last executing test programs: 10.183520837s ago: executing program 4 (id=855): mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000040)='sysfs\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000240)='./sys/bus/pci/drivers/vfio-pci/bind\x00', 0x2, 0x0) 10.001094141s ago: executing program 4 (id=859): r0 = socket$igmp(0x2, 0x3, 0x2) socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000200)={'netdevsim0\x00', 0x0}) r2 = socket$inet_icmp(0x2, 0x2, 0x1) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r6 = socket$inet_sctp(0x2, 0x1, 0x84) r7 = socket$rds(0x15, 0x5, 0x0) bind$rds(r7, &(0x7f0000001000)={0x2, 0x4e21, @loopback}, 0x10) sendmsg$rds(r7, &(0x7f0000000180)={&(0x7f0000000080)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, 0x0, 0x0, &(0x7f0000000540)=[@mask_fadd={0x58, 0x118, 0x8, {{0xfffffffc, 0x1}, 0x0, 0x0, 0x5c, 0x8, 0x0, 0x200010000000}}, @zcopy_cookie={0x18, 0x114, 0xc, 0x4}], 0x70}, 0x0) setsockopt$IP_VS_SO_SET_ADD(r6, 0x0, 0x482, &(0x7f0000000040)={0x84, @initdev={0xac, 0x1e, 0x1, 0x0}, 0x4e23, 0x3, 'dh\x00', 0x1, 0x7, 0x49}, 0x2c) ioctl$sock_inet_SIOCGARP(r2, 0x8954, 0x0) r8 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') mount$9p_fd(0x0, &(0x7f0000000300)='.\x00', &(0x7f0000000080), 0x804000, &(0x7f0000000340)=ANY=[@ANYBLOB='trans=fd,rf', @ANYRESHEX=r8]) ioctl$vim2m_VIDIOC_G_FMT(r8, 0xc0d05604, &(0x7f0000000440)={0x2, @sliced={0x2, [0x2, 0xb, 0x8, 0x8, 0x2, 0x4, 0x6, 0x1, 0x7, 0x7, 0xb84, 0x7, 0x200, 0x2, 0x6, 0x8fee, 0x8, 0x6, 0x1, 0x8000, 0x1, 0x78e5, 0x3, 0x8, 0xae4, 0x300, 0x4, 0x9, 0x7fff, 0x401, 0xd874, 0x100, 0x9, 0x9, 0x4, 0x67, 0x1, 0xfff8, 0x58f, 0x3a4, 0xfff, 0x4, 0x7, 0x7, 0xbdcf, 0x9, 0x0, 0x93], 0xfffffa6a}}) setsockopt$IP_VS_SO_SET_ADD(r2, 0x0, 0x482, &(0x7f00000000c0)={0x5c, @dev={0xac, 0x14, 0x14, 0x27}, 0x4e22, 0x1, 'sed\x00', 0x12, 0x0, 0x26}, 0x2c) r9 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$inet_tcp_int(r9, 0x6, 0x19, &(0x7f00000001c0)=0x8, 0x4) sendmmsg$inet(r9, &(0x7f0000000240)=[{{&(0x7f0000000000)={0x2, 0x4e24, @loopback}, 0x10, 0x0}}], 0x1, 0x20008000) shutdown(r9, 0x1) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000380)={0x6, 0x3, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000095000000000000004f37ea30f5e6dc290c54acf7c91d450702777fb6650f7da88f07755b5738e49186f1490de575054f77aaa828ba3b4dbd67549a9fa1b608b089"], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r1}, 0x94) 7.766507956s ago: executing program 4 (id=861): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./sys\x00', 0x1ff) r3 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./sys/bus/platform/drivers_probe\x00', 0x1, 0x0) write(r3, &(0x7f00000001c0)='pcspkr', 0x6) 6.83712544s ago: executing program 4 (id=866): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000180)={0xa, 0x4e22, 0x0, @loopback}, 0x58) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000ffa000/0x2000)=nil, 0x2000, &(0x7f0000000000)) prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000400)={'wlan1\x00', 0x0}) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_CONTROL_PORT_FRAME(r4, &(0x7f0000003700)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)={0x4c, r6, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r5}, @void}}, [@NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_CONTROL_PORT_ETHERTYPE={0x6, 0x66, 0x88c7}, @NL80211_ATTR_FRAME={0x1c, 0x33, @data_frame={@msdu=@type10={{}, {}, @from_mac=@broadcast, @device_b}}}]}, 0x4c}}, 0x800) prctl$PR_SET_MM(0x23, 0x4, &(0x7f0000ffd000/0x2000)=nil) r7 = socket$netlink(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r7, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000001200)={&(0x7f0000000300)={0x38, 0x1403, 0x1, 0x0, 0x0, "", [{{0x9, 0x2, 'syz2\x00'}, {0x8, 0x41, 'rxe\x00'}, {0x14, 0x33, 'ipvlan0\x00'}}]}, 0x38}, 0x1, 0x0, 0x0, 0x80c9}, 0x20000000) sched_setparam(r1, &(0x7f0000000000)=0x1) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$VIDIOC_DQEVENT(0xffffffffffffffff, 0x80785659, 0x0) ioctl$VIDIOC_SUBSCRIBE_EVENT(0xffffffffffffffff, 0x4020565a, &(0x7f0000000140)={0x3, 0x98f90f, 0x1}) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x141442, 0x40) shutdown(r0, 0x1) 3.847541549s ago: executing program 4 (id=881): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r1) openat$nullb(0xffffffffffffff9c, 0x0, 0x1c3902, 0x0) r2 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r2, 0x107, 0x11, 0x0, 0x0) setsockopt$packet_tx_ring(r2, 0x107, 0x5, &(0x7f0000000040)=@req3={0x0, 0x6, 0x300, 0xfc, 0x0, 0x0, 0x8}, 0x1c) syz_emit_ethernet(0x2dc2d, 0x0, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000200)={'syzkaller0\x00', @link_local}) write$cgroup_subtree(r0, &(0x7f0000000000)=ANY=[@ANYBLOB="7bedcb5d07081196f37538e486dd6372ce22667f2b00dbf6e97158cf474fec87891f6d76745b686158bbcfe8875afdef00010000000029"], 0x66) 3.551752569s ago: executing program 0 (id=886): syz_io_uring_submit(0x0, 0x0, 0x0, &(0x7f00000004c0)=@IORING_OP_RECV=@use_registered_buffer={0x1b, 0x20, 0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x145, 0x0, {0x1}}) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f00000003c0)={0x2e, 0x5, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000200)=@any_dev={0x4, 0xd74, 0x0, 0x0, 0x1000, 0x68ba, 0x0, 0x0, 0x148}}}, 0x0) 3.466594677s ago: executing program 0 (id=889): r0 = openat$uinput(0xffffffffffffff9c, 0x0, 0x802, 0x0) ioctl$UI_DEV_CREATE(r0, 0x5501) readv(0xffffffffffffffff, &(0x7f0000000680), 0x0) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x9, 0x0, 0x7fff0000}]}) bpf$MAP_LOOKUP_BATCH(0x18, 0x0, 0x0) r2 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r2, 0x0, 0x0) close(0xffffffffffffffff) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r3) r4 = socket(0x2b, 0x1, 0x1) bind$inet6(r3, &(0x7f0000000080)={0xa, 0x4e22, 0x0, @empty}, 0x1c) listen(r4, 0x5) r5 = socket$inet_smc(0x2b, 0x1, 0x0) connect$inet(r5, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) accept4$vsock_stream(r4, 0x0, 0xfffffffffffffda0, 0x80000) close_range(r1, 0xffffffffffffffff, 0x0) 3.292590844s ago: executing program 3 (id=890): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, 0x0, &(0x7f0000000040)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./sys/bus/i2c/devices/i2c-0/new_device\x00', 0x1, 0x0) write(r0, &(0x7f0000000300)='rt1719 0x49\x00', 0xc) 2.861943335s ago: executing program 3 (id=891): ioctl$DRM_IOCTL_SET_CLIENT_CAP(0xffffffffffffffff, 0x4010640d, 0x0) r0 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_mreqn(r0, 0x0, 0x23, &(0x7f0000000740)={@multicast2, @loopback}, 0xc) setsockopt$inet_msfilter(r0, 0x0, 0x29, 0x0, 0x57) r1 = socket$netlink(0x10, 0x3, 0x0) writev(r1, &(0x7f00000003c0)=[{&(0x7f00000001c0)="390000001300034700bb65e1c3e4ffff010000000100000056000000250000001900040004001810000007fd17e5ffff080004000000000000", 0x39}], 0x1) r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000000)=[{0x6, 0x10, 0x0, 0x7fff7ffc}]}) close_range(r2, 0xffffffffffffffff, 0x0) 2.650678653s ago: executing program 2 (id=892): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) bind$bt_l2cap(r0, &(0x7f0000000280)={0x1f, 0xfffe, @any, 0x0, 0x1}, 0xe) listen(r0, 0x0) r1 = io_uring_setup(0x805, &(0x7f00000001c0)={0x0, 0x0, 0x2, 0x0, 0x34e}) close(r1) accept4(r0, 0x0, 0x0, 0x80800) 2.431976047s ago: executing program 0 (id=894): openat$uinput(0xffffffffffffff9c, 0x0, 0x802, 0x0) readv(0xffffffffffffffff, &(0x7f0000000680), 0x0) r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x9, 0x0, 0x7fff0000}]}) bpf$MAP_LOOKUP_BATCH(0x18, 0x0, 0x0) r1 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r1, 0x0, 0x0) close(0xffffffffffffffff) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r2) r3 = socket(0x2b, 0x1, 0x1) bind$inet6(r2, &(0x7f0000000080)={0xa, 0x4e22, 0x0, @empty}, 0x1c) listen(r3, 0x5) r4 = socket$inet_smc(0x2b, 0x1, 0x0) connect$inet(r4, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) accept4$vsock_stream(r3, 0x0, 0xfffffffffffffda0, 0x80000) close_range(r0, 0xffffffffffffffff, 0x0) 1.693991541s ago: executing program 2 (id=895): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./sys/bus/i2c/devices/i2c-0/new_device\x00', 0x1, 0x0) write(r0, &(0x7f0000000200)='stusb160x 0x48\x00', 0xf) write(r0, &(0x7f0000000400)='wusb3801 0x4a\x00', 0xe) 1.586135881s ago: executing program 1 (id=896): mount(0x0, &(0x7f0000000080)='./sys\x00', &(0x7f00000000c0)='sysfs\x00', 0x0, 0x0) r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000100)='./sys/class/net\x00', 0x0, 0x0) statx(r0, &(0x7f0000000340)='./sys/class/net\x00', 0x2000, 0x800, 0x0) 1.585004841s ago: executing program 2 (id=897): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFULNL_MSG_CONFIG(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)={0x1c, 0x1, 0x4, 0x101, 0x0, 0x0, {0x5, 0x0, 0x6}, [@NFULA_CFG_CMD={0x5, 0x1, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0xc800}, 0x20008898) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETSET(r1, 0x0, 0x40000) r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x72, 0x0, 0x7fff0000}]}) close_range(r2, 0xffffffffffffffff, 0x0) 1.511978222s ago: executing program 0 (id=898): sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000100)={0x18, 0x2, 0x6, 0x5, 0x0, 0x0, {}, [@IPSET_ATTR_DATA={0x4}]}, 0x18}}, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000100)=ANY=[@ANYRES8, @ANYRES32, @ANYBLOB="0000000000000000400012800c0001"], 0x68}}, 0x0) r1 = socket$igmp6(0xa, 0x3, 0x2) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x80}, 0x0) r2 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r1, 0x8983, &(0x7f0000000300)={0x0, 'syzkaller1\x00', {0x2}}) write$tun(r0, &(0x7f0000000100)=ANY=[@ANYBLOB="06000000bbbbbbbbbbbbaaaaaaaaaabb88f5"], 0x72) 1.447570033s ago: executing program 2 (id=899): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) prlimit64(0x0, 0xe, 0x0, 0x0) syz_emit_ethernet(0x66, &(0x7f0000001a40)={@broadcast, @remote, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "1200b0", 0x30, 0x3a, 0x0, @empty, @mcast2, {[], @dest_unreach={0xa0, 0x0, 0x0, 0x0, '\x00', {0x0, 0x6, "277382", 0x0, 0x0, 0x0, @private1, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}}}}}}}, 0x0) sched_setscheduler(0x0, 0x1, 0x0) getpid() bind$alg(0xffffffffffffffff, 0x0, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x121301, 0x0) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000040)=0x3) ioctl$FIONREAD(r2, 0x541b, &(0x7f0000002300)) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000340)=ANY=[@ANYRES16=r2, @ANYRES32=0x0, @ANYBLOB="2690eeda1ea9bebc850a8494ab474ef8107416aed973559176ad2b724f808f07a90600000000000000308db48b3ddf500edb8b411145cf0cfda2a1c65d12d27ba1b92c01643f6ab610e554fbbae5b17955f56470ba7730edb519c8507e2ca65bfa1bd836a55083238dfca0e476b93049f951956c05ce5de6422f708feb9052ad47f8cbfa28e557ce80ce1500005e27ab8ab85b06306e1d95c1222308a197d544fb483458861f1ed83a9225281e774997034574035a194e6af176c62a24eaa96d39e98217bbc93ffe6e4dd69f01882214f9aca5cc53698a881847e2"], 0xb8}, 0x1, 0x0, 0x0, 0x4080}, 0x140) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, 0x0, 0x0) sendmsg$nl_xfrm(r1, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x71, '\x00', 0x0, @fallback=0xf, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x94) connect$unix(0xffffffffffffffff, &(0x7f0000000180)=@abs={0x0, 0x0, 0x1}, 0x6e) r4 = syz_open_dev$vim2m(&(0x7f0000000000), 0x7, 0x2) ioctl$vim2m_VIDIOC_G_FMT(r4, 0xc0285628, &(0x7f0000000180)={0x3, @win={{0x0, 0x0, 0x7f, 0x4}, 0x5, 0x0, 0x0, 0x0, 0x0}}) 1.434854081s ago: executing program 1 (id=900): socket$nl_route(0x10, 0x3, 0x0) socket$key(0xf, 0x3, 0x2) socket$kcm(0x29, 0x2, 0x0) socket$rds(0x15, 0x5, 0x0) socket$inet_icmp_raw(0x2, 0x3, 0x1) socket$igmp(0x2, 0x3, 0x2) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000080)={r1}, 0x4) bpf$ENABLE_STATS(0x20, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x16, 0x3, &(0x7f0000000200)=@framed={{0x18, 0x0, 0x0, 0x0, 0xc00d100, 0x0, 0x0, 0x0, 0x100}}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x2b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$inet6_mptcp(0xa, 0x1, 0x106) mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, 0x0) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000440)=@new_dev={0x4, 0x3c9, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x40}}}, &(0x7f0000000300)=0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) r6 = dup(r5) syz_ublk_setup_queues(r6, r4, &(0x7f0000000180)={0x0, 0x5, 0x0, 0xfffffffe, 0x257, 0x0, r6}, &(0x7f0000000800)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x4704, 0x40, 0x1000000, 0x2}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xfffffffc, 0x200, 0x0, 0x146}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x1f70, 0x20000, 0x1}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x0, 0x8000, 0x1, 0xffffffff}}], 0x1, 0x0, 0x0) 1.295131056s ago: executing program 2 (id=901): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000100)) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r2 = dup3(r1, r0, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r3, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000004a80)={0x73622a85, 0x100, 0x1}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000fc0)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000300)={@flat=@weak_binder={0x77622a85, 0x100a, 0x8000000000}, @flat=@weak_binder={0x77622a85, 0x1100, 0x3}}, &(0x7f0000000200)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0}) mmap$binder(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x1, 0x11, r0, 0x10000000000) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000004a40)={0x4c, 0x0, &(0x7f00000009c0)=[@transaction={0x40406300, {0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, @release={0x40046306, 0x3}], 0x0, 0x0, 0x0}) 707.623148ms ago: executing program 2 (id=902): syz_usb_connect(0x0, 0x32, &(0x7f0000000000)=ANY=[@ANYBLOB="12010002000000404705352200000102030109022000010100c0010904000002000000000705020200020007058202000200"], 0x0) mount(&(0x7f0000000040)=@filename='sysfs\x00', &(0x7f0000000080)='./sys\x00', &(0x7f00000000c0)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./sys/bus/usb/drivers/usbtest/new_id\x00', 0x1, 0x0) write(r0, &(0x7f0000000200)='0547 2235\n\x00', 0xa) 499.209835ms ago: executing program 1 (id=903): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ff) mount(&(0x7f0000000040)=@filename='none\x00', &(0x7f0000000080)='./config\x00', &(0x7f00000000c0)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./config/usb_gadget/g1\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./config/usb_gadget/g1/configs/c.1\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000180)='./config/usb_gadget/g1/functions/uvc.usb0\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f00000001c0)='./config/usb_gadget/g1/functions/uvc.usb0/control/header/h\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./config/usb_gadget/g1/functions/uvc.usb0/streaming/header/h\x00', 0x1ff) symlinkat(&(0x7f0000000240)='./config/usb_gadget/g1/functions/uvc.usb0/control/header/h\x00', 0xffffffffffffff9c, 0x0) symlinkat(&(0x7f0000000340)='./config/usb_gadget/g1/functions/uvc.usb0/control/header/h\x00', 0xffffffffffffff9c, &(0x7f00000003c0)='./config/usb_gadget/g1/functions/uvc.usb0/control/class/ss/h\x00') symlinkat(&(0x7f0000000440)='./config/usb_gadget/g1/functions/uvc.usb0/streaming/header/h\x00', 0xffffffffffffff9c, &(0x7f00000004c0)='./config/usb_gadget/g1/functions/uvc.usb0/streaming/class/fs/h\x00') symlinkat(&(0x7f0000000540)='./config/usb_gadget/g1/functions/uvc.usb0/streaming/header/h\x00', 0xffffffffffffff9c, &(0x7f00000005c0)='./config/usb_gadget/g1/functions/uvc.usb0/streaming/class/hs/h\x00') symlinkat(&(0x7f0000000740)='./config/usb_gadget/g1/functions/uvc.usb0\x00', 