last executing test programs: 4.750781226s ago: executing program 3 (id=4): mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./config\x00', 0x1ff) mount(0x0, &(0x7f00000000c0)='./config\x00', &(0x7f0000000100)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./config/dlm/cluster\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000180)='./config/dlm/cluster/comms/1\x00', 0x1ff) r0 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./config/dlm/cluster/comms/1/local\x00', 0x2, 0x0) write(r0, &(0x7f0000000200)='1', 0x1) r1 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./config/dlm/cluster/comms/1/nodeid\x00', 0x2, 0x0) write(r1, &(0x7f0000000280)='1', 0x1) r2 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./config/dlm/cluster/comms/1/addr\x00', 0x1, 0x0) write(r2, &(0x7f0000000300)="0200"/128, 0x80) openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000380), 0x2, 0x0) r3 = openat$dlm_control(0xffffffffffffff9c, &(0x7f00000003c0), 0x2, 0x0) write(r3, &(0x7f0000000400)="060000000000000002000000040100000000000000000000666f6f00"/128, 0x80) (async) nanosleep(&(0x7f0000000000)={0x0, 0x5f5e100}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000480)='./sys\x00', 0x1ff) mount(0x0, &(0x7f00000004c0)='./sys\x00', &(0x7f0000000500)='sysfs\x00', 0x0, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000540)='./sys/kernel/dlm/foo/event_done\x00', 0x2, 0x0) write(r4, &(0x7f0000000580)='0', 0x1) r5 = openat(0xffffffffffffff9c, &(0x7f00000005c0)='./sys/kernel/dlm/foo/control\x00', 0x2, 0x0) write(r5, &(0x7f0000000600)='1', 0x1) nanosleep(&(0x7f0000000000)={0x0, 0x5f5e100}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000640)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000000680)='./dev\x00', &(0x7f00000006c0)='devtmpfs\x00', 0x0, 0x0) r6 = openat(0xffffffffffffff9c, &(0x7f0000000700)='./dev/dlm_foo\x00', 0x2, 0x0) write(r6, &(0x7f0000000740)="06000000000000000200000001010000030300008000000000000000000000000000000000000000000000000000000000000000000000007856341200000000000000000000000000000000000000007856341200000000000000000000000000000000000000000000000000000000000000000000000000000000666f6f", 0x7f) close(r6) r7 = openat(0xffffffffffffff9c, &(0x7f00000007c0)='./dev/dlm_foo\x00', 0x2, 0x0) write(r7, &(0x7f0000000800)="06000000000000000200000001010000030300000040000000000000000000000000000000000000000000000000000000000000000000007856341200000000000000000000000000000000000000007856341200000000000000000000000000000000000000000000000000000000000000000000000000000000666f6f", 0x7f) 3.842794699s ago: executing program 4 (id=5): r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000001200)={&(0x7f0000000340)={0x38, 0x1403, 0x1, 0x400, 0x25dfdbff, "", [{{0x9, 0x2, 'syz0\x00'}, {0x8, 0x41, 'rxe\x00'}, {0x14, 0x33, 'veth0\x00'}}]}, 0x38}, 0x1, 0x1000000, 0x0, 0x80c9}, 0x20000040) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000040)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000300)={0x0}, 0x2, 0x8}}, 0x20) write$RDMA_USER_CM_CMD_BIND(r1, &(0x7f0000000080)={0x14, 0x88, 0xfa00, {0x0, 0x10, 0x0, @in={0x2, 0x4e20, @local}}}, 0x90) write$RDMA_USER_CM_CMD_LISTEN(r1, &(0x7f0000000140)={0x7, 0x8, 0xfa00, {0x0, 0x10}}, 0x10) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000180)={0x0, 0x18, 0xfa00, {0x4, &(0x7f0000000310)={0x0}, 0x2, 0x8}}, 0x20) write$RDMA_USER_CM_CMD_BIND(r1, &(0x7f00000001c0)={0x14, 0x88, 0xfa00, {0x1, 0x10, 0x0, @in={0x2, 0x4e20, @local}}}, 0x90) nanosleep(&(0x7f0000000400)={0x0, 0x10000000}, 0x0) write$RDMA_USER_CM_CMD_RESOLVE_ROUTE(r1, &(0x7f0000000300)={0x4, 0x8, 0xfa00, {0x1, 0x3e8}}, 0x10) nanosleep(&(0x7f0000000400)={0x0, 0x10000000}, 0x0) write$RDMA_USER_CM_CMD_CONNECT(r1, &(0x7f0000000340)={0x6, 0x20, 0xfa00, {{0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x1}}, 0x28) nanosleep(&(0x7f0000000400)={0x0, 0x10000000}, 0x0) 3.700239447s ago: executing program 1 (id=6): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000000)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./sys/bus/firewire/devices\x00', 0x90000, 0x0) getdents64(r0, &(0x7f0000000100), 0x1000) 3.515045303s ago: executing program 1 (id=7): r0 = syz_usb_connect(0x3, 0x3f, &(0x7f0000000000)=ANY=[@ANYBLOB="12010002ffffff40da0b53810000010203010902270001010080fa0904000003ffffff00070581020002000705020200020007058303080008"], 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000200)={0x84, &(0x7f0000000100)={0xc0, 0x5, 0x4, "0300105c"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, &(0x7f0000000200)={0x84, &(0x7f0000000100)={0xc0, 0x5, 0x4, "0300105c"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, &(0x7f0000000200)={0x84, &(0x7f0000000100)={0xc0, 0x5, 0x4, "0300105c"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, &(0x7f0000000200)={0x84, &(0x7f0000000100)={0xc0, 0x5, 0x4, "0300105c"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, &(0x7f0000000200)={0x84, &(0x7f0000000100)={0xc0, 0x5, 0x4, "0300105c"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, &(0x7f0000000200)={0x84, &(0x7f0000000100)={0xc0, 0x5, 0x4, "0300105c"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) nanosleep(&(0x7f0000000300)={0x1}, 0x0) 3.514795437s ago: executing program 0 (id=1): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./dev\x00', &(0x7f0000000040)='devtmpfs\x00', 0x0, 0x0) r0 = syz_io_uring_setup(0xf00, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000000300)=0x0, &(0x7f0000000400)=0x0, &(0x7f0000000500)=0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./dev/cpu_dma_latency\x00', 0x0, 0x0) syz_io_uring_submit(r1, r2, r3, &(0x7f0000000600)=@IORING_OP_READ=@pass_buffer={0x16, 0x10, 0x0, @fd=r4, 0x0, &(0x7f0000000700)=""/4, 0x4, 0x0, 0x1, {0x0, 0x0, 0x0, '\x00', 0x0}}) syz_io_uring_submit(r1, r2, r3, &(0x7f0000000800)=@IORING_OP_CLOSE={0x13, 0x10, 0x0, r4, 0x0, 0x0, 0x0, 0x0, 0x2}) io_uring_enter(r0, 0x2, 0x2, 0x0, 0x0, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./dev/cpu_dma_latency\x00', 0x0, 0x0) syz_io_uring_submit(r1, r2, r3, &(0x7f0000000900)=@IORING_OP_READ=@pass_buffer={0x16, 0x10, 0x0, @fd=r5, 0x0, &(0x7f0000000a00)=""/4, 0x4, 0x0, 0x1, {0x0, 0x0, 0x0, '\x00', 0x0}}) syz_io_uring_submit(r1, r2, r3, &(0x7f0000000b00)=@IORING_OP_CLOSE={0x13, 0x10, 0x0, r5, 0x0, 0x0, 0x0, 0x0, 0x2}) io_uring_enter(r0, 0x2, 0x2, 0x0, 0x0, 0x0) r6 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./dev/cpu_dma_latency\x00', 0x0, 0x0) syz_io_uring_submit(r1, r2, r3, &(0x7f0000000e00)=@IORING_OP_CLOSE={0x13, 0x10, 0x0, r6, 0x0, 0x0, 0x0, 0x0, 0x2}) io_uring_enter(r0, 0x2, 0x2, 0x0, 0x0, 0x0) 3.331365886s ago: executing program 0 (id=9): r0 = syz_usb_connect(0x0, 0x3b, &(0x7f0000000040)=ANY=[@ANYBLOB="120100020000004032151d010001000000010902290001010080fa090400000203000000092111010001224e000705810340000107050203400001"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f00000001c0)={0x2c, &(0x7f0000000000)=ANY=[@ANYBLOB="00224e00000005010901a101850105091901290315002501950375018102950175058103c00600ff0901a101150026ff0075089540850f0901b102850c09018102850909019102850a09019102850b09018102c0"], 0x0, 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000100)='./sys\x00', &(0x7f0000000200)='sysfs\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./sys/bus/usb/devices/1-1/power/control\x00', 0x2, 0x0) write(r1, &(0x7f0000000700)='auto\x00', 0x4) nanosleep(&(0x7f0000000000)={0x0, 0x5f5e100}, 0x0) write(r1, &(0x7f0000000800)='on\x00', 0x2) nanosleep(&(0x7f0000000000)={0x0, 0x5f5e100}, 0x0) 3.122884215s ago: executing