last executing test programs: 5.832662074s ago: executing program 0 (id=152): r0 = openat$kvm(0xffffff9c, &(0x7f0000000540), 0x8000, 0x0) accept4(0xffffffffffffffff, &(0x7f0000000140)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @broadcast}}}, &(0x7f00000001c0)=0x80, 0x80000) ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0xc008ae88, &(0x7f0000000000)={0xfffff34, 0x0, [{0xf88e470f, 0xed}]}) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x2, 0x9, 0xfffffffffffffffd, 0x77, 0x2, 0xfffffffffffffffe, 0x4002004c4, 0x1004, 0x8000000000000000, 0xc595, 0x0, 0x1, 0xffffffffffffffff, 0x2000000000000000, 0x5, 0x8d], 0xeeee8000, 0x2010d3}) ioctl$KVM_RUN(r2, 0xae80, 0x0) openat$kvm(0xffffffffffffff9c, 0x0, 0x42282, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 5.666829695s ago: executing program 0 (id=155): mkdirat(0xffffffffffffff9c, 0x0, 0x1ff) mount(0x0, &(0x7f0000000200)='./sys_mnt\x00', &(0x7f0000000300)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./sys_mnt/bus/virtio/devices/virtio0/vendor\x00', 0x0, 0x0) read(r0, &(0x7f0000000700), 0x100) 5.569220747s ago: executing program 0 (id=156): mkdir(&(0x7f0000000000)='./mysys\x00', 0x1ff) mount(0x0, &(0x7f0000000100)='./mysys\x00', &(0x7f0000000200)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000e00)='./temp\x00', 0x42, 0x1ff) write(r0, &(0x7f0000000e40)="0000000001000000", 0x8) write(0xffffffffffffffff, 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f00000003c0)='./mysys/bus/pci/devices/0000:00:02.0/driver/unbind\x00', 0x1, 0x0) write(r1, &(0x7f0000000500)='0000:00:02', 0xa) openat(0xffffffffffffff9c, &(0x7f0000000400)='./mysys/bus/pci/devices/0000:00:01.0/config\x00', 0x2, 0x0) pwrite64(0xffffffffffffffff, &(0x7f00000004c0), 0x0, 0x4) openat(0xffffffffffffff9c, &(0x7f0000000680)='./mysys/bus/pci/devices/0000:00:02.0/resource0\x00', 0x2, 0x0) read(r0, &(0x7f0000002000), 0x8) r2 = openat(0xffffffffffffff9c, &(0x7f0000000800)='./mysys/bus/pci/drivers/xhci_hcd/new_id\x00', 0x1, 0x0) write(r2, &(0x7f0000000840)='1af4 1050', 0x9) write(r2, &(0x7f0000000880)='1af4 1000\x00', 0xa) 5.568844503s ago: executing program 4 (id=157): r0 = syz_open_dev$evdev(&(0x7f0000000040), 0x0, 0x0) syz_usb_disconnect(r0) r1 = syz_usb_connect(0x0, 0x24, &(0x7f0000000740)=ANY=[@ANYBLOB="12010000ed3ec908cd0cb300042e01"], 0x0) ioctl$EVIOCRMFF(r0, 0x550c, 0x0) syz_usb_control_io$uac1(r1, 0x0, 0x0) 5.476790805s ago: executing program 0 (id=159): r0 = syz_usb_connect(0x0, 0x1cb, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000122f0d4071040403dfe400000001"], 0x0) syz_usb_disconnect(r0) r1 = syz_usb_connect$uac3(0x3, 0x80, &(0x7f0000000000)={{0x12, 0x1, 0x110, 0x0, 0x0, 0x0, 0x8, 0x2b73, 0xa, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x6e, 0x3, 0x1, 0x9, 0x20, 0xc, {0x8, 0xb, 0x0, 0x1, 0x1, 0x1, 0x30, 0x8}, {{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x30, 0x0, {{0xa, 0x24, 0x1, 0x1, 0xa, 0x1000}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x30, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x2b0, 0x9, 0x5, 0xf8, {0xa, 0x25, 0x25, 0x2, 0x7, 0x7}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x30, 0x0, {}, {{0x9, 0x5, 0x82, 0x9, 0x400, 0x6, 0x2, 0x21, {0xa, 0x25, 0x25, 0x4, 0x2, 0x2}}}}}}}}]}}, 0x0) syz_usb_control_io$uac1(r1, &(0x7f0000000140)={0x14, 0x0, &(0x7f0000000f40)={0x0, 0x3, 0x2, @string={0x2}}}, 0x0) syz_usb_control_io$uac2(r1, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) 3.182217471s ago: executing program 1 (id=184): r0 = syz_create_resource$binfmt(&(0x7f0000001400)='./file0\x00') openat$binfmt(0xffffffffffffff9c, r0, 0x42, 0x1ff) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002040), 0x2, 0x0) mount$fuse(0x0, &(0x7f0000002080)='./file0\x00', &(0x7f00000020c0), 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r1, @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) r2 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$FUSE_DEV_IOC_CLONE(r2, 0x8004e500, &(0x7f0000000080)=r1) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x72, 0x0, 0x7fff0000}]}) close_range(r3, 0xffffffffffffffff, 0x0) 3.135040307s ago: executing program 3 (id=185): timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21}, &(0x7f0000000300)) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x4}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0x42795000) r0 = socket$inet_mptcp(0x2, 0x1, 0x106) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e21, @multicast2}, 0x10) connect$inet(r0, &(0x7f0000000080)={0x2, 0x4e21, @empty}, 0x10) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r0, 0x0, r1, 0x0, 0x8000f28, 0x5) sendmmsg$inet(r0, &(0x7f0000003240)=[{{0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000e80)="2389", 0x2}], 0x1}}], 0x1, 0x4040040) 3.113259889s ago: executing program 1 (id=186): r0 = syz_usb_connect(0x3, 0x9f, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000200000040480b081000010000000109028d00010100"], 0x0) syz_usb_ep_read(r0, 0x3, 0x0, 0x0) syz_usb_ep_write(r0, 0x84, 0xe, &(0x7f0000000700)="aa00080c00000001000700090177") syz_usb_ep_read(r0, 0x3, 0x0, 0x0) syz_usb_ep_write(r0, 0x84, 0x0, 0x0) 2.982699498s ago: executing program 3 (id=187): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000180), r0) sendmsg$TIPC_NL_NET_SET(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x14, r1, 0x1}, 0x14}}, 0x0) sendmsg$TIPC_NL_KEY_SET(r0, &(0x7f0000000280)={0x0, 0x0, 0x0}, 0x0) sendmsg$TIPC_NL_BEARER_ENABLE(r0, 0x0, 0x0) r2 = socket$netlink(0x10, 0x3, 0x15) writev(r2, &(0x7f0000000140)=[{&(0x7f0000000000)="3900000013000b4700bb65e1c3e4ffff0100000035390000560000022500000019000a00100000ad07fd17e5ffff080c38000000000000000a", 0x39}], 0xc) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0x2, 0x4, 0x4, 0x8, 0x1014}, 0x50) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000240)=@base={0xd, 0x4, 0x4, 0x7, 0x0, r3, 0x10000}, 0x50) bpf$MAP_UPDATE_BATCH(0x1a, 0x0, 0x0) r5 = accept$packet(0xffffffffffffffff, 0x0, &(0x7f0000000040)) setsockopt$packet_int(r5, 0x107, 0x9, &(0x7f00000000c0)=0x8, 0x4) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f0000000640)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_CONNECT(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000100)={0x34, r7, 0x401, 0x70bd24, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r8}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @crypto_settings=[@NL80211_ATTR_WPA_VERSIONS={0x8, 0x4b, 0x1}], @crypto_settings=[@NL80211_ATTR_AKM_SUITES={0x4}]]}, 0x34}, 0x1, 0x0, 0x0, 0x20}, 0x0) r9 = socket$nl_audit(0x10, 0x3, 0x9) ioctl$sock_SIOCGIFINDEX_80211(r9, 0x8933, &(0x7f0000003400)={'wlan0\x00', 0x0}) r11 = socket$nl_generic(0x10, 0x3, 0x10) r12 = syz_genetlink_get_family_id$nl80211(&(0x7f0000006a00), r11) sendmsg$NL80211_CMD_JOIN_MESH(r11, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000006b80)={&(0x7f0000000000)={0x30, r12, 0x1, 0x70bd27, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r10}, @void}}, [@NL80211_ATTR_MESH_CONFIG={0x14, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_ELEMENT_TTL={0x5, 0xf, 0x4}, @NL80211_MESHCONF_TTL={0x5, 0x6, 0x75}]}]}, 0x30}, 0x1, 0x0, 0x0, 0x5}, 0x24000880) sendmsg$NL80211_CMD_SET_STATION(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={0x0}, 0x1, 0x0, 0x0, 0x40010}, 0x800) openat(0xffffffffffffff9c, 0x0, 0x4842, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x27ffff7, 0x4000010, r4, 0x5dca2000) 2.777329571s ago: executing program 3 (id=188): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, 0x0, 0x0) ptrace(0x10, 0x0) r1 = socket(0x1e, 0x4, 0x0) socket$inet_mptcp(0x2, 0x1, 0x106) openat$binderfs(0xffffffffffffff9c, 0x0, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=@newlink={0x34, 0x10, 0x801, 0x70bd2d, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x65c2f}, [@IFLA_GROUP={0x8}, @IFLA_VFINFO_LIST={0xc, 0x16, 0x0, 0x1, [{0x8, 0x1, 0x0, 0x1, [@IFLA_VF_VLAN_LIST={0x4}]}]}]}, 0x34}}, 0x80) sched_setscheduler(0x0, 0x1, &(0x7f0000000400)=0x7) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r3 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r3, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) mkdir(&(0x7f0000000d00)='my_configfs/usb_gadget/g1/functions/mass_storage.usb0\x00', 0x1ff) openat$dir(0xffffffffffffff9c, &(0x7f0000000140)='my_configfs/usb_gadget/g1/functions/mass_storage.usb0/lun.0/file\x00', 0x101800, 0x101) r4 = socket(0x1e, 0x2, 0x0) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nbd(&(0x7f0000000580), 0xffffffffffffffff) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) sendmsg$NBD_CMD_CONNECT(r5, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)={0x3c, r6, 0x1, 0xfffffffe, 0x0, {}, [@NBD_ATTR_SOCKETS={0x10, 0x7, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r7}}]}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0xffff}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0x2}]}, 0x3c}, 0x1, 0x0, 0x0, 0x20000001}, 0x20000000) r8 = syz_init_net_socket$x25(0x9, 0x5, 0x0) ioctl(r8, 0x890b, 0x0) bind$x25(r8, &(0x7f0000000080), 0x12) connect$x25(r8, &(0x7f0000000100)={0x9, @remote={'\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc', 0x0}}, 0x12) r9 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_inet_SIOCSIFFLAGS(r9, 0x8914, &(0x7f0000000040)={'bond0\x00', 0x2000}) setsockopt$packet_tx_ring(r4, 0x10f, 0x87, 0x0, 0x0) setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc, 0x0, 0x2}, 0x10) 2.132801917s ago: executing program 4 (id=191): mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='sys_mnt\x00', 0x1ff) mount(&(0x7f00000000c0)=@filename='none\x00', &(0x7f0000000100)='sys_mnt\x00', &(0x7f0000000140)='sysfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000180)='dev_mnt\x00', 0x1ff) mount(&(0x7f00000001c0)=@filename='none\x00', &(0x7f0000000200)='dev_mnt\x00', &(0x7f0000000240)='devtmpfs\x00', 0x0, 0x0) write(0xffffffffffffffff, 0x0, 0x0) close(0xffffffffffffffff) r0 = openat(0xffffffffffffff9c, &(0x7f0000000340)='sys_mnt/block/zram0/comp_algorithm\x00', 0x1, 0x0) write(r0, &(0x7f0000000380)='zstd', 0x4) close(r0) r1 = openat(0xffffffffffffff9c, &(0x7f00000003c0)='sys_mnt/block/zram0/algorithm_params\x00', 0x1, 0x0) write(r1, &(0x7f0000000400)='algo=zstd dict=dict0 level=11', 0x1d) openat(0xffffffffffffff9c, &(0x7f0000000440)='sys_mnt/block/zram0/disksize\x00', 0x1, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f00000004c0)='dev_mnt/zram0\x00', 0x2, 0x0) write(r2, &(0x7f0000000500)="00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddee", 0x3f) close(r2) 1.873694713s ago: executing program 0 (id=192): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000100)={0x73622a85, 0x200a}) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000280)=[@increfs], 0x0, 0x0, 0x0}) r2 = dup3(r1, r0, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f00000002c0)={0x73622a85, 0x10a}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000000)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000680)={0x4, 0x0, &(0x7f0000000140)=[@request_death={0x400c630e, 0x3}], 0xfffffffffffffe72, 0x1000000000000, 0x0}) 1.744656443s ago: executing program 4 (id=194): capset(&(0x7f0000000100)={0x19980330}, &(0x7f0000000200)={0x200003, 0x200003, 0x801, 0x80000001, 0x7}) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x181) mkdirat(0xffffffffffffff9c, &(0x7f00000004c0)='./bus\x00', 0x1d8) linkat(0xffffffffffffff9c, &(0x7f00000003c0)='./cgroup\x00', 0xffffffffffffff9c, &(0x7f0000000100)='./file7\x00', 0x1000) mount$overlay(0x0, &(0x7f0000000100)='./bus\x00', &(0x7f0000000440), 0x8, &(0x7f0000000200)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]}) chdir(&(0x7f00000003c0)='./bus\x00') renameat2(0xffffffffffffff9c, 0x0, 0xffffffffffffff9c, &(0x7f00000007c0)='./file1\x00', 0x0) 1.720227917s ago: executing program 3 (id=195): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000540), 0x82, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000840)={0x1, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, 0x0}], 0x1, 0x11, 0x0, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text16={0x10, 0x0}], 0x1, 0x20, 0x0, 0x0) ioctl$KVM_SET_VCPU_EVENTS(0xffffffffffffffff, 0x4400ae8f, &(0x7f0000000040)=@x86={0x1, 0x32, 0x9, 0x0, 0x6, 0x8, 0x6, 0x6, 0x0, 0x6, 0x6, 0x8, 0x0, 0x1, 0x0, 0x0, 0x8, 0x8, 0x6c, '\x00', 0x81, 0x10001}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 1.632102761s ago: executing program 2 (id=196): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./my_configfs\x00', 0x1ff) mount(0x0, &(0x7f0000000200)='./my_configfs\x00', &(0x7f0000000300)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000500)='./my_configfs/usb_gadget/g1\x00', 0x1ff) r0 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./my_configfs/usb_gadget/g1\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000700)='./my_configfs/usb_gadget/g1/functions/uvc.usb0\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000900)='./my_configfs/usb_gadget/g1/configs/c.1/strings/0x409\x00', 0x1ff) chdir(&(0x7f0000000b00)='./my_configfs/usb_gadget/g1/functions/uvc.usb0\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000000c00)='control/header/h\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000d00)='streaming/header/h\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000e00)='streaming/uncompressed/u\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000f00)='streaming/uncompressed/u/360p\x00', 0x1ff) symlink(&(0x7f0000001000)='control/header/h\x00', &(0x7f0000001100)='control/class/fs/h\x00') symlink(&(0x7f0000001400)='streaming/uncompressed/u\x00', &(0x7f0000001500)='streaming/header/h/u\x00') symlink(&(0x7f0000001600)='streaming/header/h\x00', &(0x7f0000001700)='streaming/class/fs/h\x00') symlink(0x0, &(0x7f0000001900)='streaming/class/hs/h\x00') symlink(0x0, &(0x7f0000001b00)='streaming/class/ss/h\x00') fchdir(r0) r1 = openat(0xffffffffffffff9c, &(0x7f0000001e00)='UDC\x00', 0x1, 0x0) write(r1, &(0x7f0000001f00)='usbip-vudc.0\x00', 0xd) nanosleep(&(0x7f0000002000)={0x0, 0x5f5e100}, 0x0) r2 = syz_open_dev$video(&(0x7f0000002100), 0x0, 0x2) r3 = syz_open_dev$video(&(0x7f0000002200), 0x1, 0x2) r4 = syz_open_dev$video(0x0, 0x2, 0x2) ioctl$VIDIOC_SUBSCRIBE_EVENT(r2, 0x401c565a, &(0x7f0000002600)={0x8000004}) ioctl$VIDIOC_SUBSCRIBE_EVENT(r3, 0x401c565a, &(0x7f0000002700)={0x8000004}) ioctl$VIDIOC_SUBSCRIBE_EVENT(r4, 0x401c565a, &(0x7f0000002800)={0x8000004}) ioctl$VIDIOC_SUBSCRIBE_EVENT(0xffffffffffffffff, 0x401c565a, &(0x7f0000002900)={0x8000004}) ioctl$VIDIOC_SUBSCRIBE_EVENT(0xffffffffffffffff, 0x401c565a, &(0x7f0000002a00)={0x8000004}) close(r2) close(r3) close(r4) close(0xffffffffffffffff) close(0xffffffffffffffff) 1.461752329s ago: executing program 4 (id=197): timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21}, &(0x7f0000000300)) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x4}) timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0x42795000) r0 = socket$inet_mptcp(0x2, 0x1, 0x106) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e21, @multicast2}, 0x10) connect$inet(r0, &(0x7f0000000080)={0x2, 0x4e21, @empty}, 0x10) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r0, 0x0, r1, 0x0, 0x8000f28, 0x5) sendmmsg$inet(r0, &(0x7f0000003240)=[{{0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000e80)="2389", 0x2}], 0x1}}], 0x1, 0x4040040) 1.418480734s ago: executing program 2 (id=198): mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) mount$bind(&(0x7f0000000040)='.