last executing test programs: 9.544696466s ago: executing program 0 (id=704): r0 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp_SCTP_FRAGMENT_INTERLEAVE(r0, 0x84, 0x12, &(0x7f00000002c0)=0x16, 0x4) connect(r0, &(0x7f0000000400)=@in={0x2, 0x4e20, @loopback}, 0x10) sendto(r0, &(0x7f0000000500)='\x00', 0x34000, 0x0, 0x0, 0x0) 9.466160984s ago: executing program 0 (id=705): r0 = syz_usb_connect(0x3, 0x40, &(0x7f0000001300)=ANY=[@ANYBLOB="12010002000000407205feca00010000000109022e0001010080fa0904000004ff000000070501020002000705810200020007050204e5"], 0x0) setns(0xc9, 0x0) r1 = socket(0x8, 0x5, 0x7fff) syz_usb_ep_read(r0, 0x1, 0x0, 0x0) capset(0x0, &(0x7f0000000080)) syz_usb_ep_write(r0, 0x81, 0x40, &(0x7f0000000100)="900100"/64) ioctl$sock_SIOCOUTQNSD(r1, 0x40106153, &(0x7f0000000000)) 6.669443353s ago: executing program 2 (id=731): socket$packet(0x11, 0x3, 0x300) r0 = syz_io_uring_setup(0xf00, &(0x7f0000000400)={0x0, 0x0, 0x10000, 0x0, 0x55}, &(0x7f0000000100), &(0x7f0000000140), &(0x7f0000000080)) mmap$IORING_OFF_CQ_RING(0x0, 0xd60, 0x9, 0x13, r0, 0x8000000) io_uring_enter(r0, 0x1, 0xfffffffd, 0x9, 0x0, 0x18) socket$pppl2tp(0x18, 0x1, 0x1) r1 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r1, &(0x7f0000000000)={0x18, 0x0, {0x100, @empty, 'lo\x00'}}, 0x1e) ioctl$PPPIOCGCHAN(r1, 0x80047437, &(0x7f0000000040)) r2 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl(r2, 0x7439, 0x0) 6.632469852s ago: executing program 2 (id=732): pipe(&(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x10000000013, &(0x7f0000000180)=0x1, 0x4) socket$packet(0x11, 0x3, 0x300) r2 = socket$inet_udp(0x2, 0x2, 0x0) sendmmsg$inet(r2, &(0x7f0000000040)=[{{&(0x7f0000000100)={0x2, 0x4e23, @empty}, 0x10, &(0x7f0000000000)=[{&(0x7f0000000240)="d2a7b3", 0x3}, {&(0x7f0000000400)="e06bd3f745", 0xfcfd}, {&(0x7f0000000500)="86e9a0d8", 0x4}, {&(0x7f00000005c0)="25062456", 0x4}], 0x4}}], 0x1, 0x4000800) connect$inet(r1, &(0x7f00000001c0)={0x2, 0x200, @local}, 0x10) sendto$inet(r1, &(0x7f0000000200)="e1", 0xfea8, 0x0, 0x0, 0x0) splice(r1, 0x0, r0, 0x0, 0xfea8, 0xa) 6.457130563s ago: executing program 0 (id=736): socketpair$unix(0x1, 0x1, 0x0, 0x0) accept(0xffffffffffffffff, 0x0, &(0x7f0000000b00)) setregid(0x0, 0xee00) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) futex(&(0x7f000000cffc), 0x80000000000b, 0x0, 0x0, &(0x7f0000048000)=0x2, 0x0) futex(&(0x7f000000cffc), 0x80000000000b, 0x0, 0x0, &(0x7f0000048000), 0x0) futex(&(0x7f000000cffc), 0xc, 0x1, &(0x7f0000000040), &(0x7f0000048000), 0x0) sendmsg$RDMA_NLDEV_CMD_PORT_GET(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20000000}, 0x0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, 0x0) 5.569583699s ago: executing program 0 (id=746): r0 = syz_usb_connect(0x3, 0x40, &(0x7f0000001300)=ANY=[@ANYBLOB="12010002000000407205feca00010000000109022e0001010080fa0904000004ff000000070501020002000705810200020007050204e5"], 0x0) setns(0xc9, 0x0) r1 = socket(0x8, 0x5, 0x7fff) syz_usb_ep_read(r0, 0x1, 0x0, 0x0) capset(0x0, &(0x7f0000000080)) syz_usb_ep_write(r0, 0x81, 0x40, &(0x7f0000000100)="900100"/64) ioctl$sock_SIOCOUTQNSD(r1, 0x40106153, &(0x7f0000000000)) 3.581707324s ago: executing program 2 (id=759): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000a00)=ANY=[@ANYBLOB="fc0000001900010029bd7000fbdbdf25fe880000000000000000000000000101ffffffff000000000000000000000000000000004e2400000200000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000000021000001000080000000000000000000000000000000000000000000000000000000000200000000000000fdffffffffffffff000000000000000000000000000000000500000000000000000000000020000000000000000000000000000000000000010002020000000044000500e0000001000000000000000000000000000004d632"], 0xfc}, 0x1, 0x0, 0x0, 0x20080004}, 0x0) r1 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_INIT(r1, 0x0, 0xc8, &(0x7f0000003d40), 0x4) setsockopt$MRT_ADD_VIF(r1, 0x0, 0xca, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, @vifc_lcl_addr=@local, @dev}, 0x10) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$inet_mreq(r2, 0x0, 0x23, &(0x7f0000000000)={@multicast1=0xe0000300, @local}, 0x8) setsockopt$MRT_ADD_VIF(r1, 0x0, 0xca, &(0x7f0000000740)={0x1, 0x0, 0x0, 0x5, @vifc_lcl_addr=@remote, @empty}, 0x10) setsockopt$MRT_ADD_MFC_PROXY(r1, 0x0, 0xd2, &(0x7f00000000c0)={@multicast1=0x1c, @empty=0xe0000300, 0x0, "8a79348df081496d0420922f45a71c1daa8b610468cd140526c41efcd3a4a422", 0x3, 0x1, 0x85}, 0x3c) 2.77136596s ago: executing program 2 (id=764): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./config\x00', &(0x7f0000000040)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./dev\x00', &(0x7f00000000c0)='devtmpfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./config/usb_gadget/g1\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f00000002c0)='./config/usb_gadget/g1/configs/c.1\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./config/usb_gadget/g1/functions/printer.usb0\x00', 0x1ff) symlinkat(0x0, 0xffffffffffffff9c, &(0x7f0000000400)='./config/usb_gadget/g1/configs/c.1/printer.usb0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000480)='./config/usb_gadget/g1/UDC\x00', 0x1, 0x0) write(r0, &(0x7f00000004c0)='dummy_udc.0\n', 0xc) openat(0xffffffffffffff9c, &(0x7f0000000540)='./dev/g_printer0\x00', 0x2, 0x0) 2.325796321s ago: executing program 0 (id=766): prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000540)={&(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000fee000/0x12000)=nil, &(0x7f0000ff6000/0x4000)=nil, &(0x7f0000ff5000/0x3000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ff3000/0x2000)=nil, &(0x7f0000ff0000/0x1000)=nil, &(0x7f0000fea000/0x7000)=nil, &(0x7f00000002c0)}, 0x68) mount(0x0, &(0x7f0000000080)='./config\x00', &(0x7f00000000c0)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./config/usb_gadget/g1/functions/uac2.usb0\x00', 0x1ff) r0 = openat(0xffffffffffffff9c, &(0x7f0000000440)='./config/usb_gadget/g1/UDC\x00', 0x1, 0x0) write(r0, &(0x7f0000000480)='usbip-vudc.0', 0xc) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) write(r0, &(0x7f00000004c0)='\n', 0x1) 2.293919125s ago: executing program 0 (id=768): r0 = syz_usb_connect(0x3, 0x40, &(0x7f0000001300)=ANY=[@ANYBLOB="12010002000000407205feca00010000000109022e0001010080fa0904000004ff000000070501020002000705810200020007050204e5"], 0x0) setns(0xc9, 0x0) r1 = socket(0x8, 0x5, 0x7fff) syz_usb_ep_read(r0, 0x1, 0x0, 0x0) capset(&(0x7f0000000040)={0x20080522}, &(0x7f0000000080)) syz_usb_ep_write(r0, 0x81, 0x0, 0x0) ioctl$sock_SIOCOUTQNSD(r1, 0x4010618d, &(0x7f0000000000)) 2.114767217s ago: executing program 2 (id=770): mount(0x0, &(0x7f0000001500)='./dev\x00', &(0x7f0000001600)='devtmpfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./mnt\x00', 0x0) mount(&(0x7f00000000c0)=@filename='./dev/sda1\x00', &(0x7f0000000140)='./mnt\x00', &(0x7f00000001c0)='ext4\x00', 0x8410, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) chdir(&(0x7f0000000140)='./file0\x00') mremap(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil) rename(&(0x7f0000000100)='./dev\x00', &(0x7f0000000280)='./mnt\x00') 1.866700993s ago: executing program 2 (id=773): r0 = syz_usb_connect(0x3, 0x40, &(0x7f0000001300)=ANY=[@ANYBLOB="12010002000000407205feca00010000000109022e0001010080fa0904000004ff000000070501020002000705810200020007050204e5"], 0x0) setns(0xc9, 0x0) r1 = socket(0x8, 0x5, 0x7fff) syz_usb_ep_read(r0, 0x1, 0x0, 0x0) syz_usb_ep_write(r0, 0x81, 0x3c, &(0x7f0000000100)="900100"/60) ioctl$sock_SIOCOUTQNSD(r1, 0x40106181, &(0x7f0000000000)) 1.560771527s ago: executing program 4 (id=777): mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x3000002, 0x204031, 0xffffffffffffffff, 0xe60d3000) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_elf64(r0, &(0x7f0000000000)=ANY=[], 0xfffffe3e) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) pselect6(0x40, &(0x7f00000002c0)={0x0, 0xfffffffffffffff9, 0x800000000000, 0x400, 0x800, 0x6, 0x8000000ffffffffc}, 0x0, &(0x7f0000000240)={0x1f, 0x104, 0x381, 0x9, 0x1, 0x9e22, 0x5, 0x100}, &(0x7f0000000280)={0x0, 0x989680}, 0x0) 621.647597ms ago: executing program 4 (id=797): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) r1 = dup(r0) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000000040)=[@in6={0xa, 0x4e24, 0xfffffffe, @loopback, 0x5}], 0x1c) sendmsg$inet6(r0, &(0x7f0000000800)={&(0x7f0000000080)={0xa, 0x4e24, 0xb, @loopback, 0x4}, 0x1c, &(0x7f0000000380)=[{&(0x7f00000000c0)="91", 0x1}], 0x1}, 0x48043) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_REM(r0, 0x84, 0x65, &(0x7f0000000100)=[@in={0x2, 0x4e22, @multicast1}, @in6={0xa, 0x4e24, 0x8001, @empty, 0x80}, @in6={0xa, 0x4e22, 0x1, @mcast1, 0x8}, @in6={0xa, 0x4e24, 0x1, @local, 0x1}, @in={0x2, 0x4e24, @broadcast}, @in6={0xa, 0x4e24, 0x8, @dev={0xfe, 0x80, '\x00', 0x1b}, 0xc3}], 0x90) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=ANY=[@ANYBLOB="30000000100001000000000000000071ff9aee24", @ANYRES32=0x0, @ANYBLOB="0000000000000000080004000006000008001b"], 0x30}, 0x1, 0x0, 0x0, 0x4004000}, 0x40080) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, &(0x7f0000000200)={0x0, @in6={{0xa, 0xce20, 0x6, @empty, 0x2a}}, 0x7, 0x1, 0xf06, 0x3, 0xb4, 0x7f, 0x9}, 0x9c) write$P9_RSETATTR(0xffffffffffffffff, &(0x7f0000000000)={0x7, 0x1b, 0x2}, 0xffffff9a) splice(0xffffffffffffffff, 0x0, r0, 0x0, 0x317e, 0x4) 620.816808ms ago: executing program 1 (id=798): socket$nl_netfilter(0x10, 0x3, 0xc) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) socket$kcm(0x10, 0x2, 0x0) socket$netlink(0x10, 0x3, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='memory.current\x00', 0x26e1, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="220000000400000010"], 0x48) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000780)={{r1}, &(0x7f0000000540), &(0x7f0000000740)=r0}, 0x20) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f00000000c0)={r1}, 0x4) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x7, 0x1c, &(0x7f0000000400)=ANY=[@ANYBLOB="18080000cbb60000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000008000000bf0920000000000035090100000000009500000000000000b7080000000000007b8af8ff00000000b7080000020000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32, @ANYBLOB="0000000001000000b7050000080000001c00000000000000bf9800000000000056080000000000008500000005000000b70000000200000095"], &(0x7f0000000000)='GPL\x00', 0x5, 0x0, 0x0, 0x40f00, 0x8, '\x00', 0x0, @fallback=0xc, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000}, 0x94) 593.226448ms ago: executing program 1 (id=799): setns(0xc9, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) bind$netlink(r0, &(0x7f00000001c0)={0x10, 0x0, 0x25dfdbfb, 0x400000}, 0xc) r1 = socket$nl_route(0x10, 0x3, 0x0) bind$netlink(r1, &(0x7f0000000180)={0x10, 0x0, 0x0, 0x10000}, 0xc) r2 = socket$nl_route(0x10, 0x3, 0x0) bind$netlink(r2, &(0x7f0000000280)={0x10, 0x0, 0x0, 0x800000}, 0xc) r3 = socket$netlink(0x10, 0x3, 0x4) writev(r3, &(0x7f0000000100)=[{&(0x7f0000000000)="580000001400192340834b80043f679a10ff3d425f9cc3f4ff7f4e32f61bcdf1e422000000000100804824cabecc4b381eaadc28f23457e792945f64009400050028925aaa000000c600000000000000feff2c707f8f00ff", 0x58}], 0x1) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x200000000000000) 583.268015ms ago: executing program 4 (id=800): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000002c0)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x80000001, '\x00', 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0xa, 0xf, &(0x7f0000000d80)=@ringbuf={{0x18, 0x8}, {{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {0x85, 0x0, 0x0, 0x5}, {0x4}}, {{0x5, 0x0, 0x3}}, [], {{0x7, 0x1, 0xc, 0x9, 0x4}, {0x6, 0x0, 0x5, 0x8}}}, &(0x7f0000000100)='syzkaller\x00', 0x7, 0x0, 0x0, 0x0, 0x7, '\x00', 0x0, @fallback=0x20, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x94) 539.286314ms ago: executing program 3 (id=802): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./config\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./config\x00', &(0x7f00000000c0)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./config/usb_gadget/g1/functions/uac2.usb0\x00', 0x1ff) r0 = openat(0xffffffffffffff9c, &(0x7f0000000440)='./config/usb_gadget/g1/UDC\x00', 0x1, 0x0) write(r0, &(0x7f0000000480)='usbip-vudc.0', 0xc) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) write(r0, &(0x7f00000004c0)='\n', 0x1) 494.170954ms ago: executing program 4 (id=803): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000000), 0x208e24b) ioctl$EXT4_IOC_GET_ES_CACHE(r0, 0xc020662a, &(0x7f0000000100)={0x40, 0xa, 0x5}) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./debug\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./debug\x00', &(0x7f0000000040)='debugfs\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000500)='./debug/lru_gen\x00', 0x2, 0x0) write(r1, &(0x7f0000000800)='- 1 0 0 1', 0x9) 493.692606ms ago: executing program 1 (id=804): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./config\x00', &(0x7f0000000040)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./dev\x00', &(0x7f00000000c0)='devtmpfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./config/usb_gadget\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./config/usb_gadget/g1\x00', 0x1ff) r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./config/usb_gadget/g1/idVendor\x00', 0x1, 0x0) write(r0, &(0x7f00000001c0)='0x12', 0x4) close(r0) r1 = openat(0xffffffffffffff9c, 0x0, 0x1, 0x0) close(r1) mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./config/usb_gadget/g1/strings/0x409\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f00000002c0)='./config/usb_gadget/g1/configs/c.1\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./config/usb_gadget/g1/functions/printer.usb0\x00', 0x1ff) symlinkat(0x0, 0xffffffffffffff9c, &(0x7f0000000400)='./config/usb_gadget/g1/configs/c.1/printer.usb0\x00') r2 = openat(0xffffffffffffff9c, &(0x7f0000000480)='./config/usb_gadget/g1/UDC\x00', 0x1, 0x0) write(r2, &(0x7f00000004c0)='dummy_udc.0\n', 0xc) close(r2) 300.986685ms ago: executing program 1 (id=805): sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={0x0, 0x1f0}}, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x142000) ioctl$SG_IO(r0, 0x2285, &(0x7f00000004c0)={0x53, 0xfffffffffffffffe, 0x6, 0x2, @scatter={0x1, 0xdd, &(0x7f0000000040)}, &(0x7f0000000300)="eded501ef663", 0x0, 0x840802, 0x10030, 0x1000, 0x0}) 296.725699ms ago: executing program 3 (id=806): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000480)=@newtaction={0x18, 0x30, 0x10b, 0x0, 0x0, {}, [{0x4}]}, 0x18}}, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000500)=@base={0x1, 0x8, 0x5, 0x7, 0xc1}, 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000300), &(0x7f0000000100), 0x3f, r0}, 0x38) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000200)={r0, &(0x7f0000000140), 0x0}, 0x20) 248.39854ms ago: executing program 3 (id=807): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./config\x00', &(0x7f0000000040)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./dev\x00', &(0x7f00000000c0)='devtmpfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./config/usb_gadget/g1\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f00000002c0)='./config/usb_gadget/g1/configs/c.1\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./config/usb_gadget/g1/functions/printer.usb0\x00', 0x1ff) symlinkat(&(0x7f0000000380)='./config/usb_gadget/g1/functions/printer.usb0\x00', 0xffffffffffffff9c, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000480)='./config/usb_gadget/g1/UDC\x00', 0x1, 0x0) write(r0, &(0x7f00000004c0)='dummy_udc.0\n', 0xc) openat(0xffffffffffffff9c, &(0x7f0000000540)='./dev/g_printer0\x00', 0x2, 0x0) 229.432723ms ago: executing program 1 (id=808): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x101, 0x0, 0x0, {0x2}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x44, 0x3, 0xa, 0x101, 0x0, 0x0, {0x2}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}, @NFTA_CHAIN_TYPE={0xa, 0x7, 'route\x00'}, @NFTA_CHAIN_HOOK={0xc, 0x4, 0x0, 0x1, [@NFTA_HOOK_HOOKNUM={0x8}]}]}], {0x14}}, 0x8c}}, 0x0) 220.290562ms ago: executing program 4 (id=809): r0 = socket$kcm(0x2, 0xa, 0x2) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000000)={'bond0\x00', &(0x7f0000000040)=@ethtool_sfeatures}) 179.252962ms ago: executing program 3 (id=810): socket$nl_netfilter(0x10, 0x3, 0xc) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) socket$kcm(0x10, 0x2, 0x0) socket$netlink(0x10, 0x3, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='memory.current\x00', 0x26e1, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="220000000400000010"], 0x48) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000780)={{r1}, &(0x7f0000000540), &(0x7f0000000740)=r0}, 0x20) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f00000000c0)={r1}, 0x4) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x7, 0x1c, &(0x7f0000000400)=ANY=[@ANYBLOB="18080000cbb60000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000008000000bf0920000000000035090100000000009500000000000000b7080000000000007b8af8ff00000000b7080000020000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32, @ANYBLOB="0000000001000000b7050000080000001c00000000000000bf9800000000000056080000000000008500000005000000b70000000200000095"], &(0x7f0000000000)='GPL\x00', 0x5, 0x0, 0x0, 0x40f00, 0x8, '\x00', 0x0, @fallback=0xc, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000}, 0x94) 163.759273ms ago: executing program 1 (id=811): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) r1 = dup(r0) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000000040)=[@in6={0xa, 0x4e24, 0xfffffffe, @loopback, 0x5}], 0x1c) sendmsg$inet6(r0, &(0x7f0000000800)={&(0x7f0000000080)={0xa, 0x4e24, 0xb, @loopback, 0x4}, 0x1c, &(0x7f0000000380)=[{&(0x7f00000000c0)="91", 0x1}], 0x1}, 0x48043) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_REM(r0, 0x84, 0x65, &(0x7f0000000100)=[@in={0x2, 0x4e22, @multicast1}, @in6={0xa, 0x4e24, 0x8001, @empty, 0x80}, @in6={0xa, 0x4e22, 0x1, @mcast1, 0x8}, @in6={0xa, 0x4e24, 0x1, @local, 