last executing test programs: 42.975622659s ago: executing program 1 (id=2362): r0 = fsopen(0x0, 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x0, 0x0) fchdir(r1) mkdirat(0xffffffffffffff9c, &(0x7f0000019e80)='./file0\x00', 0x1ff) 42.832868665s ago: executing program 1 (id=2363): openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000000)={0xa, 0x400000000008d}, 0x0) r0 = userfaultfd(0x801) ioctl$UFFDIO_API(r0, 0xc018aa3f, 0x0) r1 = socket$kcm(0x2, 0x200000000000001, 0x0) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000d00)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000d40)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000d80)=@abs={0x0, 0x0, 0x3}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000e00), 0x651, 0x0) sendmsg$inet(r1, &(0x7f0000000e80)={&(0x7f0000000ec0)={0x2, 0x4001, @dev}, 0x10, 0x0}, 0x3000c085) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) shmctl$IPC_SET(0x0, 0x1, 0x0) sendmsg$NFT_BATCH(r5, &(0x7f0000000f80)={0x0, 0x0, &(0x7f0000000fc0)={&(0x7f0000001000)=ANY=[], 0xd0}, 0x1, 0x0, 0x0, 0x2404c894}, 0x0) sendmsg$inet(r1, &(0x7f0000001100)={0x0, 0xeafbff3, &(0x7f0000001140)=[{&(0x7f0000001180)="b8", 0xfffffdef}], 0x1, 0x0, 0x0, 0x10000000}, 0x52cc) 41.373756696s ago: executing program 1 (id=2369): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./config\x00', 0x1ff) mount(0x0, &(0x7f0000000100)='./config\x00', &(0x7f0000000180)='configfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, 0x0, 0x1, 0x0) write(r0, &(0x7f0000000600)='fc\n', 0x3) 41.274381205s ago: executing program 1 (id=2371): r0 = fsopen(0x0, 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x0, 0x0) fchdir(r1) mkdirat(0xffffffffffffff9c, &(0x7f0000019e80)='./file0\x00', 0x1ff) 41.274049085s ago: executing program 1 (id=2372): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000004c0)={'syzkaller0\x00', 0x1}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000500), 0x0, 0x0) close(r1) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000540)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000580)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000600)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0x4, 0x5f, 0x4, 0xb47e, 0xb, 0x3, 0xd, 0xf, 0x1fe}}}}]}, 0x58}, 0x1, 0x0, 0x0, 0x40088c8}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000680)={'syzkaller0\x00', @multicast}) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f00000000c0)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, 0x0, 0x0) r6 = socket$packet(0x11, 0x2, 0x300) sendto$packet(r6, &(0x7f0000000300)='0', 0x1, 0x40000, &(0x7f0000000340)={0x11, 0x6, r5, 0x1, 0x2, 0x6, @local}, 0x14) 41.125700879s ago: executing program 1 (id=2374): socket$inet6_sctp(0xa, 0x1, 0x84) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./nfsd\x00', 0x1ff) mount(0x0, &(0x7f00000000c0)='./nfsd\x00', &(0x7f0000000100)='nfsd\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./nfsd/portlist\x00', 0x1, 0x0) write(r0, &(0x7f0000000180)='3', 0x1d) 25.962414599s ago: executing program 32 (id=2374): socket$inet6_sctp(0xa, 0x1, 0x84) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./nfsd\x00', 0x1ff) mount(0x0, &(0x7f00000000c0)='./nfsd\x00', &(0x7f0000000100)='nfsd\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./nfsd/portlist\x00', 0x1, 0x0) write(r0, &(0x7f0000000180)='3', 0x1d) 8.875429121s ago: executing program 0 (id=2767): r0 = openat$dm_control(0xffffffffffffff9c, &(0x7f0000000ac0), 0x2, 0x0) r1 = openat$dm_control(0xffffffffffffff9c, &(0x7f0000000200), 0x883, 0x0) ioctl$DM_DEV_CREATE(r1, 0xc138fd03, 0x0) ioctl$DM_TABLE_LOAD(r0, 0xc138fd09, &(0x7f0000000040)={0x4, 0x0, 0x0, 0x1a8, 0x138, 0x1, 0x0, 0x4000, 0x0, 0x0, @by_dev, [@flakey={0x0, 0x2000, 0x0, 0x70, 'flakey\x00', {{@ram_num={'1:', 0x0}, 0x20, '4096'}, 0x20, 0x1, 0x20, 0x1, ' 0'}}]}) 8.753899019s ago: executing program 0 (id=2768): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="58000000020603000000000000000000000000000c000300686173683a69700005000400000000000900020073797a31000000001400078008001340000017e5080012400000000905000500020000000500010006"], 0x58}}, 0x4c8d0) sendmsg$IPSET_CMD_ADD(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000005c0)=ANY=[@ANYBLOB="44000000090601020000000000000000000000000900020073797a310000000005000100070000001c0007800c00018008000140fffffffe0c00028008000140", @ANYBLOB="5f29e21e12333f6bf8210abc0b3779191d2f5eb33a"], 0x44}, 0x1, 0x0, 0x0, 0x40080}, 0x4000050) 8.174025762s ago: executing program 0 (id=2772): mkdir(&(0x7f0000005580)='./config\x00', 0x1ff) mount(0x0, &(0x7f0000005640)='./config\x00', &(0x7f000000bc40)='configfs\x00', 0x0, 0x0) mkdir(&(0x7f000000bc80)='./config/cluster/ocfs2\x00', 0x1ff) mkdir(&(0x7f000000bcc0)='./config/cluster/ocfs2/node/node0\x00', 0x1ff) r0 = openat(0xffffffffffffff9c, &(0x7f000000bd00)='./config/cluster/ocfs2/node/node0/ipv4_address\x00', 0x1, 0x0) write(r0, &(0x7f000000bd40)='127.0.0.1', 0x9) r1 = openat(0xffffffffffffff9c, &(0x7f000000bd80)='./config/cluster/ocfs2/node/node0/ipv4_port\x00', 0x1, 0x0) write(r1, &(0x7f000000bdc0)='7', 0x1) r2 = openat(0xffffffffffffff9c, &(0x7f000000be00)='./config/cluster/ocfs2/node/node0/num\x00', 0x1, 0x1) write(r2, &(0x7f000000be40)='0', 0x1) r3 = openat(0xffffffffffffff9c, &(0x7f000000be80)='./config/cluster/ocfs2/node/node0/local\x00', 0x1, 0x0) write(r3, &(0x7f000000bec0)='1', 0x1) mkdir(&(0x7f000000bf00)='./config/cluster/ocfs2/heartbeat/hb0\x00', 0x1ff) r4 = openat(0xffffffffffffff9c, &(0x7f000000bfc0)='./config/cluster/ocfs2/heartbeat/hb0/start_block\x00', 0x1, 0x0) write(r4, &(0x7f000000c000)='1', 0x1) r5 = openat(0xffffffffffffff9c, &(0x7f000000c040)='./config/cluster/ocfs2/heartbeat/hb0/blocks\x00', 0x1, 0x0) write(r5, 0x0, 0x0) r6 = openat(0xffffffffffffff9c, &(0x7f000000c0c0)='./config/cluster/ocfs2/heartbeat/hb0/dev\x00', 0x1, 0x0) write(r6, &(0x7f000000c100)='3', 0x1) 8.169985532s ago: executing program 0 (id=2773): r0 = openat$dm_control(0xffffffffffffff9c, &(0x7f0000000000), 0x800, 0x0) ioctl$DM_DEV_CREATE(r0, 0xc138fd03, &(0x7f0000000140)={0x4, 0x0, 0x0, 0x138, 0x138, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, {'syz', 0x0, '2\x00'}}}) 8.117225927s ago: executing program 0 (id=2774): socket$nl_netfilter(0x10, 0x3, 0xc) socket(0x40000000015, 0x5, 0x0) syz_open_dev$vim2m(&(0x7f0000000040), 0x1, 0x2) r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) syz_init_net_socket$bt_bnep(0x1f, 0x3, 0x4) listen(r0, 0x5) syz_emit_vhci(&(0x7f0000000200)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x0, 0x0, 0x12}, @l2cap_cid_le_signaling={{0xe}, @l2cap_ecred_conn_req={{0x17, 0x42, 0xa}, {0x80, 0x200, 0x200, 0xa, [0x40]}}}}, 0x17) socket$inet6_sctp(0xa, 0x5, 0x84) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000240), 0x80200, 0x0) pselect6(0x40, &(0x7f00000002c0)={0x3, 0x0, 0x202, 0x7d, 0x10000, 0x8000, 0x4, 0x1}, 0x0, &(0x7f0000000300)={0x3ff, 0x6, 0xffffffffffffffff, 0x9, 0x0, 0xf, 0x80000006, 0xb06c}, 0x0, 0x0) 6.453079848s ago: executing program 0 (id=2835): r0 = syz_open_dev$dri(&(0x7f0000000380), 0x0, 0x402) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000003c0)={0x1, &(0x7f0000000400)=[{0x6, 0xff, 0xfe, 0x7fff0006}]}) r2 = openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000440), 0xa2003, 0x0) ioctl$DMA_HEAP_IOCTL_ALLOC(r2, 0xc0184800, &(0x7f0000000480)={0x20004, r1}) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r0, 0xc00c642e, &(0x7f00000004c0)={0x0, 0x0, r3}) mmap(&(0x7f0000001000/0x4000)=nil, 0x4000, 0x200000e, 0x11, r0, 0x100000000) 6.340878762s ago: executing program 33 (id=2835): r0 = syz_open_dev$dri(&(0x7f0000000380), 0x0, 0x402) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000003c0)={0x1, &(0x7f0000000400)=[{0x6, 0xff, 0xfe, 0x7fff0006}]}) r2 = openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000440), 0xa2003, 0x0) ioctl$DMA_HEAP_IOCTL_ALLOC(r2, 0xc0184800, &(0x7f0000000480)={0x20004, r1}) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r0, 0xc00c642e, &(0x7f00000004c0)={0x0, 0x0, r3}) mmap(&(0x7f0000001000/0x4000)=nil, 0x4000, 0x200000e, 0x11, r0, 0x100000000) 2.233448683s ago: executing program 4 (id=2879): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x3, 0xe, &(0x7f00000006c0)=ANY=[@ANYBLOB="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"], &(0x7f00000012c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000001300), 0xfffffedf, 0x10, &(0x7f0000001340)}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000001380)={r0, 0x18000000000002a0, 0xd, 0x0, &(0x7f0000001400)="d2ff03076003008cb29e08f088", 0x0, 0x200009, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x50) 2.13567603s ago: executing program 4 (id=2880): r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000140)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002680)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f00000028c0)=ANY=[@ANYBLOB="034886dd01000000000014"], 0xfdef) 2.055356558s ago: executing program 4 (id=2882): setns(0xc9, 0x0) socket$netlink(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000300)=0x7) socketpair$unix(0x1, 0x2, 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) syz_genetlink_get_family_id$netlbl_cipso(0x0, 0xffffffffffffffff) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) syz_open_dev$evdev(&(0x7f0000000100), 0x2, 0x862b01) 1.896200794s ago: executing program 3 (id=2883): openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000000)={0xa, 0x400000000008d}, 0x0) r0 = userfaultfd(0x801) ioctl$UFFDIO_API(r0, 0xc018aa3f, 0x0) r1 = socket$kcm(0x2, 0x200000000000001, 0x0) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000d00)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000d40)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000d80)=@abs={0x0, 0x0, 0x3}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000e00), 0x651, 0x0) sendmsg$inet(r1, &(0x7f0000000e80)={&(0x7f0000000ec0)={0x2, 0x4001, @dev}, 0x10, 0x0}, 0x3000c085) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) shmctl$IPC_SET(0x0, 0x1, 0x0) sendmsg$NFT_BATCH(r5, &(0x7f0000000f80)={0x0, 0x0, &(0x7f0000000fc0)={&(0x7f0000001000)=ANY=[@ANYBLOB="140000001000010000080000000000000200000a20000000000a050000000000000000000100fffc0900010073797a300000000040000000030a01010000000000000000010000000900030073797a310000000014000480080002400000000008000140000000030900010073797a300000000048000000060a0104000000000000000001000000200004801c0001800b00010072656a65637400000c000280080001400000000108000b40000000000900010073797a3000000000140000001100"], 0xd0}, 0x1, 0x0, 0x0, 0x2404c894}, 0x0) sendmsg$inet(r1, &(0x7f0000001100)={0x0, 0xeafbff3, &(0x7f0000001140)=[{&(0x7f0000001180)="b8", 0xfffffdef}], 0x1, 0x0, 0x0, 0x10000000}, 0x52cc) 1.786271138s ago: executing program 5 (id=2884): socket$nl_netfilter(0x10, 0x3, 0xc) socket(0x40000000015, 0x5, 0x0) r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) bind$bt_l2cap(r0, &(0x7f00000001c0)={0x1f, 0x80, @any, 0x0, 0x1}, 0x10) syz_init_net_socket$bt_bnep(0x1f, 0x3, 0x4) listen(r0, 0x5) syz_emit_vhci(&(0x7f0000000200)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x0, 0x0, 0x12}, @l2cap_cid_le_signaling={{0xe}, @l2cap_ecred_conn_req={{0x17, 0x42, 0xa}, {0x80, 0x200, 0x200, 0xa, [0x40]}}}}, 0x17) socket$inet6_sctp(0xa, 0x5, 0x84) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000240), 0x80200, 0x0) pselect6(0x40, &(0x7f00000002c0)={0x3, 0x0, 0x202, 0x7d, 0x10000, 0x8000, 0x4, 0x1}, 0x0, &(0x7f0000000300)={0x3ff, 0x6, 0xffffffffffffffff, 0x9, 0x0, 0xf, 0x80000006, 0xb06c}, 0x0, 0x0) 1.234588458s ago: executing program 5 (id=2885): r0 = syz_open_dev$usbfs(&(0x7f0000001e00), 0x76, 0x101b01) ioctl$USBDEVFS_DISCONNECT_CLAIM(r0, 0x8108551b, &(0x7f0000001e40)={0x0, 0x2, "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"}) ioctl$USBDEVFS_SETINTERFACE(r0, 0x80045510, &(0x7f0000001f80)={0x0, 0x200000}) 1.234314706s ago: executing program 5 (id=2886): mkdir(&(0x7f0000005580)='./config\x00', 0x1ff) mount(0x0, &(0x7f0000005640)='./config\x00', &(0x7f000000bc40)='configfs\x00', 0x0, 0x0) mkdir(&(0x7f000000bc80)='./config/cluster/ocfs2\x00', 0x1ff) mkdir(&(0x7f000000bcc0)='./config/cluster/ocfs2/node/node0\x00', 0x1ff) r0 = openat(0xffffffffffffff9c, &(0x7f000000bd00)='./config/cluster/ocfs2/node/node0/ipv4_address\x00', 0x1, 0x0) write(r0, &(0x7f000000bd40)='127.0.0.1', 0x9) r1 = openat(0xffffffffffffff9c, &(0x7f000000bd80)='./config/cluster/ocfs2/node/node0/ipv4_port\x00', 0x1, 0x0) write(r1, &(0x7f000000bdc0)='7', 0x1) r2 = openat(0xffffffffffffff9c, &(0x7f000000be00)='./config/cluster/ocfs2/node/node0/num\x00', 0x1, 0x1) write(r2, &(0x7f000000be40)='0', 0x1) r3 = openat(0xffffffffffffff9c, &(0x7f000000be80)='./config/cluster/ocfs2/node/node0/local\x00', 0x1, 0x0) write(r3, &(0x7f000000bec0)='1', 0x1) mkdir(&(0x7f000000bf00)='./config/cluster/ocfs2/heartbeat/hb0\x00', 0x1ff) r4 = openat(0xffffffffffffff9c, &(0x7f000000bfc0)='./config/cluster/ocfs2/heartbeat/hb0/start_block\x00', 0x1, 0x0) write(r4, &(0x7f000000c000)='1', 0x1) r5 = openat(0xffffffffffffff9c, &(0x7f000000c040)='./config/cluster/ocfs2/heartbeat/hb0/blocks\x00', 0x1, 0x0) write(r5, 0x0, 0x0) write(0xffffffffffffffff, &(0x7f000000c100)='3', 0x1) 1.1742945s ago: executing program 5 (id=2888): r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000940), 0x802, 0x0) ioctl$UI_BEGIN_FF_ERASE(r0, 0xc00c55ca, 0x0) 1.151325681s ago: executing program 5 (id=2889): sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=ANY=[@ANYBLOB="4800000010000104"], 0x48}}, 0x0) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000cc0)={'syz1\x00', {0x8, 0x2, 0x8, 0x9b99}, 0x25, [0x9, 0x7, 0x102, 0x6, 0x8, 0x155f, 0x10000006, 0x6, 0x2dcd, 0x1, 0xb4, 0x8, 0xa2b9, 0x6, 0x7, 0xe1, 0x6, 0xfc000004, 0x403, 0xbbf, 0x3, 0xfffffffd, 0xfffffff7, 0xd, 0x0, 0x0, 0x6, 0x4, 0x100002, 0xc3, 0x5d6, 0x8002, 0x8a, 0x79, 0x2, 0x10080, 0x3c, 0x91, 0x129, 0x4, 0x16, 0x5, 0x5, 0x401, 0x1, 0x405, 0xa7, 0x81, 0x709, 0xf9a2, 0xa9, 0xff, 0xffffffff, 0x2, 0x2, 0x2, 0x7, 0x5, 0x7ff, 0x4, 0x4007f, 0xffffffff, 0x8, 0x4], [0x401, 0x3, 0x6, 0x9, 0x4, 0x8000c66, 0xa8a9, 0x2000006f, 0x8e, 0xd50, 0x7, 0xad, 0x2, 0x809, 0x40, 0xa7, 0x1000, 0x0, 0x200b398, 0x8001, 0xfffffffe, 0x4, 0x1c, 0x10000, 0x1, 0xfffffffe, 0x9, 0x8, 0xffffff7f, 0x6, 0x6, 0x9, 0x40000004, 0x0, 0xfffbfff8, 0x4, 0x46, 0xf1, 0x7, 0xeb00060, 0x2, 0x9, 0xffffffff, 0x5, 0x3fe, 0x1ff, 0x1, 0x7fff, 0x67b2, 0x1cc, 0x9, 0x80000004, 0x6, 0x438, 0x2, 0x9, 0x2, 0x7fffffff, 0x4, 0xfffffff9, 0x18e, 0x1000, 0x2, 0x5], [0x2, 0xfffffffe, 0x9, 0x10, 0x2, 0x2e6bf783, 0x80000001, 0x5, 0x5, 0x491, 0x9, 0x7, 0x7f, 0x400, 0x102, 0x1, 0x41, 0x6, 0xee4b, 0x2000004, 0x1, 0xc, 0x5, 0x9, 0x5, 0x3, 0x9, 0x3, 0xc7, 0xfff, 0x10000a, 0x2, 0x400, 0x8, 0x10, 0xd3, 0x8, 0x97f7, 0x3, 0x200000d, 0x3, 0x10010, 0x7, 0xdd81, 0x4, 0x7f, 0x9d27, 0x9, 0x1, 0x100, 0x2, 0x2, 0x7ffe, 0x28, 0x5, 0xd500, 0x1, 0x77, 0x5, 0x6, 0x10000, 0x8, 0x5, 0xfffffffe], [0xa772, 0x6, 0x5, 0x8, 0xbfc, 0x9, 0x5, 0x7f, 0x55, 0x7ff, 0xff, 0x1005, 0x10000001, 0x4, 0x21, 0x9, 0x81, 0x7, 0x9d87, 0x8, 0x8, 0x4, 0x140f1, 0x0, 0x3, 0x4, 0x80008001, 0xbbd6, 0x1, 0x2, 0x100, 0x200d8ce, 0x7fffffff, 0x100009, 0xc, 0x32d, 0x10003, 0x1ff, 0x2000803, 0xffffffff, 0x10000, 0x0, 0x8004, 0x7fff, 0x3, 0x6, 0xf, 0xe, 0x8, 0x274, 0x6, 0xfffffff9, 0x7, 0x9, 0x9, 0x4, 0x463f, 0xf, 0xdab, 0x5, 0x8, 0x14002, 0x8, 0xab6b]}, 0x45c) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) bind$netlink(0xffffffffffffffff, &(0x7f0000000380)={0x10, 0x0, 0x25dfdbff, 0x2ffffffff}, 0xc) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_MEMORY_ATTRIBUTES(r2, 0x4020aed2, &(0x7f00000001c0)={0x60000, 0x18000, 0x9fef19c9430e26b8}) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000000)={[0x35, 0xfff, 0xfffffffffffffffe, 0x40000000000180, 0x2, 0x7, 0xf2, 0xd, 0x7fffffffffffe, 0x7, 0x5, 0xb, 0x7, 0xfffffffffffffff8, 0x9, 0x8], 0x25000, 0x304}) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000300)={0x4c, 0x2, 0x6, 0xa03, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_CADT_FLAGS={0x8, 0x8, 0x1, 0x0, 0xd3}, @IPSET_ATTR_TIMEOUT={0x8}]}]}, 0x4c}, 0x1, 0x0, 0x0, 0x2002c0c4}, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB="2800000012000100"/20, @ANYRES32=0x0, @ANYBLOB="000000000000000408001d00ff03"], 0x28}, 0x1, 0x0, 0x0, 0x2000}, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) r4 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r5 = dup(r4) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r4, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text32={0x20, 0x0}], 0x1, 0x50, 0x0, 0x0) ioctl$KVM_RUN(r6, 0xae80, 0x0) 1.151109901s ago: executing program 4 (id=2890): mkdir(&(0x7f0000005580)='./config\x00', 0x1ff) mount(0x0, &(0x7f0000005640)='./config\x00', &(0x7f000000bc40)='configfs\x00', 0x0, 0x0) mkdir(&(0x7f000000bc80)='./config/cluster/ocfs2\x00', 0x1ff) mkdir(&(0x7f000000bcc0)='./config/cluster/ocfs2/node/node0\x00', 0x1ff) r0 = openat(0xffffffffffffff9c, &(0x7f000000bd00)='./config/cluster/ocfs2/node/node0/ipv4_address\x00', 0x1, 0x0) write(r0, &(0x7f000000bd40)='127.0.0.1', 0x9) r1 = openat(0xffffffffffffff9c, &(0x7f000000bd80)='./config/cluster/ocfs2/node/node0/ipv4_port\x00', 0x1, 0x0) write(r1, &(0x7f000000bdc0)='7', 0x1) r2 = openat(0xffffffffffffff9c, &(0x7f000000be00)='./config/cluster/ocfs2/node/node0/num\x00', 0x1, 0x1) write(r2, &(0x7f000000be40)='0', 0x1) r3 = openat(0xffffffffffffff9c, &(0x7f000000be80)='./config/cluster/ocfs2/node/node0/local\x00', 0x1, 0x0) write(r3, &(0x7f000000bec0)='1', 0x1) mkdir(&(0x7f000000bf00)='./config/cluster/ocfs2/heartbeat/hb0\x00', 0x1ff) write(0xffffffffffffffff, 0x0, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f000000c0c0)='./config/cluster/ocfs2/heartbeat/hb0/dev\x00', 0x1, 0x0) write(r4, &(0x7f000000c100)='3', 0x1) 1.147216927s ago: executing program 2 (id=2891): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x22, &(0x7f0000001040)=0x3, 0x4) 1.065727539s ago: executing program 4 (id=2892): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000180)={0x1, &(0x7f00000001c0)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) close_range(r0, 0xffffffffffffffff, 0x0) openat$vcsa(0xffffffffffffff9c, &(0x7f0000000200), 0xd7a10da4a7122766, 0x0) mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) syz_ublk_setup_io_uring(0x20, &(0x7f00000002c0)={0x0, 0xd40c, 0x1000, 0x40002, 0x1e5}, &(0x7f0000000340), &(0x7f0000000380), &(0x7f00000003c0)=0x0) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, r1, 0x0, &(0x7f00000004c0)=0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = dup(r3) syz_ublk_setup_queues(r4, r2, 0x0, &(0x7f0000000700)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x7ddc, 0x80, 0x2, 0x33d, 0x0, r4}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x7396, 0x8, 0x0, 0x142}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x727b, 0x400, 0x9, 0x135}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x2, 0x800, 0x2, 0xffffffff}}], 0x1, 0x0, 0x0) 1.065490837s ago: executing program 2 (id=2893): mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000100)='./proc\x00', &(0x7f0000000140)='proc\x00', 0x4000, 0x0) sched_setscheduler(0x0, 0x1, 0x0) sched_setscheduler(0x0, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xd6d1c000) syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) write(r0, &(0x7f0000000300)='27', 0x2) openat$rfkill(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) 1.013807396s ago: executing program 4 (id=2894): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./sys\x00', &(0x7f00000000c0)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./sys/power/state\x00', 0x1, 0x0) write(r0, &(0x7f0000000240)='freeze', 0x6) 1.013352346s ago: executing program 3 (id=2895): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000000)={0x1, &(0x7f0000000280)=[{0x6, 0xfa, 0x0, 0xe4}]}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='bbr', 0x3) sendmmsg$inet(r0, 0x0, 0x0, 0x2090) sendto(r0, &(0x7f0000000340)="8d13b131", 0x4, 0x4000041, 0x0, 0x0) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000600)=0xdf8, 0x4) sendto$inet(r0, &(0x7f0000000580)="17", 0x59a, 0x10008095, 0x0, 0x0) 955.5493ms ago: executing program 3 (id=2896): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc\x00', 0x4) mount(0x0, &(0x7f0000000040)='./proc\x00', &(0x7f0000000080)='proc\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f00000000c0)='./proc/thread-self/fail-nth\x00', 0x2, 0x10b) open_tree(0xffffffffffffff9c, &(0x7f00000002c0)='\x00', 0x89901) 955.119852ms ago: executing program 3 (id=2897): sendmsg$TEAM_CMD_OPTIONS_SET(0xffffffffffffffff, &(0x7f0000004bc0)={0x0, 0x0, &(0x7f0000004b80)={&(0x7f0000000100)=ANY=[@ANYBLOB="60b8", @ANYRES16, @ANYBLOB="050427bd7000fedbdf250100000008000100", @ANYRES32, @ANYBLOB="4400028040000100240001006d6f6465000000000000000000000000000000000000000000000000000000000500030005"], 0x60}, 0x1, 0x0, 0x0, 0x4000401}, 0x4040084) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=@newqdisc={0x44, 0x24, 0x1, 0x80000000, 0x4, {0x0, 0x0, 0x0, 0x0, {0x8, 0x3}, {0xa, 0xffe0}, {0xfff1, 0x9}}, [@qdisc_kind_options=@q_fq_pie={{0xb}, {0x14, 0x8002, [@TCA_FQ_PIE_LIMIT={0x8, 0x1, 0xf4b6}, @TCA_FQ_PIE_FLOWS={0x8, 0x2, 0xfe2a}]}}]}, 0x44}}, 0x20004055) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[], 0x5c}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0300000000000000280012800a00010076786c616e00"], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840) getsockopt$IP6T_SO_GET_INFO(0xffffffffffffffff, 0x29, 0x40, 0x0, &(0x7f0000000140)) r0 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r0, &(0x7f00000002c0), 0x40000000000009f, 0x0) 864.815981ms ago: executing program 3 (id=2898): symlinkat(&(0x7f00000002c0)='.