last executing test programs: 3.159198483s ago: executing program 0 (id=10): syz_usb_connect(0x3, 0x86, &(0x7f0000000000)=ANY=[@ANYBLOB="12010002ffffff40cd060f010001010203010902740001010080fa0904"], 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000000100)='./dev\x00', &(0x7f0000000180)='devtmpfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./dev/ttyUSB0\x00', 0x2, 0x0) close(r0) 2.858200791s ago: executing program 3 (id=26): r0 = openat(0xffffffffffffff9c, &(0x7f0000000380)='./tracefs_dir/free_buffer\x00', 0x1, 0x0) write(r0, &(0x7f00000003c0)='1\x00', 0x2) 2.858124681s ago: executing program 3 (id=27): sendmsg$ETHTOOL_MSG_LINKMODES_SET(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000e40)=ANY=[], 0x13c}, 0x1, 0x0, 0x0, 0x40080}, 0x20000000) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, 0x0}, 0x0) syz_usb_connect(0x2, 0x36, &(0x7f0000000240)=ANY=[@ANYBLOB="1201000012f9dc0846154213b0100102030109022400010000000009045e000009"], 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_VCPU_EVENTS(r2, 0x4400ae8f, &(0x7f0000000140)=@arm64={0x10, 0x41, 0xb2}) ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f0000000180)={0x1, 0x0, [{0x40000072, 0x0, 0x80000006}]}) 1.767958697s ago: executing program 0 (id=30): r0 = openat(0xffffffffffffff9c, &(0x7f0000000500)='./sys/bus/platform/drivers/dummy_udc/bind\x00', 0x1, 0x0) write(r0, &(0x7f0000000400)='dummy_udc.0', 0xb) 1.735833618s ago: executing program 0 (id=33): r0 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./tracefs_dir/trace\x00', 0x0, 0x0) read(r0, &(0x7f0000000340), 0x1000) close(r0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000480)='./tracefs_dir/trace\x00', 0x0, 0x0) read(r1, &(0x7f00000004c0), 0x1000) close(r1) 1.700394249s ago: executing program 0 (id=35): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x1ff) mount(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000200)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000300)='./file0/usb_gadget/g1\x00', 0x1ff) r0 = openat(0xffffffffffffff9c, &(0x7f0000000e00)='./file0/usb_gadget/g1/idVendor\x00', 0x2, 0x0) write(r0, &(0x7f0000000f00)='0x1d6b\x00', 0x7) r1 = openat(0xffffffffffffff9c, &(0x7f0000001000)='./file0/usb_gadget/g1/idProduct\x00', 0x2, 0x0) write(r1, &(0x7f0000001100)='0x0104\x00', 0x7) mkdirat(0xffffffffffffff9c, &(0x7f0000000400)='./file0/usb_gadget/g1/functions/ffs.usb0\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000001200)='./file0/usb_gadget/g1/configs/c.1\x00', 0x1ff) symlink(&(0x7f0000001300)='file0/usb_gadget/g1/functions/ffs.usb0\x00', &(0x7f0000001400)='./file0/usb_gadget/g1/configs/c.1/ffs.usb0\x00') pipe2(&(0x7f0000002000)={0x0, 0x0}, 0x0) write(r3, &(0x7f0000002100)='functionfs\x00', 0xb) read(r2, &(0x7f0000000700)=""/9, 0xb) mkdirat(0xffffffffffffff9c, &(0x7f0000000500)='./file1\x00', 0x1ff) mount(&(0x7f0000000600)=@filename='usb0\x00', &(0x7f0000000500)='./file1\x00', &(0x7f0000000700)='gadgetfs\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000900)='./file1/ep0\x00', 0x2, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000c00)='./file0/usb_gadget/g1/UDC\x00', 0x2, 0x0) write(r4, &(0x7f0000000d00)='dummy_udc.0', 0xb) syz_open_dev$usbfs(&(0x7f0000001700), 0x0, 0x2) openat(0xffffffffffffff9c, &(0x7f0000001500)='./file1/ep1\x00', 0x2, 0x0) 1.700162549s ago: executing program 2 (id=38): r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./tracefs_dir/buffer_size_kb\x00', 0x1, 0x0) write(r0, &(0x7f0000000180)='100\x00', 0x4) write(r0, &(0x7f00000001c0)='200\x00', 0x4) write(r0, &(0x7f0000000200)='300\x00', 0x4) write(r0, &(0x7f0000000400)='400\x00', 0x4) close(r0) 1.699844049s ago: executing program 0 (id=39): r0 = openat(0xffffffffffffff9c, &(0x7f0000000e00)='./sys_link/bus/pci/drivers/ehci-pci/bind\x00', 0x1, 0x0) write(r0, &(0x7f0000000f00)='0000:00:01.0\x00', 0xd) 1.66335384s ago: executing program 2 (id=47): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./tracefs_dir\x00', 0x1ff) mount(&(0x7f0000000080)=@filename='nodev\x00', &(0x7f00000000c0)='./tracefs_dir\x00', &(0x7f0000000100)='tracefs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./tracefs_dir/buffer_size_kb\x00', 0x1, 0x0) write(r0, &(0x7f0000000180)='100\x00', 0x4) write(r0, &(0x7f00000001c0)='200\x00', 0x4) write(r0, &(0x7f0000000200)='300\x00', 0x4) write(0xffffffffffffffff, &(0x7f0000000280)='8\x00', 0x2) 1.66319366s ago: executing program 0 (id=40): syz_usb_connect(0x0, 0x32, &(0x7f0000000000)=ANY=[@ANYBLOB="12010002000000403412785600010102030109022000010100c0000904000002080650000705810200020007050202000200"], 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./mysys\x00', 