last executing test programs: 5.777601167s ago: executing program 3 (id=4): r0 = openat$userio(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$USERIO_CMD_SET_PORT_TYPE(r0, &(0x7f0000000040)={0x1, 0x5}, 0x2) write$USERIO_CMD_REGISTER(r0, &(0x7f0000000080), 0x2) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000100)='./sys\x00', &(0x7f0000000140)='sysfs\x00', 0x0, 0x0) write$USERIO_CMD_SEND_INTERRUPT(r0, &(0x7f0000000200)={0x2, 0xfa}, 0x2) write$USERIO_CMD_SEND_INTERRUPT(r0, &(0x7f0000000210), 0x2) write$USERIO_CMD_SEND_INTERRUPT(r0, &(0x7f0000000220), 0x2) write$USERIO_CMD_SEND_INTERRUPT(r0, &(0x7f0000000230)={0x2, 0x64}, 0x2) write$USERIO_CMD_SEND_INTERRUPT(r0, &(0x7f0000000240)={0x2, 0xfa}, 0x2) write$USERIO_CMD_SEND_INTERRUPT(r0, &(0x7f0000000250)={0x2, 0x73}, 0x2) write$USERIO_CMD_SEND_INTERRUPT(r0, &(0x7f0000000260)={0x2, 0x3}, 0x2) write$USERIO_CMD_SEND_INTERRUPT(r0, &(0x7f0000000270)={0x2, 0x50}, 0x2) write$USERIO_CMD_SEND_INTERRUPT(r0, &(0x7f0000000280)={0x2, 0xfa}, 0x2) write$USERIO_CMD_SEND_INTERRUPT(r0, &(0x7f0000000290)={0x2, 0x88}, 0x2) write$USERIO_CMD_SEND_INTERRUPT(r0, &(0x7f00000002a0)={0x2, 0xb0}, 0x2) write$USERIO_CMD_SEND_INTERRUPT(r0, &(0x7f00000002b0), 0x2) write$USERIO_CMD_SEND_INTERRUPT(r0, &(0x7f00000002c0)={0x2, 0xfa}, 0x2) write$USERIO_CMD_SEND_INTERRUPT(r0, &(0x7f00000002d0)={0x2, 0xaa}, 0x2) write$USERIO_CMD_SEND_INTERRUPT(r0, &(0x7f00000002e0), 0x2) r1 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./sys/bus/serio/devices/serio0/protocol\x00', 0x1, 0x0) write(r1, &(0x7f0000000340)='alps', 0x4) r2 = openat(0xffffffffffffff9c, &(0x7f0000000380)='./sys/bus/serio/devices/serio1/protocol\x00', 0x1, 0x0) write(r2, &(0x7f00000003c0)='alps', 0x4) r3 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./sys/bus/serio/devices/serio3/protocol\x00', 0x1, 0x0) write(r3, &(0x7f0000000440)='alps', 0x4) write$USERIO_CMD_SEND_INTERRUPT(r0, &(0x7f0000000500)={0x2, 0x48}, 0x2) write$USERIO_CMD_SEND_INTERRUPT(r0, &(0x7f0000000510), 0x2) write$USERIO_CMD_SEND_INTERRUPT(r0, &(0x7f0000000520)={0x2, 0x40}, 0x2) write$USERIO_CMD_SEND_INTERRUPT(r0, &(0x7f0000000530)={0x2, 0x48}, 0x2) write$USERIO_CMD_SEND_INTERRUPT(r0, &(0x7f0000000540), 0x2) write$USERIO_CMD_SEND_INTERRUPT(r0, &(0x7f0000000550), 0x2) 5.616364899s ago: executing program 1 (id=2): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./nfsd\x00', 0x1ff) mount(&(0x7f0000000040)=@filename='none\x00', &(0x7f0000000080)='./nfsd\x00', &(0x7f00000000c0)='nfsd\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./nfsd/versions\x00', 0x2, 0x0) write(r0, &(0x7f0000000140)='-2 -3 +4 +4.1 +4.2\n', 0x13) r1 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./nfsd/portlist\x00', 0x2, 0x0) write(r1, &(0x7f00000001c0)='tcp 2049\n', 0x9) mkdirat(0xffffffffffffff9c, &(0x7f0000000300)='./v4recovery\x00', 0x1ff) r2 = openat(0xffffffffffffff9c, &(0x7f0000000340)='./nfsd/nfsv4recoverydir\x00', 0x2, 0x0) write(r2, &(0x7f0000000380)='./v4recovery\x00', 0xd) r3 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./nfsd/threads\x00', 0x2, 0x0) write(r3, &(0x7f0000000240)='1\n', 0x2) 4.94761652s ago: executing program 0 (id=6): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x3}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_START_AP(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x74, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@beacon=[@NL80211_ATTR_BEACON_HEAD={0x28, 0xe, {{{}, {}, @broadcast, @device_a, @from_mac}, 0x0, @default, 0x1, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void}}], @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}], @NL80211_ATTR_BEACON_INTERVAL={0x8}, @NL80211_ATTR_DTIM_PERIOD={0x8}, @NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_AUTH_TYPE={0x8}, @NL80211_ATTR_EXTERNAL_AUTH_SUPPORT={0x4}]}, 0x74}}, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000300)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_KEY(r3, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000003c0)={0x28, r4, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r5}, @void}}, [@NL80211_ATTR_KEY_IDX={0x5, 0x8, 0x1}, @NL80211_ATTR_KEY_DEFAULT={0x4}]}, 0x28}}, 0x0) 4.795756397s ago: executing program 2 (id=3): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = syz_kvm_setup_syzos_vm$x86(r1, &(0x7f0000c00000/0x400000)=nil) ioctl$KVM_CAP_SPLIT_IRQCHIP(r1, 0x4068aea3, &(0x7f0000000100)={0x79, 0x0, 0x18}) ioctl$KVM_SET_GSI_ROUTING(r1, 0x4008ae6a, &(0x7f0000000200)={0x1, 0x0, [{0x0, 0x0, 0x0, 0x0, @irqchip={0x2}}]}) r3 = syz_kvm_add_vcpu$x86(r2, &(0x7f0000000300)={0x0, &(0x7f0000000400)=[@wrmsr={0x65, 0x20, {0x80b}}], 0x10}) ioctl$KVM_SET_LAPIC(r3, 0x4400ae8f, &(0x7f0000000500)) ioctl$KVM_RUN(r3, 0xae80, 0x0) 4.58835192s ago: executing program 0 (id=7): syz_emit_vhci(&(0x7f0000000100)=@HCI_VENDOR_PKT, 0x2) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000200)={0x1f, 0xffff, 0x3}, 0x6) write$bt_hci(r0, &(0x7f0000000300)=ANY=[@ANYBLOB="0d000000010001"], 0x7) write$bt_hci(r0, &(0x7f0000000400)=ANY=[@ANYBLOB="05000000010001"], 0x7) write$bt_hci(r0, &(0x7f0000000500)=ANY=[@ANYBLOB="54000000110001000000000000000020000000400000007f"], 0x17) write$bt_hci(r0, &(0x7f0000000600)=ANY=[@ANYBLOB="29000000010001"], 0x7) 4.482073667s ago: executing program 4 (id=5): r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/keys\x00', 0x0, 0x0) read(r0, &(0x7f0000000100)=""/1024, 0x400) r1 = syz_open_procfs(0x0, &(0x7f0000000500)='mounts\x00') read(r1, &(0x7f0000000600)=""/1024, 0x400) 4.474688099s ago: executing program 0 (id=8): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./sys\x00', &(0x7f00000000c0)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./sys/module/usbcore/parameters/quirks\x00', 0x2, 0x0) write(r0, &(0x7f0000000140)='0fc5:1227:b\n', 0xc) close(r0) syz_usb_connect(0x0, 0x24, &(0x7f0000000200)=ANY=[@ANYBLOB="1201000200000040c50f2712000101020301090212000101008032090400000000000000"], 0x0) nanosleep(&(0x7f0000000180)={0x0, 0x5f5e100}, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./sys/bus/usb/devices/5-1/power/autosuspend_delay_ms\x00', 0x2, 0x0) write(r1, &(0x7f0000000240)='0\n', 0x2) close(r1) r2 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./sys/bus/usb/devices/5-1/power/control\x00', 0x2, 0x0) write(r2, &(0x7f00000002c0)='auto\n', 0x5) close(r2) nanosleep(&(0x7f0000000300)={0x0, 0x5f5e100}, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000340)='./sys/bus/usb/devices/5-1/power/control\x00', 0x2, 0x0) write(r3, &(0x7f0000000380)='on\n', 0x3) close(r3) nanosleep(&(0x7f00000003c0)={0x0, 0x5f5e100}, 0x0) 4.459080071s ago: executing program 2 (id=9): r0 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/comedi0\x00', 0x2, 0x0) ioctl(r0, 0x40946400, &(0x7f0000000100)="7063323132650000000000000000000000000000000200"/149) ioctl$COMEDI_INSN(r0, 0x8028650c, &(0x7f0000000200)={0x3, 0xf, &(0x7f0000000300)=[0x38, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x1}) 4.375185171s ago: executing program 4 (id=10): r0 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000000), 0x802, 0x0) write$UHID_CREATE2(r0, &(0x7f0000001000)={0xb, {'syz0\x00', 'syz0\x00', 'syz0\x00', 0x1d, 0x5, 0x57e, 0x306, 0x0, 0x0, "05010905a10105091901290a150025017501950a8102950175068103c0"}}, 0x135) nanosleep(&(0x7f0000002000)={0x1}, 0x0) r1 = syz_open_dev$hidraw(&(0x7f0000003000), 0x0, 0x2) write$hidraw(r1, &(0x7f0000004000)='12345678', 0x8) 4.359151322s ago: executing program 2 (id=11): r0 = syz_usb_connect(0x2, 0x32, &(0x7f0000000000)=ANY=[@ANYBLOB="12010002000000408680630b0000000000010902200001010080fa0904000002ffffff000705810240000007050202400000"], &(0x7f0000001000)={0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) (async) syz_usb_ep_write(r0, 0x81, 0x8, &(0x7f0000000100)="0102010400000000") (async) syz_usb_ep_write(r0, 0x81, 0xc, &(0x7f0000000200)="0104010808010008ffffffff") (async) syz_usb_ep_write(r0, 0x81, 0x5, &(0x7f0000000300)="0105010100") (async) syz_usb_ep_write(r0, 0x81, 0x5, &(0x7f0000000400)="0108010100") (async) nanosleep(&(0x7f0000000500)={0x1}, 0x0) 3.942956228s ago: executing program 1 (id=12): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = socket$inet(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r1, 0x8914, &(0x7f0000000080)={'syzkaller0\x00', 0x1}) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8916, &(0x7f00000000c0)={'syzkaller0\x00', {0x2, 