0xffffffffffffff9c, &(0x7f00000007c0)='./config/usb_gadget/g1/configs/c.1/uvc.usb0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000840)='./config/usb_gadget/g1/UDC\x00', 0x1, 0x0) write(r0, &(0x7f0000000880)='dummy_udc.0\x00', 0xc) r1 = syz_open_dev$video(&(0x7f00000008c0), 0x0, 0x2) ioctl$VIDIOC_SUBSCRIBE_EVENT(r1, 0x4010565a, &(0x7f0000000900)={0x8000004}) ioctl$VIDIOC_UNSUBSCRIBE_EVENT(r1, 0x4010565b, &(0x7f0000000940)={0x8000004}) close(r1) 402.594416ms ago: executing program 1 (id=904): mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x100) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000180), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r0, &(0x7f0000008880)={0x2020, 0x0, 0x0}, 0x2020) syz_fuse_handle_req(r0, &(0x7f00000042c0)="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", 0x203e, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) write$FUSE_INIT(r0, &(0x7f0000004200)={0x50, 0x0, r1, {0x7, 0x2b, 0x0, 0x8222410, 0x0, 0x0, 0xb9, 0xc, 0x0, 0x0, 0x0, 0x1000000a}}, 0x50) syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000006780)={0x90, 0xffffffffffffffda, 0x0, {0x80000, 0x0, 0x100, 0x0, 0xffffffff, 0x0, {0x0, 0x0, 0x0, 0xffffffffffffffff}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000006780)={0x90, 0x0, 0x0, {0x5, 0x0, 0xa53, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000, 0xfffffdfd, 0x0, 0x0, 0x10000}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) openat(0xffffffffffffff9c, &(0x7f00000013c0)='./file0/file0\x00', 0x42, 0x0) 319.92918ms ago: executing program 3 (id=905): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./config\x00', &(0x7f00000000c0)='configfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000840)='./config/usb_gadget/g1/UDC\x00', 0x1, 0x0) write(r0, &(0x7f0000000880)='dummy_', 0x6) 318.025068ms ago: executing program 1 (id=906): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000100)) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r2 = dup3(r1, r0, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(0xffffffffffffffff, 0x4018620d, &(0x7f0000004a80)={0x73622a85, 0x100, 0x1}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000004c0)={0x8, 0x0, &(0x7f0000000000)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000fc0)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000300)={@flat=@weak_binder={0x77622a85, 0x100a, 0x8000000000}, @flat=@weak_binder={0x77622a85, 0x1100, 0x3}}, &(0x7f0000000200)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0}) mmap$binder(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x1, 0x11, r0, 0x10000000000) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x50, 0x0, &(0x7f0000000680)="6f47aa478b6e40d7a0d54238d5b7f49bbc47602404bf6280f3ab2533c0d8c2747e82b1fd11c2190e73aecaee84d536660efe4c30082b35a08ed2a36921d7786f497326dc21dc6bdc1dd75a0000000000"}) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000004a40)={0x44, 0x0, &(0x7f00000049c0)=[@transaction={0x40406300, {0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) ioctl$BINDER_THREAD_EXIT(0xffffffffffffffff, 0x40046208, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000480)={0x4c, 0x0, &(0x7f0000000500)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 263.47807ms ago: executing program 1 (id=907): request_key(&(0x7f0000000c40)='encrypted\x00', &(0x7f0000000c80)={'syz', 0x0}, 0x0, 0x0) r0 = add_key(&(0x7f00000000c0)='cifs.idmap\x00', 0x0, 0x0, 0x0, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x400000000008d}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x1, &(0x7f0000000240)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x4000087, 0x2, 0x0) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x100000000001, 0x0) write$binfmt_script(0xffffffffffffffff, 0x0, 0x0) r5 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000000), 0x8800, 0x0) ioctl$PTP_CLOCK_GETCAPS(r5, 0x40043d14, &(0x7f0000000040)) io_setup(0x3, &(0x7f0000000600)) sendmsg$NL802154_CMD_SET_LBT_MODE(0xffffffffffffffff, 0x0, 0x0) syz_genetlink_get_family_id$nfc(&(0x7f0000000cc0), 0xffffffffffffffff) syz_genetlink_get_family_id$netlbl_mgmt(0x0, 0xffffffffffffffff) sendmsg$NLBL_MGMT_C_ADD(r1, &(0x7f0000000840)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4008000}, 0x4040000) keyctl$negate(0xd, 0x0, 0x8000000000000000, r0) 233.407007ms ago: executing program 4 (id=908): openat$uinput(0xffffffffffffff9c, &(0x7f0000000240), 0x802, 0x0) readv(0xffffffffffffffff, 0x0, 0x0) r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x9, 0x0, 0x7fff0000}]}) bpf$MAP_LOOKUP_BATCH(0x18, 0x0, 0x0) r1 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r1, 0x0, 0x0) close(0xffffffffffffffff) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r2) r3 = socket(0x2b, 0x1, 0x1) bind$inet6(r2, &(0x7f0000000080)={0xa, 0x4e22, 0x0, @empty}, 0x1c) listen(r3, 0x5) r4 = socket$inet_smc(0x2b, 0x1, 0x0) connect$inet(r4, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) accept4$vsock_stream(r3, 0x0, 0xfffffffffffffda0, 0x80000) close_range(r0, 0xffffffffffffffff, 0x0) 216.333467ms ago: executing program 3 (id=909): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFULNL_MSG_CONFIG(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)={0x1c, 0x1, 0x4, 0x101, 0x0, 0x0, {0x5, 0x0, 0x6}, [@NFULA_CFG_CMD={0x5, 0x1, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0xc800}, 0x20008898) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETSET(r1, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20085}, 0x40000) r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x72, 0x0, 0x7fff0000}]}) close_range(r2, 0xffffffffffffffff, 0x0) 142.347234ms ago: executing program 0 (id=910): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000dc0), 0xffffffffffffffff) sendmsg$NL802154_CMD_DEL_SEC_LEVEL(r0, &(0x7f0000000f00)={0x0, 0x0, &(0x7f0000000ec0)={&(0x7f0000000100)={0x3c, r1, 0x1, 0x0, 0x25dfdbfe, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}, @NL802154_ATTR_SEC_LEVEL={0x1c, 0x2d, 0x0, 0x1, [@NL802154_SECLEVEL_ATTR_CMD_FRAME={0x8, 0x3, 0x2000}, @NL802154_SECLEVEL_ATTR_LEVELS={0x5, 0x1, 0x7}, @NL802154_SECLEVEL_ATTR_DEV_OVERRIDE={0x5}]}]}, 0x3c}}, 0x40004044) 102.588771ms ago: executing program 0 (id=911): mkdirat(0xffffffffffffff9c, 0x0, 0x1ff) mount(0x0, &(0x7f0000000080)='./config\x00', &(0x7f00000000c0)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./config/usb_gadget/g1\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./config/usb_gadget/g1/functions/ffs.usb0\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000180)='./ffs\x00', 0x1ff) pipe2(&(0x7f0000000200)={0x0, 0x0}, 0x0) write(r1, &(0x7f00000001c0)='functionfs\x00', 0xb) read(r0, &(0x7f0000000100), 0xb) mount(&(0x7f0000000240)=@filename='usb0\x00', &(0x7f0000000280)='./ffs\x00', &(0x7f0000000100), 0x0, 0x0) 26.550765ms ago: executing program 3 (id=912): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000100)) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r2 = dup3(r1, r0, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r3, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000004a80)={0x73622a85, 0x100, 0x1}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000fc0)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000300)={@flat=@weak_binder={0x77622a85, 0x100a, 0x8000000000}, @flat=@weak_binder={0x77622a85, 0x1100, 0x3}}, &(0x7f0000000200)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0}) mmap$binder(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x1, 0x11, r0, 0x10000000000) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000004a40)={0x4c, 0x0, &(0x7f00000009c0)=[@transaction={0x40406300, {0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, @release={0x40046306, 0x3}], 0x0, 0x0, 0x0}) 0s ago: executing program 3 (id=913): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeeb, 0x8031, 0xffffffffffffffff, 0xbf5ce000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) socket(0x2, 0x2, 0x1) unshare(0x20000400) r3 = syz_open_dev$media(&(0x7f0000000040), 0x20, 0x0) ioctl$MEDIA_IOC_G_TOPOLOGY(r3, 0xc0487c04, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) kernel console output (not intermixed with test programs): [ 51.781211][ T30] audit: type=1400 audit(1784932533.313:111): avc: denied { write } for pid=5463 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 51.841674][ T30] audit: type=1400 audit(1784932533.373:112): avc: denied { write } for pid=5474 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 52.017156][ T30] audit: type=1400 audit(1784932533.553:113): avc: denied { write } for pid=5477 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 52.060042][ T30] audit: type=1400 audit(1784932533.593:114): avc: denied { write } for pid=5488 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 52.469215][ T30] audit: type=1400 audit(1784932534.003:115): avc: denied { write } for pid=5491 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 52.526544][ T30] audit: type=1400 audit(1784932534.063:116): avc: denied { write } for pid=5502 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 52.701259][ T30] audit: type=1400 audit(1784932534.233:117): avc: denied { write } for pid=5505 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 52.745073][ T30] audit: type=1400 audit(1784932534.283:118): avc: denied { write } for pid=5516 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 52.920971][ T30] audit: type=1400 audit(1784932534.453:119): avc: denied { write } for pid=5519 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 52.976800][ T30] audit: type=1400 audit(1784932534.513:120): avc: denied { write } for pid=5530 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 Warning: Permanently added '10.128.0.10' (ED25519) to the list of known hosts. [ 58.684376][ T30] kauditd_printk_skb: 8 callbacks suppressed [ 58.684392][ T30] audit: type=1400 audit(1784932540.223:129): avc: denied { mounton } for pid=5598 comm="syz-executor" path="/syzcgroup/unified" dev="sda1" ino=2023 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1 [ 58.714493][ T30] audit: type=1400 audit(1784932540.253:130): avc: denied { mount } for pid=5598 comm="syz-executor" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 58.717325][ T5598] cgroup: Unknown subsys name 'net' [ 58.745183][ T30] audit: type=1400 audit(1784932540.283:131): avc: denied { unmount } for pid=5598 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 58.885825][ T5598] cgroup: Unknown subsys name 'cpuset' [ 58.893439][ T5598] cgroup: Unknown subsys name 'rlimit' [ 59.013540][ T30] audit: type=1400 audit(1784932540.553:132): avc: denied { setattr } for pid=5598 comm="syz-executor" name="raw-gadget" dev="devtmpfs" ino=816 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 59.037021][ T30] audit: type=1400 audit(1784932540.553:133): avc: denied { create } for pid=5598 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 59.078110][ T30] audit: type=1400 audit(1784932540.553:134): avc: denied { write } for pid=5598 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 59.098994][ T30] audit: type=1400 audit(1784932540.553:135): avc: denied { read } for pid=5598 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 59.119772][ T30] audit: type=1400 audit(1784932540.573:136): avc: denied { mounton } for pid=5598 comm="syz-executor" path="/proc/sys/fs/binfmt_misc" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=dir permissive=1 [ 59.145513][ T30] audit: type=1400 audit(1784932540.573:137): avc: denied { mount } for pid=5598 comm="syz-executor" name="/" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=filesystem permissive=1 Setting up swapspace version 1, size = 127995904 bytes [ 59.182956][ T5601] SELinux: Context root:object_r:swapfile_t is not valid (left unmapped). [ 59.192366][ T30] audit: type=1400 audit(1784932540.733:138): avc: denied { relabelto } for pid=5601 comm="mkswap" name="swap-file" dev="sda1" ino=2026 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 60.174680][ T5598] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 62.370499][ T4929] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 62.379323][ T5621] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 62.391001][ T5621] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 62.399206][ T5621] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 62.407132][ T5621] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 62.417188][ T5621] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 62.421540][ T5626] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 62.426063][ T5621] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 62.432756][ T5626] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 62.439091][ T5621] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 62.448570][ T5626] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 62.458586][ T5628] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 62.460637][ T5626] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 62.468803][ T5621] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 62.474689][ T5626] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 62.481426][ T5628] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 62.490891][ T5626] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 62.495131][ T5621] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 62.510755][ T5626] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 62.515686][ T5628] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 62.525561][ T5621] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 62.533993][ T5628] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 62.537140][ T5626] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 62.543156][ T5628] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 62.549660][ T5626] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 63.829901][ T5610] bridge0: port 1(bridge_slave_0) entered blocking state [ 63.837110][ T5610] bridge0: port 1(bridge_slave_0) entered disabled state [ 63.844325][ T5610] bridge_slave_0: entered allmulticast mode [ 63.851010][ T5610] bridge_slave_0: entered promiscuous mode [ 63.874631][ T5613] bridge0: port 1(bridge_slave_0) entered blocking state [ 63.882192][ T5613] bridge0: port 1(bridge_slave_0) entered disabled state [ 63.889560][ T5613] bridge_slave_0: entered allmulticast mode [ 63.896285][ T5613] bridge_slave_0: entered promiscuous mode [ 63.903810][ T5613] bridge0: port 2(bridge_slave_1) entered blocking state [ 63.910891][ T5613] bridge0: port 2(bridge_slave_1) entered disabled state [ 63.918221][ T5613] bridge_slave_1: entered allmulticast mode [ 63.925033][ T5613] bridge_slave_1: entered promiscuous mode [ 63.931619][ T5610] bridge0: port 2(bridge_slave_1) entered blocking state [ 63.938688][ T5610] bridge0: port 2(bridge_slave_1) entered disabled state [ 63.945885][ T5610] bridge_slave_1: entered allmulticast mode [ 63.952847][ T5610] bridge_slave_1: entered promiscuous mode [ 63.977917][ T5620] bridge0: port 1(bridge_slave_0) entered blocking state [ 63.985035][ T5620] bridge0: port 1(bridge_slave_0) entered disabled state [ 63.992108][ T5620] bridge_slave_0: entered allmulticast mode [ 63.999150][ T5620] bridge_slave_0: entered promiscuous mode [ 64.028046][ T5620] bridge0: port 2(bridge_slave_1) entered blocking state [ 64.035240][ T5620] bridge0: port 2(bridge_slave_1) entered disabled state [ 64.042416][ T5620] bridge_slave_1: entered allmulticast mode [ 64.049237][ T5620] bridge_slave_1: entered promiscuous mode [ 64.083396][ T5613] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 64.095949][ T5610] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 64.123723][ T5613] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 