last executing test programs: 15.774410973s ago: executing program 2 (id=161): r0 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000480)='/dev/comedi0\x00', 0x1, 0x0) ioctl$COMEDI_DEVCONFIG(r0, 0x40946400, 0x0) ioctl$COMEDI_DEVCONFIG(r0, 0x40946400, &(0x7f00000000c0)={'comedi_test\x00', [0x140, 0x9, 0xffffffd3, 0x2, 0x10000007, 0x7, 0x8002, 0x8000, 0xa, 0xc72d, 0x0, 0x6, 0x3, 0xa, 0x29, 0x72ef, 0x101, 0x6, 0x6, 0x9, 0x24, 0x6, 0xa2d8, 0x9, 0x1000, 0x8, 0x2, 0xffffff7f, 0x383, 0x8001, 0x4]}) 13.767665589s ago: executing program 2 (id=166): syz_open_dev$loop(&(0x7f0000000240), 0x4, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x8, &(0x7f0000006680)) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x4000000) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, &(0x7f0000000080)={0xaa, 0x79}) openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x101000, 0x0) ioctl$KVM_CREATE_IRQCHIP(0xffffffffffffffff, 0xae60) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f00000000c0)={0x1fd, 0x0, 0x0, 0x1000, &(0x7f00002ba000/0x1000)=nil}) ioctl$KVM_NMI(0xffffffffffffffff, 0xae9a) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r1, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x1, @empty, 0x4000ca}, 0x1c) recvmmsg(r1, &(0x7f0000002e80), 0x4000071, 0x830b, 0x0) r2 = socket$inet6(0xa, 0x2, 0x0) sendto$inet6(r2, 0x0, 0x0, 0x4098884, &(0x7f0000000240)={0xa, 0x4e20, 0x0, @mcast2}, 0x1c) sendto$inet6(r2, 0x0, 0x0, 0x0, 0x0, 0x0) syz_open_dev$usbfs(&(0x7f0000000180), 0x205, 0x2581) 11.672409871s ago: executing program 1 (id=168): openat$ttynull(0xffffffffffffff9c, 0x0, 0x88002, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) mount$tmpfs(0x0, 0x0, 0x0, 0x86022, &(0x7f0000000580)=ANY=[@ANYBLOB="61756469742c67e1506910fc83995f747970653d696d"]) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) mkdir(&(0x7f0000000000)='my_tracefs\x00', 0x1ff) lchown(&(0x7f0000000040)='my_tracefs/events/task/task_rename/filter\x00', 0x0, 0x0) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) read$FUSE(0xffffffffffffffff, 0x0, 0x0) openat$null(0xffffff9c, 0x0, 0x101201, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) fanotify_init(0x200, 0x0) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) shutdown(r1, 0x1) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(r1, 0x84, 0x73, &(0x7f0000000080)={0x0, 0x7, 0x30, 0x5, 0x5}, &(0x7f00000000c0)=0x18) 10.354097323s ago: executing program 1 (id=169): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0xd, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r0, 0x84, 0x83, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000700)=ANY=[@ANYBLOB="9feb0100180000000000000040000000400000000c0000000400000001000004010000000a0000000300000000000000000000000000000105000000000000010000000000000003000000000200000002000000002000"], 0x0, 0x64}, 0x28) setsockopt$inet_sctp6_SCTP_RESET_ASSOC(0xffffffffffffffff, 0x84, 0x78, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(0xffffffffffffffff, 0x84, 0x84, 0x0, 0x0) r1 = socket$kcm(0x2, 0x200000000000001, 0x106) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r2, &(0x7f0000000140)={0xa, 0x4e22}, 0x1c) listen(r2, 0x0) syz_emit_ethernet(0x56, &(0x7f0000000180)={@local, @empty, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "0a8435", 0x20, 0x6, 0x0, @remote, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x8, 0x2, 0x0, 0x0, 0x0, {[@timestamp={0x8, 0xa, 0xeac9, 0x1}]}}}}}}}}, 0x0) syz_emit_ethernet(0x96, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaaaa00000000000086dd600a843500600601fe8000000000000000000000000000bbfe8000000000000000000000000000aa00004e22", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="8002000090780400080a000000020000000000020303d72202080a00000002000000ad13128098cf093cc9cd7b8ec814f9bcfdfea9051600000001fffffffe000000030000000600000001050600000006000000"], 0x0) sendmsg$inet(r1, &(0x7f0000000080)={&(0x7f0000000140)={0x2, 0x4001, @loopback}, 0x10, 0x0}, 0x30004001) ftruncate(r0, 0x1) readv(r1, &(0x7f0000000540)=[{&(0x7f0000000180)=""/234, 0xea}], 0x1) r3 = socket$tipc(0x1e, 0x5, 0x0) close_range(r0, r3, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000001ac0)={&(0x7f0000002b80)={0x1344, 0x24, 0x1, 0x70bd27, 0x25dfdbfc, {0x4}, [@nested={0x34d, 0x10c, 0x0, 0x1, [@generic="1e6328abf7e0ce3804371b19468db1a00f2739167d9499747f9488d4764304c01748cf8a67d15d75b6f58db5c898276348a4170063e61e4268660a5ded4132fe5ba02d76e080ec3c6339185b4301fce48c2a00ded566c9bd1ff81f9e1ce6c2c2e36d446871bfd45a08c1b3ff1d69070ea4a7a79a8e0fb224967b71ee3864373985d67498a91d524fc9c5ad62744638b744a3cbd9567423015fb31e1bd70898f1e2b6b77553", @typed={0x14, 0x4, 0x0, 0x0, @ipv6=@local}, @nested={0x15e, 0x131, 0x0, 0x1, [@generic="eccb407646fd4e0035c050c338375e3a6138e9c8797d34c7f538ee42fcad015a3b2245d1a8f4704f4ef615f9fd97e98171df3a840a151a014fdfbe4b8d90c9c1dc65ab16ddaf292807a6cd98ea50aa93050c5595", @generic="85325da663a1f5dd75eab0052f0765a64140dd73e86af3863c6551f14e5de5ccccc38e035e2b8c26", @generic="223bf74ba98d148d6ac08abed73cfa6bb635574d6e2d592eace702bcc7ca7ba9159f82dba177c7d057af41d8425bb60366cd3f466b1960ce796d8009bfe6bae1551a692afcd959a1f14ec8437f09e4d22dfc4d2e1fae48a88ce66edcd4385282c17d95dc345d32d5c02a072f6b73d606d2ba2ec3be067d5efc30abf5fc6c8f34a3e4b1447e13df2a018f693e1f3653b0271d83d8cf7eda964fd401c17ff66dc67849aaec36c8b2f3c8a61f1dce62ffb5eba1249e43589ef09c4fc04c6d836764e0885b2bcf38a7e59654c79dda078ffab09da8516d45", @nested={0x4, 0x9}, @nested={0x4, 0x87}]}, @nested={0x12e, 0x127, 0x0, 0x1, [@nested={0x4, 0x10a}, @generic="2ce9aec287a36367fa4a8b9c200a8d2578ccc9cec47eab38bf11865e5635a9397ad0741949e6e6035d9ef4ddf16b0195d1bcb1d2b74344bd2f79fe37bc7ac69e0603669401fbc4adafac837170307f6267c464ef06cdb6ee0af81576a86add209960ecec9b66502e2c1f889283831542760ff284429550aa5065f29c34165ca861853be23092d90b872815a562664100815e09", @generic="a7b2f7e473b3174713aad5ba37369014bd2d8438d554663f93cced7c948492ddc5fa6aefa094b63d30652e0520222fed4d77c3afb99b5cd2f7bf85be899121c901d238fd4b8c2d060b792e49768f91ec2da731ffc1006b9a637dcefdcce4517a00eefa47c1282f75e0216668a6ccb3cf202cf83c1df7283064e772923b4e1ddf6a704ae0498e5409c78e25", @typed={0x8, 0xc5, 0x0, 0x0, @ipv4=@broadcast}]}]}, @generic="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"]}, 0x1344}}, 0x20000000) 10.288884895s ago: executing program 1 (id=171): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f04ebbee7, 0x8031, 0xffffffffffffffff, 0x8ccbf000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) r4 = socket$key(0xf, 0x3, 0x2) r5 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffe) keyctl$KEYCTL_MOVE(0x3, r5, 0x0, 0x0, 0x0) syz_emit_ethernet(0x4a, &(0x7f0000000200)={@multicast, @remote, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "0fe104", 0x14, 0x3a, 0xff, @local, @mcast2, {[], @ndisc_ns={0x87, 0x0, 0x0, @empty}}}}}}, 0x0) sendmsg$key(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=ANY=[@ANYBLOB="020d000014000000000000000000000005000600000000000a00000000000000fc0100000000000000000000ea2fa43c000000000000000005000500000000000a00000000000000000000000000000000000000000000000000000000000000080012000200020000000000000000001000330002"], 0xa0}}, 0x0) 9.235720421s ago: executing program 1 (id=172): r0 = socket$netlink(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000fc0)={&(0x7f00000004c0)={0x38, 0x1403, 0x1, 0x70bd2d, 0x0, "", [{{0x9, 0x2, 'syz0\x00'}, {0x8, 0x41, 'rxe\x00'}, {0x14, 0x33, 'lo\x00'}}]}, 0x38}, 0x1, 0x0, 0x0, 0x854}, 0x0) nanosleep(&(0x7f0000000100)={0x0, 0x5f5e100}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000040)='sysfs\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./sys/class/infiniband_srp/srp-syz0-1/add_target\x00', 0x2, 0x0) r2 = syz_io_uring_setup(0x4, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000000180)=0x0, &(0x7f0000000140)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r3, r4, r5, &(0x7f0000000040)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd=r1, 0x0, &(0x7f0000000280)=[{&(0x7f0000000240)='id_ext=0,ioc_guid=0,src=127.0.0.1,dest=127.0.0.1:3260\x00', 0x35}], 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, '\x00', 0x0}}) io_uring_enter(r2, 0x1, 0x0, 0x0, 0x0, 0x0) r6 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r6, &(0x7f0000000400)={0x0, 0x18, 0xfa00, {0x4, &(0x7f0000000440)={0x0}, 0x106, 0x2}}, 0x20) write$RDMA_USER_CM_CMD_BIND_IP(r6, &(0x7f0000000480)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0xcbc, 0x0, @ipv4={'\x00', '\xff\xff', @loopback}}, r7}}, 0x30) write$RDMA_USER_CM_CMD_LISTEN(r6, &(0x7f0000000500)={0x7, 0x8, 0xfa00, {r7, 0x10}}, 0x10) write$RDMA_USER_CM_CMD_GET_EVENT(r6, &(0x7f0000000540)={0xc, 0x8, 0xfa00, {&(0x7f0000000580)}}, 0x10) write$RDMA_USER_CM_CMD_ACCEPT(r6, &(0x7f0000000600)={0x8, 0x120, 0xfa00, {0x0, {0x0, 0x0, "c00000000000000100000000000000000000010000000100", 0x34, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, r7}}, 0x128) 8.857446038s ago: executing program 3 (id=178): r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r1 = getpgrp(0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000080)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) sched_setaffinity(0x0, 0x0, 0x0) connect$inet(r0, &(0x7f00000000c0)={0x2, 0x20, @remote}, 0x10) r4 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/crypto\x00', 0x0, 0x0) sendfile(r0, r4, 0x0, 0x4000000000010046) 8.767059165s ago: executing program 4 (id=179): openat$ttynull(0xffffffffffffff9c, 0x0, 0x88002, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) mount$tmpfs(0x0, 0x0, 0x0, 0x86022, &(0x7f0000000580)=ANY=[@ANYBLOB="61756469742c67e1506910fc83995f747970653d696d"]) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) mkdir(&(0x7f0000000000)='my_tracefs\x00', 0x1ff) lchown(&(0x7f0000000040)='my_tracefs/events/task/task_rename/filter\x00', 0x0, 0x0) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) read$FUSE(0xffffffffffffffff, 0x0, 0x0) openat$null(0xffffff9c, 0x0, 0x101201, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) fanotify_init(0x200, 0x0) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) shutdown(r1, 0x1) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(r1, 0x84, 0x73, &(0x7f0000000080)={0x0, 0x7, 0x30, 0x5, 0x5}, &(0x7f00000000c0)=0x18) 8.766311845s ago: executing program 0 (id=180): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./config\x00', &(0x7f0000000040)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./config/nullb/nullb1\x00', 0x1ff) r0 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./config/nullb/nullb1/zoned\x00', 0x2, 0x0) write(r0, &(0x7f0000000100)='1\x00', 0x1) r1 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./config/nullb/nullb1/power\x00', 0x2, 0x0) write(r1, &(0x7f0000000180)='1\x00', 0x1) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000000200)='./dev\x00', &(0x7f0000000240)='devtmpfs\x00', 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./dev/mapper/control\x00', 0x2, 0x0) ioctl(r2, 0xc138fd03, &(0x7f0000001000)="0400000032000000000000003801000000000000000000000000000000000000000000000000000000000000000000006d795f7a6f6e65645f646d00") ioctl(r2, 0xc138fd09, &(0x7f0000002000)="0400000032000000000000007001000038010000010000000000000000000000000000000000000000000000000000006d795f7a6f6e65645f646d00") 8.31392583s ago: executing program 3 (id=181): r0 = syz_usb_connect(0x0, 0x49, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000200000040cc1769190001010203010902370001010080fa0904000000ffffff000904000104ffffff0007058102000200070501020002000705820140000107050601400001"], 0x0) syz_usb_ep_write(r0, 0x81, 0xf, &(0x7f0000000100)="010000000001010101010101010100") nanosleep(&(0x7f0000000200)={0x0, 0x10000000}, 0x0) syz_usb_disconnect(r0) 7.331037916s ago: executing program 4 (id=182): link(&(0x7f0000000140)='.\x00', &(0x7f00000001c0)='./file0\x00') openat$tun(0xffffffffffffff9c, 0x0, 0x40241, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000032680)=""/102400, 0x19000) ftruncate(0xffffffffffffffff, 0x1) r1 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x40042, 0x0) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000080)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(cipher_null)\x00'}, 0x58) r3 = accept$alg(r2, 0x0, 0x0) sendmmsg(r3, &(0x7f0000005780)=[{{0x0, 0x0, 0x0}}], 0x1, 0x20008004) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f0000000300)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r3}}) syz_clone3(&(0x7f0000000900)={0x23800000, 0x0, 0x0, 0x0, {0x27}, 0x0, 0x0, 0x0, 0x0}, 0x58) 7.247972713s ago: executing program 0 (id=183): mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./trace\x00', 0x1ff) mount(0x0, &(0x7f0000000100)='./trace\x00', &(0x7f0000000140)='tracefs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./trace/instances/inst1\x00', 0x1ff) openat$full(0xffffffffffffff9c, 0x0, 0x16b300, 0x0) mknodat$null(0xffffffffffffff9c, 0x0, 0x0, 0x103) openat$fuse(0xffffffffffffff9c, 0x0, 0x2, 0x0) syz_open_dev$hidraw(&(0x7f0000000280), 0x82, 0x2) sched_setscheduler(0x0, 0x1, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000340)=ANY=[@ANYRESDEC, @ANYBLOB], 0x50) openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000007c0), 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x8) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$batadv(0x0, r1) socket$key(0xf, 0x3, 0x2) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_int(r3, 0x29, 0x19, &(0x7f0000000400)=0x9, 0x4) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r2, 0x84, 0x64, &(0x7f0000000080)=[@in={0x2, 0x4e20, @empty}], 0x10) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, &(0x7f00000000c0)={0x0, 0x10, &(0x7f0000000040)=[@in={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x20}}]}, &(0x7f0000000100)=0x10) fsmount(0xffffffffffffffff, 0x1, 0x0) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f0000000840)={r4, @in6={{0xa, 0x4e20, 0x3ae, @empty, 0x129}}, 0x2, 0x2, 0x614, 0x1, 0xb5, 0x7, 0x4}, 0x9c) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sec\x00', 0x1ff) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f00000007c0)=@raw={'raw\x00', 0x3c1, 0x3, 0x2a0, 0x0, 0x111, 0x4b4, 0x1f0, 0xd4feffff, 0x2b8, 0x20a, 0x278, 0x2b8, 0x278, 0x3, 0x0, {[{{@ipv6={@empty, @empty, [0xffffffff, 0xffffff00, 0xffffff00], [], 'ipvlan0\x00', 'caif0\x00', {}, {0xff}, 0x6, 0xfe}, 0x0, 0xa8, 0x108}, @common=@inet=@HMARK={0x60, 'HMARK\x00', 0x0, {@ipv4=@empty, [0x0, 0xff, 0xff], 0x4e20, 0x4e23, 0x4e21, 0x4e24, 0x4917, 0x0, 0x4, 0x9, 0x9}}}, {{@uncond, 0x0, 0xa8, 