\x00', 0xffffffffffffff9c, &(0x7f0000000300)='./file1\x00') mount(&(0x7f00000007c0)=@filename='none\x00', 0x0, &(0x7f0000000800)='sysfs\x00', 0x0, 0x0) ioctl$sock_SIOCBRADDBR(0xffffffffffffffff, 0x89a0, 0x0) r0 = syz_open_dev$sndpcmc(&(0x7f0000000000), 0x0, 0x2) ioctl$SNDRV_PCM_IOCTL_HW_PARAMS(r0, 0xc2604111, &(0x7f00000003c0)={0xe9, [[0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff], [0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff, 0x3], [0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff, 0xffffdfff, 0xffffffff, 0xffffffff]], '\x00', [{0xd, 0x10, 0x0, 0x0, 0x1}, {0x20, 0x20, 0x0, 0x0, 0x1}, {0x2, 0x4, 0x0, 0x0, 0x1}, {0xac44, 0xac44, 0x0, 0x0, 0x1}, {0x1388, 0x186a0, 0x0, 0x0, 0x1}, {0x100, 0x400, 0x0, 0x0, 0x1}, {0x400, 0x1000, 0x0, 0x0, 0x1}, {0x2, 0x8, 0x0, 0x0, 0x1}, {0x2710, 0xf4240, 0x0, 0x0, 0x1}, {0x400, 0x1000, 0x0, 0x0, 0x1}, {0x1000, 0x4000, 0x0, 0x0, 0x1}, {0x0, 0xf4240, 0x0, 0x0, 0x1}]}) readv(r0, &(0x7f0000000640)=[{&(0x7f0000000680)=""/174, 0xae}], 0x1) ioctl$VHOST_SET_VRING_ADDR(0xffffffffffffffff, 0x4028af11, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000840), 0x800, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000880)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f00000008c0)=0x7) r1 = syz_open_dev$sndmidi(&(0x7f0000000900), 0x2, 0x143102) writev(r1, &(0x7f0000000940)=[{&(0x7f0000000980)="94", 0xf000}, {0x0}], 0x2) r2 = openat$nullb(0xffffffffffffff9c, &(0x7f00000009c0), 0x1c3902, 0x0) r3 = fsopen(&(0x7f0000000a00)='nfs\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r3, 0x1, &(0x7f0000000b40)='source\x00', &(0x7f0000000b80)='127.0.0.1:/export\x00', 0x0) writev(0xffffffffffffffff, 0x0, 0x0) sendfile(r2, r2, 0x0, 0x200000) openat$dir(0xffffffffffffff9c, &(0x7f00000000c0)='./bus/file0\x00', 0x240082, 0x20) 864.294266ms ago: executing program 2 (id=2899): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nbd(&(0x7f00000003c0), r0) sendmsg$NBD_CMD_CONNECT(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000004c0)=ANY=[@ANYBLOB='<\x00\x00', @ANYRES16=r1, @ANYBLOB="010029bd7000fbdbdf25010000000c00020000000000000000001c00078018000180080001"], 0x3c}, 0x1, 0x0, 0x0, 0x4000004}, 0x4000) 863.627304ms ago: executing program 5 (id=2900): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000004c0)={'syzkaller0\x00', 0x1}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000500), 0x0, 0x0) close(r1) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000580)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000600)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0x4, 0x5f, 0x4, 0xb47e, 0xb, 0x3, 0xd, 0xf, 0x1fe}}}}]}, 0x58}, 0x1, 0x0, 0x0, 0x40088c8}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000680)={'syzkaller0\x00', @multicast}) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f00000000c0)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000280)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdc01, {0x0, 0x0, 0x0, r4, {0x0, 0x8}, {0x1, 0xb}, {0xffff, 0xffe0}}, [@qdisc_kind_options=@q_skbprio={{0xc}, {0x8, 0x2, 0x4}}]}, 0x38}, 0x1, 0x0, 0x0, 0x240448a4}, 0x0) r5 = socket$packet(0x11, 0x2, 0x300) sendto$packet(r5, &(0x7f0000000300)='0', 0x1, 0x40000, &(0x7f0000000340)={0x11, 0x6, r4, 0x1, 0x2, 0x6, @local}, 0x14) 714.322553ms ago: executing program 2 (id=2901): socket$nl_netfilter(0x10, 0x3, 0xc) socket(0x40000000015, 0x5, 0x0) r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) bind$bt_l2cap(r0, &(0x7f00000001c0)={0x1f, 0x80, @any, 0x0, 0x1}, 0x10) syz_init_net_socket$bt_bnep(0x1f, 0x3, 0x4) listen(r0, 0x5) syz_emit_vhci(&(0x7f0000000200)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x0, 0x0, 0x12}, @l2cap_cid_le_signaling={{0xe}, @l2cap_ecred_conn_req={{0x17, 0x42, 0xa}, {0x80, 0x200, 0x200, 0xa, [0x40]}}}}, 0x17) socket$inet6_sctp(0xa, 0x5, 0x84) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000240), 0x80200, 0x0) pselect6(0x40, &(0x7f00000002c0)={0x3, 0x0, 0x202, 0x7d, 0x10000, 0x8000, 0x4, 0x1}, 0x0, &(0x7f0000000300)={0x3ff, 0x6, 0xffffffffffffffff, 0x9, 0x0, 0xf, 0x80000006, 0xb06c}, 0x0, 0x0) 12.901486ms ago: executing program 2 (id=2902): close(0x3) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000), 0x4200, 0x0) 12.404405ms ago: executing program 2 (id=2903): openat$dsp1(0xffffffffffffff9c, &(0x7f0000000000), 0x20080, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, &(0x7f0000000580)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0xffff, 0x3fd, 0x0, 0xb2, 0x0, 0x2}, 0x9c) gettimeofday(0x0, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000280), r3) r5 = socket$can_raw(0x1d, 0x3, 0x1) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000300)={'lo\x00'}) sendmsg$ETHTOOL_MSG_TSINFO_GET(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)={0x14, r4, 0x6a98047402e98331, 0x4070bd29, 0x25dfdbff}, 0x14}, 0x1, 0x0, 0x0, 0x4004110}, 0x28000) syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), 0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) r6 = socket$kcm(0x29, 0x2, 0x0) sendmsg$inet(r6, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f00c00e}, 0x40804) memfd_create(&(0x7f00000002c0)='\x103q}2\x9a\xce\xaf\x03\xdfy[\xd9\xffR8\xf4\x1c\bi\xe4^\xd5\xfd\xa9\r\xac7A\x94\xa0\x00\x00\x00\x90+\xd6\x05\r\x84\x87\x1c\b\xdb\xe2\x00\x00A\x90m\xb6&\xd0\x9d\x00\x00\xc5\xb8,\f\xd4s\xb2\x99/\xc0\x9a\xf2O\xdb\x00\x00\x00\x00\x00\x00\r\x1b\xd3\xff<\x83z\x80\x8fQ|\xf5d\x10\x10\xd7\x01M\x7fML\x18\'\x1a<\xfee7{l\x16}\xa0S\x7f\xb5)l\xbb\x02\xfa\xb7\xb6\xa0]\xda8\xe0~\x1c \x91\t\x8b\xbd\x1f\xb3834d1i\x9b\x94\xa6\\\x0e\xe2\xfa\xe5!\xd3\xcf\xfc\xce\xba\xe2\x9f\x05xgL5\x14Y+\xb3\x1axi)<\xf7\x98\xc17%8\x94y\x98\xf0l\xa0\'Q%\xd4\xda\xee\x81}\xcc\xfd\xa2\xe3M~x\x96\xe3]\xd70\xa2\x17\xca\xde\x1b\xaa\xe0l\xfc\x85\x8fc\x1c{|e\x8bs\xb0\x85E\xce;p)\xf8\xa6\xaa&QC4V\x81\x04\xcf\xd2\x81\xdc\xdf\xd7<\x9f\x93\x8bX\xd4\xea\xb2\xff\b\x92\xc7\x00\xef\xff\x00\x93\x1f\x92\xa7dcY\x9c\x9e9O-\xfcF\xbb\xbd{:IR\xea\xd8$\xe2\xa0\xc2\x8b\x1a\xead\xb8\xe1:6\x15M\x1d\xdak\x8c\x909\xd8\xb3\x02\xe0\x04\x9c\xc2\x06|\xf0\x0f\xa6Y&r\x9b\xc7\x1d\xe7jDf\x87@\x8fg\x15RJwe\xe2\xdcunu\xff`\xa40\xce\xffB%\xe4k\xff\x8d\x06\x0e\x89\xd9DC\x9fF\x9c[M=\xe0^\xa8\xed)\xe8Z\xe8\x99&\x87\x04\xa4\t\xaa\xd8\xd6\xd5pG\xcb\xc4\x8b\xf7\xb8#\xcb\xd8|\xa5\xa6S\x8b\x8cv\xb7)\x02k\xf3L\x03\xbb\xfa\xe1\\\xf1\x8cUj\xd5\xa5\x88GL\xe7_\xfd\x17C=G\x0f\xe9u\x1d\xfeg\xfex\xcd\xaa\xad\x906\xd0sy\xc6T\x93\xae\xd5r\xc8G\xc5\xfdS\xff\x04:`\x1e\xe3;l\xcd&\xd4\xf4\x8eum\x04\x00~\xfa\x05\xd7\xe7X\xc7/\xae5\x93wwT\x13\xbd,\xd6\x16\x84\xcd\xd1\xd8\xe1P_\xbf0\xd8\x8d%Yh\xb5\xb4\"\xf5\x93\xdeh\xce\xa5\xe8\xc8\xec\x88\x89\xf07{\x95\xc9\xd0\xee\xe1\x1d\x80\xcc]-\xc2\xa1\x02ELhI\xd9\xf5\xcfk\x8a&i\xc1\xff9T\x8e\xe2rY\xa3\xd2H9\xfe\x0e\x1e\xac\x0f\xc3\xbd{\xd9\xcc\xbe\xa9\x93\xe0\xa4W\x1cn>\xc1\xf1\x9e\"\x93\x19\x19\x1a\xcc\x7fy\xd2~\x05\x99\xe6\x00o\xca\xe0\xc6\xd4\xf5\xa0\xc8P\xd6;\xf3\xc6~E\xacI\xd4\xe9\xa1|>\x91.K\x81\xa9+\xcf\xff\xcb\xfa\x0f\xe7n\x83H\x12\xac\x80\x16\xf8\x87Q\x97Az\n`I\xd2\x00\x00\x00\x00\x00\x00D\xec\xa6\t1\xa0h\xfc\x1f\xdd1@-4\xb4:\xf8\xd5wP \x84m\xe2\xd9\xfcb\xa0\xc3\xc9\xe7W\x86\xd7$\xa4ml\xee\x97[\xb7\xfa\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00e\xe7\xaaH\x00\x00', 0x7) r7 = syz_open_procfs(0x0, &(0x7f0000000180)='net/kcm\x00') preadv(r7, &(0x7f0000000400)=[{&(0x7f0000000000)=""/194, 0xc2}], 0x1, 0x182, 0xffffffff) 0s ago: executing program 3 (id=2904): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000000)={0x1, &(0x7f0000000280)=[{0x6, 0xfa, 0x0, 0xe4}]}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='bbr', 0x3) sendmmsg$inet(r0, 0x0, 0x0, 0x2090) sendto(r0, &(0x7f0000000340)="8d13b131", 0x4, 0x4000041, 0x0, 0x0) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000600)=0xdf8, 0x4) sendto$inet(r0, &(0x7f0000000580)="17", 0x59a, 0x10008095, 0x0, 0x0) kernel console output (not intermixed with test programs): 249] overlayfs: failed to clone upperpath [ 152.560789][T10249] netlink: 14 bytes leftover after parsing attributes in process `syz.2.1720'. [ 152.650230][T10261] netlink: 132732 bytes leftover after parsing attributes in process `syz.2.1726'. [ 153.100381][T10273] netlink: 14 bytes leftover after parsing attributes in process `syz.1.1731'. [ 154.322076][ T42] audit: type=1400 audit(1792762457.791:567): avc: denied { checkpoint_restore } for pid=10296 comm="syz.1.1741" capability=40 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 155.246765][T10316] netlink: 'syz.2.1746': attribute type 21 has an invalid length. [ 155.246789][T10316] IPv6: NLM_F_CREATE should be specified when creating new route [ 155.246879][T10316] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 155.246888][T10316] IPv6: NLM_F_CREATE should be set when creating new route [ 155.463009][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 155.482679][ T0] NOHZ tick-stop error: local softirq work is pending, handler #300!!! [ 155.505786][ T42] audit: type=1400 audit(1792762458.971:568): avc: denied { bind } for pid=10319 comm="syz.2.1747" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 156.066682][T10326] overlayfs: failed to clone upperpath [ 156.088416][T10326] netlink: 14 bytes leftover after parsing attributes in process `syz.3.1749'. [ 156.757910][T10341] o2cb: This node has not been configured. [ 156.757924][T10341] o2cb: Cluster check failed. Fix errors before retrying. [ 156.757942][T10341] (syz.3.1754,10341,1):user_dlm_register:674 ERROR: status = -22 [ 156.757967][T10341] (syz.3.1754,10341,1):dlmfs_mkdir:437 ERROR: Error -22 could not register domain "file0" [ 156.900404][ T42] audit: type=1400 audit(1792762460.221:569): avc: denied { mount } for pid=10340 comm="syz.3.1754" name="/" dev="ocfs2_dlmfs" ino=22813 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 156.900474][ T42] audit: type=1400 audit(1792762460.221:570): avc: denied { write } for pid=10340 comm="syz.3.1754" name="/" dev="ocfs2_dlmfs" ino=22813 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 156.900497][ T42] audit: type=1400 audit(1792762460.221:571): avc: denied { add_name } for pid=10340 comm="syz.3.1754" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 156.900518][ T42] audit: type=1400 audit(1792762460.221:572): avc: denied { create } for pid=10340 comm="syz.3.1754" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=dir permissive=1 [ 156.900538][ T42] audit: type=1400 audit(1792762460.221:573): avc: denied { associate } for pid=10340 comm="syz.3.1754" name="file0" scontext=root:object_r:unlabeled_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 157.256591][T10357] overlayfs: failed to clone upperpath [ 157.270783][T10357] netlink: 14 bytes leftover after parsing attributes in process `syz.2.1758'. [ 157.364618][T10366] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 158.526084][ T42] audit: type=1400 audit(1792762461.991:574): avc: denied { write } for pid=10388 comm="syz.2.1772" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 159.715993][ T5775] Bluetooth: hci1: unexpected event for opcode 0x080d [ 160.100488][ T5862] usb 6-1: new high-speed USB device number 20 using dummy_hcd [ 160.244477][T10436] overlayfs: failed to clone upperpath [ 160.252393][ T5862] usb 6-1: Using ep0 maxpacket: 32 [ 160.252943][ T5862] usb 6-1: New USB device found, idVendor=2c42, idProduct=1202, bcdDevice=85.40 [ 160.254060][ T5862] usb 6-1: config 0 has an invalid interface number: 12 but max is 0 [ 160.254077][ T5862] usb 6-1: config 0 has no interface number 0 [ 160.254107][ T5862] usb 6-1: config 0 interface 12 has no altsetting 0 [ 160.255969][ T5862] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 160.255986][ T5862] usb 6-1: Product: syz [ 160.255997][ T5862] usb 6-1: Manufacturer: syz [ 160.256009][ T5862] usb 6-1: SerialNumber: syz [ 160.258510][T10436] netlink: 14 bytes leftover after parsing attributes in process `syz.3.1789'. [ 160.259802][ T5862] usb 6-1: config 0 descriptor?? [ 160.731326][T10458] overlayfs: failed to clone upperpath [ 160.783381][T10458] netlink: 14 bytes leftover after parsing attributes in process `syz.0.1798'. [ 161.200040][T10465] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1800'. [ 161.420408][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 162.030908][ T5862] f81534 6-1:0.12: f81534_set_register: reg: 1003 data: d8 failed: -71 [ 162.030955][ T5862] f81534 6-1:0.12: f81534_find_config_idx: read failed: -71 [ 162.030964][ T5862] f81534 6-1:0.12: f81534_calc_num_ports: find idx failed: -71 [ 162.031000][ T5862] f81534 6-1:0.12: probe with driver f81534 failed with error -71 [ 162.037539][ T5862] usb 6-1: USB disconnect, device number 20 [ 162.584035][T10482] overlayfs: failed to clone upperpath [ 162.602296][T10482] netlink: 14 bytes leftover after parsing attributes in process `syz.0.1807'. [ 164.227341][ T42] audit: type=1400 audit(1792762723.605:575): avc: denied { read write } for pid=10509 comm="syz.1.1818" name="rdma_cm" dev="devtmpfs" ino=1292 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:infiniband_device_t tclass=chr_file permissive=1 [ 164.227556][ T42] audit: type=1400 audit(1792762723.605:576): avc: denied { open } for pid=10509 comm="syz.1.1818" path="/dev/infiniband/rdma_cm" dev="devtmpfs" ino=1292 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:infiniband_device_t tclass=chr_file permissive=1 [ 164.364966][T10518] i2c i2c-1: Frontend requested software zigzag, but didn't set the frequency step size [ 164.608157][T10532] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1827'. [ 164.620539][T10532] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1827'. [ 164.621262][T10532] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1827'. [ 164.631619][ T12] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 164.631645][ T12] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 164.631663][ T12] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 164.631680][ T12] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 164.728563][ T29] usb 6-1: new full-speed USB device number 21 using dummy_hcd [ 164.884898][ T29] usb 6-1: not running at top speed; connect to a high speed hub [ 164.885010][ T29] usb 6-1: New USB device found, idVendor=1b80, idProduct=e309, bcdDevice=1f.40 [ 164.888933][ T29] usb 6-1: config 1 has an invalid interface number: 167 but max is 0 [ 164.889024][ T29] usb 6-1: config 1 has no interface number 0 [ 164.889254][ T29] usb 6-1: config 1 interface 167 altsetting 167 endpoint 0x8A has invalid maxpacket 1024, setting to 64 [ 164.889340][ T29] usb 6-1: config 1 interface 167 has no altsetting 0 [ 164.903148][ T29] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 164.903274][ T29] usb 6-1: Product: syz [ 164.903372][ T29] usb 6-1: Manufacturer: syz [ 164.903979][ T29] usb 6-1: SerialNumber: syz [ 165.229429][ T29] em28xx 6-1:1.167: New device syz syz @ 12 Mbps (1b80:e309, interface 167, class 167) [ 165.229450][ T29] em28xx 6-1:1.167: Device initialization failed. [ 165.229462][ T29] em28xx 6-1:1.167: Device must be connected to a high-speed USB 2.0 port. [ 165.230565][ T29] usb 6-1: USB disconnect, device number 21 [ 165.530665][ T5134] Bluetooth: hci3: command 0x0406 tx timeout [ 165.530741][ T5134] Bluetooth: hci1: command 0x0406 tx timeout [ 165.621391][ T67] Bluetooth: hci2: command 0x0406 tx timeout [ 165.868629][ T42] audit: type=1326 audit(1792762725.335:577): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10570 comm="syz.2.1843" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f74d0b9f559 code=0x7ffc0000 [ 165.868880][ T42] audit: type=1326 audit(1792762725.335:578): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10570 comm="syz.2.1843" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f74d0b9f559 code=0x7ffc0000 [ 165.869078][ T42] audit: type=1326 audit(1792762725.335:579): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10570 comm="syz.2.1843" exe="/syz-executor" sig=0 arch=c000003e syscall=188 compat=0 ip=0x7f74d0b9f559 code=0x7ffc0000 [ 165.869396][ T42] audit: type=1326 audit(1792762725.335:580): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10570 comm="syz.2.1843" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f74d0b9f559 code=0x7ffc0000 [ 165.869628][ T42] audit: type=1326 audit(1792762725.335:581): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10570 comm="syz.2.1843" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f74d0b9f559 