last executing test programs: 2.51309842s ago: executing program 1 (id=2): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./config\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./config\x00', &(0x7f00000000c0)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./config/usb_gadget/g1\x00', 0x1ff) write(0xffffffffffffffff, &(0x7f0000000180)='0x0499', 0x6) openat(0xffffffffffffff9c, &(0x7f00000001c0)='./config/usb_gadget/g1/idProduct\x00', 0x2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./config/usb_gadget/g1/functions/midi2.0\x00', 0x1ff) openat(0xffffffffffffff9c, &(0x7f00000002c0)='./config/usb_gadget/g1/functions/midi2.0/process_ump\x00', 0x2, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000380)='./config/usb_gadget/g1/functions/midi2.0/ep.0/ep_name\x00', 0x2, 0x0) write(r0, &(0x7f00000003c0)='ep0\n', 0x4) r1 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./config/usb_gadget/g1/functions/midi2.0/ep.0/block.0/direction\x00', 0x2, 0x0) write(r1, &(0x7f0000000440)='3\n', 0x2) r2 = openat(0xffffffffffffff9c, &(0x7f0000000480)='./config/usb_gadget/g1/functions/midi2.0/ep.0/block.0/name\x00', 0x2, 0x0) write(r2, &(0x7f00000004c0)='blk0\n', 0x5) write(0xffffffffffffffff, &(0x7f0000000540)='1\n', 0x2) r3 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./config/usb_gadget/g1/functions/midi2.0/ep.1/ep_name\x00', 0x2, 0x0) write(r3, &(0x7f0000000640)='ep1\n', 0x4) r4 = openat(0xffffffffffffff9c, 0x0, 0x2, 0x0) write(r4, &(0x7f00000006c0)='3', 0x1) openat(0xffffffffffffff9c, &(0x7f0000000700)='./config/usb_gadget/g1/functions/midi2.0/ep.1/block.0/name\x00', 0x2, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000780)='./config/usb_gadget/g1/functions/midi2.0/ep.1/block.0/active\x00', 0x2, 0x0) write(r5, &(0x7f00000007c0), 0x0) symlinkat(&(0x7f0000000800)='./config/usb_gadget/g1/functions/midi2.0\x00', 0xffffffffffffff9c, &(0x7f0000000840)='./config/usb_gadget/g1/configs/c.1/midi2.0\x00') openat(0xffffffffffffff9c, 0x0, 0x2, 0x0) 2.340963888s ago: executing program 1 (id=7): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./config\x00', &(0x7f0000000040)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./config/cluster/mycluster\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./config/cluster/mycluster/node/mynode\x00', 0x1ff) r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./config/cluster/mycluster/node/mynode/ipv4_address\x00', 0x2, 0x0) write(r0, &(0x7f0000000180)='127.0.0.1', 0x9) close(r0) r1 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./config/cluster/mycluster/node/mynode/ipv4_port\x00', 0x2, 0x0) write(r1, &(0x7f0000000200)='77', 0x2) close(r1) r2 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./config/cluster/mycluster/node/mynode/num\x00', 0x2, 0x0) write(r2, &(0x7f0000000280)='0', 0x1) close(r2) r3 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./config/cluster/mycluster/node/mynode/local\x00', 0x2, 0x0) write(r3, &(0x7f0000000300)='1', 0x1) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./config/cluster/mycluster/heartbeat/myregion\x00', 0x1ff) r4 = openat(0xffffffffffffff9c, &(0x7f0000000380)='./config/cluster/mycluster/heartbeat/myregion/block_bytes\x00', 0x2, 0x0) write(r4, &(0x7f00000003c0)='512', 0x3) close(r4) r5 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./config/cluster/mycluster/heartbeat/myregion/blocks\x00', 0x2, 0x0) write(r5, &(0x7f0000000440)='255', 0x3) close(r5) r6 = openat(0xffffffffffffff9c, &(0x7f0000000480)='./config/cluster/mycluster/heartbeat/myregion/start_block\x00', 0x2, 0x0) write(r6, &(0x7f00000004c0)='1', 0x1) close(r6) mknodat(0xffffffffffffff9c, &(0x7f0000000540)='./loop0\x00', 0x61c0, 0x700) r7 = openat(0xffffffffffffff9c, &(0x7f0000000540)='./loop0\x00', 0x2, 0x0) r8 = openat(0xffffffffffffff9c, &(0x7f0000000500)='./backing_file\x00', 0x42, 0x1ff) fallocate(r8, 0x0, 0x0, 0x100000) ioctl$LOOP_SET_FD(r7, 0x4c00, r8) r9 = openat(0xffffffffffffff9c, &(0x7f0000000580)='./config/cluster/mycluster/heartbeat/myregion/dev\x00', 0x2, 0x0) write(r9, &(0x7f00000005c0)='3', 0x1) 2.305241257s ago: executing program 0 (id=9): mkdirat(0xffffffffffffff9c, &(0x7f0000000050)='./sys\x00', 0x1ed) mount(0x0, 0x0, &(0x7f0000000070)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./sys/bus/platform/devices/pcspkr/driver_override\x00', 0x1, 0x0) write(r0, &(0x7f0000000100)='usbip-vudc\x00', 0xa) mkdirat(0xffffffffffffff9c, &(0x7f0000000400)='./config\x00', 0x1ed) mount(0x0, &(0x7f0000000500)='./config\x00', &(0x7f0000000600)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000700)='./config/usb_gadget/g1\x00', 0x1ed) r1 = openat(0xffffffffffffff9c, &(0x7f0000000800)='./config/usb_gadget/g1/idVendor\x00', 0x1, 0x0) close(r1) r2 = openat(0xffffffffffffff9c, &(0x7f0000000a00)='./config/usb_gadget/g1/idProduct\x00', 0x1, 0x0) write(r2, &(0x7f0000000b00)='0x01', 0x4) close(r2) mkdirat(0xffffffffffffff9c, &(0x7f0000000c00)='./config/usb_gadget/g1/functions/uvc.usb0\x00', 0x1ed) mkdirat(0xffffffffffffff9c, &(0x7f0000000d00)='./config/usb_gadget/g1/functions/uvc.usb0/control/header/h\x00', 0x1ed) symlinkat(&(0x7f0000000e00)='./config/usb_gadget/g1/functions/uvc.usb0/control/header/h\x00', 0xffffffffffffff9c, &(0x7f0000000f00)='./config/usb_gadget/g1/functions/uvc.usb0/control/class/fs/h\x00') symlinkat(&(0x7f0000001000)='./config/usb_gadget/g1/functions/uvc.usb0/control/header/h\x00', 0xffffffffffffff9c, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000001200)='./config/usb_gadget/g1/functions/uvc.usb0/streaming/header/h\x00', 0x1ed) mkdirat(0xffffffffffffff9c, 0x0, 0x1ed) mkdirat(0xffffffffffffff9c, &(0x7f0000001400)='./config/usb_gadget/g1/functions/uvc.usb0/streaming/uncompressed/u/360p\x00', 0x1ed) symlinkat(&(0x7f0000001700)='./config/usb_gadget/g1/functions/uvc.usb0/streaming/header/h\x00', 0xffffffffffffff9c, &(0x7f0000001800)='./config/usb_gadget/g1/functions/uvc.usb0/streaming/class/fs/h\x00') symlinkat(&(0x7f0000001900)='./config/usb_gadget/g1/functions/uvc.usb0/streaming/header/h\x00', 0xffffffffffffff9c, &(0x7f0000001a00)='./config/usb_gadget/g1/functions/uvc.usb0/streaming/class/hs/h\x00') symlinkat(&(0x7f0000001b00)='./config/usb_gadget/g1/functions/uvc.usb0/streaming/header/h\x00', 0xffffffffffffff9c, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000001d00)='./config/usb_gadget/g1/configs/c.1\x00', 0x1ed) symlinkat(&(0x7f0000001e00)='./config/usb_gadget/g1/functions/uvc.usb0\x00', 0xffffffffffffff9c, &(0x7f0000001f00)='./config/usb_gadget/g1/configs/c.1/uvc.usb0\x00') openat(0xffffffffffffff9c, &(0x7f0000002000)='./config/usb_gadget/g1/UDC\x00', 0x1, 0x0) 2.206887009s ago: executing program 0 (id=11): timer_create(0xfffffffffffffffc, 0x0, &(0x7f0000001400)=0x0) pwrite64(0xffffffffffffffff, &(0x7f0000000140)='2', 0xfdef, 0xe7c) timer_settime(0x0, 0x1, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) timer_gettime(r0, &(0x7f00000001c0)) timer_gettime(0x0, &(0x7f0000000240)) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000300)=@updpolicy={0xc0, 