last executing test programs: 4.199703582s ago: executing program 0 (id=1): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00', 0x1001}) r1 = socket$inet(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8916, &(0x7f0000000100)={'syzkaller1\x00', {0x2, 0x0, @private=0xa010101}}) close(r0) 4.033405783s ago: executing program 1 (id=2): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./dev\x00', &(0x7f00000000c0)='devtmpfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./dev/mapper/control\x00', 0x2, 0x0) ioctl(r0, 0xc138fd03, &(0x7f0000000000)="0400000000000000000000003801000000000000000000000000000000000000000000000000000000000000000000006d79706f") write(r0, &(0x7f0000000138)='\x00\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00cache\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x001:0 1:1 1:2 64 0 default 0\x00', 0x42) ioctl(r0, 0xc138fd09, &(0x7f0000000000)="0400000000000000000000007a01000038010000010000000000000000000000000000000000000000000000000000006d79706f") 3.830098694s ago: executing program 1 (id=5): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./trace\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./trace\x00', &(0x7f0000000040)='tracefs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./trace/events/irq/irq_handler_entry/filter\x00', 0x2, 0x0) write(r0, &(0x7f0000000100)='name ~ \"*\"\x00', 0xb) r1 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./trace/events/irq/irq_handler_entry/enable\x00', 0x2, 0x0) write(r1, &(0x7f0000000180)='1\x00', 0x1) r2 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./trace/events/sched/sched_switch/filter\x00', 0x2, 0x0) write(r2, &(0x7f0000000240)='prev_comm ~ \"*\"\x00', 0x10) r3 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./trace/events/sched/sched_switch/enable\x00', 0x2, 0x0) write(r3, &(0x7f0000000300)='1\x00', 0x1) nanosleep(&(0x7f0000000340)={0x0, 0x5000000}, 0x0) 3.680312955s ago: executing program 1 (id=9): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x7, 0x0, 0x0, {0x2}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}], {0x14}}, 0x48}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={{0x14}, [@NFT_MSG_NEWSET={0x58, 0x9, 0xa, 0x401, 0x0, 0x0, {0x2}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x10}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x4}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0x1}, @NFTA_SET_TIMEOUT={0xc, 0xb, 0x1, 0x0, 0x64}, @NFTA_SET_GC_INTERVAL={0x8, 0xc, 0x1, 0x0, 0xa}]}], {0x14}}, 0x80}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)={{0x14}, [@NFT_MSG_NEWSETELEM={0x58, 0xc, 0xa, 0x101, 0x0, 0x0, {0x2}, [@NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x2c, 0x3, 0x0, 0x1, [{0x28, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0xc, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x8, 0x1, "01020304"}]}, @NFTA_SET_ELEM_TIMEOUT={0xc, 0x4, 0x1, 0x0, 0x64}, @NFTA_SET_ELEM_EXPIRATION={0xc, 0x5, 0x1, 0x0, 0x1}]}]}]}], {0x14}}, 0x80}}, 0x0) nanosleep(&(0x7f0000000300)={0x0, 0x5f5e100}, 0x0) nanosleep(&(0x7f0000000300)={0x0, 0x5f5e100}, 0x0) nanosleep(&(0x7f0000000300)={0x0, 0x5f5e100}, 0x0) nanosleep(&(0x7f0000000300)={0x0, 0x5f5e100}, 0x0) close(r0) 3.652407842s ago: executing program 2 (id=10): r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x42, 0x1b6) ftruncate(r0, 0x100000) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./sys\x00', &(0x7f00000000c0)='sysfs\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./sys/class/fcloop/ctl/add_local_port\x00', 0x1, 0x0) write(r1, &(0x7f0000000140)='wwnn=0x1111111111111111,wwpn=0x2222222222222222\x00', 0x2f) r2 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./sys/class/fcloop/ctl/add_target_port\x00', 0x1, 0x0) write(r2, &(0x7f00000001c0)='wwnn=0x3333333333333333,wwpn=0x4444444444444444\x00', 0x2f) r3 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./sys/class/fcloop/ctl/add_remote_port\x00', 0x1, 0x0) write(r3, &(0x7f0000000240)='wwnn=0x3333333333333333,wwpn=0x4444444444444444,roles=32,lpwwnn=0x1111111111111111,lpwwpn=0x2222222222222222\x00', 0x6c) mkdirat(0xffffffffffffff9c, &(0x7f0000000300)='./config\x00', 0x1ff) mount(0x0, &(0x7f0000000340)='./config\x00', &(0x7f0000000380)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000003c0)='./config/nvmet/subsystems/testsubsys\x00', 0x1ff) r4 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./config/nvmet/subsystems/testsubsys/attr_allow_any_host\x00', 0x1, 0x0) write(r4, &(0x7f0000000440)='1\n', 0x2) mkdirat(0xffffffffffffff9c, &(0x7f0000000480)='./config/nvmet/subsystems/testsubsys/namespaces/1\x00', 0x1ff) r5 = openat(0xffffffffffffff9c, &(0x7f00000004c0)='./config/nvmet/subsystems/testsubsys/namespaces/1/buffered_io\x00', 0x1, 0x0) write(r5, &(0x7f0000000500)='1\n', 0x2) r6 = openat(0xffffffffffffff9c, &(0x7f0000000540)='./config/nvmet/subsystems/testsubsys/namespaces/1/device_path\x00', 0x1, 0x0) write(r6, &(0x7f0000000580)='./file0\n', 0x8) r7 = openat(0xffffffffffffff9c, &(0x7f00000005c0)='./config/nvmet/subsystems/testsubsys/namespaces/1/enable\x00', 0x1, 0x0) write(r7, &(0x7f0000000600)='1\n', 0x2) mkdirat(0xffffffffffffff9c, &(0x7f0000000640)='./config/nvmet/ports/1\x00', 0x1ff) r8 = openat(0xffffffffffffff9c, &(0x7f0000000680)='./config/nvmet/ports/1/addr_trtype\x00', 0x1, 0x0) write(r8, &(0x7f00000006c0)='fc\n', 0x3) r9 = openat(0xffffffffffffff9c, &(0x7f0000000700)='./config/nvmet/ports/1/addr_adrfam\x00', 0x1, 0x0) write(r9, &(0x7f0000000740)='fc\n', 0x3) r10 = openat(0xffffffffffffff9c, &(0x7f0000000780)='./config/nvmet/ports/1/addr_traddr\x00', 0x1, 0x0) write(r10, &(0x7f00000007c0)='nn-0x3333333333333333:pn-0x4444444444444444\n', 0x2c) symlinkat(&(0x7f0000000800)='./config/nvmet/subsystems/testsubsys\x00', 0xffffffffffffff9c, &(0x7f0000000840)='./config/nvmet/ports/1/subsystems/testsubsys\x00') r11 = openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000000880), 0x2, 0x0) write(r11, &(0x7f00000008c0)='transport=fc,traddr=nn-0x3333333333333333:pn-0x4444444444444444,host_traddr=nn-0x1111111111111111:pn-0x2222222222222222,nqn=testsubsys\x00', 0x86) nanosleep(&(0x7f0000000900)={0x0, 0x1dcd6500}, 0x0) 3.391082929s ago: executing program 1 (id=11): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000100)='./sys\x00', &(0x7f0000000180)='sysfs\x00', 0x0, 0x0) r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000000000407d1ebe2d000000000001090224000100000000090400000103010200092100000001222200090581030800000000"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f00000001c0)={0x24, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="002222000000962313"], 0x0}, 0x0) nanosleep(&(0x7f0000000500)={0x1}, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./sys/class/konepure/roccatkonepure0/macro\x00', 0x1, 0x0) write(r1, &(0x7f0000001000)='\x00'/2082, 0x822) 3.353666006s ago: executing program 3 (id=12): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(&(0x7f0000000100)=@filename='none\x00', &(0x7f0000000000)='./sys\x00', &(0x7f0000000200)='sysfs\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000300)='./sys/bus/platform/drivers/lgm-usb-phy\x00', 0x0, 0x0) 3.290369555s ago: executing program 3 (id=13): mkdir(&(0x7f0000000000)='./config\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./config\x00', &(0x7f0000000040)='configfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./backing_file\x00', 0x42, 0x1ff) ftruncate(r0, 0x200000) r1 = syz_open_dev$loop(&(0x7f00000000c0), 0x0, 0x2) ioctl$LOOP_SET_FD(r1, 0x4c00, r0) dup2(r1, 