last executing test programs: 288.333582ms ago: executing program 2 (id=3): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(&(0x7f0000000040)=@filename='none\x00', &(0x7f0000000000)='./sys\x00', &(0x7f0000000080)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./sys/module/block2mtd/parameters/block2mtd\x00', 0x2, 0x0) write(r0, &(0x7f0000000100)='/dev/ram0,131072\x00', 0x11) 135.854446ms ago: executing program 2 (id=5): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./mnt_v1\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./mnt_v1\x00', &(0x7f0000000100)='cgroup\x00', 0x0, 0x0) 135.64936ms ago: executing program 2 (id=6): r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x38, 0x1403, 0x1, 0x70bd2a, 0x25dfdbfe, "", [{{0x9, 0x2, 'syz1\x00'}, {0x8, 0x41, 'siw\x00'}, {0x14, 0x33, 'bond0\x00'}}]}, 0x38}, 0x1, 0x0, 0x0, 0x800}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./config\x00', 0x1ff) mount(0x0, &(0x7f0000000140)='./config\x00', &(0x7f0000000180)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./config/nvmet/subsystems/n\x00', 0x1ff) r1 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./config/nvmet/subsystems/n/attr_allow_any_host\x00', 0x1, 0x0) write(r1, &(0x7f00000002c0)='1\n', 0x2) close(r1) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./config/nvmet/ports/1\x00', 0x1ff) r2 = openat(0xffffffffffffff9c, &(0x7f0000000380)='./config/nvmet/ports/1/addr_trtype\x00', 0x1, 0x0) write(r2, 0x0, 0x0) close(r2) r3 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./config/nvmet/ports/1/addr_traddr\x00', 0x1, 0x0) write(r3, &(0x7f0000000440)='172.20.20.23\n', 0xd) close(r3) r4 = openat(0xffffffffffffff9c, &(0x7f0000000480)='./config/nvmet/ports/1/addr_trsvcid\x00', 0x1, 0x0) write(r4, &(0x7f00000004c0)='4420\n', 0x5) close(r4) r5 = openat(0xffffffffffffff9c, &(0x7f0000000500)='./config/nvmet/ports/1/addr_adrfam\x00', 0x1, 0x0) write(r5, &(0x7f0000000540)='ipv4\n', 0x5) close(r5) symlinkat(&(0x7f00000005c0)='./config/nvmet/subsystems/n\x00', 0xffffffffffffff9c, &(0x7f0000000600)='./config/nvmet/ports/1/subsystems/n\x00') 37.127206ms ago: executing program 2 (id=7): mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000000100)='./dev\x00', &(0x7f0000000140)='devtmpfs\x00', 0x0, 0x0) openat(0xffffffffffffff9c, 0x0, 0x1, 0x0) write(0xffffffffffffffff, 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./dev/md0\x00', 0x4002, 0x0) ioctl(r0, 0x40480923, &(0x7f0000000500)) ioctl(r0, 0x40140921, 0x0) ioctl(r0, 0x40140921, 0x0) ioctl(r0, 0x400c0930, 0x0) write(r0, &(0x7f0000001000)='\x00'/992, 0x3e0) nanosleep(&(0x7f0000000800)={0x0, 0x5f5e100}, 0x0) 36.996479ms ago: executing program 3 (id=4): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./sys\x00', &(0x7f00000000c0)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./sys/bus/platform/devices/pcspkr\x00', 0x0, 0x0) r1 = openat(r0, &(0x7f0000000200)='driver_override\x00', 0x1, 0x0) write(r1, &(0x7f0000000300)='ucsi_acpi\n', 0xa) close(r1) r2 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./sys/bus/platform/drivers/ucsi_acpi\x00', 0x0, 0x0) r3 = openat(r2, &(0x7f0000000500)='bind\x00', 0x1, 0x0) write(r3, &(0x7f0000000600)='pcspkr\n', 0x7) close(r3) 17.486874ms ago: executing program 1 (id=2): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./nfsd\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./nfsd\x00', &(0x7f0000000080)='nfsd\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./nfsd/portlist\x00', 0x2, 0x0) write(r0, &(0x7f0000000240)='abc 2049\n', 0x9) close(r0) 0s ago: executing program 0 (id=1): r0 = openat$ublk_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r1 = syz_ublk_setup_io_uring(0x20, &(0x7f0000000040), &(0x7f00000000c0)=0x0, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) r5 = syz_ublk_add_dev(r1, r2, r3, r4, &(0x7f0000000200)={0x2e, 0x0, 0x0, r0, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x48, &(0x7f0000000500)=@new_dev={0x1, 0x4, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x1}}}, &(0x7f0000000300)) syz_io_uring_submit$UBLK(r2, r3, r4, &(0x7f0000000600)=@ublk_set_params_sqe={0x2e, 0x0, 0x0, r0, 0xc0207508, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', {r5, 0xffff, 0x30, &(0x7f0000000680)={0x30, 0x1, {0x0, 0x9, 0xc, 0xc, 0x9, 0x8}}}}) io_uring_enter(r1, 0x1, 0x1, 0x1, 0x0, 0x0) syz_io_uring_complete(r2, r3) r6 = syz_open_dev$ublk_chdev(&(0x7f0000002000), r5, 0x2) r7 = syz_ublk_setup_io_uring(0x20, &(0x7f0000001040), &(0x7f00000010c0)=0x0, &(0x7f0000001100)=0x0, &(0x7f0000001140)=0x0) io_uring_register$IORING_REGISTER_BUFFERS(r7, 0x0, &(0x7f0000001200)=[{0x0}], 0x1) syz_io_uring_submit(r8, r9, r10, &(0x7f0000001300)=@IORING_OP_URING_CMD=@ublk_cmd_sqes=@ublk_io_cmd_sqes={0x2e, 0x0, 0x0, r6, 0xc0107520, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', @fetch_req_cmd={0x0, 0x0, 0x0, 0x0}}) io_uring_enter(r7, 0x1, 0x0, 0x0, 0x0, 0x0) r11 = getpid() syz_io_uring_submit$UBLK(r2, r3, r4, &(0x7f0000000c00)=@ublk_start_dev_sqe={0x2e, 0x0, 0x0, r0, 0xc0207506, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', {r5, 0xffff, 0x0, 0x0, r11}}) io_uring_enter(r1, 0x1, 0x1, 0x1, 0x0, 0x0) syz_io_uring_complete(r2, r3) nanosleep(&(0x7f0000000350)={0x5}, 0x0) r12 = syz_open_dev$ublk_bdev(&(0x7f0000003000), r5, 0x0) pread64$ublk_bdev(r12, &(0x7f0000005000)=""/4096, 0x1000, 0x0) io_uring_enter(r7, 0x0, 0x1, 0x1, 0x0, 0x0) syz_io_uring_submit(r8, r9, r10, &(0x7f0000001400)=@IORING_OP_URING_CMD=@ublk_cmd_sqes=@ublk_io_cmd_sqes={0x2e, 0x0, 0x0, r6, 0xc0107523, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', @fetch_req_cmd={0x0, 0x0, 0x0, 0x0}}) io_uring_enter(r7, 0x1, 0x1, 0x1, 0x0, 0x0) syz_io_uring_submit(r8, r9, r10, &(0x7f0000001500)=@IORING_OP_URING_CMD=@ublk_cmd_sqes=@ublk_io_cmd_sqes={0x2e, 0x0, 0x0, r6, 0xc0107521, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', @commit_and_fetch_cmd={0x0, 0x0, 0x1000, 0x0}}) io_uring_enter(r7, 0x1, 0x0, 0x0, 0x0, 0x0) io_uring_register$IORING_UNREGISTER_BUFFERS(r7, 0x1, 0x0, 0x0) close(r7) kernel console output (not intermixed with test programs): Warning: Permanently added '[localhost]:60082' (ED25519) to the list of known hosts. [ 42.195658][ T43] kauditd_printk_skb: 20 callbacks suppressed [ 42.195678][ T43] audit: type=1400 audit(1789665367.642:141): avc: denied { mounton } for pid=5712 comm="syz-executor" path="/syzcgroup/unified" dev="sda1" ino=2022 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1 [ 42.197125][ T43] audit: type=1400 audit(1789665367.642:142): avc: denied { mount } for pid=5712 comm="syz-executor" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 42.199256][ T5712] cgroup: Unknown subsys name 'net' [ 42.200554][ T43] audit: type=1400 audit(1789665367.642:143): avc: denied { unmount } for pid=5712 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 42.325753][ T5712] cgroup: Unknown subsys name 'cpuset' [ 42.328210][ T5712] cgroup: Unknown subsys name 'rlimit' [ 42.499558][ T43] audit: type=1400 audit(1789665367.942:144): avc: denied { setattr } for pid=5712 comm="syz-executor" name="raw-gadget" dev="devtmpfs" ino=848 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 42.500098][ T43] audit: type=1400 audit(1789665367.942:145): avc: denied { create } for pid=5712 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 42.500465][ T43] audit: type=1400 audit(1789665367.942:146): avc: denied { write } for pid=5712 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 42.500819][ T43] audit: type=1400 audit(1789665367.942:147): avc: denied { read } for pid=5712 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 42.515218][ T43] audit: type=1400 audit(1789665367.962:148): avc: denied { mounton } for pid=5712 comm="syz-executor" path="/proc/sys/fs/binfmt_misc" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=dir permissive=1 [ 42.517462][ T43] audit: type=1400 audit(1789665367.962:149): avc: denied { mount } for pid=5712 comm="syz-executor" name="/" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=filesystem permissive=1 [ 42.547368][ T43] audit: type=1400 audit(1789665367.992:150): avc: denied { read } for pid=5440 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=1 Setting up swapspace version 1, size = 127995904 bytes [ 42.562646][ T5717] SELinux: Context root:object_r:swapfile_t is not valid (left unmapped). [ 43.215262][ T5712] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 46.822867][ T5085] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 46.824611][ T5729] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 46.826840][ T5740] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 46.827430][ T5740] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 46.828252][ T5740] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 46.828895][ T5740] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 46.829296][ T5740] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 46.829522][ T5740] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 46.831102][ T5740] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 46.831396][ T5740] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 46.832412][ T5729] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 46.835859][ T5741] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 46.837068][ T5735] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 46.837070][ T5729] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 46.837601][ T5729] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 46.839889][ T5740] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 46.840112][ T5740] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 46.845426][ T5085] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 46.857343][ T5085] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 46.862100][ T5085] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 47.437803][ T5725] bridge0: port 1(bridge_slave_0) entered blocking state [ 47.438306][ T5725] bridge0: port 1(bridge_slave_0) entered disabled state [ 47.438368][ T5725] bridge_slave_0: entered allmulticast mode [ 47.439217][ T5725] bridge_slave_0: entered promiscuous mode [ 47.469327][ T5725] bridge0: port 2(bridge_slave_1) entered blocking state [ 47.469418][ T5725] bridge0: port 2(bridge_slave_1) entered disabled state [ 47.469512][ T5725] bridge_slave_1: entered allmulticast mode [ 47.470840][ T5725] bridge_slave_1: entered promiscuous mode [ 47.597083][ T5725] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 47.599831][ T5725] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 47.685336][ T5725] team0: Port device team_slave_0 added [ 47.702005][ T5732] bridge0: port 1(bridge_slave_0) entered blocking state [ 47.702087][ T5732] bridge0: port 1(bridge_slave_0) entered disabled state [ 47.702777][ T5732] bridge_slave_0: entered allmulticast mode [ 47.704273][ T5732] bridge_slave_0: entered promiscuous mode [ 47.706416][ T5732] bridge0: port 2(bridge_slave_1) entered blocking state [ 47.706510][ T5732] bridge0: port 2(bridge_slave_1) entered disabled state [ 47.706602][ T5732] bridge_slave_1: entered allmulticast mode [ 47.707459][ T5732] bridge_slave_1: entered promiscuous mode [ 47.709876][ T5725] team0: Port device team_slave_1 added [ 47.781989][ T5737] bridge0: port 1(bridge_slave_0) entered blocking state [ 47.782073][ T5737] bridge0: port 1(bridge_slave_0) entered disabled state [ 47.782165][ T5737] bridge_slave_0: entered allmulticast mode [ 47.783894][ T5737] bridge_slave_0: entered promiscuous mode [ 47.787280][ T5737] bridge0: port 2(bridge_slave_1) entered blocking state [ 47.787356][ T5737] bridge0: port 2(bridge_slave_1) entered disabled state [ 47.787649][ T5737] bridge_slave_1: entered allmulticast mode [ 47.789113][ T5737] bridge_slave_1: entered promiscuous mode [ 47.815343][ T5732] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 47.817458][ T5732] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 47.825958][ T5725] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 47.825973][ T5725] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 47.825992][ T5725] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 47.827793][ T5725] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 47.827802][ T5725] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 47.827814][ T5725] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 47.852251][ T5724] bridge0: port 1(bridge_slave_0) entered blocking state [ 47.852417][ T5724] bridge0: port 1(bridge_slave_0) entered disabled state [ 47.852549][ T5724] bridge_slave_0: entered allmulticast mode [ 47.853700][ T5724] bridge_slave_0: entered promiscuous mode [ 47.868825][ T5737] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 47.879261][ T5724] bridge0: port 2(bridge_slave_1) entered blocking state [ 47.879306][ T5724] bridge0: port 2(bridge_slave_1) entered disabled state [ 47.879362][ T5724] bridge_slave_1: entered allmulticast mode [ 47.880267][ T5724] bridge_slave_1: entered promiscuous mode [ 47.882701][ T5737] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 47.889445][ T5732] team0: Port device team_slave_0 added [ 47.911108][ T5732] team0: Port device team_slave_1 added [ 47.919420][ T5737] team0: Port device team_slave_0 added [ 47.921219][ T5724] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 47.926902][ T5725] hsr_slave_0: entered promiscuous mode [ 47.927745][ T5725] hsr_slave_1: entered promiscuous mode [ 47.939019][ T5737] team0: Port device team_slave_1 added [ 47.947714][ T5724] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 47.948222][ T5732] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 47.948236][ T5732] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 47.948256][ T5732] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 47.979866][ T5732] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 47.979882][ T5732] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 47.979903][ T5732] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 47.981305][ T5724] team0: Port device team_slave_0 added [ 48.007611][ T5724] team0: Port device team_slave_1 added [ 48.038168][ T5737] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 48.038180][ T5737] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 48.038193][ T5737] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 48.040462][ T5724] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 48.040475][ T5724] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 48.040494][ T5724] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 48.051914][ T5737] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 48.051925][ T5737] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 48.051941][ T5737] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 48.069493][ T5724] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 48.069507][ T5724] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 48.069522][ T5724] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 48.103525][ T5732] hsr_slave_0: entered promiscuous mode [ 48.104569][ T5732] hsr_slave_1: entered promiscuous mode [ 48.104994][ T5732] debugfs: 'hsr0' already exists in 'hsr' [ 48.105060][ T5732] Cannot create hsr debugfs directory [ 48.203416][ T5737] hsr_slave_0: entered promiscuous mode [ 48.204157][ T5737] hsr_slave_1: entered promiscuous mode [ 48.204686][ T5737] debugfs: 'hsr0' already exists in 'hsr' [ 48.204703][ T5737] Cannot create hsr debugfs directory [ 48.219529][ T5724] hsr_slave_0: entered promiscuous mode [ 48.220334][ T5724] hsr_slave_1: entered promiscuous mode [ 48.220851][ T5724] debugfs: 'hsr0' already exists in 'hsr' [ 48.220869][ T5724] Cannot create hsr debugfs directory [ 48.505730][ T5725] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 48.510811][ T5725] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 48.537469][ T5725] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 48.541710][ T5725] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 48.558254][ T5725] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 48.562867][ T5725] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 48.563700][ T5725] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 48.568186][ T5725] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 48.619104][ T5732] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 48.624698][ T5732] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 48.625609][ T5732] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 48.632190][ T5732] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 48.635308][ T5732] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 48.638573][ T5732] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 48.641201][ T5732] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 48.645876][ T5732] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 48.728472][ T5724] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 48.734271][ T5724] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 48.734937][ T5724] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 48.737837][ T5724] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 48.741413][ T5724] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 48.747290][ T5724] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 48.753029][ T5724] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 48.756335][ T5724] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 48.825270][ T5737] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 48.827668][ T5737] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 48.828275][ T5737] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 48.830523][ T5737] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 48.838789][ T5737] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 