0x19, 0xfd3649826d894c67, 0x0, 0x0, {{@in6=@mcast1, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0xa}, {0x0, 0x0, 0x0, 0x0, 0x7fffffffffffffff, 0x0, 0x0, 0x2}, {0x0, 0x7ff}, 0x20000000, 0x0, 0x0, 0x1}, [@XFRMA_IF_ID={0x8, 0x1f, 0x2}]}, 0xc0}}, 0x0) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000100)=@newspdinfo={0x1c, 0x24, 0x21, 0x0, 0x0, 0x0, [@XFRMA_SPD_IPV6_HTHRESH={0x6}]}, 0x1c}}, 0x0) sendmsg$nl_xfrm(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="b80000001900674c000000000000000000000000000000000000000000000000e000000200000000000000000000000000000000000000000a"], 0xb8}}, 0x0) 2.174056633s ago: executing program 1 (id=12): mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./config\x00', 0x1ff) mount(0x0, &(0x7f00000000c0)='./config\x00', &(0x7f0000000180)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./config/target/core\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./config/target/core/rd_mcp_0\x00', 0x1ff) mkdirat(0xffffffffffffff9c, 0x0, 0x1ff) write(0xffffffffffffffff, 0x0, 0x0) write(0xffffffffffffffff, &(0x7f0000000580), 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000005c0)='./config/usb_gadget/g1/functions\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000600)='./config/usb_gadget/g1/functions/tcm.0\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000640)='./config/usb_gadget/g1/configs\x00', 0x1ff) mkdirat(0xffffffffffffff9c, 0x0, 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f00000006c0)='./config/target/usb_gadget\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000700)='./config/target/usb_gadget/naa.6001405123456789\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000740)='./config/target/usb_gadget/naa.6001405123456789/tpgt_1\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000780)='./config/target/usb_gadget/naa.6001405123456789/tpgt_1/lun\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f00000007c0)='./config/target/usb_gadget/naa.6001405123456789/tpgt_1/lun/lun_0\x00', 0x1ff) r0 = openat(0xffffffffffffff9c, &(0x7f0000000900)='./config/target/usb_gadget/naa.6001405123456789/tpgt_1/nexus\x00', 0x2, 0x0) write(r0, &(0x7f0000000940)='naa.600140', 0xa) 2.165396915s ago: executing program 3 (id=13): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff}) connect$unix(r0, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r1 = syz_open_dev$usbfs(&(0x7f0000000080), 0x206, 0x20182) ioctl$USBDEVFS_ALLOW_SUSPEND(r1, 0x5522) 2.09102203s ago: executing program 0 (id=14): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ed) mount(0x0, &(0x7f0000000000)='./config\x00', &(0x7f0000000100)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./config/nvmet/subsystems/testnqn\x00', 0x1ed) openat(0xffffffffffffff9c, &(0x7f0000000300)='./config/nvmet/subsystems/testnqn/attr_allow_any_host\x00', 0x2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000003c0)='./config/nvmet/subsystems/testnqn/namespaces/1\x00', 0x1ed) r0 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./backing_file\x00', 0x42, 0x1ed) ftruncate(r0, 0x1000000) close(r0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000440)='./config/nvmet/subsystems/testnqn/namespaces/1/device_path\x00', 0x2, 0x0) write(r1, &(0x7f0000000480)='./backing_file\x00', 0xe) r2 = openat(0xffffffffffffff9c, &(0x7f00000004c0)='./config/nvmet/subsystems/testnqn/namespaces/1/buffered_io\x00', 0x2, 0x0) write(r2, &(0x7f0000000500)='1\x00', 0x1) r3 = openat(0xffffffffffffff9c, &(0x7f0000000540)='./config/nvmet/subsystems/testnqn/namespaces/1/enable\x00', 0x2, 0x0) write(r3, &(0x7f0000000580)='1\x00', 0x1) mkdirat(0xffffffffffffff9c, &(0x7f0000000600)='./config/nvmet/ports/1\x00', 0x1ed) r4 = openat(0xffffffffffffff9c, &(0x7f0000000640)='./config/nvmet/ports/1/addr_trtype\x00', 0x2, 0x0) write(r4, &(0x7f0000000680)='loop\x00', 0x4) symlinkat(&(0x7f00000006c0)='./config/nvmet/subsystems/testnqn\x00', 0xffffffffffffff9c, &(0x7f0000000700)='./config/nvmet/ports/1/subsystems/testnqn\x00') r5 = openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000000740), 0x2, 0x0) write(r5, &(0x7f0000000780)='transport=loop,nqn=testnqn\x00', 0x1a) 2.090451342s ago: executing program 1 (id=15): mkdirat(0xffffffffffffff9c, &(0x7f0000001000)='./mnt\x00', 0x1ff) mount(0x0, &(0x7f0000001000)='./mnt\x00', &(0x7f0000001200)='nfs\x00', 0x0, &(0x7f0000001300)='nolock,v3,addr=127.0.0.1\x00') 2.090299132s ago: executing program 1 (id=16): socket$inet6_udp(0xa, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) socket$nl_route(0x10, 0x3, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$devlink(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_GET(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)={0x14, r1, 0x1, 0x70bd27, 0x25dfdbfd}, 0x14}, 0x1, 0x0, 0x0, 0x800}, 0x8040) r2 = getpid() sched_setscheduler(r2, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) ptrace(0x10, 0x0) ioctl$TCFLSH(0xffffffffffffffff, 0x540b, 0x2) openat(0xffffffffffffff9c, &(0x7f0000000440)='./file1\x00', 0x103a42, 0x32) r5 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r5, &(0x7f0000000380)={0x2, 0x0, @remote}, 0x10) setsockopt$SO_BINDTODEVICE(r5, 0x1, 0x19, &(0x7f0000000040)='bridge_slave_1\x00', 0x10) 1.766292865s ago: executing program 0 (id=17): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000700)={0x18, 0xf, &(0x7f00000008c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x80000001, 0x0, 0x0, 0x0, 0x5}, {{0x18, 0x1, 0x1, 0x0, 0x1}}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x85}}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x80}, 0x94) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, 0x0) sendmsg$nl_route(r1, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, 0x0}, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r3 = getpid() sched_setscheduler(r3, 0x1, &(0x7f00000000c0)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) bind$802154_dgram(r2, &(0x7f0000000040)={0x24, @long={0x3, 0x0, {0xaaaaaaaaaaaa0102}}}, 0x14) 1.230685701s ago: executing program 3 (id=19): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./dev\x00', &(0x7f0000000100)='devtmpfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./mnt\x00', 0x1ff) mount(&(0x7f0000000300)=@filename='./dev/mtdblock0\x00', &(0x7f0000000200)='./mnt\x00', &(0x7f0000000400)='jffs2\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000500)='./mnt/test\x00', 0x42, 0x1ff) unlinkat(0xffffffffffffff9c, &(0x7f0000000500)='./mnt/test\x00', 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./mnt/test2\x00', 0x42, 0x1ff) write(r0, &(0x7f0000000700)='\x00'/32, 0x20) write(r0, &(0x7f0000000700)='\x00'/32, 0x20) write(r0, &(0x7f0000000700)='\x00'/32, 0x20) write(r0, 0x0, 0x0) write(r0, 0x0, 0x0) write(r0, &(0x7f0000000700)='\x00'/32, 0x20) write(r0, &(0x7f0000000700)='\x00'/32, 0x20) write(r0, 0x0, 0x0) write(r0, &(0x7f0000000700)='\x00'/32, 0x20) write(r0, &(0x7f0000000700)='\x00'/32, 0x20) 1.027576782s ago: executing program 3 (id=20): socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) socket$inet_mptcp(0x2, 0x1, 0x106) bpf$PROG_LOAD(0x5, &(0x7f0000000c40)={0xe, 0xc, 0x0, &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r1, &(0x7f0000000280)={0x2, 0x4e21, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f00000001c0)='bic', 0x3) connect$inet(r1, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x40000, 0x25dfdbfb, {0x0, 0x0, 0x0, r3, {0x0, 0xb}, {0xffff, 0xffff}, {0x3, 0xfff3}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x6, 0x2, 0x80, 0x0, 0x1, 0x91b1}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4000400}, 0x24000000) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB], 0x48) sendto$inet(r1, &(0x7f0000000900)="2e552f5d9fd8b0d9627c49f8f0d1ea2bf8f617a682acd2841acd878bd68344d4f50f83b0c51fa9135a01c95d4a128ec8b12d01010000a44c4505ba9a36f2cf4cc5e8308126d0a2c3b9d24e57c5011376b6263e2a1258eec1eb72bedea3eb5ccf73eb081b4c6d5faa998d7b795c057dd757d14200a8a6dbb3e59df96b77d16753ac4b32b94ffe6b5ee304d0428eb18056657c8c5c71c632be66cb26fe5c9abec7591ef3cb9b2a1133e9fa9bf0de6c378bed7b51cb8a07c343aabfda193349b91a5dc81a658cb61fbbfa51ef95abe03381ee2cb8d41da19ea8b96ec68ce17cf57da60f1d04acaf34a643db8d2d5ad2991f306b42744347a0c9e1fe2136b2b3da49032d3a57df1e236222cf6d6fe396aff8e5fe7fff5baa88789b783c12045e2c904a5d118369fdddc3e6e2f24bdbb26df92ac9bf4751c897a87c0223888e36ad14ba6e4d879ff464cac6f13a3a543e067d922e99c50f2fc6391e9c1c82b7195005eafdbb3374200c134cbd0f11739e8c19dd07140686242fea48caf3a1a93b86f35d77f258a2c9ce24cf321068551a584262d7a74a344e428c77c8af755e72904b0ca8a0bb359fb0", 0xffffff5d, 0x12, 0x0, 0x0) recvfrom$inet(r1, &(0x7f0000000080), 0xffffffffffffffa9, 0xc9100120, 0x0, 0x1500) r4 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r4, 0x29, 0x40, &(0x7f00000000c0)=@raw={'raw\x00', 0x3c1, 0x3, 0x2c0, 0x130, 0xc8, 0x8, 0x130, 0x5803, 0x250, 0x2e8, 0x2e8, 0x250, 0x2e8, 0x3, 0x0, {[{{@ipv6={@empty, @mcast1, [0xffffff00, 0xffffff00, 0xffffffff, 0xff], [0xffffff7f, 0xfffffefe, 0xffffffff, 0xffffffff], 'xfrm0\x00', 'veth0_to_bridge\x00', {0xff}, {0xff}, 0x84, 0xb7}, 0x0, 0xa8, 0xd0, 0x0, {0x0, 0x2000000000000}}, @common=@unspec=@NFQUEUE3={0x28, 'NFQUEUE\x00', 0x3, {0xc, 0x100, 0x3}}}, {{@ipv6={@private1={0xfc, 0x1, '\x00', 0x1}, @mcast2, [0xffffff00, 0xff000000, 0xff000000, 0xffffff00], [0xff, 0xffffff00, 0xff, 0xffffffff], 'team0\x00', 'wg2\x00', {}, {}, 0x112, 0x6, 0x4, 0x10}, 0x0, 0xf8, 0x120, 0x0, {}, [@inet=@rpfilter={{0x28}, {0x8}}, @inet=@rpfilter={{0x28}, {0x8}}]}, @common=@inet=@SET1={0x28, 'SET\x00', 0x1, {{0xffffffffffffffff, 0x6, 0x6}, {0x0, 0x8, 0x1}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x320) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x28, 0x7, 0x0, 0xa56e}]}, 0x10) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, 0x0, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r6, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000380)=ANY=[@ANYBLOB="5c0000000206030000000000000000000a0000000d000300686173683a6e657400000000050001000700000005000500020000000900020073797a30000000000500040000000000140007"], 0x5c}, 0x1, 0x0, 0x0, 0x2002c0c4}, 0x0) r7 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r7, 0x0, 0x800) r8 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCBRDELBR(r8, 0x89a1, &(0x7f0000000040)='ipvlan1\x00') 809.620435ms ago: executing program 0 (id=21): mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) r0 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r0, &(0x7f0000001500)={0x28, 0x4000, 0x0, @my=0x1}, 0x10) 809.318645ms ago: executing program 1 (id=22): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r3 = syz_open_dev$usbfs(&(0x7f0000000100), 0x76, 0x101b01) syz_open_dev$usbfs(&(0x7f0000000080), 0x206, 0x20182) r4 = socket(0x10, 0x803, 0x0) setsockopt$sock_int(r4, 0x1, 0x8, &(0x7f0000d9bffc), 0x4) ioctl$USBDEVFS_DISCONNECT_CLAIM(r3, 0x8108551b, &(0x7f0000000140)={0x0, 0x2, "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"}) ioctl$USBDEVFS_ALLOW_SUSPEND(r3, 0x5522) ioctl$NILFS_IOCTL_GET_BDESCS(r2, 0xc0186e87, &(0x7f0000000640)={&(0x7f0000000540)=[{0x4, 0x8000000000000001, 0x4, 0x91, 0x1}, {0x800, 0xfffffffffffffff8, 0x4, 0x800, 0x2}, {0x89e, 0x4, 0x0, 0x7fffffffffffffff, 0x5}], 0x3, 0x28, 0x5, 0x3}) getpgid(r0) 676.346218ms ago: executing program 0 (id=23): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) keyctl$clear(0x3, 0xfffffffffffffffd) r3 = syz_open_dev$usbfs(&(0x7f0000000100), 0x76, 0x101b01) r4 = syz_open_dev$usbfs(&(0x7f0000000080), 0x206, 0x20182) ioctl$USBDEVFS_ALLOW_SUSPEND(r4, 0x5522) r5 = socket(0x10, 0x803, 0x0) write(r5, 0x0, 0x0) setsockopt$sock_int(r5, 0x1, 0x8, &(0x7f0000d9bffc), 0x4) ioctl$USBDEVFS_DISCONNECT_CLAIM(r3, 0x8108551b, 0x0) ioctl$USBDEVFS_ALLOW_SUSPEND(r3, 0x5522) ioctl$USBDEVFS_SETINTERFACE(r3, 0x80045510, &(0x7f0000000040)={0x0, 0x200000}) ioctl$NILFS_IOCTL_GET_BDESCS(r2, 0xc0186e87, &(0x7f0000000640)={&(0x7f0000000540)=[{0x4, 0x8000000000000001, 0x4, 0x91, 0x1}, {0x800, 0xfffffffffffffff8, 0x4, 0x800, 0x2}, {0x89e, 0x4, 0x0, 0x7fffffffffffffff, 0x5}], 0x3, 0x28, 0x5, 0x3}) getpgid(r0) 180.965954ms ago: executing program 2 (id=24): r0 = fsopen(&(0x7f0000000040)='fuseblk\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f00000004c0)='j\x95\'\x8aC\x16\xca\\', &(0x7f0000000c40)='\xe6usek\v\xf6u%\x9b\x00\x00\xad\xeb\x00\x00\x00\x00\x01\x80\x00\x00\xcf\x9b\x9f\b\xb6\xfe\xc8\xda~-\xf5S>\xb8\x86\xfc\x9cVR\x82\x9a\xbdp\xbd\x83w\xf9Z\xd2\xcb\xcdF\xd0#N7\x17\xfc\x1e\xf1\x97\xffxi\xe0KE}]\x8e\xca\xe3+\xc8\x98\x03\x91\x88(\bn\x7f\x0e\x85\xa5\xb4\n?_\xc9\xef\xe0Q\xdb\xb6\xa5\x81t\x06\xda\x95\x935\xf1\x18\xac\x00\xf0\xff\xff\xbd\xb5\xa1\x06\xfd\x01\x00\x00\x00\x0f\xf8\xe3\x8a\x1f\x9c\xf3\xc5\x1f\xf9\xbf[\xd13\xb3\xd3j\r6\x7f', 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f00000003c0)='\x00', &(0x7f0000000400)='(!\xef(.(\\-]\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000200)='^](*\r\\!\x00', &(0x7f0000000500)='{:\'@-\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000b80)='\xe0\"\xef\xb1\xea\xe6\x9c\xe6\xc8M\xdb\x86\xb3\x8b\xbe\xd5\xbdB\x92\xa0\x19-+a\x13qQ\xd5f39hSr\xafbB\xe2\xe8\xcd\x1bf\x18\x7f\xf27E#\"\xab\x99\xec\x88\x8d\xd8C\x0f\x95\xff\xfeG\xf9t\xb1 \xcc\xc5\xbb\x88\xb6\xd2\xf2Jwq\xf8oG0xffffffffffffffff}) socket$inet_mptcp(0x2, 0x1, 0x106) bpf$PROG_LOAD(0x5, &(0x7f0000000c40)={0xe, 0xc, 0x0, &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r1, &(0x7f0000000280)={0x2, 0x4e21, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f00000001c0)='bic', 0x3) connect$inet(r1, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x40000, 0x25dfdbfb, {0x0, 0x0, 0x0, r3, {0x0, 0xb}, {0xffff, 0xffff}, {0x3, 0xfff3}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x6, 0x2, 0x80, 0x0, 0x1, 0x91b1}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4000400}, 0x24000000) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[], 0x48) sendto$inet(r1, &(0x7f0000000900)="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", 0xffffff5d, 