0xc8}, @unspec=@TRACE={0x20}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x300) mount(0x0, &(0x7f0000000080)='./sec\x00', &(0x7f0000000140)='securityfs\x00', 0x0, 0x0) 5.980065041s ago: executing program 4 (id=184): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000040)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./sys/bus/pci/devices/0000:00:03.0/driver/unbind\x00', 0x1, 0x0) write(r0, &(0x7f0000000340)='0000:00:03.0\n\x00', 0xd) r1 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./sys/bus/pci/devices/0000:00:03.0/driver_override\x00', 0x2, 0x0) write(r1, &(0x7f0000000100)='snd_hda_intel\n\x00', 0xe) r2 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./sys/bus/pci/drivers/snd_hda_intel/bind\x00', 0x1, 0x0) write(r2, &(0x7f0000000180)='0000:00:03.0\n\x00', 0xd) r3 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./sys/bus/hdaudio/devices/hdaudioC0D0/hints\x00', 0x2, 0x0) write(r3, &(0x7f0000000240)='mykey=myval\n\x00', 0xc) 5.835699949s ago: executing program 3 (id=185): openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) r0 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(r0, 0x84, 0x73, &(0x7f0000000080)={0x0, 0x7, 0x30, 0x5, 0x5}, &(0x7f00000000c0)=0x18) 5.803157465s ago: executing program 3 (id=186): syz_emit_ethernet(0xe, &(0x7f0000000100)={@empty, @empty, @void}, 0x0) r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="380000000314010000000000000000000900020073797a300000000008004100736977001400330073797a5f74756e000000000000000000"], 0x38}}, 0x0) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000004c0), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={0xffffffffffffffff}, 0x106, 0x2}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r1, &(0x7f0000000180)={0x3, 0x40, 0xfa00, {{0x2, 0x4e23, 0x0, @local}, {0x2, 0x4e23, 0x0, @remote}, r2, 0x7}}, 0x48) write$RDMA_USER_CM_CMD_CONNECT(r1, &(0x7f0000000200)={0x6, 0x118, 0xfa00, {{}, r2}}, 0x120) 5.778388151s ago: executing program 4 (id=187): mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./dev\x00', 0x1ff) mount(0x0, &(0x7f00000000c0)='./dev\x00', &(0x7f0000000100)='devtmpfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./dev/vhci\x00', 0x2, 0x0) write(r0, &(0x7f0000000180)="ff00", 0x2) write(r0, &(0x7f00000001c0)="040e0401030c00040e0c010310000000000060000000040e0c010110000b00000b00000000040e0a01091000aaaaaaaa10040e0c010320000010000000000000040e0701022000000101040e0c011c20000000000000000000040e05010f200001040e05012a200001040e0c012f20000001000100010001040e05013b200001", 0x76) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r1, &(0x7f0000000040)={0x1f, 0x0, 0x3}, 0x6) write(r1, &(0x7f0000000240)="5400000012000100"/24, 0x18) 5.717113469s ago: executing program 0 (id=188): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e22, @empty}, 0x67) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f00000005c0)='syz_tun\x00', 0x10) sendto$inet(r0, 0x0, 0x0, 0x24000840, &(0x7f0000000080)={0x2, 0x0, @remote}, 0x10) setsockopt$inet_tcp_buf(r0, 0x6, 0x1f, &(0x7f0000000600)="9a", 0x1) syz_emit_ethernet(0x6a, &(0x7f0000000d80)={@local, @random="1514b08d9089", @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x5c, 0x0, 0x0, 0x2, 0x6, 0x0, @remote, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x12, 0x0, 0xfffd, 0x0, 0x7, {[@nop, @fastopen={0x22, 0x6, "b51dfa53"}, @sack={0x5, 0x2a, [0xfffffff3, 0x6, 0x14000000, 0xffff, 0x10001, 0x6, 0xd, 0x6, 0xfffffffe, 0xfffffa14]}]}}}}}}}, 0x0) 5.447454057s ago: executing program 0 (id=189): r0 = syz_open_dev$dri(&(0x7f00000008c0), 0x1, 0x400) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r0, 0xc04064a0, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_GETCRTC(r0, 0xc06864a1, &(0x7f0000000d40)={0x0, 0x0, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DIRTYFB(r0, 0xc01864b1, &(0x7f0000000200)={r1, 0x2, 0x7, 0x0, 0x0}) socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0xc) bind$netlink(r2, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) r4 = syz_ublk_setup_io_uring(0x20, &(0x7f0000000240)={0x0, 0x2c58, 0x80, 0x20002, 0x16c}, &(0x7f00000000c0)=0x0, 0x0, &(0x7f0000000180)=0x0) syz_io_uring_submit(r5, 0x0, r6, &(0x7f0000000980)=@IORING_OP_UNLINKAT={0x24, 0x1, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x200, 0x1}) syz_ublk_add_dev(r4, r5, 0x0, r6, &(0x7f00000031c0)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x1, 0xffffffffffffffff, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x0, 0x0}}, 0x0) syz_usb_connect(0x0, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="120100008010bd40820514009dbb0000000109022400011b00000009040000022a3e740009058bff7f0000100109050b362f"], 0x0) r7 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000240), 0xc2882, 0x0) openat(0xffffffffffffffff, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x840, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r8 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) socket$inet_icmp_raw(0x2, 0x3, 0x1) writev(r8, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) socket$nl_route(0x10, 0x3, 0x0) close(r7) sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000000)={0xffffffffffffffff, 0x43, 0x8}, 0xc) 5.303618951s ago: executing program 3 (id=190): r0 = syz_usb_connect(0x0, 0x43, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000200000040402020b10000000000010902310002010080320904000000ffffff00080b0101ffffff000904010002ffffff000705810200020007050202000200"], 0x0) (async) nanosleep(&(0x7f0000000300)={0x1}, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000100)={0x84, &(0x7f0000000200)={0x40, 0xd, 0x4, '\x00\x00\x00\x00'}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, &(0x7f0000000100)) syz_usb_control_io(r0, 0x0, &(0x7f0000000100)) syz_usb_control_io(r0, 0x0, &(0x7f0000000100)) syz_usb_control_io(r0, 0x0, &(0x7f0000000100)) syz_usb_control_io(r0, 0x0, &(0x7f0000000100)) syz_usb_control_io(r0, 0x0, &(0x7f0000000100)) syz_usb_control_io(r0, 0x0, &(0x7f0000000100)) syz_usb_control_io(r0, 0x0, &(0x7f0000000100)) syz_usb_control_io(r0, 0x0, &(0x7f0000000100)) 5.19102237s ago: executing program 2 (id=191): socket$alg(0x26, 0x5, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) ptrace(0x4208, r0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) r3 = openat$urandom(0xffffffffffffff9c, &(0x7f0000000000), 0x8000, 0x0) readv(r3, &(0x7f00000001c0)=[{0x0}, {&(0x7f0000001ac0)=""/14, 0xe}], 0x2) sched_setaffinity(0x0, 0x0, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r4, 0x6, 0x13, &(0x7f00000000c0)=0x100000001, 0x4) r5 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) r6 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x0, 0x0) r7 = dup3(r6, r5, 0x0) ioctl$BINDER_WRITE_READ(r7, 0xc0306201, &(0x7f00000001c0)={0x8, 0x0, &(0x7f0000000240)=[@decrefs={0x4008630a}], 0x0, 0x0, 0x0}) recvmmsg(r4, &(0x7f0000000080), 0x21e, 0x40010002, 0x0) 4.64975656s ago: executing program 2 (id=192): openat$ttynull(0xffffffffffffff9c, 0x0, 0x88002, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) mount$tmpfs(0x0, 0x0, 0x0, 0x86022, &(0x7f0000000580)=ANY=[@ANYBLOB="61756469742c67e1506910fc83995f747970653d696d9e2343237846886d617369"]) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) mkdir(&(0x7f0000000000)='my_tracefs\x00', 0x1ff) lchown(&(0x7f0000000040)='my_tracefs/events/task/task_rename/filter\x00', 0x0, 0x0) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) read$FUSE(0xffffffffffffffff, 0x0, 0x0) openat$null(0xffffff9c, 0x0, 0x101201, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) fanotify_init(0x200, 0x0) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) shutdown(r1, 0x1) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(r1, 0x84, 0x73, &(0x7f0000000080)={0x0, 0x7, 0x30, 0x5, 0x5}, &(0x7f00000000c0)=0x18) 4.519511193s ago: executing program 1 (id=193): socket(0xa, 0x1, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e20, @multicast2}, 0x10) connect$inet(r0, &(0x7f0000000080)={0x2, 0x4e20, @loopback}, 0x10) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff5000/0x1000)=nil, &(0x7f0000ff9000/0x3000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) r1 = io_uring_setup(0x1b7b, &(0x7f0000000040)={0x0, 0xc89f, 0xc000, 0x7, 0x112}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0xea5bc50b6199d77e) r2 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r2, 0x84, 0x14, &(0x7f0000000000)=@assoc_value, &(0x7f0000000040)=0x8) sendmsg(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000000)='/', 0x1}], 0x1, 0x0, 0x0, 0x2c}, 0x4000845) io_uring_enter(r1, 0x2219, 0x7721, 0x16, 0x0, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, 0x0, 0x0) 3.267822857s ago: executing program 2 (id=194): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f04ebbee7, 0x8031, 0xffffffffffffffff, 0x8ccbf000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) r4 = socket$key(0xf, 0x3, 0x2) r5 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffe) keyctl$KEYCTL_MOVE(0x3, r5, 0x0, 0x0, 0x0) syz_emit_ethernet(0x4a, &(0x7f0000000200)={@multicast, @remote, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "0fe104", 0x14, 0x3a, 0xff, @local, @mcast2, {[], @ndisc_ns={0x87, 0x0, 0x0, @empty}}}}}}, 0x0) sendmsg$key(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=ANY=[@ANYBLOB="020d000014000000000000000000000005000600000000000a00000000000000fc0100000000000000000000ea2fa43c000000000000000005000500000000000a00000000000000000000000000000000000000000000000000000000000000080012000200020000000000000000001000330002"], 0xa0}}, 0x0) mkdir(&(0x7f0000000400)='./my_sys\x00', 0x1ff) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_route(0x10, 0x3, 0x0) write$cgroup_subtree(0xffffffffffffffff, 0x0, 0x0) 2.135953682s ago: executing program 1 (id=195): link(&(0x7f0000000140)='.\x00', &(0x7f00000001c0)='./file0\x00') openat$tun(0xffffffffffffff9c, 0x0, 0x40241, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000032680)=""/102400, 0x19000) ftruncate(0xffffffffffffffff, 0x1) r1 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x40042, 0x0) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000080)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(cipher_null)\x00'}, 0x58) r3 = accept$alg(r2, 0x0, 0x0) sendmmsg(r3, &(0x7f0000005780)=[{{0x0, 0x0, 0x0}}], 0x1, 0x20008004) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f0000000300)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r3}}) syz_clone3(&(0x7f0000000900)={0x23800000, 0x0, 0x0, 0x0, {0x27}, 0x0, 0x0, 0x0, 0x0}, 0x58) 873.385195ms ago: executing program 2 (id=196): openat$ttynull(0xffffffffffffff9c, 0x0, 0x88002, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) r0 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(r0, 0x84, 0x73, &(0x7f0000000080)={0x0, 0x7, 0x30, 0x5, 0x5}, &(0x7f00000000c0)=0x18) 775.683642ms ago: executing program 4 (id=197): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./config\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./config\x00', &(0x7f00000000c0)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./config/usb_gadget/g1\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./config/usb_gadget/g1/functions/midi2.0\x00', 0x1ff) openat(0xffffffffffffff9c, &(0x7f0000000180)='./config/usb_gadget/g1/functions/midi2.0/ep.0\x00', 0x200000, 0x0) openat(0xffffffffffffff9c, &(0x7f00000001c0)='./config/usb_gadget/g1/functions/midi2.0/ep.1\x00', 0x200000, 0x0) 775.059498ms ago: executing program 3 (id=198): mkdirat(0xffffffffffffff9c, &(0x7f0000000300)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000300)='./sys\x00', &(0x7f0000000340)='sysfs\x00', 0x0, 0x0) r0 = openat$userio(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$USERIO_CMD_SET_PORT_TYPE(r0, &(0x7f0000000040)={0x1, 0x1}, 0x2) write$USERIO_CMD_REGISTER(r0, &(0x7f0000000080), 0x2) writev(r0, &(0x7f0000001000)=[{&(0x7f0000000100)="02fa", 0x2}, {&(0x7f0000000102)="02aa", 0x2}, {&(0x7f0000000104)="0200", 0x2}, {&(0x7f0000000106)="02fa", 0x2}, {&(0x7f0000000108)="0200", 0x2}, {&(0x7f000000010a)="0247", 0x2}, {&(0x7f000000010c)="0200", 0x2}, {&(0x7f000000010e)="02fa", 0x2}, {&(0x7f0000000110)="0200", 0x2}, {&(0x7f0000000112)="0247", 0x2}, {&(0x7f0000000114)="0200", 0x2}, {&(0x7f0000000116)="02fa", 0x2}, {&(0x7f0000000118)="0200", 0x2}, {&(0x7f000000011a)="0247", 0x2}, {&(0x7f000000011c)="0200", 0x2}, {&(0x7f000000011e)="02fa", 0x2}, {&(0x7f0000000120)="0200", 0x2}, {&(0x7f0000000122)="0247", 0x2}, {&(0x7f0000000124)="0200", 0x2}, {&(0x7f0000000126)="02fa", 0x2}, {&(0x7f0000000128)="0200", 0x2}, {&(0x7f000000012a)="0247", 0x2}, {&(0x7f000000012c)="0200", 0x2}, {&(0x7f000000012e)="02fa", 0x2}, {&(0x7f0000000130)="0200", 0x2}, {&(0x7f0000000132)="0247", 0x2}, {&(0x7f0000000134)="0200", 0x2}, {&(0x7f0000000136)="02fa", 0x2}, {&(0x7f0000000138)="0200", 0x2}, {&(0x7f000000013a)="0247", 0x2}, {&(0x7f000000013c)="0200", 0x2}, {&(0x7f000000013e)="02fa", 0x2}], 0x20) nanosleep(&(0x7f0000000240)={0x0, 0x1dcd6500}, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./sys/bus/serio/devices/serio0/protocol\x00', 0x2, 0x0) write(r1, &(0x7f0000000440)='synaptics\x00', 0xa) r2 = openat(0xffffffffffffff9c, &(0x7f0000000480)='./sys/bus/serio/devices/serio1/protocol\x00', 0x2, 0x0) write(r2, &(0x7f0000000440)='synaptics\x00', 0xa) r3 = openat(0xffffffffffffff9c, &(0x7f00000004c0)='./sys/bus/serio/devices/serio2/protocol\x00', 0x2, 0x0) write(r3, &(0x7f0000000440)='synaptics\x00', 0xa) 311.534336ms ago: executing program 0 (id=199): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e22, @empty}, 0x67) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f00000005c0)='syz_tun\x00', 0x10) sendto$inet(r0, 0x0, 0x0, 0x24000840, &(0x7f0000000080)={0x2, 0x0, @remote}, 0x10) setsockopt$inet_tcp_buf(r0, 0x6, 0x1f, &(0x7f0000000600)="9a", 0x1) syz_emit_ethernet(0x6a, &(0x7f0000000d80)={@local, @random="1514b08d9089", @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x5c, 0x0, 0x0, 0x2, 0x6, 0x0, @remote, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x12, 0x0, 0xfffd, 0x0, 0x7, {[@nop, @fastopen={0x22, 0x6, "b51dfa53"}, @sack={0x5, 0x2a, [0xfffffff3, 0x6, 0x14000000, 0xffff, 0x10001, 0x6, 0xd, 0x6, 0xfffffffe, 0xfffffa14]}]}}}}}}}, 0x0) 216.356901ms ago: executing program 4 (id=200): mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./config\x00', 0x1ff) mount(0x0, &(0x7f00000000c0)='./config\x00', &(0x7f0000000180)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000001c0)='./config/target\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./config/target/core\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./config/target/core/rd_mcp_0\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f00000002c0)='./config/target/core/rd_mcp_0/rd1\x00', 