last executing test programs: 9.489920566s ago: executing program 3 (id=4): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./sys\x00', &(0x7f00000000c0)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./sys/bus/pci/devices/0000:00:05.0/driver_override\x00', 0x2, 0x0) write(r0, &(0x7f0000000140)='thunderbolt\x00', 0xc) r1 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./sys/bus/pci/drivers/thunderbolt/bind\x00', 0x1, 0x0) write(r1, &(0x7f00000001c0)='0000:00:05.0\x00', 0xd) r2 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./sys/bus/thunderbolt/devices/0-0/authorized\x00', 0x2, 0x0) write(r2, &(0x7f0000000240)='1', 0x1) 9.42483839s ago: executing program 2 (id=3): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./nfsd\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./nfsd\x00', &(0x7f0000000040)='nfsd\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./nfsd/versions\x00', 0x2, 0x0) write(r0, &(0x7f00000000c0)='+4\n\x00', 0x3) r1 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./nfsd/portlist\x00', 0x2, 0x0) write(r1, &(0x7f0000000280)='rdma 20049\n\x00', 0xb) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./nfsd/threads\x00', 0x2, 0x0) write(r2, &(0x7f0000000140)='8\n\x00', 0x2) mkdirat(0xffffffffffffff9c, &(0x7f0000000180)='./mnt\x00', 0x1ff) mount$nfs4(&(0x7f00000001c0)='127.0.0.1:/\x00', &(0x7f0000000180)='./mnt\x00', &(0x7f0000000200), 0x0, 0x0) 9.232685772s ago: executing program 3 (id=7): mkdirat(0xffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000040)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffff9c, &(0x7f0000000080)='./sys/module/zswap/parameters/compressor\x00', 0x2, 0x0) write(r0, &(0x7f0000000100)='zstd\x00', 0x4) mmap(&(0x7f0000000000/0x10000)=nil, 0x10000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r1 = openat$urandom(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) read(r1, &(0x7f0000000000), 0x10000) r2 = eventfd(0x11111111) r3 = eventfd(0x22222222) read(r2, &(0x7f0000000008), 0x8) read(r3, &(0x7f0000000010), 0x8) read(r2, &(0x7f0000000018), 0x8) read(r3, &(0x7f0000000020), 0x8) read(r2, &(0x7f0000000028), 0x8) read(r3, &(0x7f0000000030), 0x8) read(r2, &(0x7f0000000038), 0x8) read(r3, &(0x7f0000000040), 0x8) 8.324160212s ago: executing program 3 (id=11): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./config\x00', &(0x7f0000000100)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./config/nvmet/subsystems/testnqn\x00', 0x1ff) r0 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./config/nvmet/subsystems/testnqn/attr_allow_any_host\x00', 0x2, 0x0) write(r0, &(0x7f0000000400)='1\x00', 0x1) mkdirat(0xffffffffffffff9c, &(0x7f0000000500)='./config/nvmet/subsystems/testnqn/namespaces/1\x00', 0x1ff) r1 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./config/nvmet/subsystems/testnqn/namespaces/1/device_path\x00', 0x2, 0x0) write(r1, &(0x7f0000000700)='/dev/nullb0\x00', 0xc) r2 = openat(0xffffffffffffff9c, &(0x7f0000000800)='./config/nvmet/subsystems/testnqn/namespaces/1/enable\x00', 0x2, 0x0) write(r2, &(0x7f0000000900)='1\x00', 0x1) mkdirat(0xffffffffffffff9c, &(0x7f0000000a00)='./config/nvmet/ports/1\x00', 0x1ff) r3 = openat(0xffffffffffffff9c, &(0x7f0000000b00)='./config/nvmet/ports/1/addr_trtype\x00', 0x2, 0x0) write(r3, &(0x7f0000000c00)='tcp\x00', 0x3) r4 = openat(0xffffffffffffff9c, &(0x7f0000000d00)='./config/nvmet/ports/1/addr_adrfam\x00', 0x2, 0x0) write(r4, &(0x7f0000000e00)='ipv4\x00', 0x4) r5 = openat(0xffffffffffffff9c, &(0x7f0000000f00)='./config/nvmet/ports/1/addr_traddr\x00', 0x2, 0x0) write(r5, &(0x7f0000001000)='127.0.0.1\x00', 0x9) r6 = openat(0xffffffffffffff9c, &(0x7f0000001100)='./config/nvmet/ports/1/addr_trsvcid\x00', 0x2, 0x0) write(r6, &(0x7f0000001200)='4420\x00', 0x4) symlinkat(&(0x7f0000001300)='./config/nvmet/subsystems/testnqn\x00', 0xffffffffffffff9c, &(0x7f0000001400)='./config/nvmet/ports/1/subsystems/testnqn\x00') nanosleep(&(0x7f0000002000)={0x0, 0x5f5e100}, 0x0) r7 = socket$inet_tcp(0x2, 0x1, 0x0) connect$inet(r7, &(0x7f0000003000)={0x2, 0x1144, @local}, 0x10) sendto$inet_nvme_pdu(r7, &(0x7f0000001500)=@cmd={{}, {@identify={0x6, 0x0, 0x0, 0x0, '\x00', @sgl, 0x19}}}, 0x48, 0x0, 0x0, 0x0) 8.307919239s ago: executing program 2 (id=12): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./nfsd\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./nfsd\x00', &(0x7f0000000100)='nfsd\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000a00)='./nfsd/versions\x00', 0x2, 0x0) write(r0, &(0x7f0000000b00)='-2 -3 +4\n\x00', 0x9) r1 = openat(0xffffffffffffff9c, &(0x7f0000000800)='./nfsd/portlist\x00', 0x2, 0x0) write(r1, &(0x7f0000000900)='tcp 2049\n\x00', 0x9) r2 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./nfsd/threads\x00', 0x2, 0x0) write(r2, &(0x7f0000000300)='1\n\x00', 0x2) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000000400)='./nfs_mnt\x00', 0x1ff) mount(&(0x7f0000000500)=@filename='127.0.0.1:/\x00', &(0x7f0000000400)='./nfs_mnt\x00', &(0x7f0000000600)='nfs4\x00', 0x0, &(0x7f0000000700)='vers=4,tcp,port=2049,clientaddr=127.0.0.1\x00') 8.076125525s ago: executing program 3 (id=13): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./sys\x00', 0x1ff) write(0xffffffffffffffff, &(0x7f0000000080)='disk\n', 0x5) 7.998676679s ago: executing program 3 (id=14): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./sys\x00', 0x1ff) mount(&(0x7f0000000080)=@filename='none\x00', &(0x7f00000000c0)='./sys\x00', &(0x7f0000000100)='sysfs\x00', 0x0, &(0x7f0000000140)) r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./sys/power/state\x00', 0x2, 0x0) write(r0, &(0x7f00000001c0)='mem\n', 0x4) 6.83743872s ago: executing program 2 (id=20): r0 = syz_usb_connect(0x0, 0x32, &(0x7f0000001000)=ANY=[@ANYBLOB="1201000200000040501d4d610001000000010902200001010080320904000002ff0000000705010200020007058202000200"], 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000000)={0x84, &(0x7f0000000100)={0x40, 0x1, 0x1e, "4d61501d0100000000000000100000000000800700000000000038040000"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, &(0x7f0000000000)={0x84, &(0x7f0000000200)={0x40, 0x40}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, &(0x7f0000000000)={0x84, &(0x7f0000000300)={0x40, 0x50, 0x1, "01"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, &(0x7f0000000000)={0x84, &(0x7f0000000400)={0x40, 0x51}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) nanosleep(&(0x7f0000000300)={0x0, 0xbebc200}, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000000)={0x84, &(0x7f0000000500)={0x40, 0x54, 0x1, "01"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) nanosleep(&(0x7f0000000300)={0x0, 0xbebc200}, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000000)={0x84, &(0x7f0000000600)={0x40, 0x56, 0x7d, "00ffffffffffff0004430100000000000000010480000000010000000000000000000000000001010101010101010101010101010101000000fd00324b1e53110200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002c"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 5.134752017s ago: executing program 0 (id=25): mknodat(0xffffffffffffff9c, &(0x7f0000000000)='./md0\x00', 0x81b6, 0x900) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./md0\x00', 0x2, 0x0) ioctl(r0, 0x80480923, &(0x7f0000000100)="000000005a00000000000000000000000500000000000000030000000300000000000000010000000000000000000000000000000000000000000000000000000000000000100000") ioctl(r0, 0x80140921, &(0x7f0000000200)="0000000007000000000000000000000003000000") ioctl(r0, 0x80140921, &(0x7f0000000240)="0100000007000000010000000100000003000000") ioctl(r0, 0x80140921, &(0x7f0000000280)="0200000007000000020000000200000003000000") ioctl(r0, 0x80140921, &(0x7f00000002c0)="0300000007000000030000000300000000000400") ioctl(r0, 0x800c0930, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000300)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000300)='./sys\x00', &(0x7f0000000340)='sysfs\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./sys/block/md0/md/chunk_size\x00', 0x2, 0x0) write(r1, &(0x7f0000000500)='8192\x00', 0x5) 5.134428765s ago: executing program 0 (id=26): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000200000040030431c60001000000010902120001010080320904000000ffffff00"], 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000100)={0x84, &(0x7f0000000140)={0x0, 0x0, 0x4, '\x00\x00\x00\x00'}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, &(0x7f0000000100)={0x84, &(0x7f0000000140)={0x0, 0x0, 0x4, '\x00\x00\x00\x00'}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, &(0x7f0000000100)={0x84, &(0x7f0000000140)={0x0, 0x0, 0x4, '\x00\x00\x00\x00'}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, &(0x7f0000000100)={0x84, &(0x7f0000000140)={0x0, 0x0, 0x4, '\x00\x00\x00\x00'}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) nanosleep(&(0x7f0000000400)={0x1}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000200)='./sys\x00', &(0x7f0000000240)='sysfs\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./sys/bus/i2c/devices/i2c-0/new_device\x00', 