0x12, 0x0, 0x0) recvfrom$inet(r1, &(0x7f0000000080), 0xffffffffffffffa9, 0xc9100120, 0x0, 0x1500) r4 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r4, 0x29, 0x40, &(0x7f00000000c0)=@raw={'raw\x00', 0x3c1, 0x3, 0x2f8, 0x130, 0xc8, 0x8, 0x130, 0x5803, 0x250, 0x2e8, 0x2e8, 0x250, 0x2e8, 0x3, 0x0, {[{{@ipv6={@empty, @mcast1, [0xffffff00, 0xffffff00, 0xffffffff, 0xff], [0xffffff7f, 0xfffffefe, 0xffffffff, 0xffffffff], 'xfrm0\x00', 'veth0_to_bridge\x00', {0xff}, {0xff}, 0x84, 0xb7}, 0x0, 0xe0, 0x108, 0x0, {0x0, 0x2000000000000}, [@common=@unspec=@statistic={{0x38}, {0x1, 0x0, 0x1, 0x3, 0x10001, {0x1}}}]}, @common=@unspec=@NFQUEUE3={0x28, 'NFQUEUE\x00', 0x3, {0xc, 0x100, 0x3}}}, {{@ipv6={@private1={0xfc, 0x1, '\x00', 0x1}, @mcast2, [0xffffff00, 0xff000000, 0xff000000, 0xffffff00], [0xff, 0xffffff00, 0xff, 0xffffffff], 'team0\x00', 'wg2\x00', {}, {}, 0x112, 0x6, 0x4, 0x10}, 0x0, 0xf8, 0x120, 0x0, {}, [@inet=@rpfilter={{0x28}, {0x8}}, @inet=@rpfilter={{0x28}, {0x8}}]}, @common=@inet=@SET1={0x28, 'SET\x00', 0x1, {{0xffffffffffffffff, 0x6, 0x6}, {0x0, 0x8, 0x1}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x358) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x28, 0x7, 0x0, 0xa56e}]}, 0x10) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, 0x0, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r6, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000380)=ANY=[@ANYBLOB="5c0000000206030000000000000000000a0000000d000300686173683a6e657400000000050001000700000005000500020000000900020073797a30000000000500040000000000140007"], 0x5c}, 0x1, 0x0, 0x0, 0x2002c0c4}, 0x0) r7 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r7, 0x0, 0x800) r8 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCBRDELBR(r8, 0x89a1, &(0x7f0000000040)='ipvlan1\x00') 0s ago: executing program 2 (id=32): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000040)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./sys/bus/platform/devices/pcspkr/driver_override\x00', 0x1, 0x0) write(r0, &(0x7f00000000c0)='usbip-vudc\x00', 0xa) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./sys/bus/platform/drivers/usbip-vudc/bind\x00', 0x1, 0x0) write(r1, &(0x7f0000000140)='pcspkr\x00', 0x6) mkdirat(0xffffffffffffff9c, &(0x7f0000000180)='./config\x00', 0x1ff) mount(0x0, &(0x7f0000000180)='./config\x00', &(0x7f00000001c0)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./config/usb_gadget/g1\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./config/usb_gadget/g1/configs/c.1\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./config/usb_gadget/g1/functions/uvc.0\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f00000002c0)='./config/usb_gadget/g1/functions/uvc.0/streaming/uncompressed/u\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000300)='./config/usb_gadget/g1/functions/uvc.0/streaming/uncompressed/u/720p\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./config/usb_gadget/g1/functions/uvc.0/streaming/header/h\x00', 0x1ff) symlinkat(&(0x7f0000000380)='./config/usb_gadget/g1/functions/uvc.0/streaming/uncompressed/u\x00', 0xffffffffffffff9c, &(0x7f00000003c0)='./config/usb_gadget/g1/functions/uvc.0/streaming/header/h/u\x00') symlinkat(&(0x7f0000000400)='./config/usb_gadget/g1/functions/uvc.0/streaming/header/h\x00', 0xffffffffffffff9c, &(0x7f0000000440)='./config/usb_gadget/g1/functions/uvc.0/streaming/class/fs/h\x00') symlinkat(&(0x7f0000000480)='./config/usb_gadget/g1/functions/uvc.0/streaming/header/h\x00', 0xffffffffffffff9c, &(0x7f00000004c0)='./config/usb_gadget/g1/functions/uvc.0/streaming/class/hs/h\x00') symlinkat(&(0x7f0000000500)='./config/usb_gadget/g1/functions/uvc.0/streaming/header/h\x00', 0xffffffffffffff9c, &(0x7f0000000540)='./config/usb_gadget/g1/functions/uvc.0/streaming/class/ss/h\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000000580)='./config/usb_gadget/g1/functions/uvc.0/control/header/h\x00', 0x1ff) symlinkat(&(0x7f00000005c0)='./config/usb_gadget/g1/functions/uvc.0/control/header/h\x00', 0xffffffffffffff9c, &(0x7f0000000600)='./config/usb_gadget/g1/functions/uvc.0/control/class/fs/h\x00') symlinkat(&(0x7f0000000640)='./config/usb_gadget/g1/functions/uvc.0/control/header/h\x00', 0xffffffffffffff9c, &(0x7f0000000680)='./config/usb_gadget/g1/functions/uvc.0/control/class/ss/h\x00') r2 = openat(0xffffffffffffff9c, &(0x7f0000000740)='./config/usb_gadget/g1/UDC\x00', 0x1, 0x0) write(r2, &(0x7f0000000780)='pcspkr\x00', 0x6) kernel console output (not intermixed with test programs): [ 38.332974][ T42] audit: type=1400 audit(1785916829.426:116): avc: denied { write } for pid=5644 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 38.380169][ T42] audit: type=1400 audit(1785916829.476:117): avc: denied { write } for pid=5647 comm="rm" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 Warning: Permanently added '[localhost]:6164' (ED25519) to the list of known hosts. [ 39.186419][ T42] audit: type=1400 audit(1785916830.286:118): avc: denied { name_bind } for pid=5653 comm="sshd-session" src=30000 scontext=system_u:system_r:sshd_t tcontext=system_u:object_r:unreserved_port_t tclass=tcp_socket permissive=1 [ 39.228745][ T42] audit: type=1400 audit(1785916830.326:119): avc: denied { execute } for pid=5654 comm="sh" name="syz-executor" dev="sda1" ino=2020 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:etc_runtime_t tclass=file permissive=1 [ 39.236213][ T42] audit: type=1400 audit(1785916830.326:120): avc: denied { execute_no_trans } for pid=5654 comm="sh" path="/syz-executor" dev="sda1" ino=2020 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:etc_runtime_t tclass=file permissive=1 [ 41.418123][ T5654] cgroup: Unknown subsys name 'net' [ 41.608409][ T5654] cgroup: Unknown subsys name 'cpuset' [ 41.615180][ T5654] cgroup: Unknown subsys name 'rlimit' [ 41.835654][ T5707] SELinux: Context root:object_r:swapfile_t is not valid (left unmapped). Setting up swapspace version 1, size = 127995904 bytes [ 42.596376][ T5654] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 46.137540][ T42] kauditd_printk_skb: 40 callbacks suppressed [ 46.137552][ T42] audit: type=1400 audit(1785916837.236:161): avc: denied { execmem } for pid=5730 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 46.148616][ T42] audit: type=1400 audit(1785916837.236:162): avc: denied { execmem } for pid=5731 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 46.340773][ T42] audit: type=1400 audit(1785916837.436:163): avc: denied { create } for pid=5734 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 46.350229][ T42] audit: type=1400 audit(1785916837.446:164): avc: denied { read write } for pid=5735 comm="syz-executor" name="vhci" dev="devtmpfs" ino=1292 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 46.359519][ T42] audit: type=1400 audit(1785916837.446:165): avc: denied { open } for pid=5735 comm="syz-executor" path="/dev/vhci" dev="devtmpfs" ino=1292 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 46.368598][ T42] audit: type=1400 audit(1785916837.456:166): avc: denied { ioctl } for pid=5735 comm="syz-executor" path="socket:[6039]" dev="sockfs" ino=6039 ioctlcmd=0x48c9 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 46.369577][ T5741] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 46.387945][ T64] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 46.393687][ T5742] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 46.393996][ T5748] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 46.397450][ T5742] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 46.400269][ T5748] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 46.404102][ T5742] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 46.406512][ T5748] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 46.409389][ T5742] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 46.412375][ T5748] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 46.415137][ T5742] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 46.415484][ T5750] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 46.417086][ T5749] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 46.417364][ T5748] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 46.417530][ T5748] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 46.418006][ T5748] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 46.418189][ T5748] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 46.425609][ T42] audit: type=1400 audit(1785916837.516:167): avc: denied { read } for pid=5734 comm="syz-executor" dev="nsfs" ino=4026531833 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 46.434590][ T5737] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 46.439181][ T42] audit: type=1400 audit(1785916837.526:168): avc: denied { open } for pid=5734 comm="syz-executor" path="net:[4026531833]" dev="nsfs" ino=4026531833 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 46.441882][ T5737] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 46.449890][ T42] audit: type=1400 audit(1785916837.526:169): avc: denied { mounton } for pid=5734 comm="syz-executor" path="/" dev="sda1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:root_t tclass=dir permissive=1 [ 46.451245][ T5737] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 46.457032][ T42] audit: type=1400 audit(1785916837.526:170): avc: denied { module_request } for pid=5734 comm="syz-executor" kmod="netdev-nr3" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1 [ 46.839714][ T5734] bridge0: port 1(bridge_slave_0) entered blocking state [ 46.842757][ T5734] bridge0: port 1(bridge_slave_0) entered disabled state [ 46.845303][ T5734] bridge_slave_0: entered allmulticast mode [ 46.848332][ T5734] bridge_slave_0: entered promiscuous mode [ 46.869997][ T5734] bridge0: port 2(bridge_slave_1) entered blocking state [ 46.872983][ T5734] bridge0: port 2(bridge_slave_1) entered disabled state [ 46.875767][ T5734] bridge_slave_1: entered allmulticast mode [ 46.878690][ T5734] bridge_slave_1: entered promiscuous mode [ 46.939620][ T5734] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 46.958203][ T5734] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 46.984056][ T5734] team0: Port device team_slave_0 added [ 46.991617][ T5734] team0: Port device team_slave_1 added [ 47.021640][ T5734] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 47.024862][ T5734] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 47.033052][ T5734] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 47.052543][ T5734] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 47.054885][ T5734] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 47.062727][ T5734] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 47.145713][ T5735] bridge0: port 1(bridge_slave_0) entered blocking state [ 47.148204][ T5735] bridge0: port 1(bridge_slave_0) entered disabled state [ 47.150596][ T5735] bridge_slave_0: entered allmulticast mode [ 47.153235][ T5735] bridge_slave_0: entered promiscuous mode [ 47.194349][ T5735] bridge0: port 2(bridge_slave_1) entered blocking state [ 47.197579][ T5735] bridge0: port 2(bridge_slave_1) entered disabled state [ 47.200517][ T5735] bridge_slave_1: entered allmulticast mode [ 47.203599][ T5735] bridge_slave_1: entered promiscuous mode [ 47.215999][ T5744] bridge0: port 1(bridge_slave_0) entered blocking state [ 47.220826][ T5744] bridge0: port 1(bridge_slave_0) entered disabled state [ 47.223552][ T5744] bridge_slave_0: entered allmulticast mode [ 47.226329][ T5744] bridge_slave_0: entered promiscuous mode [ 47.230409][ T5744] bridge0: port 2(bridge_slave_1) entered blocking state [ 47.232749][ T5744] bridge0: port 2(bridge_slave_1) entered disabled state [ 47.235625][ T5744] bridge_slave_1: entered allmulticast mode [ 47.238702][ T5744] bridge_slave_1: entered promiscuous mode [ 47.266305][ T5734] hsr_slave_0: entered promiscuous mode [ 47.269393][ T5734] hsr_slave_1: entered promiscuous mode [ 47.284843][ T5735] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 47.289196][ T5735] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 47.307879][ T5744] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 47.311894][ T5736] bridge0: port 1(bridge_slave_0) entered blocking state [ 47.316052][ T5736] bridge0: port 1(bridge_slave_0) entered disabled state [ 47.319276][ T5736] bridge_slave_0: entered allmulticast mode [ 47.323348][ T5736] bridge_slave_0: entered promiscuous mode [ 47.349925][ T5744] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 47.355050][ T5736] bridge0: port 2(bridge_slave_1) entered blocking state [ 47.357187][ T5736] bridge0: port 2(bridge_slave_1) entered disabled state [ 47.359369][ T5736] bridge_slave_1: entered allmulticast mode [ 47.361998][ T5736] bridge_slave_1: entered promiscuous mode [ 47.365383][ T5735] team0: Port device team_slave_0 added [ 47.368569][ T5735] team0: Port device team_slave_1 added [ 47.413086][ T5735] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 47.415353][ T5735] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 47.422767][ T5735] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 47.439764][ T5744] team0: Port device team_slave_0 added [ 47.442345][ T5735] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 47.444655][ T5735] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 47.452374][ T5735] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 47.458757][ T5736] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 47.466737][ T5736] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 47.470830][ T5744] team0: Port device team_slave_1 added [ 47.499976][ T5744] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 47.502097][ T5744] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 47.509713][ T5744] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 47.514139][ T5744] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 47.516269][ T5744] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 