0x3) mkdir(&(0x7f0000000100)='./config/cluster/ocfs2\x00', 0x1ff) mkdir(&(0x7f0000000140)='./config/cluster/ocfs2/node/node0\x00', 0x1ff) r2 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./config/cluster/ocfs2/node/node0/ipv4_address\x00', 0x1, 0x0) write(r2, &(0x7f00000001c0)='127.0.0.1\n', 0xa) close(r2) r3 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./config/cluster/ocfs2/node/node0/ipv4_port\x00', 0x1, 0x0) write(r3, &(0x7f0000000240)='7777\n', 0x5) close(r3) r4 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./config/cluster/ocfs2/node/node0/num\x00', 0x1, 0x0) write(r4, &(0x7f00000002c0)='0\n', 0x2) close(r4) r5 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./config/cluster/ocfs2/node/node0/local\x00', 0x1, 0x0) write(r5, &(0x7f0000000340)='1\n', 0x2) close(r5) mkdir(&(0x7f0000000380)='./config/cluster/ocfs2/heartbeat/hb0\x00', 0x1ff) r6 = openat(0xffffffffffffff9c, &(0x7f00000003c0)='./config/cluster/ocfs2/heartbeat/hb0/block_bytes\x00', 0x1, 0x0) write(r6, &(0x7f0000000400)='512\n', 0x4) close(r6) r7 = openat(0xffffffffffffff9c, &(0x7f0000000440)='./config/cluster/ocfs2/heartbeat/hb0/start_block\x00', 0x1, 0x0) write(r7, &(0x7f0000000480)='1\n', 0x2) close(r7) r8 = openat(0xffffffffffffff9c, &(0x7f00000004c0)='./config/cluster/ocfs2/heartbeat/hb0/blocks\x00', 0x1, 0x0) write(r8, &(0x7f0000000500)='2\n', 0x2) close(r8) r9 = openat(0xffffffffffffff9c, &(0x7f0000000540)='./config/cluster/ocfs2/heartbeat/hb0/dev\x00', 0x1, 0x0) write(r9, &(0x7f0000000580)='3\n', 0x2) close(r9) mkdir(&(0x7f00000005c0)='./dlmfs\x00', 0x1ff) mount(0x0, &(0x7f00000005c0)='./dlmfs\x00', &(0x7f0000000600)='ocfs2_dlmfs\x00', 0x0, 0x0) mkdir(&(0x7f0000000640)='./dlmfs/domain0\x00', 0x1ff) nanosleep(&(0x7f0000000680)={0x1}, 0x0) 3.0177862s ago: executing program 2 (id=14): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x44, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_MAC={0xa, 0x6, @from_mac}, @NL80211_ATTR_AUTH_TYPE={0x8}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}]]}, 0x44}}, 0x0) syz_80211_inject_frame(&(0x7f00000002c0)=@device_b, &(0x7f0000000300)=@mgmt_frame=@probe_response={{{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void}, 0x36) nanosleep(&(0x7f0000000340)={0x0, 0x2faf080}, &(0x7f0000000380)) syz_80211_inject_frame(&(0x7f00000003c0)=@device_b, &(0x7f0000000400)=@mgmt_frame=@auth={{{}, {}, @device_b, @device_a, @from_mac, {0x0, 0x1}}, 0x0, 0x2, 0x0, @void}, 0x1e) nanosleep(&(0x7f0000000440)={0x0, 0x2faf080}, &(0x7f0000000480)) syz_80211_inject_frame(&(0x7f00000004c0)=@device_b, &(0x7f0000000500)=@mgmt_frame=@assoc_resp={{{}, {}, @device_b, @device_a, @from_mac, {0x0, 0x2}}, 0x1, 0x0, @default, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void}, 0x28) nanosleep(&(0x7f0000000540)={0x0, 0x5f5e100}, &(0x7f0000000580)) sendmsg$NL80211_CMD_DISASSOCIATE(r0, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000640)={0x30, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_REASON_CODE={0x6, 0x36, 0x1}, @NL80211_ATTR_MAC={0xa, 0x6, @from_mac}]}, 0x30}}, 0x0) 2.73557733s ago: executing program 0 (id=15): mkdirat(0xffffffffffffff9c, &(0x7f0000000400)='./sys\x00', 0x1ff) mount(&(0x7f0000000500), &(0x7f0000000400)='./sys\x00', &(0x7f0000000600)='sysfs\x00', 0x0, 0x0) r0 = syz_usb_connect$hid(0x2, 0x3f, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x1770, 0xff00, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x2d, 0x1, 0x0, 0x0, 0xd0, 0x0, "", [{{0x9, 0x4, 0x0, 0x0, 0x2, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0xff, 0x1, {0x22, 0x18}}, {{{0x9, 0x5, 0x81, 0x3, 0x3ff}}, [{{0x9, 0x5, 0x2, 0x3, 0x400, 0x81, 0x7, 0xe}}]}}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000040)={0x24, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="0022180000000501150025ff0900a11e0901a1006d08950109309102c0c0"], 0x0}, 0x0) nanosleep(&(0x7f0000000300)={0x0, 0x1dcd6500}, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000700)='./sys/class/leds/0003:1770:FF00.0001::back/brightness\x00', 0x2, 0x0) write(r1, &(0x7f0000000780)='1\n\x00', 0x2) r2 = openat(0xffffffffffffff9c, &(0x7f0000000800)='./sys/class/leds/0003:1770:FF00.0001::back/gt683r/mode\x00', 0x2, 0x0) write(r2, &(0x7f0000000880)='1\n\x00', 0x2) r3 = openat(0xffffffffffffff9c, &(0x7f0000000900)='./sys/class/leds/0003:1770:FF00.0002::back/brightness\x00', 0x2, 0x0) write(r3, &(0x7f0000000980)='1\n\x00', 0x2) r4 = openat(0xffffffffffffff9c, &(0x7f0000000a00)='./sys/class/leds/0003:1770:FF00.0002::back/gt683r/mode\x00', 0x2, 0x0) write(r4, &(0x7f0000000a80)='1\n\x00', 0x2) r5 = openat(0xffffffffffffff9c, &(0x7f0000000b00)='./sys/class/leds/0003:1770:FF00.0003::back/brightness\x00', 0x2, 0x0) write(r5, &(0x7f0000000b80)='1\n\x00', 0x2) r6 = openat(0xffffffffffffff9c, &(0x7f0000000c00)='./sys/class/leds/0003:1770:FF00.0003::back/gt683r/mode\x00', 0x2, 0x0) write(r6, &(0x7f0000000c80)='1\n\x00', 0x2) r7 = openat(0xffffffffffffff9c, &(0x7f0000000d00)='./sys/class/leds/0003:1770:FF00.0004::back/brightness\x00', 0x2, 0x0) write(r7, &(0x7f0000000d80)='1\n\x00', 0x2) r8 = openat(0xffffffffffffff9c, &(0x7f0000000e00)='./sys/class/leds/0003:1770:FF00.0004::back/gt683r/mode\x00', 0x2, 0x0) write(r8, &(0x7f0000000e80)='1\n\x00', 0x2) nanosleep(&(0x7f0000000300)={0x0, 0x5f5e100}, 0x0) syz_usb_disconnect(r0) 2.437411012s ago: executing program 3 (id=16): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000000018105e04da07000000000001090224000100000000090400000903000000092100000001222200090581030800000000"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) 2.225993641s ago: executing program 2 (id=17): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./sys\x00', &(0x7f0000000080)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./sys/bus/platform/devices/pcspkr\x00', 0x0, 0x0) r1 = openat(r0, &(0x7f0000000100)='driver_override\x00', 0x2, 0x0) write(r1, &(0x7f0000000140)='cpcap-usb-phy\x00', 0xd) close(r1) close(r0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./sys/bus/platform/drivers/cpcap-usb-phy\x00', 0x0, 0x0) r3 = openat(r2, &(0x7f00000001c0)='bind\x00', 0x1, 0x0) write(r3, &(0x7f0000000200)='pcspkr\x00', 0x6) close(r3) close(r2) 2.207040615s ago: executing program 2 (id=18): syz_usb_connect(0x3, 0x39, &(0x7f0000000040)=ANY=[@ANYBLOB="12010002ffff0040950b90170001000000010902270001010080fa0904000003ffff0000070581020002000705020200020007058303400008"], 0x0) nanosleep(&(0x7f0000000300)={0x1}, 0x0) r0 = socket$inet(0x2, 0x2, 0x0) ioctl(r0, 0x8946, &(0x7f0000000100)="6574683000000000000000000000000000020000007f0000") 1.07976472s ago: executing program 3 (id=19): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./sys\x00', &(0x7f0000000080)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./sys/bus/pci/drivers/virtio-pci/module/version\x00', 0x0, 0x0) read(r0, &(0x7f0000000200)=""/256, 0x100) write(0x1, &(0x7f0000000200)='\x00'/256, 0x0) 1.079625517s ago: executing program 3 (id=20): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000040)='sysfs\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./sys/bus/platform/drivers/pcspkr\x00', 0x0, 0x0) 1.010380682s ago: executing program 3 (id=21): r0 = syz_usb_connect(0x0, 0x4b, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000200000040480b0510000101020001090239000201008032090400000000000000090401000000000000090401010300000000070501024000000705810240000007058201400001"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) nanosleep(&(0x7f0000000100)={0x0, 0x5f5e100}, 0x0) r1 = syz_open_dev$dvb_demux(&(0x7f0000000200), 0x1, 0x2) ioctl$DVB_DEMUX_DMX_SET_PES_FILTER(r1, 0x40146f2c, &(0x7f0000000300)={0x100, 0x0, 0x1, 0x14, 0x4}) ioctl$DVB_DEMUX_DMX_START(r1, 0x6f29) 659.96711ms ago: executing program 0 (id=22): mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000100)='./sys\x00', &(0x7f0000000140)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./sys/module/firmware_class/parameters/path\x00', 0x2, 0x0) write(r0, &(0x7f00000001c0)='.