0x1ff) mount(&(0x7f0000000040)=@filename='none\x00', &(0x7f0000000080)='./mysys\x00', &(0x7f00000000c0)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./mysys/bus/platform/drivers/dummy_hcd/unbind\x00', 0x1, 0x0) write(r0, &(0x7f0000000200)='dummy_hcd.0\x00', 0xb) close(r0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./mysys/bus/platform/drivers/dummy_hcd/bind\x00', 0x1, 0x0) write(r1, &(0x7f0000000400)='dummy_hcd.0\x00', 0xb) close(r1) nanosleep(&(0x7f0000000500)={0x2}, 0x0) 1.66308092s ago: executing program 2 (id=41): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./tracefs_dir\x00', 0x1ff) mount(&(0x7f0000000080)=@filename='nodev\x00', &(0x7f00000000c0)='./tracefs_dir\x00', &(0x7f0000000100)='tracefs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./tracefs_dir/buffer_size_kb\x00', 0x1, 0x0) write(r0, &(0x7f0000000180)='100\x00', 0x4) write(r0, &(0x7f00000001c0)='200\x00', 0x4) write(r0, &(0x7f0000000200)='300\x00', 0x4) r1 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./tracefs_dir/buffer_subbuf_size_kb\x00', 0x1, 0x0) write(r1, &(0x7f0000000280)='8\x00', 0x2) write(r1, &(0x7f00000002c0)='16\x00', 0x3) r2 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./tracefs_dir/trace\x00', 0x0, 0x0) read(r2, &(0x7f0000000340), 0x1000) close(r2) r3 = openat(0xffffffffffffff9c, &(0x7f0000000380)='./tracefs_dir/free_buffer\x00', 0x1, 0x0) write(r3, &(0x7f00000003c0)='1\x00', 0x2) write(r0, &(0x7f0000000400)='400\x00', 0x4) write(r1, &(0x7f0000000440)='4\x00', 0x2) r4 = openat(0xffffffffffffff9c, &(0x7f0000000480)='./tracefs_dir/trace\x00', 0x0, 0x0) read(r4, &(0x7f00000004c0), 0x1000) close(r4) r5 = openat(0xffffffffffffff9c, &(0x7f0000000500)='./tracefs_dir/trace_marker\x00', 0x1, 0x0) write(r5, &(0x7f0000000540)='hello\x00', 0x6) close(r5) close(r0) close(r3) 1.66295957s ago: executing program 2 (id=42): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000000018105e04da0700000000000109022400010000000009040000090300000009210000000122220009058103"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000280)={0x24, 0x0, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="0022220000009603000700000000070c00000016b8ef0a1a7083"], 0x0}, 0x0) r1 = syz_open_dev$hidraw(&(0x7f0000000280), 0x82, 0x2) ioctl$HIDIOCGRDESC(r1, 0x4004480d, 0x0) write$hidraw(r1, 0x0, 0x0) 1.600643181s ago: executing program 3 (id=43): r0 = openat(0xffffffffffffff9c, &(0x7f0000000500)='./sys/bus/platform/drivers/dummy_udc/bind\x00', 0x1, 0x0) write(r0, &(0x7f0000000400)='dummy_udc.0', 0xb) 1.581681772s ago: executing program 3 (id=44): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='config\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='config\x00', &(0x7f00000000c0)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='config/usb_gadget/g1\x00', 0x1ff) r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='config/usb_gadget/g1/idVendor\x00', 0x1, 0x0) write(r0, &(0x7f0000000180)='0x0525', 0x6) r1 = openat(0xffffffffffffff9c, 0x0, 0x1, 0x0) write(r1, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='config/usb_gadget/g1/configs/c.1\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='config/usb_gadget/g1/functions/rndis.usb0\x00', 0x1ff) symlinkat(&(0x7f00000002c0)='config/usb_gadget/g1/functions/rndis.usb0\x00', 0xffffffffffffff9c, &(0x7f0000000300)='config/usb_gadget/g1/configs/c.1/rndis.usb0\x00') r2 = openat(0xffffffffffffff9c, &(0x7f0000000340)='config/usb_gadget/g1/UDC\x00', 0x1, 0x0) write(r2, &(0x7f0000000380)='dummy_udc.0\x00', 0xb) write(r2, &(0x7f00000003c0)='dummy_udc.1\x00', 0xb) write(r2, &(0x7f0000000400)='dummy_udc.2\x00', 0xb) write(r2, &(0x7f0000000440)='dummy_udc.3\x00', 0xb) 1.581411902s ago: executing program 3 (id=45): r0 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./tracefs_dir/trace\x00', 0x0, 0x0) read(r0, &(0x7f0000000340), 0x1000) close(r0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000480)='./tracefs_dir/trace\x00', 0x0, 0x0) read(r1, &(0x7f00000004c0), 0x1000) close(r1) 1.530117293s ago: executing program 3 (id=46): r0 = syz_usb_connect(0x5, 0x58, &(0x7f0000000080)={{0x12, 0x1, 0x310, 0x8e, 0x3a, 0xc6, 0x20, 0x694, 0x1, 0x7813, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x46, 0x2, 0xe, 0x6, 0x10, 0x3, "", [{{0x9, 0x4, 0x39, 0xd8, 0x1, 0x1a, 0xda, 0xa8, 0x8, [], [{{0x9, 0x5, 0x8, 0x10, 0x20, 0x7, 0x9, 0x80}}]}}, {{0x9, 0x4, 0xe4, 0x5, 0x3, 0xb9, 0x56, 0xda, 0x2, [], [{{0x9, 0x5, 0x8, 0x0, 0x400, 0x1, 0x12, 0xfc}}, {{0x9, 0x5, 0xb, 0x0, 0x20, 0x7, 0x3, 0x9a, [@generic={0x7, 0x5, "d15b89f26d"}]}}, {{0x9, 0x5, 0x9, 0x3, 0x40, 0x7a, 0xa, 0x84}}]}}]}}]}}, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r0, &(0x7f0000000bc0)={0x14, 