last executing test programs: 2m18.585065048s ago: executing program 0 (id=46): mkdirat(0xffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(&(0x7f0000000140)=@filename='none\x00', &(0x7f0000000040)='./sys\x00', &(0x7f0000000080)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffff9c, &(0x7f00000000c0)='./sys/power/state\x00', 0x1, 0x0) write(r0, &(0x7f0000000100)='disk', 0x4) 2m3.618703706s ago: executing program 32 (id=44): r0 = syz_usb_connect(0x0, 0x3b, &(0x7f0000000040)=ANY=[@ANYBLOB="120100020000004032151d010001000000010902220001010080fa090400000103000000092111010001224e0007058103400001"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f00000001c0)={0x2c, &(0x7f0000000000)={0x0, 0x22, 0x4e, {0x5, 0x1, "0901a101850105091901290315002501950375018102950175058103c00600ff0901a101150026ff0075089540850f0901b102850c09018102850909019102850a09019102850b09018102c0"}}, 0x0, 0x0, 0x0, 0x0}, 0x0) syz_usb_ep_write(r0, 0x0, 0x0, &(0x7f0000001000)) nanosleep(&(0x7f0000000000)={0x1}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000100)='./sys\x00', &(0x7f0000000200)='sysfs\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./sys/bus/usb/devices/1-1/power/control\x00', 0x2, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./sys/bus/usb/devices/1-1/power/control\x00', 0x2, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000500)='./sys/bus/usb/devices/1-1/power/control\x00', 0x2, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000600)='./sys/bus/usb/devices/1-1/power/control\x00', 0x2, 0x0) write(r1, &(0x7f0000000700)='auto\x00', 0x4) write(r2, &(0x7f0000000700)='auto\x00', 0x4) write(r3, &(0x7f0000000700)='auto\x00', 0x4) write(r1, &(0x7f0000000800)='on\x00', 0x2) write(r2, &(0x7f0000000800)='on\x00', 0x2) 2m2.571412521s ago: executing program 33 (id=46): mkdirat(0xffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(&(0x7f0000000140)=@filename='none\x00', &(0x7f0000000040)='./sys\x00', &(0x7f0000000080)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffff9c, &(0x7f00000000c0)='./sys/power/state\x00', 0x1, 0x0) write(r0, &(0x7f0000000100)='disk', 0x4) 1m59.38780414s ago: executing program 34 (id=55): r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0x1b) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000000)=0x1b) ioctl$KDSKBENT(r1, 0x4b47, &(0x7f0000000040)={0x0, 0x1c, 0x20f}) r2 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$UI_SET_EVBIT(r2, 0x40045564, 0x1) ioctl$UI_SET_KEYBIT(r2, 0x40045565, 0x1c) ioctl$UI_DEV_SETUP(r2, 0x405c5503, &(0x7f0000000100)={{}, 'syz0\x00'}) ioctl$UI_DEV_CREATE(r2, 0x5501) 1m49.16292041s ago: executing program 35 (id=64): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./sys\x00', 0x1ff) mount(&(0x7f0000000080)=@filename='none\x00', &(0x7f00000000c0)='./sys\x00', &(0x7f0000000100)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./sys/power/pm_test\x00', 0x2, 0x0) write(r0, &(0x7f0000000180)='devices\n', 0x8) 1m48.143755054s ago: executing program 36 (id=66): r0 = openat$userio(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$USERIO_CMD_SET_PORT_TYPE(r0, &(0x7f0000000100)={0x1, 0x1}, 0x2) write$USERIO_CMD_REGISTER(r0, &(0x7f0000000102), 0x2) read(r0, &(0x7f0000000200)=""/100, 0x64) write$USERIO_CMD_SEND_INTERRUPT(r0, &(0x7f0000000300)={0x2, 0xfa}, 0x2) write$USERIO_CMD_SEND_INTERRUPT(r0, &(0x7f0000000302), 0x2) write$USERIO_CMD_SEND_INTERRUPT(r0, &(0x7f0000000302), 0x2) 1m43.021301291s ago: executing program 8 (id=94): r0 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) write$UHID_CREATE2(r0, &(0x7f0000000000)={0xb, {'syz0\x00', 'syz1\x00', 'syz0\x00', 0x0, 0x5, 0x46d, 0xb012}}, 0x118) read(r0, &(0x7f0000001000), 0x111c) write$UHID_INPUT2(r0, &(0x7f0000000300)={0xc, {0x14, "11ff00000100"/20}}, 0x1a) write$UHID_INPUT2(r0, &(0x7f0000000400)={0xc, {0x14, "11ff0100"/20}}, 0x1a) 1m42.042499932s ago: executing program 8 (id=96): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./sys\x00', &(0x7f00000000c0)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./sys/power/pm_test\x00', 0x2, 0x0) write(r0, &(0x7f0000000140)='freezer\n', 0x8) r1 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./sys/power/state\x00', 0x2, 0x0) write(r1, &(0x7f00000001c0)='freeze\n ', 0x8) 1m42.040409204s ago: executing program 37 (id=69): r0 = syz_usb_connect(0x0, 0x3b, &(0x7f0000000040)=ANY=[@ANYBLOB="120100020000004032151d010001000000010902220001010080fa090400000103000000092111010001224e0007058103400001"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f00000001c0)={0x2c, &(0x7f0000000000)={0x0, 0x22, 0x4e, {0x5, 0x1, "0901a101850105091901290315002501950375018102950175058103c00600ff0901a101150026ff0075089540850f0901b102850c09018102850909019102850a09019102850b09018102c0"}}, 0x0, 0x0, 0x0, 0x0}, 0x0) syz_usb_ep_write(r0, 0x0, 0x0, &(0x7f0000001000)) nanosleep(&(0x7f0000000000)={0x1}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000100)='./sys\x00', &(0x7f0000000200)='sysfs\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./sys/bus/usb/devices/1-1/power/control\x00', 0x2, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./sys/bus/usb/devices/1-1/power/control\x00', 0x2, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000500)='./sys/bus/usb/devices/1-1/power/control\x00', 0x2, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./sys/bus/usb/devices/1-1/power/control\x00', 0x2, 0x0) write(r1, &(0x7f0000000700)='auto\x00', 0x4) write(r2, &(0x7f0000000700)='auto\x00', 0x4) write(r3, &(0x7f0000000700)='auto\x00', 0x4) write(r4, &(0x7f0000000700)='auto\x00', 0x4) 1m33.670813726s ago: executing program 9 (id=117): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./sys\x00', &(0x7f00000000c0)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./sys/bus/pci/drivers/ahci/unbind\x00', 0x1, 0x0) write(r0, &(0x7f0000000140)='0000:00:1f.2', 0xc) r1 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./sys/bus/pci/drivers/ata_piix/unbind\x00', 0x1, 0x0) write(r1, &(0x7f00000001c0)='0000:00:01.1', 0xc) 1m33.646198611s ago: executing program 9 (id=118): r0 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) write$UHID_CREATE2(r0, &(0x7f0000000000)={0xb, {'syz0\x00', 'syz1\x00', 'syz0\x00', 0x1a, 0x5, 0x46d, 0xb012, 0x0, 0x0, "0600ff0901a10185100901150026ff0075089506810009019100"}}, 0x132) read(r0, &(0x7f0000001000), 0x111c) write$UHID_INPUT2(r0, &(0x7f0000000300)={0xc, {0x14, "11ff00000100"/20}}, 0x1a) write$UHID_INPUT2(r0, &(0x7f0000000400)={0xc, {0x14, "11ff0100"/20}}, 0x1a) 1m32.69097721s ago: executing program 9 (id=121): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000000)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./sys/power/state\x00', 0x2, 0x0) write(r0, &(0x7f0000000000)='disk', 0x4) 1m32.690700257s ago: executing program 9 (id=122): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./nfsd\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./nfsd\x00', &(0x7f0000000100)='nfsd\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000001a00)='./nfsd/versions\x00', 0x2, 0x0) write(r0, &(0x7f0000001b00)='-2 -3 +4\n', 0x9) r1 = openat(0xffffffffffffff9c, &(0x7f0000001600)='./nfsd/portlist\x00', 0x2, 0x0) write(r1, &(0x7f0000001700)='tcp 2049\n', 0x9) r2 = openat(0xffffffffffffff9c, &(0x7f0000001d00)='./nfsd/recoverydir\x00', 0x2, 0x0) write(r2, &(0x7f0000001e00)='/tmp\n', 0x5) r3 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./nfsd/threads\x00', 0x2, 0x0) write(r3, &(0x7f0000000300)='1\n', 0x2) r4 = openat(0xffffffffffffff9c, &(0x7f0000001800)='./nfsd/v4_end_grace\x00', 0x2, 0x0) write(r4, &(0x7f0000001900)='Y\n', 0x2) mkdirat(0xffffffffffffff9c, &(0x7f0000000400)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000400)='./proc\x00', &(0x7f0000000500)='proc\x00', 0x0, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./proc/net/rpc/auth.unix.ip/channel\x00', 0x2, 0x0) write(r5, &(0x7f0000000700)='nfsd 127.0.0.1 2147483647 127.0.0.1\n', 0x24) r6 = openat(0xffffffffffffff9c, &(0x7f0000000800)='./proc/net/rpc/nfsd.export/channel\x00', 0x2, 0x0) write(r6, &(0x7f0000000900)='127.0.0.1 / 2147483647 74754 0 0 0\n', 0x23) r7 = openat(0xffffffffffffff9c, &(0x7f0000000a00)='./proc/net/rpc/nfsd.fh/channel\x00', 0x2, 0x0) write(r7, &(0x7f0000000b00)='127.0.0.1 1 \\x00000000 2147483647 /\n', 0x24) mkdirat(0xffffffffffffff9c, &(0x7f0000000c00)='./debug\x00', 0x1ff) mount(0x0, &(0x7f0000000c00)='./debug\x00', &(0x7f0000000d00)='debugfs\x00', 0x0, 0x0) r8 = openat(0xffffffffffffff9c, &(0x7f0000000e00)='./debug/nfsd/io_cache_write\x00', 0x2, 0x0) write(r8, &(0x7f0000000f00)='2\n', 0x2) nanosleep(&(0x7f0000001c00)={0x1}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000001000)='./mnt\x00', 0x1ff) mount(&(0x7f0000001100)=@filename='127.0.0.1:/\x00', &(0x7f0000001000)='./mnt\x00', &(0x7f0000001200)='nfs4\x00', 0x0, &(0x7f0000001300)='addr=127.0.0.1,clientaddr=127.0.0.1\x00') r9 = openat(0xffffffffffffff9c, &(0x7f0000001400)='./mnt/test\x00', 0x42, 0x0) write(r9, &(0x7f0000001500)='test\x00', 0x4) 1m30.284119792s ago: executing program 9 (id=126): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./config\x00', &(0x7f0000000080)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./config/cluster/mycluster\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f00000001c0)='./config/cluster/mycluster/node/mynode\x00', 0x1ff) r0 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./config/cluster/mycluster/node/mynode/local\x00', 0x2, 0x0) write(r0, &(0x7f0000000240)='1\n\x00', 0x2) r1 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./config/cluster/mycluster/node/mynode/num\x00', 0x2, 0x0) write(r1, &(0x7f00000002c0), 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./config/cluster/mycluster/node/mynode/ipv4_address\x00', 0x2, 0x0) write(r2, &(0x7f0000000340)='127', 0x3) r3 = openat(0xffffffffffffff9c, 0x0, 0x2, 0x0) write(r3, 0x0, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x1ff) mkdirat(0xffffffffffffff9c, 0x0, 0x1ff) openat(0xffffffffffffff9c, 0x0, 0x2, 0x0) r4 = openat(0xffffffffffffff9c, 0x0, 0x2, 0x0) write(r4, 0x0, 0x0) r5 = openat(0xffffffffffffff9c, 0x0, 0x2, 0x0) write(r5, 0x0, 0x0) mknodat(0xffffffffffffff9c, 0x0, 0x8000, 0x100) r6 = openat(0xffffffffffffff9c, 0x0, 0x2, 0x0) dup2(r6, 0x64) r7 = openat(0xffffffffffffff9c, 0x0, 0x2, 0x0) write(r7, 0x0, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x1ff) mount(0x0, 0x0, 0x0, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000780)='./dlmfs/mydomain\x00', 0x1ff) rmdir(&(0x7f00000007c0)='./dlmfs/mydomain\x00') 1m30.228429321s ago: executing program 9 (id=127): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./sys\x00', 0x1ff) mount(&(0x7f0000000080)=@filename='none\x00', &(0x7f00000000c0)='./sys\x00', &(0x7f0000000100)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./sys/power/state\x00', 0x1, 0x0) write(r0, &(0x7f0000000180)='disk\n', 0x4) 1m28.172077182s ago: executing program 7 (id=132): r0 = syz_usb_connect$uac3(0x3, 0xe1, &(0x7f0000000800)=ANY=[@ANYBLOB="1201000200000040820582054000010203010902cf000301008032080b0003010020000904000000010120000a24010031000000000014240201010200030000000000000000000000001324030201030001030000000000000000000009040100000102200009040101010102200017240102000000000100010000000000000002100000000624020102100905010900020100000a25010000000000000009040200000102200009040201010102200017240101000000000100010000000000000002100000000624020102100905820900020100000a250100000000000000"], 0x0) syz_usb_control_io$uac3(r0, 0x0, &(0x7f0000000300)={0x44, &(0x7f0000000400)={0xa1, 0x1, 0x6, "060020010000"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) nanosleep(&(0x7f0000000000)={0x1}, 0x0) r1 = syz_open_dev$sndctrl(&(0x7f0000000100), 0x0, 0x0) r2 = syz_open_dev$sndctrl(&(0x7f0000000100), 0x1, 0x0) ioctl$SNDRV_CTL_IOCTL_TLV_READ(r1, 0xc00855da, &(0x7f0000000200)={0x1, 0x20, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) ioctl$SNDRV_CTL_IOCTL_TLV_READ(r1, 0xc00855da, &(0x7f0000000200)={0x2, 0x20, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) ioctl$SNDRV_CTL_IOCTL_TLV_READ(r1, 0xc00855da, &(0x7f0000000200)={0x3, 0x20, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) ioctl$SNDRV_CTL_IOCTL_TLV_READ(r1, 0xc00855da, &(0x7f0000000200)={0x4, 0x20, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) ioctl$SNDRV_CTL_IOCTL_TLV_READ(r1, 0xc00855da, &(0x7f0000000200)={0x5, 0x20, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) ioctl$SNDRV_CTL_IOCTL_TLV_READ(r2, 0xc00855da, &(0x7f0000000200)={0x1, 0x20, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) ioctl$SNDRV_CTL_IOCTL_TLV_READ(r2, 0xc00855da, &(0x7f0000000200)={0x2, 0x20, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) ioctl$SNDRV_CTL_IOCTL_TLV_READ(r2, 0xc00855da, &(0x7f0000000200)={0x3, 0x20, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) ioctl$SNDRV_CTL_IOCTL_TLV_READ(r2, 0xc00855da, &(0x7f0000000200)={0x4, 0x20, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) ioctl$SNDRV_CTL_IOCTL_TLV_READ(r2, 0xc00855da, &(0x7f0000000200)={0x5, 0x20, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) 1m26.868455013s ago: executing program 38 (id=96): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./sys\x00', &(0x7f00000000c0)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./sys/power/pm_test\x00', 0x2, 0x0) write(r0, &(0x7f0000000140)='freezer\n', 0x8) r1 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./sys/power/state\x00', 0x2, 0x0) write(r1, &(0x7f00000001c0)='freeze\n ', 0x8) 1m25.683944554s ago: executing program 7 (id=139): r0 = syz_usb_connect(0x2, 0x40, &(0x7f0000000000)=ANY=[@ANYBLOB="12010002ff0000407205feca00010000000109022e0001010080fa0904000004ff00000007058102400000070501024000000705820240000007050202400000"], &(0x7f0000000800)={0x0, 0x0, 0x0, 0x0}) nanosleep(&(0x7f0000000300)={0x1, 0x35a4e900}, 0x0) syz_usb_ep_read(r0, 0x1, 0x40, &(0x7f0000000200)=""/64) syz_usb_ep_write(r0, 0x81, 0x2, &(0x7f0000000100)="9001") syz_usb_ep_read(r0, 0x1, 0x40, &(0x7f0000000240)=""/64) syz_usb_ep_write(r0, 0x81, 0x2, &(0x7f0000000140)="9101") syz_usb_ep_read(r0, 0x1, 0x40, &(0x7f0000000280)=""/64) syz_usb_ep_write(r0, 0x81, 0x2, &(0x7f0000000180)="8401") syz_usb_ep_read(r0, 0x1, 0x40, &(0x7f00000002c0)=""/64) syz_usb_ep_write(r0, 0x81, 0x2, &(0x7f00000001c0)="8801") mkdirat(0xffffffffffffff9c, &(0x7f0000000400)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000400)='./sys\x00', &(0x7f0000000500)='sysfs\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./sys/bus/usb/devices/1-1:1.0/downstream_rate\x00', 0x0, 0x0) read(r1, &(0x7f0000000700)=""/256, 0x100) 1m24.31339317s ago: executing program 2 (id=144): r0 = syz_usb_connect$hid(0x0, 0x3f, &(0x7f0000000040)=ANY=[@ANYBLOB="12010002000000406d0422c20000000000010902290001010080320904000002030101000921110100012217000705810340000a0705020340000a00000000"], 0x0) syz_usb_control_io$hid(r0, &(0x7f00000001c0)={0x24, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="0022170000000600ff0900a10185020901150026ff00750895088102c0"], &(0x7f0000000080)={0x0, 0x21, 0x9, {0x9, 0x21, 0x111, 0x0, 0x1, {0x22, 0x17}}}}, &(0x7f0000000200)={0x2c, &(0x7f0000000640)={0x20, 0xa}, &(0x7f0000000280)={0x0, 0xa, 0x1}, &(0x7f00000002a0)={0x0, 0x8, 0x1, 0x1}, &(0x7f0000000240)={0x20, 0x1, 0x8, "0200000000000000"}, &(0x7f00000002c0)={0x20, 0x3, 0x1, 0x1}}) (async) nanosleep(&(0x7f0000000300)={0x1}, 0x0) syz_open_dev$hidraw(&(0x7f0000000500), 0x0, 0x0) syz_usb_ep_write(r0, 0x81, 0x9, &(0x7f0000000400)="028000000000000000") 1m23.993270345s ago: executing program 6 (id=146): r0 = syz_usb_connect(0x0, 0x3b, &(0x7f0000000040)=ANY=[@ANYBLOB="120100020000004032151d010001000000010902290001010080fa090400000203000000092111010001224e000705810340000107050203400001"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f00000001c0)={0x2c, &(0x7f0000000000)=ANY=[@ANYBLOB="00224e00000005010901a101850105091901290315002501950375018102950175058103c00600ff0901a101150026ff0075089540850f0901b102850c09018102850909019102850a09019102850b09018102c0"], 0x0, 0x0, 0x0, 0x0}, 0x0) syz_usb_ep_write(r0, 0x81, 0x8, &(0x7f0000001000)="0b06000010000101") nanosleep(&(0x7f0000000000)={0x0, 0x2faf080}, 0x0) syz_usb_ep_write(r0, 0x81, 0x8, &(0x7f0000001000)="0b06000010000101") nanosleep(&(0x7f0000000000)={0x0, 0x2faf080}, 0x0) syz_usb_ep_write(r0, 0x81, 0x8, &(0x7f0000001100)="0b06000000000000") nanosleep(&(0x7f0000000000)={0x0, 0x2faf080}, 0x0) syz_usb_ep_write(r0, 0x81, 0x8, &(0x7f0000001100)="0b06000000000000") nanosleep(&(0x7f0000000000)={0x0, 0x2faf080}, 0x0) syz_usb_ep_write(r0, 0x81, 0x13, &(0x7f0000001200)="0b1100"/19) nanosleep(&(0x7f0000000000)={0x0, 0x2faf080}, 0x0) syz_usb_ep_write(r0, 0x81, 0x13, &(0x7f0000001200)="0b1100"/19) nanosleep(&(0x7f0000000000)={0x0, 0x2faf080}, 0x0) nanosleep(&(0x7f0000000000)={0x0, 0x5f5e100}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000100)='./sys\x00', &(0x7f0000000200)='sysfs\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./sys/bus/usb/devices/1-1/power/control\x00', 0x2, 0x0) write(r1, &(0x7f0000000700)='auto\x00', 0x4) nanosleep(&(0x7f0000000000)={0x0, 0x5f5e100}, 0x0) write(r1, &(0x7f0000000800)='on\x00', 0x2) nanosleep(&(0x7f0000000000)={0x0, 0x5f5e100}, 0x0) 1m23.313607241s ago: executing program 0 (id=137): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./config\x00', &(0x7f0000000080)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./config/cluster/mycluster\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f00000001c0)='./config/cluster/mycluster/node/mynode\x00', 0x1ff) r0 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./config/cluster/mycluster/node/mynode/local\x00', 0x2, 0x0) write(r0, &(0x7f0000000240)='1\n\x00', 0x2) r1 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./config/cluster/mycluster/node/mynode/num\x00', 0x2, 0x0) write(r1, &(0x7f00000002c0), 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./config/cluster/mycluster/node/mynode/ipv4_address\x00', 0x2, 0x0) write(r2, &(0x7f0000000340)='127', 0x3) r3 = openat(0xffffffffffffff9c, 0x0, 0x2, 0x0) write(r3, 0x0, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x1ff) mkdirat(0xffffffffffffff9c, 0x0, 0x1ff) openat(0xffffffffffffff9c, 0x0, 0x2, 0x0) r4 = openat(0xffffffffffffff9c, 0x0, 0x2, 0x0) write(r4, 0x0, 0x0) r5 = openat(0xffffffffffffff9c, 0x0, 0x2, 0x0) write(r5, 0x0, 0x0) mknodat(0xffffffffffffff9c, 0x0, 0x8000, 0x100) r6 = openat(0xffffffffffffff9c, 0x0, 0x2, 0x0) dup2(r6, 0x64) r7 = openat(0xffffffffffffff9c, 0x0, 0x2, 0x0) write(r7, 0x0, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x1ff) mount(0x0, 0x0, 0x0, 0x0, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x1ff) rmdir(&(0x7f00000007c0)='./dlmfs/mydomain\x00') 1m23.220331357s ago: executing program 0 (id=147): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./nfsd\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./nfsd\x00', &(0x7f0000000040)='nfsd\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./nfsd/threads\x00', 0x2, 0x0) write(r0, &(0x7f0000000640)='0\n\x00', 0x2) r1 = openat(0xffffffffffffff9c, &(0x7f0000000700)='./nfsd/versions\x00', 0x2, 0x0) write(r1, &(0x7f0000000740)='-2 -3 +4\n\x00', 0x9) r2 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./nfsd/portlist\x00', 0x2, 0x0) write(r2, &(0x7f00000000c0)='tcp 2049\n\x00', 0x9) write(r0, &(0x7f0000000640)='1\n\x00', 0x2) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000200)='./proc\x00', &(0x7f0000000240)='proc\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000400)='./tmp\x00', 0x1ff) mount(0x0, &(0x7f0000000400)='./tmp\x00', &(0x7f0000000440)='tmpfs\x00', 0x0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./proc/net/rpc/auth.unix.ip/channel\x00', 0x2, 0x0) write(r3, &(0x7f0000000340)='nfsd 127.0.0.1 2147483647 *\n\x00', 0x1c) r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./proc/net/rpc/nfsd.export/channel\x00', 0x2, 0x0) write(r4, &(0x7f0000000140)='* / 2147483647 8192 0 0 0 fsloc 1 127.0.0.1 / 1\n\x00', 0x30) mkdirat(0xffffffffffffff9c, &(0x7f0000000500)='./mnt\x00', 0x1ff) mount$nfs4(&(0x7f0000000540)='127.0.0.1:/\x00', &(0x7f0000000500)='./mnt\x00', &(0x7f0000000580), 0x0, &(0x7f00000005c0)={[{'clientaddr=127.0.0.1'}, {'addr=127.0.0.1'}]}) 1m22.742314777s ago: executing program 0 (id=148): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x1bd, @empty}, 0x10) listen(r0, 0xa) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) mkdir(&(0x7f0000000100)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000200)='cifs\x00', 0x0, &(0x7f0000000300)='source=//127.0.0.1/share,user=root,pass=root,port=445,vers=3.0\x00') (async) r1 = accept(r0, 0x0, 0x0) read(r1, &(0x7f0000000400), 0x100) write(r1, &(0x7f0000000500)="00000080fe534d4240000000000000000000010001000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000041000100110300000000000000000000000000000000000000000000000010000000100000001000000000000000000000000000000000008000000000000000", 0x88) 1m22.742166454s ago: executing program 2 (id=149): r0 = socket$inet(0x2, 0x2, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000000)={'bond0\x00', &(0x7f0000000100)=@ethtool_rxnfc={0x47, 0x0, 0x0, {0x0, @hdata, {0x0, @random}, @hdata, {0x0, @random}}}}) 1m22.609272757s ago: executing program 2 (id=150): r0 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) write$UHID_CREATE2(r0, &(0x7f0000000000)={0xb, {'syz0\x00', 'syz0\x00', 'syz0\x00', 0x35, 0x0, 0x46d, 0xc21c, 0x0, 0x0, "0600ff0900a10185010901150026ff007508950781028502090275089501b1028505090575089504b1028507090775089504b102c0"}}, 0x14d) read(r0, &(0x7f0000001000)=""/4380, 0x111c) pwrite64(r0, &(0x7f0000002000)="0a00000001000000000005000000000000", 0x11, 0x0) pwrite64(r0, &(0x7f0000002000)="0a00000002000000000005000000000000", 0x11, 0x0) pwrite64(r0, &(0x7f0000002000)="0a00000003000000000008000000000000000000", 0x14, 0x0) read(r0, &(0x7f0000001000)=""/4380, 0x111c) pwrite64(r0, &(0x7f0000002000)="0a00000001000000000005000000000000", 0x11, 0x0) pwrite64(r0, &(0x7f0000002000)="0a00000002000000000005000000000000", 0x11, 0x0) pwrite64(r0, &(0x7f0000002000)="0a00000003000000000008000000000000000000", 0x14, 0x0) read(r0, &(0x7f0000001000)=""/4380, 0x111c) pwrite64(r0, &(0x7f0000002000)="0a00000001000000000005000000000000", 0x11, 0x0) pwrite64(r0, &(0x7f0000002000)="0a00000002000000000005000000000000", 0x11, 0x0) pwrite64(r0, &(0x7f0000002000)="0a00000003000000000008000000000000000000", 0x14, 0x0) read(r0, &(0x7f0000001000)=""/4380, 0x111c) pwrite64(r0, &(0x7f0000002000)="0a00000001000000000005000000000000", 0x11, 0x0) pwrite64(r0, &(0x7f0000002000)="0a00000002000000000005000000000000", 0x11, 0x0) pwrite64(r0, &(0x7f0000002000)="0a00000003000000000008000000000000000000", 0x14, 0x0) read(r0, &(0x7f0000001000)=""/4380, 0x111c) pwrite64(r0, &(0x7f0000002000)="0a00000001000000000005000000000000", 0x11, 0x0) pwrite64(r0, &(0x7f0000002000)="0a00000002000000000005000000000000", 0x11, 0x0) pwrite64(r0, &(0x7f0000002000)="0a00000003000000000008000000000000000000", 0x14, 0x0) read(r0, &(0x7f0000001000)=""/4380, 0x111c) pwrite64(r0, &(0x7f0000002000)="0a00000001000000000005000000000000", 0x11, 0x0) pwrite64(r0, &(0x7f0000002000)="0a00000002000000000005000000000000", 0x11, 0x0) pwrite64(r0, &(0x7f0000002000)="0a00000003000000000008000000000000000000", 0x14, 0x0) nanosleep(&(0x7f0000001000)={0x0, 0x1dcd6500}, 0x0) 1m22.604993012s ago: executing program 0 (id=151): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(&(0x7f0000000000)=@filename='none\x00', &(0x7f0000000040)='./sys\x00', &(0x7f0000000080)='sysfs\x00', 0x0, &(0x7f00000000c0)) 1m22.398945133s ago: executing program 0 (id=152): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./dev\x00', 