64.134272][ T5610] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 64.155942][ T5620] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 64.178573][ T5611] bridge0: port 1(bridge_slave_0) entered blocking state [ 64.185836][ T5611] bridge0: port 1(bridge_slave_0) entered disabled state [ 64.192948][ T5611] bridge_slave_0: entered allmulticast mode [ 64.200007][ T5611] bridge_slave_0: entered promiscuous mode [ 64.214514][ T5620] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 64.238281][ T5611] bridge0: port 2(bridge_slave_1) entered blocking state [ 64.245597][ T5611] bridge0: port 2(bridge_slave_1) entered disabled state [ 64.252693][ T5611] bridge_slave_1: entered allmulticast mode [ 64.259616][ T5611] bridge_slave_1: entered promiscuous mode [ 64.279272][ T5613] team0: Port device team_slave_0 added [ 64.286280][ T5610] team0: Port device team_slave_0 added [ 64.294007][ T5610] team0: Port device team_slave_1 added [ 64.305791][ T5616] bridge0: port 1(bridge_slave_0) entered blocking state [ 64.312912][ T5616] bridge0: port 1(bridge_slave_0) entered disabled state [ 64.320109][ T5616] bridge_slave_0: entered allmulticast mode [ 64.326942][ T5616] bridge_slave_0: entered promiscuous mode [ 64.342164][ T5613] team0: Port device team_slave_1 added [ 64.368524][ T5616] bridge0: port 2(bridge_slave_1) entered blocking state [ 64.376393][ T5616] bridge0: port 2(bridge_slave_1) entered disabled state [ 64.383776][ T5616] bridge_slave_1: entered allmulticast mode [ 64.390468][ T5616] bridge_slave_1: entered promiscuous mode [ 64.398285][ T5620] team0: Port device team_slave_0 added [ 64.419319][ T5611] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 64.436226][ T5620] team0: Port device team_slave_1 added [ 64.442463][ T5613] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 64.449642][ T5613] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 64.475781][ T5613] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 64.488089][ T5610] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 64.495298][ T5610] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 64.521447][ T5610] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 64.534012][ T5611] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 64.559163][ T5613] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 64.564218][ T5628] Bluetooth: hci0: command tx timeout [ 64.566253][ T5613] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 64.566552][ T5613] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 64.609377][ T5610] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 64.616377][ T5610] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 64.633988][ T5628] Bluetooth: hci4: command tx timeout [ 64.644429][ T5610] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 64.648442][ T5626] Bluetooth: hci3: command tx timeout [ 64.658706][ T5622] Bluetooth: hci2: command tx timeout [ 64.658794][ T5622] Bluetooth: hci1: command tx timeout [ 64.684861][ T5616] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 64.722477][ T5616] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 64.734491][ T5620] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 64.741509][ T5620] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 64.767444][ T5620] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 64.792678][ T5611] team0: Port device team_slave_0 added [ 64.805455][ T5620] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 64.812465][ T5620] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 64.838465][ T5620] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 64.859910][ T5610] hsr_slave_0: entered promiscuous mode [ 64.866489][ T5610] hsr_slave_1: entered promiscuous mode [ 64.873962][ T5611] team0: Port device team_slave_1 added [ 64.894763][ T5613] hsr_slave_0: entered promiscuous mode [ 64.900795][ T5613] hsr_slave_1: entered promiscuous mode [ 64.906813][ T5613] debugfs: 'hsr0' already exists in 'hsr' [ 64.912571][ T5613] Cannot create hsr debugfs directory [ 64.926828][ T5616] team0: Port device team_slave_0 added [ 64.952815][ T5616] team0: Port device team_slave_1 added [ 64.984387][ T5611] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 64.991350][ T5611] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 65.017830][ T5611] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 65.035811][ T5616] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 65.042827][ T5616] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 65.068741][ T5616] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 65.089934][ T5611] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 65.097026][ T5611] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 65.122945][ T5611] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 65.139971][ T5616] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 65.146971][ T5616] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 65.172867][ T5616] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 65.202904][ T5620] hsr_slave_0: entered promiscuous mode [ 65.208958][ T5620] hsr_slave_1: entered promiscuous mode [ 65.215010][ T5620] debugfs: 'hsr0' already exists in 'hsr' [ 65.220722][ T5620] Cannot create hsr debugfs directory [ 65.330446][ T5611] hsr_slave_0: entered promiscuous mode [ 65.337641][ T5611] hsr_slave_1: entered promiscuous mode [ 65.343877][ T5611] debugfs: 'hsr0' already exists in 'hsr' [ 65.349596][ T5611] Cannot create hsr debugfs directory [ 65.358491][ T5616] hsr_slave_0: entered promiscuous mode [ 65.364785][ T5616] hsr_slave_1: entered promiscuous mode [ 65.370687][ T5616] debugfs: 'hsr0' already exists in 'hsr' [ 65.376469][ T5616] Cannot create hsr debugfs directory [ 65.611688][ T5610] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 65.622879][ T5610] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 65.652969][ T5610] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 65.662834][ T5610] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 65.681356][ T5610] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 65.690701][ T5610] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 65.698536][ T5610] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 65.708663][ T5610] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 65.769791][ T5613] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 65.779270][ T5613] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 65.787788][ T5613] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 65.796617][ T5613] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 65.804757][ T5613] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 65.814194][ T5613] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 65.825822][ T5613] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 65.835534][ T5613] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 65.901712][ T5620] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 65.912113][ T5620] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 65.921849][ T1313] ieee802154 phy0 wpan0: encryption failed: -22 [ 65.928484][ T1313] ieee802154 phy1 wpan1: encryption failed: -22 [ 65.939123][ T5620] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 65.949725][ T5620] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 65.958073][ T5620] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 65.966609][ T5620] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 65.974663][ T5620] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 65.983085][ T5620] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 66.065052][ T5610] 8021q: adding VLAN 0 to HW filter on device bond0 [ 66.073020][ T5616] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 66.082194][ T5616] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 66.098378][ T5616] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 66.109644][ T5616] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 66.117734][ T5616] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 66.126100][ T5616] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 66.133995][ T5616] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 66.142447][ T5616] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 66.194109][ T5610] 8021q: adding VLAN 0 to HW filter on device team0 [ 66.236833][ T732] bridge0: port 1(bridge_slave_0) entered blocking state [ 66.244289][ T732] bridge0: port 1(bridge_slave_0) entered forwarding state [ 66.260178][ T5613] 8021q: adding VLAN 0 to HW filter on device bond0 [ 66.266974][ T5611] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 66.276029][ T5611] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 66.283799][ T5611] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 66.291986][ T5611] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 66.306705][ T5611] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 66.315845][ T5611] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 66.328318][ T732] bridge0: port 2(bridge_slave_1) entered blocking state [ 66.335413][ T732] bridge0: port 2(bridge_slave_1) entered forwarding state [ 66.349420][ T5611] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 66.358557][ T5611] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 66.398117][ T5613] 8021q: adding VLAN 0 to HW filter on device team0 [ 66.435335][ T48] bridge0: port 1(bridge_slave_0) entered blocking state [ 66.442457][ T48] bridge0: port 1(bridge_slave_0) entered forwarding state [ 66.462230][ T5620] 8021q: adding VLAN 0 to HW filter on device bond0 [ 66.479077][ T48] bridge0: port 2(bridge_slave_1) entered blocking state [ 66.486213][ T48] bridge0: port 2(bridge_slave_1) entered forwarding state [ 66.548730][ T5620] 8021q: adding VLAN 0 to HW filter on device team0 [ 66.578754][ T732] bridge0: port 1(bridge_slave_0) entered blocking state [ 66.585928][ T732] bridge0: port 1(bridge_slave_0) entered forwarding state [ 66.611476][ T732] bridge0: port 2(bridge_slave_1) entered blocking state [ 66.618672][ T732] bridge0: port 2(bridge_slave_1) entered forwarding state [ 66.633397][ T5622] Bluetooth: hci0: command tx timeout [ 66.637285][ T5616] 8021q: adding VLAN 0 to HW filter on device bond0 [ 66.657489][ T5611] 8021q: adding VLAN 0 to HW filter on device bond0 [ 66.713685][ T4929] Bluetooth: hci4: command tx timeout [ 66.715242][ T5628] Bluetooth: hci1: command tx timeout [ 66.719617][ T5622] Bluetooth: hci3: command tx timeout [ 66.724731][ T5626] Bluetooth: hci2: command tx timeout [ 66.761600][ T5611] 8021q: adding VLAN 0 to HW filter on device team0 [ 66.783282][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 66.790456][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 66.807881][ T5616] 8021q: adding VLAN 0 to HW filter on device team0 [ 66.829261][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 66.836434][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 66.879820][ T1037] bridge0: port 1(bridge_slave_0) entered blocking state [ 66.886966][ T1037] bridge0: port 1(bridge_slave_0) entered forwarding state [ 66.924480][ T5620] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 66.942033][ T1037] bridge0: port 2(bridge_slave_1) entered blocking state [ 66.949215][ T1037] bridge0: port 2(bridge_slave_1) entered forwarding state [ 67.189441][ T5610] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 67.517452][ T5613] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 67.660290][ T5613] veth0_vlan: entered promiscuous mode [ 67.697580][ T5613] veth1_vlan: entered promiscuous mode [ 67.771008][ T5620] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 67.860633][ T5610] veth0_vlan: entered promiscuous mode [ 67.872594][ T5616] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 67.884514][ T5611] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 67.897848][ T5613] veth0_macvtap: entered promiscuous mode [ 67.917598][ T5613] veth1_macvtap: entered promiscuous mode [ 67.925926][ T5610] veth1_vlan: entered promiscuous mode [ 67.960221][ T5620] veth0_vlan: entered promiscuous mode [ 67.985350][ T5613] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 68.008106][ T5620] veth1_vlan: entered promiscuous mode [ 68.024763][ T5613] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 68.032450][ T5610] veth0_macvtap: entered promiscuous mode [ 68.056250][ T5611] veth0_vlan: entered promiscuous mode [ 68.067362][ T732] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 68.077366][ T732] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 68.087313][ T5610] veth1_macvtap: entered promiscuous mode [ 68.094005][ T5616] veth0_vlan: entered promiscuous mode [ 68.105655][ T732] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 68.114627][ T732] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 68.141056][ T5616] veth1_vlan: entered promiscuous mode [ 68.151104][ T5611] veth1_vlan: entered promiscuous mode [ 68.170950][ T5610] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 68.181894][ T5610] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 68.203473][ T5620] veth0_macvtap: entered promiscuous mode [ 68.228675][ T48] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 68.238614][ T48] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 68.252582][ T5620] veth1_macvtap: entered promiscuous mode [ 68.262936][ T48] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 68.271948][ T48] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 68.317642][ T5616] veth0_macvtap: entered promiscuous mode [ 68.347537][ T5616] veth1_macvtap: entered promiscuous mode [ 68.358668][ T5611] veth0_macvtap: entered promiscuous mode [ 68.371967][ T48] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 68.381305][ T48] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 68.392802][ T5620] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 68.421690][ T5611] veth1_macvtap: entered promiscuous mode [ 68.431038][ T5620] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 68.456722][ T3346] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 68.465246][ T1037] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 68.474578][ T3346] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 68.475397][ T1037] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 68.496031][ T5616] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 68.526244][ T1037] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 68.536001][ T1037] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 68.546792][ T5616] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 68.562596][ T5611] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 68.597789][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 68.598723][ T5611] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 68.606033][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 68.627737][ T1037] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 68.640323][ T1037] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 68.652007][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 68.663914][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 68.679836][ T1037] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 68.698354][ T30] kauditd_printk_skb: 13 callbacks suppressed [ 68.698369][ T30] audit: type=1400 audit(1784932550.233:152): avc: denied { mounton } for pid=5613 comm="syz-executor" path="/root/syzkaller.WEgCZD/syz-tmp" dev="sda1" ino=2042 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_home_t tclass=dir permissive=1 [ 68.718649][ T1037] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 68.735474][ T30] audit: type=1400 audit(1784932550.233:153): avc: denied { mount } for pid=5613 comm="syz-executor" name="/" dev="tmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 