last executing test programs: 605.302811ms ago: executing program 3 (id=592): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sec\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./sec\x00', &(0x7f0000000140)='securityfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f00000000e0)='./sec/tomoyo/profile\x00', 0x1, 0x0) write(r0, &(0x7f0000000040)="3c5c583ecd45036a2762bb626c65640a", 0x10) openat(r0, &(0x7f0000000100)='./sec\x00', 0xc2802, 0x1a) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x10, &(0x7f0000000200), 0x4) r2 = openat2$dir(0xffffff9c, &(0x7f0000000040)='./debug/failslab/times\x00', &(0x7f00000001c0)={0x541200, 0x1, 0x2}, 0x18) mkdirat(r2, &(0x7f0000000000)='./debug\x00', 0x1ff) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r4 = socket(0x400000000010, 0x3, 0x0) r5 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd3d, 0x25cfdbfd, {0x0, 0x0, 0x0, r6, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x5, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x40000}, 0x0) sendmsg$nl_route_sched(r4, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000001c0)=@newtfilter={0xfd0a, 0x2c, 0x42f, 0x870bd29, 0x25dfdbff, {0x0, 0x0, 0x0, r6, {0xffe0, 0x7}, {}, {0x2, 0xe}}, [@filter_kind_options=@f_flower={{0xb}, {0xc, 0x2, [@TCA_FLOWER_KEY_ENC_OPTS={0x8, 0x54, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPTS_VXLAN={0x4}]}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x22044028}, 0x0) mount(0x0, &(0x7f0000000080)='./debug\x00', &(0x7f00000000c0)='debugfs\x00', 0x62000, 0x0) r7 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./debug/failslab/times\x00', 0x1, 0x0) r8 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TCSETS(r8, 0x40045431, &(0x7f0000000440)={0x0, 0xfffffffc, 0xffdffff8, 0xa, 0x8, "ff000000000000000000000000000200"}) r9 = syz_open_pts(r8, 0x0) ioctl$TIOCSTI(r9, 0x5412, &(0x7f00000002c0)=0x11) write$binfmt_elf64(r7, &(0x7f0000000600)={{0x7f, 0x45, 0x4c, 0x46, 0x4, 0x4, 0x9, 0x6, 0x2, 0x3, 0x3, 0x6, 0xb3, 0x40, 0x248, 0x7fff, 0x4, 0x38, 0x1, 0x8, 0x6, 0x1ff}, [{0x7, 0x5, 0x81, 0x200, 0x3, 0xffffffffffffffff, 0x0, 0x100000000}], "919fe5258697eb83817cc640b2f9a092c8b81ba47dcc74cfa365ec52a74abd11779fa946101e185090fc5830bbb29efc430e4142859213e4a210235ed539fee868", ['\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00']}, 0xab9) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r7, 0xc0502100, &(0x7f0000000100)={0x0}) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r7, 0x40182103, &(0x7f0000000180)={r10, 0x1, r7, 0x1000, 0x80000}) futex(0x0, 0x36bf51381f43f77, 0x1, 0x0, 0x0, 0x1) r11 = syz_open_dev$vim2m(&(0x7f0000000040), 0x1002, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r11, 0xc0145608, &(0x7f00000000c0)={0x8, 0x2, 0x1}) ioctl$vim2m_VIDIOC_QBUF(r11, 0xc044560f, &(0x7f00000001c0)=@mmap={0x0, 0x2, 0x0, 0x700, 0x0, {0x0, 0xea60}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "2063569a"}, 0x700}) 460.01676ms ago: executing program 0 (id=597): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e23, 0x0, @empty}, 0x1c) sendto$inet6(r0, &(0x7f0000000180)="1a", 0x1, 0x0, &(0x7f0000000200)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r0, &(0x7f0000000c80)="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", 0x34000, 0xbcff, 0x0, 0x0) shutdown(r0, 0x1) 459.877588ms ago: executing program 1 (id=598): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(blowfish)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5", 0x4) r1 = accept4(r0, 0x0, 0x0, 0x80800) sendmmsg$alg(r1, &(0x7f0000000400)=[{0x0, 0x0, &(0x7f0000000440)=[{&(0x7f0000000280)="02c5150d44df388611cd97cfa0a3fed26f75e79c0974641f432d3898c7d3c675ba2c3ce3d6fe05a7512383bfbe1eb6d1810c27d15dbe1162d734c030ec6f8622998ae46b037973c99e98a911412b19ac", 0x50}, {0x0}, {&(0x7f00000003c0)="ba094f7f1691908f95", 0x9}], 0x3, 0x0, 0x0, 0x890}], 0x1, 0x0) recvmsg(r1, &(0x7f00000005c0)={0x0, 0x10, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x51}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2, 0x0, 0x0, 0xf5000000}, 0x0) 390.044679ms ago: executing program 1 (id=599): r0 = openat(0xffffffffffffff9c, &(0x7f0000001800)='./my_configfs/target/usb_gadget/naa.1234567890abcdef/tpgt_1/lun/lun_0/alua_tg_pt_offline\x00', 0x1, 0x0) write(r0, &(0x7f0000001900)='1', 0x1) 389.439015ms ago: executing program 3 (id=601): r0 = openat(0xffffffffffffff9c, &(0x7f0000001600)='./my_configfs/target/usb_gadget/naa.1234567890abcdef/tpgt_1/lun/lun_0/alua_tg_pt_write_md\x00', 0x1, 0x0) write(r0, &(0x7f0000001700)='1', 0x1) 389.355662ms ago: executing program 1 (id=602): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_inet6_SIOCDELRT(r0, 0x890c, &(0x7f0000005fc0)={@remote, @mcast2, @mcast2, 0x4, 0x8000, 0x40, 0x0, 0x1000, 0x10c0014}) 320.608815ms ago: executing program 3 (id=603): r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_COALESCE_SET(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={0x0}, 0x1, 0x0, 0x0, 0x4920}, 0x44860) 320.41269ms ago: executing program 1 (id=604): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sec\x00', 0x1ff) r0 = openat(0xffffffffffffff9c, &(0x7f00000000e0)='./sec/tomoyo/profile\x00', 0x1, 0x0) write(r0, &(0x7f0000000100)="3c5c0f2397b4d84500b5f812365f00000000000000", 0xff40) 320.109459ms ago: executing program 3 (id=606): r0 = socket$alg(0x26, 0x5, 0x0) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00000000c0)="4cfe538e2dbfa198aae0ec2a7179770fe5e65e4f6d16e558b94595c823899dfa2fae3c7f8b464d5baf20420d2d598fa388cec0cd0434cdcd27696875f7a70bb040a0ae324f89b55cbdf8bae15cdf4d2562136e6439cedb95891518cbd57b8f9142dcdc579953d658c21ff6325441248b747064e9c856bc76fc2e48a3a4cc7d5b4fbafde4949fb6842bf8ed1308f1d68e5af2400a44ad15c70a06c3578e4cb1aa30faf52664933720d844c937bf14f29690713368af106011cd38b41bb6cc816503317352b7927eb5aba2e1c8968eedb4571587fa0051687e13e3b294eea2d0e9685e802b75f510c6", 0xe8) socket$inet6_sctp(0xa, 0x5, 0x84) socket$inet6_sctp(0xa, 0x1, 0x84) socket$inet_udp(0x2, 0x2, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x10}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB], 0x50}}, 0x4008840) socket$netlink(0x10, 0x3, 0x0) socket$inet(0xa, 0x1, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000640)=ANY=[@ANYBLOB="540000000206050000000000000000000700000005000100060000000d000300686173683a6e6574000000000900020073797a3100000000050005000200000005000400000000000c00078008001240"], 0x54}}, 0x0) sendmsg$IPSET_CMD_ADD(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000040)=ANY=[@ANYBLOB="44000000090601020000000000000000000000000900020073797a310000000005000100070000001c0007800c00018008000140fffffffe0c00028008000140"], 0x44}, 0x1, 0x0, 0x0, 0x10000047}, 0x4000050) 267.794899ms ago: executing program 1 (id=607): r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000003c0), 0x2, 0x0) ioctl$BTRFS_IOC_GET_SUPPORTED_FEATURES(r0, 0x4001af84, &(0x7f0000000000)) ioctl$VHOST_SET_OWNER(r0, 0xaf01, 0x0) openat$kvm(0xffffffffffffff9c, 0x0, 0x2200, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x6, 0x8031, 0xffffffffffffffff, 0x6a855000) mmap(&(0x7f000095f000/0x3000)=nil, 0x3000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CREATE_GUEST_MEMFD(r2, 0xc040aed4, &(0x7f00000001c0)={0x1000200001ee0000, 0x3}) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x9) mbind(&(0x7f0000008000/0x7000)=nil, 0x7000, 0x1, 0x0, 0x2, 0x1) 267.640393ms ago: executing program 2 (id=608): r0 = fsopen(&(0x7f0000000240)='ramfs\x00', 0x0) syz_emit_vhci(&(0x7f0000000240)=ANY=[], 0xec) fsmount(r0, 0x0, 0x0) 267.300614ms ago: executing program 3 (id=609): r0 = socket$packet(0x11, 0x3, 0x300) r1 = dup(r0) r2 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) ioctl$int_in(r2, 0x40000000af01, 0x0) ioctl$VHOST_SET_VRING_ADDR(r2, 0x4028af11, &(0x7f0000000240)={0x1, 0x1, 0x0, &(0x7f0000000200)=""/51, 0x0}) r3 = socket$packet(0x11, 0x3, 0x300) r4 = dup(r3) ioctl$VHOST_NET_SET_BACKEND(r2, 0x4008af30, &(0x7f0000000000)={0x1, r4}) ioctl$VHOST_SET_FEATURES(r2, 0x4008af00, &(0x7f00000001c0)=0x304008000) ioctl$VHOST_NET_SET_BACKEND(r2, 0x4008af30, &(0x7f00000003c0)={0x1, r1}) 200.054468ms ago: executing program 2 (id=610): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sec\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./sec\x00', &(0x7f0000000140)='securityfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f00000000e0)='./sec/tomoyo/profile\x00', 0x1, 0x0) write(r0, &(0x7f0000000040)="3c5c583ecd45036a2762bb626c65640a", 0x10) openat(r0, &(0x7f0000000100)='./sec\x00', 0xc2802, 0x1a) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x10, &(0x7f0000000200), 0x4) r2 = openat2$dir(0xffffff9c, &(0x7f0000000040)='./debug/failslab/times\x00', &(0x7f00000001c0)={0x541200, 0x1, 0x2}, 0x18) mkdirat(r2, &(0x7f0000000000)='./debug\x00', 0x1ff) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r4 = socket(0x400000000010, 0x3, 0x0) r5 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd3d, 0x25cfdbfd, {0x0, 0x0, 0x0, r6, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x5, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x40000}, 0x0) sendmsg$nl_route_sched(r4, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000001c0)=@newtfilter={0xfd0a, 0x2c, 0x42f, 0x870bd29, 0x25dfdbff, {0x0, 0x0, 0x0, r6, {0xffe0, 0x7}, {}, {0x2, 0xe}}, [@filter_kind_options=@f_flower={{0xb}, {0xc, 0x2, [@TCA_FLOWER_KEY_ENC_OPTS={0x8, 0x54, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPTS_VXLAN={0x4}]}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x22044028}, 0x0) mount(0x0, &(0x7f0000000080)='./debug\x00', &(0x7f00000000c0)='debugfs\x00', 0x62000, 0x0) r7 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./debug/failslab/times\x00', 0x1, 0x0) r8 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TCSETS(r8, 0x40045431, &(0x7f0000000440)={0x0, 0xfffffffc, 0xffdffff8, 0xa, 0x8, "ff000000000000000000000000000200"}) r9 = syz_open_pts(r8, 0x0) ioctl$TIOCSTI(r9, 0x5412, &(0x7f00000002c0)=0x11) write$binfmt_elf64(r7, &(0x7f0000000600)={{0x7f, 0x45, 0x4c, 0x46, 0x4, 0x4, 0x9, 0x6, 0x2, 0x3, 0x3, 0x6, 0xb3, 0x40, 0x248, 0x7fff, 0x4, 0x38, 0x1, 0x8, 0x6, 0x1ff}, [{0x7, 0x5, 0x81, 0x200, 0x3, 0xffffffffffffffff, 0x0, 0x100000000}], "919fe5258697eb83817cc640b2f9a092c8b81ba47dcc74cfa365ec52a74abd11779fa946101e185090fc5830bbb29efc430e4142859213e4a210235ed539fee868", ['\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00']}, 0xab9) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r7, 0xc0502100, &(0x7f0000000100)={0x0}) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r7, 0x40182103, &(0x7f0000000180)={r10, 0x1, r7, 0x1000, 0x80000}) futex(0x0, 0x36bf51381f43f77, 0x1, 0x0, 0x0, 0x1) r11 = syz_open_dev$vim2m(&(0x7f0000000040), 0x1002, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r11, 0xc0145608, &(0x7f00000000c0)={0x8, 0x2, 0x1}) ioctl$vim2m_VIDIOC_QBUF(r11, 0xc044560f, &(0x7f00000001c0)=@mmap={0x0, 0x2, 0x0, 0x700, 0x0, {0x0, 0xea60}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "2063569a"}, 0x700}) 199.580065ms ago: executing program 0 (id=611): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r0) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r1, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f00000000c0)='dctcp', 0x5) setsockopt$inet_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f0000000140)='yeah', 0x4) sendto$inet(r1, &(0x7f00000001c0)='\a', 0x1, 0x4000, 0x0, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)=ANY=[], 0x68}, 0x1, 0x0, 0x0, 0x4004850}, 0x40) 199.385367ms ago: executing program 3 (id=612): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000300)=ANY=[@ANYBLOB="1201000000080008d804dd0000000000000109022400010000a008090400fe01030001000921fffffd0122050009058103"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000080)={0x2c, &(0x7f0000000340)=ANY=[@ANYBLOB="001105"], 0x0, 0x0, 0x0, 0x0}, 0x0) r1 = syz_open_dev$I2C(&(0x7f0000000000), 0x2, 0x40402) write(r1, 0x0, 0x0) 199.268447ms ago: executing program 0 (id=613): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_inet6_SIOCDELRT(r0, 0x890c, &(0x7f0000005fc0)={@remote, @mcast2, @mcast2, 0x4, 0x8000, 0x40, 0x0, 0x1000, 0x10c0014}) 130.618106ms ago: executing program 0 (id=614): bind$alg(0xffffffffffffffff, &(0x7f0000000140)={0x26, 