last executing test programs: 12.064346311s ago: executing program 3 (id=4): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000100)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./sys/bus/platform/devices/QEMU0002:00/driver_override\x00', 0x1, 0x0) write(r0, &(0x7f0000000300)='tpm_crb_acpi\x00', 0xd) r1 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./sys/bus/platform/drivers/tpm_crb_acpi/bind\x00', 0x1, 0x0) write(r1, &(0x7f0000000500)='QEMU0002:00\x00', 0xc) 11.947274128s ago: executing program 3 (id=5): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000100)='sysfs\x00', 0x0, 0x0) mount(0x0, &(0x7f0000000200)='./sys/kernel/tracing\x00', &(0x7f0000000300)='tracefs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./sys/kernel/tracing/dynamic_events\x00', 0x2, 0x0) write(r0, &(0x7f0000000500)='e:my_eprobe sched/sched_switch\n\x00', 0x1f) close(r0) mkdirat(0xffffffffffffff9c, &(0x7f0000000600)='./sys/kernel/tracing/instances/A\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000700)='./sys/kernel/tracing/instances/B\x00', 0x1ff) r1 = openat(0xffffffffffffff9c, &(0x7f0000000800)='./sys/kernel/tracing/instances/A/events/eprobes/my_eprobe/enable\x00', 0x2, 0x0) write(r1, &(0x7f0000000900)='1\n\x00', 0x2) r2 = openat(0xffffffffffffff9c, &(0x7f0000000a00)='./sys/kernel/tracing/instances/B/events/eprobes/my_eprobe/enable\x00', 0x2, 0x0) write(r2, &(0x7f0000000b00)='1\n\x00', 0x2) write(r1, &(0x7f0000000c00)='0\n\x00', 0x2) write(r2, &(0x7f0000000d00)='0\n\x00', 0x2) close(r1) close(r2) 11.699595429s ago: executing program 1 (id=6): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000040)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)={0x44, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_MAC={0xa, 0x6, @from_mac}, @NL80211_ATTR_AUTH_TYPE={0x8}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}]]}, 0x44}}, 0x0) syz_80211_inject_frame(&(0x7f0000000200)=@device_b, &(0x7f0000000240)=@mgmt_frame=@probe_response={{{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void}, 0x36) nanosleep(&(0x7f0000000280)={0x0, 0x2faf080}, &(0x7f00000002c0)) syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000340)=@mgmt_frame=@auth={{{}, {}, @device_b, @device_a, @from_mac, {0x0, 0x1}}, 0x0, 0x2, 0x0, @void}, 0x1e) nanosleep(&(0x7f0000000380)={0x0, 0x2faf080}, &(0x7f00000003c0)) syz_80211_inject_frame(&(0x7f0000000400)=@device_b, &(0x7f0000000440)=@mgmt_frame=@assoc_resp={{{}, {}, @device_b, @device_a, @from_mac, {0x0, 0x2}}, 0x1, 0x0, @default, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void}, 0x28) nanosleep(&(0x7f0000000480)={0x0, 0x2faf080}, &(0x7f00000004c0)) syz_80211_inject_frame(&(0x7f0000000500)=@device_b, &(0x7f0000000540)=@mgmt_frame=@action={{{}, {}, @device_b, @device_a, @from_mac, {0x0, 0x3}}, @sa_query_req={0x8, 0x0, 0x1234}}, 0x1b) 11.591834945s ago: executing program 3 (id=8): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./proc\x00', &(0x7f0000000100)='proc\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./proc/sys/kernel/core_pattern\x00', 0x0, 0x0) read(r0, &(0x7f0000000300), 0x64) 11.009943854s ago: executing program 1 (id=11): r0 = socket$inet(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e20, @loopback}, 0x10) listen(r0, 0xa) r1 = syz_io_uring_setup(0x20, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000000200)=0x0, &(0x7f0000000300)=0x0, &(0x7f0000000400)=0x0) io_uring_register$IORING_REGISTER_FILES(r1, 0x2, &(0x7f0000000500)=[0xffffffff], 0x1) syz_io_uring_submit(r2, r3, r4, &(0x7f0000001000)=@IORING_OP_ACCEPT={0xd, 0x4, 0x1, r0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x1}}) syz_io_uring_submit(r2, r3, r4, &(0x7f0000001100)=@IORING_OP_RECV=@pass_buffer={0x1b, 0x5, 0x0, 0x0, 0x0, &(0x7f0000002000)='\x00'/4096, 0x1000}) syz_io_uring_submit(r2, r3, r4, &(0x7f0000001200)=@IORING_OP_SEND={0x1a, 0x5, 0x0, 0x0, 0x0, &(0x7f0000003000)="00000080fe534d42400000000000000000000100010000000000000000000000000000000000000000000000000000000000000000000000000000000000000041000100020200000000000000000000000000000000000000000000000010000000100000001000000000000000000000000000000000008000000000000000", 0x84}) syz_io_uring_submit(r2, r3, r4, &(0x7f0000001300)=@IORING_OP_RECV=@pass_buffer={0x1b, 0x5, 0x0, 0x0, 0x0, &(0x7f0000004000)='\x00'/4096, 0x1000}) syz_io_uring_submit(r2, r3, r4, &(0x7f0000001400)=@IORING_OP_SEND={0x1a, 0x5, 0x0, 0x0, 0x0, &(0x7f0000005000)="00000078fe534d4240000000160000c001000100010000000000000001000000000000000000000000000000010000000000000000000000000000000000000009000000480028004e544c4d53535000020000000000000028000000158208e2000000000000000000000000000000000000000028000000", 0x7c}) syz_io_uring_submit(r2, r3, r4, &(0x7f0000001500)=@IORING_OP_RECV=@pass_buffer={0x1b, 0x5, 0x0, 0x0, 0x0, &(0x7f0000006000)='\x00'/4096, 0x1000}) syz_io_uring_submit(r2, r3, r4, &(0x7f0000001600)=@IORING_OP_SEND={0x1a, 0x5, 0x0, 0x0, 0x0, &(0x7f0000007000)="00000048fe534d4240000000000000000100010001000000000000000200000000000000000000000000000001000000000000000000000000000000000000000900010048000000", 0x4c}) syz_io_uring_submit(r2, r3, r4, &(0x7f0000001700)=@IORING_OP_RECV=@pass_buffer={0x1b, 0x5, 0x0, 0x0, 0x0, &(0x7f0000008000)='\x00'/4096, 0x1000}) syz_io_uring_submit(r2, r3, r4, &(0x7f0000001800)=@IORING_OP_SEND={0x1a, 0x5, 0x0, 0x0, 0x0, &(0x7f0000009000)="00000050fe534d424000000000000000030001000100000000000000030000000000000000000000010000000100000000000000000000000000000000000000100001000000000000000000ff011f00", 0x54}) syz_io_uring_submit(r2, r3, r4, &(0x7f0000001900)=@IORING_OP_RECV=@pass_buffer={0x1b, 0x5, 0x0, 0x0, 0x0, &(0x7f000000a000)='\x00'/4096, 0x1000}) syz_io_uring_submit(r2, r3, r4, &(0x7f0000001a00)=@IORING_OP_SEND={0x1a, 0x1, 0x0, 0x0, 0x0, &(0x7f000000b000)="00000050fe534d424000000000000000030001000100000000000000040000000000000000000000020000000100000000000000000000000000000000000000100001000000000000000000ff011f00", 0x54}) io_uring_enter(r1, 0xb, 0x0, 0x0, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./dir\x00', 0x1ff) mount(&(0x7f0000000000)=@filename='\\\\127.0.0.1\\share\x00', &(0x7f0000000040)='./dir\x00', &(0x7f0000000080)='cifs\x00', 0x0, &(0x7f00000000c0)='vers=2.0,sec=ntlmssp,ip=127.0.0.1,port=20000,nodfs,username=root,password=root\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./dir/test\x00', 0x1ff) 10.137863302s ago: executing program 1 (id=15): r0 = memfd_create(&(0x7f0000000000)='syzkaller\x00', 0x0) ftruncate(r0, 0x10000) pwrite64(r0, &(0x7f0000001000)='\b\x00\x00\x00\n\x00\x00\x00\v\x00\x00\x00\f\x00'/24, 0x18, 0x2008) pwrite64(r0, &(0x7f0000001020)="80000000800000000100000000100000000400000400000005000000", 0x1c, 0x2024) pwrite64(r0, &(0x7f0000001040)="00f0ffff00fcffff0c0000000a00000000000000000000000200000001000000", 0x20, 0x2048) pwrite64(r0, &(0x7f0000001060)="00080000000000000000000000040000200000000200000000000000", 0x1c, 0x2068) pwrite64(r0, &(0x7f0000001080)="0100000000000000", 0x8, 0x2088) pwrite64(r0, &(0x7f0000001090)="0d000000000400000004000001000000010000000100000001000000010000008000000080000000", 0x28, 0x2098) pwrite64(r0, &(0x7f00000010c0)="01000000640000006400000064000000", 0x10, 0x20c0) pwrite64(r0, &(0x7f00000010d0)="01010101010101010101010101010101", 0x10, 0x20cc) pwrite64(r0, &(0x7f00000011b0)="389d267c", 0x4, 0x24e0) pwrite64(r0, &(0x7f00000010e0)="541901005419010054190100", 0xc, 0x2554) pwrite64(r0, &(0x7f00000010f0)="55020900", 0x4, 0x2804) pwrite64(r0, &(0x7f0000001100)="000000000100800080000000", 0xc, 0x280c) pwrite64(r0, &(0x7f0000001110)="01000000640000006400000064000000", 0x10, 0x2818) pwrite64(r0, &(0x7f0000001120)='\x00'/12, 0xc, 0x2828) pwrite64(r0, &(0x7f0000001130)="80000000a0000000c0000000e000000000010000", 0x14, 0x2854) pwrite64(r0, &(0x7f00000011a0)="04", 0x1, 0x28c0) pwrite64(r0, &(0x7f0000001150)="0000ffffffffffffffffffffffffffff", 0x10, 0x28e0) pwrite64(r0, &(0x7f0000001160)="ed410200", 0x4, 0x2d00) pwrite64(r0, &(0x7f0000001170)="0004000000000000", 0x8, 0x2d08) pwrite64(r0, &(0x7f0000001180)='\f\x00\x00\x00\f\x00\x00\x00\f\x00\x00\x00\f\x00\x00\x00\f\x00\x00\x00\f\x00\x00\x00\f\x00\x00\x00\f\x00\x00\x00\f\x00\x00\x00\f\x00\x00\x00\f\x00\x00\x00\f\x00\x00\x00', 0x30, 0x2d28) pwrite64(r0, &(0x7f0000001190)="020000000c0001002e00000002000000f40302002e2e0000", 0x18, 0x3000) r1 = syz_open_dev$loop(&(0x7f0000002000), 0x0, 0x2) ioctl$LOOP_SET_FD(r1, 0x4c00, r0) close(r1) mkdirat(0xffffffffffffff9c, &(0x7f0000003000)='./mnt\x00', 0x1ff) mount(&(0x7f0000000040)=@loop={'/dev/loop', 0x0}, &(0x7f0000003000)='./mnt\x00', &(0x7f0000004000)='ufs\x00', 0x0, &(0x7f0000005000)='ufstype=sun\x00') r2 = openat(0xffffffffffffff9c, &(0x7f0000006000)='./mnt/file\x00', 0x42, 0x1ff) write(r2, &(0x7f0000007000)='A', 0x1) 10.078235212s ago: executing program 1 (id=16): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./nfsd\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./nfsd\x00', &(0x7f0000000040)='nfsd\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./nfsd/portlist\x00', 0x2, 0x0) write(r0, &(0x7f00000000c0)='tcp 2049\n\x00', 0x9) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000200)='./proc\x00', &(0x7f0000000240)='proc\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000400)='./tmp\x00', 0x1ff) mount(0x0, &(0x7f0000000400)='./tmp\x00', &(0x7f0000000440)='tmpfs\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./proc/net/rpc/auth.unix.ip/channel\x00', 0x2, 0x0) write(r1, &(0x7f0000000340)='nfsd 127.0.0.1 2147483647 *\n\x00', 0x1c) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./proc/net/rpc/nfsd.export/channel\x00', 0x2, 0x0) write(r2, &(0x7f0000000140)='* ./tmp 2147483647 8192 0 0 1 0 fsloc 1 1 server1 /\n\x00', 0x34) 9.978447844s ago: executing program 1 (id=17): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ed) mount(0x0, &(0x7f0000000040)='./sys\x00', &(0x7f0000000080)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000c00)='./sys/module/nvme_core/parameters/admin_timeout\x00', 0x1, 0x0) write(r0, &(0x7f0000000d00)='1\x00', 0x1) close(r0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./sys/class/fcloop/ctl/add_local_port\x00', 0x1, 0x0) write(r1, &(0x7f0000000200)='wwnn=0x1111111111111111,wwpn=0x2222222222222222\x00', 0x2f) close(r1) r2 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./sys/class/fcloop/ctl/add_target_port\x00', 0x1, 0x0) write(r2, &(0x7f0000000400)='wwnn=0x3333333333333333,wwpn=0x4444444444444444\x00', 0x2f) close(r2) r3 = openat(0xffffffffffffff9c, &(0x7f0000000500)='./sys/class/fcloop/ctl/add_remote_port\x00', 0x1, 0x0) write(r3, &(0x7f0000000600)='wwnn=0x3333333333333333,wwpn=0x4444444444444444,roles=32,lpwwnn=0x1111111111111111,lpwwpn=0x2222222222222222\x00', 0x6c) close(r3) r4 = openat(0xffffffffffffff9c, &(0x7f0000000700)='./sys/class/fcloop/ctl/set_cmd_drop\x00', 0x1, 0x0) write(r4, &(0x7f0000000800)='101:0:1\x00', 0x7) close(r4) r5 = openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000000900), 0x2, 0x0) write(r5, &(0x7f0000000a00)='transport=fc,traddr=nn-0x3333333333333333:pn-0x4444444444444444,host_traddr=nn-0x1111111111111111:pn-0x2222222222222222,nqn=nqn.2014-08.org.nvmexpress.discovery\x00', 0xa1) nanosleep(&(0x7f0000000b00)={0x2}, 0x0) close(r5) 8.897277561s ago: executing program 0 (id=29): r0 = syz_usb_connect(0x0, 0x7a, &(0x7f0000000000)=ANY=[@ANYBLOB="12010002ff00004082057d0000000000000109026800030100c0000904000000010100000904000101010200000b2402010203180144ac00070501010002010904010000010100000904010101010200000b2402010203180144ac00070582010002010904020002010300000705030200020007058402000200"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) nanosleep(&(0x7f0000000100)={0x1}, 0x0) syz_open_dev$sndpcmp(&(0x7f0000000200), 0x0, 0x0) syz_open_dev$sndpcmc(&(0x7f0000000300), 0x0, 0x0) syz_open_dev$sndpcmp(&(0x7f0000000400), 0x1, 0x0) syz_open_dev$sndpcmc(&(0x7f0000000500), 0x1, 0x0) syz_open_dev$sndpcmp(&(0x7f0000000600), 0x2, 0x0) syz_open_dev$sndpcmc(&(0x7f0000000700), 0x2, 0x0) 8.150105315s ago: executing program 1 (id=30): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(&(0x7f0000000040)=@filename='sysfs\x00', &(0x7f0000000000)='./sys\x00', &(0x7f0000000080)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./sys/power/state\x00', 0x2, 0x0) write(r0, &(0x7f0000000100)='mem\n', 0x4) 8.131073037s ago: executing program 32 (id=30): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(&(0x7f0000000040)=@filename='sysfs\x00', &(0x7f0000000000)='./sys\x00', &(0x7f0000000080)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./sys/power/state\x00', 0x2, 0x0) write(r0, &(0x7f0000000100)='mem\n', 0x4) 6.355320186s ago: executing program 4 (id=38): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000003c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x2}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x1, 0x0, 0x0, {0x2}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x40, 0x3, 0xa, 0x101, 0x0, 0x0, {0x2}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz0\x00'}, @NFTA_CHAIN_HOOK={0x14, 0x4, 0x0, 0x1, [@NFTA_HOOK_HOOKNUM={0x8}, @NFTA_HOOK_PRIORITY={0x8}]}]}, @NFT_MSG_NEWRULE={0x84, 0x6, 0xa, 0x401, 0x0, 0x0, {0x2}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_EXPRESSIONS={0x5c, 0x4, 0x0, 0x1, [{0x58, 0x1, 0x0, 0x1, @inner={{0xa}, @val={0x48, 0x2, 0x0, 0x1, [@NFTA_INNER_TYPE={0x8, 0x2, 0x1, 0x0, 0x81}, @NFTA_INNER_FLAGS={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_INNER_HDRSIZE={0x8, 0x4, 0x1, 0x0, 0x3a}, @NFTA_INNER_NUM={0x8}, @NFTA_INNER_EXPR={0x24, 0x5, 0x0, 0x1, @meta={{0x9}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_META_DREG={0x8, 0x1, 0x1, 0x0, 0xc}, @NFTA_META_KEY={0x8, 0x2, 0x1, 0x0, 0x1}]}}}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x2}}}, 0x10c}}, 0x0) syz_emit_ethernet(0xbe, &(0x7f0000000100)={@local, @broadcast, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0xb0, 0x0, 0x0, 0x0, 0x11, 0x0, @dev, @local}, {0x0, 0x0, 0x9c, 0x0, @wg=@initiation={0x1, 0x0, "f4cb985d86dd6266b5efb88aaa87eda081bac8b2f9a49d564054f1c9218f47b3", "cf8743eb4d9e776f94a6a58d36e006ac614f6f7bce9217cbfea31675d4a860cf6003977b1e4dbb16dc31cc76522bf19d", "5043edd2a8cc8c41345f8feb1a7a8e23043b8a465b1ed5bf8bc91307", {"c7193f7edd1efc4742dc481e6f57f901", "948177bcc5dea4029ba4683a6bdcd7a1"}}}}}}}, 0x0) 6.259100268s ago: executing program 4 (id=32): r0 = syz_usb_connect(0x0, 0x50, &(0x7f0000000000)=ANY=[@ANYBLOB="12010002e00101401111222200000102030109023e0002010080fa0904000003e00101000705810200020107050202000200070583034000010904010002e00101000705840140000107050401400001"], 0x0) dup(r0) nanosleep(&(0x7f0000000100)={0x1}, 0x0) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl(r1, 0x400448ca, 0x0) bind$bt_hci(r1, &(0x7f0000000180)={0x1f, 0x0, 0x1}, 0x6) write(r1, &(0x7f00000001c0)="f100040000", 0x5) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl(r2, 0x400448ca, 0x0) bind$bt_hci(r2, &(0x7f0000000240)={0x1f, 0x1, 0x1}, 0x6) write(r2, &(0x7f0000000280)="f100040000", 0x5) 4.886607055s ago: executing program 0 (id=33): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000200000040030431c60001000000010902120001010080320904000000ffffff00"], 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000100)={0x84, &(0x7f0000000140)={0x0, 0x0, 0x4, '\x00\x00\x00\x00'}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, &(0x7f0000000100)={0x84, &(0x7f0000000140)={0x0, 0x0, 0x4, '\x00\x00\x00\x00'}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, &(0x7f0000000100)={0x84, &(0x7f0000000140)={0x0, 0x0, 0x4, '\x00\x00\x00\x00'}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, &(0x7f0000000100)={0x84, &(0x7f0000000140)={0x0, 0x0, 0x4, '\x00\x00\x00\x00'}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) nanosleep(&(0x7f0000000400)={0x1}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000200)='./sys\x00', &(0x7f0000000240)='sysfs\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./sys/bus/i2c/devices/i2c-0/new_device\x00', 0x1, 0x0) write(r1, &(0x7f0000000400)='maxtcpc 0x40\x00', 0xd) r2 = openat(0xffffffffffffff9c, &(0x7f0000000340)='./sys/bus/i2c/devices/i2c-1/new_device\x00', 0x1, 0x0) write(r2, &(0x7f0000000400)='maxtcpc 0x40\x00', 0xd) 4.067852426s ago: executing program 4 (id=34): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./sys\x00', 0x1ff) mount(&(0x7f0000000080)=@filename='sysfs\x00', &(0x7f00000000c0)='./sys\x00', &(0x7f0000000100)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./sys/power/state\x00', 0x1, 0x0) write(r0, &(0x7f0000000180)='disk\n\x00\x00\x00', 0x8) 1.874197436s ago: executing program 2 (id=36): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000040)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./sys/bus/pci/devices/0000:00:02.0/config\x00', 0x2, 0x0) pwrite64(r0, &(0x7f0000000100)="ad150504", 0x4, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./sys/bus/pci/devices/0000:00:02.0/vendor\x00', 0x0, 0x0) read(r1, &(0x7f0000000180)=""/16, 0x10) r2 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./sys/bus/pci/devices/0000:00:02.0/device\x00', 0x0, 0x0) read(r2, &(0x7f0000000200)=""/16, 0x10) 1.841061433s ago: executing program 2 (id=37): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x1111, @empty}, 0x10) listen(r0, 0x10) r1 = syz_io_uring_setup(0x10, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000000140)=0x0, &(0x7f0000000180)=0x0, &(0x7f00000001c0)=0x0) io_uring_register$IORING_REGISTER_FILES(r1, 0x2, &(0x7f0000000100)=[0xffffffff], 0x1) syz_io_uring_submit(r2, r3, r4, &(0x7f0000000340)=@IORING_OP_ACCEPT={0xd, 0x4, 0x0, r0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x1}}) syz_io_uring_submit(r2, r3, r4, &(0x7f0000000440)=@IORING_OP_WRITEV={0x2, 0x1, 0x0, @fd_index, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000200)="00000080fe534d42400001000000000000000100010000000000000000000000000000000000000000000000000000000000000000000000000000004100010011030000000000000000000000000000000000000000000000001000000010000000100000000000000000000000000000000000800000000000000000000048fe534d42400001000000000001000100010000000000000001000000000000000000000000000000010000000000000000000000000000000000000000000000090000004800000000000050fe534d42400001000000000002000100010000000000000002000000000000000000000001000000010000000000000000000000000000000000000000000000100001000000000008000000ff011f00", 0x124}], 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, '\x00', 0x0}}) io_uring_enter(r1, 0x2, 0x0, 0x0, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000300)='./cifs\x00', 0x1ed) mount(&(0x7f0000000800)=@filename='\\\\127.0.0.1\\share\x00', &(0x7f0000000300)='./cifs\x00', &(0x7f0000000400)='cifs\x00', 0x0, &(0x7f0000000500)='ip=127.0.0.1,port=4369,user=root,password=root,vers=3.1.1\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000000900)='./proc\x00', 0x1ed) mount(&(0x7f0000000a00)=@filename='proc\x00', &(0x7f0000000900)='./proc\x00', &(0x7f0000000a00)='proc\x00', 0x0, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000b00)='./proc/fs/cifs/Stats\x00', 0x0, 0x0) read(r5, &(0x7f0000000c00), 0x1000) 1.788333458s ago: executing program 2 (id=39): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nfc(&(0x7f0000000000), r0) sendmsg$NFC_CMD_DEV_UP(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)={0x1c, r1, 0x1, 0x123, 0x234, {}, [@NFC_ATTR_DEVICE_INDEX={0x8}]}, 0x1c}}, 0x0) sendmsg$NFC_CMD_DEV_UP(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000600)={0x1c, r1, 0x1, 0x123, 0x234, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, 0x1}]}, 