0x1, 0x0) write(r1, &(0x7f0000000400)='maxtcpc 0x40\x00', 0xd) r2 = openat(0xffffffffffffff9c, &(0x7f0000000340)='./sys/bus/i2c/devices/i2c-1/new_device\x00', 0x1, 0x0) write(r2, &(0x7f0000000400)='maxtcpc 0x40\x00', 0xd) r3 = openat(0xffffffffffffff9c, &(0x7f0000000380)='./sys/bus/i2c/devices/i2c-2/new_device\x00', 0x1, 0x0) write(r3, &(0x7f0000000400)='maxtcpc 0x40\x00', 0xd) r4 = openat(0xffffffffffffff9c, &(0x7f00000003c0)='./sys/bus/i2c/devices/i2c-3/new_device\x00', 0x1, 0x0) write(r4, &(0x7f0000000400)='maxtcpc 0x40\x00', 0xd) 4.626524658s ago: executing program 1 (id=34): syz_emit_vhci(&(0x7f0000000040)=@HCI_EVENT_PKT={0x4, @hci_ev_cmd_status={{0xf, 0x4}, {0x1, 0xfa, 0x41b}}}, 0x7) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000300)={0x1f, 0xffff, 0x3}, 0x6) write(r0, &(0x7f0000000400)="4a00ffff11003ee0b4fdddd685986a49e00588f1ba6f01", 0x17) nanosleep(&(0x7f0000000500)={0x0, 0x10000000}, 0x0) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x7) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x8) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x9) syz_init_net_socket$bt_sco(0x1f, 0x5, 0xa) 4.166425472s ago: executing program 1 (id=38): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./sys\x00', 0x1ff) mount(&(0x7f0000000080)=@filename='\x00', &(0x7f00000000c0)='./sys\x00', &(0x7f0000000100)='sysfs\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000140)='./sys/power/state\x00', 0x2, 0x0) 4.133478742s ago: executing program 1 (id=39): mkdirat(0xffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000040)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffff9c, &(0x7f0000000080)='./sys/module/zswap/parameters/compressor\x00', 0x2, 0x0) write(r0, &(0x7f0000000100)='zstd\x00', 0x4) mmap(&(0x7f0000000000/0x10000)=nil, 0x10000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r1 = openat$urandom(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) read(r1, &(0x7f0000000000), 0x10000) r2 = eventfd(0x11111111) r3 = eventfd(0x22222222) read(r2, &(0x7f0000000008), 0x8) read(r3, &(0x7f0000000010), 0x8) read(r2, &(0x7f0000000018), 0x8) read(r3, &(0x7f0000000020), 0x8) read(r2, &(0x7f0000000028), 0x8) read(r3, &(0x7f0000000030), 0x8) read(r2, &(0x7f0000000038), 0x8) madvise(&(0x7f0000000000/0x10000)=nil, 0x10000, 0x15) 3.199021097s ago: executing program 1 (id=42): mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./vhci\x00', 0x81b6, 0xa89) r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./vhci\x00', 0x2, 0x0) write(r0, &(0x7f00000000c0)="ff40", 0x2) nanosleep(&(0x7f0000000000)={0x0, 0x5f5e100}, 0x0) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r1, 0x400448ca, &(0x7f0000000001)) bind$bt_hci(r1, &(0x7f0000000000)={0x1f, 0xffff, 0x3}, 0x6) write(r1, &(0x7f0000000100)="38000100010001", 0x7) nanosleep(&(0x7f0000000000)={0x0, 0x5f5e100}, 0x0) 2.865627859s ago: executing program 1 (id=45): bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x2, 0x4, 0x1000, 0x60000}, 0x48) bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x2, 0x4, 0x1000, 0x60000}, 0x48) nanosleep(&(0x7f0000000200)={0x1}, 0x0) 2.678813199s ago: executing program 4 (id=47): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000040)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./sys/bus/pci/drivers/e1000e/new_id\x00', 0x1, 0x0) write(r0, &(0x7f00000000c0)='8086 100e\x00', 0xa) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./sys/bus/pci/drivers/e1000/unbind\x00', 0x1, 0x0) write(r1, &(0x7f0000000140)='0000:00:04.0\x00', 0xd) r2 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./sys/bus/pci/drivers/e1000e/bind\x00', 0x1, 0x0) write(r2, &(0x7f00000001c0)='0000:00:04.0\x00', 0xd) 2.610564484s ago: executing program 4 (id=48): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nfc(&(0x7f0000000000), r0) sendmsg$NFC_CMD_DEV_UP(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)={0x14, r1, 0x1, 0x123, 0x234, {}, [@NFC_ATTR_DEVICE_INDEX={0x8}]}, 0x14}}, 0x0) sendmsg$NFC_CMD_DEV_UP(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000600)={0x14, r1, 0x1, 0x123, 0x234, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, 0x1}]}, 0x14}}, 0x0) sendmsg$NFC_CMD_START_POLL(r0, &(0x7f0000000700)={0x0, 0x0, &(0x7f0000000800)={&(0x7f0000000900)={0x1c, r1, 0x1, 0x123, 0x234, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, 0x1}, @NFC_ATTR_TM_PROTOCOLS={0x8, 0xe, 0x20}]}, 0x1c}}, 0x0) sendmsg$NFC_CMD_START_POLL(r0, &(0x7f0000000a00)={0x0, 0x0, &(0x7f0000000b00)={&(0x7f0000000c00)={0x1c, r1, 0x1, 0x123, 0x234, {}, [@NFC_ATTR_DEVICE_INDEX={0x8}, @NFC_ATTR_IM_PROTOCOLS={0x8, 0xd, 0x20}]}, 0x1c}}, 0x0) nanosleep(&(0x7f0000000d00)={0x0, 0x1dcd6500}, 0x0) r2 = syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1) connect$nfc_llcp(r2, &(0x7f0000000e00)={0x27, 0x1, 0x0, 0x5, 0x1, 0x0, 'urn:nfc:sn:snep\x00'}, 0x60) 2.00320312s ago: executing program 4 (id=49): r0 = socket$rxrpc(0x21, 0x2, 0xa) r1 = add_key$keyring(&(0x7f0000000100), &(0x7f0000000140)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffe) add_key(&(0x7f0000000200)='rxrpc_s\x00', &(0x7f0000000240)={'syz', 0x0}, &(0x7f0000000280)="0123456789abcdef", 0x8, r1) setsockopt$RXRPC_SECURITY_KEYRING(r0, 0x110, 0x2, &(0x7f0000000140)='syz \x00', 0x5) bind$rxrpc(r0, &(0x7f0000000000)=@in6={0x21, 0x1, 0x2, 0x1c, {0xa, 0x4e20, 0x0, @empty}}, 0x24) listen(r0, 0xa) r2 = socket$rxrpc(0x21, 0x2, 0xa) add_key(&(0x7f0000000300)='rxrpc\x00', &(0x7f0000000340)={'syz', 0x0}, &(0x7f0000000380)="0100000002000800ffffff7f010000000123456789abcdef0123456789abcdef", 0x20, 0xfffffffffffffffe) setsockopt$RXRPC_SECURITY_KEY(r2, 0x110, 0x1, &(0x7f0000000340)='syz \x00', 0x5) sendto$rxrpc(r2, &(0x7f0000000400)='hello', 0x5, 0x0, &(0x7f0000000000)=@in6={0x21, 0x1, 0x2, 0x1c, {0xa, 0x4e20, 0x0, @empty}}, 0x24) 1.878723321s ago: executing program 4 (id=50): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f00000000c0)='proc\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./proc/sys/vm/min_free_kbytes\x00', 0x2, 0x0) write(r0, &(0x7f0000000140)='4000000\n', 0x8) nanosleep(&(0x7f0000000000)={0x0, 0x989680}, 0x0) 1.850811854s ago: executing program 2 (id=51): r0 = syz_usb_connect(0x3, 0x39, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000200000040da0b538100000000000109022700010100a0fa0904000003ffff0000070581020002000705020200020007058303080008"], 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000200)={0x84, &(0x7f0000000100)={0xc0, 0x5, 0x4, "0300105c"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, &(0x7f0000000200)={0x84, &(0x7f0000000100)={0xc0, 0x5, 0x4, "0300105c"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, &(0x7f0000000200)={0x84, &(0x7f0000000100)={0xc0, 0x5, 0x4, "0300105c"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, &(0x7f0000000200)={0x84, &(0x7f0000000100)={0xc0, 0x5, 0x4, "0300105c"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, &(0x7f0000000200)={0x84, &(0x7f0000000100)={0xc0, 0x5, 0x4, "0300105c"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, &(0x7f0000000200)={0x84, &(0x7f0000000100)={0xc0, 0x5, 0x4, "0300105c"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, &(0x7f0000000200)={0x84, &(0x7f0000000100)={0xc0, 0x5, 0x4, "0300105c"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, &(0x7f0000000200)={0x84, &(0x7f0000000100)={0xc0, 0x5, 0x4, "0300105c"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, &(0x7f0000000200)={0x84, &(0x7f0000000100)={0xc0, 0x5, 0x4, "0300105c"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, &(0x7f0000000200)={0x84, &(0x7f0000000100)={0xc0, 0x5, 0x4, "0300105c"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) nanosleep(&(0x7f0000000400)={0x1}, 0x0) 1.847051775s ago: executing program 4 (id=52): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000040)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./sys/bus/netdevsim/new_device\x00', 0x1, 0x0) write(r0, &(0x7f00000000c0)='10 1 4\x00', 0x6) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000200)={0x0, 0x0, 0x0}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={0x0}}, 0x0) sendmsg$nl_route_sched(r1, 0x0, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000480)=@newqdisc={0x88, 0x24, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x35, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_mqprio={{0xb}, {0x58, 0x2, {{0x1, [], 0x1, [0x1]}}}}]}, 0x88}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000680)=@newqdisc={0x88, 0x24, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x37, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_mqprio={{0xb}, {0x58, 0x2, {{0x1, [], 0x1, [0x1]}}}}]}, 0x88}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000740)={&(0x7f0000000780)=@newqdisc={0x88, 0x24, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x38, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_mqprio={{0xb}, {0x58, 0x2, {{0x1, [], 0x1, [0x1]}}}}]}, 0x88}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000840)={&(0x7f0000000880)=@newqdisc={0x88, 