0000000080)={0x8, 0x1, 0xfff, 0x84, 0x7, 0x0, 0x8f, "ba0f234063f445060000b240000000009600", "39e80000000000000000e30300"}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) r5 = syz_open_dev$usbfs(&(0x7f0000000100), 0x77, 0x42402) ioctl$USBDEVFS_SUBMITURB(r5, 0x8038550a, &(0x7f0000000180)=@urb_type_control={0x2, {}, 0x0, 0xa5, &(0x7f0000000400)={0x0, 0x18, 0x800, 0x400, 0x6}, 0x8, 0x0, 0x1000004, 0x0, 0x1, 0xfffffffb, 0x0}) ioctl$USBDEVFS_REAPURB(r5, 0x4008550c, &(0x7f0000000000)) r6 = syz_open_dev$sg(&(0x7f00000000c0), 0x81, 0x800) ioctl$BLKTRACESETUP(r6, 0xc0481273, &(0x7f0000000240)={'\x00', 0x5, 0x4831, 0x3, 0x405, 0x60, r0}) r7 = syz_open_dev$sndpcmp(&(0x7f0000000200), 0x0, 0x0) munmap(&(0x7f0000ffc000/0x1000)=nil, 0x1000) ioctl$SNDRV_PCM_IOCTL_SW_PARAMS(r7, 0xc0884113, &(0x7f0000000240)={0x1, 0x0, 0x0, 0x10001, 0x0, 0x0, 0x7, 0x0, 0xfffffffffffffffd, 0x0, 0xfffffffb, 0x1}) sendmmsg$unix(r4, &(0x7f0000000000), 0x0, 0x8002) syz_emit_ethernet(0x76, &(0x7f0000000600)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}, @local, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "d3ffff", 0x40, 0x3a, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @mcast2, {[], @param_prob={0x2, 0x0, 0x0, 0x502, {0x0, 0x6, "508359", 0x0, 0x0, 0x0, @private1, @remote, [@hopopts={0x3a}, @fragment={0x4, 0x0, 0xb9, 0x1, 0x0, 0x12, 0x65}]}}}}}}}, 0x0) r8 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_inet6_SIOCDELRT(r8, 0x890c, &(0x7f0000005fc0)={@private1={0xfc, 0x1, '\x00', 0x1}, @private0={0xfc, 0x0, '\x00', 0x41}, @empty, 0x1000007, 0x8002, 0x39, 0x400, 0x5, 0x19c003f}) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) prctl$PR_SET_MM(0x23, 0xa, &(0x7f00002d5000/0x2000)=nil) syz_open_procfs(0xffffffffffffffff, &(0x7f00000001c0)='environ\x00') 4.4399704s ago: executing program 2 (id=1123): socket$nl_netfilter(0x10, 0x3, 0xc) syz_open_dev$video(&(0x7f0000000080), 0x7, 0x0) socket$tipc(0x1e, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) sendmsg$inet(0xffffffffffffffff, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x24006000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r4, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r3, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000240)=[@cred={{0x1c}}], 0x20}, 0x80) mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000440)=@new_dev={0x4, 0x3c9, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x50}}}, &(0x7f0000000300)) ioctl$COMEDI_DEVCONFIG(0xffffffffffffffff, 0x40946400, &(0x7f0000000440)={'ni_at_a2150\x00', [0x300, 0xc0000000, 0x2, 0x1, 0xe, 0x800005, 0x7, 0x6, 0x8, 0x56, 0xffffffff, 0x1, 0x1, 0xfffffffc, 0x10000b, 0x0, 0x5, 0x4007a, 0x3, 0x3, 0x89, 0x12, 0x7f, 0x0, 0x5, 0xe65, 0x1, 0x2000008, 0xa6b3, 0x0, 0x5]}) 4.353609141s ago: executing program 1 (id=1124): madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0x11) r0 = openat$vnet(0xffffffffffffff9c, &(0x7f00000003c0), 0x2, 0x0) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x800, 0x0) read$FUSE(r1, &(0x7f0000001140)={0x2020}, 0x2020) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000180)={0x1, 0x3}, 0x4) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x1}) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000080)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=@newqdisc={0x30, 0x24, 0x401, 0x1, 0x0, {0x0, 0x0, 0x0, r4, {0x0, 0xffff}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_ingress={0xc}]}, 0x30}}, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) syz_usb_connect$uac3(0x0, 0xb4, &(0x7f0000000100)=ANY=[@ANYBLOB="1201100100000040b4041e934000010203010902a200030101c010080b0001010130070904000000010130000a2401103e10000000000d240704030c0000000c0000001424020305020303ee00000009008b00d70195001324030101010305040400000000fe0500020009040100000102300009"], 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000080)={'syzkaller0\x00', 0x0}) ioctl$F2FS_IOC_GET_COMPRESS_BLOCKS(0xffffffffffffffff, 0x8008f511, &(0x7f00000000c0)) sendmsg$nl_route_sched(r5, &(0x7f0000000800)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000840)=@newtfilter={0x450, 0x2c, 0x401, 0x0, 0x25dfdbfc, {0x0, 0x0, 0x0, r6, {0x1}, {0x0, 0xffff}, {0x300, 0x1}}, [@filter_kind_options=@f_fw={{0x7}, {0x424, 0x2, [@TCA_FW_POLICE={0x420, 0x2, [@TCA_POLICE_AVRATE={0x8, 0x4, 0x7f}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0x6, 0x3, 0x3, 0xc6f, 0x9, 0x20080000, 0x2, 0xf9, 0xebef, 0x8, 0x4, 0xb3, 0x1, 0x9, 0xfffffff8, 0xfffffffb, 0xfffffffd, 0xabfc, 0x662, 0xfffffff7, 0x2, 0x8, 0x6, 0x3, 0x2, 0x5, 0x100, 0x0, 0x81, 0x4, 0xd, 0x7fff, 0x6, 0x0, 0x7, 0x9, 0xf8, 0x80, 0x1, 0x5, 0x7f, 0x9, 0x7, 0x4, 0x0, 0xcdc, 0x4, 0x40, 0x8, 0x9, 0x40, 0x2, 0x7ff, 0x6, 0x8, 0x8, 0x100, 0x45, 0x80, 0x4, 0x4, 0x909, 0x7, 0x2, 0x100, 0x7, 0x9, 0x1000, 0xd671, 0x4, 0x2, 0x7ff, 0x4, 0x7, 0x7f, 0x8, 0x8, 0x2, 0x3, 0x10001, 0x5, 0x2, 0x4b, 0x0, 0x7, 0x5, 0xc, 0x7, 0xc3, 0xb, 0x1, 0x6, 0x5, 0x4, 0x2, 0x1, 0x6, 0x5, 0x5, 0x0, 0x81, 0x63bf5d4c, 0x978, 0x743b, 0x6, 0x3, 0x7, 0xf, 0x80, 0x9, 0x5, 0x4, 0x2, 0x80, 0x5a, 0x7, 0x9, 0x9, 0x7, 0x2, 0xf00, 0x4, 0x44, 0x1040, 0x5e39, 0x800, 0xc27c, 0x7, 0xfffffffb, 0x5e, 0x1, 0x5, 0x8001, 0x1, 0x7, 0xb, 0x4, 0x5a1, 0x5df62c8d, 0x7, 0x7, 0x2, 0xfffffff3, 0x9, 0x2, 0x9, 0xdf, 0x80000000, 0x7, 0x6, 0x3, 0x1, 0x2, 0x8, 0x401, 0x4, 0x7, 0x5, 0xb79, 0xffffffff, 0x9, 0x60c, 0x9, 0xfff, 0x6, 0x2, 0xf6, 0x7, 0x1cf4018a, 0x3, 0x9, 0x7, 0xa, 0x5, 0x8, 0x0, 0x8, 0x7, 0x7, 0xf26f, 0x0, 0x4, 0xfffffffe, 0xfffff198, 0x7, 0xfff, 0xe, 0x5, 0x504661df, 0x4, 0x40, 0x101, 0x807e, 0x3, 0x5, 0xb, 0x2, 0x4, 0x1ff, 0x7, 0x9, 0x100, 0xfffffff8, 0x0, 0x6f2, 0x96e, 0x2, 0xffffffff, 0x5d5, 0x3, 0x7, 0x0, 0x1c, 0x5, 0x5, 0x5, 0xe5e, 0x9, 0x4, 0x8001, 0x3, 0x1, 0xe, 0x5, 0x2, 0x8, 0xfffffffb, 0x0, 0x6, 0x4710, 0x3ff, 0xaec4, 0x8001, 0x7ff, 0x1, 0x3, 0x5, 0x8, 0x2, 0xfffffff8, 0x3ff, 0x8001, 0x30, 0x1000, 0xffffff7f, 0x3b, 0x200, 0x2, 0x1, 0x3, 0x3, 0x0, 0x7, 0x21, 0x1f03, 0x45]}, @TCA_POLICE_RESULT={0x8, 0x5, 0x6}, @TCA_POLICE_AVRATE={0x8, 0x4, 0x3b80}]}]}}]}, 0x450}, 0x1, 0x0, 0x0, 0x8855}, 0x0) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) ioctl$EVIOCGVERSION(0xffffffffffffffff, 0x80044501, &(0x7f0000000640)=""/193) r7 = socket$rxrpc(0x21, 0x2, 0x2) sendmsg(r7, &(0x7f0000000100)={&(0x7f0000000000)=@rxrpc=@in4={0x21, 0x1, 0x2, 0x10, {0x2, 0x3456, @local}}, 0x80, 0x0, 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="180000000000000010010000010000000100000000000000139889ae07e35de2f02b294a17fbc3995e99e046ab801e421a7c4ab62b8fefeb0f77cbfe01bc65c7fdee58e1291e11db66526b3dcc774bb999f688031c9b5ea6aed8e55996b9f2c194cce07afc0818c0cb88a54029355c4be5b67f2d00c8ba54661be984ba68312f8f41890b42bbac77b9f59b8bc8e5a0aeeb7618fb8a49c88c"], 0x18}, 0x0) syz_usb_disconnect(0xffffffffffffffff) syz_open_dev$char_usb(0xc, 0xb4, 0x0) r8 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r8, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[@ANYBLOB="240000002f0009b67526a1721fafbde634000d0d008000000000000000000600fc2e0000"], 0x24}, 0x1, 0x0, 0x0, 0x42804}, 0x84) sendmsg(r7, &(0x7f0000000100)={&(0x7f0000000000)=@rxrpc=@in4={0x21, 0x1, 0x2, 0x10, {0x2, 0x3456, @local}}, 0x80, &(0x7f0000000200)=[{&(0x7f0000000300)='hello', 0x5}], 0x1, &(0x7f0000000440)=ANY=[@ANYBLOB="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"], 0x2c}, 0x8800) close(r7) sendmsg$nl_route_sched(r3, &(0x7f0000000800)={0x0, 0x0, 0x0}, 0x0) readv(r0, &(0x7f0000001bc0), 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x2) 3.712794035s ago: executing program 4 (id=1125): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ed) r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f00000005c0)=[@in6={0xa, 0x4e24, 0x9, @local, 0x10001}, @in6={0xa, 0x4e24, 0x8, @loopback, 0xfffffff9}, @in={0x2, 0x4e22, @remote}, @in6={0xa, 0x4e23, 0x0, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x58a}, @in6={0xa, 0x4e21, 0x9, @remote, 0x1}, @in6={0xa, 0x4e21, 0x0, @private0={0xfc, 0x0, '\x00', 0x1}, 0x8001}, @in={0x2, 0x4e21, @local}, @in={0x2, 0x4e22, @multicast2}], 0xbc) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) r2 = socket(0x2, 0x80805, 0x0) r3 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000300), 0x103000, 0x0) getsockname$packet(r2, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000480)=0x14) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r4 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r4, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r5 = fsopen(&(0x7f0000000280)='ceph\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r5, 0x1, &(0x7f0000000b40)='source', &(0x7f0000000040)='c:::\x00', 0x0) r6 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000000400), 0x1, 0x0) writev(r6, &(0x7f00000025c0)=[{&(0x7f0000000240)='4', 0x1}, {0x0, 0x900}], 0x2) ioctl$INCFS_IOC_PERMIT_FILL(r1, 0x40046721, &(0x7f0000000340)={r2}) ioctl$XFS_IOC_PATH_TO_HANDLE(r2, 0xc0385869, &(0x7f0000000540)={r3, &(0x7f0000000680)='b\x90{\xc3/dev\x01\x00,\x14\x00\x00idiC#D#\x00\xae6\xb3\x1fO\xa13Hs\xf8\x028lu\xe0P/<\xd0y.\xbdSi7\xb1\xff\r\xc33\x17\xd3\\\xd0\xb0\x01\x00\x00\x00\x00\x00\x00\x00\xe7@@\xd8\x1b\xd4J.\x92\x89\xbd\xdd\x82\x88\xcc\x7f\xf2\xc2\x89\x03\x05\xfae\xd8\xc5\xf9\xc8\x04\xa3\xa5J\xda.p\xe3H\x85oAU\x15\x99\\\xa3\x86*LG\xbfC\x17\xba\xa5)\xde\xb1\xe4\xef\xd3\xa5\xb5\xf1\x1dG\x90\xdf\xe7l\x95\xb3\x85%~c\xb8\xd2c\xa0\x12\xd6\xa7\xcc\xaa\xa2uT\x8b\xd0\xea\x18a\x01\xe1\xde\xd2\x93B\b\x96\v\xf9?\xe9\xc7D\x98\x0f\x18\f\xf4\x81\xde\xaf\xa4\xddcw\xf9\x8c\x959f\t\a\x00\x00\x00\x00\x00\x00\x00', 0x121100, &(0x7f0000000440)={@align=0x7fff, {0xfffa, 0x4bd0, 0x8, 0x2}}, 0xd0, &(0x7f0000000100), &(0x7f0000000140)=0x8}) r8 = gettid() fsconfig$FSCONFIG_CMD_CREATE(r5, 0x6, 0x0, 0x0, 0x0) tkill(r8, 0xb) ioctl$SCSI_IOCTL_GET_IDLUN(r7, 0x5382, &(0x7f00000000c0)) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r1, 0x84, 0x1f, &(0x7f0000000180)={0x0, @in={{0x2, 0x4e23, @multicast2}}, 0x1ff, 0x86}, 0x90) r9 = openat(0xffffffffffffff9c, &(0x7f0000000580)='./sys/class/fcloop/ctl/add_target_port\x00', 0x82001, 0x0) write(r9, &(0x7f0000000400)='wwnn=0x3333333333333333,wwpn=0x4444444444444444', 0x2f) ptrace$peek(0x3, 0x0, &(0x7f0000000240)) memfd_create(&(0x7f0000000180)='[\v\xdbX\xae[\x1a\xa9\xfd\xfa\xad\xd1md\xc8\x85HX\x96\xa7f\x9ae\xe0\x00\x00\x00\x00\xfb\xff\x00\x00\x81\x9eG\xd9,\xe2\xc6a\x9f\xe8\xf1\xb3\x86\xe2+Op\xd0\xa2\x82\x1eb;(\xb5\xe1jS\xd6\x91%||\xa0\x8ez\xadT\xc8\f\xe5\x89\xbf3:\x99\x1e\x15n\xc3\xcf\xd3\xae\xd2\a\x11\xa9\xa5^\xff\xf5\x95\xd2q#\xc6\xca\x97\x9d\xcb\x1e\x80\xd6\xd5%N&\xf8#\x80z\t\x00\x00\x00\x00\x00\x00\x00\x9b\x01\xf9t\xbb\x1er\x04\xdb\xd3\xcd\xfd\xbdnC\xec#]\xbf\xa2\xa2H\x86\x86[8\x05\xfe\xdc\x11\x04\xa1u\x81', 0x0) 3.346350381s ago: executing program 2 (id=1126): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000100)='./sys\x00', &(0x7f0000000200)='sysfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000000100)='./dev\x00', &(0x7f0000000200)='devtmpfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000f00)='./dev/ram0\x00', 0x2, 0x0) pwrite64(r0, &(0x7f0000001000)="fc4e2ba9", 0x4, 0x1000) pwrite64(r0, &(0x7f0000001004)="01000000", 0x4, 0x1004) pwrite64(r0, &(0x7f0000001008)="01000000", 0x4, 0x1008) pwrite64(r0, &(0x7f000000100c)='\b\x00\x00\x00', 0x4, 0x1060) pwrite64(r0, &(0x7f0000001010)="1000000000000000", 0x8, 0x1080) pwrite64(r0, &(0x7f0000001018)='\n\x00\x00\x00\x00\x00\x00\x00', 0x8, 0x1088) pwrite64(r0, &(0x7f0000001020)='\b\x00\x00\x00\x00\x00\x00\x00', 0x8, 0x1090) pwrite64(r0, &(0x7f0000001028)="284f2ba9", 0x4, 0x10d8) pwrite64(r0, &(0x7f000000102c), 0x0, 0x2000) pwrite64(r0, &(0x7f0000001030)="04000000", 0x4, 0x2004) pwrite64(r0, &(0x7f0000001034)="00020000", 0x4, 0x2034) pwrite64(r0, &(0x7f0000001038)="01000000", 0x4, 0x2038) pwrite64(r0, &(0x7f000000103c)='\x00\x00\x00\x00', 0x4, 0x203c) fsync(r0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./sys/module/md_mod/parameters/new_array\x00', 0x1, 0x0) write(r1, &(0x7f0000000400)='md0\x00', 0x4) r2 = openat(0xffffffffffffff9c, &(0x7f0000000500)='./sys/block/md0/md/metadata_version\x00', 0x1, 0x0) write(r2, &(0x7f0000000600)='1.2\x00', 0x4) r3 = openat(0xffffffffffffff9c, &(0x7f0000000700)='./sys/block/md0/md/new_dev\x00', 0x1, 0x0) write(r3, &(0x7f0000000800)='1:0\x00', 0x4) write(0xffffffffffffffff, &(0x7f0000000a00)='writemostly\x00', 0xc) r4 = openat(0xffffffffffffff9c, &(0x7f0000000b00)='./sys/block/md0/md/array_state\x00', 0x1, 0x0) write(r4, &(0x7f0000000c00)='readonly\x00', 0x9) r5 = openat(0xffffffffffffff9c, &(0x7f0000000d00)='./sys/block/md0/md/bitmap/backlog\x00', 0x1, 0x0) write(r5, &(0x7f0000000e00)='1024\x00', 0x5) 1.714368238s ago: executing program 4 (id=1127): mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./dev\x00', 0x1ff) mount(&(0x7f00000000c0)=@filename='none\x00', &(0x7f0000000180)='./dev\x00', &(0x7f00000001c0)='devtmpfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./config\x00', 0x1ff) mount(&(0x7f00000002c0)=@filename='none\x00', &(0x7f0000000380)='./config\x00', &(0x7f00000003c0)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000480)='./sys\x00', 0x1ff) mount(&(0x7f00000004c0)=@filename='none\x00', &(0x7f0000000540)='./sys\x00', &(0x7f0000000580)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f00000005c0)='./sys/kernel/uevent_helper\x00', 0x1, 0x0) write(r0, &(0x7f0000000600)='\x00', 0x1) mkdirat(0xffffffffffffff9c, &(0x7f0000000640)='./config/dlm\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000680)='./config/dlm/cluster\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f00000006c0)='./config/dlm/cluster/comms\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000700)='./config/dlm/cluster/comms/1\x00', 0x1ff) r1 = openat(0xffffffffffffff9c, &(0x7f0000000740)='./config/dlm/cluster/comms/1/local\x00', 0x1, 0x0) write(r1, &(0x7f0000000780)='1', 0x1) r2 = openat(0xffffffffffffff9c, &(0x7f00000007c0)='./config/dlm/cluster/comms/1/addr\x00', 0x1, 0x0) write(r2, &(0x7f0000000000)="020000007f00000100"/128, 0x80) mkdirat(0xffffffffffffff9c, &(0x7f0000000800)='./config/dlm/cluster/spaces\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000840)='./config/dlm/cluster/spaces/dlm1\x00', 0x1ff) (async) nanosleep(&(0x7f0000000500)={0x1}, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000880)='./sys/kernel/dlm/dlm1/event_done\x00', 0x1, 0x0) write(r3, &(0x7f00000008c0)='0', 0x1) r4 = openat(0xffffffffffffff9c, &(0x7f0000000900)='./sys/kernel/dlm/dlm1/control\x00', 0x1, 0x0) write(r4, &(0x7f0000000940)='1', 0x1) nanosleep(&(0x7f0000000500)={0x1}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000980)='./config/dlm/cluster/spaces/dlm1/nodes\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f00000009c0)='./config/dlm/cluster/spaces/dlm1/nodes/1\x00', 0x1ff) r5 = openat(0xffffffffffffff9c, &(0x7f0000000a40)='./dev/dlm-control\x00', 0x2, 0x0) write(r5, &(0x7f0000000100)="060000000000000002000000040100000000000000000000646c6d3100"/128, 0x80) (async) nanosleep(&(0x7f0000000500)={0x1}, 0x0) r6 = openat(0xffffffffffffff9c, &(0x7f0000000b80)='./dev/dlm_dlm1\x00', 0x2, 0x0) write(r6, &(0x7f0000000200)="0600000000000000020000000101000003040000000000000000000000000000000000000000000000000000000000000000000000000000007f00000000000000000000000000000000000000010000007f00000000000000000000000000000000000000000000000000000000000000000000000000000072657331", 0x7c) write(r6, &(0x7f0000000300)="0600000000000000020000000201000000000000000000000100000000000000000000000000000000000000000000000000000000000000007f00000000000000000000000000000000000000010000007f00"/121, 0x78) 1.247295682s ago: executing program 2 (id=1128): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./sys\x00', &(0x7f00000000c0)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000500)='./sys/block/md0/md/resync_start\x00', 0x1, 0x0) write(r0, &(0x7f0000000540), 0x0) 1.172017735s ago: executing program 3 (id=1129): socket$nl_netfilter(0x10, 0x3, 0xc) r0 = syz_open_dev$video(&(0x7f0000000080), 0x7, 0x0) socket$tipc(0x1e, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000200)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) sendmsg$inet(0xffffffffffffffff, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x24006000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r4, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) syz_ublk_setup_queues(r0, 0x0, &(0x7f0000000180)={0x0, 0x747b, 0x20, 0x1, 0x65}, &(0x7f0000000500)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x6f5, 0x400, 0x2, 0x2e5}, 0xffffffffffffffff}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xf5d0, 0x0, 0x1, 0xe}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x64bc, 0x80, 0x3, 0x19a}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x5171, 0x80, 0x1, 0x3be}}], 0x4, &(0x7f0000001780)={0x2e, 0x43, 0x0, 0xffffffffffffffff, 0xc0107520, 0x0, 0x0, 0x0, 0x1, {0x7f}, 0x0, 0x0, '\x00', {0x2, 0xf75, 0x0, &(0x7f0000001dc0)=@buf_max_buf="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"}}, &(0x7f0000001800)) mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000007, 0x401d031, r5, 0x0) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000440)=@new_dev={0x4, 0x3c9, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x50}}}, &(0x7f0000000300)) r6 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi1\x00', 0x2, 0x0) ioctl$COMEDI_DEVCONFIG(r6, 0x40946400, &(0x7f0000000440)={'ni_at_a2150\x00', [0x300, 0xc0000000, 0x2, 0x1, 0xe, 0x800005, 0x7, 0x6, 0x8, 0x56, 0xffffffff, 0x1, 0x1, 0xfffffffc, 0x10000b, 0x0, 0x5, 0x4007a, 0x3, 0x3, 0x89, 0x12, 0x7f, 0x0, 0x5, 0xe65, 0x1, 0x2000008, 0xa6b3, 0x0, 0x5]}) 555.709118ms ago: executing program 2 (id=1130): openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x801, 0x0) mknodat(0xffffffffffffff9c, &(0x7f00000000c0)='./file2\x00', 0x81c0, 0x0) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000240)={0xffffffffffffffff, 0x0, &(0x7f0000000000)=""/3, 0x2}, 0x20) connect$llc(0xffffffffffffffff, &(0x7f0000000240)={0x1a, 0x20, 0x4, 0x4a, 0x2, 0x7, @remote}, 0x10) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000ff1000/0x2000)=nil, &(0x7f0000ff5000/0x3000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff5000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) r0 = io_uring_setup(0x524, &(0x7f0000000040)={0x0, 0x3cb1, 0x1c080, 0xa, 0x20002f7}) syz_io_uring_setup(0x4175, &(0x7f0000000180)={0x0, 0x136f, 0x11000, 0x2, 0x2d0}, &(0x7f0000000140), &(0x7f0000000400), &(0x7f0000000000)) io_uring_enter(r0, 0x2219, 0x7721, 0x16, 0x0, 0x0) execveat(0xffffffffffffff9c, &(0x7f0000000280)='./file2\x00', 0x0, 0x0, 