68.746614][ T5622] Bluetooth: hci0: command tx timeout [ 68.770077][ T30] audit: type=1400 audit(1784932550.233:154): avc: denied { mounton } for pid=5613 comm="syz-executor" path="/root/syzkaller.WEgCZD/syz-tmp/newroot/dev" dev="tmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 68.796255][ T5622] Bluetooth: hci1: command tx timeout [ 68.801686][ T5622] Bluetooth: hci2: command tx timeout [ 68.807195][ T5622] Bluetooth: hci3: command tx timeout [ 68.807698][ T5628] Bluetooth: hci4: command tx timeout [ 68.812693][ T30] audit: type=1400 audit(1784932550.233:155): avc: denied { mount } for pid=5613 comm="syz-executor" name="/" dev="proc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 68.825408][ T1037] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 68.841282][ T30] audit: type=1400 audit(1784932550.233:156): avc: denied { mounton } for pid=5613 comm="syz-executor" path="/root/syzkaller.WEgCZD/syz-tmp/newroot/sys/kernel/debug" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=dir permissive=1 [ 68.880484][ T30] audit: type=1400 audit(1784932550.243:157): avc: denied { mounton } for pid=5613 comm="syz-executor" path="/root/syzkaller.WEgCZD/syz-tmp/newroot/proc/sys/fs/binfmt_misc" dev="proc" ino=7116 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysctl_fs_t tclass=dir permissive=1 [ 68.921375][ T30] audit: type=1400 audit(1784932550.243:158): avc: denied { unmount } for pid=5613 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 68.928861][ T5610] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 68.941904][ T30] audit: type=1400 audit(1784932550.273:159): avc: denied { mounton } for pid=5613 comm="syz-executor" path="/dev/gadgetfs" dev="devtmpfs" ino=2784 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:device_t tclass=dir permissive=1 [ 68.986158][ T30] audit: type=1400 audit(1784932550.333:160): avc: denied { mount } for pid=5613 comm="syz-executor" name="/" dev="gadgetfs" ino=7843 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfs_t tclass=filesystem permissive=1 [ 69.009908][ T30] audit: type=1400 audit(1784932550.333:161): avc: denied { mount } for pid=5613 comm="syz-executor" name="/" dev="binder" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 69.045526][ T1037] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 69.066236][ T1037] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 69.076202][ T1037] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 69.150807][ T1037] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 69.181755][ T1037] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 69.227762][ T1114] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 69.238957][ T1114] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 69.291376][ T1114] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 69.322616][ T1114] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 69.352550][ T5806] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 69.453881][ T1037] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 69.482127][ T1037] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 69.500180][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 69.535472][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 69.595554][ T1114] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 69.637593][ T1114] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 69.829073][ T5818] wlan0 speed is unknown, defaulting to 1000 [ 69.835728][ T5818] wlan0 speed is unknown, defaulting to 1000 [ 69.846219][ T5818] wlan0 speed is unknown, defaulting to 1000 [ 69.856951][ T5818] smbdirect: ib_dev[syz0]: added: RNIC max_fast_reg_page_list_len=256 device_cap_flags=0x200000 kernel_cap_flags=0x10 page_size_cap=0x1000 [ 69.872997][ T5818] smbdirect: ib_dev[syz0]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=1 max_cqe=3276800 max_qp_wr=32768 max_send_sge=6 max_recv_sge=6 [ 69.890011][ T5818] smbdirect: ib_dev[syz0]PORT[1]: iwarp=1 ib=0 roce=0 v1=0 v2=0 core_cap_flags=0x400008 [ 69.909728][ T5818] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 69.946999][ T5818] infiniband syz0: RDMA CMA: cma_listen_on_dev, error -98 [ 70.079335][ T5818] wlan0 speed is unknown, defaulting to 1000 [ 70.091685][ T5818] wlan0 speed is unknown, defaulting to 1000 [ 70.103759][ T5818] wlan0 speed is unknown, defaulting to 1000 [ 70.115834][ T5818] wlan0 speed is unknown, defaulting to 1000 [ 70.127324][ T5818] wlan0 speed is unknown, defaulting to 1000 [ 70.339596][ T5818] smbdirect: ib_dev[syz0] removed [ 70.670070][ T5816] UDC core: g1: couldn't find an available UDC or it's busy [ 70.803396][ T5626] Bluetooth: hci0: command tx timeout [ 70.875090][ T5628] Bluetooth: hci2: command tx timeout [ 70.875106][ T5622] Bluetooth: hci4: command tx timeout [ 70.875131][ T5622] Bluetooth: hci1: command tx timeout [ 70.881184][ T5626] Bluetooth: hci3: command tx timeout [ 71.021457][ T5838] netlink: 'syz.2.12': attribute type 10 has an invalid length. [ 71.080465][ T5838] syz_tun: entered promiscuous mode [ 71.118626][ T5838] bond0: (slave syz_tun): Enslaving as an active interface with an up link [ 71.431099][ T5843] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 72.410457][ T5870] netlink: 4 bytes leftover after parsing attributes in process `syz.2.20'. [ 72.419545][ T5870] netlink: 4 bytes leftover after parsing attributes in process `syz.2.20'. [ 72.428461][ T5870] netlink: 4 bytes leftover after parsing attributes in process `syz.2.20'. [ 72.438133][ T5870] netlink: 4 bytes leftover after parsing attributes in process `syz.2.20'. [ 72.447551][ T5870] netlink: 4 bytes leftover after parsing attributes in process `syz.2.20'. [ 72.462871][ T5870] netlink: 4 bytes leftover after parsing attributes in process `syz.2.20'. [ 72.471842][ T5870] netlink: 4 bytes leftover after parsing attributes in process `syz.2.20'. [ 72.481048][ T5870] netlink: 4 bytes leftover after parsing attributes in process `syz.2.20'. [ 72.490063][ T5870] netlink: 4 bytes leftover after parsing attributes in process `syz.2.20'. [ 72.498959][ T5870] netlink: 4 bytes leftover after parsing attributes in process `syz.2.20'. [ 72.953486][ T5626] Bluetooth: hci2: command tx timeout [ 74.063693][ T30] kauditd_printk_skb: 126 callbacks suppressed [ 74.063720][ T30] audit: type=1400 audit(1784932555.483:288): avc: denied { create } for pid=5907 comm="syz.0.33" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 74.136921][ T30] audit: type=1400 audit(1784932555.493:289): avc: denied { accept } for pid=5905 comm="syz.2.32" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 74.157086][ T30] audit: type=1400 audit(1784932555.523:290): avc: denied { write } for pid=5905 comm="syz.2.32" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 74.178324][ T30] audit: type=1400 audit(1784932555.523:291): avc: denied { read } for pid=5905 comm="syz.2.32" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 74.418022][ T30] audit: type=1400 audit(1784932555.523:292): avc: denied { create } for pid=5905 comm="syz.2.32" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 74.992769][ T30] audit: type=1400 audit(1784932555.573:293): avc: denied { write } for pid=5913 comm="syz.3.34" name="ppp" dev="devtmpfs" ino=710 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 75.016459][ T30] audit: type=1400 audit(1784932555.573:294): avc: denied { open } for pid=5913 comm="syz.3.34" path="/dev/ppp" dev="devtmpfs" ino=710 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 75.042347][ T30] audit: type=1400 audit(1784932555.573:295): avc: denied { ioctl } for pid=5913 comm="syz.3.34" path="/dev/ppp" dev="devtmpfs" ino=710 ioctlcmd=0x7438 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 75.083327][ T30] audit: type=1400 audit(1784932555.733:296): avc: denied { create } for pid=5915 comm="syz.3.35" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 75.114674][ T30] audit: type=1400 audit(1784932555.743:297): avc: denied { create } for pid=5915 comm="syz.3.35" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 76.822488][ T13] syzkaller0: tun_net_xmit 76 [ 76.841626][ T13] syzkaller0: tun_net_xmit 48 [ 76.847521][ T804] syzkaller0: tun_net_xmit 76 [ 77.041683][ T5958] ======================================================= [ 77.041683][ T5958] WARNING: The mand mount option has been deprecated and [ 77.041683][ T5958] and is ignored by this kernel. Remove the mand [ 77.041683][ T5958] option from the mount to silence this warning. [ 77.041683][ T5958] ======================================================= [ 77.113586][ T5958] 9p: Bad value for 'rfdno' [ 79.219749][ T5931] Set syz1 is full, maxelem 65536 reached [ 79.706298][ T30] kauditd_printk_skb: 14 callbacks suppressed [ 79.706314][ T30] audit: type=1400 audit(1784932561.233:312): avc: denied { name_bind } for pid=6005 comm="syz.3.61" src=20004 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=sctp_socket permissive=1 [ 79.774501][ T30] audit: type=1400 audit(1784932561.243:313): avc: denied { name_connect } for pid=6005 comm="syz.3.61" dest=20004 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=sctp_socket permissive=1 [ 81.025383][ T30] audit: type=1400 audit(1784932562.563:314): avc: denied { read write } for pid=6026 comm="syz.4.68" name="fuse" dev="devtmpfs" ino=99 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fuse_device_t tclass=chr_file permissive=1 [ 81.060541][ T30] audit: type=1400 audit(1784932562.583:315): avc: denied { open } for pid=6026 comm="syz.4.68" path="/dev/fuse" dev="devtmpfs" ino=99 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fuse_device_t tclass=chr_file permissive=1 [ 81.099548][ T30] audit: type=1400 audit(1784932562.583:316): avc: denied { mounton } for pid=6026 comm="syz.4.68" path="/13/file0" dev="tmpfs" ino=85 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 81.207702][ T30] audit: type=1400 audit(1784932562.593:317): avc: denied { mount } for pid=6026 comm="syz.4.68" name="/" dev="fuse" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=filesystem permissive=1 [ 81.282046][ T30] audit: type=1400 audit(1784932562.683:318): avc: denied { read write } for pid=6026 comm="syz.4.68" name="file0" dev="fuse" ino=0 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=chr_file permissive=1 [ 81.325628][ T10] cfg80211: failed to load regulatory.db [ 81.351020][ T30] audit: type=1400 audit(1784932562.683:319): avc: denied { open } for pid=6026 comm="syz.4.68" path="/13/file0/file0" dev="fuse" ino=0 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=chr_file permissive=1 [ 81.450844][ T30] audit: type=1800 audit(1784932562.983:320): pid=6035 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.0.69" name="serialnumber" dev="configfs" ino=8936 res=0 errno=0 [ 81.607635][ T30] audit: type=1400 audit(1784932563.023:321): avc: denied { unmount } for pid=5610 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=filesystem permissive=1 [ 82.422993][ T6074] binder_alloc: 6073: binder_alloc_buf, no vma [ 82.566750][ T10] xhci_hcd 0000:00:00.0: init 0000:00:00.0 fail, -16 [ 82.581270][ T6082] xhci_hcd 0000:00:00.0: probe with driver xhci_hcd failed with error -16 [ 82.995827][ T6102] binder_alloc: 6101: binder_alloc_buf, no vma [ 83.188820][ T5346] xhci_hcd 0000:00:00.0: init 0000:00:00.0 fail, -16 [ 83.242079][ T6110] xhci_hcd 0000:00:00.0: probe with driver xhci_hcd failed with error -16 [ 83.698252][ T6130] binder_alloc: 6129: binder_alloc_buf, no vma [ 85.030261][ T6174] wlan0 speed is unknown, defaulting to 1000 [ 85.037601][ T6174] wlan0 speed is unknown, defaulting to 1000 [ 85.047910][ T6174] wlan0 speed is unknown, defaulting to 1000 [ 85.057600][ T6174] smbdirect: ib_dev[syz0]: added: RNIC max_fast_reg_page_list_len=256 device_cap_flags=0x200000 kernel_cap_flags=0x10 page_size_cap=0x1000 [ 85.072556][ T6174] smbdirect: ib_dev[syz0]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=1 max_cqe=3276800 max_qp_wr=32768 max_send_sge=6 max_recv_sge=6 [ 85.089729][ T6174] smbdirect: ib_dev[syz0]PORT[1]: iwarp=1 ib=0 roce=0 v1=0 v2=0 core_cap_flags=0x400008 [ 85.131344][ T6174] infiniband syz0: RDMA CMA: cma_listen_on_dev, error -98 [ 85.280514][ T6174] wlan0 speed is unknown, defaulting to 1000 [ 85.293452][ T6174] wlan0 speed is unknown, defaulting to 1000 [ 85.305014][ T6174] wlan0 speed is unknown, defaulting to 1000 [ 85.317136][ T6174] wlan0 speed is unknown, defaulting to 1000 [ 85.328747][ T6174] wlan0 speed is unknown, defaulting to 1000 [ 87.279396][ T30] kauditd_printk_skb: 10 callbacks suppressed [ 87.279414][ T30] audit: type=1400 audit(1784932568.253:332): avc: denied { read } for pid=6192 comm="syz.2.149" name="msr" dev="devtmpfs" ino=87 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 87.376317][ T30] audit: type=1400 audit(1784932568.253:333): avc: denied { open } for pid=6192 comm="syz.2.149" path="/dev/cpu/0/msr" dev="devtmpfs" ino=87 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 87.459138][ T30] audit: type=1400 audit(1784932568.283:334): avc: denied { create } for pid=6192 comm="syz.2.149" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 87.472033][ T6197] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 87.535295][ T30] audit: type=1400 audit(1784932568.283:335): avc: denied { bind } for pid=6192 comm="syz.2.149" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 87.606866][ T30] audit: type=1400 audit(1784932568.283:336): avc: denied { listen } for pid=6192 comm="syz.2.149" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 87.651780][ T30] audit: type=1400 audit(1784932568.283:337): avc: denied { read } for pid=6192 comm="syz.2.149" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 87.744487][ T6092] Set syz1 is full, maxelem 65536 reached [ 87.809523][ T30] audit: type=1400 audit(1784932569.343:338): avc: denied { write } for pid=6203 comm="syz.3.154" name="binder0" dev="binder" ino=16 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 87.951464][ T6209] siw: device registration error -23 [ 89.371114][ T30] audit: type=1400 audit(1784932570.903:339): avc: denied { relabelfrom } for pid=6233 comm="syz.1.163" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tun_socket permissive=1 [ 89.401971][ T1114] syzkaller0: tun_net_xmit 76 [ 89.417652][ T30] audit: type=1400 audit(1784932570.903:340): avc: denied { relabelto } for pid=6233 comm="syz.1.163" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tun_socket permissive=1 [ 89.422748][ T1114] syzkaller0: tun_net_xmit 48 [ 89.444763][ T5800] syzkaller0: tun_net_xmit 76 [ 89.504147][ T10] syzkaller0: tun_net_xmit 76 [ 90.403700][ T10] xhci_hcd 0000:00:00.0: init 0000:00:00.0 fail, -16 [ 90.432982][ T6248] xhci_hcd 0000:00:00.0: probe with driver xhci_hcd failed with error -16 [ 92.143419][ T30] audit: type=1400 audit(1784932572.943:341): avc: denied { sqpoll } for pid=6255 comm="syz.0.174" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 93.136045][ T30] audit: type=1400 audit(1784932573.433:342): avc: denied { create } for pid=6256 comm="syz.2.175" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 93.247954][ T30] audit: type=1400 audit(1784932573.443:343): avc: denied { setopt } for pid=6256 comm="syz.2.175" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 93.323719][ T30] audit: type=1400 audit(1784932573.643:344): avc: denied { bind } for pid=6256 comm="syz.2.175" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 95.669842][ T6290] binder_alloc: 6289: binder_alloc_buf, no vma [ 95.821475][ T6240] Set syz1 is full, maxelem 65536 reached [ 95.877830][ T30] audit: type=1400 audit(1784932577.403:345): avc: denied { create } for pid=6295 comm="syz.4.188" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 