0x24, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x39, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_mqprio={{0xb}, {0x58, 0x2, {{0x1, [], 0x1, [0x1]}}}}]}, 0x88}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000940)={&(0x7f0000000980)=@newqdisc={0x88, 0x24, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x3a, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_mqprio={{0xb}, {0x58, 0x2, {{0x1, [], 0x1, [0x1]}}}}]}, 0x88}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000a40)={&(0x7f0000000a80)=@newqdisc={0x88, 0x24, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x3b, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_mqprio={{0xb}, {0x58, 0x2, {{0x1, [], 0x1, [0x1]}}}}]}, 0x88}}, 0x0) 1.738955149s ago: executing program 0 (id=53): mkdirat(0xffffffffffffff9c, &(0x7f0000001000)='./mnt\x00', 0x1ff) mount(&(0x7f0000001100)=@filename='127.0.0.1:/\x00', &(0x7f0000001000)='./mnt\x00', &(0x7f0000001200)='nfs\x00', 0x0, 0x0) 1.64993213s ago: executing program 0 (id=54): r0 = openat(0xffffffffffffff9c, &(0x7f0000000680)='./config/usb_gadget/g1/UDC\x00', 0x2, 0x0) write(r0, &(0x7f00000006c0)='dummy_udc.0\n', 0xc) 1.543421845s ago: executing program 4 (id=55): r0 = syz_usb_connect$hid(0x0, 0x34, &(0x7f0000000040)=ANY=[@ANYBLOB="1201000000001810d80402c00000000000010902220001010080320904000001030000000921110100012232000705810308000a"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f00000001c0)={0x24, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="0022350000000600ff0901a10185110902150026ff0075089502810285210903150026ff0075089501810285920904150026ff00750895019102c0"], 0x0}, 0x0) nanosleep(&(0x7f0000000300)={0x1}, 0x0) 1.426121585s ago: executing program 0 (id=56): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./nfsd\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./nfsd\x00', &(0x7f0000000100)='nfsd\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./nfsd/portlist\x00', 0x1, 0x0) write(r0, &(0x7f0000000300)='tcp 2049\n\x00', 0x9) r1 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./nfsd/threads\x00', 0x1, 0x0) write(r1, &(0x7f0000000500)='0\n\x00', 0x2) 1.162496228s ago: executing program 1 (id=57): r0 = syz_usb_connect(0x0, 0x32, &(0x7f0000000000)=ANY=[@ANYBLOB="12010002000000407f1801020000010203010902200001010080fa0904000002ffffff000705810200020007050202000200"], 0x0) nanosleep(&(0x7f0000000300)={0x1}, 0x0) syz_usb_ep_write(r0, 0x81, 0xd8, &(0x7f0000000100)="68020000d800000000000000000000000000000001000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000100"/212) 0s ago: executing program 0 (id=58): r0 = syz_usb_connect(0x3, 0x5c, &(0x7f0000000000)=ANY=[@ANYBLOB="12010002ffffff40f30c749308010102030109024a0001010080fa0904000008ff0000000705810200020007058202000200070583020002000705840340000107050102000200070502020002000705030200020007050402000200"], 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f0000000100)={0x1c, &(0x7f0000000200)={0x40, 0x2, 0xc, "0c0000008a08c83105000000"}, 0x0, 0x0}) nanosleep(&(0x7f0000000300)={0x1}, 0x0) kernel console output (not intermixed with test programs): [ 52.063807][ T30] kauditd_printk_skb: 6 callbacks suppressed [ 52.063823][ T30] audit: type=1400 audit(1785855747.793:119): avc: denied { write } for pid=5515 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 52.112451][ T30] audit: type=1400 audit(1785855747.833:120): avc: denied { write } for pid=5526 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 52.276389][ T30] audit: type=1400 audit(1785855748.003:121): avc: denied { write } for pid=5529 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 52.321265][ T30] audit: type=1400 audit(1785855748.043:122): avc: denied { write } for pid=5540 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 52.864844][ T30] audit: type=1400 audit(1785855748.593:123): avc: denied { write } for pid=5545 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 52.905248][ T30] audit: type=1400 audit(1785855748.633:124): avc: denied { write } for pid=5556 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 53.240615][ T30] audit: type=1400 audit(1785855748.963:125): avc: denied { write } for pid=5560 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 53.289220][ T30] audit: type=1400 audit(1785855749.013:126): avc: denied { write } for pid=5571 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 53.590167][ T30] audit: type=1400 audit(1785855749.313:127): avc: denied { write } for pid=5574 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 53.634657][ T30] audit: type=1400 audit(1785855749.363:128): avc: denied { write } for pid=5585 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 Warning: Permanently added '10.128.0.165' (ED25519) to the list of known hosts. [ 59.283276][ T30] audit: type=1400 audit(1785855755.013:129): avc: denied { mounton } for pid=5594 comm="syz-executor" path="/syzcgroup/unified" dev="sda1" ino=2023 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1 [ 59.306648][ T30] audit: type=1400 audit(1785855755.033:130): avc: denied { mount } for pid=5594 comm="syz-executor" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 59.309237][ T5594] cgroup: Unknown subsys name 'net' [ 59.336556][ T30] audit: type=1400 audit(1785855755.063:131): avc: denied { unmount } for pid=5594 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 59.474796][ T5594] cgroup: Unknown subsys name 'cpuset' [ 59.482126][ T5594] cgroup: Unknown subsys name 'rlimit' [ 59.621818][ T30] audit: type=1400 audit(1785855755.343:132): avc: denied { setattr } for pid=5594 comm="syz-executor" name="raw-gadget" dev="devtmpfs" ino=821 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 59.656322][ T30] audit: type=1400 audit(1785855755.343:133): avc: denied { create } for pid=5594 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 59.681432][ T30] audit: type=1400 audit(1785855755.343:134): avc: denied { write } for pid=5594 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 59.719249][ T30] audit: type=1400 audit(1785855755.353:135): avc: denied { read } for pid=5594 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 59.733208][ T5596] SELinux: Context root:object_r:swapfile_t is not valid (left unmapped). [ 59.739774][ T30] audit: type=1400 audit(1785855755.353:136): avc: denied { mounton } for pid=5594 comm="syz-executor" path="/proc/sys/fs/binfmt_misc" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=dir permissive=1 [ 59.773651][ T30] audit: type=1400 audit(1785855755.353:137): avc: denied { mount } for pid=5594 comm="syz-executor" name="/" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=filesystem permissive=1 [ 59.797280][ T30] audit: type=1400 audit(1785855755.473:138): avc: denied { relabelto } for pid=5596 comm="mkswap" name="swap-file" dev="sda1" ino=2026 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" Setting up swapspace version 1, size = 127995904 bytes [ 60.688750][ T5594] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 64.460096][ T30] kauditd_printk_skb: 4 callbacks suppressed [ 64.460110][ T30] audit: type=1400 audit(1785855760.183:143): avc: denied { create } for pid=5607 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 64.486600][ T30] audit: type=1400 audit(1785855760.183:144): avc: denied { read write } for pid=5607 comm="syz-executor" name="vhci" dev="devtmpfs" ino=1269 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 64.511188][ T30] audit: type=1400 audit(1785855760.183:145): avc: denied { open } for pid=5607 comm="syz-executor" path="/dev/vhci" dev="devtmpfs" ino=1269 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 64.535981][ T30] audit: type=1400 audit(1785855760.183:146): avc: denied { ioctl } for pid=5607 comm="syz-executor" path="socket:[4531]" dev="sockfs" ino=4531 ioctlcmd=0x48c9 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 64.572238][ T5623] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 64.577662][ T5622] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 64.580287][ T5623] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 64.586992][ T5621] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 64.595197][ T5623] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 64.600738][ T5622] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 64.608570][ T5623] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 64.615768][ T5621] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 64.622118][ T5623] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 64.630130][ T5621] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 64.638108][ T5623] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 64.642595][ T5622] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 64.653282][ T5623] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 64.657003][ T5621] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 64.665956][ T5626] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 64.671342][ T5622] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 64.679339][ T5626] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 