0x0) rename(&(0x7f0000000580)='./file0\x00', &(0x7f0000000780)='./file2\x00') 238.461497ms ago: executing program 0 (id=1131): mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./dev\x00', 0x1ff) mount(&(0x7f00000000c0)=@filename='none\x00', &(0x7f0000000180)='./dev\x00', &(0x7f00000001c0)='devtmpfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./config\x00', 0x1ff) mount(&(0x7f00000002c0)=@filename='none\x00', &(0x7f0000000380)='./config\x00', &(0x7f00000003c0)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000480)='./sys\x00', 0x1ff) mount(&(0x7f00000004c0)=@filename='none\x00', &(0x7f0000000540)='./sys\x00', &(0x7f0000000580)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f00000005c0)='./sys/kernel/uevent_helper\x00', 0x1, 0x0) write(r0, &(0x7f0000000600)='\x00', 0x1) mkdirat(0xffffffffffffff9c, &(0x7f0000000640)='./config/dlm\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000680)='./config/dlm/cluster\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f00000006c0)='./config/dlm/cluster/comms\x00', 0x1ff) r1 = openat(0xffffffffffffff9c, &(0x7f0000000b80)='./dev/dlm_dlm1\x00', 0x2, 0x0) write(r1, &(0x7f0000000200)="0600000000000000020000000101000003040000000000000000000000000000000000000000000000000000000000000000000000000000007f00000000000000000000000000000000000000010000007f00000000000000000000000000000000000000000000000000000000000000000000000000000072657331", 0x7c) write(r1, &(0x7f0000000300)="0600000000000000020000000201000000000000000000000100000000000000000000000000000000000000000000000000000000000000007f00000000000000000000000000000000000000010000007f00"/121, 0x78) 234.546053ms ago: executing program 4 (id=1132): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./debug\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./debug\x00', &(0x7f0000000040)='debugfs\x00', 0x0, 0x0) openat(0xffffffffffffff9c, 0x0, 0x2, 0x0) mmap(&(0x7f0000010000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mbind(&(0x7f0000010000/0x1000)=nil, 0x1000, 0x2002, 0x0, 0x2, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./null\x00', 0x42, 0x1ff) write(r0, &(0x7f0000010000), 0x1000) mmap(&(0x7f0000003000/0x400000)=nil, 0x400000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000000200)='./dev\x00', &(0x7f0000000240)='devtmpfs\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./dev/zero\x00', 0x0, 0x0) readv(r1, &(0x7f0000004000)=[{&(0x7f0000003000)}, {0x0}, {&(0x7f0000003000)}, {0x0}, {&(0x7f0000003000)}, {&(0x7f0000003000)}, {&(0x7f0000003000)}, {&(0x7f0000003000)}, {&(0x7f0000003000)}, {0x0}, {0x0}, {&(0x7f0000003000)}, {0x0}, {&(0x7f0000003000)}, {&(0x7f0000003000)}, {&(0x7f0000003000)}, {0x0}], 0x11) readv(r1, 0x0, 0x0) readv(r1, &(0x7f0000004000)=[{&(0x7f0000003000)}, {&(0x7f0000003000)}, {0x0}], 0x3) readv(r1, 0x0, 0x0) readv(r1, &(0x7f0000004000)=[{0x0}, {0x0}, {&(0x7f0000003000)}, {0x0}, {&(0x7f0000003000)}, {&(0x7f0000003000)}, {&(0x7f0000003000)}, {&(0x7f0000003000)}], 0x8) readv(r1, &(0x7f0000004000)=[{&(0x7f0000003000), 0x400000}, {&(0x7f0000003000), 0x400000}, {&(0x7f0000003000), 0x400000}, {&(0x7f0000003000), 0x400000}, {&(0x7f0000003000), 0x400000}, {&(0x7f0000003000), 0x400000}, {&(0x7f0000003000), 0x400000}, {&(0x7f0000003000), 0x400000}, {&(0x7f0000003000), 0x400000}, {&(0x7f0000003000), 0x400000}, {&(0x7f0000003000), 0x400000}, {&(0x7f0000003000), 0x400000}, {&(0x7f0000003000), 0x400000}, {&(0x7f0000003000), 0x400000}, {&(0x7f0000003000), 0x400000}, {&(0x7f0000003000), 0x400000}, {&(0x7f0000003000), 0x400000}, {&(0x7f0000003000), 0x400000}, {&(0x7f0000003000), 0x400000}, {&(0x7f0000003000), 0x400000}], 0x14) readv(r1, &(0x7f0000004000)=[{&(0x7f0000003000), 0x400000}, {&(0x7f0000003000), 0x400000}, {&(0x7f0000003000), 0x400000}, {&(0x7f0000003000), 0x400000}, {&(0x7f0000003000), 0x400000}, {&(0x7f0000003000), 0x400000}, {&(0x7f0000003000), 0x400000}, {&(0x7f0000003000), 0x400000}, {&(0x7f0000003000), 0x400000}, {&(0x7f0000003000), 0x400000}, {&(0x7f0000003000), 0x400000}, {&(0x7f0000003000), 0x400000}, {&(0x7f0000003000), 0x400000}, {&(0x7f0000003000), 0x400000}, {&(0x7f0000003000), 0x400000}, {&(0x7f0000003000), 0x400000}, {&(0x7f0000003000), 0x400000}, {&(0x7f0000003000), 0x400000}, {&(0x7f0000003000), 0x400000}, {&(0x7f0000003000), 0x400000}], 0x14) readv(r1, &(0x7f0000004000)=[{&(0x7f0000003000), 0x400000}, {&(0x7f0000003000), 0x400000}, {&(0x7f0000003000), 0x400000}, {&(0x7f0000003000), 0x400000}, {&(0x7f0000003000), 0x400000}, {&(0x7f0000003000), 0x400000}, {&(0x7f0000003000), 0x400000}, {&(0x7f0000003000), 0x400000}, {&(0x7f0000003000), 0x400000}, {&(0x7f0000003000), 0x400000}, {&(0x7f0000003000), 0x400000}, {&(0x7f0000003000), 0x400000}, {&(0x7f0000003000), 0x400000}, {&(0x7f0000003000), 0x400000}, {&(0x7f0000003000), 0x400000}, {&(0x7f0000003000), 0x400000}, {&(0x7f0000003000), 0x400000}, {&(0x7f0000003000), 0x400000}, {&(0x7f0000003000), 0x400000}, {&(0x7f0000003000), 0x400000}], 0x14) readv(r1, &(0x7f0000004000)=[{&(0x7f0000003000), 0x400000}, {&(0x7f0000003000), 0x400000}, {&(0x7f0000003000), 0x400000}, {&(0x7f0000003000), 0x400000}, {&(0x7f0000003000), 0x400000}, {&(0x7f0000003000), 0x400000}, {&(0x7f0000003000), 0x400000}, {&(0x7f0000003000), 0x400000}, {&(0x7f0000003000), 0x400000}, {&(0x7f0000003000), 0x400000}, {&(0x7f0000003000), 0x400000}, {&(0x7f0000003000), 0x400000}, {&(0x7f0000003000), 0x400000}, {&(0x7f0000003000), 0x400000}, {&(0x7f0000003000), 0x400000}, {&(0x7f0000003000), 0x400000}, {&(0x7f0000003000), 0x400000}, {&(0x7f0000003000), 0x400000}, {&(0x7f0000003000), 0x400000}, {&(0x7f0000003000), 0x400000}], 0x14) readv(r1, &(0x7f0000004000)=[{&(0x7f0000003000), 0x400000}, {&(0x7f0000003000), 0x400000}, {&(0x7f0000003000), 0x400000}, {&(0x7f0000003000), 0x400000}, {&(0x7f0000003000), 0x400000}, {&(0x7f0000003000), 0x400000}, {&(0x7f0000003000), 0x400000}, {&(0x7f0000003000), 0x400000}, {&(0x7f0000003000), 0x400000}, {&(0x7f0000003000), 0x400000}, {&(0x7f0000003000), 0x400000}, {&(0x7f0000003000), 0x400000}, {&(0x7f0000003000), 0x400000}, {&(0x7f0000003000), 0x400000}, {&(0x7f0000003000), 0x400000}, {&(0x7f0000003000), 0x400000}, {&(0x7f0000003000), 0x400000}, {&(0x7f0000003000), 0x400000}, {&(0x7f0000003000), 0x400000}, {&(0x7f0000003000), 0x400000}], 0x14) getpid() write(r0, &(0x7f0000010000), 0x1000) 122.664034ms ago: executing program 3 (id=1133): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000680)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSET={0x3c, 0x9, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0xfffffffc}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x64}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a400000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a310000000014000380100000800c0001800600010058c6000014000000110001"], 0x68}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) (fail_nth: 6) 0s ago: executing program 1 (id=1134): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x10}, 0x0) socket(0x2b, 0x843256725ea7f505, 0xe9) r1 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r1, &(0x7f0000000000)={0x18, 0x0, {0x1, @empty, 'lo\x00'}}, 0x1e) ioctl$PPPIOCGCHAN(r1, 0x80047437, &(0x7f0000000040)) r2 = openat$ppp(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) ioctl$PPPIOCNEWUNIT(r2, 0xc004743e, &(0x7f00000000c0)) r3 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl(r3, 0x40047438, &(0x7f0000000040)) write$ppp(r2, &(0x7f0000000200)='\x00\x00', 0x2) kernel console output (not intermixed with test programs): et permissive=1 [ 185.525286][ T30] audit: type=1400 audit(1700000045.209:349): avc: denied { name_connect } for pid=8171 comm="syz.3.712" dest=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=sctp_socket permissive=1 [ 185.653905][ T8172] FAULT_INJECTION: forcing a failure. [ 185.653905][ T8172] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 185.653954][ T8172] CPU: 1 UID: 0 PID: 8172 Comm: syz.3.712 Not tainted syzkaller #0 PREEMPT(full) [ 185.653977][ T8172] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/05/2026 [ 185.653989][ T8172] Call Trace: [ 185.653995][ T8172] [ 185.654003][ T8172] dump_stack_lvl+0x100/0x190 [ 185.654037][ T8172] should_fail_ex.cold+0x5/0xa [ 185.654063][ T8172] _copy_from_user+0x2e/0xd0 [ 185.654093][ T8172] snd_rawmidi_kernel_write1+0x390/0x7c0 [ 185.654128][ T8172] snd_rawmidi_write+0x2dc/0xc60 [ 185.654169][ T8172] ? __pfx_snd_rawmidi_write+0x10/0x10 [ 185.654191][ T8172] ? avc_policy_seqno+0x9/0x20 [ 185.654209][ T8172] ? selinux_file_permission+0x8f/0x6d0 [ 185.654235][ T8172] ? __pfx_default_wake_function+0x10/0x10 [ 185.654259][ T8172] ? bpf_lsm_file_permission+0x9/0x10 [ 185.654279][ T8172] ? security_file_permission+0x76/0x210 [ 185.654299][ T8172] ? rw_verify_area+0xce/0x6d0 [ 185.654325][ T8172] ? __pfx_snd_rawmidi_write+0x10/0x10 [ 185.654346][ T8172] vfs_writev+0x5ed/0xdd0 [ 185.654376][ T8172] ? __pfx_vfs_writev+0x10/0x10 [ 185.654402][ T8172] ? lock_acquire+0x1d1/0x380 [ 185.654419][ T8172] ? __fget_files+0x34/0x3d0 [ 185.654447][ T8172] ? __fget_files+0x21f/0x3d0 [ 185.654471][ T8172] ? do_writev+0x28a/0x340 [ 185.654486][ T8172] do_writev+0x28a/0x340 [ 185.654502][ T8172] ? __pfx_do_writev+0x10/0x10 [ 185.654522][ T8172] do_syscall_64+0x123/0x790 [ 185.654537][ T8172] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 185.654549][ T8172] RIP: 0033:0x7fa36599e159 [ 185.654560][ T8172] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 185.654572][ T8172] RSP: 002b:00007fa36684e028 EFLAGS: 00000246 ORIG_RAX: 0000000000000014 [ 185.654584][ T8172] RAX: ffffffffffffffda RBX: 00007fa365c25fa0 RCX: 00007fa36599e159 [ 185.654591][ T8172] RDX: 0000000000000002 RSI: 0000200000000840 RDI: 0000000000000007 [ 185.654598][ T8172] RBP: 00007fa365a35024 R08: 0000000000000000 R09: 0000000000000000 [ 185.654605][ T8172] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 185.654613][ T8172] R13: 00007fa365c26038 R14: 00007fa365c25fa0 R15: 00007ffe97f2e228 [ 185.654628][ T8172] [ 185.914163][ T8177] md: could not open device unknown-block(1,0). [ 185.920486][ T7816] md_update_sb: 9 callbacks suppressed [ 185.920498][ T7816] md_update_sb: can't update sb for read-only array md0 [ 185.967774][ T8180] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 186.004283][ T7816] md_update_sb: can't update sb for read-only array md0 [ 186.051589][ T30] audit: type=1400 audit(1700000045.729:350): avc: denied { write } for pid=8181 comm="syz.4.715" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 186.054328][ T30] audit: type=1400 audit(1700000045.739:351): avc: denied { name_connect } for pid=8181 comm="syz.4.715" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=sctp_socket permissive=1 [ 186.061861][ T7816] md_update_sb: can't update sb for read-only array md0 [ 186.076583][ T8180] md: could not open device unknown-block(1,0). [ 186.076698][ T7816] md_update_sb: can't update sb for read-only array md0 [ 186.098287][ T31] gspca_topro: reg_r err -71 [ 186.098298][ T31] gspca_topro: Sensor soi763a [ 186.122038][ T30] audit: type=1400 audit(1700000045.809:352): avc: denied { shutdown } for pid=8181 comm="syz.4.715" lport=60545 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 186.149681][ T7816] md_update_sb: can't update sb for read-only array md0 [ 186.152993][ T8180] md: could not open device unknown-block(1,1). [ 186.153162][ T7816] md_update_sb: can't update sb for read-only array md0 [ 186.172560][ T31] usb 2-1: USB disconnect, device number 12 [ 186.192036][ T7816] md_update_sb: can't update sb for read-only array md0 [ 186.346291][ T8193] netlink: 32 bytes leftover after parsing attributes in process `syz.3.717'. [ 186.552407][ T5733] usb 3-1: USB disconnect, device number 9 [ 186.595523][ T8200] cifs_smb3_do_mount: 1 callbacks suppressed [ 186.595575][ T8200] CIFS: Attempting to mount //127.0.0.1/share [ 186.683196][ T7396] dlm: dlm1: dlm_recover 597075055147962897 [ 186.683358][ T7396] dlm: dlm1: dlm_clear_inactive 1 done [ 186.683402][ T7396] dlm: dlm1: dlm_recover_members 1 nodes [ 186.683422][ T7396] dlm: dlm1: generation 12 slots 1 1:1 [ 186.683432][ T7396] dlm: dlm1: dlm_recover_directory [ 186.683444][ T7396] dlm: dlm1: dlm_recover_directory 0 in 0 new [ 186.683482][ T7396] dlm: dlm1: dlm_recover 597075055147962897 generation 12 done: 0 ms [ 186.713887][ T8200] CIFS: VFS: decode_ntlmssp_challenge: requested signing/encryption but server did not return either 56-bit or 128-bit session key size [ 186.713953][ T8200] CIFS: VFS: \\127.0.0.1 failed to create a new SMB session with Unknown: -22 [ 186.715512][ T8200] cifs_smb3_do_mount: 2 callbacks suppressed [ 186.715526][ T8200] CIFS: VFS: cifs_mount failed w/return code = -22 [ 186.790485][ T8211] netlink: 20 bytes leftover after parsing attributes in process `syz.3.724'. [ 186.872119][ T8217] md: could not open device unknown-block(1,0). [ 186.872251][ T7816] md_update_sb: can't update sb for read-only array md0 [ 187.128706][ T30] audit: type=1400 audit(1700000046.809:353): avc: denied { allowed } for pid=8226 comm="syz.1.728" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 187.150742][ T30] audit: type=1400 audit(1700000046.829:354): avc: denied { ioctl } for pid=8226 comm="syz.1.728" path="/dev/kvm" dev="devtmpfs" ino=84 ioctlcmd=0xae01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 187.225825][ T8227] netlink: 8 bytes leftover after parsing attributes in process `syz.1.728'. [ 187.225883][ T8227] bond0: option lp_interval: invalid value (0) [ 187.225898][ T8227] bond0: option lp_interval: allowed values 1 - 2147483647 [ 187.426549][ T31] usb 1-1: USB disconnect, device number 25 [ 187.449002][ T8202] dlm: dlm1: no userland control daemon, stopping lockspace [ 187.457700][ T8202] dlm: dlm user daemon left 1 lockspaces [ 187.463466][ T25] usb 2-1: new high-speed USB device number 13 using dummy_hcd [ 187.523949][ T8233] FAULT_INJECTION: forcing a failure. [ 187.523949][ T8233] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 187.523999][ T8233] CPU: 0 UID: 0 PID: 8233 Comm: syz.0.731 Not tainted syzkaller #0 PREEMPT(full) [ 187.524019][ T8233] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/05/2026 [ 187.524030][ T8233] Call Trace: [ 187.524036][ T8233] [ 187.524043][ T8233] dump_stack_lvl+0x100/0x190 [ 187.524073][ T8233] should_fail_ex.cold+0x5/0xa [ 187.524101][ T8233] _copy_from_iter+0x1f4/0x1690 [ 187.524130][ T8233] ? __asan_memset+0x23/0x50 [ 187.524158][ T8233] ? __pfx__copy_from_iter+0x10/0x10 [ 187.524184][ T8233] ? __pfx___alloc_skb+0x10/0x10 [ 187.524221][ T8233] netlink_sendmsg+0x808/0xda0 [ 187.524253][ T8233] ? __pfx_netlink_sendmsg+0x10/0x10 [ 187.524282][ T8233] ? selinux_socket_sendmsg+0x198/0x2f0 [ 187.524313][ T8233] ____sys_sendmsg+0xa4d/0xbe0 [ 187.524333][ T8233] ? __pfx_netlink_sendmsg+0x10/0x10 [ 187.524360][ T8233] ? __pfx_____sys_sendmsg+0x10/0x10 [ 187.524386][ T8233] ? lock_acquire+0x1d1/0x380 [ 187.524404][ T8233] ? get_pid_task+0x2a/0x250 [ 187.524428][ T8233] ___sys_sendmsg+0x190/0x1e0 [ 187.524449][ T8233] ? __pfx____sys_sendmsg+0x10/0x10 [ 187.524468][ T8233] ? get_pid_task+0x106/0x250 [ 187.524496][ T8233] ? find_held_lock+0x2b/0x80 [ 187.524530][ T8233] __sys_sendmsg+0x160/0x210 [ 187.524546][ T8233] ? __pfx___sys_sendmsg+0x10/0x10 [ 187.524572][ T8233] do_syscall_64+0x123/0x790 [ 187.524593][ T8233] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 187.524609][ T8233] RIP: 0033:0x7f20ce19e159 [ 187.524623][ T8233] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 187.524644][ T8233] RSP: 002b:00007f20cc3f6028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 187.524660][ T8233] RAX: ffffffffffffffda RBX: 00007f20ce425fa0 RCX: 00007f20ce19e159 [ 187.524671][ T8233] RDX: 0000000000000000 RSI: 0000200000000480 RDI: 0000000000000004 [ 187.524680][ T8233] RBP: 00007f20cc3f6090 R08: 0000000000000000 R09: 0000000000000000 [ 187.524690][ T8233] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 187.524699][ T8233] R13: 00007f20ce426038 R14: 00007f20ce425fa0 R15: 00007fffa8e2d388 [ 187.524720][ T8233] [ 187.682946][ T25] usb 2-1: New USB device found, idVendor=04d8, idProduct=0083, bcdDevice=da.47 [ 187.714531][ T30] audit: type=1400 audit(1700000047.389:355): avc: denied { mounton } for pid=8236 comm="syz.2.733" path="/144/file0" dev="fuse" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=dir permissive=1 [ 187.744763][ T25] usb 2-1: config 2 has an invalid descriptor of length 0, skipping remainder of the config [ 187.744815][ T25] usb 2-1: config 2 interface 0 altsetting 178 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 187.744849][ T25] usb 2-1: config 2 interface 0 has no altsetting 0 [ 187.782060][ T8245] CIFS: Attempting to mount //127.0.0.1/share [ 187.784595][ T8245] CIFS: VFS: Error connecting to socket. Aborting operation. [ 187.784635][ T8245] CIFS: VFS: cifs_mount failed w/return code = -111 [ 187.831781][ T25] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 187.831808][ T25] usb 2-1: Product: syz [ 187.831822][ T25] usb 2-1: Manufacturer: syz [ 187.831836][ T25] usb 2-1: SerialNumber: syz [ 187.832014][ T8244] md: could not open device unknown-block(1,0). [ 187.832187][ T7816] md_update_sb: can't update sb for read-only array md0 [ 188.096550][ T25] usb 2-1: USB disconnect, device number 13 [ 188.598430][ T30] audit: type=1400 audit(1700000048.279:356): avc: denied { read write } for pid=8256 comm="syz.0.740" name="vhost-vsock" dev="devtmpfs" ino=1272 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 188.792624][ T1308] ieee802154 phy0 wpan0: encryption failed: -22 [ 188.799065][ T1308] ieee802154 phy1 wpan1: encryption failed: -22 [ 190.457785][ T8289] netlink: 20 bytes leftover after parsing attributes in process `syz.4.746'. [ 190.714968][ T30] kauditd_printk_skb: 13 callbacks suppressed [ 190.715019][ T30] audit: type=1400 audit(1700000050.379:370): avc: denied { ioctl } for pid=8292 comm="syz.2.748" path="socket:[15149]" dev="sockfs" ino=15149 ioctlcmd=0x6721 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 190.715198][ T30] audit: type=1400 audit(1700000050.399:371): avc: denied { create } for pid=8293 comm="syz.3.749" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 190.884955][ T8306] ceph: No mds server is up or the cluster is laggy [ 190.971322][ T25] libceph: connect (1)[c::]:6789 error -101 [ 191.027634][ T25] libceph: mon0 (1)[c::]:6789 connect error [ 191.305444][ T31] libceph: connect (1)[c::]:6789 error -101 [ 191.320830][ T31] libceph: mon0 (1)[c::]:6789 connect error [ 191.451330][ T30] audit: type=1400 audit(1700000051.129:372): avc: denied { create } for pid=8311 comm="syz.0.750" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 191.702829][ T30] audit: type=1400 audit(1700000051.389:373): avc: denied { unmount } for pid=5610 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=filesystem permissive=1 [ 191.728384][ T30] audit: type=1400 audit(1700000051.389:374): avc: denied { read write } for pid=5608 comm="syz-executor" name="loop4" dev="devtmpfs" ino=649 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 191.728444][ T30] audit: type=1400 audit(1700000051.389:375): avc: denied { open } for pid=5608 comm="syz-executor" path="/dev/loop4" dev="devtmpfs" ino=649 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 191.728491][ T30] audit: type=1400 audit(1700000051.389:376): avc: denied { ioctl } for pid=5608 comm="syz-executor" path="/dev/loop4" dev="devtmpfs" ino=649 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 191.806976][ T30] audit: type=1400 audit(1700000051.469:377): avc: denied { read } for pid=8316 comm="syz.4.751" name="ppp" dev="devtmpfs" ino=708 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 191.807030][ T30] audit: type=1400 audit(1700000051.469:378): avc: denied { open } for pid=8316 comm="syz.4.751" path="/dev/ppp" dev="devtmpfs" ino=708 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 191.807076][ T30] audit: type=1400 audit(1700000051.469:379): avc: denied { prog_load } for pid=8316 comm="syz.4.751" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 192.412354][ T8317] tipc: Can't bind to reserved service type 2 [ 193.532186][ T8294] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 194.448024][ T8358] netlink: NAT attribute has 4 unknown bytes [ 194.448656][ T8358] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 195.465422][ T7396] dlm: dlm1: dlm_recover 597075055147962899 [ 195.465470][ T7396] dlm: dlm1: dlm_clear_inactive 1 done [ 195.471685][ T7396] dlm: dlm1: dlm_recover_members 1 nodes [ 195.509098][ T7396] dlm: dlm1: generation 13 slots 1 1:1 [ 195.509130][ T7396] dlm: dlm1: dlm_recover_directory [ 195.521490][ T7396] dlm: dlm1: dlm_recover_directory 0 in 0 new [ 195.521553][ T7396] dlm: dlm1: dlm_recover 597075055147962899 generation 13 done: 10 ms [ 195.781857][ T8380] audit_log_lost: 82 callbacks suppressed [ 195.781914][ T8380] audit: audit_lost=1 audit_rate_limit=0 audit_backlog_limit=64 [ 195.781928][ T8380] audit: out of memory in audit_log_start [ 195.833691][ T30] audit: type=1400 audit(1700000055.409:462): avc: denied { write } for pid=8378 comm="syz.4.767" name="instances" dev="tracefs" ino=4109 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=dir permissive=1 [ 195.833728][ T30] audit: type=1400 audit(1700000055.409:463): avc: denied { add_name } for pid=8378 comm="syz.4.767" name="foo" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=dir permissive=1 [ 195.833766][ T30] audit: type=1400 audit(1700000055.419:464): avc: denied { create } for pid=8378 comm="syz.4.767" name="foo" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:tracefs_t tclass=dir permissive=1 [ 195.833802][ T30] audit: type=1400 audit(1700000055.469:465): avc: denied { remove_name } for pid=8378 comm="syz.4.767" name="foo" dev="tracefs" ino=15495 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=dir permissive=1 [ 195.833835][ T30] audit: type=1400 audit(1700000055.469:466): avc: denied { rmdir } for pid=8378 comm="syz.4.767" name="foo" dev="tracefs" ino=15495 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=dir permissive=1 [ 195.924487][ T8382] dlm: dlm1: start ignored: lockspace running [ 196.091801][ T5704] usb 2-1: new high-speed USB device number 14 using dummy_hcd [ 196.112496][ T8387] dlm: dlm1: start ignored: lockspace running [ 196.126403][ T8389] geneve1: entered promiscuous mode [ 196.136965][ T30] audit: type=1400 audit(1700000055.819:467): avc: denied { module_request } for pid=8388 comm="syz.4.772" kmod="rtnl-link-vsockmonG" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1 [ 196.185324][ T30] audit: type=1400 audit(1700000055.869:468): avc: denied { ioctl } for pid=8388 comm="syz.4.772" path="socket:[15575]" dev="sockfs" ino=15575 ioctlcmd=0x8946 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 196.236103][ T30] audit: type=1400 audit(1700000055.919:469): avc: denied { unmount } for pid=5610 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=filesystem permissive=1 [ 196.263244][ T5704] usb 2-1: New USB device found, idVendor=8086, idProduct=0b63, bcdDevice= 0.00 [ 196.265480][ T5704] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 197.502000][ T5704] ljca 2-1:1.0: probe with driver ljca failed with error -110 [ 197.517269][ T8385] dlm: dlm1: no userland control daemon, stopping lockspace [ 197.527557][ T8385] dlm: dlm user daemon left 1 lockspaces [ 197.929825][ T8412] FAULT_INJECTION: forcing a failure. [ 197.929825][ T8412] name failslab, interval 1, probability 0, space 0, times 0 [ 197.947593][ T8412] CPU: 1 UID: 0 PID: 8412 Comm: syz.0.780 Not tainted syzkaller #0 PREEMPT(full) [ 197.947622][ T8412] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/05/2026 [ 197.947633][ T8412] Call Trace: [ 197.947639][ T8412] [ 197.947645][ T8412] dump_stack_lvl+0x100/0x190 [ 197.947675][ T8412] should_fail_ex.cold+0x5/0xa [ 197.947698][ T8412] should_failslab+0xc2/0x120 [ 197.947715][ T8412] __kmalloc_noprof+0xfc/0x840 [ 197.947730][ T8412] ? genl_family_rcv_msg_attrs_parse.isra.0+0x100/0x2f0 [ 197.947750][ T8412] genl_family_rcv_msg_attrs_parse.isra.0+0x100/0x2f0 [ 197.947770][ T8412] genl_family_rcv_msg_doit+0xc7/0x300 [ 197.947786][ T8412] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 197.947807][ T8412] ? bpf_lsm_capable+0x9/0x10 [ 197.947826][ T8412] ? security_capable+0x80/0x260 [ 197.947854][ T8412] ? ns_capable+0xd2/0xf0 [ 197.947870][ T8412] genl_rcv_msg+0x560/0x800 [ 197.947887][ T8412] ? __pfx_genl_rcv_msg+0x10/0x10 [ 197.947901][ T8412] ? __lock_acquire+0x4c5/0x1ec0 [ 197.947915][ T8412] ? __pfx_ovs_flow_cmd_new+0x10/0x10 [ 197.947938][ T8412] netlink_rcv_skb+0x159/0x420 [ 197.947959][ T8412] ? __pfx_genl_rcv_msg+0x10/0x10 [ 197.947974][ T8412] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 197.948002][ T8412] ? netlink_deliver_tap+0x1ae/0xcc0 [ 197.948025][ T8412] genl_rcv+0x28/0x40 [ 197.948037][ T8412] netlink_unicast+0x585/0x850 [ 197.948061][ T8412] ? __pfx_netlink_unicast+0x10/0x10 [ 197.948080][ T8412] ? __build_skb_around+0x278/0x390 [ 197.948104][ T8412] netlink_sendmsg+0x8b0/0xda0 [ 197.948128][ T8412] ? __pfx_netlink_sendmsg+0x10/0x10 [ 197.948150][ T8412] ? selinux_socket_sendmsg+0x198/0x2f0 [ 197.948176][ T8412] ____sys_sendmsg+0xa4d/0xbe0 [ 197.948193][ T8412] ? __pfx_netlink_sendmsg+0x10/0x10 [ 197.948218][ T8412] ? __pfx_____sys_sendmsg+0x10/0x10 [ 197.948240][ T8412] ? lock_acquire+0x1d1/0x380 [ 197.948253][ T8412] ? get_pid_task+0x2a/0x250 [ 197.948274][ T8412] ___sys_sendmsg+0x190/0x1e0 [ 197.948293][ T8412] ? __pfx____sys_sendmsg+0x10/0x10 [ 197.948311][ T8412] ? get_pid_task+0x106/0x250 [ 197.948337][ T8412] ? find_held_lock+0x2b/0x80 [ 197.948368][ T8412] __sys_sendmsg+0x160/0x210 [ 197.948383][ T8412] ? __pfx___sys_sendmsg+0x10/0x10 [ 197.948408][ T8412] do_syscall_64+0x123/0x790 [ 197.948426][ T8412] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 197.948441][ T8412] RIP: 0033:0x7f20ce19e159 [ 197.948454][ T8412] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 197.948468][ T8412] RSP: 002b:00007f20cc3f6028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 197.948483][ T8412] RAX: ffffffffffffffda RBX: 00007f20ce425fa0 RCX: 00007f20ce19e159 [ 197.948493][ T8412] RDX: 000000000000c000 RSI: 0000200000000000 RDI: 0000000000000003 [ 197.948501][ T8412] RBP: 00007f20cc3f6090 R08: 0000000000000000 R09: 0000000000000000 [ 197.948510][ T8412] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 197.948518][ T8412] R13: 00007f20ce426038 R14: 00007f20ce425fa0 R15: 00007fffa8e2d388 [ 197.948537][ T8412] [ 198.324374][ T8419] process 'syz.0.781' launched './file2' with NULL argv: empty string added [ 198.397675][ T8416] input: syz0 as /devices/virtual/input/input5 [ 199.605932][ T5733] usb 2-1: USB disconnect, device number 14 [ 199.646562][ T8426] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=1812281087 (231971979136 ns) > initial count (128 ns). Using initial count to start timer. [ 199.952529][ T8441] md: could not open device unknown-block(1,0). [ 199.952713][ T7816] md_update_sb: can't update sb for read-only array md0 [ 199.975276][ T5704] usb 4-1: new full-speed USB device number 21 using dummy_hcd [ 200.134952][ T5704] usb 4-1: New USB device found, idVendor=0d8c, idProduct=000e, bcdDevice=8e.04 [ 200.137435][ T5704] usb 4-1: config 0 has an invalid interface number: 8 but max is 0 [ 200.137457][ T5704] usb 4-1: config 0 has no interface number 0 [ 200.137484][ T5704] usb 4-1: config 0 interface 8 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 200.137506][ T5704] usb 4-1: config 0 interface 8 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 200.137528][ T5704] usb 4-1: config 0 interface 8 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 200.138870][ T5704] usb 4-1: New USB device strings: Mfr=0, Product=24, SerialNumber=3 [ 200.138889][ T5704] usb 4-1: Product: syz [ 200.138901][ T5704] usb 4-1: SerialNumber: syz [ 200.140918][ T5704] usb 4-1: config 0 descriptor?? [ 200.152550][ T5704] cm109 4-1:0.8: invalid payload size 0, expected 4 [ 200.221339][ T5704] input: CM109 USB driver as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.8/input/input6 [ 200.239211][ T8451] FAULT_INJECTION: forcing a failure. [ 200.239211][ T8451] name failslab, interval 1, probability 0, space 0, times 0 [ 200.253844][ T8451] CPU: 1 UID: 0 PID: 8451 Comm: syz.0.790 Not tainted syzkaller #0 PREEMPT(full) [ 200.253875][ T8451] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/05/2026 [ 200.253886][ T8451] Call Trace: [ 200.253892][ T8451] [ 200.253899][ T8451] dump_stack_lvl+0x100/0x190 [ 200.253929][ T8451] should_fail_ex.cold+0x5/0xa [ 200.253954][ T8451] should_failslab+0xc2/0x120 [ 200.253976][ T8451] __kmalloc_noprof+0xfc/0x840 [ 200.253995][ T8451] ? genl_family_rcv_msg_attrs_parse.isra.0+0x100/0x2f0 [ 200.254020][ T8451] genl_family_rcv_msg_attrs_parse.isra.0+0x100/0x2f0 [ 200.254045][ T8451] genl_family_rcv_msg_doit+0xc7/0x300 [ 200.254066][ T8451] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 200.254093][ T8451] ? bpf_lsm_capable+0x9/0x10 [ 200.254116][ T8451] ? security_capable+0x80/0x260 [ 200.254141][ T8451] ? ns_capable+0xd2/0xf0 [ 200.254160][ T8451] genl_rcv_msg+0x560/0x800 [ 200.254181][ T8451] ? __pfx_genl_rcv_msg+0x10/0x10 [ 200.254200][ T8451] ? __lock_acquire+0x4c5/0x1ec0 [ 200.254218][ T8451] ? __pfx_ovs_flow_cmd_new+0x10/0x10 [ 200.254249][ T8451] netlink_rcv_skb+0x159/0x420 [ 200.254275][ T8451] ? __pfx_genl_rcv_msg+0x10/0x10 [ 200.254294][ T8451] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 200.254329][ T8451] ? netlink_deliver_tap+0x1ae/0xcc0 [ 200.254357][ T8451] genl_rcv+0x28/0x40 [ 200.254371][ T8451] netlink_unicast+0x585/0x850 [ 200.254401][ T8451] ? __pfx_netlink_unicast+0x10/0x10 [ 200.254435][ T8451] netlink_sendmsg+0x8b0/0xda0 [ 200.254465][ T8451] ? __pfx_netlink_sendmsg+0x10/0x10 [ 200.254493][ T8451] ? selinux_socket_sendmsg+0x198/0x2f0 [ 200.254525][ T8451] ____sys_sendmsg+0xa4d/0xbe0 [ 200.254546][ T8451] ? __pfx_netlink_sendmsg+0x10/0x10 [ 200.254573][ T8451] ? __pfx_____sys_sendmsg+0x10/0x10 [ 200.254602][ T8451] ? lock_acquire+0x1d1/0x380 [ 200.254619][ T8451] ? get_pid_task+0x2a/0x250 [ 200.254644][ T8451] ___sys_sendmsg+0x190/0x1e0 [ 200.254669][ T8451] ? __pfx____sys_sendmsg+0x10/0x10 [ 200.254690][ T8451] ? get_pid_task+0x106/0x250 [ 200.254723][ T8451] ? find_held_lock+0x2b/0x80 [ 200.254763][ T8451] __sys_sendmsg+0x160/0x210 [ 200.254781][ T8451] ? __pfx___sys_sendmsg+0x10/0x10 [ 200.254813][ T8451] do_syscall_64+0x123/0x790 [ 200.254835][ T8451] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 200.254854][ T8451] RIP: 0033:0x7f20ce19e159 [ 200.254875][ T8451] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 200.254891][ T8451] RSP: 002b:00007f20cc3f6028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 200.254909][ T8451] RAX: ffffffffffffffda RBX: 00007f20ce425fa0 RCX: 00007f20ce19e159 [ 200.254921][ T8451] RDX: 000000000000c000 RSI: 0000200000000000 RDI: 0000000000000003 [ 200.254932][ T8451] RBP: 00007f20cc3f6090 R08: 0000000000000000 R09: 0000000000000000 [ 200.254943][ T8451] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 200.254953][ T8451] R13: 00007f20ce426038 R14: 00007f20ce425fa0 R15: 00007fffa8e2d388 [ 200.254977][ T8451] [ 201.614557][ T8453] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 201.692345][ T8453] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 201.859883][ C0] cm109 4-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 201.860996][ C0] cm109 4-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 201.861224][ C0] cm109 4-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 201.861407][ C0] cm109 4-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 201.861592][ C0] cm109 4-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 201.861775][ C0] cm109 4-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 201.862012][ C0] cm109 4-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 201.862193][ C0] cm109 4-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 201.862380][ C0] cm109 4-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 201.862563][ C0] cm109 4-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 201.995891][ T5717] usb 4-1: USB disconnect, device number 21 [ 201.995891][ C0] cm109 4-1:0.8: cm109_submit_buzz_toggle: usb_submit_urb (urb_ctl) failed -19 [ 202.053807][ T5717] cm109 4-1:0.8: cm109_toggle_buzzer_sync: usb_control_msg() failed -19 [ 202.809697][ T5697] usb 2-1: new high-speed USB device number 15 using dummy_hcd [ 202.928420][ T30] kauditd_printk_skb: 31 callbacks suppressed [ 202.928467][ T30] audit: type=1400 audit(1700000062.609:501): avc: denied { name_bind } for pid=8494 comm="syz.0.798" src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=tcp_socket permissive=1 [ 202.928952][ T30] audit: type=1400 audit(1700000062.609:502): avc: denied { node_bind } for pid=8494 comm="syz.0.798" saddr=127.0.0.1 src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=tcp_socket permissive=1 [ 202.930198][ T8495] CIFS: Attempting to mount //127.0.0.1/share [ 202.950987][ T30] audit: type=1400 audit(1700000062.629:503): avc: denied { unmount } for pid=5610 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:rpc_pipefs_t tclass=filesystem permissive=1 [ 202.952385][ T5697] usb 2-1: New USB device found, idVendor=8086, idProduct=0b63, bcdDevice= 0.00 [ 202.953229][ T5697] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 203.033348][ T8496] CIFS: VFS: Invalid response size 256 for command 1 [ 203.033674][ T8495] CIFS: VFS: \\127.0.0.1 failed to create a new SMB session with Unknown: -5 [ 203.033772][ T8495] CIFS: VFS: cifs_mount failed w/return code = -5 [ 203.181804][ T9] usb 4-1: new high-speed USB device number 22 using dummy_hcd [ 203.206597][ T5697] ljca 2-1:1.0: probe with driver ljca failed with error -110 [ 203.327279][ T7396] dlm: dlm1: dlm_recover 597075055147962901 [ 203.327343][ T7396] dlm: dlm1: dlm_clear_inactive 1 done [ 203.327367][ T7396] dlm: dlm1: dlm_recover_members 1 nodes [ 203.327387][ T7396] dlm: dlm1: generation 14 slots 1 1:1 [ 203.327397][ T7396] dlm: dlm1: dlm_recover_directory [ 203.327409][ T7396] dlm: dlm1: dlm_recover_directory 0 in 0 new [ 203.327449][ T7396] dlm: dlm1: dlm_recover 597075055147962901 generation 14 done: 0 ms [ 203.369839][ T9] usb 4-1: New USB device found, idVendor=8086, idProduct=0b63, bcdDevice= 0.00 [ 203.370687][ T9] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 203.470038][ T8508] dlm: dlm1: start ignored: lockspace running [ 203.800962][ T8512] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 203.852335][ T8512] md: could not open device unknown-block(1,0). [ 203.852457][ T7816] md_update_sb: can't update sb for read-only array md0 [ 203.858844][ T7816] md_update_sb: can't update sb for read-only array md0 [ 203.909460][ T30] audit: type=1400 audit(1700000063.589:504): avc: denied { map } for pid=8513 comm="syz.0.802" path="socket:[15856]" dev="sockfs" ino=15856 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tcp_socket permissive=1 [ 203.996698][ T30] audit: type=1400 audit(1700000063.679:505): avc: denied { create } for pid=8515 comm="syz.0.803" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=caif_socket permissive=1 [ 204.101503][ T8505] dlm: dlm1: no userland control daemon, stopping lockspace [ 204.101582][ T8505] dlm: dlm user daemon left 1 lockspaces [ 204.122227][ T8519] FAULT_INJECTION: forcing a failure. [ 204.122227][ T8519] name failslab, interval 1, probability 0, space 0, times 0 [ 204.122272][ T8519] CPU: 1 UID: 0 PID: 8519 Comm: syz.2.804 Not tainted syzkaller #0 PREEMPT(full) [ 204.122292][ T8519] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/05/2026 [ 204.122302][ T8519] Call Trace: [ 204.122308][ T8519] [ 204.122314][ T8519] dump_stack_lvl+0x100/0x190 [ 204.122341][ T8519] should_fail_ex.cold+0x5/0xa [ 204.122364][ T8519] should_failslab+0xc2/0x120 [ 204.122384][ T8519] __kmalloc_cache_noprof+0x91/0x6d0 [ 204.122407][ T8519] ? xfrm_policy_alloc+0x9f/0x420 [ 204.122428][ T8519] xfrm_policy_alloc+0x9f/0x420 [ 204.122445][ T8519] pfkey_spdadd+0x32e/0x15d0 [ 204.122466][ T8519] ? __pfx_pfkey_spdadd+0x10/0x10 [ 204.122482][ T8519] ? kfree_skbmem+0x19f/0x210 [ 204.122502][ T8519] ? sk_skb_reason_drop+0x114/0x1b0 [ 204.122520][ T8519] ? pfkey_broadcast+0x28c/0x420 [ 204.122539][ T8519] ? __pfx_pfkey_spdadd+0x10/0x10 [ 204.122555][ T8519] pfkey_process+0x5c3/0x810 [ 204.122576][ T8519] ? __pfx_pfkey_process+0x10/0x10 [ 204.122593][ T8519] ? pfkey_sendmsg+0x41a/0x840 [ 204.122624][ T8519] ? __pfx___alloc_skb+0x10/0x10 [ 204.122653][ T8519] pfkey_sendmsg+0x428/0x840 [ 204.122675][ T8519] ____sys_sendmsg+0xa4d/0xbe0 [ 204.122693][ T8519] ? __pfx_pfkey_sendmsg+0x10/0x10 [ 204.122727][ T8519] ? __pfx_____sys_sendmsg+0x10/0x10 [ 204.122751][ T8519] ? lock_acquire+0x1d1/0x380 [ 204.122767][ T8519] ? get_pid_task+0x2a/0x250 [ 204.122790][ T8519] ___sys_sendmsg+0x190/0x1e0 [ 204.122811][ T8519] ? __pfx____sys_sendmsg+0x10/0x10 [ 204.122831][ T8519] ? get_pid_task+0x106/0x250 [ 204.122859][ T8519] ? find_held_lock+0x2b/0x80 [ 204.122894][ T8519] __sys_sendmsg+0x160/0x210 [ 204.122911][ T8519] ? __pfx___sys_sendmsg+0x10/0x10 [ 204.122938][ T8519] do_syscall_64+0x123/0x790 [ 204.122959][ T8519] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 204.122976][ T8519] RIP: 0033:0x7fb7bb39e159 [ 204.122995][ T8519] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 204.123010][ T8519] RSP: 002b:00007fb7bc2b9028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 204.123026][ T8519] RAX: ffffffffffffffda RBX: 00007fb7bb625fa0 RCX: 00007fb7bb39e159 [ 204.123037][ T8519] RDX: 0000000000000000 RSI: 00002000000014c0 RDI: 0000000000000003 [ 204.123046][ T8519] RBP: 00007fb7bc2b9090 R08: 0000000000000000 R09: 0000000000000000 [ 204.123056][ T8519] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 204.123066][ T8519] R13: 00007fb7bb626038 R14: 00007fb7bb625fa0 R15: 00007ffed9e45658 [ 204.123087][ T8519] [ 204.405869][ T9] gpiochip_add_data_with_key: GPIOs 0..