\n', 0x2) close(r0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./usbduxfast_firmware.bin\x00', 0x42, 0x1b6) close(r1) syz_usb_connect(0x3, 0x3b, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000200000040d81310000000000000010902290001010080320904000000ff0000000904000102ff0000000705860200020007050402000200"], 0x0) nanosleep(&(0x7f0000000280)={0x1}, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000500)='./sys/bus/usb/drivers/usbduxfast/1-1:1.0/comedi/comedi0\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000540)='./sys/bus/usb/drivers/usbduxfast/1-1:1.0/comedi/comedi1\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000580)='./sys/bus/usb/drivers/usbduxfast/1-1:1.0/comedi/comedi2\x00', 0x0, 0x0) 169.912µs ago: executing program 2 (id=23): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./nfsd\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./nfsd\x00', &(0x7f0000000100)='nfsd\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./nfsd/portlist\x00', 0x2, 0x0) write(r0, &(0x7f0000000500)='invalid string\n', 0xf) close(r0) 0s ago: executing program 2 (id=24): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$TIOCSPTLCK(r0, 0x40045431, &(0x7f0000000080)) r1 = syz_open_pts(r0, 0x2) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000100)=0x11) r2 = syz_init_net_socket$llc(0x1a, 0x2, 0x0) ioctl(r2, 0x8914, &(0x7f0000000200)="63616e300000000000000000000000000100"/40) write(r0, &(0x7f0000000300)='e1a\r', 0x4) nanosleep(&(0x7f0000000400)={0x0, 0x5f5e100}, 0x0) kernel console output (not intermixed with test programs): [ 28.999336][ T44] audit: type=1400 audit(1789417310.820:113): avc: denied { write } for pid=5629 comm="sh" path="pipe:[3053]" dev="pipefs" ino=3053 scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:sshd_t tclass=fifo_file permissive=1 [ 28.999829][ T44] audit: type=1400 audit(1789417310.820:114): avc: denied { rlimitinh } for pid=5629 comm="sh" scontext=system_u:system_r:sshd_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 28.999943][ T44] audit: type=1400 audit(1789417310.820:115): avc: denied { siginh } for pid=5629 comm="sh" scontext=system_u:system_r:sshd_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 30.557812][ T44] audit: type=1400 audit(1789417312.380:116): avc: denied { write } for pid=5634 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 30.601409][ T44] audit: type=1400 audit(1789417312.420:117): avc: denied { write } for pid=5637 comm="rm" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 Warning: Permanently added '[localhost]:62237' (ED25519) to the list of known hosts. [ 30.886254][ T44] audit: type=1400 audit(1789417312.710:118): avc: denied { name_bind } for pid=5642 comm="sshd-session" src=30000 scontext=system_u:system_r:sshd_t tcontext=system_u:object_r:unreserved_port_t tclass=tcp_socket permissive=1 [ 30.911199][ T44] audit: type=1400 audit(1789417312.730:119): avc: denied { execute } for pid=5643 comm="sh" name="syz-executor" dev="sda1" ino=2020 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:etc_runtime_t tclass=file permissive=1 [ 30.911474][ T44] audit: type=1400 audit(1789417312.730:120): avc: denied { execute_no_trans } for pid=5643 comm="sh" path="/syz-executor" dev="sda1" ino=2020 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:etc_runtime_t tclass=file permissive=1 [ 30.930560][ T44] audit: type=1400 audit(1789417312.750:121): avc: denied { write } for pid=5644 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 30.967261][ T44] audit: type=1400 audit(1789417312.790:122): avc: denied { write } for pid=5647 comm="rm" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 31.027565][ T44] audit: type=1400 audit(1789417312.850:123): avc: denied { write } for pid=5650 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 31.069337][ T44] audit: type=1400 audit(1789417312.890:124): avc: denied { write } for pid=5653 comm="rm" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 31.240579][ T44] audit: type=1400 audit(1789417313.060:125): avc: denied { write } for pid=5656 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 33.101802][ T5643] cgroup: Unknown subsys name 'net' [ 33.297774][ T5643] cgroup: Unknown subsys name 'cpuset' [ 33.299990][ T5643] cgroup: Unknown subsys name 'rlimit' [ 33.473382][ T5709] SELinux: Context root:object_r:swapfile_t is not valid (left unmapped). Setting up swapspace version 1, size = 127995904 bytes [ 34.132645][ T5643] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 37.621349][ T44] kauditd_printk_skb: 32 callbacks suppressed [ 37.621361][ T44] audit: type=1400 audit(1789417319.440:158): avc: denied { execmem } for pid=5715 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 37.820466][ T44] audit: type=1400 audit(1789417319.640:159): avc: denied { create } for pid=5720 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 37.820499][ T44] audit: type=1400 audit(1789417319.640:160): avc: denied { create } for pid=5719 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 37.820804][ T44] audit: type=1400 audit(1789417319.640:161): avc: denied { read write } for pid=5720 comm="syz-executor" name="vhci" dev="devtmpfs" ino=1290 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 37.820826][ T44] audit: type=1400 audit(1789417319.640:162): avc: denied { read write } for pid=5719 comm="syz-executor" name="vhci" dev="devtmpfs" ino=1290 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 37.821211][ T44] audit: type=1400 audit(1789417319.640:163): avc: denied { open } for pid=5719 comm="syz-executor" path="/dev/vhci" dev="devtmpfs" ino=1290 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 37.829597][ T44] audit: type=1400 audit(1789417319.650:164): avc: denied { ioctl } for pid=5719 comm="syz-executor" path="socket:[7361]" dev="sockfs" ino=7361 ioctlcmd=0x48c9 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 37.862574][ T5725] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 37.863767][ T5725] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 37.865967][ T5734] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 37.866476][ T5730] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 37.866973][ T5730] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 37.867330][ T5730] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 37.867451][ T5730] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 37.868120][ T5730] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 37.868465][ T5730] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 37.868571][ T5730] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 37.869336][ T5730] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 37.869428][ T5730] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 37.869992][ T5730] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 37.870387][ T5730] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 37.870525][ T5730] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 37.871598][ T5730] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 37.871900][ T5730] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 