64.691940][ T5627] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 64.692921][ T30] audit: type=1400 audit(1785855760.413:147): avc: denied { read } for pid=5606 comm="syz-executor" dev="nsfs" ino=4026531833 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 64.699441][ T5622] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 64.730274][ T5627] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 64.737726][ T5627] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 64.741769][ T30] audit: type=1400 audit(1785855760.413:148): avc: denied { open } for pid=5606 comm="syz-executor" path="net:[4026531833]" dev="nsfs" ino=4026531833 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 64.744993][ T5622] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 64.776855][ T5622] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 64.786306][ T5622] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 64.793390][ T5621] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 64.812019][ T30] audit: type=1400 audit(1785855760.413:149): avc: denied { mounton } for pid=5606 comm="syz-executor" path="/" dev="sda1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:root_t tclass=dir permissive=1 [ 64.857313][ T30] audit: type=1400 audit(1785855760.503:150): avc: denied { module_request } for pid=5609 comm="syz-executor" kmod="netdev-nr1" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1 [ 64.903451][ T30] audit: type=1400 audit(1785855760.583:151): avc: denied { sys_module } for pid=5609 comm="syz-executor" capability=16 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 65.737198][ T1311] ieee802154 phy0 wpan0: encryption failed: -22 [ 65.743807][ T1311] ieee802154 phy1 wpan1: encryption failed: -22 [ 65.977434][ T5606] bridge0: port 1(bridge_slave_0) entered blocking state [ 65.985452][ T5606] bridge0: port 1(bridge_slave_0) entered disabled state [ 65.992790][ T5606] bridge_slave_0: entered allmulticast mode [ 65.999973][ T5606] bridge_slave_0: entered promiscuous mode [ 66.024150][ T5606] bridge0: port 2(bridge_slave_1) entered blocking state [ 66.031208][ T5606] bridge0: port 2(bridge_slave_1) entered disabled state [ 66.038532][ T5606] bridge_slave_1: entered allmulticast mode [ 66.045428][ T5606] bridge_slave_1: entered promiscuous mode [ 66.103043][ T5613] bridge0: port 1(bridge_slave_0) entered blocking state [ 66.110159][ T5613] bridge0: port 1(bridge_slave_0) entered disabled state [ 66.117317][ T5613] bridge_slave_0: entered allmulticast mode [ 66.123878][ T5613] bridge_slave_0: entered promiscuous mode [ 66.136376][ T5609] bridge0: port 1(bridge_slave_0) entered blocking state [ 66.143484][ T5609] bridge0: port 1(bridge_slave_0) entered disabled state [ 66.150547][ T5609] bridge_slave_0: entered allmulticast mode [ 66.157317][ T5609] bridge_slave_0: entered promiscuous mode [ 66.178981][ T5613] bridge0: port 2(bridge_slave_1) entered blocking state [ 66.186047][ T5613] bridge0: port 2(bridge_slave_1) entered disabled state [ 66.193173][ T5613] bridge_slave_1: entered allmulticast mode [ 66.199763][ T5613] bridge_slave_1: entered promiscuous mode [ 66.208232][ T5606] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 66.217468][ T5609] bridge0: port 2(bridge_slave_1) entered blocking state [ 66.224780][ T5609] bridge0: port 2(bridge_slave_1) entered disabled state [ 66.231828][ T5609] bridge_slave_1: entered allmulticast mode [ 66.238514][ T5609] bridge_slave_1: entered promiscuous mode [ 66.261645][ T5606] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 66.283134][ T5617] bridge0: port 1(bridge_slave_0) entered blocking state [ 66.290203][ T5617] bridge0: port 1(bridge_slave_0) entered disabled state [ 66.297356][ T5617] bridge_slave_0: entered allmulticast mode [ 66.303953][ T5617] bridge_slave_0: entered promiscuous mode [ 66.333646][ T5617] bridge0: port 2(bridge_slave_1) entered blocking state [ 66.340738][ T5617] bridge0: port 2(bridge_slave_1) entered disabled state [ 66.347950][ T5617] bridge_slave_1: entered allmulticast mode [ 66.354554][ T5617] bridge_slave_1: entered promiscuous mode [ 66.368408][ T5613] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 66.379079][ T5606] team0: Port device team_slave_0 added [ 66.386565][ T5609] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 66.409673][ T5613] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 66.419969][ T5606] team0: Port device team_slave_1 added [ 66.432745][ T5609] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 66.447568][ T5607] bridge0: port 1(bridge_slave_0) entered blocking state [ 66.454732][ T5607] bridge0: port 1(bridge_slave_0) entered disabled state [ 66.461874][ T5607] bridge_slave_0: entered allmulticast mode [ 66.468993][ T5607] bridge_slave_0: entered promiscuous mode [ 66.495269][ T5617] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 66.504790][ T5607] bridge0: port 2(bridge_slave_1) entered blocking state [ 66.511868][ T5607] bridge0: port 2(bridge_slave_1) entered disabled state [ 66.519114][ T5607] bridge_slave_1: entered allmulticast mode [ 66.525755][ T5607] bridge_slave_1: entered promiscuous mode [ 66.538341][ T5606] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 66.545304][ T5606] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 66.571253][ T5606] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 66.590074][ T5617] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 66.607153][ T5613] team0: Port device team_slave_0 added [ 66.613306][ T5606] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 66.620235][ T5606] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 66.646199][ T5606] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 66.658070][ T5609] team0: Port device team_slave_0 added [ 66.676624][ T5613] team0: Port device team_slave_1 added [ 66.687919][ T5609] team0: Port device team_slave_1 added [ 66.694158][ T5620] Bluetooth: hci1: command tx timeout [ 66.709160][ T5607] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 66.741849][ T5617] team0: Port device team_slave_0 added [ 66.748964][ T5607] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 66.765337][ T5613] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 66.772268][ T5613] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 66.798480][ T5613] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 66.809677][ T5609] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 66.816740][ T5609] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 66.842769][ T5609] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 66.853794][ T5620] Bluetooth: hci4: command tx timeout [ 66.853827][ T5626] Bluetooth: hci2: command tx timeout [ 66.859444][ T5620] Bluetooth: hci3: command tx timeout [ 66.865254][ T50] Bluetooth: hci0: command tx timeout [ 66.872052][ T5609] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 66.882899][ T5609] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 66.908938][ T5609] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 66.920672][ T5617] team0: Port device team_slave_1 added [ 66.940124][ T5613] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 66.947137][ T5613] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 66.973045][ T5613] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 67.001857][ T5607] team0: Port device team_slave_0 added [ 67.022430][ T5606] hsr_slave_0: entered promiscuous mode [ 67.028642][ T5606] hsr_slave_1: entered promiscuous mode [ 67.036102][ T5607] team0: Port device team_slave_1 added [ 67.055024][ T5607] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 67.061941][ T5607] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 67.087844][ T5607] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 67.099101][ T5617] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 67.106179][ T5617] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 67.132071][ T5617] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 67.155933][ T5607] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 67.162902][ T5607] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 67.188902][ T5607] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 67.200071][ T5617] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 67.207139][ T5617] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 67.233008][ T5617] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 67.280134][ T5613] hsr_slave_0: entered promiscuous mode [ 67.286382][ T5613] hsr_slave_1: entered promiscuous mode [ 67.292189][ T5613] debugfs: 'hsr0' already exists in 'hsr' [ 67.297971][ T5613] Cannot create hsr debugfs directory [ 67.307082][ T5609] hsr_slave_0: entered promiscuous mode [ 67.313162][ T5609] hsr_slave_1: entered promiscuous mode [ 67.319008][ T5609] debugfs: 'hsr0' already exists in 'hsr' [ 67.325020][ T5609] Cannot create hsr debugfs directory [ 67.404536][ T5607] hsr_slave_0: entered promiscuous mode [ 67.410501][ T5607] hsr_slave_1: entered promiscuous mode [ 67.416498][ T5607] debugfs: 'hsr0' already