program 2 (id=11): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) listen(r0, 0x10) r1 = syz_io_uring_setup(0x10, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000000140)=0x0, &(0x7f0000000180)=0x0, &(0x7f00000001c0)=0x0) io_uring_register$IORING_REGISTER_FILES(r1, 0x2, &(0x7f0000000100)=[0xffffffff], 0x1) syz_io_uring_submit(r2, r3, r4, &(0x7f0000000340)=@IORING_OP_ACCEPT={0xd, 0x4, 0x0, r0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x1}}) syz_io_uring_submit(r2, r3, r4, &(0x7f0000000440)=@IORING_OP_WRITEV={0x2, 0x1, 0x0, @fd_index, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000200)="00000080fe534d42400001000000000000000100010000000000000000000000000000000000000000000000000000000000000000000000000000004100010011030000000000000000000000000000000000000000000000001000000010000000100000000000000000000000000000000000800000000000000000000048fe534d42400001000000000001000100010000000000000001000000000000000000000000000000010000000000000000000000000000000000000000000000090000004800000000000050fe534d42400001000000000002000100010000000000000002000000000000000000000001000000010000000000000000000000000000000000000000000000100001000000000008000000ff011f00", 0x124}], 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, '\x00', 0x0}}) io_uring_enter(r1, 0x2, 0x0, 0x0, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000300)='./cifs\x00', 0x1ed) mount(&(0x7f0000000800)=@filename='\\\\::1\\share\x00', &(0x7f0000000300)='./cifs\x00', &(0x7f0000000400)='cifs\x00', 0x0, &(0x7f0000000500)='ip=::1,port=20000,user=root,password=root,vers=3.1.1\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000000900)='./proc\x00', 0x1ed) mount(&(0x7f0000000a00)=@filename='proc\x00', &(0x7f0000000900)='./proc\x00', &(0x7f0000000a00)='proc\x00', 0x0, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000b00)='./proc/fs/cifs/Stats\x00', 0x0, 0x0) read(r5, &(0x7f0000000c00), 0x1000) 2.989200403s ago: executing program 2 (id=12): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./config\x00', &(0x7f0000000040)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x1ff) r0 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./config/nullb/nullb1/size\x00', 0x2, 0x0) write(r0, &(0x7f0000000340)='1024\x00', 0x4) write(0xffffffffffffffff, &(0x7f00000003c0)='64\x00', 0x2) r1 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./config/nullb/nullb1/zoned\x00', 0x2, 0x0) write(r1, &(0x7f0000000100)='1\x00', 0x1) r2 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./config/nullb/nullb1/power\x00', 0x2, 0x0) write(r2, &(0x7f0000000180)='1\x00', 0x1) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000000200)='./dev\x00', &(0x7f0000000240)='devtmpfs\x00', 0x0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./dev/mapper/control\x00', 0x2, 0x0) ioctl(r3, 0xc138fd03, &(0x7f0000001000)="0400000032000000000000003801000038010000000000000000000000000000000000000000000000000000000000006d795f7a6f6e65645f646d00") ioctl(r3, 0xc138fd09, &(0x7f0000002000)="0400000032000000000000006c01000038010000010000000000000000000000000000000000000000000000000000006d795f7a6f6e65645f646d0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000100000000000000000000000000000000000000000000007a6f6e656400000000000000000000002e2f6465762f6e756c6c623100") 2.872729636s ago: executing program 2 (id=13): r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)={0x38, 0x1403, 0x605, 0x0, 0x0, "", [{{0x9, 0x2, 'syz0\x00'}, {0x8, 0x41, 'rxe\x00'}, {0x14, 0x33, 'lo\x00'}}]}}}, 0x0) nanosleep(&(0x7f0000000d00)={0x0, 0x1dcd6500}, 0x0) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000300), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000400)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000500)={0x0}, 0x106, 0x2}}, 0x20) write$RDMA_USER_CM_CMD_BIND_IP(r1, &(0x7f0000000600)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x1234, 0x0, @loopback}, r2}}, 0x30) write$RDMA_USER_CM_CMD_LISTEN(r1, &(0x7f0000000700)={0x7, 0x8, 0xfa00, {r2, 0x10}}, 0x10) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000800)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000900)={0x0}, 0x106, 0x2}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r1, &(0x7f0000000a00)={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @loopback}, {0xa, 0x1234, 0x0, @loopback}, r3, 0x3e8}}, 0x48) write$RDMA_USER_CM_CMD_RESOLVE_ROUTE(r1, &(0x7f0000000b00)={0x4, 0x8, 0xfa00, {r3, 0x3e8}}, 0x10) write$RDMA_USER_CM_CMD_CONNECT(r1, &(0x7f0000000c00)={0x6, 0x118, 0xfa00, {{0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, r3}}, 0x120) 2.293393595s ago: executing program 2 (id=14): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./mnt\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./mnt\x00', &(0x7f0000000040)='tmpfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./mnt/file\x00', 0x42, 0x1ff) r1 = syz_io_uring_setup(0x10, &(0x7f0000000100), &(0x7f0000000200)=0x0, &(0x7f0000000208)=0x0, &(0x7f0000000210)=0x0) syz_io_uring_submit(r2, r3, r4, &(0x7f0000000300)=@IORING_OP_WRITEV={0x2, 0x10, 0x0, @fd=r0, 0x0, &(0x7f0000000400)=[{&(0x7f0000000500)='AAAA', 0x4}], 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, '\x00', 0x0}}) syz_io_uring_submit(r2, r3, r4, &(0x7f0000000380)=@IORING_OP_WRITEV={0x2, 0x10, 0x0, @fd=r0, 0x0, &(0x7f0000000400)=[{&(0x7f0000000500)='AAAA', 0x4}], 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, '\x00', 0x0}}) syz_io_uring_submit(r2, r3, r4, &(0x7f0000000600)=@IORING_OP_WRITEV={0x2, 0x10, 0x0, @fd=r0, 0x0, &(0x7f0000000400)=[{&(0x7f0000000500)='AAAA', 0x4}], 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, '\x00', 0x0}}) syz_io_uring_submit(r2, r3, r4, &(0x7f0000000680)=@IORING_OP_WRITEV={0x2, 0x10, 0x0, @fd=r0, 0x0, &(0x7f0000000400)=[{&(0x7f0000000500)='AAAA', 0x4}], 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, '\x00', 0x0}}) io_uring_enter(r1, 0x4, 0x0, 0x0, 0x0, 0x0) 2.211020333s ago: executing program 2 (id=15): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./nfs_share\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./nfs_share\x00', &(0x7f0000000040)='tmpfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000700)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000700)='./proc\x00', &(0x7f0000000740)='proc\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./proc/net/rpc/auth.unix.ip/channel\x00', 0x1, 0x0) write(r0, &(0x7f0000000100)='nfsd 127.0.0.1 2147483647 mydomain\n', 0x23) close(r0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/net/rpc/nfsd.export/channel\x00', 0x1, 0x0) write(r1, &(0x7f0000000180)='mydomain ./nfs_share 2147483647 8192 0 0 0\n', 0x2b) close(r1) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./nfsd\x00', 0x1ff) mount(0x0, &(0x7f0000000200)='./nfsd\x00', &(0x7f0000000240)='nfsd\x00', 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000800)='./nfsd/versions\x00', 0x1, 0x0) write(r2, &(0x7f0000000840)='-2 -3 +4\n', 0x9) close(r2) mkdirat(0xffffffffffffff9c, &(0x7f0000000900)='./rpc_pipefs\x00', 0x1ff) mount(0x0, &(0x7f0000000900)='./rpc_pipefs\x00', &(0x7f0000000940)='rpc_pipefs\x00', 0x0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./nfsd/portlist\x00', 0x1, 0x0) write(r3, &(0x7f00000002c0)='tcp 2049\n', 0x9) r4 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./nfsd/threads\x00', 0x1, 0x0) write(r4, &(0x7f0000000340)='1\n', 0x2) 935.664791ms ago: executing program 1 (id=16): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000040)='sysfs\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000080)='./sys/bus/platform/devices/efi-framebuffer.0/resource\x00', 