0x0, &(0x7f0000000b00)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x1c01}}, 0x0, 0x0}, 0x0) syz_usb_control_io$hid(r0, &(0x7f00000011c0)={0x24, 0x0, &(0x7f0000000a00)={0x0, 0x3, 0x1e, @string={0x1e, 0x3, "f238341fa3a3de193539873c474740139f3f3c0298dc0744d55668e8"}}, 0x0, 0x0}, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000001600)={0x24, 0x0, &(0x7f0000001540)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x44a}}, 0x0, 0x0}, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000500)={0x2c, &(0x7f00000001c0)={0x40, 0x8, 0x8, "fde61e0ee4a63b9e"}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, &(0x7f0000002280)={0x84, &(0x7f0000001e00)={0x20, 0x14, 0x4, "348b35e5"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) read$char_usb(r1, &(0x7f0000000540)=""/99, 0x63) syz_usb_disconnect(r0) 1.22967334s ago: executing program 1 (id=52): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./tracefs_dir\x00', 0x1ff) mount(&(0x7f0000000080)=@filename='nodev\x00', &(0x7f00000000c0)='./tracefs_dir\x00', &(0x7f0000000100)='tracefs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./tracefs_dir/buffer_size_kb\x00', 0x1, 0x0) write(r0, &(0x7f0000000180)='100\x00', 0x4) write(r0, &(0x7f00000001c0)='200\x00', 0x4) write(r0, &(0x7f0000000200)='300\x00', 0x4) r1 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./tracefs_dir/buffer_subbuf_size_kb\x00', 0x1, 0x0) write(r1, &(0x7f0000000280)='8\x00', 0x2) write(r1, &(0x7f00000002c0)='16\x00', 0x3) r2 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./tracefs_dir/trace\x00', 0x0, 0x0) read(r2, &(0x7f0000000340), 0x1000) close(r2) r3 = openat(0xffffffffffffff9c, &(0x7f0000000380)='./tracefs_dir/free_buffer\x00', 0x1, 0x0) write(r3, &(0x7f00000003c0)='1\x00', 0x2) write(r0, &(0x7f0000000400)='400\x00', 0x4) write(r1, &(0x7f0000000440)='4\x00', 0x2) r4 = openat(0xffffffffffffff9c, &(0x7f0000000480)='./tracefs_dir/trace\x00', 0x0, 0x0) read(r4, &(0x7f00000004c0), 0x1000) close(r4) r5 = openat(0xffffffffffffff9c, &(0x7f0000000500)='./tracefs_dir/trace_marker\x00', 0x1, 0x0) write(r5, &(0x7f0000000540)='hello\x00', 0x6) close(r5) close(r3) 1.130974972s ago: executing program 1 (id=53): r0 = openat(0xffffffffffffff9c, &(0x7f0000000500)='./sys/bus/platform/drivers/dummy_udc/bind\x00', 0x1, 0x0) write(r0, &(0x7f0000000400)='dummy_udc.0', 0xb) 1.068744144s ago: executing program 1 (id=54): syz_usb_connect$uac3(0x2, 0x80, &(0x7f0000000480)=ANY=[@ANYBLOB="12011003000000404406218040000102030109026e00030154c00f080b0001ec0030040904000000010130"], &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0}) 552.166077ms ago: executing program 1 (id=55): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='config\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='config\x00', &(0x7f00000000c0)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='config/usb_gadget/g1\x00', 0x1ff) r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='config/usb_gadget/g1/idVendor\x00', 0x1, 0x0) write(r0, &(0x7f0000000180)='0x0525', 0x6) r1 = openat(0xffffffffffffff9c, 0x0, 0x1, 0x0) write(r1, &(0x7f0000000200), 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='config/usb_gadget/g1/configs/c.1\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='config/usb_gadget/g1/functions/rndis.usb0\x00', 0x1ff) symlinkat(&(0x7f00000002c0)='config/usb_gadget/g1/functions/rndis.usb0\x00', 0xffffffffffffff9c, &(0x7f0000000300)='config/usb_gadget/g1/configs/c.1/rndis.usb0\x00') r2 = openat(0xffffffffffffff9c, &(0x7f0000000340)='config/usb_gadget/g1/UDC\x00', 0x1, 0x0) write(r2, &(0x7f0000000380)='dummy_udc.0\x00', 0xb) write(r2, &(0x7f00000003c0)='dummy_udc.1\x00', 0xb) write(r2, &(0x7f0000000400)='dummy_udc.2\x00', 0xb) write(r2, &(0x7f0000000440)='dummy_udc.3\x00', 0xb) 535.506146ms ago: executing program 1 (id=56): mkdirat(0xffffffffffffff9c, &(0x7f00000000a0)='./dev\x00', 0x1ff) mount(0x0, &(0x7f00000000a0)='./dev\x00', &(0x7f00000000c0)='devtmpfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./config\x00', &(0x7f0000000080)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./config/usb_gadget/g1\x00', 0x1ff) openat(0xffffffffffffff9c, &(0x7f0000000140)='./config/usb_gadget/g1/idVendor\x00', 0x1, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000180)='./config/usb_gadget/g1/idProduct\x00', 0x1, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./config/usb_gadget/g1/functions/gser.usb0\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000300)='./config/usb_gadget/g1/configs/c.1\x00', 0x1ff) symlinkat(&(0x7f0000000400)='./config/usb_gadget/g1/functions/gser.usb0\x00', 0xffffffffffffff9c, &(0x7f0000000500)='./config/usb_gadget/g1/configs/c.1/gser.usb0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./config/usb_gadget/g1/UDC\x00', 