last executing test programs: 47.413962399s ago: executing program 0 (id=1): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, &(0x7f00000001c0)="ad", 0x1) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)=ANY=[@ANYBLOB="140000fba000010324d770b40102fd"], 0x14}, 0x1, 0x0, 0x0, 0x4044014}, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_VCPU_EVENTS(r2, 0x4040aea0, &(0x7f0000000000)=@x86={0x52, 0x5, 0x2, 0x0, 0xfffffffc, 0x1, 0x5, 0x7f, 0x7, 0x3, 0x1, 0x1, 0x0, 0x401, 0x5, 0x5a, 0xdb, 0x8, 0x2, '\x00', 0x2, 0x5}) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000c40)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x20, 0x20, 0x5, [@enum={0x3, 0x1, 0x0, 0xf, 0x4, [{0xa}]}, @struct={0x4}]}, {0x0, [0x0, 0x0, 0x61]}}, 0x0, 0x3d, 0x0, 0x1}, 0x28) ioctl$KVM_RUN(r2, 0xae80, 0x0) r3 = syz_open_dev$video(&(0x7f0000000440), 0xb, 0x0) ioctl$VIDIOC_G_FMT(r3, 0xc0d05604, &(0x7f0000000000)={0xa, @sliced={0x6, [0x372, 0x0, 0x1, 0x3, 0x3, 0x8, 0x7, 0x5, 0x4, 0x1, 0x8, 0x91cb, 0x6, 0x200, 0x5, 0x7, 0x6, 0x3, 0x4, 0x6, 0xa0c, 0x514d, 0x2, 0x8, 0xdb51, 0x9, 0xfff, 0x4, 0xd0, 0x3, 0x3, 0xfff8, 0xd83, 0x8000, 0x6, 0xb, 0xfffc, 0x6, 0x4, 0xff6a, 0x24, 0x0, 0x3d7d, 0xfff2, 0x7, 0x7ce, 0x30, 0x9], 0x2}}) 46.408527828s ago: executing program 0 (id=12): prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0xffffffffffffffff}, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x101042, 0x15) mkdirat(0xffffffffffffff9c, &(0x7f00000002c0)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000001500)='./dev\x00', &(0x7f0000001600)='devtmpfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./mnt\x00', 0x0) mount(&(0x7f00000000c0)=@filename='./dev/sda1\x00', &(0x7f0000000140)='./mnt\x00', &(0x7f00000001c0)='ext4\x00', 0x8410, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuset.memory_pressure\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000000), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xa, 0x28011, r0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x84042, 0x1fa) write$P9_RUNLINKAT(r1, &(0x7f0000000000)={0xfffffffffffffecb, 0x4d, 0x1}, 0xffffffd7) 43.579017641s ago: executing program 0 (id=21): r0 = socket(0xa, 0x3, 0xff) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e21, 0x10000002, @ipv4={'\x00', '\xff\xff', @empty}, 0x800100}, 0x1c) syz_emit_ethernet(0xbe, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaaaa0180c200000d000000000000000000000011977864010101ac1414bb80004e20009c907801000000000000007b4b143b7461fd777b1c012bd14efb9f49fcdb8f080c26a04883ad5c8c82b8af584cbf2649a50f2dbc43ef16938dfa871c51852e4451b57d037ad3c045942824254dbcfd56"], 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000500)={0x6, 0x179, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000200)={0x6, 0x3, &(0x7f0000000440)=ANY=[], 0x0, 0x7, 0x0, 0x0, 0x40f00, 0x5, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x200}, 0x94) r2 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_int(r2, 0x29, 0x31, &(0x7f0000000040)=0x7, 0x4) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) socket(0x22, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) getpid() openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000300), 0x103000, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) r3 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r3, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r4 = fsopen(&(0x7f0000000280)='ceph\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r4, 0x1, &(0x7f0000000b40)='source', 0x0, 0x0) r5 = gettid() fsconfig$FSCONFIG_CMD_CREATE(r4, 0x6, 0x0, 0x0, 0x0) tkill(r5, 0xb) r6 = fsopen(&(0x7f0000000080)='binder\x00', 0x0) prlimit64(0x0, 0x7, &(0x7f0000000040)={0x0, 0x100}, 0x0) fsconfig$FSCONFIG_CMD_CREATE(r6, 0x6, 0x0, 0x0, 0x0) 38.820726016s ago: executing program 0 (id=29): r0 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000680)=[@in={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x2d}}, @in={0x2, 0x4e24, @local}, @in={0x2, 0x4e24, @remote}, @in={0x2, 0x4e22, @initdev={0xac, 0x1e, 0x0, 0x0}}], 0x40) 38.30894098s ago: executing program 0 (id=31): r0 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000100), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$WG_CMD_SET_DEVICE(r1, &(0x7f0000000d00)={0x0, 0x0, &(0x7f0000000cc0)={&(0x7f0000000a40)=ANY=[@ANYBLOB="1c020000", @ANYRES16=r0, @ANYBLOB="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"], 0x21c}, 0x1, 0x0, 0x0, 0x20040010}, 0x4008804) 38.068777109s ago: executing program 0 (id=33): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000001c0)={'batadv0\x00'}) socket$rds(0x15, 0x5, 0x0) syz_open_pts(0xffffffffffffffff, 0x81) syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) r2 = socket(0xa, 0x1, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r4 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x101041) write$sndseq(r4, &(0x7f00000006c0)=[{0xe, 0x0, 0x0, 0xfd, @time={0x3, 0x3}, {0xff}, {0xe}, @raw8={"1f000e0000000100"}}], 0x1c) socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000340)={'lo\x00', 0x0}) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=ANY=[@ANYBLOB="300000001c00070c2bbd70000000000002000000", @ANYRES32=r5, @ANYBLOB="4000100a14000100009a"], 0x30}, 0x1, 0x0, 0x0, 0x40000}, 0x20024090) openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x200080c5}, 0x10) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000300)='./binderfs/binder0\x00', 0x0, 0x0) r7 = syz_open_dev$I2C(&(0x7f0000000380), 0x3, 0x400000) ioctl$I2C_PEC(r7, 0x708, 0x4) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000023c0)=ANY=[@ANYBLOB="300000001000010025bd7076af00fddbdf250000", @ANYRES32=0x0, @ANYBLOB="001004000100000008001b000000000008000d0080000000"], 0x30}, 0x1, 0x0, 0x0, 0x24040051}, 0x24008080) 22.66454212s ago: executing program 32 (id=33): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000001c0)={'batadv0\x00'}) socket$rds(0x15, 0x5, 0x0) syz_open_pts(0xffffffffffffffff, 0x81) syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) r2 = socket(0xa, 0x1, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r4 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x101041) write$sndseq(r4, &(0x7f00000006c0)=[{0xe, 0x0, 0x0, 0xfd, @time={0x3, 0x3}, {0xff}, {0xe}, @raw8={"1f000e0000000100"}}], 0x1c) socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000340)={'lo\x00', 0x0}) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=ANY=[@ANYBLOB="300000001c00070c2bbd70000000000002000000", @ANYRES32=r5, @ANYBLOB="4000100a14000100009a"], 0x30}, 0x1, 0x0, 0x0, 0x40000}, 0x20024090) openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x200080c5}, 0x10) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000300)='./binderfs/binder0\x00', 0x0, 0x0) r7 = syz_open_dev$I2C(&(0x7f0000000380), 0x3, 0x400000) ioctl$I2C_PEC(r7, 0x708, 0x4) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000023c0)=ANY=[@ANYBLOB="300000001000010025bd7076af00fddbdf250000", @ANYRES32=0x0, @ANYBLOB="001004000100000008001b000000000008000d0080000000"], 0x30}, 0x1, 0x0, 0x0, 0x24040051}, 0x24008080) 5.368017579s ago: executing program 2 (id=116): r0 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r0, 0xc01064b5, &(0x7f0000000140)={&(0x7f0000000040)=[0x0], 0x1}) ioctl$DRM_IOCTL_MODE_GETPLANE(r0, 0xc02064b6, &(0x7f00000001c0)={r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_OBJ_GETPROPERTIES(r0, 0xc02064b9, &(0x7f00000002c0)={&(0x7f0000000240)=[0x0, 0x0, 0x0], &(0x7f0000000040), 0x3, r2}) ioctl$DRM_IOCTL_MODE_ATOMIC(r0, 0xc03864bc, &(0x7f0000000580)={0x401, 0x1, &(0x7f0000000180)=[r2], &(0x7f00000000c0)=[0x3], &(0x7f0000000640)=[r4, r3, r3], &(0x7f0000000340), 0x0, 0xffffffffffffffff}) 4.99713867s ago: executing program 2 (id=119): r0 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, 0x0, 0x0) 4.617571054s ago: executing program 2 (id=120): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./gadget\x00', 0x1ff) mount(0x0, &(0x7f0000000100)='./gadget\x00', &(0x7f0000000200)='gadgetfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./gadget/dummy_udc\x00', 0x2, 0x0) write(r0, &(0x7f0000000400)="0000000009020900010100803212010002000000402505a0a4000100000001", 0x1f) read(r0, &(0x7f0000000900), 0x100) read(r0, 0x0, 0x0) read(r0, 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./gadget/ep1in-bulk\x00', 0x2, 0x0) write(r1, &(0x7f0000000700)="010000000705810240000007058102000200", 0x12) write(r1, 0x0, 0x0) openat(0xffffffffffffff9c, 0x0, 0x42, 0x0) read$FUSE(0xffffffffffffffff, 0x0, 0x0) syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, 0x0) 4.2336625s ago: executing program 3 (id=121): close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) getsockopt$inet6_mptcp_buf(r0, 0x11c, 0x3, &(0x7f0000000100)=""/222, &(0x7f0000000000)=0x80fe) 4.05636756s ago: executing program 2 (id=122): bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xd, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB], &(0x7f0000000000)='GPL\x00'}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xb3d68000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./tracing\x00', 0x1fe) mount(0x0, &(0x7f0000000040)='./tracing\x00', &(0x7f0000000080)='tracefs\x00', 0x0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./tracing/dynamic_events\x00', 0x1, 0x0) write(r3, &(0x7f0000000100)='e:my_read_msr1 ', 0xf) mkdirat(0xffffffffffffff9c, 0x0, 0x4) mount(0x0, &(0x7f0000000080)='./proc\x00', 0x0, 0x0, 0x0) r4 = openat(0xffffffffffffff9c, 0x0, 0x159640, 0x11e) ioctl$SNAPSHOT_CREATE_IMAGE(r4, 0x40043311, &(0x7f0000000180)) write(r4, &(0x7f0000000000)='7', 0x1) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r5, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=ANY=[@ANYBLOB="f80000001600010000000000000000000a010101000000000000000000000600000000000000000000000000000077010000000000000000000080a0f1000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="fe8000000000000000000000000000200000000033000000fe80000000000000000000000000000e0000000000000000000000000000000000000000000000000000000000000000ffffffffffffffffedffffffffffffff03000000000000000000000000000000000000000000000000000000000000000200000000000000fefffffffffffbff000000000000000096070000000000000000000000000002bc0000000000000000000000b0a00100"], 0xf8}, 0x1, 0x0, 0x0, 0x40040}, 0x0) sendmsg$nl_xfrm(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[], 0x120}}, 0x0) r6 = syz_open_procfs(0x0, &(0x7f0000000040)='net/udp6\x00') read$FUSE(r6, 0x0, 0x0) pread64(r6, &(0x7f0000000080)=""/195, 0xc3, 0x591f) 3.949394158s ago: executing program 3 (id=123): mkdir(&(0x7f0000000000)='./config\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./config\x00', &(0x7f0000000040)='configfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./backing_file\x00', 0x42, 0x1ff) ftruncate(r0, 0x200000) r1 = syz_open_dev$loop(&(0x7f00000000c0), 0x0, 0x2) ioctl$LOOP_SET_FD(r1, 0x4c00, r0) dup2(r1, 0x3) mkdir(&(0x7f0000000100)='./config/cluster/ocfs2\x00', 0x1ff) mkdir(&(0x7f0000000140)='./config/cluster/ocfs2/node/node0\x00', 0x1ff) r2 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./config/cluster/ocfs2/node/node0/ipv4_address\x00', 0x1, 0x0) write(r2, &(0x7f00000001c0)='127.0.0.1', 0x9) r3 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./config/cluster/ocfs2/node/node0/ipv4_port\x00', 0x1, 0x0) write(r3, &(0x7f0000000240)='7777\n', 0x5) close(r3) r4 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./config/cluster/ocfs2/node/node0/num\x00', 0x1, 0x0) write(r4, &(0x7f00000002c0)='0', 0x1) r5 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./config/cluster/ocfs2/node/node0/local\x00', 0x1, 0x0) write(r5, &(0x7f0000000340)='1\n', 0x2) close(r5) mkdir(&(0x7f0000000380)='./config/cluster/ocfs2/heartbeat/hb0\x00', 0x1ff) r6 = openat(0xffffffffffffff9c, &(0x7f00000003c0)='./config/cluster/ocfs2/heartbeat/hb0/block_bytes\x00', 0x1, 0x0) write(r6, &(0x7f0000000400)='512\n', 0x4) close(r6) r7 = openat(0xffffffffffffff9c, 0x0, 0x1, 0x0) write(r7, &(0x7f0000000480)='1\n', 0x2) r8 = openat(0xffffffffffffff9c, &(0x7f00000004c0)='./config/cluster/ocfs2/heartbeat/hb0/blocks\x00', 0x1, 0x0) write(r8, &(0x7f0000000500)='2', 0x1) close(r8) r9 = openat(0xffffffffffffff9c, &(0x7f0000000540)='./config/cluster/ocfs2/heartbeat/hb0/dev\x00', 0x1, 0x0) write(r9, &(0x7f0000000580)='3\n', 0x2) close(r9) mkdir(&(0x7f00000005c0)='./dlmfs\x00', 0x1ff) mkdir(&(0x7f0000000640)='./dlmfs/domain0\x00', 0x1ff) 3.833161121s ago: executing program 3 (id=124): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./config\x00', &(0x7f0000000040)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./config/usb_gadget/g1\x00', 