0x1c}}, 0x0) sendmsg$NFC_CMD_START_POLL(r0, &(0x7f0000000700)={0x0, 0x0, &(0x7f0000000800)={&(0x7f0000000900)={0x24, r1, 0x1, 0x123, 0x234, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, 0x1}, @NFC_ATTR_TM_PROTOCOLS={0x8, 0xe, 0xffffffff}]}, 0x24}}, 0x0) sendmsg$NFC_CMD_START_POLL(r0, &(0x7f0000000a00)={0x0, 0x0, &(0x7f0000000b00)={&(0x7f0000000c00)={0x24, r1, 0x1, 0x123, 0x234, {}, [@NFC_ATTR_DEVICE_INDEX={0x8}, @NFC_ATTR_IM_PROTOCOLS={0x8, 0xd, 0xffffffff}]}, 0x24}}, 0x0) nanosleep(&(0x7f0000000d00)={0x0, 0x1dcd6500}, 0x0) r2 = syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1) connect$nfc_llcp(r2, &(0x7f0000000e00)={0x27, 0x1, 0x0, 0x5, 0x1, 0x0, 'urn:nfc:sn:snep\x00'}, 0x60) 1.248797363s ago: executing program 2 (id=40): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000000), r0) sendmsg$NLBL_UNLABEL_C_STATICADDDEF(r0, &(0x7f0000000100)={&(0x7f0000000200), 0xc, &(0x7f0000000300)={&(0x7f0000000400)=ANY=[@ANYBLOB='F\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="0100000000000000000006000000080004000000000008000500000000002200070073797374656d5f753a6f626a6563745f723a756e6c616265645f74000000"], 0x46}}, 0x0) sendmsg$NLBL_UNLABEL_C_STATICLISTDEF(r0, &(0x7f0000000500)={&(0x7f0000000600), 0xc, &(0x7f0000000700)={&(0x7f0000000800)={0x14, r1, 0x301}, 0x14}}, 0x0) 1.180008188s ago: executing program 2 (id=41): r0 = syz_usb_connect(0x2, 0x24, &(0x7f0000000000)={{0x12, 0x1, 0x200, 0x0, 0x0, 0x0, 0x8, 0x2058, 0x1005, 0xc19b, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, "", [{{0x9, 0x4, 0x8f, 0x0, 0x0, 0xbf, 0x57, 0x5a}}]}}]}}, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0}) r1 = syz_open_dev$usbfs(&(0x7f0000000100), 0x2, 0x0) ioctl$USBDEVFS_RESET(r1, 0x5514) syz_usb_control_io(r0, &(0x7f0000000200)={0x2c, &(0x7f0000000300)={0x0, 0x1, 0x12, {0x12, 0x1, "000200000010582005109bc100000001"}}, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000000500)={0x84, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 1.090157376s ago: executing program 0 (id=42): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./sys\x00', &(0x7f00000000c0)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./sys/module/md_mod/parameters/new_array\x00', 0x1, 0x0) write(r0, &(0x7f0000000140)='md0\x00', 0x4) r1 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./sys/block/md0/md/level\x00', 0x1, 0x0) write(r1, &(0x7f00000001c0)='5\x00', 0x2) r2 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./sys/block/md0/md/raid_disks\x00', 0x1, 0x0) write(r2, &(0x7f0000000240)='4\x00', 0x2) r3 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./sys/block/md0/md/chunk_size\x00', 0x1, 0x0) write(r3, &(0x7f00000002c0)='4096\x00', 0x5) r4 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./sys/block/md0/md/new_dev\x00', 0x1, 0x0) write(r4, &(0x7f0000000340)='1:0\x00', 0x4) write(r4, &(0x7f0000000380)='1:1\x00', 0x4) write(r4, &(0x7f00000003c0)='1:2\x00', 0x4) write(r4, &(0x7f0000000400)='1:3\x00', 0x4) r5 = openat(0xffffffffffffff9c, &(0x7f0000000440)='./sys/block/md0/md/dev-ram0/slot\x00', 0x1, 0x0) write(r5, &(0x7f0000000480)='0\x00', 0x2) r6 = openat(0xffffffffffffff9c, &(0x7f00000004c0)='./sys/block/md0/md/dev-ram1/slot\x00', 0x1, 0x0) write(r6, &(0x7f0000000500)='1\x00', 0x2) r7 = openat(0xffffffffffffff9c, &(0x7f0000000540)='./sys/block/md0/md/dev-ram2/slot\x00', 0x1, 0x0) write(r7, &(0x7f0000000580)='2\x00', 0x2) r8 = openat(0xffffffffffffff9c, &(0x7f00000005c0)='./sys/block/md0/md/dev-ram3/slot\x00', 0x1, 0x0) write(r8, &(0x7f0000000600)='3\x00', 0x2) r9 = openat(0xffffffffffffff9c, &(0x7f0000000640)='./sys/block/md0/md/array_state\x00', 0x1, 0x0) write(r9, &(0x7f0000000680)='readonly\x00', 0x9) 710.027186ms ago: executing program 0 (id=43): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(&(0x7f0000000040)=@filename='sysfs\x00', &(0x7f0000000000)='./sys\x00', &(0x7f0000000080)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./sys/power/state\x00', 0x2, 0x0) write(r0, &(0x7f0000000100)='mem\n\x00', 0x5) 709.815725ms ago: executing program 0 (id=44): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000100)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./sys/bus/platform/drivers/serial8250/bind\x00', 0x2, 0x0) write(r0, &(0x7f0000000300)='serial8250\x00', 0xb) r1 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000400), 0x2, 0x0) ioctl$TIOCSRS485(r1, 0x542f, &(0x7f0000000500)={0x1}) write(r1, &(0x7f0000000600)='hello\x00', 0x5) 639.721932ms ago: executing program 0 (id=45): syslog(0x9, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./sys\x00', &(0x7f00000000c0)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./sys/power/pm_test\x00', 0x2, 0x0) write(r0, &(0x7f0000000140)='devices\n\x00', 0x8) r1 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./sys/power/state\x00', 0x2, 0x0) write(r1, &(0x7f00000001c0)='mem\n\x00', 0x4) 0s ago: executing program 2 (id=46): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000100)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./sys/bus/pci/devices/0000:00:01.1/driver/unbind\x00', 0x2, 0x0) write(r0, &(0x7f0000000300)='0000:00:01.1\x00', 0xd) r1 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./sys/bus/pci/devices/0000:00:01.1/config\x00', 0x2, 0x0) pwrite64(r1, &(0x7f0000000500)='\x00', 0x1, 0x40) r2 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./sys/bus/pci/drivers/i801_smbus/new_id\x00', 0x2, 0x0) write(r2, &(0x7f0000000700)='ffffffff ffffffff ffffffff ffffffff 0 0 3f\x00', 0x2b) nanosleep(&(0x7f0000000800)={0x2}, 0x0) 0s ago: executing program 2 (id=47): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000100)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./sys/bus/i2c/devices/i2c-0/new_device\x00', 0x1, 0x0) write(r0, &(0x7f0000000300)='stusb1600 0x28\x00', 0xf) kernel console output (not intermixed with test programs): [ 38.012459][ T42] audit: type=1400 audit(1785862118.925:114): avc: denied { rlimitinh } for pid=5642 comm="sh" scontext=system_u:system_r:sshd_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 38.020203][ T42] audit: type=1400 audit(1785862118.925:115): avc: denied { siginh } for pid=5642 comm="sh" scontext=system_u:system_r:sshd_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 38.165027][ T42] audit: type=1400 audit(1785862119.095:116): avc: denied { write } for pid=5647 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 38.225426][ T42] audit: type=1400 audit(1785862119.155:117): avc: denied { write } for pid=5650 comm="rm" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 38.306314][ T42] audit: type=1400 audit(1785862119.235:118): avc: denied { write } for pid=5653 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 38.346331][ T42] audit: type=1400 audit(1785862119.275:119): avc: denied { write } for pid=5656 comm="rm" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 38.409942][ T42] audit: type=1400 audit(1785862119.345:120): avc: denied { write } for pid=5659 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 Warning: Permanently added '[localhost]:28067' (ED25519) to the list of known hosts. [ 41.332089][ T5686] cgroup: Unknown subsys name 'net' [ 41.441141][ T5686] cgroup: Unknown subsys name 'cpuset' [ 41.444972][ T5686] cgroup: Unknown subsys name 'rlimit' [ 41.616669][ T5723] SELinux: Context root:object_r:swapfile_t is not valid (left unmapped). Setting up swapspace version 1, size = 127995904 bytes [ 42.293192][ T5686] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 45.641684][ T42] kauditd_printk_skb: 37 callbacks suppressed [ 45.641696][ T42] audit: type=1400 audit(1785862126.575:158): avc: denied { execmem } for pid=5732 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 45.840238][ T42] audit: type=1400 audit(1785862126.775:159): avc: denied { create } for pid=5736 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 45.846303][ T42] audit: type=1400 audit(1785862126.775:160): avc: denied { read write } for pid=5736 comm="syz-executor" name="vhci" dev="devtmpfs" ino=1292 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 45.853947][ T42] audit: type=1400 audit(1785862126.775:161): avc: denied { open } for pid=5736 comm="syz-executor" path="/dev/vhci" dev="devtmpfs" ino=1292 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 45.861326][ T42] audit: type=1400 audit(1785862126.785:162): avc: denied { ioctl } for pid=5738 comm="syz-executor" path="socket:[7211]" dev="sockfs" ino=7211 ioctlcmd=0x48c9 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 45.876044][ T5745] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 45.879207][ T5745] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 45.885789][ T5752] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 45.889457][ T5752] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 45.889868][ T5753] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 45.891242][ T5750] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 45.892885][ T5752] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 45.895130][ T5745] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 45.895454][ T5753] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 45.896534][ T5753] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 45.896775][ T5752] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 45.897397][ T5752] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 45.898357][ T5752] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 45.898822][ T5750] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 45.899250][ T5745] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 45.899300][ T5752] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 45.900079][ T5745] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 45.900328][ T5745] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 45.902937][ T64] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 45.905029][ T42] audit: type=1400 audit(1785862126.835:163): avc: denied { read } for pid=5746 comm="syz-executor" dev="nsfs" ino=4026531833 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 45.909749][ T5753] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 45.917527][ T42] audit: type=1400 audit(1785862126.835:164): avc: denied { open } for pid=5746 comm="syz-executor" path="net:[4026531833]" dev="nsfs" ino=4026531833 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 45.943922][ T42] audit: type=1400 audit(1785862126.835:165): avc: denied { mounton } for pid=5746 comm="syz-executor" path="/" dev="sda1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:root_t tclass=dir permissive=1 [ 45.952674][ T42] audit: type=1400 audit(1785862126.845:166): avc: denied { module_request } for pid=5738 comm="syz-executor" kmod="netdev-nr3" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1 [ 45.961724][ T42] audit: type=1400 audit(1785862126.855:167): avc: denied { sys_module } for pid=5738 comm="syz-executor" capability=16 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 46.529547][ T5738] bridge0: port 1(bridge_slave_0) entered blocking state [ 46.532731][ T5738] bridge0: port 1(bridge_slave_0) entered disabled state [ 46.535564][ T5738] bridge_slave_0: entered allmulticast mode [ 46.538440][ T5738] bridge_slave_0: entered promiscuous mode [ 46.541964][ T5746] bridge0: port 1(bridge_slave_0) entered blocking state [ 46.544198][ T5746] bridge0: port 1(bridge_slave_0) entered disabled state [ 46.546376][ T5746] bridge_slave_0: entered allmulticast mode [ 46.549273][ T5746] bridge_slave_0: entered promiscuous mode [ 46.552394][ T5746] bridge0: port 2(bridge_slave_1) entered blocking state [ 46.554636][ T5746] bridge0: port 2(bridge_slave_1) entered disabled state [ 46.556936][ T5746] bridge_slave_1: entered allmulticast mode [ 46.559755][ T5746] bridge_slave_1: entered promiscuous mode [ 46.585237][ T5738] bridge0: port 2(bridge_slave_1) entered blocking state [ 46.587579][ T5738] bridge0: port 2(bridge_slave_1) entered disabled state [ 46.589999][ T5738] bridge_slave_1: entered allmulticast mode [ 46.593053][ T5738] bridge_slave_1: entered promiscuous mode [ 46.629843][ T5738] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 46.644505][ T5746] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 46.648736][ T5737] bridge0: port 1(bridge_slave_0) entered blocking state [ 46.651691][ T5737] bridge0: port 1(bridge_slave_0) entered disabled state [ 46.654769][ T5737] bridge_slave_0: entered allmulticast mode [ 46.658583][ T5737] bridge_slave_0: entered promiscuous mode [ 46.662356][ T5736] bridge0: port 1(bridge_slave_0) entered blocking state [ 46.664528][ T5736] bridge0: port 1(bridge_slave_0) entered disabled state [ 46.666767][ T5736] bridge_slave_0: entered allmulticast mode [ 46.669558][ T5736] bridge_slave_0: entered promiscuous mode [ 46.672737][ T5736] bridge0: port 2(bridge_slave_1) entered blocking state [ 46.674974][ T5736] bridge0: port 2(bridge_slave_1) entered disabled state [ 46.677279][ T5736] bridge_slave_1: entered allmulticast mode [ 46.680013][ T5736] bridge_slave_1: entered promiscuous mode [ 46.684276][ T5738] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 46.698729][ T5746] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 46.702855][ T5737] bridge0: port 2(bridge_slave_1) entered blocking state [ 46.705963][ T5737] bridge0: port 2(bridge_slave_1) entered disabled state [ 46.709244][ T5737] bridge_slave_1: entered allmulticast mode [ 46.712923][ T5737] bridge_slave_1: entered promiscuous mode [ 46.745392][ T5738] team0: Port device team_slave_0 added [ 46.754804][ T5746] team0: Port device team_slave_0 added [ 46.763911][ T5736] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 46.768096][ T5738] team0: Port device team_slave_1 added [ 46.776120][ T5746] team0: Port device team_slave_1 added [ 46.780463][ T5737] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 46.784562][ T5736] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 46.800111][ T5737] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 46.809498][ T5738] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 46.811633][ T5738] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 46.819450][ T5738] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 46.830075][ T5746] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 46.832282][ T5746] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 46.840752][ T5746] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 46.861978][ T5737] team0: Port device team_slave_0 added [ 46.864100][ T5738] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 46.866319][ T5738] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 46.875526][ T5738] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 46.879538][ T5746] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 46.881700][ T5746] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 46.890044][ T5746] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 46.895291][ T5736] team0: Port device team_slave_0 added [ 46.899980][ T5737] team0: Port device team_slave_1 added [ 46.918479][ T5736] team0: Port device team_slave_1 added [ 46.939461][ T5737] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 46.941727][ T5737] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 46.949529][ T5737] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 46.953731][ T5737] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 46.955838][ T5737] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 46.963497][ T5737] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 46.971992][ T5736] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 46.974893][ T5736] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 46.985321][ T5736] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 47.009949][ T5736] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 47.012152][ T5736] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 47.020877][ T5736] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 47.040046][ T5738] hsr_slave_0: entered promiscuous mode [ 47.043000][ T5738] hsr_slave_1: entered promiscuous mode [ 47.060049][ T5746] hsr_slave_0: entered promiscuous mode [ 47.062295][ T5746] hsr_slave_1: entered promiscuous mode [ 47.064322][ T5746] debugfs: 'hsr0' already exists in 'hsr' [ 47.066166][ T5746] Cannot create hsr debugfs directory [ 47.077874][ T5737] hsr_slave_0: entered promiscuous mode [ 47.080147][ T5737] hsr_slave_1: entered promiscuous mode [ 47.082245][ T5737] debugfs: 'hsr0' already exists in 'hsr' [ 47.083962][ T5737] Cannot create hsr debugfs directory [ 47.145532][ T5736] hsr_slave_0: entered promiscuous mode [ 47.148520][ T5736] hsr_slave_1: entered promiscuous mode [ 47.150724][ T5736] debugfs: 'hsr0' already exists in 'hsr' [ 47.152955][ T5736] Cannot create hsr debugfs directory [ 47.390868][ T5738] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 47.396811][ T5738] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 47.399553][ T5738] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 47.404217][ T5738] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 47.407270][ T5738] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 47.412085][ T5738] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 47.414762][ T5738] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 47.418865][ T5738] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 47.461277][ T5736] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 47.465796][ T5736] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 47.469308][ T5736] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 47.472958][ T5736] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 47.475546][ T5736] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 47.479404][ T5736] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 47.483269][ T5736] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 47.487131][ T5736] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 47.527681][ T5746] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 47.532616][ T5746] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 47.535241][ T5746] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 47.539784][ T5746] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 47.542480][ T5746] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 47.546806][ T5746] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 47.549629][ T5746] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 47.553326][ T5746] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 47.618717][ T5737] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 47.622487][ T5737] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 47.625188][ T5737] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 47.628956][ T5737] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 47.634591][ T5738] 8021q: adding VLAN 0 to HW filter on device bond0 [ 47.640509][ T5737] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 47.644469][ T5737] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 47.647079][ T5737] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 47.652148][ T5737] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 47.671872][ T5738] 8021q: adding VLAN 0 to HW filter on device team0 [ 47.682111][ T99] bridge0: port 1(bridge_slave_0) entered blocking state [ 47.684592][ T99] bridge0: port 1(bridge_slave_0) entered forwarding state [ 47.702357][ T5736] 8021q: adding VLAN 0 to HW filter on device bond0 [ 47.706298][ T99] bridge0: port 