0x0, @rand_addr=0x101a8c0}}) r2 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)={0x38, 0x1403, 0x1, 0x0, 0x0, "", [{{0x9, 0x2, 'syz0\x00'}, {0x8, 0x41, 'rxe\x00'}, {0x14, 0x33, 'syzkaller0\x00'}}]}, 0x38}}, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$smc(&(0x7f0000000580), r3) sendmsg$SMC_PNETID_ADD(r3, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000640)={&(0x7f00000005c0)={0x38, r4, 0x0, 0x0, 0x0, {}, [@SMC_PNETID_NAME={0x9, 0x1, 'syz0\x00'}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'syzkaller0\x00'}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz0\x00'}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x1}]}, 0x38}}, 0x0) sendmsg$SMC_PNETID_ADD(r3, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000640)={&(0x7f00000005c0)={0x38, r4, 0x0, 0x0, 0x0, {}, [@SMC_PNETID_NAME={0x9, 0x1, 'syz0\x00'}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'lo\x00'}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz0\x00'}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x1}]}, 0x38}}, 0x0) r5 = socket$inet_smc(0x2b, 0x1, 0x0) bind$inet(r5, &(0x7f0000000100)={0x2, 0x4e22, @rand_addr=0x101a8c0}, 0x10) listen(r5, 0x5) r6 = socket$inet_smc(0x2b, 0x1, 0x0) connect$inet(r6, &(0x7f0000000140)={0x2, 0x4e22, @rand_addr=0x101a8c0}, 0x10) accept4(r5, 0x0, 0x0, 0x0) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)={0x38, 0x1403, 0x1, 0x0, 0x0, "", [{{0x9, 0x2, 'syz1\x00'}, {0x8, 0x41, 'rxe\x00'}, {0x14, 0x33, 'syzkaller0\x00'}}]}, 0x38}}, 0x0) nanosleep(&(0x7f0000000300)={0x1}, 0x0) 2.922357671s ago: executing program 0 (id=13): r0 = socket$inet(0x2, 0x2, 0x0) syz_usb_connect(0x3, 0x3c, &(0x7f0000000000)=ANY=[@ANYBLOB="12010002ff000040f00a116700000102000109022a00010100c0000904000003ff000000032401070581020002000705020200020007058303400001"], 0x0) nanosleep(&(0x7f0000000100)={0x0, 0x1dcd6500}, 0x0) ioctl(r0, 0x8914, &(0x7f0000000040)="68736f300000000000000000000000000100") r1 = socket$packet(0x11, 0x2, 0x300) sendto$packet(r1, &(0x7f0000000200)="00010203040506070809", 0xa, 0x0, &(0x7f0000000300)={0x11, 0x300, 0x1}, 0x14) 1.252342702s ago: executing program 2 (id=14): syz_usb_connect(0x0, 0x24, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x97, 0xff, 0x82, 0x8, 0x2058, 0x1005, 0xc19b, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, "", [{{0x9, 0x4, 0x8f, 0x0, 0x0, 0xbf, 0x57, 0x5a}}]}}]}}, 0x0) nanosleep(&(0x7f0000000100)={0x2}, 0x0) r0 = syz_usb_connect(0x3, 0x4e, &(0x7f0000000000)=ANY=[@ANYBLOB="12010002000000401107500500010102030109023c0001010080320904000006ffffff0007058e0200020007050e02000200070501020002000705030200020007058d0200020007050d02000200"], &(0x7f00000000c0)) syz_usb_control_io(r0, &(0x7f0000000140), &(0x7f0000000180)) 1.122638227s ago: executing program 0 (id=15): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000040)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./sys/bus/pci/devices/0000:00:01.0/driver_override\x00', 0x1, 0x0) write(r0, &(0x7f0000000200)='vmwgfx\x00', 0x7) close(r0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./sys/bus/pci/drivers/vmwgfx/bind\x00', 0x1, 0x0) write(r1, &(0x7f0000000200)='0000:00:01.0\x00', 0xd) close(r1) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./sys/bus/pci/devices/0000:00:02.0/driver_override\x00', 0x1, 0x0) write(r2, &(0x7f0000000200)='vmwgfx\x00', 0x7) close(r2) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./sys/bus/pci/drivers/vmwgfx/bind\x00', 0x1, 0x0) write(r3, &(0x7f0000000200)='0000:00:02.0\x00', 0xd) close(r3) r4 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x2) ioctl$DRM_IOCTL_VERSION(r4, 0xc0406400, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000200), 0x0, &(0x7f0000000300), 0x0, &(0x7f0000000400)}) ioctl(r4, 0x40106454, &(0x7f0000000300)="010000000000000000020000007f0000") r5 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x2) ioctl$DRM_IOCTL_VERSION(r5, 0xc0406400, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000200), 0x0, &(0x7f0000000300), 0x0, &(0x7f0000000400)}) ioctl(r5, 0x40106454, &(0x7f0000000300)="010000000000000000020000007f0000") 764.782757ms ago: executing program 0 (id=16): r0 = syz_usb_connect(0x0, 0x40, &(0x7f0000000000)=ANY=[@ANYBLOB="12011001000000085f0500a800010000000109022e0001010080320904000004ff00000007050102080000070582030800010705030240000007058402400000"], 0x0) syz_usb_ep_write(r0, 0x82, 0x8, &(0x7f0000000100)="bbbbbbbbbbbbbbbb") r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x20) syz_usb_ep_write(r0, 0x82, 0x8, &(0x7f0000000100)="bbbbbbbbbbbbbbbb") write$char_usb(r1, &(0x7f0000000200)="5502000000000000", 0x8) 0s ago: executing program 3 (id=17): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./sys\x00', 0x1ff) mount(&(0x7f0000000000)=@filename='none\x00', &(0x7f0000000080)='./sys\x00', &(0x7f00000000c0)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./sys/bus/platform/devices/dummy_hcd.0/driver/unbind\x00', 0x1, 0x0) write(r0, &(0x7f0000000140)='dummy_hcd.0\x00', 0xc) r1 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./sys/bus/platform/devices/dummy_hcd.0/driver_override\x00', 0x1, 0x0) write(r1, &(0x7f00000001c0)='intel_xhci_usb_sw\x00', 0x12) r2 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./sys/bus/platform/drivers/intel_xhci_usb_sw/bind\x00', 0x1, 0x0) write(r2, &(0x7f0000000240)='dummy_hcd.0\x00', 0xc) r3 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./sys/class/usb_role_switches/dummy_hcd.0-role-switch/role\x00', 0x1, 0x0) write(r3, &(0x7f00000002c0)='host\x00', 0x5) r4 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./sys/bus/platform/devices/dummy_udc.0/driver/unbind\x00', 0x1, 0x0) write(r4, &(0x7f0000000340)='dummy_udc.0\x00', 0xc) r5 = openat(0xffffffffffffff9c, &(0x7f0000000380)='./sys/bus/platform/devices/dummy_udc.0/driver_override\x00', 0x1, 0x0) write(r5, &(0x7f00000003c0)='intel_xhci_usb_sw\x00', 0x12) r6 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./sys/bus/platform/drivers/intel_xhci_usb_sw/bind\x00', 0x1, 0x0) write(r6, &(0x7f0000000440)='dummy_udc.0\x00', 0xc) r7 = openat(0xffffffffffffff9c, &(0x7f0000000480)='./sys/class/usb_role_switches/dummy_udc.0-role-switch/role\x00', 0x1, 0x0) write(r7, &(0x7f00000004c0)='host\x00', 0x5) r8 = openat(0xffffffffffffff9c, &(0x7f0000000500)='./sys/bus/platform/devices/pcspkr/driver/unbind\x00', 0x1, 0x0) write(r8, &(0x7f0000000540)='pcspkr\x00', 0x7) r9 = openat(0xffffffffffffff9c, &(0x7f0000000580)='./sys/bus/platform/devices/pcspkr/driver_override\x00', 0x1, 0x0) write(r9, &(0x7f00000005c0)='intel_xhci_usb_sw\x00', 0x12) r10 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./sys/bus/platform/drivers/intel_xhci_usb_sw/bind\x00', 0x1, 0x0) write(r10, &(0x7f0000000640)='pcspkr\x00', 0x7) r11 = openat(0xffffffffffffff9c, &(0x7f0000000680)='./sys/class/usb_role_switches/pcspkr-role-switch/role\x00', 0x1, 0x0) write(r11, &(0x7f00000006c0)='host\x00', 0x5) r12 = openat(0xffffffffffffff9c, &(0x7f0000000700)='./sys/bus/platform/devices/serial8250/driver/unbind\x00', 0x1, 0x0) write(r12, &(0x7f0000000740)='serial8250\x00', 0xb) r13 = openat(0xffffffffffffff9c, &(0x7f0000000780)='./sys/bus/platform/devices/serial8250/driver_override\x00', 0x1, 0x0) write(r13, &(0x7f00000007c0)='intel_xhci_usb_sw\x00', 0x12) r14 = openat(0xffffffffffffff9c, &(0x7f0000000800)='./sys/bus/platform/drivers/intel_xhci_usb_sw/bind\x00', 0x1, 0x0) write(r14, &(0x7f0000000840)='serial8250\x00', 0xb) r15 = openat(0xffffffffffffff9c, &(0x7f0000000880)='./sys/class/usb_role_switches/serial8250-role-switch/role\x00', 0x1, 0x0) write(r15, &(0x7f00000008c0)='host\x00', 0x5) kernel console output (not intermixed with test programs): [ 51.846898][ T29] audit: type=1400 audit(1786958088.367:111): avc: denied { write } for pid=5445 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 51.895402][ T29] audit: type=1400 audit(1786958088.417:112): avc: denied { write } for pid=5456 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 52.518004][ T29] kauditd_printk_skb: 4 callbacks suppressed [ 52.518019][ T29] audit: type=1400 audit(1786958089.037:117): avc: denied { write } for pid=5487 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 52.582510][ T29] audit: type=1400 audit(1786958089.097:118): avc: denied { write } for pid=5498 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 52.749255][ T29] audit: type=1400 audit(1786958089.267:119): avc: denied { write } for