48.843745][ T5737] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 48.846000][ T5737] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 48.850360][ T5737] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 48.875111][ T5725] 8021q: adding VLAN 0 to HW filter on device bond0 [ 48.884835][ T5732] 8021q: adding VLAN 0 to HW filter on device bond0 [ 48.911218][ T5725] 8021q: adding VLAN 0 to HW filter on device team0 [ 48.913592][ T5085] Bluetooth: hci2: command tx timeout [ 48.913600][ T64] Bluetooth: hci1: command tx timeout [ 48.922719][ T5085] Bluetooth: hci0: command tx timeout [ 48.922754][ T64] Bluetooth: hci3: command tx timeout [ 48.930200][ T1170] bridge0: port 1(bridge_slave_0) entered blocking state [ 48.930309][ T1170] bridge0: port 1(bridge_slave_0) entered forwarding state [ 48.934033][ T1170] bridge0: port 2(bridge_slave_1) entered blocking state [ 48.934118][ T1170] bridge0: port 2(bridge_slave_1) entered forwarding state [ 48.941152][ T5732] 8021q: adding VLAN 0 to HW filter on device team0 [ 48.965746][ T1170] bridge0: port 1(bridge_slave_0) entered blocking state [ 48.965823][ T1170] bridge0: port 1(bridge_slave_0) entered forwarding state [ 48.982827][ T1170] bridge0: port 2(bridge_slave_1) entered blocking state [ 48.983095][ T1170] bridge0: port 2(bridge_slave_1) entered forwarding state [ 49.000680][ T5724] 8021q: adding VLAN 0 to HW filter on device bond0 [ 49.038250][ T5737] 8021q: adding VLAN 0 to HW filter on device bond0 [ 49.048167][ T5724] 8021q: adding VLAN 0 to HW filter on device team0 [ 49.060763][ T38] bridge0: port 1(bridge_slave_0) entered blocking state [ 49.060809][ T38] bridge0: port 1(bridge_slave_0) entered forwarding state [ 49.071238][ T38] bridge0: port 2(bridge_slave_1) entered blocking state [ 49.071322][ T38] bridge0: port 2(bridge_slave_1) entered forwarding state [ 49.087300][ T5737] 8021q: adding VLAN 0 to HW filter on device team0 [ 49.097729][ T55] bridge0: port 1(bridge_slave_0) entered blocking state [ 49.097774][ T55] bridge0: port 1(bridge_slave_0) entered forwarding state [ 49.114421][ T55] bridge0: port 2(bridge_slave_1) entered blocking state [ 49.114466][ T55] bridge0: port 2(bridge_slave_1) entered forwarding state [ 49.347972][ T5725] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 49.410307][ T5725] veth0_vlan: entered promiscuous mode [ 49.421743][ T5725] veth1_vlan: entered promiscuous mode [ 49.428071][ T5732] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 49.439601][ T5737] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 49.442492][ T5724] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 49.455879][ T5725] veth0_macvtap: entered promiscuous mode [ 49.463764][ T5725] veth1_macvtap: entered promiscuous mode [ 49.501001][ T5725] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 49.508253][ T5732] veth0_vlan: entered promiscuous mode [ 49.517871][ T5725] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 49.521630][ T5737] veth0_vlan: entered promiscuous mode [ 49.527830][ T5732] veth1_vlan: entered promiscuous mode [ 49.534639][ T5724] veth0_vlan: entered promiscuous mode [ 49.540480][ T5737] veth1_vlan: entered promiscuous mode [ 49.543203][ T5776] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 49.555376][ T5724] veth1_vlan: entered promiscuous mode [ 49.603560][ T13] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 49.603595][ T13] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 49.603619][ T13] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 49.607561][ T5732] veth0_macvtap: entered promiscuous mode [ 49.611610][ T55] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 49.611628][ T55] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 49.614489][ T5737] veth0_macvtap: entered promiscuous mode [ 49.618461][ T5732] veth1_macvtap: entered promiscuous mode [ 49.624980][ T5737] veth1_macvtap: entered promiscuous mode [ 49.644600][ T5724] veth0_macvtap: entered promiscuous mode [ 49.645636][ T55] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 49.645647][ T55] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 49.647611][ T5724] veth1_macvtap: entered promiscuous mode [ 49.652270][ T43] kauditd_printk_skb: 17 callbacks suppressed [ 49.652377][ T43] audit: type=1400 audit(1789665375.092:168): avc: denied { mount } for pid=5725 comm="syz-executor" name="/" dev="tmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 