\x00', &(0x7f00000000c0)='./file0/../file0\x00', 0x0, 0x2a05404, 0x0) mount$bind(0x0, 0x0, 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000080)='./file0/../file0\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0x2a5b091, 0x0) mount$bind(0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x84000, 0x0) umount2(&(0x7f00000000c0)='./file0/../file0\x00', 0x1) 1.357328859s ago: executing program 3 (id=199): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./my_configfs\x00', 0x1ff) mount(0x0, &(0x7f0000000200)='./my_configfs\x00', &(0x7f0000000300)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000500)='./my_configfs/usb_gadget/g1\x00', 0x1ff) r0 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./my_configfs/usb_gadget/g1\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000700)='./my_configfs/usb_gadget/g1/functions/uvc.usb0\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000900)='./my_configfs/usb_gadget/g1/configs/c.1/strings/0x409\x00', 0x1ff) chdir(&(0x7f0000000b00)='./my_configfs/usb_gadget/g1/functions/uvc.usb0\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000000c00)='control/header/h\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000d00)='streaming/header/h\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000f00)='streaming/uncompressed/u/360p\x00', 0x1ff) symlink(&(0x7f0000001000)='control/header/h\x00', &(0x7f0000001100)='control/class/fs/h\x00') symlink(&(0x7f0000001200)='control/header/h\x00', &(0x7f0000001300)='control/class/ss/h\x00') symlink(&(0x7f0000001400)='streaming/uncompressed/u\x00', &(0x7f0000001500)='streaming/header/h/u\x00') symlink(&(0x7f0000001600)='streaming/header/h\x00', &(0x7f0000001700)='streaming/class/fs/h\x00') symlink(0x0, &(0x7f0000001900)='streaming/class/hs/h\x00') symlink(0x0, &(0x7f0000001b00)='streaming/class/ss/h\x00') fchdir(r0) r1 = openat(0xffffffffffffff9c, &(0x7f0000001e00)='UDC\x00', 0x1, 0x0) write(r1, &(0x7f0000001f00)='usbip-vudc.0\x00', 0xd) nanosleep(&(0x7f0000002000)={0x0, 0x5f5e100}, 0x0) r2 = syz_open_dev$video(&(0x7f0000002100), 0x0, 0x2) r3 = syz_open_dev$video(&(0x7f0000002200), 0x1, 0x2) r4 = syz_open_dev$video(0x0, 0x2, 0x2) r5 = syz_open_dev$video(&(0x7f0000002400), 0x3, 0x2) ioctl$VIDIOC_SUBSCRIBE_EVENT(r2, 0x401c565a, &(0x7f0000002600)={0x8000004}) ioctl$VIDIOC_SUBSCRIBE_EVENT(r3, 0x401c565a, &(0x7f0000002700)={0x8000004}) ioctl$VIDIOC_SUBSCRIBE_EVENT(r5, 0x401c565a, &(0x7f0000002900)={0x8000004}) ioctl$VIDIOC_SUBSCRIBE_EVENT(0xffffffffffffffff, 0x401c565a, &(0x7f0000002a00)={0x8000004}) close(r2) close(r3) close(r4) close(r5) close(0xffffffffffffffff) 1.294699754s ago: executing program 2 (id=200): syz_usb_connect$uac1(0x0, 0x0, 0x0, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x2, [{0x9, &(0x7f0000000080)=@string={0x9, 0x3, "42a4f3fced3cef"}}, {0x28, &(0x7f0000000100)=@string={0x28, 0x3, "a6f69dabd5b6a6d19ef5ed278fef27feb278034b3f631e630569d5b0fef19df340a09bea82a2"}}]}) sendmsg$802154_dgram(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000080)={0x24, @long={0x3, 0xffff, {0x83e66ac9b0b93c82}}}, 0x14, 0x0, 0x1, 0x0, 0x0, 0x20008040}, 0x800) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000000)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r1, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r2, @ANYBLOB="d506330080000000ffffffffffff080211000001"], 0x6f4}}, 0x0) 1.279863949s ago: executing program 4 (id=201): ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}) timer_create(0x0, &(0x7f0000000280)={0x0, 0x21}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x26, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x4}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0x42795000) r1 = socket$kcm(0x23, 0x5, 0x0) listen(r1, 0x800) r2 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r2, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000f00)=[{&(0x7f0000000200)="5c00000014006b05c84e21000ab16d6e230675f811000000440002005817d30461bc24eeb556a7ef595105ea1698fa51f60a64c9f408000000e786a6d0bdbdc3d44bd70011b6c0504bb9189d9193e9bd00"/92, 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x240040c4) r3 = socket$phonet_pipe(0x23, 0x5, 0x2) connect$phonet_pipe(r3, &(0x7f0000000040)={0x23, 0x0, 0x58}, 0x10) sendto$phonet(r3, 0x0, 0x0, 0x80, 0x0, 0x0) accept4(r1, 0x0, 0x0, 0x80000) read(0xffffffffffffffff, 0x0, 0x0) bind$alg(0xffffffffffffffff, 0x0, 0x0) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, &(0x7f0000000140)="2c385aa3d49100dc6626c892b6bc436a", 0x10) ptrace(0x10, 0x0) ptrace$poke(0x13, 0x0, 0x0, 0x0) r4 = accept4(0xffffffffffffffff, 0x0, 0x0, 0x0) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r4, 0x89f0, &(0x7f00000001c0)={'syztnl1\x00', &(0x7f00000000c0)={'syztnl0\x00', 0x0, 0x29, 0x9, 0x9, 0x9, 0x4, @empty, @ipv4={'\x00', '\xff\xff', @private=0xa010100}, 0x40, 0x1, 0xddc1, 0x4833e8b7}}) 1.129798344s ago: executing program 3 (id=202): r0 = syz_usb_connect(0x0, 0x1cb, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000122f0d4071040403dfe40000000109"], 0x0) syz_usb_disconnect(r0) r1 = syz_usb_connect$uac3(0x3, 0x80, &(0x7f0000000000)={{0x12, 0x1, 0x110, 0x0, 0x0, 0x0, 0x8, 0x2b73, 0xa, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x6e, 0x3, 0x1, 0x9, 0x20, 0xc, {0x8, 0xb, 0x0, 0x1, 0x1, 0x1, 0x30, 0x8}, {{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x30, 0x0, {{0xa, 0x24, 0x1, 0x1, 0xa, 0x1000}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x30, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x2b0, 0x9, 0x5, 0xf8, {0xa, 0x25, 0x25, 0x2, 0x7, 0x7}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x30, 0x0, {}, {{0x9, 0x5, 0x82, 0x9, 0x400, 0x6, 0x2, 0x21, {0xa, 0x25, 0x25, 0x4, 0x2, 0x2}}}}}}}}]}}, 0x0) syz_usb_control_io$uac1(r1, &(0x7f0000000140)={0x14, 0x0, &(0x7f0000000f40)={0x0, 0x3, 0x2, @string={0x2}}}, 0x0) syz_usb_control_io$uac2(r1, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) 1.001014318s ago: executing program 1 (id=203): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000180), r0) sendmsg$TIPC_NL_NET_SET(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x14, r1, 0x1}, 0x14}}, 0x0) sendmsg$TIPC_NL_KEY_SET(r0, &(0x7f0000000280)={0x0, 0x0, 0x0}, 0x0) sendmsg$TIPC_NL_BEARER_ENABLE(r0, 0x0, 0x0) r2 = socket$netlink(0x10, 0x3, 0x15) writev(r2, &(0x7f0000000140)=[{&(0x7f0000000000)="3900000013000b4700bb65e1c3e4ffff0100000035390000560000022500000019000a00100000ad07fd17e5ffff080c38000000000000000a", 0x39}], 0xc) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0x2, 0x4, 0x4, 0x8, 0x1014}, 0x50) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000240)=@base={0xd, 0x4, 0x4, 0x7, 0x0, r3, 0x10000}, 0x50) bpf$MAP_UPDATE_BATCH(0x1a, 0x0, 0x0) r5 = accept$packet(0xffffffffffffffff, 0x0, &(0x7f0000000040)) setsockopt$packet_int(r5, 0x107, 0x9, &(0x7f00000000c0)=0x8, 0x4) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f0000000640)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_CONNECT(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000100)={0x34, r7, 0x401, 0x70bd24, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r8}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @crypto_settings=[@NL80211_ATTR_WPA_VERSIONS={0x8, 0x4b, 0x1}], @crypto_settings=[@NL80211_ATTR_AKM_SUITES={0x4}]]}, 0x34}, 0x1, 0x0, 0x0, 0x20}, 0x0) r9 = socket$nl_audit(0x10, 0x3, 0x9) ioctl$sock_SIOCGIFINDEX_80211(r9, 0x8933, &(0x7f0000003400)={'wlan0\x00', 0x0}) r11 = socket$nl_generic(0x10, 0x3, 0x10) r12 = syz_genetlink_get_family_id$nl80211(&(0x7f0000006a00), r11) sendmsg$NL80211_CMD_JOIN_MESH(r11, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000006b80)={&(0x7f0000000000)={0x30, r12, 0x1, 0x70bd27, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r10}, @void}}, [@NL80211_ATTR_MESH_CONFIG={0x14, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_ELEMENT_TTL={0x5, 0xf, 0x4}, @NL80211_MESHCONF_TTL={0x5, 0x6, 0x75}]}]}, 0x30}, 0x1, 0x0, 0x0, 0x5}, 0x24000880) sendmsg$NL80211_CMD_SET_STATION(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000280)={0x1c, r7, 0x4, 0x70bd2a, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r10}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x40010}, 0x800) openat(0xffffffffffffff9c, 0x0, 0x4842, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x27ffff7, 0x4000010, r4, 0x5dca2000) 855.868246ms ago: executing program 0 (id=204): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./sys\x00', &(0x7f0000000080)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./sys/bus/platform/devices/vhci_hcd.0/driver/unbind\x00', 0x1, 0x0) write(r0, &(0x7f0000000100)='vhci_hcd.0', 0xa) 836.443685ms ago: executing program 1 (id=205): mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='sys_mnt\x00', 0x1ff) mount(&(0x7f00000000c0)=@filename='none\x00', &(0x7f0000000100)='sys_mnt\x00', &(0x7f0000000140)='sysfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000180)='dev_mnt\x00', 0x1ff) mount(&(0x7f00000001c0)=@filename='none\x00', &(0x7f0000000200)='dev_mnt\x00', &(0x7f0000000240)='devtmpfs\x00', 0x0, 0x0) write(0xffffffffffffffff, 0x0, 0x0) close(0xffffffffffffffff) r0 = openat(0xffffffffffffff9c, &(0x7f0000000340)='sys_mnt/block/zram0/comp_algorithm\x00', 0x1, 0x0) write(r0, &(0x7f0000000380)='zstd', 0x4) close(r0) r1 = openat(0xffffffffffffff9c, &(0x7f00000003c0)='sys_mnt/block/zram0/algorithm_params\x00', 0x1, 0x0) write(r1, &(0x7f0000000400)='algo=zstd dict=dict0 level=11', 0x1d) openat(0xffffffffffffff9c, &(0x7f0000000440)='sys_mnt/block/zram0/disksize\x00', 0x1, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f00000004c0)='dev_mnt/zram0\x00', 0x2, 0x0) write(r2, &(0x7f0000000500)="00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddee", 0x3f) close(r2) 643.694333ms ago: executing program 1 (id=206): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, 0x0, 0x0) ptrace(0x10, 0x0) r1 = socket(0x1e, 0x4, 0x0) socket$inet_mptcp(0x2, 0x1, 0x106) openat$binderfs(0xffffffffffffff9c, 0x0, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=@newlink={0x34, 0x10, 0x801, 0x70bd2d, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x65c2f}, [@IFLA_GROUP={0x8}, @IFLA_VFINFO_LIST={0xc, 0x16, 0x0, 0x1, [{0x8, 0x1, 0x0, 0x1, [@IFLA_VF_VLAN_LIST={0x4}]}]}]}, 0x34}}, 0x80) sched_setscheduler(0x0, 0x1, &(0x7f0000000400)=0x7) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r3 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r3, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) mkdir(&(0x7f0000000d00)='my_configfs/usb_gadget/g1/functions/mass_storage.usb0\x00', 0x1ff) openat$dir(0xffffffffffffff9c, &(0x7f0000000140)='my_configfs/usb_gadget/g1/functions/mass_storage.usb0/lun.0/file\x00', 0x101800, 0x101) r4 = socket(0x1e, 0x2, 0x0) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nbd(&(0x7f0000000580), 0xffffffffffffffff) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) sendmsg$NBD_CMD_CONNECT(r5, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)={0x3c, r6, 0x1, 0xfffffffe, 0x0, {}, [@NBD_ATTR_SOCKETS={0x10, 0x7, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r7}}]}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0xffff}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0x2}]}, 0x3c}, 0x1, 0x0, 0x0, 0x20000001}, 0x20000000) r8 = syz_init_net_socket$x25(0x9, 0x5, 0x0) ioctl(r8, 0x890b, 0x0) bind$x25(r8, &(0x7f0000000080), 0x12) connect$x25(r8, &(0x7f0000000100)={0x9, @remote={'\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc', 0x0}}, 0x12) r9 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_inet_SIOCSIFFLAGS(r9, 0x8914, &(0x7f0000000040)={'bond0\x00', 0x2000}) setsockopt$packet_tx_ring(r4, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) setsockopt$packet_tx_ring(r1, 0x10f, 0x87, 0x0, 0x0) 619.221136ms ago: executing program 2 (id=207): mkdir(&(0x7f0000000000)='./mysys\x00', 0x1ff) mount(0x0, &(0x7f0000000100)='./mysys\x00', &(0x7f0000000200)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000e00)='./temp\x00', 0x42, 0x1ff) write(r0, &(0x7f0000000e40)="0000000001000000", 0x8) write(0xffffffffffffffff, 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f00000003c0)='./mysys/bus/pci/devices/0000:00:02.0/driver/unbind\x00', 0x1, 0x0) write(r1, &(0x7f0000000500)='0000:00:02', 0xa) openat(0xffffffffffffff9c, &(0x7f0000000400)='./mysys/bus/pci/devices/0000:00:01.0/config\x00', 0x2, 0x0) pwrite64(0xffffffffffffffff, &(0x7f00000004c0)="03", 0x1, 0x4) openat(0xffffffffffffff9c, &(0x7f0000000680)='./mysys/bus/pci/devices/0000:00:02.0/resource0\x00', 0x2, 0x0) read(r0, &(0x7f0000002000), 