0x1ff) write(0xffffffffffffffff, &(0x7f00000001c0)='0x0104', 0x6) r0 = openat(0xffffffffffffff9c, 0x0, 0x1, 0x0) write(r0, &(0x7f0000000240)='0x0200\n', 0x7) openat(0xffffffffffffff9c, &(0x7f0000000280)='./config/usb_gadget/g1/bcdDevice\x00', 0x1, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000300)='./config/usb_gadget/g1/strings/0x409\x00', 0x1ff) write(0xffffffffffffffff, &(0x7f0000000380)='0123456789\n', 0xb) 3.432930913s ago: executing program 3 (id=126): pipe2(0x0, 0x4080) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) syz_ublk_setup_io_uring(0x20, &(0x7f0000000040)={0x0, 0x2, 0x1000, 0xffffffff}, 0x0, 0x0, 0x0) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="5800000002060102000034e40000000004000008050005000a000000050001000600000005000400000000000900020073797a310000000011000300686173683a69702c706f727400001f000c00078008000640"], 0x58}, 0x1, 0x0, 0x0, 0x81}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x5c, 0x9, 0x6, 0x201, 0x0, 0x0, {0x2}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x34, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0x18, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV6={0x14, 0x2, 0x1, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}}, @IPSET_ATTR_PORT={0x6, 0x4, 0x1, 0x0, 0x4}, @IPSET_ATTR_PROTO={0x5, 0x7, 0x6}, @IPSET_ATTR_PORT_TO={0x6, 0x5, 0x1, 0x0, 0x4622}]}]}, 0x5c}, 0x1, 0x0, 0x0, 0x10000082}, 0x80) 2.632470159s ago: executing program 2 (id=131): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_unlabel(0x0, r0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x6, 0x0, 0x0) bpf$MAP_DELETE_BATCH(0x18, 0x0, 0x0) mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x200000e, 0x401d031, 0xffffffffffffffff, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./proc_mnt\x00', 0x1ff) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./proc_mnt/kcore\x00', 0x0, 0x0) readv(r2, &(0x7f0000000240)=[{0x0, 0x7002}, {&(0x7f0000000140)=""/222, 0xde}], 0x2) 1.940800622s ago: executing program 4 (id=133): ioctl$DRM_IOCTL_SET_CLIENT_CAP(0xffffffffffffffff, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(0xffffffffffffffff, 0xc01064b5, &(0x7f0000000140)={&(0x7f0000000040)=[0x0], 0x1}) ioctl$DRM_IOCTL_MODE_GETPLANE(0xffffffffffffffff, 0xc02064b6, &(0x7f00000001c0)={r0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_OBJ_GETPROPERTIES(0xffffffffffffffff, 0xc02064b9, &(0x7f00000002c0)={&(0x7f0000000240)=[0x0, 0x0, 0x0], &(0x7f0000000040), 0x3, r1}) ioctl$DRM_IOCTL_MODE_ATOMIC(0xffffffffffffffff, 0xc03864bc, &(0x7f0000000580)={0x401, 0x1, &(0x7f0000000180)=[r1], &(0x7f00000000c0)=[0x3], &(0x7f0000000640)=[r3, r2, r2], &(0x7f0000000340), 0x0, 0xffffffffffffffff}) 1.708864224s ago: executing program 4 (id=134): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./config\x00', &(0x7f0000000040)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./config/cluster/ocfs2\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./config/cluster/ocfs2/node/node0\x00', 0x1ff) r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./config/cluster/ocfs2/node/node0/ipv4_address\x00', 0x2, 0x0) write(r0, &(0x7f00000001c0)='127.0.0.1\n', 0xa) mkdirat(0xffffffffffffff9c, &(0x7f0000000380)='./config/cluster/ocfs2/node/node1\x00', 0x1ff) r1 = openat(0xffffffffffffff9c, &(0x7f00000003c0)='./config/cluster/ocfs2/node/node1/ipv4_address\x00', 0x2, 0x0) write(r1, &(0x7f0000000400)='127.0.0.2', 0x9) 1.57919847s ago: executing program 4 (id=135): syz_open_procfs(0x0, &(0x7f0000000000)='net/raw\x00') mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1000003, 0x13, 0xffffffffffffffff, 0x0) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, 0x0, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000280)={0xa, 0x4e22, 0x9, @loopback, 0x6}, 0x1c) connect$inet6(r0, &(0x7f0000000140)={0xa, 0x4e22, 0x56202329, @empty, 0x4000005}, 0x1c) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)=@newsa={0x158, 0x10, 0x5, 0x1, 0x25dfdbfd, {{@in6=@loopback, @in6=@loopback, 0x0, 0x0, 0x0, 0x0, 0xa, 0x80, 0x80, 0x0, 0x0, 0x80}, {@in6=@loopback, 0x1234, 0x33}, @in6=@loopback, {0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff}, {}, {}, 0x0, 0x0, 0xa, 0x0, 0x0, 0x80}, [@algo_auth={0x48, 0x1, {{'hmac(sha1)\x00'}}}, @replay_esn_val={0x20, 0x17, {0x1, 0x0, 0x0, 0x0, 0x0, 0x20, [0x0]}}]}, 0x158}}, 0x0) sendmsg$nl_xfrm(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000500)=@newpolicy={0xfc, 0x13, 0x5, 0x1, 0x0, {{@in6=@loopback, @in6=@loopback, 0x0, 0x0, 0x0, 0x0, 0xa, 0x80, 0x80}, {0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff}, {}, 0x0, 0x0, 0x1}, [@tmpl={0x44, 0x5, [{{@in6=@loopback, 0x1234, 0x33}, 0xa, @in6=@loopback}]}]}, 0xfc}}, 0x0) sendmmsg$inet6(r0, &(0x7f0000001880)=[{{0x0, 0x0, &(0x7f0000001b40)=[{&(0x7f0000000600)="f858a5735380d1344f7eb8dc64f33cee41d507fe47d717e07a7a6f4608da403a07f261e05be4e40abf8468e286855d9074d179ed", 0x34}, {0x0}, {&(0x7f0000000740)}], 0x3, &(0x7f0000001d00)=[@dstopts={{0x18}}, @pktinfo={{0x24, 0x29, 0x32, {@private0={0xfc, 0x0, '\x00', 0x1}}}}, @rthdr_2292={{0x28, 0x29, 0x39, {0x3c, 0x2, 0x2, 0xff, 0x0, [@local]}}}], 0x68}}, {{0x0, 0x0, 0x0}}], 0x2, 0xc005891) 1.4435628s ago: executing program 1 (id=136): r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000000)={0x4800}, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000240)={0x0, 0xffffffffffffff4a, &(0x7f0000000200)={&(0x7f0000000080)={0x18, 0x16, 0xa01}, 0x78}}, 0x0) 1.353340891s ago: executing program 4 (id=137): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./dev\x00', &(0x7f00000000c0)='devtmpfs\x00', 0x0, 0x0) ftruncate(0xffffffffffffffff, 0x1000000) syz_open_dev$loop(&(0x7f0000000140), 0x2, 0x2) r0 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./dev/mapper/control\x00', 0x2, 0x0) write(r0, &(0x7f0000000438)="000000000000000000800000000000000000000000000000636163686500000000000000373a3020373a3120373a3220363420302064656661756c74203000", 0x43) ioctl(r0, 0xc138fd09, &(0x7f0000000300)="0400000000000000000000007c01000038010000010000000000000000000000000000000000000000000000000000006364657600") 1.243013934s ago: executing program 1 (id=138): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./config\x00', &(0x7f0000000040)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./config/usb_gadget/g1\x00', 0x1ff) write(0xffffffffffffffff, 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f00000004c0)='./config/usb_gadget/g1/UDC\x00', 0x2, 0x0) 1.081824349s ago: executing program 1 (id=139): r0 = syz_open_dev$admmidi(&(0x7f0000000140), 0x2, 0x2002) ioctl$SNDRV_RAWMIDI_IOCTL_PARAMS(r0, 0xc0305710, &(0x7f0000000440)={0x1, 0x7f, 0x2, 0x1, 0x10001000}) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x80383, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040), 0x14e203, 0x0) 1.081200014s ago: executing program 4 (id=140): syz_genetlink_get_family_id$mptcp(0x0, 0xffffffffffffffff) r0 = socket$inet_mptcp(0x2, 0x1, 0x106) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e22, @loopback}, 0x10) listen(r0, 0x5) r1 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r1, &(0x7f0000000000)={0x2, 0x4e22, @loopback}, 0x10) write(r1, &(0x7f0000000300)='A', 0x1) r2 = accept(r0, 0x0, 0x0) read(r2, &(0x7f0000000380), 0x1) close(r2) 952.568924ms ago: executing program 1 (id=141): prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0xffffffffffffffff}, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x101042, 0x15) mkdirat(0xffffffffffffff9c, &(0x7f00000002c0)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000001500)='./dev\x00', &(0x7f0000001600)='devtmpfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./mnt\x00', 0x0) mount(&(0x7f00000000c0)=@filename='./dev/sda1\x00', &(0x7f0000000140)='./mnt\x00', &(0x7f00000001c0)='ext4\x00', 0x8410, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuset.memory_pressure\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xa, 0x28011, r0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x84042, 0x1fa) write$P9_RUNLINKAT(r1, &(0x7f0000000000)={0xfffffffffffffecb, 0x4d, 0x1}, 0xffffffd7) 862.583121ms ago: executing program 4 (id=142): ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000340)={'wlan1\x00'}) socket$kcm(0x21, 0x2, 0x2) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={&(0x7f0000000080)=@in6={0xa, 0x4e24, 0xfffff001, @private0={0xfc, 0x0, '\x00', 0x1}, 0x78}, 0x80, &(0x7f0000000140), 0x0, &(0x7f0000001a00)=ANY=[@ANYBLOB="180000000000000010010000010000007d95df16a39b1a6c900000000000000001000000040500002b24ec10064b6f2f000000fb718aef932f3889d1fdda5b57000000860f5878c37ffe36e1165814d435be5b317c6c8189587d2f97879f07a515bb7c169f46933d9338f4ab04834e6f618988ab013f40afe403041323110f62055394412158e7a3adb148d641aa40d4ab077fe342"], 0x10b8}, 0x0) r0 = syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000740)={{0x12, 0x1, 0x110, 0x0, 0x0, 0x0, 0x40, 0x17ef, 0x6047, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0xff, 0x50, 0x9, "", [{{0x9, 0x4, 0x0, 0xd, 0x2, 0x3, 0x1, 0x2, 0x0, {0x9, 0x21, 0x1, 0x5, 0x1, {0x22, 0xfb1}}, {{{0x9, 0x5, 0x81, 0x3, 0x8, 0x3, 0xe0, 0x60}}}}}]}}]}}, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$lan78xx(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) landlock_create_ruleset(&(0x7f0000000080)={0xc0d8, 0x1, 0x3, 0x0, 0x0, 0x1}, 0x30, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r1 = getpgrp(0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x200000000001, 0x0, 0x2, 0x0) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000080)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) mkdirat(0xffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000040)='sysfs\x00', 0x0, 0x0) r3 = openat(0xffffff9c, &(0x7f0000000080)='./sys/module/zswap/parameters/compressor\x00', 0x2, 0x0) write(r3, &(0x7f0000000200)='zstd', 0x4) r4 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r4, 0x1, 0x0) r5 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r5, &(0x7f0000019680)=""/102392, 0x18ff8) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) 716.808113ms ago: executing program 3 (id=143): ioctl$DRM_IOCTL_SET_CLIENT_CAP(0xffffffffffffffff, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(0xffffffffffffffff, 0xc01064b5, &(0x7f0000000140)={&(0x7f0000000040)=[0x0], 0x1}) ioctl$DRM_IOCTL_MODE_GETPLANE(0xffffffffffffffff, 0xc02064b6, &(0x7f00000001c0)={r0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_OBJ_GETPROPERTIES(0xffffffffffffffff, 0xc02064b9, &(0x7f00000002c0)={&(0x7f0000000240)=[0x0, 0x0, 0x0], &(0x7f0000000040), 0x3, r1}) ioctl$DRM_IOCTL_MODE_ATOMIC(0xffffffffffffffff, 0xc03864bc, &(0x7f0000000580)={0x401, 0x1, &(0x7f0000000180)=[r1], &(0x7f00000000c0)=[0x3], &(0x7f0000000640)=[r3, r2, r2], &(0x7f0000000340), 0x0, 0xffffffffffffffff}) 716.560743ms ago: executing program 1 (id=144): mkdirat$cgroup(0xffffffffffffffff, &(0x7f0000000040)='syz1\x00', 0x1ff) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x28100, 0x0) setsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000000)={@multicast1, @local}, 0xc) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x24, &(0x7f0000000140)={@rand_addr, @initdev}, &(0x7f00000001c0)=0xc) syz_open_procfs(0xffffffffffffffff, &(0x7f00000000c0)='fdinfo/3\x00') ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_NMI(r2, 0xae9a) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000440)={[0x0, 0x100000000, 0x0, 0x7f, 0x100000, 0x0, 0x2004c8, 0x8000000, 0x0, 0x0, 0x7, 0x0, 0x5, 0x8, 0x2, 0xffffffffffffffff], 0x0, 0x200}) openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) ioctl$KVM_GET_MSRS_cpu(0xffffffffffffffff, 0xc008ae88, &(0x7f0000000200)) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380)={[0x101, 0xaec4, 0x6, 0x4004, 0x2, 0x4, 0xefffffffffffffff, 0x0, 0x0, 0x2000000, 0x20000, 0x1c, 0x0, 0x5, 0x1], 0x0, 0x41981}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 569.711881ms ago: executing program 3 (id=145): r0 = socket$kcm(0x23, 0x5, 0x0) listen(r0, 0x800) socket$kcm(0x10, 0x2, 0x0) r1 = socket$phonet_pipe(0x23, 0x5, 0x2) connect$phonet_pipe(r1, &(0x7f0000000040)={0x23, 0x0, 0x58}, 0x10) socket$inet_sctp(0x2, 0x1, 0x84) pselect6(0x40, &(0x7f0000000080)={0xe, 0x9, 0x9, 0x10000000, 0x6, 0x8, 0xc2db, 0x7ff}, 0x0, 0x0, 0x0, 0x0) setsockopt$PNPIPE_ENCAP(r1, 0x113, 0x1, 0x0, 0x0) write(0xffffffffffffffff, &(0x7f0000000200), 0x0) memfd_create(&(0x7f00000001c0)='-@\x00', 0x4) memfd_create(0x0, 0x0) memfd_create(&(0x7f0000000340)='/proc/sys/net/ipv4/vs/expire_quiescent_template\x00', 0x3) ioctl$UDMABUF_CREATE_LIST(0xffffffffffffffff, 0x40087543, 