-1 (usb_ljca.ljca-gpio.0) failed to register, -22 [ 204.415839][ T9] gpio_ljca usb_ljca.ljca-gpio.0: probe with driver gpio_ljca failed with error -22 [ 204.504936][ T5717] usb 3-1: new high-speed USB device number 10 using dummy_hcd [ 204.616042][ T30] audit: type=1400 audit(1700000064.289:506): avc: denied { create } for pid=8526 comm="syz.4.807" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 204.772479][ T5717] usb 3-1: New USB device found, idVendor=1660, idProduct=0932, bcdDevice= 1.00 [ 204.773388][ T5717] usb 3-1: config 1 interface 0 altsetting 1 endpoint 0x82 has invalid wMaxPacketSize 0 [ 204.775312][ T5717] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 204.775337][ T5717] usb 3-1: Product: syz [ 204.775569][ T5717] usb 3-1: Manufacturer: syz [ 204.775588][ T5717] usb 3-1: SerialNumber: syz [ 204.784751][ T5717] dvb-usb: found a 'Medion MD95700 (MDUSBTV-HYBRID)' in warm state. [ 204.784794][ T5717] usb 3-1: setting power ON [ 204.907983][ T8529] ubi: mtd0 is already attached to ubi0 [ 205.069315][ C0] ljca 4-1:1.0: cmd ack mismatch error [ 205.174206][ T5717] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 205.174795][ T5717] dvbdev: DVB: registering new adapter (Medion MD95700 (MDUSBTV-HYBRID)) [ 205.175133][ T5717] usb 3-1: media controller created [ 205.184055][ T5717] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 205.193707][ T5717] usb 3-1: selecting invalid altsetting 6 [ 205.193725][ T5717] usb 3-1: digital interface selection failed (-22) [ 205.193737][ T5717] dvb-usb: no frontend was attached by 'Medion MD95700 (MDUSBTV-HYBRID)' [ 205.194319][ T5717] usb 3-1: setting power OFF [ 205.194586][ T5717] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully initialized and connected. [ 205.194597][ T5717] (NULL device *): no iso interface [ 205.218557][ T5717] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully deinitialized and disconnected. [ 205.249232][ T5717] usb 3-1: USB disconnect, device number 10 [ 205.338347][ T31] usb 2-1: USB disconnect, device number 15 [ 205.382807][ T5733] usb 4-1: USB disconnect, device number 22 [ 205.417759][ T8531] netlink: 24 bytes leftover after parsing attributes in process `syz.1.808'. [ 205.427968][ T30] audit: type=1400 audit(1700000065.099:507): avc: denied { create } for pid=8530 comm="syz.1.808" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 205.428004][ T30] audit: type=1400 audit(1700000065.099:508): avc: denied { getopt } for pid=8530 comm="syz.1.808" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 205.763174][ T31] usb 2-1: new high-speed USB device number 16 using dummy_hcd [ 205.888816][ T8542] Cannot find set identified by id 0 to match [ 206.042125][ T31] usb 2-1: Using ep0 maxpacket: 16 [ 206.073315][ T31] usb 2-1: New USB device found, idVendor=0830, idProduct=0088, bcdDevice=5c.a8 [ 206.083689][ T31] usb 2-1: config 3 has an invalid interface number: 88 but max is 0 [ 206.092414][ T7396] dlm: dlm1: dlm_recover 597075055147962903 [ 206.092452][ T7396] dlm: dlm1: dlm_clear_inactive 1 done [ 206.092483][ T7396] dlm: dlm1: dlm_recover_members 1 nodes [ 206.092508][ T7396] dlm: dlm1: generation 15 slots 1 1:1 [ 206.092523][ T7396] dlm: dlm1: dlm_recover_directory [ 206.092559][ T7396] dlm: dlm1: dlm_recover_directory 0 in 0 new [ 206.092605][ T7396] dlm: dlm1: dlm_recover 597075055147962903 generation 15 done: 0 ms [ 206.134470][ T8550] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 206.167076][ T30] audit: type=1400 audit(1700000065.839:509): avc: denied { watch } for pid=8543 comm="syz.4.814" path="/183/net_prio.prioidx" dev="tmpfs" ino=1141 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 206.167259][ T30] audit: type=1400 audit(1700000065.839:510): avc: denied { watch_sb watch_reads } for pid=8543 comm="syz.4.814" path="/183/net_prio.prioidx" dev="tmpfs" ino=1141 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 206.219065][ T7816] md_update_sb: can't update sb for read-only array md0 [ 206.242181][ T7816] md_update_sb: can't update sb for read-only array md0 [ 206.297785][ T8550] md: could not open device unknown-block(1,0). [ 206.298716][ T7816] md_update_sb: can't update sb for read-only array md0 [ 206.337223][ T8550] md: could not open device unknown-block(1,1). [ 206.338131][ T7816] md_update_sb: can't update sb for read-only array md0 [ 206.420922][ T7816] md_update_sb: can't update sb for read-only array md0 [ 206.449171][ T31] usb 2-1: config 3 has no interface number 0 [ 206.449213][ T31] usb 2-1: config 3 interface 88 has no altsetting 0 [ 206.462643][ T7816] md_update_sb: can't update sb for read-only array md0 [ 206.615126][ T31] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 206.615165][ T31] usb 2-1: Product: syz [ 206.615191][ T31] usb 2-1: Manufacturer: syz [ 206.615226][ T31] usb 2-1: SerialNumber: syz [ 207.152051][ T8557] netlink: 56 bytes leftover after parsing attributes in process `syz.1.808'. [ 207.153579][ T8557] netlink: 16 bytes leftover after parsing attributes in process `syz.1.808'. [ 208.045819][ T30] audit: type=1400 audit(1700000067.309:511): avc: denied { mount } for pid=8558 comm="syz.4.819" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 208.536215][ T31] usb 2-1: USB disconnect, device number 16 [ 208.552457][ T5717] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 208.671840][ T30] audit: type=1400 audit(1700000068.319:512): avc: denied { create } for pid=8581 comm="syz.2.825" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 208.671902][ T30] audit: type=1400 audit(1700000068.319:513): avc: denied { setopt } for pid=8581 comm="syz.2.825" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 209.730891][ T5690] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 209.828741][ T8591] dlm: dlm1: start ignored: lockspace running [ 209.866236][ T8594] dlm: dlm user daemon not available [ 209.987690][ T8596] dlm: dlm1: start ignored: lockspace running [ 210.006006][ T8601] dlm: dlm1: start ignored: lockspace running [ 210.016522][ T8603] dlm: dlm1: start ignored: lockspace running [ 210.025219][ T8608] CIFS: Attempting to mount //127.0.0.1/share [ 210.122506][ T8608] CIFS: VFS: decode_ntlmssp_challenge: requested signing/encryption but server did not return either 56-bit or 128-bit session key size [ 210.122587][ T8608] CIFS: VFS: \\127.0.0.1 failed to create a new SMB session with Unknown: -22 [ 210.122793][ T8608] CIFS: VFS: cifs_mount failed w/return code = -22 [ 210.123349][ T8611] dlm: dlm1: start ignored: lockspace running [ 210.187436][ T30] audit: type=1400 audit(1700000069.869:514): avc: denied { setopt } for pid=8614 comm="syz.2.833" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 210.207034][ T30] audit: type=1400 audit(1700000069.869:515): avc: denied { bind } for pid=8614 comm="syz.2.833" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 210.207078][ T30] audit: type=1400 audit(1700000069.869:516): avc: denied { name_bind } for pid=8614 comm="syz.2.833" src=20004 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=sctp_socket permissive=1 [ 210.207115][ T30] audit: type=1400 audit(1700000069.869:517): avc: denied { node_bind } for pid=8614 comm="syz.2.833" saddr=fe80::aa src=20004 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=sctp_socket permissive=1 [ 210.396919][ T30] audit: type=1400 audit(1700000070.069:518): avc: denied { ioctl } for pid=8614 comm="syz.2.833" path="socket:[16846]" dev="sockfs" ino=16846 ioctlcmd=0x6721 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 210.472117][ T30] audit: type=1400 audit(1700000070.159:519): avc: denied { setopt } for pid=8614 comm="syz.2.833" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 210.499488][ T30] audit: type=1400 audit(1700000070.179:520): avc: denied { mounton } for pid=8614 comm="syz.2.833" path="/170/sys" dev="tmpfs" ino=1070 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 210.529836][ T8617] ceph: No mds server is up or the cluster is laggy [ 210.544494][ T5697] libceph: connect (1)[c::]:6789 error -101 [ 210.556445][ T5697] libceph: mon0 (1)[c::]:6789 connect error [ 210.664561][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 210.776850][ T8600] dlm: dlm1: no userland control daemon, stopping lockspace [ 210.811733][ T8600] dlm: dlm user daemon left 1 lockspaces [ 211.195583][ T5697] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 211.751676][ T8622] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 211.792828][ T8622] md: could not open device unknown-block(1,0). [ 211.792960][ T7816] md_update_sb: can't update sb for read-only array md0 [ 211.797701][ T7816] md_update_sb: can't update sb for read-only array md0 [ 211.897594][ T8627] syzkaller0: entered promiscuous mode [ 211.903385][ T8627] syzkaller0: entered allmulticast mode [ 211.973028][ T8630] CIFS: Attempting to mount //127.0.0.1/share [ 212.302173][ T31] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 212.304731][ T8630] CIFS: VFS: decode_ntlmssp_challenge: requested signing/encryption but server did not return either 56-bit or 128-bit session key size [ 212.304794][ T8630] CIFS: VFS: \\127.0.0.1 failed to create a new SMB session with Unknown: -22 [ 212.304865][ T8630] CIFS: VFS: cifs_mount failed w/return code = -22 [ 212.430491][ T8640] ptrace attach of "ci-upstream-kasan-gce-selinux-root/syz-executor exec"[5600] was attempted by "ci-upstream-kasan-gce-selinux-root/syz-executor exec"[8640] [ 212.462857][ T1151] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 213.189690][ T8654] CIFS: Attempting to mount //127.0.0.1/share [ 213.190544][ T8654] CIFS: VFS: Error connecting to socket. Aborting operation. [ 213.190572][ T8654] CIFS: VFS: cifs_mount failed w/return code = -111 [ 213.244468][ T30] kauditd_printk_skb: 43 callbacks suppressed [ 213.244500][ T30] audit: type=1400 audit(1700000072.929:564): avc: denied { write } for pid=8655 comm="syz.1.845" name="event2" dev="devtmpfs" ino=922 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 213.273937][ T30] audit: type=1400 audit(1700000072.949:565): avc: denied { open } for pid=8655 comm="syz.1.845" path="/dev/input/event2" dev="devtmpfs" ino=922 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 213.343881][ T31] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 213.366295][ T30] audit: type=1400 audit(1700000073.049:566): avc: denied { ioctl } for pid=8655 comm="syz.1.845" path="/dev/input/event2" dev="devtmpfs" ino=922 ioctlcmd=0x4593 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 213.431222][ T30] audit: type=1400 audit(1700000073.109:567): avc: denied { create } for pid=8660 comm="syz.0.847" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 213.437545][ T30] audit: type=1400 audit(1700000073.119:568): avc: denied { mount } for pid=8658 comm="syz.2.846" name="/" dev="configfs" ino=1056 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=filesystem permissive=1 [ 213.479197][ T30] audit: type=1400 audit(1700000073.159:569): avc: denied { connect } for pid=8660 comm="syz.0.847" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 213.502063][ T30] audit: type=1400 audit(1700000073.179:570): avc: denied { search } for pid=8658 comm="syz.2.846" name="/" dev="configfs" ino=1056 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 213.528929][ T30] audit: type=1400 audit(1700000073.209:571): avc: denied { ioctl } for pid=8660 comm="syz.0.847" path="socket:[16033]" dev="sockfs" ino=16033 ioctlcmd=0x7437 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 213.536822][ T30] audit: type=1400 audit(1700000073.219:572): avc: denied { search } for pid=8658 comm="syz.2.846" name="/" dev="configfs" ino=1056 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 213.536861][ T30] audit: type=1400 audit(1700000073.219:573): avc: denied { search } for pid=8658 comm="syz.2.846" name="dlm" dev="configfs" ino=1134 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 213.652333][ T7396] dlm: dlm1: dlm_recover 597075055147962905 [ 213.658501][ T7396] dlm: dlm1: dlm_clear_inactive 1 done [ 213.665239][ T7396] dlm: dlm1: dlm_recover_members 1 nodes [ 213.672119][ T7396] dlm: dlm1: generation 16 slots 1 1:1 [ 213.678870][ T7396] dlm: dlm1: dlm_recover_directory [ 213.678891][ T7396] dlm: dlm1: dlm_recover_directory 0 in 0 new [ 213.679913][ T7396] dlm: dlm1: dlm_recover 597075055147962905 generation 16 done: 0 ms [ 213.744580][ T5704] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 213.744751][ T5704] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 213.803458][ T8662] netlink: 'syz.0.847': attribute type 4 has an invalid length. [ 213.864479][ T8662] netlink: 'syz.0.847': attribute type 4 has an invalid length. [ 214.055901][ T8675] dlm: dlm1: start ignored: lockspace running [ 214.647053][ T5733] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 214.659917][ T1169] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 214.722489][ T8683] dlm: dlm1: start ignored: lockspace running [ 214.730327][ T31] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 215.297556][ T8674] dlm: dlm1: no userland control daemon, stopping lockspace [ 215.313804][ T8674] dlm: dlm user daemon left 1 lockspaces [ 215.752121][ T5690] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 216.161807][ T5704] usb 1-1: new high-speed USB device number 26 using dummy_hcd [ 216.781901][ T5783] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 216.807074][ T5717] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 216.842244][ T5704] usb 1-1: New USB device found, idVendor=0a5c, idProduct=2033, bcdDevice=c8.51 [ 216.852939][ T5704] usb 1-1: config 2 has an invalid interface number: 48 but max is 0 [ 216.861530][ T5704] usb 1-1: config 2 has no interface number 0 [ 216.868819][ T5704] usb 1-1: too many endpoints for config 2 interface 48 altsetting 120: 48, using maximum allowed: 30 [ 216.880721][ T5704] usb 1-1: config 2 interface 48 altsetting 120 has 0 endpoint descriptors, different from the interface descriptor's value: 48 [ 216.880742][ T5704] usb 1-1: config 2 interface 48 has no altsetting 0 [ 216.903207][ T8704] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 216.915643][ T5704] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 216.923805][ T5704] usb 1-1: Product: syz [ 216.923825][ T5704] usb 1-1: Manufacturer: syz [ 216.923839][ T5704] usb 1-1: SerialNumber: syz [ 217.026874][ T8707] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 217.448105][ T8727] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 217.448591][ T8727] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 217.790306][ T8732] Bluetooth: MGMT ver 1.23 [ 217.989457][ T8736] LUN: removable file: (no medium) [ 218.061742][ T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!! [ 218.065293][ T8728] FAULT_INJECTION: forcing a failure. [ 218.065293][ T8728] name fail_futex, interval 1, probability 0, space 0, times 1 [ 218.065372][ T8728] CPU: 0 UID: 0 PID: 8728 Comm: syz.1.864 Not tainted syzkaller #0 PREEMPT(full) [ 218.065395][ T8728] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/05/2026 [ 218.065404][ T8728] Call Trace: [ 218.065410][ T8728] [ 218.065418][ T8728] dump_stack_lvl+0x100/0x190 [ 218.065448][ T8728] should_fail_ex.cold+0x5/0xa [ 218.065478][ T8728] get_futex_key+0x1d0/0x14f0 [ 218.065505][ T8728] ? __pfx_get_futex_key+0x10/0x10 [ 218.065530][ T8728] ? __lock_acquire+0x4c5/0x1ec0 [ 218.065548][ T8728] ? _parse_integer_limit+0x1ac/0x220 [ 218.065573][ T8728] futex_wait_setup+0x91/0x540 [ 218.065606][ T8728] __futex_wait+0x19f/0x300 [ 218.065634][ T8728] ? __pfx___futex_wait+0x10/0x10 [ 218.065659][ T8728] ? futex_hash+0x311/0x400 [ 218.065682][ T8728] ? __pfx_futex_wake_mark+0x10/0x10 [ 218.065710][ T8728] ? __pfx_futex_hash+0x10/0x10 [ 218.065730][ T8728] ? get_pid_task+0xfc/0x250 [ 218.065752][ T8728] ? get_pid_task+0xfc/0x250 [ 218.065777][ T8728] futex_wait+0xe6/0x370 [ 218.065804][ T8728] ? __pfx_futex_wait+0x10/0x10 [ 218.065827][ T8728] ? find_held_lock+0x2b/0x80 [ 218.065856][ T8728] ? rcu_read_lock_any_held+0x6a/0x90 [ 218.065880][ T8728] ? find_held_lock+0x2b/0x80 [ 218.065902][ T8728] ? ksys_write+0x190/0x250 [ 218.065918][ T8728] ? ksys_write+0x190/0x250 [ 218.065936][ T8728] do_futex+0x265/0x440 [ 218.065960][ T8728] ? __pfx_do_futex+0x10/0x10 [ 218.065983][ T8728] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 218.066008][ T8728] __x64_sys_futex+0x34f/0x4d0 [ 218.066033][ T8728] ? fput+0x7c/0x100 [ 218.066052][ T8728] ? __pfx___x64_sys_futex+0x10/0x10 [ 218.066075][ T8728] ? ksys_write+0x1ac/0x250 [ 218.066090][ T8728] ? __pfx_ksys_write+0x10/0x10 [ 218.066113][ T8728] do_syscall_64+0x123/0x790 [ 218.066136][ T8728] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 218.066155][ T8728] RIP: 0033:0x7fb2eb39e159 [ 218.066170][ T8728] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 218.066188][ T8728] RSP: 002b:00007fb2ec1dc0e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 218.066207][ T8728] RAX: ffffffffffffffda RBX: 00007fb2eb626188 RCX: 00007fb2eb39e159 [ 218.066219][ T8728] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007fb2eb626188 [ 218.066235][ T8728] RBP: 00007fb2eb626180 R08: 0000000000000000 R09: 0000000000000000 [ 218.066246][ T8728] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 218.066256][ T8728] R13: 00007fb2eb626218 R14: 00007ffd7a6f00f0 R15: 00007ffd7a6f01d8 [ 218.066279][ T8728] [ 218.878706][ T5704] usb 1-1: USB disconnect, device number 26 [ 219.846136][ T31] net_ratelimit: 12 callbacks suppressed [ 219.847579][ T31] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 