0x1, 0x0) write(r0, &(0x7f0000000700)='dummy_udc.0', 0xb) nanosleep(&(0x7f0000000900)={0x0, 0x1dcd6500}, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000800)='./dev/ttyGS0\x00', 0x2, 0x0) 2.29113ms ago: executing program 2 (id=57): r0 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./tracefs_dir/trace\x00', 0x0, 0x0) read(r0, &(0x7f0000000340), 0x1000) close(r0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000480)='./tracefs_dir/trace\x00', 0x0, 0x0) read(r1, &(0x7f00000004c0), 0x1000) close(r1) 2.14049ms ago: executing program 2 (id=58): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./tracefs_dir\x00', 0x1ff) mount(&(0x7f0000000080)=@filename='nodev\x00', &(0x7f00000000c0)='./tracefs_dir\x00', &(0x7f0000000100)='tracefs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./tracefs_dir/buffer_size_kb\x00', 0x1, 0x0) write(r0, &(0x7f0000000180)='100\x00', 0x4) write(r0, &(0x7f00000001c0)='200\x00', 0x4) write(r0, &(0x7f0000000200)='300\x00', 0x4) r1 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./tracefs_dir/buffer_subbuf_size_kb\x00', 0x1, 0x0) write(r1, &(0x7f0000000280)='8\x00', 0x2) write(r1, &(0x7f00000002c0)='16\x00', 0x3) r2 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./tracefs_dir/trace\x00', 0x0, 0x0) read(r2, &(0x7f0000000340), 0x1000) close(r2) write(0xffffffffffffffff, &(0x7f00000003c0)='1\x00', 0x2) 0s ago: executing program 1 (id=59): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./tracefs_dir\x00', 0x1ff) mount(&(0x7f0000000080)=@filename='nodev\x00', &(0x7f00000000c0)='./tracefs_dir\x00', &(0x7f0000000100)='tracefs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./tracefs_dir/buffer_size_kb\x00', 0x1, 0x0) write(r0, &(0x7f0000000180)='100\x00', 0x4) write(r0, &(0x7f00000001c0)='200\x00', 0x4) write(r0, &(0x7f0000000200)='300\x00', 0x4) r1 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./tracefs_dir/buffer_subbuf_size_kb\x00', 0x1, 0x0) write(r1, &(0x7f0000000280)='8\x00', 0x2) write(r1, &(0x7f00000002c0)='16\x00', 0x3) r2 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./tracefs_dir/trace\x00', 0x0, 0x0) read(r2, &(0x7f0000000340), 0x1000) close(r2) r3 = openat(0xffffffffffffff9c, &(0x7f0000000380)='./tracefs_dir/free_buffer\x00', 0x1, 0x0) write(r3, &(0x7f00000003c0)='1\x00', 0x2) write(r0, &(0x7f0000000400)='400\x00', 0x4) write(r1, &(0x7f0000000440)='4\x00', 0x2) r4 = openat(0xffffffffffffff9c, &(0x7f0000000480)='./tracefs_dir/trace\x00', 0x0, 0x0) read(r4, &(0x7f00000004c0), 0x1000) close(r4) r5 = openat(0xffffffffffffff9c, &(0x7f0000000500)='./tracefs_dir/trace_marker\x00', 0x1, 0x0) write(r5, &(0x7f0000000540)='hello\x00', 0x6) close(r5) close(r0) close(r1) kernel console output (not intermixed with test programs): syzkaller syzkaller login: [ 14.129183][ T36] kauditd_printk_skb: 48 callbacks suppressed [ 14.129199][ T36] audit: type=1400 audit(1785163253.420:59): avc: denied { transition } for pid=232 comm="sshd-session" path="/bin/sh" dev="sda1" ino=90 scontext=system_u:system_r:sshd_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 14.133167][ T36] audit: type=1400 audit(1785163253.420:60): avc: denied { noatsecure } for pid=232 comm="sshd-session" scontext=system_u:system_r:sshd_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 14.136136][ T36] audit: type=1400 audit(1785163253.420:61): avc: denied { write } for pid=232 comm="sh" path="pipe:[2236]" dev="pipefs" ino=2236 scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:sshd_t tclass=fifo_file permissive=1 [ 14.139068][ T36] audit: type=1400 audit(1785163253.420:62): avc: denied { rlimitinh } for pid=232 comm="sh" scontext=system_u:system_r:sshd_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 14.141719][ T36] audit: type=1400 audit(1785163253.420:63): avc: denied { siginh } for pid=232 comm="sh" scontext=system_u:system_r:sshd_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 Warning: Permanently added '10.128.1.57' (ED25519) to the list of known hosts. [ 21.557855][ T36] audit: type=1400 audit(1785163260.850:64): avc: denied { mounton } for pid=286 comm="syz-executor" path="/syzcgroup/unified" dev="sda1" ino=2023 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1 [ 21.559024][ T286] cgroup: Unknown subsys name 'net' [ 21.580516][ T36] audit: type=1400 audit(1785163260.850:65): avc: denied { mount } for pid=286 comm="syz-executor" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 21.607812][ T36] audit: type=1400 audit(1785163260.880:66): avc: denied { unmount } for pid=286 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 21.607977][ T286] cgroup: Unknown subsys name 'devices' [ 21.715139][ T286] cgroup: Unknown subsys name 'hugetlb' [ 21.720766][ T286] cgroup: Unknown subsys name 'rlimit' [ 21.813157][ T36] audit: type=1400 audit(1785163261.100:67): avc: denied { setattr } for pid=286 comm="syz-executor" name="raw-gadget" dev="devtmpfs" ino=190 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 21.836349][ T36] audit: type=1400 audit(1785163261.110:68): avc: denied { mounton } for pid=286 comm="syz-executor" path="/proc/sys/fs/binfmt_misc" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=dir permissive=1 Setting up swapspace version 1, size = 127995904 bytes [ 21.842772][ T288] SELinux: Context root:object_r:swapfile_t is not valid (left unmapped). [ 21.861258][ T36] audit: type=1400 audit(1785163261.110:69): avc: denied { mount } for pid=286 comm="syz-executor" name="/" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=filesystem permissive=1 [ 21.888803][ T286] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 21.892734][ T36] audit: type=1400 audit(1785163261.160:70): avc: denied { relabelto } for pid=288 comm="mkswap" name="swap-file" dev="sda1" ino=2026 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 21.926954][ T36] audit: type=1400 audit(1785163261.160:71): avc: denied { write } for pid=288 comm="mkswap" path="/root/swap-file" dev="sda1" ino=2026 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 21.952563][ T36] audit: type=1400 audit(1785163261.180:72): avc: denied { read } for pid=286 comm="syz-executor" name="swap-file" dev="sda1" ino=2026 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 21.978081][ T36] audit: type=1400 audit(1785163261.180:73): avc: denied { open } for pid=286 comm="syz-executor" path="/root/swap-file" dev="sda1" ino=2026 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 22.684892][ T296] bridge0: port 1(bridge_slave_0) entered blocking state [ 22.691957][ T296] bridge0: port 1(bridge_slave_0) entered disabled state [ 22.699114][ T296] bridge_slave_0: entered allmulticast mode [ 22.705352][ T296] bridge_slave_0: entered promiscuous mode [ 22.712744][ T296] bridge0: port 2(bridge_slave_1) entered blocking state [ 22.719862][ T296] bridge0: port 2(bridge_slave_1) entered disabled state [ 22.726950][ T296] bridge_slave_1: entered allmulticast mode [ 22.733362][ T296] bridge_slave_1: entered promiscuous mode [ 22.770231][ T294] bridge0: port 1(bridge_slave_0) entered blocking state [ 22.777367][ T294] bridge0: port 1(bridge_slave_0) entered disabled state [ 22.784582][ T294] bridge_slave_0: entered allmulticast mode [ 22.790736][ T294] bridge_slave_0: entered promiscuous mode [ 22.797213][ T294] bridge0: port 2(bridge_slave_1) entered blocking state [ 22.804326][ T294] bridge0: port 2(bridge_slave_1) entered disabled state [ 22.811390][ T294] bridge_slave_1: entered allmulticast mode [ 22.817681][ T294] bridge_slave_1: entered promiscuous mode [ 22.852266][ T293] bridge0: port 1(bridge_slave_0) entered blocking state [ 22.859337][ T293] bridge0: port 1(bridge_slave_0) entered disabled state [ 22.866494][ T293] bridge_slave_0: entered allmulticast mode [ 22.872687][ T293] bridge_slave_0: entered promiscuous mode [ 22.881762][ T293] bridge0: port 2(bridge_slave_1) entered blocking state [ 22.888877][ T293] bridge0: port 2(bridge_slave_1) entered disabled state [ 22.896066][ T293] bridge_slave_1: entered allmulticast mode [ 22.902246][ T293] bridge_slave_1: entered promiscuous mode [ 22.933857][ T295] bridge0: port 1(bridge_slave_0) entered blocking state [ 22.940912][ T295] bridge0: port 1(bridge_slave_0) entered disabled state [ 22.948075][ T295] bridge_slave_0: entered allmulticast mode [ 22.954286][ T295] bridge_slave_0: entered promiscuous mode [ 22.962038][ T295] bridge0: port 2(bridge_slave_1) entered blocking state [ 22.969121][ T295] bridge0: port 2(bridge_slave_1) entered disabled state [ 22.976195][ T295] bridge_slave_1: entered allmulticast mode [ 22.982448][ T295] bridge_slave_1: entered promiscuous mode [ 23.078832][ T296] bridge0: port 2(bridge_slave_1) entered blocking state [ 23.085907][ T296] bridge0: port 2(bridge_slave_1) entered forwarding state [ 23.093238][ T296] bridge0: port 1(bridge_slave_0) entered blocking state [ 23.100264][ T296] bridge0: port 1(bridge_slave_0) entered forwarding state [ 23.128460][ T294] bridge0: port 2(bridge_slave_1) entered blocking state [ 23.135546][ T294] bridge0: port 2(bridge_slave_1) entered forwarding state [ 23.142823][ T294] bridge0: port 1(bridge_slave_0) entered blocking state [ 23.149914][ T294] bridge0: port 1(bridge_slave_0) entered forwarding state [ 23.164508][ T293] bridge0: port 2(bridge_slave_1) entered