96.967086][ T10] usb 3-1: new low-speed USB device number 2 using dummy_hcd [ 97.181745][ T10] usb 3-1: unable to get BOS descriptor or descriptor too short [ 97.192853][ T10] usb 3-1: config 142 has an invalid interface number: 251 but max is 0 [ 97.207512][ T10] usb 3-1: config 142 has no interface number 0 [ 97.216710][ T10] usb 3-1: config 142 interface 251 altsetting 11 has an endpoint descriptor with address 0x9F, changing to 0x8F [ 97.229585][ T10] usb 3-1: config 142 interface 251 altsetting 11 endpoint 0x8F is Bulk; changing to Interrupt [ 97.260185][ T10] usb 3-1: config 142 interface 251 altsetting 11 endpoint 0x1 is Bulk; changing to Interrupt [ 97.282079][ T10] usb 3-1: config 142 interface 251 has no altsetting 0 [ 97.311682][ T10] usb 3-1: string descriptor 0 read error: -22 [ 97.351816][ T10] usb 3-1: New USB device found, idVendor=6737, idProduct=0001, bcdDevice=91.80 [ 97.367807][ T10] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 97.383503][ T6309] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 97.394444][ T6309] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 97.449513][ T10] cypress_m8 3-1:142.251: HID->COM RS232 Adapter converter detected [ 97.482999][ T10] usb 3-1: HID->COM RS232 Adapter converter now attached to ttyUSB0 [ 97.928343][ T6358] siw: device registration error -23 [ 98.873069][ T804] usb 3-1: USB disconnect, device number 2 [ 98.920920][ T804] cyphidcom ttyUSB0: HID->COM RS232 Adapter converter now disconnected from ttyUSB0 [ 98.935553][ T804] cypress_m8 3-1:142.251: device disconnected [ 99.023429][ T6335] __nla_validate_parse: 44 callbacks suppressed [ 99.023447][ T6335] netlink: 48 bytes leftover after parsing attributes in process `syz.1.205'. [ 99.062947][ T6339] netlink: 48 bytes leftover after parsing attributes in process `syz.1.205'. [ 99.076215][ T6339] Zero length message leads to an empty skb [ 99.527290][ T6382] 9p: Bad value for 'rfdno' [ 99.872544][ T6393] binder: BINDER_SET_CONTEXT_MGR already set [ 99.882305][ T6393] binder: 6392:6393 ioctl 4018620d 2000000002c0 returned -16 [ 100.029099][ T6397] siw: device registration error -23 [ 100.894172][ T30] audit: type=1400 audit(1784932582.413:346): avc: denied { create } for pid=6403 comm="syz.1.230" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 100.976851][ T30] audit: type=1400 audit(1784932582.413:347): avc: denied { write } for pid=6403 comm="syz.1.230" lport=255 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 101.393442][ T5729] usb 4-1: new low-speed USB device number 2 using dummy_hcd [ 101.548274][ T6431] 9p: Bad value for 'rfdno' [ 102.006006][ T5729] usb 4-1: unable to get BOS descriptor or descriptor too short [ 102.015067][ T5729] usb 4-1: config 142 has an invalid interface number: 251 but max is 0 [ 102.027812][ T6321] Set syz1 is full, maxelem 65536 reached [ 102.029896][ T5729] usb 4-1: config 142 has no interface number 0 [ 102.051975][ T5729] usb 4-1: config 142 interface 251 altsetting 11 has an endpoint descriptor with address 0x9F, changing to 0x8F [ 102.083261][ T5729] usb 4-1: config 142 interface 251 altsetting 11 endpoint 0x8F is Bulk; changing to Interrupt [ 102.103763][ T5729] usb 4-1: config 142 interface 251 altsetting 11 endpoint 0x1 is Bulk; changing to Interrupt [ 102.134354][ T5729] usb 4-1: config 142 interface 251 has no altsetting 0 [ 102.158960][ T5729] usb 4-1: string descriptor 0 read error: -22 [ 102.165545][ T5729] usb 4-1: New USB device found, idVendor=6737, idProduct=0001, bcdDevice=91.80 [ 102.184337][ T5729] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 102.209320][ T6417] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 102.222180][ T6417] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 102.243896][ T5729] cypress_m8 4-1:142.251: HID->COM RS232 Adapter converter detected [ 102.263850][ T5729] usb 4-1: HID->COM RS232 Adapter converter now attached to ttyUSB0 [ 102.788984][ T30] audit: type=1400 audit(1784932584.323:348): avc: denied { read } for pid=6465 comm="syz.1.255" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 103.057590][ T30] audit: type=1400 audit(1784932584.363:349): avc: denied { write } for pid=6465 comm="syz.1.255" path="socket:[11141]" dev="sockfs" ino=11141 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 103.091548][ T30] audit: type=1400 audit(1784932584.423:350): avc: denied { bind } for pid=6465 comm="syz.1.255" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 103.171263][ T5729] usb 4-1: USB disconnect, device number 2 [ 103.616886][ T30] audit: type=1400 audit(1784932585.143:351): avc: denied { name_bind } for pid=6474 comm="syz.4.256" src=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:reserved_port_t tclass=tcp_socket permissive=1 [ 103.642714][ T5729] cyphidcom ttyUSB0: HID->COM RS232 Adapter converter now disconnected from ttyUSB0 [ 103.670387][ T5729] cypress_m8 4-1:142.251: device disconnected [ 104.619827][ T30] audit: type=1400 audit(1784932586.143:352): avc: denied { shutdown } for pid=6476 comm="syz.0.257" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 104.688653][ T30] audit: type=1400 audit(1784932586.143:353): avc: denied { ioctl } for pid=6476 comm="syz.0.257" path="socket:[11173]" dev="sockfs" ino=11173 ioctlcmd=0x8907 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 104.858824][ T30] audit: type=1400 audit(1784932586.143:354): avc: denied { read } for pid=6476 comm="syz.0.257" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 104.885329][ T6488] 9p: Bad value for 'rfdno' [ 106.550892][ T30] audit: type=1400 audit(1784932588.083:355): avc: denied { ioctl } for pid=6540 comm="syz.4.281" path="socket:[12308]" dev="sockfs" ino=12308 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 106.839109][ T30] audit: type=1400 audit(1784932588.363:356): avc: denied { bind } for pid=6540 comm="syz.4.281" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 107.179541][ T30] audit: type=1400 audit(1784932588.363:357): avc: denied { write } for pid=6540 comm="syz.4.281" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 110.593723][ T6636] binder_alloc: 6630: binder_alloc_buf, no vma [ 112.534146][ T804] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 112.686485][ T804] usb 4-1: device descriptor read/64, error -71 [ 112.880009][ T30] audit: type=1400 audit(1784932594.413:358): avc: denied { bind } for pid=6692 comm="syz.2.343" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 112.923352][ T30] audit: type=1400 audit(1784932594.413:359): avc: denied { node_bind } for pid=6692 comm="syz.2.343" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=rawip_socket permissive=1 [ 112.958234][ T30] audit: type=1400 audit(1784932594.443:360): avc: denied { read } for pid=6692 comm="syz.2.343" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 112.982447][ T804] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 113.139704][ T804] usb 4-1: device descriptor read/64, error -71 [ 113.273487][ T804] usb usb4-port1: attempt power cycle [ 113.353050][ T6709] netlink: 8 bytes leftover after parsing attributes in process `syz.2.351'. [ 113.379055][ T6709] netlink: 8 bytes leftover after parsing attributes in process `syz.2.351'. [ 113.615631][ T804] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 113.661098][ T804] usb 4-1: device descriptor read/8, error -71 [ 113.904006][ T804] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 113.934805][ T804] usb 4-1: device descriptor read/8, error -71 [ 114.054821][ T804] usb usb4-port1: unable to enumerate USB device [ 114.206822][ T6737] binder: BINDER_SET_CONTEXT_MGR already set [ 114.213688][ T6737] binder: 6736:6737 ioctl 4018620d 200000004a80 returned -16 [ 114.491139][ T6749] binder: BINDER_SET_CONTEXT_MGR already set [ 114.498060][ T6749] binder: 6748:6749 ioctl 4018620d 2000000002c0 returned -16 [ 117.307032][ T6816] netlink: 12 bytes leftover after parsing attributes in process `syz.4.388'. [ 117.690231][ T6825] siw: device registration error -23 [ 118.693864][ T24] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 119.005874][ T6828] vivid-000: kernel_thread() failed [ 119.331150][ T24] usb 2-1: device descriptor read/64, error -71 [ 119.893659][ T6841] siw: device registration error -23 [ 120.412875][ T24] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 120.714081][ T6853] netlink: 4 bytes leftover after parsing attributes in process `syz.3.399'. [ 121.693824][ T6865] netlink: 12 bytes leftover after parsing attributes in process `syz.3.404'. [ 122.726091][ T6890] netlink: 4 bytes leftover after parsing attributes in process `syz.2.412'. [ 122.903374][ T10] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 123.483516][ T6904] binder_alloc: 6901: binder_alloc_buf, no vma [ 123.553333][ T10] usb 4-1: device descriptor read/64, error -71 [ 123.831708][ T10] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 124.055208][ T10] usb 4-1: device descriptor read/64, error -71 [ 125.062122][ T6925] netlink: 4 bytes leftover after parsing attributes in process `syz.0.424'. [ 125.810398][ T10] usb usb4-port1: attempt power cycle [ 126.134650][ T6941] netlink: 'syz.0.429': attribute type 10 has an invalid length. [ 126.251407][ T6941] syz_tun: entered promiscuous mode [ 126.796671][ T6948] netlink: 12 bytes leftover after parsing attributes in process `syz.2.433'. [ 126.865266][ T6941] bond0: (slave syz_tun): Enslaving as an active interface with an up link [ 127.458053][ T1313] ieee802154 phy0 wpan0: encryption failed: -22 [ 127.687425][ T1313] ieee802154 phy1 wpan1: encryption failed: -22 [ 130.087525][ T5799] IPVS: starting estimator thread 0... [ 130.223395][ T6978] IPVS: using max 45 ests per chain, 108000 per kthread [ 130.411450][ T6984] 9pnet_fd: Insufficient options for proto=fd [ 130.419196][ T6984] IPVS: set_ctl: invalid protocol: 92 172.20.20.39:20002 [ 130.818352][ T30] audit: type=1400 audit(1784932611.943:361): avc: denied { ioctl } for pid=6981 comm="syz.2.442" path="socket:[13179]" dev="sockfs" ino=13179 ioctlcmd=0x8954 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 130.873962][ T30] audit: type=1400 audit(1784932611.953:362): avc: denied { setopt } for pid=6981 comm="syz.2.442" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 130.976198][ T6988] netlink: 12 bytes leftover after parsing attributes in process `syz.4.444'. [ 131.845488][ T6995] netlink: 'syz.4.447': attribute type 10 has an invalid length. [ 134.942298][ T7031] 9pnet_fd: Insufficient options for proto=fd [ 134.949598][ T7031] IPVS: set_ctl: invalid protocol: 92 172.20.20.39:20002 [ 135.570853][ T30] audit: type=1400 audit(1784932617.103:363): avc: denied { write } for pid=7034 comm="syz.3.459" name="functions" dev="configfs" ino=9385 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 135.679610][ T30] audit: type=1400 audit(1784932617.113:364): avc: denied { write } for pid=7034 comm="syz.3.459" name="header" dev="configfs" ino=13295 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 135.733792][ T30] audit: type=1400 audit(1784932617.113:365): avc: denied { write } for pid=7034 comm="syz.3.459" name="header" dev="configfs" ino=13308 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 135.783307][ T30] audit: type=1400 audit(1784932617.113:366): avc: denied { write } for pid=7034 comm="syz.3.459" name="ss" dev="configfs" ino=13305 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 135.813627][ T5626] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci2/hci2:201' [ 135.825787][ T5626] CPU: 0 UID: 0 PID: 5626 Comm: kworker/u9:6 Tainted: G L syzkaller #0 PREEMPT(full) [ 135.825821][ T5626] Tainted: [L]=SOFTLOCKUP [ 135.825828][ T5626] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 135.825841][ T5626] Workqueue: hci2 hci_rx_work [ 135.825867][ T5626] Call Trace: [ 135.825873][ T5626] [ 135.825881][ T5626] dump_stack_lvl+0x100/0x190 [ 135.825910][ T5626] sysfs_warn_dup.cold+0x1c/0x28 [ 135.825937][ T5626] sysfs_create_dir_ns+0x24b/0x2b0 [ 135.825967][ T5626] ? __pfx_sysfs_create_dir_ns+0x10/0x10 [ 135.825994][ T5626] ? find_held_lock+0x2b/0x80 [ 135.826022][ T5626] ? kobject_add_internal+0x25f/0x930 [ 135.826048][ T5626] ? kobject_add_internal+0x25f/0x930 [ 135.826076][ T5626] ? do_raw_spin_unlock+0x145/0x1e0 [ 135.826104][ T5626] kobject_add_internal+0x2c8/0x930 [ 135.826133][ T5626] kobject_add+0x16a/0x1e0 [ 135.826162][ T5626] ? __pfx_kobject_add+0x10/0x10 [ 135.826194][ T5626] ? class_to_subsys+0x10f/0x150 [ 135.826228][ T5626] ? kobject_put+0xb9/0x640 [ 135.826250][ T5626] ? _raw_spin_unlock+0x28/0x50 [ 135.826280][ T5626] device_add+0x294/0x1970 [ 135.826303][ T5626] ? __pfx_dev_set_name+0x10/0x10 [ 135.826331][ T5626] ? __pfx_device_add+0x10/0x10 [ 135.826354][ T5626] ? mgmt_send_event_skb+0x2fb/0x460 [ 135.826378][ T5626] hci_conn_add_sysfs+0x1a3/0x260 [ 135.826401][ T5626] le_conn_complete_evt+0x11eb/0x1f60 [ 135.826425][ T5626] ? __pfx_le_conn_complete_evt+0x10/0x10 [ 135.826441][ T5626] ? hci_event_packet+0x186/0xcd0 [ 135.826464][ T5626] hci_le_conn_complete_evt+0x23c/0x3a0 [ 135.826485][ T5626] ? skb_pull_data+0x15f/0x1e0 [ 135.826515][ T5626] hci_le_meta_evt+0x34a/0x5f0 [ 135.826536][ T5626] ? __pfx_hci_le_conn_complete_evt+0x10/0x10 [ 135.826560][ T5626] hci_event_packet+0x51c/0xcd0 [ 135.826579][ T5626] ? __pfx_hci_le_meta_evt+0x10/0x10 [ 135.826598][ T5626] ? __pfx_hci_event_packet+0x10/0x10 [ 135.826619][ T5626] ? kcov_remote_start+0x384/0x670 [ 135.826638][ T5626] ? lockdep_hardirqs_on+0x78/0x100 [ 135.826662][ T5626] hci_rx_work+0x451/0xfc0 [ 135.826683][ T5626] process_one_work+0xa23/0x1940 [ 135.826711][ T5626] ? __pfx_process_one_work+0x10/0x10 [ 135.826738][ T5626] ? __pfx_hci_rx_work+0x10/0x10 [ 135.826756][ T5626] worker_thread+0x5ef/0xe50 [ 135.826781][ T5626] ? kthread+0x13a/0x450 [ 135.826795][ T5626] ? __pfx_worker_thread+0x10/0x10 [ 135.826809][ T5626] kthread+0x370/0x450 [ 135.826822][ T5626] ? __pfx_kthread+0x10/0x10 [ 135.826838][ T5626] ret_from_fork+0x72b/0xd50 [ 135.826863][ T5626] ? __pfx_ret_from_fork+0x10/0x10 [ 135.826886][ T5626] ? rcu_is_watching+0x12/0xc0 [ 135.826912][ T5626] ? __switch_to+0x800/0x10f0 [ 135.826930][ T5626] ? __pfx_kthread+0x10/0x10 [ 135.826947][ T5626] ret_from_fork_asm+0x1a/0x30 [ 135.826983][ T5626] [ 135.827054][ T5626] kobject: kobject_add_internal failed for hci2:201 with -EEXIST, don't try to register things with the same name in the same directory. [ 135.893293][ T30] audit: type=1400 audit(1784932617.113:367): avc: denied { write } for pid=7034 comm="syz.3.459" name="ss" dev="configfs" ino=13305 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 136.242534][ T30] audit: type=1400 audit(1784932617.123:368): avc: denied { write } for pid=7034 comm="syz.3.459" name="fs" dev="configfs" ino=14339 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 136.265105][ T30] audit: type=1400 audit(1784932617.123:369): avc: denied { write } for pid=7034 comm="syz.3.459" name="fs" dev="configfs" ino=14339 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 136.287878][ T30] audit: type=1400 audit(1784932617.123:370): avc: denied { write } for pid=7034 comm="syz.3.459" name="hs" dev="configfs" ino=14340 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 136.310972][ T30] audit: type=1400 audit(1784932617.123:371): avc: denied { write } for pid=7034 comm="syz.3.459" name="hs" dev="configfs" ino=14340 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 136.342618][ T30] audit: type=1400 audit(1784932617.123:372): avc: denied { write } for pid=7034 comm="syz.3.459" name="ss" dev="configfs" ino=14341 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 136.367482][ T30] audit: type=1400 audit(1784932617.123:373): avc: denied { write } for pid=7034 comm="syz.3.459" name="ss" dev="configfs" ino=14341 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 136.390073][ T30] audit: type=1400 audit(1784932617.123:374): avc: denied { write } for pid=7034 comm="syz.3.459" name="c.1" dev="configfs" ino=8534 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 136.430794][ T5626] Bluetooth: hci2: failed to register connection device [ 136.456179][ T30] audit: type=1400 audit(1784932617.123:375): avc: denied { write } for pid=7034 comm="syz.3.459" name="c.1" dev="configfs" ino=8534 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 136.525087][ T30] audit: type=1400 audit(1784932617.343:376): avc: denied { bind } for pid=7036 comm="syz.2.460" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 138.937064][ T6995] syz_tun: entered promiscuous mode [ 138.947480][ T6995] bond0: (slave syz_tun): Enslaving as an active interface with an up link [ 138.956505][ T7010] netlink: 4 bytes leftover after parsing attributes in process `syz.1.451'. [ 138.965353][ T7010] netlink: 4 bytes leftover after parsing attributes in process `syz.1.451'. [ 138.974401][ T7010] netlink: 4 bytes leftover after parsing attributes in process `syz.1.451'. [ 138.983263][ T7010] netlink: 4 bytes leftover after parsing attributes in process `syz.1.451'. [ 138.992706][ T7010] netlink: 4 bytes leftover after parsing attributes in process `syz.1.451'. [ 139.002649][ T7010] netlink: 4 bytes leftover after parsing attributes in process `syz.1.451'. [ 139.012002][ T7010] netlink: 4 bytes leftover after parsing attributes in process `syz.1.451'. [ 139.020867][ T7010] netlink: 4 bytes leftover after parsing attributes in process `syz.1.451'. [ 139.029704][ T7010] netlink: 4 bytes leftover after parsing attributes in process `syz.1.451'. [ 139.038650][ T7010] netlink: 4 bytes leftover after parsing attributes in process `syz.1.451'. [ 139.364254][ T7078] 9pnet_fd: Insufficient options for proto=fd [ 139.371352][ T7078] IPVS: set_ctl: invalid protocol: 92 172.20.20.39:20002 [ 139.493558][ T5729] IPVS: starting estimator thread 0... [ 139.633501][ T7080] IPVS: using max 47 ests per chain, 112800 per kthread [ 141.956196][ T7108] netlink: 'syz.3.481': attribute type 10 has an invalid length. [ 141.971778][ T7108] syz_tun: entered promiscuous mode [ 142.016871][ T7108] bond0: (slave syz_tun): Enslaving as an active interface with an up link [ 143.785922][ T5799] xhci_hcd 0000:00:00.0: init 0000:00:00.0 fail, -16 [ 143.820414][ T7127] xhci_hcd 0000:00:00.0: probe with driver xhci_hcd failed with error -16 [ 143.952348][ T30] kauditd_printk_skb: 4 callbacks suppressed [ 143.952363][ T30] audit: type=1400 audit(1784932625.483:381): avc: denied { write } for pid=7132 comm="syz.1.489" name="functions" dev="configfs" ino=9385 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 144.005570][ T7135] syz.0.490 uses obsolete (PF_INET,SOCK_PACKET) [ 144.088084][ T30] audit: type=1400 audit(1784932625.563:382): avc: denied { ioctl } for pid=7134 comm="syz.0.490" path="socket:[14031]" dev="sockfs" ino=14031 ioctlcmd=0x8914 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 144.138273][ T30] audit: type=1400 audit(1784932625.583:383): avc: denied { write } for pid=7132 comm="syz.1.489" name="c.1" dev="configfs" ino=8534 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 144.160734][ T30] audit: type=1400 audit(1784932625.583:384): avc: denied { write } for pid=7132 comm="syz.1.489" name="c.1" dev="configfs" ino=8534 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 144.193651][ T24] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 144.366828][ T24] usb 3-1: New USB device found, idVendor=0547, idProduct=2235, bcdDevice= 0.00 [ 144.387276][ T24] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 144.586084][ T24] usb 3-1: Product: syz [ 144.599202][ T24] usb 3-1: Manufacturer: syz [ 144.613742][ T24] usb 3-1: SerialNumber: syz [ 144.629772][ T24] usbtest 3-1:1.0: EZ-USB device [ 144.638982][ T24] usbtest 3-1:1.0: high-speed {control bulk-in bulk-out} tests (+alt) [ 145.003561][ T30] audit: type=1400 audit(1784932626.533:385): avc: denied { write } for pid=7147 comm="syz.0.495" name="ipv6_route" dev="proc" ino=4026533221 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_net_t tclass=file permissive=1 [ 147.149265][ T7172] vivid-000: kernel_thread() failed [ 147.707513][ T30] audit: type=1400 audit(1784932629.243:386): avc: denied { write } for pid=7174 comm="syz.4.505" name="c.1" dev="configfs" ino=8534 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 147.749834][ T24] usb 3-1: USB disconnect, device number 3 [ 147.773644][ T30] audit: type=1400 audit(1784932629.243:387): avc: denied { write } for pid=7174 comm="syz.4.505" name="c.1" dev="configfs" ino=8534 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 148.034877][ T7193] siw: device registration error -23 [ 150.605421][ T24] usb 2-1: new low-speed USB device number 4 using dummy_hcd [ 150.800650][ T24] usb 2-1: unable to get BOS descriptor or descriptor too short [ 150.843168][ T24] usb 2-1: config 142 has an invalid interface number: 251 but max is 0 [ 150.937012][ T7241] file system registered [ 150.947403][ T30] audit: type=1400 audit(1784932632.473:388): avc: denied { write } for pid=7240 comm="syz.3.531" name="functions" dev="configfs" ino=9385 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 150.982868][ T24] usb 2-1: config 142 has no interface number 0 [ 151.939950][ T24] usb 2-1: config 142 interface 251 altsetting 11 endpoint 0x1 is Bulk; changing to Interrupt [ 151.950394][ T24] usb 2-1: config 142 interface 251 has no altsetting 0 [ 151.961024][ T24] usb 2-1: string descriptor 0 read error: -22 [ 151.967470][ T24] usb 2-1: New USB device found, idVendor=6737, idProduct=0001, bcdDevice=91.80 [ 151.976553][ T24] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 151.990691][ T7224] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 152.162089][ T24] cypress_m8 2-1:142.251: HID->COM RS232 Adapter converter detected [ 152.178961][ T30] audit: type=1400 audit(1784932633.713:389): avc: denied { mount } for pid=7240 comm="syz.3.531" name="/" dev="functionfs" ino=14225 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbfs_t tclass=filesystem permissive=1 [ 152.202785][ T24] cyphidcom ttyUSB0: required endpoint is missing [ 152.279225][ T30] audit: type=1400 audit(1784932633.813:390): avc: denied { unmount } for pid=5616 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbfs_t tclass=filesystem permissive=1 [ 152.328753][ T5616] ffs_data_put(): freeing [ 152.462576][ T7258] binder: BINDER_SET_CONTEXT_MGR already set [ 152.476237][ T7258] binder: 7257:7258 ioctl 4018620d 200000004a80 returned -16 [ 152.898146][ T30] audit: type=1400 audit(1784932634.433:391): avc: denied { read write } for pid=5613 comm="syz-executor" name="loop2" dev="devtmpfs" ino=649 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 153.067573][ T30] audit: type=1400 audit(1784932634.593:392): avc: denied { read } for pid=7268 comm="syz.0.542" name="ptp0" dev="devtmpfs" ino=1266 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 153.090776][ T30] audit: type=1400 audit(1784932634.593:393): avc: denied { open } for pid=7268 comm="syz.0.542" path="/dev/ptp0" dev="devtmpfs" ino=1266 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 153.938785][ T30] audit: type=1400 audit(1784932634.593:394): avc: denied { ioctl } for pid=7268 comm="syz.0.542" path="/dev/ptp0" dev="devtmpfs" ino=1266 ioctlcmd=0x3d14 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 153.976226][ T30] audit: type=1400 audit(1784932634.673:395): avc: denied { open } for pid=5613 comm="syz-executor" path="/dev/loop2" dev="devtmpfs" ino=649 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 154.000630][ T30] audit: type=1400 audit(1784932634.673:396): avc: denied { ioctl } for pid=5613 comm="syz-executor" path="/dev/loop2" dev="devtmpfs" ino=649 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 154.542087][ T7296] netlink: 'syz.3.553': attribute type 10 has an invalid length. [ 155.288211][ T7313] vivid-000: kernel_thread() failed [ 156.169526][ T804] usb 2-1: USB disconnect, device number 4 [ 156.245099][ T804] cypress_m8 2-1:142.251: device disconnected [ 163.208897][ T7405] 9pnet_fd: Insufficient options for proto=fd [ 163.215982][ T7405] IPVS: set_ctl: invalid protocol: 92 172.20.20.39:20002 [ 163.393501][ T5729] IPVS: starting estimator thread 0... [ 163.723707][ T7406] IPVS: using max 46 ests per chain, 110400 per kthread [ 164.049795][ T7421] netlink: 'syz.1.567': attribute type 10 has an invalid length. [ 164.058744][ T5626] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci0/hci0:201' [ 164.068988][ T5626] CPU: 1 UID: 0 PID: 5626 Comm: kworker/u9:6 Tainted: G L syzkaller #0 PREEMPT(full) [ 164.069018][ T5626] Tainted: [L]=SOFTLOCKUP [ 164.069024][ T5626] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 164.069035][ T5626] Workqueue: hci0 hci_rx_work [ 164.069056][ T5626] Call Trace: [ 164.069062][ T5626] [ 164.069070][ T5626] dump_stack_lvl+0x100/0x190 [ 164.069095][ T5626] sysfs_warn_dup.cold+0x1c/0x28 [ 164.069123][ T5626] sysfs_create_dir_ns+0x24b/0x2b0 [ 164.069151][ T5626] ? __pfx_sysfs_create_dir_ns+0x10/0x10 [ 164.069181][ T5626] ? find_held_lock+0x2b/0x80 [ 164.069207][ T5626] ? kobject_add_internal+0x25f/0x930 [ 164.069230][ T5626] ? kobject_add_internal+0x25f/0x930 [ 164.069255][ T5626] ? do_raw_spin_unlock+0x145/0x1e0 [ 164.069281][ T5626] kobject_add_internal+0x2c8/0x930 [ 164.069306][ T5626] kobject_add+0x16a/0x1e0 [ 164.069328][ T5626] ? __pfx_kobject_add+0x10/0x10 [ 164.069347][ T5626] ? class_to_subsys+0x10f/0x150 [ 164.069373][ T5626] ? kobject_put+0xb9/0x640 [ 164.069391][ T5626] ? _raw_spin_unlock+0x28/0x50 [ 164.069421][ T5626] device_add+0x294/0x1970 [ 164.069444][ T5626] ? __pfx_dev_set_name+0x10/0x10 [ 164.069472][ T5626] ? __pfx_device_add+0x10/0x10 [ 164.069497][ T5626] ? mgmt_send_event_skb+0x2fb/0x460 [ 164.069524][ T5626] hci_conn_add_sysfs+0x1a3/0x260 [ 164.069559][ T5626] le_conn_complete_evt+0x11eb/0x1f60 [ 164.069587][ T5626] ? __pfx_le_conn_complete_evt+0x10/0x10 [ 164.069607][ T5626] ? hci_event_packet+0x186/0xcd0 [ 164.069635][ T5626] hci_le_conn_complete_evt+0x23c/0x3a0 [ 164.069655][ T5626] ? skb_pull_data+0x15f/0x1e0 [ 164.069685][ T5626] hci_le_meta_evt+0x34a/0x5f0 [ 164.069706][ T5626] ? __pfx_hci_le_conn_complete_evt+0x10/0x10 [ 164.069729][ T5626] hci_event_packet+0x51c/0xcd0 [ 164.069748][ T5626] ? __pfx_hci_le_meta_evt+0x10/0x10 [ 164.069769][ T5626] ? __pfx_hci_event_packet+0x10/0x10 [ 164.069791][ T5626] ? kcov_remote_start+0x384/0x670 [ 164.069813][ T5626] ? lockdep_hardirqs_on+0x78/0x100 [ 164.069839][ T5626] hci_rx_work+0x451/0xfc0 [ 164.069865][ T5626] process_one_work+0xa23/0x1940 [ 164.069896][ T5626] ? __pfx_process_one_work+0x10/0x10 [ 164.069924][ T5626] ? __pfx_hci_rx_work+0x10/0x10 [ 164.069944][ T5626] worker_thread+0x5ef/0xe50 [ 164.069976][ T5626] ? kthread+0x13a/0x450 [ 164.069992][ T5626] ? __pfx_worker_thread+0x10/0x10 [ 164.070009][ T5626] kthread+0x370/0x450 [ 164.070024][ T5626] ? __pfx_kthread+0x10/0x10 [ 164.070041][ T5626] ret_from_fork+0x72b/0xd50 [ 164.070068][ T5626] ? __pfx_ret_from_fork+0x10/0x10 [ 164.070092][ T5626] ? rcu_is_watching+0x12/0xc0 [ 164.070118][ T5626] ? __switch_to+0x800/0x10f0 [ 164.070136][ T5626] ? __pfx_kthread+0x10/0x10 [ 164.070154][ T5626] ret_from_fork_asm+0x1a/0x30 [ 164.070189][ T5626] [ 164.070439][ T5626] kobject: kobject_add_internal failed for hci0:201 with -EEXIST, don't try to register things with the same name in the same directory. [ 164.356890][ T5626] Bluetooth: hci0: failed to register connection device [ 164.476406][ T7421] syz_tun: entered promiscuous mode [ 170.474626][ T5622] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci4/hci4:201' [ 170.484400][ T5622] CPU: 0 UID: 0 PID: 5622 Comm: kworker/u9:5 Tainted: G L syzkaller #0 PREEMPT(full) [ 170.484434][ T5622] Tainted: [L]=SOFTLOCKUP [ 170.484442][ T5622] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 170.484455][ T5622] Workqueue: hci4 hci_rx_work [ 170.484479][ T5622] Call Trace: [ 170.484486][ T5622] [ 170.484494][ T5622] dump_stack_lvl+0x100/0x190 [ 170.484520][ T5622] sysfs_warn_dup.cold+0x1c/0x28 [ 170.484551][ T5622] sysfs_create_dir_ns+0x24b/0x2b0 [ 170.484583][ T5622] ? __pfx_sysfs_create_dir_ns+0x10/0x10 [ 170.484613][ T5622] ? find_held_lock+0x2b/0x80 [ 170.484655][ T5622] ? kobject_add_internal+0x25f/0x930 [ 170.484681][ T5622] ? kobject_add_internal+0x25f/0x930 [ 170.484709][ T5622] ? do_raw_spin_unlock+0x145/0x1e0 [ 170.484738][ T5622] kobject_add_internal+0x2c8/0x930 [ 170.484769][ T5622] kobject_add+0x16a/0x1e0 [ 170.484795][ T5622] ? __pfx_kobject_add+0x10/0x10 [ 170.484819][ T5622] ? class_to_subsys+0x10f/0x150 [ 170.484851][ T5622] ? kobject_put+0xb9/0x640 [ 170.484874][ T5622] ? _raw_spin_unlock+0x28/0x50 [ 170.484908][ T5622] device_add+0x294/0x1970 [ 170.484935][ T5622] ? __pfx_dev_set_name+0x10/0x10 [ 170.484965][ T5622] ? __pfx_device_add+0x10/0x10 [ 170.484991][ T5622] ? mgmt_send_event_skb+0x2fb/0x460 [ 170.485025][ T5622] hci_conn_add_sysfs+0x1a3/0x260 [ 170.485049][ T5622] le_conn_complete_evt+0x11eb/0x1f60 [ 170.485077][ T5622] ? __pfx_le_conn_complete_evt+0x10/0x10 [ 170.485100][ T5622] ? hci_event_packet+0x186/0xcd0 [ 170.485130][ T5622] hci_le_conn_complete_evt+0x23c/0x3a0 [ 170.485151][ T5622] ? skb_pull_data+0x15f/0x1e0 [ 170.485183][ T5622] hci_le_meta_evt+0x34a/0x5f0 [ 170.485205][ T5622] ? __pfx_hci_le_conn_complete_evt+0x10/0x10 [ 170.485229][ T5622] hci_event_packet+0x51c/0xcd0 [ 170.485248][ T5622] ? __pfx_hci_le_meta_evt+0x10/0x10 [ 170.485270][ T5622] ? __pfx_hci_event_packet+0x10/0x10 [ 170.485292][ T5622] ? kcov_remote_start+0x384/0x670 [ 170.485314][ T5622] ? lockdep_hardirqs_on+0x78/0x100 [ 170.485339][ T5622] hci_rx_work+0x451/0xfc0 [ 170.485363][ T5622] process_one_work+0xa23/0x1940 [ 170.485395][ T5622] ? __pfx_process_one_work+0x10/0x10 [ 170.485423][ T5622] ? __pfx_hci_rx_work+0x10/0x10 [ 170.485444][ T5622] worker_thread+0x5ef/0xe50 [ 170.485475][ T5622] ? kthread+0x13a/0x450 [ 170.485492][ T5622] ? __pfx_worker_thread+0x10/0x10 [ 170.485510][ T5622] kthread+0x370/0x450 [ 170.485527][ T5622] ? __pfx_kthread+0x10/0x10 [ 170.485547][ T5622] ret_from_fork+0x72b/0xd50 [ 170.485575][ T5622] ? __pfx_ret_from_fork+0x10/0x10 [ 170.485602][ T5622] ? __switch_to+0x800/0x10f0 [ 170.485622][ T5622] ? __pfx_kthread+0x10/0x10 [ 170.485642][ T5622] ret_from_fork_asm+0x1a/0x30 [ 170.485684][ T5622] [ 170.485710][ T5622] kobject: kobject_add_internal failed for hci4:201 with -EEXIST, don't try to register things with the same name in the same directory. [ 170.774233][ T5622] Bluetooth: hci4: failed to register connection device [ 171.660333][ T7493] wlan0 speed is unknown, defaulting to 1000 [ 175.184409][ T30] audit: type=1400 audit(1784932656.713:397): avc: denied { write } for pid=7543 comm="syz.2.637" name="card1" dev="devtmpfs" ino=628 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 177.712888][ T7579] netlink: 'syz.2.649': attribute type 10 has an invalid length. [ 177.782696][ T30] audit: type=1400 audit(1784932659.313:398): avc: denied { create } for pid=7584 comm="syz.4.652" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 178.039716][ T30] audit: type=1400 audit(1784932659.563:399): avc: denied { ioctl } for pid=7584 comm="syz.4.652" path="socket:[15964]" dev="sockfs" ino=15964 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 178.397998][ T5729] usb 3-1: new low-speed USB device number 4 using dummy_hcd [ 178.707044][ T5729] usb 3-1: unable to get BOS descriptor or descriptor too short [ 178.746404][ T5729] usb 3-1: config 142 has an invalid interface number: 251 but max is 0 [ 178.788675][ T5729] usb 3-1: config 142 has no interface number 0 [ 178.815908][ T5729] usb 3-1: config 142 interface 251 altsetting 11 has an endpoint descriptor with address 0x9F, changing to 0x8F [ 178.871082][ T5729] usb 3-1: config 142 interface 251 altsetting 11 endpoint 0x8F is Bulk; changing to Interrupt [ 178.901085][ T5729] usb 3-1: config 142 interface 251 altsetting 11 endpoint 0x1 is Bulk; changing to Interrupt [ 178.948380][ T5729] usb 3-1: config 142 interface 251 has no altsetting 0 [ 179.793221][ T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!! [ 181.304697][ T5729] usb 3-1: New USB device found, idVendor=6737, idProduct=0001, bcdDevice=91.80 [ 181.328590][ T5729] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 181.732480][ T5729] usb 3-1: can't set config #142, error -71 [ 181.841125][ T5729] usb 3-1: USB disconnect, device number 4 [ 182.032148][ T7620] netlink: 'syz.3.663': attribute type 10 has an invalid length. [ 182.225012][ T30] audit: type=1400 audit(1784932663.763:400): avc: denied { setopt } for pid=7623 comm="syz.0.665" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 182.834987][ T30] audit: type=1400 audit(1784932664.373:401): avc: denied { listen } for pid=7637 comm="syz.1.659" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 182.863534][ T30] audit: type=1400 audit(1784932664.393:402): avc: denied { accept } for pid=7637 comm="syz.1.659" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 185.145081][ T30] audit: type=1400 audit(1784932666.683:403): avc: denied { mount } for pid=7662 comm="syz.3.676" name="/" dev="devtmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=filesystem permissive=1 [ 185.212851][ T30] audit: type=1400 audit(1784932666.743:404): avc: denied { unmount } for pid=5616 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=filesystem permissive=1 [ 185.943419][ T5630] Bluetooth: hci4: command 0x0406 tx timeout [ 185.950435][ T5630] Bluetooth: hci0: command 0x0406 tx timeout [ 185.965368][ T5614] Bluetooth: hci1: command 0x0406 tx timeout [ 185.971721][ T5621] Bluetooth: hci2: command 0x0406 tx timeout [ 185.980474][ T5612] Bluetooth: hci3: command 0x0406 tx timeout [ 188.214684][ T7671] wlan0 speed is unknown, defaulting to 1000 [ 189.365747][ T1313] ieee802154 phy0 wpan0: encryption failed: -22 [ 189.375538][ T1313] ieee802154 phy1 wpan1: encryption failed: -22 [ 189.502406][ T7706] netlink: 'syz.3.681': attribute type 10 has an invalid length. [ 189.800039][ T7720] __nla_validate_parse: 98 callbacks suppressed [ 189.800071][ T7720] netlink: 4 bytes leftover after parsing attributes in process `syz.2.695'. [ 189.815818][ T7720] netlink: 4 bytes leftover after parsing attributes in process `syz.2.695'. [ 189.824812][ T7720] netlink: 4 bytes leftover after parsing attributes in process `syz.2.695'. [ 189.833779][ T7720] netlink: 4 bytes leftover after parsing attributes in process `syz.2.695'. [ 189.842716][ T7720] netlink: 4 bytes leftover after parsing attributes in process `syz.2.695'. [ 189.857095][ T7720] netlink: 4 bytes leftover after parsing attributes in process `syz.2.695'. [ 189.866128][ T7720] netlink: 4 bytes leftover after parsing attributes in process `syz.2.695'. [ 189.875163][ T7720] netlink: 4 bytes leftover after parsing attributes in process `syz.2.695'. [ 189.884911][ T7720] netlink: 4 bytes leftover after parsing attributes in process `syz.2.695'. [ 189.894404][ T7720] netlink: 4 bytes leftover after parsing attributes in process `syz.2.695'. [ 190.574904][ T7735] wlan0 speed is unknown, defaulting to 1000 [ 191.515322][ T7745] netlink: 'syz.4.706': attribute type 4 has an invalid length. [ 193.163346][ T30] audit: type=1400 audit(1784932674.673:405): avc: denied { write } for pid=7764 comm="syz.3.713" name="c.1" dev="configfs" ino=8534 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 193.264868][ T30] audit: type=1400 audit(1784932674.673:406): avc: denied { write } for pid=7764 comm="syz.3.713" name="c.1" dev="configfs" ino=8534 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 193.520705][ T5622] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci3/hci3:201' [ 193.530522][ T5622] CPU: 1 UID: 0 PID: 5622 Comm: kworker/u9:5 Tainted: G L syzkaller #0 PREEMPT(full) [ 193.530554][ T5622] Tainted: [L]=SOFTLOCKUP [ 193.530562][ T5622] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 193.530575][ T5622] Workqueue: hci3 hci_rx_work [ 193.530598][ T5622] Call Trace: [ 193.530604][ T5622] [ 193.530611][ T5622] dump_stack_lvl+0x100/0x190 [ 193.530637][ T5622] sysfs_warn_dup.cold+0x1c/0x28 [ 193.530667][ T5622] sysfs_create_dir_ns+0x24b/0x2b0 [ 193.530697][ T5622] ? __pfx_sysfs_create_dir_ns+0x10/0x10 [ 193.530725][ T5622] ? find_held_lock+0x2b/0x80 [ 193.530753][ T5622] ? kobject_add_internal+0x25f/0x930 [ 193.530786][ T5622] ? kobject_add_internal+0x25f/0x930 [ 193.530813][ T5622] ? do_raw_spin_unlock+0x145/0x1e0 [ 193.530843][ T5622] kobject_add_internal+0x2c8/0x930 [ 193.530876][ T5622] kobject_add+0x16a/0x1e0 [ 193.530903][ T5622] ? __pfx_kobject_add+0x10/0x10 [ 193.530927][ T5622] ? class_to_subsys+0x10f/0x150 [ 193.530958][ T5622] ? kobject_put+0xb9/0x640 [ 193.530981][ T5622] ? _raw_spin_unlock+0x28/0x50 [ 193.531016][ T5622] device_add+0x294/0x1970 [ 193.531042][ T5622] ? __pfx_dev_set_name+0x10/0x10 [ 193.531071][ T5622] ? __pfx_device_add+0x10/0x10 [ 193.531098][ T5622] ? mgmt_send_event_skb+0x2fb/0x460 [ 193.531125][ T5622] hci_conn_add_sysfs+0x1a3/0x260 [ 193.531149][ T5622] le_conn_complete_evt+0x11eb/0x1f60 [ 193.531175][ T5622] ? __pfx_le_conn_complete_evt+0x10/0x10 [ 193.531193][ T5622] ? hci_event_packet+0x186/0xcd0 [ 193.531216][ T5622] hci_le_conn_complete_evt+0x23c/0x3a0 [ 193.531236][ T5622] ? skb_pull_data+0x15f/0x1e0 [ 193.531267][ T5622] hci_le_meta_evt+0x34a/0x5f0 [ 193.531288][ T5622] ? __pfx_hci_le_conn_complete_evt+0x10/0x10 [ 193.531311][ T5622] hci_event_packet+0x51c/0xcd0 [ 193.531331][ T5622] ? __pfx_hci_le_meta_evt+0x10/0x10 [ 193.531353][ T5622] ? __pfx_hci_event_packet+0x10/0x10 [ 193.531375][ T5622] ? kcov_remote_start+0x384/0x670 [ 193.531398][ T5622] ? lockdep_hardirqs_on+0x78/0x100 [ 193.531424][ T5622] hci_rx_work+0x451/0xfc0 [ 193.531447][ T5622] process_one_work+0xa23/0x1940 [ 193.531478][ T5622] ? __pfx_process_one_work+0x10/0x10 [ 193.531506][ T5622] ? __pfx_hci_rx_work+0x10/0x10 [ 193.531527][ T5622] worker_thread+0x5ef/0xe50 [ 193.531558][ T5622] ? kthread+0x13a/0x450 [ 193.531575][ T5622] ? __pfx_worker_thread+0x10/0x10 [ 193.531594][ T5622] kthread+0x370/0x450 [ 193.531611][ T5622] ? __pfx_kthread+0x10/0x10 [ 193.531630][ T5622] ret_from_fork+0x72b/0xd50 [ 193.531659][ T5622] ? __pfx_ret_from_fork+0x10/0x10 [ 193.531687][ T5622] ? __switch_to+0x800/0x10f0 [ 193.531707][ T5622] ? __pfx_kthread+0x10/0x10 [ 193.531726][ T5622] ret_from_fork_asm+0x1a/0x30 [ 193.531766][ T5622] [ 193.531796][ T5622] kobject: kobject_add_internal failed for hci3:201 with -EEXIST, don't try to register things with the same name in the same directory. [ 193.797198][ T30] audit: type=1400 audit(1784932675.333:407): avc: denied { write } for pid=7775 comm="syz.4.719" name="c.1" dev="configfs" ino=8534 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 193.959802][ T5622] Bluetooth: hci3: failed to register connection device [ 194.860017][ T30] audit: type=1400 audit(1784932675.333:408): avc: denied { write } for pid=7775 comm="syz.4.719" name="c.1" dev="configfs" ino=8534 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 195.845780][ T30] audit: type=1400 audit(1784932677.383:409): avc: denied { write } for pid=7791 comm="syz.3.725" name="c.1" dev="configfs" ino=8534 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 195.924955][ T30] audit: type=1400 audit(1784932677.383:410): avc: denied { write } for pid=7791 comm="syz.3.725" name="c.1" dev="configfs" ino=8534 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 196.157205][ T5626] Bluetooth: hci3: Ignoring HCI_Connection_Complete for existing connection [ 198.915289][ T5346] usb 5-1: new low-speed USB device number 2 using dummy_hcd [ 199.022194][ T7839] binder: 7838:7839 ioctl c0306201 0 returned -14 [ 199.095868][ T5346] usb 5-1: unable to get BOS descriptor or descriptor too short [ 199.121557][ T5346] usb 5-1: config 142 has an invalid interface number: 251 but max is 0 [ 199.985861][ T5346] usb 5-1: config 142 has no interface number 0 [ 199.997378][ T5346] usb 5-1: config 142 interface 251 altsetting 11 has an endpoint descriptor with address 0x9F, changing to 0x8F [ 200.019104][ T5346] usb 5-1: config 142 interface 251 altsetting 11 endpoint 0x8F is Bulk; changing to Interrupt [ 200.074264][ T5346] usb 5-1: config 142 interface 251 altsetting 11 endpoint 0x1 is Bulk; changing to Interrupt [ 200.143244][ T5346] usb 5-1: config 142 interface 251 has no altsetting 0 [ 200.156017][ T5346] usb 5-1: string descriptor 0 read error: -22 [ 200.174184][ T5346] usb 5-1: New USB device found, idVendor=6737, idProduct=0001, bcdDevice=91.80 [ 200.198262][ T5346] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 200.234390][ T7827] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 200.256533][ T7827] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 200.284404][ T5346] cypress_m8 5-1:142.251: HID->COM RS232 Adapter converter detected [ 200.305742][ T5611] ffs_data_put(): freeing [ 200.332155][ T5346] usb 5-1: HID->COM RS232 Adapter converter now attached to ttyUSB0 [ 200.506366][ T5736] usb 5-1: USB disconnect, device number 2 [ 200.519249][ T5736] cyphidcom ttyUSB0: HID->COM RS232 Adapter converter now disconnected from ttyUSB0 [ 200.547255][ T5736] cypress_m8 5-1:142.251: device disconnected [ 201.252652][ T7889] fuse: Unknown parameter 'group_i00000000000000000000' [ 201.438922][ T7893] wlan0 speed is unknown, defaulting to 1000 [ 202.489029][ T7903] wusb3801 0-004a: supply vbus not found, using dummy regulator [ 202.628569][ T7912] syzkaller0: entered promiscuous mode [ 202.653134][ T7912] syzkaller0: entered allmulticast mode [ 202.660846][ T7903] i2c i2c-0: new_device: Instantiated device wusb3801 at 0x4a [ 202.680067][ T30] audit: type=1400 audit(1784932684.213:411): avc: denied { write } for pid=7910 comm="syz.1.772" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 202.817560][ T7918] fuse: Unknown parameter 'group_i00000000000000000000' [ 202.826067][ T5736] usb 5-1: new low-speed USB device number 3 using dummy_hcd [ 202.986885][ T5736] usb 5-1: unable to get BOS descriptor or descriptor too short [ 203.004162][ T5736] usb 5-1: config 142 has an invalid interface number: 251 but max is 0 [ 203.022120][ T5736] usb 5-1: config 142 has no interface number 0 [ 203.030267][ T5736] usb 5-1: config 142 interface 251 altsetting 11 has an endpoint descriptor with address 0x9F, changing to 0x8F [ 203.044197][ T5736] usb 5-1: config 142 interface 251 altsetting 11 endpoint 0x8F is Bulk; changing to Interrupt [ 203.055005][ T5736] usb 5-1: config 142 interface 251 altsetting 11 endpoint 0x1 is Bulk; changing to Interrupt [ 203.067081][ T5736] usb 5-1: config 142 interface 251 has no altsetting 0 [ 203.082818][ T5736] usb 5-1: string descriptor 0 read error: -22 [ 203.091727][ T5736] usb 5-1: New USB device found, idVendor=6737, idProduct=0001, bcdDevice=91.80 [ 203.107242][ T5736] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 203.133374][ T7907] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 203.145908][ T7907] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 203.172856][ T5736] cypress_m8 5-1:142.251: HID->COM RS232 Adapter converter detected [ 203.190528][ T5736] usb 5-1: HID->COM RS232 Adapter converter now attached to ttyUSB0 [ 203.276704][ T7937] read descriptors [ 203.309692][ T5611] ffs_data_put(): freeing [ 203.386807][ T5736] usb 5-1: USB disconnect, device number 3 [ 203.427140][ T5736] cyphidcom ttyUSB0: HID->COM RS232 Adapter converter now disconnected from ttyUSB0 [ 203.445016][ T5736] cypress_m8 5-1:142.251: device disconnected [ 205.154887][ T7950] i2c i2c-0: Failed to register i2c client wusb3801 at 0x4a (-16) [ 205.331051][ T7952] fuse: Unknown parameter 'group_i00000000000000000000' [ 205.505395][ T7961] binder_alloc: 7960: binder_alloc_buf, no vma [ 205.566493][ T7964] binder_alloc: 7960: binder_alloc_buf, no vma [ 206.488736][ T7979] read descriptors [ 206.696223][ T5611] ffs_data_put(): freeing [ 206.763912][ T7988] __nla_validate_parse: 43 callbacks suppressed [ 206.763930][ T7988] netlink: 64 bytes leftover after parsing attributes in process `syz.0.798'. [ 207.261055][ T8000] 9pnet_fd: Insufficient options for proto=fd [ 207.267713][ T8000] IPVS: set_ctl: invalid protocol: 92 172.20.20.39:20002 [ 207.373293][ T30] audit: type=1400 audit(1784932688.903:412): avc: denied { name_bind } for pid=8002 comm="syz.2.803" src=3618 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=udp_socket permissive=1 [ 207.602214][ T8011] binder_alloc: 8009: binder_alloc_buf, no vma [ 207.614162][ T8010] syzkaller0: entered promiscuous mode [ 207.620109][ T8010] syzkaller0: entered allmulticast mode [ 207.728346][ T8012] binder_alloc: 8009: binder_alloc_buf, no vma [ 207.789761][ T8016] binder: BINDER_SET_CONTEXT_MGR already set [ 207.798946][ T5626] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci1/hci1:201' [ 207.809383][ T5626] CPU: 0 UID: 0 PID: 5626 Comm: kworker/u9:6 Tainted: G L syzkaller #0 PREEMPT(full) [ 207.809417][ T5626] Tainted: [L]=SOFTLOCKUP [ 207.809424][ T5626] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 207.809437][ T5626] Workqueue: hci1 hci_rx_work [ 207.809460][ T5626] Call Trace: [ 207.809466][ T5626] [ 207.809473][ T5626] dump_stack_lvl+0x100/0x190 [ 207.809501][ T5626] sysfs_warn_dup.cold+0x1c/0x28 [ 207.809530][ T5626] sysfs_create_dir_ns+0x24b/0x2b0 [ 207.809559][ T5626] ? __pfx_sysfs_create_dir_ns+0x10/0x10 [ 207.809588][ T5626] ? find_held_lock+0x2b/0x80 [ 207.809617][ T5626] ? kobject_add_internal+0x25f/0x930 [ 207.809643][ T5626] ? kobject_add_internal+0x25f/0x930 [ 207.809670][ T5626] ? do_raw_spin_unlock+0x145/0x1e0 [ 207.809698][ T5626] kobject_add_internal+0x2c8/0x930 [ 207.809728][ T5626] kobject_add+0x16a/0x1e0 [ 207.809754][ T5626] ? __pfx_kobject_add+0x10/0x10 [ 207.809778][ T5626] ? class_to_subsys+0x10f/0x150 [ 207.809807][ T5626] ? kobject_put+0xb9/0x640 [ 207.809827][ T5626] ? _raw_spin_unlock+0x28/0x50 [ 207.809861][ T5626] device_add+0x294/0x1970 [ 207.809888][ T5626] ? __pfx_dev_set_name+0x10/0x10 [ 207.809918][ T5626] ? __pfx_device_add+0x10/0x10 [ 207.809943][ T5626] ? mgmt_send_event_skb+0x2fb/0x460 [ 207.809967][ T5626] hci_conn_add_sysfs+0x1a3/0x260 [ 207.809990][ T5626] le_conn_complete_evt+0x11eb/0x1f60 [ 207.810017][ T5626] ? __pfx_le_conn_complete_evt+0x10/0x10 [ 207.810035][ T5626] ? hci_event_packet+0x186/0xcd0 [ 207.810060][ T5626] hci_le_conn_complete_evt+0x23c/0x3a0 [ 207.810081][ T5626] ? skb_pull_data+0x15f/0x1e0 [ 207.810114][ T5626] hci_le_meta_evt+0x34a/0x5f0 [ 207.810135][ T5626] ? __pfx_hci_le_conn_complete_evt+0x10/0x10 [ 207.810159][ T5626] hci_event_packet+0x51c/0xcd0 [ 207.810185][ T5626] ? __pfx_hci_le_meta_evt+0x10/0x10 [ 207.810206][ T5626] ? __pfx_hci_event_packet+0x10/0x10 [ 207.810228][ T5626] ? kcov_remote_start+0x384/0x670 [ 207.810251][ T5626] ? lockdep_hardirqs_on+0x78/0x100 [ 207.810279][ T5626] hci_rx_work+0x451/0xfc0 [ 207.810305][ T5626] process_one_work+0xa23/0x1940 [ 207.810338][ T5626] ? __pfx_process_one_work+0x10/0x10 [ 207.810366][ T5626] ? __pfx_hci_rx_work+0x10/0x10 [ 207.810387][ T5626] worker_thread+0x5ef/0xe50 [ 207.810417][ T5626] ? kthread+0x13a/0x450 [ 207.810433][ T5626] ? __pfx_worker_thread+0x10/0x10 [ 