code=0x7ffc0000 [ 165.869847][ T42] audit: type=1326 audit(1792762725.335:582): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10570 comm="syz.2.1843" exe="/syz-executor" sig=0 arch=c000003e syscall=192 compat=0 ip=0x7f74d0b9f559 code=0x7ffc0000 [ 165.870109][ T42] audit: type=1326 audit(1792762725.335:583): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10570 comm="syz.2.1843" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f74d0b9f559 code=0x7ffc0000 [ 165.871594][ T42] audit: type=1326 audit(1792762725.335:584): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10570 comm="syz.2.1843" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f74d0b9f559 code=0x7ffc0000 [ 165.878307][T10560] infiniband syz1: set down [ 165.878324][T10560] infiniband syz1: added ipvlan1 [ 165.889230][T10560] smbdirect: ib_dev[syz1]: added: IB_CA max_fast_reg_page_list_len=512 device_cap_flags=0x1c001223c76 kernel_cap_flags=0x14 page_size_cap=0xfffff000 [ 165.889262][T10560] smbdirect: ib_dev[syz1]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=32 max_cqe=32767 max_qp_wr=1048576 max_send_sge=32 max_recv_sge=32 [ 165.889297][T10560] smbdirect: ib_dev[syz1]PORT[1]: iwarp=0 ib=0 roce=1 v1=0 v2=1 core_cap_flags=0x803005 [ 165.912534][T10560] RDS/IB: syz1: added [ 165.912567][T10560] smc: adding ib device syz1 with port count 1 [ 165.912584][T10560] smc: ib device syz1 port 1 has no pnetid [ 166.256323][T10586] overlayfs: failed to clone upperpath [ 166.291876][T10586] netlink: 14 bytes leftover after parsing attributes in process `syz.0.1850'. [ 166.385684][T10597] Illegal XDP return value 4294967274 on prog (id 68) dev N/A, expect packet loss! [ 167.373409][T10631] xt_CONNSECMARK: invalid mode: 66 [ 167.918345][T10646] capability: warning: `syz.0.1875' uses deprecated v2 capabilities in a way that may be insecure [ 169.348033][T10677] overlayfs: failed to clone upperpath [ 169.362352][T10677] netlink: 14 bytes leftover after parsing attributes in process `syz.3.1885'. [ 169.557677][T10682] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1887'. [ 169.796977][ T42] kauditd_printk_skb: 27 callbacks suppressed [ 169.796993][ T42] audit: type=1400 audit(1792762729.265:612): avc: denied { setopt } for pid=10693 comm="syz.0.1893" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 170.675337][T10699] overlayfs: failed to clone upperpath [ 170.689750][T10699] netlink: 14 bytes leftover after parsing attributes in process `syz.2.1894'. [ 170.865001][ T42] audit: type=1326 audit(1792762730.335:613): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10704 comm="syz.1.1896" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efc6c39f559 code=0x7ffc0000 [ 170.865115][ T42] audit: type=1326 audit(1792762730.335:614): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10704 comm="syz.1.1896" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efc6c39f559 code=0x7ffc0000 [ 170.866264][ T42] audit: type=1326 audit(1792762730.335:615): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10704 comm="syz.1.1896" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efc6c39f559 code=0x7ffc0000 [ 170.866400][ T42] audit: type=1326 audit(1792762730.335:616): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10704 comm="syz.1.1896" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efc6c39f559 code=0x7ffc0000 [ 170.866440][ T42] audit: type=1326 audit(1792762730.335:617): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10704 comm="syz.1.1896" exe="/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7efc6c39f559 code=0x7ffc0000 [ 170.867611][ T42] audit: type=1326 audit(1792762730.335:618): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10704 comm="syz.1.1896" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efc6c39f559 code=0x7ffc0000 [ 170.867760][ T42] audit: type=1326 audit(1792762730.335:619): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10704 comm="syz.1.1896" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efc6c39f559 code=0x7ffc0000 [ 170.868510][ T42] audit: type=1326 audit(1792762730.335:620): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10704 comm="syz.1.1896" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efc6c39f559 code=0x7ffc0000 [ 170.868649][ T42] audit: type=1326 audit(1792762730.335:621): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10704 comm="syz.1.1896" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efc6c39f559 code=0x7ffc0000 [ 170.948553][ T64] IPVS: starting estimator thread 0... [ 171.040453][T10710] IPVS: using max 27 ests per chain, 64800 per kthread [ 171.796881][T10726] overlayfs: failed to clone upperpath [ 173.491325][T10773] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1925'. [ 173.520460][ T5821] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 173.520489][ T5821] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 173.520507][ T5821] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 173.520605][ T5821] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 173.758551][T10783] overlayfs: failed to clone upperpath [ 173.821629][ T0] NOHZ tick-stop error: local softirq work is pending, handler #08!!! [ 173.846798][T10786] netlink: 14 bytes leftover after parsing attributes in process `syz.2.1929'. [ 174.079307][T10794] o2cb: This node has not been configured. [ 174.079318][T10794] o2cb: Cluster check failed. Fix errors before retrying. [ 174.079328][T10794] (syz.0.1934,10794,0):user_dlm_register:674 ERROR: status = -22 [ 174.079343][T10794] (syz.0.1934,10794,0):dlmfs_mkdir:437 ERROR: Error -22 could not register domain "file0" [ 174.937333][T10804] ip6t_rpfilter: unknown options [ 175.151957][T10812] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1936'. [ 175.194213][T10816] overlayfs: failed to clone upperpath [ 175.211745][T10816] netlink: 14 bytes leftover after parsing attributes in process `syz.0.1943'. [ 175.711764][T10833] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1951'. [ 175.740571][ T5821] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 175.740615][ T5821] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 175.740646][ T5821] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 175.740675][ T5821] netdevsim netdevsim3 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 175.781122][T10841] overlayfs: failed to clone upperpath [ 175.789379][T10841] netlink: 14 bytes leftover after parsing attributes in process `syz.3.1955'. [ 175.918530][T10856] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1962'. [ 175.919976][T10856] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1962'. [ 175.920247][T10856] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1962'. [ 175.978649][T10864] overlayfs: failed to clone upperpath [ 175.983001][T10864] netlink: 14 bytes leftover after parsing attributes in process `syz.2.1966'. [ 177.230019][T10917] IPVS: lblc: FWM 3 0x00000003 - no destination available [ 178.160924][T10941] IPVS: lblc: FWM 3 0x00000003 - no destination available [ 179.273337][T10975] 9p: Bad value for 'rfdno' [ 179.543265][ T42] kauditd_printk_skb: 20 callbacks suppressed [ 179.543282][ T42] audit: type=1400 audit(1792762739.015:642): avc: denied { listen } for pid=10989 comm="syz.2.2022" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 179.765393][T11000] __nla_validate_parse: 3 callbacks suppressed [ 179.765413][T11000] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2025'. [ 179.773648][T11000] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2025'. [ 181.014261][T11018] overlayfs: failed to clone upperpath [ 181.018504][T11018] netlink: 14 bytes leftover after parsing attributes in process `syz.3.2033'. [ 181.037655][ T42] audit: type=1400 audit(1792762740.505:643): avc: denied { execute } for pid=11021 comm="syz-executor" name="syz-executor" dev="sda1" ino=2020 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:etc_runtime_t tclass=file permissive=1 [ 181.037966][ T42] audit: type=1400 audit(1792762740.505:644): avc: denied { execute_no_trans } for pid=11021 comm="syz-executor" path="/syz-executor" dev="sda1" ino=2020 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:etc_runtime_t tclass=file permissive=1 [ 181.108638][ T5775] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 181.110415][ T5775] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 181.111590][ T5775] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 181.112512][ T5775] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 181.112951][ T5775] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 181.120230][ T42] audit: type=1400 audit(1792762740.585:645): avc: denied { mounton } for pid=11023 comm="syz-executor" path="/" dev="sda1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:root_t tclass=dir permissive=1 [ 181.314600][T11023] rxe_eth0 speed is unknown, defaulting to 1000 [ 181.614939][T11023] bridge0: port 1(bridge_slave_0) entered blocking state [ 181.615084][T11023] bridge0: port 1(bridge_slave_0) entered disabled state [ 181.615184][T11023] bridge_slave_0: entered allmulticast mode [ 181.616481][T11023] bridge_slave_0: entered promiscuous mode [ 181.618783][T11023] bridge0: port 2(bridge_slave_1) entered blocking state [ 181.618846][T11023] bridge0: port 2(bridge_slave_1) entered disabled state [ 181.620202][T11023] bridge_slave_1: entered allmulticast mode [ 181.620967][T11023] bridge_slave_1: entered promiscuous mode [ 181.654222][T11023] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 181.655614][T11023] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 181.663692][T11044] netlink: 32 bytes leftover after parsing attributes in process `syz.0.2035'. [ 181.668025][T11023] team0: Port device team_slave_0 added [ 181.669419][T11023] team0: Port device team_slave_1 added [ 181.681368][T11023] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 181.681388][T11023] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 181.681401][T11023] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 181.682390][T11023] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 181.682397][T11023] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 181.682411][T11023] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 181.701430][T11023] hsr_slave_0: entered promiscuous mode [ 181.701869][T11023] hsr_slave_1: entered promiscuous mode [ 181.702163][T11023] debugfs: 'hsr0' already exists in 'hsr' [ 181.702185][T11023] Cannot create hsr debugfs directory [ 181.777916][T11023] netdevsim netdevsim3 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 181.777941][T11023] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 181.839428][T11023] netdevsim netdevsim3 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 181.839461][T11023] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 181.919225][T11023] netdevsim netdevsim3 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 181.919248][T11023] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 181.994810][T11023] netdevsim netdevsim3 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 181.994865][T11023] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 182.009799][ T42] audit: type=1400 audit(1792762741.475:646): avc: denied { mount } for pid=11051 comm="syz.0.2039" name="/" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=filesystem permissive=1 [ 182.017589][T11058] netlink: 128 bytes leftover after parsing attributes in process `syz.0.2039'. [ 182.017610][T11058] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 182.276320][T11023] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 182.301131][T11023] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 182.306381][T11023] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 182.336593][T11023] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 182.339710][T11023] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 182.362540][T11023] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 182.366065][T11023] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 182.389345][T11023] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 182.447867][ T42] audit: type=1400 audit(1792762741.915:647): avc: denied { write } for pid=11059 comm="syz.1.2042" name="mcfilter" dev="proc" ino=4026532933 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_net_t tclass=file permissive=1 [ 182.501470][T11023] 8021q: adding VLAN 0 to HW filter on device bond0 [ 182.516898][T11023] 8021q: adding VLAN 0 to HW filter on device team0 [ 182.524118][ T1176] bridge0: port 1(bridge_slave_0) entered blocking state [ 182.524206][ T1176] bridge0: port 1(bridge_slave_0) entered forwarding state [ 182.545697][ T1176] bridge0: port 2(bridge_slave_1) entered blocking state [ 182.545788][ T1176] bridge0: port 2(bridge_slave_1) entered forwarding state [ 182.751323][T11076] md: array md2 already has disks! [ 182.788447][T11076] md/raid:md2: device ram4 operational as raid disk 0 [ 182.798313][T11076] md/raid:md2: not enough operational devices (2/3 failed) [ 182.836442][T11023] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 182.869915][T11023] veth0_vlan: entered promiscuous mode [ 182.875547][T11023] veth1_vlan: entered promiscuous mode [ 182.889684][T11023] veth0_macvtap: entered promiscuous mode [ 182.894060][T11023] veth1_macvtap: entered promiscuous mode [ 182.901037][T11023] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 182.908598][T11023] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 182.916110][ T5821] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 182.916248][ T5821] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 182.916319][ T5821] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 182.916346][ T5821] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 182.962543][ T1164] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 182.962556][ T1164] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 182.983835][ T64] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 182.983848][ T64] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 182.994585][ T42] audit: type=1400 audit(1792762742.465:648): avc: denied { mounton } for pid=11023 comm="syz-executor" path="/dev/gadgetfs" dev="devtmpfs" ino=2861 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:device_t tclass=dir permissive=1 [ 183.003226][T11076] md/raid:md2: failed to run raid set. [ 183.003238][T11076] md: pers->run() failed ... [ 183.003339][T11080] md: could not open device unknown-block(1,4). [ 183.003384][T11080] md: error, md_import_device() returned -16 [ 183.029071][ T42] audit: type=1400 audit(1792762742.495:649): avc: denied { mounton } for pid=11023 comm="syz-executor" path="/sys/fs/fuse/connections" dev="fusectl" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=dir permissive=1 [ 183.029379][ T42] audit: type=1400 audit(1792762742.495:650): avc: denied { mount } for pid=11023 comm="syz-executor" name="/" dev="fusectl" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=filesystem permissive=1 [ 183.130670][ T67] Bluetooth: hci4: command tx timeout [ 183.192930][ T42] audit: type=1800 audit(1792762742.665:651): pid=11109 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed(directio) comm="syz.1.2052" name="file0" dev="overlay" ino=1784 res=0 errno=-22 [ 183.216592][T11109] netlink: 14 bytes leftover after parsing attributes in process `syz.1.2052'. [ 183.513815][ T67] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci2/hci2:201' [ 183.513836][ T67] CPU: 1 UID: 0 PID: 67 Comm: kworker/u34:0 Not tainted syzkaller #0 PREEMPT(full) [ 183.513851][ T67] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 183.513860][ T67] Workqueue: hci2 hci_rx_work [ 183.513905][ T67] Call Trace: [ 183.513910][ T67] [ 183.513915][ T67] dump_stack_lvl+0x100/0x190 [ 183.513935][ T67] sysfs_warn_dup.cold+0x1c/0x28 [ 183.513953][ T67] sysfs_create_dir_ns+0x24b/0x2b0 [ 183.513970][ T67] ? __pfx_sysfs_create_dir_ns+0x10/0x10 [ 183.513982][ T67] ? find_held_lock+0x2b/0x80 [ 183.513999][ T67] ? kobject_add_internal+0x25f/0x930 [ 183.514014][ T67] ? kobject_add_internal+0x25f/0x930 [ 183.514028][ T67] ? do_raw_spin_unlock+0x145/0x1e0 [ 183.514045][ T67] kobject_add_internal+0x2c8/0x930 [ 183.514060][ T67] kobject_add+0x16a/0x1e0 [ 183.514072][ T67] ? __pfx_kobject_add+0x10/0x10 [ 183.514083][ T67] ? class_to_subsys+0x10f/0x150 [ 183.514107][ T67] ? kobject_put+0xb9/0x640 [ 183.514116][ T67] ? _raw_spin_unlock+0x28/0x50 [ 183.514134][ T67] device_add+0x294/0x1970 [ 183.514148][ T67] ? __pfx_dev_set_name+0x10/0x10 [ 183.514165][ T67] ? __pfx_device_add+0x10/0x10 [ 183.514177][ T67] ? mgmt_send_event_skb+0x2fb/0x460 [ 183.514206][ T67] hci_conn_add_sysfs+0x1a3/0x260 [ 183.514218][ T67] le_conn_complete_evt+0x12f9/0x2200 [ 183.514239][ T67] ? __pfx_le_conn_complete_evt+0x10/0x10 [ 183.514255][ T67] ? hci_event_packet+0x186/0xcd0 [ 183.514275][ T67] hci_le_conn_complete_evt+0x23c/0x3a0 [ 183.514293][ T67] ? skb_pull_data+0x15f/0x1e0 [ 183.514313][ T67] hci_le_meta_evt+0x34a/0x5f0 [ 183.514330][ T67] ? __pfx_hci_le_conn_complete_evt+0x10/0x10 [ 183.514348][ T67] hci_event_packet+0x51c/0xcd0 [ 183.514364][ T67] ? __pfx_hci_le_meta_evt+0x10/0x10 [ 183.514381][ T67] ? __pfx_hci_event_packet+0x10/0x10 [ 183.514402][ T67] ? lockdep_hardirqs_on+0x7d/0x110 [ 183.514419][ T67] hci_rx_work+0x6ea/0x10c0 [ 183.514438][ T67] process_one_work+0xac7/0x1b10 [ 183.514461][ T67] ? __pfx_process_one_work+0x10/0x10 [ 183.514478][ T67] ? lock_acquire+0x1d1/0x380 [ 183.514494][ T67] ? __pfx_hci_rx_work+0x10/0x10 [ 183.514510][ T67] worker_thread+0x5ef/0xe50 [ 183.514532][ T67] ? kthread+0x13a/0x450 [ 183.514546][ T67] ? __pfx_worker_thread+0x10/0x10 [ 183.514561][ T67] kthread+0x373/0x450 [ 183.514575][ T67] ? __pfx_kthread+0x10/0x10 [ 183.514591][ T67] ret_from_fork+0x730/0xd60 [ 183.514605][ T67] ? __pfx_ret_from_fork+0x10/0x10 [ 183.514618][ T67] ? __switch_to+0x800/0x10e0 [ 183.514635][ T67] ? __pfx_kthread+0x10/0x10 [ 183.514650][ T67] ret_from_fork_asm+0x1a/0x30 [ 183.514670][ T67] [ 183.514685][ T67] kobject: kobject_add_internal failed for hci2:201 with -EEXIST, don't try to register things with the same name in the same directory. [ 183.514705][ T67] Bluetooth: hci2: failed to register connection device [ 184.575165][T11139] No such timeout policy "syz1" [ 184.665709][ T42] kauditd_printk_skb: 1 callbacks suppressed [ 184.665727][ T42] audit: type=1400 audit(1792762744.135:653): avc: denied { read append } for pid=11145 comm="syz.1.2066" name="rtc0" dev="devtmpfs" ino=942 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 184.665769][ T42] audit: type=1400 audit(1792762744.135:654): avc: denied { open } for pid=11145 comm="syz.1.2066" path="/dev/rtc0" dev="devtmpfs" ino=942 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 184.667715][ T42] audit: type=1400 audit(1792762744.135:655): avc: denied { ioctl } for pid=11145 comm="syz.1.2066" path="/dev/rtc0" dev="devtmpfs" ino=942 ioctlcmd=0x4028700f scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 