0x1ff) r0 = openat(0xffffffffffffff9c, &(0x7f0000000340)='./config/target/core/rd_mcp_0/rd1/control\x00', 0x2, 0x0) write(r0, &(0x7f0000000380)='rd_pages=32768\x00', 0xe) r1 = openat(0xffffffffffffff9c, &(0x7f00000003c0)='./config/target/core/rd_mcp_0/rd1/enable\x00', 0x2, 0x0) write(r1, &(0x7f0000000400)='1\x00', 0x1) mkdirat(0xffffffffffffff9c, &(0x7f0000000440)='./config/usb_gadget\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000480)='./config/usb_gadget/g1\x00', 0x1ff) r2 = openat(0xffffffffffffff9c, &(0x7f00000004c0)='./config/usb_gadget/g1/idVendor\x00', 0x2, 0x0) write(r2, &(0x7f0000000500)='0x1d6b\x00', 0x6) r3 = openat(0xffffffffffffff9c, &(0x7f0000000540)='./config/usb_gadget/g1/idProduct\x00', 0x2, 0x0) write(r3, &(0x7f0000000580)='0x0104\x00', 0x6) mkdirat(0xffffffffffffff9c, &(0x7f00000005c0)='./config/usb_gadget/g1/functions\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000600)='./config/usb_gadget/g1/functions/tcm.0\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000640)='./config/usb_gadget/g1/configs\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000680)='./config/usb_gadget/g1/configs/c.1\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f00000006c0)='./config/target/usb_gadget\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000700)='./config/target/usb_gadget/naa.6001405123456789\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000740)='./config/target/usb_gadget/naa.6001405123456789/tpgt_1\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000780)='./config/target/usb_gadget/naa.6001405123456789/tpgt_1/lun\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f00000007c0)='./config/target/usb_gadget/naa.6001405123456789/tpgt_1/lun/lun_0\x00', 0x1ff) symlinkat(&(0x7f0000000840)='./config/target/core/rd_mcp_0/rd1\x00', 0xffffffffffffff9c, &(0x7f0000000880)='./config/target/usb_gadget/naa.6001405123456789/tpgt_1/lun/lun_0/rd1\x00') r4 = openat(0xffffffffffffff9c, &(0x7f0000000900)='./config/target/usb_gadget/naa.6001405123456789/tpgt_1/nexus\x00', 0x2, 0x0) write(r4, &(0x7f0000000940)='naa.6001405123456789\x00', 0x14) symlinkat(&(0x7f0000000980)='./config/usb_gadget/g1/functions/tcm.0\x00', 0xffffffffffffff9c, &(0x7f00000009c0)='./config/usb_gadget/g1/configs/c.1/tcm.0\x00') r5 = openat(0xffffffffffffff9c, &(0x7f0000000a00)='./config/usb_gadget/g1/UDC\x00', 0x2, 0x0) write(r5, &(0x7f0000000a40)='dummy_udc.0\x00', 0xb) nanosleep(&(0x7f0000000000)={0x1}, 0x0) r6 = syz_open_dev$sg(0x0, 0x0, 0x0) ioctl$SG_IO(r6, 0x2285, &(0x7f0000000100)={0x53, 0xfffffffe, 0xa, 0x0, @buffer={0x0, 0x1c, &(0x7f0000000200)=""/28}, &(0x7f0000000300)="5f000000000000001c00", &(0x7f0000000400), 0x0, 0x0, 0x0, 0x0}) 0s ago: executing program 0 (id=201): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000006040)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x200400d5) r0 = syz_open_dev$radio(0x0, 0x1, 0x2) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f0000000040)=ANY=[@ANYRES32=r0], &(0x7f0000000300)='GPL\x00', 0x2, 0xb3, &(0x7f0000000140)=""/179, 0x41100, 0x7b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x38}, 0x94) prlimit64(0x0, 0xe, 0x0, 0x0) ioctl$KVM_GET_STATS_FD_cpu(0xffffffffffffffff, 0xaece) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={0xffffffffffffffff, 0x0, 0x2, 0x0, &(0x7f00000002c0)="0015", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r2, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x0) mount$9p_virtio(&(0x7f00000001c0), &(0x7f0000000480)='./file0\x00', 0x0, 0x8c, 0x0) r4 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000000), 0x2041, 0x0) write$sndseq(r4, &(0x7f0000000600)=[{0x6, 0x0, 0x0, 0x0, @tick, {0x4, 0x5}, {}, @addr={0xec, 0x5b}}, {0x0, 0x0, 0x0, 0x0, @tick=0x1, {}, {0x5, 0x6}, @quote={{0x5, 0x5}}}, {0x0, 0x0, 0x0, 0x0, @tick=0xfe, {0x0, 0x8}, {0x2}, @addr={0x1, 0x6}}, {0x1, 0x1, 0x1, 0x0, @tick=0x7fffffff, {0x4, 0x1}, {0x7, 0x8}, @quote={{0x2, 0xd8}, 0x8}}], 0x70) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.90' (ED25519) to the list of known hosts. [ 72.678582][ T29] kauditd_printk_skb: 8 callbacks suppressed [ 72.678598][ T29] audit: type=1400 audit(1785852570.685:129): avc: denied { mounton } for pid=5594 comm="syz-executor" path="/syzcgroup/unified" dev="sda1" ino=2023 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1 [ 72.708870][ T29] audit: type=1400 audit(1785852570.715:130): avc: denied { mount } for pid=5594 comm="syz-executor" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 72.712364][ T5594] cgroup: Unknown subsys name 'net' [ 72.737845][ T29] audit: type=1400 audit(1785852570.745:131): avc: denied { unmount } for pid=5594 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 72.854978][ T5594] cgroup: Unknown subsys name 'cpuset' [ 72.863268][ T5594] cgroup: Unknown subsys name 'rlimit' [ 72.948175][ T29] audit: type=1400 audit(1785852570.955:132): avc: denied { setattr } for pid=5594 comm="syz-executor" name="raw-gadget" dev="devtmpfs" ino=821 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 72.971557][ T29] audit: type=1400 audit(1785852570.955:133): avc: denied { create } for pid=5594 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 73.012479][ T29] audit: type=1400 audit(1785852570.955:134): avc: denied { write } for pid=5594 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 73.038500][ T29] audit: type=1400 audit(1785852570.955:135): avc: denied { read } for pid=5594 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 73.059143][ T29] audit: type=1400 audit(1785852570.985:136): avc: denied { mounton } for pid=5594 comm="syz-executor" path="/proc/sys/fs/binfmt_misc" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=dir permissive=1 [ 73.084529][ T29] audit: type=1400 audit(1785852570.985:137): avc: denied { mount } for pid=5594 comm="syz-executor" name="/" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=filesystem permissive=1 [ 73.125149][ T5597] SELinux: Context root:object_r:swapfile_t is not valid (left unmapped). [ 73.134588][ T29] audit: type=1400 audit(1785852571.145:138): avc: denied { relabelto } for pid=5597 comm="mkswap" name="swap-file" dev="sda1" ino=2026 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" Setting up swapspace version 1, size = 127995904 bytes [ 74.138681][ T5594] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 77.638221][ T4926] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 77.645980][ T4926] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 77.655042][ T4926] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 77.669689][ T5610] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 77.678328][ T5610] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 77.686724][ T5617] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 77.686895][ T5610] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 77.702550][ T5617] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 77.705814][ T5610] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 77.717473][ T5610] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 77.724543][ T5619] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 77.725512][ T5610] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 77.738990][ T5610] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 77.743534][ T29] kauditd_printk_skb: 9 callbacks suppressed [ 77.743547][ T29] audit: type=1400 audit(1785852575.755:148): avc: denied { read } for pid=5607 comm="syz-executor" dev="nsfs" ino=4026531833 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 77.749656][ T5608] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 77.760773][ T29] audit: type=1400 audit(1785852575.755:149): avc: denied { open } for pid=5607 comm="syz-executor" path="net:[4026531833]" dev="nsfs" ino=4026531833 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 77.775914][ T5608] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 77.809126][ T29] audit: type=1400 audit(1785852575.765:150): avc: denied { mounton } for pid=5607 comm="syz-executor" path="/" dev="sda1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:root_t tclass=dir permissive=1 [ 77.832567][ T29] audit: type=1400 audit(1785852575.765:151): avc: denied { module_request } for pid=5607 comm="syz-executor" kmod="netdev-nr2" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1 [ 77.865314][ T5608] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 77.878906][ T5608] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 77.882305][ T29] audit: type=1400 audit(1785852575.865:152): avc: denied { sys_module } for pid=5607 comm="syz-executor" capability=16 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 77.908633][ T5608] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 77.921846][ T5608] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 77.932521][ T5619] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 77.940210][ T5619] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 77.948419][ T5619] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 77.956032][ T5619] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 77.963213][ T5608] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 77.972247][ T5608] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 79.425069][ T5620] bridge0: port 1(bridge_slave_0) entered blocking state [ 79.433121][ T5620] bridge0: port 1(bridge_slave_0) entered disabled state [ 79.440260][ T5620] bridge_slave_0: entered allmulticast mode [ 79.447329][ T5620] bridge_slave_0: entered promiscuous mode [ 79.473062][ T5607] bridge0: port 1(bridge_slave_0) entered blocking state [ 79.480172][ T5607] bridge0: port 1(bridge_slave_0) entered disabled state [ 79.487508][ T5607] bridge_slave_0: entered allmulticast mode [ 79.494425][ T5607] bridge_slave_0: entered promiscuous mode [ 79.502547][ T5607] bridge0: port 2(bridge_slave_1) entered blocking state [ 79.509632][ T5607] bridge0: port 2(bridge_slave_1) entered disabled state [ 79.516798][ T5607] bridge_slave_1: entered allmulticast mode [ 79.523797][ T5607] bridge_slave_1: entered promiscuous mode [ 79.530724][ T5620] bridge0: port 2(bridge_slave_1) entered blocking state [ 79.537822][ T5620] bridge0: port 2(bridge_slave_1) entered disabled state [ 79.545001][ T5620] bridge_slave_1: entered allmulticast mode [ 79.551764][ T5620] bridge_slave_1: entered promiscuous mode [ 79.637096][ T5615] bridge0: port 1(bridge_slave_0) entered blocking state [ 79.644748][ T5615] bridge0: port 1(bridge_slave_0) entered disabled state [ 79.651879][ T5615] bridge_slave_0: entered allmulticast mode [ 79.658991][ T5615] bridge_slave_0: entered promiscuous mode [ 79.665909][ T5616] bridge0: port 1(bridge_slave_0) entered blocking state [ 79.673115][ T5616] bridge0: port 1(bridge_slave_0) entered disabled state [ 79.680229][ T5616] bridge_slave_0: entered allmulticast mode [ 79.687220][ T5616] bridge_slave_0: entered promiscuous mode [ 79.696893][ T5607] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 79.708880][ T5620] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 79.729988][ T5615] bridge0: port 2(bridge_slave_1) entered blocking state [ 79.737172][ T5615] bridge0: port 2(bridge_slave_1) entered disabled state [ 79.744599][ T5615] bridge_slave_1: entered allmulticast mode [ 79.752843][ T5615] bridge_slave_1: entered promiscuous mode [ 79.760566][ T5616] bridge0: port 2(bridge_slave_1) entered blocking state [ 79.768023][ T5616] bridge0: port 2(bridge_slave_1) entered disabled state [ 79.775231][ T5616] bridge_slave_1: entered allmulticast mode [ 79.782024][ T5616] bridge_slave_1: entered promiscuous mode [ 79.788410][ T4926] Bluetooth: hci1: command tx timeout [ 79.797247][ T5607] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 79.808236][ T5620] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 79.856148][ T5606] bridge0: port 1(bridge_slave_0) entered blocking state [ 79.864284][ T4926] Bluetooth: hci0: command tx timeout [ 79.864375][ T5606] bridge0: port 1(bridge_slave_0) entered disabled state [ 79.876954][ T5606] bridge_slave_0: entered allmulticast mode [ 79.883977][ T5606] bridge_slave_0: entered promiscuous mode [ 79.922118][ T5606] bridge0: port 2(bridge_slave_1) entered blocking state [ 79.929293][ T5606] bridge0: port 2(bridge_slave_1) entered disabled state [ 79.936574][ T5606] bridge_slave_1: entered allmulticast mode [ 79.943388][ T5606] bridge_slave_1: entered promiscuous mode [ 79.953001][ T4926] Bluetooth: hci2: command tx timeout [ 79.953341][ T5615] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 79.969821][ T5616] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 79.980918][ T5607] team0: Port device team_slave_0 added [ 79.989577][ T5607] team0: Port device team_slave_1 added [ 79.997326][ T5620] team0: Port device team_slave_0 added [ 80.012923][ T5615] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 80.022357][ T4926] Bluetooth: hci3: command tx timeout [ 80.024502][ T5616] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 80.036950][ T4926] Bluetooth: hci4: command tx timeout [ 80.051485][ T5620] team0: Port device team_slave_1 added [ 80.099200][ T5606] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 80.124637][ T5607] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 80.131668][ T5607] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 80.157617][ T5607] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 80.179544][ T5606] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 80.198637][ T5615] team0: Port device team_slave_0 added [ 80.206355][ T5616] team0: Port device team_slave_0 added [ 80.212492][ T5607] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 80.219445][ T5607] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 80.245545][ T5607] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 80.256940][ T5620] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 80.264154][ T5620] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 80.290104][ T5620] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 80.310226][ T5615] team0: Port device team_slave_1 added [ 80.317136][ T5616] team0: Port device team_slave_1 added [ 80.336923][ T5620] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 80.344142][ T5620] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 80.370169][ T5620] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 80.383481][ T5606] team0: Port