207.810451][ T5626] kthread+0x370/0x450 [ 207.810468][ T5626] ? __pfx_kthread+0x10/0x10 [ 207.810488][ T5626] ret_from_fork+0x72b/0xd50 [ 207.810516][ T5626] ? __pfx_ret_from_fork+0x10/0x10 [ 207.810541][ T5626] ? rcu_is_watching+0x12/0xc0 [ 207.810569][ T5626] ? __switch_to+0x800/0x10f0 [ 207.810588][ T5626] ? __pfx_kthread+0x10/0x10 [ 207.810608][ T5626] ret_from_fork_asm+0x1a/0x30 [ 207.810649][ T5626] [ 207.811684][ T5626] kobject: kobject_add_internal failed for hci1:201 with -EEXIST, don't try to register things with the same name in the same directory. [ 207.823442][ T8016] binder: 8013:8016 ioctl 4018620d 200000004a80 returned -16 [ 207.827487][ T5626] Bluetooth: hci1: failed to register connection device [ 207.924716][ T8021] binder: 8013:8021 ioctl c0306201 0 returned -14 [ 208.074490][ T8029] netlink: 64 bytes leftover after parsing attributes in process `syz.4.815'. [ 208.597515][ T8052] 9pnet_fd: Insufficient options for proto=fd [ 208.604641][ T8052] IPVS: set_ctl: invalid protocol: 92 172.20.20.39:20002 [ 208.744105][ T8054] 9pnet_fd: Insufficient options for proto=fd [ 208.751763][ T8054] IPVS: set_ctl: invalid protocol: 92 172.20.20.39:20002 [ 208.816930][ T5800] IPVS: starting estimator thread 0... [ 208.969944][ T30] audit: type=1400 audit(1784932690.503:413): avc: denied { write } for pid=8050 comm="syz.3.824" name="c.1" dev="configfs" ino=8534 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 208.997093][ T8051] syzkaller0: entered promiscuous mode [ 209.004461][ T8055] IPVS: using max 40 ests per chain, 96000 per kthread [ 209.013267][ T30] audit: type=1400 audit(1784932690.503:414): avc: denied { write } for pid=8050 comm="syz.3.824" name="c.1" dev="configfs" ino=8534 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 209.015061][ T8051] syzkaller0: entered allmulticast mode [ 209.073121][ T8059] binder: 8058:8059 ioctl c0306201 0 returned -14 [ 209.289721][ T8070] fuse: Unknown parameter 'group_id00000000000000000000' [ 209.444806][ T8068] netlink: 64 bytes leftover after parsing attributes in process `syz.3.828'. [ 209.475025][ T8075] read descriptors [ 209.654680][ T5620] ffs_data_put(): freeing [ 210.191944][ T30] audit: type=1400 audit(1784932691.723:415): avc: denied { write } for pid=8080 comm="syz.1.835" name="c.1" dev="configfs" ino=8534 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 210.460024][ T30] audit: type=1400 audit(1784932691.723:416): avc: denied { write } for pid=8080 comm="syz.1.835" name="c.1" dev="configfs" ino=8534 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 212.351394][ T8106] 9pnet_fd: Insufficient options for proto=fd [ 212.358078][ T8106] IPVS: set_ctl: invalid protocol: 92 172.20.20.39:20002 [ 214.632474][ T30] audit: type=1400 audit(1784932695.773:417): avc: denied { map } for pid=8110 comm="syz.1.842" path="socket:[17944]" dev="sockfs" ino=17944 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 214.678787][ T30] audit: type=1400 audit(1784932695.773:418): avc: denied { read accept } for pid=8110 comm="syz.1.842" path="socket:[17944]" dev="sockfs" ino=17944 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 214.703527][ T30] audit: type=1400 audit(1784932695.783:419): avc: denied { read write } for pid=8110 comm="syz.1.842" name="vga_arbiter" dev="devtmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1 [ 214.875621][ T30] audit: type=1400 audit(1784932695.783:420): avc: denied { open } for pid=8110 comm="syz.1.842" path="/dev/vga_arbiter" dev="devtmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1 [ 215.080088][ T5616] ffs_data_put(): freeing [ 217.476732][ T8154] 9pnet_fd: Insufficient options for proto=fd [ 217.484261][ T8154] IPVS: set_ctl: invalid protocol: 92 172.20.20.39:20002 [ 217.579053][ T5622] Bluetooth: hci4: Ignoring HCI_Connection_Complete for existing connection [ 218.524719][ T30] audit: type=1400 audit(1784932700.053:421): avc: denied { write } for pid=8169 comm="syz.0.864" name="c.1" dev="configfs" ino=8534 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 218.548138][ T30] audit: type=1400 audit(1784932700.053:422): avc: denied { write } for pid=8169 comm="syz.0.864" name="c.1" dev="configfs" ino=8534 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 220.130095][ T8182] infiniband syz2: set down [ 220.134796][ T8182] infiniband syz2: added ipvlan0 [ 220.144193][ T8182] workqueue: Failed to create a rescuer kthread for wq "ib_mad1": -EINTR [ 220.146771][ T8182] infiniband syz2: Couldn't open port 1 [ 220.161040][ T8182] smbdirect: ib_dev[syz2]: added: IB_CA max_fast_reg_page_list_len=512 device_cap_flags=0x1c001223c76 kernel_cap_flags=0x14 page_size_cap=0xfffff000 [ 220.176108][ T8182] smbdirect: ib_dev[syz2]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=32 max_cqe=32767 max_qp_wr=1048576 max_send_sge=32 max_recv_sge=32 [ 220.194463][ T8182] smbdirect: ib_dev[syz2]PORT[1]: iwarp=0 ib=0 roce=1 v1=0 v2=1 core_cap_flags=0x803005 [ 220.224852][ T8182] RDS/IB: syz2: added [ 220.229269][ T8182] smc: adding ib device syz2 with port count 1 [ 220.235590][ T8182] smc: ib device syz2 port 1 has no pnetid [ 220.320789][ T8192] netlink: 'syz.1.867': attribute type 4 has an invalid length. [ 220.459726][ T30] audit: type=1400 audit(1784932701.993:423): avc: denied { read } for pid=8196 comm="syz.2.868" name="usbmon7" dev="devtmpfs" ino=738 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 220.490873][ T30] audit: type=1400 audit(1784932702.023:424): avc: denied { open } for pid=8196 comm="syz.2.868" path="/dev/usbmon7" dev="devtmpfs" ino=738 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 220.518486][ T30] audit: type=1400 audit(1784932702.023:425): avc: denied { map } for pid=8196 comm="syz.2.868" path="/dev/usbmon7" dev="devtmpfs" ino=738 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 220.809823][ T8211] 9pnet_fd: Insufficient options for proto=fd [ 220.817619][ T8211] IPVS: set_ctl: invalid protocol: 92 172.20.20.39:20002 [ 221.478633][ T30] audit: type=1400 audit(1784932702.923:426): avc: denied { write } for pid=8218 comm="syz.1.876" name="c.1" dev="configfs" ino=8534 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 221.607634][ T30] audit: type=1400 audit(1784932702.923:427): avc: denied { write } for pid=8218 comm="syz.1.876" name="c.1" dev="configfs" ino=8534 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 222.291614][ T8253] 9pnet_fd: Insufficient options for proto=fd [ 222.298712][ T8253] IPVS: set_ctl: invalid protocol: 92 172.20.20.39:20002 [ 222.724903][ T8260] netlink: 'syz.3.891': attribute type 4 has an invalid length. [ 225.037460][ T30] audit: type=1400 audit(1784932706.563:428): avc: denied { write } for pid=8295 comm="syz.1.903" name="c.1" dev="configfs" ino=8534 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 225.062173][ T30] audit: type=1400 audit(1784932706.593:429): avc: denied { write } for pid=8295 comm="syz.1.903" name="c.1" dev="configfs" ino=8534 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 225.073315][ T804] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 225.149811][ T8298] fuse: Bad value for 'user_id' [ 225.155528][ T8298] fuse: Bad value for 'user_id' [ 225.257646][ T804] usb 3-1: New USB device found, idVendor=0547, idProduct=2235, bcdDevice= 0.00 [ 225.276400][ T804] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 225.296104][ T804] usb 3-1: Product: syz [ 225.304742][ T804] usb 3-1: Manufacturer: syz [ 225.318522][ T804] usb 3-1: SerialNumber: syz [ 225.478718][ T804] Oops: general protection fault, probably for non-canonical address 0xdffffc0000000001: 0000 [#1] SMP KASAN NOPTI [ 225.490823][ T804] KASAN: null-ptr-deref in range [0x0000000000000008-0x000000000000000f] [ 225.499248][ T804] CPU: 1 UID: 0 PID: 804 Comm: kworker/1:2 Tainted: G L syzkaller #0 PREEMPT(full) [ 225.510106][ T804] Tainted: [L]=SOFTLOCKUP [ 225.514436][ T804] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 225.524506][ T804] Workqueue: usb_hub_wq hub_event [ 225.529555][ T804] RIP: 0010:usbtest_probe+0x3b9/0x1280 [ 225.535028][ T804] Code: 1a 47 fa 45 85 ff 79 5e e8 c4 1f 47 fa 48 8b 84 24 80 00 00 00 48 8d 58 0a 48 b8 00 00 00 00 00 fc ff df 48 89 da 48 c1 ea 03 <0f> b6 04 02 48 89 da 83 e2 07 38 d0 7f 08 84 c0 0f 85 58 0d 00 00 [ 225.554635][ T804] RSP: 0018:ffffc900047befc8 EFLAGS: 00010202 [ 225.560691][ T804] RAX: dffffc0000000000 RBX: 000000000000000a RCX: ffffc9001b37d000 [ 225.568653][ T804] RDX: 0000000000000001 RSI: ffffffff87c33cdc RDI: ffff88802707ca80 [ 225.576612][ T804] RBP: ffff88804c99c990 R08: 0000000000000005 R09: 0000000000000000 [ 225.584578][ T804] R10: 00000000ffffffff R11: 000000000000758b R12: ffff8880565cd0b0 [ 225.592533][ T804] R13: ffff8880364b7ad0 R14: ffff8880364b7a00 R15: 00000000ffffffff [ 225.600484][ T804] FS: 0000000000000000(0000) GS:ffff888123ede000(0000) knlGS:0000000000000000 [ 225.609396][ T804] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 225.615961][ T804] CR2: 00007f4c17feb580 CR3: 0000000037afd000 CR4: 00000000003526f0 [ 225.623914][ T804] Call Trace: [ 225.627177][ T804] [ 225.630089][ T804] ? mark_held_locks+0x40/0x70 [ 225.634841][ T804] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 225.640639][ T804] ? lockdep_hardirqs_on+0x78/0x100 [ 225.645825][ T804] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 225.651621][ T804] usb_probe_interface+0x303/0x8f0 [ 225.656719][ T804] ? __pfx_usb_probe_interface+0x10/0x10 [ 225.662335][ T804] really_probe+0x241/0xa60 [ 225.666824][ T804] __driver_probe_device+0x20e/0x450 [ 225.672091][ T804] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 225.677966][ T804] driver_probe_device+0x4a/0x140 [ 225.682990][ T804] __device_attach_driver+0x1df/0x320 [ 225.688343][ T804] ? __pfx___device_attach_driver+0x10/0x10 [ 225.694232][ T804] bus_for_each_drv+0x159/0x1e0 [ 225.699076][ T804] ? __pfx_bus_for_each_drv+0x10/0x10 [ 225.704450][ T804] ? lockdep_hardirqs_on+0x78/0x100 [ 225.709649][ T804] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 225.715466][ T804] __device_attach+0x1e4/0x4d0 [ 225.720231][ T804] ? __pfx___device_attach+0x10/0x10 [ 225.725502][ T804] ? do_raw_spin_unlock+0x145/0x1e0 [ 225.730700][ T804] device_initial_probe+0xaf/0xd0 [ 225.735709][ T804] bus_probe_device+0x64/0x160 [ 225.740455][ T804] device_add+0x121d/0x1970 [ 225.744944][ T804] ? __pfx_device_add+0x10/0x10 [ 225.749782][ T804] usb_set_configuration+0xd97/0x1c60 [ 225.755143][ T804] ? __pfx_usb_generic_driver_probe+0x10/0x10 [ 225.761205][ T804] usb_generic_driver_probe+0xa1/0xe0 [ 225.766558][ T804] usb_probe_device+0xef/0x400 [ 225.771303][ T804] ? __pfx_usb_probe_device+0x10/0x10 [ 225.776657][ T804] really_probe+0x241/0xa60 [ 225.781142][ T804] __driver_probe_device+0x20e/0x450 [ 225.786409][ T804] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 225.792287][ T804] driver_probe_device+0x4a/0x140 [ 225.797292][ T804] __device_attach_driver+0x1df/0x320 [ 225.802645][ T804] ? __pfx___device_attach_driver+0x10/0x10 [ 225.808533][ T804] bus_for_each_drv+0x159/0x1e0 [ 225.813372][ T804] ? __pfx_bus_for_each_drv+0x10/0x10 [ 225.818731][ T804] ? lockdep_hardirqs_on+0x78/0x100 [ 225.823910][ T804] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 225.829704][ T804] __device_attach+0x1e4/0x4d0 [ 225.834456][ T804] ? __pfx___device_attach+0x10/0x10 [ 225.839724][ T804] ? do_raw_spin_unlock+0x145/0x1e0 [ 225.844910][ T804] device_initial_probe+0xaf/0xd0 [ 225.849915][ T804] bus_probe_device+0x64/0x160 [ 225.854659][ T804] device_add+0x121d/0x1970 [ 225.859148][ T804] ? __pfx_device_add+0x10/0x10 [ 225.863981][ T804] ? add_device_randomness+0xc9/0x110 [ 225.869349][ T804] usb_new_device.cold+0x685/0x115c [ 225.874535][ T804] ? _mutex_trylock_nest_lock+0x2e1/0x310 [ 225.880238][ T804] ? do_raw_spin_lock+0x128/0x260 [ 225.885260][ T804] ? __pfx_usb_new_device+0x10/0x10 [ 225.890442][ T804] ? mark_held_locks+0x40/0x70 [ 225.895190][ T804] hub_event+0x30a3/0x4a60 [ 225.899596][ T804] ? __pfx_hub_event+0x10/0x10 [ 225.904351][ T804] ? debug_object_deactivate+0x2e4/0x3b0 [ 225.909971][ T804] ? rcu_is_watching+0x12/0xc0 [ 225.914721][ T804] process_one_work+0xa23/0x1940 [ 225.919643][ T804] ? __pfx_process_one_work+0x10/0x10 [ 225.924994][ T804] ? __pfx_hub_event+0x10/0x10 [ 225.929741][ T804] worker_thread+0x5ef/0xe50 [ 225.934311][ T804] ? __pfx_worker_thread+0x10/0x10 [ 225.939403][ T804] ? kthread+0x13a/0x450 [ 225.943624][ T804] ? __pfx_worker_thread+0x10/0x10 [ 225.948714][ T804] kthread+0x370/0x450 [ 225.952761][ T804] ? __pfx_kthread+0x10/0x10 [ 225.957345][ T804] ret_from_fork+0x72b/0xd50 [ 225.961919][ T804] ? __pfx_ret_from_fork+0x10/0x10 [ 225.967014][ T804] ? __switch_to+0x800/0x10f0 [ 225.971670][ T804] ? __pfx_kthread+0x10/0x10 [ 225.976237][ T804] ret_from_fork_asm+0x1a/0x30 [ 225.980990][ T804] [ 225.983987][ T804] Modules linked in: [ 225.988859][ T804] ---[ end trace 0000000000000000 ]--- [ 225.994121][ T30] audit: type=1400 audit(1784932707.523:430): avc: denied { read } for pid=4962 comm="syslogd" name="log" dev="sda1" ino=2010 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:var_t tclass=lnk_file permissive=1 [ 226.016386][ T804] RIP: 0010:usbtest_probe+0x3b9/0x1280 [ 226.023763][ T30] audit: type=1400 audit(1784932707.523:431): avc: denied { search } for pid=4962 comm="syslogd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 226.055592][ T5620] ffs_data_put(): freeing [ 226.064350][ T30] audit: type=1400 audit(1784932707.523:432): avc: denied { write search } for pid=4962 comm="syslogd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 226.092071][ T804] Code: 1a 47 fa 45 85 ff 79 5e e8 c4 1f 47 fa 48 8b 84 24 80 00 00 00 48 8d 58 0a 48 b8 00 00 00 00 00 fc ff df 48 89 da 48 c1 ea 03 <0f> b6 04 02 48 89 da 83 e2 07 38 d0 7f 08 84 c0 0f 85 58 0d 00 00 [ 226.107619][ T30] audit: type=1400 audit(1784932707.523:433): avc: denied { add_name } for pid=4962 comm="syslogd" name="messages" scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 226.113820][ T804] RSP: 0018:ffffc900047befc8 EFLAGS: 00010202 [ 226.134147][ T30] audit: type=1400 audit(1784932707.523:434): avc: denied { create } for pid=4962 comm="syslogd" name="messages" scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 226.134220][ T804] [ 226.140323][ T30] audit: type=1400 audit(1784932707.523:435): avc: denied { append open } for pid=4962 comm="syslogd" path="/tmp/messages" dev="tmpfs" ino=5 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 226.162239][ T804] RAX: dffffc0000000000 RBX: 000000000000000a RCX: ffffc9001b37d000 [ 226.191620][ T30] audit: type=1400 audit(1784932707.523:436): avc: denied { getattr } for pid=4962 comm="syslogd" path="/tmp/messages" dev="tmpfs" ino=5 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 226.218355][ T30] audit: type=1400 audit(1784932707.533:437): avc: denied { unmount } for pid=5620 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbfs_t tclass=filesystem permissive=1 [ 226.419001][ T804] RDX: 0000000000000001 RSI: ffffffff87c33cdc RDI: ffff88802707ca80 [ 226.427099][ T804] RBP: ffff88804c99c990 R08: 0000000000000005 R09: 0000000000000000 [ 226.435117][ T804] R10: 00000000ffffffff R11: 000000000000758b R12: ffff8880565cd0b0 [ 226.443878][ T804] R13: ffff8880364b7ad0 R14: ffff8880364b7a00 R15: 00000000ffffffff [ 226.451886][ T804] FS: 0000000000000000(0000) GS:ffff888123ede000(0000) knlGS:0000000000000000 [ 226.460853][ T804] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 226.476786][ T804] CR2: 0000001b33920ff8 CR3: 000000000e994000 CR4: 00000000003526f0 [ 226.485066][ T804] Kernel panic - not syncing: Fatal exception [ 226.491373][ T804] Kernel Offset: disabled [ 226.495676][ T804] Rebooting in 86400 seconds..