47.523896][ T5744] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 47.568054][ T5736] team0: Port device team_slave_0 added [ 47.584954][ T5735] hsr_slave_0: entered promiscuous mode [ 47.588119][ T5735] hsr_slave_1: entered promiscuous mode [ 47.590283][ T5735] debugfs: 'hsr0' already exists in 'hsr' [ 47.592126][ T5735] Cannot create hsr debugfs directory [ 47.596505][ T5736] team0: Port device team_slave_1 added [ 47.627538][ T5744] hsr_slave_0: entered promiscuous mode [ 47.630180][ T5744] hsr_slave_1: entered promiscuous mode [ 47.632321][ T5744] debugfs: 'hsr0' already exists in 'hsr' [ 47.634219][ T5744] Cannot create hsr debugfs directory [ 47.662830][ T5736] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 47.665768][ T5736] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 47.676286][ T5736] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 47.694599][ T5736] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 47.697520][ T5736] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 47.707472][ T5736] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 47.841160][ T5736] hsr_slave_0: entered promiscuous mode [ 47.843861][ T5736] hsr_slave_1: entered promiscuous mode [ 47.846518][ T5736] debugfs: 'hsr0' already exists in 'hsr' [ 47.848800][ T5736] Cannot create hsr debugfs directory [ 47.934871][ T5734] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 47.940917][ T5734] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 47.943582][ T5734] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 47.948569][ T5734] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 47.955448][ T5734] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 47.961667][ T5734] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 47.987476][ T5734] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 47.992463][ T5734] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 48.069635][ T5735] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 48.076180][ T5735] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 48.083685][ T5735] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 48.090131][ T5735] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 48.096113][ T5735] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 48.102250][ T5735] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 48.105950][ T5735] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 48.112501][ T5735] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 48.165538][ T5744] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 48.169388][ T5744] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 48.172253][ T5744] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 48.177540][ T5744] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 48.186969][ T5744] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 48.190843][ T5744] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 48.205819][ T5744] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 48.210583][ T5744] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 48.265048][ T5734] 8021q: adding VLAN 0 to HW filter on device bond0 [ 48.288514][ T5736] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 48.292789][ T5736] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 48.295826][ T5736] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 48.302928][ T5736] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 48.318390][ T5736] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 48.322528][ T5736] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 48.327846][ T5736] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 48.333279][ T5736] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 48.346685][ T5734] 8021q: adding VLAN 0 to HW filter on device team0 [ 48.376233][ T48] bridge0: port 1(bridge_slave_0) entered blocking state [ 48.379104][ T48] bridge0: port 1(bridge_slave_0) entered forwarding state [ 48.386803][ T5735] 8021q: adding VLAN 0 to HW filter on device bond0 [ 48.393562][ T48] bridge0: port 2(bridge_slave_1) entered blocking state [ 48.395831][ T48] bridge0: port 2(bridge_slave_1) entered forwarding state [ 48.433311][ T5735] 8021q: adding VLAN 0 to HW filter on device team0 [ 48.434704][ T5737] Bluetooth: hci0: command tx timeout [ 48.434708][ T64] Bluetooth: hci2: command tx timeout [ 48.437537][ T5737] Bluetooth: hci1: command tx timeout [ 48.447679][ T1180] bridge0: port 1(bridge_slave_0) entered blocking state [ 48.450026][ T1180] bridge0: port 1(bridge_slave_0) entered forwarding state [ 48.462681][ T1180] bridge0: port 2(bridge_slave_1) entered blocking state [ 48.464925][ T1180] bridge0: port 2(bridge_slave_1) entered forwarding state [ 48.490642][ T5744] 8021q: adding VLAN 0 to HW filter on device bond0 [ 48.514963][ T64] Bluetooth: hci3: command tx timeout [ 48.515644][ T5744] 8021q: adding VLAN 0 to HW filter on device team0 [ 48.529375][ T5736] 8021q: adding VLAN 0 to HW filter on device bond0 [ 48.532910][ T48] bridge0: port 1(bridge_slave_0) entered blocking state [ 48.535284][ T48] bridge0: port 1(bridge_slave_0) entered forwarding state [ 48.548370][ T48] bridge0: port 2(bridge_slave_1) entered blocking state [ 48.551008][ T48] bridge0: port 2(bridge_slave_1) entered forwarding state [ 48.571264][ T5736] 8021q: adding VLAN 0 to HW filter on device team0 [ 48.583755][ T38] bridge0: port 1(bridge_slave_0) entered blocking state [ 48.586298][ T38] bridge0: port 1(bridge_slave_0) entered forwarding state [ 48.601361][ T38] bridge0: port 2(bridge_slave_1) entered blocking state [ 48.603886][ T38] bridge0: port 2(bridge_slave_1) entered forwarding state [ 48.730059][ T5734] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 48.763439][ T5734] veth0_vlan: entered promiscuous mode [ 48.774344][ T5734] veth1_vlan: entered promiscuous mode [ 48.805481][ T5734] veth0_macvtap: entered promiscuous mode [ 48.812184][ T5734] veth1_macvtap: entered promiscuous mode [ 48.818689][ T5735] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 48.832828][ T5734] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 48.840626][ T5744] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 48.847654][ T5734] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 48.881280][ T5736] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 48.929876][ T5735] veth0_vlan: entered promiscuous mode [ 48.955753][ T5735] veth1_vlan: entered promiscuous mode [ 48.966285][ T48] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 48.969057][ T48] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 48.994436][ T5736] veth0_vlan: entered promiscuous mode [ 49.005533][ T5744] veth0_vlan: entered promiscuous mode [ 49.016624][ T5744] veth1_vlan: entered promiscuous mode [ 49.031435][ T5736] veth1_vlan: entered promiscuous mode [ 49.031502][ T38] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 49.035471][ T5735] veth0_macvtap: entered promiscuous mode [ 49.036128][ T38] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 