device team_slave_0 added [ 80.406938][ T5616] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 80.414208][ T5616] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 80.440300][ T5616] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 80.457804][ T5606] team0: Port device team_slave_1 added [ 80.479084][ T5616] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 80.486249][ T5616] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 80.512374][ T5616] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 80.532172][ T5615] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 80.539407][ T5615] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 80.565323][ T5615] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 80.599530][ T5615] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 80.606589][ T5615] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 80.632523][ T5615] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 80.648894][ T5607] hsr_slave_0: entered promiscuous mode [ 80.655465][ T5607] hsr_slave_1: entered promiscuous mode [ 80.678560][ T5606] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 80.685641][ T5606] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 80.711998][ T5606] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 80.745795][ T5606] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 80.752806][ T5606] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 80.778776][ T5606] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 80.799168][ T5616] hsr_slave_0: entered promiscuous mode [ 80.805460][ T5616] hsr_slave_1: entered promiscuous mode [ 80.811430][ T5616] debugfs: 'hsr0' already exists in 'hsr' [ 80.817723][ T5616] Cannot create hsr debugfs directory [ 80.827462][ T5620] hsr_slave_0: entered promiscuous mode [ 80.833663][ T5620] hsr_slave_1: entered promiscuous mode [ 80.840100][ T5620] debugfs: 'hsr0' already exists in 'hsr' [ 80.845942][ T5620] Cannot create hsr debugfs directory [ 80.893504][ T5615] hsr_slave_0: entered promiscuous mode [ 80.899637][ T5615] hsr_slave_1: entered promiscuous mode [ 80.905822][ T5615] debugfs: 'hsr0' already exists in 'hsr' [ 80.911540][ T5615] Cannot create hsr debugfs directory [ 80.961389][ T5606] hsr_slave_0: entered promiscuous mode [ 80.967541][ T5606] hsr_slave_1: entered promiscuous mode [ 80.973755][ T5606] debugfs: 'hsr0' already exists in 'hsr' [ 80.979487][ T5606] Cannot create hsr debugfs directory [ 81.381293][ T5607] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 81.395416][ T5607] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 81.404153][ T5607] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 81.415277][ T5607] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 81.443346][ T5607] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 81.454670][ T5607] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 81.476071][ T5607] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 81.486908][ T5607] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 81.542015][ T5615] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 81.554854][ T5615] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 81.569703][ T5615] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 81.581654][ T5615] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 81.597991][ T5615] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 81.610164][ T5615] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 81.618961][ T5615] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 81.629090][ T5615] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 81.724593][ T5620] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 81.735692][ T5620] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 81.748128][ T5620] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 81.757074][ T5620] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 81.765166][ T5620] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 81.775431][ T5620] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 81.783403][ T5620] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 81.793562][ T5620] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 81.862818][ T4926] Bluetooth: hci1: command tx timeout [ 81.881327][ T5607] 8021q: adding VLAN 0 to HW filter on device bond0 [ 81.894885][ T5606] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 81.904651][ T5606] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 81.918191][ T5606] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 81.927399][ T5606] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 81.935723][ T5606] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 81.944726][ T5606] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 81.952907][ T4926] Bluetooth: hci0: command tx timeout [ 81.968556][ T5606] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 81.977904][ T5606] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 82.022382][ T4926] Bluetooth: hci2: command tx timeout [ 82.027310][ T5607] 8021q: adding VLAN 0 to HW filter on device team0 [ 82.062129][ T1168] bridge0: port 1(bridge_slave_0) entered blocking state [ 82.069538][ T1168] bridge0: port 1(bridge_slave_0) entered forwarding state [ 82.090847][ T5615] 8021q: adding VLAN 0 to HW filter on device bond0 [ 82.102403][ T5608] Bluetooth: hci3: command tx timeout [ 82.107975][ T4926] Bluetooth: hci4: command tx timeout [ 82.128810][ T1168] bridge0: port 2(bridge_slave_1) entered blocking state [ 82.135895][ T1168] bridge0: port 2(bridge_slave_1) entered forwarding state [ 82.144393][ T5616] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 82.154539][ T5616] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 82.162163][ T5616] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 82.171100][ T5616] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 82.178750][ T5616] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 82.188233][ T5616] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 82.196064][ T5616] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 82.205265][ T5616] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 82.246110][ T5615] 8021q: adding VLAN 0 to HW filter on device team0 [ 82.268346][ T1168] bridge0: port 1(bridge_slave_0) entered blocking state [ 82.275456][ T1168] bridge0: port 1(bridge_slave_0) entered forwarding state [ 82.302961][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 82.310040][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 82.325987][ T5620] 8021q: adding VLAN 0 to HW filter on device bond0 [ 82.377693][ T5620] 8021q: adding VLAN 0 to HW filter on device team0 [ 82.404676][ T1168] bridge0: port 1(bridge_slave_0) entered blocking state [ 82.411829][ T1168] bridge0: port 1(bridge_slave_0) entered forwarding state [ 82.443699][ T5606] 8021q: adding VLAN 0 to HW filter on device bond0 [ 82.480118][ T1043] bridge0: port 2(bridge_slave_1) entered blocking state [ 82.487275][ T1043] bridge0: port 2(bridge_slave_1) entered forwarding state [ 82.548444][ T5606] 8021q: adding VLAN 0 to HW filter on device team0 [ 82.569050][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 82.576198][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 82.626385][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 82.633537][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 82.651750][ T5616] 8021q: adding VLAN 0 to HW filter on device bond0 [ 82.728296][ T5616] 8021q: adding VLAN 0 to HW filter on device team0 [ 82.765978][ T140] bridge0: port 1(bridge_slave_0) entered blocking state [ 82.773137][ T140] bridge0: port 1(bridge_slave_0) entered forwarding state [ 82.801765][ T140] bridge0: port 2(bridge_slave_1) entered blocking state [ 82.808920][ T140] bridge0: port 2(bridge_slave_1) entered forwarding state [ 83.261395][ T5607] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 83.399357][ T5607] veth0_vlan: entered promiscuous mode [ 83.430457][ T5615] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 83.468379][ T5607] veth1_vlan: entered promiscuous mode [ 83.607497][ T5607] veth0_macvtap: entered promiscuous mode [ 83.655585][ T5607] veth1_macvtap: entered promiscuous mode [ 83.716541][ T5607] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 83.754754][ T5620] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 83.791526][ T5607] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 83.827733][ T5616] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 83.860090][ T5606] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 83.943381][ T4926] Bluetooth: hci1: command tx timeout [ 83.993182][ T5620] veth0_vlan: entered promiscuous mode [ 84.019364][ T5620] veth1_vlan: entered promiscuous mode [ 84.033484][ T4926] Bluetooth: hci0: command tx timeout [ 84.038637][ T5606] veth0_vlan: entered promiscuous mode [ 84.074721][ T5616] veth0_vlan: entered promiscuous mode [ 84.103092][ T4926] Bluetooth: hci2: command tx timeout [ 84.103706][ T35] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.112109][ T1168] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 84.123390][ T5615] veth0_vlan: entered promiscuous mode [ 84.132804][ T1168] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 84.140189][ T5606] veth1_vlan: entered promiscuous mode [ 84.152713][ T155] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.183550][ T4926] Bluetooth: hci4: command tx timeout [ 84.188233][ T5616] veth1_vlan: entered promiscuous mode [ 84.189262][ T5608] Bluetooth: hci3: command tx timeout [ 84.215907][ T155] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 84.229800][ T155] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 84.250962][ T5615] veth1_vlan: entered promiscuous mode [ 84.255550][ T29] audit: type=1400 audit(1785852582.255:153): avc: denied { mounton } for pid=5607 comm="syz-executor" path="/root/syzkaller.ExnwZA/syz-tmp" dev="sda1" ino=2042 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_home_t tclass=dir permissive=1 [ 84.266781][ T5620] veth0_macvtap: entered promiscuous mode [ 84.291230][ T5606] veth0_macvtap: entered promiscuous mode [ 84.309300][ T29] audit: type=1400 audit(1785852582.255:154): avc: denied { mount } for pid=5607 comm="syz-executor" name="/" dev="tmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 84.325403][ T5615] veth0_macvtap: entered promiscuous mode [ 84.349477][ T5620] veth1_macvtap: entered promiscuous mode [ 84.360609][ T29] audit: type=1400 audit(1785852582.285:155): avc: denied { mounton } for pid=5607 comm="syz-executor" path="/root/syzkaller.ExnwZA/syz-tmp/newroot/dev" dev="tmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 84.363578][ T5606] veth1_macvtap: entered promiscuous mode [ 84.408884][ T5616] veth0_macvtap: entered promiscuous mode [ 84.409335][ T5607] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 84.425495][ T5616] veth1_macvtap: entered promiscuous mode [ 84.435749][ T29] audit: type=1400 audit(1785852582.295:156): avc: denied { mount } for pid=5607 comm="syz-executor" name="/" dev="proc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 84.459795][ T29] audit: type=1400 audit(1785852582.295:157): avc: denied { mounton } for pid=5607 comm="syz-executor" path="/root/syzkaller.ExnwZA/syz-tmp/newroot/sys/kernel/debug" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=dir permissive=1 [ 84.466434][ T5615] veth1_macvtap: entered promiscuous mode [ 84.492933][ T29] audit: type=1400 audit(1785852582.295:158): avc: denied { mounton } for pid=5607 comm="syz-executor" path="/root/syzkaller.ExnwZA/syz-tmp/newroot/proc/sys/fs/binfmt_misc" dev="proc" ino=6914 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysctl_fs_t tclass=dir permissive=1 [ 84.521371][ T155] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.530569][ T29] audit: type=1400 audit(1785852582.315:159): avc: denied { unmount } for pid=5607 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 84.553812][ T5606] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 84.573470][ T29] audit: type=1400 audit(1785852582.345:160): avc: denied { mounton } for pid=5607 comm="syz-executor" path="/dev/gadgetfs" dev="devtmpfs" ino=2784 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:device_t tclass=dir permissive=1 [ 84.604489][ T5620] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 84.616349][ T5606] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 84.625620][ T29] audit: type=1400 audit(1785852582.355:161): avc: denied { mount } for pid=5607 comm="syz-executor" name="/" dev="gadgetfs" ino=6933 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfs_t tclass=filesystem permissive=1 [ 84.630581][ T5616] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 84.648860][ T29] audit: type=1400 audit(1785852582.355:162): avc: denied { mount } for pid=5607 comm="syz-executor" name="/" dev="binder" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 84.704076][ T5616] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 84.718845][ T5620] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 84.731279][ T5615] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 84.769134][ T5615] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 84.855239][ T1043] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.954441][ T1043] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.001459][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 85.010327][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 85.025722][ T155] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.036854][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 85.044994][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 85.084490][ T1043] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 85.098003][ T35] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.109315][ T1043] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 85.138940][ T155] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 85.157635][ T155] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 85.172916][ T35] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 85.191888][ T35] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 85.243328][ T1043] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 85.275130][ T1043] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 85.327674][ T1168] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 85.349448][ T1168] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 85.363807][ T155] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.391946][ T155] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.455183][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 85.474436][ T1043] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.478363][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 86.580547][ T5608] Bluetooth: hci1: command tx timeout [ 86.585057][ T4926] Bluetooth: hci0: command tx timeout [ 86.586255][ T5608] Bluetooth: hci2: command tx timeout [ 86.591340][ T5610] Bluetooth: hci3: command tx timeout [ 86.597186][ T5619] Bluetooth: hci4: command tx timeout [ 86.631123][ T190] cfg80211: failed to load regulatory.db [ 86.644197][ T35] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 86.662945][ T5714] usb 4-1: new full-speed USB device number 2 using dummy_hcd [ 86.711034][ T35] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 86.784365][ T155] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 86.834659][ T13] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 86.873384][ T5714] usb 4-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 86.907022][ T5714] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 86.964246][ T5714] usb 4-1: config 0 descriptor?? [ 86.992681][ T12] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 87.020020][ T5714] cp210x 4-1:0.0: cp210x converter detected [ 87.029467][ T12] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 88.142634][ T13] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 88.175282][ T13] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 88.312309][ T35] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 88.356074][ T5714] usb 4-1: cp210x converter now attached to ttyUSB0 [ 88.393207][ T13] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 88.534563][ T5736] usb 4-1: USB disconnect, device number 2 [ 88.559667][ T5736] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 88.604330][ T5736] cp210x 4-1:0.0: device disconnected [ 88.692787][ T5707] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 88.855602][ T5707] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 16 [ 88.880400][ T5707] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 64 [ 88.906797][ T5707] usb 1-1: New USB device found, idVendor=0a46, idProduct=9621, bcdDevice=4f.32 [ 88.922279][ T5707] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 88.942515][ T5707] usb 1-1: Product: syz [ 88.946749][ T5707] usb 1-1: Manufacturer: syz [ 88.953804][ T5707] usb 1-1: SerialNumber: syz [ 88.974921][ T5707] usb 1-1: config 0 descriptor?? [ 88.982103][ T5833] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 88.995678][ T5833] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 89.227137][ T5833] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 89.245512][ T5833] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 89.256987][ T29] kauditd_printk_skb: 37 callbacks suppressed [ 89.257001][ T29] audit: type=1400 audit(1785852587.265:200): avc: denied { name_bind } for pid=5839 comm="syz.3.15" src=20001 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=tcp_socket permissive=1 [ 89.346024][ T29] audit: type=1400 audit(1785852587.295:201): avc: denied { node_bind } for pid=5839 comm="syz.3.15" saddr=172.20.20.170 src=20001 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=tcp_socket permissive=1 [ 89.368378][ T9] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 89.393158][ T29] audit: type=1400 audit(1785852587.305:202): avc: denied { create } for pid=5839 comm="syz.3.15" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 89.426474][ T29] audit: type=1400 audit(1785852587.305:203): avc: denied { create } for pid=5839 comm="syz.3.15" anonclass=[userfaultfd] scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 89.454322][ T29] audit: type=1400 audit(1785852587.325:204): avc: denied { ioctl } for pid=5839 comm="syz.3.15" path="anon_inode:[userfaultfd]" dev="anon_inodefs" ino=8130 ioctlcmd=0xaa00 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 89.544644][ T9] usb 5-1: Using ep0 maxpacket: 8 [ 89.629106][ T9] usb 5-1: config index 0 descriptor too short (expected 301, got 45) [ 89.656785][ T29] audit: type=1400 audit(1785852587.525:205): avc: denied { write } for pid=5839 comm="syz.3.15" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 89.676016][ T9] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 89.709014][ T5707] dm9601: No valid MAC address in EEPROM, using 00:00:00:00:00:00 [ 89.711983][ T9] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 89.767062][ T9] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 89.814182][ T9] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 89.841870][ T29] audit: type=1400 audit(1785852587.845:206): avc: denied { read write } for pid=5850 comm="syz.1.20" name="fuse" dev="devtmpfs" ino=99 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fuse_device_t tclass=chr_file permissive=1 [ 89.871225][ T9] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 89.902558][ T9] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 89.936586][ T29] audit: type=1400 audit(1785852587.855:207): avc: denied { open } for pid=5850 comm="syz.1.20" path="/dev/fuse" dev="devtmpfs" ino=99 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fuse_device_t tclass=chr_file permissive=1 [ 90.011226][ T29] audit: type=1400 audit(1785852587.855:208): avc: denied { mounton } for pid=5850 comm="syz.1.20" path="/3/file0" dev="tmpfs" ino=34 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 90.382255][ T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!! [ 90.987280][ T29] audit: type=1400 audit(1785852588.955:209): avc: denied { read } for pid=5844 comm="syz.2.18" name="msr" dev="devtmpfs" ino=87 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 91.071575][ T9] usb 5-1: usb_control_msg returned -32 [ 91.145918][ T9] usbtmc 5-1:16.0: can't read capabilities [ 91.449957][ T5707] dm9601 1-1:0.0 (unnamed net_device) (uninitialized): MDIO read error: -71 [ 91.524476][ T9] usb 5-1: USB disconnect, device number 2 [ 91.571970][ T5707] dm9601 1-1:0.0 eth1: register 'dm9601' at usb-dummy_hcd.0-1, Davicom DM96xx USB 10/100 Ethernet, de:22:8d:19:c1:79 [ 91.660726][ T5707] usb 1-1: USB disconnect, device number 2 [ 91.695456][ T5707] dm9601 1-1:0.0 eth1: unregister 'dm9601' usb-dummy_hcd.0-1, Davicom DM96xx USB 10/100 Ethernet [ 93.102956][ T5882] futex_wake_op: syz.4.29 tries to shift op by 144; fix this program [ 94.368758][ T29] kauditd_printk_skb: 42 callbacks suppressed [ 94.368781][ T29] audit: type=1400 audit(1785852592.295:252): avc: denied { append } for pid=5883 comm="syz.1.30" name="001" dev="devtmpfs" ino=740 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 96.545244][ T5894] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_rx_wq": -EINTR [ 97.813825][ T29] audit: type=1400 audit(1785852595.825:253): avc: denied { write } for pid=5875 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 97.907300][ T29] audit: type=1400 audit(1785852595.825:254): avc: denied { create } for pid=5875 comm="dhcpcd-run-hook" name="resolv.conf.eth1.link" scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 98.027476][ T5918] Zero length message leads to an empty skb [ 98.108049][ T29] audit: type=1400 audit(1785852595.825:255): avc: denied { write } for pid=5875 comm="dhcpcd-run-hook" path="/run/dhcpcd/hook-state/resolv.conf.eth1.link" dev="tmpfs" ino=2003 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 98.445668][ T29] audit: type=1400 audit(1785852595.825:256): avc: denied { append } for pid=5875 comm="dhcpcd-run-hook" name="resolv.conf.eth1.link" dev="tmpfs" ino=2003 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 98.702105][ T29] audit: type=1400 audit(1785852596.705:257): avc: denied { write } for pid=5921 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 98.786969][ T29] audit: type=1400 audit(1785852596.735:258): avc: denied { unlink } for pid=5921 comm="rm" name="resolv.conf.eth1.link" dev="tmpfs" ino=2003 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 98.888908][ T29] audit: type=1400 audit(1785852596.785:259): avc: denied { validate_trans } for pid=5922 comm="syz.3.36" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security permissive=1 [ 98.979431][ T29] audit: type=1400 audit(1785852596.875:260): avc: denied { search } for pid=5924 comm="rm" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 99.481238][ T5930] binder: BC_ATTEMPT_ACQUIRE not supported [ 99.487268][ T5930] binder: 5927:5930 ioctl c0306201 2000000001c0 returned -22 [ 100.075726][ T5707] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 100.086409][ T29] audit: type=1400 audit(1785852596.875:261): avc: denied { search } for pid=5924 comm="rm" name="dhcpcd" dev="tmpfs" ino=1772 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 100.160632][ T29] audit: type=1400 audit(1785852596.875:262): avc: denied { search } for pid=5924 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 100.262091][ T29] audit: type=1400 audit(1785852596.985:263): avc: denied { create } for pid=5927 comm="syz.3.38" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 100.302316][ T5707] usb 5-1: Using ep0 maxpacket: 8 [ 100.313834][ T5707] usb 5-1: config index 0 descriptor too short (expected 301, got 45) [ 100.335703][ T5707] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 100.360149][ T29] audit: type=1400 audit(1785852597.485:264): avc: denied { ioctl } for pid=5927 comm="syz.3.38" path="/dev/binderfs/binder0" dev="binder" ino=7 ioctlcmd=0x6201 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 100.396810][ T5707] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 100.428302][ T5707] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 100.466096][ T5707] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 100.483981][ T29] audit: type=1400 audit(1785852598.145:265): avc: denied { read } for pid=5932 comm="dhcpcd-run-hook" name="resolv.conf" dev="tmpfs" ino=1777 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 100.540359][ T5707] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 100.580368][ T5707] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 100.597800][ T29] audit: type=1400 audit(1785852598.145:266): avc: denied { read open } for pid=5932 comm="dhcpcd-run-hook" path="/run/dhcpcd/hook-state/resolv.conf" dev="tmpfs" ino=1777 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 100.676874][ T29] audit: type=1400 audit(1785852598.155:267): avc: denied { getattr } for pid=5932 comm="dhcpcd-run-hook" path="/run/dhcpcd/hook-state/resolv.conf" dev="tmpfs" ino=1777 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 100.762640][ T29] audit: type=1400 audit(1785852598.265:268): avc: denied { create } for pid=5934 comm="syz.2.40" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 100.830826][ T29] audit: type=1400 audit(1785852598.265:269): avc: denied { bind } for pid=5934 comm="syz.2.40" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 100.870057][ T5707] usb 5-1: usb_control_msg returned -32 [ 100.905452][ T5707] usbtmc 5-1:16.0: can't read capabilities [ 100.908358][ T29] audit: type=1400 audit(1785852598.265:270): avc: denied { name_bind } for pid=5934 comm="syz.2.40" src=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=icmp_socket permissive=1 [ 101.107040][ T5729] usb 5-1: USB disconnect, device number 3 [ 102.833057][ T9] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 103.037826][ T9] usb 1-1: config 2 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 108, changing to 10 [ 103.182309][ T9] usb 1-1: config 2 interface 0 altsetting 0 endpoint 0x83 has invalid maxpacket 25697, setting to 1024 [ 103.225066][ T9] usb 1-1: config 2 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 108, changing to 10 [ 103.251672][ T9] usb 1-1: config 2 interface 0 altsetting 0 endpoint 0x83 has invalid maxpacket 25697, setting to 1024 [ 103.326089][ T9] usb 1-1: New USB device found, idVendor=0451, idProduct=505f, bcdDevice= 1.00 [ 103.362689][ T9] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 103.533814][ T9] usb 1-1: Product: syz [ 103.538557][ T9] usb 1-1: Manufacturer: syz [ 103.543574][ T9] usb 1-1: SerialNumber: syz [ 103.556966][ T5963] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 103.586855][ T9] ti_usb_3410_5052 1-1:2.0: TI USB 5052 2 port adapter converter detected [ 104.070854][ T9] usb 1-1: TI USB 5052 2 port adapter converter now attached to ttyUSB0 [ 104.121859][ T9] usb 1-1: TI USB 5052 2 port adapter converter now attached to ttyUSB1 [ 105.392592][ T0] NOHZ tick-stop error: local softirq work is pending, handler #42!!! [ 105.514001][ T9] usb 1-1: USB disconnect, device number 3 [ 105.571464][ T9] ti_usb_3410_5052_2 ttyUSB0: TI USB 5052 2 port adapter converter now disconnected from ttyUSB0 [ 105.602417][ T5803] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 105.610726][ T29] kauditd_printk_skb: 22 callbacks suppressed [ 105.610741][ T29] audit: type=1400 audit(1785852603.615:293): avc: denied { execute } for pid=6002 comm="syz.2.61" path="/18/file1" dev="tmpfs" ino=125 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 105.640229][ T9] ti_usb_3410_5052_2 ttyUSB1: TI USB 5052 2 port adapter converter now disconnected from ttyUSB1 [ 105.694479][ T9] ti_usb_3410_5052 1-1:2.0: device disconnected [ 105.703332][ T29] audit: type=1400 audit(1785852603.675:294): avc: denied { write } for pid=6004 comm="syz.0.63" name="instances" dev="tracefs" ino=3302 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=dir permissive=1 [ 105.762925][ T5803] usb 2-1: Using ep0 maxpacket: 8 [ 105.770859][ T5803] usb 2-1: config index 0 descriptor too short (expected 301, got 45) [ 105.783801][ T5803] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 105.833145][ T5803] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 105.898140][ T5803] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 105.963997][ T5803] usb 2-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 105.986330][ T29] audit: type=1400 audit(1785852603.675:295): avc: denied { add_name } for pid=6004 comm="syz.0.63" name="inst1" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=dir permissive=1 [ 106.008054][ T29] audit: type=1400 audit(1785852603.675:296): avc: denied { create } for pid=6004 comm="syz.0.63" name="inst1" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:tracefs_t tclass=dir permissive=1 [ 106.028275][ T29] audit: type=1400 audit(1785852603.735:297): avc: denied { relabelfrom } for pid=6007 comm="syz.3.49" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tun_socket