'hash\x00', 0x0, 0x0, 'cmac(des3_ede-generic)\x00'}, 0x58) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, &(0x7f0000000040)="ad56000081000008000d00"/24, 0x18) r0 = accept4(0xffffffffffffffff, 0x0, 0x0, 0x80000) sendmmsg$alg(r0, &(0x7f0000001840)=[{0x0, 0x0, &(0x7f0000000540)=[{&(0x7f0000000080)="6eb970d0b0942d4c6674abf2bdb83d9df1348ac7fdfc9145f4f9362c5b2bbac91eb12cac2eb87108bcfce15bfe5261d7e28503c06449f7c54e097622f14c0f453475594d683c7517875d", 0x4a}, {&(0x7f00000001c0)="e45f3343980ebd2404dcad0e9961fc5ec99f159d4411ab8d285258662f6d0937dc77df69fb86eec77ab48cd3fbe1d49b3ff8fe1a0fa877c6827bcaa379b32840fd53c9e02dca0f8e6c6a5628eb358615f76c1e8612ca80b0b07f06749f60811c32b182d74a010d31", 0x68}, {&(0x7f0000000240)="842f3290cde113f86c33422f8819252558e52d062668c893dbcf0b3cd9033d4070dfe957e6e5e1e66350e8c111993f86684bb049e7c4f1d5cf61cf31590276d08164d3b43709ee668d2e7fffc244cb1e0edde052a603ea3c1792eafa23e5c931ff4fd63aba939231fcc221993c6e1a4c707744948382520ec00cc16716e8c83475a8062db13faa0809c3a8346323918e49a9c5b300dc882b5dd2bb15", 0xfd33}, {&(0x7f00000003c0)="26ca0deee074c2563575ed8c2aed5d95327e6f4469fea7d7558996e45f98e630f90c3b4fcad2491acfdaddbb7ac6410515e3751c8f49a12c6497e509f6928140fe603e5ed2b0d0808704e4dad7376ce1eb9fe88b617d0b6f12ade5e60038f8eba8351853b7256c4ef33e620c153adb016c325cb3928fa83784ea0100d37cf110c503c5591af3af2ce2ba01d5cc827bb7652a9a66a5cd0e726dece0c5662b", 0x9e}, {&(0x7f0000000480)="c629ef262ffb1c417c62bbcd8a02740f03c4ea333ae04c0a829c3d8722463e12b58aa183bca24e1dd80e23e9c455f47b90deac9cce0d5942a461eb", 0x3b}, {&(0x7f00000004c0)="c73f681dd0a5f1f0e5f80350bbe778d63cb3cd163d1a72884092ac994524df507457b12e9d91605c26f7e4cda36ba9531f059a76ffac99b260476affb489277fa28a2bb59ba094b970f607b64312180aeeecf5ed964d1c3321fd55de9d20", 0x5e}], 0x6, &(0x7f0000000580)=[@assoc={0x10}], 0x10, 0x20004010}, {0x0, 0x0, &(0x7f00000005c0), 0x0, 0x0, 0x0, 0x20000050}, {0x0, 0x0, &(0x7f0000001740)=[{&(0x7f0000000600)="210d56bf9174288b5051d8a3218b939c4bb7eec551d490ee68d56813", 0x1c}, {&(0x7f0000000640)="87a651939279c656f8bcb33fb6ed9a1747780c1085106338ecd1e05160217c9d392cf980b7607616ab1dfcdb26aa0b58e07df38b7d6fec69859ff83e3654b7144dd8b83ec5cbc6a0486b97f8e391c8eb853629ece34bfded0195655a79359281aff3bc928c22fcb524e42f8b1967b869e2c6b459d38114e9efa7be18a1cb742360efcdc12c980869aa6f8235918043954a983e89cec8c65173851f5471b1ba402ce35c098c99f1f842cb13016f491f22e7c73003c91e59fbe13e6495fb1b488dc73b2bc0fd120043554c50fde40c98eb6584", 0xd2}, {&(0x7f0000000740)="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", 0x1000}], 0x3, &(0x7f0000001780)=[@op={0x10, 0x117, 0x3, 0x1}, @iv={0x10}, @op={0x10, 0x117, 0x3, 0x1}, @op={0x10, 0x117, 0x3, 0x9389a8624a43df49}, @op={0x10}, @iv={0x28, 0x117, 0x2, 0x16, "93a6e89100f04eb83d825b9b7afc3c5569fba2c9b575"}, @assoc={0x10, 0x117, 0x4, 0xf}], 0x88, 0xc020}], 0x3, 0x4040000) 130.430261ms ago: executing program 0 (id=615): mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mount$9p_virtio(&(0x7f00000001c0), &(0x7f0000000480)='./file0\x00', &(0x7f00000004c0), 0x0, &(0x7f0000000c00)=ANY=[@ANYBLOB="56c78e3c733d76697274696f2c6e6f657874656e642c6163638173733d616e792c63616368653d667363616368652c76657273696f6e3d3970323030302e75"]) r0 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./file1\x00', 0x80101, 0x101) write$tcp_congestion(r0, &(0x7f00000000c0)='lp\x00', 0xfffffdef) creat(&(0x7f0000000080)='./file1\x00', 0xec) 70.60272ms ago: executing program 0 (id=616): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-twofish-3way\x00'}, 0x45) r1 = accept4(r0, 0x0, 0x0, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f0000000140), r1) 70.314983ms ago: executing program 2 (id=617): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x1ff) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r0 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_SET(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)={0x54, r0, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_NODE={0x40, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_KEY={0x3c, 0x4, {'gcm(aes)\x00', 0x14, '01234567890123456789'}}]}]}, 0x54}}, 0x0) sendmsg$TIPC_NL_KEY_FLUSH(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000002c0)={0x54, r0, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_NODE={0x40, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_KEY={0x3c, 0x4, {'gcm(aes)\x00', 0x14, '01234567890123456789'}}]}]}, 0x54}}, 0x0) 70.244219ms ago: executing program 2 (id=618): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000300)=ANY=[], 0x1c}, 0x1, 0x0, 0x0, 0x4000002}, 0x4000080) 441.681µs ago: executing program 2 (id=619): r0 = socket$packet(0x11, 0x3, 0x300) r1 = dup(r0) r2 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) ioctl$int_in(r2, 0x40000000af01, 0x0) ioctl$VHOST_SET_VRING_ADDR(r2, 0x4028af11, &(0x7f0000000240)={0x1, 0x1, 0x0, &(0x7f0000000200)=""/51, 0x0}) r3 = socket$packet(0x11, 0x3, 0x300) ioctl$VHOST_SET_MEM_TABLE(r2, 0x4008af03, &(0x7f0000000340)) r4 = dup(r3) ioctl$VHOST_NET_SET_BACKEND(r2, 0x4008af30, &(0x7f0000000000)={0x1, r4}) ioctl$VHOST_NET_SET_BACKEND(r2, 0x4008af30, &(0x7f00000003c0)={0x1, r1}) 234.731µs ago: executing program 2 (id=620): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e23, 0x0, @empty}, 0x1c) sendto$inet6(r0, &(0x7f0000000180)="1a", 0x1, 0x0, &(0x7f0000000200)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) shutdown(r0, 0x1) 0s ago: executing program 1 (id=621): syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x8002) socket$nl_xfrm(0x10, 0x3, 0x6) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e22}, 0x1c) listen(r0, 0x6) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000040)='syz_tun\x00', 0x10) syz_emit_ethernet(0x36, &(0x7f00000001c0)={@local, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x16}, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x67, 0x0, 0x2, 0x6, 0x0, @rand_addr=0x64010101, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x5, 0xc2}}}}}}, 0x0) 0s ago: executing program 1 (id=622): mkdir(&(0x7f0000000000)='./my_configfs\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./my_configfs\x00', &(0x7f0000000100)='configfs\x00', 0x0, 0x0) mkdir(&(0x7f0000000200)='./my_dbroot\x00', 0x1ff) close(0xffffffffffffffff) mkdir(&(0x7f0000000500)='./my_dbroot/alua\x00', 0x1ff) mkdir(&(0x7f0000000600)='./my_dbroot/alua/usb_gadget\x00', 0x1ff) mkdir(&(0x7f0000000700)='./my_dbroot/alua/usb_gadget/naa.1234567890abcdef+1\x00', 0x1ff) mkdir(&(0x7f0000000900)='./my_configfs/usb_gadget/g1/functions/tcm.usb0\x00', 0x1ff) mkdir(&(0x7f0000000a00)='./my_configfs/target/usb_gadget\x00', 0x1ff) mkdir(&(0x7f0000000b00)='./my_configfs/target/usb_gadget/naa.1234567890abcdef\x00', 0x1ff) mkdir(&(0x7f0000000c00)='./my_configfs/target/usb_gadget/naa.1234567890abcdef/tpgt_1\x00', 0x1ff) mkdir(&(0x7f0000000d00)='./my_configfs/target/core/rd_mcp_0\x00', 0x1ff) mkdir(0x0, 0x1ff) r0 = openat(0xffffffffffffff9c, &(0x7f0000000f00)='./my_configfs/target/core/rd_mcp_0/dev0/control\x00', 0x1, 0x0) write(r0, &(0x7f0000001000)='rd_pages=8', 0xa) close(r0) write(0xffffffffffffffff, &(0x7f0000001200)='1', 0x1) close(0xffffffffffffffff) mkdir(&(0x7f0000001300)='./my_configfs/target/usb_gadget/naa.1234567890abcdef/tpgt_1/lun/lun_0\x00', 0x1ff) mkdir(&(0x7f0000001a00)='./my_configfs/target/usb_gadget/naa.1234567890abcdef/tpgt_1/acls/naa.1234567890abcdef\x00', 0x1ff) write(0xffffffffffffffff, &(0x7f0000001700)='1', 0x1) kernel console output (not intermixed with test programs): [ 38.010440][ T42] audit: type=1400 audit(1785320630.080:115): avc: denied { siginh } for pid=5642 comm="sh" scontext=system_u:system_r:sshd_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 38.612837][ T42] audit: type=1400 audit(1785320630.700:116): avc: denied { write } for pid=5647 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 38.670036][ T42] audit: type=1400 audit(1785320630.760:117): avc: denied { write } for pid=5650 comm="rm" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 39.436046][ T42] audit: type=1400 audit(1785320631.530:118): avc: denied { write } for pid=5653 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 39.477293][ T42] audit: type=1400 audit(1785320631.570:119): avc: denied { write } for pid=5656 comm="rm" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 39.552449][ T42] audit: type=1400 audit(1785320631.640:120): avc: denied { write } for pid=5659 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 Warning: Permanently added '[localhost]:50335' (ED25519) to the list of known hosts. [ 42.345645][ T5674] cgroup: Unknown subsys name 'net' [ 42.567685][ T5674] cgroup: Unknown subsys name 'cpuset' [ 42.574235][ T5674] cgroup: Unknown subsys name 'rlimit' [ 42.828730][ T5725] SELinux: Context root:object_r:swapfile_t is not valid (left unmapped). Setting up swapspace version 1, size = 127995904 bytes [ 43.531236][ T5674] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 46.878455][ T42] kauditd_printk_skb: 37 callbacks suppressed [ 46.878470][ T42] audit: type=1400 audit(1785320638.970:158): avc: denied { execmem } for pid=5732 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 47.069478][ T42] audit: type=1400 audit(1785320639.160:159): avc: denied { create } for pid=5736 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 47.077640][ T42] audit: type=1400 audit(1785320639.160:160): avc: denied { create } for pid=5737 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 47.084029][ T42] audit: type=1400 audit(1785320639.160:161): avc: denied { read write } for pid=5737 comm="syz-executor" name="vhci" dev="devtmpfs" ino=1292 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 47.091009][ T42] audit: type=1400 audit(1785320639.160:162): avc: denied { read write } for pid=5736 comm="syz-executor" name="vhci" dev="devtmpfs" ino=1292 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 47.098015][ T42] audit: type=1400 audit(1785320639.160:163): avc: denied { open } for pid=5737 comm="syz-executor" path="/dev/vhci" dev="devtmpfs" ino=1292 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 47.105167][ T42] audit: type=1400 audit(1785320639.160:164): avc: denied { ioctl } for pid=5737 comm="syz-executor" path="socket:[2708]" dev="sockfs" ino=2708 ioctlcmd=0x48c9 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 47.111395][ T5748] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 47.116317][ T5744] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 47.116529][ T5748] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 47.121386][ T5744] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 47.123248][ T5748] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 47.123815][ T5750] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 47.124727][ T5752] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 47.126238][ T5752] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 47.126866][ T5744] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 47.128007][ T5744] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 47.131087][ T5748] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 47.131204][ T5752] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 47.131484][ T5752] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 47.133295][ T5751] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 47.135889][ T5744] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 47.139201][ T5751] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 47.139603][ T5744] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 47.142733][ T5751] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 47.146134][ T5744] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 47.148121][ T5751] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 47.148737][ T42] audit: type=1400 audit(1785320639.240:165): avc: denied { read } for pid=5737 comm="syz-executor" dev="nsfs" ino=4026531833 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 47.148764][ T42] audit: type=1400 audit(1785320639.240:166): avc: denied { open } for pid=5737 comm="syz-executor" path="net:[4026531833]" dev="nsfs" ino=4026531833 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 47.148785][ T42] audit: type=1400 audit(1785320639.240:167): avc: denied { mounton } for pid=5737 comm="syz-executor" path="/" dev="sda1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:root_t tclass=dir permissive=1 [ 47.693129][ T5737] bridge0: port 1(bridge_slave_0) entered blocking state [ 47.695839][ T5737] bridge0: port 1(bridge_slave_0) entered disabled state [ 47.698247][ T5737] bridge_slave_0: entered allmulticast mode [ 47.700858][ T5737] bridge_slave_0: entered promiscuous mode [ 47.726706][ T5737] bridge0: port 2(bridge_slave_1) entered blocking state [ 47.729288][ T5737] bridge0: port 2(bridge_slave_1) entered disabled state [ 47.731629][ T5737] bridge_slave_1: entered allmulticast mode [ 47.737614][ T5737] bridge_slave_1: entered promiscuous mode [ 47.790286][ T5745] bridge0: port 1(bridge_slave_0) entered blocking state [ 47.792719][ T5745] bridge0: port 1(bridge_slave_0) entered disabled state [ 47.795367][ T5745] bridge_slave_0: entered allmulticast mode [ 47.798231][ T5745] bridge_slave_0: entered promiscuous mode [ 47.811094][ T5737] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 47.845620][ T5745] bridge0: port 2(bridge_slave_1) entered blocking state [ 47.848238][ T5745] bridge0: port 2(bridge_slave_1) entered disabled state [ 47.850538][ T5745] bridge_slave_1: entered allmulticast mode [ 47.854021][ T5745] bridge_slave_1: entered promiscuous mode [ 47.859795][ T5737] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 47.940146][ T5737] team0: Port device team_slave_0 added [ 47.963447][ T5745] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 47.968052][ T5737] team0: Port device team_slave_1 added [ 47.994059][ T5743] bridge0: port 1(bridge_slave_0) entered blocking state [ 47.996383][ T5743] bridge0: port 1(bridge_slave_0) entered disabled state [ 47.998605][ T5743] bridge_slave_0: entered allmulticast mode [ 48.001831][ T5743] bridge_slave_0: entered promiscuous mode [ 48.005960][ T5743] bridge0: port 2(bridge_slave_1) entered blocking state [ 48.008643][ T5743] bridge0: port 2(bridge_slave_1) entered disabled state [ 48.012317][ T5743] bridge_slave_1: entered allmulticast mode [ 48.016356][ T5743] bridge_slave_1: entered promiscuous mode [ 48.024077][ T5745] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 48.036356][ T5736] bridge0: port 1(bridge_slave_0) entered blocking state [ 48.040039][ T5736] bridge0: port 1(bridge_slave_0) entered disabled state [ 48.042923][ T5736] bridge_slave_0: entered allmulticast mode [ 48.048064][ T5736] bridge_slave_0: entered promiscuous mode [ 48.071815][ T5737] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 48.074781][ T5737] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 48.082866][ T5737] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 48.088849][ T5736] bridge0: port 2(bridge_slave_1) entered blocking state [ 48.091267][ T5736] bridge0: port 2(bridge_slave_1) entered disabled state [ 48.093959][ T5736] bridge_slave_1: entered allmulticast mode [ 48.096790][ T5736] bridge_slave_1: entered promiscuous mode [ 48.112834][ T5737] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 48.115059][ T5737] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 48.123640][ T5737] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 48.136351][ T5743] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 48.143283][ T5743] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 48.149125][ T5745] team0: Port device team_slave_0 added [ 48.182341][ T5745] team0: Port device team_slave_1 added [ 48.197946][ T5736] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 48.201938][ T5743] team0: Port device team_slave_0 added [ 48.205321][ T5745] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 48.207716][ T5745] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 48.217725][ T5745] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 48.222817][ T5736] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 48.226978][ T5743] team0: Port device team_slave_1 added [ 48.240921][ T5745] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 48.243530][ T5745] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 48.252804][ T5745] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 48.287561][ T5736] team0: Port device team_slave_0 added [ 48.289665][ T5743] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 48.291797][ T5743] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 48.299783][ T5743] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 48.304278][ T5743] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 48.306490][ T5743] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 48.314621][ T5743] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 48.321722][ T5737] hsr_slave_0: entered promiscuous mode [ 48.324345][ T5737] hsr_slave_1: entered promiscuous mode [ 48.328806][ T5736] team0: Port device team_slave_1 added [ 48.364112][ T5745] hsr_slave_0: entered promiscuous mode [ 48.366671][ T5745] hsr_slave_1: entered promiscuous mode [ 48.369216][ T5745] debugfs: 'hsr0' already exists in 'hsr' [ 48.371116][ T5745] Cannot create hsr debugfs directory [ 48.375269][ T5736] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 48.377481][ T5736] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 48.385486][ T5736] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 48.401535][ T5736] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 48.403954][ T5736] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 48.412089][ T5736] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 48.465602][ T5743] hsr_slave_0: entered promiscuous mode [ 48.468050][ T5743] hsr_slave_1: entered promiscuous mode [ 48.470116][ T5743] debugfs: 'hsr0' already exists in 'hsr' [ 48.471901][ T5743] Cannot create hsr debugfs directory [ 48.568984][ T5736] hsr_slave_0: entered promiscuous mode [ 48.571794][ T5736] hsr_slave_1: entered promiscuous mode [ 48.574533][ T5736] debugfs: 'hsr0' already exists in 'hsr' [ 48.576623][ T5736] Cannot create hsr debugfs directory [ 48.788708][ T5737] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 48.796167][ T5737] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 48.803963][ T5737] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 48.810687][ T5737] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 48.813459][ T5737] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 48.817646][ T5737] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 48.825445][ T5737] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 48.830034][ T5737] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 48.888896][ T5745] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 48.893459][ T5745] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 48.896911][ T5745] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 48.901080][ T5745] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 48.908007][ T5745] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 48.913080][ T5745] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 48.915694][ T5745] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 48.919278][ T5745] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 48.973257][ T5736] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 48.979630][ T5736] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 48.984488][ T5736] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 48.988743][ T5736] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 48.996009][ T5736] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 49.000392][ T5736] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 49.003432][ T5736] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 49.007093][ T5736] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 49.061596][ T5737] 8021q: adding VLAN 0 to HW filter on device bond0 [ 49.067874][ T5743] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 49.072849][ T5743] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 49.079401][ T5743] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 49.083930][ T5743] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 49.087166][ T5743] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 49.090989][ T5743] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 49.097398][ T5743] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 49.102079][ T5743] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 49.113336][ T5737] 8021q: adding VLAN 0 to HW filter on device team0 [ 49.126858][ T75] bridge0: port 1(bridge_slave_0) entered blocking state [ 49.129604][ T75] bridge0: port 1(bridge_slave_0) entered forwarding state [ 49.152085][ T75] bridge0: port 2(bridge_slave_1) entered blocking state [ 49.154350][ T75] bridge0: port 2(bridge_slave_1) entered forwarding state [ 49.204271][ T64] Bluetooth: hci2: command tx timeout [ 49.204290][ T5751] Bluetooth: hci1: command tx timeout [ 49.206921][ T5744] Bluetooth: hci0: command tx timeout [ 49.211501][ T5749] Bluetooth: hci3: command tx timeout [ 49.223664][ T5745] 8021q: adding VLAN 0 to HW filter on device bond0 [ 49.271228][ T5745] 8021q: adding VLAN 0 to HW filter on device team0 [ 49.279044][ T5736] 8021q: adding VLAN 0 to HW filter on device bond0 [ 49.288682][ T1166] bridge0: port 1(bridge_slave_0) entered blocking state [ 49.291615][ T1166] bridge0: port 1(bridge_slave_0) entered forwarding state [ 49.314019][ T75] bridge0: port 2(bridge_slave_1) entered blocking state [ 49.316795][ T75] bridge0: port 2(bridge_slave_1) entered forwarding state [ 49.337669][ T5736] 8021q: adding VLAN 0 to HW filter on device team0 [ 49.342613][ T5743] 8021q: adding VLAN 0 to HW filter on device bond0 [ 49.362145][ T234] bridge0: port 1(bridge_slave_0) entered blocking state [ 49.364583][ T234] bridge0: port 1(bridge_slave_0) entered forwarding state [ 49.380460][ T234] bridge0: port 2(bridge_slave_1) entered blocking state [ 49.382779][ T234] bridge0: port 2(bridge_slave_1) entered forwarding state [ 49.389493][ T5743] 8021q: adding VLAN 0 to HW filter on device team0 [ 49.416923][ T234] bridge0: port 1(bridge_slave_0) entered blocking state [ 49.419558][ T234] bridge0: port 1(bridge_slave_0) entered forwarding state [ 49.436700][ T234] bridge0: port 2(bridge_slave_1) entered blocking state [ 49.439391][ T234] bridge0: port 2(bridge_slave_1) entered forwarding state [ 49.570736][ T5737] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 49.626282][ T5737] veth0_vlan: entered promiscuous mode [ 49.644590][ T5745] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 49.656406][ T5737] veth1_vlan: entered promiscuous mode [ 49.686696][ T5737] veth0_macvtap: entered promiscuous mode [ 49.700940][ T5737] veth1_macvtap: entered promiscuous mode [ 49.718330][ T5737] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 49.725868][ T5745] veth0_vlan: entered promiscuous mode [ 49.732519][ T5737] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 49.738155][ T5736] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 49.755768][ T5815] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 49.759259][ T5815] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 49.763939][ T5745] veth1_vlan: entered promiscuous mode [ 49.769267][ T5815] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 49.775109][ T5743] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 49.788370][ T5815] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 49.827754][ T5745] veth0_macvtap: entered promiscuous mode [ 49.855331][ T5745] veth1_macvtap: entered promiscuous mode [ 49.860546][ T5736] veth0_vlan: entered promiscuous mode [ 49.861504][ T1166] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 49.866736][ T1166] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 49.890071][ T5743] veth0_vlan: entered promiscuous mode [ 49.893964][ T5736] veth1_vlan: entered promiscuous mode [ 49.897599][ T1166] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 49.900166][ T5745] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 49.900706][ T1166] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 49.905791][ T5745] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 49.917421][ T5826] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 49.921389][ T5743] veth1_vlan: entered promiscuous mode [ 49.929847][ T5826] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 49.932889][ T5826] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 49.942062][ T5826] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 49.961365][ T5737] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 49.969119][ T5736] veth0_macvtap: entered promiscuous mode [ 49.980794][ T5736] veth1_macvtap: entered promiscuous mode [ 49.996876][ T5743] veth0_macvtap: entered promiscuous mode [ 50.000954][ T5743] veth1_macvtap: entered promiscuous mode [ 50.026244][ T60] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 50.030805][ T60] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 50.062849][ T5736] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 50.067750][ T60] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 50.070116][ T60] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 50.072425][ T5743] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 50.080993][ T5736] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 50.090052][ T5743] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 50.102571][ T5826] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 50.106157][ T5826] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 50.107185][ T5890] Zero length message leads to an empty skb [ 50.111178][ T5826] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 50.115624][ T5826] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 50.131701][ T5826] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 50.135612][ T5826] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 50.145070][ T5826] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 50.148272][ T5826] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 50.238219][ T75] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 50.242045][ T75] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 50.269595][ T60] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 50.273875][ T60] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 50.290737][ T234] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 50.293342][ T234] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 50.316466][ T1166] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 50.318930][ T1166] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 50.561165][ T5899] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1'. [ 50.573184][ T5899] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1'. [ 50.923182][ T29] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 51.023347][ T34] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 51.083103][ T29] usb 6-1: Using ep0 maxpacket: 8 [ 51.088167][ T29] usb 6-1: config 0 interface 0 altsetting 254 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 51.092577][ T29] usb 6-1: config 0 interface 0 altsetting 254 endpoint 0x81 has invalid wMaxPacketSize 0 [ 51.095936][ T29] usb 6-1: config 0 interface 0 has no altsetting 0 [ 51.098248][ T29] usb 6-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 51.101263][ T29] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 51.113649][ T29] usb 6-1: config 0 descriptor?? [ 51.173456][ T34] usb 5-1: Using ep0 maxpacket: 32 [ 51.212558][ T34] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 51.227633][ T34] usb 5-1: config 0 has no interfaces? [ 51.253636][ T34] usb 5-1: New USB device found, idVendor=14c8, idProduct=0003, bcdDevice= 5.6c [ 51.267091][ T34] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 51.277930][ T34] usb 5-1: Product: syz [ 51.283277][ T5749] Bluetooth: hci0: command tx timeout [ 51.284962][ T5749] Bluetooth: hci2: command tx timeout [ 51.285065][ T34] usb 5-1: Manufacturer: syz [ 51.293220][ T5744] Bluetooth: hci1: command tx timeout [ 51.294935][ T5749] Bluetooth: hci3: command tx timeout [ 51.305531][ T34] usb 5-1: SerialNumber: syz [ 51.415482][ T34] usb 5-1: config 0 descriptor?? [ 51.539106][ T29] mcp2221 0003:04D8:00DD.0002: unknown main item tag 0x0 [ 51.541940][ T29] mcp2221 0003:04D8:00DD.0002: unknown main item tag 0x0 [ 51.544881][ T29] mcp2221 0003:04D8:00DD.0002: unknown main item tag 0x0 [ 51.547085][ T29] mcp2221 0003:04D8:00DD.0002: unknown main item tag 0x0 [ 51.556855][ T29] mcp2221 0003:04D8:00DD.0002: unknown main item tag 0x0 [ 51.563806][ T29] mcp2221 0003:04D8:00DD.0002: USB HID vff.ff Device [HID 04d8:00dd] on usb-dummy_hcd.1-1/input0 [ 51.741640][ T29] usb 6-1: USB disconnect, device number 2 [ 52.070918][ T42] kauditd_printk_skb: 59 callbacks suppressed [ 52.070929][ T42] audit: type=1400 audit(1785320644.160:227): avc: denied { create } for pid=5919 comm="syz.2.12" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 52.080318][ T42] audit: type=1400 audit(1785320644.170:228): avc: denied { ioctl } for pid=5919 comm="syz.2.12" path="socket:[9802]" dev="sockfs" ino=9802 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 52.089716][ T42] audit: type=1400 audit(1785320644.180:229): avc: denied { bind } for pid=5919 comm="syz.2.12" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 52.106362][ T42] audit: type=1400 audit(1785320644.180:230): avc: denied { setopt } for pid=5919 comm="syz.2.12" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 52.112448][ T42] audit: type=1400 audit(1785320644.190:231): avc: denied { write } for pid=5919 comm="syz.2.12" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 52.348989][ C0] vcan0: j1939_tp_rxtimer: 0xffff8880558b7400: rx timeout, send abort [ 52.375255][ T42] audit: type=1400 audit(1785320644.460:232): avc: denied { read } for pid=5129 comm="syslogd" name="log" dev="sda1" ino=2010 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:var_t tclass=lnk_file permissive=1 [ 52.403294][ T42] audit: type=1400 audit(1785320644.460:233): avc: denied { search } for pid=5129 comm="syslogd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 52.414137][ T42] audit: type=1400 audit(1785320644.460:234): avc: denied { write search } for pid=5129 comm="syslogd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 52.425234][ T42] audit: type=1400 audit(1785320644.460:235): avc: denied { add_name } for pid=5129 comm="syslogd" name="messages" scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 52.445555][ T42] audit: type=1400 audit(1785320644.460:236): avc: denied { create } for pid=5129 comm="syslogd" name="messages" scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 52.849324][ C0] vcan0: j1939_tp_rxtimer: 0xffff8880558b7000: rx timeout, send abort [ 52.854038][ C0] vcan0: j1939_tp_rxtimer: 0xffff8880558b7400: abort rx timeout. Force session deactivation [ 53.005735][ T5928] netlink: 200 bytes leftover after parsing attributes in process `syz.3.14'. [ 53.044850][ T5838] usb 5-1: USB disconnect, device number 2 [ 53.352668][ C0] vcan0: j1939_tp_rxtimer: 0xffff8880558b7000: abort rx timeout. Force session deactivation [ 53.373111][ T5744] Bluetooth: hci1: command tx timeout [ 53.373909][ T64] Bluetooth: hci2: command tx timeout [ 53.375419][ T5751] Bluetooth: hci0: command tx timeout [ 53.379693][ T5749] Bluetooth: hci3: command tx timeout [ 53.815419][ T5928] orangefs_mount: mount request failed with -4 [ 53.976996][ T5925] Set syz1 is full, maxelem 65536 reached [ 54.216210][ T5886] usb 8-1: new full-speed USB device number 2 using dummy_hcd [ 54.403351][ T5886] usb 8-1: unable to get BOS descriptor or descriptor too short [ 54.409260][ T5886] usb 8-1: not running at top speed; connect to a high speed hub [ 54.418700][ T5886] usb 8-1: config 14 has an invalid interface number: 57 but max is 1 [ 54.422681][ T5886] usb 8-1: config 14 has an invalid interface number: 228 but max is 1 [ 54.427218][ T5886] usb 8-1: config 14 has an invalid descriptor of length 0, skipping remainder of the config [ 54.431872][ T5886] usb 8-1: config 14 has no interface number 0 [ 54.436327][ T5886] usb 8-1: config 14 has no interface number 1 [ 54.439567][ T5886] usb 8-1: config 14 interface 228 altsetting 5 has a duplicate endpoint with address 0x8, skipping [ 54.449136][ T5886] usb 8-1: config 14 interface 228 altsetting 5 has an endpoint descriptor with address 0xD1, changing to 0x81 [ 54.456748][ T5886] usb 8-1: config 14 interface 228 altsetting 5 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 54.460481][ T5886] usb 8-1: config 14 interface 228 altsetting 5 endpoint 0x81 has invalid maxpacket 137, setting to 64 [ 54.464935][ T5886] usb 8-1: config 14 interface 57 has no altsetting 0 [ 54.467392][ T5886] usb 8-1: config 14 interface 228 has no altsetting 0 [ 54.478691][ T5886] usb 8-1: New USB device found, idVendor=0694, idProduct=0001, bcdDevice=78.13 [ 54.482158][ T5886] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 54.485487][ T5886] usb 8-1: Product: syz [ 54.487070][ T5886] usb 8-1: Manufacturer: syz [ 54.488641][ T5886] usb 8-1: SerialNumber: syz [ 55.058901][ T5974] netlink: 200 bytes leftover after parsing attributes in process `syz.1.31'. [ 55.060913][ T5886] legousbtower 8-1:14.57: interrupt endpoints not found [ 55.237134][ T5978] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 55.425043][ T5983] netlink: 8 bytes leftover after parsing attributes in process `syz.0.35'. [ 55.427917][ T5983] netlink: 8 bytes leftover after parsing attributes in process `syz.0.35'. [ 55.443116][ T5749] Bluetooth: hci2: command tx timeout [ 55.445246][ T5749] Bluetooth: hci3: command tx timeout [ 55.447640][ T5749] Bluetooth: hci0: command tx timeout [ 55.448912][ T5751] Bluetooth: hci1: command tx timeout [ 55.471611][ T5886] legousbtower 8-1:14.228: LEGO USB Tower firmware version is 0.0 build 0 [ 55.479858][ T5886] legousbtower 8-1:14.228: LEGO USB Tower #-160 now attached to major 180 minor 0 [ 55.490755][ T5985] syzkaller0: entered promiscuous mode [ 55.500523][ T5985] syzkaller0: entered allmulticast mode [ 55.515954][ T5985] TC_ACT_REPEAT abuse ? [ 55.597610][ T5990] netlink: 'syz.2.38': attribute type 10 has an invalid length. [ 55.637195][ T5990] team0: Port device dummy0 added [ 55.693145][ T5990] netlink: 24 bytes leftover after parsing attributes in process `syz.2.38'. [ 56.241267][ T5886] usb 8-1: USB disconnect, device number 2 [ 56.253997][ T5886] legousbtower 8-1:14.228: LEGO USB Tower #-160 now disconnected [ 56.408974][ T6012] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 56.426778][ T6015] netlink: 8 bytes leftover after parsing attributes in process `syz.2.45'. [ 56.429546][ T6015] netlink: 8 bytes leftover after parsing attributes in process `syz.2.45'. [ 56.718090][ T6036] netlink: 8 bytes leftover after parsing attributes in process `syz.1.54'. [ 56.721064][ T6036] netlink: 8 bytes leftover after parsing attributes in process `syz.1.54'. [ 56.766644][ T6038] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 56.873902][ T5822] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 56.911889][ T6055] netlink: 8 bytes leftover after parsing attributes in process `syz.2.63'. [ 57.047001][ T5822] usb 5-1: config 0 has an invalid interface number: 50 but max is 0 [ 57.049730][ T5822] usb 5-1: config 0 has no interface number 0 [ 57.051792][ T5822] usb 5-1: config 0 interface 50 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 57.059829][ T5822] usb 5-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=e6.fc [ 57.062805][ T5822] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 57.066170][ T5822] usb 5-1: Product: syz [ 57.067681][ T5822] usb 5-1: Manufacturer: syz [ 57.069908][ T5822] usb 5-1: SerialNumber: syz [ 57.081280][ T5822] usb 5-1: config 0 descriptor?? [ 57.100510][ T5822] yurex 5-1:0.50: USB YUREX device now attached to Yurex #0 [ 57.332068][ T6081] netlink: 8 bytes leftover after parsing attributes in process `syz.2.74'. [ 57.450094][ T6092] netlink: 'syz.1.75': attribute type 3 has an invalid length. [ 57.454895][ T6092] netlink: 'syz.1.75': attribute type 3 has an invalid length. [ 57.458948][ T6092] netlink: 'syz.1.75': attribute type 3 has an invalid length. [ 57.462202][ T6092] netlink: 'syz.1.75': attribute type 3 has an invalid length. [ 57.465952][ T6092] netlink: 'syz.1.75': attribute type 3 has an invalid length. [ 57.469244][ T6092] netlink: 