0x8) r2 = openat(0xffffffffffffff9c, &(0x7f0000000800)='./mysys/bus/pci/drivers/xhci_hcd/new_id\x00', 0x1, 0x0) write(r2, &(0x7f0000000840)='1af4 1050', 0x9) write(r2, &(0x7f0000000880)='1af4 1000\x00', 0xa) 453.339126ms ago: executing program 2 (id=208): capset(&(0x7f0000000100)={0x19980330}, &(0x7f0000000200)={0x200003, 0x200003, 0x801, 0x80000001, 0x7}) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x181) mkdirat(0xffffffffffffff9c, &(0x7f00000004c0)='./bus\x00', 0x1d8) linkat(0xffffffffffffff9c, &(0x7f00000003c0)='./cgroup\x00', 0xffffffffffffff9c, &(0x7f0000000100)='./file7\x00', 0x1000) mount$overlay(0x0, &(0x7f0000000100)='./bus\x00', &(0x7f0000000440), 0x8, &(0x7f0000000200)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]}) chdir(&(0x7f00000003c0)='./bus\x00') renameat2(0xffffffffffffff9c, &(0x7f0000000780)='./file7\x00', 0xffffffffffffff9c, 0x0, 0x0) 91.172368ms ago: executing program 1 (id=209): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./my_configfs\x00', 0x1ff) mount(0x0, &(0x7f0000000200)='./my_configfs\x00', &(0x7f0000000300)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000500)='./my_configfs/usb_gadget/g1\x00', 0x1ff) r0 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./my_configfs/usb_gadget/g1\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000700)='./my_configfs/usb_gadget/g1/functions/uvc.usb0\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000900)='./my_configfs/usb_gadget/g1/configs/c.1/strings/0x409\x00', 0x1ff) chdir(&(0x7f0000000b00)='./my_configfs/usb_gadget/g1/functions/uvc.usb0\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000000c00)='control/header/h\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000d00)='streaming/header/h\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000e00)='streaming/uncompressed/u\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000f00)='streaming/uncompressed/u/360p\x00', 0x1ff) symlink(&(0x7f0000001000)='control/header/h\x00', &(0x7f0000001100)='control/class/fs/h\x00') symlink(&(0x7f0000001400)='streaming/uncompressed/u\x00', &(0x7f0000001500)='streaming/header/h/u\x00') symlink(&(0x7f0000001600)='streaming/header/h\x00', &(0x7f0000001700)='streaming/class/fs/h\x00') symlink(0x0, &(0x7f0000001900)='streaming/class/hs/h\x00') symlink(0x0, &(0x7f0000001b00)='streaming/class/ss/h\x00') fchdir(r0) r1 = openat(0xffffffffffffff9c, &(0x7f0000001e00)='UDC\x00', 0x1, 0x0) write(r1, &(0x7f0000001f00)='usbip-vudc.0\x00', 0xd) nanosleep(&(0x7f0000002000)={0x0, 0x5f5e100}, 0x0) r2 = syz_open_dev$video(&(0x7f0000002100), 0x0, 0x2) r3 = syz_open_dev$video(&(0x7f0000002200), 0x1, 0x2) r4 = syz_open_dev$video(0x0, 0x2, 0x2) ioctl$VIDIOC_SUBSCRIBE_EVENT(r2, 0x401c565a, &(0x7f0000002600)={0x8000004}) ioctl$VIDIOC_SUBSCRIBE_EVENT(r3, 0x401c565a, &(0x7f0000002700)={0x8000004}) ioctl$VIDIOC_SUBSCRIBE_EVENT(r4, 0x401c565a, &(0x7f0000002800)={0x8000004}) ioctl$VIDIOC_SUBSCRIBE_EVENT(0xffffffffffffffff, 0x401c565a, &(0x7f0000002900)={0x8000004}) ioctl$VIDIOC_SUBSCRIBE_EVENT(0xffffffffffffffff, 0x401c565a, &(0x7f0000002a00)={0x8000004}) close(r2) close(r3) close(r4) close(0xffffffffffffffff) close(0xffffffffffffffff) 12.037447ms ago: executing program 4 (id=210): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000540), 0x82, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000840)={0x1, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, &(0x7f0000000000)="2ef26f0f3566b842000f00d8b805000000b9a00000000f01c166baf80cb8b7351187ef66bafc0cb000ee0fde460b0f0130670f01c28fe868cfe20a", 0x3b}], 0x1, 0x11, 0x0, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x20, 0x0, 0x0) ioctl$KVM_SET_VCPU_EVENTS(0xffffffffffffffff, 0x4400ae8f, &(0x7f0000000040)=@x86={0x1, 0x32, 0x9, 0x0, 0x6, 0x8, 0x6, 0x6, 0x0, 0x6, 0x6, 0x8, 0x0, 0x1, 0x0, 0x0, 0x8, 0x8, 0x6c, '\x00', 0x81, 0x10001}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 0s ago: executing program 2 (id=211): mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) mount$bind(&(0x7f0000000040)='.\x00', &(0x7f00000000c0)='./file0/../file0\x00', 0x0, 0x2a05404, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x2a5b091, 0x0) mount$bind(0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x84000, 0x0) umount2(&(0x7f00000000c0)='./file0/../file0\x00', 0x1) kernel console output (not intermixed with test programs): [ 48.750510][ T29] audit: type=1400 audit(1787042330.709:111): avc: denied { write } for pid=5445 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 48.804845][ T29] audit: type=1400 audit(1787042330.769:112): avc: denied { write } for pid=5456 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 49.278342][ T29] kauditd_printk_skb: 2 callbacks suppressed [ 49.278356][ T29] audit: type=1400 audit(1787042331.239:115): avc: denied { write } for pid=5473 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 49.328637][ T29] audit: type=1400 audit(1787042331.289:116): avc: denied { write } for pid=5484 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 49.583307][ T29] audit: type=1400 audit(1787042331.539:117): avc: denied { write } for pid=5487 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 49.631000][ T29] audit: type=1400 audit(1787042331.589:118): avc: denied { write } for pid=5498 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 49.798675][ T29] audit: type=1400 audit(1787042331.759:119): avc: denied { write } for pid=5501 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 49.864974][ T29] audit: type=1400 audit(1787042331.829:120): avc: denied { write } for pid=5512 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 50.072863][ T29] audit: type=1400 audit(1787042332.029:121): avc: denied { write } for pid=5515 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 50.122891][ T29] audit: type=1400 audit(1787042332.079:122): avc: denied { write } for pid=5526 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 50.294343][ T29] audit: type=1400 audit(1787042332.259:123): avc: denied { write } for pid=5529 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 50.343665][ T29] audit: type=1400 audit(1787042332.299:124): avc: denied { write } for pid=5540 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 Warning: Permanently added '10.128.0.128' (ED25519) to the list of known hosts. [ 54.724098][ T29] kauditd_printk_skb: 4 callbacks suppressed [ 54.724112][ T29] audit: type=1400 audit(1787042336.689:129): avc: denied { mounton } for pid=5578 comm="syz-executor" path="/syzcgroup/unified" dev="sda1" ino=2023 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1 [ 54.753864][ T29] audit: type=1400 audit(1787042336.719:130): avc: denied { mount } for pid=5578 comm="syz-executor" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 54.756817][ T5578] cgroup: Unknown subsys name 'net' [ 54.784144][ T29] audit: type=1400 audit(1787042336.749:131): avc: denied { unmount } for pid=5578 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 54.916189][ T5578] cgroup: Unknown subsys name 'cpuset' [ 54.924241][ T5578] cgroup: Unknown subsys name 'rlimit' [ 55.043108][ T29] audit: type=1400 audit(1787042336.999:132): avc: denied { setattr } for pid=5578 comm="syz-executor" name="raw-gadget" dev="devtmpfs" ino=819 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 55.086258][ T29] audit: type=1400 audit(1787042336.999:133): avc: denied { create } for pid=5578 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 55.107154][ T29] audit: type=1400 audit(1787042336.999:134): avc: denied { write } for pid=5578 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 55.127787][ T29] audit: type=1400 audit(1787042336.999:135): avc: denied { read } for pid=5578 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 55.166658][ T5582] SELinux: Context root:object_r:swapfile_t is not valid (left unmapped). Setting up swapspace version 1, size = 127995904 bytes [ 55.176183][ T29] audit: type=1400 audit(1787042337.149:136): avc: denied { relabelto } for pid=5582 comm="mkswap" name="swap-file" dev="sda1" ino=2026 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 55.202061][ T29] audit: type=1400 audit(1787042337.149:137): avc: denied { write } for pid=5582 comm="mkswap" path="/root/swap-file" dev="sda1" ino=2026 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 55.263127][ T29] audit: type=1400 audit(1787042337.219:138): avc: denied { read } for pid=5578 comm="syz-executor" name="swap-file" dev="sda1" ino=2026 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 56.183381][ T5578] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 59.904301][ T29] kauditd_printk_skb: 2 callbacks suppressed [ 59.904316][ T29] audit: type=1400 audit(1787042341.859:141): avc: denied { create } for pid=5591 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 59.941194][ T29] audit: type=1400 audit(1787042341.859:142): avc: denied { create } for pid=5592 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 59.961557][ T29] audit: type=1400 audit(1787042341.859:143): avc: denied { read write } for pid=5591 comm="syz-executor" name="vhci" dev="devtmpfs" ino=1267 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 59.999405][ T5599] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 60.003959][ T5601] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 60.007689][ T5599] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 60.014824][ T5601] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 60.023240][ T5599] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 60.029843][ T5601] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 60.036590][ T5599] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 60.044486][ T5601] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 60.050069][ T5599] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 60.065162][ T5603] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 60.065856][ T5599] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 60.072961][ T5603] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 60.080797][ T5599] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 60.086308][ T5601] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 60.108785][ T5601] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 60.130819][ T4913] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 60.141198][ T4913] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 60.149882][ T49] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 60.159752][ T29] audit: type=1400 audit(1787042341.859:144): avc: denied { read write } for pid=5592 comm="syz-executor" name="vhci" dev="devtmpfs" ino=1267 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 60.184145][ T4913] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 60.193023][ T4913] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 60.193825][ T49] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 60.201316][ T4913] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 60.209371][ T49] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 60.222551][ T49] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 60.231326][ T49] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 60.273154][ T29] audit: type=1400 audit(1787042341.869:145): avc: denied { open } for pid=5591 comm="syz-executor" path="/dev/vhci" dev="devtmpfs" ino=1267 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 60.307037][ T29] audit: type=1400 audit(1787042341.869:146): avc: denied { open } for pid=5592 comm="syz-executor" path="/dev/vhci" dev="devtmpfs" ino=1267 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 60.364148][ T29] audit: type=1400 audit(1787042341.899:147): avc: denied { ioctl } for pid=5591 comm="syz-executor" path="socket:[915]" dev="sockfs" ino=915 ioctlcmd=0x48c9 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 60.444885][ T29] audit: type=1400 audit(1787042342.059:148): avc: denied { read } for pid=5591 comm="syz-executor" dev="nsfs" ino=4026531833 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 60.527295][ T29] audit: type=1400 audit(1787042342.059:149): avc: denied { open } for pid=5591 comm="syz-executor" path="net:[4026531833]" dev="nsfs" ino=4026531833 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 60.595995][ T29] audit: type=1400 audit(1787042342.059:150): avc: denied { mounton } for pid=5591 comm="syz-executor" path="/" dev="sda1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:root_t tclass=dir permissive=1 [ 61.462181][ T5591] bridge0: port 1(bridge_slave_0) entered blocking state [ 61.469378][ T5591] bridge0: port 1(bridge_slave_0) entered disabled state [ 61.477886][ T5591] bridge_slave_0: entered allmulticast mode [ 61.486505][ T5591] bridge_slave_0: entered promiscuous mode [ 61.523951][ T5591] bridge0: port 2(bridge_slave_1) entered blocking state [ 61.531089][ T5591] bridge0: port 2(bridge_slave_1) entered disabled state [ 61.538275][ T5591] bridge_slave_1: entered allmulticast mode [ 61.545077][ T5591] bridge_slave_1: entered promiscuous mode [ 61.607101][ T5593] bridge0: port 1(bridge_slave_0) entered blocking state [ 61.614254][ T5593] bridge0: port 1(bridge_slave_0) entered disabled state [ 61.621344][ T5593] bridge_slave_0: entered allmulticast mode [ 61.628256][ T5593] bridge_slave_0: entered promiscuous mode [ 61.644462][ T5591] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 61.655859][ T5591] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 61.668970][ T5593] bridge0: port 2(bridge_slave_1) entered blocking state [ 61.676114][ T5593] bridge0: port 2(bridge_slave_1) entered disabled state [ 61.683322][ T5593] bridge_slave_1: entered allmulticast mode [ 61.690148][ T5593] bridge_slave_1: entered promiscuous mode [ 61.766089][ T5592] bridge0: port 1(bridge_slave_0) entered blocking state [ 61.773252][ T5592] bridge0: port 1(bridge_slave_0) entered disabled state [ 61.780581][ T5592] bridge_slave_0: entered allmulticast mode [ 61.787439][ T5592] bridge_slave_0: entered promiscuous