0x1}, @in={0x2, 0x4e24, @broadcast}, @in6={0xa, 0x4e24, 0x8, @dev={0xfe, 0x80, '\x00', 0x1b}, 0xc3}], 0x90) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=ANY=[@ANYBLOB="30000000100001000000000000000071ff9aee24", @ANYRES32=0x0, @ANYBLOB="0000000000000000080004000006000008001b"], 0x30}, 0x1, 0x0, 0x0, 0x4004000}, 0x40080) pipe2$9p(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RSETATTR(r4, &(0x7f0000000000)={0x7, 0x1b, 0x2}, 0xffffff9a) splice(r3, 0x0, r0, 0x0, 0x317e, 0x4) 96.990405ms ago: executing program 3 (id=812): ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r0 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r0, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(0xffffffffffffffff, &(0x7f0000000280)={@val={0x6f01, 0x800}, @val={0x1, 0x0, 0x27, 0x0, 0x27}, @mpls={[], @ipv4=@tcp={{0x6, 0x4, 0x0, 0x0, 0x3f, 0x0, 0x0, 0x0, 0x84, 0x0, @empty=0x3fffff20, @local}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x5, 0xb, 0x0, 0x0, 0x0, 0x18, {[@window={0x9, 0xfffffffffffffec4}, @timestamp={0x5, 0x2, 0x0, 0x700}, @generic={0x0, 0x2, "d58838068b91"}]}}}}}}, 0xfd6c) 17.806133ms ago: executing program 4 (id=813): r0 = syz_usb_connect(0x3, 0x40, &(0x7f0000001300)=ANY=[@ANYBLOB="12010002000000407205feca00010000000109022e0001010080fa0904000004ff000000070501020002000705810200020007050204e5"], 0x0) setns(0xc9, 0x0) r1 = socket(0x8, 0x5, 0x7fff) syz_usb_ep_read(r0, 0x1, 0x0, 0x0) capset(&(0x7f0000000040)={0x20080522}, 0x0) syz_usb_ep_write(r0, 0x81, 0x40, &(0x7f0000000100)="900100"/64) ioctl$sock_SIOCOUTQNSD(r1, 0x40106153, &(0x7f0000000000)) 0s ago: executing program 3 (id=814): unshare(0x2a020480) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0xa2f43, 0x1fd) pwrite64(r0, 0x0, 0x0, 0xfecc) r1 = syz_open_dev$loop(&(0x7f0000000240), 0x195d, 0xec4d2770249a3ef5) r2 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/power/wakeup_count', 0x82803, 0x8e) ioctl$LOOP_CONFIGURE(r1, 0x4c0a, &(0x7f0000000080)={r2, 0x0, {0x0, 0x0, 0x0, 0x6, 0x4000000000000ffd, 0x0, 0x0, 0x1d, 0xc, "faf98317e5a1149989fc8dbe43ea6acc96e3a2503dc3bd3fe37d58128bbad0099cebdc25f5d69098c8b534464c516bdd8a0f350000e35abdb80e38f5eb010001", "32d8cc263d9e234b30c50997d3bef4cd4a5d83cdd3dfe7800b2d7b6aa54cc5001fcaed1e831fa79a0000000200", "67523760fd40f78d2c4d03d81a8ca55ba139c01802c4dae4162e43ac65b7ad33", [0x8, 0x5]}}) ioctl$LOOP_CHANGE_FD(r1, 0x4c06, r2) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$inet6_tcp_TCP_REPAIR(r4, 0x6, 0x13, &(0x7f0000000040), 0x4) write(r3, &(0x7f0000000000)="240000005800410f9c00f4f90085b3a85c91fddf080001000501009f0800028001000000", 0x24) kernel console output (not intermixed with test programs): Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 64.847950][ T4924] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 64.849878][ T4924] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 64.850265][ T4924] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 64.850893][ T4924] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 64.851119][ T4924] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 64.851860][ T4924] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 64.853696][ T5613] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 64.854215][ T52] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 64.855162][ T52] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 64.857318][ T5611] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 64.868393][ T31] audit: type=1400 audit(1789382453.182:149): avc: denied { read } for pid=5602 comm="syz-executor" dev="nsfs" ino=4026531833 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 64.875094][ T31] audit: type=1400 audit(1789382453.182:150): avc: denied { open } for pid=5609 comm="syz-executor" path="net:[4026531833]" dev="nsfs" ino=4026531833 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 64.885839][ T31] audit: type=1400 audit(1789382453.202:151): avc: denied { read } for pid=5603 comm="syz-executor" dev="nsfs" ino=4026531833 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 64.885881][ T31] audit: type=1400 audit(1789382453.202:152): avc: denied { open } for pid=5603 comm="syz-executor" path="net:[4026531833]" dev="nsfs" ino=4026531833 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 65.785536][ T1308] ieee802154 phy0 wpan0: encryption failed: -22 [ 65.785593][ T1308] ieee802154 phy1 wpan1: encryption failed: -22 [ 66.256446][ T5603] bridge0: port 1(bridge_slave_0) entered blocking state [ 66.256514][ T5603] bridge0: port 1(bridge_slave_0) entered disabled state [ 66.256593][ T5603] bridge_slave_0: entered allmulticast mode [ 66.257761][ T5603] bridge_slave_0: entered promiscuous mode [ 66.290952][ T5606] bridge0: port 1(bridge_slave_0) entered blocking state [ 66.291040][ T5606] bridge0: port 1(bridge_slave_0) entered disabled state [ 66.291099][ T5606] bridge_slave_0: entered allmulticast mode [ 66.291818][ T5606] bridge_slave_0: entered promiscuous mode [ 66.324777][ T5603] bridge0: port 2(bridge_slave_1) entered blocking state [ 66.324868][ T5603] bridge0: port 2(bridge_slave_1) entered disabled state [ 66.324923][ T5603] bridge_slave_1: entered allmulticast mode [ 66.325664][ T5603] bridge_slave_1: entered promiscuous mode [ 66.332374][ T5606] bridge0: port 2(bridge_slave_1) entered blocking state [ 66.332443][ T5606] bridge0: port 2(bridge_slave_1) entered disabled state [ 66.332686][ T5606] bridge_slave_1: entered allmulticast mode [ 66.334585][ T5606] bridge_slave_1: entered promiscuous mode [ 66.362366][ T5602] bridge0: port 1(bridge_slave_0) entered blocking state [ 66.362433][ T5602] bridge0: port 1(bridge_slave_0) entered disabled state [ 66.362701][ T5602] bridge_slave_0: entered allmulticast mode [ 66.364165][ T5602] bridge_slave_0: entered promiscuous mode [ 66.366399][ T5602] bridge0: port 2(bridge_slave_1) entered blocking state [ 66.366461][ T5602] bridge0: port 2(bridge_slave_1) entered disabled state [ 66.366552][ T5602] bridge_slave_1: entered allmulticast mode [ 66.367652][ T5602] bridge_slave_1: entered promiscuous mode [ 66.487771][ T5603] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 66.497638][ T5606] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 66.499864][ T5606] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 66.520623][ T5606] team0: Port device team_slave_0 added [ 66.522540][ T5606] team0: Port device team_slave_1 added [ 66.544414][ T5602] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 66.546287][ T5603] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 66.546456][ T5609] bridge0: port 1(bridge_slave_0) entered blocking state [ 66.546515][ T5609] bridge0: port 1(bridge_slave_0) entered disabled state [ 66.546759][ T5609] bridge_slave_0: entered allmulticast mode [ 66.547790][ T5609] bridge_slave_0: entered promiscuous mode [ 66.549358][ T5609] bridge0: port 2(bridge_slave_1) entered blocking state [ 66.549422][ T5609] bridge0: port 2(bridge_slave_1) entered disabled state [ 66.549498][ T5609] bridge_slave_1: entered allmulticast mode [ 66.550661][ T5609] bridge_slave_1: entered promiscuous mode [ 66.552138][ T5606] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 66.552148][ T5606] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 66.552165][ T5606] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 66.554785][ T5606] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 66.554795][ T5606] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 66.554812][ T5606] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 66.592386][ T5602] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 66.623929][ T5603] team0: Port device team_slave_0 added [ 66.625859][ T5603] team0: Port device team_slave_1 added [ 66.663655][ T5606] hsr_slave_0: entered promiscuous mode [ 66.664372][ T5606] hsr_slave_1: entered promiscuous mode [ 66.684184][ T5615] bridge0: port 1(bridge_slave_0) entered blocking state [ 66.684253][ T5615] bridge0: port 1(bridge_slave_0) entered disabled state [ 66.684517][ T5615] bridge_slave_0: entered allmulticast mode [ 66.688568][ T5615] bridge_slave_0: entered promiscuous mode [ 66.713115][ T5602] team0: Port device team_slave_0 added [ 66.717152][ T5602] team0: Port device team_slave_1 added [ 66.746326][ T5615] bridge0: port 2(bridge_slave_1) entered blocking state [ 66.746745][ T5615] bridge0: port 2(bridge_slave_1) entered disabled state [ 66.747002][ T5615] bridge_slave_1: entered allmulticast mode [ 66.748156][ T5615] bridge_slave_1: entered promiscuous mode [ 66.758970][ T5603] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 66.758984][ T5603] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 66.759001][ T5603] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 66.762438][ T5609] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 66.801941][ T5603] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 66.801955][ T5603] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 66.801973][ T5603] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 66.815631][ T5609] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 66.866263][ T5615] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 66.866707][ T5602] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 66.866716][ T5602] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 66.866734][ T5602] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 66.870265][ T5602] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 66.870282][ T5602] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 66.870300][ T5602] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 66.906737][ T5611] Bluetooth: hci2: command tx timeout [ 66.906839][ T5611] Bluetooth: hci3: command tx timeout [ 66.906887][ T5611] Bluetooth: hci4: command tx timeout [ 66.906931][ T5611] Bluetooth: hci0: command tx timeout [ 66.906975][ T5611] Bluetooth: hci1: command tx timeout [ 66.921667][ T5609] team0: Port device team_slave_0 added [ 66.924132][ T5609] team0: Port device team_slave_1 added [ 66.925815][ T5615] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 67.108633][ T5603] hsr_slave_0: entered promiscuous mode [ 67.109321][ T5603] hsr_slave_1: entered promiscuous mode [ 67.109855][ T5603] debugfs: 'hsr0' already exists in 'hsr' [ 67.109933][ T5603] Cannot create hsr debugfs directory [ 67.127603][ T5615] team0: Port device team_slave_0 added [ 67.131069][ T5615] team0: Port device team_slave_1 added [ 67.133870][ T5609] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 67.133880][ T5609] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 67.133898][ T5609] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 67.143155][ T5602] hsr_slave_0: entered promiscuous mode [ 67.149796][ T5602] hsr_slave_1: entered promiscuous mode [ 67.151727][ T5602] debugfs: 'hsr0' already exists in 'hsr' [ 67.151742][ T5602] Cannot create hsr debugfs directory [ 67.210656][ T5609] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 67.210669][ T5609] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 67.210687][ T5609] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 67.258522][ T5615] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 67.258537][ T5615] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 67.258555][ T5615] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 67.299394][ T5615] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 67.299410][ T5615] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 67.299428][ T5615] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 67.385039][ T5609] hsr_slave_0: entered promiscuous mode [ 67.385596][ T5609] hsr_slave_1: entered promiscuous mode [ 67.385957][ T5609] debugfs: 'hsr0' already exists in 'hsr' [ 67.385974][ T5609] Cannot create hsr debugfs directory [ 67.474370][ T5615] hsr_slave_0: entered promiscuous mode [ 67.474820][ T5615] hsr_slave_1: entered promiscuous mode [ 67.475223][ T5615] debugfs: 'hsr0' already exists in 'hsr' [ 67.475240][ T5615] Cannot create hsr debugfs directory [ 67.602522][ T5606] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 67.613017][ T5606] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 67.614186][ T5606] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 67.625909][ T5606] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 67.646562][ T5606] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 67.652531][ T5606] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 67.684543][ T5606] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 67.687207][ T5606] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 67.774110][ T5603] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 67.777849][ T5603] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 67.781059][ T5603] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 67.786429][ T5603] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 67.791581][ T5603] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 67.801622][ T5603] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 67.802200][ T5603] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 67.807629][ T5603] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 67.886949][ T5615] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 67.889253][ T5615] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 67.890130][ T5615] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 67.892567][ T5615] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 67.896758][ T5615] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 67.905163][ T5615] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 67.910032][ T5615] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 67.918915][ T5615] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 67.987517][ T5606] 8021q: adding VLAN 0 to HW filter on device bond0 [ 68.012204][ T5602] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 68.021003][ T5602] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 68.030941][ T5602] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 68.040769][ T5602] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 68.055654][ T5602] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 68.059046][ T5602] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 68.071207][ T5606] 8021q: adding VLAN 0 to HW filter on device team0 [ 68.082550][ T5603] 8021q: adding VLAN 0 to HW filter on device bond0 [ 68.083120][ T5602] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 68.089483][ T5602] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 68.100890][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 68.101046][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 68.105076][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 68.105147][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 68.176328][ T5603] 8021q: adding VLAN 0 to HW filter on device team0 [ 68.179267][ T5609] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 68.186328][ T5609] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 68.211918][ T301] bridge0: port 1(bridge_slave_0) entered blocking state [ 68.211964][ T301] bridge0: port 1(bridge_slave_0) entered forwarding state [ 68.212660][ T5609] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 68.222635][ T5609] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 68.238045][ T301] bridge0: port 2(bridge_slave_1) entered blocking state [ 68.238118][ T301] bridge0: port 2(bridge_slave_1) entered forwarding state [ 68.239297][ T5609] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 68.247446][ T5609] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 68.247985][ T5609] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 68.259039][ T5609] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 68.308984][ T5615] 8021q: adding VLAN 0 to HW filter on device bond0 [ 68.370503][ T5615] 8021q: adding VLAN 0 to HW filter on device team0 [ 68.400724][ T301] bridge0: port 1(bridge_slave_0) entered blocking state [ 68.400791][ T301] bridge0: port 1(bridge_slave_0) entered forwarding state [ 68.438434][ T301] bridge0: port 2(bridge_slave_1) entered blocking state [ 68.438515][ T301] bridge0: port 2(bridge_slave_1) entered forwarding state [ 68.512386][ T5602] 8021q: adding VLAN 0 to HW filter on device bond0 [ 68.575110][ T5609] 8021q: adding VLAN 0 to HW filter on device bond0 [ 68.582761][ T5602] 8021q: adding VLAN 0 to HW filter on device team0 [ 68.607989][ T1546] bridge0: port 1(bridge_slave_0) entered blocking state [ 68.608072][ T1546] bridge0: port 1(bridge_slave_0) entered forwarding state [ 68.616283][ T5609] 8021q: adding VLAN 0 to HW filter on device team0 [ 68.642432][ T45] bridge0: port 1(bridge_slave_0) entered blocking state [ 68.642514][ T45] bridge0: port 1(bridge_slave_0) entered forwarding state [ 68.649929][ T45] bridge0: port 2(bridge_slave_1) entered blocking state [ 68.650001][ T45] bridge0: port 2(bridge_slave_1) entered forwarding state [ 68.656323][ T45] bridge0: port 2(bridge_slave_1) entered blocking state [ 68.656413][ T45] bridge0: port 2(bridge_slave_1) entered forwarding state [ 68.983625][ T5611] Bluetooth: hci0: command tx timeout [ 68.983653][ T5611] Bluetooth: hci4: command tx timeout [ 68.983671][ T5611] Bluetooth: hci3: command tx timeout [ 68.983688][ T5611] Bluetooth: hci2: command tx timeout [ 68.983819][ T5608] Bluetooth: hci1: command tx timeout [ 69.060741][ T5606] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 69.140038][ T5606] veth0_vlan: entered promiscuous mode [ 69.167576][ T5606] veth1_vlan: entered promiscuous mode [ 69.270654][ T5606] veth0_macvtap: entered promiscuous mode [ 69.282461][ T5606] veth1_macvtap: entered promiscuous mode [ 69.304912][ T5603] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 69.359637][ T5606] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 69.391545][ T5606] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 69.400449][ T5615] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 69.477609][ T5603] veth0_vlan: entered promiscuous mode [ 69.516075][ T5603] veth1_vlan: entered promiscuous mode [ 69.575767][ T45] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 69.576086][ T45] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 69.576121][ T45] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 69.576151][ T45] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 69.655811][ T45] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 69.655826][ T45] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 69.738810][ T45] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 69.738829][ T45] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 69.746671][ T5603] veth0_macvtap: entered promiscuous mode [ 69.761674][ T5603] veth1_macvtap: entered promiscuous mode [ 69.777681][ T31] kauditd_printk_skb: 4 callbacks suppressed [ 69.777696][ T31] audit: type=1400 audit(1789382458.092:157): avc: denied { mounton } for pid=5606 comm="syz-executor" path="/root/syzkaller.3C3cvM/syz-tmp" dev="sda1" ino=2042 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_home_t tclass=dir permissive=1 [ 69.777732][ T31] audit: type=1400 audit(1789382458.092:158): avc: denied { mount } for pid=5606 comm="syz-executor" name="/" dev="tmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 69.787069][ T31] audit: type=1400 audit(1789382458.092:159): avc: denied { mounton } for pid=5606 comm="syz-executor" path="/root/syzkaller.3C3cvM/syz-tmp/newroot/dev" dev="tmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 69.788658][ T31] audit: type=1400 audit(1789382458.102:160): avc: denied { mount } for pid=5606 comm="syz-executor" name="/" dev="proc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 69.796206][ T5609] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 69.802900][ T31] audit: type=1400 audit(1789382458.102:161): avc: denied { mounton } for pid=5606 comm="syz-executor" path="/root/syzkaller.3C3cvM/syz-tmp/newroot/sys/kernel/debug" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=dir permissive=1 [ 69.805747][ T5602] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 69.806775][ T31] audit: type=1400 audit(1789382458.102:162): avc: denied { mounton } for pid=5606 comm="syz-executor" path="/root/syzkaller.3C3cvM/syz-tmp/newroot/proc/sys/fs/binfmt_misc" dev="proc" ino=7617 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysctl_fs_t tclass=dir permissive=1 [ 69.817181][ T5603] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 69.832624][ T31] audit: type=1400 audit(1789382458.132:163): avc: denied { unmount } for pid=5606 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 69.838635][ T31] audit: type=1400 audit(1789382458.152:164): avc: denied { mounton } for pid=5606 comm="syz-executor" path="/dev/gadgetfs" dev="devtmpfs" ino=2780 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:device_t tclass=dir permissive=1 [ 69.852805][ T5603] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 69.858067][ T31] audit: type=1400 audit(1789382458.152:165): avc: denied { mount } for pid=5606 comm="syz-executor" name="/" dev="gadgetfs" ino=7637 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfs_t tclass=filesystem permissive=1 [ 69.881896][ T31] audit: type=1400 audit(1789382458.182:166): avc: denied { mount } for pid=5606 comm="syz-executor" name="/" dev="binder" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 70.049233][ T5606] soft_limit_in_bytes is deprecated and will be removed. Writing any value to this file has no effect. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 70.086397][ T5602] veth0_vlan: entered promiscuous mode [ 70.111829][ T5609] veth0_vlan: entered promiscuous mode [ 70.156400][ T5609] veth1_vlan: entered promiscuous mode [ 70.180024][ T5602] veth1_vlan: entered promiscuous mode [ 70.196924][ T66] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 70.196956][ T66] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 70.310751][ T301] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 70.310769][ T301] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 70.312539][ T5609] veth0_macvtap: entered promiscuous mode [ 70.338585][ T5615] veth0_vlan: entered promiscuous mode [ 70.343182][ T5602] veth0_macvtap: entered promiscuous mode [ 70.362454][ T5602] veth1_macvtap: entered promiscuous mode [ 70.369764][ T5609] veth1_macvtap: entered promiscuous mode [ 70.399906][ T5609] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 70.405808][ T5615] veth1_vlan: entered promiscuous mode [ 70.439004][ T5609] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 70.450371][ T5602] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 70.491729][ T5602] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 70.540778][ T5615] veth0_macvtap: entered promiscuous mode [ 70.571684][ T5615] veth1_macvtap: entered promiscuous mode [ 70.680693][ T1546] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 70.680713][ T1546] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 70.698525][ T5615] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 70.720198][ T5615] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 70.781133][ T301] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 70.781153][ T301] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 70.834392][ T1286] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 70.834434][ T1286] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 70.834447][ T1286] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 70.834605][ T1286] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 70.835511][ T1286] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 70.835555][ T1286] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 70.835584][ T1286] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 70.835611][ T1286] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 70.835637][ T1286] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 70.835674][ T1286] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 70.835701][ T1286] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 70.835727][ T1286] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 70.835754][ T1286] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 70.835782][ T1286] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 70.835809][ T1286] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 70.835837][ T1286] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 70.835864][ T1286] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 70.844128][ T1286] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 71.044933][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 71.044951][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 71.068904][ T5608] Bluetooth: hci2: command tx timeout [ 71.068931][ T5608] Bluetooth: hci3: command tx timeout [ 71.068948][ T5608] Bluetooth: hci4: command tx timeout [ 71.068965][ T5608] Bluetooth: hci0: command tx timeout [ 71.069100][ T52] Bluetooth: hci1: command tx timeout [ 71.292993][ T301] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 71.293012][ T301] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 71.695670][ T1482] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 71.695930][ T1482] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 71.878620][ T5814] syzkaller0: entered promiscuous mode [ 71.878644][ T5814] syzkaller0: entered allmulticast mode [ 72.157378][ T5627] udevd[5627]: inotify_add_watch(7, /dev/loop4, 10) failed: No such file or directory [ 72.285525][ T5627] udevd[5627]: inotify_add_watch(7, /dev/loop3, 10) failed: No such file or directory [ 72.338650][ T5627] udevd[5627]: inotify_add_watch(7, /dev/loop2, 10) failed: No such file or directory [ 72.526687][ T5833] netlink: 20 bytes leftover after parsing attributes in process `syz.3.15'. [ 72.527092][ T5834] syz.0.1 uses obsolete (PF_INET,SOCK_PACKET) [ 72.780550][ T5627] udevd[5627]: inotify_add_watch(7, /dev/loop1, 10) failed: No such file or directory [ 73.148932][ T5611] Bluetooth: hci0: command tx timeout [ 73.148960][ T5611] Bluetooth: hci4: command tx timeout [ 73.148976][ T5611] Bluetooth: hci3: command tx timeout [ 73.148994][ T5611] Bluetooth: hci2: command tx timeout [ 73.149039][ T52] Bluetooth: hci1: command tx timeout [ 73.229930][ T5627] udevd[5627]: inotify_add_watch(7, /dev/loop0, 10) failed: No such file or directory [ 73.335904][ T45] nvmet: connect request for invalid subsystem testnqn! [ 73.336272][ T5855] nvme nvme0: Connect Invalid Data Parameter, subsysnqn "testnqn" [ 73.627694][ T5874] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 73.627794][ T5874] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 73.630074][ T5874] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 73.632212][ T5874] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 73.632275][ T5874] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 73.647322][ T5874] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 73.661107][ T5874] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 73.661185][ T5874] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 73.677154][ T5874] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 73.682982][ T5878] netlink: 16 bytes leftover after parsing attributes in process `syz.3.28'. [ 73.695275][ T5874] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 73.696899][ T5874] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 73.711405][ T5874] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 73.722181][ T5874] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 73.722597][ T5874] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 73.732266][ T5874] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 74.073690][ T5788] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 74.133571][ T5725] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 74.224068][ T5788] usb 2-1: New USB device found, idVendor=0572, idProduct=cafe, bcdDevice= 1.00 [ 74.229695][ T5788] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 74.229727][ T5788] usb 2-1: config 1 has 0 interfaces, different from the descriptor's value: 1 [ 74.229776][ T5788] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 74.273863][ T10] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 74.292138][ T5725] usb 4-1: New USB device found, idVendor=0572, idProduct=cafe, bcdDevice= 1.00 [ 74.293023][ T5725] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 74.293065][ T5725] usb 4-1: config 1 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 74.293084][ T5725] usb 4-1: config 1 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 4 [ 74.293118][ T5725] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 74.368911][ T5895] faux_driver vgem: [drm] Unknown color mode 11176; guessing buffer size. [ 74.426150][ T10] usb 3-1: New USB device found, idVendor=0d8c, idProduct=0022, bcdDevice= 0.00 [ 74.431034][ T10] usb 3-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 74.431077][ T10] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 74.448943][ T10] usb 3-1: config 0 descriptor?? [ 74.469573][ T10] usbhid 3-1:0.0: couldn't find an input interrupt endpoint [ 74.590316][ T5725] cxacru 4-1:1.0: usbatm_usb_probe: invalid endpoint 02! [ 74.590854][ T5725] cxacru 4-1:1.0: probe with driver cxacru failed with error -22 [ 74.600489][ T5788] usb 2-1: USB disconnect, device number 2 [ 74.803062][ T5711] usb 4-1: USB disconnect, device number 2 [ 74.843302][ T10] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 74.994158][ T10] usb 1-1: New USB device found, idVendor=0572, idProduct=cafe, bcdDevice= 1.00 [ 74.994897][ T10] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 74.994933][ T10] usb 1-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 4 [ 74.994994][ T10] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 75.003580][ T10] cxacru 1-1:1.0: usbatm_usb_probe: bind failed: -19! [ 75.186994][ T5906] netlink: 16 bytes leftover after parsing attributes in process `syz.4.40'. [ 75.236644][ T52] Bluetooth: hci3: Invalid handle: 0x6161 > 0x0eff [ 75.289202][ T5908] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 75.289308][ T5908] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 75.289384][ T5908] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 75.289452][ T5908] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 75.290207][ T5908] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 75.733324][ T25] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 75.894098][ T25] usb 4-1: New USB device found, idVendor=0572, idProduct=cafe, bcdDevice= 1.00 [ 75.896125][ T25] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 75.896148][ T25] usb 4-1: config 1 has 0 interfaces, different from the descriptor's value: 1 [ 75.896178][ T25] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 76.041049][ T189] cfg80211: failed to load regulatory.db [ 76.187641][ T10] usb 4-1: USB disconnect, device number 3 [ 76.553303][ T25] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 76.704179][ T25] usb 5-1: New USB device found, idVendor=0572, idProduct=cafe, bcdDevice= 1.00 [ 76.708196][ T25] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 76.708240][ T25] usb 5-1: config 1 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 76.708259][ T25] usb 5-1: config 1 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 4 [ 76.708292][ T25] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 76.778778][ T5608] Bluetooth: hci4: Invalid handle: 0x6161 > 0x0eff [ 76.844215][ T5949] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 76.844394][ T5949] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 76.844578][ T5949] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 76.844781][ T5949] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 76.844955][ T5949] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 76.924565][ T25] cxacru 5-1:1.0: usbatm_usb_probe: invalid endpoint 02! [ 76.924719][ T25] cxacru 5-1:1.0: probe with driver cxacru failed with error -22 [ 77.051292][ T10] usb 3-1: USB disconnect, device number 2 [ 77.189452][ T25] usb 5-1: USB disconnect, device number 2 [ 77.503272][ T30] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 77.657034][ T30] usb 4-1: New USB device found, idVendor=0572, idProduct=cafe, bcdDevice= 1.00 [ 77.657321][ T10] usb 1-1: USB disconnect, device number 2 [ 77.658582][ T30] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 77.658626][ T30] usb 4-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 4 [ 77.658660][ T30] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 77.721978][ T30] cxacru 4-1:1.0: usbatm_usb_probe: bind failed: -19! [ 77.763792][ T52] Bluetooth: hci4: Invalid handle: 0x6161 > 0x0eff [ 77.830184][ T5982] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 77.830321][ T5982] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 77.830440][ T5982] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 77.830556][ T5982] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 77.830666][ T5982] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 77.996558][ T31] kauditd_printk_skb: 108 callbacks suppressed [ 77.996575][ T31] audit: type=1400 audit(1789382466.312:275): avc: denied { write } for pid=5993 comm="syz.1.74" laddr=::ffff:127.0.0.1 lport=255 faddr=::ffff:127.0.0.1 fport=20001 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 78.303299][ T30] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 78.453652][ T30] usb 2-1: New USB device found, idVendor=0d8c, idProduct=0022, bcdDevice= 0.00 [ 78.454375][ T30] usb 2-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 78.454398][ T30] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 78.455948][ T30] usb 2-1: config 0 descriptor?? [ 78.460876][ T30] usbhid 2-1:0.0: couldn't find an input interrupt endpoint [ 78.543338][ T10] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 78.563389][ T25] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 78.590272][ T6020] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 78.590831][ T6020] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 78.590962][ T6020] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 78.591069][ T6020] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 78.592484][ T6020] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 78.592606][ T6020] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 78.693887][ T10] usb 5-1: New USB device found, idVendor=0572, idProduct=cafe, bcdDevice= 1.00 [ 78.694772][ T10] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 78.694809][ T10] usb 5-1: config 1 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 78.694827][ T10] usb 5-1: config 1 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 4 [ 78.694862][ T10] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 78.748850][ T25] usb 1-1: New USB device found, idVendor=0572, idProduct=cafe, bcdDevice= 1.00 [ 78.767568][ T25] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 78.767608][ T25] usb 1-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 4 [ 78.767649][ T25] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 78.807635][ T25] cxacru 1-1:1.0: usbatm_usb_probe: bind failed: -19! [ 78.906622][ T10] cxacru 5-1:1.0: usbatm_usb_probe: invalid endpoint 02! [ 78.906774][ T10] cxacru 5-1:1.0: probe with driver cxacru failed with error -22 [ 78.942217][ T31] audit: type=1400 audit(1789382467.252:276): avc: denied { write } for pid=6033 comm="syz.2.91" name="usb_gadget" dev="configfs" ino=1218 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 78.945791][ T31] audit: type=1400 audit(1789382467.262:277): avc: denied { write } for pid=6033 comm="syz.2.91" name="configs" dev="configfs" ino=9647 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 78.946201][ T31] audit: type=1400 audit(1789382467.262:278): avc: denied { write } for pid=6033 comm="syz.2.91" name="functions" dev="configfs" ino=9646 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 78.948715][ T31] audit: type=1400 audit(1789382467.262:279): avc: denied { write } for pid=6033 comm="syz.2.91" name="c.1" dev="configfs" ino=9651 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 78.949307][ T31] audit: type=1400 