pid=5501 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 52.804954][ T29] audit: type=1400 audit(1786958089.327:120): avc: denied { write } for pid=5512 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 53.158970][ T29] audit: type=1400 audit(1786958089.677:121): avc: denied { write } for pid=5515 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 53.201370][ T29] audit: type=1400 audit(1786958089.717:122): avc: denied { write } for pid=5526 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 53.368165][ T29] audit: type=1400 audit(1786958089.887:123): avc: denied { write } for pid=5529 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 53.419232][ T29] audit: type=1400 audit(1786958089.937:124): avc: denied { write } for pid=5540 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 53.650780][ T29] audit: type=1400 audit(1786958090.167:125): avc: denied { write } for pid=5543 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 53.705268][ T29] audit: type=1400 audit(1786958090.217:126): avc: denied { write } for pid=5554 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 Warning: Permanently added '10.128.10.6' (ED25519) to the list of known hosts. [ 57.838707][ T29] kauditd_printk_skb: 2 callbacks suppressed [ 57.838722][ T29] audit: type=1400 audit(1786958094.357:129): avc: denied { mounton } for pid=5575 comm="syz-executor" path="/syzcgroup/unified" dev="sda1" ino=2023 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1 [ 57.868489][ T29] audit: type=1400 audit(1786958094.387:130): avc: denied { mount } for pid=5575 comm="syz-executor" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 57.871546][ T5575] cgroup: Unknown subsys name 'net' [ 57.897336][ T29] audit: type=1400 audit(1786958094.417:131): avc: denied { unmount } for pid=5575 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 58.015941][ T5575] cgroup: Unknown subsys name 'cpuset' [ 58.023420][ T5575] cgroup: Unknown subsys name 'rlimit' [ 58.164288][ T29] audit: type=1400 audit(1786958094.687:132): avc: denied { setattr } for pid=5575 comm="syz-executor" name="raw-gadget" dev="devtmpfs" ino=819 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 58.207428][ T29] audit: type=1400 audit(1786958094.687:133): avc: denied { create } for pid=5575 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 58.228229][ T29] audit: type=1400 audit(1786958094.687:134): avc: denied { write } for pid=5575 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 58.250570][ T29] audit: type=1400 audit(1786958094.687:135): avc: denied { read } for pid=5575 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 58.271302][ T29] audit: type=1400 audit(1786958094.697:136): avc: denied { mounton } for pid=5575 comm="syz-executor" path="/proc/sys/fs/binfmt_misc" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=dir permissive=1 [ 58.292623][ T5582] SELinux: Context root:object_r:swapfile_t is not valid (left unmapped). Setting up swapspace version 1, size = 127995904 bytes [ 58.296503][ T29] audit: type=1400 audit(1786958094.697:137): avc: denied { mount } for pid=5575 comm="syz-executor" name="/" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=filesystem permissive=1 [ 58.328950][ T29] audit: type=1400 audit(1786958094.827:138): avc: denied { relabelto } for pid=5582 comm="mkswap" name="swap-file" dev="sda1" ino=2026 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 59.284203][ T5575] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 61.367319][ T5594] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 61.383450][ T5603] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 61.391448][ T5603] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 61.400209][ T5605] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 61.408838][ T5606] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 61.416587][ T5605] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 61.425206][ T5606] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 61.430354][ T5611] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 61.433031][ T5605] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 61.443834][ T5611] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 61.447360][ T5606] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 61.461535][ T5605] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 61.462523][ T5611] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 61.470141][ T5606] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 61.476918][ T5611] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 61.483963][ T5605] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 61.491141][ T5611] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 61.498679][ T5606] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 61.508460][ T5611] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 61.513080][ T5605] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 61.519383][ T5611] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 61.534275][ T5599] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 61.542385][ T5611] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 61.549972][ T5599] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 61.550124][ T5605] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 62.771584][ T5596] bridge0: port 1(bridge_slave_0) entered blocking state [ 62.778756][ T5596] bridge0: port 1(bridge_slave_0) entered disabled state [ 62.786487][ T5596] bridge_slave_0: entered allmulticast mode [ 62.793438][ T5596] bridge_slave_0: entered promiscuous mode [ 62.840185][ T5596] bridge0: port 2(bridge_slave_1) entered blocking state [ 62.847387][ T5596] bridge0: port 2(bridge_slave_1) entered disabled state [ 62.855522][ T5596] bridge_slave_1: entered allmulticast mode [ 62.862460][ T5596] bridge_slave_1: entered promiscuous mode [ 62.872885][ T5602] bridge0: port 1(bridge_slave_0) entered blocking state [ 62.880017][ T5602] bridge0: port 1(bridge_slave_0) entered disabled state [ 62.889390][ T5602] bridge_slave_0: entered allmulticast mode [ 62.896381][ T5602] bridge_slave_0: entered promiscuous mode [ 62.907894][ T5600] bridge0: port 1(bridge_slave_0) entered blocking state [ 62.915129][ T5600] bridge0: port 1(bridge_slave_0) entered disabled state [ 62.922304][ T5600] bridge_slave_0: entered allmulticast mode [ 62.929176][ T5600] bridge_slave_0: entered promiscuous mode [ 62.945220][ T5602] bridge0: port 2(bridge_slave_1) entered blocking state [ 62.952307][ T5602] bridge0: port 2(bridge_slave_1) entered disabled state [ 62.959592][ T5602] bridge_slave_1: entered allmulticast mode [ 62.966327][ T5602] bridge_slave_1: entered promiscuous mode [ 62.978378][ T5600] bridge0: port 2(bridge_slave_1) entered blocking state [ 62.985628][ T5600] bridge0: port 2(bridge_slave_1) entered disabled state [ 62.992783][ T5600] bridge_slave_1: entered allmulticast mode [ 62.999672][ T5600] bridge_slave_1: entered promiscuous mode [ 63.044472][ T5596] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 63.078917][ T5596] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 63.088233][ T5591] bridge0: port 1(bridge_slave_0) entered blocking state [ 63.095702][ T5591] bridge0: port 1(bridge_slave_0) entered disabled state [ 63.102857][ T5591] bridge_slave_0: entered allmulticast mode [ 63.110340][ T5591] bridge_slave_0: entered promiscuous mode [ 63.119271][ T5602] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 63.135136][ T5600] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 63.150721][ T5591] bridge0: port 2(bridge_slave_1) entered blocking state [ 63.157907][ T5591] bridge0: port 2(bridge_slave_1) entered disabled state [ 63.165211][ T5591] bridge_slave_1: entered allmulticast mode [ 63.171880][ T5591] bridge_slave_1: entered promiscuous mode [ 63.179854][ T5602] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 63.197344][ T5600] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 63.239637][ T5596] team0: Port device team_slave_0 added [ 63.257682][ T5592] bridge0: port 1(bridge_slave_0) entered blocking state [ 63.264839][ T5592] bridge0: port 1(bridge_slave_0) entered disabled state [ 63.271950][ T5592] bridge_slave_0: entered allmulticast mode [ 63.278994][ T5592] bridge_slave_0: entered promiscuous mode [ 63.292818][ T5596] team0: Port device team_slave_1 added [ 63.300037][ T5591] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 