exists in 'hsr' [ 67.422204][ T5607] Cannot create hsr debugfs directory [ 67.431575][ T5617] hsr_slave_0: entered promiscuous mode [ 67.437664][ T5617] hsr_slave_1: entered promiscuous mode [ 67.443609][ T5617] debugfs: 'hsr0' already exists in 'hsr' [ 67.449314][ T5617] Cannot create hsr debugfs directory [ 67.746312][ T5606] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 67.756390][ T5606] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 67.764055][ T5606] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 67.772381][ T5606] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 67.780229][ T5606] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 67.788599][ T5606] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 67.797829][ T5606] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 67.811035][ T5606] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 67.870629][ T5609] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 67.881086][ T5609] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 67.893899][ T5609] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 67.902563][ T5609] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 67.910416][ T5609] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 67.918556][ T5609] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 67.929712][ T5609] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 67.937810][ T5609] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 68.016215][ T5606] 8021q: adding VLAN 0 to HW filter on device bond0 [ 68.024179][ T5613] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 68.032409][ T5613] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 68.040339][ T5613] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 68.048914][ T5613] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 68.057177][ T5613] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 68.065785][ T5613] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 68.074021][ T5613] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 68.082054][ T5613] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 68.119207][ T5606] 8021q: adding VLAN 0 to HW filter on device team0 [ 68.148297][ T1703] bridge0: port 1(bridge_slave_0) entered blocking state [ 68.155638][ T1703] bridge0: port 1(bridge_slave_0) entered forwarding state [ 68.169715][ T5607] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 68.178708][ T5607] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 68.186137][ T5607] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 68.195378][ T5607] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 68.206230][ T5607] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 68.214959][ T5607] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 68.222581][ T5607] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 68.231823][ T5607] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 68.254227][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 68.261293][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 68.325410][ T5609] 8021q: adding VLAN 0 to HW filter on device bond0 [ 68.339966][ T5617] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 68.348472][ T5617] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 68.356349][ T5617] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 68.365306][ T5617] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 68.380993][ T5617] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 68.390796][ T5617] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 68.398988][ T5617] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 68.408004][ T5617] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 68.430124][ T5609] 8021q: adding VLAN 0 to HW filter on device team0 [ 68.456738][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 68.463822][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 68.484438][ T3384] bridge0: port 2(bridge_slave_1) entered blocking state [ 68.491488][ T3384] bridge0: port 2(bridge_slave_1) entered forwarding state [ 68.600750][ T5613] 8021q: adding VLAN 0 to HW filter on device bond0 [ 68.654123][ T5607] 8021q: adding VLAN 0 to HW filter on device bond0 [ 68.694058][ T5613] 8021q: adding VLAN 0 to HW filter on device team0 [ 68.715228][ T57] bridge0: port 1(bridge_slave_0) entered blocking state [ 68.722350][ T57] bridge0: port 1(bridge_slave_0) entered forwarding state [ 68.735879][ T5607] 8021q: adding VLAN 0 to HW filter on device team0 [ 68.755631][ T3384] bridge0: port 2(bridge_slave_1) entered blocking state [ 68.762735][ T3384] bridge0: port 2(bridge_slave_1) entered forwarding state [ 68.773582][ T50] Bluetooth: hci1: command tx timeout [ 68.791709][ T3384] bridge0: port 1(bridge_slave_0) entered blocking state [ 68.798761][ T3384] bridge0: port 1(bridge_slave_0) entered forwarding state [ 68.807636][ T3384] bridge0: port 2(bridge_slave_1) entered blocking state [ 68.814691][ T3384] bridge0: port 2(bridge_slave_1) entered forwarding state [ 68.879654][ T5617] 8021q: adding VLAN 0 to HW filter on device bond0 [ 68.932118][ T5617] 8021q: adding VLAN 0 to HW filter on device team0 [ 68.933348][ T50] Bluetooth: hci0: command tx timeout [ 68.939821][ T5620] Bluetooth: hci2: command tx timeout [ 68.947375][ T5626] Bluetooth: hci4: command tx timeout [ 68.949474][ T5620] Bluetooth: hci3: command tx timeout [ 68.985957][ T595] bridge0: port 1(bridge_slave_0) entered blocking state [ 68.993050][ T595] bridge0: port 1(bridge_slave_0) entered forwarding state [ 69.028922][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 69.036036][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 69.280139][ T5606] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 69.300373][ T5609] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 69.434417][ T5606] veth0_vlan: entered promiscuous mode [ 69.459263][ T5609] veth0_vlan: entered promiscuous mode [ 69.480122][ T5606] veth1_vlan: entered promiscuous mode [ 69.500291][ T5609] veth1_vlan: entered promiscuous mode [ 69.576913][ T5606] veth0_macvtap: entered promiscuous mode [ 69.598708][ T5606] veth1_macvtap: entered promiscuous mode [ 69.637671][ T5609] veth0_macvtap: entered promiscuous mode [ 69.661242][ T5609] veth1_macvtap: entered promiscuous mode [ 69.682226][ T5606] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 69.708611][ T5606] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 69.757825][ T5607] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 69.773740][ T5613] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 69.798723][ T5609] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 69.817050][ T5609] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 69.835056][ T47] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 69.869825][ T5617] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 69.934281][ T3384] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 69.949657][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 69.967162][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 69.994062][ T5607] veth0_vlan: entered promiscuous mode [ 70.022687][ T1703] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 70.031512][ T1703] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 70.043853][ T1703] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 70.052784][ T1703] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 70.066912][ T3384] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 70.076082][ T3384] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 70.097457][ T5613] veth0_vlan: entered promiscuous mode [ 70.122202][ T5607] veth1_vlan: entered promiscuous mode [ 70.148003][ T30] audit: type=1400 audit(1785855765.873:152): avc: denied { mounton } for pid=5606 comm="syz-executor" path="/root/syzkaller.7urrRy/syz-tmp" dev="sda1" ino=2042 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_home_t tclass=dir permissive=1 [ 70.179115][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 70.187282][ T3384] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 70.194259][ T30] audit: type=1400 audit(1785855765.873:153): avc: denied { mount } for pid=5606 comm="syz-executor" name="/" dev="tmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 70.221266][ T30] audit: type=1400 audit(1785855765.873:154): avc: denied { mounton } for pid=5606 comm="syz-executor" path="/root/syzkaller.7urrRy/syz-tmp/newroot/dev" dev="tmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 70.225368][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 70.250615][ T5613] veth1_vlan: entered promiscuous mode [ 70.262821][ T30] audit: type=1400 audit(1785855765.883:155): avc: denied { mount } for pid=5606 comm="syz-executor" name="/" dev="proc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 70.286574][ T30] audit: type=1400 audit(1785855765.893:156): avc: denied { mounton } for pid=5606 comm="syz-executor" path="/root/syzkaller.7urrRy/syz-tmp/newroot/sys/kernel/debug" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=dir permissive=1 [ 70.315038][ T30] audit: type=1400 audit(1785855765.893:157): avc: denied { mounton } for pid=5606 comm="syz-executor" path="/root/syzkaller.7urrRy/syz-tmp/newroot/proc/sys/fs/binfmt_misc" dev="proc" ino=7943 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysctl_fs_t tclass=dir permissive=1 [ 70.346792][ T5607] veth0_macvtap: entered promiscuous mode [ 70.350665][ T5606] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 70.367375][ T3384] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 70.375370][ T30] audit: type=1400 audit(1785855765.953:158): avc: denied { unmount } for pid=5606 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 70.396002][ T30] audit: type=1400 audit(1785855765.983:159): avc: denied { mounton } for pid=5606 comm="syz-executor" path="/dev/gadgetfs" dev="devtmpfs" ino=2784 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:device_t tclass=dir permissive=1 [ 70.420951][ T134] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 70.426900][ T30] audit: type=1400 audit(1785855765.983:160): avc: denied { mount } for pid=5606 comm="syz-executor" name="/" dev="gadgetfs" ino=7996 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfs_t tclass=filesystem permissive=1 [ 70.431199][ T5613] veth0_macvtap: entered promiscuous mode [ 70.451440][ T30] audit: type=1400 audit(1785855765.983:161): avc: denied { mount } for pid=5606 comm="syz-executor" name="/" dev="binder" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 70.479466][ T134] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 70.490264][ T5607] veth1_macvtap: entered promiscuous mode [ 70.516261][ T5613] veth1_macvtap: entered promiscuous mode [ 70.534798][ T5607] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 70.559292][ T5607] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 70.593118][ T5617] veth0_vlan: entered promiscuous mode [ 70.625409][ T5613] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 70.658806][ T5617] veth1_vlan: entered promiscuous mode [ 70.681350][ T5613] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 70.733588][ T134] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 70.785897][ T5807] (NULL device *): [drm] All planes must have at least one possible CRTC [ 70.811067][ T5617] veth0_macvtap: entered promiscuous mode [ 70.830180][ T5617] veth1_macvtap: entered promiscuous mode [ 70.857028][ T5620] Bluetooth: hci1: command tx timeout [ 70.871348][ T5811] ubi0: attaching mtd0 [ 70.882162][ T5811] ubi0: scanning is finished [ 70.892044][ T5811] ubi0: empty MTD device detected [ 70.897265][ T134] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 70.897679][ T13] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 70.920938][ T13] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 70.945838][ T13] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 70.954880][ T134] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 70.962925][ T134] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 70.970239][ T13] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 70.985361][ T5814] UBIFS error (pid: 5814): cannot open "ubi0_0", error -19 [ 71.007837][ T1703] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 71.016074][ T5620] Bluetooth: hci0: command tx timeout [ 71.024067][ T50] Bluetooth: hci3: command tx timeout [ 71.028736][ T5620] Bluetooth: hci4: command tx timeout [ 71.034154][ T5626] Bluetooth: hci2: command tx timeout [ 71.042098][ T1703] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 71.048479][ T5617] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 71.070114][ T5811] ubi0: attached mtd0 (name "mtdram test device", size 0 MiB) [ 71.081895][ T5617] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 71.091584][ T5811] ubi0: PEB size: 4096 bytes (4 KiB), LEB size: 3968 bytes [ 71.135817][ T5811] ubi0: min./max. I/O unit sizes: 1/64, sub-page size 1 [ 71.161527][ T5811] ubi0: VID header offset: 64 (aligned 64), data offset: 128 [ 71.170595][ T1703] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 71.185826][ T1703] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 71.197471][ T5811] ubi0: good PEBs: 32, bad PEBs: 0, corrupted PEBs: 0 [ 71.217754][ T5811] ubi0: user volume: 0, internal volumes: 1, max. volumes count: 23 [ 71.228035][ T5811] ubi0: max/mean erase counter: 0/0, WL threshold: 4096, image sequence number: 3256871941 [ 71.252271][ T1703] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 71.267561][ T1703] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 71.273380][ T5811] ubi0: available PEBs: 28, total reserved PEBs: 4, PEBs reserved for bad PEB handling: 0 [ 71.290596][ T5815] ubi0: background thread "ubi_bgt0d" started, PID 5815 [ 71.426920][ T134] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 71.455555][ T134] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 71.483376][ T12] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 71.526629][ T3384] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 71.535708][ T3384] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 71.545460][ T5794] ACPI: \_SB_.LNKA: Enabled at IRQ 11 [ 71.548690][ T12] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 71.558091][ T5794] thunderbolt 0000:00:05.0: error -EINVAL: cannot enable interrupts, aborting [ 71.571066][ T5817] thunderbolt 0000:00:05.0: probe with driver thunderbolt failed with error -22 [ 71.604229][ T47] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 71.615007][ T47] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 71.645183][ T47] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 71.671964][ T47] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 71.913226][ T5806] NFSD: Unable to initialize client recovery tracking! (-110) [ 71.921069][ T5806] NFSD: Is nfsdcld running? If not, enable CONFIG_NFSD_LEGACY_CLIENT_TRACKING. [ 71.930218][ T5806] NFSD: starting 90-second grace period (net f00003c6) [ 71.962893][ T5794] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 72.053197][ T9] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 72.124779][ T5794] usb 5-1: New USB device found, idVendor=1286, idProduct=1fa4, bcdDevice= 0.00 [ 72.135711][ T5794] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 72.220815][ T9] usb 2-1: New USB device found, idVendor=2040, idProduct=2400, bcdDevice= 1.00 [ 72.238522][ T9] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 72.249262][ T9] usb 2-1: Product: syz [ 72.257110][ T9] usb 2-1: Manufacturer: syz [ 72.268151][ T9] usb 2-1: SerialNumber: syz [ 72.298629][ T5794] mvusb_mdio 5-1:1.0: probe with driver mvusb_mdio failed with error -5 [ 72.315844][ T9] pvrusb2: Hardware description: WinTV PVR USB2 Model 24xxx [ 72.316082][ T5822] NFSD: Failed to start, no listeners configured. [ 72.381593][ T5342] usb 5-1: USB disconnect, device number 2 [ 72.646046][ T5845] nvmet: adding nsid 1 to subsystem testnqn [ 72.668484][ T5845] nvmet_tcp: enabling port 1 (127.0.0.1:4420) [ 72.855338][ T5853] PM: suspend entry (deep) [ 72.872937][ T804] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 72.933017][ T5626] Bluetooth: hci1: command tx timeout [ 72.966082][ T5855] null_blk: my_zoned_dev: using native zone append [ 73.002259][ T5855] null_blk: disk my_zoned_dev created [ 73.027301][ T804] usb 1-1: New USB device found, idVendor=1b1c, idProduct=1c03, bcdDevice= 0.00 [ 73.038800][ T804] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 73.050797][ T804] usb 1-1: config 0 descriptor?? [ 73.093228][ T5626] Bluetooth: hci4: command tx timeout [ 73.093782][ T5614] Bluetooth: hci2: command tx timeout [ 73.098659][ T5620] Bluetooth: hci3: command tx timeout [ 73.110073][ T50] Bluetooth: hci0: command tx timeout [ 73.165724][ T5861] lo speed is unknown, defaulting to 1000 [ 73.171888][ T5861] lo speed is unknown, defaulting to 1000 [ 73.181789][ T5861] lo speed is unknown, defaulting to 1000 [ 73.193462][ T5861] smbdirect: ib_dev[syz0]: added: RNIC max_fast_reg_page_list_len=256 device_cap_flags=0x200000 kernel_cap_flags=0x10 page_size_cap=0x1000 [ 73.208018][ T5861] smbdirect: ib_dev[syz0]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=1 max_cqe=3276800 max_qp_wr=32768 max_send_sge=6 max_recv_sge=6 [ 73.225053][ T5861] smbdirect: ib_dev[syz0]PORT[1]: iwarp=1 ib=0 roce=0 v1=0 v2=0 core_cap_flags=0x400008 [ 73.238099][ T5861] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 73.254099][ T5861] infiniband syz0: RDMA CMA: cma_listen_on_dev, error -98 [ 73.285249][ T5861] lo speed is unknown, defaulting to 1000 [ 73.294360][ T5861] lo speed is unknown, defaulting to 1000 [ 73.301586][ T5861] lo speed is unknown, defaulting to 1000 [ 73.309580][ T5861] lo speed is unknown, defaulting to 1000 [ 73.316556][ T5861] lo speed is unknown, defaulting to 1000 [ 73.322472][ T1703] Filesystems sync: 0.461 seconds [ 73.378520][ T5863] PM: suspend entry (deep) [ 73.383924][ T5863] PM: suspend exit [ 73.487992][ T804] corsair-psu 0003:1B1C:1C03.0001: hidraw0: USB HID v0.00 Device [HID 1b1c:1c03] on usb-dummy_hcd.0-1/input0 [ 