last executing test programs: 3m48.696366934s ago: executing program 2 (id=2658): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) mkdir(&(0x7f0000000100)='./bus\x00', 0xe8) mount$overlay(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000b80), 0x8002, &(0x7f0000000180)={[{@index_on}]}) 3m48.466693443s ago: executing program 2 (id=2660): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nfc(&(0x7f0000000080), r1) sendmsg$NFC_CMD_DEACTIVATE_TARGET(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000480)={0x14, r2, 0x1, 0x70bd2d, 0x25dfdbff}, 0x14}}, 0x40000) 3m48.324402613s ago: executing program 2 (id=2662): r0 = syz_open_dev$evdev(&(0x7f00000000c0), 0xfffffffffffffff2, 0x822b01) ioctl$EVIOCSMASK(r0, 0x40104593, &(0x7f0000000080)={0x0, 0x78, &(0x7f0000000200)="0baeba5801183957102060f0416c4db001473465d9fdede4d4e12bb8d7540ff9e1137540d74ffb8871ffaf1ba3f184e14c5c3daa7bd4049e4446a2564aaf02ca52164fe6bfddc89f53b383f9fd8b12a57be9600a399ff608220e8220b8768e3037f156204cb27d8c820bccc932f87481c56b0cb9f260dcb1"}) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)=ANY=[@ANYBLOB="14000000"], 0x9c}, 0x1, 0x0, 0x0, 0x24000144}, 0x20000050) write$char_usb(r0, &(0x7f0000000040)="e2", 0xff0f) 3m48.195261907s ago: executing program 2 (id=2665): mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(&(0x7f0000000240)='.\x00', &(0x7f0000000040)='./file0/../file0\x00', 0x0, 0x11050ca, 0x0) umount2(&(0x7f0000000500)='./file0\x00', 0x4) 3m48.044282447s ago: executing program 2 (id=2666): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0900000004000000ff0f000003"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x17, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000003000000b7030000000007808500000004"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x40f03, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r1}, 0xc) 3m47.658657269s ago: executing program 2 (id=2672): socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$unix(r0, &(0x7f0000000d80)={0x0, 0x0, &(0x7f0000000380)=[{&(0x7f0000000080)="03", 0x1}], 0x1, &(0x7f0000000280)=ANY=[@ANYBLOB="14"], 0x18}, 0x4000001) recvmsg$unix(r1, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x1) recvmmsg(r1, &(0x7f0000001140), 0x700, 0x2, 0x0) 3m47.395829669s ago: executing program 32 (id=2672): socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$unix(r0, &(0x7f0000000d80)={0x0, 0x0, &(0x7f0000000380)=[{&(0x7f0000000080)="03", 0x1}], 0x1, &(0x7f0000000280)=ANY=[@ANYBLOB="14"], 0x18}, 0x4000001) recvmsg$unix(r1, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x1) recvmmsg(r1, &(0x7f0000001140), 0x700, 0x2, 0x0) 1m56.260634972s ago: executing program 1 (id=4159): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) io_setup(0x2, &(0x7f0000000200)=0x0) io_submit(r1, 0x1, &(0x7f0000000040)=[&(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, r0, 0x0, 0x0, 0x80000000}]) io_getevents(r1, 0x2, 0x2, &(0x7f0000001340)=[{}, {}], 0x0) io_submit(r1, 0x1, &(0x7f0000000580)=[&(0x7f0000000000)={0x1802, 0x0, 0x0, 0x5, 0x0, r0, 0x0}]) 1m56.06527518s ago: executing program 1 (id=4161): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="06000000040000000400000005"], 0x50) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x530d19e49dbee1a2, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000280)={r1, 0x2000300, 0xe, 0x0, &(0x7f0000000000)="63eced8e46dc3f0adf3389f7b986", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) 1m56.005429523s ago: executing program 0 (id=4162): r0 = socket$netlink(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_CONFIG(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="1c000000020301040000000000000000000040200800010001"], 0x1c}}, 0x0) sendmsg$NFQNL_MSG_CONFIG(r0, &(0x7f0000000a40)={0x0, 0x0, &(0x7f0000000a00)={&(0x7f0000000140)={0x1c, 0x2, 0x3, 0x201, 0x0, 0x0, {}, [@NFQA_CFG_CMD={0x8, 0x1, {0x1}}]}, 0x1c}}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_CONFIG(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)={0x1c, 0x2, 0x3, 0x3, 0x0, 0x0, {0x0, 0x0, 0x10}, [@NFQA_CFG_CMD={0x8, 0x1, {0x1}}]}, 0x1c}}, 0x0) 1m55.908736159s ago: executing program 1 (id=4164): syz_kvm_add_vcpu$x86(0x0, &(0x7f0000000080)={0x0, &(0x7f0000000240)=[@enable_nested={0x12c, 0x18}], 0x18}) r0 = syz_usb_connect(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000e09d7040460a2196324f01020301090224000100000000090400000206d3450009050102100000000009058b02", @ANYRES8], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$lan78xx(r0, 0x0, &(0x7f0000000740)={0x34, &(0x7f0000000240)=ANY=[@ANYBLOB="00101c"], 0x0, 0x0, 0x0, 0x0, 0x0}) 1m55.891995959s ago: executing program 0 (id=4165): r0 = openat$kvm(0xffffff9c, &(0x7f00000000c0), 0x2200, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x6a855000) madvise(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x19) 1m55.305681823s ago: executing program 5 (id=4170): r0 = socket$nl_route(0x10, 0x3, 0x0) close(0x3) r1 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r1, &(0x7f0000000000)={0x18, 0x0, {0x4, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x35}, 'vxcan1\x00'}}, 0x1e) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=@RTM_NEWMDB={0x8102, 0x55, 0x10, 0x70bd26, 0x1}, 0x18}, 0x1, 0xfe0f0000, 0x0, 0x2000c844}, 0x20000110) 1m55.243453476s ago: executing program 0 (id=4171): mkdirat(0xffffffffffffff9c, &(0x7f0000000800)='./file1\x00', 0x0) mount$fuse(0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000100)='autofs\x00', 0x0, &(0x7f0000000400)) r0 = syz_open_procfs(0x0, &(0x7f0000001400)='mounts\x00') read$FUSE(r0, &(0x7f0000003ac0)={0x2020}, 0x2023) 1m55.216904442s ago: executing program 5 (id=4173): bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x4a}, 0x94) r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000200)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00'}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0xc, &(0x7f0000000000)=ANY=[@ANYBLOB="1802000003001000000000000000000085000000270000001801000020786c2500000000002020207b1af8ff00000000bfa100000000000007010000f8"], 0x0}, 0x94) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907009875f37538e486dd6317ce6203c23c00fe80000000000000875a65969ff57b00000000000000000000000000ac1414aa"], 0xfdef) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x5, 0xb68, 0x11, &(0x7f0000000000)='%', 0x0, 0xd01, 0x88be, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) 1m55.093454446s ago: executing program 0 (id=4174): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r0, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f00000002c0)=[@in={0x2, 0x0, @local}]}, &(0x7f0000000240)=0x10) setsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r0, 0x84, 0x18, &(0x7f0000000080)={r1, 0x7}, 0x8) 1m54.936824137s ago: executing program 4 (id=4175): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0x3, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @broadcast}) write$tun(r0, &(0x7f0000000240)={@val={0x0, 0xf6}, @val={0x0, 0x0, 0x4, 0xfffd, 0x14}, @ipv4=@generic={{0x5, 0x4, 0x1, 0x22, 0x14, 0x66, 0x0, 0x60, 0x6c, 0x0, @empty, @broadcast}}}, 0x22) 1m54.904108272s ago: executing program 5 (id=4176): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) write$binfmt_aout(r0, &(0x7f0000000200)=ANY=[], 0xff2e) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000140)={0x0, 0x0, 0xfffffff9, 0x161, 0x7, "00020000f7fd00"}) r1 = syz_open_pts(r0, 0xc0000) ioctl$sock_inet_udp_SIOCINQ(r1, 0x541b, &(0x7f00000004c0)) 1m54.897557756s ago: executing program 0 (id=4177): r0 = socket(0x1d, 0x2, 0x6) r1 = socket(0x1d, 0x2, 0x6) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000000)={'vxcan1\x00', 0x0}) bind$can_j1939(r0, &(0x7f0000000040)={0x1d, r2, 0x8000000000000003, {0x0, 0xf}, 0xff}, 0x18) sendmmsg$inet6(r0, &(0x7f0000007640)=[{{0x0, 0x0, &(0x7f00000006c0)=[{&(0x7f0000000080)="faf56eba0eb7107b", 0x8}], 0x1}}, {{0x0, 0x0, 0x0}}], 0x2, 0xd0) 1m54.692386461s ago: executing program 4 (id=4180): r0 = socket(0xa, 0x1, 0x0) setsockopt$inet6_group_source_req(r0, 0x29, 0x2a, &(0x7f00000001c0)={0x3, {{0xa, 0x4e24, 0x2, @mcast1, 0xfffffffe}}, {{0xa, 0x4e08, 0x4a3, @private2, 0x4f0}}}, 0x108) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=@newlink={0x30, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x71228}, [@IFLA_MTU={0x8, 0x4, 0x81}, @IFLA_GROUP={0x8}]}, 0x30}}, 0x4004090) close(0x3) 1m54.575917827s ago: executing program 3 (id=4181): r0 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000500)={'syz_tun\x00', 0x0}) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x6, 0x4, &(0x7f0000000240)=ANY=[@ANYBLOB="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"], &(0x7f00000000c0)='GPL\x00', 0x4, 0x1000, &(0x7f000062b000)=""/4096, 0x0, 0x0, '\x00', 0x0, @xdp}, 0x70) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000002200)={r2, r1, 0x25, 0x0, @val=@netfilter={0x0, 0x0, 0x6}}, 0x20) syz_emit_ethernet(0x42, &(0x7f0000000040)=ANY=[], 0x0) 1m54.378733022s ago: executing program 5 (id=4182): r0 = socket(0x840000000002, 0x3, 0x100) connect$inet(r0, &(0x7f0000000000)={0x2, 0x0, @remote}, 0x10) sendmmsg$inet(r0, &(0x7f0000005240), 0x4000095, 0x0) setsockopt$inet_int(r0, 0x0, 0x13, &(0x7f0000000040)=0x657, 0x4) 1m54.356507834s ago: executing program 3 (id=4183): r0 = socket$inet6(0xa, 0x3, 0x1) connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000000800)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000140)=[@dstopts_2292={{0x18}}], 0x18}}], 0x1, 0x40000000) sendmmsg(r0, &(0x7f0000000480), 0x2e9, 0xffe0) 1m54.327256542s ago: executing program 4 (id=4184): r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) timer_create(0x1, &(0x7f0000000000)={0x0, 0x10, 0x1, @tid=r0}, 0x0) ptrace(0x10, r0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20040000}, 0x20000000) ptrace$setregs(0x1a, r0, 0xc, &(0x7f0000000000)) 1m54.121520186s ago: executing program 3 (id=4185): bpf$PROG_LOAD(0x5, &(0x7f0000000a00)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000750000001801000020646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000e00000095"], 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0x8, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="05000000020000000400000009"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001"], 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x14, &(0x7f0000000400)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x40f03, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r1}, 0xc) 1m54.039570128s ago: executing program 4 (id=4186): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1100000004000000040000000001"], 0x50) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000140)=@base={0x1, 0x4, 0x4, 0x100, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x6, 0xc, &(0x7f0000000280)=@framed={{}, [@generic={0x61, 0x8, 0x1}, @map_fd={0x18, 0x1, 0x1, 0x0, r0}, @generic={0x15, 0x8, 0x0, 0x2}, @map_fd={0x18, 0x1, 0x1, 0x0, r1}, @generic={0xbf, 0x2, 0xa}, @generic={0x7, 0x2, 0x0, 0x0, 0xfffffff8}, @generic={0x85, 0x0, 0x0, 0x0, 0x1}]}, &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={r2, 0x0, 0xe, 0x0, &(0x7f00000003c0)='\x00'/14, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) 1m53.940663922s ago: executing program 1 (id=4187): r0 = socket$packet(0x11, 0x2, 0x300) setns(0xc9, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'ip6gretap0\x00', 0x0}) r2 = socket$packet(0x11, 0x2, 0x300) sendto$packet(r2, 0x0, 0x0, 0x20080170, &(0x7f0000000000)={0x11, 0x5, r1, 0x1, 0x9, 0x6, @remote}, 0x14) 1m53.910158009s ago: executing program 3 (id=4188): r0 = socket$kcm(0xa, 0x2, 0x0) r1 = socket(0x2, 0x80002, 0x0) setsockopt$IP_VS_SO_SET_ADD(r1, 0x0, 0x482, &(0x7f0000000040)={0x84, @private=0xa010100, 0x4e22, 0x3, 'sh\x00', 0x0, 0x0, 0x14}, 0x2c) setsockopt$IP_VS_SO_SET_ADDDEST(r1, 0x0, 0x487, &(0x7f0000000000)={{0x84, @private=0xa010103, 0x4e21, 0x3, 'lblcr\x00', 0x5, 0x8, 0x77}, {@remote, 0x4e20, 0x0, 0x6, 0x1}}, 0x44) sendmsg$sock(r0, &(0x7f0000000400)={&(0x7f0000000580)=@in6={0x2, 0x15, 0x0, @dev={0xfe, 0x80, '\x00', 0x4}}, 0x80, 0x0, 0x0, &(0x7f0000000000)=[@mark={{0x14, 0x1, 0x24, 0x3}}], 0x18}, 0x0) 1m53.857319527s ago: executing program 4 (id=4189): r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r0, 0x107, 0xa, &(0x7f0000000240)=0x2, 0x4) setsockopt$packet_tx_ring(r0, 0x107, 0xd, &(0x7f00000002c0)=@req3={0x10000, 0x1, 0x100, 0x100}, 0x1c) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x9) setsockopt$packet_tx_ring(r0, 0x107, 0xd, &(0x7f00000001c0)=@req3={0x9, 0xb508, 0x6c000000, 0x7, 0x1, 0x3, 0xf}, 0x1c) 1m53.837301228s ago: executing program 1 (id=4190): r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000740)={&(0x7f0000000040)=ANY=[@ANYBLOB="9feb010018000000000000001800000018000000050000000100000001000013040000000200000088060000ff0f0000002e2e"], 0x0, 0x35}, 0x28) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x11, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB="180005000000ffff000077b9080000009500000000d3a07e"], &(0x7f0000000080)='GPL\x00', 0x7, 0x4fa, &(0x7f0000000cc0)=""/4096, 0x40f00, 0x5, '\x00', 0x0, 0x0, r0, 0x8, 0x0, 0x0, 0x10, &(0x7f00000002c0)={0x0, 0x2, 0x4, 0x9}, 0x1, 0x0, 0x0, 0xff3e, 0x0, 0x0, 0x10, 0xfffffffe}, 0x94) sendmsg$DEVLINK_CMD_RATE_NEW(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000700)={0x0}, 0x1, 0x0, 0x0, 0x41}, 0x0) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x14, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 1m53.782348245s ago: executing program 5 (id=4191): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0xa042, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CAP_EXIT_HYPERCALL(r1, 0x4068aea3, &(0x7f0000000000)={0x79, 0x0, 0xc}) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x1) ioctl$KVM_CAP_X86_APIC_BUS_CYCLES_NS(r1, 0x4068aea3, &(0x7f0000000080)={0xed, 0x0, 0x3}) 1m53.773604578s ago: executing program 3 (id=4192): r0 = epoll_create1(0x80000) r1 = socket$unix(0x1, 0x1, 0x0) close(r1) syz_open_dev$video4linux(&(0x7f00000000c0), 0x403, 0x2402) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f00000000c0)={0xa0028000}) 1m53.710613757s ago: executing program 4 (id=4193): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_int(r1, 0x29, 0x1a, &(0x7f0000000000)=0xa, 0x4) r2 = socket$inet_udp(0x2, 0x2, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=@newlink={0x40, 0x10, 0x403, 0x200000, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x42}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @gtp={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_GTP_FD1={0x8, 0x2, @udp6=r1}, @IFLA_GTP_FD0={0x8, 0x1, @udp=r2}]}}}]}, 0x40}, 0x1, 0xba01}, 0x0) 1m53.698326824s ago: executing program 1 (id=4194): socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000006c0)={0xffffffffffffffff}) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./tracing\x00', 0x1ff) mount(0x0, &(0x7f0000000100)='./tracing\x00', &(0x7f0000000200)='tracefs\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000500)='./tracing/events/kvm/kvm_hv_stimer_cleanup/trigger\x00', 0x1, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 1m53.641067177s ago: executing program 0 (id=4195): r0 = socket$inet_mptcp(0x2, 0x1, 0x106) bind$inet(r0, &(0x7f0000000100)={0x2, 0x4e24, @loopback}, 0x10) sendmmsg$inet(r0, &(0x7f0000004980)=[{{&(0x7f0000000000)={0x2, 0x4e24, @loopback}, 0x10, 0x0}}], 0x1, 0x20008000) shutdown(r0, 0x1) ioctl$sock_inet_tcp_SIOCOUTQNSD(r0, 0x894b, &(0x7f00000000c0)) 1m53.60578749s ago: executing program 3 (id=4196): r0 = socket(0x1d, 0x2, 0x6) r1 = socket(0x1d, 0x2, 0x6) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000000)={'vxcan1\x00', 0x0}) bind$can_j1939(r0, &(0x7f0000000040)={0x1d, r2, 0x8000000000000003, {0x0, 0xf}, 0xff}, 0x18) sendmmsg$inet6(r0, &(0x7f0000007640)=[{{0x0, 0x0, &(0x7f00000006c0)=[{&(0x7f0000000080)="fa", 0x1}], 0x1}}, {{0x0, 0x0, 0x0}}], 0x2, 0xd0) 1m53.574296854s ago: executing program 5 (id=4197): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000001500)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000001500)='./dev\x00', &(0x7f0000001600)='devtmpfs\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f00000001c0)='./dev/mapper/control\x00', 0x2, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 0s ago: executing program 33 (id=4195): r0 = socket$inet_mptcp(0x2, 0x1, 0x106) bind$inet(r0, &(0x7f0000000100)={0x2, 0x4e24, @loopback}, 0x10) sendmmsg$inet(r0, &(0x7f0000004980)=[{{&(0x7f0000000000)={0x2, 0x4e24, @loopback}, 0x10, 0x0}}], 0x1, 0x20008000) shutdown(r0, 0x1) ioctl$sock_inet_tcp_SIOCOUTQNSD(r0, 0x894b, &(0x7f00000000c0)) kernel console output (not intermixed with test programs): 16 bytes leftover after parsing attributes in process `syz.4.2647'. [ 243.966432][T11954] iwpm_parse_nlmsg: Invalid NULL attribute (msg type Hello request ret = -22) [ 243.966441][T11954] iwpm_hello_cb: Unable to parse nlmsg [ 244.348192][ T5617] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 244.537971][ T5617] usb 5-1: Using ep0 maxpacket: 8 [ 244.539468][ T5617] usb 5-1: New USB device found, idVendor=0ccd, idProduct=0039, bcdDevice=90.7b [ 244.542536][ T5617] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 244.586091][ T5617] pvrusb2: Hardware description: Terratec Grabster AV400 [ 244.586102][ T5617] pvrusb2: ********** [ 244.586106][ T5617] pvrusb2: ***WARNING*** Support for this device (Terratec Grabster AV400) is experimental. [ 244.586112][ T5617] pvrusb2: Important functionality might not be entirely working. [ 244.586117][ T5617] pvrusb2: Please consider contacting the driver author to help with further stabilization of the driver. [ 244.586122][ T5617] pvrusb2: ********** [ 244.776834][ T5794] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 244.794574][ T2351] pvrusb2: Invalid write control endpoint [ 244.928996][ T5794] usb 4-1: New USB device found, idVendor=1038, idProduct=12c2, bcdDevice= 0.00 [ 244.931162][ T5794] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x88 has an invalid bInterval 0, changing to 7 [ 244.931180][ T5794] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x88 has invalid wMaxPacketSize 0 [ 244.931200][ T5794] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 244.991049][ T2351] pvrusb2: Invalid write control endpoint [ 244.991060][ T2351] pvrusb2: ***WARNING*** Detected a wedged cx25840 chip; the device will not work. [ 244.991065][ T2351] pvrusb2: ***WARNING*** Try power cycling the pvrusb2 device. [ 244.991069][ T2351] pvrusb2: ***WARNING*** Disabling further access to the device to prevent other foul-ups. [ 244.991074][ T2351] pvrusb2: Device being rendered inoperable [ 244.991119][ T2351] cx25840 1-0044: Unable to detect h/w, assuming cx23887 [ 244.991142][ T2351] cx25840 1-0044: cx23887 A/V decoder found @ 0x88 (pvrusb2_a) [ 245.071294][ T5794] usb 4-1: config 0 descriptor?? [ 245.106323][ T2351] pvrusb2: Attached sub-driver cx25840 [ 245.106334][ T2351] pvrusb2: ***WARNING*** pvrusb2 device hardware appears to be jammed and I can't clear it. [ 245.106340][ T2351] pvrusb2: You might need to power cycle the pvrusb2 device in order to recover. [ 245.139789][T11960] pvrusb2: Attempted to execute control transfer when device not ok [ 245.143514][ T5718] usb 5-1: USB disconnect, device number 5 [ 245.238962][T11979] overlayfs: option "index=on" is useless in a non-upper mount, ignore [ 245.386895][ T43] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 245.387940][ T59] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 245.387963][ T59] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 245.387982][ T59] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 245.522724][ T5794] hid-steelseries-arctis 0003:1038:12C2.000A: hidraw0: USB HID v0.00 Device [HID 1038:12c2] on usb-dummy_hcd.3-1/input0 [ 245.692977][T11994] ./dev/sda1: Can't open blockdev [ 245.870732][ T5794] usb 4-1: USB disconnect, device number 6 [ 246.251509][ T3654] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 246.365874][ T3654] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 246.488961][ T31] audit: type=1400 audit(1791499012.489:756): avc: denied { watch } for pid=12007 comm="syz.1.2675" path="/493/file0" dev="tmpfs" ino=2599 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=fifo_file permissive=1 [ 246.495750][ T31] audit: type=1400 audit(1791499012.489:757): avc: denied { watch_reads } for pid=12007 comm="syz.1.2675" path="/493/file0" dev="tmpfs" ino=2599 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=fifo_file permissive=1 [ 246.605856][ T3654] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 246.717795][T12016] scsi_dev_info_list_add_str: bad dev info string 'Mꇋ8KH,P}/(a&WCa8(Au6c1كXPwe$XPK5'R X7R.]O\kekөopґ 0[{L;ȧ0GIq6?Uq9mߣ7``0I3ŵ' '' '' [ 246.818106][ T3654] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 246.870197][ T4922] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 246.875686][ T4922] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 246.891105][ T4922] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 246.904140][ T4922] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 246.904436][ T4922] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 247.537821][ T12] netdevsim netdevsim4 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 247.537862][ T12] netdevsim netdevsim4 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 247.537881][ T12] netdevsim netdevsim4 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 247.537899][ T12] netdevsim netdevsim4 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 247.537918][ T12] netdevsim netdevsim10 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 247.615031][ T3654] bridge_slave_1: left allmulticast mode [ 247.615063][ T3654] bridge_slave_1: left promiscuous mode [ 247.616636][ T3654] bridge0: port 2(bridge_slave_1) entered disabled state [ 247.669541][ T3654] bridge_slave_0: left allmulticast mode [ 247.669559][ T3654] bridge_slave_0: left promiscuous mode [ 247.669670][ T3654] bridge0: port 1(bridge_slave_0) entered disabled state [ 248.886045][ T3654] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 248.898177][ T3654] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 248.899052][ T3654] bond0 (unregistering): Released all slaves [ 248.901769][T12052] netlink: 36 bytes leftover after parsing attributes in process `syz.3.2691'. [ 248.946991][ T4922] Bluetooth: hci2: command tx timeout [ 249.730935][ T190] usb 2-1: new low-speed USB device number 12 using dummy_hcd [ 249.747765][T12022] lo speed is unknown, defaulting to 1000 [ 249.809652][ T31] audit: type=1400 audit(1791499015.809:758): avc: denied { read write } for pid=12099 comm="syz.4.2709" name="uhid" dev="devtmpfs" ino=1270 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 249.812201][ T31] audit: type=1400 audit(1791499015.809:759): avc: denied { open } for pid=12099 comm="syz.4.2709" path="/dev/uhid" dev="devtmpfs" ino=1270 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 249.948595][ T190] usb 2-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 249.950581][ T190] usb 2-1: config 168 descriptor has 1 excess byte, ignoring [ 249.950918][ T190] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 249.950934][ T190] usb 2-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 249.950948][ T190] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 249.950962][ T190] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 249.953543][ T190] usb 2-1: config 168 descriptor has 1 excess byte, ignoring [ 249.953568][ T190] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 249.953583][ T190] usb 2-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 249.953598][ T190] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 249.953612][ T190] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 249.957772][ T190] usb 2-1: config 168 descriptor has 1 excess byte, ignoring [ 249.957798][ T190] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 249.957814][ T190] usb 2-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 249.957827][ T190] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 249.957842][ T190] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 250.088911][ T190] usb 2-1: string descriptor 0 read error: -22 [ 250.089013][ T190] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 250.225003][ T190] adutux 2-1:168.0: ADU100 now attached to /dev/usb/adutux0 [ 250.310934][ T1306] ieee802154 phy0 wpan0: encryption failed: -22 [ 250.310967][ T1306] ieee802154 phy1 wpan1: encryption failed: -22 [ 250.341871][ T31] audit: type=1400 audit(1791499016.339:760): avc: denied { mounton } for pid=12106 comm="syz.0.2710" path="/131/proc" dev="tmpfs" ino=689 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 250.409338][ T31] audit: type=1400 audit(1791499016.409:761): avc: denied { write } for pid=12085 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 250.409790][ T5704] wiimote 0005:057E:0306.000B: hidraw0: BLUETOOTH HID v0.03 Gamepad [syz0] on syz0 [ 250.410717][ T5704] wiimote 0005:057E:0306.000B: New device registered [ 250.440060][ T5718] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 250.567784][ T3654] hsr_slave_0: left promiscuous mode [ 250.587029][ T5718] usb 5-1: Using ep0 maxpacket: 8 [ 250.593309][ T3654] hsr_slave_1: left promiscuous mode [ 250.593846][ T3654] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 250.593868][ T3654] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 250.593981][ T5718] usb 5-1: New USB device found, idVendor=0d8c, idProduct=000c, bcdDevice= 0.40 [ 250.594756][ T5718] usb 5-1: config 0 has no interfaces? [ 250.636969][ T5718] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 250.636984][ T5718] usb 5-1: Product: syz [ 250.636992][ T5718] usb 5-1: Manufacturer: syz [ 250.637001][ T5718] usb 5-1: SerialNumber: syz [ 250.677751][ T5718] usb 5-1: config 0 descriptor?? [ 250.701769][ T3654] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 250.701784][ T3654] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 250.820012][ T3654] veth1_macvtap: left promiscuous mode [ 250.820047][ T3654] veth0_macvtap: left promiscuous mode [ 250.820103][ T3654] veth1_vlan: left promiscuous mode [ 250.820259][ T3654] veth0_vlan: left promiscuous mode [ 250.824132][ T31] audit: type=1400 audit(1791499016.819:762): avc: denied { write } for pid=12113 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 250.918997][T12100] wiimote 0005:057E:0306.000B: Unhandled report 32 size 2 [ 250.939189][T12099] wiimote 0005:057E:0306.000B: Device removed [ 250.942618][ T5718] usb 5-1: USB disconnect, device number 6 [ 251.027055][ T4922] Bluetooth: hci2: command tx timeout [ 251.510982][ T5704] wiimote 0005:057E:0306.000B: detected device: Nintendo Wii Remote (Gen 1) [ 251.558135][ T3654] team0 (unregistering): Port device team_slave_1 removed [ 251.583436][ T3654] team0 (unregistering): Port device team_slave_0 removed [ 251.674023][ T5704] input: Nintendo Wii Remote Accelerometer as /devices/virtual/misc/uhid/0005:057E:0306.000B/input/input28 [ 251.767934][ T5704] input: Nintendo Wii Remote IR as /devices/virtual/misc/uhid/0005:057E:0306.000B/input/input29 [ 251.808390][ T5704] input: Nintendo Wii Remote as /devices/virtual/misc/uhid/0005:057E:0306.000B/input/input27 [ 251.940738][ T5267] 8021q: adding VLAN 0 to HW filter on device eth1 [ 251.942211][T12128] netlink: 56 bytes leftover after parsing attributes in process `syz.0.2719'. [ 252.486623][T12022] bridge0: port 1(bridge_slave_0) entered blocking state [ 252.488294][T12022] bridge0: port 1(bridge_slave_0) entered disabled state [ 252.488363][T12022] bridge_slave_0: entered allmulticast mode [ 252.490593][T12022] bridge_slave_0: entered promiscuous mode [ 252.524315][T12022] bridge0: port 2(bridge_slave_1) entered blocking state [ 252.524365][T12022] bridge0: port 2(bridge_slave_1) entered disabled state [ 252.524554][T12022] bridge_slave_1: entered allmulticast mode [ 252.553771][T12022] bridge_slave_1: entered promiscuous mode [ 252.620666][T12022] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 252.637804][T12022] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 252.659745][ T31] audit: type=1400 audit(1791499018.659:763): avc: denied { write } for pid=12139 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 252.727905][ T5617] usb 2-1: USB disconnect, device number 12 [ 252.747445][T12022] team0: Port device team_slave_0 added [ 252.775086][T12022] team0: Port device team_slave_1 added [ 252.854064][T12022] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 252.854076][T12022] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 252.854090][T12022] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 252.914799][T12022] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 252.914809][T12022] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 252.914824][T12022] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 252.998395][ T31] audit: type=1400 audit(1791499018.999:764): avc: denied { write } for pid=12156 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 253.106885][ T4922] Bluetooth: hci2: command tx timeout [ 253.274660][ T5267] 8021q: adding VLAN 0 to HW filter on device eth2 [ 253.375547][T12022] hsr_slave_0: entered promiscuous mode [ 253.392533][T12022] hsr_slave_1: entered promiscuous mode [ 253.392863][T12022] debugfs: 'hsr0' already exists in 'hsr' [ 253.392873][T12022] Cannot create hsr debugfs directory [ 253.478640][ T3654] IPVS: stop unused estimator thread 0... [ 254.268110][ T31] audit: type=1400 audit(1791499020.259:765): avc: denied { write } for pid=12174 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 254.352045][T12199] input: PS/2 Generic Explorer Mouse as /devices/platform/i8042/serio1/input/input30 [ 254.374208][T12022] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 254.396382][T12022] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 254.404780][T12022] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 254.445505][T12022] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 254.450718][T12022] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 254.527507][T12022] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 254.528245][T12022] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 254.569270][ T31] audit: type=1400 audit(1791499020.569:766): avc: denied { write } for pid=12207 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 254.623260][T12022] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 254.806076][ T5267] 8021q: adding VLAN 0 to HW filter on device eth3 [ 254.875924][T12022] 8021q: adding VLAN 0 to HW filter on device bond0 [ 254.921032][T12022] 8021q: adding VLAN 0 to HW filter on device team0 [ 254.942654][ T43] bridge0: port 1(bridge_slave_0) entered blocking state [ 254.942708][ T43] bridge0: port 1(bridge_slave_0) entered forwarding state [ 254.966121][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 254.966174][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 255.093965][ T31] audit: type=1400 audit(1791499021.089:767): avc: denied { write } for pid=12224 comm="syz.3.2744" path="socket:[39388]" dev="sockfs" ino=39388 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 255.186917][ T4922] Bluetooth: hci2: command tx timeout [ 255.772588][ T31] audit: type=1400 audit(1791499021.769:768): avc: denied { write } for pid=12225 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 255.906088][ T31] audit: type=1400 audit(1791499021.899:769): avc: denied { setopt } for pid=12260 comm="syz.1.2752" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 256.050145][ T31] audit: type=1400 audit(1791499022.049:770): avc: denied { write } for pid=12265 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 256.136337][T12250] ftl_cs: FTL header not found. [ 256.292549][ T5267] 8021q: adding VLAN 0 to HW filter on device eth4 [ 256.321253][T12022] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 256.714012][T12250] block2mtd: mtd1: [/dev/zram0] erase_size = 0KiB [6] [ 257.015607][T12022] veth0_vlan: entered promiscuous mode [ 257.043078][T12022] veth1_vlan: entered promiscuous mode [ 257.062538][T12303] ima: policy update failed [ 257.062670][ T31] audit: type=1802 audit(1791499023.059:771): pid=12303 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=policy_update cause=failed comm="syz.3.2765" res=0 errno=0 [ 257.130930][T12022] veth0_macvtap: entered promiscuous mode [ 257.153946][T12022] veth1_macvtap: entered promiscuous mode [ 257.203747][T12022] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 257.230117][T12022] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 257.263070][ T3621] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 257.263114][ T3621] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 257.263142][ T3621] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 257.263162][ T3621] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 257.521332][ T3627] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 257.521345][ T3627] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 257.613763][ T3627] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 257.613777][ T3627] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 258.018060][ T31] audit: type=1400 audit(1791499024.019:772): avc: denied { watch } for pid=12326 comm="syz.0.2774" path="/157/file0" dev="tmpfs" ino=833 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 259.043707][ T31] audit: type=1400 audit(1791499025.039:773): avc: denied { mount } for pid=12366 comm="syz.1.2792" name="/" dev="pstore" ino=3788 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:pstore_t tclass=filesystem permissive=1 [ 259.377671][ T31] audit: type=1400 audit(1791499025.379:774): avc: denied { ioctl } for pid=12377 