2(bridge_slave_1) entered blocking state [ 47.708557][ T99] bridge0: port 2(bridge_slave_1) entered forwarding state [ 47.718796][ T5746] 8021q: adding VLAN 0 to HW filter on device bond0 [ 47.736368][ T5746] 8021q: adding VLAN 0 to HW filter on device team0 [ 47.746578][ T5736] 8021q: adding VLAN 0 to HW filter on device team0 [ 47.763584][ T38] bridge0: port 1(bridge_slave_0) entered blocking state [ 47.766408][ T38] bridge0: port 1(bridge_slave_0) entered forwarding state [ 47.776480][ T38] bridge0: port 1(bridge_slave_0) entered blocking state [ 47.779542][ T38] bridge0: port 1(bridge_slave_0) entered forwarding state [ 47.783935][ T38] bridge0: port 2(bridge_slave_1) entered blocking state [ 47.786857][ T38] bridge0: port 2(bridge_slave_1) entered forwarding state [ 47.797292][ T38] bridge0: port 2(bridge_slave_1) entered blocking state [ 47.799609][ T38] bridge0: port 2(bridge_slave_1) entered forwarding state [ 47.854264][ T5737] 8021q: adding VLAN 0 to HW filter on device bond0 [ 47.863180][ T5746] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 47.892061][ T5737] 8021q: adding VLAN 0 to HW filter on device team0 [ 47.901327][ T1166] bridge0: port 1(bridge_slave_0) entered blocking state [ 47.903629][ T1166] bridge0: port 1(bridge_slave_0) entered forwarding state [ 47.909410][ T5753] Bluetooth: hci2: command tx timeout [ 47.909416][ T5742] Bluetooth: hci3: command tx timeout [ 47.914658][ T1166] bridge0: port 2(bridge_slave_1) entered blocking state [ 47.917070][ T1166] bridge0: port 2(bridge_slave_1) entered forwarding state [ 47.990262][ T5753] Bluetooth: hci1: command tx timeout [ 47.998556][ T5753] Bluetooth: hci0: command tx timeout [ 48.055523][ T5738] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 48.093435][ T5738] veth0_vlan: entered promiscuous mode [ 48.099396][ T5746] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 48.107325][ T5736] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 48.113476][ T5738] veth1_vlan: entered promiscuous mode [ 48.151264][ T5738] veth0_macvtap: entered promiscuous mode [ 48.158819][ T5738] veth1_macvtap: entered promiscuous mode [ 48.163173][ T5746] veth0_vlan: entered promiscuous mode [ 48.173120][ T5737] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 48.181620][ T5736] veth0_vlan: entered promiscuous mode [ 48.186000][ T5746] veth1_vlan: entered promiscuous mode [ 48.192404][ T5738] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 48.198042][ T5736] veth1_vlan: entered promiscuous mode [ 48.205028][ T5738] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 48.253200][ T5737] veth0_vlan: entered promiscuous mode [ 48.256800][ T5746] veth0_macvtap: entered promiscuous mode [ 48.269194][ T5746] veth1_macvtap: entered promiscuous mode [ 48.281871][ T5737] veth1_vlan: entered promiscuous mode [ 48.293325][ T5736] veth0_macvtap: entered promiscuous mode [ 48.303447][ T5736] veth1_macvtap: entered promiscuous mode [ 48.303698][ T36] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 48.309734][ T36] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 48.311814][ T5746] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 48.320267][ T5746] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 48.347745][ T5736] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 48.347931][ T38] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 48.351187][ T12] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 48.353751][ T38] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 48.366596][ T5736] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 48.372202][ T5737] veth0_macvtap: entered promiscuous mode [ 48.383753][ T5737] veth1_macvtap: entered promiscuous mode [ 48.410089][ T5738] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 48.418780][ T5548] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 48.430356][ T5737] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 48.442596][ T5737] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 48.447841][ T36] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 48.452753][ T36] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 48.485140][ T36] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 48.487933][ T38] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 48.491541][ T36] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 48.491550][ T38] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 48.509876][ T5891] tpm_crb_acpi QEMU0002:00: [Firmware Bug]: failed to get TPM2 ACPI table [ 48.513061][ T5891] tpm_crb_acpi QEMU0002:00: probe with driver tpm_crb_acpi failed with error -22 [ 48.523862][ T38] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 48.526647][ T38] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 48.562021][ T5818] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 48.570450][ T5818] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 48.585220][ T1167] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 48.587634][ T1167] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 48.615812][ T36] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 48.619982][ T36] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 48.627677][ T5895] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 48.638499][ T5548] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 48.641462][ T5548] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 48.644133][ T5548] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 48.651213][ T5548] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 48.668419][ T5548] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 48.671135][ T5548] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 48.673914][ T5548] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 48.676414][ T5548] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 48.680661][ T5548] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 48.683407][ T5548] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 48.685988][ T5548] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 48.689190][ T5548] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 48.741050][ T5901] pci 0000:00:05.0: [1af4:1009] type 00 class 0x000200 conventional PCI endpoint [ 48.753724][ T5901] pci 0000:00:05.0: BAR 0 [io 0xc0c0-0xc0df] [ 48.756795][ T5901] pci 0000:00:05.0: BAR 1 [mem 0xfeaf6000-0xfeaf6fff] [ 48.762568][ T5901] pci 0000:00:05.0: BAR 4 [mem 0x380800008000-0x38080000bfff 64bit pref] [ 48.783994][ T5901] pci 0000:00:05.0: Adding to iommu group 5 [ 48.791182][ T5904] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 48.797344][ T5901] pci 0000:00:05.0: BAR 4 [mem 0x380800008000-0x38080000bfff 64bit pref]: assigned [ 48.802676][ T5901] pci 0000:00:05.0: BAR 1 [mem 0x80000000-0x80000fff]: assigned [ 48.806257][ T5901] pci 0000:00:05.0: BAR 0 [io 0x2000-0x201f]: assigned [ 48.828947][ T5895] md: serialize_policy is only effective for raid1 [ 48.849597][ T5904] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 48.892732][ T5907] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 48.910058][ T5904] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 48.949121][ T5907] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 48.965377][ T5904] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 49.004061][ T5907] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 49.130327][ T5912] loop0: detected capacity change from 0 to 2048 [ 49.512436][ T5917] CIFS: Attempting to mount //127.0.0.1/share [ 49.683836][ T5920] infiniband syz0: set active [ 49.685536][ T5920] infiniband syz0: added veth0 [ 49.700708][ T5920] smbdirect: ib_dev[syz0]: added: IB_CA max_fast_reg_page_list_len=512 device_cap_flags=0x1c001223c76 kernel_cap_flags=0x14 page_size_cap=0xfffff000 [ 49.705650][ T5920] smbdirect: ib_dev[syz0]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=32 max_cqe=32767 max_qp_wr=1048576 max_send_sge=32 max_recv_sge=32 [ 49.711061][ T5920] smbdirect: ib_dev[syz0]PORT[1]: iwarp=0 ib=0 roce=1 v1=0 v2=1 core_cap_flags=0x803005 [ 49.748052][ T5920] RDS/IB: syz0: added [ 49.750108][ T5920] smc: adding ib device syz0 with port count 1 [ 49.752363][ T5920] smc: ib device syz0 port 1 has no pnetid [ 49.989140][ T5753] Bluetooth: hci2: command tx timeout [ 49.998703][ T5753] Bluetooth: hci3: command tx timeout [ 50.069953][ T5753] Bluetooth: hci0: command tx timeout [ 50.070112][ T5742] Bluetooth: hci1: command tx timeout [ 50.071846][ T5928] vmw_vmci 0000:00:03.0: Using capabilities 0x1c [ 50.072991][ T5928] vmw_vmci 0000:00:03.0: VMCI device unable to register notification bitmap with PPN 0xfffff [ 50.283130][ T5930] loop0: detected capacity change from 0 to 32768 [ 50.299894][ T5930] loop1: detected capacity change from 0 to 32768 [ 50.340750][ T5917] CIFS: VFS: cifs_mount failed w/return code = -112 [ 50.362181][ T5922] infiniband syz1: set active [ 50.365003][ T5922] infiniband syz1: added veth1 [ 50.372973][ T5930] device-mapper: thin metadata: sb_check failed: blocknr 1024: wanted 0 [ 50.375268][ T5922] smbdirect: ib_dev[syz1]: added: IB_CA max_fast_reg_page_list_len=512 device_cap_flags=0x1c001223c76 kernel_cap_flags=0x14 page_size_cap=0xfffff000 [ 50.380656][ T5922] smbdirect: ib_dev[syz1]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=32 max_cqe=32767 max_qp_wr=1048576 max_send_sge=32 max_recv_sge=32 [ 50.381384][ T5930] device-mapper: block manager: superblock validator check failed for block 0 [ 50.385916][ T5922] smbdirect: ib_dev[syz1]PORT[1]: iwarp=0 ib=0 roce=1 v1=0 v2=1 core_cap_flags=0x803005 [ 50.390682][ T5935] /dev/loop1: Can't open blockdev [ 50.398537][ T5930] device-mapper: thin metadata: couldn't read superblock [ 50.432661][ T5922] RDS/IB: syz1: added [ 50.434125][ T5922] smc: adding ib device syz1 with port count 1 [ 