184.669147][T11146] rtc_cmos PNP0B00:00: Alarms can be up to one day in the future [ 185.211103][ T67] Bluetooth: hci4: command tx timeout [ 187.330571][ T67] Bluetooth: hci4: command tx timeout [ 187.847128][ T42] audit: type=1400 audit(1792762747.315:656): avc: denied { write } for pid=11209 comm="syz.1.2094" name="001" dev="devtmpfs" ino=763 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 187.891306][T11213] No such timeout policy "syz1" [ 188.111792][T11216] 9p: Bad value for 'rfdno' [ 189.370432][ T5775] Bluetooth: hci4: command tx timeout [ 189.496580][ T0] NOHZ tick-stop error: local softirq work is pending, handler #20a!!! [ 189.690477][ T5775] Bluetooth: hci2: command 0x0406 tx timeout [ 189.990408][ T0] NOHZ tick-stop error: local softirq work is pending, handler #42!!! [ 190.081910][T11241] 9p: Bad value for 'rfdno' [ 190.920085][ T67] Bluetooth: hci2: unexpected event for opcode 0x0000 [ 191.046098][ T42] audit: type=1400 audit(1792762750.515:657): avc: denied { write } for pid=11260 comm="syz.3.2114" name="loop2" dev="devtmpfs" ino=658 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 191.530493][ T0] NOHZ tick-stop error: local softirq work is pending, handler #180!!! [ 191.785065][ T0] NOHZ tick-stop error: local softirq work is pending, handler #48!!! [ 191.788535][T11290] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2126'. [ 192.770972][ T42] audit: type=1400 audit(1792762752.235:658): avc: denied { read write } for pid=11301 comm="syz.1.2130" name="nullb0" dev="devtmpfs" ino=705 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 192.771397][ T42] audit: type=1400 audit(1792762752.235:659): avc: denied { open } for pid=11301 comm="syz.1.2130" path="/dev/nullb0" dev="devtmpfs" ino=705 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 194.221324][ T1449] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.221382][ T1449] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.630851][ T42] audit: type=1800 audit(1792762754.105:660): pid=11338 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed(directio) comm="syz.3.2141" name="file0" dev="overlay" ino=128 res=0 errno=-22 [ 194.973047][ T67] Bluetooth: hci2: Controller not accepting commands anymore: ncmd = 0 [ 194.973126][ T67] Bluetooth: hci2: Injecting HCI hardware error event [ 194.974505][ T67] Bluetooth: hci2: hardware error 0x00 [ 195.545684][T11370] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2155'. [ 195.545701][T11370] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2155'. [ 195.546611][T11370] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2155'. [ 195.546627][T11370] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2155'. [ 195.660731][ T5775] Bluetooth: hci3: unexpected event for opcode 0x000d [ 196.599062][ T5784] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 196.603398][ T5784] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 196.608525][ T5784] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 196.612985][ T5784] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 196.614191][ T5784] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 197.342179][ T5821] netdevsim netdevsim2 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 197.342202][ T5821] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 197.620345][ T67] Bluetooth: hci2: Opcode 0x0c03 failed: -110 [ 197.641126][ T5821] netdevsim netdevsim2 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 197.641617][ T5821] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 197.829598][ T5821] netdevsim netdevsim2 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 197.829645][ T5821] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 197.936102][ T5821] netdevsim netdevsim2 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 197.936213][ T5821] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 198.650866][ T67] Bluetooth: hci1: command tx timeout [ 198.686318][ T5821] bridge_slave_0: left allmulticast mode [ 198.686367][ T5821] bridge_slave_0: left promiscuous mode [ 198.687469][ T5821] bridge0: port 1(bridge_slave_0) entered disabled state [ 199.080970][ T5821] bond0 (unregistering): Released all slaves [ 199.158955][ T5821] tipc: Left network mode [ 199.158980][T11404] rxe_eth0 speed is unknown, defaulting to 1000 [ 199.175388][ T42] audit: type=1400 audit(1792762758.645:661): avc: denied { write } for pid=11435 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1858 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 199.263134][ T42] audit: type=1400 audit(1792762758.735:662): avc: denied { write } for pid=11438 comm="rm" name="hook-state" dev="tmpfs" ino=1858 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 199.313715][ T5488] 8021q: adding VLAN 0 to HW filter on device eth2 [ 199.442548][T11442] IPVS: mh: TCP 127.0.0.1:21 - no destination available [ 199.618922][ T42] audit: type=1400 audit(1792762759.085:663): avc: denied { write } for pid=11445 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1858 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 199.708746][ T42] audit: type=1400 audit(1792762759.175:664): avc: denied { write } for pid=11452 comm="rm" name="hook-state" dev="tmpfs" ino=1858 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 199.783870][ T5488] 8021q: adding VLAN 0 to HW filter on device eth4 [ 199.845037][ T5821] hsr_slave_0: left promiscuous mode [ 199.854650][ T5821] hsr_slave_1: left promiscuous mode [ 199.855169][ T5821] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 199.855190][ T5821] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 199.856185][ T5821] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 199.856195][ T5821] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 199.870807][ T5821] veth1_macvtap: left promiscuous mode [ 199.870833][ T5821] veth0_macvtap: left promiscuous mode [ 200.047871][ T5821] team0 (unregistering): Port device team_slave_1 removed [ 200.054725][ T5821] team0 (unregistering): Port device team_slave_0 removed [ 200.178995][T11404] bridge0: port 1(bridge_slave_0) entered blocking state [ 200.179040][T11404] bridge0: port 1(bridge_slave_0) entered disabled state [ 200.179099][T11404] bridge_slave_0: entered allmulticast mode [ 200.179798][T11404] bridge_slave_0: entered promiscuous mode [ 200.182530][T11404] bridge0: port 2(bridge_slave_1) entered blocking state [ 200.182605][T11404] bridge0: port 2(bridge_slave_1) entered disabled state [ 200.182674][T11404] bridge_slave_1: entered allmulticast mode [ 200.183455][T11404] bridge_slave_1: entered promiscuous mode [ 200.196937][T11404] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 200.198408][T11404] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 200.216475][T11404] team0: Port device team_slave_0 added [ 200.219929][T11404] team0: Port device team_slave_1 added [ 200.241353][T11404] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 200.241364][T11404] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 200.241377][T11404] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 200.242246][T11404] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 200.242253][T11404] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 200.242267][T11404] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 200.261630][T11404] hsr_slave_0: entered promiscuous mode [ 200.262110][T11404] hsr_slave_1: entered promiscuous mode [ 200.320490][ T42] audit: type=1400 audit(1792762759.745:665): avc: denied { write } for pid=11480 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1858 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 200.396106][ T42] audit: type=1400 audit(1792762759.865:666): avc: denied { write } for pid=11486 comm="rm" name="hook-state" dev="tmpfs" ino=1858 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 200.439644][ T5488] 8021q: adding VLAN 0 to HW filter on device eth5 [ 200.490424][ C3] IPVS: mh: TCP 127.0.0.1:21 - no destination available [ 200.505023][T11489] F2FS-fs: Value of option "test_dummy_encryption" is unrecognized [ 200.557327][ T42] audit: type=1400 audit(1792762760.025:667): avc: denied { write } for pid=11491 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1858 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 200.629338][ T42] audit: type=1400 audit(1792762760.095:668): avc: denied { write } for pid=11494 comm="rm" name="hook-state" dev="tmpfs" ino=1858 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 200.630227][ T5821] IPVS: stop unused estimator thread 0... [ 200.724490][ T5488] 8021q: adding VLAN 0 to HW filter on device eth3 [ 200.730920][ T67] Bluetooth: hci1: command tx timeout [ 200.778449][ T42] audit: type=1400 audit(1792762760.245:669): avc: denied { write } for pid=11496 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1858 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 200.804660][ T5821] bridge_slave_1: left allmulticast mode [ 200.804685][ T5821] bridge_slave_1: left promiscuous mode [ 200.804857][ T5821] bridge0: port 2(bridge_slave_1) entered disabled state [ 200.816734][ T5821] bridge_slave_0: left allmulticast mode [ 200.816758][ T5821] bridge_slave_0: left promiscuous mode [ 200.816966][ T5821] bridge0: port 1(bridge_slave_0) entered disabled state [ 200.836003][ T42] audit: type=1400 audit(1792762760.305:670): avc: denied { write } for pid=11499 comm="rm" name="hook-state" dev="tmpfs" ino=1858 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 201.034777][ T5821] tipc: Left network mode [ 201.168400][T11404] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 201.175166][T11404] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 201.176487][T11404] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 201.179013][T11404] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 201.187906][T11404] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 201.198756][T11404] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 201.216581][T11404] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 201.220078][T11404] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 201.335194][T11404] 8021q: adding VLAN 0 to HW filter on device bond0 [ 201.346996][T11404] 8021q: adding VLAN 0 to HW filter on device team0 [ 201.356331][ T1176] bridge0: port 1(bridge_slave_0) entered blocking state [ 201.356423][ T1176] bridge0: port 1(bridge_slave_0) entered forwarding state [ 201.358954][ T1176] bridge0: port 2(bridge_slave_1) entered blocking state [ 201.359295][ T1176] bridge0: port 2(bridge_slave_1) entered forwarding state [ 201.511594][ T5821] hsr_slave_0: left promiscuous mode [ 201.512355][ T5821] hsr_slave_1: left promiscuous mode [ 201.513011][ T5821] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 201.513028][ T5821] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 201.514468][ T5821] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 201.514483][ T5821] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 201.523455][ T5821] veth1_macvtap: left promiscuous mode [ 201.523553][ T5821] veth0_macvtap: left promiscuous mode [ 201.523638][ T5821] veth1_vlan: left promiscuous mode [ 201.523708][ T5821] veth0_vlan: left promiscuous mode [ 201.531487][ C3] IPVS: mh: TCP 127.0.0.1:21 - no destination available [ 201.625149][ T108] smc: removing ib device syz1 [ 201.678374][T11562] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2202'. [ 201.707050][ T5821] team0 (unregistering): Port device team_slave_1 removed [ 201.724849][ T5821] team0 (unregistering): Port device team_slave_0 removed [ 201.744504][T11568] x_tables: ip_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 201.944530][ T108] smbdirect: ib_dev[syz1] removed [ 202.157656][T11404] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 202.181077][T11404] veth0_vlan: entered promiscuous mode [ 202.184109][T11404] veth1_vlan: entered promiscuous mode [ 202.197816][T11404] veth0_macvtap: entered promiscuous mode [ 202.199787][T11404] veth1_macvtap: entered promiscuous mode [ 202.205678][T11404] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 202.209186][T11404] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 202.213902][ T12] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 202.213978][ T12] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 202.214050][ T12] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 202.214121][ T12] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 202.294523][ T1164] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 202.294537][ T1164] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 202.356343][ T1164] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 202.356357][ T1164] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 202.600109][T11587] o2cb: This node has not been configured. [ 202.600118][T11587] o2cb: Cluster check failed. Fix errors before retrying. [ 202.600128][T11587] (syz.1.2205,11587,1):user_dlm_register:674 ERROR: status = -22 [ 202.600142][T11587] (syz.1.2205,11587,1):dlmfs_mkdir:437 ERROR: Error -22 could not register domain "file0" [ 202.816496][T11596] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2167'. [ 202.816510][T11596] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2167'. [ 202.826252][T11596] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2167'. [ 202.826265][T11596] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2167'. [ 202.830989][ T67] Bluetooth: hci1: command tx timeout [ 202.915200][ T5821] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 202.915431][ T5821] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 202.915593][ T5821] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 202.915786][ T5821] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 202.937672][ T5784] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 202.941431][ T5784] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 202.942067][ T5784] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 202.943599][ T5784] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 202.944157][ T5784] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 203.525757][T11604] rxe_eth0 speed is unknown, defaulting to 1000 [ 203.998508][T11604] bridge0: port 1(bridge_slave_0) entered blocking state [ 203.998589][T11604] bridge0: port 1(bridge_slave_0) entered disabled state [ 203.998642][T11604] bridge_slave_0: entered allmulticast mode [ 203.999350][T11604] bridge_slave_0: entered promiscuous mode [ 204.000678][T11604] bridge0: port 2(bridge_slave_1) entered blocking state [ 204.000745][T11604] bridge0: port 2(bridge_slave_1) entered disabled state [ 204.000802][T11604] bridge_slave_1: entered allmulticast mode [ 204.001479][T11604] bridge_slave_1: entered promiscuous mode [ 204.032478][T11639] input: syz0 as /devices/virtual/input/input6 [ 204.057610][T11641] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2218'. [ 204.057633][T11641] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2218'. [ 204.078623][T11604] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 204.089085][T11641] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2218'. [ 204.089098][T11641] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2218'. [ 204.091615][T11604] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 204.108169][T11604] team0: Port device team_slave_0 added [ 204.153918][T11604] team0: Port device team_slave_1 added [ 204.171646][T11604] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 204.171656][T11604] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 204.171670][T11604] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 204.174982][T11604] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 204.174991][T11604] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 204.175005][T11604] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 204.287423][T11604] hsr_slave_0: entered promiscuous mode [ 204.287939][T11604] hsr_slave_1: entered promiscuous mode [ 204.288320][T11604] debugfs: 'hsr0' already exists in 'hsr' [ 204.288343][T11604] Cannot create hsr debugfs directory [ 204.329502][ T42] kauditd_printk_skb: 14 callbacks suppressed [ 204.329514][ T42] audit: type=1400 audit(1792762763.795:685): avc: denied { name_bind } for pid=11662 comm="syz.1.2225" src=20001 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=tcp_socket permissive=1 [ 204.340509][ T5821] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 204.351024][ T12] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 204.351049][ T12] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 204.351067][ T12] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 204.365544][T11604] netdevsim netdevsim0 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 204.377127][T11665] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2226'. [ 204.452357][T11668] rnbd_client L607: Mapping device /dev/ram0 on session s+, (access_mode: rw, nr_poll_queues: 0) [ 204.453322][T11604] netdevsim netdevsim0 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 204.524121][ T12] rtrs_client L1784: : Resolving route failed, err: -ENODEV [ 204.569046][T11604] netdevsim netdevsim0 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 204.723854][T11668] rtrs_client L2654: : init_conns() failed: err=-ENODEV path=@ip:127.0.0.1 [:0] [ 204.835896][T11604] netdevsim netdevsim0 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 204.891685][ T67] Bluetooth: hci1: command tx timeout [ 204.970397][ T67] Bluetooth: hci3: command tx timeout [ 205.216143][T11604] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 205.221984][T11604] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 205.222623][T11604] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 205.228306][T11604] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 205.228801][T11604] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 205.233001][T11604] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 205.233520][T11604] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 205.241808][T11604] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 205.407761][T11604] 8021q: adding VLAN 0 to HW filter on device bond0 [ 205.443483][T11604] 8021q: adding VLAN 0 to HW filter on device team0 [ 205.461178][ T43] bridge0: port 1(bridge_slave_0) entered blocking state [ 205.461265][ T43] bridge0: port 1(bridge_slave_0) entered forwarding state [ 205.488655][ T43] bridge0: port 2(bridge_slave_1) entered blocking state [ 205.488701][ T43] bridge0: port 2(bridge_slave_1) entered forwarding state [ 207.014758][T11604] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 207.060350][ T67] Bluetooth: hci3: command tx timeout [ 207.087853][T11714] rnbd_client L607: Mapping device /dev/ram0 on session s+, (access_mode: rw, nr_poll_queues: 0) [ 207.104421][T11696] ptp ptp0: new virtual clock ptp2 [ 207.104436][T11696] ptp ptp0: guarantee physical clock free running [ 207.140130][T11604] veth0_vlan: entered promiscuous mode [ 207.243641][T11604] veth1_vlan: entered