mode [ 61.796867][ T5591] team0: Port device team_slave_0 added [ 61.802535][ T5602] bridge0: port 1(bridge_slave_0) entered blocking state [ 61.809942][ T5602] bridge0: port 1(bridge_slave_0) entered disabled state [ 61.817427][ T5602] bridge_slave_0: entered allmulticast mode [ 61.824266][ T5602] bridge_slave_0: entered promiscuous mode [ 61.832854][ T5593] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 61.842056][ T5598] bridge0: port 1(bridge_slave_0) entered blocking state [ 61.849252][ T5598] bridge0: port 1(bridge_slave_0) entered disabled state [ 61.856420][ T5598] bridge_slave_0: entered allmulticast mode [ 61.863200][ T5598] bridge_slave_0: entered promiscuous mode [ 61.870113][ T5592] bridge0: port 2(bridge_slave_1) entered blocking state [ 61.877293][ T5592] bridge0: port 2(bridge_slave_1) entered disabled state [ 61.885153][ T5592] bridge_slave_1: entered allmulticast mode [ 61.891808][ T5592] bridge_slave_1: entered promiscuous mode [ 61.899828][ T5591] team0: Port device team_slave_1 added [ 61.905589][ T5602] bridge0: port 2(bridge_slave_1) entered blocking state [ 61.912677][ T5602] bridge0: port 2(bridge_slave_1) entered disabled state [ 61.920493][ T5602] bridge_slave_1: entered allmulticast mode [ 61.927759][ T5602] bridge_slave_1: entered promiscuous mode [ 61.935713][ T5593] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 61.950872][ T5598] bridge0: port 2(bridge_slave_1) entered blocking state [ 61.958070][ T5598] bridge0: port 2(bridge_slave_1) entered disabled state [ 61.965940][ T5598] bridge_slave_1: entered allmulticast mode [ 61.972589][ T5598] bridge_slave_1: entered promiscuous mode [ 62.037057][ T5593] team0: Port device team_slave_0 added [ 62.044747][ T5598] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 62.055663][ T5592] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 62.065985][ T5591] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 62.072967][ T5591] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 62.099224][ T5591] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 62.112500][ T5602] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 62.114272][ T49] Bluetooth: hci1: command tx timeout [ 62.121885][ T5603] Bluetooth: hci2: command tx timeout [ 62.129854][ T5602] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 62.143657][ T5593] team0: Port device team_slave_1 added [ 62.150713][ T5598] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 62.161280][ T5592] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 62.170943][ T5591] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 62.178018][ T5591] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 62.203950][ T5591] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 62.213817][ T5603] Bluetooth: hci0: command tx timeout [ 62.273753][ T5603] Bluetooth: hci3: command tx timeout [ 62.274011][ T49] Bluetooth: hci4: command tx timeout [ 62.283216][ T5598] team0: Port device team_slave_0 added [ 62.292821][ T5598] team0: Port device team_slave_1 added [ 62.299548][ T5592] team0: Port device team_slave_0 added [ 62.306490][ T5602] team0: Port device team_slave_0 added [ 62.312552][ T5593] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 62.319699][ T5593] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 62.346406][ T5593] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 62.374102][ T5592] team0: Port device team_slave_1 added [ 62.387113][ T5602] team0: Port device team_slave_1 added [ 62.393159][ T5593] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 62.400170][ T5593] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 62.426079][ T5593] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 62.471286][ T5591] hsr_slave_0: entered promiscuous mode [ 62.477559][ T5591] hsr_slave_1: entered promiscuous mode [ 62.485200][ T5598] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 62.492162][ T5598] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 62.518242][ T5598] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 62.530006][ T5592] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 62.537122][ T5592] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 62.563031][ T5592] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 62.581733][ T5602] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 62.588698][ T5602] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 62.614715][ T5602] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 62.626615][ T5602] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 62.633594][ T5602] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 62.659500][ T5602] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 62.670787][ T5598] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 62.677874][ T5598] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 62.703763][ T5598] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 62.715060][ T5592] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 62.722064][ T5592] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 62.747975][ T5592] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 62.806764][ T5593] hsr_slave_0: entered promiscuous mode [ 62.812785][ T5593] hsr_slave_1: entered promiscuous mode [ 62.819146][ T5593] debugfs: 'hsr0' already exists in 'hsr' [ 62.824948][ T5593] Cannot create hsr debugfs directory [ 62.918839][ T5602] hsr_slave_0: entered promiscuous mode [ 62.925009][ T5602] hsr_slave_1: entered promiscuous mode [ 62.930860][ T5602] debugfs: 'hsr0' already exists in 'hsr' [ 62.936816][ T5602] Cannot create hsr debugfs directory [ 62.949932][ T5592] hsr_slave_0: entered promiscuous mode [ 62.955995][ T5592] hsr_slave_1: entered promiscuous mode [ 62.961876][ T5592] debugfs: 'hsr0' already exists in 'hsr' [ 62.967642][ T5592] Cannot create hsr debugfs directory [ 62.976851][ T5598] hsr_slave_0: entered promiscuous mode [ 62.982849][ T5598] hsr_slave_1: entered promiscuous mode [ 62.988901][ T5598] debugfs: 'hsr0' already exists in 'hsr' [ 62.995221][ T5598] Cannot create hsr debugfs directory [ 63.282499][ T5591] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 63.293153][ T5591] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 63.301702][ T5591] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 63.311588][ T5591] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 63.331746][ T5591] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 63.340294][ T5591] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 63.353192][ T5591] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 63.362890][ T5591] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 63.411733][ T5593] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 63.422007][ T5593] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 63.430348][ T5593] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 63.440557][ T5593] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 63.448910][ T5593] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 63.458482][ T5593] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 63.470673][ T5593] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 63.479862][ T5593] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 63.542978][ T5602] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 63.552858][ T5602] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 63.561891][ T5602] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 63.571074][ T5602] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 63.586102][ T5602] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 63.595229][ T5602] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 63.604958][ T5602] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 63.614431][ T5602] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 63.671393][ T5591] 8021q: adding VLAN 0 to HW filter on device bond0 [ 63.710101][ T5592] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 63.719431][ T5592] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 63.732887][ T5592] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 63.744045][ T5592] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 63.752183][ T5592] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 63.761286][ T5592] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 63.770973][ T5591] 8021q: adding VLAN 0 to HW filter on device team0 [ 63.782912][ T3013] bridge0: port 1(bridge_slave_0) entered blocking state [ 63.790555][ T3013] bridge0: port 1(bridge_slave_0) entered forwarding state [ 63.799938][ T5592] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 63.810520][ T5592] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 63.843782][ T57] bridge0: port 2(bridge_slave_1) entered blocking state [ 63.850878][ T57] bridge0: port 2(bridge_slave_1) entered forwarding state [ 63.891686][ T5593] 8021q: adding VLAN 0 to HW filter on device bond0 [ 63.927565][ T5598] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 63.937036][ T5598] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 63.958607][ T5598] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 63.967105][ T5598] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 63.975192][ T5598] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 63.984183][ T5598] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 63.991850][ T5598] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 64.001377][ T5598] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 64.018811][ T5593] 8021q: adding VLAN 0 to HW filter on device team0 [ 64.040951][ T35] bridge0: port 1(bridge_slave_0) entered blocking state [ 64.048044][ T35] bridge0: port 1(bridge_slave_0) entered forwarding state [ 64.072890][ T197] bridge0: port 2(bridge_slave_1) entered blocking state [ 64.080004][ T197] bridge0: port 2(bridge_slave_1) entered forwarding state [ 64.129667][ T5602] 8021q: adding VLAN 0 to HW filter on device bond0 [ 64.193167][ T5602] 8021q: adding VLAN 0 to HW filter on device team0 [ 64.194140][ T49] Bluetooth: hci1: command tx timeout [ 64.202245][ T5603] Bluetooth: hci2: command tx timeout [ 64.236938][ T197] bridge0: port 1(bridge_slave_0) entered blocking state [ 64.244094][ T197] bridge0: port 1(bridge_slave_0) entered forwarding state [ 64.268089][ T197] bridge0: port 2(bridge_slave_1) entered blocking state [ 64.275233][ T197] bridge0: port 2(bridge_slave_1) entered forwarding state [ 64.285512][ T5603] Bluetooth: hci0: command tx timeout [ 64.345663][ T5592] 8021q: adding VLAN 0 to HW filter on device bond0 [ 64.362762][ T5603] Bluetooth: hci4: command tx timeout [ 64.363012][ T49] Bluetooth: hci3: command tx timeout [ 64.409357][ T5598] 8021q: adding VLAN 0 to HW filter on device bond0 [ 64.431099][ T5592] 8021q: adding VLAN 0 to HW filter on device team0 [ 64.467415][ T5598] 8021q: adding VLAN 0 to HW filter on device team0 [ 64.497215][ T3013] bridge0: port 1(bridge_slave_0) entered blocking state [ 64.504367][ T3013] bridge0: port 1(bridge_slave_0) entered forwarding state [ 64.523427][ T234] bridge0: port 1(bridge_slave_0) entered blocking state [ 64.530570][ T234] bridge0: port 1(bridge_slave_0) entered forwarding state [ 64.542590][ T234] bridge0: port 2(bridge_slave_1) entered blocking state [ 64.549737][ T234] bridge0: port 2(bridge_slave_1) entered forwarding state [ 64.584900][ T197] bridge0: port 2(bridge_slave_1) entered blocking state [ 64.592037][ T197] bridge0: port 2(bridge_slave_1) entered forwarding state [ 64.792963][ T5591] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 64.940118][ T5591] veth0_vlan: entered promiscuous mode [ 64.973473][ T5591] veth1_vlan: entered promiscuous mode [ 65.067576][ T5593] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 65.087834][ T5591] veth0_macvtap: entered promiscuous mode [ 65.120932][ T5591] veth1_macvtap: entered promiscuous mode [ 65.196604][ T5602] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 65.222402][ T5591] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 65.253505][ T5591] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 65.305428][ T5593] veth0_vlan: entered promiscuous mode [ 65.353147][ T5602] veth0_vlan: entered promiscuous mode [ 65.384554][ T13] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 65.400392][ T5592] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 65.408721][ T5593] veth1_vlan: entered promiscuous mode [ 65.433885][ T13] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 65.457510][ T5602] veth1_vlan: entered promiscuous mode [ 65.476778][ T3013] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 65.547711][ T5598] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 65.600516][ T216] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 65.600723][ T5593] veth0_macvtap: entered promiscuous mode [ 65.626428][ T216] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 65.645069][ T5593] veth1_macvtap: entered promiscuous mode [ 65.675267][ T5602] veth0_macvtap: entered promiscuous mode [ 65.689850][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 65.691990][ T5602] veth1_macvtap: entered promiscuous mode [ 65.706104][ T47] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 65.715585][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 65.733068][ T5593] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 65.751246][ T29] kauditd_printk_skb: 2 callbacks suppressed [ 65.751260][ T29] audit: type=1400 audit(1787042347.709:153): avc: denied { mounton } for pid=5591 comm="syz-executor" path="/root/syzkaller.tm7LC6/syz-tmp" dev="sda1" ino=2042 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_home_t tclass=dir permissive=1 [ 65.755019][ T5593] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 65.772429][ T29] audit: type=1400 audit(1787042347.719:154): avc: denied { mount } for pid=5591 comm="syz-executor" name="/" dev="tmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 65.796788][ T1301] ieee802154 phy0 wpan0: encryption failed: -22 [ 65.813631][ T29] audit: type=1400 audit(1787042347.719:155): avc: denied { mounton } for pid=5591 comm="syz-executor" path="/root/syzkaller.tm7LC6/syz-tmp/newroot/dev" dev="tmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 65.820510][ T1301] ieee802154 phy1 wpan1: encryption failed: -22 [ 65.850741][ T29] audit: type=1400 audit(1787042347.719:156): avc: denied { mount } for pid=5591 comm="syz-executor" name="/" dev="proc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 65.879909][ T29] audit: type=1400 audit(1787042347.719:157): avc: denied { mounton } for pid=5591 comm="syz-executor" path="/root/syzkaller.tm7LC6/syz-tmp/newroot/sys/kernel/debug" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=dir permissive=1 [ 65.895927][ T5592] veth0_vlan: entered promiscuous mode [ 65.908297][ T29] audit: type=1400 audit(1787042347.719:158): avc: denied { mounton } for pid=5591 comm="syz-executor" path="/root/syzkaller.tm7LC6/syz-tmp/newroot/proc/sys/fs/binfmt_misc" dev="proc" ino=8272 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysctl_fs_t tclass=dir permissive=1 [ 65.940233][ T29] audit: type=1400 audit(1787042347.749:159): avc: denied { unmount } for pid=5591 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 65.962493][ T29] audit: type=1400 audit(1787042347.819:160): avc: denied { mounton } for pid=5591 comm="syz-executor" path="/dev/gadgetfs" dev="devtmpfs" ino=2780 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:device_t tclass=dir permissive=1 [ 65.962558][ T5602] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 65.987917][ T29] audit: type=1400 audit(1787042347.819:161): avc: denied { mount } for pid=5591 comm="syz-executor" name="/" dev="gadgetfs" ino=8277 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfs_t tclass=filesystem permissive=1 [ 66.016182][ T29] audit: type=1400 audit(1787042347.819:162): avc: denied { mount } for pid=5591 comm="syz-executor" name="/" dev="binder" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 66.055963][ T5591] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 66.076512][ T5602] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 66.085211][ T5598] veth0_vlan: entered promiscuous mode [ 66.124587][ T5592] veth1_vlan: entered promiscuous mode [ 66.133788][ T35] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.174544][ T5598] veth1_vlan: entered promiscuous mode [ 66.233079][ T5786] nvmet_tcp: malformed ip/port passed: :8009 [ 66.253795][ T3013] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.274355][ T49] Bluetooth: hci1: command tx timeout [ 66.275169][ T5603] Bluetooth: hci2: command tx timeout [ 66.310470][ T5592] veth0_macvtap: entered promiscuous mode [ 66.319894][ T5592] veth1_macvtap: entered promiscuous mode [ 66.354081][ T5603] Bluetooth: hci0: command tx timeout [ 66.362104][ T35] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 66.362359][ T5598] veth0_macvtap: entered promiscuous mode [ 66.373698][ T35] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 66.398208][ T5598] veth1_macvtap: entered promiscuous mode [ 66.425757][ T216] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 66.433877][ T5603] Bluetooth: hci3: command tx timeout [ 66.435170][ T216] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 66.445726][ T5603] Bluetooth: hci4: command tx timeout [ 66.450281][ T5592] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 66.467450][ T35] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 66.473458][ T5592] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 66.483358][ T35] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 66.529469][ T35] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 66.532460][ T5598] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 66.542381][ T35] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 66.566122][ T35] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.591693][ T5598] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 66.607986][ T9] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 66.675067][ T3013] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.694342][ T3013] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.756988][ T3013] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 66.772792][ T3013] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 66.808550][ T9] usb 2-1: Using ep0 maxpacket: 32 [ 66.825099][ T9] usb 2-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 66.863260][ T9] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 66.878258][ T9] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 66.894763][ T57] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.908266][ T9] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 66.922559][ T57] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 66.934715][ T57] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 66.944684][ T9] usb 2-1: config 0 descriptor?? [ 66.957344][ T5797] rt1719 0-0061: probe with driver rt1719 failed with error -5 [ 66.960051][ T9] hub 2-1:0.0: USB hub found [ 66.977126][ T3013] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.990042][ T5797] i2c i2c-0: new_device: Instantiated device rt1719 at 0x61 [ 67.006963][ T57] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 67.020962][ T5798] i2c i2c-0: Invalid 7-bit I2C address 0x00 [ 67.027287][ T57] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 67.110160][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 67.118350][ T57] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 67.131356][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 67.140296][ T57] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 67.174714][ T9] hub 2-1:0.0: 1 port detected [ 67.275443][ T216] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 67.297917][ T216] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 67.312698][ T216] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 67.346623][ T216] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 67.369154][ T216] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 67.398204][ T216] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 67.416430][ T216] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 67.508786][ T5813] capability: warning: `syz.4.11' uses 32-bit capabilities (legacy support in use) [ 67.524888][ T5813] overlayfs: missing 'lowerdir' [ 67.634688][ T5691] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 67.804855][ T5691] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 67.827550][ T5691] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 67.846196][ T5691] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 67.857211][ T5691] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 67.880354][ T5691] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 67.908911][ T5691] usb 4-1: config 0 descriptor?? [ 68.098920][ T5834] binder: 5833:5834 ioctl c0306201 0 returned -14 [ 68.183707][ T50] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 68.324877][ T50] usb 5-1: device descriptor read/64, error -71 [ 68.355847][ T5603] Bluetooth: hci1: command tx timeout [ 68.364515][ T5603] Bluetooth: hci2: command tx timeout [ 68.367540][ T5691] plantronics 0003:047F:FFFF.0001: unknown main item tag 0x0 [ 68.378386][ T5691] plantronics 0003:047F:FFFF.0001: unknown main item tag 0x0 [ 68.388139][ T5691] plantronics 0003:047F:FFFF.0001: unknown main item tag 0x0 [ 68.395606][ T5691] plantronics 0003:047F:FFFF.0001: unknown main item tag 0x0 [ 68.403027][ T5691] plantronics 0003:047F:FFFF.0001: unknown main item tag 0x0 [ 68.411771][ T5691] plantronics 0003:047F:FFFF.0001: unknown main item tag 0x0 [ 68.419260][ T5691] plantronics 0003:047F:FFFF.0001: unknown main item tag 0x0 [ 68.427790][ T5691] plantronics 0003:047F:FFFF.0001: unknown main item tag 0x0 [ 68.439858][ T5691] plantronics 0003:047F:FFFF.0001: unknown main item tag 0x0 [ 68.444057][ T5603] Bluetooth: hci0: command tx timeout [ 68.449830][ T5691] plantronics 0003:047F:FFFF.0001: unknown main item tag 0x0 [ 68.458196][ T9] hub 2-1:0.0: hub_hub_status failed (err = -32) [ 68.471195][ T9] hub 2-1:0.0: config failed, can't get hub status (err -32) [ 68.510202][ T9] usbhid 2-1:0.0: can't add hid device: -32 [ 68.512835][ T5691] plantronics 0003:047F:FFFF.0001: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.3-1/input0 [ 68.516546][ T5603] Bluetooth: hci4: command tx timeout [ 68.516571][ T5603] Bluetooth: hci3: command tx timeout [ 68.520767][ T9] usbhid 2-1:0.0: probe with driver usbhid failed with error -32 [ 68.587130][ T50] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 68.613002][ T9] usb 2-1: USB disconnect, device number 2 [ 68.729119][ T5691] usb 4-1: USB disconnect, device number 2 [ 68.735468][ T50] usb 5-1: device descriptor read/64, error -71 [ 68.867320][ T50] usb usb5-port1: attempt power cycle [ 69.215705][ T5799] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 69.223764][ T50] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 69.258921][ T50] usb 5-1: device descriptor read/8, error -71 [ 69.365520][ T5799] usb 1-1: device descriptor read/64, error -71 [ 69.493832][ T5609] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 69.503700][ T50] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 69.524078][ T50] usb 5-1: device descriptor read/8, error -71 [ 69.573721][ T188] usb 4-1: new full-speed USB device number 3 using dummy_hcd [ 69.613651][ T5799] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 69.633968][ T5609] usb 2-1: device descriptor read/64, error -71 [ 69.634085][ T50] usb usb5-port1: unable to enumerate USB device [ 69.673814][ T5705] usb 3-1: new full-speed USB device number 2 using dummy_hcd [ 69.715094][ T188] usb 4-1: device descriptor read/64, error -71 [ 69.743675][ T5799] usb 1-1: device descriptor read/64, error -71 [ 69.803741][ T5705] usb 3-1: device descriptor read/64, error -71 [ 69.854479][ T5799] usb usb1-port1: attempt power cycle [ 69.873769][ T5609] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 69.973733][ T188] usb 4-1: new full-speed USB device number 4 using dummy_hcd [ 70.013715][ T5609] usb 2-1: device descriptor read/64, error -71 [ 70.043836][ T5705] usb 3-1: new full-speed USB device number 3 using dummy_hcd [ 70.103692][ T188] usb 4-1: device descriptor read/64, error -71 [ 70.124727][ T5609] usb usb2-port1: attempt power cycle [ 70.183713][ T5705] usb 3-1: device descriptor read/64, error -71 [ 70.194705][ T5799] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 70.215693][ T188] usb usb4-port1: attempt power cycle [ 70.216276][ T5799] usb 1-1: device descriptor read/8, error -71 [ 70.294669][ T5705] usb usb3-port1: attempt power cycle [ 70.463693][ T5799] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 70.474022][ T5609] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 70.484011][ T5799] usb 1-1: device descriptor read/8, error -71 [ 70.504335][ T5609] usb 2-1: device descriptor read/8, error -71 [ 70.563674][ T188] usb 4-1: new full-speed USB device number 5 using dummy_hcd [ 70.584486][ T188] usb 4-1: device descriptor read/8, error -71 [ 70.594070][ T5799] usb usb1-port1: unable to enumerate USB device [ 70.653729][ T5705] usb 3-1: new full-speed USB device number 4 using dummy_hcd [ 70.686041][ T5705] usb 3-1: device descriptor read/8, error -71 [ 70.731550][ T5851] zram0: detected capacity change from 0 to 24 [ 70.753971][ T5609] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 70.774770][ T5609] usb 2-1: device descriptor read/8, error -71 [ 70.823679][ T188] usb 4-1: new full-speed USB device number 6 using dummy_hcd [ 70.845284][ T188] usb 4-1: device descriptor read/8, error -71 [ 70.895466][ T5609] usb usb2-port1: unable to enumerate USB device [ 70.953754][ T5705] usb 3-1: new full-speed USB device number 5 using dummy_hcd [ 70.961682][ T188] usb usb4-port1: unable to enumerate USB device [ 70.985492][ T5705] usb 3-1: device descriptor read/8, error -71 [ 71.093728][ T5799] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 71.104299][ T5705] usb usb3-port1: unable to enumerate USB device [ 71.243728][ T5799] usb 5-1: Using ep0 maxpacket: 8 [ 71.249413][ T5799] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 71.259949][ T5799] usb 5-1: config index 0 descriptor too short (expected 301, got 45) [ 71.268185][ T5799] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 71.278230][ T5799] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 71.288027][ T5799] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 71.298019][ T5799] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 71.312448][ T5799] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 71.530085][ T5799] usb 5-1: usb_control_msg returned -32 [ 71.535789][ T5799] usbtmc 5-1:16.0: can't read capabilities [ 71.884935][ T29] kauditd_printk_skb: 106 callbacks suppressed [ 71.884951][ T29] audit: type=1400 audit(1787042353.849:269): avc: denied { write } for pid=5852 comm="syz.4.27" name="usbtmc0" dev="devtmpfs" ino=2793 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 71.887673][ T5854] usbtmc 5-1:16.0: control status returned 0 [ 72.016646][ T49] Bluetooth: hci4: unexpected event 0x03 length: 1 < 11 [ 72.022418][ T29] audit: type=1400 audit(1787042353.979:270): avc: denied { read write } for pid=5855 comm="syz.0.28" name="ppp" dev="devtmpfs" ino=708 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 72.048355][ T29] audit: type=1400 audit(1787042353.979:271): avc: denied { open } for pid=5855 comm="syz.0.28" path="/dev/ppp" dev="devtmpfs" ino=708 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 72.072739][ T29] audit: type=1400 audit(1787042353.989:272): avc: denied { ioctl } for pid=5855 comm="syz.0.28" path="/dev/ppp" dev="devtmpfs" ino=708 ioctlcmd=0x7438 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 72.089279][ T5799] usb 5-1: USB disconnect, device number 6 [ 72.352770][ T5867] binder: 5866:5867 ioctl c0306201 0 returned -14 [ 72.381013][ T5869] overlayfs: missing 'lowerdir' [ 72.502486][ T29] audit: type=1400 audit(1787042354.459:273): avc: denied { write } for pid=5873 comm="syz.1.36" name="h" dev="configfs" ino=8816 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 72.527224][ T29] audit: type=1400 audit(1787042354.459:274): avc: denied { write } for pid=5873 comm="syz.1.36" name="h" dev="configfs" ino=8816 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 72.648814][ T5880] fuse: Unknown parameter 'grou00000000000000000000' [ 72.650322][ T29] audit: type=1400 audit(1787042354.619:275): avc: denied { read write } for pid=5879 comm="syz.4.38" name="fuse" dev="devtmpfs" ino=99 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fuse_device_t tclass=chr_file permissive=1 [ 72.684809][ T29] audit: type=1400 audit(1787042354.619:276): avc: denied { open } for pid=5879 comm="syz.4.38" path="/dev/fuse" dev="devtmpfs" ino=99 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fuse_device_t tclass=chr_file permissive=1 [ 72.778600][ T29] audit: type=1400 audit(1787042354.619:277): avc: denied { mounton } for pid=5879 comm="syz.4.38" path="/7/file0" dev="tmpfs" ino=59 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 72.809254][ T29] audit: type=1400 audit(1787042354.629:278): avc: denied { ioctl } for pid=5879 comm="syz.4.38" path="/dev/fuse" dev="devtmpfs" ino=99 ioctlcmd=0xe500 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fuse_device_t tclass=chr_file permissive=1 [ 72.963793][ T5609] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 73.093907][ T5609] usb 3-1: device descriptor read/64, error -71 [ 73.186575][ T5799] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 73.235610][ T5896] overlayfs: missing 'lowerdir' [ 73.325746][ T188] usb 5-1: new full-speed USB device number 7 using dummy_hcd [ 73.334175][ T5799] usb 2-1: device descriptor read/64, error -71 [ 73.338360][ T5609] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 73.475123][ T188] usb 5-1: device descriptor read/64, error -71 [ 73.481536][ T5609] usb 3-1: device descriptor read/64, error -71 [ 73.583887][ T5799] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 73.596485][ T5609] usb usb3-port1: attempt power cycle [ 73.723707][ T188] usb 5-1: new full-speed USB device number 8 using dummy_hcd [ 73.734395][ T5799] usb 2-1: device descriptor read/64, error -71 [ 73.797598][ T5903] i2c i2c-0: new_device: Missing parameters [ 73.854970][ T5799] usb usb2-port1: attempt power cycle [ 73.865563][ T188] usb 5-1: device descriptor read/64, error -71 [ 73.933667][ T5609] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 73.955563][ T5609] usb 3-1: device descriptor read/8, error -71 [ 73.974117][ T188] usb usb5-port1: attempt power cycle [ 73.978698][ T5908] fuse: Unknown parameter 'grou00000000000000000000' [ 74.203651][ T5609] usb 3-1: new high-speed USB device number 9 using dummy_hcd [ 74.203651][ T5799] usb 2-1: new high-speed USB device number 9 using dummy_hcd [ 74.229495][ T5920] binder: BINDER_SET_CONTEXT_MGR already set [ 74.232482][ T5609] usb 3-1: device descriptor read/8, error -71 [ 74.236666][ T5920] binder: 5919:5920 ioctl 4018620d 2000000002c0 returned -16 [ 74.259329][ T49] Bluetooth: hci3: unexpected event 0x03 length: 1 < 11 [ 74.266741][ T5799] usb 2-1: device descriptor read/8, error -71 [ 74.313671][ T188] usb 5-1: new full-speed USB device number 9 using dummy_hcd [ 74.334920][ T188] usb 5-1: device descriptor read/8, error -71 [ 74.354359][ T5609] usb usb3-port1: unable to enumerate USB device [ 74.503685][ T5799] usb 2-1: new high-speed USB device number 10 using dummy_hcd [ 74.524889][ T5799] usb 2-1: device descriptor read/8, error -71 [ 74.573711][ T188] usb 5-1: new full-speed USB device number 10 using dummy_hcd [ 74.595053][ T188] usb 5-1: device descriptor read/8, error -71 [ 74.635903][ T5799] usb usb2-port1: unable to enumerate USB device [ 74.704817][ T188] usb usb5-port1: unable to enumerate USB device [ 74.785462][ T5938] fuse: Unknown parameter 'grou00000000000000000000' [ 75.472750][ T49] Bluetooth: hci3: unexpected event 0x03 length: 1 < 11 [ 75.771857][ T5967] fuse: Unknown parameter 'group_i00000000000000000000' [ 75.996681][ T49] Bluetooth: hci4: unexpected event 0x03 length: 1 < 11 [ 76.042296][ T10] cfg80211: failed to load regulatory.db [ 76.433767][ T5691] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 76.513720][ T5705] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 76.553699][ T5799] usb 5-1: new high-speed USB device number 11 using dummy_hcd [ 76.623650][ T5691] usb 4-1: Using ep0 maxpacket: 8 [ 76.631966][ T5691] usb 4-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2e.04 [ 76.644799][ T5691] usb 4-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 76.657354][ T5691] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 76.663808][ T5705] usb 1-1: Using ep0 maxpacket: 8 [ 76.665830][ T5691] usb 4-1: Product: syz [ 76.672314][ T5705] usb 1-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2e.04 [ 76.674889][ T5691] usb 4-1: Manufacturer: syz [ 76.674908][ T5691] usb 4-1: SerialNumber: syz [ 76.688670][ T5691] usb 4-1: config 0 descriptor?? [ 76.707978][ T5705] usb 1-1: no configurations [ 76.715046][ T5799] usb 5-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 76.715871][ T5705] usb 1-1: can't read configurations, error -22 [ 76.739830][ T5799] usb 5-1: unable to read config index 0 descriptor/start: -61 [ 76.747752][ T5799] usb 5-1: can't read configurations, error -61 [ 76.868853][ T5994] fuse: Unknown parameter 'group_i00000000000000000000' [ 76.883707][ T5799] usb 5-1: new high-speed USB device number 12 using dummy_hcd [ 76.884250][ T5705] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 76.919748][ T50] usb 4-1: USB disconnect, device number 7 [ 76.991845][ T29] kauditd_printk_skb: 15 callbacks suppressed [ 76.991862][ T29] audit: type=1400 audit(1787042358.949:294): avc: denied { write } for pid=5998 comm="syz.2.89" name="h" dev="configfs" ino=8816 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 77.021384][ T29] audit: type=1400 audit(1787042358.959:295): avc: denied { write } for pid=5998 comm="syz.2.89" name="h" dev="configfs" ino=8816 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 77.063639][ T5705] usb 1-1: Using ep0 maxpacket: 8 [ 77.064207][ T5799] usb 5-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 77.069230][ T5705] usb 1-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2e.04 [ 77.079235][ T5799] usb 5-1: unable to read config index 0 descriptor/start: -61 [ 77.088740][ T5705] usb 1-1: no configurations [ 77.095181][ T5799] usb 5-1: can't read configurations, error -61 [ 77.100309][ T5705] usb 1-1: can't read configurations, error -22 [ 77.106640][ T5799] usb usb5-port1: attempt power cycle [ 77.115278][ T5705] usb usb1-port1: attempt power cycle [ 77.157039][ T49] Bluetooth: hci2: unexpected event 0x03 length: 1 < 11 [ 77.433665][ T50] usb 3-1: new full-speed USB device number 10 using dummy_hcd [ 77.453675][ T5799] usb 5-1: new high-speed USB device number 13 using dummy_hcd [ 77.476302][ T5705] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 77.488656][ T5799] usb 5-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 77.499554][ T5799] usb 5-1: unable to read config index 0 descriptor/start: -61 [ 77.507838][ T5799] usb 5-1: can't read configurations, error -61 [ 77.515089][ T5705] usb 1-1: Using ep0 maxpacket: 8 [ 77.524842][ T5705] usb 1-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2e.04 [ 77.552863][ T5705] usb 1-1: no configurations [ 77.556346][ T29] audit: type=1400 audit(1787042359.519:296): avc: denied { write } for pid=6011 comm="syz.3.95" name="h" dev="configfs" ino=8816 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 77.558372][ T5705] usb 1-1: can't read configurations, error -22 [ 77.581249][ T50] usb 3-1: device descriptor read/64, error -71 [ 77.592261][ T29] audit: type=1400 audit(1787042359.549:297): avc: denied { write } for pid=6011 comm="syz.3.95" name="h" dev="configfs" ino=8816 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 77.654037][ T5799] usb 5-1: new high-speed USB device number 14 using dummy_hcd [ 77.674994][ T5799] usb 5-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 77.685341][ T5799] usb 5-1: unable to read config index 0 descriptor/start: -61 [ 77.693422][ T5799] usb 5-1: can't read configurations, error -61 [ 77.700923][ T5799] usb usb5-port1: unable to enumerate USB device [ 77.713689][ T5705] usb 1-1: new high-speed USB device number 9 using dummy_hcd [ 77.744772][ T5705] usb 1-1: Using ep0 maxpacket: 8 [ 77.751334][ T5705] usb 1-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2e.04 [ 77.763236][ T5705] usb 1-1: no configurations [ 77.767936][ T5705] usb 1-1: can't read configurations, error -22 [ 77.775742][ T5705] usb usb1-port1: unable to enumerate USB device [ 77.833764][ T50] usb 3-1: new full-speed USB device number 11 using dummy_hcd [ 77.974182][ T50] usb 3-1: device descriptor read/64, error -71 [ 78.020361][ T6024] fuse: Unknown parameter 'group_i00000000000000000000' [ 78.086880][ T50] usb usb3-port1: attempt power cycle [ 78.199111][ T29] audit: type=1400 audit(1787042360.159:298): avc: denied { write } for pid=6029 comm="syz.1.103" name="h" dev="configfs" ino=8816 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 78.221938][ T29] audit: type=1400 audit(1787042360.159:299): avc: denied { write } for pid=6029 comm="syz.1.103" name="h" dev="configfs" ino=8816 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 78.343541][ T49] Bluetooth: hci1: unexpected event 0x03 length: 1 < 11 [ 78.433697][ T50] usb 3-1: new full-speed USB device number 12 using dummy_hcd [ 78.454312][ T50] usb 3-1: device descriptor read/8, error -71 [ 78.623963][ T5705] usb 2-1: new high-speed USB device number 11 using dummy_hcd [ 78.693688][ T50] usb 3-1: new full-speed USB device number 13 using dummy_hcd [ 78.715206][ T50] usb 3-1: device descriptor read/8, error -71 [ 78.764561][ T5705] usb 2-1: device descriptor read/64, error -71 [ 78.833930][ T50] usb usb3-port1: unable to enumerate USB device [ 79.043816][ T5705] usb 2-1: new high-speed USB device number 12 using dummy_hcd [ 79.204743][ T5705] usb 2-1: device descriptor read/64, error -71 [ 79.318381][ T5705] usb usb2-port1: attempt power cycle [ 79.448215][ T6052] fuse: Unknown parameter 'group_id00000000000000000000' [ 79.594524][ T29] audit: type=1400 audit(1787042361.559:300): avc: denied { write } for pid=6055 comm="syz.4.115" name="h" dev="configfs" ino=8816 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 79.617504][ T29] audit: type=1400 audit(1787042361.559:301): avc: denied { write } for pid=6055 comm="syz.4.115" name="h" dev="configfs" ino=8816 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 79.686016][ T5705] usb 2-1: new high-speed USB device number 13 using dummy_hcd [ 79.714910][ T5705] usb 2-1: device descriptor read/8, error -71 [ 79.749433][ T6059] overlayfs: missing 'workdir' [ 79.953740][ T5705] usb 2-1: new high-speed USB device number 14 using dummy_hcd [ 79.974338][ T5705] usb 2-1: device descriptor read/8, error -71 [ 80.094294][ T5705] usb usb2-port1: unable to enumerate USB device [ 80.343705][ T50] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 80.474219][ T10] usb 1-1: new high-speed USB device number 10 using dummy_hcd [ 80.504129][ T50] usb 4-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 80.529425][ T29] audit: type=1400 audit(1787042362.489:302): avc: denied { unmount } for pid=6076 comm="syz.2.124" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 80.536460][ T50] usb 4-1: unable to read config index 0 descriptor/start: -61 [ 80.574120][ T50] usb 4-1: can't read configurations, error -61 [ 80.633874][ T6079] fuse: Unknown parameter 'group_id00000000000000000000' [ 80.643640][ T10] usb 1-1: Using ep0 maxpacket: 8 [ 80.653087][ T10] usb 1-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2e.04 [ 80.670206][ T10] usb 1-1: no configurations [ 80.685928][ T10] usb 1-1: can't read configurations, error -22 [ 80.699869][ T29] audit: type=1400 audit(1787042362.659:303): avc: denied { write } for pid=6080 comm="syz.2.126" name="h" dev="configfs" ino=8816 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 80.724364][ T50] usb 4-1: new high-speed USB device number 9 using dummy_hcd [ 80.824278][ T10] usb 1-1: new high-speed USB device number 11 using dummy_hcd [ 80.885356][ T50] usb 4-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 80.911855][ T50] usb 4-1: unable to read config index 0 descriptor/start: -61 [ 80.920816][ T50] usb 4-1: can't read configurations, error -61 [ 80.936575][ T50] usb usb4-port1: attempt power cycle [ 81.016405][ T10] usb 1-1: Using ep0 maxpacket: 8 [ 81.031211][ T10] usb 1-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2e.04 [ 81.041087][ T10] usb 1-1: no configurations [ 81.045890][ T10] usb 1-1: can't read configurations, error -22 [ 81.060539][ T10] usb usb1-port1: attempt power cycle [ 81.274005][ T50] usb 4-1: new high-speed USB device number 10 using dummy_hcd [ 81.314451][ T50] usb 4-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 81.331370][ T50] usb 4-1: unable to read config index 0 descriptor/start: -61 [ 81.340634][ T50] usb 4-1: can't read configurations, error -61 [ 81.416770][ T10] usb 1-1: new high-speed USB device number 12 using dummy_hcd [ 81.474340][ T50] usb 4-1: new high-speed USB device number 11 using dummy_hcd [ 81.479218][ T10] usb 1-1: Using ep0 maxpacket: 8 [ 81.488332][ T10] usb 1-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2e.04 [ 81.494618][ T50] usb 4-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 81.500184][ T10] usb 1-1: no configurations [ 81.508276][ T50] usb 4-1: unable to read config index 0 descriptor/start: -61 [ 81.511183][ T10] usb 1-1: can't read configurations, error -22 [ 81.525451][ T50] usb 4-1: can't read configurations, error -61 [ 81.532120][ T50] usb usb4-port1: unable to enumerate USB device [ 81.655849][ T10] usb 1-1: new high-speed USB device number 13 using dummy_hcd [ 81.694319][ T10] usb 1-1: Using ep0 maxpacket: 8 [ 81.704075][ T10] usb 1-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2e.04 [ 81.713246][ T10] usb 1-1: no configurations [ 81.718335][ T10] usb 1-1: can't read configurations, error -22 [ 81.725033][ T10] usb usb1-port1: unable to enumerate USB device [ 81.826196][ T5712] usb 2-1: new full-speed USB device number 15 using dummy_hcd [ 81.995577][ T5712] usb 2-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 82.010589][ T5712] usb 2-1: config 0 interface 0 altsetting 255 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 82.047732][ T5712] usb 2-1: config 0 interface 0 altsetting 255 endpoint 0x8F has invalid wMaxPacketSize 0 [ 82.063875][ T5712] usb 2-1: config 0 interface 0 has no altsetting 0 [ 82.077779][ T5712] usb 2-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 82.090729][ T5712] usb 2-1: Product: syz [ 82.095229][ T5712] usb 2-1: Manufacturer: syz [ 82.100269][ T5712] usb 2-1: SerialNumber: syz [ 82.119454][ T5712] usb 2-1: config 0 descriptor?? [ 82.136361][ T5712] usb 2-1: selecting invalid altsetting 0 [ 82.149354][ T6106] fuse: Unknown parameter 'group_id00000000000000000000' [ 82.378219][ T5712] usb 2-1: USB disconnect, device number 15 [ 82.393851][ T29] kauditd_printk_skb: 1 callbacks suppressed [ 82.393863][ T29] audit: type=1400 audit(1787042364.349:305): avc: denied { create } for pid=6112 comm="syz.2.140" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 82.408272][ T6113] netlink: 'syz.2.140': attribute type 2 has an invalid length. [ 82.421432][ T29] audit: type=1400 audit(1787042364.359:306): avc: denied { listen } for pid=6112 comm="syz.2.140" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 82.512458][ T29] audit: type=1400 audit(1787042364.399:307): avc: denied { connect } for pid=6112 comm="syz.2.140" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 82.532792][ T29] audit: type=1400 audit(1787042364.399:308): avc: denied { write } for pid=6112 comm="syz.2.140" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 82.552731][ T29] audit: type=1400 audit(1787042364.449:309): avc: denied { accept } for pid=6112 comm="syz.2.140" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 83.101804][ T6131] fuse: Bad value for 'user_id' [ 83.110016][ T6131] fuse: Bad value for 'user_id' [ 83.347963][ T6147] netlink: 'syz.3.154': attribute type 2 has an invalid length. [ 83.658214][ T29] audit: type=1400 audit(1787042365.619:310): avc: denied { unlink } for pid=6159 comm="syz.2.160" name="#1" dev="tmpfs" ino=199 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 83.658240][ T6160] overlayfs: upper fs does not support file handles, falling back to index=off. [ 83.707409][ T29] audit: type=1400 audit(1787042365.669:311): avc: denied { mount } for pid=6159 comm="syz.2.160" name="/" dev="overlay" ino=194 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 83.893645][ T5705] usb 1-1: new high-speed USB device number 14 using dummy_hcd [ 83.917110][ T6167] fuse: Bad value for 'user_id' [ 83.930352][ T6167] fuse: Bad value for 'user_id' [ 83.994503][ T6169] Zero length message leads to an empty skb [ 84.005784][ T10] usb 5-1: new high-speed USB device number 15 using dummy_hcd [ 84.068494][ T5705] usb 1-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 84.089988][ T5705] usb 1-1: unable to read config index 0 descriptor/start: -61 [ 84.103283][ T5705] usb 1-1: can't read configurations, error -61 [ 84.173651][ T10] usb 5-1: Using ep0 maxpacket: 8 [ 84.189230][ T10] usb 5-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2e.04 [ 84.218373][ T10] usb 5-1: no configurations [ 84.233173][ T10] usb 5-1: can't read configurations, error -22 [ 84.244965][ T5705] usb 1-1: new high-speed USB device number 15 using dummy_hcd [ 84.383682][ T10] usb 5-1: new high-speed USB device number 16 using dummy_hcd [ 84.414120][ T5705] usb 1-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 84.424581][ T5705] usb 1-1: unable to read config index 0 descriptor/start: -61 [ 84.432164][ T5705] usb 1-1: can't read configurations, error -61 [ 84.439220][ T5705] usb usb1-port1: attempt power cycle [ 84.503670][ T5609] usb 2-1: new high-speed USB device number 16 using dummy_hcd [ 84.530178][ T6189] overlayfs: upper fs does not support file handles, falling back to index=off. [ 84.533692][ T10] usb 5-1: Using ep0 maxpacket: 8 [ 84.546410][ T10] usb 5-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2e.04 [ 84.555674][ T10] usb 5-1: no configurations [ 84.560371][ T10] usb 5-1: can't read configurations, error -22 [ 84.567242][ T10] usb usb5-port1: attempt power cycle [ 84.596323][ T6191] fuse: Bad value for 'user_id' [ 84.601275][ T6191] fuse: Bad value for 'user_id' [ 84.665740][ T5609] usb 2-1: Using ep0 maxpacket: 32 [ 84.671320][ T5609] usb 2-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 84.681651][ T5609] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 84.692676][ T5609] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 84.702508][ T5609] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 84.716389][ T5609] usb 2-1: config 0 descriptor?? [ 84.737906][ T5609] hub 2-1:0.0: USB hub found [ 84.784795][ T5705] usb 1-1: new high-speed USB device number 16 using dummy_hcd [ 84.814786][ T5705] usb 1-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 84.828129][ T5705] usb 1-1: unable to read config index 0 descriptor/start: -61 [ 84.844147][ T5705] usb 1-1: can't read configurations, error -61 [ 84.903699][ T10] usb 5-1: new high-speed USB device number 17 using dummy_hcd [ 84.924339][ T10] usb 5-1: Using ep0 maxpacket: 8 [ 84.929906][ T10] usb 5-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2e.04 [ 84.939049][ T10] usb 5-1: no configurations [ 84.943750][ T10] usb 5-1: can't read configurations, error -22 [ 84.950384][ T5609] hub 2-1:0.0: 1 port detected [ 84.973717][ T5705] usb 1-1: new high-speed USB device number 17 using dummy_hcd [ 84.994604][ T5705] usb 1-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 85.005238][ T5705] usb 1-1: unable to read config index 0 descriptor/start: -61 [ 85.012823][ T5705] usb 1-1: can't read configurations, error -61 [ 85.019515][ T5705] usb usb1-port1: unable to enumerate USB device [ 85.083723][ T10] usb 5-1: new high-speed USB device number 18 using dummy_hcd [ 85.104296][ T10] usb 5-1: Using ep0 maxpacket: 8 [ 85.110203][ T10] usb 5-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2e.04 [ 85.119691][ T10] usb 5-1: no configurations [ 85.124357][ T10] usb 5-1: can't read configurations, error -22 [ 85.131517][ T10] usb usb5-port1: unable to enumerate USB device [ 85.156624][ T5609] hub 2-1:0.0: hub_hub_status failed (err = -71) [ 85.166061][ T5609] hub 2-1:0.0: config failed, can't get hub status (err -71) [ 85.178778][ T5609] usbhid 2-1:0.0: can't add hid device: -71 [ 85.185355][ T5609] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 85.187289][ T6203] netlink: 40 bytes leftover after parsing attributes in process `syz.2.178'. [ 85.215418][ T5609] usb 2-1: USB disconnect, device number 16 [ 85.838728][ T6213] overlayfs: upper fs does not support file handles, falling back to index=off. [ 85.910294][ T6216] fuse: Bad value for 'fd' [ 86.223651][ T5609] usb 2-1: new high-speed USB device number 17 using dummy_hcd [ 86.302433][ T29] audit: type=1400 audit(1787042368.259:312): avc: denied { create } for pid=6226 comm="syz.3.188" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 86.366904][ T6227] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 86.454658][ T5609] usb 2-1: New USB device found, idVendor=0b48, idProduct=1008, bcdDevice= 1.00 [ 86.543477][ T29] audit: type=1400 audit(1787042368.499:313): avc: denied { create } for pid=6226 comm="syz.3.188" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 86.584829][ T6230] nbd0: detected capacity change from 0 to 127 [ 86.762125][ T29] audit: type=1400 audit(1787042368.529:314): avc: denied { ioctl } for pid=6226 comm="syz.3.188" path="socket:[11393]" dev="sockfs" ino=11393 ioctlcmd=0x890b scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 86.914867][ T4913] Bluetooth: hci0: command 0x0406 tx timeout [ 87.177259][ T5603] block nbd0: Receive control failed (result -104) [ 87.216199][ T5609] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 87.226472][ T5609] usb 2-1: config 1 has 0 interfaces, different from the descriptor's value: 1 [ 87.235545][ T5609] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 87.361461][ T6243] binder: 6240:6243 ioctl c0306201 0 returned -14 [ 87.452991][ T6251] overlayfs: upper fs does not support file handles, falling back to index=off. [ 87.479095][ T5712] usb 2-1: USB disconnect, device number 17 [ 87.490771][ T29] kauditd_printk_skb: 3 callbacks suppressed [ 87.490787][ T29] audit: type=1400 audit(1787042369.449:318): avc: denied { write } for pid=6252 comm="syz.2.196" name="h" dev="configfs" ino=8816 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 87.543981][ T29] audit: type=1400 audit(1787042369.449:319): avc: denied { write } for pid=6252 comm="syz.2.196" name="h" dev="configfs" ino=8816 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 87.707945][ T29] audit: type=1400 audit(1787042369.659:320): avc: denied { write } for pid=6234 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 87.782973][ T29] audit: type=1400 audit(1787042369.739:321): avc: denied { write } for pid=6266 comm="syz.3.199" name="h" dev="configfs" ino=8816 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 87.836251][ T29] audit: type=1400 audit(1787042369.739:322): avc: denied { write } for pid=6266 comm="syz.3.199" name="h" dev="configfs" ino=8816 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 87.867722][ T6272] netlink: 'syz.4.201': attribute type 2 has an invalid length. [ 87.884987][ T29] audit: type=1400 audit(1787042369.849:323): avc: denied { write } for pid=6273 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 88.193852][ T5691] usb 4-1: new high-speed USB device number 12 using dummy_hcd [ 88.295213][ T6289] vhci_hcd vhci_hcd.0: remove, state 4 [ 88.314039][ T6289] usb usb34: USB disconnect, device number 1 [ 88.350525][ T29] audit: type=1400 audit(1787042370.309:324): avc: denied { write } for pid=6279 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 88.399360][ T5691] usb 4-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 88.417900][ T5691] usb 4-1: unable to read config index 0 descriptor/start: -61 [ 88.425745][ T5691] usb 4-1: can't read configurations, error -61 [ 88.482872][ T47] vhci_hcd vhci_hcd.0: stop threads [ 88.499089][ T47] vhci_hcd vhci_hcd.0: release socket [ 88.516349][ T47] vhci_hcd vhci_hcd.0: disconnect device [ 88.542339][ T47] vhci_hcd vhci_hcd.0: stop threads [ 88.557314][ T47] vhci_hcd vhci_hcd.0: release socket [ 88.567643][ T6298] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 88.583094][ T5691] usb 4-1: new high-speed USB device number 13 using dummy_hcd [ 88.597759][ T47] vhci_hcd vhci_hcd.0: disconnect device [ 88.611662][ T29] audit: type=1400 audit(1787042370.559:325): avc: denied { write } for pid=6300 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 88.637261][ T47] vhci_hcd vhci_hcd.0: stop threads [ 88.646338][ T47] vhci_hcd vhci_hcd.0: release socket [ 88.662808][ T47] vhci_hcd vhci_hcd.0: disconnect device [ 88.679375][ T47] vhci_hcd vhci_hcd.0: stop threads [ 88.692398][ T6304] overlayfs: upper fs does not support file handles, falling back to index=off. [ 88.756381][ T5691] usb 4-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 88.770869][ T47] vhci_hcd vhci_hcd.0: release socket [ 88.776747][ T47] vhci_hcd vhci_hcd.0: disconnect device [ 88.782658][ T47] vhci_hcd vhci_hcd.0: stop threads [ 88.788647][ T47] vhci_hcd vhci_hcd.0: release socket [ 88.794332][ T5691] usb 4-1: unable to read config index 0 descriptor/start: -61 [ 88.802236][ T5691] usb 4-1: can't read configurations, error -61 [ 88.808659][ T47] vhci_hcd vhci_hcd.0: disconnect device [ 88.816960][ T5691] usb usb4-port1: attempt power cycle [ 88.822439][ T47] vhci_hcd vhci_hcd.0: stop threads [ 88.828879][ T47] vhci_hcd vhci_hcd.0: release socket [ 88.834684][ T47] vhci_hcd vhci_hcd.0: disconnect device [ 88.841284][ T47] vhci_hcd vhci_hcd.0: stop threads [ 88.846773][ T47] vhci_hcd vhci_hcd.0: release socket [ 88.852270][ T47] vhci_hcd vhci_hcd.0: disconnect device [ 88.858755][ T47] vhci_hcd vhci_hcd.0: stop threads [ 88.864128][ T6302] nbd1: detected capacity change from 0 to 127 [ 88.873014][ T5603] block nbd1: Receive control failed (result -32) [ 88.888418][ T4926] block nbd1: Dead connection, failed to find a fallback [ 88.896520][ T4926] block nbd1: shutting down sockets [ 88.904619][ T4926] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 88.914469][ T4926] Buffer I/O error on dev nbd1, logical block 0, async page read [ 88.919096][ T47] vhci_hcd vhci_hcd.0: release socket [ 88.922658][ T4926] I/O error, dev nbd1, sector 2 op 0x0:(READ) flags 0x800000 phys_seg 3 prio class 2 [ 88.937538][ T4926] Buffer I/O error on dev nbd1, logical block 1, async page read [ 88.945356][ T4926] Buffer I/O error on dev nbd1, logical block 2, async page read [ 88.955588][ T4926] Buffer I/O error on dev nbd1, logical block 3, async page read [ 88.968441][ T6305] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 88.978413][ T6305] Buffer I/O error on dev nbd1, logical block 0, async page read [ 88.989993][ T6305] I/O error, dev nbd1, sector 2 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 88.999778][ T6305] Buffer I/O error on dev nbd1, logical block 1, async page read [ 89.008289][ T6305] I/O error, dev nbd1, sector 4 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 89.017878][ T6305] Buffer I/O error on dev nbd1, logical block 2, async page