0x0, 0x0) 889.08939ms ago: executing program 1 (id=17): mkdirat(0xffffff9c, &(0x7f0000000000)='./proc\x00', 0x1ed) mount(0x0, &(0x7f0000000000)='./proc\x00', &(0x7f0000000040)='proc\x00', 0x0, 0x0) r0 = openat(0xffffff9c, &(0x7f0000000080)='./proc/sys/net/ipv6/conf/all/force_mld_version\x00', 0x1, 0x0) write(r0, &(0x7f00000000c0)='2\n\x00', 0x2) r1 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_buf(r1, 0x29, 0x14, &(0x7f0000000140)="ff02000000000000000000000000000201000000", 0x14) nanosleep(&(0x7f0000000100)={0x0, 0x5f5e100}, 0x0) 807.479785ms ago: executing program 2 (id=18): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./nfsd\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./nfsd\x00', &(0x7f0000000040)='nfsd\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./nfsd/portlist\x00', 0x2, 0x0) write(r0, &(0x7f00000000c0)='tcp 2049\n\x00', 0x9) r1 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./nfsd/threads\x00', 0x2, 0x0) write(r1, &(0x7f0000000340)='1\n\x00', 0x2) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000200)='./proc\x00', &(0x7f0000000240)='proc\x00', 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./proc/net/rpc/nfsd.export/channel\x00', 0x2, 0x0) write(r2, &(0x7f0000000140)='* / 2147483647 0 0 0 0 fsloc 1 server1 / 1\n\x00', 0x2b) 699.098713ms ago: executing program 1 (id=19): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./dev\x00', &(0x7f0000000040)='devtmpfs\x00', 0x0, 0x0) r0 = syz_io_uring_setup(0xf00, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000000300)=0x0, &(0x7f0000000400)=0x0, &(0x7f0000000500)=0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./dev/cpu_dma_latency\x00', 0x0, 0x0) syz_io_uring_submit(r1, r2, r3, &(0x7f0000000600)=@IORING_OP_READ=@pass_buffer={0x16, 0x10, 0x0, @fd=r4, 0x0, &(0x7f0000000700)=""/4, 0x4, 0x0, 0x1, {0x0, 0x0, 0x0, '\x00', 0x0}}) syz_io_uring_submit(r1, r2, r3, &(0x7f0000000800)=@IORING_OP_CLOSE={0x13, 0x10, 0x0, r4, 0x0, 0x0, 0x0, 0x0, 0x2}) io_uring_enter(r0, 0x2, 0x2, 0x0, 0x0, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./dev/cpu_dma_latency\x00', 0x0, 0x0) syz_io_uring_submit(r1, r2, r3, &(0x7f0000000900)=@IORING_OP_READ=@pass_buffer={0x16, 0x10, 0x0, @fd=r5, 0x0, &(0x7f0000000a00)=""/4, 0x4, 0x0, 0x1, {0x0, 0x0, 0x0, '\x00', 0x0}}) syz_io_uring_submit(r1, r2, r3, &(0x7f0000000b00)=@IORING_OP_CLOSE={0x13, 0x10, 0x0, r5, 0x0, 0x0, 0x0, 0x0, 0x2}) io_uring_enter(r0, 0x2, 0x2, 0x0, 0x0, 0x0) syz_io_uring_submit(r1, r2, r3, &(0x7f0000000c00)=@IORING_OP_READ=@pass_buffer={0x16, 0x10, 0x0, @fd, 0x0, &(0x7f0000000d00)=""/4, 0x4, 0x0, 0x1, {0x0, 0x0, 0x0, '\x00', 0x0}}) syz_io_uring_submit(r1, r2, r3, &(0x7f0000000e00)=@IORING_OP_CLOSE={0x13, 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x2}) io_uring_enter(r0, 0x2, 0x2, 0x0, 0x0, 0x0) 679.287012ms ago: executing program 1 (id=20): r0 = syz_usb_connect(0x3, 0x39, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000200000040120a105d0000000000010902270001010080320904000003ffffff00070581034000010705020200020007058602000200"], 0x0) syz_usb_ep_write(r0, 0x81, 0x4, &(0x7f0000000500)="01000000") syz_usb_control_io(r0, 0x0, &(0x7f0000000100)={0x84, &(0x7f0000000200)={0x0, 0x0, 0x4, "ffffffff"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, &(0x7f0000000100)={0x84, &(0x7f0000000200)={0x0, 0x0, 0x4, "ffffffff"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, &(0x7f0000000100)={0x84, &(0x7f0000000200)={0x0, 0x0, 0x4, "ffffffff"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, &(0x7f0000000100)={0x84, &(0x7f0000000200)={0x0, 0x0, 0x4, "ffffffff"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, &(0x7f0000000100)={0x84, &(0x7f0000000200)={0x0, 0x0, 0x4, "ffffffff"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, &(0x7f0000000100)={0x84, &(0x7f0000000200)={0x0, 0x0, 0x4, "ffffffff"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, &(0x7f0000000100)={0x84, &(0x7f0000000200)={0x0, 0x0, 0x4, "ffffffff"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, &(0x7f0000000100)={0x84, &(0x7f0000000200)={0x0, 0x0, 0x4, "ffffffff"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, &(0x7f0000000100)={0x84, &(0x7f0000000200)={0x0, 0x0, 0x4, "ffffffff"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, &(0x7f0000000100)={0x84, &(0x7f0000000200)={0x0, 0x0, 0x4, "ffffffff"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) nanosleep(&(0x7f0000000300)={0x1}, 0x0) 202.208188ms ago: executing program 4 (id=21): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./proc\x00', &(0x7f0000000040)='proc\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./nfsd\x00', 0x1ff) mount(0x0, 0x0, 0x0, 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000500)='./nfsd/versions\x00', 0x1, 0x0) write(r0, 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./proc/net/rpc/auth.unix.ip/channel\x00', 0x1, 0x0) write(r1, &(0x7f0000000200), 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/net/rpc/nfsd.export/channel\x00', 0x1, 0x0) write(r2, &(0x7f0000000240)='* ./ 2147483647', 0xf) r3 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./proc/net/rpc/nfsd.fh/channel\x00', 0x1, 0x0) write(r3, &(0x7f0000000280)='* 1 \\x00000000 2147483647 ./\n', 0x1d) 162.00861ms ago: executing program 4 (id=22): r0 = socket$netlink(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000fc0)={&(0x7f00000004c0)={0x38, 0x1403, 0x1, 0x70bd2d, 0x0, "", [{{0x9, 0x2, 'syz0\x00'}, {0x8, 0x41, 'rxe\x00'}, {0x14, 0x33, 'lo\x00'}}]}, 0x38}, 0x1, 0x0, 0x0, 0x854}, 0x0) nanosleep(&(0x7f0000000100)={0x0, 0x5f5e100}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000040)='sysfs\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./sys/class/infiniband_srp/srp-syz0-1/add_target\x00', 0x2, 0x0) r2 = syz_io_uring_setup(0x4, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000000180)=0x0, &(0x7f0000000140)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r3, r4, r5, &(0x7f0000000040)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd=r1, 0x0, &(0x7f0000000280)=[{&(0x7f0000000240)='id_ext=0,ioc_guid=0,src=127.0.0.1,dest=127.0.0.1:3260\x00', 0x35}], 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, '\x00', 0x0}}) io_uring_enter(r2, 0x1, 0x0, 0x0, 0x0, 0x0) r6 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000), 0x802, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r6, &(0x7f0000000400)={0x0, 0x18, 0xfa00, {0x4, &(0x7f0000000440)={0x0}, 0x106, 0x2}}, 0x20) write$RDMA_USER_CM_CMD_BIND_IP(r6, &(0x7f0000000480)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0xcbc, 0x0, @empty}, r7}}, 0x30) write$RDMA_USER_CM_CMD_LISTEN(r6, &(0x7f0000000500)={0x7, 0x8, 0xfa00, {r7, 0x10}}, 0x10) write$RDMA_USER_CM_CMD_GET_EVENT(r6, &(0x7f0000000540)={0xc, 0x8, 0xfa00, {&(0x7f0000000580)}}, 0x10) write$RDMA_USER_CM_CMD_ACCEPT(r6, &(0x7f0000000600)={0x8, 0x120, 0xfa00, {0x0, {0x0, 0x0, "c00000000000000100000000000000000000010000000100", 0x34, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, r7}}, 0x128) 0s ago: executing program 4 (id=23): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ed) mount(0x0, &(0x7f0000000000)='./config\x00', &(0x7f0000000100)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./config/nvmet/subsystems/testnqn\x00', 0x1ed) r0 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./config/nvmet/subsystems/testnqn/attr_allow_any_host\x00', 0x2, 0x0) write(r0, &(0x7f0000000340)='1\x00', 0x1) mkdirat(0xffffffffffffff9c, &(0x7f00000003c0)='./config/nvmet/subsystems/testnqn/namespaces/1\x00', 