0x1ff) mount(&(0x7f0000000040)=@filename='devtmpfs\x00', &(0x7f0000000080)='./dev\x00', &(0x7f00000000c0)='devtmpfs\x00', 0x0, 0x0) r0 = syz_usb_connect(0x0, 0x39, &(0x7f0000000100)=ANY=[@ANYBLOB="12010002000000402a1101000001010203010902270001010080fa0904000003ffffff00070581020002000705820200020007050302000200"], 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000001000)={0x84, &(0x7f0000001100)={0xc0, 0xb1, 0x1, "01"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) nanosleep(&(0x7f0000000300)={0x1}, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./dev/lirc0\x00', 0x2, 0x0) write(r1, &(0x7f0000000400)="0100000002000000", 0x8) 1m21.846363805s ago: executing program 7 (id=153): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e20, @empty}, 0x10) listen(r0, 0x10) r1 = syz_io_uring_setup(0x10, &(0x7f0000000040), &(0x7f0000000100)=0x0, &(0x7f0000000108)=0x0, &(0x7f0000000110)=0x0) io_uring_register$IORING_REGISTER_FILES(r1, 0x2, &(0x7f0000000080)=[0xffffffffffffffff], 0x1) syz_io_uring_submit(r2, r3, r4, &(0x7f0000000200)=@IORING_OP_TIMEOUT={0xb, 0x4, 0x0, 0x0, 0x0, &(0x7f0000000240)={0x0, 0x1dcd6500}}) syz_io_uring_submit(r2, r3, r4, &(0x7f0000000280)=@IORING_OP_ACCEPT={0xd, 0x4, 0x0, r0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x1}}) syz_io_uring_submit(r2, r3, r4, &(0x7f0000000300)=@IORING_OP_CLOSE={0x13, 0x1, 0x0, 0x0}) io_uring_enter(r1, 0x3, 0x0, 0x0, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000400)='./file0\x00', 0x1ff) mount(0x0, &(0x7f0000000400)='./file0\x00', &(0x7f0000000440)='cifs\x00', 0x0, &(0x7f0000000480)='unc=\\\\127.0.0.1\\share,ip=127.0.0.1,port=20000,user=root,pass=root\x00') 1m21.708484976s ago: executing program 7 (id=154): r0 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) write$UHID_CREATE2(r0, &(0x7f0000000000)={0xb, {'syz0\x00', 'syz1\x00', 'syz0\x00', 0x27, 0x5, 0x46d, 0xb012, 0x0, 0x0, "0600ff0901a10185100901150026ff007508950681000901910085110901951381000901910085"}}, 0x13f) read(r0, &(0x7f0000001000), 0x111c) write$UHID_INPUT2(r0, &(0x7f0000000300)={0xc, {0x14, "11ff00000100"/20}}, 0x1a) write$UHID_INPUT2(r0, &(0x7f0000000400)={0xc, {0x14, "11ff0100"/20}}, 0x1a) 1m21.593752509s ago: executing program 2 (id=155): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./proc\x00', &(0x7f0000000010)='proc\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000050)='./proc/net/afs/rootcell\x00', 0x2, 0x0) write(r0, &(0x7f0000000070)='syz0:invalid_ip', 0xf) close(r0) r1 = socket$rxrpc(0x21, 0x2, 0x2) bind$rxrpc(r1, &(0x7f0000000080)=@in4={0x21, 0x1, 0x2, 0x10, {0x2, 0x1b5b, @loopback}}, 0x24) listen(r1, 0xa) sendmsg(r1, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)=[{0x18, 0x110, 0x1, "0100000000000000"}, {0x10, 0x110, 0xe}], 0x28}, 0x0) r2 = syz_io_uring_setup(0x10, &(0x7f0000001000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000001100)=0x0, &(0x7f0000001108)=0x0, &(0x7f0000001110)=0x0) syz_io_uring_submit(r3, r4, r5, &(0x7f0000001200)=@IORING_OP_RECVMSG={0xa, 0x4, 0x0, r1, 0x0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000400)=[{&(0x7f0000000500)=""/1024, 0x400}], 0x1}}) syz_io_uring_submit(r3, r4, r5, &(0x7f0000001300)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r1, 0x0, &(0x7f0000000700)={0x0, 0x0, &(0x7f0000000800)=[{&(0x7f0000000900)="ff00"/1048, 0x418}], 0x1, &(0x7f0000000a00)=[{0x18, 0x110, 0x1, "0100000000000000"}], 0x18}}) io_uring_enter(r2, 0x2, 0x0, 0x0, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000b00)='./file0\x00', 0x1ff) mount$afs(&(0x7f0000000d00)=@cell={0x23, 'syz0:', 'syz0'}, &(0x7f0000000b00)='./file0\x00', &(0x7f0000000c00), 0x0, 0x0) 1m21.323069982s ago: executing program 2 (id=156): r0 = memfd_create(&(0x7f0000000100)='img\x00', 0x0) ftruncate(r0, 0x1000000) r1 = syz_open_dev$loop(&(0x7f0000000140), 0x0, 0x2) ioctl$LOOP_SET_FD(r1, 0x4c00, r0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000040)='sysfs\x00', 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./sys/module/block2mtd/parameters/block2mtd\x00', 0x1, 0x0) write(r2, &(0x7f00000000c0)='/dev/loop0,65536\x00', 0x11) r3 = syz_open_dev$mtd(&(0x7f0000000600), 0x1, 0x2) ioctl$MEMERASE(r3, 0x40084d02, &(0x7f0000000640)={0x0, 0x1000000}) r4 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) ioctl(r4, 0x40186f40, &(0x7f00000001c0)="000000000100"/24) mkdirat(0xffffffffffffff9c, &(0x7f0000000300)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000000300)='./dev\x00', &(0x7f0000000340)='devtmpfs\x00', 0x0, 0x0) nanosleep(&(0x7f0000000400)={0x0, 0x1312d00}, 0x0) nanosleep(&(0x7f0000000400)={0x0, 0x1312d00}, 0x0) nanosleep(&(0x7f0000000400)={0x0, 0x1312d00}, 0x0) nanosleep(&(0x7f0000000400)={0x0, 0x1312d00}, 0x0) nanosleep(&(0x7f0000000400)={0x0, 0x1312d00}, 0x0) nanosleep(&(0x7f0000000400)={0x0, 0x1312d00}, 0x0) nanosleep(&(0x7f0000000400)={0x0, 0x1312d00}, 0x0) nanosleep(&(0x7f0000000400)={0x0, 0x1312d00}, 0x0) nanosleep(&(0x7f0000000400)={0x0, 0x1312d00}, 0x0) nanosleep(&(0x7f0000000400)={0x0, 0x1312d00}, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000380)='./dev/ubi0\x00', 0x2, 0x0) ioctl(r5, 0x40986f00, &(0x7f0000000440)="0000000001000000000001000000000003000600000000006d795f766f6c00"/154) mkdirat(0xffffffffffffff9c, &(0x7f0000000500)='./mnt\x00', 0x1ff) mount(&(0x7f0000000540)=@filename='ubi0_0\x00', &(0x7f0000000500)='./mnt\x00', &(0x7f0000000580)='ubifs\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f00000005c0)='./mnt/test\x00', 0x42, 0x1ff) 1m20.730648329s ago: executing program 7 (id=157): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./config\x00', &(0x7f0000000080)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./config/cluster/mycluster\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f00000001c0)='./config/cluster/mycluster/node/mynode\x00', 0x1ff) r0 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./config/cluster/mycluster/node/mynode/local\x00', 0x2, 0x0) write(r0, &(0x7f0000000240)='1\n\x00', 0x2) r1 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./config/cluster/mycluster/node/mynode/num\x00', 0x2, 0x0) write(r1, &(0x7f00000002c0), 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./config/cluster/mycluster/node/mynode/ipv4_address\x00', 0x2, 0x0) write(r2, &(0x7f0000000340)='127', 0x3) r3 = openat(0xffffffffffffff9c, 0x0, 0x2, 0x0) write(r3, 0x0, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x1ff) mkdirat(0xffffffffffffff9c, 0x0, 0x1ff) openat(0xffffffffffffff9c, 0x0, 0x2, 0x0) r4 = openat(0xffffffffffffff9c, 0x0, 0x2, 0x0) write(r4, 0x0, 0x0) r5 = openat(0xffffffffffffff9c, 0x0, 0x2, 0x0) write(r5, 0x0, 0x0) mknodat(0xffffffffffffff9c, 0x0, 0x8000, 0x100) r6 = openat(0xffffffffffffff9c, 0x0, 0x2, 0x0) dup2(r6, 0x64) r7 = openat(0xffffffffffffff9c, 0x0, 0x2, 0x0) write(r7, 0x0, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x1ff) mount(0x0, 0x0, 0x0, 0x0, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x1ff) rmdir(0x0) 1m20.613592267s ago: executing program 7 (id=158): r0 = syz_usb_connect(0x2, 0x40, &(0x7f0000000000)=ANY=[@ANYBLOB="12010002ff0000407205feca00010000000109022e0001010080fa0904000004ff00000007058102400000070501024000000705820240000007050202400000"], &(0x7f0000000800)={0x0, 0x0, 0x0, 0x0}) syz_usb_ep_write(r0, 0x81, 0x8, &(0x7f0000000100)="9001000000000000") syz_usb_ep_read(r0, 0x1, 0x40, &(0x7f0000000200)=""/64) nanosleep(&(0x7f0000000300)={0x0, 0x5f5e100}, 0x0) syz_usb_ep_write(r0, 0x81, 0x2, &(0x7f0000000140)="8401") syz_usb_ep_read(r0, 0x1, 0x40, &(0x7f0000000240)=""/64) nanosleep(&(0x7f0000000300)={0x0, 0x5f5e100}, 0x0) syz_usb_ep_write(r0, 0x81, 0x2, &(0x7f0000000180)="8801") syz_usb_ep_read(r0, 0x1, 0x40, &(0x7f0000000280)=""/64) nanosleep(&(0x7f0000000300)={0x0, 0x5f5e100}, 0x0) syz_usb_ep_write(r0, 0x81, 0x2, &(0x7f00000001c0)="9101") syz_usb_ep_read(r0, 0x1, 0x40, &(0x7f00000002c0)=""/64) nanosleep(&(0x7f0000000300)={0x0, 0x5f5e100}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000400)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000400)='./sys\x00', &(0x7f0000000500)='sysfs\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./sys/class/atm/cxacru0/device/downstream_rate\x00', 0x0, 0x0) read(r1, &(0x7f0000000700)=""/256, 0x100) 1m20.243060209s ago: executing program 2 (id=159): syz_usb_connect(0x0, 0x80, &(0x7f0000000000)=ANY=[@ANYBLOB="12011001000000408c0d030100010000000109026e0002010080320904000000010100000924010001280001010c24020101010002030000000a240602010101020200092403030103000200090401000001020000090401010101020000072401010101000b2402010202100180bb0009050109c00001000007250101000000"], 0x0) nanosleep(&(0x7f0000000100)={0x0, 0x1dcd6500}, 0x0) r0 = syz_open_dev$sndctrl(&(0x7f0000000200), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_READ(r0, 0xc4c85512, &(0x7f0000000300)={{0x1, 0x3}}) 57.660117023s ago: executing program 39 (id=146): r0 = syz_usb_connect(0x0, 0x3b, &(0x7f0000000040)=ANY=[@ANYBLOB="120100020000004032151d010001000000010902290001010080fa090400000203000000092111010001224e000705810340000107050203400001"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f00000001c0)={0x2c, &(0x7f0000000000)=ANY=[@ANYBLOB="00224e00000005010901a101850105091901290315002501950375018102950175058103c00600ff0901a101150026ff0075089540850f0901b102850c09018102850909019102850a09019102850b09018102c0"], 0x0, 0x0, 0x0, 0x0}, 0x0) syz_usb_ep_write(r0, 0x81, 0x8, &(0x7f0000001000)="0b06000010000101") nanosleep(&(0x7f0000000000)={0x0, 0x2faf080}, 0x0) syz_usb_ep_write(r0, 0x81, 0x8, &(0x7f0000001000)="0b06000010000101") nanosleep(&(0x7f0000000000)={0x0, 0x2faf080}, 0x0) syz_usb_ep_write(r0, 0x81, 0x8, &(0x7f0000001100)="0b06000000000000") nanosleep(&(0x7f0000000000)={0x0, 0x2faf080}, 0x0) syz_usb_ep_write(r0, 0x81, 0x8, &(0x7f0000001100)="0b06000000000000") nanosleep(&(0x7f0000000000)={0x0, 0x2faf080}, 0x0) syz_usb_ep_write(r0, 0x81, 0x13, &(0x7f0000001200)="0b1100"/19) nanosleep(&(0x7f0000000000)={0x0, 0x2faf080}, 0x0) syz_usb_ep_write(r0, 0x81, 0x13, &(0x7f0000001200)="0b1100"/19) nanosleep(&(0x7f0000000000)={0x0, 0x2faf080}, 0x0) nanosleep(&(0x7f0000000000)={0x0, 0x5f5e100}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000100)='./sys\x00', &(0x7f0000000200)='sysfs\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./sys/bus/usb/devices/1-1/power/control\x00', 0x2, 0x0) write(r1, &(0x7f0000000700)='auto\x00', 0x4) nanosleep(&(0x7f0000000000)={0x0, 0x5f5e100}, 0x0) write(r1, &(0x7f0000000800)='on\x00', 0x2) nanosleep(&(0x7f0000000000)={0x0, 0x5f5e100}, 0x0) 57.342051193s ago: executing program 40 (id=152): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./dev\x00', 0x1ff) mount(&(0x7f0000000040)=@filename='devtmpfs\x00', &(0x7f0000000080)='./dev\x00', &(0x7f00000000c0)='devtmpfs\x00', 0x0, 0x0) r0 = syz_usb_connect(0x0, 0x39, &(0x7f0000000100)=ANY=[@ANYBLOB="12010002000000402a1101000001010203010902270001010080fa0904000003ffffff00070581020002000705820200020007050302000200"], 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000001000)={0x84, &(0x7f0000001100)={0xc0, 0xb1, 0x1, "01"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) nanosleep(&(0x7f0000000300)={0x1}, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./dev/lirc0\x00', 0x2, 0x0) write(r1, &(0x7f0000000400)="0100000002000000", 0x8) 57.194399697s ago: executing program 41 (id=159): syz_usb_connect(0x0, 0x80, &(0x7f0000000000)=ANY=[@ANYBLOB="12011001000000408c0d030100010000000109026e0002010080320904000000010100000924010001280001010c24020101010002030000000a240602010101020200092403030103000200090401000001020000090401010101020000072401010101000b2402010202100180bb0009050109c00001000007250101000000"], 0x0) nanosleep(&(0x7f0000000100)={0x0, 0x1dcd6500}, 0x0) r0 = syz_open_dev$sndctrl(&(0x7f0000000200), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_READ(r0, 0xc4c85512, &(0x7f0000000300)={{0x1, 0x3}}) 57.025667544s ago: executing program 42 (id=158): r0 = syz_usb_connect(0x2, 0x40, &(0x7f0000000000)=ANY=[@ANYBLOB="12010002ff0000407205feca00010000000109022e0001010080fa0904000004ff00000007058102400000070501024000000705820240000007050202400000"], &(0x7f0000000800)={0x0, 0x0, 0x0, 0x0}) syz_usb_ep_write(r0, 0x81, 0x8, &(0x7f0000000100)="9001000000000000") syz_usb_ep_read(r0, 0x1, 0x40, &(0x7f0000000200)=""/64) nanosleep(&(0x7f0000000300)={0x0, 0x5f5e100}, 0x0) syz_usb_ep_write(r0, 0x81, 0x2, &(0x7f0000000140)="8401") syz_usb_ep_read(r0, 0x1, 0x40, &(0x7f0000000240)=""/64) nanosleep(&(0x7f0000000300)={0x0, 0x5f5e100}, 0x0) syz_usb_ep_write(r0, 0x81, 0x2, &(0x7f0000000180)="8801") syz_usb_ep_read(r0, 0x1, 0x40, &(0x7f0000000280)=""/64) nanosleep(&(0x7f0000000300)={0x0, 0x5f5e100}, 0x0) syz_usb_ep_write(r0, 0x81, 0x2, &(0x7f00000001c0)="9101") syz_usb_ep_read(r0, 0x1, 0x40, &(0x7f00000002c0)=""/64) nanosleep(&(0x7f0000000300)={0x0, 0x5f5e100}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000400)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000400)='./sys\x00', &(0x7f0000000500)='sysfs\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./sys/class/atm/cxacru0/device/downstream_rate\x00', 0x0, 0x0) read(r1, &(0x7f0000000700)=""/256, 0x100) 56.858541254s ago: executing program 43 (id=127): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./sys\x00', 0x1ff) mount(&(0x7f0000000080)=@filename='none\x00', &(0x7f00000000c0)='./sys\x00', &(0x7f0000000100)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./sys/power/state\x00', 0x1, 0x0) write(r0, &(0x7f0000000180)='disk\n', 0x4) 33.551053929s ago: executing program 8 (id=164): r0 = syz_usb_connect(0x2, 0x40, &(0x7f0000000000)=ANY=[@ANYBLOB="12010002ff0000407205feca00010000000109022e0001010080fa0904000004ff00000007058102400000070501024000000705820240000007050202400000"], 0x0) syz_usb_ep_write(r0, 0x81, 0x40, &(0x7f0000000100)="900100"/64) syz_usb_ep_read(r0, 0x1, 0x40, &(0x7f0000000200)=""/64) syz_usb_ep_write(r0, 0x81, 0x40, &(0x7f0000000140)="910100"/64) syz_usb_ep_read(r0, 0x1, 0x40, &(0x7f0000000240)=""/64) syz_usb_ep_write(r0, 0x81, 0x40, &(0x7f0000000180)="840100"/64) syz_usb_ep_read(r0, 0x1, 0x40, &(0x7f0000000280)=""/64) syz_usb_ep_write(r0, 0x81, 0x40, &(0x7f00000001c0)="880100"/64) syz_usb_ep_read(r0, 0x1, 0x40, &(0x7f00000002c0)=""/64) nanosleep(&(0x7f0000000300)={0x1}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000400)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000400)='./sys\x00', &(0x7f0000000500)='sysfs\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./sys/bus/usb/devices/1-1:1.0/downstream_rate\x00', 0x0, 0x0) read(r1, &(0x7f0000000700)=""/256, 0x100) 31.430794002s ago: executing program 8 (id=178): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./dev\x00', 0x1ff) mount(&(0x7f0000000100)=@filename='devtmpfs\x00', &(0x7f0000000000)='./dev\x00', &(0x7f0000000100)='devtmpfs\x00', 0x0, 0x0) r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0) ioctl(r0, 0x40186f40, &(0x7f0000000300)="ffffffff00"/24) nanosleep(&(0x7f0000000600)={0x0, 0x1dcd6500}, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./dev/ubi0\x00', 0x2, 0x0) ioctl(r1, 0xc01c6f06, &(0x7f0000000500)='\x00'/28) 30.75518783s ago: executing program 8 (id=180): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000100)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./sys/bus/platform/devices/hpet/driver/unbind\x00', 0x1, 0x0) write(r0, &(0x7f0000000300)='hpet\x00', 0x5) r1 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./sys/bus/platform/devices/hpet/resource0\x00', 0x2, 0x0) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x3, 0x11, r1, 0x0) pipe2(&(0x7f0000000700)={0x0, 0x0}, 0x0) write(r3, &(0x7f0000000800)='\nBTO', 0x4) read(r2, &(0x7f0000001040)=""/4, 0x4) write(r3, &(0x7f0000000900)="000000a0", 0x4) read(r2, &(0x7f0000001010)=""/4, 0x4) write(r3, &(0x7f0000000a00)="01000000", 0x4) read(r2, &(0x7f0000001014)=""/4, 0x4) write(r3, &(0x7f0000000b00)='@\x00\x00\x00', 0x4) read(r2, &(0x7f0000001048)=""/4, 0x4) r4 = openat(0xffffffffffffff9c, &(0x7f0000000c00)='./sys/bus/platform/devices/hpet/driver_override\x00', 0x1, 0x0) write(r4, &(0x7f0000000d00)='dwc2\x00', 0x5) r5 = openat(0xffffffffffffff9c, &(0x7f0000000e00)='./sys/bus/platform/drivers/dwc2/bind\x00', 0x1, 0x0) write(r5, &(0x7f0000000f00)='hpet\x00', 0x5) 30.738657525s ago: executing program 8 (id=181): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./sys\x00', 0x1ff) mount(&(0x7f0000000080)=@filename='./sys\x00', &(0x7f00000000c0)='./sys\x00', &(0x7f0000000100)='sysfs\x00', 0x0, &(0x7f0000000140)='\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./sys/power/state\x00', 0x1, 0x0) write(r0, &(0x7f00000001c0)='disk\n', 0x5) 25.750882637s ago: executing program 4 (id=162): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r0, 0x400448ca, 0x0) (async) syz_emit_vhci(&(0x7f0000000000)=ANY=[@ANYBLOB="040e0401030c00"], 0x7) 25.503359114s ago: executing program 4 (id=191): r0 = openat$userio(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) write$USERIO_CMD_SET_PORT_TYPE(r0, &(0x7f00000000c0)={0x1, 0x1}, 0x2) write$USERIO_CMD_REGISTER(r0, &(0x7f0000000180), 0x2) writev(r0, &(0x7f0000000000)=[{&(0x7f0000000100)="02fa", 0x2}, {&(0x7f0000000110)="0200", 0x2}, {&(0x7f0000000120)="0200", 0x2}, {&(0x7f0000000130)="02fa", 0x2}, {&(0x7f0000000140)="0273", 0x2}, {&(0x7f0000000150)="0202", 0x2}, {&(0x7f0000000160)="0264", 0x2}], 0x7) 24.127158118s ago: executing program 4 (id=196): r0 = syz_open_dev$mtd(&(0x7f0000000600), 0x1, 0x2) ioctl$MEMERASE(r0, 0x40084d02, &(0x7f0000000640)={0x0, 0x1000000}) 22.918296094s ago: executing program 4 (id=199): r0 = openat$vnet(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) ioctl$VHOST_SET_OWNER(r0, 0xaf01, 0x0) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000000)={0x1, 0x0, [{0x0, 0x10000, &(0x7f0000001000)}]}) ioctl$VHOST_SET_VRING_NUM(r0, 0x4008af10, &(0x7f00000002a0)={0x1, 0x100}) ioctl$VHOST_SET_VRING_BASE(r0, 0x4008af12, &(0x7f00000002c0)={0x1}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000280)={0x1, 0x0, &(0x7f0000001000), &(0x7f0000002000), &(0x7f0000003000)}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x1002}) ioctl$VHOST_NET_SET_BACKEND(r0, 0x4008af30, &(0x7f0000000180)={0x1, r1}) r2 = eventfd(0x0) write(r2, &(0x7f0000001000)="0100000000000000", 0x8) write(r2, &(0x7f0000001008)='\n\x00\x00\x00\x00\x00\x00\x00', 0x8) write(r2, &(0x7f0000003000)="0000010000000000", 0x8) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f0000000190)={0x1, r2}) 22.562981608s ago: executing program 4 (id=201): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000040)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./sys/bus/pci/devices/0000:00:02.0/resource0\x00', 0x2, 0x0) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x11, r0, 0x0) pipe2(&(0x7f0000000300)={0x0, 0x0}, 0x0) write(r2, &(0x7f00000000c0)='\x00\x00TO', 0x4) read(r1, &(0x7f0000000040)=""/4, 0x4) write(r2, &(0x7f00000002c0)='\x00\x00\x00\x00', 0x4) read(r1, &(0x7f0000000044)=""/4, 0x4) write(r2, &(0x7f0000000340)="68488822", 0x4) read(r1, &(0x7f0000000048)=""/4, 0x4) write(r2, &(0x7f0000000380)="e800f00f", 0x4) read(r1, &(0x7f000000004c)=""/4, 0x4) write(r2, &(0x7f00000003c0)="2000f01f", 0x4) read(r1, &(0x7f0000000050)=""/4, 0x4) write(r2, &(0x7f0000000400)="00100000", 0x4) read(r1, &(0x7f0000000024)=""/4, 0x4) write(r2, &(0x7f0000000440)="00101000", 0x4) read(r1, &(0x7f0000000028)=""/4, 0x4) write(r2, &(0x7f0000000480)="00040002", 0x4) read(r1, &(0x7f0000000100)=""/4, 0x4) r3 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./sys/bus/pci/devices/0000:00:02.0/driver/unbind\x00', 0x1, 0x0) write(r3, &(0x7f0000000180)='0000:00:02.0\x00', 0xd) r4 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./sys/bus/pci/devices/0000:00:02.0/driver_override\x00', 0x1, 0x0) write(r4, &(0x7f0000000200)='dwc2-pci\x00', 0x9) r5 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./sys/bus/pci/drivers/dwc2-pci/bind\x00', 0x1, 0x0) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) write(r5, &(0x7f0000000280)='0000:00:02.0\x00', 0xd) write(r2, &(0x7f00000004c0)="00000088", 0x4) read(r1, &(0x7f0000000010)=""/4, 0x4) 22.269272406s ago: executing program 4 (id=204): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./cg\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./cg\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./cg/cgroup.subtree_control\x00', 0x2, 0x0) write(r0, &(0x7f00000000c0)='+memory\x00', 0x7) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./cg/test\x00', 0x1ff) r1 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./cg/test/memory.max\x00', 0x2, 0x0) write(r1, &(0x7f0000000180)='4096', 0x4) r2 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./cg/test/cgroup.procs\x00', 0x2, 0x0) write(r2, &(0x7f0000000200)='0', 0x1) mmap(&(0x7f0000010000/0x10000)=nil, 0x10000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mlock(&(0x7f0000010000/0x10000)=nil, 0x10000) 16.725235915s ago: executing program 1 (id=213): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x1111, @loopback}, 0x10) listen(r0, 0x10) r1 = syz_io_uring_setup(0x10, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000000140)=0x0, &(0x7f0000000180)=0x0, &(0x7f00000001c0)=0x0) io_uring_register$IORING_REGISTER_FILES(r1, 0x2, &(0x7f0000000100)=[0xffffffff], 0x1) syz_io_uring_submit(r2, r3, r4, &(0x7f0000000340)=@IORING_OP_ACCEPT={0xd, 0x4, 0x0, r0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x1}}) syz_io_uring_submit(r2, r3, r4, &(0x7f0000000440)=@IORING_OP_WRITEV={0x2, 0x1, 0x0, @fd_index, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000200)="00000080fe534d42400001000000000000000100010000000000000000000000000000000000000000000000000000000000000000000000000000004100010011030000000000000000000000000000000000000000000000001000000010000000100000000000000000000000000000000000800000000000000000000048fe534d42400001000000000001000100010000000000000001000000000000000000000000000000010000000000000000000000000000000000000000000000090000004800000000000050fe534d42400001000000000002000100010000000000000002000000000000000000000001000000010000000000000000000000000000000000000000000000100001000000000008000000ff011f00", 0x124}], 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, '\x00', 0x0}}) io_uring_enter(r1, 0x2, 0x0, 0x0, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000300)='./cifs\x00', 0x1ed) mount(&(0x7f0000000800)=@filename='\\\\127.0.0.1\\share\x00', &(0x7f0000000300)='./cifs\x00', &(0x7f0000000400)='cifs\x00', 0x0, &(0x7f0000000500)='ip=127.0.0.1,port=4369,user=root,password=root,vers=3.1.1\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000000900)='./proc\x00', 0x1ed) mount(&(0x7f0000000a00)=@filename='proc\x00', &(0x7f0000000900)='./proc\x00', &(0x7f0000000a00)='proc\x00', 0x0, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000b00)='./proc/fs/cifs/Stats\x00', 0x0, 0x0) read(r5, &(0x7f0000000c00), 0x1000) 16.535059473s ago: executing program 1 (id=214): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000040)='sysfs\x00', 0x0, 0x0) chmod(&(0x7f0000000080)='./sys/module/cx231xx/parameters/transfer_mode\x00', 0x1b6) r0 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./sys/module/cx231xx/parameters/transfer_mode\x00', 0x1, 0x0) write(r0, &(0x7f0000000100)='0\n', 0x2) r1 = syz_usb_connect(0x0, 0x45, &(0x7f0000000140)=ANY=[@ANYBLOB="1201000200000040191d086100000000000109023300030100c000080b01020000000009040000000000000009040100000000000009040200010000000007058102000200"], 0x0) (async) nanosleep(&(0x7f0000000400)={0x3}, 0x0) syz_usb_control_io(r1, 0x0, &(0x7f0000000200)={0x84, &(0x7f0000000240)={0xc0, 0x0, 0x4, "c0000000"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) nanosleep(&(0x7f0000000400)={0x1}, 0x0) r2 = syz_open_dev$sndpcmc(&(0x7f0000000500), 0x0, 0x2) ioctl$SNDRV_PCM_IOCTL_PREPARE(r2, 0x4140, 