comm="syz.0.2798" path="socket:[40365]" dev="sockfs" ino=40365 ioctlcmd=0x89ee scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 260.217399][ T5718] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 260.221026][T12402] macvlan0: entered promiscuous mode [ 260.221239][T12402] netlink: 'syz.3.2808': attribute type 1 has an invalid length. [ 260.221247][T12402] netlink: 'syz.3.2808': attribute type 2 has an invalid length. [ 260.348110][ T5704] usb 2-1: new high-speed USB device number 13 using dummy_hcd [ 260.369687][ T5718] usb 1-1: New USB device found, idVendor=0c4b, idProduct=0100, bcdDevice= 1.00 [ 260.371964][ T5718] usb 1-1: config 1 interface 0 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 32 [ 260.371982][ T5718] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 260.371994][ T5718] usb 1-1: config 1 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 260.372015][ T5718] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 260.375958][T12395] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 260.409474][ T5718] cyberjack 1-1:1.0: Reiner SCT Cyberjack USB card reader converter detected [ 260.469306][ T5718] usb 1-1: Reiner SCT Cyberjack USB card reader converter now attached to ttyUSB0 [ 260.528777][ T5704] usb 2-1: Using ep0 maxpacket: 32 [ 260.535338][ T5704] usb 2-1: New USB device found, idVendor=0fd9, idProduct=0025, bcdDevice=29.40 [ 260.547005][ T5704] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 260.550475][ T5704] usb 2-1: config 0 descriptor?? [ 260.693841][ T5718] usb 1-1: USB disconnect, device number 8 [ 260.723915][ T5718] cyberjack ttyUSB0: Reiner SCT Cyberjack USB card reader converter now disconnected from ttyUSB0 [ 260.724397][ T5718] cyberjack 1-1:1.0: device disconnected [ 260.789614][ T5704] dvb-usb: found a 'Elgato EyeTV Sat' in warm state. [ 260.795073][ T5704] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 260.815211][ T5704] dvbdev: DVB: registering new adapter (Elgato EyeTV Sat) [ 260.815238][ T5704] usb 2-1: media controller created [ 260.857349][ T5704] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 261.010324][ T5704] az6027: usb out operation failed. (-71) [ 261.011946][ T5704] az6027: usb out operation failed. (-71) [ 261.011953][ T5704] stb0899_attach: Driver disabled by Kconfig [ 261.011959][ T5704] az6027: no front-end attached [ 261.011959][ T5704] [ 261.012553][ T5704] az6027: usb out operation failed. (-71) [ 261.012563][ T5704] dvb-usb: no frontend was attached by 'Elgato EyeTV Sat' [ 261.013614][ T5704] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.1/usb2/2-1/input/input32 [ 261.095720][ T5704] dvb-usb: schedule remote query interval to 400 msecs. [ 261.095734][ T5704] dvb-usb: Elgato EyeTV Sat successfully initialized and connected. [ 261.126197][ T5704] usb 2-1: USB disconnect, device number 13 [ 261.234919][ T5704] dvb-usb: Elgato EyeTV Sat successfully deinitialized and disconnected. [ 261.818321][ T190] usb 4-1: new full-speed USB device number 7 using dummy_hcd [ 261.968947][ T190] usb 4-1: not running at top speed; connect to a high speed hub [ 261.968969][ T190] usb 4-1: New USB device found, idVendor=046d, idProduct=0825, bcdDevice= 1.00 [ 261.972699][ T190] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 261.972733][ T190] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 262.037950][ T190] uvcvideo 4-1:1.0: Found UVC 1.00 device (046d:0825) [ 262.287007][T12467] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2839'. [ 262.472497][ T190] uvcvideo 4-1:1.0: UVC non compliance - GET_DEF(PROBE) not supported. Enabling workaround. [ 262.475652][ T190] uvcvideo 4-1:1.1: No frame descriptor found for the default format. [ 262.475665][ T190] uvcvideo 4-1:1.1: Failed to initialize the device (-22). [ 262.529151][ T190] uvcvideo 4-1:1.0: probe with driver uvcvideo failed with error -22 [ 262.728850][ T5718] usb 4-1: USB disconnect, device number 7 [ 263.375943][T12520] netlink: 480 bytes leftover after parsing attributes in process `syz.4.2863'. [ 263.375987][T12520] netlink: 480 bytes leftover after parsing attributes in process `syz.4.2863'. [ 263.519018][T12524] vimc link validate: Sensor B:src:640x480 (0x33424752, 8, 0, 0, 0) Raw Capture 1:snk:640x480 (0x33424752, 8, 0, 0, 0) [ 263.524249][T12526] usbcore.quirks: string doesn't fit in 127 chars. [ 264.059165][T12559] rnbd_client L607: Mapping device /dev/ram0 on session s0, (access_mode: rw, nr_poll_queues: 0) [ 264.218602][T12559] rtrs_client L2101: : Failed to resolve address, err: -ENODEV [ 264.305642][T12559] rtrs_client L2644: : init_conns() failed: err=-ENODEV path=@ip:127.0.0.1 [:0] [ 264.524668][T12581] i2c-slave-eeprom 0-1022: i2c_slave_register: not supported by adapter [ 264.524795][T12581] i2c-slave-eeprom 0-1022: probe with driver i2c-slave-eeprom failed with error -95 [ 264.524889][T12581] i2c i2c-0: new_device: Instantiated device slave-24c02 at 0x22 [ 264.907898][ T5718] kernel read not supported for file /media1 (pid: 5718 comm: kworker/0:6) [ 265.125165][T12606] bridge0: port 2(bridge_slave_1) entered disabled state [ 265.234515][T12611] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci2/hci2:200/input33 [ 265.304014][ T31] audit: type=1326 audit(1791499031.299:775): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12617 comm="syz.0.2909" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f5f89d9e1d9 code=0x0 [ 265.379034][ T31] audit: type=1400 audit(1791499031.379:776): avc: denied { mounton } for pid=12617 comm="syz.0.2909" path="/proc/399/task/400/fd" dev="proc" ino=41747 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dir permissive=1 [ 265.414431][ T31] audit: type=1400 audit(1791499031.409:777): avc: denied { mount } for pid=12617 comm="syz.0.2909" name="/" dev="devpts" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:devpts_t tclass=filesystem permissive=1 [ 265.469921][ T31] audit: type=1400 audit(1791499031.469:778): avc: denied { read append } for pid=12622 comm="syz.1.2910" name="snapshot" dev="devtmpfs" ino=92 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 265.469956][ T31] audit: type=1400 audit(1791499031.469:779): avc: denied { open } for pid=12622 comm="syz.1.2910" path="/dev/snapshot" dev="devtmpfs" ino=92 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 265.557196][T12623] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 265.557331][T12623] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 265.557409][T12623] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 265.557440][T12623] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 265.694964][T12623] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 265.724452][T12623] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 265.724510][T12623] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 265.976515][T12623] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 266.170328][ T31] audit: type=1400 audit(1791499032.169:780): avc: denied { execute } for pid=12643 comm="syz.5.2918" path="/dev/audio1" dev="devtmpfs" ino=1294 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sound_device_t tclass=chr_file permissive=1 [ 266.205106][ T31] audit: type=1400 audit(1791499032.199:781): avc: denied { accept } for pid=12645 comm="syz.0.2919" path=2F3138362FE91F7189591E9233614B scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=unix_dgram_socket permissive=1 [ 266.231037][ T5704] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 266.376869][ T5704] usb 5-1: Using ep0 maxpacket: 16 [ 266.377519][ T5704] usb 5-1: New USB device found, idVendor=0d8c, idProduct=000e, bcdDevice=8e.8f [ 266.379084][ T5704] usb 5-1: config 0 has an invalid interface number: 8 but max is 0 [ 266.379098][ T5704] usb 5-1: config 0 has no interface number 0 [ 266.379120][ T5704] usb 5-1: config 0 interface 8 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 266.379135][ T5704] usb 5-1: config 0 interface 8 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 266.380845][ T5704] usb 5-1: New USB device strings: Mfr=0, Product=24, SerialNumber=3 [ 266.380859][ T5704] usb 5-1: Product: syz [ 266.380867][ T5704] usb 5-1: SerialNumber: syz [ 266.384674][ T5704] usb 5-1: config 0 descriptor?? [ 266.469214][ T5704] cm109 5-1:0.8: invalid payload size 0, expected 4 [ 266.473185][ T5704] input: CM109 USB driver as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.8/input/input34 [ 266.750855][ C0] cm109 5-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 266.753221][ C0] cm109 5-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 266.753394][ C0] cm109 5-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 266.753446][ T5704] usb 5-1: USB disconnect, device number 7 [ 266.753564][ C0] cm109 5-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 266.753576][ C0] cm109 5-1:0.8: cm109_submit_buzz_toggle: usb_submit_urb (urb_ctl) failed -19 [ 266.918853][ T5704] cm109 5-1:0.8: cm109_toggle_buzzer_sync: usb_control_msg() failed -19 [ 267.335439][ T31] audit: type=1400 audit(1791499033.329:782): avc: denied { write } for pid=12663 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 267.376797][ T5704] usb 2-1: new full-speed USB device number 14 using dummy_hcd [ 267.404915][T12692] netlink: 'syz.4.2936': attribute type 3 has an invalid length. [ 267.404928][T12692] netlink: 'syz.4.2936': attribute type 2 has an invalid length. [ 267.528113][ T5704] usb 2-1: not running at top speed; connect to a high speed hub [ 267.528135][ T5704] usb 2-1: New USB device found, idVendor=046d, idProduct=0825, bcdDevice= 1.00 [ 267.528897][ T5704] usb 2-1: config 0 has too many interfaces: 223, using maximum allowed: 32 [ 267.528912][ T5704] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 267.528923][ T5704] usb 2-1: config 0 has 2 interfaces, different from the descriptor's value: 223 [ 267.528953][ T5704] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 267.530553][ T31] audit: type=1400 audit(1791499033.529:783): avc: denied { write } for pid=12694 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 267.588312][ T4922] Bluetooth: hci3: command 0x0c1a tx timeout [ 267.588348][ T4922] Bluetooth: hci4: command 0x0406 tx timeout [ 267.588364][ T4922] Bluetooth: hci1: command 0x0406 tx timeout [ 267.646212][ T5704] usb 2-1: config 0 descriptor?? [ 267.667352][ T5704] uvcvideo 2-1:0.0: Found UVC 9.00 device (046d:0825) [ 267.746913][ T5610] Bluetooth: hci2: command 0x0c1a tx timeout [ 267.777155][T12702] netlink: zone id is out of range [ 267.777223][T12702] netlink: set zone limit has 4 unknown bytes [ 268.105856][ T5704] uvcvideo 2-1:0.0: UVC non compliance - GET_DEF(PROBE) not supported. Enabling workaround. [ 268.156908][ T190] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 268.216327][ T5704] videodev: could not get a free minor [ 268.216340][ T5704] uvcvideo 2-1:0.1: Failed to register meta-cap device (-23). [ 268.317031][ T190] usb 5-1: Using ep0 maxpacket: 32 [ 268.322184][ T190] usb 5-1: New USB device found, idVendor=0458, idProduct=5011, bcdDevice= 0.00 [ 268.324557][ T190] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 268.324574][ T190] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 268.324587][ T190] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 268.324609][ T190] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 268.354079][ T190] usb 5-1: config 0 descriptor?? [ 268.450963][ T5704] usb 2-1: USB disconnect, device number 14 [ 268.715182][ T31] audit: type=1400 audit(1791499034.709:784): avc: denied { write } for pid=12704 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 268.819010][T12740] input: syz1 as /devices/virtual/input/input35 [ 268.846238][ T190] hid (null): unknown global tag 0xc [ 268.846259][ T190] hid (null): unknown global tag 0xc [ 268.846268][ T190] hid (null): report_id 0 is invalid [ 268.846276][ T190] hid (null): report_id 0 is invalid [ 268.846285][ T190] hid (null): unknown global tag 0x50 [ 268.911435][ T190] input: HID 0458:5011 as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/0003:0458:5011.000C/input/input36 [ 269.016308][T12742] Set syz1 is full, maxelem 2076 reached [ 269.051919][ T190] input: HID 0458:5011 as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/0003:0458:5011.000C/input/input37 [ 269.546793][ T5704] usb 2-1: new high-speed USB device number 15 using dummy_hcd [ 269.551473][ T190] kye 0003:0458:5011.000C: input,hiddev0,hidraw0: USB HID v0.00 Mouse [HID 0458:5011] on usb-dummy_hcd.4-1/input0 [ 269.588484][ T190] usb 5-1: USB disconnect, device number 8 [ 269.668515][ T5608] Bluetooth: hci3: command 0x0c1a tx timeout [ 269.696771][ T5704] usb 2-1: Using ep0 maxpacket: 8 [ 269.698772][ T5704] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 269.699843][ T5704] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 269.699859][ T5704] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 269.699872][ T5704] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 269.699885][ T5704] usb 2-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 269.699907][ T5704] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 269.878244][T12763] fido_id[12763]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.4/usb5/5-1/report_descriptor': No such file or directory [ 269.923735][ T5718] kernel write not supported for file /media4 (pid: 5718 comm: kworker/0:6) [ 269.950650][ T5704] usb 2-1: GET_CAPABILITIES returned 0 [ 269.950679][ T5704] usbtmc 2-1:16.0: can't read capabilities [ 270.064763][T12773] ip_tables: iptables: counters copy to user failed while replacing table [ 270.213898][ T5704] usb 2-1: USB disconnect, device number 15 [ 270.469402][ T31] kauditd_printk_skb: 1 callbacks suppressed [ 270.469415][ T31] audit: type=1400 audit(1791499036.469:786): avc: denied { write } for pid=12758 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 270.727796][ T31] audit: type=1400 audit(1791499036.729:787): avc: denied { write } for pid=12799 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 271.221518][ T31] audit: type=1400 audit(1791499037.219:788): avc: denied { write } for pid=12830 comm="syz.4.2985" name="core" dev="configfs" ino=3138 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 271.426428][T12845] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 271.617467][ T5704] usb 6-1: new full-speed USB device number 2 using dummy_hcd [ 271.643855][T12853] usb usb7: usbfs: process 12853 (syz.4.2992) did not claim interface 0 before use [ 271.747042][ T5610] Bluetooth: hci3: command 0x0c1a tx timeout [ 271.770984][ T5704] usb 6-1: not running at top speed; connect to a high speed hub [ 271.771005][ T5704] usb 6-1: New USB device found, idVendor=046d, idProduct=0825, bcdDevice= 1.00 [ 271.775106][ T5704] usb 6-1: config 0 has too many interfaces: 223, using maximum allowed: 32 [ 271.775122][ T5704] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 271.775134][ T5704] usb 6-1: config 0 has 2 interfaces, different from the descriptor's value: 223 [ 271.775164][ T5704] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 271.836506][ T5704] usb 6-1: config 0 descriptor?? [ 271.863026][ T5704] uvcvideo 6-1:0.0: Found UVC 9.00 device (046d:0825) [ 271.898020][ T31] audit: type=1400 audit(1791499037.899:789): avc: denied { write } for pid=12819 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 271.951766][T12860] netlink: 804 bytes leftover after parsing attributes in process `syz.1.2994'. [ 272.123877][T12864] netlink: 80 bytes leftover after parsing attributes in process `syz.4.2996'. [ 272.197350][ T31] audit: type=1400 audit(1791499038.189:790): avc: denied { write } for pid=12868 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 272.278718][T12875] binder: BC_ATTEMPT_ACQUIRE not supported [ 272.278728][T12875] binder: 12874:12875 ioctl c0306201 200000000640 returned -22 [ 272.368980][ T190] usb 4-1: new low-speed USB device number 8 using dummy_hcd [ 272.518461][ T190] usb 4-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 272.519297][ T190] usb 4-1: config 0 has an invalid interface number: 1 but max is 0 [ 272.519312][ T190] usb 4-1: config 0 has no interface number 0 [ 272.519332][ T190] usb 4-1: config 0 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 10 [ 272.519347][ T190] usb 4-1: config 0 interface 1 altsetting 0 endpoint 0x82 has invalid maxpacket 159, setting to 8 [ 272.519366][ T190] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 272.523552][ T190] usb 4-1: config 0 descriptor?? [ 272.525719][T12869] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 272.613276][ T5617] kernel write not supported for file /1203/attr/prev (pid: 5617 comm: kworker/0:3) [ 272.614013][ T190] iowarrior 4-1:0.1: IOWarrior product=0x1512, serial= interface=1 now attached to iowarrior0 [ 272.686402][ T5704] uvcvideo 6-1:0.1: Failed to query (GET_CUR) UVC probe control : -71 (exp. 48). [ 272.686435][ T5704] uvcvideo 