63.311062][ T5591] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 63.321293][ T5602] team0: Port device team_slave_0 added [ 63.328344][ T5602] team0: Port device team_slave_1 added [ 63.334176][ T5592] bridge0: port 2(bridge_slave_1) entered blocking state [ 63.341320][ T5592] bridge0: port 2(bridge_slave_1) entered disabled state [ 63.348792][ T5592] bridge_slave_1: entered allmulticast mode [ 63.355587][ T5592] bridge_slave_1: entered promiscuous mode [ 63.363416][ T5600] team0: Port device team_slave_0 added [ 63.396215][ T5600] team0: Port device team_slave_1 added [ 63.434155][ T5596] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 63.441193][ T5596] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 63.467177][ T5596] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 63.480030][ T5591] team0: Port device team_slave_0 added [ 63.487569][ T5591] team0: Port device team_slave_1 added [ 63.493853][ T5602] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 63.500776][ T5602] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 63.526791][ T5602] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 63.539402][ T5592] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 63.555103][ T5596] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 63.562101][ T5596] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 63.588367][ T5596] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 63.594135][ T5605] Bluetooth: hci2: command tx timeout [ 63.616297][ T5602] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 63.623278][ T5602] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 63.649644][ T5602] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 63.653786][ T49] Bluetooth: hci4: command tx timeout [ 63.660529][ T5599] Bluetooth: hci3: command tx timeout [ 63.666251][ T5603] Bluetooth: hci1: command tx timeout [ 63.677697][ T5605] Bluetooth: hci0: command tx timeout [ 63.680151][ T5592] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 63.692765][ T5600] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 63.699903][ T5600] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 63.725865][ T5600] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 63.738163][ T5600] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 63.745198][ T5600] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 63.771177][ T5600] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 63.794012][ T5591] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 63.800970][ T5591] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 63.826854][ T5591] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 63.863199][ T5596] hsr_slave_0: entered promiscuous mode [ 63.869707][ T5596] hsr_slave_1: entered promiscuous mode [ 63.876443][ T5591] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 63.883446][ T5591] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 63.909352][ T5591] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 63.945903][ T5592] team0: Port device team_slave_0 added [ 63.968786][ T5602] hsr_slave_0: entered promiscuous mode [ 63.975066][ T5602] hsr_slave_1: entered promiscuous mode [ 63.980915][ T5602] debugfs: 'hsr0' already exists in 'hsr' [ 63.986720][ T5602] Cannot create hsr debugfs directory [ 64.001303][ T5592] team0: Port device team_slave_1 added [ 64.016196][ T5600] hsr_slave_0: entered promiscuous mode [ 64.022202][ T5600] hsr_slave_1: entered promiscuous mode [ 64.028281][ T5600] debugfs: 'hsr0' already exists in 'hsr' [ 64.034005][ T5600] Cannot create hsr debugfs directory [ 64.077518][ T5591] hsr_slave_0: entered promiscuous mode [ 64.083663][ T5591] hsr_slave_1: entered promiscuous mode [ 64.089538][ T5591] debugfs: 'hsr0' already exists in 'hsr' [ 64.095608][ T5591] Cannot create hsr debugfs directory [ 64.128531][ T5592] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 64.135539][ T5592] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 64.161483][ T5592] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 64.191643][ T5592] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 64.198878][ T5592] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 64.224886][ T5592] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 64.371942][ T5592] hsr_slave_0: entered promiscuous mode [ 64.378120][ T5592] hsr_slave_1: entered promiscuous mode [ 64.384147][ T5592] debugfs: 'hsr0' already exists in 'hsr' [ 64.389863][ T5592] Cannot create hsr debugfs directory [ 64.561855][ T5602] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 64.572703][ T5602] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 64.580749][ T5602] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 64.591319][ T5602] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 64.603026][ T5602] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 64.612455][ T5602] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 64.628871][ T5602] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 64.637435][ T5602] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 64.682460][ T5596] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 64.693404][ T5596] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 64.705640][ T5596] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 64.715117][ T5596] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 64.729593][ T5596] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 64.738426][ T5596] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 64.746296][ T5596] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 64.755841][ T5596] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 64.824456][ T5600] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 64.833132][ T5600] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 64.842493][ T5600] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 64.852537][ T5600] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 64.870312][ T5600] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 64.879945][ T5600] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 64.887931][ T5600] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 64.897100][ T5600] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 64.964364][ T5602] 8021q: adding VLAN 0 to HW filter on device bond0 [ 64.977304][ T5591] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 64.986025][ T5591] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 64.999390][ T5591] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 65.008003][ T5591] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 65.016754][ T5591] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 65.025854][ T5591] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 65.033457][ T5591] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 65.042558][ T5591] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 65.090073][ T5602] 8021q: adding VLAN 0 to HW filter on device team0 [ 65.129524][ T57] bridge0: port 1(bridge_slave_0) entered blocking state [ 65.136843][ T57] bridge0: port 1(bridge_slave_0) entered forwarding state [ 65.146389][ T57] bridge0: port 2(bridge_slave_1) entered blocking state [ 65.153456][ T57] bridge0: port 2(bridge_slave_1) entered forwarding state [ 65.165291][ T5596] 8021q: adding VLAN 0 to HW filter on device bond0 [ 65.172039][ T5592] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 65.180433][ T5592] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 65.198005][ T5592] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 65.207485][ T5592] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 65.215551][ T5592] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 65.224350][ T5592] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 65.232013][ T5592] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 65.240715][ T5592] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 65.276665][ T5596] 8021q: adding VLAN 0 to HW filter on device team0 [ 65.312276][ T57] bridge0: port 1(bridge_slave_0) entered blocking state [ 65.319350][ T57] bridge0: port 1(bridge_slave_0) entered forwarding state [ 65.343549][ T57] bridge0: port 2(bridge_slave_1) entered blocking state [ 65.350635][ T57] bridge0: port 2(bridge_slave_1) entered forwarding state [ 65.367147][ T5600] 8021q: adding VLAN 0 to HW filter on device bond0 [ 65.418032][ T5600] 8021q: adding VLAN 0 to HW