0x0) ioctl$SNDRV_PCM_IOCTL_START(r2, 0x4142, 0x0) r3 = syz_open_dev$sndpcmc(&(0x7f0000000500), 0x1, 0x2) ioctl$SNDRV_PCM_IOCTL_PREPARE(r3, 0x4140, 0x0) ioctl$SNDRV_PCM_IOCTL_START(r3, 0x4142, 0x0) 15.488216918s ago: executing program 44 (id=181): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./sys\x00', 0x1ff) mount(&(0x7f0000000080)=@filename='./sys\x00', &(0x7f00000000c0)='./sys\x00', &(0x7f0000000100)='sysfs\x00', 0x0, &(0x7f0000000140)='\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./sys/power/state\x00', 0x1, 0x0) write(r0, &(0x7f00000001c0)='disk\n', 0x5) 13.421281192s ago: executing program 1 (id=217): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000040)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./sys/class/graphics/fbcon/rotate_all\x00', 0x1, 0x0) write(r0, &(0x7f00000000c0)='1\x00', 0x2) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) write(r1, &(0x7f0000000100)='hello\x00', 0x6) nanosleep(&(0x7f0000000140)={0x1}, 0x0) 12.470400155s ago: executing program 1 (id=220): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000100)='sysfs\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000200)='./sys/module/nf_conntrack_sip\x00', 0x0, 0x0) 12.325353859s ago: executing program 1 (id=222): r0 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_ifreq(r0, 0x8914, &(0x7f0000000000)={'veth0\x00', @ifru_flags}) 12.153668426s ago: executing program 1 (id=223): mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./config\x00', 0x1ff) mount(0x0, &(0x7f0000000100)='./config\x00', &(0x7f0000000140)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000180)='./config/dlm\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f00000001c0)='./config/dlm/cluster\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./config/dlm/cluster/comms\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./config/dlm/cluster/comms/1\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./config/dlm/cluster/comms/2\x00', 0x1ff) r0 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./config/dlm/cluster/comms/1/local\x00', 0x1, 0x0) write(r0, &(0x7f0000000340)='1\n\x00', 0x2) close(r0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000380)='./config/dlm/cluster/comms/1/addr\x00', 0x1, 0x0) write(r1, &(0x7f00000003c0)="020052487f00000100"/136, 0x80) close(r1) r2 = openat(0xffffffffffffff9c, &(0x7f0000000480)='./config/dlm/cluster/comms/2/addr\x00', 0x1, 0x0) write(r2, &(0x7f00000004c0)="020030397f00000100"/136, 0x80) close(r2) openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000580), 0x2, 0x0) r3 = syz_io_uring_setup(0x20, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000000640)=0x0, &(0x7f0000000680)=0x0, &(0x7f00000006c0)=0x0) r7 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000700), 0x2, 0x0) syz_io_uring_submit(r4, r5, r6, &(0x7f0000000740)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd=r7, 0x0, &(0x7f00000007c0)=[{&(0x7f0000000800)="0600000000000000020000000401000000000000000000006d796c7300"/128, 0x80}], 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, '\x00', 0x0}}) io_uring_enter(r3, 0x1, 0x0, 0x0, 0x0, 0x0) nanosleep(&(0x7f0000000300)={0x2}, 0x0) r8 = socket(0x2, 0x1, 0x0) setsockopt(r8, 0x1, 0x2, &(0x7f0000000880)="01000000", 0x4) bind(r8, &(0x7f00000008c0)=@generic={0x2, "30397f00000100"}, 0x10) connect(r8, &(0x7f0000000940)=@generic={0x2, "52487f00000100"}, 0x10) write(r8, &(0x7f00000009c0)="02000300000000000200000028000300050000000000000002000300000000000200000010000500", 0x28) nanosleep(&(0x7f0000000300)={0x2}, 0x0) write(r8, &(0x7f0000000a00)="02000300010000000200000010000400", 0x10) 8.448751161s ago: executing program 6 (id=215): syz_usb_connect(0x0, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="12010002ffffff406d04000900000102030109021b0001010080fa0904000001ff000000090581010002010000"], 0x0) nanosleep(&(0x7f0000000300)={0x1}, 0x0) r0 = syz_open_dev$video(&(0x7f0000000100), 0x8, 0x2) ioctl$VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000200)={0x2, 0x9, 0x1}) ioctl$VIDIOC_QBUF(r0, 0xc058560f, &(0x7f0000000400)=@multiplanar_mmap) ioctl$VIDIOC_STREAMON(r0, 0x40045612, &(0x7f0000000500)=0x9) 7.399096361s ago: executing program 3 (id=234): r0 = memfd_create(&(0x7f0000000100)='img\x00', 0x0) ftruncate(r0, 0x1000000) r1 = syz_open_dev$loop(&(0x7f0000000140), 0x0, 0x2) ioctl$LOOP_SET_FD(r1, 0x4c00, r0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000040)='sysfs\x00', 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./sys/module/block2mtd/parameters/block2mtd\x00', 0x1, 0x0) write(r2, &(0x7f00000000c0)='/dev/loop0,65536\x00', 0x11) mkdirat(0xffffffffffffff9c, &(0x7f0000000300)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000000300)='./dev\x00', &(0x7f0000000340)='devtmpfs\x00', 0x0, 0x0) nanosleep(&(0x7f0000000400)={0x0, 0x1312d00}, 0x0) nanosleep(&(0x7f0000000400)={0x0, 0x1312d00}, 0x0) nanosleep(&(0x7f0000000400)={0x0, 0x1312d00}, 0x0) nanosleep(&(0x7f0000000400)={0x0, 0x1312d00}, 0x0) nanosleep(&(0x7f0000000400)={0x0, 0x1312d00}, 0x0) r3 = syz_open_dev$mtd(&(0x7f0000000600), 0x1, 0x2) ioctl$MEMERASE(r3, 0x40084d02, &(0x7f0000000640)={0x0, 0x1000000}) r4 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) ioctl(r4, 0x40186f40, &(0x7f00000001c0)="000000000100"/24) nanosleep(&(0x7f0000000400)={0x0, 0x1312d00}, 0x0) nanosleep(&(0x7f0000000400)={0x0, 0x1312d00}, 0x0) nanosleep(&(0x7f0000000400)={0x0, 0x1312d00}, 0x0) nanosleep(&(0x7f0000000400)={0x0, 0x1312d00}, 0x0) nanosleep(&(0x7f0000000400)={0x0, 0x1312d00}, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000380)='./dev/ubi0\x00', 0x2, 0x0) ioctl(r5, 0x40986f00, &(0x7f0000000440)="0000000001000000000001000000000003000600000000006d795f766f6c00"/154) mkdirat(0xffffffffffffff9c, &(0x7f0000000500)='./mnt\x00', 0x1ff) mount(&(0x7f0000000540)=@filename='ubi0_0\x00', &(0x7f0000000500)='./mnt\x00', &(0x7f0000000580)='ubifs\x00', 0x0, 0x0) 6.755427844s ago: executing program 3 (id=235): r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)=ANY=[@ANYBLOB="300000001e14010000000000000000000900020073797a300000000008004100727865000a0033007665746830000000"], 0x30}}, 0x0) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000300)=ANY=[@ANYBLOB="300000001e14010000000000000000000900020073797a310000000008004100727865000a0033007665746831000000"], 0x30}}, 0x0) r1 = socket$inet_smc(0x2b, 0x1, 0x0) bind$inet(r1, &(0x7f0000000400)={0x2, 0x4d2, @rand_addr=0xac141415}, 0x10) listen(r1, 0x10) r2 = socket$inet_smc(0x2b, 0x1, 0x0) bind$inet(r2, &(0x7f0000000500)={0x2, 0x0, @rand_addr=0xac141414}, 0x10) connect$inet(r2, &(0x7f0000000400)={0x2, 0x4d2, @rand_addr=0xac141415}, 0x10) 6.689578807s ago: executing program 45 (id=204): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./cg\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./cg\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./cg/cgroup.subtree_control\x00', 0x2, 0x0) write(r0, &(0x7f00000000c0)='+memory\x00', 0x7) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./cg/test\x00', 0x1ff) r1 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./cg/test/memory.max\x00', 0x2, 0x0) write(r1, &(0x7f0000000180)='4096', 0x4) r2 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./cg/test/cgroup.procs\x00', 0x2, 0x0) write(r2, &(0x7f0000000200)='0', 0x1) mmap(&(0x7f0000010000/0x10000)=nil, 0x10000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mlock(&(0x7f0000010000/0x10000)=nil, 0x10000) 6.575156337s ago: executing program 5 (id=237): r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup/cgroup.subtree_control\x00', 0x2, 0x0) write(r0, &(0x7f0000000080)='+memory\x00', 0x8) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup/syz0\x00', 0x1ff) rmdir(&(0x7f0000000100)='./cgroup/syz0\x00') nanosleep(&(0x7f0000000000)={0x0, 0x1dcd6500}, 0x0) nanosleep(&(0x7f0000000000)={0x0, 0x1dcd6500}, 0x0) nanosleep(&(0x7f0000000000)={0x0, 0x1dcd6500}, 0x0) nanosleep(&(0x7f0000000000)={0x0, 0x1dcd6500}, 0x0) 6.181505226s ago: executing program 3 (id=238): r0 = syz_usb_connect(0x3, 0x3e, &(0x7f0000000000)=ANY=[@ANYBLOB="120100020000004024042c0100000000000109022e0001010080320904000004ffffff0007058102400000070502024000000705830240000007050402400000"], 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000100)={0x84, &(0x7f0000000200)={0xc0, 0x1, 0x4, "04000001"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) nanosleep(&(0x7f0000000300)={0x1}, 0x0) 5.999793843s ago: executing program 6 (id=239): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./nfsd\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./nfsd\x00', &(0x7f0000000040)='nfsd\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./nfsd/portlist\x00', 0x2, 0x0) write(r0, &(0x7f00000000c0)='tcp 2049\n\x00', 0x9) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./nfsd/threads\x00', 0x2, 0x0) write(r1, &(0x7f0000000140)='1\n\x00', 0x2) mkdirat(0xffffffffffffff9c, &(0x7f0000000180)='./mnt\x00', 0x1ff) mount(&(0x7f0000000200)=@filename='127.0.0.1:/\x00', &(0x7f0000000180)='./mnt\x00', &(0x7f0000000240)='nfs4\x00', 0x0, &(0x7f0000000280)='nolock,addr=127.0.0.1\x00') openat(0xffffffffffffff9c, &(0x7f0000000300)='./mnt/file\x00', 0x42, 0x1ff) 5.590976937s ago: executing program 5 (id=240): r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000000)=@filter={'filter\x00', 0xe, 0x4, 0x370, 0xffffffff, 0x0, 0x1d0, 0x2a0, 0xffffffff, 0xffffffff, 0x100, 0x1d0, 0x2a0, 0xffffffff, 0x4, 0x0, {[{{@ipv6={@empty, @empty}, 0x0, 0xd8, 0x100, 0x0, {}, [@common=@ah={{0x30}, {[0x1234, 0x1235]}}]}, @common=@unspec=@STANDARD={0x28}}, {{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}, {{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3d0) 5.503290537s ago: executing program 5 (id=241): r0 = syz_usb_connect(0x2, 0x40, &(0x7f0000000000)=ANY=[@ANYBLOB="12010002ff0000407205feca00010000000109022e0001010080fa0904000004ff00000007058102400000070501024000000705820240000007050202400000"], &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0}) syz_usb_ep_write(r0, 0x81, 0x100, &(0x7f0000000100)="900100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000009101000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000084010000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000880100"/256) (async) syz_usb_ep_read(r0, 0x1, 0x100, &(0x7f0000000300)=""/256) (async) nanosleep(&(0x7f0000000500)={0x4}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000600)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000600)='./sys\x00', &(0x7f0000000700)='sysfs\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000800)='./sys/class/atm/cxacru0/device/downstream_rate\x00', 0x0, 0x0) read(r1, &(0x7f0000000900)=""/256, 0x100) 5.236568003s ago: executing program 6 (id=242): r0 = syz_usb_connect(0x2, 0x57, &(0x7f0000000000)=ANY=[@ANYBLOB="1201100100000040cc1769190001010203010902450001010080320904000002ffffff0007058102400000070501024000000904000104ffffff0007058102400000070501024000000705820140000107050601400001"], 0x0) nanosleep(&(0x7f0000000200)={0x0, 0x989680}, 0x0) syz_usb_control_io(r0, 0x0, 0x0) (async) syz_usb_ep_read(r0, 0x1, 0x40, &(0x7f0000000400)=""/64) syz_usb_ep_write(r0, 0x81, 0xf, &(0x7f0000000100)="010000000000000004040000000000") syz_usb_ep_read(r0, 0x1, 0x40, &(0x7f0000000440)=""/64) (async) syz_usb_ep_write(r0, 0x81, 0xf, &(0x7f0000000140)="0400"/15) (async) nanosleep(&(0x7f0000000300)={0x0, 0x989680}, 0x0) 2.695012863s ago: executing program 3 (id=243): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000100)='./sys\x00', &(0x7f0000000200)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./sys/class/drm/card0/uevent\x00', 0x0, 0x0) read(r0, &(0x7f0000000400)=""/256, 0x100) 2.563532927s ago: executing program 3 (id=244): syz_usb_connect$cdc_ecm(0x3, 0x56, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0x40, 0x525, 0xa4a1, 0x40, 0x0, 0x0, 0xffffffffffff8001, 0x1, [{{0x9, 0x2, 0x44, 0x1, 0x1, 0x0, 0x0, 0x0, "", [{{0x9, 0x4, 0x0, 0x0, 0x3, 0x2, 0x6, 0x0, 0x0, {{0x5}, {0x5}, {0xd}}, {[{{0x9, 0x5, 0x81, 0x3, 0x10, 0x1}}], {{0x9, 0x5, 0x82, 0x2, 0x200}}, {{0x9, 0x5, 0x3, 0x2, 0x200}}}}}]}}]}}, &(0x7f0000001400)={0x0, 0x0, 0x0, 0x0}) nanosleep(&(0x7f0000000300)={0x1}, 0x0) r0 = syz_open_dev$usbfs(&(0x7f0000000100), 0x15, 0x0) ioctl$USBDEVFS_CLAIMINTERFACE(r0, 0x8004550f, &(0x7f0000000200)) ioctl$USBDEVFS_ALLOC_STREAMS(r0, 0x8008551c, &(0x7f0000000400)={0x2, 0x1, [{0x2, 0x1}]}) ioctl$USBDEVFS_FREE_STREAMS(r0, 0x8008551d, &(0x7f0000000400)={0x2, 0x1, [{0x2, 0x1}]}) 2.374089231s ago: executing program 5 (id=245): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000100)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./sys/bus/i2c/devices/i2c-0/new_device\x00', 0x1, 0x0) write(r0, &(0x7f0000000300)='stusb160x 0x28\x00', 0xf) 2.218782072s ago: executing program 5 (id=246): r0 = memfd_create(&(0x7f0000000100)='img\x00', 0x0) ftruncate(r0, 0x1000000) r1 = syz_open_dev$loop(&(0x7f0000000140), 0x0, 0x2) ioctl$LOOP_SET_FD(r1, 0x4c00, r0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000040)='sysfs\x00', 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./sys/module/block2mtd/parameters/block2mtd\x00', 0x1, 0x0) write(r2, &(0x7f00000000c0)='/dev/loop0,65536\x00', 0x11) mkdirat(0xffffffffffffff9c, &(0x7f0000000300)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000000300)='./dev\x00', &(0x7f0000000340)='devtmpfs\x00', 0x0, 0x0) nanosleep(&(0x7f0000000400)={0x0, 0x1312d00}, 0x0) nanosleep(&(0x7f0000000400)={0x0, 0x1312d00}, 0x0) nanosleep(&(0x7f0000000400)={0x0, 0x1312d00}, 0x0) nanosleep(&(0x7f0000000400)={0x0, 0x1312d00}, 0x0) nanosleep(&(0x7f0000000400)={0x0, 0x1312d00}, 0x0) r3 = syz_open_dev$mtd(&(0x7f0000000600), 0x1, 0x2) ioctl$MEMERASE(r3, 0x40084d02, &(0x7f0000000640)={0x0, 0x1000000}) r4 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) ioctl(r4, 0x40186f40, &(0x7f00000001c0)="000000000100"/24) nanosleep(&(0x7f0000000400)={0x0, 0x1312d00}, 0x0) nanosleep(&(0x7f0000000400)={0x0, 0x1312d00}, 0x0) nanosleep(&(0x7f0000000400)={0x0, 0x1312d00}, 0x0) nanosleep(&(0x7f0000000400)={0x0, 0x1312d00}, 0x0) nanosleep(&(0x7f0000000400)={0x0, 0x1312d00}, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000380)='./dev/ubi0\x00', 0x2, 0x0) ioctl(r5, 0x40986f00, &(0x7f0000000440)="0000000001000000000001000000000003000600000000006d795f766f6c00"/154) mkdirat(0xffffffffffffff9c, &(0x7f0000000500)='./mnt\x00', 0x1ff) mount(&(0x7f0000000540)=@filename='ubi0_0\x00', &(0x7f0000000500)='./mnt\x00', &(0x7f0000000580)='ubifs\x00', 0x0, 0x0) 2.113915382s ago: executing program 6 (id=247): unshare(0x40000000) r0 = socket$inet(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000600)={'lo\x00', 0x41}) ioctl$sock_inet_SIOCSIFADDR(r0, 0x8916, &(0x7f0000000700)={'lo\x00', {0x2, 0x0, @empty=0x7f000001}}) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./nfsd\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./nfsd\x00', &(0x7f0000000040)='nfsd\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000500)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000500)='./proc\x00', &(0x7f0000000540)='proc\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./nfsd/versions\x00', 0x2, 0x0) write(r1, &(0x7f0000000640)='-2 -3 +4\n\x00', 0x9) r2 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./nfsd/portlist\x00', 0x2, 0x0) write(r2, &(0x7f00000000c0)='tcp 2049\n\x00', 0x9) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./nfsd/nfsv4gracetime\x00', 0x2, 0x0) write(r3, &(0x7f0000000140)='0\n\x00', 0x2) r4 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./nfsd/nfsv4leasetime\x00', 0x2, 0x0) write(r4, &(0x7f00000001c0)='0\n\x00', 0x2) r5 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./nfsd/threads\x00', 0x2, 0x0) write(r5, &(0x7f0000000240)='1\n\x00', 0x2) r6 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./proc/net/rpc/auth.unix.ip/channel\x00', 0x2, 0x0) write(r6, &(0x7f00000002c0)='nfsd 127.0.0.1 2147483647 mydomain\n\x00', 0x23) r7 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./proc/net/rpc/nfsd.export/channel\x00', 0x2, 0x0) write(r7, &(0x7f0000000340)='mydomain / 2147483647 9216 0 0 0\n\x00', 0x21) mkdirat(0xffffffffffffff9c, &(0x7f0000000380)='./mnt\x00', 0x1ff) mount(&(0x7f00000003c0)=@filename='127.0.0.1:/\x00', &(0x7f0000000380)='./mnt\x00', &(0x7f0000000400)='nfs4\x00', 0x0, &(0x7f0000000440)='nolock,addr=127.0.0.1\x00') openat(0xffffffffffffff9c, &(0x7f0000000480)='./mnt/file\x00', 0x42, 0x1ff) 1.59906458s ago: executing program 5 (id=248): syz_usb_connect(0x0, 0x4c, &(0x7f0000000000)=ANY=[@ANYBLOB="12011001000000408c0d030100010000000109023a0001010080320904000000010100000924010001280001010c24020101010002030000000a240602010101020200092403030103000200"], 0x0) nanosleep(&(0x7f0000000100)={0x1, 0x1dcd6500}, 0x0) r0 = syz_open_dev$sndctrl(&(0x7f0000000200), 0x1, 0x0) ioctl(r0, 0xc4c85512, &(0x7f0000000300)="0000000003000000000000000000000049454339353820506c61796261636b204d61736b00"/64) 177.85342ms ago: executing program 3 (id=249): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./config\x00', &(0x7f0000000100)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000300)='./config/nullb/nullb1\x00', 0x1ff) r0 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./config/nullb/nullb1/zoned\x00', 0x2, 0x0) write(r0, &(0x7f0000000500)='1\n', 0x2) r1 = openat(0xffffffffffffff9c, &(0x7f0000000d00)='./config/nullb/nullb1/memory_backed\x00', 0x2, 0x0) write(r1, &(0x7f0000000e00)='1\n', 0x2) r2 = openat(0xffffffffffffff9c, &(0x7f0000001300)='./config/nullb/nullb1/zone_nr_conv\x00', 0x2, 0x0) write(r2, &(0x7f0000001400)='2\n', 0x2) r3 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./config/nullb/nullb1/power\x00', 0x2, 0x0) write(r3, &(0x7f0000000700)='1\n', 0x2) mkdirat(0xffffffffffffff9c, &(0x7f0000000800)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000000800)='./dev\x00', &(0x7f0000000900)='devtmpfs\x00', 0x0, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000a00)='./dev/nullb1\x00', 0x2, 0x0) write(r4, &(0x7f0000001000)="53464f5a05abbf59", 0x1000) close(r4) mkdirat(0xffffffffffffff9c, &(0x7f0000001100)='./mnt\x00', 0x1ff) mount(&(0x7f0000000a00)=@filename='./dev/nullb1\x00', &(0x7f0000001100)='./mnt\x00', &(0x7f0000001200)='zonefs\x00', 0x0, 0x0) 0s ago: executing program 6 (id=250): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000040)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./sys/bus/pci/devices/0000:00:02.0/resource0\x00', 0x2, 0x0) pwrite64(r0, &(0x7f0000000100)='\x00\x003U', 0x4, 0xc120) r1 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./sys/bus/pci/devices/0000:00:02.0/resource1\x00', 0x2, 0x0) pwrite64(r1, &(0x7f0000000100)='\x00\x003U', 0x4, 0xc120) r2 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./sys/bus/pci/devices/0000:00:02.0/resource2\x00', 0x2, 0x0) pwrite64(r2, &(0x7f0000000100)='\x00\x003U', 0x4, 0xc120) r3 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./sys/bus/pci/devices/0000:00:04.0/resource0\x00', 0x2, 0x0) pwrite64(r3, &(0x7f0000000100)='\x00\x003U', 0x4, 0xc120) r4 = openat(0xffffffffffffff9c, &(0x7f0000000380)='./sys/bus/pci/devices/0000:00:02.0/driver/unbind\x00', 0x1, 0x0) write(r4, &(0x7f0000000400)='0000:00:02.0\x00', 0xc) r5 = openat(0xffffffffffffff9c, &(0x7f0000000480)='./sys/bus/pci/devices/0000:00:04.0/driver/unbind\x00', 0x1, 0x0) write(r5, &(0x7f0000000500)='0000:00:04.0\x00', 0xc) r6 = openat(0xffffffffffffff9c, &(0x7f0000000580)='./sys/bus/pci/devices/0000:00:02.0/driver_override\x00', 0x2, 0x0) write(r6, &(0x7f0000000600)='dwc3-haps\x00', 0x9) r7 = openat(0xffffffffffffff9c, &(0x7f0000000680)='./sys/bus/pci/drivers/dwc3-haps/bind\x00', 0x1, 0x0) write(r7, &(0x7f0000000400)='0000:00:02.0\x00', 0xc) r8 = openat(0xffffffffffffff9c, &(0x7f0000000700)='./sys/bus/pci/devices/0000:00:04.0/driver_override\x00', 0x2, 0x0) write(r8, &(0x7f0000000600)='dwc3-haps\x00', 0x9) write(r7, &(0x7f0000000500)='0000:00:04.0\x00', 0xc) kernel console output (not intermixed with test programs): 87.738249][ T10] usb 6-1: New USB device found, idVendor=0d8c, idProduct=0103, bcdDevice= 1.00 [ 187.752549][ T5272] 8021q: adding VLAN 0 to HW filter on device eth16 [ 187.761776][ T7453] ubi0: attaching mtd1 [ 187.765978][ T10] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 187.779380][ T6908] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 187.790608][ T10] usb 6-1: Product: syz [ 187.797625][ T10] usb 6-1: Manufacturer: syz [ 187.802889][ T10] usb 6-1: SerialNumber: syz [ 187.840991][ T325] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 187.885149][ T6904] veth1_vlan: entered promiscuous mode [ 187.917838][ T60] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 188.017278][ T7453] ubi0: scanning is finished [ 188.035390][ T7453] ubi0 error: ubi_read_volume_table: the layout volume was not found [ 188.067448][ T60] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 188.146003][ T5749] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 188.159886][ T6904] veth0_macvtap: entered promiscuous mode [ 188.193566][ T36] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 188.205803][ T60] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 188.219766][ T36] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 188.255669][ T6904] veth1_macvtap: entered promiscuous mode [ 188.328216][ T5749] usb 2-1: New USB device found, idVendor=1234, idProduct=5678, bcdDevice= 0.00 [ 188.357915][ T5749] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 188.371426][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 188.381845][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 188.392514][ T7453] ubi0 error: ubi_attach_mtd_dev: failed to attach mtd1, error -22 [ 188.402978][ T6904] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 188.422312][ T6904] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 188.451234][ T36] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 188.456259][ T7451] block2mtd: erase failed err = -4 [ 188.491755][ T36] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 188.493648][ T5749] input: USB Touchscreen 1234:5678 as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/input/input25 [ 188.532381][ T12] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 188.730582][ T325] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 188.799285][ T1311] ieee802154 phy0 wpan0: encryption failed: -22 [ 188.806641][ T1311] ieee802154 phy1 wpan1: encryption failed: -22 [ 188.934523][ T30] audit: type=1400 audit(1785855103.374:472): avc: denied { write } for pid=7458 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 188.945779][ T48] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 188.982856][ T48] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 189.095572][ T187] usb 9-1: new full-speed USB device number 2 using dummy_hcd [ 189.240714][ T30] audit: type=1400 audit(1785855103.684:473): avc: denied { write } for pid=7479 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 189.281254][ T3366] hsr_slave_0: left promiscuous mode [ 189.315412][ T3366] hsr_slave_1: left promiscuous mode [ 189.338336][ T3366] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 189.352990][ T10] usb 6-1: USB disconnect, device number 4 [ 189.357347][ T3366] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 189.372031][ T3366] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 189.379938][ T3366] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 189.439334][ T7057] udevd[7057]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 189.439720][ T3366] hsr_slave_0: left promiscuous mode [ 189.477504][ T3366] hsr_slave_1: left promiscuous mode [ 189.483643][ T3366] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 189.492733][ T3366] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 189.501553][ T3366] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 189.510135][ T3366] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 189.529291][ T3366] hsr_slave_0: left promiscuous mode [ 189.536093][ T3366] hsr_slave_1: left promiscuous mode [ 189.541913][ T3366] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 189.549611][ T3366] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 189.557613][ T805] usb 4-1: new high-speed USB device number 9 using dummy_hcd [ 189.569424][ T3366] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 189.577222][ T3366] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 189.591744][ T3366] hsr_slave_0: left promiscuous mode [ 189.597783][ T3366] hsr_slave_1: left promiscuous mode [ 189.603542][ T3366] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 189.611775][ T3366] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 189.619769][ T3366] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 189.628220][ T3366] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 189.639876][ T3366] hsr_slave_0: left promiscuous mode [ 189.645967][ T3366] hsr_slave_1: left promiscuous mode [ 189.651796][ T3366] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 189.660120][ T3366] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 189.668481][ T3366] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 189.677720][ T3366] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 189.688886][ T3366] hsr_slave_0: left promiscuous mode [ 189.694697][ T3366] hsr_slave_1: left promiscuous mode [ 189.700642][ T3366] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 189.708428][ T3366] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 189.716913][ T3366] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 189.724378][ T3366] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 189.738855][ T805] usb 4-1: unable to get BOS descriptor or descriptor too short [ 189.751993][ T805] usb 4-1: New USB device found, idVendor=0bda, idProduct=8156, bcdDevice= 1.00 [ 189.761408][ T3366] hsr_slave_0: left promiscuous mode [ 189.774472][ T805] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 189.783535][ T3366] hsr_slave_1: left promiscuous mode [ 189.791001][ T805] usb 4-1: Product: syz [ 189.796493][ T805] usb 4-1: Manufacturer: syz [ 189.801337][ T805] usb 4-1: SerialNumber: syz [ 189.802988][ T3366] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 189.809871][ T805] r8152-cfgselector 4-1: Unknown version 0x0000 [ 189.817664][ T3366] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 189.831399][ T3366] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 189.840073][ T3366] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 189.848840][ T7487] PM: suspend entry (deep) [ 189.853924][ T7487] PM: suspend exit [ 189.858624][ T3366] hsr_slave_0: left promiscuous mode [ 189.866975][ T3366] hsr_slave_1: left promiscuous mode [ 189.873031][ T3366] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 189.882282][ T3366] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 189.892203][ T3366] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 189.928276][ T3366] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 190.009214][ T3366] veth1_macvtap: left promiscuous mode [ 190.014800][ T3366] veth0_macvtap: left promiscuous mode [ 190.021239][ T3366] veth1_vlan: left promiscuous mode [ 190.029534][ T3366] veth0_vlan: left promiscuous mode [ 190.038697][ T3366] veth1_macvtap: left promiscuous mode [ 190.044249][ T3366] veth0_macvtap: left promiscuous mode [ 190.049968][ T3366] veth1_vlan: left promiscuous mode [ 190.057151][ T3366] veth0_vlan: left promiscuous mode [ 190.064169][ T3366] veth1_macvtap: left promiscuous mode [ 190.070869][ T3366] veth0_macvtap: left promiscuous mode [ 190.079498][ T3366] veth1_vlan: left promiscuous mode [ 190.086710][ T3366] veth0_vlan: left promiscuous mode [ 190.093930][ T3366] veth1_macvtap: left promiscuous mode [ 190.099497][ T3366] veth0_macvtap: left promiscuous mode [ 190.105111][ T3366] veth1_vlan: left promiscuous mode [ 190.110739][ T3366] veth0_vlan: left promiscuous mode [ 190.119322][ T3366] veth1_macvtap: left promiscuous mode [ 190.124821][ T3366] veth0_macvtap: left promiscuous mode [ 190.131594][ T3366] veth1_vlan: left promiscuous mode [ 190.136894][ T3366] veth0_vlan: left promiscuous mode [ 190.142843][ T3366] veth1_macvtap: left promiscuous mode [ 190.151741][ T3366] veth0_macvtap: left promiscuous mode [ 190.157502][ T3366] veth1_vlan: left promiscuous mode [ 190.162770][ T3366] veth0_vlan: left promiscuous mode [ 190.170208][ T3366] veth1_macvtap: left promiscuous mode [ 190.176050][ T3366] veth0_macvtap: left promiscuous mode [ 190.181572][ T3366] veth1_vlan: left promiscuous mode [ 190.187971][ T3366] veth0_vlan: left promiscuous mode [ 190.194110][ T3366] veth1_macvtap: left promiscuous mode [ 190.199988][ T3366] veth0_macvtap: left promiscuous mode [ 190.205735][ T3366] veth1_vlan: left promiscuous mode [ 190.211021][ T3366] veth0_vlan: left promiscuous mode [ 190.255601][ T5749] usb 6-1: new high-speed USB device number 5 using dummy_hcd [ 190.313920][ T187] usb 9-1: unable to read config index 0 descriptor/start: -71 [ 190.321871][ T187] usb 9-1: can't read configurations, error -71 [ 190.420549][ T5749] usb 6-1: New USB device found, idVendor=0582, idProduct=007d, bcdDevice= 0.00 [ 190.431508][ T5749] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 190.673312][ T5749] usb 2-1: USB disconnect, device number 8 [ 190.896606][ T7498] ubi0: attaching mtd0 [ 190.909275][ T7498] ubi0: scanning is finished [ 190.917722][ T7498] ubi0: empty MTD device detected [ 190.991392][ T3366] team0 (unregistering): Port device team_slave_1 removed [ 191.009886][ T3366] team0 (unregistering): Port device team_slave_0 removed [ 191.041020][ T7498] ubi0: attached mtd0 (name "mtdram test device", size 0 MiB) [ 191.052311][ T7498] ubi0: PEB size: 4096 bytes (4 KiB), LEB size: 3968 bytes [ 191.062432][ T7498] ubi0: min./max. I/O unit sizes: 1/64, sub-page size 1 [ 191.070039][ T7498] ubi0: VID header offset: 64 (aligned 64), data offset: 128 [ 191.078007][ T7498] ubi0: good PEBs: 32, bad PEBs: 0, corrupted PEBs: 0 [ 191.085020][ T7498] ubi0: user volume: 0, internal volumes: 1, max. volumes count: 23 [ 191.094382][ T7498] ubi0: max/mean erase counter: 0/0, WL threshold: 4096, image sequence number: 147492603 [ 191.115916][ T7498] ubi0: available PEBs: 28, total reserved PEBs: 4, PEBs reserved for bad PEB handling: 0 [ 191.130504][ T7502] ubi0: background thread "ubi_bgt0d" started, PID 7502 [ 191.398793][ T3366] team0 (unregistering): Port device team_slave_1 removed [ 191.422745][ T3366] team0 (unregistering): Port device team_slave_0 removed [ 191.476172][ T5717] usb 2-1: new high-speed USB device number 9 using dummy_hcd [ 191.503367][ T30] audit: type=1400 audit(1785855105.944:474): avc: denied { mount } for pid=7506 comm="syz.8.180" name="/" dev="sysfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=filesystem permissive=1 [ 191.539251][ T30] audit: type=1400 audit(1785855105.974:475): avc: denied { unmount } for pid=6908 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=filesystem permissive=1 [ 191.647268][ T5717] usb 2-1: New USB device found, idVendor=110a, idProduct=1410, bcdDevice= 0.00 [ 191.657325][ T5717] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 191.721302][ T3366] team0 (unregistering): Port device team_slave_1 removed [ 191.737524][ T3366] team0 (unregistering): Port device team_slave_0 removed [ 191.843727][ T325] smc: removing ib device syz0 [ 191.912778][ T325] smbdirect: ib_dev[syz0] removed [ 192.088198][ T5717] mxuport 2-1:1.0: mxuport_recv_ctrl_urb - short read (0 / 4) [ 192.101024][ T5717] mxuport 2-1:1.0: probe with driver mxuport failed with error -5 [ 192.159783][ T3366] team0 (unregistering): Port device team_slave_1 removed [ 192.192341][ T3366] team0 (unregistering): Port device team_slave_0 removed [ 192.405119][ T7513] netlink: 'syz.3.182': attribute type 2 has an invalid length. [ 192.419525][ T7513] netlink: 'syz.3.182': attribute type 4 has an invalid length. [ 192.431170][ T7513] netlink: 'syz.3.182': attribute type 2 has an invalid length. [ 192.441441][ T7513] netlink: 'syz.3.182': attribute type 4 has an invalid length. [ 192.452901][ T7513] netlink: 12 bytes leftover after parsing attributes in process `syz.3.182'. [ 192.976745][ T3366] team0 (unregistering): Port device team_slave_1 removed [ 193.017614][ T3366] team0 (unregistering): Port device team_slave_0 removed [ 193.034763][ T5608] usb 6-1: USB disconnect, device number 5 [ 193.237416][ T7525] NFSD: Failed to start, no listeners configured. [ 193.570193][ T7527] smc: removing ib device syz2 [ 193.632711][ T7527] smbdirect: ib_dev[syz2] removed [ 193.916006][ T5608] usb 6-1: new high-speed USB device number 6 using dummy_hcd [ 193.968752][ T3366] team0 (unregistering): Port device team_slave_1 removed [ 193.993083][ T3366] team0 (unregistering): Port device team_slave_0 removed [ 194.086824][ T5608] usb 6-1: config 1 has an invalid descriptor of length 7, skipping remainder of the config [ 194.104335][ T5608] usb 6-1: config 1 interface 0 altsetting 0 has 5 endpoint descriptors, different from the interface descriptor's value: 6 [ 194.121986][ T5608] usb 6-1: New USB device found, idVendor=0cf3, idProduct=9375, bcdDevice= 1.00 [ 194.133995][ T5608] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 194.143179][ T5608] usb 6-1: Product: syz [ 194.150821][ T5608] usb 6-1: Manufacturer: syz [ 194.158215][ T5608] usb 6-1: SerialNumber: syz [ 194.292727][ T7406] usb 2-1: USB disconnect, device number 9 [ 194.374373][ T7535] block2mtd: error: cannot open device /dev/loop0 [ 194.595707][ T5608] ath6kl: Unsupported hardware version: 0x0 [ 194.633865][ T5608] ath6kl: Failed to init ath6kl core: -22 [ 194.642554][ T7537] rdma_rxe: rxe_newlink: failed to add lo [ 194.671440][ T5608] ath6kl_usb 6-1:1.0: probe with driver ath6kl_usb failed with error -22 [ 195.023583][ T3366] team0 (unregistering): Port device team_slave_1 removed [ 195.078583][ T3366] team0 (unregistering): Port device team_slave_0 removed [ 195.259341][ T3366] team0 (unregistering): Port device team_slave_1 removed [ 195.272149][ T3366] team0 (unregistering): Port device team_slave_0 removed [ 195.322984][ T36] smc: removing ib device syz1 [ 195.364858][ T5272] 8021q: adding VLAN 0 to HW filter on device eth17 [ 195.453457][ T30] audit: type=1400 audit(1785855109.894:476): avc: denied { ioctl } for pid=7541 comm="syz.1.188" path="/dev/vhost-net" dev="devtmpfs" ino=1273 ioctlcmd=0xaf01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 196.191002][ T805] r8152 4-1:1.0: USB reset failed, errno=-19 [ 196.192023][ T5788] lo speed is unknown, defaulting to 1000 [ 196.205104][ T5812] syz1: Port: 1 Link DOWN [ 196.210812][ T805] r8152-cfgselector 4-1: USB disconnect, device number 9 [ 196.213636][ T10] lo speed is unknown, defaulting to 1000 [ 196.219236][ T7515] netlink: 'syz.3.182': attribute type 11 has an invalid length. [ 196.236884][ T5788] syz2: Port: 1 Link DOWN [ 196.248982][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 196.262542][ T10] syz0: Port: 1 Link DOWN [ 196.267726][ T7515] netlink: 'syz.3.182': attribute type 4 has an invalid length. [ 196.282328][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 196.302771][ T36] smbdirect: ib_dev[syz1] removed [ 196.803422][ T10] usb 6-1: USB disconnect, device number 6 [ 196.935371][ T7558] svc: failed to register lockdv1 RPC service (errno 111). [ 196.985400][ T7558] lockd_up: makesock failed, error=-111 [ 197.260805][ T30] audit: type=1400 audit(1785855111.694:477): avc: denied { write } for pid=7552 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 197.477099][ T30] audit: type=1400 audit(1785855111.924:478): avc: denied { write } for pid=7577 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 197.585370][ T7558] svc: failed to register nfsdv3 RPC service (errno 512). [ 197.620949][ T7558] svc: failed to register nfsaclv3 RPC service (errno 111). [ 197.666225][ T7558] failed to unregister tcp with rpcbind [ 197.683928][ T7558] svc: failed to register nfsdv3 RPC service (errno 97). [ 197.692346][ T5272] 8021q: adding VLAN 0 to HW filter on device eth18 [ 197.727745][ T7558] svc: failed to register nfsaclv3 RPC service (errno 97). [ 197.755025][ T7558] failed to unregister tcp with rpcbind [ 198.935527][ T5608] usb 2-1: new high-speed USB device number 10 using dummy_hcd [ 199.028531][ T7572] NFSD: Unable to initialize client recovery tracking! (-110) [ 199.071516][ T7572] NFSD: Is nfsdcld running? If not, enable CONFIG_NFSD_LEGACY_CLIENT_TRACKING. [ 199.083377][ T7585] block2mtd: erase failed err = -4 [ 199.107032][ T5608] usb 2-1: config 1 interface 0 has no altsetting 1 [ 199.116728][ T7572] NFSD: starting 90-second grace period (net f0000485) [ 199.157475][ T5608] usb 2-1: New USB device found, idVendor=0b48, idProduct=1006, bcdDevice= 1.00 [ 199.203235][ T5608] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 199.265897][ T5608] usb 2-1: Product: syz [ 199.277440][ T5608] usb 2-1: Manufacturer: syz [ 199.292515][ T5608] usb 2-1: SerialNumber: syz [ 199.504363][ T30] audit: type=1400 audit(1785855113.944:479): avc: denied { write } for pid=7589 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 199.802898][ T5608] dvbdev: DVB: registering new adapter (DEC3000-s) [ 199.818854][ T30] audit: type=1400 audit(1785855114.254:480): avc: denied { write } for pid=7605 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 199.828452][ T5608] usb 2-1: DVB: registering adapter 1 frontend 0 (TechnoTrend/Hauppauge DEC3000-s Frontend)... [ 199.950223][ T10] logitech-hidpp-device 0005:046D:B012.0010: item fetching failed at offset 44/45 [ 199.983181][ T10] logitech-hidpp-device 0005:046D:B012.0010: hidpp_probe:parse failed [ 200.008111][ T10] logitech-hidpp-device 0005:046D:B012.0010: probe with driver logitech-hidpp-device failed with error -22 [ 200.216317][ T5717] usb 4-1: new high-speed USB device number 10 using dummy_hcd [ 200.385846][ T5717] usb 4-1: Using ep0 maxpacket: 16 [ 200.398746][ T5717] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 200.427457][ T5717] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 200.451146][ T5717] usb 4-1: New USB device found, idVendor=1b1c, idProduct=1c03, bcdDevice= 0.00 [ 200.459795][ T5608] usb 2-1: USB disconnect, device number 10 [ 200.480077][ T5717] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 200.542601][ T30] audit: type=1400 audit(1785855114.984:481): avc: denied { write } for pid=7618 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 200.590588][ T5717] usb 4-1: config 0 descriptor?? [ 200.757785][ T30] audit: type=1400 audit(1785855115.204:482): avc: denied { write } for pid=7630 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 201.028183][ T5717] corsair-psu 0003:1B1C:1C03.0011: hidraw0: USB HID v0.00 Device [HID 1b1c:1c03] on usb-dummy_hcd.3-1/input0 [ 201.131320][ T5717] corsair-psu 0003:1B1C:1C03.0011: unable to initialize device (-38) [ 201.156122][ T5608] usb 6-1: new high-speed USB device number 7 using dummy_hcd [ 201.191347][ T5717] corsair-psu 0003:1B1C:1C03.0011: probe with driver corsair-psu failed with error -38 [ 201.257977][ T30] audit: type=1400 audit(1785855115.704:483): avc: denied { write } for pid=7632 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 201.356612][ T5608] usb 6-1: New USB device found, idVendor=0ccd, idProduct=0039, bcdDevice= 1.01 [ 201.376893][ T5608] usb 6-1: New USB device strings: Mfr=2, Product=3, SerialNumber=1 [ 201.396767][ T5608] usb 6-1: Product: syz [ 201.400990][ T5608] usb 6-1: Manufacturer: syz [ 201.409313][ T30] audit: type=1400 audit(1785855115.854:484): avc: denied { write } for pid=7648 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 201.437377][ T5608] usb 6-1: SerialNumber: syz [ 201.472787][ T5608] pvrusb2: Hardware description: Terratec Grabster AV400 [ 201.480511][ T5608] pvrusb2: ********** [ 201.484530][ T5608] pvrusb2: ***WARNING*** Support for this device (Terratec Grabster AV400) is experimental. [ 201.495540][ T5717] usb 2-1: new high-speed USB device number 11 using dummy_hcd [ 201.495661][ T5608] pvrusb2: Important functionality might not be entirely working. [ 201.512497][ T5608] pvrusb2: Please consider contacting the driver author to help with further stabilization of the driver. [ 201.552219][ T5608] pvrusb2: ********** [ 201.688861][ T5717] usb 2-1: New USB device found, idVendor=0582, idProduct=007d, bcdDevice= 0.00 [ 201.711748][ T5717] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 202.085905][ T30] audit: type=1400 audit(1785855116.524:485): avc: denied { write } for pid=7651 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 202.236848][ T30] audit: type=1400 audit(1785855116.684:486): avc: denied { write } for pid=7664 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 202.653858][ T30] audit: type=1400 audit(1785855117.094:487): avc: denied { write } for pid=7668 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 202.740839][ T30] audit: type=1400 audit(1785855117.184:488): avc: denied { write } for pid=7681 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 203.010355][ T5717] usb 4-1: USB disconnect, device number 10 [ 203.131171][ T30] audit: type=1400 audit(1785855117.574:489): avc: denied { write } for pid=7683 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 203.158973][ T7694] reg-fixed-voltage pcspkr: probe with driver reg-fixed-voltage failed with error -12 [ 203.237541][ T30] audit: type=1400 audit(1785855117.664:490): avc: denied { write } for pid=7697 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 203.311147][ T7700] lo speed is unknown, defaulting to 1000 [ 203.331525][ T7700] lo speed is unknown, defaulting to 1000 [ 203.367792][ T7700] lo speed is unknown, defaulting to 1000 [ 203.695556][ T2362] pvrusb2: Failed to submit write-control URB status=-2 [ 203.697587][ T30] audit: type=1400 audit(1785855118.144:491): avc: denied { write } for pid=7702 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 203.703901][ T2362] pvrusb2: Device being rendered inoperable [ 203.734844][ T2362] pvrusb2: ***WARNING*** pvrusb2 device hardware appears to be jammed and I can't clear it. [ 203.748284][ T2362] pvrusb2: You might need to power cycle the pvrusb2 device in order to recover. [ 203.763189][ T5608] usb 6-1: USB disconnect, device number 7 [ 203.882865][ T30] audit: type=1400 audit(1785855118.324:492): avc: denied { write } for pid=7716 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 203.912872][ T7700] infiniband syz1: set active [ 203.920967][ T10] lo speed is unknown, defaulting to 1000 [ 203.935589][ T7700] infiniband syz1: added lo [ 203.971479][ T7700] smbdirect: ib_dev[syz1]: added: IB_CA max_fast_reg_page_list_len=512 device_cap_flags=0x1c001223c76 kernel_cap_flags=0x14 page_size_cap=0xfffff000 [ 204.003343][ T7700] smbdirect: ib_dev[syz1]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=32 max_cqe=32767 max_qp_wr=1048576 max_send_sge=32 max_recv_sge=32 [ 204.039125][ T7700] smbdirect: ib_dev[syz1]PORT[1]: iwarp=0 ib=0 roce=1 v1=0 v2=1 core_cap_flags=0x803005 [ 204.104435][ T7700] RDS/IB: syz1: added [ 204.129294][ T7700] smc: adding ib device syz1 with port count 1 [ 204.149362][ T7700] smc: ib device syz1 port 1 has no pnetid [ 204.162551][ T5608] lo speed is unknown, defaulting to 1000 [ 204.180933][ T7700] lo speed is unknown, defaulting to 1000 [ 204.237713][ T30] audit: type=1400 audit(1785855118.684:493): avc: denied { write } for pid=7719 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 204.390432][ T30] audit: type=1400 audit(1785855118.834:494): avc: denied { write } for pid=7731 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 204.684367][ T7700] lo speed is unknown, defaulting to 1000 [ 204.893993][ T30] audit: type=1400 audit(1785855119.334:495): avc: denied { write } for pid=7734 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 205.095887][ T30] audit: type=1400 audit(1785855119.534:496): avc: denied { write } for pid=7745 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 205.315161][ T7700] lo speed is unknown, defaulting to 1000 [ 205.325796][ T3366] netdevsim netdevsim10 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 205.509408][ T805] usb 2-1: USB disconnect, device number 11 [ 205.602100][ T7762] CIFS: Attempting to mount //127.0.0.1/share [ 205.614803][ T7762] CIFS: VFS: Error connecting to socket. Aborting operation. [ 205.630230][ T7762] CIFS: VFS: cifs_mount failed w/return code = -4 [ 205.795640][ T10] usb 6-1: new high-speed USB device number 8 using dummy_hcd [ 205.962461][ T10] usb 6-1: New USB device found, idVendor=0ccd, idProduct=0039, bcdDevice= 1.01 [ 205.986105][ T10] usb 6-1: New USB device strings: Mfr=2, Product=3, SerialNumber=1 [ 206.001041][ T10] usb 6-1: Product: syz [ 206.005738][ T7700] lo speed is unknown, defaulting to 1000 [ 206.011772][ T10] usb 6-1: Manufacturer: syz [ 206.022661][ T10] usb 6-1: SerialNumber: syz [ 206.038592][ T10] pvrusb2: Hardware description: Terratec Grabster AV400 [ 206.072715][ T10] pvrusb2: ********** [ 206.085482][ T10] pvrusb2: ***WARNING*** Support for this device (Terratec Grabster AV400) is experimental. [ 206.105665][ T10] pvrusb2: Important functionality might not be entirely working. [ 206.114300][ T10] pvrusb2: Please consider contacting the driver author to help with further stabilization of the driver. [ 206.130676][ T10] pvrusb2: ********** [ 206.136259][ T805] usb 2-1: new high-speed USB device number 12 using dummy_hcd [ 206.298755][ T805] usb 2-1: New USB device found, idVendor=1d19, idProduct=6108, bcdDevice= 0.00 [ 206.325890][ T805] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 206.380391][ T805] cx231xx 2-1:1.1: New device @ 480 Mbps (1d19:6108) with 3 interfaces [ 206.484542][ T7700] lo speed is unknown, defaulting to 1000 [ 206.525789][ T805] cx231xx 2-1:1.1: Failed to read PCB config [ 206.553026][ T805] cx231xx 2-1:1.1: probe with driver cx231xx failed with error -110 [ 206.884546][ T7700] lo speed is unknown, defaulting to 1000 [ 207.047497][ T4927] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 207.063889][ T4927] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 207.081025][ T4927] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 207.089085][ T4927] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 207.097000][ T4927] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 207.769412][ T7802] lo speed is unknown, defaulting to 1000 [ 207.789832][ T30] kauditd_printk_skb: 8 callbacks suppressed [ 207.789849][ T30] audit: type=1400 audit(1785855122.234:505): avc: denied { write } for pid=7810 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 207.894565][ T30] audit: type=1400 audit(1785855122.334:506): avc: denied { write } for pid=7829 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 208.214573][ T30] audit: type=1400 audit(1785855122.654:507): avc: denied { write } for pid=7831 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 208.323058][ T30] audit: type=1400 audit(1785855122.764:508): avc: denied { write } for pid=7842 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 208.676206][ T30] audit: type=1400 audit(1785855123.114:509): avc: denied { write } for pid=7845 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 208.756754][ T7821] NFSD: Unable to initialize client recovery tracking! (-110) [ 208.764385][ T7821] NFSD: Is nfsdcld running? If not, enable