49.653330][ T43] audit: type=1400 audit(1789665375.102:169): avc: denied { mounton } for pid=5725 comm="syz-executor" path="/syzkaller.EPI2Ht/syz-tmp/newroot/dev" dev="tmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 49.654292][ T43] audit: type=1400 audit(1789665375.102:170): avc: denied { mount } for pid=5725 comm="syz-executor" name="/" dev="proc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 49.655466][ T5737] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 49.656264][ T43] audit: type=1400 audit(1789665375.102:171): avc: denied { mounton } for pid=5725 comm="syz-executor" path="/syzkaller.EPI2Ht/syz-tmp/newroot/sys/kernel/debug" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=dir permissive=1 [ 49.657305][ T43] audit: type=1400 audit(1789665375.102:172): avc: denied { mounton } for pid=5725 comm="syz-executor" path="/syzkaller.EPI2Ht/syz-tmp/newroot/proc/sys/fs/binfmt_misc" dev="proc" ino=10612 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysctl_fs_t tclass=dir permissive=1 [ 49.658761][ T5737] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 49.660322][ T43] audit: type=1400 audit(1789665375.102:173): avc: denied { unmount } for pid=5725 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 49.662789][ T43] audit: type=1400 audit(1789665375.102:174): avc: denied { mounton } for pid=5725 comm="syz-executor" path="/dev/gadgetfs" dev="devtmpfs" ino=2834 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:device_t tclass=dir permissive=1 [ 49.662826][ T43] audit: type=1400 audit(1789665375.102:175): avc: denied { mount } for pid=5725 comm="syz-executor" name="/" dev="gadgetfs" ino=10613 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfs_t tclass=filesystem permissive=1 [ 49.664874][ T5732] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 49.666268][ T43] audit: type=1400 audit(1789665375.112:176): avc: denied { mount } for pid=5725 comm="syz-executor" name="/" dev="binder" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 49.667143][ T43] audit: type=1400 audit(1789665375.112:177): avc: denied { mounton } for pid=5725 comm="syz-executor" path="/sys/fs/fuse/connections" dev="fusectl" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=dir permissive=1 [ 49.680545][ T5724] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 49.681514][ T5732] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 49.701261][ T5725] soft_limit_in_bytes is deprecated and will be removed. Writing any value to this file has no effect. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 49.713696][ T5724] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 49.722552][ T12] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 49.819532][ T1170] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 49.819549][ T1170] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 49.853520][ T5776] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 49.853594][ T5776] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 49.853706][ T5776] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 49.853873][ T5776] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 49.854139][ T5776] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 49.854299][ T5776] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 49.854443][ T5776] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 49.854707][ T5776] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 49.854827][ T5776] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 49.854995][ T5776] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 49.855213][ T5776] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 49.870817][ T1170] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 49.870830][ T1170] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 49.916638][ T1170] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 49.916651][ T1170] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 49.957377][ T1170] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 49.957392][ T1170] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 49.959882][ T73] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 49.959895][ T73] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 49.999049][ T73] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 49.999063][ T73] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 50.045379][ T5886] Oops: general protection fault, probably for non-canonical