73.553777][ T804] corsair-psu 0003:1B1C:1C03.0001: unable to initialize device (-38) [ 73.566950][ T804] corsair-psu 0003:1B1C:1C03.0001: probe with driver corsair-psu failed with error -38 [ 73.685842][ T5853] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 73.692588][ T5853] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 73.701990][ T5853] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 73.709811][ T5853] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 73.715886][ T5853] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 73.723477][ T5853] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 73.730311][ T5853] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 73.737304][ T5853] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 73.744113][ T5853] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 73.754189][ T5853] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 73.760124][ T5853] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 73.767457][ T5853] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 73.775650][ T5853] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 73.781593][ T5853] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 73.788417][ T5853] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 73.813046][ T5847] NFSD: Unable to initialize client recovery tracking! (-110) [ 73.820570][ T5847] NFSD: Is nfsdcld running? If not, enable CONFIG_NFSD_LEGACY_CLIENT_TRACKING. [ 73.829832][ T5847] NFSD: starting 90-second grace period (net f000048d) [ 74.504660][ T2361] pvrusb2: Invalid write control endpoint [ 74.516128][ T9] usb 2-1: USB disconnect, device number 2 [ 74.549977][ T2361] usb 2-1: Direct firmware load for v4l-pvrusb2-24xxx-01.fw failed with error -2 [ 74.559714][ T2361] usb 2-1: Falling back to sysfs fallback for: v4l-pvrusb2-24xxx-01.fw [ 75.142921][ T5868] NFSD: Unable to initialize client recovery tracking! (-110) [ 75.150459][ T5868] NFSD: Is nfsdcld running? If not, enable CONFIG_NFSD_LEGACY_CLIENT_TRACKING. [ 75.159446][ T5868] NFSD: starting 90-second grace period (net f0000565) [ 75.393874][ T30] kauditd_printk_skb: 81 callbacks suppressed [ 75.393889][ T30] audit: type=1400 audit(1785855771.123:243): avc: denied { read write } for pid=5885 comm="syz.4.23" name="uhid" dev="devtmpfs" ino=1272 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 75.405652][ T5342] logitech-hidpp-device 0005:046D:B012.0002: hidraw0: BLUETOOTH HID v0.00 Device [syz0] on syz1 [ 75.435706][ T50] Bluetooth: hci0: command 0x0c1a tx timeout [ 75.441289][ T30] audit: type=1400 audit(1785855771.123:244): avc: denied { open } for pid=5885 comm="syz.4.23" path="/dev/uhid" dev="devtmpfs" ino=1272 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 75.602744][ T804] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 75.631624][ T5794] usb 1-1: USB disconnect, device number 2 [ 75.732933][ T50] Bluetooth: hci1: command 0x0c1a tx timeout [ 75.738952][ T5614] Bluetooth: hci2: command 0x0c1a tx timeout [ 75.764543][ T804] usb 3-1: New USB device found, idVendor=1d50, idProduct=614d, bcdDevice= 1.00 [ 75.773992][ T804] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 75.813176][ T50] Bluetooth: hci4: command 0x0c1a tx timeout [ 75.813366][ T5614] Bluetooth: hci3: command 0x0c1a tx timeout [ 75.895409][ T30] audit: type=1400 audit(1785855771.623:245): avc: denied { mounton } for pid=5901 comm="syz.4.27" path="/syzcgroup/unified/syz4" dev="cgroup2" ino=158 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=dir permissive=1 [ 75.982323][ T30] audit: type=1400 audit(1785855771.703:246): avc: denied { create } for pid=5903 comm="syz.4.28" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=atmpvc_socket permissive=1 [ 76.072708][ T5794] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 76.097810][ T30] audit: type=1400 audit(1785855771.823:247): avc: denied { prog_load } for pid=5909 comm="syz.1.31" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 76.148575][ T30] audit: type=1400 audit(1785855771.823:248): avc: denied { bpf } for pid=5909 comm="syz.1.31" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 76.179180][ T30] audit: type=1400 audit(1785855771.823:249): avc: denied { perfmon } for pid=5909 comm="syz.1.31" capability=38 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 76.200280][ T30] audit: type=1400 audit(1785855771.843:250): avc: denied { create } for pid=5909 comm="syz.1.31" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 76.206549][ T804] gud 3-1:1.0: No supported pixel formats found [ 76.251166][ T30] audit: type=1400 audit(1785855771.843:251): avc: denied { write } for pid=5909 comm="syz.1.31" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 76.257698][ T804] gud 3-1:1.0: probe with driver gud failed with error -22 [ 76.290906][ T5614] Bluetooth: hci2: unexpected event for opcode 0x041b [ 76.292297][ T5794] usb 1-1: New USB device found, idVendor=0403, idProduct=c631, bcdDevice= 1.00 [ 76.310332][ T30] audit: type=1400 audit(1785855771.903:252): avc: denied { write } for pid=5913 comm="syz.1.33" name="usb_gadget" dev="configfs" ino=1477 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 76.318667][ T5918] Bluetooth: ISO socket layer initialized [ 76.339450][ T5794] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 76.355190][ T5794] i2c-tiny-usb 1-1:1.0: version 1.00 found at bus 001 address 003 [ 76.641724][ T47] sl0: header compression turned on [ 76.762306][ T5794] (null): failure reading functionality [ 76.963834][ T5794] i2c i2c-1: failure reading functionality [ 76.975381][ T5794] i2c i2c-1: connected i2c-tiny-usb device [ 77.324082][ T5983] NFSD: Failed to start, no listeners configured. [ 77.492873][ T5614] Bluetooth: hci0: command 0x0c1a tx timeout [ 77.584060][ T6003] i8042 kbd 00:00: in use; can't configure [ 77.587791][ T47] maxtcpc 0-0040: error -EIO: Failed to read TCPC_POWER_STATUS [ 77.594923][ T6003] i8042 kbd 00:00: in use; can't configure [ 77.600592][ T6001] i2c i2c-0: new_device: Instantiated device maxtcpc at 0x40 [ 77.605790][ T6003] i8042 aux 00:01: in use; can't configure [ 77.620625][ T47] maxtcpc 0-0040: probe with driver maxtcpc failed with error -5 [ 77.637131][ T6001] i2c i2c-1: new_device: Instantiated device maxtcpc at 0x40 [ 77.646473][ T3384] i2c i2c-1: failure reading functionality [ 77.656665][ T6003] i8042 aux 00:01: in use; can't configure [ 77.665027][ T6003] serial 00:02: in use; can't configure [ 77.672351][ T6003] serial 00:02: in use; can't configure [ 77.680698][ T6003] serial 00:03: in use; can't configure [ 77.686740][ T6003] serial 00:03: in use; can't configure [ 77.693632][ T6003] serial 00:04: in use; can't configure [ 77.699486][ T6003] serial 00:04: in use; can't configure [ 77.708670][ T6003] serial 00:05: in use; can't configure [ 77.714715][ T6003] serial 00:05: in use; can't configure [ 77.786153][ T6011] smbdirect: ib_dev[syz1]: added: RNIC max_fast_reg_page_list_len=256 device_cap_flags=0x200000 kernel_cap_flags=0x10 page_size_cap=0x1000 [ 77.800928][ T6011] smbdirect: ib_dev[syz1]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=1 max_cqe=3276800 max_qp_wr=32768 max_send_sge=6 max_recv_sge=6 [ 77.818285][ T5614] Bluetooth: hci1: command 0x0c1a tx timeout [ 77.825834][ T6011] smbdirect: ib_dev[syz1]PORT[1]: iwarp=1 ib=0 roce=0 v1=0 v2=0 core_cap_flags=0x400008 [ 77.826316][ T6012] Bluetooth: MGMT ver 1.23 [ 77.844422][ T6011] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 77.893041][ T5614] Bluetooth: hci3: command 0x0c1a tx timeout [ 78.105133][ T6027] i2c i2c-0: new_device: Instantiated device isp1301 at 0x2c [ 78.524491][ T5794] usb 1-1: USB disconnect, device number 3 [ 78.531899][ T3384] i2c i2c-1: failure reading functionality [ 78.540418][ T3384] i2c i2c-1: failure reading functionality [ 78.546351][ T3384] maxtcpc 1-0040: error -ENOTSUPP: Regmap init failed [ 78.553458][ T3384] maxtcpc 1-0040: probe with driver maxtcpc failed with error -524 [ 79.011491][ T804] usb 3-1: USB disconnect, device number 2 [ 79.163865][ T6053] Zero length message leads to an empty skb [ 79.191003][ T3384] netdevsim netdevsim10 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 79.422806][ T804] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 79.572663][ T5614] Bluetooth: hci0: command 0x0c1a tx timeout [ 79.614791][ T804] usb 3-1: New USB device found, idVendor=0bda, idProduct=8153, bcdDevice= 0.00 [ 79.632484][ T804] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 79.662800][ T10] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 79.667181][ T804] r8152-cfgselector 3-1: Unknown version 0x0000 [ 79.832785][ T10] usb 5-1: Using ep0 maxpacket: 16 [ 79.843313][ T10] usb 5-1: New USB device found, idVendor=04d8, idProduct=c002, bcdDevice= 0.00 [ 79.862745][ T10] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 79.972901][ T5614] Bluetooth: hci3: command 0x0c1a tx timeout [ 80.039110][ T804] r8152-cfgselector 3-1: reset high-speed USB device number 3 using dummy_hcd [ 80.223435][ T804] r8152-cfgselector 