audit(1789382467.262:280): avc: denied { write } for pid=6033 comm="syz.2.91" name="c.1" dev="configfs" ino=9651 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 79.141954][ T10] usb 5-1: USB disconnect, device number 3 [ 79.768224][ T6053] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 79.768334][ T6053] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 79.768457][ T6053] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 79.769184][ T6053] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 79.769241][ T6053] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 79.772195][ T6053] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 79.915826][ T6057] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 80.179997][ T31] audit: type=1400 audit(1789382468.492:281): avc: denied { read write } for pid=6070 comm="syz.4.105" name="md0" dev="devtmpfs" ino=2799 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 80.180187][ T31] audit: type=1400 audit(1789382468.492:282): avc: denied { open } for pid=6070 comm="syz.4.105" path="/24/dev/md0" dev="devtmpfs" ino=2799 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 80.180897][ T31] audit: type=1400 audit(1789382468.492:283): avc: denied { ioctl } for pid=6070 comm="syz.4.105" path="/24/dev/md0" dev="devtmpfs" ino=2799 ioctlcmd=0x923 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 80.273756][ T25] usb 4-1: USB disconnect, device number 4 [ 80.359628][ T6071] md: could not open device unknown-block(0,0). [ 80.359681][ T6071] md: error, md_import_device() returned -6 [ 80.526837][ T6084] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 80.568963][ T6085] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 80.569588][ T6085] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 80.569719][ T6085] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 80.569787][ T6085] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 80.572102][ T6085] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 80.572208][ T6085] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 80.653295][ T189] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 80.805110][ T189] usb 5-1: New USB device found, idVendor=0572, idProduct=cafe, bcdDevice= 1.00 [ 80.805940][ T189] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 80.805980][ T189] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 80.805998][ T189] usb 5-1: config 1 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 4 [ 80.806025][ T189] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 81.017797][ T189] cxacru 5-1:1.0: usbatm_usb_probe: invalid endpoint 02! [ 81.017879][ T189] cxacru 5-1:1.0: probe with driver cxacru failed with error -22 [ 81.074095][ T5711] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 81.084186][ T189] usb 2-1: USB disconnect, device number 3 [ 81.155537][ T6103] md: array md0 already initialised! [ 81.224196][ T5711] usb 3-1: New USB device found, idVendor=0572, idProduct=cafe, bcdDevice= 1.00 [ 81.227983][ T5711] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 81.228022][ T5711] usb 3-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 4 [ 81.228057][ T5711] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 81.246408][ T5711] cxacru 3-1:1.0: usbatm_usb_probe: bind failed: -19! [ 81.279200][ T189] usb 5-1: USB disconnect, device number 4 [ 81.332430][ T25] usb 1-1: USB disconnect, device number 3 [ 81.381392][ T6103] md: could not open device unknown-block(0,0). [ 81.382193][ T6103] md: error, md_import_device() returned -6 [ 81.415476][ T6114] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 81.523464][ T6118] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 81.523823][ T6118] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 81.523949][ T6118] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 81.524813][ T6118] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 81.524932][ T6118] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 81.525050][ T6118] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 82.054979][ T25] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 82.224039][ T25] usb 4-1: New USB device found, idVendor=0d8c, idProduct=0022, bcdDevice= 0.00 [ 82.224815][ T25] usb 4-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 82.224838][ T25] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 82.227012][ T25] usb 4-1: config 0 descriptor?? [ 82.230358][ T25] usbhid 4-1:0.0: couldn't find an input interrupt endpoint [ 82.274756][ T189] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 82.413301][ T6143] md: array md0 already initialised! [ 82.426923][ T189] usb 5-1: New USB device found, idVendor=0572, idProduct=cafe, bcdDevice= 1.00 [ 82.428476][ T189] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 82.428518][ T189] usb 5-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 4 [ 82.428554][ T189] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 82.472063][ T6144] md: could not open device unknown-block(0,0). [ 82.472129][ T6144] md: error, md_import_device() returned -6 [ 82.532247][ T6148] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 82.647600][ T189] cxacru 5-1:1.0: usbatm_usb_probe: invalid endpoint 02! [ 82.647688][ T189] cxacru 5-1:1.0: probe with driver cxacru failed with error -22 [ 82.665612][ T6152] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 82.665807][ T6152] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 82.668883][ T6152] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 82.669012][ T6152] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 82.669119][ T6152] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 82.669160][ T6152] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 82.888099][ T10] usb 5-1: USB disconnect, device number 5 [ 83.083301][ T189] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 83.233690][ T189] usb 2-1: New USB device found, idVendor=0572, idProduct=cafe, bcdDevice= 1.00 [ 83.234519][ T189] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 83.234556][ T189] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 83.234575][ T189] usb 2-1: config 1 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 4 [ 83.234608][ T189] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 83.442272][ T189] cxacru 2-1:1.0: usbatm_usb_probe: invalid endpoint 02! [ 83.442357][ T189] cxacru 2-1:1.0: probe with driver cxacru failed with error -22 [ 83.474356][ T6176] md: array md0 already initialised! [ 83.498792][ T6178] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 83.576647][ T6176] md: could not open device unknown-block(0,0). [ 83.576677][ T6176] md: error, md_import_device() returned -6 [ 83.679001][ T25] usb 2-1: USB disconnect, device number 4 [ 83.774581][ T6191] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 83.774690][ T6191] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 83.774800][ T6191] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 83.774933][ T6191] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 83.774990][ T6191] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 83.775819][ T6191] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 83.888673][ T25] usb 3-1: USB disconnect, device number 3 [ 83.951096][ T6197] Zero length message leads to an empty skb [ 84.069214][ T6207] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 84.124851][ T6209] md: array md0 already initialised! [ 84.195854][ T6209] md: could not open device unknown-block(0,0). [ 84.195884][ T6209] md: error, md_import_device() returned -6 [ 84.304285][ T12] nvmet: connect request for invalid subsystem testnqn! [ 84.304384][ T6218] nvme nvme0: Connect Invalid Data Parameter, subsysnqn "testnqn" [ 84.394913][ T25] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 84.544093][ T25] usb 3-1: New USB device found, idVendor=0572, idProduct=cafe, bcdDevice= 1.00 [ 84.544888][ T25] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 84.544927][ T25] usb 3-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 4 [ 84.544961][ T25] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 84.714090][ T6235] md: array md0 already initialised! [ 84.723410][ T30] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 84.753328][ T25] cxacru 3-1:1.0: usbatm_usb_probe: invalid endpoint 02! [ 84.753467][ T25] cxacru 3-1:1.0: probe with driver cxacru failed with error -22 [ 84.809944][ T189] usb 4-1: USB disconnect, device number 5 [ 84.854023][ T6235] md: could not open device unknown-block(0,0). [ 84.854069][ T6235] md: error, md_import_device() returned -6 [ 84.875836][ T6240] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 84.886649][ T30] usb 2-1: New USB device found, idVendor=0572, idProduct=cafe, bcdDevice= 1.00 [ 84.887525][ T30] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 84.887563][ T30] usb 2-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 4 [ 84.887598][ T30] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 84.943842][ T30] cxacru 2-1:1.0: usbatm_usb_probe: bind failed: -19! [ 85.014656][ T10] usb 3-1: USB disconnect, device number 4 [ 85.059407][ T301] nvmet: connect request for invalid subsystem testnqn! [ 85.061003][ T6247] nvme nvme0: Connect Invalid Data Parameter, subsysnqn "testnqn" [ 85.243360][ T189] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 85.403779][ T189] usb 4-1: New USB device found, idVendor=0572, idProduct=cafe, bcdDevice= 1.00 [ 85.404712][ T189] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 85.404753][ T189] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 85.404773][ T189] usb 4-1: config 1 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 4 [ 85.404911][ T189] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 85.613485][ T5711] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 85.614783][ T189] cxacru 4-1:1.0: usbatm_usb_probe: invalid endpoint 02! [ 85.614868][ T189] cxacru 4-1:1.0: probe with driver cxacru failed with error -22 [ 85.763668][ T5711] usb 5-1: New USB device found, idVendor=0d8c, idProduct=0022, bcdDevice= 0.00 [ 85.764499][ T5711] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 85.764543][ T5711] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 85.766661][ T5711] usb 5-1: config 0 descriptor?? [ 85.770438][ T5711] usbhid 5-1:0.0: couldn't find an input interrupt endpoint [ 85.792387][ T5613] Bluetooth: hci4: command 0x0c1a tx timeout [ 85.792412][ T52] Bluetooth: hci3: command 0x0c1a tx timeout [ 85.792439][ T5613] Bluetooth: hci2: command 0x0c1a tx timeout [ 85.792442][ T52] Bluetooth: hci1: command 0x0c1a tx timeout [ 85.792465][ T5613] Bluetooth: hci0: command 0x0c1a tx timeout [ 85.849580][ T5711] usb 4-1: USB disconnect, device number 6 [ 86.025734][ T6273] md: array md0 already initialised! [ 86.123159][ T6273] md: could not open device unknown-block(0,0). [ 86.123485][ T6273] md: error, md_import_device() returned -6 [ 86.149274][ T6278] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 86.178550][ T52] Bluetooth: hci1: Ignoring HCI_Connection_Complete for existing connection [ 86.326970][ T301] nvmet: connect request for invalid subsystem testnqn! [ 86.327532][ T6288] nvme nvme0: Connect Invalid Data Parameter, subsysnqn "testnqn" [ 86.410758][ T31] audit: type=1400 audit(1789382474.722:284): avc: denied { write } for pid=6295 comm="syz.2.192" name="subsystems" dev="configfs" ino=3433 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 86.418825][ T6297] nvmet: adding nsid 1 to subsystem testnqn [ 86.419000][ T31] audit: type=1400 audit(1789382474.732:285): avc: denied { write } for pid=6295 comm="syz.2.192" name="namespaces" dev="configfs" ino=10308 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 86.422666][ T31] audit: type=1400 audit(1789382474.732:286): avc: denied { write } for pid=6295 comm="syz.2.192" name="subsystems" dev="configfs" ino=8613 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 86.422702][ T31] audit: type=1400 audit(1789382474.732:287): avc: denied { write } for pid=6295 comm="syz.2.192" name="subsystems" dev="configfs" ino=8613 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 86.763314][ T30] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 86.935447][ T30] usb 3-1: New USB device found, idVendor=0572, idProduct=cafe, bcdDevice= 1.00 [ 86.936258][ T30] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 86.936296][ T30] usb 3-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 4 [ 86.936330][ T30] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 87.106731][ T6307] FAULT_INJECTION: forcing a failure. [ 87.106731][ T6307] name fail_futex, interval 1, probability 0, space 0, times 1 [ 87.106758][ T6307] CPU: 0 UID: 0 PID: 6307 Comm: syz.0.196 Not tainted syzkaller #0 PREEMPT(full) [ 87.106778][ T6307] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/26/2026 [ 87.106789][ T6307] Call Trace: [ 87.106795][ T6307] [ 87.106802][ T6307] dump_stack_lvl+0x100/0x190 [ 87.106831][ T6307] should_fail_ex.cold+0x5/0xa [ 87.106854][ T6307] get_futex_key+0x1d0/0x14f0 [ 87.106869][ T6307] ? __pfx_get_futex_key+0x10/0x10 [ 87.106882][ T6307] ? find_held_lock+0x2b/0x80 [ 87.106897][ T6307] ? futex_wake+0x4ea/0x5e0 [ 87.106925][ T6307] futex_wake+0xf4/0x5e0 [ 87.106951][ T6307] ? futex_wait+0x11e/0x370 [ 87.106971][ T6307] ? __pfx_futex_wake+0x10/0x10 [ 87.107000][ T6307] ? __lock_acquire+0x5c0/0x1f40 [ 87.107017][ T6307] ? ksys_write+0x190/0x250 [ 87.107028][ T6307] ? ksys_write+0x190/0x250 [ 87.107040][ T6307] do_futex+0x2b2/0x440 [ 87.107055][ T6307] ? __pfx_do_futex+0x10/0x10 [ 87.107076][ T6307] ? lock_acquire+0x1d1/0x380 [ 87.107093][ T6307] ? __fget_files+0x34/0x3d0 [ 87.107115][ T6307] ? find_held_lock+0x2b/0x80 [ 87.107141][ T6307] __x64_sys_futex+0x34f/0x4d0 [ 87.107157][ T6307] ? __fget_files+0x21f/0x3d0 [ 87.107170][ T6307] ? __pfx___x64_sys_futex+0x10/0x10 [ 87.107189][ T6307] do_syscall_64+0x123/0x790 [ 87.107207][ T6307] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 87.107225][ T6307] RIP: 0033:0x7f8bc8f9e159 [ 87.107240][ T6307] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 87.107256][ T6307] RSP: 002b:00007f8bc9df60e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 87.107273][ T6307] RAX: ffffffffffffffda RBX: 00007f8bc9225fa8 RCX: 00007f8bc8f9e159 [ 87.107284][ T6307] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007f8bc9225fac [ 87.107291][ T6307] RBP: 00007f8bc9225fa0 R08: 0000000000000001 R09: 0000000000000000 [ 87.107297][ T6307] R10: ffffffffffffffff R11: 0000000000000246 R12: 0000000000000000 [ 87.107303][ T6307] R13: 00007f8bc9226038 R14: 00007ffedd600130 R15: 00007ffedd600218 [ 87.107316][ T6307] [ 87.144026][ T30] cxacru 3-1:1.0: usbatm_usb_probe: invalid endpoint 02! [ 87.144156][ T30] cxacru 3-1:1.0: probe with driver cxacru failed with error -22 [ 87.157370][ T31] audit: type=1400 audit(1789382475.472:288): avc: denied { mount } for pid=6306 comm="syz.0.196" name="/" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=filesystem permissive=1 [ 87.179333][ T31] audit: type=1400 audit(1789382475.492:289): avc: denied { unmount } for pid=5602 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=filesystem permissive=1 [ 87.227826][ T5611] Bluetooth: hci1: Ignoring HCI_Connection_Complete for existing connection [ 87.412110][ T30] usb 3-1: USB disconnect, device number 5 [ 87.516199][ T5711] usb 2-1: USB disconnect, device number 5 [ 87.574267][ T6315] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 87.863322][ T52] Bluetooth: hci2: command 0x0c1a tx timeout [ 87.863333][ T5611] Bluetooth: hci1: command 0x0c1a tx timeout [ 87.863359][ T5611] Bluetooth: hci3: command 0x0c1a tx timeout [ 87.863363][ T52] Bluetooth: hci4: command 0x0c1a tx timeout [ 88.020746][ T6335] nvmet: Disable port '1' before changing attribute in nvmet_addr_trtype_store [ 88.056491][ T6309] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 88.056775][ T6309] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 88.056816][ T6309] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 88.057658][ T6309] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 88.057774][ T6309] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 88.057892][ T6309] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 88.057945][ T6309] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 88.154091][ T301] nvmet: Created nvm controller 1 for subsystem testnqn for NQN nqn.2014-08.org.nvmexpress:uuid:3d3cdf4d-d71a-4897-9a4a-e3732965f7b4. [ 88.159913][ T6335] nvme nvme0: creating 2 I/O queues. [ 88.162322][ T6335] nvme nvme0: new ctrl: "testnqn" [ 88.238614][ T5627] udevd[5627]: inotify_add_watch(7, /dev/nvme0n1, 10) failed: No such file or directory [ 88.343318][ T5711] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 88.374291][ T30] usb 5-1: USB disconnect, device number 6 [ 88.400044][ T6346] FAULT_INJECTION: forcing a failure. [ 88.400044][ T6346] name fail_futex, interval 1, probability 0, space 0, times 0 [ 88.400071][ T6346] CPU: 0 UID: 0 PID: 6346 Comm: syz.4.210 Not tainted syzkaller #0 PREEMPT(full) [ 88.400090][ T6346] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/26/2026 [ 88.400101][ T6346] Call Trace: [ 88.400106][ T6346] [ 88.400111][ T6346] dump_stack_lvl+0x100/0x190 [ 88.400130][ T6346] should_fail_ex.cold+0x5/0xa [ 88.400148][ T6346] get_futex_key+0x1d0/0x14f0 [ 88.400166][ T6346] ? __pfx_get_futex_key+0x10/0x10 [ 88.400181][ T6346] ? find_held_lock+0x2b/0x80 [ 88.400196][ T6346] ? futex_wake+0x4ea/0x5e0 [ 88.400216][ T6346] futex_wake+0xf4/0x5e0 [ 88.400231][ T6346] ? futex_wait+0x11e/0x370 [ 88.400243][ T6346] ? __pfx_futex_wake+0x10/0x10 [ 88.400262][ T6346] ? __lock_acquire+0x5c0/0x1f40 [ 88.400275][ T6346] ? ksys_write+0x190/0x250 [ 88.400285][ T6346] ? ksys_write+0x190/0x250 [ 88.400298][ T6346] do_futex+0x2b2/0x440 [ 88.400313][ T6346] ? __pfx_do_futex+0x10/0x10 [ 88.400327][ T6346] ? lock_acquire+0x1d1/0x380 [ 88.400337][ T6346] ? __fget_files+0x34/0x3d0 [ 88.400351][ T6346] ? find_held_lock+0x2b/0x80 [ 88.400367][ T6346] __x64_sys_futex+0x34f/0x4d0 [ 88.400383][ T6346] ? __fget_files+0x21f/0x3d0 [ 88.400396][ T6346] ? __pfx___x64_sys_futex+0x10/0x10 [ 88.400416][ T6346] do_syscall_64+0x123/0x790 [ 88.400433][ T6346] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 88.400447][ T6346] RIP: 0033:0x7fa59a19e159 [ 88.400457][ T6346] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 88.400468][ T6346] RSP: 002b:00007fa59b0dc0e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 88.400479][ T6346] RAX: ffffffffffffffda RBX: 00007fa59a425fa8 RCX: 00007fa59a19e159 [ 88.400487][ T6346] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007fa59a425fac [ 88.400494][ T6346] RBP: 00007fa59a425fa0 R08: 0000000000000001 R09: 0000000000000000 [ 88.400501][ T6346] R10: ffffffffffffffff R11: 0000000000000246 R12: 0000000000000000 [ 88.400508][ T6346] R13: 00007fa59a426038 R14: 00007ffd2cb301b0 R15: 00007ffd2cb30298 [ 88.400523][ T6346] [ 88.443386][ T189] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 88.505053][ T5711] usb 4-1: New USB device found, idVendor=0572, idProduct=cafe, bcdDevice= 1.00 [ 88.506298][ T5711] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 88.506332][ T5711] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x2 has invalid maxpacket 229, setting to 64 [ 88.506353][ T5711] usb 4-1: config 1 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 4 [ 88.506383][ T5711] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 88.613775][ T189] usb 1-1: New USB device found, idVendor=0572, idProduct=cafe, bcdDevice= 1.00 [ 88.614690][ T189] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 88.614742][ T189] usb 1-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 4 [ 88.614774][ T189] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 88.745476][ T5711] cxacru 4-1:1.0: invalid response length to cm 0x90: 0 [ 88.806858][ T6351] cxacru 4-1:1.0: Direct firmware load for cxacru-fw.bin failed with error -2 [ 88.807075][ T6351] cxacru 4-1:1.0: Falling back to sysfs fallback for: cxacru-fw.bin [ 88.808183][ T31] audit: type=1400 audit(1789382477.122:290): avc: denied { firmware_load } for pid=6351 comm="cxacru" scontext=system_u:system_r:kernel_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1 [ 88.845104][ T189] cxacru 1-1:1.0: usbatm_usb_probe: invalid endpoint 02! [ 88.845235][ T189] cxacru 1-1:1.0: probe with driver cxacru failed with error -22 [ 88.891638][ T6356] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 89.021352][ T189] usb 4-1: USB disconnect, device number 7 [ 89.100072][ T5711] usb 1-1: USB disconnect, device number 4 [ 89.123297][ T25] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 89.273740][ T25] usb 2-1: New USB device found, idVendor=0572, idProduct=cafe, bcdDevice= 1.00 [ 89.274530][ T25] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 89.274568][ T25] usb 2-1: config 1 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 89.274586][ T25] usb 2-1: config 1 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 4 [ 89.274617][ T25] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 89.383378][ T5613] Bluetooth: hci0: command 0x0c1a tx timeout [ 89.482139][ T25] cxacru 2-1:1.0: usbatm_usb_probe: invalid endpoint 02! [ 89.482229][ T25] cxacru 2-1:1.0: probe with driver cxacru failed with error -22 [ 89.734553][ T5711] usb 2-1: USB disconnect, device number 6 [ 89.896416][ T6376] FAULT_INJECTION: forcing a failure. [ 89.896416][ T6376] name fail_futex, interval 1, probability 0, space 0, times 0 [ 89.896445][ T6376] CPU: 1 UID: 0 PID: 6376 Comm: syz.0.222 Not tainted syzkaller #0 PREEMPT(full) [ 89.896465][ T6376] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/26/2026 [ 89.896475][ T6376] Call Trace: [ 89.896481][ T6376] [ 89.896488][ T6376] dump_stack_lvl+0x100/0x190 [ 89.896528][ T6376] should_fail_ex.cold+0x5/0xa [ 89.896557][ T6376] get_futex_key+0x1d0/0x14f0 [ 89.896585][ T6376] ? __pfx_get_futex_key+0x10/0x10 [ 89.896607][ T6376] ? find_held_lock+0x2b/0x80 [ 89.896633][ T6376] ? futex_wake+0x4ea/0x5e0 [ 89.896666][ T6376] futex_wake+0xf4/0x5e0 [ 89.896691][ T6376] ? futex_wait+0x11e/0x370 [ 89.896711][ T6376] ? __pfx_futex_wake+0x10/0x10 [ 89.896744][ T6376] ? __lock_acquire+0x5c0/0x1f40 [ 89.896763][ T6376] ? ksys_write+0x190/0x250 [ 89.896782][ T6376] ? ksys_write+0x190/0x250 [ 89.896801][ T6376] do_futex+0x2b2/0x440 [ 89.896828][ T6376] ? __pfx_do_futex+0x10/0x10 [ 89.896850][ T6376] ? lock_acquire+0x1d1/0x380 [ 89.896868][ T6376] ? __fget_files+0x34/0x3d0 [ 89.896891][ T6376] ? find_held_lock+0x2b/0x80 [ 89.896919][ T6376] __x64_sys_futex+0x34f/0x4d0 [ 89.896946][ T6376] ? __fget_files+0x21f/0x3d0 [ 89.896969][ T6376] ? __pfx___x64_sys_futex+0x10/0x10 [ 89.897002][ T6376] do_syscall_64+0x123/0x790 [ 89.897031][ T6376] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 89.897051][ T6376] RIP: 0033:0x7f8bc8f9e159 [ 89.897069][ T6376] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 89.897086][ T6376] RSP: 002b:00007f8bc9df60e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 89.897105][ T6376] RAX: ffffffffffffffda RBX: 00007f8bc9225fa8 RCX: 00007f8bc8f9e159 [ 89.897117][ T6376] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007f8bc9225fac [ 89.897128][ T6376] RBP: 00007f8bc9225fa0 R08: 0000000000000001 R09: 0000000000000000 [ 89.897140][ T6376] R10: ffffffffffffffff R11: 0000000000000246 R12: 0000000000000000 [ 89.897150][ T6376] R13: 00007f8bc9226038 R14: 00007ffedd600130 R15: 00007ffedd600218 [ 89.897174][ T6376] [ 89.897723][ T6377] nvmet: Disable port '1' before changing attribute in nvmet_addr_trtype_store [ 90.103363][ T5613] Bluetooth: hci3: command 0x0c1a tx timeout [ 90.103394][ T5613] Bluetooth: hci1: command 0x0c1a tx timeout [ 90.106823][ T5613] Bluetooth: hci2: command 0x0c1a tx timeout [ 90.106847][ T5613] Bluetooth: hci4: command 0x0c1a tx timeout [ 90.647097][ T6369] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 90.647165][ T6369] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 90.647951][ T6369] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 90.648069][ T6369] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 90.648183][ T6369] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 90.648324][ T6369] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 90.757865][ T6395] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 90.913303][ T5711] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 90.913303][ T30] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 90.938415][ T25] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 91.065241][ T30] usb 1-1: New USB device found, idVendor=0572, idProduct=cafe, bcdDevice= 1.00 [ 91.066106][ T30] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 91.066143][ T30] usb 1-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 4 [ 91.066178][ T30] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 91.084571][ T25] usb 2-1: New USB device found, idVendor=0572, idProduct=cafe, bcdDevice= 1.00 [ 91.085417][ T25] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 91.085451][ T25] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x2 has invalid maxpacket 229, setting to 64 [ 91.085472][ T25] usb 2-1: config 1 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 4 [ 91.085523][ T25] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 91.093292][ T5711] usb 3-1: New USB device found, idVendor=0d8c, idProduct=0022, bcdDevice= 0.00 [ 91.134174][ T5711] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 91.134212][ T5711] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 91.195387][ T5711] usb 3-1: config 0 descriptor?? [ 91.200261][ T5711] usbhid 3-1:0.0: couldn't find an input interrupt endpoint [ 91.283754][ T30] cxacru 1-1:1.0: usbatm_usb_probe: invalid endpoint 02! [ 91.283933][ T30] cxacru 1-1:1.0: probe with driver cxacru failed with error -22 [ 91.303928][ T25] cxacru 2-1:1.0: invalid response length to cm 0x90: 0 [ 91.505735][ T30] usb 1-1: USB disconnect, device number 5 [ 91.533769][ T5788] usb 2-1: USB disconnect, device number 7 [ 91.759844][ T6411] FAULT_INJECTION: forcing a failure. [ 91.759844][ T6411] name fail_futex, interval 1, probability 0, space 0, times 0 [ 91.759874][ T6411] CPU: 0 UID: 0 PID: 6411 Comm: syz.4.235 Not tainted syzkaller #0 PREEMPT(full) [ 91.759887][ T6411] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/26/2026 [ 91.759893][ T6411] Call Trace: [ 91.759897][ T6411] [ 91.759901][ T6411] dump_stack_lvl+0x100/0x190 [ 91.759925][ T6411] should_fail_ex.cold+0x5/0xa [ 91.759942][ T6411] get_futex_key+0x1d0/0x14f0 [ 91.759959][ T6411] ? __pfx_get_futex_key+0x10/0x10 [ 91.759973][ T6411] ? find_held_lock+0x2b/0x80 [ 91.759989][ T6411] ? futex_wake+0x4ea/0x5e0 [ 91.760009][ T6411] futex_wake+0xf4/0x5e0 [ 91.760026][ T6411] ? futex_wait+0x11e/0x370 [ 91.760037][ T6411] ? __pfx_futex_wake+0x10/0x10 [ 91.760055][ T6411] ? __lock_acquire+0x5c0/0x1f40 [ 91.760068][ T6411] ? ksys_write+0x190/0x250 [ 91.760079][ T6411] ? ksys_write+0x190/0x250 [ 91.760091][ T6411] do_futex+0x2b2/0x440 [ 91.760106][ T6411] ? __pfx_do_futex+0x10/0x10 [ 91.760120][ T6411] ? lock_acquire+0x1d1/0x380 [ 91.760130][ T6411] ? __fget_files+0x34/0x3d0 [ 91.760144][ T6411] ? find_held_lock+0x2b/0x80 [ 91.760161][ T6411] __x64_sys_futex+0x34f/0x4d0 [ 91.760176][ T6411] ? __fget_files+0x21f/0x3d0 [ 91.760189][ T6411] ? __pfx___x64_sys_futex+0x10/0x10 [ 91.760209][ T6411] do_syscall_64+0x123/0x790 [ 91.760225][ T6411] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 91.760236][ T6411] RIP: 0033:0x7fa59a19e159 [ 91.760245][ T6411] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 91.760255][ T6411] RSP: 002b:00007fa59b0dc0e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 91.760267][ T6411] RAX: ffffffffffffffda RBX: 00007fa59a425fa8 RCX: 00007fa59a19e159 [ 91.760273][ T6411] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007fa59a425fac [ 91.760280][ T6411] RBP: 00007fa59a425fa0 R08: 0000000000000001 R09: 0000000000000000 [ 91.760286][ T6411] R10: ffffffffffffffff R11: 0000000000000246 R12: 0000000000000000 [ 91.760293][ T6411] R13: 00007fa59a426038 R14: 00007ffd2cb301b0 R15: 00007ffd2cb30298 [ 91.760306][ T6411] [ 91.950099][ T5613] Bluetooth: hci0: command 0x0c1a tx timeout [ 92.103493][ T30] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 92.104064][ T6422] nvmet: Disable port '1' before changing attribute in nvmet_addr_trtype_store [ 92.253706][ T30] usb 5-1: New USB device found, idVendor=0572, idProduct=cafe, bcdDevice= 1.00 [ 92.254498][ T30] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 92.254557][ T30] usb 5-1: config 1 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 92.254576][ T30] usb 5-1: config 1 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 4 [ 92.254609][ T30] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 92.461228][ T30] cxacru 5-1:1.0: usbatm_usb_probe: invalid endpoint 02! [ 92.461329][ T30] cxacru 5-1:1.0: probe with driver cxacru failed with error -22 [ 92.663408][ T52] Bluetooth: hci2: command 0x0c1a tx timeout [ 92.663440][ T52] Bluetooth: hci3: command 0x0c1a tx timeout [ 92.663461][ T52] Bluetooth: hci1: command 0x0c1a tx timeout [ 92.663481][ T52] Bluetooth: hci4: command 0x0c1a tx timeout [ 92.724962][ T5711] usb 5-1: USB disconnect, device number 7 [ 92.791360][ T6433] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 92.902564][ T6418] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 92.902805][ T6418] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 92.902867][ T6418] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 92.915172][ T6418] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 92.918316][ T6418] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 92.918494][ T6418] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 93.032707][ T6440] nvmet: Disable port '1' before changing attribute in nvmet_addr_trtype_store [ 93.075973][ T6442] FAULT_INJECTION: forcing a failure. [ 93.075973][ T6442] name fail_futex, interval 1, probability 0, space 0, times 0 [ 93.076003][ T6442] CPU: 1 UID: 0 PID: 6442 Comm: syz.1.247 Not tainted syzkaller #0 PREEMPT(full) [ 93.076023][ T6442] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/26/2026 [ 93.076034][ T6442] Call Trace: [ 93.076040][ T6442] [ 93.076048][ T6442] dump_stack_lvl+0x100/0x190 [ 93.076081][ T6442] should_fail_ex.cold+0x5/0xa [ 93.076109][ T6442] get_futex_key+0x1d0/0x14f0 [ 93.076138][ T6442] ? __pfx_get_futex_key+0x10/0x10 [ 93.076161][ T6442] ? find_held_lock+0x2b/0x80 [ 93.076187][ T6442] ? futex_wake+0x4ea/0x5e0 [ 93.076229][ T6442] futex_wake+0xf4/0x5e0 [ 93.076255][ T6442] ? futex_wait+0x11e/0x370 [ 93.076276][ T6442] ? __pfx_futex_wake+0x10/0x10 [ 93.076307][ T6442] ? __lock_acquire+0x5c0/0x1f40 [ 93.076328][ T6442] ? ksys_write+0x190/0x250 [ 93.076346][ T6442] ? ksys_write+0x190/0x250 [ 93.076368][ T6442] do_futex+0x2b2/0x440 [ 93.076394][ T6442] ? __pfx_do_futex+0x10/0x10 [ 93.076416][ T6442] ? lock_acquire+0x1d1/0x380 [ 93.076434][ T6442] ? __fget_files+0x34/0x3d0 [ 93.076458][ T6442] ? find_held_lock+0x2b/0x80 [ 93.076488][ T6442] __x64_sys_futex+0x34f/0x4d0 [ 93.076516][ T6442] ? __fget_files+0x21f/0x3d0 [ 93.076539][ T6442] ? __pfx___x64_sys_futex+0x10/0x10 [ 93.076575][ T6442] do_syscall_64+0x123/0x790 [ 93.076604][ T6442] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 93.076623][ T6442] RIP: 0033:0x7f8d9059e159 [ 93.076639][ T6442] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 93.076656][ T6442] RSP: 002b:00007f8d915000e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 93.076675][ T6442] RAX: ffffffffffffffda RBX: 00007f8d90825fa8 RCX: 00007f8d9059e159 [ 93.076688][ T6442] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007f8d90825fac [ 93.076699][ T6442] RBP: 00007f8d90825fa0 R08: 0000000000000001 R09: 0000000000000000 [ 93.076710][ T6442] R10: ffffffffffffffff R11: 0000000000000246 R12: 0000000000000000 [ 93.076721][ T6442] R13: 00007f8d90826038 R14: 00007ffff8dd0df0 R15: 00007ffff8dd0ed8 [ 93.076746][ T6442] [ 93.218477][ T5711] usb 3-1: USB disconnect, device number 6 [ 93.593335][ T30] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 93.744817][ T30] usb 5-1: New USB device found, idVendor=0572, idProduct=cafe, bcdDevice= 1.00 [ 93.748052][ T30] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 93.748095][ T30] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x2 has invalid maxpacket 229, setting to 64 [ 93.748118][ T30] usb 5-1: config 1 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 4 [ 93.748150][ T30] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 93.867418][ T301] nvmet: Created nvm controller 2 for subsystem testnqn for NQN nqn.2014-08.org.nvmexpress:uuid:3d3cdf4d-d71a-4897-9a4a-e3732965f7b4. [ 93.869977][ T6459] nvme nvme1: creating 2 I/O queues. [ 93.871674][ T6459] nvme nvme1: new ctrl: "testnqn" [ 93.929884][ T6462] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 93.970796][ T30] cxacru 5-1:1.0: invalid response length to cm 0x90: 0 [ 94.035202][ T6469] nvmet: Disable port '1' before changing attribute in nvmet_addr_trtype_store [ 94.125202][ T6475] FAULT_INJECTION: forcing a failure. [ 94.125202][ T6475] name fail_futex, interval 1, probability 0, space 0, times 0 [ 94.125231][ T6475] CPU: 1 UID: 0 PID: 6475 Comm: syz.0.262 Not tainted syzkaller #0 PREEMPT(full) [ 94.125243][ T6475] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/26/2026 [ 94.125250][ T6475] Call Trace: [ 94.125254][ T6475] [ 94.125258][ T6475] dump_stack_lvl+0x100/0x190 [ 94.125278][ T6475] should_fail_ex.cold+0x5/0xa [ 94.125297][ T6475] get_futex_key+0x1d0/0x14f0 [ 94.125315][ T6475] ? __pfx_get_futex_key+0x10/0x10 [ 94.125328][ T6475] ? find_held_lock+0x2b/0x80 [ 94.125343][ T6475] ? futex_wake+0x4ea/0x5e0 [ 94.125377][ T6475] futex_wake+0xf4/0x5e0 [ 94.125393][ T6475] ? futex_wait+0x11e/0x370 [ 94.125405][ T6475] ? __pfx_futex_wake+0x10/0x10 [ 94.125424][ T6475] ? __lock_acquire+0x5c0/0x1f40 [ 94.125437][ T6475] ? ksys_write+0x190/0x250 [ 94.125448][ T6475] ? ksys_write+0x190/0x250 [ 94.125460][ T6475] do_futex+0x2b2/0x440 [ 94.125477][ T6475] ? __pfx_do_futex+0x10/0x10 [ 94.125492][ T6475] ? lock_acquire+0x1d1/0x380 [ 94.125503][ T6475] ? __fget_files+0x34/0x3d0 [ 94.125517][ T6475] ? find_held_lock+0x2b/0x80 [ 94.125533][ T6475] __x64_sys_futex+0x34f/0x4d0 [ 94.125548][ T6475] ? __fget_files+0x21f/0x3d0 [ 94.125561][ T6475] ? __pfx___x64_sys_futex+0x10/0x10 [ 94.125580][ T6475] do_syscall_64+0x123/0x790 [ 94.125596][ T6475] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 94.125607][ T6475] RIP: 0033:0x7f8bc8f9e159 [ 94.125617][ T6475] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 94.125626][ T6475] RSP: 002b:00007f8bc9df60e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 94.125638][ T6475] RAX: ffffffffffffffda RBX: 00007f8bc9225fa8 RCX: 00007f8bc8f9e159 [ 94.125644][ T6475] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007f8bc9225fac [ 94.125651][ T6475] RBP: 00007f8bc9225fa0 R08: 0000000000000001 R09: 0000000000000000 [ 94.125657][ T6475] R10: ffffffffffffffff R11: 0000000000000246 R12: 0000000000000000 [ 94.125663][ T6475] R13: 00007f8bc9226038 R14: 00007ffedd600130 R15: 00007ffedd600218 [ 94.125676][ T6475] [ 94.193423][ T5613] Bluetooth: hci0: command 0x0c1a tx timeout [ 94.258093][ T10] usb 5-1: USB disconnect, device number 8 [ 94.324046][ T5711] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 94.388724][ T31] audit: type=1400 audit(1789382482.702:291): avc: denied { read } for pid=6482 comm="syz.0.265" name="kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 94.388891][ T31] audit: type=1400 audit(1789382482.702:292): avc: denied { open } for pid=6482 comm="syz.0.265" path="/dev/kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 94.483797][ T5711] usb 3-1: New USB device found, idVendor=0d8c, idProduct=0022, bcdDevice= 0.00 [ 94.486485][ T5711] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 94.486525][ T5711] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 94.494619][ T5711] usb 3-1: config 0 descriptor?? [ 94.506687][ T5711] usbhid 3-1:0.0: couldn't find an input