permissive=1 [ 106.048045][ T29] audit: type=1400 audit(1785852603.735:298): avc: denied { relabelto } for pid=6007 comm="syz.3.49" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tun_socket permissive=1 [ 106.062429][ T5803] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 106.067606][ T29] audit: type=1400 audit(1785852603.745:299): avc: denied { read write } for pid=6004 comm="syz.0.63" name="vhost-vsock" dev="devtmpfs" ino=1274 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 106.140865][ T5803] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 107.298100][ T29] audit: type=1400 audit(1785852603.745:300): avc: denied { open } for pid=6004 comm="syz.0.63" path="/dev/vhost-vsock" dev="devtmpfs" ino=1274 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 107.439263][ T29] audit: type=1400 audit(1785852603.885:301): avc: denied { setopt } for pid=6004 comm="syz.0.63" lport=58 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 107.534471][ T5803] usb 2-1: usb_control_msg returned -71 [ 107.588481][ T5803] usbtmc 2-1:16.0: can't read capabilities [ 107.634352][ T29] audit: type=1400 audit(1785852603.885:302): avc: denied { setopt } for pid=6004 comm="syz.0.63" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 107.736532][ T5803] usb 2-1: USB disconnect, device number 2 [ 109.590169][ T6036] netlink: 12 bytes leftover after parsing attributes in process `syz.4.62'. [ 109.629293][ T6036] mac80211_hwsim hwsim11 wlan1: entered promiscuous mode [ 109.672359][ T5707] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 109.812519][ T5729] usb 3-1: new full-speed USB device number 2 using dummy_hcd [ 109.834062][ T5707] usb 1-1: Using ep0 maxpacket: 32 [ 109.848288][ T5707] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 109.878482][ T5707] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 109.917335][ T5707] usb 1-1: New USB device found, idVendor=1e7d, idProduct=2d5a, bcdDevice= 0.00 [ 109.934926][ T5707] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 109.958241][ T5707] usb 1-1: config 0 descriptor?? [ 109.995520][ T5729] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 110.031280][ T5729] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 110.045790][ T5729] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 110.076830][ T5729] usb 3-1: New USB device found, idVendor=093a, idProduct=8002, bcdDevice= 0.00 [ 110.093921][ T5729] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 110.118886][ T5729] usb 3-1: config 0 descriptor?? [ 110.512347][ T0] NOHZ tick-stop error: local softirq work is pending, handler #1c0!!! [ 110.552237][ T0] NOHZ tick-stop error: local softirq work is pending, handler #82!!! [ 110.572234][ T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!! [ 110.622243][ T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!! [ 110.682232][ T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!! [ 110.722239][ T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!! [ 111.332236][ T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!! [ 111.512226][ T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!! [ 111.614240][ T29] kauditd_printk_skb: 16 callbacks suppressed [ 111.614256][ T29] audit: type=1400 audit(1785852608.795:319): avc: denied { read } for pid=6055 comm="syz.4.79" name="loop-control" dev="devtmpfs" ino=646 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 111.751478][ T5707] savu 0003:1E7D:2D5A.0001: hiddev0,hidraw0: USB HID v0.00 Device [HID 1e7d:2d5a] on usb-dummy_hcd.0-1/input0 [ 111.770872][ T29] audit: type=1400 audit(1785852608.795:320): avc: denied { open } for pid=6055 comm="syz.4.79" path="/dev/loop-control" dev="devtmpfs" ino=646 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 111.810867][ T29] audit: type=1400 audit(1785852608.795:321): avc: denied { ioctl } for pid=6055 comm="syz.4.79" path="/dev/loop-control" dev="devtmpfs" ino=646 ioctlcmd=0x4c80 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 111.862919][ T5722] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 111.926817][ T5729] hid-generic 0003:093A:8002.0002: hidraw1: USB HID v0.00 Joystick [HID 093a:8002] on usb-dummy_hcd.2-1/input0 [ 112.015608][ T9] usb 1-1: USB disconnect, device number 4 [ 112.022443][ T5722] usb 2-1: Using ep0 maxpacket: 8 [ 112.029460][ T5722] usb 2-1: config index 0 descriptor too short (expected 301, got 45) [ 112.063582][ T5722] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 112.096147][ T5722] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 112.138428][ T5722] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 112.172454][ T5722] usb 2-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 112.187416][ T29] audit: type=1400 audit(1785852610.175:322): avc: denied { unlink } for pid=6070 comm="syz.3.83" name="#1" dev="tmpfs" ino=122 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 112.217023][ T5722] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 112.217591][ T5706] usb 3-1: USB disconnect, device number 2 [ 112.226422][ T5722] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 112.240388][ T29] audit: type=1400 audit(1785852610.225:323): avc: denied { mount } for pid=6070 comm="syz.3.83" name="/" dev="overlay" ino=116 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 112.281897][ T29] audit: type=1400 audit(1785852610.285:324): avc: denied { unmount } for pid=5606 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 112.327937][ T29] audit: type=1400 audit(1785852610.315:325): avc: denied { unmount } for pid=5606 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 112.378883][ T5608] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci0/hci0:201' [ 112.389783][ T5608] CPU: 0 UID: 0 PID: 5608 Comm: kworker/u9:2 Not tainted syzkaller #0 PREEMPT(full) [ 112.389815][ T5608] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 112.389833][ T5608] Workqueue: hci0 hci_rx_work [ 112.389866][ T5608] Call Trace: [ 112.389874][ T5608] [ 112.389889][ T5608] dump_stack_lvl+0x100/0x190 [ 112.389919][ T5608] sysfs_warn_dup.cold+0x1c/0x28 [ 112.389947][ T5608] sysfs_create_dir_ns+0x24b/0x2b0 [ 112.389969][ T5608] ? __pfx_sysfs_create_dir_ns+0x10/0x10 [ 112.389987][ T5608] ? find_held_lock+0x2b/0x80 [ 112.390005][ T5608] ? kobject_add_internal+0x25f/0x930 [ 112.390036][ T5608] ? kobject_add_internal+0x25f/0x930 [ 112.390071][ T5608] ? do_raw_spin_unlock+0x145/0x1e0 [ 112.390100][ T5608] kobject_add_internal+0x2c8/0x930 [ 112.390133][ T5608] kobject_add+0x16a/0x1e0 [ 112.390161][ T5608] ? __pfx_kobject_add+0x10/0x10 [ 112.390191][ T5608] ? class_to_subsys+0x10f/0x150 [ 112.390225][ T5608] ? kobject_put+0xb9/0x640 [ 112.390250][ T5608] ? _raw_spin_unlock+0x28/0x50 [ 112.390276][ T5608] device_add+0x294/0x1970 [ 112.390303][ T5608] ? __pfx_dev_set_name+0x10/0x10 [ 112.390325][ T5608] ? __pfx_device_add+0x10/0x10 [ 112.390353][ T5608] ? mgmt_send_event_skb+0x2fb/0x460 [ 112.390382][ T5608] hci_conn_add_sysfs+0x1a3/0x260 [ 112.390409][ T5608] le_conn_complete_evt+0x11eb/0x1f60 [ 112.390439][ T5608] ? __pfx_le_conn_complete_evt+0x10/0x10 [ 112.390463][ T5608] ? hci_event_packet+0x186/0xcd0 [ 112.390490][ T5608] hci_le_conn_complete_evt+0x23c/0x3a0 [ 112.390514][ T5608] ? skb_pull_data+0x15f/0x1e0 [ 112.390546][ T5608] hci_le_meta_evt+0x34a/0x5f0 [ 112.390570][ T5608] ? __pfx_hci_le_conn_complete_evt+0x10/0x10 [ 112.390598][ T5608] hci_event_packet+0x51c/0xcd0 [ 112.390621][ T5608] ? __pfx_hci_le_meta_evt+0x10/0x10 [ 112.390645][ T5608] ? __pfx_hci_event_packet+0x10/0x10 [ 112.390670][ T5608] ? kcov_remote_start+0x384/0x670 [ 112.390692][ T5608] ? lockdep_hardirqs_on+0x78/0x100 [ 112.390721][ T5608] hci_rx_work+0x451/0xfc0 [ 112.390750][ T5608] process_one_work+0xa23/0x1940 [ 112.390782][ T5608] ? __pfx_process_one_work+0x10/0x10 [ 112.390810][ T5608] ? __pfx_hci_rx_work+0x10/0x10 [ 112.390833][ T5608] worker_thread+0x5ef/0xe50 [ 112.390861][ T5608] ? __pfx_worker_thread+0x10/0x10 [ 112.390891][ T5608] ? kthread+0x13a/0x450 [ 112.390910][ T5608] ? __pfx_worker_thread+0x10/0x10 [ 112.390930][ T5608] kthread+0x370/0x450 [ 112.390950][ T5608] ? __pfx_kthread+0x10/0x10 [ 112.390971][ T5608] ret_from_fork+0x72b/0xd50 [ 112.391002][ T5608] ? __pfx_ret_from_fork+0x10/0x10 [ 112.391030][ T5608] ? __switch_to+0x800/0x10f0 [ 112.391050][ T5608] ? __pfx_kthread+0x10/0x10 [ 112.391070][ T5608] ret_from_fork_asm+0x1a/0x30 [ 112.391110][ T5608] [ 112.391669][ T5608] kobject: kobject_add_internal failed for hci0:201 with -EEXIST, don't try to register things with the same name in the same directory. [ 112.510249][ T5722] usb 2-1: usb_control_msg returned -32 [ 112.513955][ T5608] Bluetooth: hci0: failed to register connection device [ 112.518995][ T5722] usbtmc 2-1:16.0: can't read capabilities [ 112.729043][ T5729] usb 2-1: USB disconnect, device number 3 [ 113.900179][ T29] audit: type=1400 audit(1785852611.325:326): avc: denied { create } for pid=6078 comm="syz.4.80" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 114.013630][ T29] audit: type=1400 audit(1785852611.345:327): avc: denied { write } for pid=6078 comm="syz.4.80" name="file0" dev="tmpfs" ino=114 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 114.046355][ T29] audit: type=1400 audit(1785852611.345:328): avc: denied { open } for pid=6078 comm="syz.4.80" path="/17/file0" dev="tmpfs" ino=114 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 115.598149][ T6099] netlink: 'syz.3.92': attribute type 11 has an invalid length. [ 117.228328][ T29] kauditd_printk_skb: 7 callbacks suppressed [ 117.228343][ T29] audit: type=1400 audit(1785852615.235:336): avc: denied { unmount } for pid=5616 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=filesystem permissive=1 [ 120.425109][ T29] audit: type=1400 audit(1785852618.435:337): avc: denied { mount } for pid=6134 comm="syz.1.102" name="/" dev="nfsd" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfsd_fs_t tclass=filesystem permissive=1 [ 120.530164][ T29] audit: type=1400 audit(1785852618.525:338): avc: denied { unmount } for pid=5616 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfsd_fs_t tclass=filesystem permissive=1 [ 120.612666][ T29] audit: type=1400 audit(1785852618.535:339): avc: denied { read write } for pid=5616 comm="syz-executor" name="loop1" dev="devtmpfs" ino=648 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 120.709594][ T29] audit: type=1400 audit(1785852618.535:340): avc: denied { open } for pid=5616 comm="syz-executor" path="/dev/loop1" dev="devtmpfs" ino=648 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 120.710973][ T6145] oom_control is deprecated and will be removed. Please report your usecase to linux-mm-@kvack.org if you depend on this functionality. [ 120.792317][ T29] audit: type=1400 audit(1785852618.535:341): avc: denied { ioctl } for pid=5616 comm="syz-executor" path="/dev/loop1" dev="devtmpfs" ino=648 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 120.861664][ T29] audit: type=1400 audit(1785852618.535:342): avc: denied { search } for pid=6140 comm="syz.0.105" name="/" dev="nfsd" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfsd_fs_t tclass=dir permissive=1 [ 120.915269][ T29] audit: type=1400 audit(1785852618.535:343): avc: denied { read write } for pid=6140 comm="syz.0.105" name="versions" dev="nfsd" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfsd_fs_t tclass=file permissive=1 [ 120.975488][ T29] audit: type=1400 audit(1785852618.535:344): avc: denied { open } for pid=6140 comm="syz.0.105" path="/14/nfsd/versions" dev="nfsd" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfsd_fs_t tclass=file permissive=1 [ 121.012488][ T6147] EXT4-fs (loop6): unable to read superblock [ 121.033228][ T29] audit: type=1400 audit(1785852618.535:345): avc: denied { search } for pid=6140 comm="syz.0.105" name="/" dev="nfsd" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfsd_fs_t tclass=dir permissive=1 [ 121.411301][ T6156] netlink: 108 bytes leftover after parsing attributes in process `syz.2.100'. [ 121.829581][ T6167] netlink: 8 bytes leftover after parsing attributes in process `syz.2.112'. [ 121.892362][ T6142] NFSD: Unable to initialize client recovery tracking! (-110) [ 121.902268][ T6142] NFSD: Is nfsdcld running? If not, enable CONFIG_NFSD_LEGACY_CLIENT_TRACKING. [ 121.911899][ T6142] NFSD: starting 90-second grace period (net f0000471) [ 122.680861][ T29] kauditd_printk_skb: 3 callbacks suppressed [ 122.680878][ T29] audit: type=1400 audit(1785852620.685:349): avc: denied { bind } for pid=6176 comm="syz.3.115" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 122.726747][ T29] audit: type=1400 audit(1785852620.715:350): avc: denied { listen } for pid=6176 comm="syz.3.115" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 122.753137][ T29] audit: type=1400 audit(1785852620.735:351): avc: denied { accept } for pid=6176 comm="syz.3.115" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 122.832798][ T29] audit: type=1400 audit(1785852620.845:352): avc: denied { unmount } for pid=5615 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfs_t tclass=filesystem permissive=1 [ 122.959644][ T29] audit: type=1400 audit(1785852620.965:353): avc: denied { mount } for pid=6184 comm="syz.4.118" name="/" dev="sysfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=filesystem permissive=1 [ 123.082105][ T29] audit: type=1400 audit(1785852621.085:354): avc: denied { unmount } for pid=5615 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=filesystem permissive=1 [ 123.222352][ T5707] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 123.318059][ T29] audit: type=1400 audit(1785852621.315:355): avc: denied { create } for pid=6189 comm="syz.1.120" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 123.491393][ T5707] usb 3-1: New USB device found, idVendor=1164, idProduct=0622, bcdDevice= 0.00 [ 123.522484][ T29] audit: type=1400 audit(1785852621.355:356): avc: denied { read } for pid=6189 comm="syz.1.120" name="card0" dev="devtmpfs" ino=627 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 123.604146][ T5707] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 123.835314][ T29] audit: type=1400 audit(1785852621.355:357): avc: denied { open } for pid=6189 comm="syz.1.120" path="/dev/dri/card0" dev="devtmpfs" ino=627 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 124.121702][ T29] audit: type=1400 audit(1785852622.035:358): avc: denied { write } for pid=6197 comm="syz.3.122" laddr=172.20.20.170 lport=20001 