read [ 89.028629][ T6305] I/O error, dev nbd1, sector 6 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 89.038240][ T6305] Buffer I/O error on dev nbd1, logical block 3, async page read [ 89.048029][ T6305] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 4 prio class 2 [ 89.058747][ T6305] Buffer I/O error on dev nbd1, logical block 0, async page read [ 89.066920][ T6305] Buffer I/O error on dev nbd1, logical block 1, async page read [ 89.075222][ T6305] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 4 prio class 2 [ 89.084990][ T6305] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 4 prio class 2 [ 89.097209][ T6305] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 4 prio class 2 [ 89.107173][ T5600] ldm_validate_partition_table(): Disk read failed. [ 89.114588][ T47] vhci_hcd vhci_hcd.0: disconnect device [ 89.120548][ T6289] vhci_hcd vhci_hcd.0: USB bus 34 deregistered [ 89.129346][ T5600] Dev nbd1: unable to read RDB block 0 [ 89.139140][ T5600] nbd1: unable to read partition table [ 89.147658][ T6289] vhci_hcd vhci_hcd.0: remove, state 4 [ 89.153161][ T6289] usb usb33: USB disconnect, device number 1 [ 89.160507][ T29] audit: type=1400 audit(1787042371.119:326): avc: denied { write } for pid=6312 comm="syz.1.209" name="h" dev="configfs" ino=8816 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 89.182597][ T5691] usb 4-1: new high-speed USB device number 14 using dummy_hcd [ 89.195400][ T29] audit: type=1400 audit(1787042371.119:327): avc: denied { write } for pid=6312 comm="syz.1.209" name="h" dev="configfs" ino=8816 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 89.244209][ T5691] usb 4-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 89.254957][ T5691] usb 4-1: unable to read config index 0 descriptor/start: -61 [ 89.260829][ T5600] ldm_validate_partition_table(): Disk read failed. [ 89.264190][ T5691] usb 4-1: can't read configurations, error -61 [ 89.278280][ T6289] vhci_hcd vhci_hcd.0: USB bus 33 deregistered [ 89.285343][ T197] vhci_hcd vhci_hcd.0: stop threads [ 89.304796][ T5600] Dev nbd1: unable to read RDB block 0 [ 89.313046][ T197] vhci_hcd vhci_hcd.0: release socket [ 89.337197][ T5600] nbd1: unable to read partition table [ 89.346455][ T197] ================================================================== [ 89.354539][ T197] BUG: KASAN: slab-use-after-free in vhci_cleanup_unlink_list+0x44/0x456 [ 89.362965][ T197] Read of size 4 at addr ffff888029f28450 by task kworker/u8:5/197 [ 89.370856][ T197] [ 89.373177][ T197] CPU: 0 UID: 0 PID: 197 Comm: kworker/u8:5 Not tainted syzkaller #0 PREEMPT(full) [ 89.373193][ T197] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 89.373203][ T197] Workqueue: usbip_event event_handler [ 89.373222][ T197] Call Trace: [ 89.373227][ T197] [ 89.373232][ T197] dump_stack_lvl+0x100/0x190 [ 89.373250][ T197] print_report+0x13d/0x4b0 [ 89.373269][ T197] ? __virt_addr_valid+0x239/0x430 [ 89.373287][ T197] ? vhci_cleanup_unlink_list+0x44/0x456 [ 89.373307][ T197] kasan_report+0xdf/0x1c0 [ 89.373326][ T197] ? vhci_cleanup_unlink_list+0x44/0x456 [ 89.373347][ T197] vhci_cleanup_unlink_list+0x44/0x456 [ 89.373369][ T197] vhci_shutdown_connection.cold+0x165/0x37c [ 89.373390][ T197] event_handler+0x216/0x570 [ 89.373404][ T197] process_one_work+0xa23/0x1940 [ 89.373422][ T197] ? __pfx_process_one_work+0x10/0x10 [ 89.373439][ T197] ? __pfx_event_handler+0x10/0x10 [ 89.373453][ T197] worker_thread+0x5ef/0xe50 [ 89.373470][ T197] ? kthread+0x13a/0x450 [ 89.373482][ T197] ? __pfx_worker_thread+0x10/0x10 [ 89.373496][ T197] kthread+0x370/0x450 [ 89.373508][ T197] ? __pfx_kthread+0x10/0x10 [ 89.373521][ T197] ret_from_fork+0x72b/0xd50 [ 89.373540][ T197] ? __pfx_ret_from_fork+0x10/0x10 [ 89.373560][ T197] ? __switch_to+0x800/0x10f0 [ 89.373576][ T197] ? __pfx_kthread+0x10/0x10 [ 89.373590][ T197] ret_from_fork_asm+0x1a/0x30 [ 89.373613][ T197] [ 89.373618][ T197] [ 89.516773][ T197] Allocated by task 1: [ 89.520819][ T197] kasan_save_stack+0x30/0x50 [ 89.525480][ T197] kasan_save_track+0x14/0x30 [ 89.530133][ T197] __kasan_kmalloc+0xaa/0xb0 [ 89.534701][ T197] __kmalloc_noprof+0x322/0x820 [ 89.539531][ T197] __usb_create_hcd+0x5e/0xac0 [ 89.544277][ T197] vhci_hcd_probe+0xf3/0x4e0 [ 89.548845][ T197] platform_probe+0x106/0x1d0 [ 89.553499][ T197] really_probe+0x241/0xa60 [ 89.557994][ T197] __driver_probe_device+0x20e/0x450 [ 89.563264][ T197] driver_probe_device+0x4a/0x140 [ 89.568267][ T197] __device_attach_driver+0x1df/0x320 [ 89.573634][ T197] bus_for_each_drv+0x159/0x1e0 [ 89.578463][ T197] __device_attach+0x1e4/0x4d0 [ 89.583205][ T197] device_initial_probe+0xaf/0xd0 [ 89.588209][ T197] bus_probe_device+0x64/0x160 [ 89.592953][ T197] device_add+0x121d/0x1970 [ 89.597440][ T197] platform_device_add+0x35a/0x800 [ 89.602526][ T197] platform_device_register_full+0x5cf/0x830 [ 89.608483][ T197] vhci_hcd_init+0x1a1/0x2f0 [ 89.613055][ T197] do_one_initcall+0x11d/0x700 [ 89.617800][ T197] kernel_init_freeable+0x6ea/0x7b0 [ 89.622979][ T197] kernel_init+0x21/0x1e0 [ 89.627294][ T197] ret_from_fork+0x72b/0xd50 [ 89.631864][ T197] ret_from_fork_asm+0x1a/0x30 [ 89.636622][ T197] [ 89.638930][ T197] Freed by task 6289: [ 89.642894][ T197] kasan_save_stack+0x30/0x50 [ 89.647549][ T197] kasan_save_track+0x14/0x30 [ 89.652204][ T197] kasan_save_free_info+0x3b/0x70 [ 89.657203][ T197] __kasan_slab_free+0x5f/0x80 [ 89.661946][ T197] kfree+0x22b/0x6c0 [ 89.665819][ T197] usb_put_hcd+0x149/0x1f0 [ 89.670219][ T197] vhci_hcd_remove+0x107/0x1b0 [ 89.674958][ T197] platform_remove+0x5f/0x80 [ 89.679525][ T197] device_remove+0xcb/0x180 [ 89.684005][ T197] device_release_driver_internal+0x44e/0x620 [ 89.690062][ T197] unbind_store+0xf8/0x110 [ 89.694471][ T197] drv_attr_store+0x74/0xb0 [ 89.698970][ T197] sysfs_kf_write+0xf2/0x150 [ 89.703548][ T197] kernfs_fop_write_iter+0x3e0/0x5f0 [ 89.708823][ T197] vfs_write+0x6ac/0x1050 [ 89.713132][ T197] ksys_write+0x12a/0x250 [ 89.717449][ T197] do_syscall_64+0x115/0x870 [ 89.722023][ T197] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 89.727891][ T197] [ 89.730192][ T197] Last potentially related work creation: [ 89.736062][ T197] kasan_save_stack+0x30/0x50 [ 89.740725][ T197] kasan_record_aux_stack+0xa7/0xc0 [ 89.745914][ T197] insert_work+0x36/0x230 [ 89.750223][ T197] __queue_work+0x9bc/0x12b0 [ 89.754789][ T197] queue_work_on+0x1a9/0x1e0 [ 89.759372][ T197] usb_hcd_giveback_urb+0x330/0x4a0 [ 89.764562][ T197] unlink1+0x418/0x510 [ 89.768613][ T197] usb_hcd_unlink_urb+0x131/0x210 [ 89.773621][ T197] usb_kill_urb+0x121/0x320 [ 89.778099][ T197] hub_quiesce+0x1e9/0x320 [ 89.782493][ T197] hub_suspend+0x4ab/0x9e0 [ 89.786887][ T197] usb_suspend_both+0x288/0x950 [ 89.791718][ T197] usb_runtime_suspend+0x49/0x120 [ 89.796723][ T197] __rpm_callback+0xc8/0x620 [ 89.801294][ T197] rpm_callback+0x16a/0x1b0 [ 89.805778][ T197] rpm_suspend+0x2f4/0x11a0 [ 89.810263][ T197] __pm_runtime_suspend+0xba/0x1a0 [ 89.815365][ T197] usb_new_device.part.0+0x1653/0x1686 [ 89.820835][ T197] register_root_hub+0x4e6/0x639 [ 89.825770][ T197] usb_add_hcd.cold+0xccd/0x1158 [ 89.830694][ T197] vhci_hcd_probe+0x14b/0x4e0 [ 89.835350][ T197] platform_probe+0x106/0x1d0 [ 89.840008][ T197] really_probe+0x241/0xa60 [ 89.844504][ T197] __driver_probe_device+0x20e/0x450 [ 89.849772][ T197] driver_probe_device+0x4a/0x140 [ 89.854788][ T197] __device_attach_driver+0x1df/0x320 [ 89.860346][ T197] bus_for_each_drv+0x159/0x1e0 [ 89.865177][ T197] __device_attach+0x1e4/0x4d0 [ 89.869921][ T197] device_initial_probe+0xaf/0xd0 [ 89.874938][ T197] bus_probe_device+0x64/0x160 [ 89.879765][ T197] device_add+0x121d/0x1970 [ 89.884260][ T197] platform_device_add+0x35a/0x800 [ 89.889352][ T197] platform_device_register_full+0x5cf/0x830 [ 89.895309][ T197] vhci_hcd_init+0x1a1/0x2f0 [ 89.899897][ T197] do_one_initcall+0x11d/0x700 [ 89.904642][ T197] kernel_init_freeable+0x6ea/0x7b0 [ 89.909841][ T197] kernel_init+0x21/0x1e0 [ 89.914154][ T197] ret_from_fork+0x72b/0xd50 [ 89.918727][ T197] ret_from_fork_asm+0x1a/0x30 [ 89.923472][ T197] [ 89.925771][ T197] Second to last potentially related work creation: [ 89.932329][ T197] kasan_save_stack+0x30/0x50 [ 89.936984][ T197] kasan_record_aux_stack+0xa7/0xc0 [ 89.942158][ T197] insert_work+0x36/0x230 [ 89.946466][ T197] __queue_work+0x9bc/0x12b0 [ 89.951036][ T197] queue_work_on+0x1a9/0x1e0 [ 89.955602][ T197] usb_hcd_giveback_urb+0x3b8/0x4a0 [ 89.960787][ T197] usb_hcd_submit_urb+0xab7/0x2150 [ 89.965886][ T197] usb_submit_urb+0x827/0x19b0 [ 89.970627][ T197] usb_start_wait_urb+0x10e/0x580 [ 89.975629][ T197] usb_control_msg+0x328/0x4b0 [ 89.980369][ T197] hub_ext_port_status+0x152/0x600 [ 89.985458][ T197] hub_activate+0x6e5/0x1c40 [ 89.990025][ T197] process_one_work+0xa23/0x1940 [ 89.994940][ T197] worker_thread+0x5ef/0xe50 [ 89.999517][ T197] kthread+0x370/0x450 [ 90.003561][ T197] ret_from_fork+0x72b/0xd50 [ 90.008141][ T197] ret_from_fork_asm+0x1a/0x30 [ 90.012891][ T197] [ 90.015189][ T197] The buggy address belongs to the object at ffff888029f28000 [ 90.015189][ T197] which belongs to the cache kmalloc-8k of size 8192 [ 90.029227][ T197] The buggy address is located 1104 bytes inside of [ 90.029227][ T197] freed 8192-byte region [ffff888029f28000, ffff888029f2a000) [ 90.043179][ T197] [ 90.045483][ T197] The buggy address belongs to the physical page: [ 90.051867][ T197] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x29f28 [ 90.060609][ T197] head: order:3 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 90.069089][ T197] flags: 0xfff00000000040(head|node=0|zone=1|lastcpupid=0x7ff) [ 90.076608][ T197] page_type: f5(slab) [ 90.080581][ T197] raw: 00fff00000000040 ffff88801c028280 dead000000000122 0000000000000000 [ 90.089138][ T197] raw: 0000000000000000 0000000800020002 00000000f5000000 0000000000000000 [ 90.097890][ T197] head: 00fff00000000040 ffff88801c028280 dead000000000122 0000000000000000 [ 90.106547][ T197] head: 0000000000000000 0000000800020002 00000000f5000000 0000000000000000 [ 90.115197][ T197] head: 00fff00000000003 fffffffffffffe01 00000000ffffffff 00000000ffffffff [ 90.123841][ T197] head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000008 [ 90.132483][ T197] page dumped because: kasan: bad access detected [ 90.138867][ T197] page_owner tracks the page as allocated [ 90.144554][ T197] page last allocated via order 3, migratetype Unmovable, gfp_mask 0xd20c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 1, tgid 1 (swapper/0), ts 4777253476, free_ts 0 [ 90.164246][ T197] post_alloc_hook+0xfd/0x120 [ 90.168926][ T197] get_page_from_freelist+0xf48/0x3530 [ 90.174368][ T197] __alloc_frozen_pages_noprof+0x299/0x2dc0 [ 90.180240][ T197] new_slab+0xa2/0x640 [ 90.184285][ T197] refill_objects+0xe3/0x410 [ 90.188851][ T197] __pcs_replace_empty_main+0x376/0x680 [ 90.194374][ T197] __kmalloc_cache_noprof+0x479/0x6c0 [ 90.199730][ T197] rd_alloc_device+0x5e/0xc0 [ 90.204299][ T197] target_alloc_device+0xa8/0x1a50 [ 90.209391][ T197] core_dev_setup_virtual_lun0+0xff/0x260 [ 90.215089][ T197] target_core_init_configfs+0x327/0x6a0 [ 90.220706][ T197] do_one_initcall+0x11d/0x700 [ 90.225452][ T197] kernel_init_freeable+0x6ea/0x7b0 [ 90.230627][ T197] kernel_init+0x21/0x1e0 [ 90.234937][ T197] ret_from_fork+0x72b/0xd50 [ 90.239509][ T197] ret_from_fork_asm+0x1a/0x30 [ 90.244253][ T197] page_owner free stack trace missing [ 90.249606][ T197] [ 90.251906][ T197] Memory state around the buggy address: [ 90.257510][ T197] ffff888029f28300: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 90.265547][ T197] ffff888029f28380: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 90.273583][ T197] >ffff888029f28400: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 90.281627][ T197] ^ [ 90.288282][ T197] ffff888029f28480: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 90.296324][ T197] ffff888029f28500: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 90.304358][ T197] ================================================================== [ 90.341436][ T197] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 90.348656][ T197] CPU: 1 UID: 0 PID: 197 Comm: kworker/u8:5 Not tainted syzkaller #0 PREEMPT(full) [ 90.358028][ T197] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 90.368070][ T197] Workqueue: usbip_event event_handler [ 90.373517][ T197] Call Trace: [ 90.376779][ T197] [ 90.379691][ T197] dump_stack_lvl+0x100/0x190 [ 90.384350][ T197] vpanic+0x552/0x970 [ 90.388309][ T197] ? __pfx_vpanic+0x10/0x10 [ 90.392795][ T197] ? mark_held_locks+0x40/0x70 [ 90.397992][ T197] ? vhci_cleanup_unlink_list+0x44/0x456 [ 90.403626][ T197] panic+0xd1/0xe0 [ 90.407324][ T197] ? __pfx_panic+0x10/0x10 [ 90.411716][ T197] ? vhci_cleanup_unlink_list+0x44/0x456 [ 90.417331][ T197] ? preempt_schedule_common+0x42/0xc0 [ 90.422771][ T197] ? check_panic_on_warn+0x1f/0x90 [ 90.427862][ T197] check_panic_on_warn.cold+0x19/0x34 [ 90.433214][ T197] end_report.part.0+0x3a/0x90 [ 90.437975][ T197] kasan_report.cold+0xe/0x18 [ 90.442635][ T197] ? vhci_cleanup_unlink_list+0x44/0x456 [ 90.448340][ T197] vhci_cleanup_unlink_list+0x44/0x456 [ 90.453789][ T197] vhci_shutdown_connection.cold+0x165/0x37c [ 90.459758][ T197] event_handler+0x216/0x570 [ 90.464330][ T197] process_one_work+0xa23/0x1940 [ 90.469256][ T197] ? __pfx_process_one_work+0x10/0x10 [ 90.474616][ T197] ? __pfx_event_handler+0x10/0x10 [ 90.479722][ T197] worker_thread+0x5ef/0xe50 [ 90.484295][ T197] ? kthread+0x13a/0x450 [ 90.488514][ T197] ? __pfx_worker_thread+0x10/0x10 [ 90.493604][ T197] kthread+0x370/0x450 [ 90.497651][ T197] ? __pfx_kthread+0x10/0x10 [ 90.502229][ T197] ret_from_fork+0x72b/0xd50 [ 90.506804][ T197] ? __pfx_ret_from_fork+0x10/0x10 [ 90.511902][ T197] ? __switch_to+0x800/0x10f0 [ 90.516570][ T197] ? __pfx_kthread+0x10/0x10 [ 90.521139][ T197] ret_from_fork_asm+0x1a/0x30 [ 90.525893][ T197] [ 90.529086][ T197] Kernel Offset: disabled [ 90.533382][ T197] Rebooting in 86400 seconds..