49.050514][ T5735] veth1_macvtap: entered promiscuous mode [ 49.069288][ T5744] veth0_macvtap: entered promiscuous mode [ 49.074828][ T5735] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 49.081435][ T5734] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 49.082805][ T5735] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 49.094631][ T5736] veth0_macvtap: entered promiscuous mode [ 49.097808][ T5744] veth1_macvtap: entered promiscuous mode [ 49.108743][ T5736] veth1_macvtap: entered promiscuous mode [ 49.115257][ T5744] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 49.125027][ T5814] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 49.139623][ T5744] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 49.161592][ T5736] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 49.164051][ T5814] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 49.183186][ T5736] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 49.223893][ T5798] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 49.229640][ T5798] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 49.260221][ T38] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 49.265378][ T38] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 49.283751][ T38] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 49.288059][ T38] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 49.320777][ T48] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 49.323267][ T48] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 49.338182][ T48] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 49.340678][ T48] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 49.354286][ T5798] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 49.366596][ T38] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 49.369276][ T38] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 49.381654][ T38] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 49.387400][ T38] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 49.394741][ T5798] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 49.424517][ T5814] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 49.431314][ T5814] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 49.437379][ T5814] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 49.440966][ T5814] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 49.445288][ T5814] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 49.448702][ T5814] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 49.452006][ T5814] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 49.456698][ T5814] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 49.464428][ T5814] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 49.471182][ T5814] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 49.475490][ T5890] can: request_module (can-proto-0) failed. [ 49.508471][ T5890] batman_adv: batadv0: Adding interface: dummy0 [ 49.510506][ T5890] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 49.520003][ T5890] batman_adv: batadv0: Interface activated: dummy0 [ 49.520978][ T64] Bluetooth: hci2: unexpected cc 0x0c05 length: 4 > 1 [ 49.530884][ T5890] batadv0: mtu less than device minimum [ 49.533543][ T5890] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 49.538408][ T5890] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 49.542145][ T5890] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 49.546217][ T5890] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 49.550741][ T5890] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 49.554886][ T5890] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 49.558496][ T5890] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 49.562194][ T5890] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 49.565930][ T5890] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 49.686456][ T5899] loop0: detected capacity change from 0 to 2048 [ 49.822564][ T5917] nvmet: adding nsid 1 to subsystem testnqn [ 49.862760][ T48] nvmet: connect by host nqn.2014-08.org.nvmexpress:uuid:b6184b57-85d0-4a17-aeae-0e5ccf81b818 for subsystem testnqn not allowed [ 49.867822][ T5917] nvme nvme0: Connect for subsystem testnqn is not allowed, hostnqn: nqn.2014-08.org.nvmexpress:uuid:b6184b57-85d0-4a17-aeae-0e5ccf81b818 [ 50.523988][ T64] Bluetooth: hci1: command tx timeout [ 50.526672][ T5737] Bluetooth: hci0: command tx timeout [ 50.598254][ T64] Bluetooth: hci3: command tx timeout [ 50.818808][ T5934] jffs2: notice: (5934) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 51.163021][ T42] kauditd_printk_skb: 120 callbacks suppressed [ 51.163040][ T42] audit: type=1400 audit(1785916842.256:291): avc: denied { create } for pid=5940 comm="syz.0.21" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 51.180027][ T42] audit: type=1400 audit(1785916842.276:292): avc: denied { connect } for pid=5940 comm="syz.0.21" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 51.403969][ T42] audit: type=1400 audit(1785916842.486:293): avc: denied { write } for pid=5944 comm="syz.0.23" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=key permissive=1 [ 51.415147][ T5949] Zero length message leads to an empty skb [ 51.563885][ T64] Bluetooth: hci2: command tx timeout [ 51.767433][ T42] audit: type=1800 audit(1785916842.866:294): pid=5954 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.2.25" name="ipv4_address" dev="configfs" ino=8924 res=0 errno=0 [ 51.777136][ T42] audit: type=1800 audit(1785916842.876:295): pid=5954 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.2.25" name="ipv4_port" dev="configfs" ino=8925 res=0 errno=0 [ 51.784373][ T42] audit: type=1800 audit(1785916842.876:296): pid=5954 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.2.25" name="num" dev="configfs" ino=8926 res=0 errno=0 [ 51.815247][ T42] audit: type=1400 audit(1785916842.906:297): avc: denied { write } for pid=5956 comm="syz.2.27" name="dlm" dev="configfs" ino=2073 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 51.828345][ T42] audit: type=1400 audit(1785916842.926:298): avc: denied { write } for pid=5955 comm="syz.3.26" name="dlm" dev="configfs" ino=2073 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 51.841849][ T42] audit: type=1400 audit(1785916842.936:299): avc: denied { write } for pid=5955 comm="syz.3.26" name="comms" dev="configfs" ino=8939 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 51.842926][ T5958] dlm: Using TCP for communications [ 51.850414][ T42] audit: type=1400 audit(1785916842.936:300): avc: denied { write } for pid=5960 comm="syz.2.28" name="/" dev="configfs" ino=19 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 51.902974][ T5964] nvmet: Disable port '1' before changing attribute in nvmet_addr_trtype_store [ 51.908317][ T5964] nvmet: Disable port '1' before changing attribute in nvmet_addr_adrfam_store [ 51.913049][ T5964] nvmet: Disable port '1' before changing attribute in nvmet_addr_traddr_store [ 51.916874][ T5964] nvmet: Disable port '1' before changing attribute in nvmet_addr_trsvcid_store [ 51.985088][ T5968] [ 51.986028][ T5968] ====================================================== [ 51.988213][ T5968] WARNING: possible circular locking dependency detected [ 51.990386][ T5968] syzkaller #0 Not tainted [ 51.991951][ T5968] ------------------------------------------------------ [ 51.994351][ T5968] syz.2.32/5968 is trying to acquire lock: [ 51.996811][ T5968] ffffffff901d0fe8 (gadget_subsys.su_mutex){+.