0x0) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) connect$inet(r2, 0x0, 0x0) connect$vsock_stream(0xffffffffffffffff, 0x0, 0x0) 283.159315ms ago: executing program 2 (id=146): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./sys\x00', &(0x7f0000000080)='sysfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000000100)='./dev\x00', &(0x7f0000000140)='devtmpfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./f0\x00', 0x42, 0x180) ftruncate(r0, 0x8000000) r1 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./f1\x00', 0x42, 0x180) ftruncate(r1, 0x8000000) r2 = syz_open_dev$loop(&(0x7f0000000280), 0x0, 0x2) ioctl$LOOP_SET_FD(r2, 0x4c00, r0) r3 = syz_open_dev$loop(&(0x7f00000002c0), 0x1, 0x2) ioctl$LOOP_SET_FD(r3, 0x4c00, r1) r4 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./sys/module/md_mod/parameters/new_array\x00', 0x1, 0x0) write(r4, &(0x7f0000000340)='md0\n', 0x4) r5 = openat(0xffffffffffffff9c, &(0x7f0000000380)='./dev/md0\x00', 0x4002, 0x0) ioctl(r5, 0x40480923, &(0x7f0000000400)="00000000000000000000000000000000010000000000020002000000020000000000000001000000000000000100"/63) ioctl(r5, 0x40140921, &(0x7f0000000480)="0000000007000000000000000000000006000000") ioctl(r5, 0x40140921, &(0x7f00000004a0)="0100000007000000010000000100000006000000") ioctl(r5, 0x400c0930, 0x0) r6 = openat(0xffffffffffffff9c, &(0x7f0000000500)='./sys/block/md0/md/bitmap/location\x00', 0x1, 0x0) write(r6, &(0x7f0000000540)='+8\n', 0x3) nanosleep(&(0x7f0000000700)={0x0, 0x1dcd6500}, 0x0) 0s ago: executing program 1 (id=147): bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) epoll_create1(0x0) openat$sw_sync(0xffffffffffffff9c, 0x0, 0x0, 0x0) openat$sw_sync(0xffffffffffffff9c, 0x0, 0x800, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x42, 0x0) syz_open_dev$sndctrl(&(0x7f0000000440), 0x0, 0x0) syz_open_dev$sndpcmp(&(0x7f00000000c0), 0x0, 0x2882) r1 = socket$inet(0x2b, 0x801, 0x0) setsockopt$IP_VS_SO_SET_ADD(r1, 0x0, 0x48f, &(0x7f00000000c0)={0x1, @private, 0x0, 0x0, 'sed\x00', 0xa, 0xfffffffb, 0x14}, 0x2c) pselect6(0x40, &(0x7f00000001c0)={0x8, 0x0, 0x5, 0xfffffffffffffffd, 0x0, 0x0, 0x7}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0x20000000009, 0x5, 0x0, 0x1, 0x9}, 0x0, 0x0) r2 = socket$netlink(0x10, 0x3, 0xc) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r2, 0x10e, 0x4, &(0x7f0000000140)=0x6, 0x4) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000240)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) close_range(r3, 0xffffffffffffffff, 0x100000000000000) kernel console output (not intermixed with test programs): [ 80.463493][ T43] audit: type=1400 audit(1789741043.200:117): avc: denied { siginh } for pid=5651 comm="sh" scontext=system_u:system_r:sshd_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 81.750667][ T43] audit: type=1400 audit(1789741044.490:118): avc: denied { write } for pid=5656 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 83.280517][ T43] kauditd_printk_skb: 5 callbacks suppressed [ 83.280538][ T43] audit: type=1400 audit(1789741046.020:124): avc: denied { write } for pid=5676 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 83.406953][ T43] audit: type=1400 audit(1789741046.150:125): avc: denied { write } for pid=5679 comm="rm" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 83.590151][ T43] audit: type=1400 audit(1789741046.330:126): avc: denied { write } for pid=5682 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 83.731988][ T43] audit: type=1400 audit(1789741046.470:127): avc: denied { write } for pid=5685 comm="rm" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 83.895313][ T43] audit: type=1400 audit(1789741046.640:128): avc: denied { write } for pid=5688 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 84.021808][ T43] audit: type=1400 audit(1789741046.750:129): avc: denied { write } for pid=5691 comm="rm" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 84.264509][ T43] audit: type=1400 audit(1789741046.990:130): avc: denied { write } for pid=5694 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 84.427441][ T43] audit: type=1400 audit(1789741047.150:131): avc: denied { write } for pid=5697 comm="rm" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 84.612254][ T43] audit: type=1400 audit(1789741047.350:132): avc: denied { write } for pid=5702 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 84.728282][ T43] audit: type=1400 audit(1789741047.470:133): avc: denied { write } for pid=5705 comm="rm" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 Warning: Permanently added '[localhost]:43556' (ED25519) to the list of known hosts. [ 91.670039][ T43] kauditd_printk_skb: 7 callbacks suppressed [ 91.670061][ T43] audit: type=1400 audit(1789741054.410:141): avc: denied { mounton } for pid=5727 comm="syz-executor" path="/syzcgroup/unified" dev="sda1" ino=2022 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1 [ 91.691109][ T5727] cgroup: Unknown subsys name 'net' [ 91.704490][ T43] audit: type=1400 audit(1789741054.430:142): avc: denied { mount } for pid=5727 comm="syz-executor" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 91.748294][ T43] audit: type=1400 audit(1789741054.490:143): avc: denied { unmount } for pid=5727 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 91.878268][ T5727] cgroup: Unknown subsys name 'cpuset' [ 91.897583][ T5727] cgroup: Unknown subsys name 'rlimit' [ 92.110858][ T43] audit: type=1400 audit(1789741054.850:144): avc: denied { setattr } for pid=5727 comm="syz-executor" name="raw-gadget" dev="devtmpfs" ino=848 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 92.112122][ T43] audit: type=1400 audit(1789741054.850:145): avc: denied { create } for pid=5727 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 92.113928][ T43] audit: type=1400 audit(1789741054.850:146): avc: denied { write } for pid=5727 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 92.134277][ T43] audit: type=1400 audit(1789741054.870:147): avc: denied { read } for pid=5727 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 92.177162][ T43] audit: type=1400 audit(1789741054.920:148): avc: denied { mounton } for pid=5727 comm="syz-executor" path="/proc/sys/fs/binfmt_misc" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=dir permissive=1 [ 92.177226][ T43] audit: type=1400 audit(1789741054.920:149): avc: denied { mount } for pid=5727 comm="syz-executor" name="/" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=filesystem permissive=1 [ 92.248952][ T43] audit: type=1400 audit(1789741054.990:150): avc: denied { read } for pid=5448 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=1 [ 92.317204][ T5734] SELinux: Context root:object_r:swapfile_t is not valid (left unmapped). Setting up swapspace version 1, size = 127995904 bytes [ 93.519454][ T1049] cfg80211: failed to load regulatory.db [ 94.199882][ T5727] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 104.525688][ T43] kauditd_printk_skb: 7 callbacks suppressed [ 104.525712][ T43] audit: type=1400 audit(1789741067.220:158): avc: denied { execmem } for pid=5747 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 104.915493][ T43] audit: type=1400 audit(1789741067.660:159): avc: denied { create } for pid=5751 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 104.917415][ T43] audit: type=1400 audit(1789741067.660:160): avc: denied { read write } for pid=5751 comm="syz-executor" name="vhci" dev="devtmpfs" ino=1290 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 104.918241][ T43] audit: type=1400 audit(1789741067.660:161): avc: denied { open } for pid=5751 comm="syz-executor" path="/dev/vhci" dev="devtmpfs" ino=1290 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 104.941075][ T43] audit: type=1400 audit(1789741067.670:162): avc: denied { ioctl } for pid=5751 comm="syz-executor" path="socket:[6439]" dev="sockfs" ino=6439 ioctlcmd=0x48c9 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 104.961905][ T5755] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 104.993850][ T5760] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 104.999996][ T5763] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 105.016949][ T5763] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 105.019690][ T5761] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 105.021968][ T5761] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 105.025051][ T5761] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 105.025860][ T5761] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 105.026168][ T5765] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 105.028014][ T5761] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 105.028813][ T5761] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 105.029400][ T5761] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 105.030761][ T5761] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 105.033885][ T5761] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 105.040824][ T5763] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 105.041605][ T5763] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 105.043189][ T5763] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 105.048340][ T43] audit: type=1400 audit(1789741067.790:163): avc: denied { read } for pid=5754 comm="syz-executor" dev="nsfs" ino=4026531833 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 105.048796][ T43] audit: type=1400 audit(1789741067.790:164): avc: denied { open } for pid=5754 comm="syz-executor" path="net:[4026531833]" dev="nsfs" ino=4026531833 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 105.050611][ T43] audit: type=1400 audit(1789741067.790:165): avc: denied { mounton } for pid=5754 comm="syz-executor" path="/" dev="sda1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:root_t tclass=dir permissive=1 [ 105.057128][ T5760] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 105.061886][ T43] audit: type=1400 audit(1789741067.800:166): avc: denied { module_request } for pid=5754 comm="syz-executor" kmod="netdev-nr0" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1 [ 105.064064][ T5760] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 105.089166][ T68] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 105.171367][ T43] audit: type=1400 audit(1789741067.880:167): avc: denied { sys_module } for pid=5754 comm="syz-executor" capability=16 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 107.001239][ T5754] bridge0: port 1(bridge_slave_0) entered blocking state [ 107.001336][ T5754] bridge0: port 1(bridge_slave_0) entered disabled state [ 107.001455][ T5754] bridge_slave_0: entered allmulticast mode [ 107.004390][ T5754] bridge_slave_0: entered promiscuous mode [ 107.008423][ T5754] bridge0: port 2(bridge_slave_1) entered blocking state [ 107.008497][ T5754] bridge0: port 2(bridge_slave_1) entered disabled state [ 107.008592][ T5754] bridge_slave_1: entered allmulticast mode [ 107.013351][ T5754] bridge_slave_1: entered promiscuous mode [ 107.028814][ T5751] bridge0: port 1(bridge_slave_0) entered blocking state [ 107.028902][ T5751] bridge0: port 1(bridge_slave_0) entered disabled state [ 107.029008][ T5751] bridge_slave_0: entered allmulticast mode [ 107.030239][ T5751] bridge_slave_0: entered promiscuous mode [ 107.068168][ T5751] bridge0: port 2(bridge_slave_1) entered blocking state [ 107.068298][ T5751] bridge0: port 2(bridge_slave_1) entered disabled state [ 107.068414][ T5751] bridge_slave_1: entered allmulticast mode [ 107.070348][ T5751] bridge_slave_1: entered promiscuous mode [ 107.114073][ T5755] Bluetooth: hci0: command tx timeout [ 107.115534][ T5755] Bluetooth: hci1: command tx timeout [ 107.129249][ T5755] Bluetooth: hci2: command tx timeout [ 107.184541][ T5755] Bluetooth: hci3: command tx timeout [ 107.204188][ T5754] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 107.223490][ T5753] bridge0: port 1(bridge_slave_0) entered blocking state [ 107.223572][ T5753] bridge0: port 1(bridge_slave_0) entered disabled state [ 107.223691][ T5753] bridge_slave_0: entered allmulticast mode [ 107.225319][ T5753] bridge_slave_0: entered promiscuous mode [ 107.228736][ T5753] bridge0: port 2(bridge_slave_1) entered blocking state [ 107.231442][ T5753] bridge0: port 2(bridge_slave_1) entered disabled state [ 107.231769][ T5753] bridge_slave_1: entered allmulticast mode [ 107.245101][ T5753] bridge_slave_1: entered promiscuous mode [ 107.263624][ T5754] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 107.294659][ T5756] bridge0: port 1(bridge_slave_0) entered blocking state [ 107.294732][ T5756] bridge0: port 1(bridge_slave_0) entered disabled state [ 107.295020][ T5756] bridge_slave_0: entered allmulticast mode [ 107.296452][ T5756] bridge_slave_0: entered promiscuous mode [ 107.340182][ T5751] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 107.345288][ T5751] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 107.374236][ T5756] bridge0: port 2(bridge_slave_1) entered blocking state [ 107.374326][ T5756] bridge0: port 2(bridge_slave_1) entered disabled state [ 107.374425][ T5756] bridge_slave_1: entered allmulticast mode [ 107.375966][ T5756] bridge_slave_1: entered promiscuous mode [ 107.424570][ T5753] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 107.447072][ T5754] team0: Port device team_slave_0 added [ 107.461599][ T5753] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 107.474844][ T5751] team0: Port device team_slave_0 added [ 107.534581][ T5754] team0: Port device team_slave_1 added [ 107.566095][ T5751] team0: Port device team_slave_1 added [ 107.580707][ T5756] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 107.621686][ T5753] team0: Port device team_slave_0 added [ 107.623861][ T5756] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 107.625595][ T5753] team0: Port device team_slave_1 added [ 107.628054][ T5751] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 107.628069][ T5751] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 107.628091][ T5751] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 107.670294][ T5754] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 107.670309][ T5754] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 107.670327][ T5754] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 107.724463][ T5751] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 107.724488][ T5751] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 107.724510][ T5751] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 107.740891][ T5754] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 107.740909][ T5754] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 107.740932][ T5754] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 107.765219][ T5753] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 107.765237][ T5753] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 107.765260][ T5753] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 107.766858][ T5753] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 107.766872][ T5753] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 107.766891][ T5753] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 107.792698][ T5756] team0: Port device team_slave_0 added [ 107.795136][ T5756] team0: Port device team_slave_1 added [ 107.902036][ T5754] hsr_slave_0: entered promiscuous mode [ 107.903968][ T5754] hsr_slave_1: entered promiscuous mode [ 107.954263][ T5756] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 107.954280][ T5756] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 107.954300][ T5756] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 107.960234][ T5751] hsr_slave_0: entered promiscuous mode [ 107.961139][ T5751] hsr_slave_1: entered promiscuous mode [ 107.962083][ T5751] debugfs: 'hsr0' already exists in 'hsr' [ 107.962183][ T5751] Cannot create hsr debugfs directory [ 107.963607][ T5756] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 107.963623][ T5756] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 107.963649][ T5756] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 108.107690][ T5753] hsr_slave_0: entered promiscuous mode [ 108.108667][ T5753] hsr_slave_1: entered promiscuous mode [ 108.109276][ T5753] debugfs: 'hsr0' already exists in 'hsr' [ 108.109296][ T5753] Cannot create hsr debugfs directory [ 108.260145][ T5756] hsr_slave_0: entered promiscuous mode [ 108.260921][ T5756] hsr_slave_1: entered promiscuous mode [ 108.261646][ T5756] debugfs: 'hsr0' already exists in 'hsr' [ 108.261663][ T5756] Cannot create hsr debugfs directory [ 109.028340][ T5751] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 109.053293][ T5751] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 109.054092][ T5751] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 109.057718][ T5751] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 109.058398][ T5751] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 109.075755][ T5751] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 109.112058][ T5751] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 109.127618][ T5751] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 109.183082][ T5755] Bluetooth: hci0: command tx timeout [ 109.183116][ T5755] Bluetooth: hci2: command tx timeout [ 109.183132][ T5755] Bluetooth: hci1: command tx timeout [ 109.263128][ T5755] Bluetooth: hci3: command tx timeout [ 109.274674][ T5754] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 109.298813][ T5754] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 109.331053][ T5754] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 109.367379][ T5754] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 109.368140][ T5754] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 109.371826][ T5754] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 109.383515][ T5754] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 109.419624][ T5754] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 109.450195][ T5751] 8021q: adding VLAN 0 to HW filter on device bond0 [ 109.508307][ T5753] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 109.515436][ T5753] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 109.516286][ T5753] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 109.521303][ T5753] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 109.591582][ T5753] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 109.625911][ T5753] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 109.631198][ T5753] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 109.653896][ T5753] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 109.657674][ T5751] 8021q: adding VLAN 0 to HW filter on device team0 [ 109.689426][ T246] bridge0: port 1(bridge_slave_0) entered blocking state [ 109.689659][ T246] bridge0: port 1(bridge_slave_0) entered forwarding state [ 109.703148][ T246] bridge0: port 2(bridge_slave_1) entered blocking state [ 109.703237][ T246] bridge0: port 2(bridge_slave_1) entered forwarding state [ 110.159560][ T5756] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 110.165309][ T5756] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 110.165947][ T5756] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 110.182189][ T5756] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 110.221209][ T5756] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 110.235533][ T5756] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 110.236385][ T5756] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 110.258365][ T5756] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 110.335328][ T5754] 8021q: adding VLAN 0 to HW filter on device bond0 [ 110.439240][ T5753] 8021q: adding VLAN 0 to HW filter on device bond0 [ 110.464938][ T5754] 8021q: adding VLAN 0 to HW filter on device team0 [ 110.489587][ T38] bridge0: port 1(bridge_slave_0) entered blocking state [ 110.489665][ T38] bridge0: port 1(bridge_slave_0) entered forwarding state [ 110.491286][ T38] bridge0: port 2(bridge_slave_1) entered blocking state [ 110.491354][ T38] bridge0: port 2(bridge_slave_1) entered forwarding state [ 110.660834][ T5753] 8021q: adding VLAN 0 to HW filter on device team0 [ 110.688933][ T38] bridge0: port 1(bridge_slave_0) entered blocking state [ 110.689022][ T38] bridge0: port 1(bridge_slave_0) entered forwarding state [ 110.757493][ T38] bridge0: port 2(bridge_slave_1) entered blocking state [ 110.757570][ T38] bridge0: port 2(bridge_slave_1) entered forwarding state [ 110.867988][ T5756] 8021q: adding VLAN 0 to HW filter on device bond0 [ 110.927887][ T5756] 8021q: adding VLAN 0 to HW filter on device team0 [ 110.977203][ T218] bridge0: port 1(bridge_slave_0) entered blocking state [ 110.977282][ T218] bridge0: port 1(bridge_slave_0) entered forwarding state [ 110.979822][ T218] bridge0: port 2(bridge_slave_1) entered blocking state [ 110.979895][ T218] bridge0: port 2(bridge_slave_1) entered forwarding state [ 111.120292][ T5751] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 111.274112][ T5755] Bluetooth: hci1: command tx timeout [ 111.281616][ T5755] Bluetooth: hci2: command tx timeout [ 111.285204][ T5755] Bluetooth: hci0: command tx timeout [ 111.361355][ T5755] Bluetooth: hci3: command tx timeout [ 111.381959][ T5751] veth0_vlan: entered promiscuous mode [ 111.435794][ T5751] veth1_vlan: entered promiscuous mode [ 111.544293][ T5751] veth0_macvtap: entered promiscuous mode [ 111.548688][ T5751] veth1_macvtap: entered promiscuous mode [ 111.580139][ T5751] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 111.585992][ T5751] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 111.653709][ T5826] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 111.680642][ T5826] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 111.680687][ T5826] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 111.680715][ T5826] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 111.988311][ T5753] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 112.065646][ T38] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 112.065669][ T38] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 112.124736][ T5754] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 112.187385][ T5753] veth0_vlan: entered promiscuous mode [ 112.206250][ T5754] veth0_vlan: entered promiscuous mode [ 112.312431][ T5753] veth1_vlan: entered promiscuous mode [ 112.323643][ T66] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 112.323664][ T66] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 112.325728][ T5754] veth1_vlan: entered promiscuous mode [ 112.348303][ T5756] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 112.388500][ T43] audit: type=1400 audit(1789741075.130:168): avc: denied { mount } for pid=5751 comm="syz-executor" name="/" dev="tmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 112.392766][ T43] audit: type=1400 audit(1789741075.130:169): avc: denied { mounton } for pid=5751 comm="syz-executor" path="/syzkaller.JTviP3/syz-tmp/newroot/dev" dev="tmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 112.398404][ T43] audit: type=1400 audit(1789741075.140:170): avc: denied { mount } for pid=5751 comm="syz-executor" name="/" dev="proc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 112.401887][ T43] audit: type=1400 audit(1789741075.140:171): avc: denied { mounton } for pid=5751 comm="syz-executor" path="/syzkaller.JTviP3/syz-tmp/newroot/sys/kernel/debug" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=dir permissive=1 [ 112.403936][ T43] audit: type=1400 audit(1789741075.150:172): avc: denied { mounton } for pid=5751 comm="syz-executor" path="/syzkaller.JTviP3/syz-tmp/newroot/proc/sys/fs/binfmt_misc" dev="proc" ino=6909 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysctl_fs_t tclass=dir permissive=1 [ 112.417788][ T43] audit: type=1400 audit(1789741075.150:173): avc: denied { unmount } for pid=5751 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 112.436481][ T43] audit: type=1400 audit(1789741075.170:174): avc: denied { mounton } for pid=5751 comm="syz-executor" path="/dev/gadgetfs" dev="devtmpfs" ino=2834 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:device_t tclass=dir permissive=1 [ 112.466059][ T43] audit: type=1400 audit(1789741075.200:175): avc: denied { mount } for pid=5751 comm="syz-executor" name="/" dev="gadgetfs" ino=6917 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfs_t tclass=filesystem permissive=1 [ 112.467660][ T5753] veth0_macvtap: entered promiscuous mode [ 112.471302][ T43] audit: type=1400 audit(1789741075.200:176): avc: denied { mount } for pid=5751 comm="syz-executor" name="/" dev="binder" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 112.471941][ T43] audit: type=1400 audit(1789741075.200:177): avc: denied { mounton } for pid=5751 comm="syz-executor" path="/sys/fs/fuse/connections" dev="fusectl" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=dir permissive=1 [ 112.472137][ T5753] veth1_macvtap: entered promiscuous mode [ 112.564196][ T5753] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 112.595203][ T5756] veth0_vlan: entered promiscuous mode [ 112.600507][ T5756] veth1_vlan: entered promiscuous mode [ 112.625072][ T5754] veth0_macvtap: entered promiscuous mode [ 112.629471][ T5754] veth1_macvtap: entered promiscuous mode [ 112.669428][ T5753] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 112.724743][ T12] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 112.724957][ T12] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 112.765088][ T5826] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 112.765358][ T5826] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 112.793645][ T5754] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 112.826410][ T5754] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 112.828329][ T5756] veth0_macvtap: entered promiscuous mode [ 112.840268][ T5756] veth1_macvtap: entered promiscuous mode [ 112.891304][ T5751] soft_limit_in_bytes is deprecated and will be removed. Writing any value to this file has no effect. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 113.005520][ T5756] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 113.045530][ T5756] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 113.373084][ T5755] Bluetooth: hci0: command tx timeout [ 113.373123][ T5755] Bluetooth: hci2: command tx timeout [ 113.373146][ T5755] Bluetooth: hci1: command tx timeout [ 113.377980][ T1226] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 113.377999][ T1226] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 113.397107][ T12] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 113.397142][ T12] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 113.397165][ T12] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 113.397186][ T12] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 113.397209][ T12] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 113.397231][ T12] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 113.397254][ T12] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 113.397277][ T12] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 113.445497][ T68] Bluetooth: hci3: command tx timeout [ 113.474098][ T5899] loop0: detected capacity change from 0 to 4096 [ 113.633394][ T38] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 113.633432][ T38] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 113.726961][ T5899] o2cb: Local heartbeat has not been started. [ 113.726976][ T5899] o2cb: Cluster check failed. Fix errors before retrying. [ 113.726993][ T5899] (syz.1.2,5899,0):user_dlm_register:674 ERROR: status = -22 [ 113.727015][ T5899] (syz.1.2,5899,0):dlmfs_mkdir:437 ERROR: Error -22 could not register domain "domain0" [ 113.745482][ T38] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 113.745506][ T38] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 113.885026][ T38] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 113.885046][ T38] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 114.038812][ T38] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 114.038835][ T38] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 114.223969][ T1226] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 114.223993][ T1226] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 114.669467][ T5911] loop2: detected capacity change from 0 to 7 [ 114.699719][ T5911] Dev loop2: unable to read RDB block 7 [ 114.699756][ T5911] loop2: unable to read partition table [ 114.699919][ T5911] loop2: partition table beyond EOD, truncated [ 114.699982][ T5911] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 114.760054][ C2] operation not supported error, dev loop2, sector 0 op 0x9:(WRITE_ZEROES) flags 0x10800800 phys_seg 0 prio class 2 [ 114.931848][ T5916] FAULT_INJECTION: forcing a failure. [ 114.931848][ T5916] name failslab, interval 1, probability 0, space 0, times 1 [ 114.931885][ T5916] CPU: 1 UID: 0 PID: 5916 Comm: syz.3.4 Not tainted syzkaller #0 PREEMPT(full) [ 114.931908][ T5916] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 114.931919][ T5916] Call Trace: [ 114.931927][ T5916] [ 114.931934][ T5916] dump_stack_lvl+0x100/0x190 [ 114.931984][ T5916] should_fail_ex.cold+0x5/0xa [ 114.932014][ T5916] should_failslab+0xc2/0x120 [ 114.932043][ T5916] __kmalloc_noprof+0xfc/0x840 [ 114.932065][ T5916] ? lsm_blob_alloc+0x68/0x90 [ 114.932100][ T5916] lsm_blob_alloc+0x68/0x90 [ 114.932130][ T5916] security_sk_alloc+0x2d/0x290 [ 114.932150][ T5916] sk_prot_alloc+0x1d1/0x2a0 [ 114.932183][ T5916] sk_alloc+0x36/0xe80 [ 114.932208][ T5916] inet_create+0x3a0/0x1060 [ 114.932240][ T5916] ? inet_create+0x94/0x1060 [ 114.932275][ T5916] __sock_create+0x339/0x860 [ 114.932335][ T5916] __sys_socket+0x14d/0x260 [ 114.932357][ T5916] ? __pfx___sys_socket+0x10/0x10 [ 114.932385][ T5916] __x64_sys_socket+0x72/0xb0 [ 114.932405][ T5916] ? lockdep_hardirqs_on+0x7d/0x110 [ 114.932435][ T5916] do_syscall_64+0x123/0x790 [ 114.932467][ T5916] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 114.932490][ T5916] RIP: 0033:0x7f8bb099e159 [ 114.932508][ T5916] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 114.932529][ T5916] RSP: 002b:00007f8bb190b028 EFLAGS: 00000246 ORIG_RAX: 0000000000000029 [ 114.932552][ T5916] RAX: ffffffffffffffda RBX: 00007f8bb0c25fa0 RCX: 00007f8bb099e159 [ 114.932565][ T5916] RDX: 0000000000000000 RSI: 0000000000000002 RDI: 0000000000000002 [ 114.932576][ T5916] RBP: 00007f8bb0a3506b R08: 0000000000000000 R09: 0000000000000000 [ 114.932588][ T5916] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 114.932599][ T5916] R13: 00007f8bb0c26038 R14: 00007f8bb0c25fa0 R15: 00007ffe63c29288 [ 114.932625][ T5916] [ 115.884232][ T5935] Cannot find add_set index 0 as target [ 115.901898][ T5935] Zero length message leads to an empty skb [ 117.404729][ T43] kauditd_printk_skb: 110 callbacks suppressed [ 117.404829][ T43] audit: type=1400 audit(1789741080.150:288): avc: denied { mmap_zero } for pid=5948 comm="syz.3.19" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=memprotect permissive=1 [ 117.436262][ T43] audit: type=1400 audit(1789741080.180:289): avc: denied { write } for pid=5948 comm="syz.3.19" name="001" dev="devtmpfs" ino=763 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 118.185786][ T43] audit: type=1400 audit(1789741080.910:290): avc: denied { unmount } for pid=5754 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=filesystem permissive=1 [ 118.186480][ T43] audit: type=1400 audit(1789741080.930:291): avc: denied { map_create } for pid=5955 comm="syz.2.22" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 118.903627][ T43] audit: type=1400 audit(1789741081.650:292): avc: denied { write } for pid=5955 comm="syz.2.22" name="video1" dev="devtmpfs" ino=953 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1 [ 118.906851][ T43] audit: type=1400 audit(1789741081.650:293): avc: denied { perfmon } for pid=5955 comm="syz.2.22" capability=38 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 118.907895][ T43] audit: type=1400 audit(1789741081.650:294): avc: denied { write } for pid=5955 comm="syz.2.22" name="mtd0" dev="devtmpfs" ino=714 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=chr_file permissive=1 [ 118.908197][ T43] audit: type=1400 audit(1789741081.650:295): avc: denied { open } for pid=5955 comm="syz.2.22" path="/dev/mtd0" dev="devtmpfs" ino=714 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=chr_file permissive=1 [ 118.908698][ T43] audit: type=1400 audit(1789741081.650:296): avc: denied { ioctl } for pid=5955 comm="syz.2.22" path="/dev/mtd0" dev="devtmpfs" ino=714 ioctlcmd=0x1269 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=chr_file permissive=1 [ 119.343027][ T43] audit: type=1400 audit(1789741082.040:297): avc: denied { mount } for pid=5963 comm="syz.3.24" name="/" dev="sysfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=filesystem permissive=1 [ 122.466332][ T43] kauditd_printk_skb: 5 callbacks suppressed [ 122.466353][ T43] audit: type=1400 audit(1789741085.210:303): avc: denied { create } for pid=5976 comm="syz.2.27" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 122.689678][ T43] audit: type=1400 audit(1789741085.430:304): avc: denied { unmount } for pid=5756 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=filesystem permissive=1 [ 123.156618][ T43] audit: type=1400 audit(1789741085.900:305): avc: denied { create } for pid=5982 comm="syz.0.29" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 123.159182][ T43] audit: type=1400 audit(1789741085.900:306): avc: denied { setopt } for pid=5982 comm="syz.0.29" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 123.160308][ T43] audit: type=1400 audit(1789741085.900:307): avc: denied { bind } for pid=5982 comm="syz.0.29" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 123.160637][ T43] audit: type=1400 audit(1789741085.900:308): avc: denied { name_bind } for pid=5982 comm="syz.0.29" src=20004 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=sctp_socket permissive=1 [ 123.160970][ T43] audit: type=1400 audit(1789741085.900:309): avc: denied { node_bind } for pid=5982 comm="syz.0.29" saddr=172.20.20.45 src=20004 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=sctp_socket permissive=1 [ 123.187460][ T43] audit: type=1400 audit(1789741085.920:310): avc: denied { read write } for pid=5980 comm="syz.3.28" name="uinput" dev="devtmpfs" ino=941 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 123.187608][ T43] audit: type=1400 audit(1789741085.920:311): avc: denied { open } for pid=5980 comm="syz.3.28" path="/dev/uinput" dev="devtmpfs" ino=941 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 123.368716][ T5981] input: syz1 as /devices/virtual/input/input5 [ 123.372245][ T43] audit: type=1400 audit(1789741086.110:312): avc: denied { ioctl } for pid=5980 comm="syz.3.28" path="/dev/uinput" dev="devtmpfs" ino=941 ioctlcmd=0x5501 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 125.949360][ T6005] smc: net device vlan1 applied user defined pnetid SYZ2 [ 128.515505][ T43] kauditd_printk_skb: 23 callbacks suppressed [ 128.515524][ T43] audit: type=1400 audit(1789741090.990:336): avc: denied { watch watch_reads } for pid=6019 comm="syz.2.39" path="/13" dev="tmpfs" ino=90 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 128.667227][ T43] audit: type=1400 audit(1789741091.410:337): avc: denied { create } for pid=6023 comm="syz.1.48" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 128.690654][ T43] audit: type=1400 audit(1789741091.410:338): avc: denied { read write } for pid=6023 comm="syz.1.48" name="raw-gadget" dev="devtmpfs" ino=848 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 128.694685][ T43] audit: type=1400 audit(1789741091.430:339): avc: denied { open } for pid=6023 comm="syz.1.48" path="/dev/raw-gadget" dev="devtmpfs" ino=848 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 128.695178][ T43] audit: type=1400 audit(1789741091.430:340): avc: denied { ioctl } for pid=6023 comm="syz.1.48" path="/dev/raw-gadget" dev="devtmpfs" ino=848 ioctlcmd=0x5500 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 128.827978][ T6029] o2cb: Local heartbeat has not been started. [ 128.827980][ T43] audit: type=1400 audit(1789741091.570:341): avc: denied { write } for pid=6028 comm="syz.2.41" name="/" dev="ocfs2_dlmfs" ino=8072 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 128.827996][ T6029] o2cb: Cluster check failed. Fix errors before retrying. [ 128.828016][ T6029] (syz.2.41,6029,2):user_dlm_register:674 ERROR: status = -22 [ 128.828040][ T6029] (syz.2.41,6029,2):dlmfs_mkdir:437 ERROR: Error -22 could not register domain "domain0" [ 128.978139][ T5848] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 129.026167][ T43] audit: type=1400 audit(1789741091.770:342): avc: denied { bind } for pid=6030 comm="syz.2.42" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 129.036504][ T43] audit: type=1400 audit(1789741091.780:343): avc: denied { listen } for pid=6030 comm="syz.2.42" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 129.040214][ T43] audit: type=1400 audit(1789741091.780:344): avc: denied { write } for pid=6030 comm="syz.2.42" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 129.066312][ T43] audit: type=1400 audit(1789741091.810:345): avc: denied { write } for pid=6033 comm="syz.3.43" name="kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 129.180062][ T5848] usb 6-1: New USB device found, idVendor=17ef, idProduct=6047, bcdDevice= 0.40 [ 129.188191][ T5848] usb 6-1: config 1 interface 0 altsetting 13 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 129.188220][ T5848] usb 6-1: config 1 interface 0 has no altsetting 0 [ 129.205943][ T5848] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 129.205968][ T5848] usb 6-1: Product: syz [ 129.205982][ T5848] usb 6-1: Manufacturer: syz [ 129.205994][ T5848] usb 6-1: SerialNumber: syz [ 129.773077][ T0] NOHZ tick-stop error: local softirq work is pending, handler #1c2!!! [ 129.912932][ T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!! [ 129.993217][ T0] NOHZ tick-stop error: local softirq work is pending, handler #108!!! [ 130.903042][ T0] NOHZ tick-stop error: local softirq work is pending, handler #42!!! [ 131.203137][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 131.213113][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 131.852882][ T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!! [ 132.553054][ T5848] usbhid 6-1:1.0: can't add hid device: -71 [ 132.553157][ T5848] usbhid 6-1:1.0: probe with driver usbhid failed with error -71 [ 132.846382][ T5848] usb 6-1: USB disconnect, device number 2 [ 133.763152][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 135.040071][ T43] kauditd_printk_skb: 4 callbacks suppressed [ 135.040091][ T43] audit: type=1400 audit(1789741097.780:350): avc: denied { write } for pid=6083 comm="syz.3.57" name="usb_gadget" dev="configfs" ino=5512 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 135.042159][ T43] audit: type=1400 audit(1789741097.780:351): avc: denied { write } for pid=6083 comm="syz.3.57" name="strings" dev="configfs" ino=9026 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 135.785003][ T6091] Cannot find add_set index 0 as target [ 137.254493][ T43] audit: type=1400 audit(1789741099.990:352): avc: denied { read } for pid=6097 comm="syz.2.59" name="kcore" dev="proc" ino=4026532046 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_kcore_t tclass=file permissive=1 [ 137.256434][ T43] audit: type=1400 audit(1789741100.000:353): avc: denied { open } for pid=6097 comm="syz.2.59" path="/22/proc_mnt/kcore" dev="proc" ino=4026532046 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_kcore_t tclass=file permissive=1 [ 138.190880][ T43] audit: type=1400 audit(1789741100.920:354): avc: denied { read write } for pid=6100 comm="syz.3.60" name="vhost-vsock" dev="devtmpfs" ino=1298 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 138.190936][ T43] audit: type=1400 audit(1789741100.920:355): avc: denied { open } for pid=6100 comm="syz.3.60" path="/dev/vhost-vsock" dev="devtmpfs" ino=1298 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 139.077323][ T43] audit: type=1400 audit(1789741101.820:356): avc: denied { ioctl } for pid=6100 comm="syz.3.60" path="/dev/vhost-vsock" dev="devtmpfs" ino=1298 ioctlcmd=0xaf01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 139.104107][ T43] audit: type=1400 audit(1789741101.830:357): avc: denied { execute } for pid=6103 comm="syz-executor" name="syz-executor" dev="sda1" ino=2020 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:etc_runtime_t tclass=file permissive=1 [ 139.104159][ T43] audit: type=1400 audit(1789741101.830:358): avc: denied { execute_no_trans } for pid=6103 comm="syz-executor" path="/syz-executor" dev="sda1" ino=2020 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:etc_runtime_t tclass=file permissive=1 [ 139.206411][ T5755] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 139.216572][ T5755] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 139.217107][ T5755] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 139.228730][ T5755] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 139.241450][ T5755] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 139.413803][ T43] audit: type=1400 audit(1789741102.160:359): avc: denied { sys_module } for pid=6104 comm="syz-executor" capability=16 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 139.701277][ T6117] FAULT_INJECTION: forcing a failure. [ 139.701277][ T6117] name fail_futex, interval 1, probability 0, space 0, times 1 [ 139.701311][ T6117] CPU: 3 UID: 0 PID: 6117 Comm: syz.1.63 Not tainted syzkaller #0 PREEMPT(full) [ 139.701331][ T6117] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 139.701341][ T6117] Call Trace: [ 139.701347][ T6117] [ 139.701354][ T6117] dump_stack_lvl+0x100/0x190 [ 139.701386][ T6117] should_fail_ex.cold+0x5/0xa [ 139.701410][ T6117] get_futex_key+0x1d0/0x14f0 [ 139.701451][ T6117] ? __pfx_get_futex_key+0x10/0x10 [ 139.701472][ T6117] ? __fsnotify_parent+0x2b4/0xd00 [ 139.701506][ T6117] futex_wake+0xf4/0x5e0 [ 139.701534][ T6117] ? __pfx_futex_wake+0x10/0x10 [ 139.701564][ T6117] ? vfs_write+0x914/0x1050 [ 139.701581][ T6117] ? vfs_write+0x15d/0x1050 [ 139.701603][ T6117] do_futex+0x2b2/0x440 [ 139.701658][ T6117] ? __pfx_do_futex+0x10/0x10 [ 139.701687][ T6117] __x64_sys_futex+0x34f/0x4d0 [ 139.701712][ T6117] ? fput+0x7c/0x100 [ 139.701731][ T6117] ? __pfx___x64_sys_futex+0x10/0x10 [ 139.701753][ T6117] ? ksys_write+0x1ac/0x250 [ 139.701769][ T6117] ? __pfx_ksys_write+0x10/0x10 [ 139.701793][ T6117] do_syscall_64+0x123/0x790 [ 139.701821][ T6117] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 139.701839][ T6117] RIP: 0033:0x7f87d5b9e159 [ 139.701856][ T6117] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 139.701872][ T6117] RSP: 002b:00007f87d6a7f0e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 139.701890][ T6117] RAX: ffffffffffffffda RBX: 00007f87d5e25fa8 RCX: 00007f87d5b9e159 [ 139.701902][ T6117] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007f87d5e25fac [ 139.701914][ T6117] RBP: 00007f87d5e25fa0 R08: 0000000000000001 R09: 0000000000000000 [ 139.701924][ T6117] R10: 0000000000000036 R11: 0000000000000246 R12: 0000000000000000 [ 139.701934][ T6117] R13: 00007f87d5e26038 R14: 00007ffc9a2c8c30 R15: 00007ffc9a2c8d18 [ 139.701953][ T6117] [ 139.932948][ T6126] netlink: 16 bytes leftover after parsing attributes in process `syz.1.66'. [ 140.938985][ T43] audit: type=1400 audit(1789741103.660:360): avc: denied { read write } for pid=6113 comm="syz.3.64" name="nullb0" dev="devtmpfs" ino=705 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 140.939041][ T43] audit: type=1400 audit(1789741103.660:361): avc: denied { open } for pid=6113 comm="syz.3.64" path="/dev/nullb0" dev="devtmpfs" ino=705 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 140.939077][ T43] audit: type=1400 audit(1789741103.660:362): avc: denied { map } for pid=6113 comm="syz.3.64" path="/dev/nullb0" dev="devtmpfs" ino=705 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 141.142768][ T43] audit: type=1400 audit(1789741103.860:363): avc: denied { bind } for pid=6113 comm="syz.3.64" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 141.564717][ T68] Bluetooth: hci4: command tx timeout [ 141.985467][ T5609] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 142.149792][ T43] audit: type=1400 audit(1789741104.890:364): avc: denied { watch watch_reads } for pid=6147 comm="syz.1.71" path="/15/file1" dev="tmpfs" ino=103 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 142.151066][ T43] audit: type=1400 audit(1789741104.890:365): avc: denied { execute } for pid=6147 comm="syz.1.71" name="file1" dev="tmpfs" ino=103 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 142.982353][ T5609] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 143.596035][ T5755] Bluetooth: hci4: command tx timeout [ 143.694210][ T5609] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 143.863837][ T6104] bridge0: port 1(bridge_slave_0) entered blocking state [ 143.863981][ T6104] bridge0: port 1(bridge_slave_0) entered disabled state [ 143.864097][ T6104] bridge_slave_0: entered allmulticast mode [ 143.865572][ T6104] bridge_slave_0: entered promiscuous mode [ 143.894429][ T6104] bridge0: port 2(bridge_slave_1) entered blocking state [ 143.894596][ T6104] bridge0: port 2(bridge_slave_1) entered disabled state [ 143.894704][ T6104] bridge_slave_1: entered allmulticast mode [ 143.896052][ T6104] bridge_slave_1: entered promiscuous mode [ 144.140924][ T5609] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 144.251016][ T6104] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 144.254311][ T6104] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 144.421814][ T6104] team0: Port device team_slave_0 added [ 144.468326][ T6104] team0: Port device team_slave_1 added [ 144.712724][ T6104] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 144.712742][ T6104] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 144.712763][ T6104] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 144.716771][ T1444] ieee802154 phy0 wpan0: encryption failed: -22 [ 144.716852][ T1444] ieee802154 phy1 wpan1: encryption failed: -22 [ 144.786450][ T6104] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 144.786467][ T6104] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 144.786487][ T6104] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 145.056310][ T43] audit: type=1400 audit(1789741107.800:366): avc: denied { search } for pid=5448 comm="dhcpcd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 145.056468][ T43] audit: type=1400 audit(1789741107.800:367): avc: denied { search } for pid=5448 comm="dhcpcd" name="udev" dev="tmpfs" ino=9 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 145.056691][ T43] audit: type=1400 audit(1789741107.800:368): avc: denied { search } for pid=5448 comm="dhcpcd" name="data" dev="tmpfs" ino=14 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 145.169294][ T6104] hsr_slave_0: entered promiscuous mode [ 145.170376][ T6104] hsr_slave_1: entered promiscuous mode [ 145.170927][ T6104] debugfs: 'hsr0' already exists in 'hsr' [ 145.170945][ T6104] Cannot create hsr debugfs directory [ 145.572913][ T43] audit: type=1400 audit(1789741108.310:369): avc: denied { read } for pid=6167 comm="dhcpcd-run-hook" name="resolv.conf" dev="tmpfs" ino=1840 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 145.680838][ T5755] Bluetooth: hci4: command tx timeout [ 146.044334][ T43] kauditd_printk_skb: 7 callbacks suppressed [ 146.044353][ T43] audit: type=1400 audit(1789741108.790:377): avc: denied { write } for pid=6169 comm="rm" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 146.045654][ T43] audit: type=1400 audit(1789741108.790:378): avc: denied { remove_name } for pid=6169 comm="rm" name="resolv.conf.eth2.link" dev="tmpfs" ino=2257 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 146.045943][ T43] audit: type=1400 audit(1789741108.790:379): avc: denied { unlink } for pid=6169 comm="rm" name="resolv.conf.eth2.link" dev="tmpfs" ino=2257 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 146.271526][ T5609] bridge_slave_1: left allmulticast mode [ 146.271565][ T5609] bridge_slave_1: left promiscuous mode [ 146.273697][ T5609] bridge0: port 2(bridge_slave_1) entered disabled state [ 146.365727][ T6174] device-mapper: table: 248:0: zero-length target [ 146.365747][ T6174] device-mapper: ioctl: error adding target to table [ 146.454905][ T5609] bridge_slave_0: left allmulticast mode [ 146.454932][ T5609] bridge_slave_0: left promiscuous mode [ 146.455248][ T5609] bridge0: port 1(bridge_slave_0) entered disabled state [ 146.542253][ T43] audit: type=1400 audit(1789741109.280:380): avc: denied { create } for pid=6175 comm="syz.3.75" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 146.547117][ T43] audit: type=1400 audit(1789741109.290:381): avc: denied { ioctl } for pid=6175 comm="syz.3.75" path="socket:[12520]" dev="sockfs" ino=12520 ioctlcmd=0x8922 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 147.342485][ T5609] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 147.400073][ T5609] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 147.456059][ T5609] bond0 (unregistering): Released all slaves [ 147.523985][ T5448] 8021q: adding VLAN 0 to HW filter on device eth2 [ 147.777976][ T6104] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 147.785281][ T5755] Bluetooth: hci4: command tx timeout [ 147.994402][ T6104] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 147.998999][ T6104] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 148.066082][ T6104] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 148.067035][ T6104] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 148.147866][ T6104] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 148.174996][ T43] audit: type=1400 audit(1789741110.890:382): avc: denied { write } for pid=6192 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 148.450687][ T43] audit: type=1400 audit(1789741111.170:383): avc: denied { write } for pid=6200 comm="rm" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 149.054986][ T6104] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 149.079455][ T6104] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 149.204275][ T5448] 8021q: adding VLAN 0 to HW filter on device eth3 [ 149.779664][ T43] audit: type=1400 audit(1789741112.520:384): avc: denied { create } for pid=6217 comm="syz.3.89" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 149.779716][ T43] audit: type=1400 audit(1789741112.520:385): avc: denied { write } for pid=6217 comm="syz.3.89" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 150.347866][ T43] audit: type=1400 audit(1789741113.070:386): avc: denied { write } for pid=6229 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 150.475198][ T5609] hsr_slave_0: left promiscuous mode [ 150.526590][ T5609] hsr_slave_1: left promiscuous mode [ 150.527423][ T5609] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 150.527456][ T5609] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 150.613413][ T5609] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 150.613437][ T5609] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 150.722031][ T5609] veth1_macvtap: left promiscuous mode [ 150.722089][ T5609] veth0_macvtap: left promiscuous mode [ 150.722189][ T5609] veth1_vlan: left promiscuous mode [ 150.722280][ T5609] veth0_vlan: left promiscuous mode [ 151.622120][ T43] kauditd_printk_skb: 1 callbacks suppressed [ 151.622139][ T43] audit: type=1400 audit(1789741114.360:388): avc: denied { create } for pid=6243 comm="syz.1.97" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 151.622581][ T43] audit: type=1400 audit(1789741114.360:389): avc: denied { ioctl } for pid=6243 comm="syz.1.97" path="socket:[11381]" dev="sockfs" ino=11381 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 151.625795][ T43] audit: type=1400 audit(1789741114.370:390): avc: denied { write } for pid=6243 comm="syz.1.97" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 151.967903][ T6250] usb usb7: usbfs: process 6250 (syz.2.99) did not claim interface 0 before use [ 152.310662][ T5609] team0 (unregistering): Port device team_slave_1 removed [ 152.435320][ T5609] team0 (unregistering): Port device team_slave_0 removed [ 152.593808][ T43] audit: type=1400 audit(1789741115.340:391): avc: denied { name_bind } for pid=6265 comm="syz.2.107" src=20001 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=tcp_socket permissive=1 [ 152.693924][ T5448] 8021q: adding VLAN 0 to HW filter on device eth4 [ 152.755045][ T6104] 8021q: adding VLAN 0 to HW filter on device bond0 [ 152.799519][ T6104] 8021q: adding VLAN 0 to HW filter on device team0 [ 152.823061][ T66] bridge0: port 1(bridge_slave_0) entered blocking state [ 152.823149][ T66] bridge0: port 1(bridge_slave_0) entered forwarding state [ 152.847404][ T66] bridge0: port 2(bridge_slave_1) entered blocking state [ 152.847486][ T66] bridge0: port 2(bridge_slave_1) entered forwarding state [ 152.965670][ T6104] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 153.175011][ T43] audit: type=1400 audit(1789741115.900:392): avc: denied { write } for pid=6272 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 153.334813][ T5885] usb 8-1: new high-speed USB device number 2 using dummy_hcd [ 153.496266][ T5885] usb 8-1: Using ep0 maxpacket: 32 [ 153.575307][ T5885] usb 8-1: New USB device found, idVendor=0b89, idProduct=0007, bcdDevice=ef.64 [ 153.625858][ T5885] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 153.648098][ T5885] usb 8-1: config 0 descriptor?? [ 153.650843][ T43] audit: type=1400 audit(1789741116.390:393): avc: denied { write } for pid=6282 comm="rm" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 153.719426][ T43] audit: type=1400 audit(1789741116.460:394): avc: denied { write } for pid=6281 comm="syz.2.110" name="functions" dev="configfs" ino=9024 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 153.745009][ T6287] device-mapper: table: 248:0: cache: Error opening origin device (-ENOENT) [ 153.745032][ T6287] device-mapper: ioctl: error adding target to table [ 155.862467][ T5885] as10x_usb: device has been detected [ 155.863342][ T5885] dvbdev: DVB: registering new adapter (nBox DVB-T Dongle) [ 155.895077][ T5885] usb 8-1: DVB: registering adapter 1 frontend 0 (nBox DVB-T Dongle)... [ 156.031316][ T5448] 8021q: adding VLAN 0 to HW filter on device eth5 [ 156.060842][ T43] audit: type=1400 audit(1789741118.790:395): avc: denied { firmware_load } for pid=5885 comm="kworker/0:5" path="/lib/firmware/as102_data1_st.hex" dev="sda1" ino=297 scontext=system_u:system_r:kernel_t tcontext=system_u:object_r:lib_t tclass=system permissive=1 [ 156.061714][ T5885] as10x_usb: error during firmware upload part1 [ 156.063497][ T5885] Registered device nBox DVB-T Dongle [ 156.286952][ T5885] usb 8-1: USB disconnect, device number 2 [ 156.339411][ T5885] Unregistered device nBox DVB-T Dongle [ 156.347673][ T5885] as10x_usb: device has been disconnected [ 156.535049][ T6308] batman_adv: batadv0: Adding interface: dummy0 [ 156.535066][ T6308] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 156.535091][ T6308] batman_adv: batadv0: Interface activated: dummy0 [ 156.575940][ T43] audit: type=1400 audit(1789741119.320:396): avc: denied { listen } for pid=6310 comm="syz.3.117" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 156.596903][ T6303] batadv0: mtu less than device minimum [ 156.599951][ T6303] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 156.603550][ T6303] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 156.604664][ T6303] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 156.605652][ T6303] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 156.606640][ T6303] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 156.607641][ T6303] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 156.608703][ T6303] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 156.609617][ T6303] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 156.610460][ T6303] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 156.691016][ T6104] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 156.714576][ T43] audit: type=1400 audit(1789741119.460:397): avc: denied { read write } for pid=5751 comm="syz-executor" name="loop1" dev="devtmpfs" ino=657 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 156.714973][ T43] audit: type=1400 audit(1789741119.460:398): avc: denied { open } for pid=5751 comm="syz-executor" path="/dev/loop1" dev="devtmpfs" ino=657 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 156.715181][ T43] audit: type=1400 audit(1789741119.460:399): avc: denied { ioctl } for pid=5751 comm="syz-executor" path="/dev/loop1" dev="devtmpfs" ino=657 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 157.210181][ T43] audit: type=1400 audit(1789741119.940:400): avc: denied { mounton } for pid=6329 comm="syz.2.120" path="/37/gadget" dev="tmpfs" ino=228 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 157.247681][ T6331] gadgetfs: bound to dummy_udc driver [ 157.492639][ T6104] veth0_vlan: entered promiscuous mode [ 157.501822][ T6104] veth1_vlan: entered promiscuous mode [ 157.511182][ T5870] usb 5-1: new full-speed USB device number 2 using dummy_hcd [ 157.511441][ C1] gadgetfs: connected [ 157.518121][ T5870] gadgetfs: disconnected [ 157.606650][ T6104] veth0_macvtap: entered promiscuous mode [ 157.653529][ T43] audit: type=1400 audit(1789741120.400:401): avc: denied { unmount } for pid=5753 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfs_t tclass=filesystem permissive=1 [ 157.654061][ T6104] veth1_macvtap: entered promiscuous mode [ 157.668326][ T6104] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 157.671895][ T6104] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 157.723227][ T12] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 157.723578][ T12] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 157.723726][ T12] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 157.723892][ T12] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 158.118875][ T218] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 158.118899][ T218] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 158.119104][ T218] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 158.119117][ T218] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 158.259873][ T43] audit: type=1400 audit(1789741121.000:402): avc: denied { write } for pid=6342 comm="syz.2.122" name="dynamic_events" dev="tracefs" ino=2062 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=file permissive=1 [ 158.264046][ T43] audit: type=1400 audit(1789741121.010:403): avc: denied { create } for pid=6342 comm="syz.2.122" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 158.267689][ T43] audit: type=1400 audit(1789741121.010:404): avc: denied { write } for pid=6342 comm="syz.2.122" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 158.267725][ T43] audit: type=1400 audit(1789741121.010:405): avc: denied { nlmsg_write } for pid=6342 comm="syz.2.122" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 159.008693][ T43] audit: type=1400 audit(1789741121.750:406): avc: denied { read write } for pid=6359 comm="syz.1.130" name="rdma_cm" dev="devtmpfs" ino=1292 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:infiniband_device_t tclass=chr_file permissive=1 [ 159.469355][ T6360] kvm [6359]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0xc2) = 0x2c [ 159.471620][ T6360] kvm [6359]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0xc1) = 0x2c [ 159.473992][ T6360] kvm [6359]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0xc1) = 0x2c [ 159.497167][ T6360] kvm [6359]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0xc1) = 0xcc [ 160.568463][ T6379] device-mapper: table: 248:0: cache: Error opening origin device (-ENOENT) [ 160.568487][ T6379] device-mapper: ioctl: error adding target to table [ 161.194068][ T5885] usb 9-1: new high-speed USB device number 2 using dummy_hcd [ 161.381652][ T5885] usb 9-1: New USB device found, idVendor=17ef, idProduct=6047, bcdDevice= 0.40 [ 161.382747][ T5885] usb 9-1: config 1 interface 0 altsetting 13 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 161.382775][ T5885] usb 9-1: config 1 interface 0 has no altsetting 0 [ 161.385755][ T5885] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 161.385774][ T5885] usb 9-1: Product: syz [ 161.385785][ T5885] usb 9-1: Manufacturer: syz [ 161.385794][ T5885] usb 9-1: SerialNumber: syz [ 161.512043][ T6399] loop1: detected capacity change from 0 to 262144 [ 161.609099][ T6400] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 161.609265][ T6400] block device autoloading is deprecated and will be removed. [ 161.612215][ T6399] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 161.823712][ T6399] block device autoloading is deprecated and will be removed. [ 161.824250][ T6399] md: loop0 has zero or unknown size, marking faulty! [ 161.824388][ T6399] md: error, md_import_device() returned -22 [ 161.941188][ T43] kauditd_printk_skb: 5 callbacks suppressed [ 161.941259][ T43] audit: type=1400 audit(1789741124.680:412): avc: denied { setopt } for pid=6402 comm="syz.1.147" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 162.054439][ T6404] md/raid1:md0: active with 1 out of 2 mirrors [ 162.056454][ T6404] md0: detected capacity change from 0 to 2 ** replaying previous printk message ** [ 162.056454][ T6404] md0: detected capacity change from 0 to 262144 [ 162.060625][ T5870] [ 162.080786][ T5870] ====================================================== [ 162.096701][ T5870] WARNING: possible circular locking dependency detected [ 162.100524][ T5870] syzkaller #0 Not tainted [ 162.102591][ T5870] ------------------------------------------------------ [ 162.105304][ T5870] kworker/1:4/5870 is trying to acquire lock: [ 162.107456][ T5870] ffff88802d7de358 (&mddev->reconfig_mutex){+.+.}-{4:4}, at: md_start_sync+0xc4/0xea0 [ 162.112217][ T5870] [ 162.112217][ T5870] but task is already holding lock: [ 162.128136][ T5870] ffffc90004337d08 ((work_completion)(&mddev->sync_work)){+.+.}-{0:0}, at: process_one_work+0xa2c/0x1b10 [ 162.134004][ T5870] [ 162.134004][ T5870] which lock already depends on the new lock. [ 162.134004][ T5870] [ 162.140206][ T5870] [ 162.140206][ T5870] the existing dependency chain (in reverse order) is: [ 162.161618][ T5870] [ 162.161618][ T5870] -> #3 ((work_completion)(&mddev->sync_work)){+.+.