220.357824][ T3710] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 220.367770][ T5783] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 220.572625][ T8745] CIFS: Attempting to mount //127.0.0.1/share [ 220.654454][ T30] kauditd_printk_skb: 62 callbacks suppressed [ 220.654513][ T30] audit: type=1400 audit(1700000080.339:636): avc: denied { mount } for pid=8747 comm="syz.2.872" name="/" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=filesystem permissive=1 [ 220.655082][ T8746] CIFS: VFS: \\127.0.0.1 SMB response too long (65536 bytes) [ 220.657031][ T8745] CIFS: VFS: cifs_mount failed w/return code = -112 [ 220.862102][ T5690] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 221.629523][ T30] audit: type=1400 audit(1700000081.309:637): avc: denied { unmount } for pid=5610 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=filesystem permissive=1 [ 221.713005][ T8757] CIFS: Attempting to mount //127.0.0.1/share [ 221.713442][ T8757] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 221.713667][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 221.713808][ T8757] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 221.719467][ T8757] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 221.719641][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 221.768452][ T8761] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 221.779948][ T8758] CIFS: VFS: \\127.0.0.1 SMB response too long (65536 bytes) [ 221.781218][ T8757] CIFS: VFS: cifs_mount failed w/return code = -112 [ 221.909810][ T8763] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 221.962003][ T7816] md_update_sb: can't update sb for read-only array md0 [ 222.002014][ T7816] md_update_sb: can't update sb for read-only array md0 [ 222.040225][ T30] audit: type=1400 audit(1700000081.719:638): avc: denied { unmount } for pid=5609 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 222.046943][ T8763] md: could not open device unknown-block(1,0). [ 222.047103][ T7816] md_update_sb: can't update sb for read-only array md0 [ 222.112012][ T8763] md: could not open device unknown-block(1,1). [ 222.112371][ T7816] md_update_sb: can't update sb for read-only array md0 [ 222.182329][ T8763] md_update_sb: can't update sb for read-only array md0 [ 222.190855][ T7816] md_update_sb: can't update sb for read-only array md0 [ 222.213796][ T7816] md_update_sb: can't update sb for read-only array md0 [ 222.249265][ T8770] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 222.292874][ T8770] md: could not open device unknown-block(1,0). [ 222.299689][ T7816] md_update_sb: can't update sb for read-only array md0 [ 222.315052][ T7816] md_update_sb: can't update sb for read-only array md0 [ 222.725080][ T8778] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 222.753174][ T8779] CIFS: Attempting to mount //127.0.0.1/share [ 222.803001][ T7816] md_update_sb: can't update sb for read-only array md0 [ 222.853902][ T8778] md: could not open device unknown-block(1,0). [ 222.863315][ T7396] dlm: dlm1: dlm_recover 597075055147962907 [ 222.864892][ T7396] dlm: dlm1: dlm_clear_inactive 1 done [ 222.864977][ T7396] dlm: dlm1: dlm_recover_members 1 nodes [ 222.865018][ T7396] dlm: dlm1: generation 17 slots 1 1:1 [ 222.894638][ T7396] dlm: dlm1: dlm_recover_directory [ 222.894705][ T7396] dlm: dlm1: dlm_recover_directory 0 in 0 new [ 222.894801][ T7396] dlm: dlm1: dlm_recover 597075055147962907 generation 17 done: 0 ms [ 222.951986][ T8778] md: could not open device unknown-block(1,1). [ 223.557262][ T8779] CIFS: VFS: \\127.0.0.1 failed to create a new SMB session with Unknown: -11 [ 223.557973][ T8779] CIFS: VFS: cifs_mount failed w/return code = -11 [ 223.582738][ T8780] dlm: dlm1: no userland control daemon, stopping lockspace [ 223.587335][ T8780] dlm: dlm user daemon left 1 lockspaces [ 223.790761][ T8803] CIFS: Attempting to mount //127.0.0.1/share [ 223.791572][ T8803] CIFS: VFS: Error connecting to socket. Aborting operation. [ 223.791607][ T8803] CIFS: VFS: cifs_mount failed w/return code = -111 [ 223.802471][ T8804] CIFS: Attempting to mount //127.0.0.1/share [ 223.803235][ T8804] CIFS: VFS: Error connecting to socket. Aborting operation. [ 223.803264][ T8804] CIFS: VFS: cifs_mount failed w/return code = -111 [ 224.103387][ T5704] libceph: connect (1)[c::]:6789 error -101 [ 224.109041][ T5704] libceph: mon0 (1)[c::]:6789 connect error [ 224.169587][ T30] audit: type=1400 audit(1700000083.809:639): avc: denied { read write } for pid=5601 comm="syz-executor" name="loop0" dev="devtmpfs" ino=645 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 224.169700][ T30] audit: type=1400 audit(1700000083.809:640): avc: denied { open } for pid=5601 comm="syz-executor" path="/dev/loop0" dev="devtmpfs" ino=645 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 224.169773][ T30] audit: type=1400 audit(1700000083.809:641): avc: denied { ioctl } for pid=5601 comm="syz-executor" path="/dev/loop0" dev="devtmpfs" ino=645 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 224.201628][ T8812] ceph: No mds server is up or the cluster is laggy [ 224.242773][ T30] audit: type=1400 audit(1700000083.889:642): avc: denied { setopt } for pid=8805 comm="syz.3.890" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 224.242885][ T30] audit: type=1400 audit(1700000083.889:643): avc: denied { mounton } for pid=8805 comm="syz.3.890" path="/173/sys" dev="tmpfs" ino=1091 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 224.242942][ T30] audit: type=1400 audit(1700000083.899:644): avc: denied { mount } for pid=8805 comm="syz.3.890" name="/" dev="sysfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=filesystem permissive=1 [ 224.248506][ T30] audit: type=1400 audit(1700000083.929:645): avc: denied { mount } for pid=8815 comm="syz.1.892" name="/" dev="devtmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=filesystem permissive=1 [ 224.765379][ T8818] CIFS: Attempting to mount //127.0.0.1/share [ 225.008152][ T8825] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 225.022528][ T5690] net_ratelimit: 17 callbacks suppressed [ 225.022586][ T5690] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 225.056305][ T8826] input: syz0 as /devices/virtual/input/input7 [ 225.075719][ T8825] md: could not open device unknown-block(1,0). [ 225.174768][ T7396] dlm: dlm1: dlm_recover 597075055147962909 [ 225.180854][ T7396] dlm: dlm1: dlm_recover_members 1 nodes [ 225.189316][ T7396] dlm: dlm1: generation 18 slots 1 1:1 [ 225.195243][ T7396] dlm: dlm1: dlm_recover_directory [ 225.200455][ T7396] dlm: dlm1: dlm_recover_directory 0 in 0 new [ 225.206876][ T7396] dlm: dlm1: dlm_recover 597075055147962909 generation 18 done: 10 ms [ 225.248630][ T8837] dlm: dlm1: start ignored: lockspace running [ 225.465294][ T8818] CIFS: VFS: \\127.0.0.1 failed to create a new SMB session with Unknown: -11 [ 225.465458][ T8818] CIFS: VFS: cifs_mount failed w/return code = -11 [ 225.496559][ T8835] CIFS: Attempting to mount //127.0.0.1/share [ 225.520896][ T8835] CIFS: VFS: Error connecting to socket. Aborting operation. [ 225.520932][ T8835] CIFS: VFS: cifs_mount failed w/return code = -111 [ 225.900820][ T30] kauditd_printk_skb: 51 callbacks suppressed [ 225.900856][ T30] audit: type=1400 audit(1700000085.349:697): avc: denied { write } for pid=8844 comm="syz.1.902" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 225.910302][ T45] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 226.062190][ T31] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 226.075508][ T1151] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 226.118850][ T30] audit: type=1400 audit(1700000085.799:698): avc: denied { create } for pid=8856 comm="syz.3.906" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 226.120088][ T30] audit: type=1400 audit(1700000085.799:699): avc: denied { bind } for pid=8856 comm="syz.3.906" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 226.120140][ T30] audit: type=1400 audit(1700000085.799:700): avc: denied { name_bind } for pid=8856 comm="syz.3.906" src=20004 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=sctp_socket permissive=1 [ 226.120170][ T30] audit: type=1400 audit(1700000085.799:701): avc: denied { node_bind } for pid=8856 comm="syz.3.906" saddr=fe80::aa src=20004 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=sctp_socket permissive=1 [ 226.186958][ T30] audit: type=1400 audit(1700000085.869:702): avc: denied { unmount } for pid=5608 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=filesystem permissive=1 [ 226.379345][ T8859] CIFS: Attempting to mount //127.0.0.1/share [ 226.462027][ T5783] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 226.617192][ T30] audit: type=1400 audit(1700000086.219:703): avc: denied { ioctl } for pid=8856 comm="syz.3.906" path="socket:[17372]" dev="sockfs" ino=17372 ioctlcmd=0x6721 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 226.665398][ T8859] CIFS: VFS: Error connecting to socket. Aborting operation. [ 226.665438][ T8859] CIFS: VFS: cifs_mount failed w/return code = -111 [ 226.684369][ T30] audit: type=1400 audit(1700000086.369:704): avc: denied { create } for pid=8866 comm="syz.4.907" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 226.685999][ T8867] netlink: 20 bytes leftover after parsing attributes in process `syz.4.907'. [ 226.705279][ T30] audit: type=1400 audit(1700000086.369:705): avc: denied { write } for pid=8866 comm="syz.4.907" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 226.705339][ T30] audit: type=1400 audit(1700000086.369:706): avc: denied { read write } for pid=8866 comm="syz.4.907" name="rdma_cm" dev="devtmpfs" ino=1269 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:infiniband_device_t tclass=chr_file permissive=1 [ 227.057282][ T5717] libceph: connect (1)[c::]:6789 error -101 [ 227.087598][ T5717] libceph: mon0 (1)[c::]:6789 connect error [ 227.089858][ T8862] ceph: No mds server is up or the cluster is laggy [ 227.242984][ T5717] libceph: connect (1)[c::]:6789 error -101 [ 227.299646][ T5717] libceph: mon0 (1)[c::]:6789 connect error [ 227.324078][ T5690] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 227.772865][ T5697] libceph: connect (1)[c::]:6789 error -101 [ 228.105106][ T5697] libceph: mon0 (1)[c::]:6789 connect error [ 228.392768][ T985] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 228.792240][ T5697] usb 1-1: new high-speed USB device number 27 using dummy_hcd [ 229.065887][ T59] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 229.080503][ T8884] CIFS: Attempting to mount //127.0.0.1/share [ 229.088748][ T8884] CIFS: VFS: Error connecting to socket. Aborting operation. [ 229.090930][ T8884] CIFS: VFS: cifs_mount failed w/return code = -111 [ 229.092835][ T5697] usb 1-1: New USB device found, idVendor=8086, idProduct=0b63, bcdDevice= 0.00 [ 229.094068][ T5697] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 229.153835][ T8889] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 229.202418][ T7816] md_update_sb: 8 callbacks suppressed [ 229.202868][ T7816] md_update_sb: can't update sb for read-only array md0 [ 229.231836][ T7816] md_update_sb: can't update sb for read-only array md0 [ 229.271894][ T8889] md: could not open device unknown-block(1,0). [ 229.273118][ T7816] md_update_sb: can't update sb for read-only array md0 [ 229.285988][ T5704] usb 4-1: new high-speed USB device number 23 using dummy_hcd [ 229.311940][ T8889] md: could not open device unknown-block(1,1). [ 229.313234][ T7816] md_update_sb: can't update sb for read-only array md0 [ 229.362304][ T8889] md_update_sb: can't update sb for read-only array md0 [ 229.362395][ T7816] md_update_sb: can't update sb for read-only array md0 [ 229.378910][ T7816] md_update_sb: can't update sb for read-only array md0 [ 229.421957][ T7816] md_update_sb: can't update sb for read-only array md0 [ 229.444014][ T5704] usb 4-1: New USB device found, idVendor=1660, idProduct=0932, bcdDevice= 1.00 [ 229.454529][ T5704] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 229.454579][ T5704] usb 4-1: Duplicate descriptor for config 1 interface 0 altsetting 0, skipping [ 229.504021][ T5733] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 229.530021][ T5704] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 229.531917][ T31] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 229.557221][ T5704] usb 4-1: Product: syz [ 229.557264][ T5704] usb 4-1: Manufacturer: syz [ 229.557280][ T5704] usb 4-1: SerialNumber: syz [ 229.598828][ T5704] dvb-usb: found a 'Medion MD95700 (MDUSBTV-HYBRID)' in warm state. [ 229.598880][ T5704] usb 4-1: setting power ON [ 229.654902][ T8892] overlayfs: upper fs does not support file handles, falling back to index=off. [ 229.654977][ T8892] overlayfs: fs on '.' does not support file handles, falling back to xino=off. [ 229.826671][ T5704] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 229.837823][ T5704] dvbdev: DVB: registering new adapter (Medion MD95700 (MDUSBTV-HYBRID)) [ 229.837867][ T5704] usb 4-1: media controller created [ 229.870147][ T5704] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 229.906332][ T5704] usb 4-1: selecting invalid altsetting 6 [ 229.914119][ T5704] usb 4-1: digital interface selection failed (-22) [ 229.914157][ T5704] dvb-usb: no frontend was attached by 'Medion MD95700 (MDUSBTV-HYBRID)' [ 229.931976][ T5697] ljca 1-1:1.0: enumerate GPIO error [ 229.932275][ T5697] ljca 1-1:1.0: probe with driver ljca failed with error -110 [ 229.945334][ T5704] usb 4-1: setting power OFF [ 229.950172][ T5704] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully initialized and connected. [ 229.950189][ T5704] (NULL device *): no alternate interface [ 229.996475][ T5704] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully deinitialized and disconnected. [ 230.011038][ T8901] ubi0 error: ubi_cdev_ioctl: bad volume creation request [ 230.011099][ T8901] Volume creation request dump: [ 230.011105][ T8901] vol_id 0 [ 230.011111][ T8901] alignment 0 [ 230.011117][ T8901] bytes 0 [ 230.011136][ T8901] vol_type 0 [ 230.011142][ T8901] name_len 0 [ 230.011147][ T8901] 1st 16 characters of name: [ 230.968856][ T8915] CIFS: Attempting to mount //127.0.0.1/share [ 231.030199][ T5697] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 231.073911][ T8916] CIFS: VFS: \\127.0.0.1 RFC 1002 unknown response type 0x1 [ 231.089146][ T8915] CIFS: VFS: tioffset + tilen too high 65538 + 0 [ 231.089230][ T8915] CIFS: VFS: \\127.0.0.1 failed to create a new SMB session with Unknown: -22 [ 231.089320][ T8915] CIFS: VFS: cifs_mount failed w/return code = -22 [ 231.183258][ T8920] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 231.222546][ T8920] md: could not open device unknown-block(1,0). [ 231.228935][ T7816] md_update_sb: can't update sb for read-only array md0 [ 231.236135][ T7816] md_update_sb: can't update sb for read-only array md0 [ 231.255376][ T8923] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 231.274979][ T30] kauditd_printk_skb: 34 callbacks suppressed [ 231.281476][ T30] audit: type=1400 audit(1700000090.959:741): avc: denied { mount } for pid=8922 comm="syz.1.926" name="/" dev="configfs" ino=1056 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=filesystem permissive=1 [ 231.305896][ T30] audit: type=1400 audit(1700000090.959:742): avc: denied { search } for pid=8922 comm="syz.1.926" name="/" dev="configfs" ino=1056 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 231.305934][ T30] audit: type=1400 audit(1700000090.959:743): avc: denied { search } for pid=8922 comm="syz.1.926" name="/" dev="configfs" ino=1056 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 231.305967][ T30] audit: type=1400 audit(1700000090.959:744): avc: denied { search } for pid=8922 comm="syz.1.926" name="dlm" dev="configfs" ino=1134 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 231.306001][ T30] audit: type=1400 audit(1700000090.959:745): avc: denied { search } for pid=8922 comm="syz.1.926" name="/" dev="configfs" ino=1056 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 231.306053][ T30] audit: type=1400 audit(1700000090.959:746): avc: denied { search } for pid=8922 comm="syz.1.926" name="dlm" dev="configfs" ino=1134 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 231.306087][ T30] audit: type=1400 audit(1700000090.959:747): avc: denied { search } for pid=8922 comm="syz.1.926" name="cluster" dev="configfs" ino=9227 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 231.306121][ T30] audit: type=1400 audit(1700000090.959:748): avc: denied { search } for pid=8922 comm="syz.1.926" name="/" dev="configfs" ino=1056 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 231.306155][ T30] audit: type=1400 audit(1700000090.959:749): avc: denied { search } for pid=8922 comm="syz.1.926" name="dlm" dev="configfs" ino=1134 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 231.306189][ T30] audit: type=1400 audit(1700000090.959:750): avc: denied { search } for pid=8922 comm="syz.1.926" name="cluster" dev="configfs" ino=9227 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 231.370786][ T8924] dlm: dlm1: start ignored: lockspace running [ 231.428556][ T8929] dlm: dlm1: start ignored: lockspace running [ 231.472633][ T8923] md: could not open device unknown-block(1,0). [ 231.542150][ T8926] md: could not open device unknown-block(1,1). [ 231.574195][ T8928] input: syz0 as /devices/virtual/input/input8 [ 231.663983][ T3710] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 231.673874][ T994] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 231.717727][ T8934] ubi0 error: ubi_cdev_ioctl: bad volume creation request [ 231.725035][ T8934] Volume creation request dump: [ 231.725047][ T8934] vol_id 0 [ 231.725054][ T8934] alignment 0 [ 231.725060][ T8934] bytes 0 [ 231.725067][ T8934] vol_type 0 [ 231.725073][ T8934] name_len 0 [ 231.725080][ T8934] 1st 16 characters of name: [ 231.867057][ T8937] ubi0 error: ubi_cdev_ioctl: bad volume creation request [ 231.867115][ T8937] Volume creation request dump: [ 231.867140][ T8937] vol_id 0 [ 231.867148][ T8937] alignment 0 [ 231.867167][ T8937] bytes 0 [ 231.867174][ T8937] vol_type 0 [ 231.867182][ T8937] name_len 0 [ 231.867201][ T8937] 1st 16 characters of name: [ 231.905155][ T8938] tmpfs: Bad value for 'mpol' [ 232.009230][ T8942] CIFS: Attempting to mount //127.0.0.1/share [ 232.102584][ T5697] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 232.132585][ T5704] usb 4-1: USB disconnect, device number 23 [ 232.133698][ T5783] usb 1-1: USB disconnect, device number 27 [ 232.503856][ T8942] CIFS: VFS: decode_ntlmssp_challenge: requested signing/encryption but server did not return either 56-bit or 128-bit session key size [ 232.503929][ T8942] CIFS: VFS: \\127.0.0.1 failed to create a new SMB session with Unknown: -22 [ 232.504022][ T8942] CIFS: VFS: cifs_mount failed w/return code = -22 [ 232.557844][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 232.715840][ T8952] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 233.484916][ T8952] md: could not open device unknown-block(1,0). [ 233.631190][ T8964] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 233.678375][ T5690] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 233.687726][ T5704] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 233.793557][ T8964] md: could not open device unknown-block(1,0). [ 234.241038][ T7816] md_update_sb: 15 callbacks suppressed [ 234.241087][ T7816] md_update_sb: can't update sb for read-only array md0 [ 234.498876][ T8975] ubi0 error: ubi_cdev_ioctl: bad volume creation request [ 234.506699][ T8975] Volume creation request dump: [ 234.512647][ T8975] vol_id 0 [ 234.518526][ T8975] alignment 0 [ 234.522681][ T8975] bytes 0 [ 234.526844][ T8975] vol_type 0 [ 234.531224][ T8975] name_len 0 [ 234.546235][ T8975] 1st 16 characters of name: [ 234.713982][ T5697] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 234.819924][ T8977] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 234.864522][ T1417] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 234.907935][ T7816] md_update_sb: can't update sb for read-only array md0 [ 234.925026][ T7816] md_update_sb: can't update sb for read-only array md0 [ 234.931499][ T8982] ubi0 error: ubi_cdev_ioctl: bad volume creation request [ 234.931560][ T8982] Volume creation request dump: [ 234.931566][ T8982] vol_id 0 [ 234.931572][ T8982] alignment 0 [ 234.931591][ T8982] bytes 0 [ 234.931598][ T8982] vol_type 0 [ 234.931604][ T8982] name_len 0 [ 234.931609][ T8982] 1st 16 characters of name: [ 234.990008][ T8977] md: could not open device unknown-block(1,0). [ 234.990894][ T7816] md_update_sb: can't update sb for read-only array md0 [ 235.029116][ T8988] CIFS: Attempting to mount //127.0.0.1/share [ 235.096586][ T8977] md: could not open device unknown-block(1,1). [ 235.103336][ T7816] md_update_sb: can't update sb for read-only array md0 [ 235.126999][ T8992] netlink: 20 bytes leftover after parsing attributes in process `syz.1.947'. [ 235.145185][ T8980] md_update_sb: can't update sb for read-only array md0 [ 235.153597][ T7816] md_update_sb: can't update sb for read-only array md0 [ 235.165888][ T7816] md_update_sb: can't update sb for read-only array md0 [ 235.174013][ T8989] CIFS: VFS: \\127.0.0.1 SMB response too short (2 bytes) [ 235.183037][ T8988] CIFS: VFS: tioffset + tilen too high 256 + 19795 [ 235.194617][ T8988] CIFS: VFS: \\127.0.0.1 failed to create a new SMB session with Unknown: -22 [ 235.203738][ T8988] CIFS: VFS: cifs_mount failed w/return code = -22 [ 235.571040][ T9001] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 235.582347][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 235.951935][ T9001] md: could not open device unknown-block(1,0). [ 236.159202][ T7816] md_update_sb: can't update sb for read-only array md0 [ 236.782886][ T5717] net_ratelimit: 1 callbacks suppressed [ 236.782940][ T5717] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 237.533192][ T1151] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 237.748130][ T150] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 237.870939][ T5697] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 238.100534][ T9021] ubi0 error: ubi_cdev_ioctl: bad volume creation request [ 238.100590][ T9021] Volume creation request dump: [ 238.100608][ T9021] vol_id 0 [ 238.100618][ T9021] alignment 0 [ 238.100624][ T9021] bytes 0 [ 238.100631][ T9021] vol_type 0 [ 238.100637][ T9021] name_len 0 [ 238.100642][ T9021] 1st 16 characters of name: [ 238.234592][ T30] kauditd_printk_skb: 57 callbacks suppressed [ 238.242741][ T30] audit: type=1400 audit(1700000097.919:808): avc: denied { ioctl } for pid=9022 comm="syz.3.957" path="socket:[17621]" dev="sockfs" ino=17621 ioctlcmd=0x7437 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 238.290716][ T30] audit: type=1400 audit(1700000097.969:809): avc: denied { read write } for pid=9022 comm="syz.3.957" name="ppp" dev="devtmpfs" ino=708 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 238.290806][ T30] audit: type=1400 audit(1700000097.969:810): avc: denied { open } for pid=9022 comm="syz.3.957" path="/dev/ppp" dev="devtmpfs" ino=708 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 238.294922][ T30] audit: type=1400 audit(1700000097.969:811): avc: denied { ioctl } for pid=9022 comm="syz.3.957" path="/dev/ppp" dev="devtmpfs" ino=708 ioctlcmd=0x743e scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 238.488567][ T9024] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 238.545567][ T9030] dlm: dlm1: start ignored: lockspace running [ 238.602378][ T9026] netlink: 'syz.3.957': attribute type 4 has an invalid length. [ 238.623283][ T5704] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 238.629579][ T9033] dlm: dlm1: start ignored: lockspace running [ 238.973074][ T9040] dlm: dlm1: start ignored: lockspace running [ 239.054548][ T9048] dlm: dlm1: start ignored: lockspace running [ 239.213533][ T9052] netlink: 20 bytes leftover after parsing attributes in process `syz.0.966'. [ 239.245385][ T9054] CIFS: Attempting to mount //127.0.0.1/share [ 239.288632][ T30] audit: type=1400 audit(1700000098.969:812): avc: denied { watch } for pid=9056 comm="syz.3.967" path="/184" dev="tmpfs" ino=1151 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 239.299353][ T9057] serio: Serial port ptm0 [ 239.299625][ T30] audit: type=1400 audit(1700000098.969:813): avc: denied { watch } for pid=9056 comm="syz.3.967" path="/184" dev="tmpfs" ino=1151 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 239.299662][ T30] audit: type=1400 audit(1700000098.969:814): avc: denied { watch_sb watch_reads } for pid=9056 comm="syz.3.967" path="/184" dev="tmpfs" ino=1151 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 239.349482][ T30] audit: type=1400 audit(1700000099.029:815): avc: denied { ioctl } for pid=9056 comm="syz.3.967" path="socket:[17667]" dev="sockfs" ino=17667 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 239.396867][ T9055] CIFS: VFS: Invalid response size 256 for command 2 [ 239.396996][ T9055] CIFS: VFS: \\127.0.0.1 No task to wake, unknown frame received! NumMids 1 [ 239.914661][ T30] audit: type=1400 audit(1700000099.599:816): avc: denied { create } for pid=9071 comm="syz.2.971" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 239.916809][ T30] audit: type=1400 audit(1700000099.599:817): avc: denied { setopt } for pid=9071 comm="syz.2.971" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 240.087880][ T9054] CIFS: VFS: \\127.0.0.1 failed to create a new SMB session with Unknown: -11 [ 240.087961][ T9054] CIFS: VFS: cifs_mount failed w/return code = -11 [ 241.452192][ T9078] ceph: No mds server is up or the cluster is laggy [ 241.538817][ T5717] libceph: connect (1)[c::]:6789 error -101 [ 241.539476][ T5717] libceph: mon0 (1)[c::]:6789 connect error [ 242.159646][ T9087] CIFS: Attempting to mount //127.0.0.1/share [ 242.163089][ T9087] CIFS: VFS: Error connecting to socket. Aborting operation. [ 242.163132][ T9087] CIFS: VFS: cifs_mount failed w/return code = -111 [ 242.188293][ T9088] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 242.272220][ T7816] md_update_sb: can't update sb for read-only array md0 [ 242.330903][ T9084] netlink: 'syz.4.973': attribute type 4 has an invalid length. [ 242.338849][ T7816] md_update_sb: can't update sb for read-only array md0 [ 242.392329][ T9088] md: could not open device unknown-block(1,0). [ 242.405693][ T9099] md: could not open device unknown-block(1,1). [ 242.415216][ T7816] md_update_sb: can't update sb for read-only array md0 [ 242.504150][ T9088] md_update_sb: can't update sb for read-only array md0 [ 242.504345][ T7816] md_update_sb: can't update sb for read-only array md0 [ 242.539635][ T7816] md_update_sb: can't update sb for read-only array md0 [ 242.558023][ T9101] dlm: dlm1: start ignored: lockspace running [ 242.612428][ T9104] dlm: dlm1: start ignored: lockspace running [ 242.768844][ T9110] ubi0 error: ubi_cdev_ioctl: bad volume creation request [ 242.777075][ T9110] Volume creation request dump: [ 242.782092][ T9110] vol_id 0 [ 242.785531][ T9110] alignment 0 [ 242.789022][ T9110] bytes 0 [ 242.792543][ T9110] vol_type 0 [ 242.792554][ T9110] name_len 0 [ 242.792560][ T9110] 1st 16 characters of name: [ 243.046312][ T9118] CIFS: Attempting to mount //127.0.0.1/share [ 243.047832][ T9118] CIFS: VFS: Error connecting to socket. Aborting operation. [ 243.047887][ T9118] CIFS: VFS: cifs_mount failed w/return code = -111 [ 243.162508][ T9120] input: syz0 as /devices/virtual/input/input9 [ 243.250961][ T9123] CIFS: Attempting to mount //127.0.0.1/share [ 243.260860][ T9123] CIFS: VFS: Error connecting to socket. Aborting operation. [ 243.269075][ T9123] CIFS: VFS: cifs_mount failed w/return code = -101 [ 244.531165][ T30] kauditd_printk_skb: 61 callbacks suppressed [ 244.531202][ T30] audit: type=1400 audit(1700000104.209:879): avc: denied { create } for pid=9133 comm="syz.3.990" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 244.559035][ T30] audit: type=1400 audit(1700000104.239:880): avc: denied { setopt } for pid=9133 comm="syz.3.990" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 244.559101][ T30] audit: type=1400 audit(1700000104.239:881): avc: denied { bind } for pid=9133 comm="syz.3.990" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 244.559153][ T30] audit: type=1400 audit(1700000104.239:882): avc: denied { name_bind } for pid=9133 comm="syz.3.990" src=20004 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=sctp_socket permissive=1 [ 244.559190][ T30] audit: type=1400 audit(1700000104.239:883): avc: denied { node_bind } for pid=9133 comm="syz.3.990" saddr=fe80::aa src=20004 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=sctp_socket permissive=1 [ 244.644315][ T9135] dlm: dlm1: start ignored: lockspace running [ 244.857760][ T30] audit: type=1400 audit(1700000104.529:884): avc: denied { ioctl } for pid=9133 comm="syz.3.990" path="socket:[17835]" dev="sockfs" ino=17835 ioctlcmd=0x6721 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 245.113518][ T9140] ceph: No mds server is up or the cluster is laggy [ 245.388746][ T31] libceph: connect (1)[c::]:6789 error -101 [ 245.389587][ T31] libceph: mon0 (1)[c::]:6789 connect error [ 245.772146][ T5697] libceph: connect (1)[c::]:6789 error -101 [ 245.893359][ T5697] libceph: mon0 (1)[c::]:6789 connect error [ 246.325717][ T30] audit: type=1400 audit(1700000106.009:885): avc: denied { read write } for pid=9132 comm="syz.1.989" name="dlm-monitor" dev="devtmpfs" ino=95 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 246.326128][ T30] audit: type=1400 audit(1700000106.009:886): avc: denied { open } for pid=9132 comm="syz.1.989" path="/201/dev/dlm-monitor" dev="devtmpfs" ino=95 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 246.345561][ T30] audit: type=1400 audit(1700000106.019:887): avc: denied { search } for pid=9132 comm="syz.1.989" name="/" dev="configfs" ino=1056 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 246.345606][ T30] audit: type=1400 audit(1700000106.019:888): avc: denied { search } for pid=9132 comm="syz.1.989" name="dlm" dev="configfs" ino=1134 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 246.530445][ T9149] ubi0 error: ubi_cdev_ioctl: bad volume creation request [ 246.538838][ T9149] Volume creation request dump: [ 246.544829][ T9149] vol_id 0 [ 246.548969][ T9149] alignment 0 [ 246.555547][ T9132] dlm: dlm1: no userland control daemon, stopping lockspace [ 246.563906][ T9149] bytes 0 [ 246.567843][ T9149] vol_type 0 [ 246.571840][ T9149] name_len 0 [ 246.571893][ T9149] 1st 16 characters of name: [ 246.582443][ T9132] dlm: dlm user daemon left 1 lockspaces [ 246.769529][ T7396] dlm: dlm1: dlm_recover 597075055147962911 [ 246.769647][ T7396] dlm: dlm1: dlm_clear_inactive 1 done [ 246.769728][ T7396] dlm: dlm1: dlm_recover_members 1 nodes [ 246.769789][ T7396] dlm: dlm1: generation 19 slots 1 1:1 [ 246.769842][ T7396] dlm: dlm1: dlm_recover_directory [ 246.769951][ T7396] dlm: dlm1: dlm_recover_directory 0 in 0 new [ 246.783326][ T7396] dlm: dlm1: dlm_recover 597075055147962911 generation 19 done: 20 ms [ 246.852810][ T9153] dlm: dlm1: start ignored: lockspace running [ 247.065322][ T9166] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2571 sclass=netlink_route_socket pid=9166 comm=syz.2.994 [ 247.101973][ T5704] libceph: connect (1)[c::]:6789 error -101 [ 247.102144][ T5704] libceph: mon0 (1)[c::]:6789 connect error [ 247.142601][ T9163] ceph: No mds server is up or the cluster is laggy [ 247.405853][ T9164] md: could not open device unknown-block(1,0). [ 247.432495][ T7816] md_update_sb: can't update sb for read-only array md0 [ 247.471103][ T9161] v: renamed from vlan0 [ 247.605585][ T9164] md_update_sb: can't update sb for read-only array md0 [ 247.606787][ T7816] md_update_sb: can't update sb for read-only array md0 [ 247.746310][ T7816] md_update_sb: can't update sb for read-only array md0 [ 248.024548][ T9183] CIFS: Attempting to mount //127.0.0.1/share [ 248.032257][ T9183] CIFS: VFS: Error connecting to socket. Aborting operation. [ 248.040156][ T9183] CIFS: VFS: cifs_mount failed w/return code = -101 [ 248.093293][ T9181] dlm: dlm1: start ignored: lockspace running [ 248.146011][ T9182] dlm: dlm1: start ignored: lockspace running [ 248.154966][ T9192] dlm: dlm1: start ignored: lockspace running [ 248.218874][ T9195] dlm: dlm1: start ignored: lockspace running [ 248.902887][ T9207] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 248.956657][ T7816] md_update_sb: can't update sb for read-only array md0 [ 249.018437][ T7816] md_update_sb: can't update sb for read-only array md0 [ 249.019771][ T9210] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 249.050382][ T9215] ubi0 error: ubi_cdev_ioctl: bad volume creation request [ 249.050424][ T9215] Volume creation request dump: [ 249.050441][ T9215] vol_id 0 [ 249.050450][ T9215] alignment 0 [ 249.050459][ T9215] bytes 0 [ 249.050468][ T9215] vol_type 0 [ 249.050478][ T9215] name_len 0 [ 249.050487][ T9215] 1st 16 characters of name: [ 249.091739][ T9212] dlm: dlm1: start ignored: lockspace running [ 249.185792][ T9207] md: could not open device unknown-block(1,0). [ 249.186001][ T7816] md_update_sb: can't update sb for read-only array md0 [ 249.207916][ T7816] md_update_sb: can't update sb for read-only array md0 [ 249.234176][ T9221] dlm: dlm1: start ignored: lockspace running [ 249.244980][ T9224] md: could not open device unknown-block(1,0). [ 249.250865][ T9216] md_update_sb: can't update sb for read-only array md0 [ 249.259356][ T9221] dlm: dlm1: start ignored: lockspace running [ 249.259957][ T7816] md_update_sb: can't update sb for read-only array md0 [ 249.355961][ T9228] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 249.444889][ T9228] md: could not open device unknown-block(1,1). [ 249.863376][ T9211] dlm: dlm1: no userland control daemon, stopping lockspace [ 249.902651][ T9211] dlm: dlm user daemon left 1 lockspaces [ 250.229604][ T1308] ieee802154 phy0 wpan0: encryption failed: -22 [ 250.233248][ T1308] ieee802154 phy1 wpan1: encryption failed: -22 [ 250.713119][ T30] kauditd_printk_skb: 123 callbacks suppressed [ 250.713170][ T30] audit: type=1400 audit(1700000110.399:1012): avc: denied { mount } for pid=9242 comm="syz.4.1012" name="/" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=filesystem permissive=1 [ 250.748777][ T9239] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 250.812076][ T9239] md: could not open device unknown-block(1,0). [ 250.907107][ T9250] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 250.980700][ T30] audit: type=1400 audit(1700000110.659:1013): avc: denied { write } for pid=9226 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 251.073611][ T9250] md: could not open device unknown-block(1,0). [ 251.094250][ T7396] dlm: dlm1: dlm_recover 597075055147962913 [ 251.095560][ T7396] dlm: dlm1: dlm_clear_inactive 1 done [ 251.095603][ T7396] dlm: dlm1: dlm_recover_members 1 nodes [ 251.095649][ T7396] dlm: dlm1: generation 20 slots 1 1:1 [ 251.095660][ T7396] dlm: dlm1: dlm_recover_directory [ 251.095685][ T7396] dlm: dlm1: dlm_recover_directory 0 in 0 new [ 251.100024][ T7396] dlm: dlm1: dlm_recover 597075055147962913 generation 20 done: 0 ms [ 251.151130][ T30] audit: type=1400 audit(1700000110.829:1014): avc: denied { write } for pid=9258 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 251.155597][ T9260] dlm: dlm1: start ignored: lockspace running [ 251.173022][ T30] audit: type=1400 audit(1700000110.859:1015): avc: denied { create } for pid=9259 comm="syz.4.1016" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 251.178982][ T30] audit: type=1400 audit(1700000110.859:1016): avc: denied { write } for pid=9259 comm="syz.4.1016" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 251.186756][ T30] audit: type=1400 audit(1700000110.869:1017): avc: denied { read } for pid=9259 comm="syz.4.1016" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 251.197344][ T30] audit: type=1400 audit(1700000110.879:1018): avc: denied { ioctl } for pid=9259 comm="syz.4.1016" path="socket:[18947]" dev="sockfs" ino=18947 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 251.227282][ T30] audit: type=1400 audit(1700000110.909:1019): avc: denied { create } for pid=9259 comm="syz.4.1016" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 251.243277][ T30] audit: type=1400 audit(1700000110.929:1020): avc: denied { read } for pid=9259 comm="syz.4.1016" dev="nsfs" ino=4026533384 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 251.246324][ T30] audit: type=1400 audit(1700000110.929:1021): avc: denied { open } for pid=9259 comm="syz.4.1016" path="net:[4026533384]" dev="nsfs" ino=4026533384 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 251.342769][ T9261] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1016'. [ 252.845069][ T9281] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 252.896129][ T9277] dlm: dlm1: start ignored: lockspace running [ 252.936105][ T7816] md_update_sb: 18 callbacks suppressed [ 252.936170][ T7816] md_update_sb: can't update sb for read-only array md0 [ 252.962440][ T7816] md_update_sb: can't update sb for read-only array md0 [ 252.997058][ T9290] CIFS: Attempting to mount //127.0.0.1/share [ 252.997491][ T9290] CIFS: VFS: Error connecting to socket. Aborting operation. [ 252.997531][ T9290] CIFS: VFS: cifs_mount failed w/return code = -101 [ 253.003111][ T9281] md: could not open device unknown-block(1,1). [ 253.005177][ T7816] md_update_sb: can't update sb for read-only array md0 [ 253.032421][ T9281] md_update_sb: can't update sb for read-only array md0 [ 253.036048][ T7816] md_update_sb: can't update sb for read-only array md0 [ 253.074093][ T7816] md_update_sb: can't update sb for read-only array md0 [ 253.109470][ T9294] netlink: 'syz.2.1024': attribute type 4 has an invalid length. [ 253.511793][ T9274] dlm: dlm1: no userland control daemon, stopping lockspace [ 253.742353][ T9274] dlm: dlm user daemon left 1 lockspaces [ 254.087397][ T9312] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 254.123844][ T9312] md: could not open device unknown-block(1,0). [ 254.130849][ T7816] md_update_sb: can't update sb for read-only array md0 [ 254.472214][ T7396] dlm: dlm1: dlm_recover 597075055147962915 [ 254.472267][ T7396] dlm: dlm1: dlm_clear_inactive 1 done [ 254.472308][ T7396] dlm: dlm1: dlm_recover_members 1 nodes [ 254.472334][ T7396] dlm: dlm1: generation 21 slots 1 1:1 [ 254.472348][ T7396] dlm: dlm1: dlm_recover_directory [ 254.472371][ T7396] dlm: dlm1: dlm_recover_directory 0 in 0 new [ 254.472418][ T7396] dlm: dlm1: dlm_recover 597075055147962915 generation 21 done: 0 ms [ 254.480976][ T9321] dlm: dlm1: start ignored: lockspace running [ 254.606464][ T9324] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 254.919475][ T7816] md_update_sb: can't update sb for read-only array md0 [ 254.956666][ T9324] md: could not open device unknown-block(1,1). [ 254.963839][ T7816] md_update_sb: can't update sb for read-only array md0 [ 255.006331][ T9324] md_update_sb: can't update sb for read-only array md0 [ 255.033639][ T9332] dlm: dlm1: start ignored: lockspace running [ 255.076195][ T9337] CIFS: Attempting to mount //127.0.0.1/share [ 255.080171][ T9337] CIFS: VFS: Error connecting to socket. Aborting operation. [ 255.080204][ T9337] CIFS: VFS: cifs_mount failed w/return code = -101 [ 255.229727][ T9343] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1041'. [ 255.360739][ T9347] dlm: dlm1: start ignored: lockspace running [ 255.548137][ T9357] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 255.591990][ T9357] md: could not open device unknown-block(1,0). [ 255.833416][ T9361] CIFS: Attempting to mount //127.0.0.1/share [ 255.834258][ T9361] CIFS: VFS: Error connecting to socket. Aborting operation. [ 255.834288][ T9361] CIFS: VFS: cifs_mount failed w/return code = -111 [ 255.855878][ T9363] ubi0 error: ubi_cdev_ioctl: bad volume creation request [ 255.855915][ T9363] Volume creation request dump: [ 255.855922][ T9363] vol_id 0 [ 255.855928][ T9363] alignment 0 [ 255.855935][ T9363] bytes 0 [ 255.855942][ T9363] vol_type 0 [ 255.855948][ T9363] name_len 0 [ 255.855955][ T9363] 1st 16 characters of name: [ 256.167605][ T9] libceph: connect (1)[c::]:6789 error -101 [ 256.168228][ T9] libceph: mon0 (1)[c::]:6789 connect error [ 256.180211][ T30] kauditd_printk_skb: 24 callbacks suppressed [ 256.180242][ T30] audit: type=1400 audit(1700000115.749:1046): avc: denied { ioctl } for pid=9365 comm="syz.3.1048" path="socket:[19254]" dev="sockfs" ino=19254 ioctlcmd=0x6721 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 256.188253][ T30] audit: type=1400 audit(1700000115.869:1047): avc: denied { mounton } for pid=9370 comm="syz.2.1049" path="/217/dev" dev="tmpfs" ino=1363 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 256.188292][ T30] audit: type=1400 audit(1700000115.869:1048): avc: denied { mount } for pid=9370 comm="syz.2.1049" name="/" dev="devtmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=filesystem permissive=1 [ 256.189430][ T30] audit: type=1400 audit(1700000115.869:1049): avc: denied { mount } for pid=9370 comm="syz.2.1049" name="/" dev="configfs" ino=1056 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=filesystem permissive=1 [ 256.190625][ T30] audit: type=1400 audit(1700000115.869:1050): avc: denied { mount } for pid=9370 comm="syz.2.1049" name="/" dev="sysfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=filesystem permissive=1 [ 256.198101][ T30] audit: type=1400 audit(1700000115.879:1051): avc: denied { search } for pid=9370 comm="syz.2.1049" name="/" dev="configfs" ino=1056 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 256.199446][ T30] audit: type=1400 audit(1700000115.879:1052): avc: denied { search } for pid=9370 comm="syz.2.1049" name="/" dev="configfs" ino=1056 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 256.200521][ T30] audit: type=1400 audit(1700000115.879:1053): avc: denied { search } for pid=9370 comm="syz.2.1049" name="dlm" dev="configfs" ino=1134 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 256.408779][ T9369] ceph: No mds server is up or the cluster is laggy [ 256.438061][ T30] audit: type=1400 audit(1700000116.119:1054): avc: denied { setopt } for pid=9365 comm="syz.3.1048" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 256.441225][ T5704] libceph: connect (1)[c::]:6789 error -101 [ 256.441827][ T5704] libceph: mon0 (1)[c::]:6789 connect error [ 256.515078][ T30] audit: type=1400 audit(1700000116.199:1055): avc: denied { write } for pid=9370 comm="syz.2.1049" name="local" dev="configfs" ino=18054 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=file permissive=1 [ 256.853261][ T9346] dlm: dlm1: no userland control daemon, stopping lockspace [ 256.871321][ T9346] dlm: dlm user daemon left 1 lockspaces [ 257.016027][ T9377] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 257.025794][ T7396] dlm: dlm1: dlm_recover 597075055147962917 [ 257.025829][ T7396] dlm: dlm1: dlm_clear_inactive 1 done [ 257.025857][ T7396] dlm: dlm1: dlm_recover_members 1 nodes [ 257.025878][ T7396] dlm: dlm1: generation 22 slots 1 1:1 [ 257.025889][ T7396] dlm: dlm1: dlm_recover_directory [ 257.025902][ T7396] dlm: dlm1: dlm_recover_directory 0 in 0 new [ 257.025947][ T7396] dlm: dlm1: dlm_recover 597075055147962917 generation 22 done: 0 ms [ 257.087438][ T9382] dlm: dlm1: start ignored: lockspace running [ 257.193444][ T9377] md: could not open device unknown-block(1,1). [ 257.238618][ T9388] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 257.527200][ T9388] md: could not open device unknown-block(1,0). [ 258.297816][ T9408] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 258.298636][ T9410] CIFS: Attempting to mount //127.0.0.1/share [ 258.299175][ T9410] CIFS: VFS: Error connecting to socket. Aborting operation. [ 258.299201][ T9410] CIFS: VFS: cifs_mount failed w/return code = -101 [ 258.384938][ T7816] md_update_sb: 13 callbacks suppressed [ 258.384999][ T7816] md_update_sb: can't update sb for read-only array md0 [ 258.451978][ T7816] md_update_sb: can't update sb for read-only array md0 [ 258.508154][ T9419] dlm: dlm1: start ignored: lockspace running [ 258.515090][ T9408] md: could not open device unknown-block(1,1). [ 258.522138][ T7816] md_update_sb: can't update sb for read-only array md0 [ 258.533834][ T9422] md_update_sb: can't update sb for read-only array md0 [ 258.541438][ T7816] md_update_sb: can't update sb for read-only array md0 [ 258.923223][ T9432] faux_driver vgem: [drm] Unknown color mode 135165; guessing buffer size. [ 259.255148][ T9416] dlm: dlm1: no userland control daemon, stopping lockspace [ 259.264890][ T5783] usb 1-1: new high-speed USB device number 28 using dummy_hcd [ 259.273476][ T9416] dlm: dlm user daemon left 1 lockspaces [ 259.295514][ T9438] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 259.389244][ T9438] md: could not open device unknown-block(1,0). [ 259.564058][ T7816] md_update_sb: can't update sb for read-only array md0 [ 259.581562][ T5783] usb 1-1: New USB device found, idVendor=8086, idProduct=0b63, bcdDevice= 0.00 [ 259.595365][ T7396] dlm: dlm1: dlm_recover 597075055147962919 [ 259.598923][ T7396] dlm: dlm1: dlm_clear_inactive 1 done [ 259.599491][ T7396] dlm: dlm1: dlm_recover_members 1 nodes [ 259.599519][ T7396] dlm: dlm1: generation 23 slots 1 1:1 [ 259.599533][ T7396] dlm: dlm1: dlm_recover_directory [ 259.599548][ T7396] dlm: dlm1: dlm_recover_directory 0 in 0 new [ 259.599593][ T7396] dlm: dlm1: dlm_recover 597075055147962919 generation 23 done: 0 ms [ 259.652949][ T9445] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 259.773505][ T5783] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 259.798904][ T9448] dlm: dlm1: start ignored: lockspace running [ 260.139811][ T5783] ljca 1-1:1.0: probe with driver ljca failed with error -110 [ 260.187639][ T7816] md_update_sb: can't update sb for read-only array md0 [ 260.220805][ T9446] smpboot: CPU 1 is now offline [ 260.307870][ T9452] md_update_sb: can't update sb for read-only array md0 [ 260.346607][ T7816] md_update_sb: can't update sb for read-only array md0 [ 260.363621][ T9451] md: could not open device unknown-block(1,1). [ 260.373575][ T7816] md_update_sb: can't update sb for read-only array md0 [ 263.109232][ T9470] CIFS: Attempting to mount //127.0.0.1/share [ 263.125616][ T9470] CIFS: VFS: Error connecting to socket. Aborting operation. [ 263.135769][ T9470] CIFS: VFS: cifs_mount failed w/return code = -101 [ 263.162316][ T30] kauditd_printk_skb: 44 callbacks suppressed [ 263.162356][ T30] audit: type=1400 audit(1700000122.839:1100): avc: denied { mmap_zero } for pid=9466 comm="syz.4.1076" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=memprotect permissive=1 [ 263.190689][ T30] audit: type=1400 audit(1700000122.879:1101): avc: denied { read } for pid=9466 comm="syz.4.1076" name="kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 263.190737][ T30] audit: type=1400 audit(1700000122.879:1102): avc: denied { open } for pid=9466 comm="syz.4.1076" path="/dev/kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 263.254461][ T30] audit: type=1400 audit(1700000122.939:1103): avc: denied { cmd } for pid=9466 comm="syz.4.1076" path="/dev/ublk-control" dev="devtmpfs" ino=695 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=io_uring permissive=1 [ 263.280907][ T30] audit: type=1400 audit(1700000122.969:1104): avc: denied { create } for pid=9466 comm="syz.4.1076" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 263.309873][ T30] audit: type=1400 audit(1700000122.989:1105): avc: denied { write } for pid=9466 comm="syz.4.1076" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 263.309926][ T30] audit: type=1400 audit(1700000122.989:1106): avc: denied { read } for pid=9466 comm="syz.4.1076" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 263.476265][ T30] audit: type=1400 audit(1700000123.039:1107): avc: denied { ioctl } for pid=9466 comm="syz.4.1076" path="/dev/kvm" dev="devtmpfs" ino=84 ioctlcmd=0xae01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 263.579755][ T5704] usb 1-1: USB disconnect, device number 28 [ 263.619075][ T30] audit: type=1400 audit(1700000123.299:1108): avc: denied { search } for pid=9473 comm="dhcpcd-run-hook" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 263.619138][ T30] audit: type=1400 audit(1700000123.299:1109): avc: denied { search } for pid=9473 comm="dhcpcd-run-hook" name="dhcpcd" dev="tmpfs" ino=1770 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 264.082725][ T9484] dlm: dlm1: start ignored: lockspace running [ 264.236778][ T9486] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 264.255882][ T9493] dlm: dlm user daemon not available [ 264.484124][ T9486] md: could not open device unknown-block(1,0). [ 264.484288][ T7816] md_update_sb: 1 callbacks suppressed [ 264.484315][ T7816] md_update_sb: can't update sb for read-only array md0 [ 264.508573][ T7816] md_update_sb: can't update sb for read-only array md0 [ 265.680081][ T9514] random: crng reseeded on system resumption [ 265.694049][ T9515] dlm: dlm1: start ignored: lockspace running [ 265.763869][ T9518] dlm: dlm1: start ignored: lockspace running [ 265.917672][ T5783] usb 1-1: new high-speed USB device number 29 using dummy_hcd [ 266.191426][ T5783] usb 1-1: New USB device found, idVendor=046d, idProduct=c222, bcdDevice= 0.00 [ 266.201934][ T5783] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 266.201974][ T5783] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 266.202005][ T5783] usb 1-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 266.202038][ T5783] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 266.740848][ T9539] CIFS: Attempting to mount //127.0.0.1/share [ 266.768533][ T9539] CIFS: VFS: Error connecting to socket. Aborting operation. [ 266.779580][ T9539] CIFS: VFS: cifs_mount failed w/return code = -101 [ 268.523553][ T30] kauditd_printk_skb: 29 callbacks suppressed [ 268.523586][ T30] audit: type=1400 audit(1700000128.209:1139): avc: denied { read } for pid=5267 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=1 [ 268.584232][ T5783] lg-g15 0003:046D:C222.0001: unknown main item tag 0x0 [ 268.591647][ T5783] lg-g15 0003:046D:C222.0001: unknown main item tag 0x0 [ 268.599072][ T5783] lg-g15 0003:046D:C222.0001: unknown main item tag 0x0 [ 268.606591][ T5783] lg-g15 0003:046D:C222.0001: unknown main item tag 0x4 [ 268.606617][ T5783] lg-g15 0003:046D:C222.0001: unknown main item tag 0x0 [ 268.606629][ T5783] lg-g15 0003:046D:C222.0001: unknown main item tag 0x0 [ 268.606650][ T5783] lg-g15 0003:046D:C222.0001: unknown main item tag 0x2 [ 268.606662][ T5783] lg-g15 0003:046D:C222.0001: unknown main item tag 0x0 [ 268.606683][ T5783] lg-g15 0003:046D:C222.0001: unknown main item tag 0x0 [ 268.606695][ T5783] lg-g15 0003:046D:C222.0001: unknown main item tag 0x0 [ 268.606838][ T5783] lg-g15 0003:046D:C222.0001: unbalanced collection at end of report description [ 268.679626][ T5783] lg-g15 0003:046D:C222.0001: probe with driver lg-g15 failed with error -22 [ 268.851499][ T9556] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 269.017182][ T5783] usb 1-1: USB disconnect, device number 29 [ 269.211890][ T9556] md: could not open device unknown-block(1,0). [ 269.218636][ T7816] md_update_sb: can't update sb for read-only array md0 [ 269.238394][ T7816] md_update_sb: can't update sb for read-only array md0 [ 269.474742][ T9564] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 269.524673][ T7816] md_update_sb: can't update sb for read-only array md0 [ 269.552167][ T7816] md_update_sb: can't update sb for read-only array md0 [ 269.580459][ T30] audit: type=1400 audit(1700000129.259:1140): avc: denied { create } for pid=9566 comm="syz.1.1099" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 269.603867][ T9564] md: could not open device unknown-block(1,1). [ 269.604010][ T7816] md_update_sb: can't update sb for read-only array md0 [ 269.620824][ T30] audit: type=1400 audit(1700000129.309:1141): avc: denied { connect } for pid=9566 comm="syz.1.1099" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 269.707562][ T30] audit: type=1400 audit(1700000129.389:1142): avc: denied { ioctl } for pid=9566 comm="syz.1.1099" path="socket:[19829]" dev="sockfs" ino=19829 ioctlcmd=0x7437 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 269.783386][ T9564] md_update_sb: can't update sb for read-only array md0 [ 269.805791][ T7816] md_update_sb: can't update sb for read-only array md0 [ 269.846395][ T7816] md_update_sb: can't update sb for read-only array md0 [ 269.894476][ T7816] md_update_sb: can't update sb for read-only array md0 [ 270.189533][ T9578] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 270.222487][ T7816] md_update_sb: can't update sb for read-only array md0 [ 270.243101][ T7816] md_update_sb: can't update sb for read-only array md0 [ 270.432113][ T9580] dlm: dlm1: start ignored: lockspace running [ 270.638986][ T9578] md: could not open device unknown-block(1,1). [ 270.645974][ T7816] md_update_sb: can't update sb for read-only array md0 [ 270.666910][ T9583] dlm: dlm1: start ignored: lockspace running [ 270.760399][ T9591] CIFS: Attempting to mount //127.0.0.1/share [ 270.776322][ T9591] CIFS: VFS: Error connecting to socket. Aborting operation. [ 270.785714][ T9591] CIFS: VFS: cifs_mount failed w/return code = -111 [ 271.251114][ T30] audit: type=1400 audit(1700000130.929:1143): avc: denied { write } for pid=9562 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 271.414996][ T30] audit: type=1400 audit(1700000131.099:1144): avc: denied { create } for pid=9598 comm="syz.1.1108" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 271.553625][ T30] audit: type=1400 audit(1700000131.119:1145): avc: denied { setopt } for pid=9598 comm="syz.1.1108" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 271.553668][ T30] audit: type=1400 audit(1700000131.119:1146): avc: denied { ioctl } for pid=9598 comm="syz.1.1108" path="socket:[19987]" dev="sockfs" ino=19987 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 271.785210][ T9602] FAULT_INJECTION: forcing a failure. [ 271.785210][ T9602] name failslab, interval 1, probability 0, space 0, times 0 [ 271.785249][ T9602] CPU: 0 UID: 0 PID: 9602 Comm: syz.1.1108 Not tainted syzkaller #0 PREEMPT(full) [ 271.785264][ T9602] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/05/2026 [ 271.785270][ T9602] Call Trace: [ 271.785274][ T9602] [ 271.785279][ T9602] dump_stack_lvl+0x100/0x190 [ 271.785299][ T9602] should_fail_ex.cold+0x5/0xa [ 271.785315][ T9602] should_failslab+0xc2/0x120 [ 271.785329][ T9602] kmem_cache_alloc_node_noprof+0x94/0x6e0 [ 271.785341][ T9602] ? __alloc_skb+0x140/0x710 [ 271.785361][ T9602] __alloc_skb+0x140/0x710 [ 271.785376][ T9602] ? __alloc_skb+0x5b7/0x710 [ 271.785391][ T9602] ? __pfx___alloc_skb+0x10/0x10 [ 271.785411][ T9602] netlink_dump+0x194/0xd00 [ 271.785429][ T9602] ? __pfx_netlink_dump+0x10/0x10 [ 271.785448][ T9602] ? __asan_memset+0x23/0x50 [ 271.785464][ T9602] ? genl_start+0x67a/0x970 [ 271.785476][ T9602] __netlink_dump_start+0x6d6/0x990 [ 271.785494][ T9602] genl_family_rcv_msg_dumpit+0x1e2/0x2e0 [ 271.785506][ T9602] ? __pfx_genl_family_rcv_msg_dumpit+0x10/0x10 [ 271.785521][ T9602] ? __pfx_genl_get_cmd+0x10/0x10 [ 271.785537][ T9602] ? __pfx_genl_start+0x10/0x10 [ 271.785546][ T9602] ? __pfx_genl_dumpit+0x10/0x10 [ 271.785555][ T9602] ? __pfx_genl_done+0x10/0x10 [ 271.785567][ T9602] ? netlink_sendmsg+0x680/0xda0 [ 271.785581][ T9602] ? ____sys_sendmsg+0xa4d/0xbe0 [ 271.785594][ T9602] ? __radix_tree_lookup+0x217/0x2b0 [ 271.785608][ T9602] genl_rcv_msg+0x471/0x800 [ 271.785620][ T9602] ? __pfx_genl_rcv_msg+0x10/0x10 [ 271.785631][ T9602] ? __lock_acquire+0x4c5/0x1ec0 [ 271.785642][ T9602] ? __pfx_nl80211_dump_interface+0x10/0x10 [ 271.785658][ T9602] ? __lock_acquire+0x4c5/0x1ec0 [ 271.785672][ T9602] netlink_rcv_skb+0x159/0x420 [ 271.785688][ T9602] ? __pfx_genl_rcv_msg+0x10/0x10 [ 271.785699][ T9602] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 271.785721][ T9602] ? netlink_deliver_tap+0x1ae/0xcc0 [ 271.785743][ T9602] genl_rcv+0x28/0x40 [ 271.785752][ T9602] netlink_unicast+0x585/0x850 [ 271.785770][ T9602] ? __pfx_netlink_unicast+0x10/0x10 [ 271.785790][ T9602] netlink_sendmsg+0x8b0/0xda0 [ 271.785808][ T9602] ? __pfx_netlink_sendmsg+0x10/0x10 [ 271.785826][ T9602] ? selinux_socket_sendmsg+0x198/0x2f0 [ 271.785846][ T9602] ____sys_sendmsg+0xa4d/0xbe0 [ 271.785858][ T9602] ? __pfx_netlink_sendmsg+0x10/0x10 [ 271.785875][ T9602] ? __pfx_____sys_sendmsg+0x10/0x10 [ 271.785891][ T9602] ? lock_acquire+0x1d1/0x380 [ 271.785901][ T9602] ? get_pid_task+0x2a/0x250 [ 271.785917][ T9602] ___sys_sendmsg+0x190/0x1e0 [ 271.785932][ T9602] ? __pfx____sys_sendmsg+0x10/0x10 [ 271.785946][ T9602] ? get_pid_task+0x106/0x250 [ 271.785966][ T9602] ? find_held_lock+0x2b/0x80 [ 271.785989][ T9602] __sys_sendmsg+0x160/0x210 [ 271.786000][ T9602] ? __pfx___sys_sendmsg+0x10/0x10 [ 271.786018][ T9602] do_syscall_64+0x123/0x790 [ 271.786032][ T9602] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 271.786044][ T9602] RIP: 0033:0x7fb2eb39e159 [ 271.786054][ T9602] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 271.786064][ T9602] RSP: 002b:00007fb2ec1fd028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 271.786075][ T9602] RAX: ffffffffffffffda RBX: 00007fb2eb626090 RCX: 00007fb2eb39e159 [ 271.786082][ T9602] RDX: 0000000004040000 RSI: 0000200000000100 RDI: 0000000000000008 [ 271.786088][ T9602] RBP: 00007fb2ec1fd090 R08: 0000000000000000 R09: 0000000000000000 [ 271.786095][ T9602] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 271.786101][ T9602] R13: 00007fb2eb626128 R14: 00007fb2eb626090 R15: 00007ffd7a6f01d8 [ 271.786115][ T9602] [ 271.810367][ T30] audit: type=1400 audit(1700000131.469:1147): avc: denied { read } for pid=9598 comm="syz.1.1108" dev="nsfs" ino=4026533079 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 271.810404][ T30] audit: type=1400 audit(1700000131.469:1148): avc: denied { open } for pid=9598 comm="syz.1.1108" path="net:[4026533079]" dev="nsfs" ino=4026533079 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 273.008733][ T9616] 9p: Bad value for 'rfdno' [ 273.388920][ T5267] veth1_vlan: left promiscuous mode [ 273.605978][ T30] kauditd_printk_skb: 11 callbacks suppressed [ 273.606017][ T30] audit: type=1400 audit(1700000133.289:1160): avc: denied { mount } for pid=9584 comm="syz.3.1105" name="/" dev="proc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 274.010629][ T30] audit: type=1400 audit(1700000133.689:1161): avc: denied { unmount } for pid=5600 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 274.268022][ T30] audit: type=1400 audit(1700000133.949:1162): avc: denied { bind } for pid=9637 comm="syz.2.1118" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 274.268082][ T30] audit: type=1400 audit(1700000133.949:1163): avc: denied { name_bind } for pid=9637 comm="syz.2.1118" src=20004 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=sctp_socket permissive=1 [ 274.268119][ T30] audit: type=1400 audit(1700000133.949:1164): avc: denied { node_bind } for pid=9637 comm="syz.2.1118" saddr=fe80::aa src=20004 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=sctp_socket permissive=1 [ 274.355683][ T9639] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 275.415005][ T7816] md_update_sb: 3 callbacks suppressed [ 275.415042][ T7816] md_update_sb: can't update sb for read-only array md0 [ 275.563577][ T7816] md_update_sb: can't update sb for read-only array md0 [ 275.592611][ T9639] md: could not open device unknown-block(1,1). [ 275.599464][ T7816] md_update_sb: can't update sb for read-only array md0 [ 275.642481][ T9639] md_update_sb: can't update sb for read-only array md0 [ 275.649987][ T7816] md_update_sb: can't update sb for read-only array md0 [ 275.680168][ T7816] md_update_sb: can't update sb for read-only array md0 [ 275.710630][ T9649] dlm: dlm1: start ignored: lockspace running [ 275.787150][ T9653] dlm: dlm1: start ignored: lockspace running [ 275.804724][ T5733] libceph: connect (1)[c::]:6789 error -101 [ 275.812725][ T5733] libceph: mon0 (1)[c::]:6789 connect error [ 275.838810][ T9640] ceph: No mds server is up or the cluster is laggy [ 275.975540][ T30] audit: type=1400 audit(1700000135.659:1165): avc: denied { write } for pid=9623 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 276.488244][ T30] audit: type=1400 audit(1700000136.169:1166): avc: denied { read write } for pid=9664 comm="syz.1.1124" name="vhost-net" dev="devtmpfs" ino=1271 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 276.488290][ T30] audit: type=1400 audit(1700000136.169:1167): avc: denied { open } for pid=9664 comm="syz.1.1124" path="/dev/vhost-net" dev="devtmpfs" ino=1271 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 276.818234][ T30] audit: type=1400 audit(1700000136.499:1168): avc: denied { write } for pid=9666 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 277.412730][ T5788] usb 2-1: new high-speed USB device number 17 using dummy_hcd [ 278.240743][ T5788] usb 2-1: New USB device found, idVendor=04b4, idProduct=931e, bcdDevice= 0.40 [ 278.270357][ T5788] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 278.270395][ T5788] usb 2-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 278.315458][ T30] audit: type=1400 audit(1700000137.999:1169): avc: denied { ioctl } for pid=9664 comm="syz.1.1124" path="/dev/raw-gadget" dev="devtmpfs" ino=814 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 278.343561][ T5788] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 278.343588][ T5788] usb 2-1: Product: syz [ 278.343596][ T5788] usb 2-1: Manufacturer: syz [ 278.343605][ T5788] usb 2-1: SerialNumber: syz [ 278.460981][ T5783] libceph: connect (1)[c::]:6789 error -101 [ 278.461145][ T5783] libceph: mon0 (1)[c::]:6789 connect error [ 278.496999][ T9672] ceph: No mds server is up or the cluster is laggy [ 278.615877][ T30] kauditd_printk_skb: 12 callbacks suppressed [ 278.615927][ T30] audit: type=1400 audit(1700000138.299:1182): avc: denied { mount } for pid=9679 comm="syz.2.1126" name="/" dev="devtmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=filesystem permissive=1 [ 278.664445][ T30] audit: type=1400 audit(1700000138.349:1183): avc: denied { read write } for pid=9679 comm="syz.2.1126" name="ram0" dev="devtmpfs" ino=628 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 278.694060][ T30] audit: type=1400 audit(1700000138.379:1184): avc: denied { open } for pid=9679 comm="syz.2.1126" path="/237/dev/ram0" dev="devtmpfs" ino=628 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 278.756746][ T30] audit: type=1400 audit(1700000138.439:1185): avc: denied { read } for pid=5267 comm="dhcpcd" name="n57" dev="tmpfs" ino=6298 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 278.785093][ T30] audit: type=1400 audit(1700000138.439:1187): avc: denied { ioctl } for pid=5608 comm="syz-executor" path="/dev/loop4" dev="devtmpfs" ino=649 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 278.816516][ T30] audit: type=1400 audit(1700000138.439:1186): avc: denied { open } for pid=5267 comm="dhcpcd" path="/run/udev/data/n57" dev="tmpfs" ino=6298 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 278.816560][ T30] audit: type=1400 audit(1700000138.499:1188): avc: denied { getattr } for pid=5267 comm="dhcpcd" path="/run/udev/data/n57" dev="tmpfs" ino=6298 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 278.882357][ T30] audit: type=1400 audit(1700000138.569:1189): avc: denied { create } for pid=9664 comm="syz.1.1124" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 278.949012][ T9681] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 279.051168][ T7816] md_update_sb: can't update sb for read-only array md0 [ 279.068030][ T30] audit: type=1400 audit(1700000138.749:1190): avc: denied { mount } for pid=9685 comm="syz.4.1127" name="/" dev="configfs" ino=1056 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=filesystem permissive=1 [ 279.112727][ T9681] md: could not open device unknown-block(1,0). [ 279.120255][ T7816] md_update_sb: can't update sb for read-only array md0 [ 279.139623][ T30] audit: type=1400 audit(1700000138.819:1191): avc: denied { search } for pid=9685 comm="syz.4.1127" name="/" dev="configfs" ino=1056 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 279.255843][ T5788] usb 2-1: unit 5 not found! [ 279.442612][ T9687] dlm: dlm1: start ignored: lockspace running [ 279.686476][ T9695] dlm: dlm user daemon not available [ 279.946859][ T5788] usb 2-1: can't set first interface for hiFace device. [ 279.946910][ T5788] snd-usb-hiface 2-1:1.1: probe with driver snd-usb-hiface failed with error -5 [ 279.975699][ T5788] usb 2-1: USB disconnect, device number 17 [ 280.630838][ T9710] FAULT_INJECTION: forcing a failure. [ 280.630838][ T9710] name failslab, interval 1, probability 0, space 0, times 0 [ 280.645374][ T9710] CPU: 0 UID: 0 PID: 9710 Comm: syz.3.1133 Not tainted syzkaller #0 PREEMPT(full) [ 280.645396][ T9710] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/05/2026 [ 280.645402][ T9710] Call Trace: [ 280.645406][ T9710] [ 280.645412][ T9710] dump_stack_lvl+0x100/0x190 [ 280.645436][ T9710] should_fail_ex.cold+0x5/0xa [ 280.645452][ T9710] should_failslab+0xc2/0x120 [ 280.645466][ T9710] kmem_cache_alloc_noprof+0x92/0x6a0 [ 280.645477][ T9710] ? skb_clone+0x190/0x400 [ 280.645490][ T9710] skb_clone+0x190/0x400 [ 280.645501][ T9710] nfnetlink_rcv_batch+0x1c8/0x2880 [ 280.645516][ T9710] ? kmem_cache_free+0x127/0x6c0 [ 280.645535][ T9710] ? __lock_acquire+0x4c5/0x1ec0 [ 280.645549][ T9710] ? __pfx_nfnetlink_rcv_batch+0x10/0x10 [ 280.645564][ T9710] ? lock_acquire+0x1d1/0x380 [ 280.645574][ T9710] ? avc_has_perm_noaudit+0x56/0x3b0 [ 280.645593][ T9710] ? avc_has_perm_noaudit+0x145/0x3b0 [ 280.645607][ T9710] ? __asan_memset+0x23/0x50 [ 280.645623][ T9710] ? __nla_validate_parse+0x1e7/0x28b0 [ 280.645641][ T9710] ? __pfx___nla_validate_parse+0x10/0x10 [ 280.645656][ T9710] ? rcu_is_watching+0x13/0xc0 [ 280.645670][ T9710] ? cap_capable+0x107/0x430 [ 280.645689][ T9710] ? __nla_parse+0x40/0x60 [ 280.645703][ T9710] nfnetlink_rcv+0x3bd/0x440 [ 280.645720][ T9710] ? __pfx_nfnetlink_rcv+0x10/0x10 [ 280.645736][ T9710] netlink_unicast+0x585/0x850 [ 280.645755][ T9710] ? __pfx_netlink_unicast+0x10/0x10 [ 280.645771][ T9710] ? __pfx_sock_has_perm+0x10/0x10 [ 280.645788][ T9710] netlink_sendmsg+0x8b0/0xda0 [ 280.645806][ T9710] ? __pfx_netlink_sendmsg+0x10/0x10 [ 280.645828][ T9710] ? selinux_socket_sendmsg+0x198/0x2f0 [ 280.645846][ T9710] ____sys_sendmsg+0xa4d/0xbe0 [ 280.645858][ T9710] ? __pfx_netlink_sendmsg+0x10/0x10 [ 280.645875][ T9710] ? __pfx_____sys_sendmsg+0x10/0x10 [ 280.645892][ T9710] ? lock_acquire+0x1d1/0x380 [ 280.645902][ T9710] ? get_pid_task+0x2a/0x250 [ 280.645918][ T9710] ___sys_sendmsg+0x190/0x1e0 [ 280.645933][ T9710] ? __pfx____sys_sendmsg+0x10/0x10 [ 280.645946][ T9710] ? get_pid_task+0x106/0x250 [ 280.645965][ T9710] ? find_held_lock+0x2b/0x80 [ 280.645988][ T9710] __sys_sendmsg+0x160/0x210 [ 280.645999][ T9710] ? __pfx___sys_sendmsg+0x10/0x10 [ 280.646017][ T9710] do_syscall_64+0x123/0x790 [ 280.646031][ T9710] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 280.646043][ T9710] RIP: 0033:0x7fa36599e159 [ 280.646054][ T9710] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 280.646065][ T9710] RSP: 002b:00007fa36684e028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 280.646077][ T9710] RAX: ffffffffffffffda RBX: 00007fa365c25fa0 RCX: 00007fa36599e159 [ 280.646084][ T9710] RDX: 0000000000000040 RSI: 0000200000009b40 RDI: 0000000000000003 [ 280.646090][ T9710] RBP: 00007fa36684e090 R08: 0000000000000000 R09: 0000000000000000 [ 280.646096][ T9710] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 280.646103][ T9710] R13: 00007fa365c26038 R14: 00007fa365c25fa0 R15: 00007ffe97f2e228 [ 280.646116][ T9710] [ 281.031054][ T9715] ================================================================== [ 281.031071][ T9715] BUG: KASAN: null-ptr-deref in dlm_user_unlock+0x283/0x890 [ 281.031101][ T9715] Read of size 8 at addr 0000000000000050 by task syz.0.1131/9715 [ 281.031113][ T9715] [ 281.031124][ T9715] CPU: 0 UID: 0 PID: 9715 Comm: syz.0.1131 Not tainted syzkaller #0 PREEMPT(full) [ 281.031144][ T9715] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/05/2026 [ 281.031154][ T9715] Call Trace: [ 281.031160][ T9715] [ 281.031168][ T9715] dump_stack_lvl+0x100/0x190 [ 281.031189][ T9715] kasan_report+0xdf/0x1c0 [ 281.031207][ T9715] ? dlm_user_unlock+0x283/0x890 [ 281.031226][ T9715] kasan_check_range+0x10f/0x1e0 [ 281.031243][ T9715] dlm_user_unlock+0x283/0x890 [ 281.031266][ T9715] ? __pfx_dlm_user_unlock+0x10/0x10 [ 281.031286][ T9715] ? kasan_save_track+0x14/0x30 [ 281.031299][ T9715] ? device_write+0x979/0x1c90 [ 281.031318][ T9715] ? device_write+0xc30/0x1c90 [ 281.031337][ T9715] device_write+0xdc6/0x1c90 [ 281.031355][ T9715] ? avc_policy_seqno+0x9/0x20 [ 281.031370][ T9715] ? __pfx_device_write+0x10/0x10 [ 281.031389][ T9715] ? bpf_lsm_file_permission+0x9/0x10 [ 281.031405][ T9715] ? security_file_permission+0x76/0x210 [ 281.031419][ T9715] ? rw_verify_area+0xce/0x6d0 [ 281.031439][ T9715] vfs_write+0x2aa/0x1050 [ 281.031457][ T9715] ? __pfx_device_write+0x10/0x10 [ 281.031475][ T9715] ? lock_acquire+0x1d1/0x380 [ 281.031489][ T9715] ? __fget_files+0x34/0x3d0 [ 281.031502][ T9715] ? __pfx_vfs_write+0x10/0x10 [ 281.031519][ T9715] ? find_held_lock+0x2b/0x80 [ 281.031536][ T9715] ? __fget_files+0x215/0x3d0 [ 281.031549][ T9715] ? __fget_files+0x215/0x3d0 [ 281.031575][ T9715] ? __fget_files+0x21f/0x3d0 [ 281.031594][ T9715] ksys_write+0x12a/0x250 [ 281.031607][ T9715] ? __pfx_ksys_write+0x10/0x10 [ 281.031622][ T9715] ? kcov_ioctl+0x17a/0x760 [ 281.031640][ T9715] do_syscall_64+0x123/0x790 [ 281.031659][ T9715] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 281.031676][ T9715] RIP: 0033:0x7f20ce19e159 [ 281.031690][ T9715] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 281.031703][ T9715] RSP: 002b:00007f20cc3d5028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 281.031716][ T9715] RAX: ffffffffffffffda RBX: 00007f20ce426090 RCX: 00007f20ce19e159 [ 281.031724][ T9715] RDX: 0000000000000078 RSI: 0000200000000300 RDI: 0000000000000004 [ 281.031732][ T9715] RBP: 00007f20ce235024 R08: 0000000000000000 R09: 0000000000000000 [ 281.031739][ T9715] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 281.031747][ T9715] R13: 00007f20ce426128 R14: 00007f20ce426090 R15: 00007fffa8e2d388 [ 281.031761][ T9715] [ 281.031768][ T9715] ================================================================== [ 281.316966][ T9715] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 281.366949][ T9715] CPU: 0 UID: 0 PID: 9715 Comm: syz.0.1131 Not tainted syzkaller #0 PREEMPT(full) [ 281.376222][ T9715] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/05/2026 [ 281.386354][ T9715] Call Trace: [ 281.389619][ T9715] [ 281.392541][ T9715] dump_stack_lvl+0x100/0x190 [ 281.397225][ T9715] vpanic+0x553/0x970 [ 281.401194][ T9715] ? __pfx_vpanic+0x10/0x10 [ 281.405690][ T9715] ? mark_held_locks+0x40/0x70 [ 281.410435][ T9715] ? dlm_user_unlock+0x283/0x890 [ 281.415373][ T9715] panic+0xd1/0xe0 [ 281.419072][ T9715] ? __pfx_panic+0x10/0x10 [ 281.423483][ T9715] ? dlm_user_unlock+0x283/0x890 [ 281.428408][ T9715] ? preempt_schedule_common+0x3c/0xb0 [ 281.433865][ T9715] check_panic_on_warn.cold+0x19/0x34 [ 281.439237][ T9715] end_report.part.0+0x3a/0x90 [ 281.444007][ T9715] kasan_report.cold+0xe/0x18 [ 281.448690][ T9715] ? dlm_user_unlock+0x283/0x890 [ 281.453625][ T9715] kasan_check_range+0x10f/0x1e0 [ 281.458557][ T9715] dlm_user_unlock+0x283/0x890 [ 281.463310][ T9715] ? __pfx_dlm_user_unlock+0x10/0x10 [ 281.468593][ T9715] ? kasan_save_track+0x14/0x30 [ 281.473429][ T9715] ? device_write+0x979/0x1c90 [ 281.478183][ T9715] ? device_write+0xc30/0x1c90 [ 281.482946][ T9715] device_write+0xdc6/0x1c90 [ 281.487519][ T9715] ? avc_policy_seqno+0x9/0x20 [ 281.492260][ T9715] ? __pfx_device_write+0x10/0x10 [ 281.497266][ T9715] ? bpf_lsm_file_permission+0x9/0x10 [ 281.502613][ T9715] ? security_file_permission+0x76/0x210 [ 281.508219][ T9715] ? rw_verify_area+0xce/0x6d0 [ 281.512978][ T9715] vfs_write+0x2aa/0x1050 [ 281.517299][ T9715] ? __pfx_device_write+0x10/0x10 [ 281.522318][ T9715] ? lock_acquire+0x1d1/0x380 [ 281.526980][ T9715] ? __fget_files+0x34/0x3d0 [ 281.531561][ T9715] ? __pfx_vfs_write+0x10/0x10 [ 281.536302][ T9715] ? find_held_lock+0x2b/0x80 [ 281.540958][ T9715] ? __fget_files+0x215/0x3d0 [ 281.545626][ T9715] ? __fget_files+0x215/0x3d0 [ 281.550288][ T9715] ? __fget_files+0x21f/0x3d0 [ 281.554977][ T9715] ksys_write+0x12a/0x250 [ 281.559476][ T9715] ? __pfx_ksys_write+0x10/0x10 [ 281.564316][ T9715] ? kcov_ioctl+0x17a/0x760 [ 281.568811][ T9715] do_syscall_64+0x123/0x790 [ 281.573382][ T9715] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 281.579266][ T9715] RIP: 0033:0x7f20ce19e159 [ 281.583681][ T9715] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 281.603285][ T9715] RSP: 002b:00007f20cc3d5028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 281.611689][ T9715] RAX: ffffffffffffffda RBX: 00007f20ce426090 RCX: 00007f20ce19e159 [ 281.619673][ T9715] RDX: 0000000000000078 RSI: 0000200000000300 RDI: 0000000000000004 [ 281.627630][ T9715] RBP: 00007f20ce235024 R08: 0000000000000000 R09: 0000000000000000 [ 281.635582][ T9715] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 281.643579][ T9715] R13: 00007f20ce426128 R14: 00007f20ce426090 R15: 00007fffa8e2d388 [ 281.651558][ T9715] [ 281.654631][ T9715] Kernel Offset: disabled [ 281.658951][ T9715] Rebooting in 86400 seconds..