interrupt endpoint [ 94.598901][ T45] nvmet: Created nvm controller 3 for subsystem testnqn for NQN nqn.2014-08.org.nvmexpress:uuid:3d3cdf4d-d71a-4897-9a4a-e3732965f7b4. [ 94.600314][ T6487] nvme nvme2: creating 2 I/O queues. [ 94.602642][ T6487] nvme nvme2: new ctrl: "testnqn" [ 94.792113][ T6492] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 94.846843][ T6496] nvmet: Disable port '1' before changing attribute in nvmet_addr_trtype_store [ 94.903370][ T5613] Bluetooth: hci1: command 0x0c1a tx timeout [ 94.983334][ T5611] Bluetooth: hci3: command 0x0c1a tx timeout [ 94.983367][ T5611] Bluetooth: hci2: command 0x0c1a tx timeout [ 94.983410][ T5613] Bluetooth: hci4: command 0x0c1a tx timeout [ 95.175927][ T6504] FAULT_INJECTION: forcing a failure. [ 95.175927][ T6504] name fail_futex, interval 1, probability 0, space 0, times 0 [ 95.175955][ T6504] CPU: 0 UID: 0 PID: 6504 Comm: syz.0.274 Not tainted syzkaller #0 PREEMPT(full) [ 95.175967][ T6504] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/26/2026 [ 95.175973][ T6504] Call Trace: [ 95.175977][ T6504] [ 95.175982][ T6504] dump_stack_lvl+0x100/0x190 [ 95.176002][ T6504] should_fail_ex.cold+0x5/0xa [ 95.176019][ T6504] get_futex_key+0x1d0/0x14f0 [ 95.176036][ T6504] ? __pfx_get_futex_key+0x10/0x10 [ 95.176050][ T6504] ? find_held_lock+0x2b/0x80 [ 95.176065][ T6504] ? futex_wake+0x4ea/0x5e0 [ 95.176083][ T6504] futex_wake+0xf4/0x5e0 [ 95.176098][ T6504] ? futex_wait+0x11e/0x370 [ 95.176110][ T6504] ? __pfx_futex_wake+0x10/0x10 [ 95.176128][ T6504] ? __lock_acquire+0x5c0/0x1f40 [ 95.176140][ T6504] ? ksys_write+0x190/0x250 [ 95.176151][ T6504] ? ksys_write+0x190/0x250 [ 95.176163][ T6504] do_futex+0x2b2/0x440 [ 95.176178][ T6504] ? __pfx_do_futex+0x10/0x10 [ 95.176191][ T6504] ? lock_acquire+0x1d1/0x380 [ 95.176204][ T6504] ? __fget_files+0x34/0x3d0 [ 95.176217][ T6504] ? find_held_lock+0x2b/0x80 [ 95.176234][ T6504] __x64_sys_futex+0x34f/0x4d0 [ 95.176249][ T6504] ? __fget_files+0x21f/0x3d0 [ 95.176262][ T6504] ? __pfx___x64_sys_futex+0x10/0x10 [ 95.176281][ T6504] do_syscall_64+0x123/0x790 [ 95.176297][ T6504] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 95.176308][ T6504] RIP: 0033:0x7f8bc8f9e159 [ 95.176318][ T6504] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 95.176328][ T6504] RSP: 002b:00007f8bc9df60e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 95.176339][ T6504] RAX: ffffffffffffffda RBX: 00007f8bc9225fa8 RCX: 00007f8bc8f9e159 [ 95.176346][ T6504] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007f8bc9225fac [ 95.176352][ T6504] RBP: 00007f8bc9225fa0 R08: 0000000000000001 R09: 0000000000000000 [ 95.176358][ T6504] R10: ffffffffffffffff R11: 0000000000000246 R12: 0000000000000000 [ 95.176365][ T6504] R13: 00007f8bc9226038 R14: 00007ffedd600130 R15: 00007ffedd600218 [ 95.176378][ T6504] [ 95.619470][ T1286] nvmet: Created nvm controller 4 for subsystem testnqn for NQN nqn.2014-08.org.nvmexpress:uuid:3d3cdf4d-d71a-4897-9a4a-e3732965f7b4. [ 95.620592][ T6517] nvme nvme3: creating 2 I/O queues. [ 95.622294][ T6517] nvme nvme3: new ctrl: "testnqn" [ 95.903444][ T5711] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 96.039797][ T6522] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 96.053947][ T5711] usb 1-1: New USB device found, idVendor=0572, idProduct=cafe, bcdDevice= 1.00 [ 96.056011][ T5711] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 96.056052][ T5711] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x2 has invalid maxpacket 229, setting to 64 [ 96.056074][ T5711] usb 1-1: config 1 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 4 [ 96.056094][ T5711] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 96.163730][ T6526] nvmet: Disable port '1' before changing attribute in nvmet_addr_trtype_store [ 96.264936][ T5711] cxacru 1-1:1.0: invalid response length to cm 0x90: 0 [ 96.329093][ T6533] FAULT_INJECTION: forcing a failure. [ 96.329093][ T6533] name fail_futex, interval 1, probability 0, space 0, times 0 [ 96.329113][ T6533] CPU: 1 UID: 0 PID: 6533 Comm: syz.1.286 Not tainted syzkaller #0 PREEMPT(full) [ 96.329126][ T6533] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/26/2026 [ 96.329132][ T6533] Call Trace: [ 96.329136][ T6533] [ 96.329140][ T6533] dump_stack_lvl+0x100/0x190 [ 96.329160][ T6533] should_fail_ex.cold+0x5/0xa [ 96.329181][ T6533] get_futex_key+0x1d0/0x14f0 [ 96.329207][ T6533] ? __pfx_get_futex_key+0x10/0x10 [ 96.329229][ T6533] ? find_held_lock+0x2b/0x80 [ 96.329253][ T6533] ? futex_wake+0x4ea/0x5e0 [ 96.329273][ T6533] futex_wake+0xf4/0x5e0 [ 96.329289][ T6533] ? futex_wait+0x11e/0x370 [ 96.329300][ T6533] ? __pfx_futex_wake+0x10/0x10 [ 96.329318][ T6533] ? __lock_acquire+0x5c0/0x1f40 [ 96.329331][ T6533] ? ksys_write+0x190/0x250 [ 96.329342][ T6533] ? ksys_write+0x190/0x250 [ 96.329354][ T6533] do_futex+0x2b2/0x440 [ 96.329369][ T6533] ? __pfx_do_futex+0x10/0x10 [ 96.329383][ T6533] ? lock_acquire+0x1d1/0x380 [ 96.329393][ T6533] ? __fget_files+0x34/0x3d0 [ 96.329406][ T6533] ? find_held_lock+0x2b/0x80 [ 96.329423][ T6533] __x64_sys_futex+0x34f/0x4d0 [ 96.329439][ T6533] ? __fget_files+0x21f/0x3d0 [ 96.329452][ T6533] ? __pfx___x64_sys_futex+0x10/0x10 [ 96.329471][ T6533] do_syscall_64+0x123/0x790 [ 96.329487][ T6533] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 96.329499][ T6533] RIP: 0033:0x7f8d9059e159 [ 96.329508][ T6533] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 96.329519][ T6533] RSP: 002b:00007f8d915000e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 96.329530][ T6533] RAX: ffffffffffffffda RBX: 00007f8d90825fa8 RCX: 00007f8d9059e159 [ 96.329537][ T6533] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007f8d90825fac [ 96.329543][ T6533] RBP: 00007f8d90825fa0 R08: 0000000000000001 R09: 0000000000000000 [ 96.329552][ T6533] R10: ffffffffffffffff R11: 0000000000000246 R12: 0000000000000000 [ 96.329559][ T6533] R13: 00007f8d90826038 R14: 00007ffff8dd0df0 R15: 00007ffff8dd0ed8 [ 96.329572][ T6533] [ 96.599293][ T5711] usb 1-1: USB disconnect, device number 6 [ 96.718323][ T6545] nvmet: Disable port '1' before changing attribute in nvmet_addr_trtype_store [ 96.741758][ T12] nvmet: Created nvm controller 5 for subsystem testnqn for NQN nqn.2014-08.org.nvmexpress:uuid:3d3cdf4d-d71a-4897-9a4a-e3732965f7b4. [ 96.743077][ T6545] nvme nvme4: creating 2 I/O queues. [ 96.764178][ T6545] nvme nvme4: new ctrl: "testnqn" [ 96.870838][ T6550] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 96.938367][ T6555] nvmet: Disable port '1' before changing attribute in nvmet_addr_trtype_store [ 96.994452][ T5613] Bluetooth: hci1: command 0x0c1a tx timeout [ 97.085792][ T3219] usb 3-1: USB disconnect, device number 7 [ 97.188446][ T6562] FAULT_INJECTION: forcing a failure. [ 97.188446][ T6562] name fail_futex, interval 1, probability 0, space 0, times 0 [ 97.188477][ T6562] CPU: 0 UID: 0 PID: 6562 Comm: syz.3.298 Not tainted syzkaller #0 PREEMPT(full) [ 97.188499][ T6562] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/26/2026 [ 97.188510][ T6562] Call Trace: [ 97.188517][ T6562] [ 97.188525][ T6562] dump_stack_lvl+0x100/0x190 [ 97.188557][ T6562] should_fail_ex.cold+0x5/0xa [ 97.188584][ T6562] get_futex_key+0x1d0/0x14f0 [ 97.188613][ T6562] ? __pfx_get_futex_key+0x10/0x10 [ 97.188646][ T6562] futex_wait_setup+0x91/0x540 [ 97.188671][ T6562] __futex_wait+0x19f/0x300 [ 97.188692][ T6562] ? __pfx___futex_wait+0x10/0x10 [ 97.188708][ T6562] ? __pfx_try_to_wake_up+0x10/0x10 [ 97.188729][ T6562] ? futex_hash+0x311/0x400 [ 97.188755][ T6562] ? __pfx_futex_wake_mark+0x10/0x10 [ 97.188787][ T6562] ? find_held_lock+0x2b/0x80 [ 97.188813][ T6562] ? futex_wake+0x4ea/0x5e0 [ 97.188847][ T6562] futex_wait+0xe6/0x370 [ 97.188866][ T6562] ? __pfx_futex_wait+0x10/0x10 [ 97.188890][ T6562] ? __lock_acquire+0x5c0/0x1f40 [ 97.188910][ T6562] ? ksys_write+0x190/0x250 [ 97.188929][ T6562] ? ksys_write+0x190/0x250 [ 97.188951][ T6562] do_futex+0x265/0x440 [ 97.188980][ T6562] ? __pfx_do_futex+0x10/0x10 [ 97.189004][ T6562] ? lock_acquire+0x1d1/0x380 [ 97.189023][ T6562] ? __fget_files+0x34/0x3d0 [ 97.189046][ T6562] ? find_held_lock+0x2b/0x80 [ 97.189076][ T6562] __x64_sys_futex+0x34f/0x4d0 [ 97.189103][ T6562] ? __fget_files+0x21f/0x3d0 [ 97.189125][ T6562] ? __pfx___x64_sys_futex+0x10/0x10 [ 97.189161][ T6562] do_syscall_64+0x123/0x790 [ 97.189189][ T6562] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 97.189208][ T6562] RIP: 0033:0x7fdcdd59e159 [ 97.189223][ T6562] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 97.189241][ T6562] RSP: 002b:00007fdcde46a0e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 97.189260][ T6562] RAX: ffffffffffffffda RBX: 00007fdcdd825fa8 RCX: 00007fdcdd59e159 [ 97.189272][ T6562] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007fdcdd825fa8 [ 97.189283][ T6562] RBP: 00007fdcdd825fa0 R08: 0000000000000000 R09: 0000000000000000 [ 97.189294][ T6562] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 97.189305][ T6562] R13: 00007fdcdd826038 R14: 00007ffd844c96a0 R15: 00007ffd844c9788 [ 97.189330][ T6562] [ 97.545200][ T6575] nvmet: Disable port '1' before changing attribute in nvmet_addr_trtype_store [ 97.578921][ T12] nvmet: Created nvm controller 6 for subsystem testnqn for NQN nqn.2014-08.org.nvmexpress:uuid:3d3cdf4d-d71a-4897-9a4a-e3732965f7b4. [ 97.580959][ T6575] nvme nvme5: creating 2 I/O queues. [ 97.597844][ T6575] nvme nvme5: new ctrl: "testnqn" [ 97.684755][ T6578] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 97.973317][ T3219] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 98.065831][ T6589] nvmet: Disable port '1' before changing attribute in nvmet_addr_trtype_store [ 98.125278][ T3219] usb 3-1: New USB device found, idVendor=0d8c, idProduct=0022, bcdDevice= 0.00 [ 98.126090][ T3219] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 98.126115][ T3219] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 98.126145][ T3219] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 98.128404][ T3219] usb 3-1: config 0 descriptor?? [ 98.290900][ T6599] nvmet: Disable port '1' before changing attribute in nvmet_addr_trtype_store [ 98.319268][ T45] nvmet: Created nvm controller 7 for subsystem testnqn for NQN nqn.2014-08.org.nvmexpress:uuid:3d3cdf4d-d71a-4897-9a4a-e3732965f7b4. [ 98.320611][ T6599] nvme nvme6: creating 2 I/O queues. [ 98.322708][ T6599] nvme nvme6: new ctrl: "testnqn" [ 98.548087][ T3219] usbhid 3-1:0.0: can't add hid device: -71 [ 98.548172][ T3219] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 98.552299][ T3219] usb 3-1: USB disconnect, device number 8 [ 98.590413][ T6608] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 99.438351][ T6617] nvmet: Disable port '1' before changing attribute in nvmet_addr_trtype_store [ 99.626159][ T6627] nvmet: Disable port '1' before changing attribute in nvmet_addr_trtype_store [ 99.676015][ T1482] nvmet: Created nvm controller 8 for subsystem testnqn for NQN nqn.2014-08.org.nvmexpress:uuid:3d3cdf4d-d71a-4897-9a4a-e3732965f7b4. [ 99.678212][ T6627] nvme nvme7: creating 2 I/O queues. [ 99.698026][ T6627] nvme nvme7: new ctrl: "testnqn" [ 99.878524][ T6639] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 100.006494][ T6646] nvmet: Disable port '1' before changing attribute in nvmet_addr_trtype_store [ 100.491466][ T6660] nvmet: Disable port '1' before changing attribute in nvmet_addr_trtype_store [ 100.522109][ T1482] nvmet: Created nvm controller 9 for subsystem testnqn for NQN nqn.2014-08.org.nvmexpress:uuid:3d3cdf4d-d71a-4897-9a4a-e3732965f7b4. [ 100.534566][ T6660] nvme nvme8: creating 2 I/O queues. [ 100.543080][ T6660] nvme nvme8: new ctrl: "testnqn" [ 100.751265][ T6671] nvmet: Disable port '1' before changing attribute in nvmet_addr_trtype_store [ 100.813420][ T6673] md: array md0 already initialised! [ 100.863761][ T6673] md0: Warning: Device ram1 is misaligned [ 100.863807][ T6673] md/raid0:md0: too few disks (1 of 124) - aborting! [ 100.863832][ T6673] md: pers->run() failed ... [ 100.864154][ T6673] md: md0 stopped. [ 101.045791][ T6686] nvmet: Disable port '1' before changing attribute in nvmet_addr_trtype_store [ 101.094421][ T66] nvmet: Created nvm controller 10 for subsystem testnqn for NQN nqn.2014-08.org.nvmexpress:uuid:3d3cdf4d-d71a-4897-9a4a-e3732965f7b4. [ 101.095878][ T6686] nvme nvme9: creating 2 I/O queues. [ 101.100016][ T6686] nvme nvme9: new ctrl: "testnqn" [ 101.455044][ T6699] nvmet: Disable port '1' before changing attribute in nvmet_addr_trtype_store [ 101.758521][ T6717] nvmet: Disable port '1' before changing attribute in nvmet_addr_trtype_store [ 101.787269][ T66] nvmet: Created nvm controller 11 for subsystem testnqn for NQN nqn.2014-08.org.nvmexpress:uuid:3d3cdf4d-d71a-4897-9a4a-e3732965f7b4. [ 101.788396][ T6717] nvme nvme10: creating 2 I/O queues. [ 101.789744][ T6717] nvme nvme10: new ctrl: "testnqn" [ 101.963288][ T3219] usb 3-1: new high-speed USB device number 9 using dummy_hcd [ 102.113669][ T3219] usb 3-1: New USB device found, idVendor=0572, idProduct=cafe, bcdDevice= 1.00 [ 102.114395][ T3219] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 102.114418][ T3219] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x2 has invalid maxpacket 229, setting to 64 [ 102.114432][ T3219] usb 3-1: config 1 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 4 [ 102.114452][ T3219] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 102.320204][ T3219] cxacru 3-1:1.0: invalid response length to cm 0x90: 0 [ 102.466331][ T6725] nvmet: Disable port '1' before changing attribute in nvmet_addr_trtype_store [ 102.549079][ T6560] usb 3-1: USB disconnect, device number 9 [ 102.677421][ T31] audit: type=1400 audit(1789382490.992:293): avc: denied { ioctl } for pid=6735 comm="syz.1.375" path="/dev/kvm" dev="devtmpfs" ino=84 ioctlcmd=0xae01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 102.818161][ T6742] nvmet: Disable port '1' before changing attribute in nvmet_addr_trtype_store [ 102.849602][ T12] nvmet: Created nvm controller 12 for subsystem testnqn for NQN nqn.2014-08.org.nvmexpress:uuid:3d3cdf4d-d71a-4897-9a4a-e3732965f7b4. [ 102.851303][ T6742] nvme nvme11: creating 2 I/O queues. [ 102.853016][ T6742] nvme nvme11: new ctrl: "testnqn" [ 103.106782][ T6749] nvmet: Disable port '1' before changing attribute in nvmet_addr_trtype_store [ 103.141510][ T31] audit: type=1400 audit(1789382491.452:294): avc: denied { create } for pid=6750 comm="syz.2.382" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 103.142965][ T31] audit: type=1400 audit(1789382491.452:295): avc: denied { write } for pid=6750 comm="syz.2.382" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 103.454568][ T6767] nvmet: Disable port '1' before changing attribute in nvmet_addr_trtype_store [ 103.489058][ T1286] nvmet: Created nvm controller 13 for subsystem testnqn for NQN nqn.2014-08.org.nvmexpress:uuid:3d3cdf4d-d71a-4897-9a4a-e3732965f7b4. [ 103.490234][ T6767] nvme nvme12: creating 2 I/O queues. [ 103.492125][ T6767] nvme nvme12: new ctrl: "testnqn" [ 103.596018][ T6774] nvmet: Disable port '1' before changing attribute in nvmet_addr_trtype_store [ 104.271889][ T6794] nvmet: Disable port '1' before changing attribute in nvmet_addr_trtype_store [ 104.325841][ T6797] nvmet: Disable port '1' before changing attribute in nvmet_addr_trtype_store [ 104.326477][ T1286] nvmet: Created nvm controller 14 for subsystem testnqn for NQN nqn.2014-08.org.nvmexpress:uuid:3d3cdf4d-d71a-4897-9a4a-e3732965f7b4. [ 104.328119][ T6794] nvme nvme13: creating 2 I/O queues. [ 104.331435][ T6794] nvme nvme13: new ctrl: "testnqn" [ 105.085100][ T6819] nvmet: Disable port '1' before changing attribute in nvmet_addr_trtype_store [ 105.121810][ T6821] nvmet: Disable port '1' before changing attribute in nvmet_addr_trtype_store [ 105.151866][ T1286] nvmet: Created nvm controller 15 for subsystem testnqn for NQN nqn.2014-08.org.nvmexpress:uuid:3d3cdf4d-d71a-4897-9a4a-e3732965f7b4. [ 105.153178][ T6821] nvme nvme14: creating 2 I/O queues. [ 105.168212][ T6821] nvme nvme14: new ctrl: "testnqn" [ 105.902957][ T31] audit: type=1400 audit(1789382494.212:296): avc: denied { create } for pid=6839 comm="syz.3.424" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 105.932903][ T31] audit: type=1400 audit(1789382494.242:297): avc: denied { write } for pid=6839 comm="syz.3.424" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 105.953876][ T31] audit: type=1400 audit(1789382494.242:298): avc: denied { nlmsg_read } for pid=6839 comm="syz.3.424" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 105.954422][ T6840] netlink: 48 bytes leftover after parsing attributes in process `syz.3.424'. [ 106.399283][ T6847] nvmet: Disable port '1' before changing attribute in nvmet_addr_trtype_store [ 106.432136][ T1286] nvmet: Created nvm controller 16 for subsystem testnqn for NQN nqn.2014-08.org.nvmexpress:uuid:3d3cdf4d-d71a-4897-9a4a-e3732965f7b4. [ 106.446077][ T6847] nvme nvme15: creating 2 I/O queues. [ 106.447913][ T6847] nvme nvme15: new ctrl: "testnqn" [ 106.876037][ T6856] Driver unsupported XDP return value 0 on prog (id 5) dev N/A, expect packet loss! [ 107.345906][ T6875] nvmet: Disable port '1' before changing attribute in nvmet_addr_trtype_store [ 107.475956][ T12] nvmet: Created nvm controller 17 for subsystem testnqn for NQN nqn.2014-08.org.nvmexpress:uuid:3d3cdf4d-d71a-4897-9a4a-e3732965f7b4. [ 107.477706][ T6875] nvme nvme16: creating 2 I/O queues. [ 107.512369][ T6875] nvme nvme16: new ctrl: "testnqn" [ 107.684456][ T6883] binder: 6881:6883 ioctl c0306201 0 returned -14 [ 108.677554][ T31] audit: type=1400 audit(1789382496.542:299): avc: denied { read append } for pid=6887 comm="syz.0.445" name="ptp0" dev="devtmpfs" ino=1264 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 108.677603][ T31] audit: type=1400 audit(1789382496.542:300): avc: denied { open } for pid=6887 comm="syz.0.445" path="/dev/ptp0" dev="devtmpfs" ino=1264 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 109.322547][ T6914] nvmet: Disable port '1' before changing attribute