37.872254][ T5730] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 37.872751][ T5730] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 37.872848][ T5730] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 37.883335][ T44] audit: type=1400 audit(1789417319.700:165): avc: denied { read } for pid=5720 comm="syz-executor" dev="nsfs" ino=4026531833 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 37.889898][ T44] audit: type=1400 audit(1789417319.700:166): avc: denied { open } for pid=5721 comm="syz-executor" path="net:[4026531833]" dev="nsfs" ino=4026531833 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 37.889924][ T44] audit: type=1400 audit(1789417319.710:167): avc: denied { mounton } for pid=5721 comm="syz-executor" path="/" dev="sda1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:root_t tclass=dir permissive=1 [ 38.550261][ T5720] bridge0: port 1(bridge_slave_0) entered blocking state [ 38.550754][ T5720] bridge0: port 1(bridge_slave_0) entered disabled state [ 38.550903][ T5720] bridge_slave_0: entered allmulticast mode [ 38.551688][ T5720] bridge_slave_0: entered promiscuous mode [ 38.569559][ T5729] bridge0: port 1(bridge_slave_0) entered blocking state [ 38.569636][ T5729] bridge0: port 1(bridge_slave_0) entered disabled state [ 38.569911][ T5729] bridge_slave_0: entered allmulticast mode [ 38.572375][ T5729] bridge_slave_0: entered promiscuous mode [ 38.583539][ T5721] bridge0: port 1(bridge_slave_0) entered blocking state [ 38.583584][ T5721] bridge0: port 1(bridge_slave_0) entered disabled state [ 38.583734][ T5721] bridge_slave_0: entered allmulticast mode [ 38.584490][ T5721] bridge_slave_0: entered promiscuous mode [ 38.586714][ T5720] bridge0: port 2(bridge_slave_1) entered blocking state [ 38.586784][ T5720] bridge0: port 2(bridge_slave_1) entered disabled state [ 38.586894][ T5720] bridge_slave_1: entered allmulticast mode [ 38.588188][ T5720] bridge_slave_1: entered promiscuous mode [ 38.596061][ T5729] bridge0: port 2(bridge_slave_1) entered blocking state [ 38.596159][ T5729] bridge0: port 2(bridge_slave_1) entered disabled state [ 38.596229][ T5729] bridge_slave_1: entered allmulticast mode [ 38.596986][ T5729] bridge_slave_1: entered promiscuous mode [ 38.604785][ T5721] bridge0: port 2(bridge_slave_1) entered blocking state [ 38.604981][ T5721] bridge0: port 2(bridge_slave_1) entered disabled state [ 38.605080][ T5721] bridge_slave_1: entered allmulticast mode [ 38.606398][ T5721] bridge_slave_1: entered promiscuous mode [ 38.654087][ T5720] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 38.654175][ T5719] bridge0: port 1(bridge_slave_0) entered blocking state [ 38.654734][ T5719] bridge0: port 1(bridge_slave_0) entered disabled state [ 38.654791][ T5719] bridge_slave_0: entered allmulticast mode [ 38.655898][ T5719] bridge_slave_0: entered promiscuous mode [ 38.659486][ T5729] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 38.668950][ T5721] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 38.669937][ T5720] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 38.677443][ T5719] bridge0: port 2(bridge_slave_1) entered blocking state [ 38.677514][ T5719] bridge0: port 2(bridge_slave_1) entered disabled state [ 38.677780][ T5719] bridge_slave_1: entered allmulticast mode [ 38.679154][ T5719] bridge_slave_1: entered promiscuous mode [ 38.694015][ T5729] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 38.701401][ T5721] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 38.724803][ T5720] team0: Port device team_slave_0 added [ 38.732841][ T5729] team0: Port device team_slave_0 added [ 38.741100][ T5719] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 38.742681][ T5721] team0: Port device team_slave_0 added [ 38.744095][ T5720] team0: Port device team_slave_1 added [ 38.745546][ T5721] team0: Port device team_slave_1 added [ 38.746790][ T5729] team0: Port device team_slave_1 added [ 38.754717][ T5719] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 38.780738][ T5721] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 38.780752][ T5721] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 38.780769][ T5721] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 38.802064][ T5729] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 38.802075][ T5729] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 38.802087][ T5729] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 38.803241][ T5721] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 38.803250][ T5721] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 38.803262][ T5721] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 38.805083][ T5719] team0: Port device team_slave_0 added [ 38.812882][ T5720] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 38.812892][ T5720] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 38.812904][ T5720] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 38.816698][ T5719] team0: Port device team_slave_1 added [ 38.822812][ T5729] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 38.822821][ T5729] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 38.822833][ T5729] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 38.836254][ T5720] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 38.836266][ T5720] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 38.836278][ T5720] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 38.843971][ T5719] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 38.843984][ T5719] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 38.844000][ T5719] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 38.862320][ T5719] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 38.862335][ T5719] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 38.862353][ T5719] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 38.873606][ T5721] hsr_slave_0: entered promiscuous mode [ 38.874104][ T5721] hsr_slave_1: entered promiscuous mode [ 38.893969][ T5729] hsr_slave_0: entered promiscuous mode [ 38.894628][ T5729] hsr_slave_1: entered promiscuous mode [ 38.895240][ T5729] debugfs: 'hsr0' already exists in 'hsr' [ 38.895292][ T5729] Cannot create hsr debugfs directory [ 38.913352][ T5720] hsr_slave_0: entered promiscuous mode [ 38.914233][ T5720] hsr_slave_1: entered promiscuous mode [ 38.914806][ T5720] debugfs: 'hsr0' already exists in 'hsr' [ 38.914822][ T5720] Cannot create hsr debugfs directory [ 38.982648][ T5719] hsr_slave_0: entered promiscuous mode [ 38.983092][ T5719] hsr_slave_1: entered promiscuous mode [ 38.983573][ T5719] debugfs: 'hsr0' already exists in 'hsr' [ 38.983591][ T5719] Cannot create hsr debugfs directory [ 39.233960][ T5729] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 39.242708][ T5729] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 39.243974][ T5729] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 39.248240][ T5729] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 39.249460][ T5729] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 39.253673][ T5729] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 39.263988][ T5729] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 39.267477][ T5729] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 39.305541][ T5729] bridge0: port 2(bridge_slave_1) entered blocking state [ 39.305840][ T5729] bridge0: port 2(bridge_slave_1) entered forwarding state [ 39.306140][ T5729] bridge0: port 1(bridge_slave_0) entered blocking state [ 39.306184][ T5729] bridge0: port 