CONFIG_NFSD_LEGACY_CLIENT_TRACKING. [ 208.782373][ T7821] NFSD: starting 90-second grace period (net f00004bd) [ 208.804074][ T5812] usb 2-1: USB disconnect, device number 12 [ 208.804404][ T30] audit: type=1400 audit(1785855123.244:510): avc: denied { write } for pid=7859 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 208.894812][ T2362] pvrusb2: Failed to submit write-control URB status=-2 [ 208.925297][ T2362] pvrusb2: Device being rendered inoperable [ 208.934724][ T10] usb 6-1: USB disconnect, device number 8 [ 208.963244][ T2362] pvrusb2: ***WARNING*** pvrusb2 device hardware appears to be jammed and I can't clear it. [ 209.013049][ T30] audit: type=1400 audit(1785855123.454:511): avc: denied { search } for pid=7867 comm="syz.5.218" name="/" dev="configfs" ino=71 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 209.049603][ T2362] pvrusb2: You might need to power cycle the pvrusb2 device in order to recover. [ 209.077277][ T7868] nvmet: disable ns before setting buffered_io value. [ 209.087945][ T30] audit: type=1400 audit(1785855123.454:512): avc: denied { search } for pid=7867 comm="syz.5.218" name="nvmet" dev="configfs" ino=828 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 209.087987][ T30] audit: type=1400 audit(1785855123.454:513): avc: denied { search } for pid=7867 comm="syz.5.218" name="subsystems" dev="configfs" ino=829 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 209.088025][ T30] audit: type=1400 audit(1785855123.494:514): avc: denied { search } for pid=7867 comm="syz.5.218" name="/" dev="configfs" ino=71 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 209.123030][ T7868] nvmet: Disable port '1' before changing attribute in nvmet_addr_adrfam_store [ 209.130453][ T7802] bridge0: port 1(bridge_slave_0) entered blocking state [ 209.132185][ T7802] bridge0: port 1(bridge_slave_0) entered disabled state [ 209.132330][ T7802] bridge_slave_0: entered allmulticast mode [ 209.134218][ T7802] bridge_slave_0: entered promiscuous mode [ 209.134465][ T7868] nvmet: Disable port '1' before changing attribute in nvmet_addr_trtype_store [ 209.138753][ T7802] bridge0: port 2(bridge_slave_1) entered blocking state [ 209.138882][ T7802] bridge0: port 2(bridge_slave_1) entered disabled state [ 209.139037][ T7802] bridge_slave_1: entered allmulticast mode [ 209.140594][ T7802] bridge_slave_1: entered promiscuous mode [ 209.142061][ T7868] nvmet: Disable port '1' before changing attribute in nvmet_addr_traddr_store [ 209.150804][ T7868] nvmet: Disable port '1' before changing attribute in nvmet_addr_trsvcid_store [ 209.185631][ T4927] Bluetooth: hci0: command tx timeout [ 209.190421][ T7802] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 209.193377][ T7802] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 209.448661][ T7802] team0: Port device team_slave_0 added [ 209.467574][ T7802] team0: Port device team_slave_1 added [ 209.566062][ T7802] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 209.582469][ T7802] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 209.635184][ T7802] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 209.659652][ T7802] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 209.677894][ T7802] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 209.737145][ T7802] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 209.816323][ T10] usb 4-1: new high-speed USB device number 11 using dummy_hcd [ 209.842728][ T7802] hsr_slave_0: entered promiscuous mode [ 209.888953][ T7802] hsr_slave_1: entered promiscuous mode [ 210.006663][ T10] usb 4-1: Using ep0 maxpacket: 8 [ 210.020987][ T10] usb 4-1: config 0 has an invalid interface number: 143 but max is 0 [ 210.038560][ T10] usb 4-1: config 0 has no interface number 0 [ 210.054757][ T10] usb 4-1: New USB device found, idVendor=2058, idProduct=1005, bcdDevice=c1.9b [ 210.064507][ T10] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 210.102634][ T10] usb 4-1: config 0 descriptor?? [ 210.228169][ T10] viperboard 4-1:0.143: version 0.00 found at bus 004 address 011 [ 210.276707][ T7901] dlm: Using TCP for communications [ 210.338158][ T10] viperboard-i2c viperboard-i2c.2.auto: error -EIO: failure setting i2c_bus_freq to 100 [ 210.353408][ T7901] dlm: myls: joining the lockspace group... [ 210.376536][ T10] viperboard-i2c viperboard-i2c.2.auto: probe with driver viperboard-i2c failed with error -5 [ 210.422865][ T10] usb 4-1: USB disconnect, device number 11 [ 210.525708][ T5717] usb 6-1: new high-speed USB device number 9 using dummy_hcd [ 210.698046][ T5717] usb 6-1: config index 0 descriptor too short (expected 143, got 100) [ 210.721648][ T5717] usb 6-1: New USB device found, idVendor=23ba, idProduct=0100, bcdDevice= 1.00 [ 210.741511][ T5717] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 211.017768][ T7898] dlm: dlm user daemon left 1 lockspaces [ 211.177255][ T5608] usb 4-1: new full-speed USB device number 12 using dummy_hcd [ 211.265664][ T4927] Bluetooth: hci0: command tx timeout [ 211.321461][ T7802] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 211.348898][ T7802] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 211.361335][ T5608] usb 4-1: not running at top speed; connect to a high speed hub [ 211.377998][ T7802] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 211.391064][ T5608] usb 4-1: New USB device found, idVendor=0d8c, idProduct=0103, bcdDevice= 1.00 [ 211.413149][ T7802] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 211.421819][ T5608] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 211.438326][ T7802] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 211.456226][ T5608] usb 4-1: Product: syz [ 211.460446][ T5608] usb 4-1: Manufacturer: syz [ 211.465087][ T5608] usb 4-1: SerialNumber: syz [ 211.477615][ T7802] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 211.505288][ T7802] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 211.538402][ T7802] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 211.708079][ T7802] 8021q: adding VLAN 0 to HW filter on device bond0 [ 211.757005][ T7802] 8021q: adding VLAN 0 to HW filter on device team0 [ 211.782878][ T92] bridge0: port 1(bridge_slave_0) entered blocking state [ 211.790077][ T92] bridge0: port 1(bridge_slave_0) entered forwarding state [ 211.842104][ T3366] bridge0: port 2(bridge_slave_1) entered blocking state [ 211.849293][ T3366] bridge0: port 2(bridge_slave_1) entered forwarding state [ 212.093388][ T5717] usb 6-1: USB disconnect, device number 9 [ 212.621080][ T7802] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 212.835038][ T30] kauditd_printk_skb: 68 callbacks suppressed [ 212.835055][ T30] audit: type=1400 audit(1785855127.274:583): avc: denied { bind } for pid=7984 comm="syz.5.227" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 213.172747][ T7802] veth0_vlan: entered promiscuous mode [ 213.185135][ T30] audit: type=1400 audit(1785855127.624:584): avc: denied { write } for pid=7975 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 213.220272][ T7802] veth1_vlan: entered promiscuous mode [ 213.257966][ T7802] veth0_macvtap: entered promiscuous mode [ 213.274439][ T7802] veth1_macvtap: entered promiscuous mode [ 213.296157][ T7802] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 213.312779][ T7802] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 213.331854][ T30] audit: type=1400 audit(1785855127.774:585): avc: denied { write } for pid=7998 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 213.355579][ T60] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 213.356865][ T4927] Bluetooth: hci0: command tx timeout [ 213.369525][ T60] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 213.418608][ T92] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 213.551781][ T60] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 213.564934][ T60] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 213.597213][ T12] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 213.664395][ T60] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 213.687605][ T60] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 213.976477][ T24] usb 4-1: USB disconnect, device number 12 [ 214.115649][ T805] usb 7-1: new high-speed USB device number 10 using dummy_hcd [ 214.289245][ T805] usb 7-1: New USB device found, idVendor=046d, idProduct=0900, bcdDevice= 0.00 [ 214.307205][ T805] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 214.325533][ T805] usb 7-1: Product: syz [ 214.336302][ T805] usb 7-1: Manufacturer: syz [ 214.342289][ T805] usb 7-1: SerialNumber: syz [ 214.364873][ T805] gspca_main: spca500-2.14.0 probing 046d:0900 [ 214.864611][ T30] audit: type=1400 audit(1785855129.304:586): avc: denied { write } for pid=8027 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 214.894937][ T805] gspca_spca500: reg write: error -32 [ 214.917301][ T805] gspca_spca500: reg write: error -32 [ 214.927945][ T805] gspca_spca500: reg write: error -32 [ 214.938208][ T8042] block2mtd: error: cannot open device /dev/loop0 [ 214.946192][ T805] gspca_spca500: reg write: error -32 [ 214.951959][ T805] gspca_spca500: reg write: error -32 [ 214.967186][ T805] gspca_spca500: reg write: error -32 [ 214.986432][ T805] gspca_spca500: reg write: error -32 [ 214.992201][ T805] gspca_spca500: reg write: error -32 [ 215.007359][ T805] gspca_spca500: reg write: error -32 [ 215.020859][ T30] audit: type=1400 audit(1785855129.464:587): avc: denied { write } for pid=8043 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 215.045372][ T805] gspca_spca500: reg write: error -32 [ 215.047059][ T8007] NFSD: Unable to initialize client recovery tracking! (-110) [ 215.056722][ T805] gspca_spca500: reg write: error -32 [ 215.069967][ T805] gspca_spca500: reg write: error -32 [ 215.081429][ T805] gspca_spca500: reg write: error -32 [ 215.092260][ T8007] NFSD: Is nfsdcld running? If not, enable CONFIG_NFSD_LEGACY_CLIENT_TRACKING. [ 215.105954][ T805] gspca_spca500: reg write: error -32 [ 215.112699][ T8045] ubi: ubi0 already exists [ 215.121806][ T8007] NFSD: starting 10-second grace period (net f0000485) [ 215.390431][ T8045] UBIFS error (ubi0:0 pid 8045): ubifs_get_tree: too small LEBs (3968 bytes), min. is 15360 bytes [ 215.425737][ T4927] Bluetooth: hci0: command tx timeout [ 215.660778][ T30] audit: type=1400 audit(1785855130.104:588): avc: denied { create } for pid=8056 comm="syz.3.235" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 215.709356][ T10] usb 7-1: USB disconnect, device number 10 [ 215.754197][ T30] audit: type=1400 audit(1785855130.104:589): avc: denied { bind } for pid=8056 comm="syz.3.235" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 215.849908][ T30] audit: type=1400 audit(1785855130.104:590): avc: denied { listen } for pid=8056 comm="syz.3.235" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 215.945683][ T30] audit: type=1400 audit(1785855130.104:591): avc: denied { connect } for pid=8056 comm="syz.3.235" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 215.999818][ T5614] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 216.012659][ T5614] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 216.021236][ T5614] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 216.021478][ T30] audit: type=1400 audit(1785855130.394:592): avc: denied { write } for pid=8049 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 216.054694][ T5614] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 216.069727][ T5614] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 216.372272][ T8079] svc: failed to register lockdv1 RPC service (errno 111). [ 216.378861][ T5272] 8021q: adding VLAN 0 to HW filter on device eth20 [ 216.406267][ T10] usb 4-1: new high-speed USB device number 13 using dummy_hcd [ 216.559512][ T325] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 216.579902][ T10] usb 4-1: config index 0 descriptor too short (expected 46, got 44) [ 216.600013][ T10] usb 4-1: config 1 has an invalid descriptor of length 7, skipping remainder of the config [ 216.619007][ T10] usb 4-1: config 1 interface 0 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 64 [ 216.630741][ T10] usb 4-1: config 1 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 64 [ 216.654695][ T10] usb 4-1: config 1 interface 0 altsetting 0 bulk endpoint 0x83 has invalid maxpacket 64 [ 216.682118][ T10] usb 4-1: config 1 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 4 [ 216.713810][ T8079] svc: failed to register nfsdv3 RPC service (errno 111). [ 216.731278][ T10] usb 4-1: New USB device found, idVendor=0424, idProduct=012c, bcdDevice= 0.00 [ 216.737106][ T8065] lo speed is unknown, defaulting to 1000 [ 216.744346][ T8079] svc: failed to register nfsaclv3 RPC service (errno 111). [ 216.766132][ T10] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 216.778814][ T8079] failed to unregister tcp with rpcbind [ 216.810825][ T8073] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 216.831530][ T8079] svc: failed to register nfsdv3 RPC service (errno 97). [ 216.842694][ T8073] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 216.859233][ T8079] svc: failed to register nfsaclv3 RPC service (errno 97). [ 216.874623][ T8073] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 216.895584][ T8079] failed to unregister tcp with rpcbind [ 216.899199][ T325] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 216.921444][ T10] usb 4-1: probing VID:PID(0424:012C) [ 216.967915][ T10] usb 4-1: vub300 testing BULK IN EndPoint(0) 81 [ 216.990512][ T10] usb 4-1: vub300 testing BULK OUT EndPoint(1) 02 [ 217.009688][ T10] usb 4-1: vub300 testing BULK IN EndPoint(2) 83 [ 217.046931][ T10] usb 4-1: Could not find two sets of bulk-in/out endpoint pairs [ 217.064464][ T325] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 217.080587][ T10] vub300 4-1:1.0: probe with driver vub300 failed with error -22 [ 217.088420][ T5812] usb 6-1: new full-speed USB device number 10 using dummy_hcd [ 217.188097][ T325] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 217.222401][ T5272] 8021q: adding VLAN 0 to HW filter on device eth21 [ 217.262200][ T5812] usb 6-1: not running at top speed; connect to a high speed hub [ 217.282884][ T5812] usb 6-1: New USB device found, idVendor=0572, idProduct=cafe, bcdDevice= 1.00 [ 217.294691][ T5812] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 217.355659][ T5608] usb 7-1: new full-speed USB device number 11 using dummy_hcd [ 217.531467][ T5608] usb 7-1: New USB device found, idVendor=17cc, idProduct=1969, bcdDevice= 1.00 [ 217.543470][ T5608] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 217.552667][ T5608] usb 7-1: Product: syz [ 217.557094][ T5608] usb 7-1: Manufacturer: syz [ 217.561729][ T5608] usb 7-1: SerialNumber: syz [ 217.615564][ T325] bridge_slave_1: left allmulticast mode [ 217.624194][ T325] bridge_slave_1: left promiscuous mode [ 217.636546][ T325] bridge0: port 2(bridge_slave_1) entered disabled state [ 217.646854][ T325] bridge_slave_0: left allmulticast mode [ 217.652560][ T325] bridge_slave_0: left promiscuous mode [ 217.659652][ T325] bridge0: port 1(bridge_slave_0) entered disabled state [ 217.888900][ T325] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 217.903810][ T325] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 217.917489][ T325] bond0 (unregistering): Released all slaves [ 217.936365][ T5272] 8021q: adding VLAN 0 to HW filter on device eth22 [ 218.032491][ T8065] bridge0: port 1(bridge_slave_0) entered blocking state [ 218.041422][ T8065] bridge0: port 1(bridge_slave_0) entered disabled state [ 218.060968][ T8065] bridge_slave_0: entered allmulticast mode [ 218.073155][ T8065] bridge_slave_0: entered promiscuous mode [ 218.121267][ T8065] bridge0: port 2(bridge_slave_1) entered blocking state [ 218.128609][ T8065] bridge0: port 2(bridge_slave_1) entered disabled state [ 218.140628][ T8065] bridge_slave_1: entered allmulticast mode [ 218.156534][ T4927] Bluetooth: hci1: command tx timeout [ 218.167608][ T8065] bridge_slave_1: entered promiscuous mode [ 218.235918][ T8065] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 218.251347][ T8065] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 218.322162][ T8065] team0: Port device team_slave_0 added [ 218.337112][ T8065] team0: Port device team_slave_1 added [ 218.370404][ T30] kauditd_printk_skb: 5 callbacks suppressed [ 218.370420][ T30] audit: type=1400 audit(1785855132.814:598): avc: denied { write } for pid=8134 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 218.552538][ T30] audit: type=1400 audit(1785855132.994:599): avc: denied { write } for pid=8146 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 218.588611][ T8065] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 218.595799][ T8065] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 218.626376][ T8065] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 218.642003][ T325] hsr_slave_0: left promiscuous mode [ 218.651512][ T325] hsr_slave_1: left promiscuous mode [ 218.657679][ T325] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 218.665166][ T325] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 218.673174][ T325] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 218.680846][ T325] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 218.697396][ T325] veth1_macvtap: left promiscuous mode [ 218.702996][ T325] veth0_macvtap: left promiscuous mode [ 218.708831][ T325] veth1_vlan: left promiscuous mode [ 218.714284][ T325] veth0_vlan: left promiscuous mode [ 218.920650][ T325] team0 (unregistering): Port device team_slave_1 removed [ 218.935929][ T325] team0 (unregistering): Port device team_slave_0 removed [ 219.062164][ T5272] 8021q: adding VLAN 0 to HW filter on device eth23 [ 219.072634][ T8065] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 219.091519][ T8065] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 219.123224][ T8065] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 219.276794][ T8065] hsr_slave_0: entered promiscuous mode [ 219.283449][ T8065] hsr_slave_1: entered promiscuous mode [ 219.290487][ T8065] debugfs: 'hsr0' already exists in 'hsr' [ 219.298152][ T8065] Cannot create hsr debugfs directory [ 219.515173][ T7406] usb 4-1: USB disconnect, device number 13 [ 219.591443][ T5812] cxacru 6-1:1.0: receive of cm 0x90 failed (-104) [ 219.706308][ T30] audit: type=1400 audit(1785855134.144:600): avc: denied { write } for pid=8157 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 219.813802][ T30] audit: type=1400 audit(1785855134.254:601): avc: denied { write } for pid=8173 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 219.854454][ T5749] usb 6-1: USB disconnect, device number 10 [ 219.974726][ T8177] i2c i2c-0: new_device: Instantiated device stusb160x at 0x28 [ 220.006242][ T7406] usb 4-1: new high-speed USB device number 14 using dummy_hcd [ 220.094246][ T8184] block2mtd: error: cannot open device /dev/loop0 [ 220.141544][ C1] usb 7-1: received EP1 urb->status = -71 [ 220.181270][ T7406] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 220.189130][ T5608] input: as /devices/platform/dummy_hcd.6/usb7/7-1/input/input30 [ 220.211047][ T7406] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 220.225866][ T4927] Bluetooth: hci1: command tx timeout [ 220.237725][ T7406] usb 4-1: SerialNumber: syz [ 220.296778][ T8190] ubi: ubi0 already exists [ 220.369885][ T5608] usb 7-1: USB disconnect, device number 11 [ 220.424781][ T30] audit: type=1400 audit(1785855134.864:602): avc: denied { write } for pid=8175 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 220.472104][ T8184] ubi0 error: ubi_create_volume: volume 0 already exists [ 220.483994][ T8184] ubi0 error: ubi_create_volume: cannot create volume 0, error -17 [ 220.537104][ T8184] UBIFS error (ubi0:0 pid 8184): ubifs_get_tree: too small LEBs (3968 bytes), min. is 15360 bytes [ 220.637930][ T30] audit: type=1400 audit(1785855135.084:603): avc: denied { write } for pid=8197 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 220.704498][ T8189] lo speed is unknown, defaulting to 1000 [ 220.733518][ T8065] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 220.784027][ T8065] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 220.814045][ T8065] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 220.840049][ T8065] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 220.853160][ T8065] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 220.867560][ T8065] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 220.869415][ T7493] udevd[7493]: error opening ATTR{/sys/devices/platform/dummy_hcd.6/usb7/7-1/7-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 220.886237][ T8065] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 220.917571][ T8065] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 221.043694][ T8065] 8021q: adding VLAN 0 to HW filter on device bond0 [ 221.082067][ T8065] 8021q: adding VLAN 0 to HW filter on device team0 [ 221.170237][ T7527] bridge0: port 1(bridge_slave_0) entered blocking state [ 221.177427][ T7527] bridge0: port 1(bridge_slave_0) entered forwarding state [ 221.199923][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 221.207152][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 221.325746][ T30] audit: type=1400 audit(1785855135.764:604): avc: denied { write } for pid=8207 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 221.449705][ T30] audit: type=1400 audit(1785855135.894:605): avc: denied { write } for pid=8218 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 221.507689][ T7406] cdc_ether 4-1:1.0: probe with driver cdc_ether failed with error -71 [ 221.537071][ T7406] usb 4-1: USB disconnect, device number 14 [ 221.817305][ T8191] NFSD: Unable to initialize client recovery tracking! (-110) [ 221.838238][ T8191] NFSD: Is nfsdcld running? If not, enable CONFIG_NFSD_LEGACY_CLIENT_TRACKING. [ 221.866416][ T8191] NFSD: starting 90-second grace period (net f00003cb) [ 221.943857][ T8065] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 221.954726][ T30] audit: type=1400 audit(1785855136.394:606): avc: denied { write } for pid=8224 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 222.023955][ T8065] veth0_vlan: entered promiscuous mode [ 222.047041][ T8065] veth1_vlan: entered promiscuous mode [ 222.092948][ T8065] veth0_macvtap: entered promiscuous mode [ 222.104601][ T8065] veth1_macvtap: entered promiscuous mode [ 222.129791][ T8065] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 222.144795][ T8065] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 222.217665][ T36] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 222.249263][ T8245] null_blk: nullb1: using native zone append [ 222.261300][ T36] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 222.287956][ T92] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 222.307380][ T4927] Bluetooth: hci1: command tx timeout [ 222.332530][ T92] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 222.416950][ T36] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 222.448331][ T36] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 222.543048][ T8245] null_blk: disk nullb1 created [ 222.790638][ T5272] 8021q: adding VLAN 0 to HW filter on device eth3 [ 222.810473][ T36] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 222.826040][ T36] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 223.007769][ T8278] PM: suspend entry (deep) [ 223.031767][ T8278] PM: suspend exit [ 223.579384][ T30] kauditd_printk_skb: 11 callbacks suppressed [ 223.579397][ T30] audit: type=1400 audit(1785855138.024:618): avc: denied { write } for