promiscuous mode [ 207.368479][T11604] veth0_macvtap: entered promiscuous mode [ 207.378548][T11604] veth1_macvtap: entered promiscuous mode [ 207.405710][T11604] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 207.407841][T11604] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 207.462628][ T12] rtrs_client L1784: : Resolving route failed, err: -ENODEV [ 207.575499][ T1164] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 207.575567][ T1164] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 207.589827][ T108] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 207.589840][ T108] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 207.600370][ T5846] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 207.600409][ T5846] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 207.600438][ T5846] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 207.600468][ T5846] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 207.610218][T11714] rtrs_client L2654: : init_conns() failed: err=-ENODEV path=@ip:127.0.0.1 [:0] [ 208.000188][T11737] __nla_validate_parse: 3 callbacks suppressed [ 208.000200][T11737] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2246'. [ 208.000211][T11737] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2246'. [ 208.004759][T11737] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2246'. [ 208.004771][T11737] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2246'. [ 208.020741][ T5846] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 208.020765][ T5846] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 208.020782][ T5846] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 208.020799][ T5846] netdevsim netdevsim3 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 208.161168][T11752] rnbd_client L607: Mapping device /dev/ram0 on session s+, (access_mode: rw, nr_poll_queues: 0) [ 208.533107][ T12] rtrs_client L1784: : Resolving route failed, err: -ENODEV [ 208.647758][T11752] rtrs_client L2654: : init_conns() failed: err=-ENODEV path=@ip:127.0.0.1 [:0] [ 208.961105][T11769] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2260'. [ 208.961126][T11769] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2260'. [ 208.971563][T11769] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2260'. [ 208.971581][T11769] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2260'. [ 209.143141][ T67] Bluetooth: hci3: command tx timeout [ 209.190451][ T42] audit: type=1400 audit(1792762768.655:686): avc: denied { append } for pid=11783 comm="syz.1.2267" name="loop5" dev="devtmpfs" ino=661 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 209.364197][T11781] IPv6: NLM_F_CREATE should be specified when creating new route [ 209.364913][T11781] netlink: 'syz.2.2264': attribute type 1 has an invalid length. [ 209.941076][T11794] 9p: Bad value for 'wfdno' [ 210.322071][T11801] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2273'. [ 210.322086][T11801] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2273'. [ 210.449485][ T42] audit: type=1400 audit(1792762769.915:687): avc: denied { ioctl } for pid=11816 comm="syz.1.2278" path="/dev/vhost-vsock" dev="devtmpfs" ino=1308 ioctlcmd=0xaf01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 210.568288][T11832] syzkaller0: entered promiscuous mode [ 210.568303][T11832] syzkaller0: entered allmulticast mode [ 210.702113][T11842] o2cb: This node has not been configured. [ 210.702123][T11842] o2cb: Cluster check failed. Fix errors before retrying. [ 210.702131][ T42] audit: type=1400 audit(1792762770.175:688): avc: denied { write } for pid=11841 comm="syz.0.2291" name="/" dev="ocfs2_dlmfs" ino=28835 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 210.702133][T11842] (syz.0.2291,11842,0):user_dlm_register:674 ERROR: status = -22 [ 210.702147][T11842] (syz.0.2291,11842,0):dlmfs_mkdir:437 ERROR: Error -22 could not register domain "file0" [ 210.909083][ T42] audit: type=1400 audit(1792762770.375:689): avc: denied { append } for pid=11862 comm="syz.0.2301" name="kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 211.165336][T11870] o2cb: This node has not been configured. [ 211.165353][T11870] o2cb: Cluster check failed. Fix errors before retrying. [ 211.165364][T11870] (syz.3.2302,11870,3):user_dlm_register:674 ERROR: status = -22 [ 211.165377][T11870] (syz.3.2302,11870,3):dlmfs_mkdir:437 ERROR: Error -22 could not register domain "file0" [ 211.165565][ T42] audit: type=1400 audit(1792762770.635:690): avc: denied { write } for pid=11869 comm="syz.3.2302" name="/" dev="ocfs2_dlmfs" ino=29972 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 211.321591][ T67] Bluetooth: hci3: command tx timeout [ 211.613827][ T42] audit: type=1800 audit(1792762771.085:691): pid=11872 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed(directio) comm="syz.0.2305" name="file0" dev="overlay" ino=109 res=0 errno=-22 [ 212.498662][ T42] audit: type=1400 audit(1792762771.965:692): avc: denied { write } for pid=11891 comm="syz.0.2312" name="/" dev="ocfs2_dlmfs" ino=28298 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 212.499505][T11892] o2cb: This node has not been configured. [ 212.499512][T11892] o2cb: Cluster check failed. Fix errors before retrying. [ 212.499522][T11892] (syz.0.2312,11892,2):user_dlm_register:674 ERROR: status = -22 [ 212.499537][T11892] (syz.0.2312,11892,2):dlmfs_mkdir:437 ERROR: Error -22 could not register domain "file0" [ 214.088600][ T42] audit: type=1400 audit(1792762773.555:693): avc: denied { write } for pid=11931 comm="syz.3.2322" name="/" dev="ocfs2_dlmfs" ino=30079 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 214.088680][T11932] o2cb: This node has not been configured. [ 214.088686][T11932] o2cb: Cluster check failed. Fix errors before retrying. [ 214.088696][T11932] (syz.3.2322,11932,3):user_dlm_register:674 ERROR: status = -22 [ 214.088710][T11932] (syz.3.2322,11932,3):dlmfs_mkdir:437 ERROR: Error -22 could not register domain "file0" [ 214.280413][ T5979] usb 7-1: new full-speed USB device number 3 using dummy_hcd [ 214.431010][ T5979] usb 7-1: New USB device found, idVendor=0506, idProduct=4601, bcdDevice= 1.00 [ 214.431990][ T5979] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 10 [ 214.432015][ T5979] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x83 has invalid wMaxPacketSize 0 [ 214.432044][ T5979] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 214.874813][T11941] 9p: Bad value for 'rfdno' [ 215.150408][ T9197] usb 8-1: new full-speed USB device number 8 using dummy_hcd [ 215.223540][ T42] audit: type=1400 audit(1792762774.695:694): avc: denied { write } for pid=11958 comm="syz.0.2341" name="/" dev="ocfs2_dlmfs" ino=28358 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 215.223687][T11959] o2cb: This node has not been configured. [ 215.223721][T11959] o2cb: Cluster check failed. Fix errors before retrying. [ 215.223733][T11959] (syz.0.2341,11959,2):user_dlm_register:674 ERROR: status = -22 [ 215.223749][T11959] (syz.0.2341,11959,2):dlmfs_mkdir:437 ERROR: Error -22 could not register domain "file0" [ 215.304987][ T9197] usb 8-1: New USB device found, idVendor=0b48, idProduct=1003, bcdDevice= 1.00 [ 215.308116][ T9197] usb 8-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 215.308176][ T9197] usb 8-1: config 1 interface 1 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 215.308199][ T9197] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 215.455921][ T5979] pegasus 7-1:1.0: probe with driver pegasus failed with error -71 [ 215.485192][ T5979] usb 7-1: USB disconnect, device number 3 [ 215.749829][ T9197] dvb_ttusb_budget: ttusb_init_controller: error [ 215.753480][ T9197] dvbdev: DVB: registering new adapter (Technotrend/Hauppauge Nova-USB) [ 215.957720][ T9197] DVB: Unable to find symbol stv0299_attach() [ 216.020947][T11969] 9p: Bad value for 'rfdno' [ 216.054168][ T9197] DVB: Unable to find symbol tda8083_attach() [ 216.054178][ T9197] dvb_ttusb_budget: no frontend driver found for device [0b48:1003] [ 216.248690][T11976] rnbd_client L607: Mapping device /dev/ram0 on session s+, (access_mode: rw, nr_poll_queues: 0) [ 216.264655][T11569] rtrs_client L1784: : Resolving route failed, err: -ENODEV [ 216.291761][T11976] rtrs_client L2654: : init_conns() failed: err=-ENODEV path=@ip:127.0.0.1 [:0] [ 216.506593][T11991] 9p: Bad value for 'rfdno' [ 216.625144][T11987] device-mapper: table: 248:2: raid: Cannot understand number of raid devices parameters (-EINVAL) [ 216.625184][T11987] device-mapper: ioctl: error adding target to table [ 216.694975][T12004] rnbd_client L607: Mapping device /dev/ram0 on session s+, (access_mode: rw, nr_poll_queues: 0) [ 216.714394][T11569] rtrs_client L1784: : Resolving route failed, err: -ENODEV [ 216.737225][T12004] rtrs_client L2654: : init_conns() failed: err=-ENODEV path=@ip:127.0.0.1 [:0] [ 216.800409][ T9197] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 216.960357][ T9197] usb 5-1: Using ep0 maxpacket: 8 [ 216.960880][ T9197] usb 5-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 216.961349][ T9197] usb 5-1: config 0 has no interfaces? [ 216.961365][ T9197] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 216.963459][ T9197] usb 5-1: config 0 descriptor?? [ 218.001887][ T5848] usb 8-1: USB disconnect, device number 8 [ 218.294494][ T9197] usb 5-1: USB disconnect, device number 4 [ 219.579521][T12030] syzkaller0: entered promiscuous mode [ 219.579536][T12030] syzkaller0: entered allmulticast mode [ 219.586500][T12028] rnbd_client L607: Mapping device /dev/ram0 on session s+, (access_mode: rw, nr_poll_queues: 0) [ 219.624822][T11569] rtrs_client L1784: : Resolving route failed, err: -ENODEV [ 219.662186][T12028] rtrs_client L2654: : init_conns() failed: err=-ENODEV path=@ip:127.0.0.1 [:0] [ 219.751086][ T42] audit: type=1400 audit(1792762779.225:695): avc: denied { mount } for pid=12033 comm="syz.1.2374" name="/" dev="nfsd" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfsd_fs_t tclass=filesystem permissive=1 [ 219.752162][ T42] audit: type=1400 audit(1792762779.225:696): avc: denied { search } for pid=12033 comm="syz.1.2374" name="/" dev="nfsd" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfsd_fs_t tclass=dir permissive=1 [ 219.752620][ T42] audit: type=1400 audit(1792762779.225:697): avc: denied { write } for pid=12033 comm="syz.1.2374" name="portlist" dev="nfsd" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfsd_fs_t tclass=file permissive=1 [ 219.753108][ T42] audit: type=1400 audit(1792762779.225:698): avc: denied { open } for pid=12033 comm="syz.1.2374" path="/390/nfsd/portlist" dev="nfsd" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfsd_fs_t tclass=file permissive=1 [ 219.754086][T12036] __nla_validate_parse: 2 callbacks suppressed [ 219.754101][T12036] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2367'. [ 219.754114][T12036] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2367'. [ 219.759551][T11569] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 219.759699][T12036] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2367'. [ 219.759715][T12036] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2367'. [ 219.759721][T11569] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 219.775599][ T12] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 219.776121][ T12] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 220.675546][T12058] rnbd_client L607: Mapping device /dev/ram0 on session s+, (access_mode: rw, nr_poll_queues: 0) [ 220.688729][T11569] rtrs_client L1784: : Resolving route failed, err: -ENODEV [ 220.705783][T12058] rtrs_client L2654: : init_conns() failed: err=-ENODEV path=@ip:127.0.0.1 [:0] [ 220.940034][ T42] audit: type=1800 audit(1792762780.405:699): pid=12062 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed(directio) comm="syz.2.2383" name="file0" dev="overlay" ino=243 res=0 errno=-22 [ 220.990592][T12065] syzkaller0: entered promiscuous mode [ 220.990607][T12065] syzkaller0: entered allmulticast mode [ 221.109330][T12069] 9p: Bad value for 'rfdno' [ 221.214298][T12077] rnbd_client L607: Mapping device /dev/ram0 on session s+, (access_mode: rw, nr_poll_queues: 0) [ 221.227396][T11569] rtrs_client L1784: : Resolving route failed, err: -ENODEV [ 221.244992][T12077] rtrs_client L2654: : init_conns() failed: err=-ENODEV path=@ip:127.0.0.1 [:0] [ 221.469098][T12091] syzkaller0: entered promiscuous mode [ 221.469118][T12091] syzkaller0: entered allmulticast mode [ 221.592500][T12093] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2396'. [ 221.839317][ T42] audit: type=1400 audit(1792762781.305:700): avc: denied { getopt } for pid=12094 comm="syz.2.2397" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 222.560225][T12103] rnbd_client L607: Mapping device /dev/ram0 on session s+, (access_mode: rw, nr_poll_queues: 0) [ 222.573598][T11569] rtrs_client L1784: : Resolving route failed, err: -ENODEV [ 222.590484][T12103] rtrs_client L2654: : init_conns() failed: err=-ENODEV path=@ip:127.0.0.1 [:0] [ 222.719601][ T42] audit: type=1400 audit(1792762782.185:701): avc: denied { unmount } for pid=11404 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=filesystem permissive=1 [ 222.938682][ T42] audit: type=1800 audit(1792762782.405:702): pid=12113 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed(directio) comm="syz.2.2403" name="file0" dev="overlay" ino=353 res=0 errno=-22 [ 223.078331][ T42] audit: type=1400 audit(1792762782.545:703): avc: denied { unmount } for pid=11604 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=filesystem permissive=1 [ 223.151202][T12123] syzkaller0: entered promiscuous mode [ 223.151217][T12123] syzkaller0: entered allmulticast mode [ 223.307103][T12127] rnbd_client L607: Mapping device /dev/ram0 on session s+, (access_mode: rw, nr_poll_queues: 0) [ 223.318461][T11569] rtrs_client L1784: : Resolving route failed, err: -ENODEV [ 223.345680][T12127] rtrs_client L2654: : init_conns() failed: err=-ENODEV path=@ip:127.0.0.1 [:0] [ 224.141876][T12141] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2415'. [ 224.141890][T12141] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2415'. [ 224.142454][T12141] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2415'. [ 224.142466][T12141] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2415'. [ 224.207320][T12145] syzkaller0: entered promiscuous mode [ 224.207341][T12145] syzkaller0: entered allmulticast mode [ 224.560510][ T9199] usb 8-1: new high-speed USB device number 9 using dummy_hcd [ 224.722401][ T9199] usb 8-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 224.724586][ T9199] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 224.742820][ T9199] usb 8-1: config 0 descriptor?? [ 224.963179][ T42] audit: type=1400 audit(1792762784.435:704): avc: denied { read } for pid=12154 comm="syz.3.2422" name="card1" dev="devtmpfs" ino=637 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 224.963607][ T42] audit: type=1400 audit(1792762784.435:705): avc: denied { open } for pid=12154 comm="syz.3.2422" path="/dev/dri/card1" dev="devtmpfs" ino=637 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 224.967816][ T42] audit: type=1400 audit(1792762784.435:706): avc: denied { ioctl } for pid=12154 comm="syz.3.2422" path="/dev/dri/card1" dev="devtmpfs" ino=637 ioctlcmd=0x4010640d scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 224.986304][ T9199] udl 8-1:0.0: [drm] Unrecognized vendor firmware descriptor [ 224.986658][ T9199] [drm:udl_init] *ERROR* Selecting channel failed [ 224.999382][ T9199] [drm] Initialized udl 0.0.1 for 8-1:0.0 on minor 2 [ 224.999400][ T9199] [drm] Initialized udl on minor 2 [ 225.003566][ T9199] udl 8-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 225.005339][ T9199] udl 8-1:0.0: [drm] Cannot find any crtc or sizes [ 225.016608][ T5979] udl 8-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 225.020182][ T9199] usb 8-1: USB disconnect, device number 9 [ 225.021666][ T5979] udl 8-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 225.022609][ T5979] udl 8-1:0.0: [drm] Cannot find any crtc or sizes [ 225.264539][T12181] syzkaller0: entered promiscuous mode [ 225.264553][T12181] syzkaller0: entered allmulticast mode [ 225.604188][T12211] syzkaller0: entered promiscuous mode [ 225.604206][T12211] syzkaller0: entered allmulticast mode [ 226.026909][ T42] audit: type=1400 audit(1792762785.485:707): avc: denied { bind } for pid=12221 comm="syz.2.2448" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 226.660447][ T10] usb 8-1: new high-speed USB device number 10 using dummy_hcd [ 226.684985][T12241] device-mapper: table: 248:4: multipath: error getting device (-EBUSY) [ 226.685000][T12241] device-mapper: ioctl: error adding target to table [ 226.722830][T12244] 9p: Could not find request transport: fd0x0000000000000004 [ 226.820779][ T10] usb 8-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 226.821560][ T10] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 226.822812][ T10] usb 8-1: config 0 descriptor?? [ 227.038772][ T10] udl 8-1:0.0: [drm] Unrecognized vendor firmware descriptor [ 227.039043][ T10] [drm:udl_init] *ERROR* Selecting channel failed [ 227.061219][ T10] [drm] Initialized udl 0.0.1 for 8-1:0.0 on minor 2 [ 227.061235][ T10] [drm] Initialized udl on minor 2 [ 227.063330][ T10] udl 8-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 227.063500][ T10] udl 8-1:0.0: [drm] Cannot find any crtc or sizes [ 227.067905][ T42] audit: type=1800 audit(1792762786.535:708): pid=12263 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed(directio) comm="syz.2.2460" name="file0" dev="overlay" ino=490 res=0 errno=-22 [ 227.068808][ T9] udl 8-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 227.072288][ T10] usb 8-1: USB disconnect, device number 10 [ 227.074563][ T9] udl 8-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 227.074677][ T9] udl 8-1:0.0: [drm] Cannot find any crtc or sizes [ 227.328792][ T42] audit: type=1400 audit(1792762786.795:709): avc: denied { create } for pid=12285 comm="syz.0.2473" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 227.331656][ T42] audit: type=1400 audit(1792762786.805:710): avc: denied { write } for pid=12285 comm="syz.0.2473" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 227.331896][T12286] ieee802154 phy0 wpan0: encryption failed: -22 [ 227.364103][T12290] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2475'. [ 227.491156][T12294] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2477'. [ 227.491177][T12294] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2477'. [ 227.492539][T12294] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2477'. [ 227.492556][T12294] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2477'. [ 227.610002][ T42] audit: type=1400 audit(1792762787.075:711): avc: denied { create } for pid=12301 comm="syz.0.2481" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 227.643765][T12306] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2484'. [ 