filter on device team0 [ 65.451545][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 65.458710][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 65.467501][ T29] kauditd_printk_skb: 13 callbacks suppressed [ 65.467515][ T29] audit: type=1400 audit(1786958101.987:152): avc: denied { sys_module } for pid=5602 comm="syz-executor" capability=16 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 65.507659][ T50] bridge0: port 2(bridge_slave_1) entered blocking state [ 65.514996][ T50] bridge0: port 2(bridge_slave_1) entered forwarding state [ 65.563394][ T5592] 8021q: adding VLAN 0 to HW filter on device bond0 [ 65.580032][ T5591] 8021q: adding VLAN 0 to HW filter on device bond0 [ 65.621118][ T5591] 8021q: adding VLAN 0 to HW filter on device team0 [ 65.637193][ T5592] 8021q: adding VLAN 0 to HW filter on device team0 [ 65.655045][ T5603] Bluetooth: hci2: command tx timeout [ 65.664834][ T3355] bridge0: port 1(bridge_slave_0) entered blocking state [ 65.671939][ T3355] bridge0: port 1(bridge_slave_0) entered forwarding state [ 65.698680][ T3355] bridge0: port 1(bridge_slave_0) entered blocking state [ 65.705892][ T3355] bridge0: port 1(bridge_slave_0) entered forwarding state [ 65.720485][ T50] bridge0: port 2(bridge_slave_1) entered blocking state [ 65.727640][ T50] bridge0: port 2(bridge_slave_1) entered forwarding state [ 65.733887][ T49] Bluetooth: hci4: command tx timeout [ 65.740798][ T5605] Bluetooth: hci0: command tx timeout [ 65.740816][ T5599] Bluetooth: hci3: command tx timeout [ 65.746962][ T5603] Bluetooth: hci1: command tx timeout [ 65.787789][ T50] bridge0: port 2(bridge_slave_1) entered blocking state [ 65.794929][ T50] bridge0: port 2(bridge_slave_1) entered forwarding state [ 65.812786][ T1298] ieee802154 phy0 wpan0: encryption failed: -22 [ 65.821616][ T1298] ieee802154 phy1 wpan1: encryption failed: -22 [ 66.167180][ T5602] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 66.247565][ T5596] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 66.326245][ T5602] veth0_vlan: entered promiscuous mode [ 66.370994][ T5602] veth1_vlan: entered promiscuous mode [ 66.397403][ T5596] veth0_vlan: entered promiscuous mode [ 66.434242][ T5596] veth1_vlan: entered promiscuous mode [ 66.477533][ T5602] veth0_macvtap: entered promiscuous mode [ 66.507819][ T5602] veth1_macvtap: entered promiscuous mode [ 66.562889][ T5596] veth0_macvtap: entered promiscuous mode [ 66.581287][ T5596] veth1_macvtap: entered promiscuous mode [ 66.606930][ T5602] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 66.647840][ T5602] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 66.676092][ T5600] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 66.711514][ T5591] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 66.745850][ T5596] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 66.756385][ T5592] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 66.782157][ T5596] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 66.857421][ T3355] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.948704][ T3355] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 66.950955][ T5600] veth0_vlan: entered promiscuous mode [ 66.974413][ T57] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.988702][ T3355] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 67.020459][ T5592] veth0_vlan: entered promiscuous mode [ 67.030790][ T5600] veth1_vlan: entered promiscuous mode [ 67.051088][ T113] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 67.064418][ T113] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 67.086155][ T3355] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 67.099397][ T5592] veth1_vlan: entered promiscuous mode [ 67.102784][ T29] audit: type=1400 audit(1786958103.617:153): avc: denied { mounton } for pid=5602 comm="syz-executor" path="/root/syzkaller.3uXv9s/syz-tmp" dev="sda1" ino=2042 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_home_t tclass=dir permissive=1 [ 67.122077][ T5592] veth0_macvtap: entered promiscuous mode [ 67.135263][ T29] audit: type=1400 audit(1786958103.657:154): avc: denied { mount } for pid=5602 comm="syz-executor" name="/" dev="tmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 67.152473][ T57] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 67.157608][ T29] audit: type=1400 audit(1786958103.657:155): avc: denied { mounton } for pid=5602 comm="syz-executor" path="/root/syzkaller.3uXv9s/syz-tmp/newroot/dev" dev="tmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 67.186296][ T57] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 67.197901][ T29] audit: type=1400 audit(1786958103.657:156): avc: denied { mount } for pid=5602 comm="syz-executor" name="/" dev="proc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 67.200385][ T5592] veth1_macvtap: entered promiscuous mode [ 67.234353][ T5602] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 67.250243][ T29] audit: type=1400 audit(1786958103.657:157): avc: denied { mounton } for pid=5602 comm="syz-executor" path="/root/syzkaller.3uXv9s/syz-tmp/newroot/sys/kernel/debug" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=dir permissive=1 [ 67.283725][ T50] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 67.288715][ T29] audit: type=1400 audit(1786958103.657:158): avc: denied { mounton } for pid=5602 comm="syz-executor" path="/root/syzkaller.3uXv9s/syz-tmp/newroot/proc/sys/fs/binfmt_misc" dev="proc" ino=7001 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysctl_fs_t tclass=dir permissive=1 [ 67.295956][ T5592] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 67.321356][ T29] audit: type=1400 audit(1786958103.657:159): avc: denied { unmount } for pid=5602 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 67.352603][ T29] audit: type=1400 audit(1786958103.687:160): avc: denied { mounton } for pid=5602 comm="syz-executor" path="/dev/gadgetfs" dev="devtmpfs" ino=2780 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:device_t tclass=dir permissive=1 [ 67.358478][ T5600] veth0_macvtap: entered promiscuous mode [ 67.380237][ T29] audit: type=1400 audit(1786958103.687:161): avc: denied { mount } for pid=5602 comm="syz-executor" name="/" dev="gadgetfs" ino=7007 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfs_t tclass=filesystem permissive=1 [ 67.414421][ T188] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 67.425575][ T5591] veth0_vlan: entered promiscuous mode [ 67.445028][ T50] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 67.458405][ T5592] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 67.466687][ T188] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 67.476658][ T188] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 67.488617][ T5600] veth1_macvtap: entered promiscuous mode [ 67.503898][ T57] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 67.533992][ T188] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 67.550602][ T5591] veth1_vlan: entered promiscuous mode [ 67.594989][ T188] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 67.617304][ T57] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 67.644203][ T13] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 67.664460][ T5600] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 67.719271][ T113] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 67.724076][ T5600] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 67.734592][ T5599] Bluetooth: hci2: command tx timeout [ 67.741634][ T113] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 67.750735][ T5695] psmouse serio2: Failed to reset mouse on : -5 [ 67.799280][ T57] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 67.807545][ T5599] Bluetooth: hci3: command tx timeout [ 67.815984][ T57] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 67.816520][ T5599] Bluetooth: hci1: command tx timeout [ 67.823833][ T5603] Bluetooth: hci4: command tx timeout [ 67.828878][ T49] Bluetooth: hci0: command tx timeout [ 67.849075][ T5591] veth0_macvtap: entered promiscuous mode [ 67.869526][ T5591] veth1_macvtap: entered promiscuous mode [ 67.901936][ T188] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 67.910595][ T188] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 67.956318][ T5591] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 67.967579][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 