pid=8288 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 223.581090][ T5812] dwc3 dwc3.1.auto: error -EBUSY: can't request region for resource [mem 0x00018140-0x0000c07f] [ 223.627496][ T5812] dwc3 dwc3.1.auto: probe with driver dwc3 failed with error -16 [ 223.665173][ T30] audit: type=1400 audit(1785855138.104:619): avc: denied { write } for pid=8299 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 223.722245][ T8302] PM: suspend entry (s2idle) [ 223.732645][ T8302] PM: suspend exit [ 223.801348][ T24] hid-generic 0003:1234:5678.0012: hidraw0: USB HID v0.00 Device [syz0] on syz1 [ 223.977839][ T8269] NFSD: Unable to initialize client recovery tracking! (-110) [ 223.987023][ T8269] NFSD: Is nfsdcld running? If not, enable CONFIG_NFSD_LEGACY_CLIENT_TRACKING. [ 223.999156][ T8269] NFSD: starting 90-second grace period (net f00004bd) [ 224.070287][ T30] audit: type=1400 audit(1785855138.514:620): avc: denied { write } for pid=8306 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 224.119490][ T30] audit: type=1400 audit(1785855138.564:621): avc: denied { write } for pid=8321 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 224.181415][ T5272] 8021q: adding VLAN 0 to HW filter on device eth2 [ 224.388646][ T4927] Bluetooth: hci1: command tx timeout [ 224.399166][ T30] audit: type=1400 audit(1785855138.844:622): avc: denied { bpf } for pid=8339 comm="syz.3.257" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 224.471440][ T8343] block2mtd: error: cannot open device /dev/loop0 [ 224.506880][ T30] audit: type=1400 audit(1785855138.954:623): avc: denied { write } for pid=8333 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 224.561883][ T30] audit: type=1400 audit(1785855139.004:624): avc: denied { write } for pid=8348 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 224.641111][ T8167] cxacru 6-1:1.0: firmware (cxacru-fw.bin) unavailable (system misconfigured?) [ 224.664578][ T6813] cxacru 8-1:1.0: firmware (cxacru-fw.bin) unavailable (system misconfigured?) [ 224.675037][ T8351] ubi: ubi0 already exists [ 224.701723][ T6688] Freezing user space processes [ 224.995509][ T5749] usb 6-1: new high-speed USB device number 11 using dummy_hcd [ 230.195729][ T5749] usb 6-1: device descriptor read/64, error -110 [ 230.445519][ T5749] usb 6-1: new high-speed USB device number 12 using dummy_hcd [ 230.596461][ T5749] usb 6-1: device descriptor read/64, error -32 [ 230.708545][ T5749] usb usb6-port1: attempt power cycle [ 231.055514][ T5749] usb 6-1: new high-speed USB device number 13 using dummy_hcd [ 231.075704][ T5749] usb 6-1: device descriptor read/8, error -32 [ 231.185806][ T5749] raw-gadget.0 gadget.5: failed to queue suspend event [ 231.193130][ T5749] raw-gadget.0 gadget.5: failed to queue reset event [ 231.269368][ T5749] raw-gadget.0 gadget.5: failed to queue resume event [ 231.336593][ T5749] usb 6-1: new high-speed USB device number 14 using dummy_hcd [ 231.355755][ C1] raw-gadget.0 gadget.5: ignoring, device is not running [ 231.362915][ T5749] usb 6-1: device descriptor read/8, error -32 [ 231.487747][ T5749] raw-gadget.0 gadget.5: failed to queue suspend event [ 231.494727][ T5749] usb usb6-port1: unable to enumerate USB device [ 244.740417][ T6688] Freezing user space processes failed after 20.007 seconds (4 tasks refusing to freeze, wq_busy=0): [ 244.751552][ T6688] task:syz-executor state:S stack:23784 pid:6300 tgid:6300 ppid:1 task_flags:0x40054c flags:0x00080001 [ 244.763931][ T6688] Call Trace: [ 244.767878][ T6688] [ 244.770828][ T6688] __schedule+0x125c/0x6730 [ 244.775325][ T6688] ? __pfx___schedule+0x10/0x10 [ 244.780289][ T6688] ? find_held_lock+0x2b/0x80 [ 244.784990][ T6688] ? schedule+0x225/0x2c0 [ 244.789698][ T6688] schedule+0xdd/0x2c0 [ 244.793759][ T6688] do_wait+0x1a7/0x570 [ 244.797971][ T6688] kernel_wait4+0x16d/0x280 [ 244.802478][ T6688] ? __pfx_kernel_wait4+0x10/0x10 [ 244.807608][ T6688] ? __pfx_child_wait_callback+0x10/0x10 [ 244.813248][ T6688] zap_pid_ns_processes+0x2ca/0x6a0 [ 244.818472][ T6688] ? do_raw_write_lock+0x11e/0x260 [ 244.823583][ T6688] ? __pfx_zap_pid_ns_processes+0x10/0x10 [ 244.829391][ T6688] ? do_exit+0x2205/0x2ae0 [ 244.833917][ T6688] ? rcu_is_watching+0x12/0xc0 [ 244.838829][ T6688] do_exit+0x2377/0x2ae0 [ 244.843090][ T6688] ? __pfx_do_exit+0x10/0x10 [ 244.847730][ T6688] ? do_raw_spin_lock+0x128/0x260 [ 244.852774][ T6688] ? find_held_lock+0x2b/0x80 [ 244.857467][ T6688] ? get_signal+0x7e0/0x21e0 [ 244.862047][ T6688] do_group_exit+0xd5/0x2a0 [ 244.867296][ T6688] get_signal+0x1ec7/0x21e0 [ 244.871813][ T6688] ? kernel_wait4+0x1d6/0x280 [ 244.877203][ T6688] ? __pfx_kernel_wait4+0x10/0x10 [ 244.882253][ T6688] ? __pfx_child_wait_callback+0x10/0x10 [ 244.887919][ T6688] ? __pfx_get_signal+0x10/0x10 [ 244.892766][ T6688] arch_do_signal_or_restart+0x91/0x7e0 [ 244.898362][ T6688] ? __pfx___do_sys_wait4+0x10/0x10 [ 244.903571][ T6688] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 244.909737][ T6688] exit_to_user_mode_loop+0x139/0x6f0 [ 244.915100][ T6688] ? rcu_is_watching+0x12/0xc0 [ 244.919874][ T6688] do_syscall_64+0x666/0x870 [ 244.924477][ T6688] ? clear_bhb_loop+0x40/0x90 [ 244.929198][ T6688] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 244.935090][ T6688] RIP: 0033:0x7f590bd5e84e [ 244.939536][ T6688] RSP: 002b:00007ffd894e4718 EFLAGS: 00000246 ORIG_RAX: 000000000000003d [ 244.948076][ T6688] RAX: fffffffffffffe00 RBX: 00005555786e4500 RCX: 00007f590bd5e84e [ 244.956243][ T6688] RDX: 0000000040000000 RSI: 00007ffd894e47bc RDI: ffffffffffffffff [ 244.964243][ T6688] RBP: 00007ffd894e47bc R08: 0000000000000000 R09: 0000000000000000 [ 244.973171][ T6688] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000000000b [ 244.981865][ T6688] R13: 00005555786f7a10 R14: 00000000000206fe R15: 00007ffd894e4810 [ 244.989940][ T6688] [ 244.992960][ T6688] task:syz-executor state:S stack:24184 pid:6908 tgid:6908 ppid:1 task_flags:0x40054c flags:0x00080001 [ 245.004891][ T6688] Call Trace: [ 245.008191][ T6688] [ 245.011108][ T6688] __schedule+0x125c/0x6730 [ 245.015648][ T6688] ? __pfx___schedule+0x10/0x10 [ 245.020512][ T6688] ? find_held_lock+0x2b/0x80 [ 245.025172][ T6688] ? schedule+0x225/0x2c0 [ 245.029663][ T6688] schedule+0xdd/0x2c0 [ 245.033729][ T6688] do_wait+0x1a7/0x570 [ 245.037825][ T6688] kernel_wait4+0x16d/0x280 [ 245.042315][ T6688] ? __pfx_kernel_wait4+0x10/0x10 [ 245.047333][ T6688] ? lockdep_hardirqs_on+0x78/0x100 [ 245.052517][ T6688] ? __pfx_child_wait_callback+0x10/0x10 [ 245.058189][ T6688] ? find_held_lock+0x2b/0x80 [ 245.062858][ T6688] ? zap_pid_ns_processes+0x286/0x6a0 [ 245.068346][ T6688] ? zap_pid_ns_processes+0x286/0x6a0 [ 245.074191][ T6688] zap_pid_ns_processes+0x2ca/0x6a0 [ 245.080099][ T6688] ? do_raw_write_lock+0x11e/0x260 [ 245.085249][ T6688] ? __pfx_zap_pid_ns_processes+0x10/0x10 [ 245.091002][ T6688] ? do_exit+0x2205/0x2ae0 [ 245.095440][ T6688] ? rcu_is_watching+0x12/0xc0 [ 245.100211][ T6688] do_exit+0x2377/0x2ae0 [ 245.104471][ T6688] ? __pfx_do_exit+0x10/0x10 [ 245.115195][ T6688] ? do_raw_spin_lock+0x128/0x260 [ 245.122277][ T6688] ? find_held_lock+0x2b/0x80 [ 245.127026][ T6688] ? get_signal+0x7e0/0x21e0 [ 245.131630][ T6688] do_group_exit+0xd5/0x2a0 [ 245.136178][ T6688] get_signal+0x1ec7/0x21e0 [ 245.140686][ T6688] ? kernel_wait4+0x1d6/0x280 [ 245.145342][ T6688] ? __pfx_kernel_wait4+0x10/0x10 [ 245.150382][ T6688] ? __pfx_child_wait_callback+0x10/0x10 [ 245.156032][ T6688] ? __pfx_get_signal+0x10/0x10 [ 245.160866][ T6688] arch_do_signal_or_restart+0x91/0x7e0 [ 245.166436][ T6688] ? __pfx___do_sys_wait4+0x10/0x10 [ 245.172555][ T6688] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 245.179371][ T6688] exit_to_user_mode_loop+0x139/0x6f0 [ 245.184758][ T6688] ? rcu_is_watching+0x12/0xc0 [ 245.189604][ T6688] do_syscall_64+0x666/0x870 [ 245.194213][ T6688] ? clear_bhb_loop+0x40/0x90 [ 245.198917][ T6688] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 245.204800][ T6688] RIP: 0033:0x7f1bc6b5e84e [ 245.209225][ T6688] RSP: 002b:00007fffa281a368 EFLAGS: 00000246 ORIG_RAX: 000000000000003d [ 245.217660][ T6688] RAX: fffffffffffffe00 RBX: 0000555578cda500 RCX: 00007f1bc6b5e84e [ 245.225667][ T6688] RDX: 0000000040000000 RSI: 00007fffa281a40c RDI: ffffffffffffffff [ 245.233658][ T6688] RBP: 00007fffa281a40c R08: 0000000000000000 R09: 0000000000000000 [ 245.241664][ T6688] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000003 [ 245.249688][ T6688] R13: 0000555578ceda10 R14: 000000000002ef94 R15: 00007fffa281a460 [ 245.257721][ T6688] [ 245.260796][ T6688] task:syz.1.223 state:D stack:26856 pid:7899 tgid:7898 ppid:6903 task_flags:0x400548 flags:0x00080002 [ 245.272817][ T6688] Call Trace: [ 245.277077][ T6688] [ 245.280016][ T6688] __schedule+0x125c/0x6730 [ 245.284522][ T6688] ? __pfx___schedule+0x10/0x10 [ 245.290045][ T6688] ? find_held_lock+0x2b/0x80 [ 245.294747][ T6688] ? schedule+0x225/0x2c0 [ 245.299095][ T6688] schedule+0xdd/0x2c0 [ 245.303164][ T6688] schedule_timeout+0x127/0x280 [ 245.308036][ T6688] ? __pfx_schedule_timeout+0x10/0x10 [ 245.313404][ T6688] ? __pfx_process_timeout+0x10/0x10 [ 245.318701][ T6688] ? __wait_for_common+0x2da/0x4c0 [ 245.323791][ T6688] ? rcu_is_watching+0x12/0xc0 [ 245.328567][ T6688] __wait_for_common+0x2e7/0x4c0 [ 245.333494][ T6688] ? __pfx_schedule_timeout+0x10/0x10 [ 245.338867][ T6688] ? __pfx___wait_for_common+0x10/0x10 [ 245.344307][ T6688] ? find_held_lock+0x2b/0x80 [ 245.349026][ T6688] ? io_wq_put_and_exit+0x231/0x9d0 [ 245.354228][ T6688] ? io_wq_put_and_exit+0x231/0x9d0 [ 245.359482][ T6688] io_wq_put_and_exit+0x320/0x9d0 [ 245.364532][ T6688] ? __pfx_io_wq_put_and_exit+0x10/0x10 [ 245.370109][ T6688] ? __pfx___might_resched+0x10/0x10 [ 245.375387][ T6688] ? io_wq_set_exit_on_idle+0x156/0x290 [ 245.381595][ T6688] io_uring_clean_tctx+0x114/0x180 [ 245.387383][ T6688] ? __pfx_io_uring_clean_tctx+0x10/0x10 [ 245.393060][ T6688] ? percpu_counter_add_batch+0xb9/0x230 [ 245.398736][ T6688] ? __refcount_sub_and_test.constprop.0+0x82/0x90 [ 245.405233][ T6688] io_uring_cancel_generic+0x798/0x7f0 [ 245.410727][ T6688] ? __pfx_io_uring_cancel_generic+0x10/0x10 [ 245.416724][ T6688] ? __pfx_autoremove_wake_function+0x10/0x10 [ 245.422776][ T6688] ? do_exit+0x2b6/0x2ae0 [ 245.427344][ T6688] ? rcu_is_watching+0x12/0xc0 [ 245.432126][ T6688] ? io_uring_unreg_ringfd+0xca/0x140 [ 245.437533][ T6688] do_exit+0x344/0x2ae0 [ 245.441676][ T6688] ? kasan_record_aux_stack+0xa7/0xc0 [ 245.447065][ T6688] ? __pfx_do_exit+0x10/0x10 [ 245.451635][ T6688] ? preempt_schedule_common+0x4e/0xc0 [ 245.457149][ T6688] do_group_exit+0xd5/0x2a0 [ 245.461657][ T6688] get_signal+0x1ec7/0x21e0 [ 245.466206][ T6688] ? do_nanosleep+0x3b3/0x500 [ 245.470875][ T6688] ? __pfx_do_nanosleep+0x10/0x10 [ 245.475905][ T6688] ? __pfx_get_signal+0x10/0x10 [ 245.481252][ T6688] ? hrtimer_nanosleep+0x181/0x350 [ 245.487006][ T6688] arch_do_signal_or_restart+0x91/0x7e0 [ 245.492630][ T6688] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 245.498838][ T6688] ? __pfx_hrtimer_wakeup+0x10/0x10 [ 245.504073][ T6688] exit_to_user_mode_loop+0x139/0x6f0 [ 245.509594][ T6688] ? rcu_is_watching+0x12/0xc0 [ 245.514390][ T6688] do_syscall_64+0x666/0x870 [ 245.519011][ T6688] ? clear_bhb_loop+0x40/0x90 [ 245.523676][ T6688] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 245.529612][ T6688] RIP: 0033:0x7fd7dad9e019 [ 245.534014][ T6688] RSP: 002b:00007fd7dbc32028 EFLAGS: 00000246 ORIG_RAX: 0000000000000023 [ 245.542447][ T6688] RAX: fffffffffffffdfc RBX: 00007fd7db025fa0 RCX: 00007fd7dad9e019 [ 245.550433][ T6688] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000200000000300 [ 245.558421][ T6688] RBP: 00007fd7dae3500c R08: 0000000000000000 R09: 0000000000000000 [ 245.566411][ T6688] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 245.574389][ T6688] R13: 00007fd7db026038 R14: 00007fd7db025fa0 R15: 00007ffd81d17598 [ 245.582938][ T6688] [ 245.586701][ T6688] task:iou-wrk-7899 state:D stack:25624 pid:7901 tgid:7898 ppid:6903 task_flags:0x404150 flags:0x00080006 [ 245.598707][ T6688] Call Trace: [ 245.601980][ T6688] [ 245.604897][ T6688] __schedule+0x125c/0x6730 [ 245.609431][ T6688] ? io_wq_dec_running+0x3a8/0x480 [ 245.614549][ T6688] ? __pfx___schedule+0x10/0x10 [ 245.619435][ T6688] ? find_held_lock+0x2b/0x80 [ 245.624097][ T6688] ? schedule+0x225/0x2c0 [ 245.628498][ T6688] schedule+0xdd/0x2c0 [ 245.632580][ T6688] do_uevent+0x427/0x530 [ 245.636863][ T6688] ? __pfx_do_uevent+0x10/0x10 [ 245.641626][ T6688] ? __dlm_new_lockspace+0x1689/0x1fa0 [ 245.647109][ T6688] ? dlm_new_user_lockspace+0x60/0x90 [ 245.652460][ T6688] ? device_write+0x930/0x1c90 [ 245.657239][ T6688] ? __pfx_autoremove_wake_function+0x10/0x10 [ 245.663286][ T6688] ? io_worker_handle_work+0x5aa/0x1570 [ 245.668893][ T6688] ? io_wq_worker+0x33e/0xe60 [ 245.673577][ T6688] ? ret_from_fork+0x72b/0xd50 [ 245.678374][ T6688] ? ret_from_fork_asm+0x1a/0x30 [ 245.684273][ T6688] __dlm_new_lockspace+0x1698/0x1fa0 [ 245.690240][ T6688] ? __pfx___dlm_new_lockspace+0x10/0x10 [ 245.695923][ T6688] ? find_held_lock+0x2b/0x80 [ 245.700595][ T6688] ? rcu_is_watching+0x12/0xc0 [ 245.705360][ T6688] dlm_new_user_lockspace+0x60/0x90 [ 245.710601][ T6688] device_write+0x930/0x1c90 [ 245.715177][ T6688] ? __pfx_device_write+0x10/0x10 [ 245.720224][ T6688] ? put_dec_trunc8+0x28b/0x370 [ 245.725072][ T6688] ? avc_policy_seqno+0x9/0x20 [ 245.729863][ T6688] ? selinux_file_permission+0x8f/0x6d0 [ 245.735456][ T6688] loop_rw_iter+0x305/0x6a0 [ 245.739990][ T6688] io_write+0x111d/0x1670 [ 245.744309][ T6688] __io_issue_sqe+0xe8/0x7a0 [ 245.749801][ T6688] io_issue_sqe+0x88/0x1540 [ 245.754319][ T6688] io_wq_submit_work+0x3b6/0xf70 [ 245.759861][ T6688] ? io_worker_handle_work+0x398/0x1570 [ 245.765494][ T6688] io_worker_handle_work+0x5aa/0x1570 [ 245.770889][ T6688] io_wq_worker+0x33e/0xe60 [ 245.775452][ T6688] ? __pfx_io_wq_worker+0x10/0x10 [ 245.780490][ T6688] ? do_raw_spin_lock+0x128/0x260 [ 245.786480][ T6688] ? find_held_lock+0x2b/0x80 [ 245.791167][ T6688] ? ret_from_fork+0x79/0xd50 [ 245.796538][ T6688] ? rcu_is_watching+0x12/0xc0 [ 245.801324][ T6688] ? __pfx_io_wq_worker+0x10/0x10 [ 245.806389][ T6688] ret_from_fork+0x72b/0xd50 [ 245.811052][ T6688] ? __pfx_ret_from_fork+0x10/0x10 [ 245.816174][ T6688] ? __switch_to+0x800/0x10f0 [ 245.820828][ T6688] ? __pfx_io_wq_worker+0x10/0x10 [ 245.825972][ T6688] ret_from_fork_asm+0x1a/0x30 [ 245.830727][ T6688] [ 245.834529][ T6688] OOM killer enabled. [ 245.839568][ T6688] Restarting tasks: Starting [ 245.855748][ T6688] Restarting tasks: Done [ 245.872239][ T6688] PM: hibernation: hibernation exit [ 245.872255][ T7509] PM: hibernation: hibernation entry [ 245.981941][ T8310] raw-gadget.0 gadget.5: failed to queue disconnect event [ 245.995575][ T7509] Bluetooth: hci8: Opcode 0x0c1a failed: -4 [ 246.017891][ T7509] Bluetooth: hci10: Opcode 0x0c1a failed: -4 [ 246.071182][ T7509] Bluetooth: hci10: Opcode 0x0406 failed: -4 [ 246.147858][ T7509] Bluetooth: hci10: Opcode 0x0406 failed: -4 [ 246.194938][ T7509] Bluetooth: hci11: Opcode 0x0c1a failed: -4 [ 246.232635][ T7509] Bluetooth: hci11: Opcode 0x0406 failed: -4 [ 246.315315][ T7509] Bluetooth: hci11: Opcode 0x0406 failed: -4 [ 246.373366][ T30] audit: type=1400 audit(1785855160.814:625): avc: denied { read } for pid=8353 comm="syz.6.259" name="kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 246.397753][ T7509] Bluetooth: hci13: Opcode 0x0c1a failed: -4 [ 246.437969][ T7509] Bluetooth: hci13: Opcode 0x0406 failed: -4 [ 246.464207][ T30] audit: type=1400 audit(1785855160.814:626): avc: denied { open } for pid=8353 comm="syz.6.259" path="/dev/kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 246.490106][ T30] audit: type=1400 audit(1785855160.824:627): avc: denied { ioctl } for pid=8353 comm="syz.6.259" path="/dev/kvm" dev="devtmpfs" ino=84 ioctlcmd=0xae01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 246.557530][ T7509] Bluetooth: hci13: Opcode 0x0406 failed: -4 [ 246.688358][ T7509] Bluetooth: hci14: Opcode 0x0c1a failed: -4 [ 246.708484][ T7509] Bluetooth: hci14: Opcode 0x0406 failed: -4 [ 246.770004][ T7509] Bluetooth: hci14: Opcode 0x0406 failed: -4 [ 246.791363][ T7509] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 246.807401][ T7509] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 246.836057][ T7509] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 246.852332][ T7509] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 246.886716][ T7509] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 246.901484][ T30] audit: type=1400 audit(1785855161.344:628): avc: denied { write } for pid=8350 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 246.942888][ T7509] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 247.087024][ T3366] Filesystems sync: 0.128 seconds [ 247.099995][ T7509] Freezing user space processes [ 247.115492][ T30] audit: type=1400 audit(1785855161.534:629): avc: denied { write } for pid=8371 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 247.284715][ T12] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 247.429248][ T12] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 247.502516][ T12] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 247.582158][ T12] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 247.652272][ T12] bridge_slave_1: left allmulticast mode [ 247.658154][ T12] bridge_slave_1: left promiscuous mode [ 247.664992][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 247.674597][ T12] bridge_slave_0: left allmulticast mode [ 247.680732][ T12] bridge_slave_0: left promiscuous mode [ 247.686981][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 247.791601][ T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 247.802208][ T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 247.812266][ T12] bond0 (unregistering): Released all slaves [ 248.099270][ T12] hsr_slave_0: left promiscuous mode [ 248.105949][ T12] hsr_slave_1: left promiscuous mode [ 248.111880][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 248.119601][ T12] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 248.127688][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 248.135096][ T12] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 248.149543][ T12] veth1_macvtap: left promiscuous mode [ 248.155145][ T12] veth0_macvtap: left promiscuous mode [ 248.160703][ T12] veth1_vlan: left promiscuous mode [ 248.166013][ T12] veth0_vlan: left promiscuous mode [ 248.236626][ T4927] Bluetooth: hci11: command 0x0c1a tx timeout [ 248.312958][ T12] team0 (unregistering): Port device team_slave_1 removed [ 248.330857][ T12] team0 (unregistering): Port device team_slave_0 removed [ 248.413677][ T60] smc: removing ib device syz1 [ 248.424698][ T5788] lo speed is unknown, defaulting to 1000 [ 248.428384][ T60] smbdirect: ib_dev[syz1] removed [ 248.431208][ T5788] syz1: Port: 1 Link DOWN [ 248.705873][ T4927] Bluetooth: hci14: command 0x0c1a tx timeout [ 248.865911][ T4927] Bluetooth: hci1: command 0x0c1a tx timeout [ 249.283953][ T12] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 249.372319][ T12] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 249.441338][ T12] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 249.501374][ T12] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 249.598165][ T12] netdevsim netdevsim9 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 249.680949][ T12] netdevsim netdevsim9 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 249.762329][ T12] netdevsim netdevsim9 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 249.810481][ T12] netdevsim netdevsim9 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 249.920989][ T12] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 250.003365][ T12] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 250.074105][ T12] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 250.123179][ T12] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 250.229339][ T1311] ieee802154 phy0 wpan0: encryption failed: -22 [ 250.237365][ T1311] ieee802154 phy1 wpan1: encryption failed: -22 [ 250.252767][ T12] netdevsim netdevsim10 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 250.306447][ T4927] Bluetooth: hci11: command 0x0c1a tx timeout [ 250.338043][ T12] bridge_slave_1: left allmulticast mode [ 250.343682][ T12] bridge_slave_1: left promiscuous mode [ 250.349482][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 250.358541][ T12] bridge_slave_0: left allmulticast mode [ 250.364192][ T12] bridge_slave_0: left promiscuous mode [ 250.370617][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 250.382340][ T12] bridge_slave_1: left allmulticast mode [ 250.389375][ T12] bridge_slave_1: left promiscuous mode [ 250.395877][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 250.404338][ T12] bridge_slave_0: left allmulticast mode [ 250.410360][ T12] bridge_slave_0: left promiscuous mode [ 250.416945][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 250.429871][ T12] bridge_slave_1: left allmulticast mode [ 250.436092][ T12] bridge_slave_1: left promiscuous mode [ 250.441820][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 250.450575][ T12] bridge_slave_0: left allmulticast mode [ 250.456568][ T12] bridge_slave_0: left promiscuous mode [ 250.462218][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 250.611594][ T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 250.622120][ T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 250.632196][ T12] bond0 (unregistering): Released all slaves [ 250.714470][ T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 250.725324][ T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 250.735072][ T12] bond0 (unregistering): Released all slaves [ 250.787244][ T4927] Bluetooth: hci14: command 0x0c1a tx timeout [ 250.820954][ T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 250.832606][ T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 250.842157][ T12] bond0 (unregistering): Released all slaves [ 250.947755][ T4927] Bluetooth: hci1: command 0x0c1a tx timeout [ 251.321801][ T12] hsr_slave_0: left promiscuous mode [ 251.328903][ T12] hsr_slave_1: left promiscuous mode [ 251.335136][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 251.342560][ T12] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 251.351589][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 251.359527][ T12] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 251.369484][ T12] hsr_slave_0: left promiscuous mode [ 251.375164][ T12] hsr_slave_1: left promiscuous mode [ 251.380862][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 251.388256][ T12] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 251.395872][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 251.403234][ T12] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 251.412973][ T12] hsr_slave_0: left promiscuous mode [ 251.419315][ T12] hsr_slave_1: left promiscuous mode [ 251.425074][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 251.433732][ T12] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 251.441688][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 251.449407][ T12] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 251.466661][ T12] veth1_macvtap: left promiscuous mode [ 251.472152][ T12] veth0_macvtap: left promiscuous mode [ 251.477728][ T12] veth1_vlan: left promiscuous mode [ 251.482972][ T12] veth0_vlan: left promiscuous mode [ 251.489187][ T12] veth1_macvtap: left promiscuous mode [ 251.494646][ T12] veth0_macvtap: left promiscuous mode [ 251.500322][ T12] veth1_vlan: left promiscuous mode [ 251.506129][ T12] veth0_vlan: left promiscuous mode [ 251.512044][ T12] veth1_macvtap: left promiscuous mode [ 251.517616][ T12] veth0_macvtap: left promiscuous mode [ 251.523543][ T12] veth1_vlan: left promiscuous mode [ 251.529259][ T12] veth0_vlan: left promiscuous mode [ 251.748174][ T12] team0 (unregistering): Port device team_slave_1 removed [ 251.763454][ T12] team0 (unregistering): Port device team_slave_0 removed [ 251.931289][ T12] team0 (unregistering): Port device team_slave_1 removed [ 251.948624][ T12] team0 (unregistering): Port device team_slave_0 removed [ 252.114667][ T12] team0 (unregistering): Port device team_slave_1 removed [ 252.137107][ T12] team0 (unregistering): Port device team_slave_0 removed [ 252.385569][ T4927] Bluetooth: hci11: command 0x0c1a tx timeout [ 252.865557][ T4927] Bluetooth: hci14: command 0x0c1a tx timeout [ 253.025641][ T4927] Bluetooth: hci1: command 0x0c1a tx timeout [ 267.155930][ T7509] Freezing user space processes failed after 20.008 seconds (5 tasks refusing to freeze, wq_busy=0): [ 267.166997][ T7509] task:syz-executor state:S stack:23672 pid:6903 tgid:6903 ppid:1 task_flags:0x40054c flags:0x00080001 [ 267.178958][ T7509] Call Trace: [ 267.182219][ T7509] [ 267.185128][ T7509] __schedule+0x125c/0x6730 [ 267.190203][ T7509] ? __pfx___schedule+0x10/0x10 [ 267.195471][ T7509] ? find_held_lock+0x2b/0x80 [ 267.200159][ T7509] ? schedule+0x225/0x2c0 [ 267.204471][ T7509] schedule+0xdd/0x2c0 [ 267.208641][ T7509] do_wait+0x1a7/0x570 [ 267.212701][ T7509] kernel_wait4+0x16d/0x280 [ 267.217227][ T7509] ? __pfx_kernel_wait4+0x10/0x10 [ 267.222230][ T7509] ? lockdep_hardirqs_on+0x78/0x100 [ 267.227439][ T7509] ? __pfx_child_wait_callback+0x10/0x10 [ 267.233066][ T7509] ? find_held_lock+0x2b/0x80 [ 267.237762][ T7509] ? zap_pid_ns_processes+0x286/0x6a0 [ 267.243141][ T7509] ? zap_pid_ns_processes+0x286/0x6a0 [ 267.248522][ T7509] zap_pid_ns_processes+0x2ca/0x6a0 [ 267.253707][ T7509] ? do_raw_write_lock+0x11e/0x260 [ 267.258881][ T7509] ? __pfx_zap_pid_ns_processes+0x10/0x10 [ 267.264613][ T7509] ? do_exit+0x2205/0x2ae0 [ 267.269120][ T7509] ? rcu_is_watching+0x12/0xc0 [ 267.273889][ T7509] do_exit+0x2377/0x2ae0 [ 267.278167][ T7509] ? __pfx_do_exit+0x10/0x10 [ 267.282748][ T7509] ? do_raw_spin_lock+0x128/0x260 [ 267.287777][ T7509] ? find_held_lock+0x2b/0x80 [ 267.292655][ T7509] ? get_signal+0x7e0/0x21e0 [ 267.297708][ T7509] do_group_exit+0xd5/0x2a0 [ 267.302223][ T7509] get_signal+0x1ec7/0x21e0 [ 267.306733][ T7509] ? kernel_wait4+0x1d6/0x280 [ 267.311395][ T7509] ? __pfx_kernel_wait4+0x10/0x10 [ 267.316425][ T7509] ? __pfx_child_wait_callback+0x10/0x10 [ 267.322042][ T7509] ? __pfx_get_signal+0x10/0x10 [ 267.326893][ T7509] arch_do_signal_or_restart+0x91/0x7e0 [ 267.332419][ T7509] ? __pfx___do_sys_wait4+0x10/0x10 [ 267.337624][ T7509] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 267.343773][ T7509] exit_to_user_mode_loop+0x139/0x6f0 [ 267.349196][ T7509] ? rcu_is_watching+0x12/0xc0 [ 267.353965][ T7509] do_syscall_64+0x666/0x870 [ 267.358558][ T7509] ? clear_bhb_loop+0x40/0x90 [ 267.363215][ T7509] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 267.369112][ T7509] RIP: 0033:0x7fd7dad5e84e [ 267.373510][ T7509] RSP: 002b:00007ffd81d17898 EFLAGS: 00000246 ORIG_RAX: 000000000000003d [ 267.381971][ T7509] RAX: fffffffffffffe00 RBX: 000055555cac8500 RCX: 00007fd7dad5e84e [ 267.389986][ T7509] RDX: 0000000040000000 RSI: 00007ffd81d1793c RDI: ffffffffffffffff [ 267.398270][ T7509] RBP: 00007ffd81d1793c R08: 0000000000000000 R09: 0000000000000000 [ 267.406612][ T7509] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000012 [ 267.414611][ T7509] R13: 000055555cadba10 R14: 0000000000033846 R15: 00007ffd81d17990 [ 267.422619][ T7509] [ 267.425723][ T7509] task:syz-executor state:S stack:24184 pid:6908 tgid:6908 ppid:1 task_flags:0x40054c flags:0x00080001 [ 267.437676][ T7509] Call Trace: [ 267.440948][ T7509] [ 267.443885][ T7509] __schedule+0x125c/0x6730 [ 267.448413][ T7509] ? __pfx___schedule+0x10/0x10 [ 267.453253][ T7509] ? find_held_lock+0x2b/0x80 [ 267.457933][ T7509] ? schedule+0x225/0x2c0 [ 267.462264][ T7509] schedule+0xdd/0x2c0 [ 267.466334][ T7509] do_wait+0x1a7/0x570 [ 267.470382][ T7509] kernel_wait4+0x16d/0x280 [ 267.474858][ T7509] ? __pfx_kernel_wait4+0x10/0x10 [ 267.479903][ T7509] ? __pfx_child_wait_callback+0x10/0x10 [ 267.485550][ T7509] ? zap_pid_ns_processes+0x2d9/0x6a0 [ 267.491018][ T7509] zap_pid_ns_processes+0x2ca/0x6a0 [ 267.496751][ T7509] ? do_raw_write_lock+0x11e/0x260 [ 267.501886][ T7509] ? __pfx_zap_pid_ns_processes+0x10/0x10 [ 267.508217][ T7509] ? do_exit+0x2205/0x2ae0 [ 267.512668][ T7509] ? rcu_is_watching+0x12/0xc0 [ 267.517514][ T7509] do_exit+0x2377/0x2ae0 [ 267.521762][ T7509] ? __pfx_do_exit+0x10/0x10 [ 267.526356][ T7509] ? do_raw_spin_lock+0x128/0x260 [ 267.531368][ T7509] ? find_held_lock+0x2b/0x80 [ 267.536093][ T7509] ? get_signal+0x7e0/0x21e0 [ 267.540693][ T7509] do_group_exit+0xd5/0x2a0 [ 267.545182][ T7509] get_signal+0x1ec7/0x21e0 [ 267.549689][ T7509] ? kernel_wait4+0x1d6/0x280 [ 267.554436][ T7509] ? __pfx_kernel_wait4+0x10/0x10 [ 267.559453][ T7509] ? __pfx_child_wait_callback+0x10/0x10 [ 267.565069][ T7509] ? __pfx_get_signal+0x10/0x10 [ 267.569958][ T7509] arch_do_signal_or_restart+0x91/0x7e0 [ 267.575543][ T7509] ? __pfx___do_sys_wait4+0x10/0x10 [ 267.580726][ T7509] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 267.586966][ T7509] exit_to_user_mode_loop+0x139/0x6f0 [ 267.592356][ T7509] ? rcu_is_watching+0x12/0xc0 [ 267.597546][ T7509] do_syscall_64+0x666/0x870 [ 267.602153][ T7509] ? clear_bhb_loop+0x40/0x90 [ 267.607243][ T7509] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 267.613152][ T7509] RIP: 0033:0x7f1bc6b5e84e [ 267.617589][ T7509] RSP: 002b:00007fffa281a368 EFLAGS: 00000246 ORIG_RAX: 000000000000003d [ 267.626023][ T7509] RAX: fffffffffffffe00 RBX: 0000555578cda500 RCX: 00007f1bc6b5e84e [ 267.634078][ T7509] RDX: 0000000040000000 RSI: 00007fffa281a40c RDI: ffffffffffffffff [ 267.642061][ T7509] RBP: 00007fffa281a40c R08: 0000000000000000 R09: 0000000000000000 [ 267.650047][ T7509] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000003 [ 267.658046][ T7509] R13: 0000555578ceda10 R14: 000000000002ef94 R15: 00007fffa281a460 [ 267.666044][ T7509] [ 267.669077][ T7509] task:syz.1.223 state:D stack:26856 pid:7899 tgid:7898 ppid:6903 task_flags:0x400548 flags:0x00080002 [ 267.680996][ T7509] Call Trace: [ 267.684270][ T7509] [ 267.687196][ T7509] __schedule+0x125c/0x6730 [ 267.691696][ T7509] ? __pfx___schedule+0x10/0x10 [ 267.696661][ T7509] ? find_held_lock+0x2b/0x80 [ 267.701550][ T7509] ? schedule+0x225/0x2c0 [ 267.706231][ T7509] schedule+0xdd/0x2c0 [ 267.710324][ T7509] schedule_timeout+0x127/0x280 [ 267.715168][ T7509] ? __pfx_schedule_timeout+0x10/0x10 [ 267.720554][ T7509] ? __pfx_process_timeout+0x10/0x10 [ 267.725894][ T7509] ? __wait_for_common+0x2da/0x4c0 [ 267.731015][ T7509] ? rcu_is_watching+0x12/0xc0 [ 267.735807][ T7509] __wait_for_common+0x2e7/0x4c0 [ 267.740758][ T7509] ? __pfx_schedule_timeout+0x10/0x10 [ 267.746170][ T7509] ? __pfx___wait_for_common+0x10/0x10 [ 267.751626][ T7509] ? find_held_lock+0x2b/0x80 [ 267.756327][ T7509] ? io_wq_put_and_exit+0x231/0x9d0 [ 267.761508][ T7509] ? io_wq_put_and_exit+0x231/0x9d0 [ 267.766709][ T7509] io_wq_put_and_exit+0x320/0x9d0 [ 267.771725][ T7509] ? __pfx_io_wq_put_and_exit+0x10/0x10 [ 267.777271][ T7509] ? __pfx___might_resched+0x10/0x10 [ 267.782533][ T7509] ? io_wq_set_exit_on_idle+0x156/0x290 [ 267.788091][ T7509] io_uring_clean_tctx+0x114/0x180 [ 267.793188][ T7509] ? __pfx_io_uring_clean_tctx+0x10/0x10 [ 267.798823][ T7509] ? percpu_counter_add_batch+0xb9/0x230 [ 267.804652][ T7509] ? __refcount_sub_and_test.constprop.0+0x82/0x90 [ 267.811515][ T7509] io_uring_cancel_generic+0x798/0x7f0 [ 267.817020][ T7509] ? __pfx_io_uring_cancel_generic+0x10/0x10 [ 267.822985][ T7509] ? __pfx_autoremove_wake_function+0x10/0x10 [ 267.829057][ T7509] ? do_exit+0x2b6/0x2ae0 [ 267.833386][ T7509] ? rcu_is_watching+0x12/0xc0 [ 267.838161][ T7509] ? io_uring_unreg_ringfd+0xca/0x140 [ 267.843523][ T7509] do_exit+0x344/0x2ae0 [ 267.847725][ T7509] ? kasan_record_aux_stack+0xa7/0xc0 [ 267.853118][ T7509] ? __pfx_do_exit+0x10/0x10 [ 267.857724][ T7509] ? preempt_schedule_common+0x4e/0xc0 [ 267.863190][ T7509] do_group_exit+0xd5/0x2a0 [ 267.867727][ T7509] get_signal+0x1ec7/0x21e0 [ 267.872213][ T7509] ? do_nanosleep+0x3b3/0x500 [ 267.876895][ T7509] ? __pfx_do_nanosleep+0x10/0x10 [ 267.881911][ T7509] ? __pfx_get_signal+0x10/0x10 [ 267.886757][ T7509] ? hrtimer_nanosleep+0x181/0x350 [ 267.891860][ T7509] arch_do_signal_or_restart+0x91/0x7e0 [ 267.897447][ T7509] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 267.903593][ T7509] ? __pfx_hrtimer_wakeup+0x10/0x10 [ 267.909347][ T7509] exit_to_user_mode_loop+0x139/0x6f0 [ 267.914756][ T7509] ? rcu_is_watching+0x12/0xc0 [ 267.919911][ T7509] do_syscall_64+0x666/0x870 [ 267.924524][ T7509] ? clear_bhb_loop+0x40/0x90 [ 267.929226][ T7509] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 267.935102][ T7509] RIP: 0033:0x7fd7dad9e019 [ 267.939536][ T7509] RSP: 002b:00007fd7dbc32028 EFLAGS: 00000246 ORIG_RAX: 0000000000000023 [ 267.947942][ T7509] RAX: fffffffffffffdfc RBX: 00007fd7db025fa0 RCX: 00007fd7dad9e019 [ 267.955917][ T7509] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000200000000300 [ 267.963878][ T7509] RBP: 00007fd7dae3500c R08: 0000000000000000 R09: 0000000000000000 [ 267.971897][ T7509] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 267.979939][ T7509] R13: 00007fd7db026038 R14: 00007fd7db025fa0 R15: 00007ffd81d17598 [ 267.987938][ T7509] [ 267.990941][ T7509] task:iou-wrk-7899 state:D stack:25624 pid:7901 tgid:7898 ppid:6903 task_flags:0x404150 flags:0x00080006 [ 268.002845][ T7509] Call Trace: [ 268.006128][ T7509] [ 268.009268][ T7509] __schedule+0x125c/0x6730 [ 268.013765][ T7509] ? io_wq_dec_running+0x3a8/0x480 [ 268.019227][ T7509] ? __pfx___schedule+0x10/0x10 [ 268.024082][ T7509] ? find_held_lock+0x2b/0x80 [ 268.028792][ T7509] ? schedule+0x225/0x2c0 [ 268.033106][ T7509] schedule+0xdd/0x2c0 [ 268.037184][ T7509] do_uevent+0x427/0x530 [ 268.041406][ T7509] ? __pfx_do_uevent+0x10/0x10 [ 268.046173][ T7509] ? __dlm_new_lockspace+0x1689/0x1fa0 [ 268.051712][ T7509] ? dlm_new_user_lockspace+0x60/0x90 [ 268.057092][ T7509] ? device_write+0x930/0x1c90 [ 268.061835][ T7509] ? __pfx_autoremove_wake_function+0x10/0x10 [ 268.067957][ T7509] ? io_worker_handle_work+0x5aa/0x1570 [ 268.073504][ T7509] ? io_wq_worker+0x33e/0xe60 [ 268.078190][ T7509] ? ret_from_fork+0x72b/0xd50 [ 268.082941][ T7509] ? ret_from_fork_asm+0x1a/0x30 [ 268.087938][ T7509] __dlm_new_lockspace+0x1698/0x1fa0 [ 268.093245][ T7509] ? __pfx___dlm_new_lockspace+0x10/0x10 [ 268.098917][ T7509] ? find_held_lock+0x2b/0x80 [ 268.103599][ T7509] ? rcu_is_watching+0x12/0xc0 [ 268.108394][ T7509] dlm_new_user_lockspace+0x60/0x90 [ 268.113797][ T7509] device_write+0x930/0x1c90 [ 268.118752][ T7509] ? __pfx_device_write+0x10/0x10 [ 268.123795][ T7509] ? put_dec_trunc8+0x28b/0x370 [ 268.128654][ T7509] ? avc_policy_seqno+0x9/0x20 [ 268.133397][ T7509] ? selinux_file_permission+0x8f/0x6d0 [ 268.139044][ T7509] loop_rw_iter+0x305/0x6a0 [ 268.143545][ T7509] io_write+0x111d/0x1670 [ 268.147879][ T7509] __io_issue_sqe+0xe8/0x7a0 [ 268.152511][ T7509] io_issue_sqe+0x88/0x1540 [ 268.157073][ T7509] io_wq_submit_work+0x3b6/0xf70 [ 268.162019][ T7509] ? io_worker_handle_work+0x398/0x1570 [ 268.167605][ T7509] io_worker_handle_work+0x5aa/0x1570 [ 268.172994][ T7509] io_wq_worker+0x33e/0xe60 [ 268.177544][ T7509] ? __pfx_io_wq_worker+0x10/0x10 [ 268.182565][ T7509] ? do_raw_spin_lock+0x128/0x260 [ 268.187590][ T7509] ? find_held_lock+0x2b/0x80 [ 268.192251][ T7509] ? ret_from_fork+0x79/0xd50 [ 268.196943][ T7509] ? rcu_is_watching+0x12/0xc0 [ 268.201709][ T7509] ? __pfx_io_wq_worker+0x10/0x10 [ 268.206766][ T7509] ret_from_fork+0x72b/0xd50 [ 268.211743][ T7509] ? __pfx_ret_from_fork+0x10/0x10 [ 268.217291][ T7509] ? __switch_to+0x800/0x10f0 [ 268.221999][ T7509] ? __pfx_io_wq_worker+0x10/0x10 [ 268.227079][ T7509] ret_from_fork_asm+0x1a/0x30 [ 268.231864][ T7509] [ 268.234866][ T7509] task:syz-executor state:S stack:23352 pid:8065 tgid:8065 ppid:1 task_flags:0x40054c flags:0x00080001 [ 268.246781][ T7509] Call Trace: [ 268.250045][ T7509] [ 268.252962][ T7509] __schedule+0x125c/0x6730 [ 268.257494][ T7509] ? __pfx___schedule+0x10/0x10 [ 268.262322][ T7509] ? find_held_lock+0x2b/0x80 [ 268.266999][ T7509] ? schedule+0x225/0x2c0 [ 268.271323][ T7509] schedule+0xdd/0x2c0 [ 268.275375][ T7509] do_wait+0x1a7/0x570 [ 268.279455][ T7509] kernel_wait4+0x16d/0x280 [ 268.283934][ T7509] ? __pfx_kernel_wait4+0x10/0x10 [ 268.288962][ T7509] ? lockdep_hardirqs_on+0x78/0x100 [ 268.294145][ T7509] ? __pfx_child_wait_callback+0x10/0x10 [ 268.299777][ T7509] ? find_held_lock+0x2b/0x80 [ 268.304434][ T7509] ? zap_pid_ns_processes+0x286/0x6a0 [ 268.309840][ T7509] ? zap_pid_ns_processes+0x286/0x6a0 [ 268.315469][ T7509] zap_pid_ns_processes+0x2ca/0x6a0 [ 268.320695][ T7509] ? do_raw_write_lock+0x11e/0x260 [ 268.326274][ T7509] ? __pfx_zap_pid_ns_processes+0x10/0x10 [ 268.332072][ T7509] ? do_exit+0x2205/0x2ae0 [ 268.336519][ T7509] ? rcu_is_watching+0x12/0xc0 [ 268.341278][ T7509] do_exit+0x2377/0x2ae0 [ 268.345522][ T7509] ? __pfx_do_exit+0x10/0x10 [ 268.350095][ T7509] ? do_raw_spin_lock+0x128/0x260 [ 268.355133][ T7509] ? find_held_lock+0x2b/0x80 [ 268.359840][ T7509] ? get_signal+0x7e0/0x21e0 [ 268.364450][ T7509] do_group_exit+0xd5/0x2a0 [ 268.368994][ T7509] get_signal+0x1ec7/0x21e0 [ 268.373498][ T7509] ? kernel_wait4+0x1d6/0x280 [ 268.378180][ T7509] ? __pfx_kernel_wait4+0x10/0x10 [ 268.383207][ T7509] ? __pfx_child_wait_callback+0x10/0x10 [ 268.388893][ T7509] ? __pfx_get_signal+0x10/0x10 [ 268.393751][ T7509] arch_do_signal_or_restart+0x91/0x7e0 [ 268.399383][ T7509] ? __pfx___do_sys_wait4+0x10/0x10 [ 268.404592][ T7509] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 268.410769][ T7509] exit_to_user_mode_loop+0x139/0x6f0 [ 268.416567][ T7509] ? rcu_is_watching+0x12/0xc0 [ 268.421378][ T7509] do_syscall_64+0x666/0x870 [ 268.426433][ T7509] ? clear_bhb_loop+0x40/0x90 [ 268.431135][ T7509] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 268.437225][ T7509] RIP: 0033:0x7f853535e84e [ 268.441646][ T7509] RSP: 002b:00007ffc498f2258 EFLAGS: 00000246 ORIG_RAX: 000000000000003d [ 268.450079][ T7509] RAX: fffffffffffffe00 RBX: 000055556a871500 RCX: 00007f853535e84e [ 268.458068][ T7509] RDX: 0000000040000000 RSI: 00007ffc498f22fc RDI: ffffffffffffffff [ 268.466137][ T7509] RBP: 00007ffc498f22fc R08: 0000000000000000 R09: 0000000000000000 [ 268.474120][ T7509] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 268.482101][ T7509] R13: 000055556a884a10 R14: 0000000000036ae5 R15: 00007ffc498f2350 [ 268.490102][ T7509] [ 268.493899][ T7509] OOM killer enabled. [ 268.498148][ T7509] Restarting tasks: Starting [ 268.527438][ T7509] Restarting tasks: Done [ 268.548040][ T7509] PM: hibernation: hibernation exit [ 268.554816][ T8285] PM: hibernation: hibernation entry [ 268.657472][ T8285] Bluetooth: hci11: Opcode 0x0c1a failed: -4 [ 268.687786][ T8285] Bluetooth: hci14: Opcode 0x0c1a failed: -4 [ 268.710648][ T8285] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 268.731265][ T36] Filesystems sync: 0.002 seconds [ 268.758671][ T8285] Freezing user space processes [ 269.062678][ T36] netdevsim netdevsim8 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 269.106744][ T36] netdevsim netdevsim8 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 269.172458][ T36] netdevsim netdevsim8 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 269.230359][ T36] netdevsim netdevsim8 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 269.310157][ T36] bridge_slave_1: left allmulticast mode [ 269.317143][ T36] bridge_slave_1: left promiscuous mode [ 269.322833][ T36] bridge0: port 2(bridge_slave_1) entered disabled state [ 269.331171][ T36] bridge_slave_0: left allmulticast mode [ 269.337105][ T36] bridge_slave_0: left promiscuous mode [ 269.343530][ T36] bridge0: port 1(bridge_slave_0) entered disabled state [ 269.453982][ T36] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 269.465576][ T36] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 269.475058][ T36] bond0 (unregistering): Released all slaves [ 269.699664][ T36] hsr_slave_0: left promiscuous mode [ 269.705333][ T36] hsr_slave_1: left promiscuous mode [ 269.712034][ T36] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 269.719464][ T36] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 269.727150][ T36] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 269.734571][ T36] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 269.746345][ T36] veth1_macvtap: left promiscuous mode [ 269.752041][ T36] veth0_macvtap: left promiscuous mode [ 269.757698][ T36] veth1_vlan: left promiscuous mode [ 269.762929][ T36] veth0_vlan: left promiscuous mode [ 269.887967][ T36] team0 (unregistering): Port device team_slave_1 removed [ 269.902581][ T36] team0 (unregistering): Port device team_slave_0 removed [ 270.706529][ T4927] Bluetooth: hci11: command 0x0c1a tx timeout [ 270.785642][ T4927] Bluetooth: hci1: command 0x0c1a tx timeout [ 288.811157][ T8285] Freezing user space processes failed after 20.013 seconds (4 tasks refusing to freeze, wq_busy=0): [ 288.822287][ T8285] task:syz-executor state:S stack:23672 pid:6903 tgid:6903 ppid:1 task_flags:0x40054c flags:0x00080001 [ 288.834364][ T8285] Call Trace: [ 288.837684][ T8285] [ 288.840618][ T8285] __schedule+0x125c/0x6730 [ 288.845140][ T8285] ? __pfx___schedule+0x10/0x10 [ 288.850010][ T8285] ? find_held_lock+0x2b/0x80 [ 288.854704][ T8285] ? schedule+0x225/0x2c0 [ 288.859050][ T8285] schedule+0xdd/0x2c0 [ 288.863109][ T8285] do_wait+0x1a7/0x570 [ 288.867194][ T8285] kernel_wait4+0x16d/0x280 [ 288.871692][ T8285] ? __pfx_kernel_wait4+0x10/0x10 [ 288.876710][ T8285] ? __pfx_child_wait_callback+0x10/0x10 [ 288.882348][ T8285] ? kernel_wait4+0x182/0x280 [ 288.887042][ T8285] ? kernel_wait4+0x1d6/0x280 [ 288.891698][ T8285] zap_pid_ns_processes+0x2ca/0x6a0 [ 288.897077][ T8285] ? do_raw_write_lock+0x11e/0x260 [ 288.902278][ T8285] ? __pfx_zap_pid_ns_processes+0x10/0x10 [ 288.908078][ T8285] ? do_exit+0x2205/0x2ae0 [ 288.912521][ T8285] ? rcu_is_watching+0x12/0xc0 [ 288.917327][ T8285] do_exit+0x2377/0x2ae0 [ 288.921569][ T8285] ? __pfx_do_exit+0x10/0x10 [ 288.926157][ T8285] ? do_raw_spin_lock+0x128/0x260 [ 288.931180][ T8285] ? find_held_lock+0x2b/0x80 [ 288.935865][ T8285] ? get_signal+0x7e0/0x21e0 [ 288.940472][ T8285] do_group_exit+0xd5/0x2a0 [ 288.944955][ T8285] get_signal+0x1ec7/0x21e0 [ 288.949499][ T8285] ? kernel_wait4+0x1d6/0x280 [ 288.954176][ T8285] ? __pfx_kernel_wait4+0x10/0x10 [ 288.959225][ T8285] ? __pfx_child_wait_callback+0x10/0x10 [ 288.964865][ T8285] ? __pfx_get_signal+0x10/0x10 [ 288.969715][ T8285] arch_do_signal_or_restart+0x91/0x7e0 [ 288.975241][ T8285] ? __pfx___do_sys_wait4+0x10/0x10 [ 288.980447][ T8285] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 288.986657][ T8285] exit_to_user_mode_loop+0x139/0x6f0 [ 288.992028][ T8285] ? rcu_is_watching+0x12/0xc0 [ 288.996822][ T8285] do_syscall_64+0x666/0x870 [ 289.001536][ T8285] ? clear_bhb_loop+0x40/0x90 [ 289.006333][ T8285] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 289.012244][ T8285] RIP: 0033:0x7fd7dad5e84e [ 289.016686][ T8285] RSP: 002b:00007ffd81d17898 EFLAGS: 00000246 ORIG_RAX: 000000000000003d [ 289.025099][ T8285] RAX: fffffffffffffe00 RBX: 000055555cac8500 RCX: 00007fd7dad5e84e [ 289.033140][ T8285] RDX: 0000000040000000 RSI: 00007ffd81d1793c RDI: ffffffffffffffff [ 289.041129][ T8285] RBP: 00007ffd81d1793c R08: 0000000000000000 R09: 0000000000000000 [ 289.049120][ T8285] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000012 [ 289.057116][ T8285] R13: 000055555cadba10 R14: 0000000000033846 R15: 00007ffd81d17990 [ 289.065094][ T8285] [ 289.068133][ T8285] task:syz.1.223 state:D stack:26856 pid:7899 tgid:7898 ppid:6903 task_flags:0x400548 flags:0x00080002 [ 289.080033][ T8285] Call Trace: [ 289.083291][ T8285] [ 289.086220][ T8285] __schedule+0x125c/0x6730 [ 289.090713][ T8285] ? __pfx___schedule+0x10/0x10 [ 289.095584][ T8285] ? find_held_lock+0x2b/0x80 [ 289.100273][ T8285] ? schedule+0x225/0x2c0 [ 289.104748][ T8285] schedule+0xdd/0x2c0 [ 289.108920][ T8285] schedule_timeout+0x127/0x280 [ 289.113784][ T8285] ? __pfx_schedule_timeout+0x10/0x10 [ 289.119178][ T8285] ? __pfx_process_timeout+0x10/0x10 [ 289.124444][ T8285] ? __wait_for_common+0x2da/0x4c0 [ 289.129560][ T8285] ? rcu_is_watching+0x12/0xc0 [ 289.134313][ T8285] __wait_for_common+0x2e7/0x4c0 [ 289.139253][ T8285] ? __pfx_schedule_timeout+0x10/0x10 [ 289.144615][ T8285] ? __pfx___wait_for_common+0x10/0x10 [ 289.150075][ T8285] ? find_held_lock+0x2b/0x80 [ 289.154726][ T8285] ? io_wq_put_and_exit+0x231/0x9d0 [ 289.159977][ T8285] ? io_wq_put_and_exit+0x231/0x9d0 [ 289.165197][ T8285] io_wq_put_and_exit+0x320/0x9d0 [ 289.170231][ T8285] ? __pfx_io_wq_put_and_exit+0x10/0x10 [ 289.175806][ T8285] ? __pfx___might_resched+0x10/0x10 [ 289.181091][ T8285] ? io_wq_set_exit_on_idle+0x156/0x290 [ 289.186641][ T8285] io_uring_clean_tctx+0x114/0x180 [ 289.191737][ T8285] ? __pfx_io_uring_clean_tctx+0x10/0x10 [ 289.197366][ T8285] ? percpu_counter_add_batch+0xb9/0x230 [ 289.202980][ T8285] ? __refcount_sub_and_test.constprop.0+0x82/0x90 [ 289.209823][ T8285] io_uring_cancel_generic+0x798/0x7f0 [ 289.215306][ T8285] ? __pfx_io_uring_cancel_generic+0x10/0x10 [ 289.221309][ T8285] ? __pfx_autoremove_wake_function+0x10/0x10 [ 289.227385][ T8285] ? do_exit+0x2b6/0x2ae0 [ 289.231712][ T8285] ? rcu_is_watching+0x12/0xc0 [ 289.236490][ T8285] ? io_uring_unreg_ringfd+0xca/0x140 [ 289.241878][ T8285] do_exit+0x344/0x2ae0 [ 289.246038][ T8285] ? kasan_record_aux_stack+0xa7/0xc0 [ 289.251397][ T8285] ? __pfx_do_exit+0x10/0x10 [ 289.255997][ T8285] ? preempt_schedule_common+0x4e/0xc0 [ 289.261446][ T8285] do_group_exit+0xd5/0x2a0 [ 289.266070][ T8285] get_signal+0x1ec7/0x21e0 [ 289.270578][ T8285] ? do_nanosleep+0x3b3/0x500 [ 289.275245][ T8285] ? __pfx_do_nanosleep+0x10/0x10 [ 289.280291][ T8285] ? __pfx_get_signal+0x10/0x10 [ 289.285140][ T8285] ? hrtimer_nanosleep+0x181/0x350 [ 289.290271][ T8285] arch_do_signal_or_restart+0x91/0x7e0 [ 289.295861][ T8285] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 289.302013][ T8285] ? __pfx_hrtimer_wakeup+0x10/0x10 [ 289.307327][ T8285] exit_to_user_mode_loop+0x139/0x6f0 [ 289.312694][ T8285] ? rcu_is_watching+0x12/0xc0 [ 289.317591][ T8285] do_syscall_64+0x666/0x870 [ 289.322184][ T8285] ? clear_bhb_loop+0x40/0x90 [ 289.326883][ T8285] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 289.332864][ T8285] RIP: 0033:0x7fd7dad9e019 [ 289.337321][ T8285] RSP: 002b:00007fd7dbc32028 EFLAGS: 00000246 ORIG_RAX: 0000000000000023 [ 289.345751][ T8285] RAX: fffffffffffffdfc RBX: 00007fd7db025fa0 RCX: 00007fd7dad9e019 [ 289.353701][ T8285] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000200000000300 [ 289.361696][ T8285] RBP: 00007fd7dae3500c R08: 0000000000000000 R09: 0000000000000000 [ 289.369688][ T8285] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 289.377704][ T8285] R13: 00007fd7db026038 R14: 00007fd7db025fa0 R15: 00007ffd81d17598 [ 289.385705][ T8285] [ 289.388720][ T8285] task:iou-wrk-7899 state:D stack:25624 pid:7901 tgid:7898 ppid:6903 task_flags:0x404150 flags:0x00080006 [ 289.400664][ T8285] Call Trace: [ 289.403938][ T8285] [ 289.406909][ T8285] __schedule+0x125c/0x6730 [ 289.411519][ T8285] ? io_wq_dec_running+0x3a8/0x480 [ 289.416752][ T8285] ? __pfx___schedule+0x10/0x10 [ 289.421601][ T8285] ? find_held_lock+0x2b/0x80 [ 289.426301][ T8285] ? schedule+0x225/0x2c0 [ 289.430620][ T8285] schedule+0xdd/0x2c0 [ 289.434665][ T8285] do_uevent+0x427/0x530 [ 289.438923][ T8285] ? __pfx_do_uevent+0x10/0x10 [ 289.443687][ T8285] ? __dlm_new_lockspace+0x1689/0x1fa0 [ 289.449151][ T8285] ? dlm_new_user_lockspace+0x60/0x90 [ 289.454607][ T8285] ? device_write+0x930/0x1c90 [ 289.459465][ T8285] ? __pfx_autoremove_wake_function+0x10/0x10 [ 289.465565][ T8285] ? io_worker_handle_work+0x5aa/0x1570 [ 289.471129][ T8285] ? io_wq_worker+0x33e/0xe60 [ 289.475892][ T8285] ? ret_from_fork+0x72b/0xd50 [ 289.480641][ T8285] ? ret_from_fork_asm+0x1a/0x30 [ 289.485700][ T8285] __dlm_new_lockspace+0x1698/0x1fa0 [ 289.490975][ T8285] ? __pfx___dlm_new_lockspace+0x10/0x10 [ 289.496631][ T8285] ? find_held_lock+0x2b/0x80 [ 289.501296][ T8285] ? rcu_is_watching+0x12/0xc0 [ 289.506177][ T8285] dlm_new_user_lockspace+0x60/0x90 [ 289.511479][ T8285] device_write+0x930/0x1c90 [ 289.516235][ T8285] ? __pfx_device_write+0x10/0x10 [ 289.521274][ T8285] ? put_dec_trunc8+0x28b/0x370 [ 289.526170][ T8285] ? avc_policy_seqno+0x9/0x20 [ 289.530937][ T8285] ? selinux_file_permission+0x8f/0x6d0 [ 289.536518][ T8285] loop_rw_iter+0x305/0x6a0 [ 289.541027][ T8285] io_write+0x111d/0x1670 [ 289.545349][ T8285] __io_issue_sqe+0xe8/0x7a0 [ 289.549985][ T8285] io_issue_sqe+0x88/0x1540 [ 289.554478][ T8285] io_wq_submit_work+0x3b6/0xf70 [ 289.559432][ T8285] ? io_worker_handle_work+0x398/0x1570 [ 289.564985][ T8285] io_worker_handle_work+0x5aa/0x1570 [ 289.570384][ T8285] io_wq_worker+0x33e/0xe60 [ 289.574879][ T8285] ? __pfx_io_wq_worker+0x10/0x10 [ 289.579923][ T8285] ? do_raw_spin_lock+0x128/0x260 [ 289.584936][ T8285] ? find_held_lock+0x2b/0x80 [ 289.589632][ T8285] ? ret_from_fork+0x79/0xd50 [ 289.594303][ T8285] ? rcu_is_watching+0x12/0xc0 [ 289.599087][ T8285] ? __pfx_io_wq_worker+0x10/0x10 [ 289.604125][ T8285] ret_from_fork+0x72b/0xd50 [ 289.608777][ T8285] ? __pfx_ret_from_fork+0x10/0x10 [ 289.614038][ T8285] ? __switch_to+0x800/0x10f0 [ 289.618851][ T8285] ? __pfx_io_wq_worker+0x10/0x10 [ 289.623886][ T8285] ret_from_fork_asm+0x1a/0x30 [ 289.628701][ T8285] [ 289.631713][ T8285] task:syz-executor state:S stack:23352 pid:8065 tgid:8065 ppid:1 task_flags:0x40054c flags:0x00080001 [ 289.643644][ T8285] Call Trace: [ 289.646963][ T8285] [ 289.649891][ T8285] __schedule+0x125c/0x6730 [ 289.654386][ T8285] ? __pfx___schedule+0x10/0x10 [ 289.659275][ T8285] ? find_held_lock+0x2b/0x80 [ 289.663942][ T8285] ? schedule+0x225/0x2c0 [ 289.668312][ T8285] schedule+0xdd/0x2c0 [ 289.672383][ T8285] do_wait+0x1a7/0x570 [ 289.676657][ T8285] kernel_wait4+0x16d/0x280 [ 289.681148][ T8285] ? __pfx_kernel_wait4+0x10/0x10 [ 289.686213][ T8285] ? lockdep_hardirqs_on+0x78/0x100 [ 289.691404][ T8285] ? __pfx_child_wait_callback+0x10/0x10 [ 289.697183][ T8285] ? find_held_lock+0x2b/0x80 [ 289.701842][ T8285] ? zap_pid_ns_processes+0x286/0x6a0 [ 289.707231][ T8285] ? zap_pid_ns_processes+0x286/0x6a0 [ 289.712588][ T8285] zap_pid_ns_processes+0x2ca/0x6a0 [ 289.717916][ T8285] ? do_raw_write_lock+0x11e/0x260 [ 289.723020][ T8285] ? __pfx_zap_pid_ns_processes+0x10/0x10 [ 289.728927][ T8285] ? do_exit+0x2205/0x2ae0 [ 289.733351][ T8285] ? rcu_is_watching+0x12/0xc0 [ 289.738145][ T8285] do_exit+0x2377/0x2ae0 [ 289.742386][ T8285] ? __pfx_do_exit+0x10/0x10 [ 289.746990][ T8285] ? do_raw_spin_lock+0x128/0x260 [ 289.752017][ T8285] ? find_held_lock+0x2b/0x80 [ 289.756733][ T8285] ? get_signal+0x7e0/0x21e0 [ 289.761323][ T8285] do_group_exit+0xd5/0x2a0 [ 289.765839][ T8285] get_signal+0x1ec7/0x21e0 [ 289.770322][ T8285] ? kernel_wait4+0x1d6/0x280 [ 289.774981][ T8285] ? __pfx_kernel_wait4+0x10/0x10 [ 289.780015][ T8285] ? __pfx_child_wait_callback+0x10/0x10 [ 289.785660][ T8285] ? __pfx_get_signal+0x10/0x10 [ 289.790502][ T8285] arch_do_signal_or_restart+0x91/0x7e0 [ 289.796059][ T8285] ? __pfx___do_sys_wait4+0x10/0x10 [ 289.801244][ T8285] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 289.807446][ T8285] exit_to_user_mode_loop+0x139/0x6f0 [ 289.812807][ T8285] ? rcu_is_watching+0x12/0xc0 [ 289.817750][ T8285] do_syscall_64+0x666/0x870 [ 289.822360][ T8285] ? clear_bhb_loop+0x40/0x90 [ 289.827166][ T8285] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 289.833067][ T8285] RIP: 0033:0x7f853535e84e [ 289.837496][ T8285] RSP: 002b:00007ffc498f2258 EFLAGS: 00000246 ORIG_RAX: 000000000000003d [ 289.845930][ T8285] RAX: fffffffffffffe00 RBX: 000055556a871500 RCX: 00007f853535e84e [ 289.853905][ T8285] RDX: 0000000040000000 RSI: 00007ffc498f22fc RDI: ffffffffffffffff [ 289.861922][ T8285] RBP: 00007ffc498f22fc R08: 0000000000000000 R09: 0000000000000000 [ 289.869918][ T8285] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 289.877911][ T8285] R13: 000055556a884a10 R14: 0000000000036ae5 R15: 00007ffc498f2350 [ 289.885918][ T8285] [ 289.889587][ T8285] OOM killer enabled. [ 289.893628][ T8285] Restarting tasks: Starting [ 289.901578][ T8285] Restarting tasks: Done [ 289.931627][ T8285] PM: hibernation: hibernation exit [ 290.351827][ T30] audit: type=1400 audit(1785855204.794:630): avc: denied { write } for pid=8379 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 290.432891][ T30] audit: type=1400 audit(1785855204.864:631): avc: denied { write } for pid=8390 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 290.461473][ T36] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 290.578970][ T36] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 290.657357][ T30] audit: type=1400 audit(1785855205.104:632): avc: denied { write } for pid=8392 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 290.722549][ T36] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 290.731460][ T30] audit: type=1400 audit(1785855205.174:633): avc: denied { write } for pid=8403 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 290.820512][ T36] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 290.968984][ T30] audit: type=1400 audit(1785855205.404:634): avc: denied { write } for pid=8405 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 291.042515][ T30] audit: type=1400 audit(1785855205.474:635): avc: denied { write } for pid=8416 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 291.073244][ T36] bridge_slave_1: left allmulticast mode [ 291.079301][ T36] bridge_slave_1: left promiscuous mode [ 291.085167][ T36] bridge0: port 2(bridge_slave_1) entered disabled state [ 291.094785][ T36] bridge_slave_0: left allmulticast mode [ 291.100893][ T36] bridge_slave_0: left promiscuous mode [ 291.111455][ T36] bridge0: port 1(bridge_slave_0) entered disabled state [ 291.279090][ T36] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 291.289962][ T36] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 291.301324][ T30] audit: type=1400 audit(1785855205.744:636): avc: denied { write } for pid=8418 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 291.327913][ T36] bond0 (unregistering): Released all slaves [ 291.381410][ T30] audit: type=1400 audit(1785855205.824:637): avc: denied { write } for pid=8429 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 291.608382][ T36] hsr_slave_0: left promiscuous mode [ 291.614401][ T36] hsr_slave_1: left promiscuous mode [ 291.622341][ T36] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 291.630334][ T36] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 291.640184][ T36] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 291.648415][ T36] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 291.661822][ T36] veth1_macvtap: left promiscuous mode [ 291.671037][ T36] veth0_macvtap: left promiscuous mode [ 291.676685][ T36] veth1_vlan: left promiscuous mode [ 291.681937][ T36] veth0_vlan: left promiscuous mode [ 291.774126][ T30] audit: type=1400 audit(1785855206.204:638): avc: denied { write } for pid=8432 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 291.852623][ T30] audit: type=1400 audit(1785855206.294:639): avc: denied { write } for pid=8443 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 291.924107][ T36] team0 (unregistering): Port device team_slave_1 removed [ 291.941614][ T36] team0 (unregistering): Port device team_slave_0 removed [ 291.998150][ T5272] 8021q: adding VLAN 0 to HW filter on device eth1 [ 292.440056][ T5272] 8021q: adding VLAN 0 to HW filter on device eth5 [ 295.503912][ T30] kauditd_printk_skb: 28 callbacks suppressed [ 295.503927][ T30] audit: type=1400 audit(1785855209.944:668): avc: denied { write } for pid=8643 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 295.557102][ T30] audit: type=1400 audit(1785855210.004:669): avc: denied { write } for pid=8654 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 295.738879][ T30] audit: type=1400 audit(1785855210.184:670): avc: denied { write } for pid=8656 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 295.784967][ T30] audit: type=1400 audit(1785855210.224:671): avc: denied { write } for pid=8667 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 295.958757][ T30] audit: type=1400 audit(1785855210.404:672): avc: denied { write } for pid=8669 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 296.016933][ T30] audit: type=1400 audit(1785855210.464:673): avc: denied { write } for pid=8680 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 296.109542][ T30] audit: type=1400 audit(1785855210.554:674): avc: denied { write } for pid=8683 comm="rm" name="resolv.conf" dev="tmpfs" ino=1777 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 296.140685][ T30] audit: type=1400 audit(1785855210.584:675): avc: denied { write } for pid=8682 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 296.332387][ T30] audit: type=1400 audit(1785855210.774:676): avc: denied { write } for pid=8687 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 296.375175][ T30] audit: type=1400 audit(1785855210.814:677): avc: denied { setattr } for pid=8688 comm="chmod" name="resolv.conf" dev="tmpfs" ino=4 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 296.664757][ T5272] 8021q: adding VLAN 0 to HW filter on device eth8 [ 296.799398][ T5272] 8021q: adding VLAN 0 to HW filter on device eth6 [ 296.944397][ T5272] 8021q: adding VLAN 0 to HW filter on device eth7 [ 297.084134][ T5272] 8021q: adding VLAN 0 to HW filter on device eth0 [ 297.229149][ T5272] 8021q: adding VLAN 0 to HW filter on device eth9 [ 297.365736][ T5272] 8021q: adding VLAN 0 to HW filter on device eth10 [ 297.509145][ T5272] 8021q: adding VLAN 0 to HW filter on device eth11 [ 297.728642][ T5272] 8021q: adding VLAN 0 to HW filter on device eth12 [ 298.294751][ T5272] 8021q: adding VLAN 0 to HW filter on device eth16 [ 298.423971][ T5272] 8021q: adding VLAN 0 to HW filter on device eth17 [ 298.562932][ T5272] 8021q: adding VLAN 0 to HW filter on device eth18 [ 298.689890][ T5272] 8021q: adding VLAN 0 to HW filter on device eth19 [ 298.821998][ T5272] 8021q: adding VLAN 0 to HW filter on device eth24 [ 298.952416][ T5272] 8021q: adding VLAN 0 to HW filter on device eth25 [ 299.093100][ T5272] 8021q: adding VLAN 0 to HW filter on device eth26 [ 299.230106][ T5272] 8021q: adding VLAN 0 to HW filter on device eth27 [ 299.374573][ T5272] 8021q: adding VLAN 0 to HW filter on device eth28 [ 299.504949][ T5272] 8021q: adding VLAN 0 to HW filter on device eth29 [ 299.650069][ T5272] 8021q: adding VLAN 0 to HW filter on device eth30 [ 299.792821][ T5272] 8021q: adding VLAN 0 to HW filter on device eth31 [ 299.925189][ T5272] 8021q: adding VLAN 0 to HW filter on device eth32 [ 300.062677][ T5272] 8021q: adding VLAN 0 to HW filter on device eth33 [ 300.195190][ T5272] 8021q: adding VLAN 0 to HW filter on device eth34 [ 300.333697][ T5272] 8021q: adding VLAN 0 to HW filter on device eth35 [ 300.474448][ T5272] 8021q: adding VLAN 0 to HW filter on device eth36 [ 305.542053][ T30] kauditd_printk_skb: 52 callbacks suppressed [ 305.542070][ T30] audit: type=1400 audit(1785855219.984:730): avc: denied { write } for pid=8913 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 305.596465][ T30] audit: type=1400 audit(1785855220.044:731): avc: denied { write } for pid=8916 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 305.733016][ T30] audit: type=1400 audit(1785855220.174:732): avc: denied { write } for pid=8925 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 305.780048][ T30] audit: type=1400 audit(1785855220.224:733): avc: denied { write } for pid=8928 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 305.964586][ T30] audit: type=1400 audit(1785855220.404:734): avc: denied { write } for pid=8935 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 306.027249][ T30] audit: type=1400 audit(1785855220.474:735): avc: denied { write } for pid=8938 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 310.071191][ T30] audit: type=1400 audit(1785855224.514:736): avc: denied { write } for pid=8960 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 310.140125][ T30] audit: type=1400 audit(1785855224.584:737): avc: denied { write } for pid=8963 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 310.233934][ T30] audit: type=1400 audit(1785855224.674:738): avc: denied { write } for pid=8966 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 310.298954][ T30] audit: type=1400 audit(1785855224.744:739): avc: denied { write } for pid=8969 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 310.619891][ T30] kauditd_printk_skb: 4 callbacks suppressed [ 310.619906][ T30] audit: type=1400 audit(1785855225.064:744): avc: denied { write } for pid=8984 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 310.671308][ T30] audit: type=1400 audit(1785855225.114:745): avc: denied { write } for pid=8987 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 310.764979][ T30] audit: type=1400 audit(1785855225.204:746): avc: denied { write } for pid=8990 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 310.810971][ T30] audit: type=1400 audit(1785855225.254:747): avc: denied { write } for pid=8993 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 310.901925][ T30] audit: type=1400 audit(1785855225.344:748): avc: denied { write } for pid=8996 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 310.967718][ T30] audit: type=1400 audit(1785855225.414:749): avc: denied { write } for pid=8999 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 311.052212][ T30] audit: type=1400 audit(1785855225.494:750): avc: denied { write } for pid=9002 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 311.099201][ T30] audit: type=1400 audit(1785855225.544:751): avc: denied { write } for pid=9005 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 311.193589][ T30] audit: type=1400 audit(1785855225.634:752): avc: denied { write } for pid=9008 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 311.253414][ T30] audit: type=1400 audit(1785855225.694:753): avc: denied { write } for pid=9011 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 311.667267][ T1311] ieee802154 phy0 wpan0: encryption failed: -22 [ 311.674712][ T1311] ieee802154 phy1 wpan1: encryption failed: -22 [ 373.106574][ T1311] ieee802154 phy0 wpan0: encryption failed: -22 [ 373.112942][ T1311] ieee802154 phy1 wpan1: encryption failed: -22 [ 434.547401][ T1311] ieee802154 phy0 wpan0: encryption failed: -22 [ 434.553746][ T1311] ieee802154 phy1 wpan1: encryption failed: -22 [ 447.985611][ T31] INFO: task iou-wrk-7899:7901 blocked for more than 143 seconds. [ 447.993607][ T31] Not tainted syzkaller #0 [ 447.998628][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 448.007344][ T31] task:iou-wrk-7899 state:D stack:25624 pid:7901 tgid:7898 ppid:6903 task_flags:0x404150 flags:0x00080006 [ 448.019348][ T31] Call Trace: [ 448.022621][ T31] [ 448.025577][ T31] __schedule+0x125c/0x6730 [ 448.030096][ T31] ? io_wq_dec_running+0x3a8/0x480 [ 448.035230][ T31] ? __pfx___schedule+0x10/0x10 [ 448.040496][ T31] ? find_held_lock+0x2b/0x80 [ 448.045199][ T31] ? schedule+0x225/0x2c0 [ 448.049586][ T31] schedule+0xdd/0x2c0 [ 448.053665][ T31] do_uevent+0x427/0x530 [ 448.058039][ T31] ? __pfx_do_uevent+0x10/0x10 [ 448.062785][ T31] ? __dlm_new_lockspace+0x1689/0x1fa0 [ 448.068296][ T31] ? dlm_new_user_lockspace+0x60/0x90 [ 448.073686][ T31] ? device_write+0x930/0x1c90 [ 448.078539][ T31] ? __pfx_autoremove_wake_function+0x10/0x10 [ 448.084613][ T31] ? io_worker_handle_work+0x5aa/0x1570 [ 448.090264][ T31] ? io_wq_worker+0x33e/0xe60 [ 448.094942][ T31] ? ret_from_fork+0x72b/0xd50 [ 448.099752][ T31] ? ret_from_fork_asm+0x1a/0x30 [ 448.104739][ T31] __dlm_new_lockspace+0x1698/0x1fa0 [ 448.110094][ T31] ? __pfx___dlm_new_lockspace+0x10/0x10 [ 448.115775][ T31] ? find_held_lock+0x2b/0x80 [ 448.120475][ T31] ? rcu_is_watching+0x12/0xc0 [ 448.125233][ T31] dlm_new_user_lockspace+0x60/0x90 [ 448.130451][ T31] device_write+0x930/0x1c90 [ 448.135048][ T31] ? __pfx_device_write+0x10/0x10 [ 448.140119][ T31] ? put_dec_trunc8+0x28b/0x370 [ 448.144987][ T31] ? avc_policy_seqno+0x9/0x20 [ 448.150078][ T31] ? selinux_file_permission+0x8f/0x6d0 [ 448.155685][ T31] loop_rw_iter+0x305/0x6a0 [ 448.160193][ T31] io_write+0x111d/0x1670 [ 448.164507][ T31] __io_issue_sqe+0xe8/0x7a0 [ 448.169117][ T31] io_issue_sqe+0x88/0x1540 [ 448.173635][ T31] io_wq_submit_work+0x3b6/0xf70 [ 448.178631][ T31] ? io_worker_handle_work+0x398/0x1570 [ 448.184193][ T31] io_worker_handle_work+0x5aa/0x1570 [ 448.189615][ T31] io_wq_worker+0x33e/0xe60 [ 448.194111][ T31] ? __pfx_io_wq_worker+0x10/0x10 [ 448.199173][ T31] ? do_raw_spin_lock+0x128/0x260 [ 448.204193][ T31] ? find_held_lock+0x2b/0x80 [ 448.208893][ T31] ? ret_from_fork+0x79/0xd50 [ 448.213576][ T31] ? rcu_is_watching+0x12/0xc0 [ 448.218407][ T31] ? __pfx_io_wq_worker+0x10/0x10 [ 448.223435][ T31] ret_from_fork+0x72b/0xd50 [ 448.228073][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 448.233184][ T31] ? __switch_to+0x800/0x10f0 [ 448.237895][ T31] ? __pfx_io_wq_worker+0x10/0x10 [ 448.242926][ T31] ret_from_fork_asm+0x1a/0x30 [ 448.247724][ T31] [ 448.250774][ T31] [ 448.250774][ T31] Showing all locks held in the system: [ 448.258774][ T31] 1 lock held by khungtaskd/31: [ 448.263651][ T31] #0: ffffffff8ebe8200 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x3d/0x184 [ 448.273525][ T31] 2 locks held by getty/5365: [ 448.278202][ T31] #0: ffff8880377f70a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x24/0x80 [ 448.287981][ T31] #1: ffffc900032332e8 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x419/0x14e0 [ 448.298104][ T31] 1 lock held by iou-wrk-7899/7901: [ 448.303273][ T31] #0: ffffffff9b7cf4c0 (&ls_lock){+.+.}-{4:4}, at: __dlm_new_lockspace+0xb8/0x1fa0 [ 448.312725][ T31] 1 lock held by dlm_recoverd/7907: [ 448.317924][ T31] #0: ffff88815400aa18 (&ls->ls_in_recovery){+.+.}-{4:4}, at: dlm_recoverd+0xbd/0x1f90 [ 448.327690][ T31] [ 448.329999][ T31] ============================================= [ 448.329999][ T31] [ 448.338444][ T31] NMI backtrace for cpu 1 [ 448.338463][ T31] CPU: 1 UID: 0 PID: 31 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) [ 448.338480][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 448.338489][ T31] Call Trace: [ 448.338495][ T31] [ 448.338500][ T31] dump_stack_lvl+0x100/0x190 [ 448.338525][ T31] nmi_cpu_backtrace.cold+0x12d/0x151 [ 448.338546][ T31] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 448.338570][ T31] nmi_trigger_cpumask_backtrace+0x21c/0x2a0 [ 448.338589][ T31] sys_info+0x141/0x190 [ 448.338610][ T31] watchdog+0xcb1/0x1030 [ 448.338634][ T31] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 448.338653][ T31] ? __pfx_watchdog+0x10/0x10 [ 448.338669][ T31] ? __kthread_parkme+0x18c/0x230 [ 448.338691][ T31] ? kthread+0x13a/0x450 [ 448.338703][ T31] ? __pfx_watchdog+0x10/0x10 [ 448.338718][ T31] kthread+0x370/0x450 [ 448.338730][ T31] ? __pfx_kthread+0x10/0x10 [ 448.338744][ T31] ret_from_fork+0x72b/0xd50 [ 448.338764][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 448.338784][ T31] ? __switch_to+0x800/0x10f0 [ 448.338798][ T31] ? __pfx_kthread+0x10/0x10 [ 448.338811][ T31] ret_from_fork_asm+0x1a/0x30 [ 448.338839][ T31] [ 448.338846][ T31] Sending NMI from CPU 1 to CPUs 0: [ 448.463827][ C0] NMI backtrace for cpu 0 [ 448.463842][ C0] CPU: 0 UID: 0 PID: 0 Comm: swapper/0 Not tainted syzkaller #0 PREEMPT(full) [ 448.463858][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 448.463866][ C0] RIP: 0010:pv_native_safe_halt+0xf/0x20 [ 448.463887][ C0] Code: d6 8b 02 c3 cc cc cc cc 0f 1f 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 66 90 0f 00 2d a3 5f 10 00 fb f4 3c 4a 03 00 66 2e 0f 1f 84 00 00 00 00 00 66 90 90 90 90 90 90 [ 448.463899][ C0] RSP: 0018:ffffffff8e807e10 EFLAGS: 00000246 [ 448.463912][ C0] RAX: 00000000004475c3 RBX: ffffffff8e891480 RCX: ffffffff8bbb42d5 [ 448.463921][ C0] RDX: 0000000000000000 RSI: ffffffff8e1a8186 RDI: ffffffff8c402680 [ 448.463929][ C0] RBP: fffffbfff1d12290 R08: 0000000000000001 R09: ffffed101708678d [ 448.463938][ C0] R10: ffff8880b8433c6b R11: 0000000000000000 R12: 0000000000000000 [ 448.463951][ C0] R13: 0000000000000000 R14: 1ffffffff1d00fc6 R15: dffffc0000000000 [ 448.463960][ C0] FS: 0000000000000000(0000) GS:ffff888123dd8000(0000) knlGS:0000000000000000 [ 448.463975][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 448.463983][ C0] CR2: 000055b508fccce8 CR3: 000000007e4e0000 CR4: 00000000003526f0 [ 448.463992][ C0] Call Trace: [ 448.463997][ C0] [ 448.464002][ C0] default_idle+0x9/0x10 [ 448.464020][ C0] default_idle_call+0x6c/0xb0 [ 448.464037][ C0] do_idle+0x3a7/0x5b0 [ 448.464056][ C0] ? __pfx_do_idle+0x10/0x10 [ 448.464074][ C0] ? finish_task_switch.isra.0+0x14c/0x10c0 [ 448.464095][ C0] cpu_startup_entry+0x4f/0x60 [ 448.464114][ C0] rest_init+0x251/0x260 [ 448.464131][ C0] ? __pfx_x86_late_time_init+0x10/0x10 [ 448.464153][ C0] start_kernel+0x48e/0x490 [ 448.464172][ C0] x86_64_start_reservations+0x24/0x30 [ 448.464192][ C0] x86_64_start_kernel+0x12b/0x130 [ 448.464211][ C0] common_startup_64+0x13e/0x158 [ 448.464236][ C0] [ 448.654514][ T31] Kernel panic - not syncing: hung_task: blocked tasks [ 448.661382][ T31] CPU: 1 UID: 0 PID: 31 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) [ 448.670463][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 448.680489][ T31] Call Trace: [ 448.683749][ T31] [ 448.686659][ T31] dump_stack_lvl+0x100/0x190 [ 448.691315][ T31] vpanic+0x552/0x970 [ 448.695274][ T31] ? __pfx_vpanic+0x10/0x10 [ 448.699754][ T31] ? rcu_is_watching+0x12/0xc0 [ 448.704494][ T31] panic+0xd1/0xe0 [ 448.708194][ T31] ? __pfx_panic+0x10/0x10 [ 448.712593][ T31] ? nmi_trigger_cpumask_backtrace+0x1fa/0x2a0 [ 448.718721][ T31] ? nmi_trigger_cpumask_backtrace+0x260/0x2a0 [ 448.724854][ T31] ? nmi_trigger_cpumask_backtrace+0x26a/0x2a0 [ 448.730977][ T31] ? watchdog.cold+0x1ec/0x234 [ 448.735712][ T31] ? watchdog+0xcc1/0x1030 [ 448.740101][ T31] watchdog.cold+0x1fd/0x234 [ 448.744667][ T31] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 448.750461][ T31] ? __pfx_watchdog+0x10/0x10 [ 448.755113][ T31] ? __kthread_parkme+0x18c/0x230 [ 448.760118][ T31] ? kthread+0x13a/0x450 [ 448.764336][ T31] ? __pfx_watchdog+0x10/0x10 [ 448.768993][ T31] kthread+0x370/0x450 [ 448.773044][ T31] ? __pfx_kthread+0x10/0x10 [ 448.777614][ T31] ret_from_fork+0x72b/0xd50 [ 448.782180][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 448.787278][ T31] ? __switch_to+0x800/0x10f0 [ 448.791925][ T31] ? __pfx_kthread+0x10/0x10 [ 448.796486][ T31] ret_from_fork_asm+0x1a/0x30 [ 448.801245][ T31] [ 448.804476][ T31] Kernel Offset: disabled [ 448.808781][ T31] Rebooting in 86400 seconds..