1(bridge_slave_0) entered forwarding state [ 39.308723][ T5721] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 39.310521][ T5721] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 39.310954][ T5721] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 39.313633][ T5721] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 39.314060][ T5721] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 39.316197][ T5721] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 39.319041][ T5721] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 39.323389][ T5721] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 39.357997][ T1163] bridge0: port 1(bridge_slave_0) entered disabled state [ 39.359309][ T1163] bridge0: port 2(bridge_slave_1) entered disabled state [ 39.402694][ T5719] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 39.410525][ T5719] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 39.411289][ T5719] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 39.414742][ T5719] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 39.415579][ T5719] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 39.419414][ T5719] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 39.423280][ T5719] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 39.427292][ T5719] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 39.509743][ T5720] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 39.512015][ T5720] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 39.520078][ T5729] 8021q: adding VLAN 0 to HW filter on device bond0 [ 39.521317][ T5720] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 39.524255][ T5720] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 39.525470][ T5720] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 39.529888][ T5720] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 39.530582][ T5720] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 39.534718][ T5720] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 39.569169][ T5729] 8021q: adding VLAN 0 to HW filter on device team0 [ 39.571616][ T5721] 8021q: adding VLAN 0 to HW filter on device bond0 [ 39.591464][ T1163] bridge0: port 1(bridge_slave_0) entered blocking state [ 39.591521][ T1163] bridge0: port 1(bridge_slave_0) entered forwarding state [ 39.592480][ T1163] bridge0: port 2(bridge_slave_1) entered blocking state [ 39.592521][ T1163] bridge0: port 2(bridge_slave_1) entered forwarding state [ 39.611751][ T5721] 8021q: adding VLAN 0 to HW filter on device team0 [ 39.623159][ T5719] 8021q: adding VLAN 0 to HW filter on device bond0 [ 39.624691][ T1163] bridge0: port 1(bridge_slave_0) entered blocking state [ 39.624737][ T1163] bridge0: port 1(bridge_slave_0) entered forwarding state [ 39.631513][ T1163] bridge0: port 2(bridge_slave_1) entered blocking state [ 39.631597][ T1163] bridge0: port 2(bridge_slave_1) entered forwarding state [ 39.667398][ T5719] 8021q: adding VLAN 0 to HW filter on device team0 [ 39.681990][ T37] bridge0: port 1(bridge_slave_0) entered blocking state [ 39.682077][ T37] bridge0: port 1(bridge_slave_0) entered forwarding state [ 39.705082][ T37] bridge0: port 2(bridge_slave_1) entered blocking state [ 39.705135][ T37] bridge0: port 2(bridge_slave_1) entered forwarding state [ 39.720438][ T5720] 8021q: adding VLAN 0 to HW filter on device bond0 [ 39.743295][ T5720] 8021q: adding VLAN 0 to HW filter on device team0 [ 39.759161][ T56] bridge0: port 1(bridge_slave_0) entered blocking state [ 39.759274][ T56] bridge0: port 1(bridge_slave_0) entered forwarding state [ 39.776795][ T56] bridge0: port 2(bridge_slave_1) entered blocking state [ 39.776840][ T56] bridge0: port 2(bridge_slave_1) entered forwarding state [ 39.907549][ T65] Bluetooth: hci3: command tx timeout [ 39.907554][ T5736] Bluetooth: hci1: command tx timeout [ 39.907791][ T65] Bluetooth: hci2: command tx timeout [ 39.907796][ T5736] Bluetooth: hci0: command tx timeout [ 39.944303][ T5729] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 39.971108][ T5729] veth0_vlan: entered promiscuous mode [ 39.976722][ T5729] veth1_vlan: entered promiscuous mode [ 39.992278][ T5729] veth0_macvtap: entered promiscuous mode [ 39.994289][ T5729] veth1_macvtap: entered promiscuous mode [ 39.999077][ T5719] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 40.006320][ T5729] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 40.010477][ T5729] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 40.026569][ T5721] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 40.049214][ T5720] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 40.058556][ T5719] veth0_vlan: entered promiscuous mode [ 40.080331][ T5719] veth1_vlan: entered promiscuous mode [ 40.099322][ T5721] veth0_vlan: entered promiscuous mode [ 40.101166][ T37] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 40.101177][ T37] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 40.116390][ T5774] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 40.116521][ T5774] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 40.116547][ T5774] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 40.116570][ T5774] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 40.127174][ T5721] veth1_vlan: entered promiscuous mode [ 40.128490][ T5719] veth0_macvtap: entered promiscuous mode [ 40.137926][ T5719] veth1_macvtap: entered promiscuous mode [ 40.138063][ T37] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 40.138074][ T37] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 40.170345][ T5719] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 40.172105][ T5720] veth0_vlan: entered promiscuous mode [ 40.183403][ T5729] soft_limit_in_bytes is deprecated and will be removed. Writing any value to this file has no effect. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 40.183453][ T5719] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 40.187913][ T5720] veth1_vlan: entered promiscuous mode [ 40.192015][ T5721] veth0_macvtap: entered promiscuous mode [ 40.201589][ T5721] veth1_macvtap: entered promiscuous mode [ 40.250353][ T5721] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 40.261749][ T5720] veth0_macvtap: entered promiscuous mode [ 40.263533][ T5721] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 40.273287][ T1170] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 40.273299][ T1170] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 40.273627][ T5720] veth1_macvtap: entered promiscuous mode [ 40.300348][ T1163] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 40.300360][ T1163] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 40.307070][ T5720] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 40.307231][ T5774] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 40.318064][ T5720] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 40.318546][ T13] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 40.390701][ T1170] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 40.390720][ T1170] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 40.428799][ T1170] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 40.428817][ T1170] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 40.447298][ T5774] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 40.448853][ T1170] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 40.448870][ T1170] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 40.484013][ T1163] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 40.484031][ T1163] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 40.503236][ T5873] device-mapper: ioctl: populate_table: target parameters not NUL-terminated [ 40.505442][ T5800] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 40.505475][ T5800] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 40.505502][ T5800] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 40.505529][ T5800] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 40.505554][ T5800] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 40.505576][ T5800] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 40.505601][ T5800] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 40.505627][ T5800] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 40.505652][ T5800] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 40.598928][ T5876] svc: failed to register lockdv1 RPC service (errno 111). [ 40.599177][ T5876] lockd_up: makesock failed, error=-111 [ 40.612413][ T5881] Bluetooth: MGMT ver 1.23 [ 40.653410][ T5883] qrtr: Invalid version 0 [ 40.734797][ T5887] coreboot_table pcspkr: probe with driver coreboot_table failed with error -22 [ 40.791312][ T5891] nvmet: adding nsid 1 to subsystem testsubsys [ 40.832448][ T1170] nvme nvme0: NVME-FC{0}: create association : host wwpn 0x2222222222222222 rport wwpn 0x4444444444444444: NQN "testsubsys" [ 40.834496][ T1162] nvmet_fc: {0:0}: Association created [ 40.836543][ T1162] nvmet: Created nvm controller 1 for subsystem testsubsys for NQN nqn.2014-08.org.nvmexpress:uuid:7de87742-14f8-419c-98f8-eedb41a6cf6b. [ 40.856819][ T1170] nvme nvme0: NVME-FC{0}: controller connect complete [ 40.858677][ T5891] nvme nvme0: NVME-FC{0}: new ctrl: NQN "testsubsys", hostnqn: nqn.2014-08.org.nvmexpress:uuid:7de87742-14f8-419c-98f8-eedb41a6cf6b [ 41.009982][ T5876] svc: failed to register nfsdv3 RPC service (errno 111). [ 41.010782][ T5876] svc: failed to register nfsaclv3 RPC service (errno 111). [ 41.010798][ T5876] failed to unregister tcp with rpcbind [ 41.011692][ T5876] svc: failed to register nfsdv3 RPC service (errno 97). [ 41.011709][ T5876] svc: failed to register nfsaclv3 RPC service (errno 97). [ 41.011720][ T5876] failed to unregister tcp with rpcbind [ 41.097343][ T5899] loop0: detected capacity change from 0 to 4096 [ 41.172694][ T5902] o2cb: Local heartbeat has not been started. [ 41.172704][ T5902] o2cb: Cluster check failed. Fix errors before retrying. [ 41.172714][ T5902] (syz.3.13,5902,3):user_dlm_register:674 ERROR: status = -22 [ 41.172728][ T5902] (syz.3.13,5902,3):dlmfs_mkdir:437 ERROR: Error -22 could not register domain "domain0" [ 41.274988][ T5816] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 41.419779][ T5904] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 41.429979][ T5816] usb 6-1: New USB device found, idVendor=1e7d, idProduct=2dbe, bcdDevice= 0.00 [ 41.431470][ T5816] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 41.431493][ T5816] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 41.433845][ T5816] usb 6-1: config 0 descriptor?? [ 41.457798][ T990] wlan1: authenticate with 08:02:11:00:00:00 (local address=08:02:11:00:00:01) [ 41.457815][ T990] wlan1: send auth to 08:02:11:00:00:00 (try 1/3) [ 41.472180][ T1163] wlan1: authenticated [ 41.474140][ T5904] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 41.475131][ T1163] wlan1: associate with 08:02:11:00:00:00 (try 1/3) [ 41.526946][ T1163] wlan1: RX AssocResp from 08:02:11:00:00:00 (capab=0x1 status=0 aid=1) [ 41.527044][ T5904] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 41.527609][ T1163] wlan1: associated [ 41.580324][ T5906] wlan1: disassociating from 08:02:11:00:00:00 by local choice (Reason: 1=UNSPECIFIED) [ 41.856685][ T5816] konepure 0003:1E7D:2DBE.0002: unknown main item tag 0x0 [ 41.856709][ T5816] konepure 0003:1E7D:2DBE.0002: unknown main item tag 0x0 [ 41.856721][ T5816] konepure 0003:1E7D:2DBE.0002: unknown main item tag 0x0 [ 41.856733][ T5816] konepure 0003:1E7D:2DBE.0002: unknown main item tag 0x0 [ 41.856744][ T5816] konepure 0003:1E7D:2DBE.0002: unknown main item tag 0x0 [ 41.856755][ T5816] konepure 0003:1E7D:2DBE.0002: unknown main item tag 0x0 [ 41.856767][ T5816] konepure 0003:1E7D:2DBE.0002: unknown main item tag 0x0 [ 41.856778][ T5816] konepure 0003:1E7D:2DBE.0002: unknown main item tag 0x0 [ 41.856789][ T5816] konepure 0003:1E7D:2DBE.0002: unknown main item tag 0x0 [ 41.856801][ T5816] konepure 0003:1E7D:2DBE.0002: unknown main item tag 0x0 [ 41.861085][ T5816] konepure 0003:1E7D:2DBE.0002: hidraw1: USB HID v0.00 Device [HID 1e7d:2dbe] on usb-dummy_hcd.1-1/input0 [ 41.925066][ T9] usb 5-1: new full-speed USB device number 2 using dummy_hcd [ 41.985291][ T5725] Bluetooth: hci1: command tx timeout [ 41.985314][ T5725] Bluetooth: hci3: command tx timeout [ 41.985388][ T5736] Bluetooth: hci2: command tx timeout [ 42.077731][ T9] usb 5-1: New USB device found, idVendor=1770, idProduct=ff00, bcdDevice= 0.00 [ 42.078929][ T9] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 42.078952][ T9] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1023, setting to 64 [ 42.078972][ T9] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid maxpacket 1024, setting to 64 [ 42.079001][ T9] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 42.081054][ T9] usb 5-1: config 0 descriptor?? [ 42.082296][ T5908] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 42.082474][ T5908] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 42.205559][ T5807] usb 8-1: new high-speed USB device number 2 using dummy_hcd [ 42.355047][ T5807] usb 8-1: Using ep0 maxpacket: 16 [ 42.355515][ T5807] usb 8-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 42.356430][ T5807] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 42.356447][ T5807] usb 8-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 42.356466][ T5807] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 42.358566][ T5807] usb 8-1: config 0 descriptor?? [ 42.455114][ T63] usb 7-1: new high-speed USB device number 2 using dummy_hcd [ 42.492780][ T9] gt683r_led 0003:1770:FF00.0003: hidraw2: USB HID v0.00 Device [HID 1770:ff00] on usb-dummy_hcd.0-1/input0 [ 42.635079][ T5736] Bluetooth: hci0: command tx timeout [ 42.636350][ T63] usb 7-1: New USB device found, idVendor=0b95, idProduct=1790, bcdDevice= 1.00 [ 42.637638][ T63] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 42.767364][ T5807] usbhid 8-1:0.0: can't add hid device: -71 [ 42.767458][ T5807] usbhid 8-1:0.0: probe with driver usbhid failed with error -71 [ 42.770582][ T5807] usb 8-1: USB disconnect, device number 2 [ 42.859568][ T42] gt683r_led 0003:1770:FF00.0003: failed to send set report request: -71 [ 42.862314][ T990] usb 5-1: USB disconnect, device number 2 [ 42.862639][ T42] gt683r_led 0003:1770:FF00.0003: failed to send set report request: -19 [ 42.866688][ T76] gt683r_led 0003:1770:FF00.0003: failed to send set report request: -19 [ 42.869386][ T76] gt683r_led 0003:1770:FF00.0003: failed to send set report request: -19 [ 42.871209][ T76] gt683r_led 0003:1770:FF00.0003: failed to send set report request: -19 [ 42.919675][ T44] kauditd_printk_skb: 131 callbacks suppressed [ 42.919688][ T44] audit: type=1400 audit(1789417324.740:299): avc: denied { sys_module } for pid=5915 comm="syz.2.18" capability=16 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 43.614970][ T5807] usb 8-1: new high-speed USB device number 3 using dummy_hcd [ 43.765661][ T5807] usb 8-1: New USB device found, idVendor=0b48, idProduct=1005, bcdDevice= 1.00 [ 43.766504][ T5807] usb 8-1: config 1 interface 1 altsetting 1 bulk endpoint 0x1 has invalid maxpacket 64 [ 43.766565][ T5807] usb 8-1: config 1 interface 1 altsetting 1 bulk endpoint 0x81 has invalid maxpacket 64 [ 43.768072][ T5807] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=0 [ 43.768085][ T5807] usb 8-1: Product: syz [ 43.768092][ T5807] usb 8-1: Manufacturer: syz [ 43.844841][ T63] ax88179_178a 7-1:1.0: probe with driver ax88179_178a failed with error -71 [ 43.851422][ T63] usb 7-1: USB disconnect, device number 2 [ 43.975130][ T25] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 43.976069][ T5931] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 43.976197][ T5931] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 43.978957][ T5807] dvb_ttusb_budget: ttusb_init_controller: error [ 43.978993][ T5807] dvbdev: DVB: registering new adapter (Technotrend/Hauppauge Nova-USB) [ 43.999932][ T5807] DVB: Unable to find symbol cx22700_attach() [ 44.021145][ T5807] DVB: Unable to find symbol tda10046_attach() [ 44.021158][ T5807] dvb_ttusb_budget: no frontend driver found for device [0b48:1005] [ 44.075058][ T65] Bluetooth: hci3: command tx timeout [ 44.075082][ T65] Bluetooth: hci1: command tx timeout [ 44.075129][ T5736] Bluetooth: hci2: command tx timeout [ 44.125775][ T25] usb 5-1: New USB device found, idVendor=13d8, idProduct=0010, bcdDevice= 0.00 [ 44.126676][ T25] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 44.228017][ T44] audit: type=1400 audit(1789417326.050:300): avc: denied { read write } for pid=5930 comm="syz.3.21" name="demux0" dev="devtmpfs" ino=2864 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1 [ 44.228209][ T44] audit: type=1400 audit(1789417326.050:301): avc: denied { open } for pid=5930 comm="syz.3.21" path="/dev/dvb/adapter1/demux0" dev="devtmpfs" ino=2864 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1 [ 44.228898][ T44] audit: type=1400 audit(1789417326.050:302): avc: denied { ioctl } for pid=5930 comm="syz.3.21" path="/dev/dvb/adapter1/demux0" dev="devtmpfs" ino=2864 ioctlcmd=0x6f2c scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1 [ 44.230976][ T5937] dvb_ttusb_budget: failed urb submission (0: err = -90)! [ 44.232293][ T5937] dvb_ttusb_budget: failed urb submission (0: err = -90)! [ 44.281444][ T5807] usb 8-1: USB disconnect, device number 3 [ 44.430638][ T5942] can0: slcan on pts0. [ 44.435011][ T44] audit: type=1400 audit(1789417326.250:303): avc: denied { create } for pid ** replaying previous printk message ** [ 44.435011][ T44] audit: type=1400 audit(1789417326.250:303): avc: denied { create } for pid=5941 comm="syz.2.24" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 44.436517][ T44] audit: type=1400 audit(1789417326.260:304): avc: denied { ioctl } for pid=5941 comm="syz.2.24" path="socket:[9702]" dev="sockfs" ino=9702 ioctlcmd=0x8914 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 44.439418][ C2] ------------[ cut here ]------------ [ 44.439425][ C2] 1 [ 44.439429][ C2] WARNING: ./include/linux/skbuff.h:3003 at __netif_receive_skb_core.constprop.0+0x1706/0x3530, CPU#2: kworker/u33:9/1163 [ 44.462335][ C2] Modules linked in: [ 44.463593][ C2] CPU: 2 UID: 0 PID: 1163 Comm: kworker/u33:9 Not tainted syzkaller #0 PREEMPT(full) [ 44.466384][ C2] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 44.469287][ C2] Workqueue: events_unbound flush_to_ldisc [ 44.471038][ C2] RIP: 0010:__netif_receive_skb_core.constprop.0+0x1706/0x3530 [ 44.473267][ C2] Code: de 4c 8b bc 24 e8 00 00 00 e8 86 f7 6b f8 85 db 0f 88 11 f2 ff ff 31 db 4d 8d af 81 00 00 00 e9 01 ed ff ff e8 fb fc 6b f8 90 <0f> 0b 90 31 db e9 43 eb ff ff e8 eb fc 6b f8 e8 66 af 4f f8 31 ff [ 44.478689][ C2] RSP: 0018:ffffc90000658990 EFLAGS: 00010246 [ 44.480377][ C2] RAX: 0000000000000000 RBX: 0000000000000040 RCX: 0000000000000101 [ 44.482662][ C2] RDX: ffff88802a1e8000 RSI: ffffffff89a02015 RDI: ffff88802a1e8000 [ 44.484965][ C2] RBP: 000000000000ffff R08: 0000000000000003 R09: 000000000000ffff [ 44.487200][ C2] R10: 000000000000ffff R11: 0000000000000001 R12: ffff888036e44140 [ 44.489385][ C2] R13: ffffc90000658c10 R14: ffff888036e44140 R15: ffff888036e44140 [ 44.491763][ C2] FS: 0000000000000000(0000) GS:ffff8880d5d59000(0000) knlGS:0000000000000000 [ 44.494242][ C2] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 44.496207][ C2] CR2: 000055e5708a2000 CR3: 0000000052360000 CR4: 0000000000352ef0 [ 44.498389][ C2] Call Trace: [ 44.499313][ C2] [ 44.500110][ C2] ? lockdep_hardirqs_on+0x7d/0x110 [ 44.501531][ C2] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 44.503127][ C2] ? stack_depot_save_flags+0x49a/0x9f0 [ 44.504568][ C2] ? kasan_save_stack+0x3f/0x50 [ 44.506223][ C2] ? kasan_save_stack+0x30/0x50 [ 44.507840][ C2] ? kasan_save_track+0x14/0x30 [ 44.509509][ C2] ? kasan_save_free_info+0x3b/0x70 [ 44.511227][ C2] ? __pfx___netif_receive_skb_core.constprop.0+0x10/0x10 [ 44.513555][ C2] ? napi_consume_skb+0x2cd/0x320 [ 44.515306][ C2] ? skb_defer_free_flush+0x1f1/0x290 [ 44.517049][ C2] ? net_rx_action+0x3ca/0xf20 [ 44.518706][ C2] ? handle_softirqs+0x1e6/0x9d0 [ 44.520410][ C2] ? do_softirq+0xaf/0xf0 [ 44.522104][ C2] ? netif_rx+0x93/0xb0 [ 44.523715][ C2] ? slcan_receive_buf+0x1a66/0x1f30 [ 44.525737][ C2] ? tty_ldisc_receive_buf+0x15a/0x1a0 [ 44.527567][ C2] ? tty_port_default_receive_buf+0x70/0xb0 [ 44.529260][ C2] ? flush_to_ldisc+0x26b/0x730 [ 44.530841][ C2] ? process_one_work+0xac7/0x1b10 [ 44.532662][ C2] ? worker_thread+0x5ef/0xe50 [ 44.534239][ C2] ? kthread+0x373/0x450 [ 44.535758][ C2] ? ret_from_fork+0x730/0xd60 [ 44.537528][ C2] ? ret_from_fork_asm+0x1a/0x30 [ 44.539249][ C2] ? __lock_acquire+0x5c0/0x1f40 [ 44.541166][ C2] ? process_backlog+0x437/0x1600 [ 44.542912][ C2] __netif_receive_skb_one_core+0xb0/0x1e0 [ 44.544996][ C2] ? __pfx___netif_receive_skb_one_core+0x10/0x10 [ 44.547172][ C2] ? lock_acquire+0x1d1/0x380 [ 44.548608][ C2] ? process_backlog+0x437/0x1600 [ 44.550480][ C2] ? process_backlog+0x437/0x1600 [ 44.552406][ C2] __netif_receive_skb+0x1f/0x120 [ 44.554423][ C2] process_backlog+0x487/0x1600 [ 44.556393][ C2] __napi_poll.constprop.0+0xaf/0x450 [ 44.558150][ C2] net_rx_action+0xa40/0xf20 [ 44.558612][ T44] audit: type=1400 audit(1789417326.380:305): avc: denied { write } for pid=5945 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 44.558660][ T44] audit: type=1400 audit(1789417326.380:306): avc: denied { create } for pid=5945 comm="dhcpcd-run-hook" name="resolv.conf.can0.link" scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 44.559002][ T44] audit: type=1400 audit(1789417326.380:307): avc: denied { write } for pid=5945 comm="dhcpcd-run-hook" path="/run/dhcpcd/hook-state/resolv.conf.can0.link" dev="tmpfs" ino=2107 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 44.559430][ T44] audit: type=1400 audit(1789417326.380:308): avc: denied { append } for pid=5945 comm="dhcpcd-run-hook" name="resolv.conf.can0.link" dev="tmpfs" ino=2107 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 44.588969][ C2] ? __pfx_net_rx_action+0x10/0x10 [ 44.591379][ C2] ? clockevents_shutdown+0x190/0x1f0 [ 44.593114][ C2] ? kvm_sched_clock_read+0x11/0x20 [ 44.595009][ C2] ? kvm_sched_clock_read+0x11/0x20 [ 44.596753][ C2] ? sched_clock+0x3a/0x60 [ 44.598330][ C2] ? sched_clock_cpu+0x6c/0x570 [ 44.599883][ C2] ? mark_held_locks+0x40/0x70 [ 44.601231][ C2] handle_softirqs+0x1e6/0x9d0 [ 44.602698][ C2] ? __pfx_handle_softirqs+0x10/0x10 [ 44.604379][ C2] ? __pfx_handle_softirqs+0x10/0x10 [ 44.606216][ C2] ? __hrtimer_rearm_deferred+0x9b/0x7b0 [ 44.608122][ C2] ? netif_rx+0x65/0xb0 [ 44.609418][ C2] do_softirq+0xaf/0xf0 [ 44.610659][ C2] [ 44.611579][ C2] [ 44.612476][ C2] __local_bh_enable_ip+0xff/0x120 [ 44.613949][ C2] ? netif_rx+0x65/0xb0 [ 44.615280][ C2] netif_rx+0x93/0xb0 [ 44.616600][ C2] slcan_receive_buf+0x1a66/0x1f30 [ 44.618246][ C2] ? __pfx_slcan_receive_buf+0x10/0x10 [ 44.619882][ C2] ? ldsem_down_read_trylock+0x115/0x190 [ 44.621768][ C2] ? ldsem_down_read_trylock+0x11b/0x190 [ 44.623441][ C2] ? __pfx_ldsem_down_read_trylock+0x10/0x10 [ 44.625260][ C2] ? __pfx_slcan_receive_buf+0x10/0x10 [ 44.626850][ C2] tty_ldisc_receive_buf+0x15a/0x1a0 [ 44.628382][ C2] tty_port_default_receive_buf+0x70/0xb0 [ 44.630044][ C2] flush_to_ldisc+0x26b/0x730 [ 44.631432][ C2] ? process_one_work+0x906/0x1b10 [ 44.632951][ C2] process_one_work+0xac7/0x1b10 [ 44.634412][ C2] ? __pfx_process_one_work+0x10/0x10 [ 44.636044][ C2] ? lock_acquire+0x1d1/0x380 [ 44.637422][ C2] ? __pfx_flush_to_ldisc+0x10/0x10 [ 44.638971][ C2] worker_thread+0x5ef/0xe50 [ 44.640323][ C2] ? kthread+0x13a/0x450 [ 44.641563][ C2] ? __pfx_worker_thread+0x10/0x10 [ 44.643069][ C2] kthread+0x373/0x450 [ 44.644245][ C2] ? __pfx_kthread+0x10/0x10 [ 44.645649][ C2] ret_from_fork+0x730/0xd60 [ 44.646990][ C2] ? __pfx_ret_from_fork+0x10/0x10 [ 44.648471][ C2] ? __switch_to+0x800/0x10f0 [ 44.649863][ C2] ? __pfx_kthread+0x10/0x10 [ 44.651284][ C2] ret_from_fork_asm+0x1a/0x30 [ 44.652705][ C2] [ 44.653622][ C2] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 44.655746][ C2] CPU: 2 UID: 0 PID: 1163 Comm: kworker/u33:9 Not tainted syzkaller #0 PREEMPT(full) [ 44.658426][ C2] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 44.661353][ C2] Workqueue: events_unbound flush_to_ldisc [ 44.662952][ C2] Call Trace: [ 44.664015][ C2] [ 44.664970][ C2] dump_stack_lvl+0x100/0x190 [ 44.666587][ C2] vpanic+0x553/0x970 [ 44.668043][ C2] ? __pfx_vpanic+0x10/0x10 [ 44.669700][ C2] panic+0xd1/0xe0 [ 44.671076][ C2] ? __pfx_panic+0x10/0x10 [ 44.672712][ C2] check_panic_on_warn.cold+0x19/0x34 [ 44.674648][ C2] ? __netif_receive_skb_core.constprop.0+0x1706/0x3530 [ 44.677127][ C2] __warn.cold+0x191/0x318 [ 44.678454][ C2] __report_bug+0x30f/0x440 [ 44.679806][ C2] ? __netif_receive_skb_core.constprop.0+0x1706/0x3530 [ 44.681817][ C2] ? __pfx___report_bug+0x10/0x10 [ 44.683290][ C2] ? lock_acquire+0x1d1/0x380 [ 44.684651][ C2] ? unwind_next_frame+0xbd/0x2090 [ 44.686131][ C2] ? find_held_lock+0x2b/0x80 [ 44.687512][ C2] ? unwind_next_frame+0x3be/0x2090 [ 44.689033][ C2] ? unwind_next_frame+0x3be/0x2090 [ 44.690549][ C2] ? __netif_receive_skb_core.constprop.0+0x1706/0x3530 [ 44.692576][ C2] report_bug+0xb3/0x220 [ 44.693821][ C2] ? __netif_receive_skb_core.constprop.0+0x1706/0x3530 [ 44.695835][ C2] handle_bug+0x16a/0x2a0 [ 44.697105][ C2] exc_invalid_op+0x17/0x50 [ 44.698443][ C2] asm_exc_invalid_op+0x1a/0x20 [ 44.699877][ C2] RIP: 0010:__netif_receive_skb_core.constprop.0+0x1706/0x3530 [ 44.702041][ C2] Code: de 4c 8b bc 24 e8 00 00 00 e8 86 f7 6b f8 85 db 0f 88 11 f2 ff ff 31 db 4d 8d af 81 00 00 00 e9 01 ed ff ff e8 fb fc 6b f8 90 <0f> 0b 90 31 db e9 43 eb ff ff e8 eb fc 6b f8 e8 66 af 4f f8 31 ff [ 44.707501][ C2] RSP: 0018:ffffc90000658990 EFLAGS: 00010246 [ 44.709256][ C2] RAX: 0000000000000000 RBX: 0000000000000040 RCX: 0000000000000101 [ 44.711537][ C2] RDX: ffff88802a1e8000 RSI: ffffffff89a02015 RDI: ffff88802a1e8000 [ 44.713837][ C2] RBP: 000000000000ffff R08: 0000000000000003 R09: 000000000000ffff [ 44.716124][ C2] R10: 000000000000ffff R11: 0000000000000001 R12: ffff888036e44140 [ 44.718385][ C2] R13: ffffc90000658c10 R14: ffff888036e44140 R15: ffff888036e44140 [ 44.720661][ C2] ? __netif_receive_skb_core.constprop.0+0x1705/0x3530 [ 44.722668][ C2] ? lockdep_hardirqs_on+0x7d/0x110 [ 44.724179][ C2] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 44.725855][ C2] ? stack_depot_save_flags+0x49a/0x9f0 [ 44.727447][ C2] ? kasan_save_stack+0x3f/0x50 [ 44.728870][ C2] ? kasan_save_stack+0x30/0x50 [ 44.730285][ C2] ? kasan_save_track+0x14/0x30 [ 44.731735][ C2] ? kasan_save_free_info+0x3b/0x70 [ 44.733229][ C2] ? __pfx___netif_receive_skb_core.constprop.0+0x10/0x10 [ 44.735270][ C2] ? napi_consume_skb+0x2cd/0x320 [ 44.736734][ C2] ? skb_defer_free_flush+0x1f1/0x290 [ 44.738261][ C2] ? net_rx_action+0x3ca/0xf20 [ 44.739656][ C2] ? handle_softirqs+0x1e6/0x9d0 [ 44.741093][ C2] ? do_softirq+0xaf/0xf0 [ 44.742357][ C2] ? netif_rx+0x93/0xb0 [ 44.743704][ C2] ? slcan_receive_buf+0x1a66/0x1f30 [ 44.745272][ C2] ? tty_ldisc_receive_buf+0x15a/0x1a0 [ 44.746880][ C2] ? tty_port_default_receive_buf+0x70/0xb0 [ 44.748610][ C2] ? flush_to_ldisc+0x26b/0x730 [ 44.750024][ C2] ? process_one_work+0xac7/0x1b10 [ 44.751520][ C2] ? worker_thread+0x5ef/0xe50 [ 44.752940][ C2] ? kthread+0x373/0x450 [ 44.754184][ C2] ? ret_from_fork+0x730/0xd60 [ 44.755598][ C2] ? ret_from_fork_asm+0x1a/0x30 [ 44.757052][ C2] ? __lock_acquire+0x5c0/0x1f40 [ 44.758488][ C2] ? process_backlog+0x437/0x1600 [ 44.759938][ C2] __netif_receive_skb_one_core+0xb0/0x1e0 [ 44.761654][ C2] ? __pfx___netif_receive_skb_one_core+0x10/0x10 [ 44.763575][ C2] ? lock_acquire+0x1d1/0x380 [ 44.765206][ C2] ? process_backlog+0x437/0x1600 [ 44.766615][ C2] ? process_backlog+0x437/0x1600 [ 44.768046][ C2] __netif_receive_skb+0x1f/0x120 [ 44.769435][ C2] process_backlog+0x487/0x1600 [ 44.770794][ C2] __napi_poll.constprop.0+0xaf/0x450 [ 44.772305][ C2] net_rx_action+0xa40/0xf20 [ 44.773638][ C2] ? __pfx_net_rx_action+0x10/0x10 [ 44.775113][ C2] ? clockevents_shutdown+0x190/0x1f0 [ 44.776647][ C2] ? kvm_sched_clock_read+0x11/0x20 [ 44.778135][ C2] ? kvm_sched_clock_read+0x11/0x20 [ 44.779593][ C2] ? sched_clock+0x3a/0x60 [ 44.780859][ C2] ? sched_clock_cpu+0x6c/0x570 [ 44.782573][ C2] ? mark_held_locks+0x40/0x70 [ 44.784217][ C2] handle_softirqs+0x1e6/0x9d0 [ 44.785878][ C2] ? __pfx_handle_softirqs+0x10/0x10 [ 44.787674][ C2] ? __pfx_handle_softirqs+0x10/0x10 [ 44.789482][ C2] ? __hrtimer_rearm_deferred+0x9b/0x7b0 [ 44.791444][ C2] ? netif_rx+0x65/0xb0 [ 44.792860][ C2] do_softirq+0xaf/0xf0 [ 44.794295][ C2] [ 44.795351][ C2] [ 44.796368][ C2] __local_bh_enable_ip+0xff/0x120 [ 44.798116][ C2] ? netif_rx+0x65/0xb0 [ 44.799495][ C2] netif_rx+0x93/0xb0 [ 44.800672][ C2] slcan_receive_buf+0x1a66/0x1f30 [ 44.802233][ C2] ? __pfx_slcan_receive_buf+0x10/0x10 [ 44.803782][ C2] ? ldsem_down_read_trylock+0x115/0x190 [ 44.805594][ C2] ? ldsem_down_read_trylock+0x11b/0x190 [ 44.807437][ C2] ? __pfx_ldsem_down_read_trylock+0x10/0x10 [ 44.809137][ C2] ? __pfx_slcan_receive_buf+0x10/0x10 [ 44.810955][ C2] tty_ldisc_receive_buf+0x15a/0x1a0 [ 44.812550][ C2] tty_port_default_receive_buf+0x70/0xb0 [ 44.814145][ C2] flush_to_ldisc+0x26b/0x730 [ 44.815509][ C2] ? process_one_work+0x906/0x1b10 [ 44.816971][ C2] process_one_work+0xac7/0x1b10 [ 44.818404][ C2] ? __pfx_process_one_work+0x10/0x10 [ 44.819962][ C2] ? lock_acquire+0x1d1/0x380 [ 44.821289][ C2] ? __pfx_flush_to_ldisc+0x10/0x10 [ 44.822765][ C2] worker_thread+0x5ef/0xe50 [ 44.824068][ C2] ? kthread+0x13a/0x450 [ 44.825501][ C2] ? __pfx_worker_thread+0x10/0x10 [ 44.827289][ C2] kthread+0x373/0x450 [ 44.828647][ C2] ? __pfx_kthread+0x10/0x10 [ 44.830189][ C2] ret_from_fork+0x730/0xd60 [ 44.831826][ C2] ? __pfx_ret_from_fork+0x10/0x10 [ 44.833515][ C2] ? __switch_to+0x800/0x10f0 [ 44.835074][ C2] ? __pfx_kthread+0x10/0x10 [ 44.836413][ C2] ret_from_fork_asm+0x1a/0x30 [ 44.837798][ C2] [ 44.839280][ C2] Kernel Offset: disabled [ 44.840648][ C2] Rebooting in 86400 seconds..