in nvmet_addr_trtype_store [ 109.351953][ T66] nvmet: Created nvm controller 18 for subsystem testnqn for NQN nqn.2014-08.org.nvmexpress:uuid:3d3cdf4d-d71a-4897-9a4a-e3732965f7b4. [ 109.358385][ T6914] nvme nvme17: creating 2 I/O queues. [ 109.368307][ T6914] nvme nvme17: new ctrl: "testnqn" [ 109.496653][ T6923] netlink: 48 bytes leftover after parsing attributes in process `syz.4.459'. [ 109.979030][ T6940] nvmet: Disable port '1' before changing attribute in nvmet_addr_trtype_store [ 110.001555][ T66] nvmet: Created nvm controller 19 for subsystem testnqn for NQN nqn.2014-08.org.nvmexpress:uuid:3d3cdf4d-d71a-4897-9a4a-e3732965f7b4. [ 110.002807][ T6940] nvme nvme18: creating 2 I/O queues. [ 110.018344][ T6940] nvme nvme18: new ctrl: "testnqn" [ 110.279395][ T6949] netlink: 48 bytes leftover after parsing attributes in process `syz.2.471'. [ 110.635124][ T6964] nvmet: Disable port '1' before changing attribute in nvmet_addr_trtype_store [ 110.682426][ T301] nvmet: Created nvm controller 20 for subsystem testnqn for NQN nqn.2014-08.org.nvmexpress:uuid:3d3cdf4d-d71a-4897-9a4a-e3732965f7b4. [ 110.699735][ T6964] nvme nvme19: creating 2 I/O queues. [ 110.715062][ T6964] nvme nvme19: new ctrl: "testnqn" [ 110.871899][ T6977] netlink: 8 bytes leftover after parsing attributes in process `syz.4.484'. [ 112.244875][ T31] audit: type=1400 audit(1789382500.562:301): avc: denied { read } for pid=6991 comm="syz.3.491" name="dvr0" dev="devtmpfs" ino=927 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1 [ 112.245041][ T31] audit: type=1400 audit(1789382500.562:302): avc: denied { open } for pid=6991 comm="syz.3.491" path="/dev/dvb/adapter0/dvr0" dev="devtmpfs" ino=927 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1 [ 112.396622][ T31] audit: type=1400 audit(1789382500.712:303): avc: denied { mount } for pid=6999 comm="syz.0.495" name="/" dev="devtmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=filesystem permissive=1 [ 112.475752][ T31] audit: type=1400 audit(1789382500.792:304): avc: denied { unmount } for pid=5602 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=filesystem permissive=1 [ 112.544501][ T7010] netlink: 8 bytes leftover after parsing attributes in process `syz.1.499'. [ 112.761463][ T31] audit: type=1400 audit(1789382501.072:305): avc: denied { write } for pid=7017 comm="syz.3.504" name="functions" dev="configfs" ino=9646 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 112.781719][ T31] audit: type=1400 audit(1789382501.092:306): avc: denied { write } for pid=7017 comm="syz.3.504" name="c.1" dev="configfs" ino=9651 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 112.781964][ T31] audit: type=1400 audit(1789382501.092:307): avc: denied { write } for pid=7017 comm="syz.3.504" name="c.1" dev="configfs" ino=9651 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 112.783575][ T7018] configfs-gadget.g1 gadget.0: afunc_bind:1251 Error! [ 112.783703][ T7018] udc dummy_udc.0: failed to start g1: -19 [ 112.785068][ T7018] UDC core: g1: couldn't find an available UDC or it's busy [ 112.979490][ T301] nvmet: Created nvm controller 21 for subsystem testnqn for NQN nqn.2014-08.org.nvmexpress:uuid:3d3cdf4d-d71a-4897-9a4a-e3732965f7b4. [ 112.982129][ T7030] nvme nvme20: creating 2 I/O queues. [ 112.997681][ T7030] nvme nvme20: new ctrl: "testnqn" [ 113.144617][ T7037] netlink: 8 bytes leftover after parsing attributes in process `syz.0.512'. [ 113.752213][ T7046] configfs-gadget.g1 gadget.0: afunc_bind:1251 Error! [ 113.752294][ T7046] udc dummy_udc.0: failed to start g1: -19 [ 113.753120][ T7046] UDC core: g1: couldn't find an available UDC or it's busy [ 114.065477][ T45] nvmet: Created nvm controller 22 for subsystem testnqn for NQN nqn.2014-08.org.nvmexpress:uuid:3d3cdf4d-d71a-4897-9a4a-e3732965f7b4. [ 114.066906][ T7056] nvme nvme21: creating 2 I/O queues. [ 114.070800][ T7056] nvme nvme21: new ctrl: "testnqn" [ 114.127115][ T7063] netlink: 8 bytes leftover after parsing attributes in process `syz.0.524'. [ 114.227972][ T7071] configfs-gadget.g1 gadget.0: afunc_bind:1251 Error! [ 114.228119][ T7071] udc dummy_udc.0: failed to start g1: -19 [ 114.230789][ T7071] UDC core: g1: couldn't find an available UDC or it's busy [ 114.310105][ T7077] netlink: 72 bytes leftover after parsing attributes in process `syz.0.529'. [ 114.426367][ T7085] nvmet: Disable port '1' before changing attribute in nvmet_addr_trtype_store [ 114.477637][ T45] nvmet: Created nvm controller 23 for subsystem testnqn for NQN nqn.2014-08.org.nvmexpress:uuid:3d3cdf4d-d71a-4897-9a4a-e3732965f7b4. [ 114.478899][ T7085] nvme nvme22: creating 2 I/O queues. [ 114.497358][ T7085] nvme nvme22: new ctrl: "testnqn" [ 114.698643][ T7092] netlink: 48 bytes leftover after parsing attributes in process `syz.0.538'. [ 114.738932][ T7096] configfs-gadget.g1 gadget.0: afunc_bind:1251 Error! [ 114.739053][ T7096] udc dummy_udc.0: failed to start g1: -19 [ 114.740005][ T7096] UDC core: g1: couldn't find an available UDC or it's busy [ 114.827533][ T7102] netlink: 72 bytes leftover after parsing attributes in process `syz.4.543'. [ 114.936974][ T7110] nvmet: Disable port '1' before changing attribute in nvmet_addr_trtype_store [ 114.980684][ T301] nvmet: Created nvm controller 24 for subsystem testnqn for NQN nqn.2014-08.org.nvmexpress:uuid:3d3cdf4d-d71a-4897-9a4a-e3732965f7b4. [ 114.981867][ T7110] nvme nvme23: creating 2 I/O queues. [ 115.017089][ T7110] nvme nvme23: new ctrl: "testnqn" [ 115.151063][ T7124] netlink: 48 bytes leftover after parsing attributes in process `syz.4.552'. [ 115.175090][ T7126] configfs-gadget.g1 gadget.0: afunc_bind:1251 Error! [ 115.175214][ T7126] udc dummy_udc.0: failed to start g1: -19 [ 115.177849][ T7126] UDC core: g1: couldn't find an available UDC or it's busy [ 115.232194][ T7130] netlink: 72 bytes leftover after parsing attributes in process `syz.0.555'. [ 115.451968][ T7142] syzkaller0: entered promiscuous mode [ 115.451981][ T7142] syzkaller0: entered allmulticast mode [ 115.724998][ T7150] netlink: 48 bytes leftover after parsing attributes in process `syz.0.565'. [ 115.764631][ T7152] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 115.814032][ T7152] md: invalid raid superblock magic on ram1 [ 115.814049][ T7152] md: ram1 does not have a valid v0.0 superblock, not importing! [ 115.814107][ T7152] md: md_import_device returned -22 [ 115.814557][ T7152] md: md0 stopped. [ 115.855212][ T7156] netlink: 64 bytes leftover after parsing attributes in process `syz.1.568'. [ 116.179759][ T7170] syzkaller0: entered promiscuous mode [ 116.179779][ T7170] syzkaller0: entered allmulticast mode [ 116.472410][ T7188] A link change request failed with some changes committed already. Interface ip_vti0 may have been left with an inconsistent configuration, please check. [ 116.713136][ T7200] nvmet: Disable port '1' before changing attribute in nvmet_addr_trtype_store [ 116.836131][ T7204] syzkaller0: entered promiscuous mode [ 116.836151][ T7204] syzkaller0: entered allmulticast mode [ 116.954268][ T7206] UDC core: g1: couldn't find an available UDC or it's busy [ 117.304387][ T7215] binder: 7214:7215 ioctl c0306201 0 returned -14 [ 117.523064][ T7223] configfs-gadget.g1 gadget.0: afunc_bind:1251 Error! [ 117.523498][ T7223] udc dummy_udc.0: failed to start g1: -19 [ 117.524042][ T7223] UDC core: g1: couldn't find an available UDC or it's busy [ 117.661930][ T7230] syzkaller0: entered promiscuous mode [ 117.661951][ T7230] syzkaller0: entered allmulticast mode [ 117.735269][ T1286] nvmet: Created nvm controller 25 for subsystem testnqn for NQN nqn.2014-08.org.nvmexpress:uuid:3d3cdf4d-d71a-4897-9a4a-e3732965f7b4. [ 117.738634][ T7227] nvme nvme24: creating 2 I/O queues. [ 117.759429][ T7227] nvme nvme24: new ctrl: "testnqn" [ 118.038821][ T7249] netlink: 48 bytes leftover after parsing attributes in process `syz.1.611'. [ 118.158253][ T7259] syzkaller0: entered promiscuous mode [ 118.158272][ T7259] syzkaller0: entered allmulticast mode [ 118.221539][ T301] nvmet: Created nvm controller 26 for subsystem testnqn for NQN nqn.2014-08.org.nvmexpress:uuid:3d3cdf4d-d71a-4897-9a4a-e3732965f7b4. [ 118.222659][ T7261] nvme nvme25: creating 2 I/O queues. [ 118.239789][ T7261] nvme nvme25: new ctrl: "testnqn" [ 118.268465][ T7264] nvmet: Disable port '1' before changing attribute in nvmet_addr_trtype_store [ 118.453939][ T7275] binder: 7274:7275 ioctl c0306201 0 returned -14 [ 118.534340][ T7279] netlink: 48 bytes leftover after parsing attributes in process `syz.2.624'. [ 118.601918][ T7286] syzkaller0: entered promiscuous mode [ 118.601938][ T7286] syzkaller0: entered allmulticast mode [ 118.648198][ T12] nvmet: Created nvm controller 27 for subsystem testnqn for NQN nqn.2014-08.org.nvmexpress:uuid:3d3cdf4d-d71a-4897-9a4a-e3732965f7b4. [ 118.652278][ T7287] nvme nvme26: creating 2 I/O queues. [ 118.677478][ T7287] nvme nvme26: new ctrl: "testnqn" [ 118.717678][ T7290] netlink: 20 bytes leftover after parsing attributes in process `syz.0.630'. [ 118.816421][ T7298] UDC core: g1: couldn't find an available UDC or it's busy [ 118.838578][ T7300] netlink: 20 bytes leftover after parsing attributes in process `syz.1.635'. [ 118.932082][ T7304] configfs-gadget.g1 gadget.0: afunc_bind:1251 Error! [ 118.932223][ T7304] udc dummy_udc.0: failed to start g1: -19 [ 118.938032][ T7304] UDC core: g1: couldn't find an available UDC or it's busy [ 119.062892][ T66] nvmet: Created nvm controller 28 for subsystem testnqn for NQN nqn.2014-08.org.nvmexpress:uuid:3d3cdf4d-d71a-4897-9a4a-e3732965f7b4. [ 119.065552][ T7312] nvme nvme27: creating 2 I/O queues. [ 119.079641][ T7312] nvme nvme27: new ctrl: "testnqn" [ 119.213592][ T31] audit: type=1400 audit(1789382507.522:308): avc: denied { nlmsg_write } for pid=7322 comm="syz.2.645" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 119.220845][ T31] audit: type=1400 audit(1789382507.532:309): avc: denied { setopt } for pid=7322 comm="syz.2.645" lport=2 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 119.221271][ T7323] syz_tun: entered allmulticast mode [ 119.231637][ T7323] lo: entered allmulticast mode [ 119.258615][ T7322] syz_tun: left allmulticast mode [ 119.258700][ T7322] lo: left allmulticast mode [ 119.439832][ T7339] configfs-gadget.g1 gadget.0: afunc_bind:1251 Error! [ 119.439971][ T7339] udc dummy_udc.0: failed to start g1: -19 [ 119.440465][ T7339] UDC core: g1: couldn't find an available UDC or it's busy [ 119.636364][ T1286] nvmet: Created nvm controller 29 for subsystem testnqn for NQN nqn.2014-08.org.nvmexpress:uuid:3d3cdf4d-d71a-4897-9a4a-e3732965f7b4. [ 119.642358][ T7344] nvme nvme28: creating 2 I/O queues. [ 119.667803][ T7344] nvme nvme28: new ctrl: "testnqn" [ 120.236622][ T7368] configfs-gadget.g1 gadget.0: afunc_bind:1251 Error! [ 120.236701][ T7368] udc dummy_udc.0: failed to start g1: -19 [ 120.237599][ T7368] UDC core: g1: couldn't find an available UDC or it's busy [ 120.390972][ T7374] FAULT_INJECTION: forcing a failure. [ 120.390972][ T7374] name failslab, interval 1, probability 0, space 0, times 0 [ 120.390992][ T7374] CPU: 1 UID: 0 PID: 7374 Comm: syz.0.669 Not tainted syzkaller #0 PREEMPT(full) [ 120.391005][ T7374] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/26/2026 [ 120.391011][ T7374] Call Trace: [ 120.391015][ T7374] [ 120.391020][ T7374] dump_stack_lvl+0x100/0x190 [ 120.391040][ T7374] should_fail_ex.cold+0x5/0xa [ 120.391056][ T7374] should_failslab+0xc2/0x120 [ 120.391071][ T7374] __kvmalloc_node_noprof+0x113/0x9b0 [ 120.391083][ T7374] ? __kmalloc_cache_noprof+0x2f8/0x6d0 [ 120.391100][ T7374] ? percpu_ref_init+0xec/0x3f0 [ 120.391115][ T7374] ? io_alloc_cache_init+0x38/0x170 [ 120.391133][ T7374] io_alloc_cache_init+0x38/0x170 [ 120.391149][ T7374] io_uring_setup.cold+0x450/0x1cde [ 120.391162][ T7374] ? lock_acquire+0x1d1/0x380 [ 120.391180][ T7374] ? avc_has_perm_noaudit+0x56/0x3b0 [ 120.391205][ T7374] ? __pfx_io_uring_setup+0x10/0x10 [ 120.391225][ T7374] ? find_held_lock+0x2b/0x80 [ 120.391243][ T7374] ? avc_has_perm_noaudit+0x11e/0x3b0 [ 120.391257][ T7374] ? avc_has_perm_noaudit+0x11e/0x3b0 [ 120.391280][ T7374] ? __pfx___x64_sys_futex+0x10/0x10 [ 120.391294][ T7374] ? ksys_write+0x1ac/0x250 [ 120.391305][ T7374] ? __pfx_ksys_write+0x10/0x10 [ 120.391319][ T7374] __x64_sys_io_uring_setup+0xc2/0x170 [ 120.391332][ T7374] do_syscall_64+0x123/0x790 [ 120.391349][ T7374] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 120.391363][ T7374] RIP: 0033:0x7f8bc8f9e159 [ 120.391372][ T7374] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 120.391382][ T7374] RSP: 002b:00007f8bc9df5fb8 EFLAGS: 00000206 ORIG_RAX: 00000000000001a9 [ 120.391394][ T7374] RAX: ffffffffffffffda RBX: 0000200000000580 RCX: 00007f8bc8f9e159 [ 120.391401][ T7374] RDX: 0000200000000280 RSI: 0000200000000580 RDI: 000000000000000f [ 120.391409][ T7374] RBP: 00007f8bc903503b R08: 0000000000000000 R09: 00007f8bc9df69c8 [ 120.391416][ T7374] R10: 00002000000000c0 R11: 0000000000000206 R12: 0000200000000280 [ 120.391423][ T7374] R13: 00002000000000c0 R14: 0000200000000100 R15: 00007ffedd600218 [ 120.391438][ T7374] [ 121.885862][ T7393] UDC core: g1: couldn't find an available UDC or it's busy [ 122.672523][ T7412] syzkaller0: entered promiscuous mode [ 122.672546][ T7412] syzkaller0: entered allmulticast mode [ 123.232578][ T7421] nvmet: Disable port '1' before changing attribute in nvmet_addr_trtype_store [ 123.452442][ T31] audit: type=1400 audit(1789382511.762:310): avc: denied { getopt } for pid=7434 comm="syz.4.693" lport=58 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 123.848437][ T7444] netlink: 8 bytes leftover after parsing attributes in process `syz.0.697'. [ 124.095905][ T7451] nvmet: Disable port '1' before changing attribute in nvmet_addr_trtype_store [ 124.202057][ T7457] nvmet: Disable port '1' before changing attribute in nvmet_addr_trtype_store [ 124.228122][ T1482] nvmet: Created nvm controller 30 for subsystem testnqn for NQN nqn.2014-08.org.nvmexpress:uuid:3d3cdf4d-d71a-4897-9a4a-e3732965f7b4. [ 124.229273][ T7457] nvme nvme29: creating 2 I/O queues. [ 124.230638][ T7457] nvme nvme29: new ctrl: "testnqn" [ 126.148746][ T7473] syz_tun: entered allmulticast mode [ 126.149075][ T7473] lo: entered allmulticast mode [ 126.149334][ T7472] syz_tun: left allmulticast mode [ 126.149378][ T7472] lo: left allmulticast mode [ 126.221505][ T7477] nvmet: Disable port '1' before changing attribute in nvmet_addr_trtype_store [ 126.282156][ T7481] nvmet: Disable port '1' before changing attribute in nvmet_addr_trtype_store [ 126.320353][ T1482] nvmet: Created nvm controller 31 for subsystem testnqn for NQN nqn.2014-08.org.nvmexpress:uuid:3d3cdf4d-d71a-4897-9a4a-e3732965f7b4. [ 126.321824][ T7481] nvme nvme30: creating 2 I/O queues. [ 126.339528][ T7481] nvme nvme30: new ctrl: "testnqn" [ 126.383350][ T31] audit: type=1400 audit(1789382514.702:311): avc: denied { getopt } for pid=7485 comm="syz.2.716" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 126.460691][ T7490] netlink: 76 bytes leftover after parsing attributes in process `syz.2.718'. [ 126.460713][ T7490] netlink: 72 bytes leftover after parsing attributes in process `syz.2.718'. [ 126.460860][ T7490] netlink: 'syz.2.718': attribute type 3 has an invalid length. [ 126.460873][ T7490] netlink: 11 bytes leftover after parsing attributes in process `syz.2.718'. [ 126.741541][ T7503] syz_tun: entered allmulticast mode [ 126.742116][ T7503] lo: entered allmulticast mode [ 126.742628][ T7502] syz_tun: left allmulticast mode [ 126.742711][ T7502] lo: left allmulticast mode [ 126.759822][ T7505] nvmet: Disable port '1' before changing attribute in nvmet_addr_trtype_store [ 126.848899][ T7507] netlink: 56 bytes leftover after parsing attributes in process `syz.4.726'. [ 126.895932][ T7511] nvmet: Disable port '1' before changing attribute in nvmet_addr_trtype_store [ 126.933395][ T1546] nvmet: Created nvm controller 32 for subsystem testnqn for NQN nqn.2014-08.org.nvmexpress:uuid:3d3cdf4d-d71a-4897-9a4a-e3732965f7b4. [ 126.941595][ T7511] nvme nvme31: creating 2 I/O queues. [ 126.968340][ T7511] nvme nvme31: new ctrl: "testnqn" [ 127.058486][ T31] audit: type=1400 audit(1789382515.372:312): avc: denied { watch } for pid=7514 comm="syz.4.729" path="/160/file0" dev="tmpfs" ino=917 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=fifo_file permissive=1 [ 127.126422][ T7517] syzkaller0: entered promiscuous mode [ 127.126444][ T7517] syzkaller0: entered allmulticast mode [ 127.226142][ T31] audit: type=1400 audit(1789382515.542:313): avc: denied { read write } for pid=7522 comm="syz.4.733" name="rdma_cm" dev="devtmpfs" ino=1269 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:infiniband_device_t tclass=chr_file permissive=1 [ 127.226361][ T1308] ieee802154 phy0 wpan0: encryption failed: -22 [ 127.226404][ T1308] ieee802154 phy1 wpan1: encryption failed: -22 [ 127.226473][ T31] audit: type=1400 audit(1789382515.542:314): avc: denied { open } for pid=7522 comm="syz.4.733" path="/dev/infiniband/rdma_cm" dev="devtmpfs" ino=1269 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:infiniband_device_t tclass=chr_file permissive=1 [ 127.424729][ T7536] nvmet: Disable port '1' before changing attribute in nvmet_addr_trtype_store [ 127.456254][ T1482] nvmet: Created nvm controller 33 for subsystem testnqn for NQN nqn.2014-08.org.nvmexpress:uuid:3d3cdf4d-d71a-4897-9a4a-e3732965f7b4. [ 127.457468][ T7536] nvme nvme32: creating 2 I/O queues. [ 127.460667][ T7536] nvme nvme32: new ctrl: "testnqn" [ 128.119739][ T31] audit: type=1400 audit(1789382516.432:315): avc: denied { name_bind } for pid=7551 comm="syz.1.745" src=20004 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=tcp_socket permissive=1 [ 128.120012][ T31] audit: type=1400 audit(1789382516.432:316): avc: denied { node_bind } for pid=7551 comm="syz.1.745" saddr=224.0.0.2 src=20004 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=tcp_socket permissive=1 [ 128.180614][ T7553] TCP: TCP_TX_DELAY enabled [ 128.441571][ T7563] nvmet: Disable port '1' before changing attribute in nvmet_addr_trtype_store [ 128.494199][ T12] nvmet: Created nvm controller 34 for subsystem testnqn for NQN nqn.2014-08.org.nvmexpress:uuid:3d3cdf4d-d71a-4897-9a4a-e3732965f7b4. [ 128.495437][ T7563] nvme nvme33: creating 2 I/O queues. [ 128.500960][ T7563] nvme nvme33: new ctrl: "testnqn" [ 129.486540][ T7576] Format for adding new device is "id port_count num_queues" (uint uint uint). [ 129.986725][ T31] audit: type=1400 audit(1789382518.302:317): avc: denied { read write } for pid=7583 comm="syz.3.758" name="sg0" dev="devtmpfs" ino=887 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 129.989848][ T31] audit: type=1400 audit(1789382518.302:318): avc: denied { ioctl open } for pid=7583 comm="syz.3.758" path="/dev/sg0" dev="devtmpfs" ino=887 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 130.869456][ T7595] netlink: 48 bytes leftover after parsing attributes in process `syz.3.761'. [ 130.979924][ T7588] syz_tun: entered allmulticast mode [ 130.981408][ T7590] lo: entered allmulticast mode [ 130.986426][ T7586] syz_tun: left allmulticast mode [ 130.986497][ T7586] lo: left allmulticast mode [ 130.993522][ T7597] syzkaller0: entered promiscuous mode [ 130.993538][ T7597] syzkaller0: entered allmulticast mode [ 131.264900][ T7605] UDC core: g1: couldn't find an available UDC or it's busy [ 131.791864][ T31] audit: type=1400 audit(1789382520.102:319): avc: denied { read } for pid=7619 comm="syz.3.771" name="nvram" dev="devtmpfs" ino=623 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nvram_device_t tclass=chr_file permissive=1 [ 131.791926][ T31] audit: type=1400 audit(1789382520.102:320): avc: denied { open } for pid=7619 comm="syz.3.771" path="/dev/nvram" dev="devtmpfs" ino=623 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nvram_device_t tclass=chr_file permissive=1 [ 132.062047][ T31] audit: type=1400 audit(1789382520.372:321): avc: denied { mount } for pid=7627 comm="syz.1.774" name="/" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=filesystem permissive=1 [ 132.090102][ T31] audit: type=1400 audit(1789382520.402:322): avc: denied { search } for pid=7627 comm="syz.1.774" name="/" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=dir permissive=1 [ 132.091064][ T31] audit: type=1400 audit(1789382520.402:323): avc: denied { read write } for pid=7627 comm="syz.1.774" name="set_event" dev="tracefs" ino=3942 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=file permissive=1 [ 132.093044][ T31] audit: type=1400 audit(1789382520.402:324): avc: denied { open } for pid=7627 comm="syz.1.774" path="/142/trace/set_event" dev="tracefs" ino=3942 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=file permissive=1 [ 132.179501][ T7631] syz_tun: entered allmulticast mode [ 132.180412][ T7631] lo: entered allmulticast mode [ 132.180927][ T7630] syz_tun: left allmulticast mode [ 132.181005][ T7630] lo: left allmulticast mode [ 132.290430][ T31] audit: type=1400 audit(1789382520.602:325): avc: denied { unmount } for pid=5609 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=filesystem permissive=1 [ 132.378921][ T7647] UDC core: g1: couldn't find an available UDC or it's busy [ 132.450883][ T7652] FAULT_INJECTION: forcing a failure. [ 132.450883][ T7652] name failslab, interval 1, probability 0, space 0, times 0 [ 132.450904][ T7652] CPU: 0 UID: 0 PID: 7652 Comm: syz.3.783 Not tainted syzkaller #0 PREEMPT(full) [ 132.450917][ T7652] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/26/2026 [ 132.450923][ T7652] Call Trace: [ 132.450928][ T7652] [ 132.450933][ T7652] dump_stack_lvl+0x100/0x190 [ 132.450952][ T7652] should_fail_ex.cold+0x5/0xa [ 132.450968][ T7652] should_failslab+0xc2/0x120 [ 132.450984][ T7652] __kvmalloc_node_noprof+0x113/0x9b0 [ 132.450997][ T7652] ? __kmalloc_cache_noprof+0x2f8/0x6d0 [ 132.451020][ T7652] ? bpf_int_jit_compile+0xd20/0x1820 [ 132.451040][ T7652] bpf_int_jit_compile+0xd20/0x1820 [ 132.451070][ T7652] ? __pfx_bpf_int_jit_compile+0x10/0x10 [ 132.451110][ T7652] __bpf_prog_select_runtime+0x896/0xbd0 [ 132.451139][ T7652] ? __asan_memcpy+0x3c/0x60 [ 132.451158][ T7652] bpf_prepare_filter+0xd32/0x11e0 [ 132.451176][ T7652] ? __pfx_bpf_prepare_filter+0x10/0x10 [ 132.451192][ T7652] ? __asan_memcpy+0x3c/0x60 [ 132.451202][ T7652] ? kmemdup_noprof+0x49/0x60 [ 132.451221][ T7652] __get_filter+0x1ff/0x2c0 [ 132.451236][ T7652] sk_attach_filter+0x1c/0x150 [ 132.451257][ T7652] sk_setsockopt+0x3a9b/0x5d80 [ 132.451286][ T7652] ? __pfx_sk_setsockopt+0x10/0x10 [ 132.451309][ T7652] ? selinux_netlbl_socket_setsockopt+0x134/0x470 [ 132.451332][ T7652] ? __pfx_selinux_netlbl_socket_setsockopt+0x10/0x10 [ 132.451357][ T7652] ? find_held_lock+0x2b/0x80 [ 132.451375][ T7652] ? selinux_socket_setsockopt+0x6a/0x80 [ 132.451388][ T7652] do_sock_setsockopt+0x193/0x1d0 [ 132.451404][ T7652] __sys_setsockopt+0x195/0x220 [ 132.451420][ T7652] __x64_sys_setsockopt+0xbd/0x160 [ 132.451432][ T7652] ? do_syscall_64+0xae/0x790 [ 132.451446][ T7652] ? lockdep_hardirqs_on+0x7d/0x110 [ 132.451460][ T7652] do_syscall_64+0x123/0x790 [ 132.451476][ T7652] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 132.451487][ T7652] RIP: 0033:0x7fdcdd59e159 [ 132.451497][ T7652] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 132.451509][ T7652] RSP: 002b:00007fdcde46a028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 132.451521][ T7652] RAX: ffffffffffffffda RBX: 00007fdcdd825fa0 RCX: 00007fdcdd59e159 [ 132.451528][ T7652] RDX: 000000000000001a RSI: 0000000000000001 RDI: 0000000000000003 [ 132.451534][ T7652] RBP: 00007fdcdd63503b R08: 0000000000000010 R09: 0000000000000000 [ 132.451541][ T7652] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000000 [ 132.451547][ T7652] R13: 00007fdcdd826038 R14: 00007fdcdd825fa0 R15: 00007ffd844c9788 [ 132.451561][ T7652] [ 132.630113][ T31] audit: type=1400 audit(1789382520.922:326): avc: denied { read write } for pid=7655 comm="syz.3.785" name="uhid" dev="devtmpfs" ino=1270 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 132.630160][ T31] audit: type=1400 audit(1789382520.922:327): avc: denied { open } for pid=7655 comm="syz.3.785" path="/dev/uhid" dev="devtmpfs" ino=1270 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 132.784095][ T7663] syz_tun: entered allmulticast mode [ 132.786162][ T7663] lo: entered allmulticast mode [ 132.788155][ T7662] syz_tun: left allmulticast mode [ 132.788200][ T7662] lo: left allmulticast mode [ 133.020442][ T7676] UDC core: g1: couldn't find an available UDC or it's busy [ 133.174126][ T31] audit: type=1400 audit(1789382521.492:328): avc: denied { name_bind } for pid=7687 comm="syz.4.797" src=20004 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=sctp_socket permissive=1 [ 133.453114][ T7698] UDC core: g1: couldn't find an available UDC or it's busy [ 133.590687][ T7708] UDC core: g1: couldn't find an available UDC or it's busy [ 133.818515][ T7726] loop3: detected capacity change from 0 to 7 [ 133.822068][ T5627] udevd[5627]: inotify_add_watch(7, /dev/loop3, 10) failed: No such file or directory [ 133.822077][ C1] I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 133.822207][ C1] Buffer I/O error on dev loop3, logical block 0, async page read [ 133.831008][ C0] I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 133.831086][ C0] Buffer I/O error on dev loop3, logical block 0, async page read ** replaying previous printk message ** [ 133.831086][ C0] Buffer I/O error on dev loop3, logical block 0, async page read [ 133.839969][ C0] I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 133.840033][ C0] Buffer I/O error on dev loop3, logical block 0, async page read [ 133.840150][ C0] I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 133.840201][ C0] Buffer I/O error on dev loop3, logical block 0, async page read [ 133.840331][ C0] I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 133.840381][ C0] Buffer I/O error on dev loop3, logical block 0, async page read [ 133.840472][ C0] I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 133.840521][ C0] Buffer I/O error on dev loop3, logical block 0, async page read [ 133.840599][ C0] I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 133.840648][ C0] Buffer I/O error on dev loop3, logical block 0, async page read [ 133.840676][ T7726] ldm_validate_partition_table(): Disk read failed. [ 133.840740][ C0] I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 133.840785][ C0] Buffer I/O error on dev loop3, logical block 0, async page read [ 133.840863][ C0] I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 133.840906][ C0] Buffer I/O error on dev loop3, logical block 0, async page read [ 133.841007][ C0] I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 133.841050][ C0] Buffer I/O error on dev loop3, logical block 0, async page read [ 133.841203][ T7726] Dev loop3: unable to read RDB block 0 [ 133.842048][ T7726] loop3: unable to read partition table [ 133.842184][ T7726] loop3: partition table beyond EOD, truncated [ 133.842197][ T7726] loop_reread_partitions: partition scan of loop3 (Cj̖P=ý?}X %֐ȵ4FLQk݊5) failed (rc=-5) [ 133.876131][ T7726] [ 134.064169][ T7726] ====================================================== [ 134.071165][ T7726] WARNING: possible circular locking dependency detected [ 134.078169][ T7726] syzkaller #0 Not tainted [ 134.082562][ T7726] ------------------------------------------------------ [ 134.089545][ T7726] syz.3.814/7726 is trying to acquire lock: [ 134.095401][ T7726] ffff88801d2c7210 (&root->kernfs_iattr_rwsem){++++}-{4:4}, at: kernfs_iop_getattr+0x9c/0xf0 [ 134.105555][ T7726] [ 134.105555][ T7726] but task is already holding lock: [ 134.112886][ T7726] ffff8880269d1c50 (&q->q_usage_counter(io)#20){++++}-{0:0}, at: blk_mq_freeze_queue_nomemsave+0x15/0x20 [ 134.124078][ T7726] [ 134.124078][ T7726] which lock already depends on the new lock. [ 134.124078][ T7726] [ 134.134450][ T7726] [ 134.134450][ T7726] the existing dependency chain (in reverse order) is: [ 134.143432][ T7726] [ 134.143432][ T7726] -> #2 (&q->q_usage_counter(io)#20){++++}-{0:0}: [ 134.152015][ T7726] lock_acquire+0x1d1/0x380 [ 134.157023][ T7726] blk_alloc_queue+0x610/0x790 [ 134.162279][ T7726] blk_mq_alloc_queue+0x174/0x290 [ 134.167799][ T7726] __blk_mq_alloc_disk+0x29/0x120 [ 134.173321][ T7726] loop_add+0x498/0xb60 [ 134.177981][ T7726] loop_init+0x1d3/0x200 [ 134.182738][ T7726] do_one_initcall+0x11c/0x6f0 [ 134.188006][ T7726] kernel_init_freeable+0x6ea/0x7b0 [ 134.193700][ T7726] kernel_init+0x21/0x1e0 [ 134.198526][ T7726] ret_from_fork+0x730/0xd60 [ 134.203608][ T7726] ret_from_fork_asm+0x1a/0x30 [ 134.208863][ T7726] [ 134.208863][ T7726] -> #1 (fs_reclaim){+.+.}-{0:0}: [ 134.216037][ T7726] lock_acquire+0x1d1/0x380 [ 134.221034][ T7726] fs_reclaim_acquire+0xc4/0x100 [ 134.226466][ T7726] kmem_cache_alloc_noprof+0x63/0x6a0 [ 134.232329][ T7726] __kernfs_iattrs+0x126/0x450 [ 134.237587][ T7726] __kernfs_setattr+0x4d/0x3c0 [ 134.242845][ T7726] kernfs_iop_setattr+0xda/0x130 [ 134.248276][ T7726] notify_change+0xb25/0x1330 [ 134.253444][ T7726] do_truncate+0x1df/0x240 [ 134.258352][ T7726] path_openat+0x1e6d/0x2440 [ 134.263439][ T7726] do_file_open+0x20e/0x430 [ 134.268454][ T7726] do_sys_openat2+0x10f/0x1e0 [ 134.273631][ T7726] __x64_sys_openat+0x12d/0x210 [ 134.278980][ T7726] do_syscall_64+0x123/0x790 [ 134.284067][ T7726] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 134.290453][ T7726] [ 134.290453][ T7726] -> #0 (&root->kernfs_iattr_rwsem){++++}-{4:4}: [ 134.298939][ T7726] check_prev_add+0xeb/0xe60 [ 134.304022][ T7726] __lock_acquire+0x1528/0x1f40 [ 134.309363][ T7726] lock_acquire+0x1d1/0x380 [ 134.314370][ T7726] down_read+0x99/0x4c0 [ 134.319023][ T7726] kernfs_iop_getattr+0x9c/0xf0 [ 134.324368][ T7726] vfs_getattr_nosec+0x2d4/0x430 [ 134.329799][ T7726] vfs_getattr+0x4a/0x60 [ 134.334543][ T7726] loop_update_dio_alignment+0x13c/0x410 [ 134.340670][ T7726] lo_ioctl+0x15c8/0x1df0 [ 134.345489][ T7726] blkdev_ioctl+0x5ad/0x6f0 [ 134.350484][ T7726] __x64_sys_ioctl+0x18e/0x210 [ 134.355752][ T7726] do_syscall_64+0x123/0x790 [ 134.360834][ T7726] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 134.367218][ T7726] [ 134.367218][ T7726] other info that might help us debug this: [ 134.367218][ T7726] [ 134.377415][ T7726] Chain exists of: [ 134.377415][ T7726] &root->kernfs_iattr_rwsem --> fs_reclaim --> &q->q_usage_counter(io)#20 [ 134.377415][ T7726] [ 134.391815][ T7726] Possible unsafe locking scenario: [ 134.391815][ T7726] [ 134.399235][ T7726] CPU0 CPU1 [ 134.404579][ T7726] ---- ---- [ 134.409915][ T7726] lock(&q->q_usage_counter(io)#20); [ 134.415260][ T7726] lock(fs_reclaim); [ 134.421742][ T7726] lock(&q->q_usage_counter(io)#20); [ 134.429606][ T7726] rlock(&root->kernfs_iattr_rwsem); [ 134.434958][ T7726] [ 134.434958][ T7726] *** DEADLOCK *** [ 134.434958][ T7726] [ 134.443071][ T7726] locks held by syz.3.814/7726: 3, last CPU#0: [ 134.449189][ T7726] #0: ffff888027236430 (&lo->lo_mutex){+.+.}-{4:4}, at: loop_global_lock_killable+0x30/0xb0 [ 134.459336][ T7726] #1: ffff8880269d1c50 (&q->q_usage_counter(io)#20){++++}-{0:0}, at: blk_mq_freeze_queue_nomemsave+0x15/0x20 [ 134.470966][ T7726] #2: ffff8880269d1c88 (&q->q_usage_counter(queue)#4){+.+.}-{0:0}, at: blk_mq_freeze_queue_nomemsave+0x15/0x20 [ 134.482772][ T7726] [ 134.482772][ T7726] stack backtrace: [ 134.488645][ T7726] CPU: 0 UID: 0 PID: 7726 Comm: syz.3.814 Not tainted syzkaller #0 PREEMPT(full) [ 134.497810][ T7726] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/26/2026 [ 134.507850][ T7726] Call Trace: [ 134.511111][ T7726] [ 134.514025][ T7726] dump_stack_lvl+0x100/0x190 [ 134.518680][ T7726] print_circular_bug.cold+0x178/0x1be [ 134.524115][ T7726] check_noncircular+0x146/0x160 [ 134.529025][ T7726] check_prev_add+0xeb/0xe60 [ 134.533586][ T7726] __lock_acquire+0x1528/0x1f40 [ 134.538422][ T7726] lock_acquire+0x1d1/0x380 [ 134.542896][ T7726] ? kernfs_iop_getattr+0x9c/0xf0 [ 134.547895][ T7726] ? __pfx___might_resched+0x10/0x10 [ 134.553161][ T7726] down_read+0x99/0x4c0 [ 134.557302][ T7726] ? kernfs_iop_getattr+0x9c/0xf0 [ 134.562308][ T7726] ? find_held_lock+0x2b/0x80 [ 134.566963][ T7726] ? __pfx_down_read+0x10/0x10 [ 134.571708][ T7726] ? kernfs_root+0xee/0x2a0 [ 134.576186][ T7726] kernfs_iop_getattr+0x9c/0xf0 [ 134.581015][ T7726] vfs_getattr_nosec+0x2d4/0x430 [ 134.585936][ T7726] ? __pfx_kernfs_iop_getattr+0x10/0x10 [ 134.591462][ T7726] vfs_getattr+0x4a/0x60 [ 134.595692][ T7726] loop_update_dio_alignment+0x13c/0x410 [ 134.601302][ T7726] ? __pfx_loop_update_dio_alignment+0x10/0x10 [ 134.607430][ T7726] ? mark_held_locks+0x40/0x70 [ 134.612169][ T7726] lo_ioctl+0x15c8/0x1df0 [ 134.616471][ T7726] ? __lock_acquire+0x5c0/0x1f40 [ 134.621386][ T7726] ? __kasan_slab_free+0x5f/0x80 [ 134.626319][ T7726] ? kfree+0x22b/0x6d0 [ 134.630395][ T7726] ? tomoyo_path_number_perm+0x46d/0x580 [ 134.636027][ T7726] ? security_file_ioctl+0xd3/0x230 [ 134.641224][ T7726] ? __x64_sys_ioctl+0xb7/0x210 [ 134.646050][ T7726] ? do_syscall_64+0x123/0x790 [ 134.650791][ T7726] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 134.656832][ T7726] ? __pfx_lo_ioctl+0x10/0x10 [ 134.661484][ T7726] ? avc_has_extended_perms+0x201/0x1080 [ 134.667095][ T7726] ? find_held_lock+0x2b/0x80 [ 134.671750][ T7726] ? avc_has_extended_perms+0x33a/0x1080 [ 134.677360][ T7726] ? avc_has_extended_perms+0x33a/0x1080 [ 134.682974][ T7726] ? avc_has_extended_perms+0x484/0x1080 [ 134.688583][ T7726] ? __pfx_avc_has_extended_perms+0x10/0x10 [ 134.694455][ T7726] ? kasan_quarantine_put+0x104/0x240 [ 134.699805][ T7726] ? blk_get_meta_cap+0xd4/0x6c0 [ 134.704717][ T7726] ? __pfx_blk_get_meta_cap+0x10/0x10 [ 134.710060][ T7726] ? tomoyo_path_number_perm+0x28f/0x580 [ 134.715666][ T7726] ? blkdev_common_ioctl+0x515/0x2b80 [ 134.721015][ T7726] ? __pfx_blkdev_common_ioctl+0x10/0x10 [ 134.726622][ T7726] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 134.732488][ T7726] ? do_vfs_ioctl+0x226/0x13e0 [ 134.737223][ T7726] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 134.742217][ T7726] ? ioctl_has_perm.constprop.0.isra.0+0x380/0x540 [ 134.748694][ T7726] ? __pfx_ioctl_has_perm.constprop.0.isra.0+0x10/0x10 [ 134.755528][ T7726] ? __pfx_lo_ioctl+0x10/0x10 [ 134.760178][ T7726] blkdev_ioctl+0x5ad/0x6f0 [ 134.764657][ T7726] ? __pfx_blkdev_ioctl+0x10/0x10 [ 134.769670][ T7726] ? selinux_file_ioctl+0x13b/0x290 [ 134.774841][ T7726] ? selinux_file_ioctl+0xb6/0x290 [ 134.779926][ T7726] ? __pfx_blkdev_ioctl+0x10/0x10 [ 134.784924][ T7726] __x64_sys_ioctl+0x18e/0x210 [ 134.789661][ T7726] do_syscall_64+0x123/0x790 [ 134.794230][ T7726] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 134.800096][ T7726] RIP: 0033:0x7fdcdd59e159 [ 134.804483][ T7726] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 134.824062][ T7726] RSP: 002b:00007fdcde46a028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 134.832447][ T7726] RAX: ffffffffffffffda RBX: 00007fdcdd825fa0 RCX: 00007fdcdd59e159 [ 134.840393][ T7726] RDX: 0000000000000005 RSI: 0000000000004c06 RDI: 0000000000000004 [ 134.848347][ T7726] RBP: 00007fdcdd63503b R08: 0000000000000000 R09: 0000000000000000 [ 134.856295][ T7726] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 134.864249][ T7726] R13: 00007fdcdd826038 R14: 00007fdcdd825fa0 R15: 00007ffd844c9788 [ 134.872216][ T7726] [ 134.881839][ T7726] ldm_validate_partition_table(): Disk read failed. [ 134.882146][ T7726] Dev loop3: unable to read RDB block 0 [ 134.882577][ T7726] loop3: unable to read partition table [ 134.882663][ T7726] loop3: partition table beyond EOD, truncated [ 134.882676][ T7726] loop_reread_partitions: partition scan of loop3 (Cj̖P=ý?}X %֐ȵ4FLQk݊5) failed (rc=-5) [ 134.924443][ T5627] udevd[5627]: inotify_add_watch(7, /dev/loop3, 10) failed: No such file or directory [ 134.928014][ T5627] udevd[5627]: inotify_add_watch(7, /dev/loop3, 10) failed: No such file or directory [ 134.929889][ T5627] udevd[5627]: inotify_add_watch(7, /dev/loop3, 10) failed: No such file or directory