blocking state [ 23.171565][ T293] bridge0: port 2(bridge_slave_1) entered forwarding state [ 23.178854][ T293] bridge0: port 1(bridge_slave_0) entered blocking state [ 23.185891][ T293] bridge0: port 1(bridge_slave_0) entered forwarding state [ 23.215729][ T295] bridge0: port 2(bridge_slave_1) entered blocking state [ 23.222793][ T295] bridge0: port 2(bridge_slave_1) entered forwarding state [ 23.230083][ T295] bridge0: port 1(bridge_slave_0) entered blocking state [ 23.237137][ T295] bridge0: port 1(bridge_slave_0) entered forwarding state [ 23.268158][ T46] bridge0: port 1(bridge_slave_0) entered disabled state [ 23.275530][ T46] bridge0: port 2(bridge_slave_1) entered disabled state [ 23.283303][ T46] bridge0: port 2(bridge_slave_1) entered disabled state [ 23.291057][ T46] bridge0: port 1(bridge_slave_0) entered disabled state [ 23.298356][ T46] bridge0: port 2(bridge_slave_1) entered disabled state [ 23.305840][ T46] bridge0: port 1(bridge_slave_0) entered disabled state [ 23.313061][ T46] bridge0: port 2(bridge_slave_1) entered disabled state [ 23.335145][ T46] bridge0: port 2(bridge_slave_1) entered blocking state [ 23.342209][ T46] bridge0: port 2(bridge_slave_1) entered forwarding state [ 23.350072][ T46] bridge0: port 1(bridge_slave_0) entered blocking state [ 23.357138][ T46] bridge0: port 1(bridge_slave_0) entered forwarding state [ 23.364842][ T46] bridge0: port 2(bridge_slave_1) entered blocking state [ 23.371887][ T46] bridge0: port 2(bridge_slave_1) entered forwarding state [ 23.395316][ T46] bridge0: port 1(bridge_slave_0) entered blocking state [ 23.402455][ T46] bridge0: port 1(bridge_slave_0) entered forwarding state [ 23.410127][ T46] bridge0: port 2(bridge_slave_1) entered blocking state [ 23.417186][ T46] bridge0: port 2(bridge_slave_1) entered forwarding state [ 23.436922][ T46] bridge0: port 1(bridge_slave_0) entered blocking state [ 23.443995][ T46] bridge0: port 1(bridge_slave_0) entered forwarding state [ 23.453478][ T46] bridge0: port 2(bridge_slave_1) entered blocking state [ 23.460559][ T46] bridge0: port 2(bridge_slave_1) entered forwarding state [ 23.486393][ T296] veth0_vlan: entered promiscuous mode [ 23.498232][ T293] veth0_vlan: entered promiscuous mode [ 23.503985][ T294] veth0_vlan: entered promiscuous mode [ 23.525556][ T293] veth1_macvtap: entered promiscuous mode [ 23.537038][ T296] veth1_macvtap: entered promiscuous mode [ 23.544952][ T294] veth1_macvtap: entered promiscuous mode [ 23.569739][ T295] veth0_vlan: entered promiscuous mode [ 23.592428][ T296] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 23.615158][ T295] veth1_macvtap: entered promiscuous mode [ 23.728708][ T325] ehci-pci 0000:00:01.0: Found HC with no IRQ. Check BIOS/PCI 0000:00:01.0 setup! [ 23.743314][ T325] ehci-pci 0000:00:01.0: init 0000:00:01.0 fail, -19 [ 23.807696][ T341] UDC core: g1: couldn't find an available UDC or it's busy [ 23.817538][ T341] configfs-gadget.g1 gadget.1: HOST MAC 6a:50:2f:d2:e9:2c [ 23.825868][ T341] configfs-gadget.g1 gadget.1: MAC be:93:89:12:8a:91 [ 24.183414][ T45] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 24.243276][ T65] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 24.283269][ T368] usb 4-1: new full-speed USB device number 2 using dummy_hcd [ 24.333441][ T45] usb 3-1: Using ep0 maxpacket: 8 [ 24.339773][ T45] usb 3-1: config 0 has an invalid interface number: 143 but max is 0 [ 24.348010][ T45] usb 3-1: config 0 has no interface number 0 [ 24.354202][ T45] usb 3-1: New USB device found, idVendor=2058, idProduct=1005, bcdDevice=c1.9b [ 24.363415][ T45] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 24.371962][ T45] usb 3-1: config 0 descriptor?? [ 24.394261][ T65] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 24.405815][ T65] usb 1-1: New USB device found, idVendor=06cd, idProduct=010f, bcdDevice= 1.00 [ 24.418439][ T65] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 24.426791][ T65] usb 1-1: Product: syz [ 24.431008][ T65] usb 1-1: Manufacturer: syz [ 24.435637][ T65] usb 1-1: SerialNumber: syz [ 24.444237][ T368] usb 4-1: config 0 has an invalid interface number: 94 but max is 0 [ 24.452447][ T368] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 24.462782][ T368] usb 4-1: config 0 has no interface number 0 [ 24.470321][ T368] usb 4-1: New USB device found, idVendor=1546, idProduct=1342, bcdDevice=10.b0 [ 24.479576][ T368] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 24.487704][ T368] usb 4-1: Product: syz [ 24.491942][ T368] usb 4-1: Manufacturer: syz [ 24.497107][ T368] usb 4-1: SerialNumber: syz [ 24.502285][ T368] usb 4-1: config 0 descriptor?? [ 24.508108][ T368] hub 4-1:0.94: bad descriptor, ignoring hub [ 24.514524][ T368] hub 4-1:0.94: probe with driver hub failed with error -5 [ 24.587885][ T368] usb 3-1: USB disconnect, device number 2 [ 24.647409][ T311] usb 1-1: USB disconnect, device number 2 [ 24.715557][ T386] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 24.923471][ T311] usb 4-1: USB disconnect, device number 2 [ 25.209804][ T408] file system registered [ 25.473247][ T368] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 25.503317][ T65] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 25.593441][ T311] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 25.636405][ T368] usb 1-1: New USB device found, idVendor=1234, idProduct=5678, bcdDevice= 1.00 [ 25.645599][ T368] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 25.653854][ T65] usb 3-1: Using ep0 maxpacket: 16 [ 25.659050][ T368] usb 1-1: Product: syz [ 25.663235][ T368] usb 1-1: Manufacturer: syz [ 25.667840][ T368] usb 1-1: SerialNumber: syz [ 25.674051][ T65] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 25.685716][ T368] usb-storage 1-1:1.0: USB Mass Storage device detected [ 25.692844][ T65] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 25.704114][ T65] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 25.717573][ T368] scsi host1: usb-storage 1-1:1.0 [ 25.724621][ T65] usb 3-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 25.735249][ T65] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 25.743253][ T311] usb 4-1: Using ep0 maxpacket: 32 [ 25.744721][ T311] usb 4-1: unable to get BOS descriptor or descriptor too short [ 25.749642][ T65] usb 3-1: config 0 descriptor?? [ 25.757110][ T311] usb 4-1: config 14 has an invalid interface number: 57 but max is 1 [ 25.769509][ T311] usb 4-1: config 14 has an invalid interface number: 228 but max is 1 [ 25.778434][ T311] usb 4-1: config 14 has no interface number 0 [ 25.785156][ T311] usb 4-1: config 14 has no interface number 1 [ 25.791397][ T311] usb 4-1: config 14 interface 228 altsetting 5 has a duplicate endpoint with address 0x8, skipping [ 25.802275][ T311] usb 4-1: config 14 interface 228 altsetting 5 has an endpoint descriptor with address 0xD1, changing to 0x81 [ 25.814563][ T311] usb 4-1: config 14 interface 228 altsetting 5 endpoint 0x81 has an invalid bInterval 109, changing to 10 [ 25.822461][ T445] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 25.826060][ T311] usb 4-1: config 14 interface 228 altsetting 5 endpoint 0x81 has invalid maxpacket 57993, setting to 1024 [ 25.835696][ T445] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 25.845808][ T311] usb 4-1: config 14 interface 228 altsetting 5 endpoint 0x9 has an invalid bInterval 122, changing to 10 [ 25.864987][ T311] usb 4-1: config 14 interface 228 altsetting 5 has 4 endpoint descriptors, different from the interface descriptor's value: 3 [ 25.878159][ T311] usb 4-1: config 14 interface 57 has no altsetting 0 [ 25.884994][ T311] usb 4-1: config 14 interface 228 has no altsetting 0 [ 25.893362][ T311] usb 4-1: New USB device found, idVendor=0694, idProduct=0001, bcdDevice=78.13 [ 25.894953][ T416] dummy_hcd dummy_hcd.0: remove, state 1 [ 25.902435][ T311] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 25.902460][ T311] usb 4-1: Product: syz [ 25.908408][ T416] usb usb1: USB disconnect, device number 1 [ 25.916192][ T311] usb 4-1: Manufacturer: syz [ 25.920944][ T416] usb 1-1: USB disconnect, device number 3 [ 25.926216][ T311] usb 4-1: SerialNumber: syz [ 25.979531][ T416] dummy_hcd dummy_hcd.0: stopped [ 25.984552][ T416] dummy_hcd dummy_hcd.0: USB bus 1 deregistered [ 25.991717][ T446] dummy_hcd dummy_hcd.0: USB Host+Gadget Emulator, driver 02 May 2005 [ 25.999984][ T446] dummy_hcd dummy_hcd.0: Dummy host controller [ 26.006859][ T446] dummy_hcd dummy_hcd.0: new USB bus registered, assigned bus number 1 [ 26.016242][ T446] usb usb1: New USB device found, idVendor=1d6b, idProduct=0002, bcdDevice= 6.12 [ 26.025457][ T446] usb usb1: New USB device strings: Mfr=3, Product=2, SerialNumber=1 [ 26.033617][ T446] usb usb1: Product: Dummy host controller [ 26.039587][ T446] usb usb1: Manufacturer: Linux syzkaller dummy_hcd [ 26.046280][ T446] usb usb1: SerialNumber: dummy_hcd.0 [ 26.053993][ T446] hub 1-0:1.0: USB hub found [ 26.058808][ T446] hub 1-0:1.0: 1 port detected [ 26.164356][ T65] microsoft 0003:045E:07DA.0001: unknown main item tag 0x0 [ 26.171652][ T65] microsoft 0003:045E:07DA.0001: unknown main item tag 0x0 [ 26.179347][ T65] microsoft 0003:045E:07DA.0001: unknown main item tag 0x0 [ 26.186615][ T65] microsoft 0003:045E:07DA.0001: unknown main item tag 0x0 [ 26.193863][ T65] microsoft 0003:045E:07DA.0001: unknown main item tag 0x0 [ 26.201082][ T65] microsoft 0003:045E:07DA.0001: unknown main item tag 0x0 [ 26.208334][ T65] microsoft 0003:045E:07DA.0001: unknown main item tag 0x0 [ 26.215674][ T65] microsoft 0003:045E:07DA.0001: unknown main item tag 0x0 [ 26.222893][ T65] microsoft 0003:045E:07DA.0001: unknown main item tag 0x0 [ 26.230145][ T65] microsoft 0003:045E:07DA.0001: unknown main item tag 0x0 [ 26.238269][ T65] input: HID 045e:07da as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/0003:045E:07DA.0001/input/input4 [ 26.251110][ T65] microsoft 0003:045E:07DA.0001: input,hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.2-1/input0 [ 26.303252][ T368] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 26.376404][ T9] usb 3-1: USB disconnect, device number 3 [ 26.892764][ T36] kauditd_printk_skb: 67 callbacks suppressed [ 26.892780][ T36] audit: type=1400 audit(1785163266.180:141): avc: denied { mount } for pid=456 comm="syz.2.58" name="/" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=filesystem permissive=1 [ 26.924876][ T36] audit: type=1400 audit(1785163266.220:142): avc: denied { unmount } for pid=296 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=filesystem permissive=1 [ 26.947874][ T459] ------------[ cut here ]------------ [ 26.952479][ T36] audit: type=1400 audit(1785163266.240:143): avc: denied { unmount } for pid=294 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=filesystem permissive=1 [ 26.953368][ T459] WARNING: CPU: 1 PID: 459 at kernel/trace/trace.c:2439 tracing_start_tr+0x22a/0x2f0 [ 26.953408][ T459] Modules linked in: [ 26.953433][ T459] CPU: 1 UID: 0 PID: 459 Comm: syz.1.59 Not tainted syzkaller #0 45964a5c932d45c81e53484b258bbb49855afb35 [ 26.997844][ T459] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 27.007916][ T459] RIP: 0010:tracing_start_tr+0x22a/0x2f0 [ 27.013562][ T459] Code: 04 25 28 00 00 00 48 3b 44 24 60 0f 85 84 00 00 00 48 8d 65 d8 5b 41 5c 41 5d 41 5e 41 5f 5d e9 fc c3 1a 04 cc e8 d6 26 fc ff <0f> 0b 49 bd 00 00 00 00 00 fc ff df 43 0f b6 04 2c 84 c0 75 79 41 [ 27.033154][ T459] RSP: 0000:ffffc9000b80fb20 EFLAGS: 00010083 [ 27.039240][ T459] RAX: ffffffff818b4aea RBX: 1ffff92001701f68 RCX: 0000000000080000 [ 27.047209][ T459] RDX: ffffc90001661000 RSI: 00000000000011b5 RDI: 00000000000011b6 [ 27.055259][ T459] RBP: ffffc9000b80fbd0 R08: 0000000000000003 R09: 0000000000000004 [ 27.063225][ T459] R10: dffffc0000000000 R11: fffff52001701f50 R12: 1ffffffff0ec1af4 [ 27.071280][ T459] R13: 00000000ffffffff R14: ffffffff8760d7a0 R15: ffffffff8760d720 [ 27.079250][ T459] FS: 00007f19232806c0(0000) GS:ffff8881f6f00000(0000) knlGS:0000000000000000 [ 27.088186][ T459] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 27.094791][ T459] CR2: 00007f42c6425ff8 CR3: 0000000117642000 CR4: 00000000003526b0 [ 27.102756][ T459] Call Trace: [ 27.106025][ T459] [ 27.108941][ T459] ? tracing_start+0x30/0x30 [ 27.113530][ T459] buffer_subbuf_size_write+0x29b/0x4b0 [ 27.119077][ T459] ? __cfi_buffer_subbuf_size_write+0x10/0x10 [ 27.125128][ T459] ? bpf_lsm_file_permission+0xd/0x20 [ 27.130504][ T459] ? __cfi_buffer_subbuf_size_write+0x10/0x10 [ 27.136556][ T459] vfs_write+0x3c4/0xfd0 [ 27.140802][ T459] ? __cfi_vfs_write+0x10/0x10 [ 27.145551][ T459] ? __kasan_check_write+0x18/0x20 [ 27.150647][ T459] ? mutex_lock+0x97/0x1d0 [ 27.155049][ T459] ? __cfi_mutex_lock+0x10/0x10 [ 27.159885][ T459] ksys_write+0x145/0x260 [ 27.164199][ T459] ? xfd_validate_state+0x68/0x140 [ 27.169322][ T459] ? __cfi_ksys_write+0x10/0x10 [ 27.174163][ T459] ? __kasan_check_write+0x18/0x20 [ 27.179277][ T459] ? fpregs_restore_userregs+0x11c/0x260 [ 27.184903][ T459] __x64_sys_write+0x7f/0x90 [ 27.189500][ T459] x64_sys_call+0x271c/0x2ee0 [ 27.194164][ T459] do_syscall_64+0x57/0xf0 [ 27.198566][ T459] ? clear_bhb_loop+0x50/0xa0 [ 27.203232][ T459] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 27.209115][ T459] RIP: 0033:0x7f192239de99 [ 27.213512][ T459] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 27.233105][ T459] RSP: 002b:00007f1923280028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 27.241527][ T459] RAX: ffffffffffffffda RBX: 00007f1922625fa0 RCX: 00007f192239de99 [ 27.249496][ T459] RDX: 0000000000000002 RSI: 0000200000000280 RDI: 0000000000000004 [ 27.257574][ T459] RBP: 00007f1922433eaf R08: 0000000000000000 R09: 0000000000000000 [ 27.265530][ T459] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 27.273665][ T459] R13: 00007f1922626038 R14: 00007f1922625fa0 R15: 00007ffffd8767f8 [ 27.281636][ T459] [ 27.284648][ T459] ---[ end trace 0000000000000000 ]--- [ 28.654790][ T465] usb 4-1: USB disconnect, device number 3