'syz.1.75': attribute type 3 has an invalid length. [ 57.472579][ T6092] netlink: 'syz.1.75': attribute type 3 has an invalid length. [ 57.476094][ T6092] netlink: 'syz.1.75': attribute type 3 has an invalid length. [ 57.479463][ T6092] netlink: 'syz.1.75': attribute type 3 has an invalid length. [ 57.542354][ T42] kauditd_printk_skb: 71 callbacks suppressed [ 57.542485][ T42] audit: type=1400 audit(1785320649.630:308): avc: denied { allowed } for pid=6093 comm="syz.2.79" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 57.555394][ T42] audit: type=1400 audit(1785320649.650:309): avc: denied { create } for pid=6093 comm="syz.2.79" anonclass=[io_uring] scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 58.050421][ T6104] mmap: syz.2.82 (6104) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 58.256465][ T6113] netlink: 8 bytes leftover after parsing attributes in process `syz.1.85'. [ 58.631235][ T5751] Bluetooth: hci2: unexpected Set CIG Parameters response data [ 58.808390][ T42] audit: type=1400 audit(1785320650.900:310): avc: denied { create } for pid=6141 comm="syz.1.97" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 58.814633][ T42] audit: type=1400 audit(1785320650.900:311): avc: denied { setopt } for pid=6141 comm="syz.1.97" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 58.854152][ T6144] netlink: 8 bytes leftover after parsing attributes in process `syz.1.98'. [ 59.273835][ T6161] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 59.275521][ T42] audit: type=1400 audit(1785320651.360:312): avc: denied { map } for pid=6157 comm="syz.1.104" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=9961 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 59.292018][ T42] audit: type=1400 audit(1785320651.370:313): avc: denied { read write } for pid=6157 comm="syz.1.104" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=9961 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 59.302877][ T42] audit: type=1400 audit(1785320651.370:314): avc: denied { bind } for pid=6157 comm="syz.1.104" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 59.311285][ T42] audit: type=1400 audit(1785320651.370:315): avc: denied { write } for pid=6157 comm="syz.1.104" lport=20003 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 59.320288][ T42] audit: type=1400 audit(1785320651.390:316): avc: denied { connect } for pid=6157 comm="syz.1.104" lport=20003 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 59.369739][ C3] usb 5-1: yurex_control_callback - control failed: -2 [ 59.377387][ T2187] usb 5-1: USB disconnect, device number 3 [ 59.393217][ T2187] yurex 5-1:0.50: USB YUREX #0 now disconnected [ 59.426579][ T42] audit: type=1400 audit(1785320651.520:317): avc: denied { shutdown } for pid=6157 comm="syz.1.104" laddr=::1 lport=20003 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 59.462652][ T6167] netlink: 8 bytes leftover after parsing attributes in process `syz.3.107'. [ 62.084212][ T24] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 62.274378][ T24] usb 6-1: Using ep0 maxpacket: 8 [ 62.313675][ T24] usb 6-1: config 0 interface 0 altsetting 254 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 62.317342][ T24] usb 6-1: config 0 interface 0 altsetting 254 endpoint 0x81 has invalid wMaxPacketSize 0 [ 62.320464][ T24] usb 6-1: config 0 interface 0 has no altsetting 0 [ 62.322575][ T24] usb 6-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 62.326530][ T24] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 62.333347][ T24] usb 6-1: config 0 descriptor?? [ 62.379708][ T6228] overlayfs: failed to resolve './file1': -2 [ 62.644127][ T5751] Bluetooth: hci2: Controller not accepting commands anymore: ncmd = 0 [ 62.648242][ T5751] Bluetooth: hci2: Injecting HCI hardware error event [ 62.652521][ T64] Bluetooth: hci2: hardware error 0x00 [ 62.830314][ T42] kauditd_printk_skb: 19 callbacks suppressed [ 62.830357][ T42] audit: type=1400 audit(1785320654.920:337): avc: denied { remount } for pid=6241 comm="syz.3.134" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 63.239970][ T24] mcp2221 0003:04D8:00DD.0003: unknown main item tag 0x0 [ 63.242283][ T24] mcp2221 0003:04D8:00DD.0003: unknown main item tag 0x0 [ 63.244587][ T24] mcp2221 0003:04D8:00DD.0003: unknown main item tag 0x0 [ 63.246774][ T24] mcp2221 0003:04D8:00DD.0003: unknown main item tag 0x0 [ 63.248977][ T24] mcp2221 0003:04D8:00DD.0003: unknown main item tag 0x0 [ 63.251524][ T24] mcp2221 0003:04D8:00DD.0003: USB HID vff.ff Device [HID 04d8:00dd] on usb-dummy_hcd.1-1/input0 [ 63.324015][ T24] usb 6-1: USB disconnect, device number 3 [ 63.442382][ T42] audit: type=1400 audit(1785320655.530:338): avc: denied { mount } for pid=6244 comm="syz.0.135" name="/" dev="ramfs" ino=11124 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ramfs_t tclass=filesystem permissive=1 [ 63.454007][ T5751] Bluetooth: hci1: Malformed LE Event: 0x0b [ 63.626419][ T42] audit: type=1400 audit(1785320655.720:339): avc: denied { write } for pid=6256 comm="syz.0.141" name="file1" dev="9p" ino=79691961 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 63.649721][ T42] audit: type=1400 audit(1785320655.730:340): avc: denied { open } for pid=6256 comm="syz.0.141" path="/26/file0/file1" dev="9p" ino=79691961 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 63.713271][ T6262] netlink: 8 bytes leftover after parsing attributes in process `syz.1.143'. [ 63.743869][ T6264] 9pnet_virtio: no channels available for device syz [ 63.891792][ T42] audit: type=1400 audit(1785320655.980:341): avc: denied { ioctl } for pid=6273 comm="syz.3.149" path="anon_inode:[userfaultfd]" dev="anon_inodefs" ino=9137 ioctlcmd=0xaa3f scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 63.957711][ T42] audit: type=1400 audit(1785320656.050:342): avc: denied { bind } for pid=6273 comm="syz.3.149" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 63.963913][ T42] audit: type=1400 audit(1785320656.050:343): avc: denied { listen } for pid=6273 comm="syz.3.149" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 63.971495][ T42] audit: type=1400 audit(1785320656.050:344): avc: denied { accept } for pid=6273 comm="syz.3.149" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 64.113620][ T6268] smc: net device gretap0 applied user defined pnetid SYZ2 [ 64.116815][ T6268] netlink: 860 bytes leftover after parsing attributes in process `syz.2.146'. [ 64.140563][ T42] audit: type=1400 audit(1785320656.230:345): avc: denied { unmount } for pid=5736 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 64.671178][ T6318] fuse: Bad value for 'fd' [ 64.672638][ T42] audit: type=1400 audit(1785320656.760:346): avc: denied { mounton } for pid=6317 comm="syz.2.168" path="/41/file0" dev="tmpfs" ino=231 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 64.677969][ T6316] tipc: Started in network mode [ 64.681411][ T6316] tipc: Node identity 0010000000000000002, cluster identity 1 [ 64.724440][ T64] Bluetooth: hci2: Opcode 0x0c03 failed: -110 [ 64.844715][ T6321] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(6) [ 64.847274][ T6321] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 64.879245][ T6321] vhci_hcd vhci_hcd.0: Device attached [ 64.962546][ T6336] netlink: 8 bytes leftover after parsing attributes in process `syz.0.174'. [ 64.962600][ T6336] netlink: 8 bytes leftover after parsing attributes in process `syz.0.174'. [ 65.143353][ T29] usb 40-1: SetAddress Request (2) to port 0 [ 65.147082][ T29] usb 40-1: new SuperSpeed USB device number 2 using vhci_hcd [ 65.208699][ T6322] vhci_hcd: connection reset by peer [ 65.217878][ T5815] vhci_hcd vhci_hcd.1: stop threads [ 65.221494][ T5815] vhci_hcd vhci_hcd.1: release socket [ 65.231619][ T5815] vhci_hcd vhci_hcd.1: disconnect device [ 65.499524][ T6357] netlink: 4 bytes leftover after parsing attributes in process `syz.0.182'. [ 65.512145][ T6357] batadv0: entered promiscuous mode [ 65.517218][ T6357] macsec1: entered promiscuous mode [ 65.520006][ T6357] macsec1: entered allmulticast mode [ 65.522196][ T6357] batadv0: entered allmulticast mode [ 65.526522][ T6357] 8021q: adding VLAN 0 to HW filter on device macsec1 [ 65.532145][ T6357] batadv0: left allmulticast mode [ 65.534443][ T6357] batadv0: left promiscuous mode [ 65.643994][ T6360] netlink: 8 bytes leftover after parsing attributes in process `syz.2.183'. [ 65.647622][ T6360] netlink: 8 bytes leftover after parsing attributes in process `syz.2.183'. [ 66.015421][ T6386] netlink: 12 bytes leftover after parsing attributes in process `syz.2.192'. [ 66.363623][ T5838] usb 8-1: new high-speed USB device number 3 using dummy_hcd [ 66.532999][ T5838] usb 8-1: Using ep0 maxpacket: 8 [ 66.536149][ T5838] usb 8-1: config index 0 descriptor too short (expected 301, got 45) [ 66.538923][ T5838] usb 8-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 66.542034][ T5838] usb 8-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 66.545503][ T5838] usb 8-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 66.548604][ T5838] usb 8-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 66.552639][ T5838] usb 8-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 66.555510][ T5838] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 66.762751][ T5838] usb 8-1: GET_CAPABILITIES returned 0 [ 66.764650][ T5838] usbtmc 8-1:16.0: can't read capabilities [ 66.976191][ T5838] usb 8-1: USB disconnect, device number 3 [ 67.061912][ T6410] netlink: 8 bytes leftover after parsing attributes in process `syz.1.203'. [ 67.066778][ T6410] netlink: 8 bytes leftover after parsing attributes in process `syz.1.203'. [ 67.793075][ T10] usb 6-1: new high-speed USB device number 4 using dummy_hcd [ 67.961438][ T10] usb 6-1: Using ep0 maxpacket: 8 [ 67.964689][ T10] usb 6-1: config index 0 descriptor too short (expected 301, got 45) [ 67.967504][ T10] usb 6-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 67.970670][ T10] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 67.974506][ T10] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 67.977757][ T10] usb 6-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 67.982021][ T10] usb 6-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 67.987779][ T10] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 68.201689][ T10] usb 6-1: usb_control_msg returned -32 [ 68.203890][ T10] usbtmc 6-1:16.0: can't read capabilities [ 68.361133][ T6408] Set syz1 is full, maxelem 65536 reached [ 68.390558][ T42] kauditd_printk_skb: 16 callbacks suppressed [ 68.390569][ T42] audit: type=1400 audit(1785320660.480:363): avc: denied { create } for pid=6454 comm="syz.2.223" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 68.405576][ T10] usb 6-1: USB disconnect, device number 4 [ 68.423665][ T42] audit: type=1400 audit(1785320660.510:364): avc: denied { read write } for pid=5745 comm="syz-executor" name="loop2" dev="devtmpfs" ino=660 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 68.442028][ T42] audit: type=1400 audit(1785320660.520:365): avc: denied { open } for pid=5745 comm="syz-executor" path="/dev/loop2" dev="devtmpfs" ino=660 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 68.453186][ T42] audit: type=1400 audit(1785320660.520:366): avc: denied { ioctl } for pid=5745 comm="syz-executor" path="/dev/loop2" dev="devtmpfs" ino=660 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 68.462610][ T42] audit: type=1400 audit(1785320660.550:367): avc: denied { mounton } for pid=6458 comm="syz.2.224" path="/51/file0" dev="tmpfs" ino=283 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 68.495743][ T64] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci0/hci0:201' [ 68.503628][ T64] CPU: 1 UID: 0 PID: 64 Comm: kworker/u34:0 Not tainted syzkaller #0 PREEMPT(full) [ 68.503647][ T64] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 68.503658][ T64] Workqueue: hci0 hci_rx_work [ 68.503703][ T64] Call Trace: [ 68.503713][ T64] [ 68.503719][ T64] dump_stack_lvl+0x100/0x190 [ 68.503737][ T64] sysfs_warn_dup.cold+0x1c/0x28 [ 68.503761][ T64] sysfs_create_dir_ns+0x24b/0x2b0 [ 68.503793][ T64] ? __pfx_sysfs_create_dir_ns+0x10/0x10 [ 68.503813][ T64] ? find_held_lock+0x2b/0x80 [ 68.503837][ T64] ? kobject_add_internal+0x25f/0x930 [ 68.503863][ T64] ? kobject_add_internal+0x25f/0x930 [ 68.503885][ T64] ? do_raw_spin_unlock+0x145/0x1e0 [ 68.503907][ T64] kobject_add_internal+0x2c8/0x930 [ 68.503929][ T64] kobject_add+0x16a/0x1e0 [ 68.503948][ T64] ? __pfx_kobject_add+0x10/0x10 [ 68.503976][ T64] ? class_to_subsys+0x10f/0x150 [ 68.504036][ T64] ? kobject_put+0xb9/0x640 [ 68.504060][ T64] ? _raw_spin_unlock+0x28/0x50 [ 68.504114][ T64] device_add+0x294/0x1970 [ 68.504143][ T64] ? __pfx_dev_set_name+0x10/0x10 [ 68.504176][ T64] ? __pfx_device_add+0x10/0x10 [ 68.504201][ T64] ? mgmt_send_event_skb+0x2fb/0x460 [ 68.504222][ T64] hci_conn_add_sysfs+0x1a3/0x260 [ 68.504243][ T64] le_conn_complete_evt+0x11eb/0x1f60 [ 68.504259][ T64] ? __pfx_le_conn_complete_evt+0x10/0x10 [ 68.504276][ T64] ? hci_event_packet+0x186/0xcd0 [ 68.504295][ T64] hci_le_conn_complete_evt+0x23c/0x3a0 [ 68.504308][ T64] ? skb_pull_data+0x15f/0x1e0 [ 68.504352][ T64] hci_le_meta_evt+0x34a/0x5f0 [ 68.504384][ T64] ? __pfx_hci_le_conn_complete_evt+0x10/0x10 [ 68.504399][ T64] hci_event_packet+0x51c/0xcd0 [ 68.504411][ T64] ? __pfx_hci_le_meta_evt+0x10/0x10 [ 68.504429][ T64] ? __pfx_hci_event_packet+0x10/0x10 [ 68.504443][ T64] ? kcov_remote_start+0x384/0x670 [ 68.504468][ T64] ? lockdep_hardirqs_on+0x78/0x100 [ 68.504487][ T64] hci_rx_work+0x451/0xfc0 [ 68.504507][ T64] process_one_work+0xa23/0x1940 [ 68.504529][ T64] ? __pfx_process_one_work+0x10/0x10 [ 68.504551][ T64] ? __pfx_hci_rx_work+0x10/0x10 [ 68.504564][ T64] worker_thread+0x5ef/0xe50 [ 68.504581][ T64] ? kthread+0x13a/0x450 [ 68.504595][ T64] ? __pfx_worker_thread+0x10/0x10 [ 68.504608][ T64] kthread+0x370/0x450 [ 68.504623][ T64] ? __pfx_kthread+0x10/0x10 [ 68.504635][ T64] ret_from_fork+0x72b/0xd50 [ 68.504656][ T64] ? __pfx_ret_from_fork+0x10/0x10 [ 68.504677][ T64] ? __switch_to+0x800/0x10f0 [ 68.504696][ T64] ? __pfx_kthread+0x10/0x10 [ 68.504709][ T64] ret_from_fork_asm+0x1a/0x30 [ 68.504740][ T64] [ 68.504805][ T64] kobject: kobject_add_internal failed for hci0:201 with -EEXIST, don't try to register things with the same name in the same directory. [ 68.540942][ T42] audit: type=1400 audit(1785320660.630:368): avc: denied { write } for pid=6458 comm="syz.2.224" name="file0" dev="fuse" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=chr_file permissive=1 [ 68.541475][ T64] Bluetooth: hci0: failed to register connection device [ 68.542830][ T42] audit: type=1400 audit(1785320660.630:369): avc: denied { open } for pid=6458 comm="syz.2.224" path="/51/file0/file0" dev="fuse" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=chr_file permissive=1 [ 68.873070][ T24] usb 8-1: new high-speed USB device number 4 using dummy_hcd [ 69.023252][ T24] usb 8-1: Using ep0 maxpacket: 8 [ 69.037492][ T24] usb 8-1: config 0 has no interfaces? [ 69.046829][ T24] usb 8-1: New USB device found, idVendor=0582, idProduct=0025, bcdDevice= 0.40 [ 69.048247][ T6484] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(6) [ 69.050766][ T24] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 69.051824][ T6484] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 69.056988][ T6484] vhci_hcd vhci_hcd.0: Device attached [ 69.057452][ T6485] __nla_validate_parse: 2 callbacks suppressed [ 69.057462][ T6485] netlink: 87 bytes leftover after parsing attributes in process `syz.2.233'. [ 69.064133][ T42] audit: type=1400 audit(1785320661.150:370): avc: denied { create } for pid=6471 comm="syz.0.229" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 69.070153][ T24] usb 8-1: Product: syz [ 69.072888][ T24] usb 8-1: Manufacturer: syz [ 69.075540][ T24] usb 8-1: SerialNumber: syz [ 69.101175][ T24] usb 8-1: config 0 descriptor?? [ 69.198077][ T6490] netlink: 8 bytes leftover after parsing attributes in process `syz.1.234'. [ 69.323067][ T5886] usb 38-1: SetAddress Request (2) to port 0 [ 69.325109][ T5886] usb 38-1: new SuperSpeed USB device number 2 using vhci_hcd [ 69.356246][ T6464] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 69.461400][ T6464] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 69.514313][ T10] usb 8-1: USB disconnect, device number 4 [ 69.621123][ T6486] vhci_hcd: connection reset by peer [ 69.629065][ T5815] vhci_hcd vhci_hcd.0: stop threads [ 69.631107][ T5815] vhci_hcd vhci_hcd.0: release socket [ 69.634511][ T5815] vhci_hcd vhci_hcd.0: disconnect device [ 70.010858][ T5838] bond_slave_0: entered promiscuous mode [ 70.014110][ T5838] bond_slave_1: entered promiscuous mode [ 70.015003][ T42] audit: type=1400 audit(1785320662.110:371): avc: denied { create } for pid=6519 comm="syz.2.249" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 70.022641][ T42] audit: type=1400 audit(1785320662.110:372): avc: denied { connect } for pid=6519 comm="syz.2.249" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 70.243723][ T29] usb 40-1: device descriptor read/8, error -110 [ 70.633565][ T29] usb usb40-port1: attempt power cycle [ 71.208053][ T1446] ieee802154 phy0 wpan0: encryption failed: -22 [ 71.214937][ T1446] ieee802154 phy1 wpan1: encryption failed: -22 [ 71.478301][ T6558] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 71.687652][ T29] usb usb40-port1: unable to enumerate USB device [ 71.763623][ T6585] netlink: 8 bytes leftover after parsing attributes in process `syz.3.277'. [ 72.156390][ T6606] netlink: 8 bytes leftover after parsing attributes in process `syz.0.286'. [ 72.441412][ T6615] syz.0.289 uses obsolete (PF_INET,SOCK_PACKET) [ 73.398990][ T6638] netlink: 8 bytes leftover after parsing attributes in process `syz.3.295'. [ 73.561982][ T6644] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 73.782913][ T42] kauditd_printk_skb: 35 callbacks suppressed [ 73.786847][ T42] audit: type=1400 audit(1785320665.870:408): avc: denied { setopt } for pid=6658 comm="syz.3.305" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 73.793469][ T42] audit: type=1400 audit(1785320665.890:409): avc: denied { read } for pid=6658 comm="syz.3.305" name="snapshot" dev="devtmpfs" ino=98 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 73.800249][ T42] audit: type=1400 audit(1785320665.890:410): avc: denied { open } for pid=6658 comm="syz.3.305" path="/dev/snapshot" dev="devtmpfs" ino=98 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 73.865521][ T6659] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 73.868987][ T6659] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 73.889447][ T6659] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 73.908339][ T6659] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 73.915984][ T6659] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 73.926602][ T6659] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 73.954781][ T6665] netlink: 8 bytes leftover after parsing attributes in process `syz.2.304'. [ 74.026243][ T42] audit: type=1400 audit(1785320666.120:411): avc: denied { listen } for pid=6670 comm="syz.3.309" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 74.167547][ T6668] netlink: 8 bytes leftover after parsing attributes in process `syz.0.308'. [ 74.172649][ T42] audit: type=1400 audit(1785320666.260:412): avc: denied { create } for pid=6666 comm="syz.0.308" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1 [ 74.414371][ T5886] usb 38-1: device descriptor read/8, error -110 [ 74.833967][ T5886] usb usb38-port1: attempt power cycle [ 74.929482][ T6684] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 75.156598][ T6691] smpboot: CPU 1 is now offline [ 75.227719][ T6699] netlink: 8 bytes leftover after parsing attributes in process `syz.3.318'. [ 75.262696][ T42] audit: type=1400 audit(1785320667.350:413): avc: denied { write } for pid=6702 comm="syz.3.320" name="renderD128" dev="devtmpfs" ino=634 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 75.351701][ T6710] netlink: 76 bytes leftover after parsing attributes in process `syz.2.321'. [ 75.359374][ T42] audit: type=1400 audit(1785320667.450:414): avc: denied { map } for pid=6704 comm="syz.2.321" path="/dev/nullb0" dev="devtmpfs" ino=707 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 75.374140][ T42] audit: type=1400 audit(1785320667.450:415): avc: denied { execute } for pid=6704 comm="syz.2.321" path="/dev/nullb0" dev="devtmpfs" ino=707 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 75.376327][ T6710] Trying to write to read-only block-device nullb0 [ 75.387556][ T42] audit: type=1400 audit(1785320667.470:416): avc: denied { ioctl } for pid=6704 comm="syz.2.321" path="/dev/nullb0" dev="devtmpfs" ino=707 ioctlcmd=0x125d scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 75.405008][ T5886] usb usb38-port1: unable to enumerate USB device [ 75.557735][ T42] audit: type=1400 audit(1785320667.650:417): avc: denied { module_load } for pid=6708 comm="syz.3.323" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=system permissive=1 [ 75.558885][ T6712] Invalid ELF header magic: != ELF [ 75.758614][ T6720] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 75.933965][ T64] Bluetooth: hci3: command 0x0c1a tx timeout [ 75.938320][ T5751] Bluetooth: hci1: command 0x0c1a tx timeout [ 75.942615][ T848] libceph: connect (1)[c::]:6789 error -101 [ 75.950780][ T848] libceph: mon0 (1)[c::]:6789 connect error [ 75.961782][ T6723] ceph: No mds server is up or the cluster is laggy [ 76.029274][ T6728] netlink: 8 bytes leftover after parsing attributes in process `syz.1.328'. [ 76.088155][ T6732] capability: warning: `syz.0.330' uses deprecated v2 capabilities in a way that may be insecure [ 76.096818][ T6732] overlayfs: failed to create directory ./bus/work (errno: 13); mounting read-only [ 76.100973][ T6732] overlayfs: fs on '.' does not support file handles, falling back to index=off,nfs_export=off. [ 76.111245][ T6734] Set syz1 is full, maxelem 65536 reached [ 77.049663][ T6758] netlink: 8 bytes leftover after parsing attributes in process `syz.3.339'. [ 77.086673][ T6760] netlink: 8 bytes leftover after parsing attributes in process `syz.0.340'. [ 77.212667][ T6770] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 77.333686][ T6767] openvswitch: netlink: Duplicate key (type 6). [ 77.498113][ T6781] syzkaller0: entered promiscuous mode [ 77.500395][ T6781] syzkaller0: entered allmulticast mode [ 77.626165][ T6791] netlink: 8 bytes leftover after parsing attributes in process `syz.1.353'. [ 77.684333][ T6794] smpboot: Booting Node 0 Processor 1 APIC 0x1 [ 77.855326][ T6800] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 77.972145][ T6810] input: syz0 as /devices/virtual/input/input5 [ 78.013076][ T64] Bluetooth: hci3: command 0x0c1a tx timeout [ 78.015887][ T5751] Bluetooth: hci1: command 0x0c1a tx timeout [ 78.020006][ T6812] tipc: Started in network mode [ 78.022706][ T6812] tipc: Node identity 00000000000000000000000000000001, cluster identity 4711 [ 78.027359][ T6812] tipc: New replicast peer: fe80:0000:0000:0000:0000:0000:0000:00bb [ 78.031776][ T6812] tipc: Enabled bearer , priority 10 [ 78.100574][ T6814] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=1424729573 (182365385344 ns) > initial count (134528494848 ns). Using initial count to start timer. [ 78.103595][ T6818] loop1: detected capacity change from 0 to 32768 [ 78.117810][ T6818] loop2: detected capacity change from 0 to 32768 [ 78.123237][ T6818] loop3: detected capacity change from 0 to 32768 [ 78.209076][ T6819] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 78.216373][ T6818] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 78.220630][ T6819] block device autoloading is deprecated and will be removed. [ 78.265495][ T6825] netlink: 12 bytes leftover after parsing attributes in process `syz.0.366'. [ 78.824490][ T5838] IPVS: starting estimator thread 0... [ 78.933820][ T6837] IPVS: using max 29 ests per chain, 69600 per kthread [ 79.090921][ T5886] tipc: Node number set to 1 [ 79.481784][ T6851] netlink: 8 bytes leftover after parsing attributes in process `syz.0.373'. [ 79.614771][ T5823] libceph: connect (1)[c::]:6789 error -101 [ 79.622784][ T5823] libceph: mon0 (1)[c::]:6789 connect error [ 79.708514][ T6858] ceph: No mds server is up