227.678299][ T67] Bluetooth: hci4: link tx timeout [ 227.678315][ T67] Bluetooth: hci4: killing stalled connection 10:aa:aa:aa:aa:aa [ 227.994998][T12326] rnbd_client L607: Mapping device /dev/ram0 on session s+, (access_mode: rw, nr_poll_queues: 0) [ 228.013542][T11569] rtrs_client L1784: : Resolving route failed, err: -ENODEV [ 228.043701][T12326] rtrs_client L2654: : init_conns() failed: err=-ENODEV path=@ip:127.0.0.1 [:0] [ 228.084991][T12328] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2494'. [ 228.110468][ T5866] usb 7-1: new high-speed USB device number 4 using dummy_hcd [ 228.282240][ T5866] usb 7-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 228.283467][ T5866] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 228.286253][ T5866] usb 7-1: config 0 descriptor?? [ 228.417701][T12345] rnbd_client L607: Mapping device /dev/ram0 on session s+, (access_mode: rw, nr_poll_queues: 0) [ 228.428454][T11569] rtrs_client L1784: : Resolving route failed, err: -ENODEV [ 228.446758][T12345] rtrs_client L2654: : init_conns() failed: err=-ENODEV path=@ip:127.0.0.1 [:0] [ 228.493662][T12347] jffs2: notice: (12347) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 228.495444][ T5866] udl 7-1:0.0: [drm] Unrecognized vendor firmware descriptor [ 228.495826][ T5866] [drm:udl_init] *ERROR* Selecting channel failed [ 228.498705][ T42] audit: type=1400 audit(1792762787.965:712): avc: denied { write } for pid=12346 comm="syz.0.2503" name="/" dev="jffs2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 228.499035][ T42] audit: type=1400 audit(1792762787.965:713): avc: denied { add_name } for pid=12346 comm="syz.0.2503" name="fillfile" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 228.505532][ T5866] [drm] Initialized udl 0.0.1 for 7-1:0.0 on minor 2 [ 228.505551][ T5866] [drm] Initialized udl on minor 2 [ 228.507078][ T5866] udl 7-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 228.507479][ T5866] udl 7-1:0.0: [drm] Cannot find any crtc or sizes [ 228.511314][ T5866] usb 7-1: USB disconnect, device number 4 [ 228.514406][ T29] udl 7-1:0.0: [drm] Cannot find any crtc or sizes [ 228.755452][T12356] syzkaller0: entered promiscuous mode [ 228.755473][T12356] syzkaller0: entered allmulticast mode [ 228.820991][T12360] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2509'. [ 228.873697][T12364] rnbd_client L607: Mapping device /dev/ram0 on session s+, (access_mode: rw, nr_poll_queues: 0) [ 228.883677][T11569] rtrs_client L1784: : Resolving route failed, err: -ENODEV [ 228.911665][T12364] rtrs_client L2654: : init_conns() failed: err=-ENODEV path=@ip:127.0.0.1 [:0] [ 229.248081][T12373] netlink: 128 bytes leftover after parsing attributes in process `syz.3.2514'. [ 229.248127][T12373] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2514'. [ 229.975597][ T5784] Bluetooth: hci4: command 0x0406 tx timeout [ 230.084783][T12384] netlink: 'syz.3.2518': attribute type 10 has an invalid length. [ 230.702873][T12384] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 230.705627][T12384] bond0: (slave netdevsim1): Enslaving as an active interface with an up link [ 230.797279][T12390] rnbd_client L607: Mapping device /dev/ram0 on session s+, (access_mode: rw, nr_poll_queues: 0) [ 230.815479][ T12] rtrs_client L1784: : Resolving route failed, err: -ENODEV [ 230.844319][T12390] rtrs_client L2654: : init_conns() failed: err=-ENODEV path=@ip:127.0.0.1 [:0] [ 231.055748][T12403] 9pnet_fd: Insufficient options for proto=fd [ 231.499754][T12412] oom_control is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 231.743313][T12426] 9pnet_fd: Insufficient options for proto=fd [ 233.099569][T12451] FAULT_INJECTION: forcing a failure. [ 233.099569][T12451] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 233.099591][T12451] CPU: 0 UID: 0 PID: 12451 Comm: syz.3.2546 Not tainted syzkaller #0 PREEMPT(full) [ 233.099612][T12451] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 233.099618][T12451] Call Trace: [ 233.099622][T12451] [ 233.099627][T12451] dump_stack_lvl+0x100/0x190 [ 233.099649][T12451] should_fail_ex.cold+0x5/0xa [ 233.099667][T12451] strncpy_from_user+0x3b/0x2d0 [ 233.099686][T12451] path_setxattrat+0x127/0x3b0 [ 233.099702][T12451] ? __pfx_path_setxattrat+0x10/0x10 [ 233.099735][T12451] ? ksys_write+0x190/0x250 [ 233.099750][T12451] ? ksys_write+0x190/0x250 [ 233.099777][T12451] ? xfd_validate_state+0x129/0x190 [ 233.099794][T12451] __x64_sys_fsetxattr+0xc5/0x140 [ 233.099806][T12451] ? do_syscall_64+0xae/0x790 [ 233.099830][T12451] ? lockdep_hardirqs_on+0x7d/0x110 [ 233.099845][T12451] do_syscall_64+0x123/0x790 [ 233.099861][T12451] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 233.099874][T12451] RIP: 0033:0x7f5ff199f559 [ 233.099884][T12451] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 233.099896][T12451] RSP: 002b:00007f5ff294f028 EFLAGS: 00000246 ORIG_RAX: 00000000000000be [ 233.099908][T12451] RAX: ffffffffffffffda RBX: 00007f5ff1c25fa0 RCX: 00007f5ff199f559 [ 233.099915][T12451] RDX: 0000000000000000 RSI: 0000000000000000 RDI: ffffffffffffffff [ 233.099922][T12451] RBP: 00007f5ff1a36b20 R08: 0000000000000001 R09: 0000000000000000 [ 233.099928][T12451] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 233.099935][T12451] R13: 00007f5ff1c26038 R14: 00007f5ff1c25fa0 R15: 00007ffdccf72b78 [ 233.099950][T12451] [ 233.133864][T12453] __nla_validate_parse: 1 callbacks suppressed [ 233.133883][T12453] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2547'. [ 233.567257][T12464] syzkaller0: entered promiscuous mode [ 233.567276][T12464] syzkaller0: entered allmulticast mode [ 233.736639][T12474] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2557'. [ 233.945199][T12487] syzkaller0: entered promiscuous mode [ 233.945214][T12487] syzkaller0: entered allmulticast mode [ 234.025821][T12495] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2567'. [ 234.250426][ T9199] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 234.401071][ T9199] usb 5-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 234.402063][ T9199] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 234.404216][ T9199] usb 5-1: config 0 descriptor?? [ 234.575370][ T42] kauditd_printk_skb: 2 callbacks suppressed [ 234.575387][ T42] audit: type=1400 audit(1792762794.045:716): avc: denied { create } for pid=12506 comm="syz.3.2572" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 234.610123][ C3] raw-gadget.0 gadget.0: ignoring, device is not running [ 234.611039][ T9199] udl 5-1:0.0: [drm] Unrecognized vendor firmware descriptor [ 234.611301][ T9199] [drm:udl_init] *ERROR* Selecting channel failed [ 234.616062][ T9199] [drm] Initialized udl 0.0.1 for 5-1:0.0 on minor 2 [ 234.616074][ T9199] [drm] Initialized udl on minor 2 [ 234.616751][ T9199] udl 5-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 234.616944][ T9199] udl 5-1:0.0: [drm] Cannot find any crtc or sizes [ 234.618079][ T9199] usb 5-1: USB disconnect, device number 5 [ 234.619805][ T34] udl 5-1:0.0: [drm] Cannot find any crtc or sizes [ 234.681008][ T42] audit: type=1400 audit(1792762794.145:717): avc: denied { setopt } for pid=12506 comm="syz.3.2572" lport=4 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 234.966483][ T5784] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 234.969741][ T5784] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 234.975381][ T5784] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 234.985805][ T5784] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 234.986247][ T5784] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 235.035128][T12519] syzkaller0: entered promiscuous mode [ 235.035141][T12519] syzkaller0: entered allmulticast mode [ 235.141967][T12526] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2577'. [ 235.205774][T12513] rxe_eth0 speed is unknown, defaulting to 1000 [ 235.672144][T12554] syzkaller0: entered promiscuous mode [ 235.672165][T12554] syzkaller0: entered allmulticast mode [ 235.700402][ T5866] usb 8-1: new high-speed USB device number 11 using dummy_hcd [ 235.706704][T12513] bridge0: port 1(bridge_slave_0) entered blocking state [ 235.706857][T12513] bridge0: port 1(bridge_slave_0) entered disabled state [ 235.707226][T12513] bridge_slave_0: entered allmulticast mode [ 235.708575][T12513] bridge_slave_0: entered promiscuous mode [ 235.711692][T12513] bridge0: port 2(bridge_slave_1) entered blocking state [ 235.711764][T12513] bridge0: port 2(bridge_slave_1) entered disabled state [ 235.711850][T12513] bridge_slave_1: entered allmulticast mode [ 235.713140][T12513] bridge_slave_1: entered promiscuous mode [ 235.760457][T12513] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 235.766303][T12513] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 235.790219][T12513] team0: Port device team_slave_0 added [ 235.792509][T12513] team0: Port device team_slave_1 added [ 235.813877][T12513] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 235.813908][T12513] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 235.813930][T12513] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 235.815577][T12513] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 235.815588][T12513] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 235.815610][T12513] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 235.852921][ T5866] usb 8-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 235.853908][ T5866] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 235.859218][ T5866] usb 8-1: config 0 descriptor?? [ 235.866677][T12513] hsr_slave_0: entered promiscuous mode [ 235.867457][T12513] hsr_slave_1: entered promiscuous mode [ 235.868321][T12513] debugfs: 'hsr0' already exists in 'hsr' [ 235.868357][T12513] Cannot create hsr debugfs directory [ 236.097880][ T5866] udl 8-1:0.0: [drm] Unrecognized vendor firmware descriptor [ 236.098250][ T5866] [drm:udl_init] *ERROR* Selecting channel failed [ 236.122073][ T5866] [drm] Initialized udl 0.0.1 for 8-1:0.0 on minor 2 [ 236.122088][ T5866] [drm] Initialized udl on minor 2 [ 236.122739][ T5866] udl 8-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 236.122906][ T5866] udl 8-1:0.0: [drm] Cannot find any crtc or sizes [ 236.123975][ T5865] udl 8-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 236.124230][ T5866] usb 8-1: USB disconnect, device number 11 [ 236.124336][ T5865] udl 8-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 236.124418][ T5865] udl 8-1:0.0: [drm] Cannot find any crtc or sizes [ 236.205273][T12513] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 236.224472][T12513] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 236.225152][T12513] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 236.232572][T12513] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 236.233306][T12513] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 236.237370][T12513] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 236.239094][T12513] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 236.246955][T12513] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 236.352949][T12513] 8021q: adding VLAN 0 to HW filter on device bond0 [ 236.368380][T12513] 8021q: adding VLAN 0 to HW filter on device team0 [ 236.376868][ T64] bridge0: port 1(bridge_slave_0) entered blocking state [ 236.376946][ T64] bridge0: port 1(bridge_slave_0) entered forwarding state [ 236.386526][ T64] bridge0: port 2(bridge_slave_1) entered blocking state [ 236.386590][ T64] bridge0: port 2(bridge_slave_1) entered forwarding state [ 236.451263][T12578] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2594'. [ 236.451281][T12578] nbd: must specify at least one socket [ 236.766080][T12605] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2602'. [ 236.766103][T12605] nbd: must specify at least one socket [ 236.918766][T12513] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 236.968972][T12631] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2611'. [ 236.969689][T12631] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2611'. [ 236.998535][T12634] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2612'. [ 237.050454][ T67] Bluetooth: hci0: command tx timeout [ 237.135761][T12513] veth0_vlan: entered promiscuous mode [ 237.146669][T12513] veth1_vlan: entered promiscuous mode [ 237.170037][T12513] veth0_macvtap: entered promiscuous mode [ 237.176697][T12513] veth1_macvtap: entered promiscuous mode [ 237.202795][T12513] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 237.220614][T12513] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 237.226292][ T12] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 237.251659][ T34] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 237.364778][ T42] audit: type=1400 audit(1792762796.725:718): avc: denied { accept } for pid=12638 comm="syz.2.2614" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 237.413098][ T34] usb 5-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 237.420700][T11569] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 237.426983][ T34] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 237.619001][ T34] usb 5-1: config 0 descriptor?? [ 237.695207][T11569] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 237.750408][ T5846] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 237.817347][ T1184] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 237.817452][ T1184] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 237.941057][ T34] udl 5-1:0.0: [drm] Unrecognized vendor firmware descriptor [ 237.952444][ T34] [drm:udl_init] *ERROR* Selecting channel failed [ 238.057749][ T34] [drm] Initialized udl 0.0.1 for 5-1:0.0 on minor 2 [ 238.057838][ T34] [drm] Initialized udl on minor 2 [ 238.081046][ T34] udl 5-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 238.086073][ T34] udl 5-1:0.0: [drm] Cannot find any crtc or sizes [ 238.117047][ T34] usb 5-1: USB disconnect, device number 6 [ 238.158051][ T108] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 238.158065][ T108] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 238.196159][ T9199] udl 5-1:0.0: [drm] Cannot find any crtc or sizes [ 238.202175][ T5865] usb 8-1: new high-speed USB device number 12 using dummy_hcd [ 238.552687][ T42] audit: type=1400 audit(1792762798.025:719): avc: denied { connect } for pid=12649 comm="syz.0.2616" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 238.562199][ T5865] usb 8-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 238.811589][ T5865] usb 8-1: unable to read config index 0 descriptor/start: -61 [ 238.811613][ T5865] usb 8-1: can't read configurations, error -61 [ 239.130408][ T67] Bluetooth: hci0: command tx timeout [ 239.232570][ T5865] usb 8-1: new high-speed USB device number 13 using dummy_hcd [ 239.381088][ T5865] usb 8-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 239.382892][ T5865] usb 8-1: unable to read config index 0 descriptor/start: -61 [ 239.382918][ T5865] usb 8-1: can't read configurations, error -61 [ 239.383336][ T5865] usb usb8-port1: attempt power cycle [ 239.740681][ T5865] usb 8-1: new high-speed USB device number 14 using dummy_hcd [ 239.818541][T12680] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2621'. [ 239.819060][T12680] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2621'. [ 240.560006][ T42] audit: type=1400 audit(1792762800.025:720): avc: denied { write } for pid=12676 comm="syz.0.2625" name="target" dev="configfs" ino=3375 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 240.560060][ T42] audit: type=1400 audit(1792762800.025:721): avc: denied { remove_name } for pid=12676 comm="syz.0.2625" name="usb_gadget" dev="configfs" ino=9662 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 240.560098][ T42] audit: type=1400 audit(1792762800.025:722): avc: denied { rmdir } for pid=12676 comm="syz.0.2625" name="usb_gadget" dev="configfs" ino=9662 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 240.723116][ T5865] usb 8-1: device descriptor read/8, error -71 [ 241.358969][ T67] Bluetooth: hci0: command tx timeout [ 241.535403][T12720] device-mapper: table: 248:5: flakey: Device lookup failed (-EBUSY) [ 241.535418][T12720] device-mapper: ioctl: error adding target to table [ 241.635034][ T42] audit: type=1400 audit(1792762801.105:723): avc: denied { write } for pid=12710 comm="syz.3.2638" name="target" dev="configfs" ino=3375 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 243.372077][ T67] Bluetooth: hci0: command tx timeout [ 243.877025][T12755] syz_tun: entered allmulticast mode [ 243.881406][T12754] syz_tun: left allmulticast mode [ 243.923825][T12759] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2654'. [ 243.939556][T12757] Bluetooth: MGMT ver 1.23 [ 243.944377][ T42] audit: type=1400 audit(1792762803.415:724): avc: denied { setopt } for pid=12756 comm="syz.4.2653" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 244.064957][ T42] audit: type=1400 audit(1792762803.525:725): avc: denied { read } for pid=5488 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=1 [ 245.085599][ T42] audit: type=1326 audit(1792762804.555:726): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12796 comm="syz.3.2662" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5ff199f559 code=0x7ffc0000 [ 245.086035][ T42] audit: type=1326 audit(1792762804.555:727): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12796 comm="syz.3.2662" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5ff199f559 code=0x7ffc0000 [ 245.087700][ T42] audit: type=1326 audit(1792762804.555:728): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12796 comm="syz.3.2662" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5ff199f559 code=0x7ffc0000 [ 245.087848][ T42] audit: type=1326 audit(1792762804.555:729): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12796 comm="syz.3.2662" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5ff199f559 code=0x7ffc0000 [ 245.528522][T12816] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2669'. [ 246.010604][ T67] Bluetooth: hci0: Opcode 0x0c3a failed: -110 [ 246.025539][T12836] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2679'. [ 246.026710][ T5784] Bluetooth: hci0: command 0x0c3a tx timeout [ 246.329335][T12854] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2686'. [ 246.329385][T12854] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2686'. [ 246.359603][T12854] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2686'. [ 246.359844][T12854] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2686'. [ 246.382931][ T5846] netdevsim netdevsim4 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 246.382958][ T5846] netdevsim netdevsim4 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 246.382976][ T5846] netdevsim netdevsim4 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 246.382993][ T5846] netdevsim netdevsim4 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 246.597215][T12866] rnbd_client L607: Mapping device /d on session s+, (access_mode: rw, nr_poll_queues: 0) [ 246.597252][T12866] rnbd_client L1256: Session s+ not found, and path parameter not given [ 246.698494][ T42] kauditd_printk_skb: 36 callbacks suppressed [ 246.698579][ T42] audit: type=1400 audit(1792762806.165:766): avc: denied { nlmsg_write } for pid=12883 comm="syz.2.2697" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_audit_socket permissive=1 [ 246.815514][ T42] audit: type=1400 audit(1792762806.285:767): avc: denied { append } for pid=12889 comm="syz.4.2699" name="kmsg" dev="devtmpfs" ino=10 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kmsg_device_t tclass=chr_file permissive=1 [ 246.891948][ T42] audit: type=1400 audit(1792762806.365:768): avc: denied { write } for pid=12889 comm="syz.4.2699" name="kmsg" dev="devtmpfs" ino=10 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kmsg_device_t tclass=chr_file permissive=1 [ 247.406742][T12901] rnbd_client L607: Mapping device /d on session s+, (access_mode: rw, nr_poll_queues: 0) [ 247.406779][T12901] rnbd_client L1256: Session s+ not found, and path parameter not given [ 247.562771][T12921] rnbd_client L607: Mapping device /d on session s+, (access_mode: rw, nr_poll_queues: 0) [ 247.562808][T12921] rnbd_client L1256: Session s+ not found, and path parameter not given [ 247.850489][ T9] usb 9-1: new high-speed USB device number 2 using dummy_hcd [ 247.969250][T12943] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2720'. [ 248.010670][ T9] usb 9-1: Using ep0 maxpacket: 32 [ 248.025502][ T9] usb 9-1: New USB device found, idVendor=1430, idProduct=474b, bcdDevice= 0.40 [ 248.047998][ T9] usb 9-1: config 1 interface 0 altsetting 0 endpoint 0x8C has invalid maxpacket 1536, setting to 1024 [ 248.048338][ T9] usb 9-1: config 1 interface 0 altsetting 0 bulk endpoint 0x8C has invalid maxpacket 1024 [ 248.058915][ T9] usb 9-1: string descriptor 0 read error: -22 [ 248.059834][ T9] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 248.137147][T12926] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 248.215254][ T9] usb 9-1: Quirk or no altset; falling back to MIDI 1.0 [ 248.215450][ T9] usb 9-1: MIDIStreaming interface descriptor not found [ 248.336957][T12955] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2726'. [ 248.336978][T12955] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2726'. [ 248.343877][T12955] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2726'. [ 248.693790][ T9] usb 9-1: USB disconnect, device number 2 [ 248.774585][ T42] audit: type=1400 audit(1792762808.245:769): avc: denied { write } for pid=12972 comm="syz.2.2734" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 248.884853][T12981] rnbd_client L202: map_device: Unknown parameter or missing value 'path=' [ 249.410435][ T9199] usb 8-1: new high-speed USB device number 16 using dummy_hcd [ 249.561109][ T9199] usb 8-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 249.562173][ T9199] usb 8-1: config index 0 descriptor too short (expected 120, got 59) [ 249.562212][ T9199] usb 8-1: config 1 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 1024 [ 249.562235][ T9199] usb 8-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 249.563192][ T9199] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 249.563209][ T9199] usb 8-1: SerialNumber: syz [ 249.569181][T12992] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 249.778196][ T42] audit: type=1400 audit(1792762809.245:770): avc: denied { write } for pid=12991 comm="syz.3.2741" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 249.781249][ T42] audit: type=1400 audit(1792762809.245:771): avc: denied { connect } for pid=12991 comm="syz.3.2741" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 249.943046][ T42] audit: type=1400 audit(1792762809.415:772): avc: denied { connect } for pid=13001 comm="syz.2.2746" lport=256 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 250.568144][T13029] rnbd_client L127: Can't parse path ip:127: -22 [ 250.819325][T13039] FAULT_INJECTION: forcing a failure. [ 250.819325][T13039] name failslab, interval 1, probability 0, space 0, times 0 [ 250.819347][T13039] CPU: 3 UID: 0 PID: 13039 Comm: syz.2.2757 Tainted: G L syzkaller #0 PREEMPT(full) [ 250.819363][T13039] Tainted: [L]=SOFTLOCKUP [ 250.819367][T13039] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 250.819374][T13039] Call Trace: [ 250.819379][T13039] [ 250.819384][T13039] dump_stack_lvl+0x100/0x190 [ 250.819404][T13039] should_fail_ex.cold+0x5/0xa [ 250.819434][T13039] should_failslab+0xc2/0x120 [ 250.819453][T13039] __kvmalloc_node_noprof+0x113/0x9b0 [ 250.819469][T13039] ? cred_has_capability.isra.0+0x186/0x300 [ 250.819485][T13039] ? dm_create+0x9f/0x1530 [ 250.819519][T13039] dm_create+0x9f/0x1530 [ 250.819538][T13039] dev_create+0x121/0x2a0 [ 250.819557][T13039] ? __pfx_dev_create+0x10/0x10 [ 250.819579][T13039] ctl_ioctl+0x4d2/0xcc0 [ 250.819597][T13039] ? __pfx_dev_create+0x10/0x10 [ 250.819616][T13039] ? __pfx_ctl_ioctl+0x10/0x10 [ 250.819650][T13039] ? selinux_file_ioctl+0x1e0/0x290 [ 250.819664][T13039] dm_ctl_ioctl+0x22/0x30 [ 250.819680][T13039] ? __pfx_dm_ctl_ioctl+0x10/0x10 [ 250.819696][T13039] __x64_sys_ioctl+0x18e/0x210 [ 250.819712][T13039] do_syscall_64+0x123/0x790 [ 250.819729][T13039] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 250.819740][T13039] RIP: 0033:0x7ff2a419f559 [ 250.819750][T13039] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 250.819761][T13039] RSP: 002b:00007ff2a5106028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 250.819773][T13039] RAX: ffffffffffffffda RBX: 00007ff2a4425fa0 RCX: 00007ff2a419f559 [ 250.819781][T13039] RDX: 0000200000000140 RSI: 00000000c138fd03 RDI: 0000000000000003 [ 250.819788][T13039] RBP: 00007ff2a4236b20 R08: 0000000000000000 R09: 0000000000000000 [ 250.819795][T13039] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 250.819802][T13039] R13: 00007ff2a4426038 R14: 00007ff2a4425fa0 R15: 00007ffd72888b08 [ 250.819818][T13039] [ 250.819859][T13039] device-mapper: core: unable to allocate device, out of memory. [ 250.868169][T13041] syz_tun: entered allmulticast mode [ 250.915420][ T42] audit: type=1400 audit(1792762810.385:773): avc: denied { write } for pid=13042 comm="syz.2.2759" name="cluster" dev="configfs" ino=3172 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 250.918812][ T42] audit: type=1400 audit(1792762810.385:774): avc: denied { write } for pid=13042 comm="syz.2.2759" name="node" dev="configfs" ino=32234 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 250.936190][ T42] audit: type=1400 audit(1792762810.405:775): avc: denied { write } for pid=13042 comm="syz.2.2759" name="heartbeat" dev="configfs" ino=32235 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 251.220662][ T67] Bluetooth: hci4: command 0x0406 tx timeout [ 252.422069][ T9199] cdc_ether 8-1:1.0: probe with driver cdc_ether failed with error -71 [ 252.433401][ T9199] usb 8-1: USB disconnect, device number 16 [ 252.625001][T13064] Set syz1 is full, maxelem 6117 reached [ 252.992939][T13094] __nla_validate_parse: 6 callbacks suppressed [ 252.992953][T13094] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2780'. [ 253.181834][T13116] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2791'. [ 253.183604][T13118] fuse: Bad value for 'fd' [ 253.372098][ T42] audit: type=1400 audit(1792762812.835:776): avc: denied { mount } for pid=13133 comm="syz.4.2799" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 253.455740][T13142] rnbd_client L127: Can't parse path ip:127.0.: -22 [ 253.531999][ T5784] Bluetooth: hci4: command 0x0406 tx timeout [ 253.784299][T13167] rnbd_client L127: Can't parse path ip:127.0.0.: -22 [ 253.829736][T13169] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2814'. [ 253.829758][T13169] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2814'. [ 253.837671][T13169] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2814'. [ 253.837689][T13169] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2814'. [ 253.847426][ T42] audit: type=1400 audit(1792762813.315:777): avc: denied { map } for pid=13170 comm="syz.2.2815" path="/dev/nullb0" dev="devtmpfs" ino=705 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 253.961391][T13181] FAULT_INJECTION: forcing a failure. [ 253.961391][T13181] name failslab, interval 1, probability 0, space 0, times 0 [ 253.961427][T13181] CPU: 0 UID: 0 PID: 13181 Comm: syz.4.2820 Tainted: G L syzkaller #0 PREEMPT(full) [ 253.961443][T13181] Tainted: [L]=SOFTLOCKUP [ 253.961448][T13181] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 253.961455][T13181] Call Trace: [ 253.961459][T13181] [ 253.961464][T13181] dump_stack_lvl+0x100/0x190 [ 253.961492][T13181] should_fail_ex.cold+0x5/0xa [ 253.961510][T13181] should_failslab+0xc2/0x120 [ 253.961532][T13181] kmem_cache_alloc_node_noprof+0x94/0x6e0 [ 253.961548][T13181] ? find_held_lock+0x2b/0x80 [ 253.961565][T13181] ? blk_alloc_queue+0x31/0x790 [ 253.961581][T13181] blk_alloc_queue+0x31/0x790 [ 253.961595][T13181] __blk_alloc_disk+0xa0/0x170 [ 253.961611][T13181] ? __pfx___blk_alloc_disk+0x10/0x10 [ 253.961644][T13181] ? __pfx___debug_object_init+0x10/0x10 [ 253.961670][T13181] ? lockdep_init_map_type+0x5c/0x250 [ 253.961685][T13181] ? lockdep_init_map_type+0x5c/0x250 [ 253.961702][T13181] dm_create+0x5e8/0x1530 [ 253.961731][T13181] dev_create+0x121/0x2a0 [ 253.961750][T13181] ? __pfx_dev_create+0x10/0x10 [ 253.961772][T13181] ctl_ioctl+0x4d2/0xcc0 [ 253.961789][T13181] ? __pfx_dev_create+0x10/0x10 [ 253.961807][T13181] ? __pfx_ctl_ioctl+0x10/0x10 [ 253.961840][T13181] ? selinux_file_ioctl+0x1e0/0x290 [ 253.961854][T13181] dm_ctl_ioctl+0x22/0x30 [ 253.961870][T13181] ? __pfx_dm_ctl_ioctl+0x10/0x10 [ 253.961888][T13181] __x64_sys_ioctl+0x18e/0x210 [ 253.961903][T13181] do_syscall_64+0x123/0x790 [ 253.961923][T13181] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 253.961935][T13181] RIP: 0033:0x7f78a379f559 [ 253.961945][T13181] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 253.961956][T13181] RSP: 002b:00007f78a45a0028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 253.961969][T13181] RAX: ffffffffffffffda RBX: 00007f78a3a25fa0 RCX: 00007f78a379f559 [ 253.961977][T13181] RDX: 0000200000000140 RSI: 00000000c138fd03 RDI: 0000000000000003 [ 253.961985][T13181] RBP: 00007f78a3836b20 R08: 0000000000000000 R09: 0000000000000000 [ 253.961993][T13181] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 253.962001][T13181] R13: 00007f78a3a26038 R14: 00007f78a3a25fa0 R15: 00007ffdb74a95f8 [ 253.962020][T13181] [ 254.298191][T13207] FAULT_INJECTION: forcing a failure. [ 254.298191][T13207] name failslab, interval 1, probability 0, space 0, times 0 [ 254.298222][T13207] CPU: 1 UID: 0 PID: 13207 Comm: syz.4.2832 Tainted: G L syzkaller #0 PREEMPT(full) [ 254.298245][T13207] Tainted: [L]=SOFTLOCKUP [ 254.298253][T13207] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 254.298263][T13207] Call Trace: [ 254.298269][T13207] [ 254.298275][T13207] dump_stack_lvl+0x100/0x190 [ 254.298304][T13207] should_fail_ex.cold+0x5/0xa [ 254.298330][T13207] should_failslab+0xc2/0x120 [ 254.298356][T13207] kmem_cache_alloc_node_noprof+0x94/0x6e0 [ 254.298380][T13207] ? find_held_lock+0x2b/0x80 [ 254.298403][T13207] ? blk_alloc_queue+0x31/0x790 [ 254.298424][T13207] blk_alloc_queue+0x31/0x790 [ 254.298444][T13207] __blk_alloc_disk+0xa0/0x170 [ 254.298469][T13207] ? __pfx___blk_alloc_disk+0x10/0x10 [ 254.298518][T13207] ? __pfx___debug_object_init+0x10/0x10 [ 254.298558][T13207] ? lockdep_init_map_type+0x5c/0x250 [ 254.298578][T13207] ? lockdep_init_map_type+0x5c/0x250 [ 254.298600][T13207] dm_create+0x5e8/0x1530 [ 254.298628][T13207] dev_create+0x121/0x2a0 [ 254.298655][T13207] ? __pfx_dev_create+0x10/0x10 [ 254.298687][T13207] ctl_ioctl+0x4d2/0xcc0 [ 254.298711][T13207] ? __pfx_dev_create+0x10/0x10 [ 254.298736][T13207] ? __pfx_ctl_ioctl+0x10/0x10 [ 254.298782][T13207] ? selinux_file_ioctl+0x1e0/0x290 [ 254.298802][T13207] dm_ctl_ioctl+0x22/0x30 [ 254.298824][T13207] ? __pfx_dm_ctl_ioctl+0x10/0x10 [ 254.298848][T13207] __x64_sys_ioctl+0x18e/0x210 [ 254.298872][T13207] do_syscall_64+0x123/0x790 [ 254.298897][T13207] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 254.298917][T13207] RIP: 0033:0x7f78a379f559 [ 254.298931][T13207] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 254.298947][T13207] RSP: 002b:00007f78a45a0028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 254.298965][T13207] RAX: ffffffffffffffda RBX: 00007f78a3a25fa0 RCX: 00007f78a379f559 [ 254.298976][T13207] RDX: 0000200000000140 RSI: 00000000c138fd03 RDI: 0000000000000003 [ 254.298987][T13207] RBP: 00007f78a3836b20 R08: 0000000000000000 R09: 0000000000000000 [ 254.298997][T13207] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 254.299008][T13207] R13: 00007f78a3a26038 R14: 00007f78a3a25fa0 R15: 00007ffdb74a95f8 [ 254.299031][T13207] [ 254.464920][T11569] netdevsim netdevsim0 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 254.464944][T11569] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 254.582261][T11569] netdevsim netdevsim0 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 254.582284][T11569] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 254.635561][ T5784] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 254.639499][ T5784] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 254.645222][ T5784] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 254.649056][ T5784] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 254.651533][ T5784] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 254.679466][T13225] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2839'. [ 254.679481][T13225] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2839'. [ 254.687004][T13225] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2839'. [ 254.687017][T13225] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2839'. [ 254.731606][T11569] netdevsim netdevsim0 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 254.731628][T11569] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 254.782695][T11569] netdevsim netdevsim0 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 254.782717][T11569] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 254.919736][T11569] bridge_slave_1: left allmulticast mode [ 254.919767][T11569] bridge_slave_1: left promiscuous mode [ 254.919986][T11569] bridge0: port 2(bridge_slave_1) entered disabled state [ 254.929718][T11569] bridge_slave_0: left allmulticast mode [ 254.929740][T11569] bridge_slave_0: left promiscuous mode [ 254.929923][T11569] bridge0: port 1(bridge_slave_0) entered disabled state [ 254.977162][ T42] audit: type=1400 audit(1792762814.445:778): avc: denied { write } for pid=13246 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1858 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 255.048802][ T42] audit: type=1400 audit(1792762814.515:779): avc: denied { write } for pid=13253 comm="rm" name="hook-state" dev="tmpfs" ino=1858 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 255.115885][T11569] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 255.119256][T11569] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 255.126348][T11569] bond0 (unregistering): Released all slaves [ 255.138116][ T5488] 8021q: adding VLAN 0 to HW filter on device eth2 [ 255.177274][T13220] rxe_eth0 speed is unknown, defaulting to 1000 [ 255.266716][ T42] audit: type=1400 audit(1792762814.735:780): avc: denied { write } for pid=13264 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1858 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 255.344935][ T42] audit: type=1400 audit(1792762814.815:781): avc: denied { write } for pid=13270 comm="rm" name="hook-state" dev="tmpfs" ino=1858 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 255.404880][ T5488] 8021q: adding VLAN 0 to HW filter on device eth3 [ 255.474958][T11569] hsr_slave_0: left promiscuous mode [ 255.484752][T11569] hsr_slave_1: left promiscuous mode [ 255.485204][T11569] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 255.485216][T11569] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 255.485742][T11569] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 255.485751][T11569] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 255.496010][T11569] veth1_macvtap: left promiscuous mode [ 255.496032][T11569] veth0_macvtap: left promiscuous mode [ 255.496077][T11569] veth1_vlan: left promiscuous mode [ 255.496107][T11569] veth0_vlan: left promiscuous mode [ 255.507790][ T42] audit: type=1400 audit(1792762814.975:782): avc: denied { write } for pid=13277 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1858 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 255.604962][ T42] audit: type=1400 audit(1792762815.075:783): avc: denied { write } for pid=13282 comm="rm" name="hook-state" dev="tmpfs" ino=1858 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 255.612275][ T1449] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.612343][ T1449] ieee802154 phy1 wpan1: encryption failed: -22 [ 255.634706][T11569] team0 (unregistering): Port device team_slave_1 removed [ 255.648956][T11569] team0 (unregistering): Port device team_slave_0 removed [ 255.660032][T13289] FAULT_INJECTION: forcing a failure. [ 255.660032][T13289] name failslab, interval 1, probability 0, space 0, times 0 [ 255.660053][T13289] CPU: 0 UID: 0 PID: 13289 Comm: syz.3.2853 Tainted: G L syzkaller #0 PREEMPT(full) [ 255.660069][T13289] Tainted: [L]=SOFTLOCKUP [ 255.660074][T13289] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 255.660082][T13289] Call Trace: [ 255.660086][T13289] [ 255.660091][T13289] dump_stack_lvl+0x100/0x190 [ 255.660112][T13289] should_fail_ex.cold+0x5/0xa [ 255.660130][T13289] should_failslab+0xc2/0x120 [ 255.660148][T13289] __kmalloc_cache_noprof+0x91/0x6d0 [ 255.660161][T13289] ? percpu_ref_init+0xec/0x3f0 [ 255.660180][T13289] ? __pfx_blk_queue_usage_counter_release+0x10/0x10 [ 255.660198][T13289] percpu_ref_init+0xec/0x3f0 [ 255.660216][T13289] blk_alloc_queue+0x574/0x790 [ 255.660230][T13289] __blk_alloc_disk+0xa0/0x170 [ 255.660248][T13289] ? __pfx___blk_alloc_disk+0x10/0x10 [ 255.660280][T13289] ? __pfx___debug_object_init+0x10/0x10 [ 255.660305][T13289] ? lockdep_init_map_type+0x5c/0x250 [ 255.660320][T13289] ? lockdep_init_map_type+0x5c/0x250 [ 255.660335][T13289] dm_create+0x5e8/0x1530 [ 255.660354][T13289] dev_create+0x121/0x2a0 [ 255.660371][T13289] ? __pfx_dev_create+0x10/0x10 [ 255.660392][T13289] ctl_ioctl+0x4d2/0xcc0 [ 255.660408][T13289] ? __pfx_dev_create+0x10/0x10 [ 255.660425][T13289] ? __pfx_ctl_ioctl+0x10/0x10 [ 255.660457][T13289] ? selinux_file_ioctl+0x1e0/0x290 [ 255.660471][T13289] dm_ctl_ioctl+0x22/0x30 [ 255.660487][T13289] ? __pfx_dm_ctl_ioctl+0x10/0x10 [ 255.660503][T13289] __x64_sys_ioctl+0x18e/0x210 [ 255.660518][T13289] do_syscall_64+0x123/0x790 [ 255.660535][T13289] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 