6-1:0.1: Failed to initialize the device (-71). [ 272.735610][ T5704] uvcvideo 6-1:0.0: probe with driver uvcvideo failed with error -71 [ 272.766333][ T5704] usb 6-1: USB disconnect, device number 2 [ 272.844762][ T5617] usb 4-1: USB disconnect, device number 8 [ 272.876261][T12886] A link change request failed with some changes committed already. Interface bond_slave_0 may have been left with an inconsistent configuration, please check. [ 273.512328][T12903] netlink: 12 bytes leftover after parsing attributes in process `syz.5.3013'. [ 274.288767][T12930] netlink: 20 bytes leftover after parsing attributes in process `syz.1.3024'. [ 274.509523][T12934] netlink: 'syz.1.3025': attribute type 10 has an invalid length. [ 274.527224][T12934] 8021q: adding VLAN 0 to HW filter on device team0 [ 274.548360][T12934] bond0: (slave team0): Enslaving as an active interface with an up link [ 274.886251][T12948] skbuff: bad partial csum: csum=65535/2 headroom=178 headlen=65543 [ 275.159569][T12944] netlink: 'syz.1.3030': attribute type 4 has an invalid length. [ 275.159585][T12944] netlink: 'syz.1.3030': attribute type 8 has an invalid length. [ 275.159592][T12944] netlink: 212 bytes leftover after parsing attributes in process `syz.1.3030'. [ 275.586417][T12975] sock: sock_set_timeout: `syz.4.3043' (pid 12975) tries to set negative timeout [ 275.715119][T12979] Cannot find set identified by id 0 to match [ 275.983728][T12996] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 275.996813][ T5617] usb 5-1: new high-speed USB device number 9 using dummy_hcd [ 276.101135][ T31] audit: type=1400 audit(1791499042.099:791): avc: denied { write } for pid=12965 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 276.150345][ T5617] usb 5-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 276.151525][ T5617] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 276.154529][ T5617] usb 5-1: config 0 descriptor?? [ 276.183444][ T5617] cp210x 5-1:0.0: cp210x converter detected [ 276.420875][ T31] audit: type=1400 audit(1791499042.419:792): avc: denied { write } for pid=13010 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 276.563584][T13017] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3058'. [ 276.817466][ T5617] cp210x 5-1:0.0: failed to get vendor val 0x000e size 678: -71 [ 276.817497][ T5617] cp210x 5-1:0.0: GPIO initialisation failed: -71 [ 276.822635][ T5617] usb 5-1: cp210x converter now attached to ttyUSB0 [ 276.871286][ T5617] usb 5-1: USB disconnect, device number 9 [ 276.993778][ T5617] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 276.994061][ T5617] cp210x 5-1:0.0: device disconnected [ 277.213884][T13041] device-mapper: ioctl: dm_ctl_ioctl: unknown command 0xc138fd12 [ 277.773186][T13070] tipc: Started in network mode [ 277.773206][T13070] tipc: Node identity aaaaaaaaaaaa, cluster identity 4711 [ 277.773347][T13070] tipc: Enabled bearer , priority 0 [ 278.104880][T13087] SELinux: ebitmap: map size 0 does not match my size 64 (high bit was 0) [ 278.104912][T13087] SELinux: failed to load policy [ 278.455043][T13113] netlink: 144 bytes leftover after parsing attributes in process `syz.0.3102'. [ 278.456148][T13113] netlink: 144 bytes leftover after parsing attributes in process `syz.0.3102'. [ 278.767227][T13129] jffs2: notice: (13129) jffs2_build_xattr_subsystem: complete building xattr subsystem, 1 of xdatum (0 unchecked, 0 orphan) and 2 of xref (0 dead, 0 orphan) found. [ 278.772596][ T31] audit: type=1400 audit(1791499044.769:793): avc: denied { setattr } for pid=13128 comm="syz.3.3110" name="/" dev="jffs2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 278.871692][ T5617] kernel read not supported for file /dsp (pid: 5617 comm: kworker/0:3) [ 278.891379][ T5617] tipc: Node number set to 43690 [ 279.060272][T13135] Invalid/unusable pipe [ 279.208174][ T31] audit: type=1400 audit(1791499045.209:794): avc: denied { setopt } for pid=13141 comm="syz.3.3116" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_connector_socket permissive=1 [ 279.575468][T13164] sd 0:0:1:0: PR command failed: 1026 [ 279.575495][T13164] sd 0:0:1:0: Sense Key : Illegal Request [current] [ 279.575518][T13164] sd 0:0:1:0: Add. Sense: Invalid command operation code [ 279.617676][T13168] binder: 13165:13168 ioctl c0306201 2000000001c0 returned -14 [ 279.771555][T13175] tipc: Started in network mode [ 279.771572][T13175] tipc: Node identity ac14140f, cluster identity 4711 [ 279.772427][T13175] tipc: New replicast peer: 255.255.255.255 [ 279.777284][T13175] tipc: Enabled bearer , priority 10 [ 279.813594][ T31] audit: type=1400 audit(1791499045.809:795): avc: denied { read append } for pid=13173 comm="syz.1.3132" name="file1" dev="tmpfs" ino=3074 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 279.813624][ T31] audit: type=1400 audit(1791499045.809:796): avc: denied { open } for pid=13173 comm="syz.1.3132" path="/586/file1" dev="tmpfs" ino=3074 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 280.265805][T13190] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3138'. [ 280.347109][T13192] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3139'. [ 280.354226][T13192] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3139'. [ 280.886906][ T190] tipc: Node number set to 2886997007 [ 281.018199][ T5704] usb 2-1: new high-speed USB device number 16 using dummy_hcd [ 281.124368][ T31] audit: type=1400 audit(1791499047.119:797): avc: denied { unmount } for pid=5604 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bpf_t tclass=filesystem permissive=1 [ 281.188561][ T5704] usb 2-1: Using ep0 maxpacket: 32 [ 281.199563][ T5704] usb 2-1: New USB device found, idVendor=05ac, idProduct=0292, bcdDevice=88.73 [ 281.205610][ T5704] usb 2-1: config 0 has an invalid interface number: 119 but max is 0 [ 281.205626][ T5704] usb 2-1: config 0 has no interface number 0 [ 281.205647][ T5704] usb 2-1: config 0 interface 119 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 281.205660][ T5704] usb 2-1: config 0 interface 119 altsetting 0 has an endpoint descriptor with address 0xE3, changing to 0x83 [ 281.205674][ T5704] usb 2-1: config 0 interface 119 altsetting 0 endpoint 0x83 has invalid maxpacket 11621, setting to 1024 [ 281.205689][ T5704] usb 2-1: config 0 interface 119 altsetting 0 bulk endpoint 0x83 has invalid maxpacket 1024 [ 281.205703][ T5704] usb 2-1: config 0 interface 119 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 281.225382][ T5704] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 281.225397][ T5704] usb 2-1: Product: syz [ 281.225405][ T5704] usb 2-1: Manufacturer: syz [ 281.225413][ T5704] usb 2-1: SerialNumber: syz [ 281.227072][ T5704] usb 2-1: config 0 descriptor?? [ 281.227762][T13211] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 281.355408][ T5704] input: bcm5974 as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.119/input/input39 [ 281.356500][ T4957] usb 2-1: BOGUS urb xfer, pipe 1 != type 3 [ 281.538205][ T5704] usb 2-1: USB disconnect, device number 16 [ 281.754297][T13238] raw_sendmsg: syz.4.3160 forgot to set AF_INET. Fix it! [ 281.857739][ T190] usb 4-1: new high-speed USB device number 9 using dummy_hcd [ 281.990623][T13247] block2mtd: illegal erase size [ 282.008355][ T190] usb 4-1: Using ep0 maxpacket: 32 [ 282.010433][ T190] usb 4-1: New USB device found, idVendor=2c42, idProduct=1202, bcdDevice=85.40 [ 282.011182][ T190] usb 4-1: config 0 has an invalid interface number: 12 but max is 0 [ 282.011197][ T190] usb 4-1: config 0 has no interface number 0 [ 282.011218][ T190] usb 4-1: config 0 interface 12 has no altsetting 0 [ 282.012755][ T190] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 282.012769][ T190] usb 4-1: Product: syz [ 282.012777][ T190] usb 4-1: Manufacturer: syz [ 282.012786][ T190] usb 4-1: SerialNumber: syz [ 282.016230][ T190] usb 4-1: config 0 descriptor?? [ 282.419596][T13266] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3173'. [ 282.864536][T13284] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 282.965512][ T190] f81534 4-1:0.12: f81534_set_register: reg: 1002 data: 0 failed: -71 [ 282.965545][ T190] f81534 4-1:0.12: f81534_find_config_idx: read failed: -71 [ 282.965556][ T190] f81534 4-1:0.12: f81534_calc_num_ports: find idx failed: -71 [ 282.965601][ T190] f81534 4-1:0.12: probe with driver f81534 failed with error -71 [ 283.015140][ T190] usb 4-1: USB disconnect, device number 9 [ 283.670020][ T31] audit: type=1400 audit(1791499049.669:798): avc: denied { create } for pid=13318 comm="syz.4.3198" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 283.703237][ T31] audit: type=1400 audit(1791499049.699:799): avc: denied { bind } for pid=13318 comm="syz.4.3198" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 284.281849][ T31] audit: type=1400 audit(1791499050.279:800): avc: denied { write } for pid=13350 comm="syz.5.3214" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 284.586638][T13361] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3218'. [ 284.750383][T13369] binder: 13368:13369 ioctl c00c620f 200000000540 returned -22 [ 284.886152][T13377] cgroup: fork rejected by pids controller in /syz0 [ 285.124885][T10354] tipc: Resetting bearer [ 285.259630][T10354] tipc: Disabling bearer [ 285.575998][ T43] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 285.763208][ T43] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 285.940183][ T43] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 286.061892][ T5608] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 286.086898][ T5608] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 286.087742][ T5608] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 286.088196][ T5608] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 286.089423][ T5608] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 286.327785][ T43] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 286.332063][ T31] audit: type=1400 audit(1791499052.329:801): avc: denied { mounton } for pid=13422 comm="syz.5.3246" path="/" dev="tmpfs" ino=584 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=lnk_file permissive=1 [ 286.598025][T13427] netlink: 'syz.1.3248': attribute type 1 has an invalid length. [ 286.598040][T13427] netlink: 240 bytes leftover after parsing attributes in process `syz.1.3248'. [ 286.598049][T13427] netlink: 'syz.1.3248': attribute type 1 has an invalid length. [ 286.816405][T13439] kAFS: bad VL server IP address [ 287.022083][ T31] audit: type=1400 audit(1791499053.019:802): avc: denied { search } for pid=5267 comm="dhcpcd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 287.024497][ T31] audit: type=1400 audit(1791499053.019:803): avc: denied { search } for pid=5267 comm="dhcpcd" name="udev" dev="tmpfs" ino=9 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 287.053415][ T31] audit: type=1400 audit(1791499053.049:804): avc: denied { search } for pid=5267 comm="dhcpcd" name="data" dev="tmpfs" ino=14 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 287.161711][ T43] bridge_slave_1: left allmulticast mode [ 287.161728][ T43] bridge_slave_1: left promiscuous mode [ 287.161840][ T43] bridge0: port 2(bridge_slave_1) entered disabled state [ 287.167706][ T43] bridge_slave_0: left allmulticast mode [ 287.167720][ T43] bridge_slave_0: left promiscuous mode [ 287.167817][ T43] bridge0: port 1(bridge_slave_0) entered disabled state [ 287.197120][ T5704] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 287.364503][ T31] audit: type=1400 audit(1791499053.359:805): avc: denied { read } for pid=13459 comm="dhcpcd-run-hook" name="resolv.conf" dev="tmpfs" ino=1775 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 287.364710][ T31] audit: type=1400 audit(1791499053.359:806): avc: denied { read open } for pid=13459 comm="dhcpcd-run-hook" path="/run/dhcpcd/hook-state/resolv.conf" dev="tmpfs" ino=1775 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 287.364894][ T31] audit: type=1400 audit(1791499053.359:807): avc: denied { getattr } for pid=13459 comm="dhcpcd-run-hook" path="/run/dhcpcd/hook-state/resolv.conf" dev="tmpfs" ino=1775 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 287.392423][ T5704] usb 6-1: New USB device found, idVendor=0a12, idProduct=0001, bcdDevice= 0.00 [ 287.465334][ T5704] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 287.465351][ T5704] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 287.465376][ T5704] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 287.465388][ T5704] usb 6-1: config 1 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0 [ 287.510556][ T5704] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 287.510612][ T5704] usb 6-1: Product: syz [ 287.510621][ T5704] usb 6-1: Manufacturer: syz [ 287.510629][ T5704] usb 6-1: SerialNumber: syz [ 287.699026][ T5608] Bluetooth: hci5: urb ffff888032ba3f00 submission failed (90) [ 287.771945][ T5704] usb 6-1: USB disconnect, device number 3 [ 288.111159][ T43] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 288.137135][ T43] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 288.146191][ T31] audit: type=1400 audit(1791499054.139:808): avc: denied { write } for pid=13456 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 288.146222][ T31] audit: type=1400 audit(1791499054.139:809): avc: denied { add_name } for pid=13456 comm="dhcpcd-run-hook" name="resolv.conf.eth6.link" scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 288.147105][ T5608] Bluetooth: hci3: command tx timeout [ 288.213559][ T43] bond0 (unregistering): Released all slaves [ 288.243742][ T43] bond1 (unregistering): Released all slaves [ 288.325265][T13414] lo speed is unknown, defaulting to 1000 [ 288.398091][ T43] tipc: Left network mode [ 288.530671][ T31] audit: type=1400 audit(1791499054.519:810): avc: denied { write } for pid=13483 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 288.755009][ T5267] 8021q: adding VLAN 0 to HW filter on device eth6 [ 288.975527][ T43] hsr_slave_0: left promiscuous mode [ 288.976111][ T43] hsr_slave_1: left promiscuous mode [ 288.989135][ T43] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 288.989149][ T43] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 288.992267][ T43] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 288.992278][ T43] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 289.063963][ T43] veth1_macvtap: left promiscuous mode [ 289.063988][ T43] veth0_macvtap: left promiscuous mode [ 289.064091][ T43] veth1_vlan: left promiscuous mode [ 289.064125][ T43] veth0_vlan: left promiscuous mode [ 289.538552][ T190] usb 2-1: new full-speed USB device number 17 using dummy_hcd [ 289.699815][ T190] usb 2-1: unable to get BOS descriptor or descriptor too short [ 289.700200][ T190] usb 2-1: not running at top speed; connect to a high speed hub [ 289.700218][ T190] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 289.701770][ T190] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 289.701785][ T190] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 289.767192][ T190] usb 2-1: string descriptor 0 read error: -22 [ 289.767261][ T190] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 289.807059][ T190] usb 2-1: 0:2 : does not exist [ 289.957568][ T43] team0 (unregistering): Port device team_slave_1 removed [ 289.995638][ T43] team0 (unregistering): Port device team_slave_0 removed [ 290.227650][ T5608] Bluetooth: hci3: command tx timeout [ 290.289143][ T5267] 8021q: adding VLAN 0 to HW filter on device eth7 [ 290.410451][T13501] netdevsim netdevsim10 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 290.410475][T13501] netdevsim netdevsim10 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 290.685709][ T190] usb 2-1: 5:0: cannot get min/max values for control 3 (id 5) [ 290.709747][ T190] usb 2-1: 5:0: failed to get current value for ch 1 (-22) [ 291.033722][ T190] usb 2-1: 5:0: cannot get min/max values for control 3 (id 5) [ 291.145003][ T190] usb 2-1: USB disconnect, device number 17 [ 291.384848][T13414] bridge0: port 1(bridge_slave_0) entered blocking state [ 291.386961][T13414] bridge0: port 1(bridge_slave_0) entered disabled state [ 291.387050][T13414] bridge_slave_0: entered allmulticast mode [ 291.424772][T13414] bridge_slave_0: entered promiscuous mode [ 291.435852][T13414] bridge0: port 2(bridge_slave_1) entered blocking state [ 291.438712][T13414] bridge0: port 2(bridge_slave_1) entered disabled state [ 291.438806][T13414] bridge_slave_1: entered allmulticast mode [ 291.446328][T13414] bridge_slave_1: entered promiscuous mode [ 291.571021][T13414] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 291.601265][T13414] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 291.709833][T13414] team0: Port device team_slave_0 added [ 291.724886][T13414] team0: Port device team_slave_1 added [ 291.766723][T13549] overlayfs: failed to create directory ./file0/work (errno: 13); mounting read-only [ 291.766741][T13549] overlayfs: fs on '.' does not support file handles, falling back to index=off,nfs_export=off. [ 291.766806][T13549] overlayfs: failed to get uuid (687/file2, err=-13); falling back to uuid=null. [ 291.909128][T13414] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 291.910258][T13414] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 291.910274][T13414] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 291.914617][T13414] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 291.914626][T13414] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 291.914640][T13414] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 292.019088][ T31] kauditd_printk_skb: 3 callbacks suppressed [ 292.019100][ T31] audit: type=1400 audit(1791499058.019:814): avc: denied { write } for pid=13529 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 292.180203][T13414] hsr_slave_0: entered promiscuous mode [ 292.180681][T13414] hsr_slave_1: entered promiscuous mode [ 292.199935][T13414] debugfs: 'hsr0' already exists in 'hsr' [ 292.199949][T13414] Cannot create hsr debugfs directory [ 292.306742][ T5608] Bluetooth: hci3: command tx timeout [ 292.367379][ T31] audit: type=1400 audit(1791499058.369:815): avc: denied { write } for pid=13556 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 292.583223][ T5267] 8021q: adding VLAN 0 to HW filter on device eth8 [ 293.215126][ T31] audit: type=1400 audit(1791499059.209:816): avc: denied { setopt } for pid=13581 comm="syz.1.3290" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 293.238775][ T31] audit: type=1400 audit(1791499059.239:817): avc: denied { read } for pid=13581 comm="syz.1.3290" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 293.629564][ T31] audit: type=1400 audit(1791499059.629:818): avc: denied { write } for pid=13569 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 293.892689][ T31] audit: type=1400 audit(1791499059.889:819): avc: denied { write } for pid=13597 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 294.389174][ T5608] Bluetooth: hci3: command tx timeout [ 294.662475][T13414] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 294.679581][T13414] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 294.685151][T13414] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 294.713939][T13414] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 294.714592][T13414] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 294.756393][T13414] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 294.764454][T13414] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 294.810000][T13414] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 295.106542][T13414] 8021q: adding VLAN 0 to HW filter on device bond0 [ 295.158886][T13414] 8021q: adding VLAN 0 to HW filter on device team0 [ 295.196195][ T3621] bridge0: port 1(bridge_slave_0) entered blocking state [ 295.196249][ T3621] bridge0: port 1(bridge_slave_0) entered forwarding state [ 295.223750][ T149] bridge0: port 2(bridge_slave_1) entered blocking state [ 295.223803][ T149] bridge0: port 2(bridge_slave_1) entered forwarding state [ 295.330718][ T31] audit: type=1400 audit(1791499061.329:820): avc: denied { write } for pid=13611 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 295.630960][ T31] audit: type=1400 audit(1791499061.629:821): avc: denied { write } for pid=13647 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 296.609620][T13414] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 296.740387][ T31] audit: type=1400 audit(1791499062.739:822): avc: denied { write } for pid=13658 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 296.792590][T13414] veth0_vlan: entered promiscuous mode [ 296.834681][T13414] veth1_vlan: entered promiscuous mode [ 296.933632][T13414] veth0_macvtap: entered promiscuous mode [ 296.956879][T13414] veth1_macvtap: entered promiscuous mode [ 297.025447][T13414] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 297.058143][T13414] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 297.096787][ T3654] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 297.102133][ T31] audit: type=1400 audit(1791499063.099:823): avc: denied { write } for pid=13691 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 297.279937][ T149] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 297.279974][ T149] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 297.279993][ T149] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 297.586377][ T3654] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 297.586393][ T3654] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 297.691595][ T31] audit: type=1400 audit(1791499063.689:824): avc: denied { read } for pid=13705 comm="syz.5.3319" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 297.792397][ T3627] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 297.792411][ T3627] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 298.171632][ T31] audit: type=1400 audit(1791499064.169:825): avc: denied { read write } for pid=13726 comm="syz.1.3325" name="mice" dev="devtmpfs" ino=915 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:mouse_device_t tclass=chr_file permissive=1 [ 298.206284][ T31] audit: type=1400 audit(1791499064.169:826): avc: denied { open } for pid=13726 comm="syz.1.3325" path="/dev/input/mice" dev="devtmpfs" ino=915 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:mouse_device_t tclass=chr_file permissive=1 [ 298.545457][T13745] loop6: detected capacity change from 0 to 8 [ 298.568620][T13745] loop6: detected capacity change from 8 to 7 [ 298.605841][ T31] audit: type=1400 audit(1791499064.599:827): avc: denied { write } for pid=13710 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 298.641289][ C0] blk_print_req_error: 10 callbacks suppressed [ 298.641303][ C0] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x880700 phys_seg 1 prio class 2 [ 298.683150][ C0] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 298.683220][ C0] buffer_io_error: 11 callbacks suppressed [ 298.683228][ C0] Buffer I/O error on dev loop6, logical block 0, async page read [ 298.684333][ C0] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 298.684386][ C0] Buffer I/O error on dev loop6, logical block 0, async page read [ 298.684789][ C0] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 298.684835][ C0] Buffer I/O error on dev loop6, logical block 0, async page read [ 298.685214][ C0] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 298.685251][ C0] Buffer I/O error on dev loop6, logical block 0, async page read [ 298.685625][ C0] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 298.685660][ C0] Buffer I/O error on dev loop6, logical block 0, async page read [ 299.007830][ T31] audit: type=1400 audit(1791499065.009:828): avc: denied { write } for pid=13755 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 299.378333][ T190] usb 2-1: new high-speed USB device number 18 using dummy_hcd [ 299.556937][ T190] usb 2-1: Using ep0 maxpacket: 32 [ 299.557432][ T190] usb 2-1: New USB device found, idVendor=0fd9, idProduct=0025, bcdDevice=29.40 [ 299.559750][ T190] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 299.562109][ T190] usb 2-1: config 0 descriptor?? [ 299.784201][ T190] dvb-usb: found a 'Elgato EyeTV Sat' in warm state. [ 299.800003][ T190] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 299.803036][ T190] dvbdev: DVB: registering new adapter (Elgato EyeTV Sat) [ 299.803064][ T190] usb 2-1: media controller created [ 299.873594][ T190] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 299.995849][ T190] az6027: usb out operation failed. (-71) [ 300.039422][ T190] az6027: usb out operation failed. (-71) [ 300.039436][ T190] stb0899_attach: Driver disabled by Kconfig [ 300.039442][ T190] az6027: no front-end attached [ 300.039442][ T190] [ 300.069910][ T190] az6027: usb out operation failed. (-71) [ 300.069922][ T190] dvb-usb: no frontend was attached by 'Elgato EyeTV Sat' [ 300.072619][ T190] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.1/usb2/2-1/input/input40 [ 300.075385][ T31] audit: type=1400 audit(1791499066.069:829): avc: denied { write } for pid=13762 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 300.182584][ T190] dvb-usb: schedule remote query interval to 400 msecs. [ 300.182599][ T190] dvb-usb: Elgato EyeTV Sat successfully initialized and connected. [ 300.215236][ T190] usb 2-1: USB disconnect, device number 18 [ 300.424636][ T190] dvb-usb: Elgato EyeTV Sat successfully deinitialized and disconnected. [ 300.486171][ T31] audit: type=1400 audit(1791499066.479:830): avc: denied { write } for pid=13792 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 301.434874][ T31] audit: type=1400 audit(1791499067.429:831): avc: denied { write } for pid=13796 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 301.668383][ T31] audit: type=1400 audit(1791499067.669:832): avc: denied { write } for pid=13834 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 301.750393][T13806] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 301.750532][T13806] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 301.750610][T13806] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 301.750685][T13806] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 301.750717][T13806] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 301.801126][T13806] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 302.093190][T13849] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3363'. [ 302.125111][T13849] bridge0: port 2(bridge_slave_1) entered disabled state [ 302.183058][T13857] fsa4480 0-0042: error -ENODEV: FSA4480 not found [ 302.183308][T13857] i2c i2c-0: new_device: Instantiated device fsa4480 at 0x42 [ 302.609178][ T3627] Bluetooth: hci5: Frame reassembly failed (-84) [ 302.636036][T13881] Bluetooth: received HCILL_WAKE_UP_ACK in state 2 [ 302.650069][T13884] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 302.708686][T13886] usb usb8: usbfs: process 13886 (syz.1.3380) did not claim interface 0 before use [ 303.027009][ T4922] Bluetooth: hci1: command 0x0406 tx timeout [ 303.699983][T13926] CIFS: Attempting to mount //1#7.0.0.1/7/䅯yshare [ 303.826970][ T5610] Bluetooth: hci3: command 0x0c1a tx timeout [ 303.827013][ T5610] Bluetooth: hci2: command 0x0c1a tx timeout [ 303.827082][ T4922] Bluetooth: hci4: command 0x0406 tx timeout [ 303.856825][ T5794] usb 5-1: new high-speed USB device number 10 using dummy_hcd [ 303.910083][T13930] netlink: 'syz.3.3400': attribute type 2 has an invalid length. [ 303.910098][T13930] netlink: 224 bytes leftover after parsing attributes in process `syz.3.3400'. [ 304.006795][ T5794] usb 5-1: Using ep0 maxpacket: 16 [ 304.007891][ T5794] usb 5-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 304.009050][ T5794] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 304.009068][ T5794] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 304.009081][ T5794] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 304.009103][ T5794] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 304.012765][ T5794] usb 5-1: config 0 descriptor?? [ 304.213639][ T31] audit: type=1400 audit(1791499070.209:833): avc: denied { read } for pid=13935 comm="syz.0.3403" name="idProduct" dev="configfs" ino=47334 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=file permissive=1 [ 304.465858][ T5794] hid_parser_main: 28 callbacks suppressed [ 304.465873][ T5794] microsoft 0003:045E:07DA.000D: unknown main item tag 0x0 [ 304.465891][ T5794] microsoft 0003:045E:07DA.000D: unknown main item tag 0x0 [ 304.465905][ T5794] microsoft 0003:045E:07DA.000D: unknown main item tag 0x0 [ 304.465920][ T5794] microsoft 0003:045E:07DA.000D: unknown main item tag 0x0 [ 304.465935][ T5794] microsoft 0003:045E:07DA.000D: unknown main item tag 0x0 [ 304.465950][ T5794] microsoft 0003:045E:07DA.000D: unknown main item tag 0x0 [ 304.465964][ T5794] microsoft 0003:045E:07DA.000D: unknown main item tag 0x0 [ 304.465978][ T5794] microsoft 0003:045E:07DA.000D: unknown main item tag 0x0 [ 304.466263][ T5794] microsoft 0003:045E:07DA.000D: unknown main item tag 0x0 [ 304.553840][ T5794] input: HID 045e:07da as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/0003:045E:07DA.000D/input/input41 [ 304.587875][T13926] CIFS: VFS: Error connecting to socket. Aborting operation. [ 304.587903][T13926] CIFS: VFS: cifs_mount failed w/return code = -4 [ 304.626975][ T4922] Bluetooth: hci5: command 0x1003 tx timeout [ 304.627039][ T5608] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 304.653231][ T5794] input input41: event field not found [ 304.743004][ T5794] microsoft 0003:045E:07DA.000D: input,hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.4-1/input0 [ 304.772654][ T5794] usb 5-1: USB disconnect, device number 10 [ 304.874067][ T31] audit: type=1400 audit(1791499070.869:834): avc: denied { bind } for pid=13949 comm="syz.3.3410" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 304.996069][T13951] fido_id[13951]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.4/usb5/report_descriptor': No such file or directory [ 305.224977][T13962] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3415'. [ 305.444481][T13971] Attempt to restore checkpoint with obsolete wellknown handles [ 305.556945][ T5794] usb 4-1: new high-speed USB device number 10 using dummy_hcd [ 305.708115][ T5794] usb 4-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 305.709022][ T5794] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 305.757790][ T5794] usb 4-1: config 0 descriptor?? [ 305.775697][ T5794] cp210x 4-1:0.0: cp210x converter detected [ 305.816407][ T31] audit: type=1400 audit(1791499071.809:835): avc: denied { mount } for pid=13984 comm="syz.4.3426" name="/" dev="ramfs" ino=47587 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ramfs_t tclass=filesystem permissive=1 [ 305.890220][ T31] audit: type=1400 audit(1791499071.889:836): avc: denied { unmount } for pid=5604 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ramfs_t tclass=filesystem permissive=1 [ 305.917585][ T5608] Bluetooth: hci2: command 0x0c1a tx timeout [ 305.917608][ T5608] Bluetooth: hci3: command 0x0c1a tx timeout [ 306.176967][ T5794] cp210x 4-1:0.0: failed to get vendor val 0x000e size 3: -32 [ 306.210812][ T5794] usb 4-1: cp210x converter now attached to ttyUSB0 [ 306.384684][ T5794] usb 4-1: USB disconnect, device number 10 [ 306.452676][ T5794] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 306.471908][ T5794] cp210x 4-1:0.0: device disconnected [ 306.916449][T14030] netlink: NAT attribute has 8 unknown bytes [ 306.916470][T14030] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 307.123968][ T31] audit: type=1400 audit(1791499073.119:837): avc: denied { watch } for pid=14033 comm="syz.3.3447" path="/723/net_prio.prioidx" dev="tmpfs" ino=3765 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 307.124000][ T31] audit: type=1400 audit(1791499073.119:838): avc: denied { watch_sb } for pid=14033 comm="syz.3.3447" path="/723/net_prio.prioidx" dev="tmpfs" ino=3765 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 307.181102][ T31] audit: type=1400 audit(1791499073.179:839): avc: denied { watch_reads } for pid=14033 comm="syz.3.3447" path="/723/net_prio.prioidx" dev="tmpfs" ino=3765 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 307.396468][T14040] IPVS: sh: TCP 127.0.0.1:21 - no destination available [ 307.951445][T14055] netlink: 36 bytes leftover after parsing attributes in process `syz.0.3456'. [ 307.986820][ T4922] Bluetooth: hci3: command 0x0c1a tx timeout [ 307.986844][ T4922] Bluetooth: hci2: command 0x0c1a tx timeout [ 308.333745][T14065] netlink: 'syz.1.3461': attribute type 2 has an invalid length. [ 308.369207][T14071] netlink: 4768 bytes leftover after parsing attributes in process `syz.3.3464'. [ 308.393662][T14071] netlink: 4768 bytes leftover after parsing attributes in process `syz.3.3464'. [ 308.542268][ T31] audit: type=1400 audit(1791499074.539:840): avc: denied { write } for pid=14076 comm="syz.3.3467" name="file0" dev="tmpfs" ino=3781 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 308.542301][ T31] audit: type=1400 audit(1791499074.539:841): avc: denied { open } for pid=14076 comm="syz.3.3467" path="/726/file0" dev="tmpfs" ino=3781 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 309.608264][T14095] netlink: 104 bytes leftover after parsing attributes in process `syz.1.3475'. [ 309.722848][T14099] jffs2: notice: (14099) jffs2_build_xattr_subsystem: complete building xattr subsystem, 1 of xdatum (0 unchecked, 0 orphan) and 2 of xref (0 dead, 0 orphan) found. [ 309.761728][ T31] audit: type=1400 audit(1791499075.759:842): avc: denied { write } for pid=14098 