50.438298][ T5922] smc: ib device syz1 port 1 has no pnetid [ 50.539522][ T5737] svc: failed to register nfsdv3 RPC service (errno 111). [ 50.543263][ T5737] svc: failed to register nfsaclv3 RPC service (errno 111). [ 50.545657][ T5737] failed to unregister tcp with rpcbind [ 50.550322][ T5737] svc: failed to register nfsdv3 RPC service (errno 97). [ 50.552585][ T5737] svc: failed to register nfsaclv3 RPC service (errno 97). [ 50.554973][ T5737] failed to unregister tcp with rpcbind [ 50.566292][ T5930] device-mapper: table: 248:0: thin-pool: Error creating metadata object (-ENOTBLK) [ 50.570514][ T5930] device-mapper: ioctl: error adding target to table [ 50.681482][ T5742] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci0/hci0:200' [ 50.685872][ T5742] CPU: 3 UID: 0 PID: 5742 Comm: kworker/u34:2 Not tainted syzkaller #0 PREEMPT(full) [ 50.685889][ T5742] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 50.685897][ T5742] Workqueue: hci0 hci_rx_work [ 50.685915][ T5742] Call Trace: [ 50.685920][ T5742] [ 50.685924][ T5742] dump_stack_lvl+0x100/0x190 [ 50.685941][ T5742] sysfs_warn_dup.cold+0x1c/0x28 [ 50.685958][ T5742] sysfs_create_dir_ns+0x24b/0x2b0 [ 50.685971][ T5742] ? __pfx_sysfs_create_dir_ns+0x10/0x10 [ 50.685981][ T5742] ? find_held_lock+0x2b/0x80 [ 50.685992][ T5742] ? kobject_add_internal+0x25f/0x930 [ 50.686011][ T5742] ? kobject_add_internal+0x25f/0x930 [ 50.686029][ T5742] ? do_raw_spin_unlock+0x145/0x1e0 [ 50.686048][ T5742] kobject_add_internal+0x2c8/0x930 [ 50.686068][ T5742] kobject_add+0x16a/0x1e0 [ 50.686085][ T5742] ? __pfx_kobject_add+0x10/0x10 [ 50.686101][ T5742] ? class_to_subsys+0x10f/0x150 [ 50.686122][ T5742] ? kobject_put+0xb9/0x640 [ 50.686137][ T5742] ? _raw_spin_unlock+0x28/0x50 [ 50.686151][ T5742] device_add+0x294/0x1970 [ 50.686168][ T5742] ? __pfx_dev_set_name+0x10/0x10 [ 50.686179][ T5742] ? __pfx_device_add+0x10/0x10 [ 50.686194][ T5742] ? mgmt_send_event_skb+0x2fb/0x460 [ 50.686211][ T5742] hci_conn_add_sysfs+0x1a3/0x260 [ 50.686227][ T5742] le_conn_complete_evt+0x11eb/0x1f60 [ 50.686243][ T5742] ? __pfx_le_conn_complete_evt+0x10/0x10 [ 50.686255][ T5742] ? hci_event_packet+0x186/0xcd0 [ 50.686270][ T5742] hci_le_conn_complete_evt+0x23c/0x3a0 [ 50.686283][ T5742] ? skb_pull_data+0x15f/0x1e0 [ 50.686302][ T5742] hci_le_meta_evt+0x34a/0x5f0 [ 50.686316][ T5742] ? __pfx_hci_le_conn_complete_evt+0x10/0x10 [ 50.686330][ T5742] hci_event_packet+0x51c/0xcd0 [ 50.686343][ T5742] ? __pfx_hci_le_meta_evt+0x10/0x10 [ 50.686357][ T5742] ? __pfx_hci_event_packet+0x10/0x10 [ 50.686371][ T5742] ? kcov_remote_start+0x384/0x670 [ 50.686384][ T5742] ? lockdep_hardirqs_on+0x78/0x100 [ 50.686400][ T5742] hci_rx_work+0x451/0xfc0 [ 50.686416][ T5742] process_one_work+0xa23/0x1940 [ 50.686433][ T5742] ? __pfx_process_one_work+0x10/0x10 [ 50.686449][ T5742] ? __pfx_hci_rx_work+0x10/0x10 [ 50.686462][ T5742] worker_thread+0x5ef/0xe50 [ 50.686478][ T5742] ? kthread+0x13a/0x450 [ 50.686488][ T5742] ? __pfx_worker_thread+0x10/0x10 [ 50.686499][ T5742] kthread+0x370/0x450 [ 50.686509][ T5742] ? __pfx_kthread+0x10/0x10 [ 50.686520][ T5742] ret_from_fork+0x72b/0xd50 [ 50.686543][ T5742] ? __pfx_ret_from_fork+0x10/0x10 [ 50.686560][ T5742] ? __switch_to+0x800/0x10f0 [ 50.686572][ T5742] ? __pfx_kthread+0x10/0x10 [ 50.686583][ T5742] ret_from_fork_asm+0x1a/0x30 [ 50.686607][ T5742] [ 50.686625][ T5742] kobject: kobject_add_internal failed for hci0:200 with -EEXIST, don't try to register things with the same name in the same directory. [ 50.775781][ T5742] Bluetooth: hci0: failed to register connection device [ 51.090355][ T42] kauditd_printk_skb: 131 callbacks suppressed [ 51.090366][ T42] audit: type=1400 audit(1785862132.025:299): avc: denied { create } for pid=5940 comm="syz.2.19" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 51.099814][ T42] audit: type=1400 audit(1785862132.025:300): avc: denied { write } for pid=5940 comm="syz.2.19" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 51.130474][ T5943] siw: device registration error -23 [ 51.137014][ T42] audit: type=1400 audit(1785862132.065:301): avc: denied { read write } for pid=5942 comm="syz.2.20" name="rdma_cm" dev="devtmpfs" ino=1294 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:infiniband_device_t tclass=chr_file permissive=1 [ 51.145072][ T42] audit: type=1400 audit(1785862132.065:302): avc: denied { open } for pid=5942 comm="syz.2.20" path="/dev/infiniband/rdma_cm" dev="devtmpfs" ino=1294 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:infiniband_device_t tclass=chr_file permissive=1 [ 51.173814][ T42] audit: type=1400 audit(1785862132.105:303): avc: denied { write } for pid=5944 comm="syz.2.21" name="nullb" dev="configfs" ino=6190 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 51.182688][ T42] audit: type=1800 audit(1785862132.115:304): pid=5945 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.2.21" name="zoned" dev="configfs" ino=9999 res=0 errno=0 [ 51.192234][ T42] audit: type=1800 audit(1785862132.115:305): pid=5945 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.2.21" name="memory_backed" dev="configfs" ino=10000 res=0 errno=0 [ 51.193075][ T5945] null_blk: nullb1: using native zone append [ 51.200867][ T42] audit: type=1800 audit(1785862132.115:306): pid=5945 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.2.21" name="zone_nr_conv" dev="configfs" ino=10001 res=0 errno=0 [ 51.211499][ T42] audit: type=1800 audit(1785862132.115:307): pid=5945 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.2.21" name="power" dev="configfs" ino=10002 res=0 errno=0 [ 51.240073][ T5945] null_blk: disk nullb1 created [ 51.254907][ T5951] Zero length message leads to an empty skb [ 51.265792][ T42] audit: type=1400 audit(1785862132.195:308): avc: denied { read write } for pid=5944 comm="syz.2.21" name="nullb1" dev="devtmpfs" ino=2855 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 51.276742][ T5945] zonefs (nullb1) ERROR: Invalid checksum (Expected 0x96c3de88, got 0x00000000) [ 51.323529][ T5955] loop0: detected capacity change from 0 to 640 [ 51.391797][ T5955] ftl_cs: FTL header not found. [ 51.417216][ T5955] block2mtd: mtd1: [/dev/loop0] erase_size = 64KiB [65536] [ 51.421228][ T5962] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000000: 0x9c78 instead [ 51.425811][ T5962] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000004: 0x6055 instead [ 51.430750][ T5962] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000008: 0xe060 instead [ 51.434091][ T5962] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000000c: 0x6770 instead [ 51.437281][ T5962] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000010: 0x03eb instead [ 51.440833][ T5962] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000014: 0x0606 instead [ 51.447466][ T5962] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000018: 0x770a instead [ 51.451247][ T5962] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000001c: 0x1818 instead [ 51.454525][ T5962] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000020: 0x6010 instead [ 51.457738][ T5962] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000024: 0x1c9c instead [ 51.461012][ T5962] jffs2: Further such events for this erase block will not be printed [ 51.495891][ T5962] jffs2: Cowardly refusing to erase blocks on filesystem with no valid JFFS2 nodes [ 51.498754][ T5962] jffs2: empty_blocks 0, bad_blocks 0, c->nr_blocks 5 [ 51.608372][ T34] usb 7-1: new full-speed USB device number 2 using dummy_hcd [ 51.772742][ T34] usb 7-1: unable to get BOS descriptor or descriptor too short [ 51.777964][ T34] usb 7-1: not running at top speed; connect to a high speed hub [ 51.785625][ T34] usb 7-1: New USB device found, idVendor=0b05, idProduct=1743, bcdDevice= 0.40 [ 51.789618][ T34] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 51.793689][ T34] usb 7-1: Product: syz [ 51.795302][ T34] usb 7-1: Manufacturer: syz [ 51.797186][ T34] usb 7-1: SerialNumber: syz [ 51.809239][ T5840] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 51.960611][ T5840] usb 5-1: New USB device found, idVendor=0582, idProduct=007d, bcdDevice= 0.00 [ 51.963513][ T5840] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 52.069211][ T5742] Bluetooth: hci3: command tx timeout [ 52.069240][ T64] Bluetooth: hci2: command tx timeout [ 52.148293][ T64] Bluetooth: hci0: command tx timeout [ 52.437322][ T5742] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 52.440495][ T5742] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 52.443987][ T5742] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 52.448007][ T5742] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 52.452090][ T5742] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 52.946023][ T5971] bridge0: port 1(bridge_slave_0) entered blocking state [ 52.949766][ T5971] bridge0: port 1(bridge_slave_0) entered disabled state [ 52.952545][ T5971] bridge_slave_0: entered allmulticast mode [ 52.956143][ T5971] bridge_slave_0: entered promiscuous mode [ 52.959538][ T5971] bridge0: port 2(bridge_slave_1) entered blocking state [ 52.961791][ T5971] bridge0: port 2(bridge_slave_1) entered disabled state [ 52.964000][ T5971] bridge_slave_1: entered allmulticast mode [ 52.966624][ T5971] bridge_slave_1: entered promiscuous mode [ 52.983202][ T5971] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 52.987704][ T5971] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 53.003718][ T5971] team0: Port device team_slave_0 added [ 53.006747][ T5971] team0: Port device team_slave_1 added [ 53.019160][ T34] usb 7-1: 1:1 : unknown format tag 0x5 is detected. processed as MPEG. [ 53.023598][ T34] usb 7-1: found format II with max.bitrate = 512, frame size=4095 [ 53.024465][ T5971] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 53.026085][ T34] usb 7-1: 1:1 : invalid UAC_FORMAT_TYPE desc [ 53.028435][ T5971] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 53.028451][ T5971] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 53.029264][ T5971] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 53.029271][ T5971] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 53.029284][ T5971] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 53.053050][ T5971] hsr_slave_0: entered promiscuous mode [ 53.054703][ T34] usb 7-1: 2:1 : unknown format tag 0x5 is detected. processed as MPEG. [ 53.056971][ T5971] hsr_slave_1: entered promiscuous mode [ 53.058586][ T34] usb 7-1: found format II with max.bitrate = 512, frame size=4095 [ 53.058599][ T34] usb 7-1: 2:1 : invalid UAC_FORMAT_TYPE desc [ 53.062219][ T34] usb 7-1: 2:0: failed to get current value for ch 1 (-22) [ 53.064754][ T5971] debugfs: 'hsr0' already exists in 'hsr' [ 53.073187][ T34] usb 7-1: 2:0: failed to get current value for ch 0 (-22) [ 53.073297][ T5971] Cannot create hsr debugfs directory [ 53.104434][ T34] usb 7-1: USB disconnect, device number 2 [ 53.160954][ T5747] udevd[5747]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb7/7-1/7-1:1.0/sound/card4/controlC4/../uevent} for writing: No such file or directory [ 53.233261][ T5971] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 53.238677][ T5971] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 53.241521][ T5971] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 53.245889][ T5971] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 53.248873][ T5971] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 53.255245][ T5971] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 53.259350][ T5971] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 53.265405][ T5971] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 53.281908][ T5971] bridge0: port 2(bridge_slave_1) entered blocking state [ 53.285559][ T5971] bridge0: port 2(bridge_slave_1) entered forwarding state [ 53.289036][ T5971] bridge0: port 1(bridge_slave_0) entered blocking state [ 53.291315][ T5971] bridge0: port 1(bridge_slave_0) entered forwarding state [ 53.327761][ T5971] 8021q: adding VLAN 0 to HW filter on device bond0 [ 53.336618][ T38] bridge0: port 1(bridge_slave_0) entered disabled state [ 53.340021][ T38] bridge0: port 2(bridge_slave_1) entered disabled state [ 53.351080][ T5971] 8021q: adding VLAN 0 to HW filter on device team0 [ 53.357518][ T38] bridge0: port 1(bridge_slave_0) entered blocking state [ 53.359940][ T38] bridge0: port 1(bridge_slave_0) entered forwarding state [ 53.366327][ T38] bridge0: port 2(bridge_slave_1) entered blocking state [ 53.368781][ T38] bridge0: port 2(bridge_slave_1) entered forwarding state [ 53.514135][ T5818] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 53.595078][ T5818] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 53.617875][ T5971] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 53.681917][ T5818] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 53.767884][ T5818] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 53.788240][ T5741] usb 7-1: new high-speed USB device number 3 using dummy_hcd [ 53.801930][ T5971] veth0_vlan: entered promiscuous mode [ 53.807394][ T5971] veth1_vlan: entered promiscuous mode [ 53.825654][ T5971] veth0_macvtap: entered promiscuous mode [ 53.831426][ T5971] veth1_macvtap: entered promiscuous mode [ 53.842961][ T5971] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 53.851091][ T5971] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 53.873170][ T12] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 53.876678][ T12] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 53.905515][ T36] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 53.910243][ T36] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 53.941799][ T5741] usb 7-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 53.944662][ T5741] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 53.947146][ T5741] usb 7-1: Product: syz [ 53.950529][ T5741] usb 7-1: Manufacturer: syz [ 53.952196][ T5741] usb 7-1: SerialNumber: syz [ 53.973324][ T38] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 53.977267][ T38] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 53.980741][ T5818] bridge_slave_1: left allmulticast mode [ 53.982620][ T5818] bridge_slave_1: left promiscuous mode [ 53.985449][ T5818] bridge0: port 2(bridge_slave_1) entered disabled state [ 53.991829][ T5818] bridge_slave_0: left allmulticast mode [ 53.993619][ T5818] bridge_slave_0: left promiscuous mode [ 53.995476][ T5818] bridge0: port 1(bridge_slave_0) entered disabled state [ 54.109151][ T5818] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 54.114579][ T5818] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 54.118895][ T5818] bond0 (unregistering): Released all slaves [ 54.128427][ T5548] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 54.158542][ T5753] Bluetooth: hci2: command tx timeout [ 54.158670][ T5742] Bluetooth: hci3: command tx timeout [ 54.160658][ T12] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 54.229121][ T5742] Bluetooth: hci0: command 0x0419 tx timeout [ 54.304401][ T5448] 8021q: adding VLAN 0 to HW filter on device eth2 [ 54.445729][ T5448] 8021q: adding VLAN 0 to HW filter on device eth3 [ 54.478314][ T34] usb 9-1: new high-speed USB device number 2 using dummy_hcd [ 54.478688][ T64] Bluetooth: hci1: command tx timeout [ 54.632771][ T5448] 8021q: adding VLAN 0 to HW filter on device eth4 [ 54.643441][ T34] usb 9-1: New USB device found, idVendor=1111, idProduct=2222, bcdDevice= 0.00 [ 54.647786][ T34] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 54.654439][ T34] usb 9-1: Product: syz [ 54.656225][ T34] usb 9-1: Manufacturer: syz [ 54.659690][ T34] usb 9-1: SerialNumber: syz [ 54.775303][ T5818] hsr_slave_0: left promiscuous mode [ 54.777912][ T5818] hsr_slave_1: left promiscuous mode [ 54.781174][ T5818] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 54.783631][ T5818] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 54.787990][ T5818] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 54.792218][ T5818] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 54.806913][ T5818] veth1_macvtap: left promiscuous mode [ 54.809143][ T5818] veth0_macvtap: left promiscuous mode [ 54.810980][ T5818] veth1_vlan: left promiscuous mode [ 54.812758][ T5818] veth0_vlan: left promiscuous mode [ 55.015735][ T5818] team0 (unregistering): Port device team_slave_1 removed [ 55.028518][ T5818] team0 (unregistering): Port device team_slave_0 removed [ 55.116777][ T5448] 8021q: adding VLAN 0 to HW filter on device eth5 [ 55.613747][ T5848] usb 5-1: USB disconnect, device number 2 [ 55.903861][ T64] Bluetooth: hci4: Opcode 0x0c03 failed: -71 [ 55.906886][ T34] usb 9-1: USB disconnect, device number 2 [ 56.038265][ T5848] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 56.200631][ T5848] usb 5-1: New USB device found, idVendor=0403, idProduct=c631, bcdDevice= 1.00 [ 56.203665][ T5848] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 56.212705][ T5848] i2c-tiny-usb 5-1:1.0: version 1.00 found at bus 005 address 003 [ 56.465840][ T6059] PM: hibernation: hibernation entry [ 56.548956][ T64] Bluetooth: hci1: command tx timeout [ 56.621124][ T5848] (null): failure reading functionality [ 56.824507][ T5848] i2c i2c-2: failure reading functionality [ 56.830778][ T5848] i2c i2c-2: connected i2c-tiny-usb device [ 57.312642][ T6059] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 57.314933][ T6059] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 57.325359][ T6059] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 57.330373][ T6059] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 57.332563][ T6059] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 57.338641][ T6059] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 57.343895][ T6059] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 57.346607][ T6059] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 57.351528][ T6059] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 57.443758][ T6064] i2c i2c-0: new_device: Instantiated device maxtcpc at 0x40 [ 57.450424][ T38] maxtcpc 0-0040: error -ENXIO: Failed to read TCPC_POWER_STATUS [ 57.454568][ T1166] maxtcpc 1-0040: error -EIO: Failed to read TCPC_POWER_STATUS [ 57.457150][ T5818] Filesystems sync: 0.099 seconds [ 57.457713][ T1166] maxtcpc 1-0040: probe with driver maxtcpc failed with error -5 [ 57.460384][ T6064] i2c i2c-1: new_device: Instantiated device maxtcpc at 0x40 [ 58.004110][ T5741] lan78xx 7-1:1.0 (unnamed net_device) (uninitialized): Failed to write register index 0x00001004. ret = -EPROTO [ 58.010671][ T5741] lan78xx 7-1:1.0 (unnamed net_device) (uninitialized): Failed to write register index 0x0000011c. ret = -EPROTO [ 58.014448][ T5741] lan78xx 7-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 58.019012][ T5741] lan78xx 7-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 58.024385][ T5741] lan78xx 7-1:1.0: probe with driver lan78xx failed with error -71 [ 58.032670][ T5741] usb 7-1: USB disconnect, device number 3 [ 58.548513][ T42] kauditd_printk_skb: 25 callbacks suppressed [ 58.548525][ T42] audit: type=1400 audit(1785862139.485:334): avc: denied { write } for pid=6068 comm="syz.2.35" name="cells" dev="proc" ino=4026533324 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_net_t tclass=file permissive=1 [ 58.550899][ T6069] kAFS: bad VL server IP address [ 58.565999][ T42] audit: type=1400 audit(1785862139.495:335): avc: denied { create } for pid=6068 comm="syz.2.35" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 