+.}-{4:4}, at: uvcg_streaming_header_allow_link+0x7c/0x650 [ 52.001474][ T5968] [ 52.001474][ T5968] but task is already holding lock: [ 52.004347][ T5968] ffff888058495200 (&sb->s_type->i_mutex_key#24){++++}-{4:4}, at: configfs_symlink+0x3c0/0x11f0 [ 52.007595][ T5968] [ 52.007595][ T5968] which lock already depends on the new lock. [ 52.007595][ T5968] [ 52.010783][ T5968] [ 52.010783][ T5968] the existing dependency chain (in reverse order) is: [ 52.013556][ T5968] [ 52.013556][ T5968] -> #2 (&sb->s_type->i_mutex_key#24){++++}-{4:4}: [ 52.016301][ T5968] lock_acquire+0x1b9/0x370 [ 52.017913][ T5968] down_write+0x8b/0x1f0 [ 52.019408][ T5968] configfs_depend_item_unlocked+0xf3/0x6a0 [ 52.021389][ T5968] usbg_make_tpg+0x261/0x620 [ 52.022997][ T5968] target_fabric_make_tpg+0xab/0x8c0 [ 52.024854][ T5968] configfs_mkdir+0x51e/0xb70 [ 52.026487][ T5968] vfs_mkdir+0x361/0x850 [ 52.028017][ T5968] filename_mkdirat+0x48b/0x5e0 [ 52.029692][ T5968] __x64_sys_mkdirat+0x89/0xc0 [ 52.031345][ T5968] do_syscall_64+0x115/0x870 [ 52.032951][ T5968] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 52.034972][ T5968] [ 52.034972][ T5968] -> #1 (&opts->dep_lock){+.+.}-{4:4}: [ 52.037336][ T5968] lock_acquire+0x1b9/0x370 [ 52.038932][ T5968] __mutex_lock+0x1a4/0x1bd0 [ 52.040533][ T5968] tcm_set_name+0x29/0xb0 [ 52.042063][ T5968] function_make+0x21c/0x3f0 [ 52.043709][ T5968] configfs_mkdir+0x51e/0xb70 [ 52.045337][ T5968] vfs_mkdir+0x361/0x850 [ 52.046844][ T5968] filename_mkdirat+0x48b/0x5e0 [ 52.048542][ T5968] __x64_sys_mkdirat+0x89/0xc0 [ 52.050190][ T5968] do_syscall_64+0x115/0x870 [ 52.051789][ T5968] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 52.053830][ T5968] [ 52.053830][ T5968] -> #0 (gadget_subsys.su_mutex){+.+.}-{4:4}: [ 52.056396][ T5968] check_prev_add+0xeb/0xe60 [ 52.058029][ T5968] __lock_acquire+0x136c/0x1a40 [ 52.059707][ T5968] lock_acquire+0x1b9/0x370 [ 52.061255][ T5968] __mutex_lock+0x1a4/0x1bd0 [ 52.062874][ T5968] uvcg_streaming_header_allow_link+0x7c/0x650 [ 52.065048][ T5968] configfs_symlink+0x540/0x11f0 [ 52.066793][ T5968] vfs_symlink+0x178/0x4d0 [ 52.068359][ T5968] filename_symlinkat+0x2a6/0x560 [ 52.070095][ T5968] __x64_sys_symlinkat+0x9c/0xe0 [ 52.071796][ T5968] do_syscall_64+0x115/0x870 [ 52.073402][ T5968] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 52.075434][ T5968] [ 52.075434][ T5968] other info that might help us debug this: [ 52.075434][ T5968] [ 52.078601][ T5968] Chain exists of: [ 52.078601][ T5968] gadget_subsys.su_mutex --> &opts->dep_lock --> &sb->s_type->i_mutex_key#24 [ 52.078601][ T5968] [ 52.083050][ T5968] Possible unsafe locking scenario: [ 52.083050][ T5968] [ 52.085366][ T5968] CPU0 CPU1 [ 52.087048][ T5968] ---- ---- [ 52.088739][ T5968] lock(&sb->s_type->i_mutex_key#24); [ 52.090448][ T5968] lock(&opts->dep_lock); [ 52.092583][ T5968] lock(&sb->s_type->i_mutex_key#24); [ 52.095156][ T5968] lock(gadget_subsys.su_mutex); [ 52.096754][ T5968] [ 52.096754][ T5968] *** DEADLOCK *** [ 52.096754][ T5968] [ 52.099260][ T5968] 2 locks held by syz.2.32/5968: [ 52.100801][ T5968] #0: ffff88802426c450 (sb_writers#13){.+.+}-{0:0}, at: filename_create+0x10d/0x400 [ 52.103776][ T5968] #1: ffff888058495200 (&sb->s_type->i_mutex_key#24){++++}-{4:4}, at: configfs_symlink+0x3c0/0x11f0 [ 52.107124][ T5968] [ 52.107124][ T5968] stack backtrace: [ 52.108979][ T5968] CPU: 2 UID: 0 PID: 5968 Comm: syz.2.32 Not tainted syzkaller #0 PREEMPT(full) [ 52.108993][ T5968] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 52.109012][ T5968] Call Trace: [ 52.109032][ T5968] [ 52.109037][ T5968] dump_stack_lvl+0x100/0x190 [ 52.109054][ T5968] print_circular_bug.cold+0x178/0x1c7 [ 52.109076][ T5968] check_noncircular+0x146/0x160 [ 52.109093][ T5968] check_prev_add+0xeb/0xe60 [ 52.109108][ T5968] __lock_acquire+0x136c/0x1a40 [ 52.109125][ T5968] lock_acquire+0x1b9/0x370 [ 52.109138][ T5968] ? uvcg_streaming_header_allow_link+0x7c/0x650 [ 52.109154][ T5968] ? __pfx___might_resched+0x10/0x10 [ 52.109170][ T5968] __mutex_lock+0x1a4/0x1bd0 [ 52.109185][ T5968] ? uvcg_streaming_header_allow_link+0x7c/0x650 [ 52.109199][ T5968] ? uvcg_streaming_header_allow_link+0x7c/0x650 [ 52.109212][ T5968] ? __lock_acquire+0x49f/0x1a40 [ 52.109225][ T5968] ? __pfx___mutex_lock+0x10/0x10 [ 52.109240][ T5968] ? __pfx___might_resched+0x10/0x10 [ 52.109252][ T5968] ? make_vfsgid+0xf1/0x140 [ 52.109270][ T5968] ? uvcg_streaming_header_allow_link+0x7c/0x650 [ 52.109284][ T5968] uvcg_streaming_header_allow_link+0x7c/0x650 [ 52.109300][ T5968] ? inode_permission+0x374/0x620 [ 52.109314][ T5968] ? mntput_no_expire+0xe7/0x220 [ 52.109326][ T5968] configfs_symlink+0x540/0x11f0 [ 52.109343][ T5968] ? __pfx_configfs_symlink+0x10/0x10 [ 52.109359][ T5968] vfs_symlink+0x178/0x4d0 [ 52.109374][ T5968] filename_symlinkat+0x2a6/0x560 [ 52.109388][ T5968] ? __pfx_filename_symlinkat+0x10/0x10 [ 52.109401][ T5968] ? strncpy_from_user+0x19d/0x2d0 [ 52.109416][ T5968] ? do_getname+0x191/0x390 [ 52.109434][ T5968] __x64_sys_symlinkat+0x9c/0xe0 [ 52.109447][ T5968] do_syscall_64+0x115/0x870 [ 52.109459][ T5968] ? clear_bhb_loop+0x40/0x90 [ 52.109471][ T5968] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 52.109482][ T5968] RIP: 0033:0x7f0700b9e019 [ 52.109493][ T5968] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 52.109503][ T5968] RSP: 002b:00007f0701a3b028 EFLAGS: 00000246 ORIG_RAX: 000000000000010a [ 52.109514][ T5968] RAX: ffffffffffffffda RBX: 00007f0700e25fa0 RCX: 00007f0700b9e019 [ 52.109521][ T5968] RDX: 00002000000003c0 RSI: ffffffffffffff9c RDI: 0000200000000380 [ 52.109528][ T5968] RBP: 00007f0700c3500c R08: 0000000000000000 R09: 0000000000000000 [ 52.109535][ T5968] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 52.109541][ T5968] R13: 00007f0700e26038 R14: 00007f0700e25fa0 R15: 00007fff4f831958 [ 52.109550][ T5968] [ 52.198689][ T5968] configfs-gadget.g1 gadget.33: uvc: uvc_function_bind() [ 52.200915][ T5968] udc pcspkr: failed to start g1: -19 [ 52.205117][ T5968] UDC core: g1: couldn't find an available UDC or it's busy [ 52.603920][ T64] Bluetooth: hci1: command tx timeout [ 52.603948][ T5737] Bluetooth: hci0: command tx timeout [ 52.683921][ T5737] Bluetooth: hci3: command tx timeout [ 53.634732][ T5737] Bluetooth: hci2: command tx timeout [ 54.674378][ T5737] Bluetooth: hci1: command tx timeout [ 54.674470][ T64] Bluetooth: hci0: command tx timeout [ 54.754149][ T64] Bluetooth: hci3: command tx timeout