comm="syz.5.3477" name="/" dev="jffs2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 309.923091][ T31] audit: type=1400 audit(1791499075.919:843): avc: denied { wake_alarm } for pid=14103 comm="syz.3.3479" capability=35 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 310.239832][T14121] netlink: 36 bytes leftover after parsing attributes in process `syz.1.3484'. [ 310.465889][T14126] size and base must be multiples of 4 kiB [ 310.465909][T14126] CPU: 0 UID: 0 PID: 14126 Comm: syz.3.3488 Tainted: G L syzkaller #0 PREEMPT(full) [ 310.465926][T14126] Tainted: [L]=SOFTLOCKUP [ 310.465931][T14126] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 310.465942][T14126] Call Trace: [ 310.465946][T14126] [ 310.465951][T14126] dump_stack_lvl+0x100/0x190 [ 310.465975][T14126] mtrr_del.cold+0x72/0x85 [ 310.465989][T14126] mtrr_ioctl+0xbc8/0xcf0 [ 310.466008][T14126] ? __pfx_mtrr_ioctl+0x10/0x10 [ 310.466019][T14126] ? __pfx_ioctl_has_perm.constprop.0.isra.0+0x10/0x10 [ 310.466040][T14126] ? __fget_files+0x34/0x3d0 [ 310.466064][T14126] ? __pfx_mtrr_ioctl+0x10/0x10 [ 310.466076][T14126] proc_reg_unlocked_ioctl+0x229/0x320 [ 310.466089][T14126] ? __pfx_proc_reg_unlocked_ioctl+0x10/0x10 [ 310.466102][T14126] __x64_sys_ioctl+0x18e/0x210 [ 310.466117][T14126] do_syscall_64+0x123/0x790 [ 310.466132][T14126] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 310.466144][T14126] RIP: 0033:0x7f28ccd9e1d9 [ 310.466154][T14126] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 310.466166][T14126] RSP: 002b:00007f28cdce3028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 310.466180][T14126] RAX: ffffffffffffffda RBX: 00007f28cd025fa0 RCX: 00007f28ccd9e1d9 [ 310.466188][T14126] RDX: 0000200000000040 RSI: 00000000400c4d04 RDI: 0000000000000003 [ 310.466195][T14126] RBP: 00007f28cce35888 R08: 0000000000000000 R09: 0000000000000000 [ 310.466202][T14126] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 310.466208][T14126] R13: 00007f28cd026038 R14: 00007f28cd025fa0 R15: 00007ffef0371248 [ 310.466224][T14126] [ 310.833314][T14135] syz_tun: entered promiscuous mode [ 310.847418][T14135] macvtap1: entered promiscuous mode [ 310.847530][T14135] macvtap1: entered allmulticast mode [ 310.847539][T14135] syz_tun: entered allmulticast mode [ 310.893913][T14135] syz_tun: left allmulticast mode [ 310.894691][T14135] syz_tun: left promiscuous mode [ 311.080671][T14138] bridge_slave_1: invalid flags given to default FDB implementation [ 311.572535][T14151] SELinux: invalid class [ 311.698613][T14151] SELinux: failed to load policy [ 311.759419][ T1306] ieee802154 phy1 wpan1: encryption failed: -22 [ 311.874214][ T5704] kernel write not supported for file /input/event0 (pid: 5704 comm: kworker/0:4) [ 312.089421][ T31] audit: type=1400 audit(1791499079.087:844): avc: denied { listen } for pid=14190 comm="syz.4.3518" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 312.089853][ T31] audit: type=1400 audit(1791499079.087:845): avc: denied { accept } for pid=14190 comm="syz.4.3518" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 312.260398][T14199] netlink: 28 bytes leftover after parsing attributes in process `syz.4.3521'. [ 312.260416][T14199] netlink: 28 bytes leftover after parsing attributes in process `syz.4.3521'. [ 312.261069][T14199] netlink: 132 bytes leftover after parsing attributes in process `syz.4.3521'. [ 312.261080][T14199] netlink: 28 bytes leftover after parsing attributes in process `syz.4.3521'. [ 312.584114][ T5608] Bluetooth: hci2: ACL packet for unknown connection handle 201 [ 312.617084][ T5704] kernel write not supported for file /snd/seq (pid: 5704 comm: kworker/0:4) [ 312.968201][T14233] tipc: Started in network mode [ 312.968221][T14233] tipc: Node identity ac14142f, cluster identity 4711 [ 312.990023][T14233] tipc: Enabled bearer , priority 10 [ 313.003664][T14233] netlink: 56 bytes leftover after parsing attributes in process `syz.4.3536'. [ 314.055858][ T4922] block nbd1: Receive control failed (result -32) [ 314.059527][ T5608] block nbd1: Receive control failed (result -32) [ 314.088499][ T10] tipc: Node number set to 2886997039 [ 314.473771][ T719] wlan1: BSS 50:50:50:50:50:50 switches to unsupported channel (0 MHz), disconnecting [ 314.529297][ T719] wlan1: Selected IBSS BSSID 50:50:50:50:50:50 based on configured SSID [ 314.711235][ T31] audit: type=1400 audit(1791499081.707:846): avc: denied { read } for pid=14293 comm="syz.0.3562" name="kmsg" dev="proc" ino=4026532047 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_kmsg_t tclass=file permissive=1 [ 314.711269][ T31] audit: type=1400 audit(1791499081.707:847): avc: denied { open } for pid=14293 comm="syz.0.3562" path="/55/dev/kmsg" dev="proc" ino=4026532047 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_kmsg_t tclass=file permissive=1 [ 316.150382][T14342] overlayfs: upper fs does not support file handles, falling back to index=off. [ 316.150396][T14342] overlayfs: fs on '.' does not support file handles, falling back to xino=off. [ 316.673943][T14363] ./dev/sda1: Can't open blockdev [ 317.413806][T14384] bonding: bond0 is being deleted... [ 317.797624][T14394] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3605'. [ 318.170012][T14404] sd 0:0:1:0: PR command failed: 1026 [ 318.170041][T14404] sd 0:0:1:0: Sense Key : Illegal Request [current] [ 318.170065][T14404] sd 0:0:1:0: Add. Sense: Invalid command operation code [ 318.170448][T14384] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 318.264421][T14384] bond0 (unregistering): (slave c@0): Releasing backup interface [ 318.282516][T14384] bond0 (unregistering): Released all slaves [ 318.425140][T14402] gtp0: entered promiscuous mode [ 318.425155][T14402] gtp0: entered allmulticast mode [ 318.624957][ T31] audit: type=1400 audit(1791499085.617:848): avc: denied { append } for pid=14416 comm="syz.0.3615" name="usbmon5" dev="devtmpfs" ino=730 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 318.936305][T14430] Bluetooth: hci0: unsupported parameter 5135 [ 318.936319][T14430] Bluetooth: hci0: unsupported parameter 8192 [ 318.936335][T14430] Bluetooth: hci0: unsupported parameter 5135 [ 318.936343][T14430] Bluetooth: hci0: unsupported parameter 8192 [ 319.084480][T14437] tap0: tun_chr_ioctl cmd 1074025676 [ 319.084495][T14437] tap0: owner set to 0 [ 319.142232][T14435] Process accounting resumed [ 319.225760][ T31] audit: type=1400 audit(1791499086.217:849): avc: denied { connect } for pid=14440 comm="syz.5.3626" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 319.384168][T14447] netlink: 48 bytes leftover after parsing attributes in process `syz.4.3628'. [ 321.020286][ T31] audit: type=1400 audit(1791499088.017:850): avc: denied { write } for pid=14514 comm="syz.4.3659" name="subsystems" dev="configfs" ino=2518 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 321.084457][ T31] audit: type=1400 audit(1791499088.077:851): avc: denied { write } for pid=14514 comm="syz.4.3659" name="subsystems" dev="configfs" ino=2518 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 321.196821][ T10] usb 4-1: new high-speed USB device number 11 using dummy_hcd [ 321.324034][T14528] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 321.360321][ T10] usb 4-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 321.361221][ T10] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 321.364533][ T10] usb 4-1: config 0 descriptor?? [ 321.528414][T14533] batman_adv: batadv0: adding TT local entry aa:aa:aa:aa:aa:2a to non-existent VLAN 1280 [ 321.613220][ T10] udl 4-1:0.0: [drm] Unrecognized vendor firmware descriptor [ 321.708190][ T190] usb 6-1: new high-speed USB device number 4 using dummy_hcd [ 321.809891][ T10] [drm:udl_init] *ERROR* Selecting channel failed [ 321.857506][ T190] usb 6-1: New USB device found, idVendor=1d50, idProduct=614d, bcdDevice= 1.00 [ 321.861709][ T190] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 321.861734][ T190] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 321.861747][ T190] usb 6-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 321.861760][ T190] usb 6-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 321.861782][ T190] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 322.078719][ T10] [drm] Initialized udl 0.0.1 for 4-1:0.0 on minor 1 [ 322.078736][ T10] [drm] Initialized udl on minor 1 [ 322.162262][ T10] udl 4-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 322.184771][ T10] udl 4-1:0.0: [drm] Cannot find any crtc or sizes [ 322.250372][ T5704] udl 4-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 322.251727][ T31] audit: type=1400 audit(1791499089.247:852): avc: denied { ioctl } for pid=14547 comm="syz.0.3675" path="net:[4026532888]" dev="nsfs" ino=4026532888 ioctlcmd=0x550c scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 322.338402][ T10] usb 4-1: USB disconnect, device number 11 [ 322.392410][ T5704] udl 4-1:0.0: [drm] Cannot find any crtc or sizes [ 322.417608][ T190] gud 6-1:1.0: probe with driver gud failed with error -121 [ 322.670494][ T9] usb 6-1: USB disconnect, device number 4 [ 322.903473][T14573] netlink: 'syz.0.3687': attribute type 1 has an invalid length. [ 323.171784][T14585] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3693'. [ 323.347321][T14594] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3698'. [ 323.863308][T14619] netlink: 64 bytes leftover after parsing attributes in process `syz.0.3709'. [ 323.945693][ T31] audit: type=1400 audit(1791499090.937:853): avc: denied { write } for pid=14623 comm="syz.1.3711" name="cluster" dev="configfs" ino=1170 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 323.998182][ T31] audit: type=1400 audit(1791499090.997:854): avc: denied { write } for pid=14623 comm="syz.1.3711" name="heartbeat" dev="configfs" ino=50383 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 324.689486][T14650] batadv_slave_1: entered promiscuous mode [ 324.703215][T14650] batadv_slave_1: left promiscuous mode [ 325.652878][T14689] MTRR 0 not used [ 325.771466][ T31] audit: type=1400 audit(1791499092.767:855): avc: denied { append } for pid=14697 comm="syz.3.3745" name="card0" dev="devtmpfs" ino=627 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 326.053431][T14708] bonding: bond0 is being deleted... [ 326.168297][T14708] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 326.189056][T14708] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 326.190865][T14708] bond0 (unregistering): Released all slaves [ 326.632928][T14724] netlink: 20 bytes leftover after parsing attributes in process `syz.0.3754'. [ 326.928996][T14732] netlink: 64 bytes leftover after parsing attributes in process `syz.5.3755'. [ 326.929011][T14732] netlink: 64 bytes leftover after parsing attributes in process `syz.5.3755'. [ 326.929018][T14732] iwpm_parse_nlmsg: Invalid NULL attribute (msg type Mapping Error Msg ret = -22) [ 327.180141][ T31] audit: type=1400 audit(1791499094.177:856): avc: denied { read } for pid=14739 comm="syz.3.3763" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 327.250798][T14743] netlink: 40 bytes leftover after parsing attributes in process `syz.1.3764'. [ 327.250833][T14743] netlink: 40 bytes leftover after parsing attributes in process `syz.1.3764'. [ 327.323417][T14745] netlink: 40 bytes leftover after parsing attributes in process `syz.1.3764'. [ 327.323454][T14745] netlink: 40 bytes leftover after parsing attributes in process `syz.1.3764'. [ 327.373310][T14743] netlink: 40 bytes leftover after parsing attributes in process `syz.1.3764'. [ 327.373345][T14743] netlink: 40 bytes leftover after parsing attributes in process `syz.1.3764'. [ 327.465893][T14745] netlink: 40 bytes leftover after parsing attributes in process `syz.1.3764'. [ 327.922464][ T31] audit: type=1400 audit(1791499094.917:857): avc: denied { listen } for pid=14770 comm="syz.0.3774" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 328.281942][ T31] audit: type=1400 audit(1791499095.277:858): avc: denied { getopt } for pid=14784 comm="syz.4.3781" lport=13 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 329.633522][T14831] team0: No ports can be present during mode change [ 330.701104][T14881] loop9: detected capacity change from 0 to 7 [ 330.703126][T14881] Dev loop9: unable to read RDB block 7 [ 330.703152][T14881] loop9: unable to read partition table [ 330.703252][T14881] loop9: partition table beyond EOD, truncated [ 330.703269][T14881] loop_reread_partitions: partition scan of loop9 (被x ) failed (rc=-5) [ 330.933537][ T31] audit: type=1400 audit(1791499097.927:859): avc: denied { watch } for pid=14885 comm="syz.1.3825" path="/720" dev="tmpfs" ino=3761 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 330.971248][ T31] audit: type=1400 audit(1791499097.967:860): avc: denied { watch_reads } for pid=14885 comm="syz.1.3825" path="/720" dev="tmpfs" ino=3761 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 331.681276][T14915] netlink: 'syz.4.3837': attribute type 1 has an invalid length. [ 331.718812][T14911] SELinux: invalid class [ 331.841756][T14911] SELinux: failed to load policy [ 332.031319][T14929] CIFS: Attempting to mount //127.0.0.1/share [ 332.063906][T14929] IPVS: sh: TCP 127.0.0.1:21 - no destination available [ 332.138783][T14933] __nla_validate_parse: 5 callbacks suppressed [ 332.138796][T14933] netlink: 20 bytes leftover after parsing attributes in process `syz.1.3844'. [ 332.844092][T14929] CIFS: VFS: Error connecting to socket. Aborting operation. [ 332.844122][T14929] CIFS: VFS: cifs_mount failed w/return code = -4 [ 332.870267][T14955] Process accounting resumed [ 333.261224][T14961] SELinux: invalid class [ 333.401388][T14961] SELinux: failed to load policy [ 334.373698][T15003] xt_hashlimit: size too large, truncated to 1048576 [ 335.816552][T15035] TCP: request_sock_TCP: Possible SYN flooding on port [::]:20002. Sending cookies. [ 336.180721][T15050] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 336.267989][T15055] FAULT_INJECTION: forcing a failure. [ 336.267989][T15055] name failslab, interval 1, probability 0, space 0, times 0 [ 336.268024][T15055] CPU: 0 UID: 0 PID: 15055 Comm: syz.4.3895 Tainted: G L syzkaller #0 PREEMPT(full) [ 336.268041][T15055] Tainted: [L]=SOFTLOCKUP [ 336.268045][T15055] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 336.268053][T15055] Call Trace: [ 336.268057][T15055] [ 336.268062][T15055] dump_stack_lvl+0x100/0x190 [ 336.268085][T15055] should_fail_ex.cold+0x5/0xa [ 336.268104][T15055] should_failslab+0xc2/0x120 [ 336.268121][T15055] __kmalloc_noprof+0xfc/0x840 [ 336.268135][T15055] ? lsm_blob_alloc+0x68/0x90 [ 336.268150][T15055] lsm_blob_alloc+0x68/0x90 [ 336.268161][T15055] security_prepare_creds+0x2d/0x290 [ 336.268178][T15055] prepare_creds+0x5d6/0x950 [ 336.268193][T15055] lookup_user_key+0x8e9/0x1300 [ 336.268210][T15055] ? __pfx_lookup_user_key+0x10/0x10 [ 336.268226][T15055] ? lock_acquire+0x1d1/0x380 [ 336.268240][T15055] ? __pfx_lookup_user_key_possessed+0x10/0x10 [ 336.268263][T15055] __do_sys_add_key+0x2a6/0x460 [ 336.268275][T15055] ? __pfx___do_sys_add_key+0x10/0x10 [ 336.268293][T15055] do_syscall_64+0x123/0x790 [ 336.268309][T15055] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 336.268320][T15055] RIP: 0033:0x7f7b4179e1d9 [ 336.268331][T15055] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 336.268342][T15055] RSP: 002b:00007f7b426e6028 EFLAGS: 00000246 ORIG_RAX: 00000000000000f8 [ 336.268354][T15055] RAX: ffffffffffffffda RBX: 00007f7b41a25fa0 RCX: 00007f7b4179e1d9 [ 336.268362][T15055] RDX: 0000200000000200 RSI: 0000000000000000 RDI: 0000200000000000 [ 336.268369][T15055] RBP: 00007f7b41835888 R08: ffffffffffffffff R09: 0000000000000000 [ 336.268376][T15055] R10: 00000000000000e3 R11: 0000000000000246 R12: 0000000000000000 [ 336.268383][T15055] R13: 00007f7b41a26038 R14: 00007f7b41a25fa0 R15: 00007ffc96993b58 [ 336.268399][T15055] [ 336.608179][T15058] netlink: 16 bytes leftover after parsing attributes in process `syz.5.3897'. [ 336.775988][T15067] team0: Device xfrm0 is of different type [ 337.078451][T15074] FAULT_INJECTION: forcing a failure. [ 337.078451][T15074] name failslab, interval 1, probability 0, space 0, times 0 [ 337.078474][T15074] CPU: 0 UID: 0 PID: 15074 Comm: syz.4.3903 Tainted: G L syzkaller #0 PREEMPT(full) [ 337.078490][T15074] Tainted: [L]=SOFTLOCKUP [ 337.078495][T15074] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 337.078502][T15074] Call Trace: [ 337.078506][T15074] [ 337.078511][T15074] dump_stack_lvl+0x100/0x190 [ 337.078533][T15074] should_fail_ex.cold+0x5/0xa [ 337.078552][T15074] should_failslab+0xc2/0x120 [ 337.078569][T15074] __kmalloc_cache_noprof+0x91/0x6d0 [ 337.078580][T15074] ? cap_capable+0x107/0x430 [ 337.078592][T15074] ? __x64_sys_futex+0x358/0x4d0 [ 337.078609][T15074] ? fsnotify_alloc_group+0x8d/0x320 [ 337.078625][T15074] fsnotify_alloc_group+0x8d/0x320 [ 337.078638][T15074] __do_sys_fanotify_init+0x271/0xe30 [ 337.078658][T15074] do_syscall_64+0x123/0x790 [ 337.078673][T15074] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 337.078685][T15074] RIP: 0033:0x7f7b4179e1d9 [ 337.078695][T15074] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 337.078714][T15074] RSP: 002b:00007f7b426e6028 EFLAGS: 00000246 ORIG_RAX: 000000000000012c [ 337.078727][T15074] RAX: ffffffffffffffda RBX: 00007f7b41a25fa0 RCX: 00007f7b4179e1d9 [ 337.078735][T15074] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000200 [ 337.078742][T15074] RBP: 00007f7b41835888 R08: 0000000000000000 R09: 0000000000000000 [ 337.078749][T15074] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 337.078757][T15074] R13: 00007f7b41a26038 R14: 00007f7b41a25fa0 R15: 00007ffc96993b58 [ 337.078774][T15074] [ 337.401435][T15079] netlink: 60 bytes leftover after parsing attributes in process `syz.3.3904'. [ 337.418190][T15079] netlink: 60 bytes leftover after parsing attributes in process `syz.3.3904'. [ 337.432459][T15079] netlink: 500 bytes leftover after parsing attributes in process `syz.3.3904'. [ 337.592030][ T31] audit: type=1400 audit(1791499104.587:861): avc: denied { create } for pid=15082 comm="syz.3.3907" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=user_namespace permissive=1 [ 337.592063][ T31] audit: type=1400 audit(1791499104.587:862): avc: denied { sys_admin } for pid=15082 comm="syz.3.3907" capability=21 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=cap_userns permissive=1 [ 337.692637][T15088] FAULT_INJECTION: forcing a failure. [ 337.692637][T15088] name failslab, interval 1, probability 0, space 0, times 0 [ 337.692665][T15088] CPU: 0 UID: 0 PID: 15088 Comm: syz.5.3908 Tainted: G L syzkaller #0 PREEMPT(full) [ 337.692682][T15088] Tainted: [L]=SOFTLOCKUP [ 337.692686][T15088] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 337.692694][T15088] Call Trace: [ 337.692698][T15088] [ 337.692703][T15088] dump_stack_lvl+0x100/0x190 [ 337.692726][T15088] should_fail_ex.cold+0x5/0xa [ 337.692746][T15088] should_failslab+0xc2/0x120 [ 337.692763][T15088] __kmalloc_cache_noprof+0x91/0x6d0 [ 337.692775][T15088] ? sctp_auth_shkey_create+0x9e/0x210 [ 337.692793][T15088] sctp_auth_shkey_create+0x9e/0x210 [ 337.692809][T15088] sctp_endpoint_new+0x589/0xb20 [ 337.692825][T15088] ? __pfx_sctp_endpoint_new+0x10/0x10 [ 337.692839][T15088] ? lockdep_init_map_type+0x5c/0x250 [ 337.692855][T15088] ? lockdep_init_map_type+0x5c/0x250 [ 337.692868][T15088] ? lockdep_init_map_type+0x5c/0x250 [ 337.692885][T15088] sctp_init_sock+0xe2b/0x1300 [ 337.692898][T15088] ? __pfx_sctp_init_sock+0x10/0x10 [ 337.692912][T15088] inet_create+0x94c/0x1060 [ 337.692925][T15088] ? inet_create+0x94/0x1060 [ 337.692940][T15088] __sock_create+0x339/0x860 [ 337.692957][T15088] __sys_socket+0x14d/0x260 [ 337.692970][T15088] ? __pfx___sys_socket+0x10/0x10 [ 337.692988][T15088] __x64_sys_socket+0x72/0xb0 [ 337.693001][T15088] ? lockdep_hardirqs_on+0x7d/0x110 [ 337.693014][T15088] do_syscall_64+0x123/0x790 [ 337.693028][T15088] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 337.693040][T15088] RIP: 0033:0x7f97b0b9e1d9 [ 337.693050][T15088] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 337.693060][T15088] RSP: 002b:00007f97b1a93028 EFLAGS: 00000246 ORIG_RAX: 0000000000000029 [ 337.693072][T15088] RAX: ffffffffffffffda RBX: 00007f97b0e25fa0 RCX: 00007f97b0b9e1d9 [ 337.693079][T15088] RDX: 0000000000000084 RSI: 0000000000000001 RDI: 0000000000000002 [ 337.693086][T15088] RBP: 00007f97b0c35888 R08: 0000000000000000 R09: 0000000000000000 [ 337.693092][T15088] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 337.693099][T15088] R13: 00007f97b0e26038 R14: 00007f97b0e25fa0 R15: 00007ffebdbe75e8 [ 337.693115][T15088] [ 338.739526][T15106] FAULT_INJECTION: forcing a failure. [ 338.739526][T15106] name failslab, interval 1, probability 0, space 0, times 0 [ 338.739549][T15106] CPU: 0 UID: 0 PID: 15106 Comm: syz.4.3916 Tainted: G L syzkaller #0 PREEMPT(full) [ 338.739570][T15106] Tainted: [L]=SOFTLOCKUP [ 338.739574][T15106] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 338.739581][T15106] Call Trace: [ 338.739585][T15106] [ 338.739590][T15106] dump_stack_lvl+0x100/0x190 [ 338.739612][T15106] should_fail_ex.cold+0x5/0xa [ 338.739631][T15106] should_failslab+0xc2/0x120 [ 338.739648][T15106] __kmalloc_noprof+0xfc/0x840 [ 338.739662][T15106] ? udp_init_sock+0x24e/0x450 [ 338.739680][T15106] udp_init_sock+0x24e/0x450 [ 338.739694][T15106] ? __pfx_udp_init_sock+0x10/0x10 [ 338.739709][T15106] inet_create+0x94c/0x1060 [ 338.739722][T15106] ? inet_create+0x94/0x1060 [ 338.739738][T15106] __sock_create+0x339/0x860 [ 338.739755][T15106] __sys_socket+0x14d/0x260 [ 338.739768][T15106] ? __pfx___sys_socket+0x10/0x10 [ 338.739786][T15106] __x64_sys_socket+0x72/0xb0 [ 338.739799][T15106] ? lockdep_hardirqs_on+0x7d/0x110 [ 338.739813][T15106] do_syscall_64+0x123/0x790 [ 338.739827][T15106] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 338.739839][T15106] RIP: 0033:0x7f7b4179e1d9 [ 338.739849][T15106] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 338.739860][T15106] RSP: 002b:00007f7b426e6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000029 [ 338.739871][T15106] RAX: ffffffffffffffda RBX: 00007f7b41a25fa0 RCX: 00007f7b4179e1d9 [ 338.739878][T15106] RDX: 0000000000000000 RSI: 0000000000000002 RDI: 0000000000000002 [ 338.739885][T15106] RBP: 00007f7b41835888 R08: 0000000000000000 R09: 0000000000000000 [ 338.739892][T15106] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 338.739898][T15106] R13: 00007f7b41a26038 R14: 00007f7b41a25fa0 R15: 00007ffc96993b58 [ 338.739915][T15106] [ 339.140803][T15117] bridge0: port 3(erspan0) entered blocking state [ 339.140909][T15117] bridge0: port 3(erspan0) entered disabled state [ 339.141143][T15117] erspan0: entered allmulticast mode [ 339.181209][T15118] vimc link validate: Sensor A:src:640x480 (0x33424752, 8, 0, 0, 0) Raw Capture 0:snk:640x480 (0x33424752, 8, 0, 0, 0) [ 339.316620][T15117] erspan0: left allmulticast mode [ 339.339964][ T3621] IPVS: starting estimator thread 0... [ 339.341414][T15124] IPVS: rr: UDP 127.0.0.1:20000 - no destination available [ 339.429237][T15125] IPVS: using max 64 ests per chain, 153600 per kthread [ 339.723413][T15138] netlink: 36 bytes leftover after parsing attributes in process `syz.1.3928'. [ 339.889241][T15142] 9pnet: p9_errstr2errno: server reported unknown error [ 340.297549][T15160] Bluetooth: hci0: invalid length 0, exp 2 for type 0 [ 340.306301][ T31] audit: type=1400 audit(1791499107.297:863): avc: denied { map } for pid=15164 comm="syz.4.3939" path="/dev/comedi4" dev="devtmpfs" ino=1277 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 340.453860][T15171] device-mapper: ioctl: name not supplied when creating device [ 340.455278][T15171] device-mapper: ioctl: Invalid new mapped device name or uuid string supplied. [ 340.944471][T15195] FAULT_INJECTION: forcing a failure. [ 340.944471][T15195] name failslab, interval 1, probability 0, space 0, times 0 [ 340.944494][T15195] CPU: 0 UID: 0 PID: 15195 Comm: syz.4.3951 Tainted: G L syzkaller #0 PREEMPT(full) [ 340.944510][T15195] Tainted: [L]=SOFTLOCKUP [ 340.944515][T15195] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 340.944521][T15195] Call Trace: [ 340.944526][T15195] [ 340.944531][T15195] dump_stack_lvl+0x100/0x190 [ 340.944553][T15195] should_fail_ex.cold+0x5/0xa [ 340.944571][T15195] should_failslab+0xc2/0x120 [ 340.944588][T15195] __kmalloc_cache_noprof+0x91/0x6d0 [ 340.944601][T15195] ? refill_pi_state_cache+0x91/0x260 [ 340.944616][T15195] refill_pi_state_cache+0x91/0x260 [ 340.944628][T15195] futex_lock_pi+0x17d/0x7e0 [ 340.944642][T15195] ? __pfx_futex_lock_pi+0x10/0x10 [ 340.944655][T15195] ? __pfx___futex_wait+0x10/0x10 [ 340.944666][T15195] ? __pfx_try_to_wake_up+0x10/0x10 [ 340.944694][T15195] ? __pfx_futex_wake_mark+0x10/0x10 [ 340.944711][T15195] ? rcu_read_lock_any_held+0x6a/0x90 [ 340.944728][T15195] ? find_held_lock+0x2b/0x80 [ 340.944745][T15195] ? ksys_write+0x190/0x250 [ 340.944760][T15195] do_futex+0x371/0x440 [ 340.944778][T15195] ? __pfx_do_futex+0x10/0x10 [ 340.944795][T15195] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 340.944812][T15195] __x64_sys_futex+0x34f/0x4d0 [ 340.944830][T15195] ? __pfx___x64_sys_futex+0x10/0x10 [ 340.944853][T15195] do_syscall_64+0x123/0x790 [ 340.944869][T15195] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 340.944881][T15195] RIP: 0033:0x7f7b4179e1d9 [ 340.944891][T15195] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 340.944902][T15195] RSP: 002b:00007f7b426e6028 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 340.944913][T15195] RAX: ffffffffffffffda RBX: 00007f7b41a25fa0 RCX: 00007f7b4179e1d9 [ 340.944920][T15195] RDX: 0000000000000080 RSI: 0000000000000006 RDI: 0000000000000000 [ 340.944927][T15195] RBP: 00007f7b41835888 R08: 0000000000000000 R09: 00000000ffffffec [ 340.944934][T15195] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 340.944940][T15195] R13: 00007f7b41a26038 R14: 00007f7b41a25fa0 R15: 00007ffc96993b58 [ 340.944957][T15195] [ 341.059262][ T9] usb 4-1: new high-speed USB device number 12 using dummy_hcd [ 341.287277][ T9] usb 4-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 341.288084][ T9] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 341.290107][ T9] usb 4-1: config 0 descriptor?? [ 341.503028][ T9] udl 4-1:0.0: [drm] Unrecognized vendor firmware descriptor [ 341.621665][T15203] loop5: detected capacity change from 0 to 7 [ 341.642672][T15203] Dev loop5: unable to read RDB block 7 [ 341.642697][T15203] loop5: unable to read partition table [ 341.642812][T15203] loop5: partition table beyond EOD, truncated [ 341.642831][T15203] loop_reread_partitions: partition scan of loop5 (被x ) failed (rc=-5) [ 341.741036][ T9] [drm] Initialized udl 0.0.1 for 4-1:0.0 on minor 1 [ 341.741053][ T9] [drm] Initialized udl on minor 1 [ 341.977015][T15207] tunl0: entered promiscuous mode [ 341.986518][T15207] netlink: 'syz.4.3957': attribute type 4 has an invalid length. [ 341.986531][T15207] netlink: 9 bytes leftover after parsing attributes in process `syz.4.3957'. [ 342.280417][ T31] audit: type=1400 audit(1791499109.277:864): avc: denied { write } for pid=15213 comm="syz.4.3960" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 342.617224][ T5704] usb 5-1: new high-speed USB device number 11 using dummy_hcd [ 342.766815][ T5704] usb 5-1: Using ep0 maxpacket: 16 [ 342.767318][ T5704] usb 5-1: New USB device found, idVendor=20f4, idProduct=e05a, bcdDevice=6c.6d [ 342.768077][ T5704] usb 5-1: config 1 has an invalid interface number: 105 but max is 0 [ 342.768091][ T5704] usb 5-1: config 1 has no interface number 0 [ 342.768112][ T5704] usb 5-1: config 1 interface 105 altsetting 2 bulk endpoint 0x4 has invalid maxpacket 16 [ 342.768126][ T5704] usb 5-1: config 1 interface 105 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 64 [ 342.768153][ T5704] usb 5-1: config 1 interface 105 has no altsetting 0 [ 342.769703][ T5704] usb 5-1: New USB device strings: Mfr=1, Product=23, SerialNumber=3 [ 342.769717][ T5704] usb 5-1: Product: syz [ 342.769725][ T5704] usb 5-1: Manufacturer: syz [ 342.769734][ T5704] usb 5-1: SerialNumber: syz [ 342.774034][T15216] raw-gadget.2 gadget.4: fail, usb_ep_enable returned -22 [ 342.774114][T15216] raw-gadget.2 gadget.4: fail, usb_ep_enable returned -22 [ 343.184445][T15216] raw-gadget.2 gadget.4: fail, usb_ep_enable returned -22 [ 343.184507][T15216] raw-gadget.2 gadget.4: fail, usb_ep_enable returned -22 [ 343.209356][T15218] smbdirect: ib_dev[syz2]: added: RNIC max_fast_reg_page_list_len=256 device_cap_flags=0x200000 kernel_cap_flags=0x10 page_size_cap=0x1000 [ 343.209378][T15218] smbdirect: ib_dev[syz2]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=1 max_cqe=3276800 max_qp_wr=32768 max_send_sge=6 max_recv_sge=6 [ 343.209400][T15218] smbdirect: ib_dev[syz2]PORT[1]: iwarp=1 ib=0 roce=0 v1=0 v2=0 core_cap_flags=0x400008 [ 343.210720][T15218] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 343.269091][T15218] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 343.368544][ T31] audit: type=1326 audit(1791499110.367:865): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15221 comm="syz.0.3963" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8bc599e1d9 code=0x7ffc0000 [ 343.369408][ T31] audit: type=1326 audit(1791499110.367:866): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15221 comm="syz.0.3963" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8bc599e1d9 code=0x7ffc0000 [ 343.436434][ T31] audit: type=1326 audit(1791499110.427:867): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15221 comm="syz.0.3963" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=323 compat=0 ip=0x7f8bc599e1d9 code=0x7ffc0000 [ 343.464260][ T31] audit: type=1326 audit(1791499110.427:868): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15221 comm="syz.0.3963" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8bc599e1d9 code=0x7ffc0000 [ 343.464307][ T31] audit: type=1326 audit(1791499110.467:869): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15221 comm="syz.0.3963" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8bc599e1d9 code=0x7ffc0000 [ 343.529123][ T31] audit: type=1326 audit(1791499110.527:870): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15221 comm="syz.0.3963" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f8bc599e1d9 code=0x7ffc0000 [ 343.529178][ T31] audit: type=1326 audit(1791499110.527:871): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15221 comm="syz.0.3963" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8bc599e1d9 code=0x7ffc0000 [ 343.529203][ T31] audit: type=1326 audit(1791499110.527:872): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15221 comm="syz.0.3963" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8bc599e1d9 code=0x7ffc0000 [ 343.529958][ T31] audit: type=1326 audit(1791499110.527:873): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15221 comm="syz.0.3963" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=10 compat=0 ip=0x7f8bc599e1d9 code=0x7ffc0000 [ 343.530240][ T31] audit: type=1326 audit(1791499110.527:874): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15221 comm="syz.0.3963" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8bc599e1d9 code=0x7ffc0000 [ 343.697004][ T5704] aqc111 5-1:1.105 (unnamed net_device) (uninitialized): Failed to read(0x1) reg index 0x0001: -71 [ 343.698143][ T5704] aqc111 5-1:1.105 (unnamed net_device) (uninitialized): Failed to read(0x1) reg index 0x0001: -71 [ 343.700245][ T5704] aqc111 5-1:1.105 (unnamed net_device) (uninitialized): Failed to read(0x1) reg index 0x0001: -71 [ 343.878675][ T5704] aqc111 5-1:1.105 eth6: register 'aqc111' at usb-dummy_hcd.4-1, USB-C 3.1 to 5GBASE-T Ethernet Adapter, 36:8f:0e:07:1c:8b [ 343.906911][ T5704] usb 5-1: USB disconnect, device number 11 [ 343.924618][ T3654] smbdirect: ib_dev[syz2] removed [ 343.933388][ T5704] aqc111 5-1:1.105 eth6: unregister 'aqc111' usb-dummy_hcd.4-1, USB-C 3.1 to 5GBASE-T Ethernet Adapter [ 344.007434][T15218] siw: device registration error -19 [ 344.068719][ T5704] aqc111 5-1:1.105 eth6 (unregistered): Failed to write(0x1) reg index 0x0002: -19 [ 344.068800][ T5704] aqc111 5-1:1.105 eth6 (unregistered): Failed to write(0x1) reg index 0x0002: -19 [ 344.068859][ T5704] aqc111 5-1:1.105 eth6 (unregistered): Failed to write(0x61) reg index 0x0000: -19 [ 344.517280][ T5704] usb 6-1: new high-speed USB device number 5 using dummy_hcd [ 344.670254][ T5704] usb 6-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 344.671061][ T5704] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 344.671076][ T5704] usb 6-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 344.671096][ T5704] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 344.675690][ T5704] usb 6-1: config 0 descriptor?? [ 344.873314][T15249] FAULT_INJECTION: forcing a failure. [ 344.873314][T15249] name failslab, interval 1, probability 0, space 0, times 0 [ 344.873337][T15249] CPU: 0 UID: 0 PID: 15249 Comm: syz.0.3974 Tainted: G L syzkaller #0 PREEMPT(full) [ 344.873354][T15249] Tainted: [L]=SOFTLOCKUP [ 344.873358][T15249] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 344.873366][T15249] Call Trace: [ 344.873371][T15249] [ 344.873377][T15249] dump_stack_lvl+0x100/0x190 [ 344.873399][T15249] should_fail_ex.cold+0x5/0xa [ 344.873418][T15249] should_failslab+0xc2/0x120 [ 344.873435][T15249] kmem_cache_alloc_noprof+0x92/0x6a0 [ 344.873450][T15249] ? security_file_alloc+0x34/0x2c0 [ 344.873470][T15249] security_file_alloc+0x34/0x2c0 [ 344.873486][T15249] init_file+0x95/0x480 [ 344.873502][T15249] alloc_empty_file+0x79/0x1c0 [ 344.873520][T15249] alloc_file_pseudo+0x183/0x290 [ 