67.978777][ T188] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 67.986934][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 67.993181][ T188] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 68.008809][ T5591] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 68.015053][ T49] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci1/hci1:200' [ 68.026135][ T57] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 68.026217][ T57] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 68.026249][ T57] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 68.056128][ T49] CPU: 0 UID: 0 PID: 49 Comm: kworker/u9:0 Not tainted syzkaller #0 PREEMPT(full) [ 68.056162][ T49] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 68.056174][ T49] Workqueue: hci1 hci_rx_work [ 68.056196][ T49] Call Trace: [ 68.056202][ T49] [ 68.056209][ T49] dump_stack_lvl+0x100/0x190 [ 68.056235][ T49] sysfs_warn_dup.cold+0x1c/0x28 [ 68.056260][ T49] sysfs_create_dir_ns+0x24b/0x2b0 [ 68.056279][ T49] ? __pfx_sysfs_create_dir_ns+0x10/0x10 [ 68.056297][ T49] ? find_held_lock+0x2b/0x80 [ 68.056312][ T49] ? kobject_add_internal+0x25f/0x930 [ 68.056336][ T49] ? kobject_add_internal+0x25f/0x930 [ 68.056361][ T49] ? do_raw_spin_unlock+0x145/0x1e0 [ 68.056387][ T49] kobject_add_internal+0x2c8/0x930 [ 68.056417][ T49] kobject_add+0x16a/0x1e0 [ 68.056443][ T49] ? __pfx_kobject_add+0x10/0x10 [ 68.056469][ T49] ? class_to_subsys+0x10f/0x150 [ 68.056502][ T49] ? kobject_put+0xb9/0x640 [ 68.056526][ T49] ? _raw_spin_unlock+0x28/0x50 [ 68.056549][ T49] device_add+0x294/0x1970 [ 68.056577][ T49] ? __pfx_dev_set_name+0x10/0x10 [ 68.056593][ T49] ? __pfx_device_add+0x10/0x10 [ 68.056617][ T49] ? mgmt_send_event_skb+0x2fb/0x460 [ 68.056642][ T49] hci_conn_add_sysfs+0x1a3/0x260 [ 68.056664][ T49] le_conn_complete_evt+0x11eb/0x1f60 [ 68.056689][ T49] ? __pfx_le_conn_complete_evt+0x10/0x10 [ 68.056706][ T49] ? hci_event_packet+0x186/0xcd0 [ 68.056729][ T49] hci_le_conn_complete_evt+0x23c/0x3a0 [ 68.056747][ T49] ? skb_pull_data+0x15f/0x1e0 [ 68.056766][ T49] hci_le_meta_evt+0x34a/0x5f0 [ 68.056785][ T49] ? __pfx_hci_le_conn_complete_evt+0x10/0x10 [ 68.056805][ T49] hci_event_packet+0x51c/0xcd0 [ 68.056822][ T49] ? __pfx_hci_le_meta_evt+0x10/0x10 [ 68.056841][ T49] ? __pfx_hci_event_packet+0x10/0x10 [ 68.056860][ T49] ? kcov_remote_start+0x384/0x670 [ 68.056881][ T49] ? lockdep_hardirqs_on+0x78/0x100 [ 68.056906][ T49] hci_rx_work+0x451/0xfc0 [ 68.056927][ T49] process_one_work+0xa23/0x1940 [ 68.056955][ T49] ? __pfx_process_one_work+0x10/0x10 [ 68.056981][ T49] ? __pfx_hci_rx_work+0x10/0x10 [ 68.057001][ T49] worker_thread+0x5ef/0xe50 [ 68.057028][ T49] ? kthread+0x13a/0x450 [ 68.057045][ T49] ? __pfx_worker_thread+0x10/0x10 [ 68.057064][ T49] kthread+0x370/0x450 [ 68.057082][ T49] ? __pfx_kthread+0x10/0x10 [ 68.057102][ T49] ret_from_fork+0x72b/0xd50 [ 68.057129][ T49] ? __pfx_ret_from_fork+0x10/0x10 [ 68.057167][ T49] ? __switch_to+0x800/0x10f0 [ 68.057188][ T49] ? __pfx_kthread+0x10/0x10 [ 68.057207][ T49] ret_from_fork_asm+0x1a/0x30 [ 68.057242][ T49] [ 68.057264][ T49] kobject: kobject_add_internal failed for hci1:200 with -EEXIST, don't try to register things with the same name in the same directory. [ 68.334601][ T49] Bluetooth: hci1: failed to register connection device [ 68.336800][ T188] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 68.342766][ T49] Bluetooth: hci1: unexpected subevent 0x04 length: 12 > 11 [ 68.435097][ T13] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 68.511558][ T50] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 68.519601][ T3355] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 68.547555][ T50] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 68.586745][ T3355] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 68.618553][ T3355] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 68.685823][ T50] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 68.694918][ T5798] Bluetooth: MGMT ver 1.23 [ 68.901548][ T5709] wiimote 0005:057E:0306.0001: hidraw0: BLUETOOTH HID v0.00 Gamepad [syz0] on syz0 [ 68.913619][ T5786] NFSD: Unable to initialize client recovery tracking! (-110) [ 68.921731][ T5786] NFSD: Is nfsdcld running? If not, enable CONFIG_NFSD_LEGACY_CLIENT_TRACKING. [ 68.932046][ T5709] wiimote 0005:057E:0306.0001: New device registered [ 68.946192][ T5786] NFSD: starting 90-second grace period (net f00003cb) [ 69.073964][ T5782] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 69.123669][ T10] usb 3-1: new full-speed USB device number 2 using dummy_hcd [ 69.236325][ T5782] usb 1-1: New USB device found, idVendor=0fc5, idProduct=1227, bcdDevice= 1.00 [ 69.252156][ T5782] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 69.261591][ T5782] usb 1-1: Product: syz [ 69.269726][ T5782] usb 1-1: Manufacturer: syz [ 69.281789][ T5782] usb 1-1: SerialNumber: syz [ 69.289863][ T10] usb 3-1: not running at top speed; connect to a high speed hub [ 69.308503][ T10] usb 3-1: New USB device found, idVendor=8086, idProduct=0b63, bcdDevice= 0.00 [ 69.325541][ T5782] usbsevseg 1-1:1.0: USB 7 Segment device now attached [ 69.335391][ T10] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 69.560142][ T5814] infiniband syz0: set active [ 69.577488][ T10] ljca 3-1:1.0: probe with driver ljca failed with error -110 [ 69.593508][ T5814] infiniband syz0: added syzkaller0 [ 69.629736][ T5814] smbdirect: ib_dev[syz0]: added: IB_CA max_fast_reg_page_list_len=512 device_cap_flags=0x1c001223c76 kernel_cap_flags=0x14 page_size_cap=0xfffff000 [ 69.646654][ T5814] smbdirect: ib_dev[syz0]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=32 max_cqe=32767 max_qp_wr=1048576 max_send_sge=32 max_recv_sge=32 [ 69.666938][ T5814] smbdirect: ib_dev[syz0]PORT[1]: iwarp=0 ib=0 roce=1 v1=0 v2=1 core_cap_flags=0x803005 [ 69.698191][ T5814] RDS/IB: syz0: added [ 69.703443][ T5814] smc: adding ib device syz0 with port count 1 [ 69.710050][ T5814] smc: ib device syz0 port 1 has no pnetid [ 69.716933][ T5805] wiimote 0005:057E:0306.0001: Device removed [ 69.748098][ T5708] usb 1-1: USB disconnect, device number 2 [ 69.755939][ T5708] usbsevseg 1-1:1.0: USB 7 Segment now disconnected [ 69.807158][ T49] Bluetooth: hci2: command tx timeout [ 69.884004][ T49] Bluetooth: hci4: command tx timeout [ 69.885008][ T5603] Bluetooth: hci0: command tx timeout [ 69.889466][ T5605] Bluetooth: hci3: command tx timeout [ 69.974712][ T24] wiimote 0005:057E:0306.0001: detected device: Nintendo Wii Remote (Gen 1) [ 70.007465][ T24] input: Nintendo Wii Remote Accelerometer as /devices/virtual/misc/uhid/0005:057E:0306.0001/input/input7 [ 70.036646][ T24] input: Nintendo Wii Remote IR as /devices/virtual/misc/uhid/0005:057E:0306.0001/input/input8 [ 70.064968][ T24] input: Nintendo Wii Remote as /devices/virtual/misc/uhid/0005:057E:0306.0001/input/input6 [ 70.221493][ T9] syz1: Port: 1 Link DOWN [ 70.364970][ T5599] Bluetooth: hci1: command 0x2016 tx timeout [ 70.426795][ T5815] infiniband syz1: set down [ 70.431378][ T5815] infiniband syz1: added syzkaller0 [ 70.443185][ T5815] smbdirect: ib_dev[syz1]: added: IB_CA max_fast_reg_page_list_len=512 device_cap_flags=0x1c001223c76 kernel_cap_flags=0x14 page_size_cap=0xfffff000 [ 70.459027][ T5815] smbdirect: ib_dev[syz1]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=32 max_cqe=32767 max_qp_wr=1048576 max_send_sge=32 max_recv_sge=32 [ 70.478743][ T5815] smbdirect: ib_dev[syz1]PORT[1]: iwarp=0 ib=0 roce=1 v1=0 v2=1 core_cap_flags=0x803005 [ 70.502406][ T5815] RDS/IB: syz1: added [ 70.506512][ T5815] smc: adding ib device syz1 with port count 1 [ 70.512733][ T5815] smc: ib device syz1 port 1 has no pnetid [ 70.553684][ T5709] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 70.704647][ T5709] usb 1-1: New USB device found, idVendor=0af0, idProduct=6711, bcdDevice= 0.00 [ 70.718957][ T5709] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=0 [ 70.727292][ T5709] usb 1-1: Product: syz [ 70.731500][ T5709] usb 1-1: Manufacturer: syz [ 71.085811][ T29] kauditd_printk_skb: 34 callbacks suppressed [ 71.085826][ T29] audit: type=1400 audit(1786958107.607:196): avc: denied { create } for pid=5824 comm="syz.0.13" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 71.141415][ T29] audit: type=1400 audit(1786958107.637:197): avc: denied { write } for pid=5824 comm="syz.0.13" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 