last executing test programs: 1.132830182s ago: executing program 2 (id=3): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./nfsd\x00', 0x1ff) mount(&(0x7f0000000040)=@filename='none\x00', &(0x7f0000000000)='./nfsd\x00', &(0x7f0000000080)='nfsd\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./nfsd/versions\x00', 0x2, 0x0) read(r0, &(0x7f0000000200), 0x1000) r1 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./nfsd/portlist\x00', 0x2, 0x0) read(r1, &(0x7f0000000400), 0x1000) 970.923014ms ago: executing program 2 (id=6): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000100)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./sys/module/damon_reclaim/parameters/skip_anon\x00', 0x1, 0x0) write(r0, &(0x7f0000000300)='Y\n', 0x2) close(r0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./sys/module/damon_reclaim/parameters/enabled\x00', 0x1, 0x0) write(r1, &(0x7f0000000500)='Y\n', 0x2) close(r1) r2 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./sys/module/damon_reclaim/parameters/enabled\x00', 0x1, 0x0) write(r2, &(0x7f0000000600)='N\n', 0x2) close(r2) r3 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./sys/module/damon_reclaim/parameters/enabled\x00', 0x1, 0x0) write(r3, &(0x7f0000000500)='Y\n', 0x2) close(r3) nanosleep(&(0x7f0000000800)={0x1}, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000700)='./sys/module/damon_reclaim/parameters/commit_inputs\x00', 0x1, 0x0) write(r4, &(0x7f0000000500)='Y\n', 0x2) close(r4) 897.257059ms ago: executing program 0 (id=1): r0 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt(r0, 0x84, 0x80, &(0x7f0000000000)="0000000001000000", 0x8) setsockopt(r0, 0x84, 0x81, &(0x7f0000000040)="0000000001000000", 0x8) bind$inet(r0, 0x0, 0x0) listen(r0, 0x5) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt(r1, 0x84, 0x80, &(0x7f0000000100)="0000000001000000", 0x8) setsockopt(r1, 0x84, 0x81, &(0x7f0000000140)="0000000001000000", 0x8) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f00000001c0)=[@in={0x2, 0x0, @loopback}], 0x10) connect(r1, &(0x7f0000000200)=@in={0x2, 0x4e20, @loopback}, 0x80) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000000280)=[@in={0x2, 0x0, @local}], 0x10) 763.119523ms ago: executing program 3 (id=4): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./dev\x00', &(0x7f0000000080)='devtmpfs\x00', 0x0, 0x0) 695.253137ms ago: executing program 0 (id=7): nanosleep(&(0x7f0000000040)={0x1}, 0x0) 624.869969ms ago: executing program 3 (id=8): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./debug\x00', 0x1ff) mount(&(0x7f0000000040)=@filename='debugfs\x00', &(0x7f0000000080)='./debug\x00', 0x0, 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./debug/bluetooth/6lowpan_enable\x00', 0x2, 0x0) write(r0, &(0x7f0000000140)='1\n', 0x2) close(r0) syz_emit_vhci(&(0x7f0000000180)=ANY=[@ANYBLOB="02c92012000e00050014010a0023004000000500050a00"], 0x17) syz_emit_vhci(&(0x7f0000000400)=ANY=[@ANYBLOB="043e130100ca000100aaaaaaaaaa2218000000480005"], 0x16) nanosleep(&(0x7f0000000300)={0x0, 0x5f5e100}, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./debug/bluetooth/6lowpan_control\x00', 0x2, 0x0) write(r1, &(0x7f0000000500)='connect 22:aa:aa:aa:aa:aa 1\n', 0x1c) write(r1, &(0x7f0000000240)='connect 11:aa:aa:aa:aa:aa 1\n', 0x1c) write(r1, &(0x7f0000000280)='disconnect 11:aa:aa:aa:aa:aa 0\n', 0x1f) write(r1, &(0x7f0000000540)='disconnect 11:aa:aa:aa:aa:aa 0\n', 0x1f) write(r1, &(0x7f0000000580)='connect 22:aa:aa:aa:aa:aa 1\n', 0x1c) close(r1) 0s ago: executing program 3 (id=9): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ff) mount(&(0x7f0000000040)=@filename='none\x00', &(0x7f0000000000)='./config\x00', &(0x7f0000000080)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./config/usb_gadget/g1\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./config/usb_gadget/g1/functions/tcm.usb0\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000180)='./config/target/core/rd_mcp_0\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f00000001c0)='./config/target/core/rd_mcp_0/ramdisk0\x00', 0x1ff) r0 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./config/target/core/rd_mcp_0/ramdisk0/control\x00', 0x1, 0x0) write(r0, &(0x7f0000000240)='rd_pages=64\n', 0xc) close(r0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./config/target/core/rd_mcp_0/ramdisk0/enable\x00', 0x1, 0x0) write(r1, &(0x7f00000002c0)='1\n', 0x2) close(r1) mkdirat(0xffffffffffffff9c, &(0x7f0000000300)='./config/target/usb_gadget\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./config/target/usb_gadget/naa.6001405c935d7912\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000380)='./config/target/usb_gadget/naa.6001405c935d7912/tpgt_1\x00', 0x1ff) r2 = openat(0xffffffffffffff9c, &(0x7f00000003c0)='./config/target/usb_gadget/naa.6001405c935d7912/tpgt_1/nexus\x00', 0x1, 0x0) write(r2, &(0x7f0000000400)='naa.6001405c935d7912\n', 0x16) close(r2) mkdirat(0xffffffffffffff9c, &(0x7f0000000440)='./config/target/usb_gadget/naa.6001405c935d7912/tpgt_1/lun/lun_0\x00', 0x1ff) symlinkat(&(0x7f0000000480)='./config/target/core/rd_mcp_0/ramdisk0\x00', 0xffffffffffffff9c, &(0x7f00000004c0)='./config/target/usb_gadget/naa.6001405c935d7912/tpgt_1/lun/lun_0/virtual_scsi_port\x00') r3 = openat(0xffffffffffffff9c, &(0x7f0000000500)='./config/target/usb_gadget/naa.6001405c935d7912/tpgt_1/enable\x00', 0x1, 0x0) write(r3, &(0x7f0000000540)='1\n', 0x2) close(r3) mkdirat(0xffffffffffffff9c, &(0x7f0000000580)='./config/usb_gadget/g1/configs/c.1\x00', 0x1ff) symlinkat(&(0x7f00000005c0)='./config/usb_gadget/g1/functions/tcm.usb0\x00', 0xffffffffffffff9c, &(0x7f0000000600)='./config/usb_gadget/g1/configs/c.1/tcm.usb0\x00') r4 = openat(0xffffffffffffff9c, &(0x7f0000000640)='./config/usb_gadget/g1/UDC\x00', 0x1, 0x0) write(r4, &(0x7f0000000680)='dummy_udc.0\n', 0xc) close(r4) nanosleep(&(0x7f00000006c0)={0x1}, 0x0) r5 = syz_open_dev$sg(&(0x7f0000000700), 0x1, 0x2) ioctl$SG_IO(r5, 0x2285, &(0x7f0000000740)={0x53, 0xffffffffffffffff, 0x10, 0x0, @buffer={0x0, 0x0, 0x0}, &(0x7f0000000780)="8f000000000000000000000000010000", 0x0, 0x3e8, 0x0, 0x0, 0x0}) r6 = syz_open_dev$sg(&(0x7f0000000700), 0x0, 0x2) ioctl$SG_IO(r6, 0x2285, &(0x7f0000000740)={0x53, 0xffffffffffffffff, 0x10, 0x0, @buffer={0x0, 0x0, 0x0}, &(0x7f0000000780)="8f000000000000000000000000010000", 0x0, 0x3e8, 0x0, 0x0, 0x0}) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.1.77' (ED25519) to the list of known hosts. [ 58.702398][ T31] audit: type=1400 audit(1790053489.174:129): avc: denied { mounton } for pid=5585 comm="syz-executor" path="/syzcgroup/unified" dev="sda1" ino=2023 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1 [ 58.726296][ T31] audit: type=1400 audit(1790053489.204:130): avc: denied { mount } for pid=5585 comm="syz-executor" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 58.728396][ T5585] cgroup: Unknown subsys name 'net' [ 58.729540][ T31] audit: type=1400 audit(1790053489.204:131): avc: denied { unmount } for pid=5585 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 58.835145][ T5585] cgroup: Unknown subsys name 'cpuset' [ 58.837131][ T5585] cgroup: Unknown subsys name 'rlimit' [ 58.934668][ T31] audit: type=1400 audit(1790053489.414:132): avc: denied { setattr } for pid=5585 comm="syz-executor" name="raw-gadget" dev="devtmpfs" ino=814 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 58.935024][ T31] audit: type=1400 audit(1790053489.414:133): avc: denied { create } for pid=5585 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 58.935215][ T31] audit: type=1400 audit(1790053489.414:134): avc: denied { write } for pid=5585 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 58.935489][ T31] audit: type=1400 audit(1790053489.414:135): avc: denied { read } for pid=5585 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 58.946023][ T31] audit: type=1400 audit(1790053489.424:136): avc: denied { mounton } for pid=5585 comm="syz-executor" path="/proc/sys/fs/binfmt_misc" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=dir permissive=1 [ 58.946062][ T31] audit: type=1400 audit(1790053489.424:137): avc: denied { mount } for pid=5585 comm="syz-executor" name="/" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=filesystem permissive=1 [ 59.069032][ T5587] SELinux: Context root:object_r:swapfile_t is not valid (left unmapped). Setting up swapspace version 1, size = 127995904 bytes [ 59.070113][ T31] audit: type=1400 audit(1790053489.544:138): avc: denied { relabelto } for pid=5587 comm="mkswap" name="swap-file" dev="sda1" ino=2026 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 60.025547][ T5585] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 64.029492][ T31] kauditd_printk_skb: 4 callbacks suppressed [ 64.029521][ T31] audit: type=1400 audit(1790053494.504:143): avc: denied { create } for pid=5596 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 64.030146][ T31] audit: type=1400 audit(1790053494.504:144): avc: denied { read write } for pid=5596 comm="syz-executor" name="vhci" dev="devtmpfs" ino=1267 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 64.030927][ T31] audit: type=1400 audit(1790053494.504:145): avc: denied { create } for pid=5595 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 64.031572][ T31] audit: type=1400 audit(1790053494.504:146): avc: denied { open } for pid=5596 comm="syz-executor" path="/dev/vhci" dev="devtmpfs" ino=1267 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 64.050207][ T31] audit: type=1400 audit(1790053494.524:147): avc: denied { ioctl } for pid=5596 comm="syz-executor" path="socket:[3822]" dev="sockfs" ino=3822 ioctlcmd=0x48c9 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 64.111982][ T5600] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 64.134917][ T5610] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 64.154515][ T5611] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 64.155725][ T5611] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 64.156607][ T5611] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 64.156941][ T5611] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 64.157378][ T5611] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 64.158790][ T5611] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 64.159089][ T5611] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 64.159671][ T5611] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 64.159999][ T5611] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 64.160542][ T5611] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 64.168675][ T52] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 64.170178][ T4917] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 64.170722][ T4917] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 64.171537][ T5611] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 64.171848][ T5611] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 64.173584][ T5611] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 64.175110][ T5612] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 64.175254][ T5612] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 64.176088][ T5613] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 64.176272][ T5613] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 64.176461][ T5613] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 64.179977][ T31] audit: type=1400 audit(1790053494.654:148): avc: denied { read } for pid=5601 comm="syz-executor" dev="nsfs" ino=4026531833 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 64.180392][ T31] audit: type=1400 audit(1790053494.654:149): avc: denied { open } for pid=5601 comm="syz-executor" path="net:[4026531833]" dev="nsfs" ino=4026531833 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 64.181529][ T31] audit: type=1400 audit(1790053494.654:150): avc: denied { mounton } for pid=5596 comm="syz-executor" path="/" dev="sda1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:root_t tclass=dir permissive=1 [ 64.190744][ T5612] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 64.190832][ T5612] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 64.221677][ T31] audit: type=1400 audit(1790053494.694:151): avc: denied { module_request } for pid=5601 comm="syz-executor" kmod="netdev-nr3" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1 [ 64.225878][ T31] audit: type=1400 audit(1790053494.704:152): avc: denied { module_request } for pid=5596 comm="syz-executor" kmod="netdev-nr1" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1 [ 65.483693][ T5597] bridge0: port 1(bridge_slave_0) entered blocking state [ 65.483777][ T5597] bridge0: port 1(bridge_slave_0) entered disabled state [ 65.483873][ T5597] bridge_slave_0: entered allmulticast mode [ 65.485683][ T5597] bridge_slave_0: entered promiscuous mode [ 65.489073][ T5597] bridge0: port 2(bridge_slave_1) entered blocking state [ 65.489168][ T5597] bridge0: port 2(bridge_slave_1) entered disabled state [ 65.489434][ T5597] bridge_slave_1: entered allmulticast mode [ 65.490675][ T5597] bridge_slave_1: entered promiscuous mode [ 65.525269][ T5608] bridge0: port 1(bridge_slave_0) entered blocking state [ 65.525336][ T5608] bridge0: port 1(bridge_slave_0) entered disabled state [ 65.525450][ T5608] bridge_slave_0: entered allmulticast mode [ 65.526583][ T5608] bridge_slave_0: entered promiscuous mode [ 65.528939][ T5608] bridge0: port 2(bridge_slave_1) entered blocking state [ 65.529003][ T5608] bridge0: port 2(bridge_slave_1) entered disabled state [ 65.529081][ T5608] bridge_slave_1: entered allmulticast mode [ 65.530501][ T5608] bridge_slave_1: entered promiscuous mode [ 65.619357][ T5597] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 65.640111][ T5608] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 65.663551][ T5597] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 65.669069][ T5608] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 65.748544][ T5597] team0: Port device team_slave_0 added [ 65.748688][ T5601] bridge0: port 1(bridge_slave_0) entered blocking state [ 65.748759][ T5601] bridge0: port 1(bridge_slave_0) entered disabled state [ 65.748856][ T5601] bridge_slave_0: entered allmulticast mode [ 65.749972][ T5601] bridge_slave_0: entered promiscuous mode [ 65.751743][ T5601] bridge0: port 2(bridge_slave_1) entered blocking state [ 65.751812][ T5601] bridge0: port 2(bridge_slave_1) entered disabled state [ 65.751890][ T5601] bridge_slave_1: entered allmulticast mode [ 65.753154][ T5601] bridge_slave_1: entered promiscuous mode [ 65.755364][ T5608] team0: Port device team_slave_0 added [ 65.790920][ T5597] team0: Port device team_slave_1 added [ 65.800929][ T1306] ieee802154 phy0 wpan0: encryption failed: -22 [ 65.800977][ T1306] ieee802154 phy1 wpan1: encryption failed: -22 [ 65.837999][ T5608] team0: Port device team_slave_1 added [ 65.873539][ T5601] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 65.888704][ T5597] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 65.888717][ T5597] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 65.888735][ T5597] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 65.891560][ T5597] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 65.891571][ T5597] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 65.891588][ T5597] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 65.904149][ T5601] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 65.913101][ T5596] bridge0: port 1(bridge_slave_0) entered blocking state [ 65.913204][ T5596] bridge0: port 1(bridge_slave_0) entered disabled state [ 65.913457][ T5596] bridge_slave_0: entered allmulticast mode [ 65.914795][ T5596] bridge_slave_0: entered promiscuous mode [ 65.916250][ T5595] bridge0: port 1(bridge_slave_0) entered blocking state [ 65.916316][ T5595] bridge0: port 1(bridge_slave_0) entered disabled state [ 65.916556][ T5595] bridge_slave_0: entered allmulticast mode [ 65.918492][ T5595] bridge_slave_0: entered promiscuous mode [ 65.927567][ T5608] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 65.927579][ T5608] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 65.927596][ T5608] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 65.938833][ T5596] bridge0: port 2(bridge_slave_1) entered blocking state [ 65.939489][ T5596] bridge0: port 2(bridge_slave_1) entered disabled state [ 65.939730][ T5596] bridge_slave_1: entered allmulticast mode [ 65.941116][ T5596] bridge_slave_1: entered promiscuous mode [ 65.943382][ T5595] bridge0: port 2(bridge_slave_1) entered blocking state [ 65.943446][ T5595] bridge0: port 2(bridge_slave_1) entered disabled state [ 65.943524][ T5595] bridge_slave_1: entered allmulticast mode [ 65.944679][ T5595] bridge_slave_1: entered promiscuous mode [ 65.946518][ T5608] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 65.946527][ T5608] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 65.946545][ T5608] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 65.949257][ T5601] team0: Port device team_slave_0 added [ 66.012418][ T5601] team0: Port device team_slave_1 added [ 66.063371][ T5596] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 66.076015][ T5595] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 66.078275][ T5595] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 66.083685][ T5597] hsr_slave_0: entered promiscuous mode [ 66.084593][ T5597] hsr_slave_1: entered promiscuous mode [ 66.097381][ T5596] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 66.128101][ T5601] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 66.128116][ T5601] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 66.128133][ T5601] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 66.155269][ T5608] hsr_slave_0: entered promiscuous mode [ 66.157412][ T5608] hsr_slave_1: entered promiscuous mode [ 66.157904][ T5608] debugfs: 'hsr0' already exists in 'hsr' [ 66.157973][ T5608] Cannot create hsr debugfs directory [ 66.184004][ T5595] team0: Port device team_slave_0 added [ 66.185902][ T5595] team0: Port device team_slave_1 added [ 66.201209][ T5610] Bluetooth: hci2: command tx timeout [ 66.201300][ T5610] Bluetooth: hci0: command tx timeout [ 66.211308][ T5601] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 66.211321][ T5601] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 66.211338][ T5601] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 66.272756][ T5600] Bluetooth: hci3: command tx timeout [ 66.273325][ T5610] Bluetooth: hci4: command tx timeout [ 66.273411][ T5602] Bluetooth: hci1: command tx timeout [ 66.409701][ T5596] team0: Port device team_slave_0 added [ 66.414848][ T5595] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 66.414861][ T5595] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 66.414878][ T5595] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 66.416561][ T5595] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 66.416571][ T5595] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 66.416588][ T5595] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 66.451290][ T5596] team0: Port device team_slave_1 added [ 66.517372][ T5601] hsr_slave_0: entered promiscuous mode [ 66.517791][ T5601] hsr_slave_1: entered promiscuous mode [ 66.518077][ T5601] debugfs: 'hsr0' already exists in 'hsr' [ 66.518092][ T5601] Cannot create hsr debugfs directory [ 66.549817][ T5596] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 66.549829][ T5596] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 66.549845][ T5596] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 66.589711][ T5596] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 66.589724][ T5596] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 66.589743][ T5596] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 66.651906][ T5595] hsr_slave_0: entered promiscuous mode [ 66.652335][ T5595] hsr_slave_1: entered promiscuous mode [ 66.653266][ T5595] debugfs: 'hsr0' already exists in 'hsr' [ 66.653281][ T5595] Cannot create hsr debugfs directory [ 66.727500][ T5596] hsr_slave_0: entered promiscuous mode [ 66.727933][ T5596] hsr_slave_1: entered promiscuous mode [ 66.728246][ T5596] debugfs: 'hsr0' already exists in 'hsr' [ 66.728261][ T5596] Cannot create hsr debugfs directory [ 66.883453][ T5597] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 66.887043][ T5597] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 66.908130][ T5597] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 66.914272][ T5597] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 66.930158][ T5597] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 66.936585][ T5597] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 66.959835][ T5597] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 66.963416][ T5597] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 67.016853][ T5608] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 67.027274][ T5608] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 67.027863][ T5608] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 67.032332][ T5608] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 67.052047][ T5608] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 67.055233][ T5608] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 67.055806][ T5608] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 67.064097][ T5608] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 67.129395][ T5601] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 67.132291][ T5601] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 67.136540][ T5601] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 67.141804][ T5601] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 67.165961][ T5601] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 67.169736][ T5601] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 67.171826][ T5601] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 67.176654][ T5601] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 67.211967][ T5597] 8021q: adding VLAN 0 to HW filter on device bond0 [ 67.248747][ T5597] 8021q: adding VLAN 0 to HW filter on device team0 [ 67.281990][ T5596] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 67.290959][ T5596] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 67.292216][ T5596] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 67.303539][ T5596] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 67.323772][ T43] bridge0: port 1(bridge_slave_0) entered blocking state [ 67.323842][ T43] bridge0: port 1(bridge_slave_0) entered forwarding state [ 67.325274][ T5596] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 67.327807][ T5596] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 67.328331][ T5596] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 67.330562][ T5596] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 67.365410][ T5608] 8021q: adding VLAN 0 to HW filter on device bond0 [ 67.386497][ T43] bridge0: port 2(bridge_slave_1) entered blocking state [ 67.386540][ T43] bridge0: port 2(bridge_slave_1) entered forwarding state [ 67.421123][ T5608] 8021q: adding VLAN 0 to HW filter on device team0 [ 67.458459][ T1191] bridge0: port 1(bridge_slave_0) entered blocking state [ 67.458710][ T1191] bridge0: port 1(bridge_slave_0) entered forwarding state [ 67.460026][ T1191] bridge0: port 2(bridge_slave_1) entered blocking state [ 67.460067][ T1191] bridge0: port 2(bridge_slave_1) entered forwarding state [ 67.476713][ T5595] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 67.480159][ T5595] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 67.494722][ T5595] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 67.508432][ T5595] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 67.519895][ T5595] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 67.525356][ T5595] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 67.525943][ T5595] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 67.530086][ T5595] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 67.563732][ T5601] 8021q: adding VLAN 0 to HW filter on device bond0 [ 67.652463][ T5601] 8021q: adding VLAN 0 to HW filter on device team0 [ 67.691004][ T43] bridge0: port 1(bridge_slave_0) entered blocking state [ 67.691090][ T43] bridge0: port 1(bridge_slave_0) entered forwarding state [ 67.723912][ T43] bridge0: port 2(bridge_slave_1) entered blocking state [ 67.723997][ T43] bridge0: port 2(bridge_slave_1) entered forwarding state [ 67.770371][ T5596] 8021q: adding VLAN 0 to HW filter on device bond0 [ 67.832294][ T5596] 8021q: adding VLAN 0 to HW filter on device team0 [ 67.870582][ T1191] bridge0: port 1(bridge_slave_0) entered blocking state [ 67.870650][ T1191] bridge0: port 1(bridge_slave_0) entered forwarding state [ 67.907543][ T5595] 8021q: adding VLAN 0 to HW filter on device bond0 [ 67.915547][ T1191] bridge0: port 2(bridge_slave_1) entered blocking state [ 67.915628][ T1191] bridge0: port 2(bridge_slave_1) entered forwarding state [ 68.019031][ T5595] 8021q: adding VLAN 0 to HW filter on device team0 [ 68.045860][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 68.045945][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 68.065786][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 68.066378][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 68.272296][ T5597] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 68.274010][ T5602] Bluetooth: hci0: command tx timeout [ 68.274033][ T5602] Bluetooth: hci2: command tx timeout [ 68.357284][ T5610] Bluetooth: hci1: command tx timeout [ 68.357314][ T5610] Bluetooth: hci4: command tx timeout [ 68.357333][ T5610] Bluetooth: hci3: command tx timeout [ 68.442038][ T5597] veth0_vlan: entered promiscuous mode [ 68.498546][ T5608] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 68.500920][ T5597] veth1_vlan: entered promiscuous mode [ 68.561667][ T5601] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 68.616867][ T5597] veth0_macvtap: entered promiscuous mode [ 68.651121][ T5597] veth1_macvtap: entered promiscuous mode [ 68.679099][ T5608] veth0_vlan: entered promiscuous mode [ 68.717134][ T5608] veth1_vlan: entered promiscuous mode [ 68.720912][ T5597] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 68.739370][ T5597] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 68.748119][ T5601] veth0_vlan: entered promiscuous mode [ 68.791268][ T5601] veth1_vlan: entered promiscuous mode [ 68.823936][ T50] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 68.824453][ T12] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 68.824488][ T12] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 68.824519][ T12] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 68.861578][ T5608] veth0_macvtap: entered promiscuous mode [ 68.902116][ T5608] veth1_macvtap: entered promiscuous mode [ 68.948269][ T5601] veth0_macvtap: entered promiscuous mode [ 68.997961][ T661] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 68.997976][ T661] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 69.007654][ T5601] veth1_macvtap: entered promiscuous mode [ 69.016242][ T5608] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 69.038827][ T5596] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 69.040241][ T5608] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 69.084253][ T5595] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 69.085481][ T5601] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 69.120443][ T59] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 69.120462][ T59] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 69.145804][ T5601] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 69.179895][ T31] kauditd_printk_skb: 2 callbacks suppressed [ 69.179912][ T31] audit: type=1400 audit(1790053499.654:155): avc: denied { mounton } for pid=5597 comm="syz-executor" path="/root/syzkaller.DqHGuO/syz-tmp" dev="sda1" ino=2042 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_home_t tclass=dir permissive=1 [ 69.180245][ T31] audit: type=1400 audit(1790053499.654:156): avc: denied { mount } for pid=5597 comm="syz-executor" name="/" dev="tmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 69.224637][ T31] audit: type=1400 audit(1790053499.704:157): avc: denied { mounton } for pid=5597 comm="syz-executor" path="/root/syzkaller.DqHGuO/syz-tmp/newroot/dev" dev="tmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 69.231875][ T31] audit: type=1400 audit(1790053499.704:158): avc: denied { mount } for pid=5597 comm="syz-executor" name="/" dev="proc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 69.260583][ T31] audit: type=1400 audit(1790053499.734:159): avc: denied { mounton } for pid=5597 comm="syz-executor" path="/root/syzkaller.DqHGuO/syz-tmp/newroot/sys/kernel/debug" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=dir permissive=1 [ 69.282847][ T31] audit: type=1400 audit(1790053499.744:160): avc: denied { mounton } for pid=5597 comm="syz-executor" path="/root/syzkaller.DqHGuO/syz-tmp/newroot/proc/sys/fs/binfmt_misc" dev="proc" ino=7683 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysctl_fs_t tclass=dir permissive=1 [ 69.299356][ T31] audit: type=1400 audit(1790053499.774:161): avc: denied { unmount } for pid=5597 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 69.348118][ T5596] veth0_vlan: entered promiscuous mode [ 69.360557][ T31] audit: type=1400 audit(1790053499.834:162): avc: denied { mounton } for pid=5597 comm="syz-executor" path="/dev/gadgetfs" dev="devtmpfs" ino=2780 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:device_t tclass=dir permissive=1 [ 69.368227][ T31] audit: type=1400 audit(1790053499.844:163): avc: denied { mount } for pid=5597 comm="syz-executor" name="/" dev="gadgetfs" ino=7745 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfs_t tclass=filesystem permissive=1 [ 69.377826][ T31] audit: type=1400 audit(1790053499.854:164): avc: denied { mount } for pid=5597 comm="syz-executor" name="/" dev="binder" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 69.447961][ T5597] soft_limit_in_bytes is deprecated and will be removed. Writing any value to this file has no effect. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 69.458527][ T1520] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 69.458543][ T1520] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 69.460823][ T5596] veth1_vlan: entered promiscuous mode [ 69.464969][ T43] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 69.465591][ T43] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 69.465619][ T43] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 69.465645][ T43] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 69.465671][ T43] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 69.465696][ T43] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 69.465722][ T43] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 69.465749][ T43] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 69.544537][ T59] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 69.544553][ T59] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 69.647742][ T661] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 69.647762][ T661] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 69.707135][ T5596] veth0_macvtap: entered promiscuous mode [ 69.709881][ T1191] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 69.709900][ T1191] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 69.764564][ T5596] veth1_macvtap: entered promiscuous mode [ 69.841245][ T5595] veth0_vlan: entered promiscuous mode [ 69.845801][ T5596] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 69.853607][ T5596] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 69.868282][ T5595] veth1_vlan: entered promiscuous mode [ 69.874686][ T59] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 69.875368][ T59] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 69.875396][ T59] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 69.875422][ T59] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 70.352883][ T5602] Bluetooth: hci2: command tx timeout [ 70.352912][ T5602] Bluetooth: hci0: command tx timeout [ 70.433371][ T5602] Bluetooth: hci3: command tx timeout [ 70.433402][ T5602] Bluetooth: hci4: command tx timeout [ 70.433421][ T5602] Bluetooth: hci1: command tx timeout [ 70.725986][ T5809] Rounding down aligned max_sectors from 4294967295 to 4294967288 [ 70.746312][ T5809] [ 70.748652][ T5809] ====================================================== [ 70.755643][ T5809] WARNING: possible circular locking dependency detected [ 70.762644][ T5809] syzkaller #0 Not tainted [ 70.767033][ T5809] ------------------------------------------------------ [ 70.774028][ T5809] syz.3.9/5809 is trying to acquire lock: [ 70.779716][ T5809] ffffffff90480000 (tpg_instances_lock){+.+.}-{4:4}, at: tcm_alloc+0x20/0x440 [ 70.788561][ T5809] [ 70.788561][ T5809] but task is already holding lock: [ 70.795900][ T5809] ffff88807c7f4390 (&gi->lock){+.+.}-{4:4}, at: config_usb_cfg_link+0x57/0x3a0 [ 70.804881][ T5809] [ 70.804881][ T5809] which lock already depends on the new lock. [ 70.804881][ T5809] [ 70.815268][ T5809] [ 70.815268][ T5809] the existing dependency chain (in reverse order) is: [ 70.824254][ T5809] [ 70.824254][ T5809] -> #2 (&gi->lock){+.+.}-{4:4}: [ 70.831348][ T5809] lock_acquire+0x1d1/0x380 [ 70.836370][ T5809] __mutex_lock+0x1a4/0x1bd0 [ 70.841464][ T5809] config_usb_cfg_link+0x57/0x3a0 [ 70.846996][ T5809] configfs_symlink+0x695/0x1340 [ 70.852456][ T5809] vfs_symlink+0x178/0x4d0 [ 70.857393][ T5809] filename_symlinkat+0x2a6/0x560 [ 70.862945][ T5809] __x64_sys_symlinkat+0x9c/0xe0 [ 70.868406][ T5809] do_syscall_64+0x123/0x790 [ 70.873521][ T5809] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 70.879917][ T5809] [ 70.879917][ T5809] -> #1 (&sb->s_type->i_mutex_key#26){++++}-{4:4}: [ 70.888586][ T5809] lock_acquire+0x1d1/0x380 [ 70.893589][ T5809] down_write+0x8b/0x1f0 [ 70.898331][ T5809] configfs_depend_item_unlocked+0xf3/0x6a0 [ 70.904727][ T5809] usbg_make_tpg+0x251/0x610 [ 70.909825][ T5809] target_fabric_make_tpg+0xab/0x8c0 [ 70.915639][ T5809] configfs_mkdir+0x525/0xd40 [ 70.920820][ T5809] vfs_mkdir+0x364/0x850 [ 70.925574][ T5809] filename_mkdirat+0x48b/0x5e0 [ 70.930928][ T5809] __x64_sys_mkdirat+0x89/0xc0 [ 70.936195][ T5809] do_syscall_64+0x123/0x790 [ 70.941290][ T5809] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 70.947682][ T5809] [ 70.947682][ T5809] -> #0 (tpg_instances_lock){+.+.}-{4:4}: [ 70.955564][ T5809] check_prev_add+0xeb/0xe60 [ 70.960657][ T5809] __lock_acquire+0x1528/0x1f40 [ 70.966008][ T5809] lock_acquire+0x1d1/0x380 [ 70.971010][ T5809] __mutex_lock+0x1a4/0x1bd0 [ 70.976107][ T5809] tcm_alloc+0x20/0x440 [ 70.980766][ T5809] usb_get_function+0x5e/0xd0 [ 70.985941][ T5809] config_usb_cfg_link+0x1ed/0x3a0 [ 70.991558][ T5809] configfs_symlink+0x695/0x1340 [ 70.996995][ T5809] vfs_symlink+0x178/0x4d0 [ 71.001910][ T5809] filename_symlinkat+0x2a6/0x560 [ 71.007440][ T5809] __x64_sys_symlinkat+0x9c/0xe0 [ 71.012882][ T5809] do_syscall_64+0x123/0x790 [ 71.017977][ T5809] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 71.024374][ T5809] [ 71.024374][ T5809] other info that might help us debug this: [ 71.024374][ T5809] [ 71.034579][ T5809] Chain exists of: [ 71.034579][ T5809] tpg_instances_lock --> &sb->s_type->i_mutex_key#26 --> &gi->lock [ 71.034579][ T5809] [ 71.048374][ T5809] Possible unsafe locking scenario: [ 71.048374][ T5809] [ 71.055798][ T5809] CPU0 CPU1 [ 71.061138][ T5809] ---- ---- [ 71.066479][ T5809] lock(&gi->lock); [ 71.070352][ T5809] lock(&sb->s_type->i_mutex_key#26); [ 71.078316][ T5809] lock(&gi->lock); [ 71.084711][ T5809] lock(tpg_instances_lock); [ 71.089367][ T5809] [ 71.089367][ T5809] *** DEADLOCK *** [ 71.089367][ T5809] [ 71.097485][ T5809] locks held by syz.3.9/5809: 3, last CPU#1: [ 71.103442][ T5809] #0: ffff88801e78c460 (sb_writers#13){.+.+}-{0:0}, at: filename_create+0x10d/0x400 [ 71.112908][ T5809] #1: ffff888056aacac0 (&sb->s_type->i_mutex_key#26){++++}-{4:4}, at: configfs_symlink+0x452/0x1340 [ 71.123765][ T5809] #2: ffff88807c7f4390 (&gi->lock){+.+.