0x1ed) r1 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./backing_file\x00', 0x42, 0x1ed) ftruncate(r1, 0x100000) close(r1) r2 = openat(0xffffffffffffff9c, 0x0, 0x2, 0x0) write(r2, &(0x7f0000000480)='./backing_file\x00', 0xe) r3 = openat(0xffffffffffffff9c, &(0x7f00000004c0)='./config/nvmet/subsystems/testnqn/namespaces/1/buffered_io\x00', 0x2, 0x0) write(r3, &(0x7f0000000500)='1\x00', 0x1) r4 = openat(0xffffffffffffff9c, &(0x7f0000000540)='./config/nvmet/subsystems/testnqn/namespaces/1/enable\x00', 0x2, 0x0) write(r4, &(0x7f0000000580)='1\x00', 0x1) mkdirat(0xffffffffffffff9c, &(0x7f0000000600)='./config/nvmet/ports/1\x00', 0x1ed) r5 = openat(0xffffffffffffff9c, &(0x7f0000000640)='./config/nvmet/ports/1/addr_trtype\x00', 0x2, 0x0) write(r5, &(0x7f0000000680)='loop\x00', 0x4) symlinkat(&(0x7f00000006c0)='./config/nvmet/subsystems/testnqn\x00', 0xffffffffffffff9c, &(0x7f0000000700)='./config/nvmet/ports/1/subsystems/testnqn\x00') r6 = openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000000740), 0x2, 0x0) write(r6, &(0x7f0000000780)='transport=loop,nqn=testnqn\x00', 0x1a) mkdirat(0xffffffffffffff9c, &(0x7f0000000840)='./sys\x00', 0x1ed) mount(0x0, &(0x7f0000000840)='./sys\x00', &(0x7f0000000880)='sysfs\x00', 0x0, 0x0) r7 = openat(0xffffffffffffff9c, &(0x7f00000008c0)='./sys/class/nvme/nvme0/nvme0n1/wwid\x00', 0x0, 0x0) read(r7, &(0x7f0000000900), 0x64) r8 = openat(0xffffffffffffff9c, &(0x7f0000000940)='./sys/class/nvme/nvme1/nvme1n1/wwid\x00', 0x0, 0x0) read(r8, &(0x7f0000000980), 0x64) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.1.120' (ED25519) to the list of known hosts. [ 60.532018][ T30] kauditd_printk_skb: 5 callbacks suppressed [ 60.532032][ T30] audit: type=1400 audit(1785854181.077:129): avc: denied { mounton } for pid=5593 comm="syz-executor" path="/syzcgroup/unified" dev="sda1" ino=2023 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1 [ 60.562154][ T30] audit: type=1400 audit(1785854181.107:130): avc: denied { mount } for pid=5593 comm="syz-executor" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 60.564992][ T5593] cgroup: Unknown subsys name 'net' [ 60.591012][ T30] audit: type=1400 audit(1785854181.137:131): avc: denied { unmount } for pid=5593 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 60.716285][ T5593] cgroup: Unknown subsys name 'cpuset' [ 60.724430][ T5593] cgroup: Unknown subsys name 'rlimit' [ 60.822639][ T30] audit: type=1400 audit(1785854181.367:132): avc: denied { setattr } for pid=5593 comm="syz-executor" name="raw-gadget" dev="devtmpfs" ino=816 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 60.857086][ T30] audit: type=1400 audit(1785854181.367:133): avc: denied { create } for pid=5593 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 60.878406][ T30] audit: type=1400 audit(1785854181.367:134): avc: denied { write } for pid=5593 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 60.899252][ T30] audit: type=1400 audit(1785854181.367:135): avc: denied { read } for pid=5593 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 60.925830][ T30] audit: type=1400 audit(1785854181.377:136): avc: denied { mounton } for pid=5593 comm="syz-executor" path="/proc/sys/fs/binfmt_misc" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=dir permissive=1 Setting up swapspace version 1, size = 127995904 bytes [ 60.955175][ T30] audit: type=1400 audit(1785854181.377:137): avc: denied { mount } for pid=5593 comm="syz-executor" name="/" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=filesystem permissive=1 [ 60.980964][ T5595] SELinux: Context root:object_r:swapfile_t is not valid (left unmapped). [ 60.990103][ T30] audit: type=1400 audit(1785854181.547:138): avc: denied { relabelto } for pid=5595 comm="mkswap" name="swap-file" dev="sda1" ino=2026 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 61.918492][ T5593] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 63.982422][ T5619] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 63.983418][ T5620] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 63.991124][ T5619] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 63.997597][ T5620] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 64.005071][ T5619] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 64.012936][ T5620] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 64.020672][ T5619] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 64.027079][ T5620] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 64.035567][ T5619] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 64.048593][ T5619] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 64.049302][ T5620] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 64.056720][ T5619] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 64.066991][ T5621] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 64.071748][ T5619] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 64.077637][ T5620] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 64.085514][ T5619] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 64.091421][ T5620] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 64.098943][ T5619] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 64.104341][ T5621] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 64.113093][ T5619] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 64.119870][ T5621] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 64.126674][ T5619] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 64.133716][ T5621] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 64.141119][ T5619] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 64.146906][ T5621] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 65.428252][ T5606] bridge0: port 1(bridge_slave_0) entered blocking state [ 65.435505][ T5606] bridge0: port 1(bridge_slave_0) entered disabled state [ 65.442703][ T5606] bridge_slave_0: entered allmulticast mode [ 65.449593][ T5606] bridge_slave_0: entered promiscuous mode [ 65.460920][ T5607] bridge0: port 1(bridge_slave_0) entered blocking state [ 65.468015][ T5607] bridge0: port 1(bridge_slave_0) entered disabled state [ 65.475342][ T5607] bridge_slave_0: entered allmulticast mode [ 65.481962][ T5607] bridge_slave_0: entered promiscuous mode [ 65.500185][ T5606] bridge0: port 2(bridge_slave_1) entered blocking state [ 65.507330][ T5606] bridge0: port 2(bridge_slave_1) entered disabled state [ 65.514684][ T5606] bridge_slave_1: entered allmulticast mode [ 65.521326][ T5606] bridge_slave_1: entered promiscuous mode [ 65.531904][ T5607] bridge0: port 2(bridge_slave_1) entered blocking state [ 65.539024][ T5607] bridge0: port 2(bridge_slave_1) entered disabled state [ 65.546181][ T5607] bridge_slave_1: entered allmulticast mode [ 65.552785][ T5607] bridge_slave_1: entered promiscuous mode [ 65.636840][ T5605] bridge0: port 1(bridge_slave_0) entered blocking state [ 65.643984][ T5605] bridge0: port 1(bridge_slave_0) entered disabled state [ 65.651169][ T5605] bridge_slave_0: entered allmulticast mode [ 65.658036][ T5605] bridge_slave_0: entered promiscuous mode [ 65.666998][ T5606] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 65.676254][ T5609] bridge0: port 1(bridge_slave_0) entered blocking state [ 65.683317][ T5609] bridge0: port 1(bridge_slave_0) entered disabled state [ 65.690925][ T5609] bridge_slave_0: entered allmulticast mode [ 65.697735][ T5609] bridge_slave_0: entered promiscuous mode [ 65.706719][ T5607] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 65.728688][ T5605] bridge0: port 2(bridge_slave_1) entered blocking state [ 65.736407][ T5605] bridge0: port 2(bridge_slave_1) entered disabled state [ 65.743503][ T5605] bridge_slave_1: entered allmulticast mode [ 65.750345][ T5605] bridge_slave_1: entered promiscuous mode [ 65.758172][ T5606] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 65.767355][ T5609] bridge0: port 2(bridge_slave_1) entered blocking state [ 65.774722][ T5609] bridge0: port 2(bridge_slave_1) entered disabled state [ 65.781800][ T5609] bridge_slave_1: entered allmulticast mode [ 65.788580][ T5609] bridge_slave_1: entered promiscuous mode [ 65.796536][ T5607] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 65.807122][ T1312] ieee802154 phy0 wpan0: encryption failed: -22 [ 65.815478][ T1312] ieee802154 phy1 wpan1: encryption failed: -22 [ 65.821972][ T5608] bridge0: port 1(bridge_slave_0) entered blocking state [ 65.829195][ T5608] bridge0: port 1(bridge_slave_0) entered disabled state [ 65.836480][ T5608] bridge_slave_0: entered allmulticast mode [ 65.843122][ T5608] bridge_slave_0: entered promiscuous mode [ 65.874712][ T5608] bridge0: port 2(bridge_slave_1) entered blocking state [ 65.881826][ T5608] bridge0: port 2(bridge_slave_1) entered disabled state [ 65.889226][ T5608] bridge_slave_1: entered allmulticast mode [ 65.895973][ T5608] bridge_slave_1: entered promiscuous mode [ 65.922345][ T5607] team0: Port device team_slave_0 added [ 65.936408][ T5605] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 65.947095][ T5606] team0: Port device team_slave_0 added [ 65.955128][ T5609] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 65.965612][ T5607] team0: Port device team_slave_1 added [ 65.979924][ T5605] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 65.990275][ T5606] team0: Port device team_slave_1 added [ 66.008608][ T5609] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 66.031775][ T5608] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 66.059851][ T5607] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 66.066887][ T5607] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 66.093033][ T5607] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 66.105915][ T5608] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 66.127456][ T5606] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 66.134578][ T5606] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 66.160839][ T5606] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 66.178445][ T5607] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 66.185414][ T5607] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 66.211913][ T5607] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 66.212024][ T5614] Bluetooth: hci4: command tx timeout [ 66.222477][ T5617] Bluetooth: hci1: command tx timeout [ 66.222693][ T5617] Bluetooth: hci2: command tx timeout [ 66.228547][ T5621] Bluetooth: hci0: command tx timeout [ 66.245125][ T5619] Bluetooth: hci3: command tx timeout [ 66.259388][ T5605] team0: Port device team_slave_0 added [ 66.265509][ T5606] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 66.272484][ T5606] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 66.299479][ T5606] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 66.311594][ T5609] team0: Port device team_slave_0 added [ 66.319106][ T5609] team0: Port device team_slave_1 added [ 66.332519][ T5608] team0: Port device team_slave_0 added [ 66.346097][ T5605] team0: Port device team_slave_1 added [ 66.365898][ T5608] team0: Port device team_slave_1 added [ 66.371929][ T5609] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 66.379024][ T5609] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 66.404937][ T5609] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 66.441028][ T5609] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 66.448356][ T5609] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 66.475165][ T5609] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 66.492671][ T5605] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 66.499642][ T5605] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 66.525528][ T5605] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 66.541104][ T5607] hsr_slave_0: entered promiscuous mode [ 66.547331][ T5607] hsr_slave_1: entered promiscuous mode [ 66.569185][ T5605] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 66.576173][ T5605] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 66.602560][ T5605] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 66.621642][ T5608] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 66.628733][ T5608] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 66.654646][ T5608] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 66.666448][ T5608] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 66.673374][ T5608] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 66.699252][ T5608] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 66.714763][ T5606] hsr_slave_0: entered promiscuous mode [ 66.720761][ T5606] hsr_slave_1: entered promiscuous mode [ 66.726776][ T5606] debugfs: 'hsr0' already exists in 'hsr' [ 66.732525][ T5606] Cannot create hsr debugfs directory [ 66.800181][ T5605] hsr_slave_0: entered promiscuous mode [ 66.806647][ T5605] hsr_slave_1: entered promiscuous mode [ 66.812832][ T5605] debugfs: 'hsr0' already exists in 'hsr' [ 66.818790][ T5605] Cannot create hsr debugfs directory [ 66.855195][ T5609] hsr_slave_0: entered promiscuous mode [ 66.861218][ T5609] hsr_slave_1: entered promiscuous mode [ 66.867405][ T5609] debugfs: 'hsr0' already exists in 'hsr' [ 66.873120][ T5609] Cannot create hsr debugfs directory [ 66.906338][ T5608] hsr_slave_0: entered promiscuous mode [ 66.912366][ T5608] hsr_slave_1: entered promiscuous mode [ 66.918539][ T5608] debugfs: 'hsr0' already exists in 'hsr' [ 66.924315][ T5608] Cannot create hsr debugfs directory [ 67.221572][ T5607] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 67.232759][ T5607] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 67.242069][ T5607] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 67.251577][ T5607] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 67.259514][ T5607] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 67.268031][ T5607] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 67.275825][ T5607] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 67.285738][ T5607] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 67.344784][ T5606] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 67.353628][ T5606] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 67.361959][ T5606] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 67.370903][ T5606] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 67.379577][ T5606] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 67.388115][ T5606] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 67.395910][ T5606] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 67.405308][ T5606] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 67.478447][ T5605] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 67.489118][ T5605] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 67.504756][ T5605] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 67.513330][ T5605] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 67.521358][ T5605] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 67.530535][ T5605] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 67.542426][ T5605] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 67.551073][ T5605] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 67.584981][ T5607] 8021q: adding VLAN 0 to HW filter on device bond0 [ 67.627536][ T5609] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 67.636663][ T5609] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 67.651493][ T5609] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 67.662498][ T5609] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 67.671101][ T5609] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 67.680084][ T5609] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 67.692907][ T5607] 8021q: adding VLAN 0 to HW filter on device team0 [ 67.701834][ T5609] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 67.711274][ T5609] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 67.740779][ T1011] bridge0: port 1(bridge_slave_0) entered blocking state [ 67.748398][ T1011] bridge0: port 1(bridge_slave_0) entered forwarding state [ 67.757984][ T1011] bridge0: port 2(bridge_slave_1) entered blocking state [ 67.765052][ T1011] bridge0: port 2(bridge_slave_1) entered forwarding state [ 67.827668][ T5608] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 67.837956][ T5608] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 67.856330][ T5606] 8021q: adding VLAN 0 to HW filter on device bond0 [ 67.863110][ T5608] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 67.872436][ T5608] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 67.880497][ T5608] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 67.889139][ T5608] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 67.902862][ T5607] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 67.915948][ T5608] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 67.925119][ T5608] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 67.980379][ T5606] 8021q: adding VLAN 0 to HW filter on device team0 [ 68.011249][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 68.018395][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 68.036740][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 68.043888][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 68.072820][ T5605] 8021q: adding VLAN 0 to HW filter on device bond0 [ 68.145163][ T5605] 8021q: adding VLAN 0 to HW filter on device team0 [ 68.175979][ T48] bridge0: port 1(bridge_slave_0) entered blocking state [ 68.183110][ T48] bridge0: port 1(bridge_slave_0) entered forwarding state [ 68.195145][ T5609] 8021q: adding VLAN 0 to HW filter on device bond0 [ 68.223604][ T5609] 8021q: adding VLAN 0 to HW filter on device team0 [ 68.239824][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 68.246969][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 68.279325][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 68.286470][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 68.295109][ T5621] Bluetooth: hci4: command tx timeout [ 68.295784][ T5619] Bluetooth: hci2: command tx timeout [ 68.300520][ T5614] Bluetooth: hci0: command tx timeout [ 68.305897][ T5619] Bluetooth: hci3: command tx timeout [ 68.305925][ T5619] Bluetooth: hci1: command tx timeout [ 68.338760][ T57] bridge0: port 2(bridge_slave_1) entered blocking state [ 68.345893][ T57] bridge0: port 2(bridge_slave_1) entered forwarding state [ 68.436496][ T5608] 8021q: adding VLAN 0 to HW filter on device bond0 [ 68.487993][ T5607] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 68.520199][ T5608] 8021q: adding VLAN 0 to HW filter on device team0 [ 68.561879][ T81] bridge0: port 1(bridge_slave_0) entered blocking state [ 68.569047][ T81] bridge0: port 1(bridge_slave_0) entered forwarding state [ 68.601611][ T81] bridge0: port 2(bridge_slave_1) entered blocking state [ 68.608786][ T81] bridge0: port 2(bridge_slave_1) entered forwarding state [ 68.752966][ T5607] veth0_vlan: entered promiscuous mode [ 68.795611][ T5607] veth1_vlan: entered promiscuous mode [ 68.913574][ T5606] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 68.939172][ T5607] veth0_macvtap: entered promiscuous mode [ 68.958853][ T5607] veth1_macvtap: entered promiscuous mode [ 69.031341][ T5607] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 69.072860][ T5607] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 69.102638][ T5605] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 69.154887][ T57] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 69.196806][ T5606] veth0_vlan: entered promiscuous mode [ 69.256283][ T36] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 69.285078][ T5606] veth1_vlan: entered promiscuous mode [ 69.324258][ T57] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 69.411797][ T1011] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 69.414045][ T81] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 69.440050][ T1011] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 69.479732][ T5609] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 69.523434][ T5606] veth0_macvtap: entered promiscuous mode [ 69.548246][ T1011] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 69.562460][ T1011] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 69.571070][ T5606] veth1_macvtap: entered promiscuous mode [ 69.588847][ T30] kauditd_printk_skb: 14 callbacks suppressed [ 69.588861][ T30] audit: type=1400 audit(1785854190.137:153): avc: denied { mounton } for pid=5607 comm="syz-executor" path="/root/syzkaller.I2g4Zd/syz-tmp" dev="sda1" ino=2042 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_home_t tclass=dir permissive=1 [ 69.590472][ T5608] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 69.604221][ T30] audit: type=1400 audit(1785854190.147:154): avc: denied { mount } for pid=5607 comm="syz-executor" name="/" dev="tmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 69.649212][ T30] audit: type=1400 audit(1785854190.147:155): avc: denied { mounton } for pid=5607 comm="syz-executor" path="/root/syzkaller.I2g4Zd/syz-tmp/newroot/dev" dev="tmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 69.675604][ T30] audit: type=1400 audit(1785854190.147:156): avc: denied { mount } for pid=5607 comm="syz-executor" name="/" dev="proc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 69.698243][ T30] audit: type=1400 audit(1785854190.147:157): avc: denied { mounton } for pid=5607 comm="syz-executor" path="/root/syzkaller.I2g4Zd/syz-tmp/newroot/sys/kernel/debug" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=dir permissive=1 [ 69.701696][ T5606] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 69.726571][ T30] audit: type=1400 audit(1785854190.147:158): avc: denied { mounton } for pid=5607 comm="syz-executor" path="/root/syzkaller.I2g4Zd/syz-tmp/newroot/proc/sys/fs/binfmt_misc" dev="proc" ino=7634 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysctl_fs_t tclass=dir permissive=1 [ 69.760730][ T30] audit: type=1400 audit(1785854190.177:159): avc: denied { unmount } for pid=5607 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 69.781412][ T30] audit: type=1400 audit(1785854190.197:160): avc: denied { mounton } for pid=5607 comm="syz-executor" path="/dev/gadgetfs" dev="devtmpfs" ino=2784 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:device_t tclass=dir permissive=1 [ 69.783173][ T5605] veth0_vlan: entered promiscuous mode [ 69.819547][ T5607] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 69.836156][ T30] audit: type=1400 audit(1785854190.197:161): avc: denied { mount } for pid=5607 comm="syz-executor" name="/" dev="gadgetfs" ino=6867 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfs_t tclass=filesystem permissive=1 [ 69.846591][ T5606] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 69.862686][ T30] audit: type=1400 audit(1785854190.197:162): avc: denied { mount } for pid=5607 comm="syz-executor" name="/" dev="binder" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 69.918864][ T5608] veth0_vlan: entered promiscuous mode [ 69.929978][ T5605] veth1_vlan: entered promiscuous mode [ 69.942074][ T5609] veth0_vlan: entered promiscuous mode [ 69.980731][ T5608] veth1_vlan: entered promiscuous mode [ 70.006662][ T5609] veth1_vlan: entered promiscuous mode [ 70.021584][ T5802] dlm: Using TCP for communications [ 70.023860][ T81] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 70.037093][ T5802] dlm: foo: joining the lockspace group... [ 70.076553][ T57] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 70.092977][ T57] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 70.105600][ T13] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 70.137717][ T5605] veth0_macvtap: entered promiscuous mode [ 70.147368][ T5605] veth1_macvtap: entered promiscuous mode [ 70.160766][ T57] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 70.161024][ T5609] veth0_macvtap: entered promiscuous mode [ 70.171825][ T57] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 70.182508][ T5608] veth0_macvtap: entered promiscuous mode [ 70.196116][ T36] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 70.208626][ T5609] veth1_macvtap: entered promiscuous mode [ 70.216745][ T5608] veth1_macvtap: entered promiscuous mode [ 70.224432][ T13] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 70.262842][ T5605] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 70.273467][ T5609] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 70.293809][ T5608] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 70.304919][ T5605] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 70.317485][ T5609] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 70.349445][ T5608] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 70.365159][ T5614] Bluetooth: hci0: command tx timeout [ 70.370793][ T5621] Bluetooth: hci4: command tx timeout [ 70.370947][ T5619] Bluetooth: hci3: command tx timeout [ 70.376555][ T5621] Bluetooth: hci2: command tx timeout [ 70.385299][ T5617] Bluetooth: hci1: command tx timeout [ 70.393995][ T48] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 70.529607][ T5809] svc: failed to register lockdv1 RPC service (errno 111). [ 70.544308][ T5809] lockd_up: makesock failed, error=-111 [ 70.594799][ T81] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 70.607073][ T81] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 70.640254][ T1011] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 70.654527][ T1011] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 70.676527][ T1011] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 70.690576][ T1011] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 70.728837][ T1011] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 70.737545][ T81] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 70.743671][ T1011] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 70.780347][ T5809] svc: failed to register nfsdv3 RPC service (errno 111). [ 70.789241][ T5809] svc: failed to register nfsaclv3 RPC service (errno 111). [ 70.801360][ T5809] failed to unregister tcp with rpcbind [ 70.807637][ T57] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 70.811342][ T5801] dlm: dlm user daemon left 1 lockspaces [ 70.834594][ T57] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 70.848547][ T5809] svc: failed to register nfsdv3 RPC service (errno 97). [ 70.858229][ T5809] svc: failed to register nfsaclv3 RPC service (errno 97). [ 70.866583][ T5809] failed to unregister tcp with rpcbind [ 70.877742][ T81] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 70.922527][ T1011] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 70.931203][ T81] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 70.942487][ T1011] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 70.994196][ T48] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 71.043733][ T81] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 71.074432][ T81] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 71.104392][ T81] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 71.130464][ T81] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 71.167930][ T1011] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 71.191097][ T1011] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 71.210324][ T1011] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 71.290468][ T5827] CIFS: Attempting to mount //127.0.0.1/share [ 71.321212][ T5832] CIFS: VFS: \\127.0.0.1 SMB response too short (0 bytes) [ 71.351920][ T5827] CIFS: VFS: \\127.0.0.1 failed to create a new SMB session with Unknown: -11 [ 71.368100][ T5827] CIFS: VFS: cifs_mount failed w/return code = -11 [ 71.443446][ T5814] infiniband syz0: set active [ 71.448713][ T5814] infiniband syz0: added veth0 [ 71.474282][ T5713] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 71.491535][ T5814] smbdirect: ib_dev[syz0]: added: IB_CA max_fast_reg_page_list_len=512 device_cap_flags=0x1c001223c76 kernel_cap_flags=0x14 page_size_cap=0xfffff000 [ 71.525357][ T5814] smbdirect: ib_dev[syz0]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=32 max_cqe=32767 max_qp_wr=1048576 max_send_sge=32 max_recv_sge=32 [ 71.552586][ T5814] smbdirect: ib_dev[syz0]PORT[1]: iwarp=0 ib=0 roce=1 v1=0 v2=1 core_cap_flags=0x803005 [ 71.560125][ T5840] CIFS: Attempting to mount //::1/share [ 71.581942][ T5840] CIFS: VFS: Error connecting to socket. Aborting operation. [ 71.588496][ T5814] RDS/IB: syz0: added [ 71.593884][ T5840] CIFS: VFS: cifs_mount failed w/return code = -4 [ 71.594024][ T5814] smc: adding ib device syz0 with port count 1 [ 71.606754][ T5814] smc: ib device syz0 port 1 has no pnetid [ 71.661021][ T5713] usb 2-1: New USB device found, idVendor=0bda, idProduct=8153, bcdDevice= 0.00 [ 71.674919][ T24] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 71.680634][ T5713] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 71.690933][ T5713] usb 2-1: Product: syz [ 71.695258][ T5713] usb 2-1: Manufacturer: syz [ 71.700611][ T5713] usb 2-1: SerialNumber: syz [ 71.741166][ T5713] r8152-cfgselector 2-1: Unknown version 0x0000 [ 71.767677][ T5843] device-mapper: table: 248:0: zero-length target [ 71.777305][ T5843] device-mapper: ioctl: error adding target to table [ 71.841218][ T24] usb 1-1: New USB device found, idVendor=1532, idProduct=011d, bcdDevice= 1.00 [ 71.842108][ T5846] Zero length message leads to an empty skb [ 71.860980][ T24] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 72.084517][ T5713] r8152-cfgselector 2-1: reset high-speed USB device number 2 using dummy_hcd [ 72.295019][ T5713] r8152-cfgselector 2-1: device descriptor read/64, error -32 [ 72.445819][ T5617] Bluetooth: hci2: command tx timeout [ 72.445929][ T5621] Bluetooth: hci0: command tx timeout [ 72.451251][ T5617] Bluetooth: hci1: command tx timeout [ 72.456691][ T5614] Bluetooth: hci3: command tx timeout [ 72.462036][ T5619] Bluetooth: hci4: command tx timeout [ 72.543831][ T5713] r8152-cfgselector 2-1: reset high-speed USB device number 2 using dummy_hcd [ 73.604431][ T5853] NFSD: Unable to initialize client recovery tracking! (-110) [ 73.611915][ T5853] NFSD: Is nfsdcld running? If not, enable CONFIG_NFSD_LEGACY_CLIENT_TRACKING. [ 73.620961][ T5853] NFSD: starting 90-second grace period (net f00005ce) [ 74.011817][ T5713] r8152 2-1:1.0: USB reset failed, errno=-19 [ 74.046680][ T5713] r8152-cfgselector 2-1: USB disconnect, device number 2 [ 74.403777][ T5713] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 74.543055][ T5876] rdma_rxe: rxe_newlink: failed to add lo [ 74.577038][ T5713] usb 2-1: New USB device found, idVendor=0a12, idProduct=5d10, bcdDevice= 0.00 [ 74.587216][ T5713] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 74.715237][ T5713] ushc 2-1:1.0: probe with driver ushc failed with error -110 [ 74.725752][ T30] kauditd_printk_skb: 68 callbacks suppressed [ 74.725766][ T30] audit: type=1400 audit(1785854195.277:231): avc: denied { write } for pid=5878 comm="syz.4.23" name="subsystems" dev="configfs" ino=265 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 74.741553][ T5879] nvmet: adding nsid 1 to subsystem testnqn [ 74.754940][ T30] audit: type=1800 audit(1785854195.277:232): pid=5879 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.4.23" name="attr_allow_any_host" dev="configfs" ino=9230 res=0 errno=0 [ 74.787849][ T30] audit: type=1400 audit(1785854195.277:233): avc: denied { write } for pid=5878 comm="syz.4.23" name="namespaces" dev="configfs" ino=9228 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 74.815109][ T30] audit: type=1800 audit(1785854195.367:234): pid=5879 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.4.23" name="buffered_io" dev="configfs" ino=8739 res=0 errno=0 [ 74.838096][ T30] audit: type=1800 audit(1785854195.387:235): pid=5879 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.4.23" name="enable" dev="configfs" ino=8740 res=0 errno=0 [ 74.838514][ T5879] Oops: general protection fault, probably for non-canonical address 0xdffffc0000000000: 0000 [#1] SMP KASAN NOPTI [ 74.871061][ T5879] KASAN: null-ptr-deref in range [0x0000000000000000-0x0000000000000007] [ 74.879476][ T5879] CPU: 1 UID: 0 PID: 5879 Comm: syz.4.23 Not tainted syzkaller #0 PREEMPT(full) [ 74.888562][ T5879] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 74.898608][ T5879] RIP: 0010:strlen+0x1e/0xa0 [ 74.903186][ T5879] Code: 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 48 b8 00 00 00 00 00 fc ff df 55 48 89 fa 48 89 fd 53 48 c1 ea 03 48 83 ec 08 <0f> b6 04 02 48 89 fa 83 e2 07 38 d0 7f 04 84 c0 75 50 80 7d 00 00 [ 74.915565][ T30] audit: type=1400 audit(1785854195.457:236): avc: denied { write } for pid=5878 comm="syz.4.23" name="ports" dev="configfs" ino=266 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 74.922768][ T5879] RSP: 0018:ffffc90004017b40 EFLAGS: 00010282 [ 74.922787][ T5879] RAX: dffffc0000000000 RBX: 0000000000000000 RCX: ffffc9000683a000 [ 74.946795][ T30] audit: type=1800 audit(1785854195.457:237): pid=5880 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.4.23" name="addr_trtype" dev="configfs" ino=9237 res=0 errno=0 [ 74.950836][ T5879] RDX: 0000000000000000 RSI: ffffffff8292011e RDI: 0000000000000000 [ 74.950850][ T5879] RBP: 0000000000000000 R08: 0000000000000001 R09: 0000000000000000 [ 74.959257][ T30] audit: type=1400 audit(1785854195.457:238): avc: denied { write } for pid=5878 comm="syz.4.23" name="subsystems" dev="configfs" ino=9233 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 74.980123][ T5879] R10: 0000000000000001 R11: 0000000000000000 R12: 0000000000000000 [ 74.980140][ T5879] R13: 0000000000000000 R14: ffff8880265c9a10 R15: ffff88807d583000 [ 74.980150][ T5879] FS: 00007fc5275ed6c0(0000) GS:ffff888123ed8000(0000) knlGS:0000000000000000 [ 74.980166][ T5879] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 74.980179][ T5879] CR2: 0000000000000000 CR3: 000000007d680000 CR4: 00000000003526f0 [ 75.057860][ T5879] Call Trace: [ 75.061119][ T5879] [ 75.064031][ T5879] do_getname_kernel+0x26/0x250 [ 75.068867][ T5879] filp_open+0x1d/0x50 [ 75.072918][ T5879] nvmet_file_ns_enable+0x95/0x420 [ 75.078012][ T5879] nvmet_ns_enable+0x35f/0x5d0 [ 75.082766][ T5879] nvmet_ns_enable_store+0x11e/0x160 [ 75.088058][ T5879] ? __pfx_nvmet_ns_enable_store+0x10/0x10 [ 75.093870][ T5879] configfs_write_iter+0x302/0x4e0 [ 75.098976][ T5879] vfs_write+0x6ac/0x1050 [ 75.103291][ T5879] ? __pfx_configfs_write_iter+0x10/0x10 [ 75.108903][ T5879] ? __pfx_vfs_write+0x10/0x10 [ 75.113659][ T5879] ksys_write+0x12a/0x250 [ 75.117966][ T5879] ? __pfx_ksys_write+0x10/0x10 [ 75.122810][ T5879] do_syscall_64+0x115/0x870 [ 75.127383][ T5879] ? clear_bhb_loop+0x40/0x90 [ 75.132039][ T5879] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 75.137912][ T5879] RIP: 0033:0x7fc52679e019 [ 75.142305][ T5879] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 75.161887][ T5879] RSP: 002b:00007fc5275ed028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 75.170276][ T5879] RAX: ffffffffffffffda RBX: 00007fc526a25fa0 RCX: 00007fc52679e019 [ 75.178224][ T5879] RDX: 0000000000000001 RSI: 0000200000000580 RDI: 0000000000000005 [ 75.186173][ T5879] RBP: 00007fc52683500c R08: 0000000000000000 R09: 0000000000000000 [ 75.194120][ T5879] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 75.202083][ T5879] R13: 00007fc526a26038 R14: 00007fc526a25fa0 R15: 00007ffccc93af08 [ 75.210037][ T5879] [ 75.213033][ T5879] Modules linked in: [ 75.218096][ T5879] ---[ end trace 0000000000000000 ]--- [ 75.228223][ T30] audit: type=1400 audit(1785854195.457:239): avc: denied { create } for pid=5878 comm="syz.4.23" name="testnqn" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:configfs_t tclass=lnk_file permissive=1 [ 75.242489][ T5879] RIP: 0010:strlen+0x1e/0xa0 [ 75.253551][ T30] audit: type=1400 audit(1785854195.457:240): avc: denied { write } for pid=5878 comm="syz.4.23" name="subsystems" dev="configfs" ino=9233 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 75.276808][ T5879] Code: 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 48 b8 00 00 00 00 00 fc ff df 55 48 89 fa 48 89 fd 53 48 c1 ea 03 48 83 ec 08 <0f> b6 04 02 48 89 fa 83 e2 07 38 d0 7f 04 84 c0 75 50 80 7d 00 00 [ 75.280517][ T57] nvmet: connect request for invalid subsystem testnqn! [ 75.296752][ T5879] RSP: 0018:ffffc90004017b40 EFLAGS: 00010282 [ 75.310267][ T5882] nvme nvme0: Connect Invalid Data Parameter, subsysnqn "testnqn" [ 75.311239][ T5879] RAX: dffffc0000000000 RBX: 0000000000000000 RCX: ffffc9000683a000 [ 75.327386][ T5879] RDX: 0000000000000000 RSI: ffffffff8292011e RDI: 0000000000000000 [ 75.335896][ T5879] RBP: 0000000000000000 R08: 0000000000000001 R09: 0000000000000000 [ 75.343912][ T5879] R10: 0000000000000001 R11: 0000000000000000 R12: 0000000000000000 [ 75.351920][ T5879] R13: 0000000000000000 R14: ffff8880265c9a10 R15: ffff88807d583000 [ 75.359985][ T5879] FS: 00007fc5275ed6c0(0000) GS:ffff888123ed8000(0000) knlGS:0000000000000000 [ 75.368994][ T5865] NFSD: Unable to initialize client recovery tracking! (-110) [ 75.369010][ T5865] NFSD: Is nfsdcld running? If not, enable CONFIG_NFSD_LEGACY_CLIENT_TRACKING. [ 75.369019][ T5865] NFSD: starting 90-second grace period (net f00005ce) [ 75.392616][ T5879] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 75.399285][ T5879] CR2: 00007fc527589ff8 CR3: 000000007d680000 CR4: 00000000003526f0 [ 75.408369][ T5879] Kernel panic - not syncing: Fatal exception [ 75.414702][ T5879] Kernel Offset: disabled [ 75.419001][ T5879] Rebooting in 86400 seconds..