}-{0:0}: [ 162.168104][ T5870] lock_acquire+0x1d1/0x380 [ 162.170965][ T5870] process_one_work+0xa32/0x1b10 [ 162.174187][ T5870] worker_thread+0x5ef/0xe50 [ 162.176027][ T5870] kthread+0x373/0x450 [ 162.177776][ T5870] ret_from_fork+0x730/0xd60 [ 162.185927][ T5870] ret_from_fork_asm+0x1a/0x30 [ 162.197829][ T5870] [ 162.197829][ T5870] -> #2 ((wq_completion)md_misc){+.+.}-{0:0}: [ 162.201522][ T5870] lock_acquire+0x1d1/0x380 [ 162.203952][ T5870] touch_wq_lockdep_map+0xad/0x1c0 [ 162.206645][ T5870] __flush_workqueue+0x131/0x1200 [ 162.209035][ T5870] md_alloc+0x30/0x10a0 [ 162.211029][ T5870] md_probe+0x73/0xf0 [ 162.229241][ T5870] blk_probe_dev+0x149/0x1e0 [ 162.233263][ T5870] blk_request_module+0x16/0xc0 [ 162.236241][ T5870] blkdev_get_no_open+0x9b/0xf0 [ 162.254937][ T5870] blkdev_open+0x141/0x4f0 [ 162.257378][ T5870] do_dentry_open+0x6ab/0x14d0 [ 162.259309][ T5870] vfs_open+0x82/0x3f0 [ 162.261348][ T5870] path_openat+0x19fa/0x2440 [ 162.264681][ T5870] do_file_open+0x20e/0x430 [ 162.267963][ T5870] do_sys_openat2+0x10f/0x1e0 [ 162.274927][ T5870] __x64_sys_openat+0x12d/0x210 [ 162.284324][ T5870] do_syscall_64+0x123/0x790 [ 162.287900][ T5870] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 162.294862][ T5870] [ 162.294862][ T5870] -> #1 (major_names_lock){+.+.}-{4:4}: [ 162.306112][ T5870] lock_acquire+0x1d1/0x380 [ 162.309833][ T5870] __mutex_lock+0x1a4/0x1bd0 [ 162.315394][ T5870] blk_probe_dev+0x28/0x1e0 [ 162.325425][ T5870] blk_request_module+0x16/0xc0 [ 162.329110][ T5870] blkdev_get_no_open+0x9b/0xf0 [ 162.332777][ T5870] bdev_file_open_by_dev+0x70/0x210 [ 162.346332][ T5870] md_import_device+0x120/0x360 [ 162.349495][ T5870] md_add_new_disk+0xdbf/0x1820 [ 162.351817][ T5870] md_ioctl+0x2bec/0x36d0 [ 162.353812][ T5870] blkdev_ioctl+0x5ad/0x6f0 [ 162.366121][ T5870] __x64_sys_ioctl+0x18e/0x210 [ 162.376989][ T5870] do_syscall_64+0x123/0x790 [ 162.379342][ T5870] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 162.393310][ T5870] [ 162.393310][ T5870] -> #0 (&mddev->reconfig_mutex){+.+.}-{4:4}: [ 162.397817][ T5870] check_prev_add+0xeb/0xe60 [ 162.414767][ T5870] __lock_acquire+0x1528/0x1f40 [ 162.417409][ T5870] lock_acquire+0x1d1/0x380 [ 162.419702][ T5870] __mutex_lock+0x1a4/0x1bd0 [ 162.436489][ T5870] md_start_sync+0xc4/0xea0 [ 162.440241][ T5870] process_one_work+0xac7/0x1b10 [ 162.444789][ T5870] worker_thread+0x5ef/0xe50 [ 162.446987][ T5870] kthread+0x373/0x450 [ 162.449196][ T5870] ret_from_fork+0x730/0xd60 [ 162.465929][ T5870] ret_from_fork_asm+0x1a/0x30 [ 162.469271][ T5870] [ 162.469271][ T5870] other info that might help us debug this: [ 162.469271][ T5870] [ 162.478072][ T5870] Chain exists of: [ 162.478072][ T5870] &mddev->reconfig_mutex --> (wq_completion)md_misc --> (work_completion)(&mddev->sync_work) [ 162.478072][ T5870] [ 162.496462][ T5870] Possible unsafe locking scenario: [ 162.496462][ T5870] [ 162.499858][ T5870] CPU0 CPU1 [ 162.502088][ T5870] ---- ---- [ 162.506673][ T5870] lock((work_completion)(&mddev->sync_work)); [ 162.523623][ T5870] lock((wq_completion)md_misc); [ 162.528866][ T5870] lock((work_completion)(&mddev->sync_work)); [ 162.534435][ T5870] lock(&mddev->reconfig_mutex); [ 162.537724][ T5870] [ 162.537724][ T5870] *** DEADLOCK *** [ 162.537724][ T5870] [ 162.546195][ T5870] locks held by kworker/1:4/5870: 2, last CPU#1: [ 162.555141][ T5870] #0: ffff8880234e9540 ((wq_completion)md_misc){+.+.}-{0:0}, at: process_one_work+0x1466/0x1b10 [ 162.576734][ T5870] #1: ffffc90004337d08 ((work_completion)(&mddev->sync_work)){+.+.}-{0:0}, at: process_one_work+0xa2c/0x1b10 [ 162.581588][ T5870] [ 162.581588][ T5870] stack backtrace: [ 162.583888][ T5870] CPU: 1 UID: 0 PID: 5870 Comm: kworker/1:4 Not tainted syzkaller #0 PREEMPT(full) [ 162.586942][ T5870] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 162.590645][ T5870] Workqueue: md_misc md_start_sync [ 162.608624][ T5870] Call Trace: [ 162.611119][ T5870] [ 162.613087][ T5870] dump_stack_lvl+0x100/0x190 [ 162.614948][ T5870] print_circular_bug.cold+0x178/0x1be [ 162.617698][ T5870] check_noncircular+0x146/0x160 [ 162.619454][ T5870] check_prev_add+0xeb/0xe60 [ 162.621339][ T5870] __lock_acquire+0x1528/0x1f40 [ 162.623418][ T5870] lock_acquire+0x1d1/0x380 [ 162.625891][ T5870] ? md_start_sync+0xc4/0xea0 [ 162.628410][ T5870] ? __pfx___might_resched+0x10/0x10 [ 162.632220][ T5870] __mutex_lock+0x1a4/0x1bd0 [ 162.635275][ T5870] ? md_start_sync+0xc4/0xea0 [ 162.638117][ T5870] ? md_start_sync+0xc4/0xea0 [ 162.641097][ T5870] ? check_prev_add+0x354/0xe60 [ 162.644152][ T5870] ? __pfx___mutex_lock+0x10/0x10 [ 162.647218][ T5870] ? md_spares_need_change+0x25/0x320 [ 162.651155][ T5870] ? md_spares_need_change+0x1dc/0x320 [ 162.656027][ T5870] ? md_spares_need_change+0x1dc/0x320 [ 162.659499][ T5870] ? md_start_sync+0xc4/0xea0 [ 162.662396][ T5870] md_start_sync+0xc4/0xea0 [ 162.665112][ T5870] process_one_work+0xac7/0x1b10 [ 162.667606][ T5870] ? __pfx_process_one_work+0x10/0x10 [ 162.670080][ T5870] ? lock_acquire+0x1d1/0x380 [ 162.672711][ T5870] ? __pfx_md_start_sync+0x10/0x10 [ 162.676432][ T5870] worker_thread+0x5ef/0xe50 [ 162.679140][ T5870] ? __pfx_worker_thread+0x10/0x10 [ 162.681512][ T5870] ? kthread+0x13a/0x450 [ 162.683671][ T5870] ? __pfx_worker_thread+0x10/0x10 [ 162.687360][ T5870] kthread+0x373/0x450 [ 162.689307][ T5870] ? __pfx_kthread+0x10/0x10 [ 162.691797][ T5870] ret_from_fork+0x730/0xd60 [ 162.694379][ T5870] ? __pfx_ret_from_fork+0x10/0x10 [ 162.697565][ T5870] ? __switch_to+0x800/0x10f0 [ 162.700603][ T5870] ? __pfx_kthread+0x10/0x10 [ 162.702731][ T5870] ret_from_fork_asm+0x1a/0x30 [ 162.705189][ T5870] SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 163.935123][ T12] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 164.138321][ T12] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 164.213741][ T12] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 164.296442][ T12] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 164.524249][ T12] bridge_slave_1: left allmulticast mode [ 164.524272][ T12] bridge_slave_1: left promiscuous mode [ 164.524423][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 164.575249][ T12] bridge_slave_0: left allmulticast mode [ 164.575273][ T12] bridge_slave_0: left promiscuous mode [ 164.575507][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 164.692197][ T43] audit: type=1400 audit(1789741127.430:413): avc: denied { write } for pid=6417 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 164.910058][ T43] audit: type=1400 audit(1789741127.600:414): avc: denied { write } for pid=6420 comm="rm" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 164.974651][ T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 165.015112][ T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 165.016851][ T12] bond0 (unregistering): Released all slaves [ 165.039057][ T5448] 8021q: adding VLAN 0 to HW filter on device eth6 [ 165.171497][ T43] audit: type=1400 audit(1789741127.910:415): avc: denied { write } for pid=6423 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 165.321977][ T43] audit: type=1400 audit(1789741128.060:416): avc: denied { write } for pid=6426 comm="rm" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 165.427989][ T5448] 8021q: adding VLAN 0 to HW filter on device eth7 [ 165.658579][ T43] audit: type=1400 audit(1789741128.400:417): avc: denied { write } for pid=6429 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 165.780707][ T12] hsr_slave_0: left promiscuous mode [ 165.781208][ T12] hsr_slave_1: left promiscuous mode [ 165.781650][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 165.781664][ T12] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 165.782120][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 165.782151][ T12] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 165.804907][ T12] veth1_macvtap: left promiscuous mode [ 165.804939][ T12] veth0_macvtap: left promiscuous mode [ 165.804987][ T12] veth1_vlan: left promiscuous mode [ 165.805023][ T12] veth0_vlan: left promiscuous mode [ 165.903478][ T43] audit: type=1400 audit(1789741128.630:418): avc: denied { write } for pid=6432 comm="rm" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 166.025582][ T12] smc: removing net device vlan1 with user defined pnetid SYZ2 [ 166.153307][ T12] team0 (unregistering): Port device team_slave_1 removed [ 166.167055][ T12] team0 (unregistering): Port device team_slave_0 removed [ 166.276792][ T5448] 8021q: adding VLAN 0 to HW filter on device eth9 [ 166.571512][ T43] audit: type=1400 audit(1789741129.310:419): avc: denied { write } for pid=6436 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 166.684468][ T5885] usbhid 9-1:1.0: can't add hid device: -32 [ 166.684564][ T5885] usbhid 9-1:1.0: probe with driver usbhid failed with error -32 [ 166.720493][ T43] audit: type=1400 audit(1789741129.460:420): avc: denied { write } for pid=6439 comm="rm" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 167.097102][ T5448] 8021q: adding VLAN 0 to HW filter on device eth8 [ 167.118918][ T35] usb 9-1: USB disconnect, device number 2 [ 167.240811][ T43] audit: type=1400 audit(1789741129.980:421): avc: denied { write } for pid=6441 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 167.376347][ T43] audit: type=1400 audit(1789741130.120:422): avc: denied { write } for pid=6444 comm="rm" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 167.466663][ T12] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 167.576939][ T43] audit: type=1400 audit(1789741130.270:423): avc: denied { write } for pid=6447 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 167.648950][ T12] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 167.662240][ T43] audit: type=1400 audit(1789741130.400:424): avc: denied { write } for pid=6450 comm="rm" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 167.736127][ T12] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 168.007559][ T12] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 168.145065][ T12] bridge_slave_1: left allmulticast mode [ 168.145083][ T12] bridge_slave_1: left promiscuous mode [ 168.145204][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 168.150399][ T12] bridge_slave_0: left allmulticast mode [ 168.150425][ T12] bridge_slave_0: left promiscuous mode [ 168.150575][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 168.299397][ T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 168.319165][ T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 168.320514][ T12] bond0 (unregistering): Released all slaves [ 168.470508][ T43] audit: type=1400 audit(1789741131.210:425): avc: denied { write } for pid=6457 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 168.554431][ T43] audit: type=1400 audit(1789741131.280:426): avc: denied { write } for pid=6460 comm="rm" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 168.654126][ T5448] 8021q: adding VLAN 0 to HW filter on device eth10 [ 168.932936][ T43] audit: type=1400 audit(1789741131.670:427): avc: denied { write } for pid=6464 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 168.959063][ T12] hsr_slave_0: left promiscuous mode [ 168.976215][ T12] hsr_slave_1: left promiscuous mode [ 168.976777][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 168.976796][ T12] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 169.003489][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 169.003507][ T12] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 169.010515][ T12] veth1_macvtap: left promiscuous mode [ 169.011757][ T12] veth0_macvtap: left promiscuous mode [ 169.011832][ T12] veth1_vlan: left promiscuous mode [ 169.011869][ T12] veth0_vlan: left promiscuous mode [ 169.028262][ T43] audit: type=1400 audit(1789741131.750:428): avc: denied { write } for pid=6467 comm="rm" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 169.181731][ T12] team0 (unregistering): Port device team_slave_1 removed [ 169.200284][ T12] team0 (unregistering): Port device team_slave_0 removed [ 169.317570][ T5448] 8021q: adding VLAN 0 to HW filter on device eth11 [ 169.397863][ T43] audit: type=1400 audit(1789741132.140:429): avc: denied { write } for pid=6470 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 169.502257][ T43] audit: type=1400 audit(1789741132.240:430): avc: denied { write } for pid=6473 comm="rm" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 170.306170][ T5448] 8021q: adding VLAN 0 to HW filter on device eth12 [ 170.634790][ T5448] 8021q: adding VLAN 0 to HW filter on device eth13