255.660547][T13289] RIP: 0033:0x7f5ff199f559 [ 255.660557][T13289] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 255.660569][T13289] RSP: 002b:00007f5ff294f028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 255.660586][T13289] RAX: ffffffffffffffda RBX: 00007f5ff1c25fa0 RCX: 00007f5ff199f559 [ 255.660596][T13289] RDX: 0000200000000140 RSI: 00000000c138fd03 RDI: 0000000000000003 [ 255.660607][T13289] RBP: 00007f5ff1a36b20 R08: 0000000000000000 R09: 0000000000000000 [ 255.660617][T13289] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 255.660629][T13289] R13: 00007f5ff1c26038 R14: 00007f5ff1c25fa0 R15: 00007ffdccf72b78 [ 255.660654][T13289] [ 255.728933][ T5488] 8021q: adding VLAN 0 to HW filter on device eth4 [ 255.808132][T13220] bridge0: port 1(bridge_slave_0) entered blocking state [ 255.808275][T13220] bridge0: port 1(bridge_slave_0) entered disabled state [ 255.808378][T13220] bridge_slave_0: entered allmulticast mode [ 255.809715][T13220] bridge_slave_0: entered promiscuous mode [ 255.811388][T13220] bridge0: port 2(bridge_slave_1) entered blocking state [ 255.811433][T13220] bridge0: port 2(bridge_slave_1) entered disabled state [ 255.811486][T13220] bridge_slave_1: entered allmulticast mode [ 255.812230][T13220] bridge_slave_1: entered promiscuous mode [ 255.837120][ T42] audit: type=1400 audit(1792762815.305:784): avc: denied { write } for pid=13300 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1858 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 255.855155][T13220] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 255.885151][T13220] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 255.903207][T13220] team0: Port device team_slave_0 added [ 255.906103][T13220] team0: Port device team_slave_1 added [ 255.912396][ T42] audit: type=1400 audit(1792762815.385:785): avc: denied { write } for pid=13303 comm="rm" name="hook-state" dev="tmpfs" ino=1858 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 255.931042][T13220] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 255.931058][T13220] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 255.931079][T13220] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 255.934949][T13220] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 255.934962][T13220] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 255.934984][T13220] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 255.968017][T13220] hsr_slave_0: entered promiscuous mode [ 255.968800][T13220] hsr_slave_1: entered promiscuous mode [ 255.969354][T13220] debugfs: 'hsr0' already exists in 'hsr' [ 255.969385][T13220] Cannot create hsr debugfs directory [ 255.980350][ T10] usb 8-1: new high-speed USB device number 17 using dummy_hcd [ 255.992726][ T5488] 8021q: adding VLAN 0 to HW filter on device eth5 [ 256.121830][T13220] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 256.125128][T13220] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 256.125730][T13220] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 256.127852][T13220] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 256.128639][T13220] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 256.131920][T13220] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 256.135877][T13220] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 256.141613][ T10] usb 8-1: Using ep0 maxpacket: 32 [ 256.144585][T13220] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 256.145200][ T10] usb 8-1: New USB device found, idVendor=1430, idProduct=474b, bcdDevice= 0.40 [ 256.146114][ T10] usb 8-1: config 1 interface 0 altsetting 0 endpoint 0x8C has invalid maxpacket 1536, setting to 1024 [ 256.146130][ T10] usb 8-1: config 1 interface 0 altsetting 0 bulk endpoint 0x8C has invalid maxpacket 1024 [ 256.148650][ T10] usb 8-1: string descriptor 0 read error: -22 [ 256.148740][ T10] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 256.152902][T13293] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 256.157942][ T10] usb 8-1: Quirk or no altset; falling back to MIDI 1.0 [ 256.157996][ T10] usb 8-1: MIDIStreaming interface descriptor not found [ 256.217315][T13220] 8021q: adding VLAN 0 to HW filter on device bond0 [ 256.238434][T13220] 8021q: adding VLAN 0 to HW filter on device team0 [ 256.246580][ T77] bridge0: port 1(bridge_slave_0) entered blocking state [ 256.246668][ T77] bridge0: port 1(bridge_slave_0) entered forwarding state [ 256.254653][ T77] bridge0: port 2(bridge_slave_1) entered blocking state [ 256.254737][ T77] bridge0: port 2(bridge_slave_1) entered forwarding state [ 256.369779][ T5979] usb 8-1: USB disconnect, device number 17 [ 256.740429][ T67] Bluetooth: hci3: command tx timeout [ 257.720766][T13220] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 257.874022][T13220] veth0_vlan: entered promiscuous mode [ 257.879206][T13220] veth1_vlan: entered promiscuous mode [ 257.900357][T13220] veth0_macvtap: entered promiscuous mode [ 257.904960][T13220] veth1_macvtap: entered promiscuous mode [ 257.926551][T13220] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 257.932834][T13220] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 257.987433][ T5846] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 257.989705][ T5846] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 257.990113][ T5846] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 257.991118][ T5846] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 258.334704][ T1164] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 258.335229][ T1164] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 258.473800][ T1169] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 258.473919][ T1169] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 258.811453][ T67] Bluetooth: hci3: command tx timeout [ 259.676491][ T42] audit: type=1400 audit(1792762819.145:786): avc: denied { write } for pid=13418 comm="syz.2.2887" name="subsystems" dev="configfs" ino=6294 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 259.687026][T13419] nvmet: adding nsid 1 to subsystem testsubsys [ 259.687269][ T42] audit: type=1400 audit(1792762819.155:787): avc: denied { write } for pid=13418 comm="syz.2.2887" name="namespaces" dev="configfs" ino=35695 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 259.834532][T13435] PM: suspend entry (s2idle) [ 259.900030][ T12] Filesystems sync: 0.061 seconds [ 259.933547][T13443] __nla_validate_parse: 5 callbacks suppressed [ 259.933568][T13443] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2897'. [ 259.933584][T13443] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2897'. [ 259.934115][T13433] FAULT_INJECTION: forcing a failure. [ 259.934115][T13433] name failslab, interval 1, probability 0, space 0, times 0 [ 259.934142][T13433] CPU: 0 UID: 0 PID: 13433 Comm: syz.2.2893 Tainted: G L syzkaller #0 PREEMPT(full) [ 259.934157][T13433] Tainted: [L]=SOFTLOCKUP [ 259.934162][T13433] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 259.934170][T13433] Call Trace: [ 259.934174][T13433] [ 259.934179][T13433] dump_stack_lvl+0x100/0x190 [ 259.934225][T13433] should_fail_ex.cold+0x5/0xa [ 259.934245][T13433] should_failslab+0xc2/0x120 [ 259.934267][T13433] __kmalloc_cache_noprof+0x91/0x6d0 [ 259.934282][T13433] ? rfkill_fop_open+0x1cc/0x480 [ 259.934301][T13433] rfkill_fop_open+0x1cc/0x480 [ 259.934316][T13433] ? __pfx_rfkill_fop_open+0x10/0x10 [ 259.934330][T13433] misc_open+0x26d/0x450 [ 259.934346][T13433] ? __pfx_misc_open+0x10/0x10 [ 259.934361][T13433] chrdev_open+0x234/0x6a0 [ 259.934379][T13433] ? __pfx_chrdev_open+0x10/0x10 [ 259.934396][T13433] ? fsnotify_open_perm_and_set_mode+0x17a/0xa80 [ 259.934414][T13433] do_dentry_open+0x674/0x1470 [ 259.934429][T13433] ? __pfx_chrdev_open+0x10/0x10 [ 259.934449][T13433] vfs_open_consume+0xcc/0x460 [ 259.934481][T13433] path_openat+0x1547/0x23f0 [ 259.934503][T13433] ? __pfx_path_openat+0x10/0x10 [ 259.934531][T13433] do_file_open+0x20e/0x430 [ 259.934543][T13443] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2897'. [ 259.934560][T13443] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2897'. [ 259.934557][T13433] ? __pfx_do_file_open+0x10/0x10 [ 259.934596][T13433] ? _raw_spin_unlock+0x28/0x50 [ 259.934619][T13433] ? alloc_fd+0x471/0x7a0 [ 259.934651][T13433] do_sys_openat2+0x163/0x1d0 [ 259.934662][T13433] ? __pfx_do_sys_openat2+0x10/0x10 [ 259.934674][T13433] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 259.934708][T13433] __x64_sys_openat+0x12d/0x210 [ 259.934720][T13433] ? __pfx___x64_sys_openat+0x10/0x10 [ 259.934737][T13433] do_syscall_64+0x123/0x790 [ 259.934753][T13433] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 259.934765][T13433] RIP: 0033:0x7ff2a419f559 [ 259.934776][T13433] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 259.934787][T13433] RSP: 002b:00007ff2a5106028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 259.934798][T13433] RAX: ffffffffffffffda RBX: 00007ff2a4425fa0 RCX: 00007ff2a419f559 [ 259.934806][T13433] RDX: 0000000000000000 RSI: 0000200000000340 RDI: ffffffffffffff9c [ 259.934812][T13433] RBP: 00007ff2a4236b20 R08: 0000000000000000 R09: 0000000000000000 [ 259.934819][T13433] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 259.934826][T13433] R13: 00007ff2a4426038 R14: 00007ff2a4425fa0 R15: 00007ffd72888b08 [ 259.934842][T13433] [ 260.080640][T13450] syzkaller0: entered promiscuous mode [ 260.080655][T13450] syzkaller0: entered allmulticast mode [ 260.141766][ T67] Bluetooth: hci1: link tx timeout [ 260.141784][ T67] Bluetooth: hci1: killing stalled connection 10:aa:aa:aa:aa:aa [ 260.664761][T13435] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 260.665623][T13435] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 260.867420][T13435] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 260.867458][T13435] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 260.876656][T13435] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 260.876864][T13435] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 260.880929][T13435] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 260.883885][T13435] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 260.883914][T13435] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 260.889591][T13435] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 260.898441][T13435] Freezing user space processes [ 260.902748][T13435] ------------[ cut here ]------------ [ 260.902758][T13435] debug_locks && p->lockdep_depth [ 260.902764][T13435] WARNING: kernel/freezer.c:139 at __set_task_frozen+0x211/0x2e0, CPU#2: syz.4.2894/13435 [ 260.909434][T13435] Modules linked in: [ 260.910808][T13435] CPU: 2 UID: 0 PID: 13435 Comm: syz.4.2894 Tainted: G L syzkaller #0 PREEMPT(full) [ 260.914722][T13435] Tainted: [L]=SOFTLOCKUP [ 260.916337][T13435] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 260.920209][T13435] RIP: 0010:__set_task_frozen+0x211/0x2e0 [ 260.922373][T13435] Code: 0f b6 04 02 84 c0 74 09 3c 03 7f 05 e8 98 a3 8a 00 8b ab a0 0b 00 00 31 ff 89 ee e8 b9 4b 16 00 85 ed 74 09 e8 40 51 16 00 90 <0f> 0b 90 e8 37 51 16 00 4c 89 e2 48 b8 00 00 00 00 00 fc ff df 48 [ 260.929678][T13435] RSP: 0018:ffffc9000535f998 EFLAGS: 00010083 [ 260.931832][T13435] RAX: 0000000000033e37 RBX: ffff888028a08000 RCX: ffffc90006fc3000 [ 260.934920][T13435] RDX: 0000000000080000 RSI: ffffffff81f761b0 RDI: ffff8880313ea580 [ 260.938001][T13435] RBP: 0000000000000003 R08: 0000000000000005 R09: 0000000000000000 [ 260.941108][T13435] R10: 0000000000000003 R11: 0000000000000000 R12: ffff888028a08018 [ 260.944177][T13435] R13: 0000000000000002 R14: dffffc0000000000 R15: ffff888028a08a80 [ 260.947179][T13435] FS: 00007f78a45a06c0(0000) GS:ffff8880d46e2000(0000) knlGS:0000000000000000 [ 260.950028][T13435] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 260.952105][T13435] CR2: 00007f5ff275da08 CR3: 000000005fca6000 CR4: 0000000000352ef0 [ 260.954622][T13435] Call Trace: [ 260.955631][T13435] [ 260.956574][T13435] ? __pfx___set_task_frozen+0x10/0x10 [ 260.958274][T13435] task_call_func+0x169/0x380 [ 260.959850][T13435] ? cgroup1_freezing+0x12c/0x3b0 [ 260.961443][T13435] ? cgroup1_freezing+0x12c/0x3b0 [ 260.963050][T13435] ? __pfx_task_call_func+0x10/0x10 [ 260.964716][T13435] ? cgroup1_freezing+0x136/0x3b0 [ 260.966304][T13435] freeze_task+0x151/0x270 [ 260.967757][T13435] ? __pfx_freeze_task+0x10/0x10 [ 260.969358][T13435] ? lockdep_hardirqs_on+0x7d/0x110 [ 260.971071][T13435] ? ktime_get_with_offset+0x2b6/0x3d0 [ 260.972792][T13435] try_to_freeze_tasks+0x243/0x680 [ 260.974429][T13435] ? do_raw_spin_lock+0x30/0x260 [ 260.976017][T13435] ? __pfx_try_to_freeze_tasks+0x10/0x10 [ 260.977778][T13435] ? _raw_spin_unlock_irq+0x23/0x50 [ 260.979430][T13435] ? lockdep_hardirqs_on+0x7d/0x110 [ 260.981073][T13435] freeze_processes+0xf2/0x1e0 [ 260.982609][T13435] pm_suspend+0x32c/0x7b0 [ 260.983975][T13435] state_store+0x101/0x240 [ 260.985487][T13435] ? __pfx_state_store+0x10/0x10 [ 260.987057][T13435] kobj_attr_store+0x58/0x80 [ 260.988588][T13435] ? __pfx_kobj_attr_store+0x10/0x10 [ 260.990290][T13435] sysfs_kf_write+0xf2/0x150 [ 260.991760][T13435] kernfs_fop_write_iter+0x3e0/0x5f0 [ 260.993524][T13435] ? __pfx_sysfs_kf_write+0x10/0x10 [ 260.995493][T13435] vfs_write+0x6af/0x1050 [ 260.997038][T13435] ? __pfx_kernfs_fop_write_iter+0x10/0x10 [ 260.998929][T13435] ? __pfx_vfs_write+0x10/0x10 [ 261.000461][T13435] ? find_held_lock+0x2b/0x80 [ 261.002002][T13435] ksys_write+0x12a/0x250 [ 261.003388][T13435] ? __pfx_ksys_write+0x10/0x10 [ 261.004945][T13435] do_syscall_64+0x123/0x790 [ 261.006414][T13435] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 261.008106][T13435] RIP: 0033:0x7f78a379f559 [ 261.009354][T13435] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 261.015455][T13435] RSP: 002b:00007f78a45a0028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 261.018034][T13435] RAX: ffffffffffffffda RBX: 00007f78a3a25fa0 RCX: 00007f78a379f559 [ 261.020551][T13435] RDX: 0000000000000006 RSI: 0000200000000240 RDI: 0000000000000003 [ 261.023024][T13435] RBP: 00007f78a3836b20 R08: 0000000000000000 R09: 0000000000000000 [ 261.025522][T13435] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 261.028004][T13435] R13: 00007f78a3a26038 R14: 00007f78a3a25fa0 R15: 00007ffdb74a95f8 [ 261.030500][T13435] [ 261.031490][T13435] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 261.033757][T13435] CPU: 2 UID: 0 PID: 13435 Comm: syz.4.2894 Tainted: G L syzkaller #0 PREEMPT(full) [ 261.037162][T13435] Tainted: [L]=SOFTLOCKUP [ 261.038524][T13435] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 261.041594][T13435] Call Trace: [ 261.042656][T13435] [ 261.043597][T13435] dump_stack_lvl+0x100/0x190 [ 261.045094][T13435] vpanic+0x553/0x970 [ 261.046352][T13435] ? __pfx_vpanic+0x10/0x10 [ 261.047798][T13435] panic+0xd1/0xe0 [ 261.048967][T13435] ? __pfx_panic+0x10/0x10 [ 261.050383][T13435] check_panic_on_warn.cold+0x19/0x34 [ 261.052061][T13435] ? __set_task_frozen+0x211/0x2e0 [ 261.053647][T13435] __warn.cold+0x191/0x318 [ 261.055096][T13435] __report_bug+0x30f/0x440 [ 261.056534][T13435] ? __set_task_frozen+0x211/0x2e0 [ 261.058154][T13435] ? __pfx___report_bug+0x10/0x10 [ 261.059724][T13435] ? __lock_acquire+0x5c0/0x1f40 [ 261.061263][T13435] ? wakeup_preempt_fair+0x4fc/0xf60 [ 261.062919][T13435] ? __set_task_frozen+0x211/0x2e0 [ 261.064526][T13435] report_bug+0xb3/0x220 [ 261.065847][T13435] ? __set_task_frozen+0x211/0x2e0 [ 261.067439][T13435] handle_bug+0x16a/0x2a0 [ 261.068782][T13435] exc_invalid_op+0x17/0x50 [ 261.070217][T13435] asm_exc_invalid_op+0x1a/0x20 [ 261.071733][T13435] RIP: 0010:__set_task_frozen+0x211/0x2e0 [ 261.073484][T13435] Code: 0f b6 04 02 84 c0 74 09 3c 03 7f 05 e8 98 a3 8a 00 8b ab a0 0b 00 00 31 ff 89 ee e8 b9 4b 16 00 85 ed 74 09 e8 40 51 16 00 90 <0f> 0b 90 e8 37 51 16 00 4c 89 e2 48 b8 00 00 00 00 00 fc ff df 48 [ 261.079499][T13435] RSP: 0018:ffffc9000535f998 EFLAGS: 00010083 [ 261.081443][T13435] RAX: 0000000000033e37 RBX: ffff888028a08000 RCX: ffffc90006fc3000 [ 261.083919][T13435] RDX: 0000000000080000 RSI: ffffffff81f761b0 RDI: ffff8880313ea580 [ 261.086379][T13435] RBP: 0000000000000003 R08: 0000000000000005 R09: 0000000000000000 [ 261.088842][T13435] R10: 0000000000000003 R11: 0000000000000000 R12: ffff888028a08018 [ 261.091328][T13435] R13: 0000000000000002 R14: dffffc0000000000 R15: ffff888028a08a80 [ 261.093791][T13435] ? __set_task_frozen+0x210/0x2e0 [ 261.095452][T13435] ? __set_task_frozen+0x210/0x2e0 [ 261.097048][T13435] ? __pfx___set_task_frozen+0x10/0x10 [ 261.098746][T13435] task_call_func+0x169/0x380 [ 261.100229][T13435] ? cgroup1_freezing+0x12c/0x3b0 [ 261.101806][T13435] ? cgroup1_freezing+0x12c/0x3b0 [ 261.103393][T13435] ? __pfx_task_call_func+0x10/0x10 [ 261.105064][T13435] ? cgroup1_freezing+0x136/0x3b0 [ 261.106643][T13435] freeze_task+0x151/0x270 [ 261.108207][T13435] ? __pfx_freeze_task+0x10/0x10 [ 261.109866][T13435] ? lockdep_hardirqs_on+0x7d/0x110 [ 261.111578][T13435] ? ktime_get_with_offset+0x2b6/0x3d0 [ 261.113306][T13435] try_to_freeze_tasks+0x243/0x680 [ 261.114944][T13435] ? do_raw_spin_lock+0x30/0x260 [ 261.116505][T13435] ? __pfx_try_to_freeze_tasks+0x10/0x10 [ 261.118265][T13435] ? _raw_spin_unlock_irq+0x23/0x50 [ 261.119897][T13435] ? lockdep_hardirqs_on+0x7d/0x110 [ 261.121530][T13435] freeze_processes+0xf2/0x1e0 [ 261.123039][T13435] pm_suspend+0x32c/0x7b0 [ 261.124406][T13435] state_store+0x101/0x240 [ 261.125821][T13435] ? __pfx_state_store+0x10/0x10 [ 261.127418][T13435] kobj_attr_store+0x58/0x80 [ 261.128889][T13435] ? __pfx_kobj_attr_store+0x10/0x10 [ 261.130581][T13435] sysfs_kf_write+0xf2/0x150 [ 261.132037][T13435] kernfs_fop_write_iter+0x3e0/0x5f0 [ 261.133675][T13435] ? __pfx_sysfs_kf_write+0x10/0x10 [ 261.135285][T13435] vfs_write+0x6af/0x1050 [ 261.136614][T13435] ? __pfx_kernfs_fop_write_iter+0x10/0x10 [ 261.138437][T13435] ? __pfx_vfs_write+0x10/0x10 [ 261.139960][T13435] ? find_held_lock+0x2b/0x80 [ 261.141570][T13435] ksys_write+0x12a/0x250 [ 261.142943][T13435] ? __pfx_ksys_write+0x10/0x10 [ 261.144393][T13435] do_syscall_64+0x123/0x790 [ 261.145691][T13435] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 261.147346][T13435] RIP: 0033:0x7f78a379f559 [ 261.148598][T13435] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 261.154276][T13435] RSP: 002b:00007f78a45a0028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 261.156869][T13435] RAX: ffffffffffffffda RBX: 00007f78a3a25fa0 RCX: 00007f78a379f559 [ 261.159332][T13435] RDX: 0000000000000006 RSI: 0000200000000240 RDI: 0000000000000003 [ 261.161800][T13435] RBP: 00007f78a3836b20 R08: 0000000000000000 R09: 0000000000000000 [ 261.164601][T13435] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 261.168140][T13435] R13: 00007f78a3a26038 R14: 00007f78a3a25fa0 R15: 00007ffdb74a95f8 [ 261.170640][T13435] [ 262.260775][T13435] Shutting down cpus with NMI [ 262.263437][T13435] Kernel Offset: disabled [ 262.265169][T13435] Rebooting in 86400 seconds..