}-{4:4}, at: config_usb_cfg_link+0x57/0x3a0 [ 71.133142][ T5809] [ 71.133142][ T5809] stack backtrace: [ 71.139009][ T5809] CPU: 1 UID: 0 PID: 5809 Comm: syz.3.9 Not tainted syzkaller #0 PREEMPT(full) [ 71.148011][ T5809] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/05/2026 [ 71.158043][ T5809] Call Trace: [ 71.161302][ T5809] [ 71.164213][ T5809] dump_stack_lvl+0x100/0x190 [ 71.168878][ T5809] print_circular_bug.cold+0x178/0x1be [ 71.174338][ T5809] check_noncircular+0x146/0x160 [ 71.179267][ T5809] check_prev_add+0xeb/0xe60 [ 71.183838][ T5809] __lock_acquire+0x1528/0x1f40 [ 71.188674][ T5809] lock_acquire+0x1d1/0x380 [ 71.193170][ T5809] ? tcm_alloc+0x20/0x440 [ 71.197486][ T5809] ? __pfx___might_resched+0x10/0x10 [ 71.202751][ T5809] ? config_usb_cfg_link+0x57/0x3a0 [ 71.207935][ T5809] __mutex_lock+0x1a4/0x1bd0 [ 71.212512][ T5809] ? tcm_alloc+0x20/0x440 [ 71.216827][ T5809] ? tcm_alloc+0x20/0x440 [ 71.221140][ T5809] ? __mutex_lock+0x26c/0x1bd0 [ 71.225891][ T5809] ? config_usb_cfg_link+0x57/0x3a0 [ 71.231075][ T5809] ? __pfx___mutex_lock+0x10/0x10 [ 71.236088][ T5809] ? __pfx_selinux_inode_permission+0x10/0x10 [ 71.242153][ T5809] ? tcm_alloc+0x20/0x440 [ 71.246476][ T5809] tcm_alloc+0x20/0x440 [ 71.250616][ T5809] usb_get_function+0x5e/0xd0 [ 71.255272][ T5809] config_usb_cfg_link+0x1ed/0x3a0 [ 71.260372][ T5809] ? mntput_no_expire+0xe7/0x220 [ 71.265296][ T5809] configfs_symlink+0x695/0x1340 [ 71.270217][ T5809] ? __pfx_configfs_symlink+0x10/0x10 [ 71.275571][ T5809] vfs_symlink+0x178/0x4d0 [ 71.279982][ T5809] filename_symlinkat+0x2a6/0x560 [ 71.284996][ T5809] ? __pfx_filename_symlinkat+0x10/0x10 [ 71.290526][ T5809] ? strncpy_from_user+0x19d/0x2d0 [ 71.295635][ T5809] ? do_getname+0x191/0x390 [ 71.300125][ T5809] __x64_sys_symlinkat+0x9c/0xe0 [ 71.305046][ T5809] do_syscall_64+0x123/0x790 [ 71.309625][ T5809] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 71.315509][ T5809] RIP: 0033:0x7f7aff79e159 [ 71.319906][ T5809] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 71.339491][ T5809] RSP: 002b:00007f7b00722028 EFLAGS: 00000246 ORIG_RAX: 000000000000010a [ 71.347884][ T5809] RAX: ffffffffffffffda RBX: 00007f7affa25fa0 RCX: 00007f7aff79e159 [ 71.355853][ T5809] RDX: 0000200000000600 RSI: ffffffffffffff9c RDI: 00002000000005c0 [ 71.363808][ T5809] RBP: 00007f7aff83506b R08: 0000000000000000 R09: 0000000000000000 [ 71.371756][ T5809] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 71.379706][ T5809] R13: 00007f7affa26038 R14: 00007f7affa25fa0 R15: 00007ffdaec9c468 [ 71.387661][ T5809] [ 71.662646][ T2324] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 71.822838][ T2324] usb 1-1: New USB device found, idVendor=0000, idProduct=0000, bcdDevice= 7.03 [ 71.823299][ T2324] usb 1-1: Dual-Role OTG device on HNP port [ 71.823477][ T2324] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 71.825399][ T5786] Using the BOT protocol [ 71.828675][ T5786] Using the UAS protocol [ 71.832755][ T2324] scsi host1: uas [ 71.872043][ T43] scsi 1:0:0:0: Direct-Access LIO-ORG RAMDISK-MCP 4.0 PQ: 0 ANSI: 6 [ 71.888575][ T43] sd 1:0:0:0: Attached scsi generic sg1 type 0 [ 71.888622][ T1191] sd 1:0:0:0: [sdb] 512 512-byte logical blocks: (262 kB/256 KiB) [ 71.889711][ T1191] sd 1:0:0:0: [sdb] Write Protect is off [ 71.889739][ T1191] sd 1:0:0:0: [sdb] Mode Sense: 43 00 00 08 [ 71.893395][ T1191] sd 1:0:0:0: [sdb] Write cache: disabled, read cache: enabled, doesn't support DPO or FUA [ 71.966168][ T1191] sd 1:0:0:0: [sdb] Attached SCSI disk [ 72.432814][ T5610] Bluetooth: hci0: command tx timeout [ 72.432840][ T5610] Bluetooth: hci2: command tx timeout [ 72.522870][ T5610] Bluetooth: hci4: command tx timeout [ 72.522896][ T5610] Bluetooth: hci3: command tx timeout [ 72.522918][ T5602] Bluetooth: hci1: command tx timeout [ 74.913103][ T5596] ieee80211 phy9: Selected rate control algorithm 'minstrel_ht' [ 74.923538][ T5595] veth0_macvtap: entered promiscuous mode [ 74.923948][ T31] kauditd_printk_skb: 116 callbacks suppressed [ 74.923958][ T31] audit: type=1400 audit(1790053505.394:281): avc: denied { unmount } for pid=5597 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=filesystem permissive=1 [ 74.940249][ T5595] veth1_macvtap: entered promiscuous mode [ 74.943085][ T1520] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 74.943098][ T1520] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 74.947611][ T5596] ieee80211 phy10: Selected rate control algorithm 'minstrel_ht' [ 74.969600][ T1191] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 74.969616][ T1191] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 74.971387][ T5595] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 74.981392][ T5595] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 75.013102][ T661] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.013134][ T661] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.013157][ T661] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.013179][ T661] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.052169][ T5595] ieee80211 phy11: Selected rate control algorithm 'minstrel_ht' [ 75.084611][ T50] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 75.084629][ T50] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 75.088257][ T5595] ieee80211 phy12: Selected rate control algorithm 'minstrel_ht' [ 75.104403][ T50] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 75.104418][ T50] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 76.033038][ T10] cfg80211: failed to load regulatory.db