3-1: device descriptor read/64, error -32 [ 80.296659][ T10] hid-picolcd 0003:04D8:C002.0003: unbalanced collection at end of report description [ 80.323728][ T10] hid-picolcd 0003:04D8:C002.0003: device report parse failed [ 80.331255][ T10] hid-picolcd 0003:04D8:C002.0003: probe with driver hid-picolcd failed with error -22 [ 80.484324][ T804] r8152-cfgselector 3-1: reset high-speed USB device number 3 using dummy_hcd [ 80.642720][ T804] r8152-cfgselector 3-1: device descriptor read/64, error -32 [ 80.652683][ T6060] NFSD: Unable to initialize client recovery tracking! (-110) [ 80.660317][ T6060] NFSD: Is nfsdcld running? If not, enable CONFIG_NFSD_LEGACY_CLIENT_TRACKING. [ 80.669508][ T6060] NFSD: starting 90-second grace period (net f00003c6) [ 80.912678][ T804] r8152-cfgselector 3-1: reset high-speed USB device number 3 using dummy_hcd [ 81.109091][ T24] cfg80211: failed to load regulatory.db [ 81.118053][ T5853] Freezing user space processes [ 81.153830][ T5853] Freezing user space processes completed (elapsed 0.020 seconds) [ 81.165635][ T10] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 81.173545][ T5853] OOM killer disabled. [ 81.178471][ T2361] ------------[ cut here ]------------ [ 81.182747][ T5853] Freezing remaining freezable tasks [ 81.184083][ T2361] ret [ 81.189358][ T2361] WARNING: drivers/base/firmware_loader/fallback.c:148 at firmware_fallback_sysfs+0x6d5/0xc20, CPU#0: pvrusb2-context/2361 [ 81.204859][ T2361] Modules linked in: [ 81.209032][ T2361] CPU: 0 UID: 0 PID: 2361 Comm: pvrusb2-context Not tainted syzkaller #0 PREEMPT(full) [ 81.218936][ T2361] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 81.229803][ T2361] RIP: 0010:firmware_fallback_sysfs+0x6d5/0xc20 [ 81.236690][ T2361] Code: ff ff e9 57 07 dd fa e8 f9 1b a7 fb e8 64 0e 6b fb 31 ff 89 c3 89 c6 e8 59 16 a7 fb 85 db 0f 84 0f fb ff ff e8 dc 1b a7 fb 90 <0f> 0b 90 48 8b 3c 24 4c 89 e2 48 c7 c6 a0 fb 71 8c e8 35 d6 dc fa [ 81.256493][ T2361] RSP: 0018:ffffc90007aff8d0 EFLAGS: 00010293 [ 81.262555][ T2361] RAX: 0000000000000000 RBX: 00000000fffffff5 RCX: ffffffff866348f7 [ 81.271619][ T2361] RDX: ffff88802d834a80 RSI: ffffffff86634904 RDI: ffff88802d834a80 [ 81.279765][ T2361] RBP: 0000000000000001 R08: 0000000000000005 R09: 0000000000000000 [ 81.287987][ T2361] R10: 00000000fffffff5 R11: 000000000000758b R12: ffffffff8cdcca80 [ 81.296148][ T2361] R13: ffff8880348cc6c0 R14: 0000000000001770 R15: ffff8880348cc6d0 [ 81.304297][ T2361] FS: 0000000000000000(0000) GS:ffff888123dd8000(0000) knlGS:0000000000000000 [ 81.313572][ T2361] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 81.320151][ T2361] CR2: 00007febcd787640 CR3: 000000002ce4e000 CR4: 00000000003526f0 [ 81.328377][ T2361] Call Trace: [ 81.331653][ T2361] [ 81.335429][ T2361] ? kfree+0x22b/0x6c0 [ 81.339511][ T2361] _request_firmware+0xfd7/0x13c0 [ 81.345185][ T2361] ? __pfx__request_firmware+0x10/0x10 [ 81.350648][ T2361] ? pvr2_send_request_ex+0x195a/0x1ea0 [ 81.356395][ T2361] request_firmware+0x35/0x50 [ 81.361073][ T2361] pvr2_locate_firmware+0x8f/0x330 [ 81.366374][ T2361] pvr2_upload_firmware1+0x1ca/0x920 [ 81.371657][ T2361] ? __pfx_pvr2_ctl_timeout+0x10/0x10 [ 81.377206][ T2361] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 81.383377][ T2361] ? __pfx_pvr2_upload_firmware1+0x10/0x10 [ 81.389186][ T2361] pvr2_hdw_initialize+0x3e6/0x3710 [ 81.394568][ T2361] ? pvr2_context_set_notify+0x1c/0x2f0 [ 81.400271][ T2361] ? find_held_lock+0x2b/0x80 [ 81.405123][ T2361] ? pvr2_context_set_notify+0x292/0x2f0 [ 81.410760][ T2361] ? __pfx_pvr2_hdw_initialize+0x10/0x10 [ 81.416661][ T2361] ? __mutex_unlock_slowpath+0x35d/0x930 [ 81.422298][ T2361] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 81.428487][ T2361] ? __pfx___schedule+0x10/0x10 [ 81.434128][ T2361] ? find_held_lock+0x2b/0x80 [ 81.438801][ T2361] ? schedule+0x225/0x2c0 [ 81.443748][ T2361] ? kthread+0x13a/0x450 [ 81.447985][ T2361] pvr2_context_thread_func+0x253/0x920 [ 81.453716][ T2361] ? __pfx_pvr2_context_thread_func+0x10/0x10 [ 81.459781][ T2361] ? rcu_is_watching+0x12/0xc0 [ 81.464728][ T2361] ? __pfx_autoremove_wake_function+0x10/0x10 [ 81.470793][ T2361] ? __kthread_parkme+0x18c/0x230 [ 81.476021][ T2361] ? kthread+0x13a/0x450 [ 81.480259][ T2361] ? __pfx_pvr2_context_thread_func+0x10/0x10 [ 81.486505][ T2361] kthread+0x370/0x450 [ 81.490566][ T2361] ? __pfx_kthread+0x10/0x10 [ 81.495475][ T2361] ret_from_fork+0x72b/0xd50 [ 81.500241][ T2361] ? __pfx_ret_from_fork+0x10/0x10 [ 81.505531][ T2361] ? __switch_to+0x800/0x10f0 [ 81.510369][ T2361] ? __pfx_kthread+0x10/0x10 [ 81.515138][ T2361] ret_from_fork_asm+0x1a/0x30 [ 81.519921][ T2361] [ 81.523133][ T2361] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 81.530404][ T2361] CPU: 0 UID: 0 PID: 2361 Comm: pvrusb2-context Not tainted syzkaller #0 PREEMPT(full) [ 81.540108][ T2361] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 81.550154][ T2361] Call Trace: [ 81.553422][ T2361] [ 81.556343][ T2361] dump_stack_lvl+0x100/0x190 [ 81.561022][ T2361] vpanic+0x552/0x970 [ 81.564997][ T2361] ? __pfx_vpanic+0x10/0x10 [ 81.569502][ T2361] panic+0xd1/0xe0 [ 81.573215][ T2361] ? __pfx_panic+0x10/0x10 [ 81.577632][ T2361] ? check_panic_on_warn+0x1f/0x90 [ 81.582738][ T2361] check_panic_on_warn.cold+0x19/0x34 [ 81.588106][ T2361] ? firmware_fallback_sysfs+0x6d5/0xc20 [ 81.593736][ T2361] __warn.cold+0x191/0x318 [ 81.598147][ T2361] __report_bug+0x30f/0x440 [ 81.602647][ T2361] ? firmware_fallback_sysfs+0x6d5/0xc20 [ 81.608278][ T2361] ? __pfx___report_bug+0x10/0x10 [ 81.613299][ T2361] ? do_raw_spin_lock+0x128/0x260 [ 81.618326][ T2361] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 81.623696][ T2361] ? rcu_is_watching+0x12/0xc0 [ 81.628447][ T2361] ? _raw_spin_lock_irqsave+0x52/0x60 [ 81.633801][ T2361] ? find_held_lock+0x2b/0x80 [ 81.638458][ T2361] ? firmware_fallback_sysfs+0x6d5/0xc20 [ 81.644073][ T2361] report_bug+0xb2/0x220 [ 81.648299][ T2361] ? firmware_fallback_sysfs+0x6d5/0xc20 [ 81.653913][ T2361] handle_bug+0x16a/0x2a0 [ 81.658226][ T2361] exc_invalid_op+0x17/0x50 [ 81.662716][ T2361] asm_exc_invalid_op+0x1a/0x20 [ 81.667545][ T2361] RIP: 0010:firmware_fallback_sysfs+0x6d5/0xc20 [ 81.673766][ T2361] Code: ff ff e9 57 07 dd fa e8 f9 1b a7 fb e8 64 0e 6b fb 31 ff 89 c3 89 c6 e8 59 16 a7 fb 85 db 0f 84 0f fb ff ff e8 dc 1b a7 fb 90 <0f> 0b 90 48 8b 3c 24 4c 89 e2 48 c7 c6 a0 fb 71 8c e8 35 d6 dc fa [ 81.693350][ T2361] RSP: 0018:ffffc90007aff8d0 EFLAGS: 00010293 [ 81.699398][ T2361] RAX: 0000000000000000 RBX: 00000000fffffff5 RCX: ffffffff866348f7 [ 81.707348][ T2361] RDX: ffff88802d834a80 RSI: ffffffff86634904 RDI: ffff88802d834a80 [ 81.715297][ T2361] RBP: 0000000000000001 R08: 0000000000000005 R09: 0000000000000000 [ 81.723249][ T2361] R10: 00000000fffffff5 R11: 000000000000758b R12: ffffffff8cdcca80 [ 81.731197][ T2361] R13: ffff8880348cc6c0 R14: 0000000000001770 R15: ffff8880348cc6d0 [ 81.739153][ T2361] ? firmware_fallback_sysfs+0x6c7/0xc20 [ 81.744775][ T2361] ? firmware_fallback_sysfs+0x6d4/0xc20 [ 81.750394][ T2361] ? kfree+0x22b/0x6c0 [ 81.754451][ T2361] _request_firmware+0xfd7/0x13c0 [ 81.759462][ T2361] ? __pfx__request_firmware+0x10/0x10 [ 81.764901][ T2361] ? pvr2_send_request_ex+0x195a/0x1ea0 [ 81.770428][ T2361] request_firmware+0x35/0x50 [ 81.775087][ T2361] pvr2_locate_firmware+0x8f/0x330 [ 81.780178][ T2361] pvr2_upload_firmware1+0x1ca/0x920 [ 81.785441][ T2361] ? __pfx_pvr2_ctl_timeout+0x10/0x10 [ 81.790792][ T2361] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 81.796756][ T2361] ? __pfx_pvr2_upload_firmware1+0x10/0x10 [ 81.802547][ T2361] pvr2_hdw_initialize+0x3e6/0x3710 [ 81.807730][ T2361] ? pvr2_context_set_notify+0x1c/0x2f0 [ 81.813264][ T2361] ? find_held_lock+0x2b/0x80 [ 81.817919][ T2361] ? pvr2_context_set_notify+0x292/0x2f0 [ 81.823541][ T2361] ? __pfx_pvr2_hdw_initialize+0x10/0x10 [ 81.829158][ T2361] ? __mutex_unlock_slowpath+0x35d/0x930 [ 81.834774][ T2361] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 81.840738][ T2361] ? __pfx___schedule+0x10/0x10 [ 81.845568][ T2361] ? find_held_lock+0x2b/0x80 [ 81.850224][ T2361] ? schedule+0x225/0x2c0 [ 81.854550][ T2361] ? kthread+0x13a/0x450 [ 81.858770][ T2361] pvr2_context_thread_func+0x253/0x920 [ 81.864303][ T2361] ? __pfx_pvr2_context_thread_func+0x10/0x10 [ 81.870353][ T2361] ? rcu_is_watching+0x12/0xc0 [ 81.875104][ T2361] ? __pfx_autoremove_wake_function+0x10/0x10 [ 81.881152][ T2361] ? __kthread_parkme+0x18c/0x230 [ 81.886163][ T2361] ? kthread+0x13a/0x450 [ 81.890386][ T2361] ? __pfx_pvr2_context_thread_func+0x10/0x10 [ 81.896434][ T2361] kthread+0x370/0x450 [ 81.900486][ T2361] ? __pfx_kthread+0x10/0x10 [ 81.905058][ T2361] ret_from_fork+0x72b/0xd50 [ 81.909634][ T2361] ? __pfx_ret_from_fork+0x10/0x10 [ 81.914730][ T2361] ? __switch_to+0x800/0x10f0 [ 81.919388][ T2361] ? __pfx_kthread+0x10/0x10 [ 81.923956][ T2361] ret_from_fork_asm+0x1a/0x30 [ 81.928719][ T2361] [ 81.931910][ T2361] Kernel Offset: disabled [ 81.936205][ T2361] Rebooting in 86400 seconds..