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 124.148762][ T6198] vlan2: entered promiscuous mode [ 124.157646][ T6204] netlink: 8 bytes leftover after parsing attributes in process `syz.4.123'. [ 124.167853][ T5707] pvrusb2: Hardware description: Gotview USB 2.0 DVD 2 [ 124.199458][ T6198] bond_slave_1: entered promiscuous mode [ 125.303971][ T5707] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 125.568216][ T6234] futex_wake_op: syz.3.131 tries to shift op by 144; fix this program [ 126.342179][ T5707] usb 2-1: New USB device found, idVendor=0644, idProduct=8047, bcdDevice= 1.00 [ 126.358524][ T2363] pvrusb2: control-write URB failure, status=-71 [ 126.365886][ T2363] pvrusb2: Device being rendered inoperable [ 126.373960][ T5707] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 126.374770][ T2363] pvrusb2: ***WARNING*** pvrusb2 device hardware appears to be jammed and I can't clear it. [ 126.396234][ T2363] pvrusb2: You might need to power cycle the pvrusb2 device in order to recover. [ 126.422845][ T9] usb 5-1: new full-speed USB device number 4 using dummy_hcd [ 126.426986][ T5707] usb 2-1: Product: syz [ 126.440808][ T5729] usb 3-1: USB disconnect, device number 3 [ 126.467971][ T5707] usb 2-1: Manufacturer: syz [ 126.491373][ T5707] usb 2-1: SerialNumber: syz [ 126.595294][ T9] usb 5-1: not running at top speed; connect to a high speed hub [ 126.616711][ T9] usb 5-1: New USB device found, idVendor=046d, idProduct=0892, bcdDevice= 1.00 [ 126.629214][ T9] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 126.663323][ T5707] usb 2-1: cannot find UAC_HEADER [ 126.677890][ T5707] snd-usb-audio 2-1:1.1: probe with driver snd-usb-audio failed with error -22 [ 126.705482][ T5707] usb 2-1: cannot find UAC_HEADER [ 126.715884][ T9] gspca_main: vc032x-2.14.0 probing 046d:0892 [ 126.723837][ T5707] snd-usb-audio 2-1:1.2: probe with driver snd-usb-audio failed with error -22 [ 126.806359][ T5707] usb 2-1: cannot find UAC_HEADER [ 127.779165][ T5707] snd-usb-audio 2-1:1.3: probe with driver snd-usb-audio failed with error -22 [ 128.093248][ T5801] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 128.163092][ T5707] usb 2-1: USB disconnect, device number 4 [ 128.292619][ T6256] netlink: 8 bytes leftover after parsing attributes in process `syz.3.135'. [ 128.308074][ T5801] usb 3-1: New USB device found, idVendor=0ccd, idProduct=0039, bcdDevice= 1.01 [ 128.319184][ T5801] usb 3-1: New USB device strings: Mfr=2, Product=3, SerialNumber=1 [ 128.334442][ T5801] usb 3-1: Product: syz [ 128.338924][ T5801] usb 3-1: Manufacturer: syz [ 128.350075][ T5801] usb 3-1: SerialNumber: syz [ 128.424574][ T5801] pvrusb2: Hardware description: Terratec Grabster AV400 [ 128.451045][ T5801] pvrusb2: ********** [ 128.481652][ T5801] pvrusb2: ***WARNING*** Support for this device (Terratec Grabster AV400) is experimental. [ 128.512793][ T5801] pvrusb2: Important functionality might not be entirely working. [ 129.524698][ T5801] pvrusb2: Please consider contacting the driver author to help with further stabilization of the driver. [ 129.555071][ T5803] usb 5-1: USB disconnect, device number 4 [ 129.566360][ T5801] pvrusb2: ********** [ 129.719706][ T6268] syz.4.143 uses obsolete (PF_INET,SOCK_PACKET) [ 131.391506][ T2363] pvrusb2: Failed to submit write-control URB status=-2 [ 131.406876][ T5801] usb 3-1: USB disconnect, device number 4 [ 131.412900][ T2363] pvrusb2: Device being rendered inoperable [ 131.431847][ T2363] pvrusb2: ***WARNING*** pvrusb2 device hardware appears to be jammed and I can't clear it. [ 131.487308][ T2363] pvrusb2: You might need to power cycle the pvrusb2 device in order to recover. [ 132.586847][ T1311] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.596699][ T1311] ieee802154 phy1 wpan1: encryption failed: -22 [ 133.903807][ T29] kauditd_printk_skb: 7 callbacks suppressed [ 133.903824][ T29] audit: type=1400 audit(1785852631.405:366): avc: denied { read write } for pid=6284 comm="syz.4.150" name="mtrr" dev="proc" ino=4026531995 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:mtrr_device_t tclass=file permissive=1 [ 134.072428][ T29] audit: type=1400 audit(1785852631.405:367): avc: denied { open } for pid=6284 comm="syz.4.150" path="/31/proc/mtrr" dev="proc" ino=4026531995 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:mtrr_device_t tclass=file permissive=1 [ 134.149308][ T29] audit: type=1400 audit(1785852631.425:368): avc: denied { ioctl } for pid=6284 comm="syz.4.150" path="/31/proc/mtrr" dev="proc" ino=4026531995 ioctlcmd=0x4d05 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:mtrr_device_t tclass=file permissive=1 [ 134.285948][ T5706] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 134.443557][ T5706] usb 4-1: New USB device found, idVendor=1286, idProduct=2046, bcdDevice= 1.00 [ 134.457527][ T5706] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 134.489879][ T5706] usb 4-1: NFC: intf ffff88807a8a8000 id ffffffff8fc68da0 [ 134.583727][ T5706] nfcmrvl 4-1:1.0: NFC: registered with nci successfully [ 135.695757][ T5706] usb 4-1: USB disconnect, device number 3 [ 135.706208][ T5706] usb 4-1: NFC: intf ffff88807a8a8000 [ 135.985387][ T6301] PM: suspend entry (deep) [ 138.149303][ T12] Filesystems sync: 2.150 seconds [ 138.208740][ T5801] lpc_ich 0000:00:00.0: I/O space for ACPI uninitialized [ 138.228668][ T6301] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 138.234924][ T5801] lpc_ich 0000:00:00.0: I/O space for ACPI uninitialized [ 138.234978][ T5801] lpc_ich 0000:00:00.0: I/O space for GPIO uninitialized [ 138.234991][ T5801] lpc_ich 0000:00:00.0: No MFD cells added [ 138.275448][ T5801] lpc_ich 0000:00:01.0: I/O space for ACPI uninitialized [ 138.293951][ T5801] lpc_ich 0000:00:01.0: I/O space for ACPI uninitialized [ 138.308466][ T6301] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 138.309483][ T5801] lpc_ich 0000:00:01.0: I/O space for GPIO uninitialized [ 138.337068][ T5801] lpc_ich 0000:00:01.0: No MFD cells added [ 138.360021][ T5801] lpc_ich 0000:00:01.3: RCBA is disabled by hardware/BIOS, device disabled [ 138.380326][ T5801] lpc_ich 0000:00:01.3: I/O space for GPIO uninitialized [ 138.387689][ T5801] lpc_ich 0000:00:01.3: No MFD cells added [ 138.396427][ T5801] lpc_ich 0000:00:05.0: I/O space for ACPI uninitialized [ 138.403991][ T5801] lpc_ich 0000:00:05.0: I/O space for ACPI uninitialized [ 138.408190][ T6301] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 138.411116][ T5801] lpc_ich 0000:00:05.0: I/O space for GPIO uninitialized [ 138.411130][ T5801] lpc_ich 0000:00:05.0: No MFD cells added [ 138.497338][ T6301] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 138.527295][ T6301] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 138.608211][ T29] audit: type=1400 audit(1785852636.615:369): avc: denied { shutdown } for pid=6312 comm="syz.2.157" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 138.819086][ T6301] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 138.861951][ T6315] CIFS: Attempting to mount //127.0.0.1/share [ 139.356454][ T6301] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 139.436811][ T6315] CIFS: VFS: Error connecting to socket. Aborting operation. [ 139.464000][ T6315] CIFS: VFS: cifs_mount failed w/return code = -4 [ 139.520532][ T6301] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 139.539851][ T29] audit: type=1400 audit(1785852637.545:370): avc: denied { create } for pid=6318 comm="syz.1.147" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 139.543066][ T6319] netlink: 4064 bytes leftover after parsing attributes in process `syz.1.147'. [ 139.572865][ T6301] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 139.608297][ T6301] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 139.648606][ T6301] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 140.581820][ T5608] Bluetooth: hci1: command 0x0c1a tx timeout [ 140.584625][ T5619] Bluetooth: hci0: command 0x0c1a tx timeout [ 140.593021][ T6301] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 141.649273][ T5619] Bluetooth: hci2: command 0x0c1a tx timeout [ 141.678937][ T6301] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 141.709693][ T5619] Bluetooth: hci4: command 0x0c1a tx timeout [ 141.727991][ T6301] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 141.792491][ T6301] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 141.844420][ T6301] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 141.889578][ T6301] Freezing user space processes [ 142.262515][ T6301] Freezing user space processes completed (elapsed 0.344 seconds) [ 142.271403][ T6301] OOM killer disabled. [ 142.275716][ T6301] Freezing remaining freezable tasks [ 142.283830][ T6301] Freezing remaining freezable tasks completed (elapsed 0.002 seconds) [ 142.293230][ T6301] printk: Suspending console(s) (use no_console_suspend to debug) [ 142.465701][ T6301] vhci_hcd vhci_hcd.14: suspend vhci_hcd [ 142.465753][ T6301] vhci_hcd vhci_hcd.13: suspend vhci_hcd [ 142.465797][ T6301] vhci_hcd vhci_hcd.12: suspend vhci_hcd [ 142.465840][ T6301] vhci_hcd vhci_hcd.11: suspend vhci_hcd [ 142.465882][ T6301] vhci_hcd vhci_hcd.10: suspend vhci_hcd [ 142.465935][ T6301] vhci_hcd vhci_hcd.9: suspend vhci_hcd [ 142.465978][ T6301] vhci_hcd vhci_hcd.8: suspend vhci_hcd [ 142.466019][ T6301] vhci_hcd vhci_hcd.7: suspend vhci_hcd [ 142.466062][ T6301] vhci_hcd vhci_hcd.6: suspend vhci_hcd [ 142.466104][ T6301] vhci_hcd vhci_hcd.5: suspend vhci_hcd [ 142.466146][ T6301] vhci_hcd vhci_hcd.4: suspend vhci_hcd [ 142.466189][ T6301] vhci_hcd vhci_hcd.3: suspend vhci_hcd [ 142.466236][ T6301] vhci_hcd vhci_hcd.2: suspend vhci_hcd [ 142.466278][ T6301] vhci_hcd vhci_hcd.1: suspend vhci_hcd [ 142.466320][ T6301] vhci_hcd vhci_hcd.0: suspend vhci_hcd [ 142.484112][ T12] sd 0:0:1:0: [sda] Synchronizing SCSI cache [ 142.663587][ T5619] Bluetooth: hci1: command 0x0c1a tx timeout [ 142.663593][ T5608] Bluetooth: hci0: command 0x0c1a tx timeout [ 142.884809][ T6301] ACPI: PM: Preparing to enter system sleep state S3 [ 142.886731][ T6301] ACPI: PM: Saving platform NVS memory [ 142.893578][ T6301] Disabling non-boot CPUs ... [ 142.920931][ T6301] smpboot: CPU 1 is now offline [ 142.949741][ T6301] ACPI: PM: Low-level resume complete [ 142.949786][ T6301] ACPI: PM: Restoring platform NVS memory [ 142.991752][ T6301] Enabling non-boot CPUs ... [ 142.994122][ T6301] smpboot: Booting Node 0 Processor 1 APIC 0x1 [ 143.016562][ T6301] CPU1 is up [ 143.018058][ T6301] ACPI: PM: Waking up from system sleep state S3 [ 143.163064][ T13] virtio_scsi virtio0: 1/0/0 default/read/poll queues [ 143.443951][ T6301] OOM killer enabled. [ 143.444514][ T6301] Restarting tasks: Starting [ 143.470662][ T6301] Restarting tasks: Done [ 143.471880][ T6301] random: crng reseeded on system resumption [ 143.488177][ T6301] PM: suspend exit [ 143.511953][ T6398] comedi comedi0: comedi_test: 320 microvolt, 9 microsecond waveform attached [ 143.710482][ T5800] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 143.720484][ T5619] Bluetooth: hci2: command 0x0c1a tx timeout [ 143.801265][ T5619] Bluetooth: hci3: command 0x0c1a tx timeout [ 143.802200][ T5619] Bluetooth: hci4: command 0x0c1a tx timeout [ 143.945945][ T5803] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 144.202546][ T5800] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 144.204019][ T5800] usb 1-1: config 1 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 0 [ 144.439466][ T5800] usb 1-1: New USB device found, idVendor=0471, idProduct=081e, bcdDevice= 1.00 [ 144.518083][ T29] audit: type=1400 audit(1785852642.486:371): avc: denied { write } for pid=6411 comm="syz.4.167" name="subsystems" dev="configfs" ino=2851 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 144.611553][ T29] audit: type=1400 audit(1785852642.636:372): avc: denied { write } for pid=6411 comm="syz.4.167" name="namespaces" dev="configfs" ino=10200 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 144.676952][ T6413] nvmet: adding nsid 1 to subsystem testnqn [ 144.781444][ T29] audit: type=1400 audit(1785852642.796:373): avc: denied { write } for pid=6411 comm="syz.4.167" name="ports" dev="configfs" ino=2852 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 144.806530][ T5608] Bluetooth: hci0: command 0x0c1a tx timeout [ 144.809313][ T5608] Bluetooth: hci1: command 0x0c1a tx timeout [ 145.070707][ T5803] usb 4-1: New USB device found, idVendor=17cc, idProduct=1969, bcdDevice= 1.00 [ 145.072020][ T5803] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 145.227864][ T5800] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 145.632396][ T5803] usb 4-1: Product: syz [ 145.633091][ T5803] usb 4-1: Manufacturer: syz [ 145.633770][ T5803] usb 4-1: SerialNumber: syz [ 145.649121][ T6342] nvmet: connect request for invalid subsystem testnqn! [ 145.666496][ T6413] nvme nvme0: Connect Invalid Data Parameter, subsysnqn "testnqn" [ 145.926129][ T5619] Bluetooth: hci2: command 0x0c1a tx timeout [ 145.927187][ T5619] Bluetooth: hci4: command 0x0c1a tx timeout [ 145.928131][ T5619] Bluetooth: hci3: command 0x0c1a tx timeout [ 146.840336][ T5608] Bluetooth: hci0: command 0x0c1a tx timeout [ 146.997825][ T5803] usb 4-1: can't set config #1, error -71 [ 147.095753][ T5803] usb 4-1: USB disconnect, device number 4 [ 147.124820][ T6420] netlink: 4064 bytes leftover after parsing attributes in process `syz.1.169'. [ 147.188172][ T5800] usb 1-1: can't set config #1, error -71 [ 148.120195][ T5608] Bluetooth: hci3: command 0x0c1a tx timeout [ 148.216525][ T5800] usb 1-1: USB disconnect, device number 5 [ 148.484757][ T6431] netlink: 48 bytes leftover after parsing attributes in process `syz.0.175'. [ 148.494323][ T6431] netlink: 48 bytes leftover after parsing attributes in process `syz.0.175'. [ 148.839140][ T29] audit: type=1400 audit(1785852646.876:374): avc: denied { connect } for pid=6437 comm="syz.3.178" lport=1 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 149.873897][ T29] audit: type=1400 audit(1785852647.906:375): avc: denied { write } for pid=6443 comm="syz.0.180" name="nullb" dev="configfs" ino=726 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 149.930529][ T5722] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 150.052493][ T29] audit: type=1400 audit(1785852648.086:376): avc: denied { mount } for pid=6443 comm="syz.0.180" name="/" dev="devtmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=filesystem permissive=1 [ 150.065878][ T29] audit: type=1400 audit(1785852648.116:377): avc: denied { read write } for pid=6443 comm="syz.0.180" name="control" dev="devtmpfs" ino=1268 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:lvm_control_t tclass=chr_file permissive=1 [ 150.073260][ T29] audit: type=1400 audit(1785852648.126:378): avc: denied { open } for pid=6443 comm="syz.0.180" path="/30/dev/mapper/control" dev="devtmpfs" ino=1268 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:lvm_control_t tclass=chr_file permissive=1 [ 150.081904][ T29] audit: type=1400 audit(1785852648.126:379): avc: denied { ioctl } for pid=6443 comm="syz.0.180" path="/30/dev/mapper/control" dev="devtmpfs" ino=1268 ioctlcmd=0xfd03 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:lvm_control_t tclass=chr_file permissive=1 [ 150.103834][ T6444] device-mapper: table: 248:0: zero-length target [ 150.105416][ T6444] device-mapper: ioctl: error adding target to table [ 150.125970][ T5722] usb 4-1: New USB device found, idVendor=17cc, idProduct=1969, bcdDevice= 1.00 [ 150.127273][ T5722] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 150.128390][ T5722] usb 4-1: Product: syz [ 150.128962][ T5722] usb 4-1: Manufacturer: syz [ 150.129619][ T5722] usb 4-1: SerialNumber: syz [ 150.187893][ T29] audit: type=1400 audit(1785852648.236:380): avc: denied { unmount } for pid=5620 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=filesystem permissive=1 [ 150.682280][ T5722] snd-usb-caiaq 4-1:1.0: can't set alt interface. [ 150.691213][ T5722] usb 4-1: unable to init card! (ret=-5) [ 150.701376][ T29] audit: type=1400 audit(1785852648.716:381): avc: denied { setopt } for pid=6451 comm="syz.0.183" lport=58 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 150.732817][ T5722] snd-usb-caiaq 4-1:1.0: probe with driver snd-usb-caiaq failed with error -5 [ 150.787972][ T29] audit: type=1400 audit(1785852648.826:382): avc: denied { mounton } for pid=6449 comm="syz.4.182" path="/37/file0" dev="tmpfs" ino=227 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 150.794344][ T6453] 9p: Bad value for 'wfdno' [ 150.842557][ T5722] usb 4-1: USB disconnect, device number 5 [ 150.856185][ T29] audit: type=1400 audit(1785852648.906:383): avc: denied { mount } for pid=6451 comm="syz.0.183" name="/" dev="securityfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=filesystem permissive=1 [ 151.719712][ T29] audit: type=1400 audit(1785852649.766:384): avc: denied { unmount } for pid=5620 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=filesystem permissive=1 [ 151.767337][ T6469] smbdirect: ib_dev[syz0]: added: RNIC max_fast_reg_page_list_len=256 device_cap_flags=0x200000 kernel_cap_flags=0x10 page_size_cap=0x1000 [ 151.769941][ T6469] smbdirect: ib_dev[syz0]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=1 max_cqe=3276800 max_qp_wr=32768 max_send_sge=6 max_recv_sge=6 [ 151.783109][ T6469] smbdirect: ib_dev[syz0]PORT[1]: iwarp=1 ib=0 roce=0 v1=0 v2=0 core_cap_flags=0x400008 [ 151.849929][ T6469] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 151.854394][ T5619] Bluetooth: hci5: unexpected cc 0x0c03 length: 112 > 1 [ 151.875566][ T6469] infiniband syz0: RDMA CMA: cma_listen_on_dev, error -98 [ 152.073754][ T6479] rdma_rxe: rxe_newlink: failed to add lo [ 152.419862][ T6489] binder: BC_ATTEMPT_ACQUIRE not supported [ 152.420997][ T6489] binder: 6487:6489 ioctl c0306201 2000000001c0 returned -22 [ 152.446482][ T5800] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 152.450969][ T5706] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 152.580291][ T5800] usb 4-1: device descriptor read/64, error -71 [ 152.640796][ T5706] usb 1-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 152.642919][ T5706] usb 1-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 152.644942][ T5706] usb 1-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 152.646698][ T5706] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 152.787894][ T6482] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 152.802195][ T5706] usb 1-1: Quirk or no altset; falling back to MIDI 1.0 [ 152.840222][ T5800] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 153.110365][ T5800] usb 4-1: device descriptor read/64, error -71 [ 153.880465][ T5608] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 154.056037][ T5800] usb usb4-port1: attempt power cycle [ 154.501937][ T5800] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 154.532746][ T5800] usb 4-1: device descriptor read/8, error -71 [ 154.811352][ T5800] usb 4-1: new high-speed USB device number 9 using dummy_hcd [ 154.868112][ T5800] usb 4-1: device descriptor read/8, error -71 [ 154.991318][ T5800] usb usb4-port1: unable to enumerate USB device [ 157.048963][ T6504] 9p: Bad value for 'wfdno' [ 157.076863][ T5707] usb 1-1: USB disconnect, device number 6 [ 157.113368][ T29] kauditd_printk_skb: 10 callbacks suppressed [ 157.113385][ T29] audit: type=1400 audit(1785852655.166:395): avc: denied { search } for pid=6508 comm="syz.4.197" name="/" dev="configfs" ino=1114 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 157.117416][ T29] audit: type=1400 audit(1785852655.166:396): avc: denied { search } for pid=6508 comm="syz.4.197" name="usb_gadget" dev="configfs" ino=3066 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 157.125298][ T29] audit: type=1400 audit(1785852655.166:397): avc: denied { search } for pid=6508 comm="syz.4.197" name="/" dev="configfs" ino=1114 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 157.139353][ T29] audit: type=1400 audit(1785852655.166:398): avc: denied { search } for pid=6508 comm="syz.4.197" name="usb_gadget" dev="configfs" ino=3066 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 157.152105][ T29] audit: type=1400 audit(1785852655.166:399): avc: denied { search } for pid=6508 comm="syz.4.197" name="g1" dev="configfs" ino=8735 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 157.166756][ T29] audit: type=1400 audit(1785852655.166:400): avc: denied { search } for pid=6508 comm="syz.4.197" name="functions" dev="configfs" ino=8737 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 157.185203][ T29] audit: type=1400 audit(1785852655.166:401): avc: denied { write search } for pid=6508 comm="syz.4.197" name="functions" dev="configfs" ino=8737 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 157.198568][ T29] audit: type=1400 audit(1785852655.166:402): avc: denied { add_name } for pid=6508 comm="syz.4.197" name="midi2.0" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 157.214116][ T29] audit: type=1400 audit(1785852655.206:403): avc: denied { search } for pid=6508 comm="syz.4.197" name="/" dev="configfs" ino=1114 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 157.221686][ T29] audit: type=1400 audit(1785852655.206:404): avc: denied { search } for pid=6508 comm="syz.4.197" name="usb_gadget" dev="configfs" ino=3066 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 157.437117][ T6521] se_device not configured yet, cannot port link [ 157.478062][ T6521] [ 157.478511][ T6521] ====================================================== [ 157.479483][ T6521] WARNING: possible circular locking dependency detected [ 157.480435][ T6521] syzkaller #0 Not tainted [ 157.481050][ T6521] ------------------------------------------------------ [ 157.481995][ T6521] syz.4.200/6521 is trying to acquire lock: [ 157.482799][ T6521] ffffffff90253240 (tpg_instances_lock){+.+.}-{4:4}, at: tcm_alloc+0x20/0x440 [ 157.484073][ T6521] [ 157.484073][ T6521] but task is already holding lock: [ 157.485069][ T6521] ffff88807c1c6390 (&gi->lock){+.+.}-{4:4}, at: config_usb_cfg_link+0x57/0x3a0 [ 157.486337][ T6521] [ 157.486337][ T6521] which lock already depends on the new lock. [ 157.486337][ T6521] [ 157.487783][ T6521] [ 157.487783][ T6521] the existing dependency chain (in reverse order) is: [ 157.489108][ T6521] [ 157.489108][ T6521] -> #3 (&gi->lock){+.+.}-{4:4}: [ 157.490131][ T6521] lock_acquire+0x1b9/0x370 [ 157.490848][ T6521] __mutex_lock+0x1a4/0x1bd0 [ 157.491623][ T6521] config_usb_cfg_link+0x57/0x3a0 [ 157.492625][ T6521] configfs_symlink+0x540/0x11f0 [ 157.493410][ T6521] vfs_symlink+0x178/0x4d0 [ 157.494114][ T6521] filename_symlinkat+0x2a6/0x560 [ 157.494889][ T6521] __x64_sys_symlink+0x79/0xb0 [ 157.495649][ T6521] do_syscall_64+0x115/0x870 [ 157.496459][ T6521] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 157.497366][ T6521] [ 157.497366][ T6521] -> #2 (&sb->s_type->i_mutex_key#26){++++}-{4:4}: [ 157.498572][ T6521] lock_acquire+0x1b9/0x370 [ 157.499292][ T6521] down_write+0x8b/0x1f0 [ 157.499973][ T6521] configfs_depend_item_unlocked+0xf3/0x6a0 [ 157.500868][ T6521] usbg_make_tpg+0x261/0x620 [ 157.501605][ T6521] target_fabric_make_tpg+0xab/0x8c0 [ 157.502429][ T6521] configfs_mkdir+0x51e/0xb70 [ 157.503177][ T6521] vfs_mkdir+0x361/0x850 [ 157.503917][ T6521] filename_mkdirat+0x48b/0x5e0 [ 157.504684][ T6521] __x64_sys_mkdirat+0x89/0xc0 [ 157.505437][ T6521] do_syscall_64+0x115/0x870 [ 157.506169][ T6521] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 157.507050][ T6521] [ 157.507050][ T6521] -> #1 (&opts->dep_lock){+.+.}-{4:4}: [ 157.508098][ T6521] lock_acquire+0x1b9/0x370 [ 157.508796][ T6521] __mutex_lock+0x1a4/0x1bd0 [ 157.509508][ T6521] usbg_make_tpg+0x1a4/0x620 [ 157.510216][ T6521] target_fabric_make_tpg+0xab/0x8c0 [ 157.511017][ T6521] configfs_mkdir+0x51e/0xb70 [ 157.511751][ T6521] vfs_mkdir+0x361/0x850 [ 157.512416][ T6521] filename_mkdirat+0x48b/0x5e0 [ 157.513154][ T6521] __x64_sys_mkdirat+0x89/0xc0 [ 157.513915][ T6521] do_syscall_64+0x115/0x870 [ 157.514626][ T6521] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 157.515499][ T6521] [ 157.515499][ T6521] -> #0 (tpg_instances_lock){+.+.}-{4:4}: [ 157.516575][ T6521] check_prev_add+0xeb/0xe60 [ 157.517289][ T6521] __lock_acquire+0x136c/0x1a40 [ 157.518027][ T6521] lock_acquire+0x1b9/0x370 [ 157.518722][ T6521] __mutex_lock+0x1a4/0x1bd0 [ 157.519433][ T6521] tcm_alloc+0x20/0x440 [ 157.520083][ T6521] usb_get_function+0x5e/0xd0 [ 157.520810][ T6521] config_usb_cfg_link+0x1ed/0x3a0 [ 157.521600][ T6521] configfs_symlink+0x540/0x11f0 [ 157.522359][ T6521] vfs_symlink+0x178/0x4d0 [ 157.523047][ T6521] filename_symlinkat+0x2a6/0x560 [ 157.523822][ T6521] __x64_sys_symlinkat+0x9c/0xe0 [ 157.524572][ T6521] do_syscall_64+0x115/0x870 [ 157.525285][ T6521] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 157.526167][ T6521] [ 157.526167][ T6521] other info that might help us debug this: [ 157.526167][ T6521] [ 157.527515][ T6521] Chain exists of: [ 157.527515][ T6521] tpg_instances_lock --> &sb->s_type->i_mutex_key#26 --> &gi->lock [ 157.527515][ T6521] [ 157.529422][ T6521] Possible unsafe locking scenario: [ 157.529422][ T6521] [ 157.530412][ T6521] CPU0 CPU1 [ 157.531137][ T6521] ---- ---- [ 157.531863][ T6521] lock(&gi->lock); [ 157.532408][ T6521] lock(&sb->s_type->i_mutex_key#26); [ 157.533486][ T6521] lock(&gi->lock); [ 157.534374][ T6521] lock(tpg_instances_lock); [ 157.535020][ T6521] [ 157.535020][ T6521] *** DEADLOCK *** [ 157.535020][ T6521] [ 157.536101][ T6521] 3 locks held by syz.4.200/6521: [ 157.536797][ T6521] #0: ffff88801e39c450 (sb_writers#14){.+.+}-{0:0}, at: filename_create+0x10d/0x400 [ 157.538129][ T6521] #1: ffff888055544ac0 (&sb->s_type->i_mutex_key#26){++++}-{4:4}, at: configfs_symlink+0x3c0/0x11f0 [ 157.539631][ T6521] #2: ffff88807c1c6390 (&gi->lock){+.+.}-{4:4}, at: config_usb_cfg_link+0x57/0x3a0 [ 157.540922][ T6521] [ 157.540922][ T6521] stack backtrace: [ 157.541718][ T6521] CPU: 1 UID: 0 PID: 6521 Comm: syz.4.200 Not tainted syzkaller #0 PREEMPT(full) [ 157.541742][ T6521] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 157.541754][ T6521] Call Trace: [ 157.541762][ T6521] [ 157.541770][ T6521] dump_stack_lvl+0x100/0x190 [ 157.541812][ T6521] print_circular_bug.cold+0x178/0x1c7 [ 157.541844][ T6521] check_noncircular+0x146/0x160 [ 157.541870][ T6521] check_prev_add+0xeb/0xe60 [ 157.541891][ T6521] ? putname+0xb1/0x110 [ 157.541912][ T6521] __lock_acquire+0x136c/0x1a40 [ 157.541939][ T6521] lock_acquire+0x1b9/0x370 [ 157.541961][ T6521] ? tcm_alloc+0x20/0x440 [ 157.541984][ T6521] ? __pfx___might_resched+0x10/0x10 [ 157.542008][ T6521] __mutex_lock+0x1a4/0x1bd0 [ 157.542032][ T6521] ? tcm_alloc+0x20/0x440 [ 157.542053][ T6521] ? tcm_alloc+0x20/0x440 [ 157.542074][ T6521] ? __mutex_lock+0x26d/0x1bd0 [ 157.542096][ T6521] ? config_usb_cfg_link+0x57/0x3a0 [ 157.542120][ T6521] ? __pfx___mutex_lock+0x10/0x10 [ 157.542146][ T6521] ? __pfx_selinux_inode_permission+0x10/0x10 [ 157.542173][ T6521] ? tcm_alloc+0x20/0x440 [ 157.542193][ T6521] tcm_alloc+0x20/0x440 [ 157.542215][ T6521] usb_get_function+0x5e/0xd0 [ 157.542241][ T6521] config_usb_cfg_link+0x1ed/0x3a0 [ 157.542264][ T6521] ? mntput_no_expire+0xe7/0x220 [ 157.542284][ T6521] configfs_symlink+0x540/0x11f0 [ 157.542312][ T6521] ? __pfx_configfs_symlink+0x10/0x10 [ 157.542340][ T6521] vfs_symlink+0x178/0x4d0 [ 157.542366][ T6521] filename_symlinkat+0x2a6/0x560 [ 157.542389][ T6521] ? __pfx_filename_symlinkat+0x10/0x10 [ 157.542411][ T6521] ? strncpy_from_user+0x19d/0x2d0 [ 157.542436][ T6521] ? do_getname+0x191/0x390 [ 157.542460][ T6521] __x64_sys_symlinkat+0x9c/0xe0 [ 157.542482][ T6521] do_syscall_64+0x115/0x870 [ 157.542504][ T6521] ? clear_bhb_loop+0x40/0x90 [ 157.542525][ T6521] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 157.542544][ T6521] RIP: 0033:0x7f9b1199e019 [ 157.542567][ T6521] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 157.542591][ T6521] RSP: 002b:00007f9b127cb028 EFLAGS: 00000246 ORIG_RAX: 000000000000010a [ 157.542614][ T6521] RAX: ffffffffffffffda RBX: 00007f9b11c25fa0 RCX: 00007f9b1199e019 [ 157.542627][ T6521] RDX: 00002000000009c0 RSI: ffffffffffffff9c RDI: 0000200000000980 [ 157.542640][ T6521] RBP: 00007f9b11a3500c R08: 0000000000000000 R09: 0000000000000000 [ 157.542653][ T6521] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 157.542665][ T6521] R13: 00007f9b11c26038 R14: 00007f9b11c25fa0 R15: 00007ffc953b9a18 [ 157.542684][ T6521] [ 157.847051][ T6521] configfs-gadget.g1 gadget.0: Error: incorrect capture sampling rate [ 157.859882][ T6521] udc dummy_udc.0: failed to start g1: -22 [ 157.865912][ T6521] configfs-gadget.g1 gadget.0: probe with driver configfs-gadget.g1 failed with error -22 [ 157.877749][ T6521] UDC core: g1: couldn't find an available UDC or it's busy [ 157.971797][ T6530] dlm: no local IP address has been set [ 157.977568][ T6530] dlm: cannot start dlm midcomms -107