or the cluster is laggy [ 79.821696][ T6868] input: syz0 as /devices/virtual/input/input6 [ 79.857768][ T42] kauditd_printk_skb: 54 callbacks suppressed [ 79.857783][ T42] audit: type=1400 audit(1785320671.950:472): avc: denied { map } for pid=6869 comm="syz.3.379" path="socket:[14013]" dev="sockfs" ino=14013 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tcp_socket permissive=1 [ 79.988467][ T6872] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(8) [ 79.990863][ T6872] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 80.000312][ T6872] vhci_hcd vhci_hcd.0: Device attached [ 80.011231][ T42] audit: type=1400 audit(1785320672.100:473): avc: denied { mounton } for pid=6845 comm="syz.1.372" path="/syzcgroup/unified/syz1" dev="cgroup2" ino=128 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=dir permissive=1 [ 80.023125][ T42] audit: type=1400 audit(1785320672.110:474): avc: denied { read append } for pid=6882 comm="syz.0.382" name="uinput" dev="devtmpfs" ino=944 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 80.027727][ T6883] input: syz0 as /devices/virtual/input/input7 [ 80.064326][ T6872] erofs (device sr0): cannot find valid erofs superblock [ 80.096622][ T64] Bluetooth: hci3: command 0x0c1a tx timeout [ 80.099439][ T5751] Bluetooth: hci1: command 0x0c1a tx timeout [ 80.180661][ T6886] netlink: 8 bytes leftover after parsing attributes in process `syz.0.383'. [ 80.187156][ T6879] vhci_hcd: connection closed [ 80.189296][ T5815] vhci_hcd vhci_hcd.1: stop threads [ 80.198092][ T5815] vhci_hcd vhci_hcd.1: release socket [ 80.208465][ T5815] vhci_hcd vhci_hcd.1: disconnect device [ 80.263421][ T5823] usb 40-1: enqueue for inactive port 0 [ 80.405505][ T6895] process 'syz.0.386' launched './file1' with NULL argv: empty string added [ 80.472706][ T42] audit: type=1400 audit(1785320672.500:475): avc: denied { execute } for pid=6891 comm="syz.0.386" name="file1" dev="tmpfs" ino=548 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 80.483543][ T42] audit: type=1400 audit(1785320672.510:476): avc: denied { execute_no_trans } for pid=6891 comm="syz.0.386" path="/103/file1" dev="tmpfs" ino=548 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 80.520443][ T42] audit: type=1400 audit(1785320672.610:477): avc: denied { mount } for pid=6889 comm="syz.2.385" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 80.631767][ T42] audit: type=1400 audit(1785320672.720:478): avc: denied { create } for pid=6902 comm="syz.2.387" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 80.640458][ T42] audit: type=1400 audit(1785320672.730:479): avc: denied { setopt } for pid=6902 comm="syz.2.387" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 80.652280][ T42] audit: type=1400 audit(1785320672.730:480): avc: denied { getopt } for pid=6902 comm="syz.2.387" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 80.659785][ T42] audit: type=1400 audit(1785320672.730:481): avc: denied { read append } for pid=6902 comm="syz.2.387" name="fb0" dev="devtmpfs" ino=637 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1 [ 80.754156][ T5823] usb usb40-port1: attempt power cycle [ 80.848276][ T6912] netlink: 8 bytes leftover after parsing attributes in process `syz.1.392'. [ 81.069659][ T9] usb 7-1: new high-speed USB device number 2 using dummy_hcd [ 81.078787][ T6920] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(6) [ 81.081621][ T6920] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 81.094448][ T6920] vhci_hcd vhci_hcd.0: Device attached [ 81.234435][ T9] usb 7-1: Using ep0 maxpacket: 16 [ 81.241537][ T9] usb 7-1: config 0 has an invalid interface number: 132 but max is 0 [ 81.251600][ T9] usb 7-1: config 0 has no interface number 0 [ 81.263315][ T9] usb 7-1: New USB device found, idVendor=05ac, idProduct=0291, bcdDevice=43.25 [ 81.271201][ T9] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 81.278258][ T9] usb 7-1: Product: syz [ 81.280026][ T9] usb 7-1: Manufacturer: syz [ 81.289280][ T9] usb 7-1: SerialNumber: syz [ 81.299121][ T9] usb 7-1: config 0 descriptor?? [ 81.314530][ T9] hub 7-1:0.132: bad descriptor, ignoring hub [ 81.317325][ T5823] usb usb40-port1: unable to enumerate USB device [ 81.329817][ T9] hub 7-1:0.132: probe with driver hub failed with error -5 [ 81.337652][ T9] input: bcm5974 as /devices/platform/dummy_hcd.2/usb7/7-1/7-1:0.132/input/input8 [ 81.383479][ T40] vhci_hcd vhci_hcd.1: vhci_device speed not set [ 81.582110][ T1354] cfg80211: failed to load regulatory.db [ 81.733263][ T40] usb 39-1: new full-speed USB device number 2 using vhci_hcd [ 81.794599][ T6921] vhci_hcd: connection closed [ 81.799785][ T5815] vhci_hcd vhci_hcd.1: stop threads [ 81.806679][ T5815] vhci_hcd vhci_hcd.1: release socket [ 81.810312][ T5815] vhci_hcd vhci_hcd.1: disconnect device [ 82.106735][ T40] usb 39-1: enqueue for inactive port 0 [ 82.199768][ T6946] netlink: 8 bytes leftover after parsing attributes in process `syz.0.403'. [ 82.213158][ T40] vhci_hcd vhci_hcd.1: vhci_device speed not set [ 82.366086][ T5751] Bluetooth: hci1: unexpected event for opcode 0x2040 [ 82.425320][ T6970] netlink: 8 bytes leftover after parsing attributes in process `syz.1.414'. [ 82.640634][ T6990] loop1: detected capacity change from 0 to 32768 [ 82.644136][ T6990] loop2: detected capacity change from 0 to 32768 [ 82.663986][ T6990] loop3: detected capacity change from 0 to 32768 [ 82.671605][ T6990] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 83.356278][ T1354] usb 8-1: new high-speed USB device number 5 using dummy_hcd [ 83.496318][ T6994] md: could not open device unknown-block(0,0). [ 83.510989][ T6994] md: error, md_import_device() returned -6 [ 83.723036][ T1354] usb 8-1: Using ep0 maxpacket: 32 [ 83.731292][ T1354] usb 8-1: config 0 has no interfaces? [ 83.766896][ T1354] usb 8-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 83.794918][ T1354] usb 8-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 83.801453][ T1354] usb 8-1: Product: syz [ 83.818587][ T1354] usb 8-1: Manufacturer: syz [ 83.828562][ T1354] usb 8-1: SerialNumber: syz [ 83.995153][ T1354] usb 8-1: config 0 descriptor?? [ 84.544053][ T7046] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 84.691968][ T7050] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 84.821183][ T7037] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 84.907783][ T42] kauditd_printk_skb: 20 callbacks suppressed [ 84.907813][ T42] audit: type=1400 audit(1785320677.000:502): avc: denied { prog_load } for pid=7068 comm="syz.0.437" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 85.059975][ T42] audit: type=1400 audit(1785320677.150:503): avc: denied { map_create } for pid=7076 comm="syz.0.438" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 85.070637][ T7077] Bluetooth: MGMT ver 1.23 [ 85.114209][ T42] audit: type=1400 audit(1785320677.210:504): avc: denied { map_read map_write } for pid=7059 comm="syz.2.435" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 85.287067][ T5886] usb 8-1: USB disconnect, device number 5 [ 85.567679][ T42] audit: type=1400 audit(1785320677.660:505): avc: denied { prog_run } for pid=7102 comm="syz.1.445" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 85.592219][ T9] usb 7-1: USB disconnect, device number 2 [ 85.633160][ T42] audit: type=1400 audit(1785320677.720:506): avc: denied { ioctl } for pid=7102 comm="syz.1.445" path="/dev/binderfs/binder0" dev="binder" ino=13 ioctlcmd=0x6201 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 85.648072][ T42] audit: type=1400 audit(1785320677.740:507): avc: denied { ioctl } for pid=7102 comm="syz.1.445" path="socket:[13043]" dev="sockfs" ino=13043 ioctlcmd=0x7453 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 86.010426][ T42] audit: type=1400 audit(1785320678.100:508): avc: denied { ioctl } for pid=7109 comm="syz.3.447" path="socket:[13058]" dev="sockfs" ino=13058 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 86.133197][ T42] audit: type=1400 audit(1785320678.230:509): avc: denied { create } for pid=7116 comm="syz.1.450" anonclass=[userfaultfd] scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 86.150800][ T42] audit: type=1400 audit(1785320678.240:510): avc: denied { ioctl } for pid=7116 comm="syz.1.450" path="anon_inode:[userfaultfd]" dev="anon_inodefs" ino=15342 ioctlcmd=0xaa3f scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 86.167000][ T7117] lo: entered allmulticast mode [ 86.168541][ T7117] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 86.240490][ T7121] netlink: 20 bytes leftover after parsing attributes in process `syz.2.451'. [ 86.257889][ T7121] team0 (unregistering): Port device team_slave_0 removed [ 86.275030][ T7121] team0 (unregistering): Port device team_slave_1 removed [ 86.285494][ T7121] team0 (unregistering): Port device dummy0 removed [ 86.386948][ T7121] warning: `syz.2.451' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 86.421461][ T42] audit: type=1400 audit(1785320678.500:511): avc: denied { read } for pid=7119 comm="syz.2.451" name="ptp1" dev="devtmpfs" ino=1289 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 87.151133][ T7140] overlayfs: failed to decode file handle (len=29, type=248, flags=0, err=-22) [ 87.653026][ T5822] usb 6-1: new high-speed USB device number 5 using dummy_hcd [ 87.827588][ T5822] usb 6-1: config index 0 descriptor too short (expected 45, got 36) [ 87.835491][ T5822] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 87.840322][ T5822] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 87.847158][ T5822] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 87.849125][ T7183] Illegal XDP return value 4294967294 on prog (id 17) dev N/A, expect packet loss! [ 87.853202][ T5822] usb 6-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 87.860728][ T5822] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 87.867836][ T5822] usb 6-1: config 0 descriptor?? [ 88.286106][ T5822] plantronics 0003:047F:FFFF.0004: reserved main item tag 0xd [ 88.309718][ T5822] plantronics 0003:047F:FFFF.0004: hiddev0,hidraw1: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.1-1/input0 [ 88.527879][ T7205] netlink: 8 bytes leftover after parsing attributes in process `syz.3.482'. [ 88.562337][ T5822] usb 6-1: USB disconnect, device number 5 [ 88.760701][ T7222] dummy0: entered promiscuous mode [ 88.764656][ T7222] dummy0: left promiscuous mode [ 89.365689][ T7248] block2mtd: device name too long [ 89.478081][ T7259] loop2: detected capacity change from 0 to 32768 [ 89.485892][ T7259] loop3: detected capacity change from 0 to 32768 [ 89.497858][ T7259] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 89.543275][ T7259] md: array md0 already has disks! [ 89.703853][ T7259] md: could not open device unknown-block(0,0). [ 89.705862][ T7259] md: error, md_import_device() returned -6 [ 89.719287][ T7265] md: could not open device unknown-block(7,1). [ 89.722491][ T7265] md: error, md_import_device() returned -16 [ 89.913408][ T42] kauditd_printk_skb: 21 callbacks suppressed [ 89.913420][ T42] audit: type=1400 audit(1785320682.010:533): avc: denied { write } for pid=7275 comm="syz.3.509" name="node" dev="configfs" ino=13218 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 89.949722][ T7277] tmpfs: Unknown parameter 'grpquota/cluster/mycluster/node/mynode/ipv4_address' [ 90.657664][ T42] audit: type=1400 audit(1785320682.750:534): avc: denied { write } for pid=7284 comm="syz.2.512" name="usbmon6" dev="devtmpfs" ino=757 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 90.667988][ T42] audit: type=1400 audit(1785320682.750:535): avc: denied { ioctl } for pid=7284 comm="syz.2.512" path="/dev/usbmon6" dev="devtmpfs" ino=757 ioctlcmd=0x9207 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 90.709481][ T7289] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 90.934015][ T40] usb 6-1: new high-speed USB device number 6 using dummy_hcd [ 91.077854][ T42] audit: type=1326 audit(1785320683.170:536): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7297 comm="syz.2.516" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6fc6f9de99 code=0x7ffc0000 [ 91.215436][ T42] audit: type=1326 