address 0xdffffc00000000dd: 0000 [#1] SMP KASAN NOPTI [ 50.050304][ T5886] KASAN: null-ptr-deref in range [0x00000000000006e8-0x00000000000006ef] [ 50.053886][ T5886] CPU: 2 UID: 0 PID: 5886 Comm: syz.3.4 Not tainted syzkaller #0 PREEMPT(full) [ 50.057630][ T5886] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 50.061862][ T5886] RIP: 0010:ucsi_acpi_probe+0x84/0x560 [ 50.064204][ T5886] Code: 84 db 74 09 e8 9d 13 08 fa 49 8d 6d f0 e8 94 13 08 fa 48 8d bd ec 06 00 00 48 b8 00 00 00 00 00 fc ff df 48 89 fa 48 c1 ea 03 <0f> b6 14 02 48 89 f8 83 e0 07 83 c0 03 38 d0 7c 08 84 d2 0f 85 ea [ 50.072185][ T5886] RSP: 0018:ffffc90004917b20 EFLAGS: 00010207 [ 50.074735][ T5886] RAX: dffffc0000000000 RBX: 0000000000000000 RCX: ffffc90007a31000 [ 50.077953][ T5886] RDX: 00000000000000dd RSI: ffffffff88040bbc RDI: 00000000000006ec [ 50.081296][ T5886] RBP: 0000000000000000 R08: 0000000000000001 R09: 0000000000000000 [ 50.084600][ T5886] R10: 0000000000000000 R11: 0000000000000001 R12: ffff88802446b000 [ 50.087881][ T5886] R13: 0000000000000000 R14: ffff88802446b430 R15: ffff88802446b070 [ 50.091214][ T5886] FS: 00007f40e1b106c0(0000) GS:ffff8880d5d59000(0000) knlGS:0000000000000000 [ 50.094642][ T5886] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 50.097427][ T5886] CR2: 000000110c3504cb CR3: 00000000599b7000 CR4: 0000000000352ef0 [ 50.100755][ T5886] Call Trace: [ 50.102190][ T5886] [ 50.103495][ T5886] ? __pfx_ucsi_acpi_probe+0x10/0x10 [ 50.105623][ T5886] platform_probe+0x106/0x1d0 [ 50.107629][ T5886] ? __pfx_platform_probe+0x10/0x10 [ 50.109845][ T5886] really_probe+0x241/0xa60 [ 50.111811][ T5886] __driver_probe_device+0x210/0x460 [ 50.114049][ T5886] device_driver_attach+0xd1/0x220 [ 50.116128][ T5886] bind_store+0xf4/0x190 [ 50.117929][ T5886] ? __pfx_bind_store+0x10/0x10 [ 50.120028][ T5886] drv_attr_store+0x74/0xb0 [ 50.121977][ T5886] ? __pfx_drv_attr_store+0x10/0x10 [ 50.124192][ T5886] sysfs_kf_write+0xf2/0x150 [ 50.126156][ T5886] kernfs_fop_write_iter+0x3e0/0x5f0 [ 50.128433][ T5886] ? __pfx_sysfs_kf_write+0x10/0x10 [ 50.130351][ T5886] vfs_write+0x6af/0x1050 [ 50.131753][ T5886] ? __pfx_kernfs_fop_write_iter+0x10/0x10 [ 50.133575][ T5886] ? __pfx_vfs_write+0x10/0x10 [ 50.135128][ T5886] ? find_held_lock+0x2b/0x80 [ 50.136652][ T5886] ksys_write+0x12a/0x250 [ 50.138044][ T5886] ? __pfx_ksys_write+0x10/0x10 [ 50.139627][ T5886] do_syscall_64+0x123/0x790 [ 50.141101][ T5886] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 50.142923][ T5886] RIP: 0033:0x7f40e0b9e159 [ 50.144328][ T5886] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 50.150187][ T5886] RSP: 002b:00007f40e1b10028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 50.152899][ T5886] RAX: ffffffffffffffda RBX: 00007f40e0e25fa0 RCX: 00007f40e0b9e159 [ 50.155458][ T5886] RDX: 0000000000000007 RSI: 0000200000000600 RDI: 0000000000000005 [ 50.158399][ T5886] RBP: 00007f40e0c3506b R08: 0000000000000000 R09: 0000000000000000 [ 50.161781][ T5886] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 50.164267][ T5886] R13: 00007f40e0e26038 R14: 00007f40e0e25fa0 R15: 00007ffea18cf3c8 [ 50.166803][ T5886] [ 50.168020][ T5886] Modules linked in: [ 50.170187][ T5886] ---[ end trace 0000000000000000 ]--- [ 50.174062][ T5886] RIP: 0010:ucsi_acpi_probe+0x84/0x560 [ 50.174093][ T5886] Code: 84 db 74 09 e8 9d 13 08 fa 49 8d 6d f0 e8 94 13 08 fa 48 8d bd ec 06 00 00 48 b8 00 00 00 00 00 fc ff df 48 89 fa 48 c1 ea 03 <0f> b6 14 02 48 89 f8 83 e0 07 83 c0 03 38 d0 7c 08 84 d2 0f 85 ea [ 50.174111][ T5886] RSP: 0018:ffffc90004917b20 EFLAGS: 00010207 [ 50.174127][ T5886] RAX: dffffc0000000000 RBX: 0000000000000000 RCX: ffffc90007a31000 [ 50.174140][ T5886] RDX: 00000000000000dd RSI: ffffffff88040bbc RDI: 00000000000006ec [ 50.174150][ T5886] RBP: 0000000000000000 R08: 0000000000000001 R09: 0000000000000000 [ 50.174160][ T5886] R10: 0000000000000000 R11: 0000000000000001 R12: ffff88802446b000 [ 50.174171][ T5886] R13: 0000000000000000 R14: ffff88802446b430 R15: ffff88802446b070 [ 50.174183][ T5886] FS: 00007f40e1b106c0(0000) GS:ffff8880d5d59000(0000) knlGS:0000000000000000 [ 50.174228][ T5886] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 50.174243][ T5886] CR2: 00007f40e0beb840 CR3: 00000000599b7000 CR4: 0000000000352ef0 [ 50.174279][ T5886] Kernel panic - not syncing: Fatal exception [ 50.207507][ T5886] Kernel Offset: disabled [ 50.209392][ T5886] Rebooting in 86400 seconds..