58.572697][ T42] audit: type=1400 audit(1785862139.495:336): avc: denied { bind } for pid=6068 comm="syz.2.35" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 58.579165][ T42] audit: type=1400 audit(1785862139.505:337): avc: denied { listen } for pid=6068 comm="syz.2.35" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 58.585136][ T42] audit: type=1400 audit(1785862139.505:338): avc: denied { write } for pid=6068 comm="syz.2.35" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 58.587525][ T6069] kAFS: unable to lookup cell 'syz0' [ 58.591222][ T42] audit: type=1400 audit(1785862139.505:339): avc: denied { read } for pid=6068 comm="syz.2.35" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 58.623054][ T42] audit: type=1400 audit(1785862139.555:340): avc: denied { unmount } for pid=5746 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 58.630958][ T64] Bluetooth: hci2: command 0x0c1a tx timeout [ 58.687915][ T6075] CIFS: Attempting to mount //127.0.0.1/share [ 58.692084][ T6075] CIFS: VFS: Error connecting to socket. Aborting operation. [ 58.694634][ T6075] CIFS: VFS: cifs_mount failed w/return code = -4 [ 58.792667][ T42] audit: type=1400 audit(1785862139.725:341): avc: denied { create } for pid=6076 comm="syz.2.39" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 58.798779][ T42] audit: type=1400 audit(1785862139.725:342): avc: denied { connect } for pid=6076 comm="syz.2.39" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 59.358646][ T64] Bluetooth: hci1: command 0x0419 tx timeout [ 59.358800][ T5742] Bluetooth: hci3: command 0x0c1a tx timeout [ 59.400537][ T5741] usb 5-1: USB disconnect, device number 3 [ 59.434568][ T6084] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 59.558272][ T5819] usb 7-1: new full-speed USB device number 4 using dummy_hcd [ 59.578517][ T6084] md: could not open device unknown-block(1,0). [ 59.729752][ T5819] usb 7-1: not running at top speed; connect to a high speed hub [ 59.731629][ T6084] md: personality for level 5 is not loaded! [ 59.734203][ T5819] usb 7-1: config 0 has an invalid interface number: 143 but max is 0 [ 59.737132][ T5819] usb 7-1: config 0 has no interface number 0 [ 59.740352][ T5819] usb 7-1: New USB device found, idVendor=2058, idProduct=1005, bcdDevice=c1.9b [ 59.743223][ T5819] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 59.747364][ T5819] usb 7-1: config 0 descriptor?? [ 59.766134][ T6088] PM: suspend entry (deep) [ 59.767817][ T6088] PM: suspend exit [ 59.869985][ T5819] viperboard 7-1:0.143: version 0.00 found at bus 007 address 004 [ 59.889643][ T6093] PM: suspend entry (deep) [ 59.890196][ T5819] viperboard-i2c viperboard-i2c.3.auto: error -EIO: failure setting i2c_bus_freq to 100 [ 59.892432][ T6093] PM: suspend exit [ 59.895476][ T5819] viperboard-i2c viperboard-i2c.3.auto: probe with driver viperboard-i2c failed with error -5 [ 59.957444][ T5847] usb 7-1: USB disconnect, device number 4 [ 60.709732][ T5742] Bluetooth: hci2: command 0x0c1a tx timeout [ 61.351188][ T6100] Oops: general protection fault, probably for non-canonical address 0xdffffc0000000003: 0000 [#1] SMP KASAN NOPTI SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 61.355940][ T6100] KASAN: null-ptr-deref in range [0x0000000000000018-0x000000000000001f] [ 61.359514][ T6100] CPU: 0 UID: 0 PID: 6100 Comm: syz.2.47 Not tainted syzkaller #0 PREEMPT(full) [ 61.362757][ T6100] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 61.366739][ T6100] RIP: 0010:regmap_get_i2c_bus+0xbe/0xc60 [ 61.369023][ T6100] Code: 89 c6 e8 f5 8b a3 fb 45 85 e4 0f 85 84 01 00 00 e8 77 91 a3 fb 4c 8d 73 1c 48 b8 00 00 00 00 00 fc ff df 4c 89 f2 48 c1 ea 03 <0f> b6 14 02 4c 89 f0 83 e0 07 83 c0 03 38 d0 7c 08 84 d2 0f 85 a2 [ 61.376564][ T6100] RSP: 0018:ffffc900046ff568 EFLAGS: 00010207 [ 61.378992][ T6100] RAX: dffffc0000000000 RBX: 0000000000000000 RCX: ffffc900076f1000 [ 61.382162][ T6100] RDX: 0000000000000003 RSI: ffffffff8666d369 RDI: ffff888022c28000 [ 61.385214][ T6100] RBP: ffff88802b26a000 R08: 0000000000000005 R09: 0000000000000000 [ 61.388306][ T6100] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 61.391342][ T6100] R13: ffff88802b26a018 R14: 000000000000001c R15: ffff88802b26a000 [ 61.394407][ T6100] FS: 00007f4211ff66c0(0000) GS:ffff8880d5dd8000(0000) knlGS:0000000000000000 [ 61.397862][ T6100] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 61.400498][ T6100] CR2: 00007f4214b5da08 CR3: 000000005d0b1000 CR4: 0000000000352ef0 [ 61.403651][ T6100] Call Trace: [ 61.404999][ T6100] [ 61.406210][ T6100] ? lockdep_hardirqs_on+0x78/0x100 [ 61.408220][ T6100] __devm_regmap_init_i2c+0x28/0x80 [ 61.409942][ T6100] stusb160x_probe+0xe4/0x1ae0 [ 61.411939][ T6100] ? do_raw_spin_unlock+0x145/0x1e0 [ 61.414025][ T6100] ? _raw_spin_unlock+0x28/0x50 [ 61.415937][ T6100] ? __pfx_stusb160x_probe+0x10/0x10 [ 61.418002][ T6100] ? dput.part.0+0x4f/0x240 [ 61.419817][ T6100] ? dput+0x24/0x30 [ 61.421372][ T6100] ? end_dirop+0x82/0xa0 [ 61.423068][ T6100] ? __pfx_stusb160x_probe+0x10/0x10 [ 61.425135][ T6100] i2c_device_probe+0x658/0xd10 [ 61.427076][ T6100] ? kernfs_put+0x3f/0x60 [ 61.428783][ T6100] ? __pfx_i2c_device_probe+0x10/0x10 [ 61.430598][ T6100] ? sysfs_create_link+0x68/0xc0 [ 61.432417][ T6100] ? __pfx_i2c_device_probe+0x10/0x10 [ 61.434557][ T6100] really_probe+0x241/0xa60 [ 61.436367][ T6100] __driver_probe_device+0x20e/0x450 [ 61.438490][ T6100] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 61.440864][ T6100] driver_probe_device+0x4a/0x140 [ 61.442858][ T6100] __device_attach_driver+0x1df/0x320 [ 61.444975][ T6100] ? __pfx___device_attach_driver+0x10/0x10 [ 61.447299][ T6100] bus_for_each_drv+0x159/0x1e0 [ 61.448218][ T5742] Bluetooth: hci3: command 0x0c1a tx timeout [ 61.449233][ T6100] ? __pfx_bus_for_each_drv+0x10/0x10 [ 61.451145][ T5742] Bluetooth: hci1: command 0x0419 tx timeout [ 61.453237][ T6100] ? lockdep_hardirqs_on+0x78/0x100 [ 61.457031][ T6100] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 61.459364][ T6100] __device_attach+0x1e4/0x4d0 [ 61.461259][ T6100] ? __pfx___device_attach+0x10/0x10 [ 61.463329][ T6100] ? do_raw_spin_unlock+0x145/0x1e0 [ 61.465092][ T6100] device_initial_probe+0xaf/0xd0 [ 61.466972][ T6100] bus_probe_device+0x64/0x160 [ 61.468900][ T6100] device_add+0x121d/0x1970 [ 61.470716][ T6100] ? __pfx_device_add+0x10/0x10 [ 61.472641][ T6100] ? lockdep_init_map_type+0x5c/0x250 [ 61.474745][ T6100] ? __init_waitqueue_head+0xca/0x150 [ 61.476854][ T6100] i2c_new_client_device+0x660/0xd30 [ 61.478942][ T6100] new_device_store+0x20f/0x420 [ 61.480891][ T6100] ? __lock_acquire+0x49f/0x1a40 [ 61.482928][ T6100] ? __pfx_new_device_store+0x10/0x10 [ 61.485097][ T6100] ? find_held_lock+0x2b/0x80 [ 61.486989][ T6100] ? sysfs_file_kobj+0xe4/0x290 [ 61.488959][ T6100] ? sysfs_file_kobj+0xe4/0x290 [ 61.490934][ T6100] ? __pfx_new_device_store+0x10/0x10 [ 61.493101][ T6100] dev_attr_store+0x58/0x80 [ 61.494935][ T6100] ? __pfx_dev_attr_store+0x10/0x10 [ 61.497024][ T6100] sysfs_kf_write+0xf2/0x150 [ 61.498896][ T6100] kernfs_fop_write_iter+0x3e0/0x5f0 [ 61.501020][ T6100] ? __pfx_sysfs_kf_write+0x10/0x10 [ 61.503147][ T6100] vfs_write+0x6ac/0x1050 [ 61.504919][ T6100] ? __pfx_kernfs_fop_write_iter+0x10/0x10 [ 61.506832][ T6100] ? __pfx_vfs_write+0x10/0x10 [ 61.508360][ T6100] ksys_write+0x12a/0x250 [ 61.509734][ T6100] ? __pfx_ksys_write+0x10/0x10 [ 61.511271][ T6100] do_syscall_64+0x115/0x870 [ 61.512615][ T6100] ? clear_bhb_loop+0x40/0x90 [ 61.513935][ T6100] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 61.515738][ T6100] RIP: 0033:0x7f4213d9e019 [ 61.517142][ T6100] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 61.523110][ T6100] RSP: 002b:00007f4211ff6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 61.525710][ T6100] RAX: ffffffffffffffda RBX: 00007f4214025fa0 RCX: 00007f4213d9e019 [ 61.528166][ T6100] RDX: 000000000000000f RSI: 0000200000000300 RDI: 0000000000000003 [ 61.530643][ T6100] RBP: 00007f4213e3500c R08: 0000000000000000 R09: 0000000000000000 [ 61.533126][ T6100] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 61.535601][ T6100] R13: 00007f4214026038 R14: 00007f4214025fa0 R15: 00007ffe7e2707b8 [ 61.538058][ T6100] [ 61.539012][ T6100] Modules linked in: [ 61.540617][ T6100] ---[ end trace 0000000000000000 ]--- [ 61.543207][ T6100] RIP: 0010:regmap_get_i2c_bus+0xbe/0xc60 [ 61.543956][ T42] audit: type=1400 audit(1785862142.475:343): avc: denied { read } for pid=5128 comm="syslogd" name="log" dev="sda1" ino=2010 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:var_t tclass=lnk_file permissive=1 [ 61.545029][ T6100] Code: 89 c6 e8 f5 8b a3 fb 45 85 e4 0f 85 84 01 00 00 e8 77 91 a3 fb 4c 8d 73 1c 48 b8 00 00 00 00 00 fc ff df 4c 89 f2 48 c1 ea 03 <0f> b6 14 02 4c 89 f0 83 e0 07 83 c0 03 38 d0 7c 08 84 d2 0f 85 a2 [ 61.545043][ T6100] RSP: 0018:ffffc900046ff568 EFLAGS: 00010207 [ 61.545055][ T6100] RAX: dffffc0000000000 RBX: 0000000000000000 RCX: ffffc900076f1000 [ 61.567225][ T6100] RDX: 0000000000000003 RSI: ffffffff8666d369 RDI: ffff888022c28000 [ 61.569819][ T6100] RBP: ffff88802b26a000 R08: 0000000000000005 R09: 0000000000000000 [ 61.572262][ T6100] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 61.574722][ T6100] R13: ffff88802b26a018 R14: 000000000000001c R15: ffff88802b26a000 [ 61.577383][ T6100] FS: 00007f4211ff66c0(0000) GS:ffff8880d5dd8000(0000) knlGS:0000000000000000 [ 61.580320][ T6100] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 61.582349][ T6100] CR2: 00007f4214b5da08 CR3: 000000005d0b1000 CR4: 0000000000352ef0 [ 61.584733][ T6100] Kernel panic - not syncing: Fatal exception [ 61.587137][ T6100] Kernel Offset: disabled [ 61.588443][ T6100] Rebooting in 86400 seconds..