audit(1785320683.170:537): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7297 comm="syz.2.516" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6fc6f9de99 code=0x7ffc0000 [ 91.290608][ T42] audit: type=1326 audit(1785320683.170:538): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7297 comm="syz.2.516" exe="/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7f6fc6f5e6ce code=0x7ffc0000 [ 91.329957][ T42] audit: type=1326 audit(1785320683.170:539): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7297 comm="syz.2.516" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6fc6f9de99 code=0x7ffc0000 [ 91.351551][ T42] audit: type=1326 audit(1785320683.170:540): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7297 comm="syz.2.516" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6fc6f9de99 code=0x7ffc0000 [ 91.359207][ T42] audit: type=1326 audit(1785320683.170:541): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7297 comm="syz.2.516" exe="/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f6fc6f9de99 code=0x7ffc0000 [ 91.366386][ T42] audit: type=1326 audit(1785320683.170:542): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7297 comm="syz.2.516" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6fc6f9de99 code=0x7ffc0000 [ 91.490388][ T9] IPVS: starting estimator thread 0... [ 91.572996][ T40] usb 6-1: Using ep0 maxpacket: 32 [ 91.575915][ T40] usb 6-1: config 0 has no interfaces? [ 91.579914][ T40] usb 6-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 91.583134][ T7312] IPVS: using max 43 ests per chain, 103200 per kthread [ 91.583813][ T40] usb 6-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 91.589395][ T40] usb 6-1: Product: syz [ 91.591194][ T40] usb 6-1: Manufacturer: syz [ 91.593135][ T40] usb 6-1: SerialNumber: syz [ 91.600500][ T40] usb 6-1: config 0 descriptor?? [ 91.898546][ T5838] usb 6-1: USB disconnect, device number 6 [ 92.616913][ T7368] tipc: Cannot configure node identity twice [ 93.715699][ T7396] tipc: Started in network mode [ 93.723438][ T7396] tipc: Node identity 0010000000000000002, cluster identity 1 [ 93.958303][ T7380] netlink: 860 bytes leftover after parsing attributes in process `syz.3.534'. [ 94.193073][ T1354] usb 7-1: new high-speed USB device number 3 using dummy_hcd [ 94.363303][ T1354] usb 7-1: Using ep0 maxpacket: 8 [ 94.366396][ T1354] usb 7-1: config 0 interface 0 altsetting 254 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 94.370819][ T1354] usb 7-1: config 0 interface 0 altsetting 254 endpoint 0x81 has invalid wMaxPacketSize 0 [ 94.378969][ T1354] usb 7-1: config 0 interface 0 has no altsetting 0 [ 94.382039][ T1354] usb 7-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 94.387262][ T1354] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 94.393285][ T1354] usb 7-1: config 0 descriptor?? [ 94.812658][ T1354] mcp2221 0003:04D8:00DD.0005: unknown main item tag 0x0 [ 94.815671][ T1354] mcp2221 0003:04D8:00DD.0005: unknown main item tag 0x0 [ 94.817934][ T1354] mcp2221 0003:04D8:00DD.0005: unknown main item tag 0x0 [ 94.820134][ T1354] mcp2221 0003:04D8:00DD.0005: unknown main item tag 0x0 [ 94.822416][ T1354] mcp2221 0003:04D8:00DD.0005: unknown main item tag 0x0 [ 94.826622][ T1354] mcp2221 0003:04D8:00DD.0005: USB HID vff.ff Device [HID 04d8:00dd] on usb-dummy_hcd.2-1/input0 [ 95.034760][ T1354] usb 7-1: USB disconnect, device number 3 [ 95.132023][ C3] vcan0: j1939_tp_rxtimer: 0xffff88803ee9b400: rx timeout, send abort [ 95.632099][ C3] vcan0: j1939_tp_rxtimer: 0xffff88803ee98400: rx timeout, send abort [ 95.635521][ C3] vcan0: j1939_tp_rxtimer: 0xffff88803ee9b400: abort rx timeout. Force session deactivation [ 95.866979][ T42] kauditd_printk_skb: 70 callbacks suppressed [ 95.866990][ T42] audit: type=1400 audit(1785320687.960:613): avc: denied { bind } for pid=7493 comm="syz.2.583" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 96.135379][ C3] vcan0: j1939_tp_rxtimer: 0xffff88803ee98400: abort rx timeout. Force session deactivation [ 96.276865][ T7519] netlink: 8 bytes leftover after parsing attributes in process `syz.1.594'. [ 96.828333][ T42] audit: type=1400 audit(1785320688.920:614): avc: denied { write } for pid=7582 comm="syz.1.622" name="functions" dev="configfs" ino=8722 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 96.836909][ T848] usb 8-1: new high-speed USB device number 6 using dummy_hcd [ 96.841411][ T42] audit: type=1400 audit(1785320688.930:615): avc: denied { write } for pid=7582 comm="syz.1.622" name="naa.1234567890abcdef" dev="configfs" ino=10590 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 96.845664][ T7583] [ 96.849836][ T7583] ====================================================== [ 96.852476][ T7583] WARNING: possible circular locking dependency detected [ 96.854824][ T7583] syzkaller #0 Not tainted [ 96.856318][ T7583] ------------------------------------------------------ [ 96.858524][ T7583] syz.1.622/7583 is trying to acquire lock: [ 96.860430][ T7583] ffff888020203580 (&sb->s_type->i_mutex_key#24){++++}-{4:4}, at: configfs_depend_item_unlocked+0xf3/0x6a0 [ 96.863992][ T7583] [ 96.863992][ T7583] but task is already holding lock: [ 96.866297][ T7583] ffff88802e5e8118 (&opts->dep_lock){+.+.}-{4:4}, at: usbg_make_tpg+0x1a4/0x620 [ 96.869144][ T7583] [ 96.869144][ T7583] which lock already depends on the new lock. [ 96.869144][ T7583] [ 96.872326][ T7583] [ 96.872326][ T7583] the existing dependency chain (in reverse order) is: [ 96.875101][ T7583] [ 96.875101][ T7583] -> #2 (&opts->dep_lock){+.+.}-{4:4}: [ 96.877495][ T7583] lock_acquire+0x1b9/0x370 [ 96.879085][ T7583] __mutex_lock+0x1a4/0x1bd0 [ 96.880831][ T7583] tcm_set_name+0x29/0xb0 [ 96.882535][ T7583] function_make+0x21c/0x3f0 [ 96.884169][ T7583] configfs_mkdir+0x51e/0xb70 [ 96.885819][ T7583] vfs_mkdir+0x361/0x850 [ 96.887476][ T7583] filename_mkdirat+0x48b/0x5e0 [ 96.889214][ T7583] __x64_sys_mkdir+0x6b/0x90 [ 96.890836][ T7583] do_syscall_64+0x115/0x870 [ 96.892632][ T7583] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 96.895098][ T7583] [ 96.895098][ T7583] -> #1 (gadget_subsys.su_mutex){+.+.}-{4:4}: [ 96.897970][ T7583] lock_acquire+0x1b9/0x370 [ 96.899762][ T7583] __mutex_lock+0x1a4/0x1bd0 [ 96.901384][ T7583] configfs_rmdir+0x5ae/0x950 [ 96.903082][ T7583] vfs_rmdir+0x328/0x8a0 [ 96.904762][ T7583] filename_rmdir+0x31a/0x5c0 [ 96.906496][ T7583] __x64_sys_rmdir+0x46/0x70 [ 96.908256][ T7583] do_syscall_64+0x115/0x870 [ 96.910219][ T7583] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 96.912700][ T7583] [ 96.912700][ T7583] -> #0 (&sb->s_type->i_mutex_key#24){++++}-{4:4}: [ 96.916067][ T7583] check_prev_add+0xeb/0xe60 [ 96.918087][ T7583] __lock_acquire+0x136c/0x1a40 [ 96.920182][ T7583] lock_acquire+0x1b9/0x370 [ 96.921790][ T7583] down_write+0x8b/0x1f0 [ 96.923313][ T7583] configfs_depend_item_unlocked+0xf3/0x6a0 [ 96.925324][ T7583] usbg_make_tpg+0x261/0x620 [ 96.926952][ T7583] target_fabric_make_tpg+0xab/0x8c0 [ 96.928788][ T7583] configfs_mkdir+0x51e/0xb70 [ 96.930429][ T7583] vfs_mkdir+0x361/0x850 [ 96.931935][ T7583] filename_mkdirat+0x48b/0x5e0 [ 96.933604][ T7583] __x64_sys_mkdir+0x6b/0x90 [ 96.935213][ T7583] do_syscall_64+0x115/0x870 [ 96.936828][ T7583] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 96.938824][ T7583] [ 96.938824][ T7583] other info that might help us debug this: [ 96.938824][ T7583] [ 96.942077][ T7583] Chain exists of: [ 96.942077][ T7583] &sb->s_type->i_mutex_key#24 --> gadget_subsys.su_mutex --> &opts->dep_lock [ 96.942077][ T7583] [ 96.946568][ T7583] Possible unsafe locking scenario: [ 96.946568][ T7583] [ 96.948858][ T7583] CPU0 CPU1 [ 96.950548][ T7583] ---- ---- [ 96.952164][ T7583] lock(&opts->dep_lock); [ 96.953643][ T7583] lock(gadget_subsys.su_mutex); [ 96.955988][ T7583] lock(&opts->dep_lock); [ 96.958156][ T7583] lock(&sb->s_type->i_mutex_key#24); [ 96.959872][ T7583] [ 96.959872][ T7583] *** DEADLOCK *** [ 96.959872][ T7583] [ 96.962367][ T7583] 5 locks held by syz.1.622/7583: [ 96.963947][ T7583] #0: ffff888024166450 (sb_writers#13){.+.+}-{0:0}, at: filename_create+0x10d/0x400 [ 96.966867][ T7583] #1: ffff88803e4f0f80 (&sb->s_type->i_mutex_key#7/1){+.+.}-{4:4}, at: filename_create+0x1c0/0x400 [ 96.970185][ T7583] #2: ffffffff8fd87a68 (&subsys->su_mutex){+.+.}-{4:4}, at: configfs_mkdir+0x4b5/0xb70 [ 96.973195][ T7583] #3: ffffffff90252b60 (tpg_instances_lock){+.+.}-{4:4}, at: usbg_make_tpg+0x10b/0x620 [ 96.976187][ T7583] #4: ffff88802e5e8118 (&opts->dep_lock){+.+.}-{4:4}, at: usbg_make_tpg+0x1a4/0x620 [ 96.979114][ T7583] [ 96.979114][ T7583] stack backtrace: [ 96.980954][ T7583] CPU: 2 UID: 0 PID: 7583 Comm: syz.1.622 Not tainted syzkaller #0 PREEMPT(full) [ 96.980968][ T7583] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 96.980975][ T7583] Call Trace: [ 96.980990][ T7583] [ 96.980995][ T7583] dump_stack_lvl+0x100/0x190 [ 96.981012][ T7583] print_circular_bug.cold+0x178/0x1c7 [ 96.981036][ T7583] check_noncircular+0x146/0x160 [ 96.981052][ T7583] check_prev_add+0xeb/0xe60 [ 96.981065][ T7583] __lock_acquire+0x136c/0x1a40 [ 96.981080][ T7583] lock_acquire+0x1b9/0x370 [ 96.981092][ T7583] ? configfs_depend_item_unlocked+0xf3/0x6a0 [ 96.981108][ T7583] ? __pfx___might_resched+0x10/0x10 [ 96.981124][ T7583] down_write+0x8b/0x1f0 [ 96.981140][ T7583] ? configfs_depend_item_unlocked+0xf3/0x6a0 [ 96.981154][ T7583] ? __pfx_down_write+0x10/0x10 [ 96.981168][ T7583] configfs_depend_item_unlocked+0xf3/0x6a0 [ 96.981183][ T7583] ? __lock_acquire+0x49f/0x1a40 [ 96.981196][ T7583] usbg_make_tpg+0x261/0x620 [ 96.981208][ T7583] ? __pfx_usbg_make_tpg+0x10/0x10 [ 96.981221][ T7583] ? find_held_lock+0x2b/0x80 [ 96.981237][ T7583] ? __pfx_usbg_make_tpg+0x10/0x10 [ 96.981249][ T7583] target_fabric_make_tpg+0xab/0x8c0 [ 96.981265][ T7583] configfs_mkdir+0x51e/0xb70 [ 96.981279][ T7583] ? __pfx_target_fabric_make_tpg+0x10/0x10 [ 96.981294][ T7583] ? __pfx_configfs_mkdir+0x10/0x10 [ 96.981309][ T7583] ? inode_permission+0x374/0x620 [ 96.981329][ T7583] vfs_mkdir+0x361/0x850 [ 96.981344][ T7583] filename_mkdirat+0x48b/0x5e0 [ 96.981357][ T7583] ? __pfx_filename_mkdirat+0x10/0x10 [ 96.981369][ T7583] ? strncpy_from_user+0x19d/0x2d0 [ 96.981394][ T7583] ? do_getname+0x191/0x390 [ 96.981409][ T7583] __x64_sys_mkdir+0x6b/0x90 [ 96.981423][ T7583] do_syscall_64+0x115/0x870 [ 96.981437][ T7583] ? clear_bhb_loop+0x40/0x90 [ 96.981453][ T7583] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 96.981465][ T7583] RIP: 0033:0x7f7055b9de99 [ 96.981476][ T7583] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 96.981487][ T7583] RSP: 002b:00007f7056b20028 EFLAGS: 00000246 ORIG_RAX: 0000000000000053 [ 96.981497][ T7583] RAX: ffffffffffffffda RBX: 00007f7055e25fa0 RCX: 00007f7055b9de99 [ 96.981504][ T7583] RDX: 0000000000000000 RSI: 00000000000001ff RDI: 0000200000000c00 [ 96.981511][ T7583] RBP: 00007f7055c33eaf R08: 0000000000000000 R09: 0000000000000000 [ 96.981518][ T7583] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 96.981525][ T7583] R13: 00007f7055e26038 R14: 00007f7055e25fa0 R15: 00007ffc42006e98 [ 96.981537][ T7583] [ 97.063019][ T848] usb 8-1: Using ep0 maxpacket: 8 [ 97.078428][ T848] usb 8-1: config 0 interface 0 altsetting 254 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 97.083177][ T848] usb 8-1: config 0 interface 0 altsetting 254 endpoint 0x81 has invalid wMaxPacketSize 0 [ 97.087644][ T848] usb 8-1: config 0 interface 0 has no altsetting 0 [ 97.090313][ T848] usb 8-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 97.093670][ T848] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 97.098549][ T848] usb 8-1: config 0 descriptor?? [ 97.505157][ T848] mcp2221 0003:04D8:00DD.0006: unknown main item tag 0x0 [ 97.508210][ T848] mcp2221 0003:04D8:00DD.0006: unknown main item tag 0x0 [ 97.510468][ T848] mcp2221 0003:04D8:00DD.0006: unknown main item tag 0x0 [ 97.512642][ T848] mcp2221 0003:04D8:00DD.0006: unknown main item tag 0x0 [ 97.514982][ T848] mcp2221 0003:04D8:00DD.0006: unknown main item tag 0x0 [ 97.517479][ T848] mcp2221 0003:04D8:00DD.0006: USB HID vff.ff Device [HID 04d8:00dd] on usb-dummy_hcd.3-1/input0 [ 97.708249][ T848] usb 8-1: USB disconnect, device number 6