71.222381][ T29] audit: type=1400 audit(1786958107.737:198): avc: denied { write } for pid=5828 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 71.329095][ T29] audit: type=1400 audit(1786958107.847:199): avc: denied { write } for pid=5843 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 71.385980][ T13] smc: removing ib device syz1 [ 71.430776][ T13] smbdirect: ib_dev[syz1] removed [ 71.453863][ T5695] misc userio: Buffer overflowed, userio client isn't keeping up [ 71.484063][ T5782] usb 1-1: USB disconnect, device number 3 [ 71.505734][ T3355] smc: removing ib device syz0 [ 71.568181][ T3355] smbdirect: ib_dev[syz0] removed [ 71.827493][ T29] audit: type=1400 audit(1786958108.347:200): avc: denied { write } for pid=5848 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 71.932394][ T5723] usb 3-1: USB disconnect, device number 2 [ 72.014286][ T29] audit: type=1400 audit(1786958108.537:201): avc: denied { write } for pid=5859 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 72.276282][ T5865] vmwgfx 0000:00:01.0: probe with driver vmwgfx failed with error -22 [ 72.330959][ T29] audit: type=1400 audit(1786958108.847:202): avc: denied { read write } for pid=5863 comm="syz.0.15" name="card0" dev="devtmpfs" ino=627 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 72.369788][ T5723] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 72.396896][ T29] audit: type=1400 audit(1786958108.877:203): avc: denied { open } for pid=5863 comm="syz.0.15" path="/dev/dri/card0" dev="devtmpfs" ino=627 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 72.450715][ T29] audit: type=1400 audit(1786958108.887:204): avc: denied { ioctl } for pid=5863 comm="syz.0.15" path="/dev/dri/card0" dev="devtmpfs" ino=627 ioctlcmd=0x6400 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 72.479359][ T5599] Bluetooth: hci1: command 0x2016 tx timeout [ 72.564810][ T5723] usb 3-1: Using ep0 maxpacket: 8 [ 72.570597][ T5723] usb 3-1: New USB device found, idVendor=2058, idProduct=1005, bcdDevice=c1.9b [ 72.585793][ T5723] usb 3-1: config 0 has an invalid interface number: 143 but max is 0 [ 72.595048][ T5723] usb 3-1: config 0 has no interface number 0 [ 72.606205][ T5723] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 72.644486][ T5723] usb 3-1: config 0 descriptor?? [ 72.665038][ T29] audit: type=1400 audit(1786958109.187:205): avc: denied { write } for pid=5869 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 72.741763][ T5695] input: PS/2 Generic Mouse as /devices/serio2/input/input5 [ 72.755285][ T5793] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 72.763440][ T5723] viperboard 3-1:0.143: version 0.00 found at bus 003 address 003 [ 72.913844][ T5793] usb 1-1: Using ep0 maxpacket: 8 [ 72.915411][ T5884] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 72.939873][ T5793] usb 1-1: New USB device found, idVendor=055f, idProduct=a800, bcdDevice= 1.00 [ 72.956189][ T5884] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 72.960943][ T5793] usb 1-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 8 [ 72.977106][ T5793] usb 1-1: config 1 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 64 [ 73.007477][ T5695] psmouse serio2: Failed to enable mouse on [ 73.020288][ T5723] viperboard-i2c viperboard-i2c.2.auto: error -EIO: failure setting i2c_bus_freq to 100 [ 73.025818][ T5793] usb 1-1: config 1 interface 0 altsetting 0 bulk endpoint 0x84 has invalid maxpacket 64 [ 73.043319][ T5793] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 73.049282][ T5723] viperboard-i2c viperboard-i2c.2.auto: probe with driver viperboard-i2c failed with error -5 [ 73.090012][ T5876] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 73.100442][ T5876] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 73.120572][ T5876] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 73.156288][ T5793] mdc800 1-1:1.0: Found Mustek MDC800 on USB. [ 73.336232][ T5893] dummy_hcd dummy_hcd.0: remove, state 1 [ 73.355753][ T5893] usb usb1: USB disconnect, device number 1 [ 73.362584][ T5893] usb 1-1: USB disconnect, device number 4 [ 73.397369][ T5893] mdc800 1-1:1.0: Mustek MDC800 disconnected from USB. [ 73.572995][ T5902] intel_xhci_usb_sw dummy_udc.0: probe with driver intel_xhci_usb_sw failed with error -22 [ 73.628162][ T5876] ================================================================== [ 73.636238][ T5876] BUG: KASAN: slab-use-after-free in string+0x471/0x4d0 [ 73.643162][ T5876] Read of size 1 at addr ffff88802bcc6ba0 by task syz.0.16/5876 [ 73.650785][ T5876] [ 73.653109][ T5876] CPU: 1 UID: 0 PID: 5876 Comm: syz.0.16 Not tainted syzkaller #0 PREEMPT(full) [ 73.653132][ T5876] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 73.653143][ T5876] Call Trace: [ 73.653149][ T5876] [ 73.653155][ T5876] dump_stack_lvl+0x100/0x190 [ 73.653181][ T5876] print_report+0x13d/0x4b0 [ 73.653206][ T5876] ? __virt_addr_valid+0x239/0x430 [ 73.653231][ T5876] ? string+0x471/0x4d0 [ 73.653246][ T5876] kasan_report+0xdf/0x1c0 [ 73.653266][ T5876] ? string+0x471/0x4d0 [ 73.653281][ T5876] string+0x471/0x4d0 [ 73.653295][ T5876] ? __pfx_string+0x10/0x10 [ 73.653310][ T5876] vsnprintf+0x422/0x1300 [ 73.653329][ T5876] ? __pfx_vsnprintf+0x10/0x10 [ 73.653348][ T5876] snprintf+0xc7/0x100 [ 73.653364][ T5876] ? __pfx_snprintf+0x10/0x10 [ 73.653381][ T5876] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 73.653400][ T5876] ? is_bpf_text_address+0x94/0x1a0 [ 73.653421][ T5876] ? kernel_text_address+0x8d/0x100 [ 73.653441][ T5876] dev_vprintk_emit+0x375/0x3e0 [ 73.653461][ T5876] ? __pfx_dev_vprintk_emit+0x10/0x10 [ 73.653481][ T5876] ? stack_trace_save+0x8e/0xc0 [ 73.653497][ T5876] ? __pfx_stack_trace_save+0x10/0x10 [ 73.653514][ T5876] dev_printk_emit+0xd2/0x10d [ 73.653533][ T5876] ? __pfx_dev_printk_emit+0x10/0x10 [ 73.653551][ T5876] ? kasan_save_stack+0x30/0x50 [ 73.653569][ T5876] ? memdup_user+0x2a/0xe0 [ 73.653585][ T5876] ? raw_alloc_io_data+0x186/0x1c0 [ 73.653611][ T5876] ? raw_ioctl+0x223/0x2b80 [ 73.653635][ T5876] ? __x64_sys_ioctl+0x18e/0x210 [ 73.653659][ T5876] ? do_syscall_64+0x115/0x870 [ 73.653684][ T5876] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 73.653708][ T5876] __dev_printk+0xcb/0x100 [ 73.653731][ T5876] _dev_err+0xef/0x127 [ 73.653751][ T5876] ? __pfx__dev_err+0x10/0x10 [ 73.653773][ T5876] ? dummy_queue+0x3ca/0xb00 [ 73.653800][ T5876] ? find_held_lock+0x2b/0x80 [ 73.653817][ T5876] ? raw_process_ep_io+0x5e1/0xc40 [ 73.653847][ T5876] raw_process_ep_io.cold+0x43/0x83 [ 73.653875][ T5876] ? __pfx_raw_process_ep_io+0x10/0x10 [ 73.653906][ T5876] ? memdup_user+0x82/0xe0 [ 73.653927][ T5876] raw_ioctl+0x25a/0x2b80 [ 73.653956][ T5876] ? __pfx_raw_ioctl+0x10/0x10 [ 73.653983][ T5876] ? selinux_file_ioctl+0xb6/0x290 [ 73.654011][ T5876] ? __pfx_raw_ioctl+0x10/0x10 [ 73.654039][ T5876] __x64_sys_ioctl+0x18e/0x210 [ 73.654065][ T5876] do_syscall_64+0x115/0x870 [ 73.654085][ T5876] ? clear_bhb_loop+0x70/0xc0 [ 73.654105][ T5876] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 73.654123][ T5876] RIP: 0033:0x7f4bb859dd6b [ 73.654138][ T5876] Code: 00 48 89 44 24 18 31 c0 48 8d 44 24 60 c7 04 24 10 00 00 00 48 89 44 24 08 48 8d 44 24 20 48 89 44 24 10 b8 10 00 00 00 0f 05 <89> c2 3d 00 f0 ff ff 77 1c 48 8b 44 24 18 64 48 2b 04 25 28 00 00 [ 73.654155][ T5876] RSP: 002b:00007f4bb94eef60 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 73.654173][ T5876] RAX: ffffffffffffffda RBX: 0000000000000008 RCX: 00007f4bb859dd6b [ 73.654185][ T5876] RDX: 00007f4bb94eefe0 RSI: 0000000040085507 RDI: 0000000000000003 [ 73.654196][ T5876] RBP: 0000000000000003 R08: 00007f4bb8950320 R09: 0000000000000000 [ 73.654207][ T5876] R10: 0000000000000003 R11: 0000000000000246 R12: 0000200000000100 [ 73.654218][ T5876] R13: 000000000000000a R14: 00007f4bb8825fa0 R15: 00007ffe7b4ad5e8 [ 73.654234][ T5876] [ 73.654241][ T5876] [ 73.971574][ T5876] Allocated by task 1: [ 73.975618][ T5876] kasan_save_stack+0x30/0x50 [ 73.980279][ T5876] kasan_save_track+0x14/0x30 [ 73.984943][ T5876] __kasan_kmalloc+0xaa/0xb0 [ 73.989527][ T5876] __kmalloc_node_track_caller_noprof+0x331/0x830 [ 73.995943][ T5876] kvasprintf+0xbc/0x150 [ 74.000177][ T5876] kvasprintf_const+0x66/0x1a0 [ 74.004927][ T5876] kobject_set_name_vargs+0x5a/0x140 [ 74.010200][ T5876] dev_set_name+0xc7/0x100 [ 74.014598][ T5876] usb_add_gadget+0x520/0x920 [ 74.019251][ T5876] usb_add_gadget_udc+0x26/0x70 [ 74.024076][ T5876] dummy_udc_probe+0x69e/0x960 [ 74.028815][ T5876] platform_probe+0x106/0x1d0 [ 74.033471][ T5876] really_probe+0x241/0xa60 [ 74.037957][ T5876] __driver_probe_device+0x20e/0x450 [ 74.043222][ T5876] driver_probe_device+0x4a/0x140 [ 74.048227][ T5876] __device_attach_driver+0x1df/0x320 [ 74.053586][ T5876] bus_for_each_drv+0x159/0x1e0 [ 74.058429][ T5876] __device_attach+0x1e4/0x4d0 [ 74.063178][ T5876] device_initial_probe+0xaf/0xd0 [ 74.068212][ T5876] bus_probe_device+0x64/0x160 [ 74.072971][ T5876] device_add+0x121d/0x1970 [ 74.077461][ T5876] platform_device_add+0x35a/0x800 [ 74.082552][ T5876] dummy_hcd_init+0x803/0xc00 [ 74.087211][ T5876] do_one_initcall+0x11d/0x700 [ 74.091959][ T5876] kernel_init_freeable+0x6ea/0x7b0 [ 74.097230][ T5876] kernel_init+0x1f/0x1e0 [ 74.101551][ T5876] ret_from_fork+0x72b/0xd50 [ 74.106125][ T5876] ret_from_fork_asm+0x1a/0x30 [ 74.110880][ T5876] [ 74.113188][ T5876] Freed by task 5900: [ 74.117156][ T5876] kasan_save_stack+0x30/0x50 [ 74.121853][ T5876] kasan_save_track+0x14/0x30 [ 74.126520][ T5876] kasan_save_free_info+0x3b/0x70 [ 74.131524][ T5876] __kasan_slab_free+0x5f/0x80 [ 74.136270][ T5876] kfree+0x22b/0x6c0 [ 74.140141][ T5876] kfree_const+0x5a/0x70 [ 74.144373][ T5876] kobject_put+0x218/0x640 [ 74.148772][ T5876] put_device+0x1f/0x30 [ 74.152910][ T5876] platform_remove+0x5f/0x80 [ 74.157474][ T5876] device_remove+0xcb/0x180 [ 74.161959][ T5876] device_release_driver_internal+0x44e/0x620 [ 74.168008][ T5876] unbind_store+0xf8/0x110 [ 74.172404][ T5876] drv_attr_store+0x74/0xb0 [ 74.176891][ T5876] sysfs_kf_write+0xf2/0x150 [ 74.181455][ T5876] kernfs_fop_write_iter+0x3e0/0x5f0 [ 74.186721][ T5876] vfs_write+0x6ac/0x1050 [ 74.191024][ T5876] ksys_write+0x12a/0x250 [ 74.195337][ T5876] do_syscall_64+0x115/0x870 [ 74.199905][ T5876] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 74.205792][ T5876] [ 74.208121][ T5876] The buggy address belongs to the object at ffff88802bcc6ba0 [ 74.208121][ T5876] which belongs to the cache kmalloc-16 of size 16 [ 74.221979][ T5876] The buggy address is located 0 bytes inside of [ 74.221979][ T5876] freed 16-byte region [ffff88802bcc6ba0, ffff88802bcc6bb0) [ 74.235495][ T5876] [ 74.237799][ T5876] The buggy address belongs to the physical page: [ 74.244269][ T5876] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x2bcc6 [ 74.253002][ T5876] flags: 0xfff00000000000(node=0|zone=1|lastcpupid=0x7ff) [ 74.260089][ T5876] page_type: f5(slab) [ 74.264067][ T5876] raw: 00fff00000000000 ffff88801c022640 dead000000000100 dead000000000122 [ 74.272635][ T5876] raw: 0000000000000000 0000000800800080 00000000f5000000 0000000000000000 [ 74.281200][ T5876] page dumped because: kasan: bad access detected [ 74.287604][ T5876] page_owner tracks the page as allocated [ 74.293302][ T5876] page last allocated via order 0, migratetype Unmovable, gfp_mask 0xd2cc0(GFP_KERNEL|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 1, tgid 1 (swapper/0), ts 7419109772, free_ts 0 [ 74.312292][ T5876] post_alloc_hook+0xfd/0x120 [ 74.316950][ T5876] get_page_from_freelist+0xf48/0x3530 [ 74.322386][ T5876] __alloc_frozen_pages_noprof+0x299/0x2dc0 [ 74.328265][ T5876] new_slab+0xa2/0x640 [ 74.332310][ T5876] refill_objects+0xe3/0x410 [ 74.336878][ T5876] __pcs_replace_empty_main+0x376/0x680 [ 74.342399][ T5876] __kmalloc_node_track_caller_noprof+0x679/0x830 [ 74.348801][ T5876] kvasprintf+0xbc/0x150 [ 74.353045][ T5876] kvasprintf_const+0x66/0x1a0 [ 74.357808][ T5876] kobject_set_name_vargs+0x5a/0x140 [ 74.363085][ T5876] device_create_groups_vargs+0x1b1/0x270 [ 74.368793][ T5876] device_create+0xed/0x130 [ 74.373282][ T5876] mon_bin_add+0xba/0x160 [ 74.377594][ T5876] mon_bus_init+0x18e/0x320 [ 74.382082][ T5876] mon_notify+0x31c/0x480 [ 74.386393][ T5876] notifier_call_chain+0x99/0x3f0 [ 74.391398][ T5876] page_owner free stack trace missing [ 74.396739][ T5876] [ 74.399038][ T5876] Memory state around the buggy address: [ 74.404646][ T5876] ffff88802bcc6a80: 00 04 fc fc 00 04 fc fc 00 00 fc fc 00 04 fc fc [ 74.412700][ T5876] ffff88802bcc6b00: 00 04 fc fc 00 04 fc fc 00 01 fc fc 00 01 fc fc [ 74.420739][ T5876] >ffff88802bcc6b80: 00 00 fc fc fa fb fc fc 00 04 fc fc 00 04 fc fc [ 74.428772][ T5876] ^ [ 74.433854][ T5876] ffff88802bcc6c00: fa fb fc fc fa fb fc fc 00 04 fc fc 00 00 fc fc [ 74.441890][ T5876] ffff88802bcc6c80: 00 04 fc fc 00 04 fc fc 00 01 fc fc 00 01 fc fc [ 74.449925][ T5876] ================================================================== [ 74.472666][ T5876] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 74.479887][ T5876] CPU: 0 UID: 0 PID: 5876 Comm: syz.0.16 Not tainted syzkaller #0 PREEMPT(full) [ 74.488979][ T5876] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 74.499010][ T5876] Call Trace: [ 74.502269][ T5876] [ 74.505180][ T5876] dump_stack_lvl+0x100/0x190 [ 74.509841][ T5876] vpanic+0x552/0x970 [ 74.513803][ T5876] ? __pfx_vpanic+0x10/0x10 [ 74.518284][ T5876] ? rcu_is_watching+0x12/0xc0 [ 74.523034][ T5876] ? string+0x471/0x4d0 [ 74.527165][ T5876] panic+0xd1/0xe0 [ 74.530864][ T5876] ? __pfx_panic+0x10/0x10 [ 74.535257][ T5876] ? string+0x471/0x4d0 [ 74.539390][ T5876] ? preempt_schedule_common+0x42/0xc0 [ 74.544828][ T5876] check_panic_on_warn.cold+0x19/0x34 [ 74.550178][ T5876] end_report.part.0+0x3a/0x90 [ 74.554926][ T5876] kasan_report.cold+0xe/0x18 [ 74.559586][ T5876] ? string+0x471/0x4d0 [ 74.563721][ T5876] string+0x471/0x4d0 [ 74.567683][ T5876] ? __pfx_string+0x10/0x10 [ 74.572167][ T5876] vsnprintf+0x422/0x1300 [ 74.576480][ T5876] ? __pfx_vsnprintf+0x10/0x10 [ 74.581227][ T5876] snprintf+0xc7/0x100 [ 74.585274][ T5876] ? __pfx_snprintf+0x10/0x10 [ 74.589942][ T5876] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 74.596076][ T5876] ? is_bpf_text_address+0x94/0x1a0 [ 74.601262][ T5876] ? kernel_text_address+0x8d/0x100 [ 74.606443][ T5876] dev_vprintk_emit+0x375/0x3e0 [ 74.611274][ T5876] ? __pfx_dev_vprintk_emit+0x10/0x10 [ 74.616628][ T5876] ? stack_trace_save+0x8e/0xc0 [ 74.621458][ T5876] ? __pfx_stack_trace_save+0x10/0x10 [ 74.626809][ T5876] dev_printk_emit+0xd2/0x10d [ 74.631469][ T5876] ? __pfx_dev_printk_emit+0x10/0x10 [ 74.636734][ T5876] ? kasan_save_stack+0x30/0x50 [ 74.641565][ T5876] ? memdup_user+0x2a/0xe0 [ 74.645963][ T5876] ? raw_alloc_io_data+0x186/0x1c0 [ 74.651060][ T5876] ? raw_ioctl+0x223/0x2b80 [ 74.655549][ T5876] ? __x64_sys_ioctl+0x18e/0x210 [ 74.660470][ T5876] ? do_syscall_64+0x115/0x870 [ 74.665214][ T5876] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 74.671260][ T5876] __dev_printk+0xcb/0x100 [ 74.675659][ T5876] _dev_err+0xef/0x127 [ 74.679710][ T5876] ? __pfx__dev_err+0x10/0x10 [ 74.684367][ T5876] ? dummy_queue+0x3ca/0xb00 [ 74.688941][ T5876] ? find_held_lock+0x2b/0x80 [ 74.693597][ T5876] ? raw_process_ep_io+0x5e1/0xc40 [ 74.698697][ T5876] raw_process_ep_io.cold+0x43/0x83 [ 74.703882][ T5876] ? __pfx_raw_process_ep_io+0x10/0x10 [ 74.709328][ T5876] ? memdup_user+0x82/0xe0 [ 74.713727][ T5876] raw_ioctl+0x25a/0x2b80 [ 74.718045][ T5876] ? __pfx_raw_ioctl+0x10/0x10 [ 74.722791][ T5876] ? selinux_file_ioctl+0xb6/0x290 [ 74.727888][ T5876] ? __pfx_raw_ioctl+0x10/0x10 [ 74.732640][ T5876] __x64_sys_ioctl+0x18e/0x210 [ 74.737391][ T5876] do_syscall_64+0x115/0x870 [ 74.741963][ T5876] ? clear_bhb_loop+0x70/0xc0 [ 74.746620][ T5876] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 74.752491][ T5876] RIP: 0033:0x7f4bb859dd6b [ 74.756885][ T5876] Code: 00 48 89 44 24 18 31 c0 48 8d 44 24 60 c7 04 24 10 00 00 00 48 89 44 24 08 48 8d 44 24 20 48 89 44 24 10 b8 10 00 00 00 0f 05 <89> c2 3d 00 f0 ff ff 77 1c 48 8b 44 24 18 64 48 2b 04 25 28 00 00 [ 74.776469][ T5876] RSP: 002b:00007f4bb94eef60 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 74.784863][ T5876] RAX: ffffffffffffffda RBX: 0000000000000008 RCX: 00007f4bb859dd6b [ 74.792816][ T5876] RDX: 00007f4bb94eefe0 RSI: 0000000040085507 RDI: 0000000000000003 [ 74.800766][ T5876] RBP: 0000000000000003 R08: 00007f4bb8950320 R09: 0000000000000000 [ 74.808714][ T5876] R10: 0000000000000003 R11: 0000000000000246 R12: 0000200000000100 [ 74.816664][ T5876] R13: 000000000000000a R14: 00007f4bb8825fa0 R15: 00007ffe7b4ad5e8 [ 74.824618][ T5876] [ 74.827839][ T5876] Kernel Offset: disabled [ 74.832133][ T5876] Rebooting in 86400 seconds..