344.873538][T15249] ? __pfx_alloc_file_pseudo+0x10/0x10 [ 344.873555][T15249] ? alloc_fd+0x471/0x7a0 [ 344.873575][T15249] sock_alloc_file+0x50/0x210 [ 344.873593][T15249] __sys_socket+0x1c0/0x260 [ 344.873606][T15249] ? __pfx___sys_socket+0x10/0x10 [ 344.873624][T15249] __x64_sys_socket+0x72/0xb0 [ 344.873637][T15249] ? lockdep_hardirqs_on+0x7d/0x110 [ 344.873650][T15249] do_syscall_64+0x123/0x790 [ 344.873664][T15249] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 344.873676][T15249] RIP: 0033:0x7f8bc599e1d9 [ 344.873686][T15249] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 344.873696][T15249] RSP: 002b:00007f8bc68affc8 EFLAGS: 00000246 ORIG_RAX: 0000000000000029 [ 344.873708][T15249] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 00007f8bc599e1d9 [ 344.873715][T15249] RDX: 0000000000000002 RSI: 0000000000000005 RDI: 000000000000001f [ 344.873721][T15249] RBP: 00007f8bc5a35888 R08: 0000000000000000 R09: 0000000000000000 [ 344.873728][T15249] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 344.873734][T15249] R13: 00007f8bc5c26038 R14: 00007f8bc5c25fa0 R15: 00007ffe9a667d98 [ 344.873752][T15249] [ 345.755161][T15272] netlink: Unknown nat attribute (0) [ 345.755180][T15272] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 345.855110][ T10] usb 6-1: USB disconnect, device number 5 [ 345.980847][T15280] netlink: 766 bytes leftover after parsing attributes in process `syz.4.3987'. [ 346.801098][ T9] udl 4-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffff92 [ 346.801367][ T9] udl 4-1:0.0: [drm] Cannot find any crtc or sizes [ 346.840590][ T5704] udl 4-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 346.845745][ T9] usb 4-1: USB disconnect, device number 12 [ 346.895524][ T5704] udl 4-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 346.895699][ T5704] udl 4-1:0.0: [drm] Cannot find any crtc or sizes [ 346.942271][T15316] binder: 15314:15316 ioctl c0306201 200000000280 returned -14 [ 347.561075][T15335] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 347.576038][T15336] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4014'. [ 347.943926][T15341] tipc: Started in network mode [ 347.943945][T15341] tipc: Node identity ac14142f, cluster identity 4711 [ 347.944158][T15341] tipc: New replicast peer: 127.0.0.1 [ 347.944379][T15341] tipc: Enabled bearer , priority 10 [ 347.989212][T15351] ip6erspan0: entered allmulticast mode [ 347.989348][T15345] netlink: 64 bytes leftover after parsing attributes in process `syz.3.4015'. [ 348.488005][T15378] netlink: 16 bytes leftover after parsing attributes in process `syz.1.4032'. [ 348.515457][T15378] netlink: 16 bytes leftover after parsing attributes in process `syz.1.4032'. [ 349.056760][ T10] tipc: Node number set to 2886997039 [ 349.201796][T15412] lo speed is unknown, defaulting to 1000 [ 349.523033][T15425] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4051'. [ 349.523052][T15425] block nbd2: Unsupported socket: should be TCP or UNIX. [ 350.605928][T15477] netlink: 52 bytes leftover after parsing attributes in process `syz.4.4076'. [ 350.605947][T15477] netlink: 52 bytes leftover after parsing attributes in process `syz.4.4076'. [ 350.696880][ T190] usb 4-1: new high-speed USB device number 13 using dummy_hcd [ 350.850413][ T190] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 350.851290][ T190] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 350.851307][ T190] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 350.851322][ T190] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 350.851334][ T190] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 350.851356][ T190] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 350.854590][ T190] usb 4-1: config 0 descriptor?? [ 351.288411][ T190] plantronics 0003:047F:FFFF.000E: unknown main item tag 0x0 [ 351.288434][ T190] plantronics 0003:047F:FFFF.000E: unknown main item tag 0x0 [ 351.288450][ T190] plantronics 0003:047F:FFFF.000E: unknown main item tag 0x0 [ 351.288465][ T190] plantronics 0003:047F:FFFF.000E: unknown main item tag 0x0 [ 351.288479][ T190] plantronics 0003:047F:FFFF.000E: unknown main item tag 0x0 [ 351.288500][ T190] plantronics 0003:047F:FFFF.000E: unknown main item tag 0x0 [ 351.288516][ T190] plantronics 0003:047F:FFFF.000E: unknown main item tag 0x0 [ 351.288531][ T190] plantronics 0003:047F:FFFF.000E: unknown main item tag 0x0 [ 351.288545][ T190] plantronics 0003:047F:FFFF.000E: unknown main item tag 0x0 [ 351.288561][ T190] plantronics 0003:047F:FFFF.000E: unknown main item tag 0x0 [ 351.295589][ T190] plantronics 0003:047F:FFFF.000E: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.3-1/input0 [ 351.603213][ T190] usb 4-1: USB disconnect, device number 13 [ 352.003041][ T31] kauditd_printk_skb: 3 callbacks suppressed [ 352.003054][ T31] audit: type=1400 audit(1791499118.997:878): avc: denied { listen } for pid=15521 comm="syz.1.4095" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 352.177438][ T5704] usb 6-1: new high-speed USB device number 6 using dummy_hcd [ 352.216901][ T9] usb 5-1: new high-speed USB device number 12 using dummy_hcd [ 352.326927][ T5704] usb 6-1: Using ep0 maxpacket: 32 [ 352.327586][ T5704] usb 6-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 352.328339][ T5704] usb 6-1: config 0 has an invalid interface number: 67 but max is 0 [ 352.328354][ T5704] usb 6-1: config 0 has no interface number 0 [ 352.333098][ T5704] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 352.333112][ T5704] usb 6-1: Product: syz [ 352.333121][ T5704] usb 6-1: Manufacturer: syz [ 352.333129][ T5704] usb 6-1: SerialNumber: syz [ 352.335759][ T5704] usb 6-1: config 0 descriptor?? [ 352.368699][ T9] usb 5-1: Using ep0 maxpacket: 32 [ 352.407697][ T9] usb 5-1: New USB device found, idVendor=05ef, idProduct=020a, bcdDevice=91.36 [ 352.408614][ T9] usb 5-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xA6, changing to 0x86 [ 352.408631][ T9] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x86 has an invalid bInterval 0, changing to 7 [ 352.408645][ T9] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x86 has invalid wMaxPacketSize 0 [ 352.408671][ T9] usb 5-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 352.408685][ T9] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 352.408698][ T9] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 352.412581][ T9] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 352.412595][ T9] usb 5-1: Product: syz [ 352.412603][ T9] usb 5-1: Manufacturer: syz [ 352.412611][ T9] usb 5-1: SerialNumber: syz [ 352.451865][ T9] usb 5-1: config 0 descriptor?? [ 352.613146][ T31] audit: type=1400 audit(1791499119.607:879): avc: denied { ioctl } for pid=15541 comm="syz.1.4103" path="/dev/usbmon7" dev="devtmpfs" ino=736 ioctlcmd=0x9207 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 353.038435][ T9] usb 2-1: new high-speed USB device number 19 using dummy_hcd [ 353.164368][ T5704] smsc95xx 6-1:0.67 (unnamed net_device) (uninitialized): EEPROM read operation timeout [ 353.179911][T15562] netlink: 40 bytes leftover after parsing attributes in process `syz.3.4110'. [ 353.198214][ T9] usb 2-1: Using ep0 maxpacket: 8 [ 353.207344][ T9] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 353.212619][ T9] usb 2-1: config index 0 descriptor too short (expected 301, got 45) [ 353.212661][ T9] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 353.212675][ T9] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 353.212688][ T9] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 353.212702][ T9] usb 2-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 353.212724][ T9] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 353.375449][ T5704] smsc95xx 6-1:0.67 (unnamed net_device) (uninitialized): Failed to write reg index 0x00000014: -71 [ 353.375869][ T5704] smsc95xx 6-1:0.67: probe with driver smsc95xx failed with error -71 [ 353.404290][ T5704] usb 6-1: USB disconnect, device number 6 [ 353.444424][ T9] usb 2-1: usb_control_msg returned -32 [ 353.444451][ T9] usbtmc 2-1:16.0: can't read capabilities [ 353.462342][T15566] ima: signed policy file (specified as an absolute pathname) required [ 353.462529][ T31] audit: type=1802 audit(1791499120.457:880): pid=15566 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=policy_update cause=signed policy required comm="syz.0.4112" res=0 errno=0 [ 353.463727][T15566] ima: policy update failed [ 353.463838][ T31] audit: type=1802 audit(1791499120.457:881): pid=15566 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=policy_update cause=failed comm="syz.0.4112" res=0 errno=0 [ 353.633824][T15568] tun0: tun_chr_ioctl cmd 1074025675 [ 353.633839][T15568] tun0: persist enabled [ 353.634997][T15568] tun0: tun_chr_ioctl cmd 1074025675 [ 353.635007][T15568] tun0: persist enabled [ 353.746528][T15574] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 [ 353.869362][T15579] usbtmc 2-1:16.0: INITIATE_ABORT_BULK_OUT returned 4 [ 354.222174][ T10] usb 2-1: USB disconnect, device number 19 [ 355.043071][T15612] netlink: 12 bytes leftover after parsing attributes in process `syz.5.4130'. [ 355.074113][ T190] usb 5-1: USB disconnect, device number 12 [ 355.411834][T15629] jffs2: notice: (15629) jffs2_build_xattr_subsystem: complete building xattr subsystem, 1 of xdatum (0 unchecked, 0 orphan) and 2 of xref (0 dead, 0 orphan) found. [ 355.501164][ T4922] block nbd2: Receive control failed (result -32) [ 355.504009][ T5608] block nbd2: Receive control failed (result -32) [ 355.777958][ T31] audit: type=1400 audit(1791499122.767:882): avc: denied { write } for pid=15611 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 356.102562][ T31] audit: type=1400 audit(1791499123.097:883): avc: denied { write } for pid=15649 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 356.314156][ T5267] 8021q: adding VLAN 0 to HW filter on device eth6 [ 356.502035][T15667] x_tables: ip_tables: DNAT target: used from hooks POSTROUTING, but only usable from PREROUTING/OUTPUT [ 356.716389][ T31] audit: type=1400 audit(1791499123.707:884): avc: denied { setopt } for pid=15671 comm="syz.4.4147" lport=54720 faddr=::ffff:172.20.255.187 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=sctp_socket permissive=1 [ 356.921979][T15686] IPVS: sync thread started: state = MASTER, mcast_ifn = veth0, syncid = 1, id = 0 [ 356.962348][T15685] gtp0: entered allmulticast mode [ 358.128759][ T190] usb 2-1: new high-speed USB device number 20 using dummy_hcd [ 358.278281][ T190] usb 2-1: New USB device found, idVendor=0a46, idProduct=9621, bcdDevice=4f.32 [ 358.280581][ T190] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 16 [ 358.280598][ T190] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 255 [ 358.282092][ T190] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 358.282106][ T190] usb 2-1: Product: syz [ 358.282114][ T190] usb 2-1: Manufacturer: syz [ 358.282122][ T190] usb 2-1: SerialNumber: syz [ 358.283640][ T190] usb 2-1: config 0 descriptor?? [ 358.326170][T15712] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 358.326228][T15712] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 358.572958][T15712] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 358.573017][T15712] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 358.599423][ T31] audit: type=1400 audit(1791499125.597:885): avc: denied { mount } for pid=15728 comm="syz.0.4171" name="/" dev="autofs" ino=55565 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_t tclass=filesystem permissive=1 [ 358.653551][ T31] audit: type=1400 audit(1791499125.647:886): avc: denied { unmount } for pid=13414 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_t tclass=filesystem permissive=1 [ 358.884273][T15738] syzkaller1: entered promiscuous mode [ 358.884288][T15738] syzkaller1: entered allmulticast mode [ 359.191026][ T190] dm9601 2-1:0.0 (unnamed net_device) (uninitialized): Error reading chip ID [ 359.216350][ T190] usb 2-1: USB disconnect, device number 20 [ 359.304737][ T5704] lo speed is unknown, defaulting to 1000 [ 365.116693][ C0] sched: DL replenish lagged too much [ 374.648674][ T1306] ieee802154 phy1 wpan1: encryption failed: -22 [ 434.726777][ T1306] ieee802154 phy1 wpan1: encryption failed: -22 [ 501.296626][ C0] rcu: INFO: rcu_preempt detected stalls on CPUs/tasks: [ 501.303582][ C0] rcu: Tasks blocked on level-0 rcu_node (CPUs 0-1): P12/1:b..l [ 501.311281][ C0] rcu: (detected by 0, t=10502 jiffies, g=125937, q=1692 ncpus=1) [ 501.319136][ C0] task:kworker/u8:0 state:R running task stack:23736 pid:12 tgid:12 ppid:2 task_flags:0x24248060 flags:0x00080000 [ 501.332765][ C0] Workqueue: writeback wb_workfn (flush-8:0) [ 501.338733][ C0] Call Trace: [ 501.341982][ C0] [ 501.344892][ C0] __schedule+0x1259/0x6920 [ 501.349366][ C0] ? __pfx_stack_trace_save+0x10/0x10 [ 501.354728][ C0] ? __lock_acquire+0x5c0/0x1f40 [ 501.359641][ C0] ? __pfx___schedule+0x10/0x10 [ 501.364459][ C0] ? mark_held_locks+0x40/0x70 [ 501.369195][ C0] preempt_schedule_irq+0x4e/0x90 [ 501.374189][ C0] irqentry_exit+0x205/0xa10 [ 501.378750][ C0] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 501.384706][ C0] RIP: 0010:stack_access_ok+0xd7/0x1d0 [ 501.390137][ C0] Code: 00 fc ff df 48 89 fa 48 c1 ea 03 80 3c 02 00 0f 85 dc 00 00 00 48 8b 73 28 48 89 da 48 89 ef e8 3f 70 f3 ff 85 c0 74 11 31 c0 <48> 83 c4 08 5b 5d 41 5c 41 5d e9 0a 77 1c 0a 48 b8 00 00 00 00 00 [ 501.409710][ C0] RSP: 0018:ffffc90000116c50 EFLAGS: 00000202 [ 501.415742][ C0] RAX: ffffc90000118001 RBX: ffffc90000116cf0 RCX: ffffffff91f793dc [ 501.423680][ C0] RDX: ffffc90000117001 RSI: ffffc90000117018 RDI: ffffc90000116d00 [ 501.431634][ C0] RBP: ffffc90000117018 R08: ffffffff91f793e0 R09: 0000000000000007 [ 501.439573][ C0] R10: 0000000000000200 R11: 0000000000017fd8 R12: 0000000000000008 [ 501.447511][ C0] R13: ffffc90000110000 R14: ffffc90000117020 R15: ffffc90000116d24 [ 501.455467][ C0] unwind_next_frame+0xcf5/0x2090 [ 501.460468][ C0] ? qlist_free_all+0x47/0xf0 [ 501.465119][ C0] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 501.471242][ C0] arch_stack_walk+0x94/0xf0 [ 501.475806][ C0] ? qlist_free_all+0x47/0xf0 [ 501.480455][ C0] stack_trace_save+0x8e/0xc0 [ 501.485103][ C0] ? __pfx_stack_trace_save+0x10/0x10 [ 501.490443][ C0] ? __lock_acquire+0x5c0/0x1f40 [ 501.495353][ C0] ? __lock_acquire+0x5c0/0x1f40 [ 501.500259][ C0] save_stack+0x162/0x1e0 [ 501.504560][ C0] ? __pfx_save_stack+0x10/0x10 [ 501.509381][ C0] ? __free_frozen_pages+0x79f/0x10f0 [ 501.514728][ C0] ? qlist_free_all+0x47/0xf0 [ 501.519382][ C0] ? page_ext_put+0x3e/0xd0 [ 501.523871][ C0] __reset_page_owner+0x84/0x190 [ 501.528786][ C0] __free_frozen_pages+0x79f/0x10f0 [ 501.533959][ C0] ? __pfx___free_slab+0x10/0x10 [ 501.538865][ C0] qlist_free_all+0x47/0xf0 [ 501.543341][ C0] kasan_quarantine_reduce+0x1a0/0x1f0 [ 501.548772][ C0] __kasan_slab_alloc+0x69/0x90 [ 501.553595][ C0] kmem_cache_alloc_noprof+0x269/0x6a0 [ 501.559037][ C0] ? jbd2__journal_start+0x194/0x6b0 [ 501.564297][ C0] jbd2__journal_start+0x194/0x6b0 [ 501.569381][ C0] __ext4_journal_start_sb+0x314/0x610 [ 501.574812][ C0] ? ext4_do_writepages+0xbe4/0x3e80 [ 501.580062][ C0] ? ext4_meta_trans_blocks+0x24b/0x2f0 [ 501.585583][ C0] ext4_do_writepages+0xbe4/0x3e80 [ 501.590666][ C0] ? __lock_acquire+0x5c0/0x1f40 [ 501.595575][ C0] ? kasan_quarantine_put+0x104/0x240 [ 501.600918][ C0] ? __pfx_ext4_do_writepages+0x10/0x10 [ 501.606445][ C0] ? ext4_writepages+0x34a/0x750 [ 501.611348][ C0] ext4_writepages+0x34a/0x750 [ 501.616078][ C0] ? __pfx_ext4_writepages+0x10/0x10 [ 501.621329][ C0] ? __local_bh_enable_ip+0xa5/0x120 [ 501.626588][ C0] ? __lock_acquire+0x5c0/0x1f40 [ 501.631495][ C0] ? __pfx_ext4_writepages+0x10/0x10 [ 501.636751][ C0] do_writepages+0x278/0x600 [ 501.641314][ C0] ? __pfx_do_writepages+0x10/0x10 [ 501.646403][ C0] ? reacquire_held_locks+0xdd/0x1f0 [ 501.651657][ C0] ? writeback_sb_inodes+0x3e1/0x1c50 [ 501.657011][ C0] __writeback_single_inode+0x164/0x1560 [ 501.662622][ C0] ? wbc_attach_and_unlock_inode+0xf7/0x120 [ 501.668488][ C0] ? __pfx___writeback_single_inode+0x10/0x10 [ 501.674536][ C0] ? do_raw_spin_unlock+0x145/0x1e0 [ 501.679709][ C0] writeback_sb_inodes+0x766/0x1c50 [ 501.684886][ C0] ? __pfx_writeback_sb_inodes+0x10/0x10 [ 501.690492][ C0] ? __lock_acquire+0x5c0/0x1f40 [ 501.695418][ C0] ? _raw_spin_unlock+0x28/0x50 [ 501.700235][ C0] ? move_expired_inodes+0x5ea/0x8f0 [ 501.705494][ C0] __writeback_inodes_wb+0xf8/0x2d0 [ 501.710681][ C0] ? __pfx___writeback_inodes_wb+0x10/0x10 [ 501.716456][ C0] ? queue_io+0x287/0x530 [ 501.720755][ C0] wb_writeback+0x6f6/0xb50 [ 501.725234][ C0] ? __pfx_wb_writeback+0x10/0x10 [ 501.730232][ C0] ? get_nr_inodes+0x100/0x150 [ 501.734980][ C0] ? _raw_spin_unlock_irq+0x23/0x50 [ 501.740151][ C0] wb_workfn+0x93f/0xc80 [ 501.744374][ C0] ? __pfx_try_to_wake_up+0x10/0x10 [ 501.749543][ C0] ? __pfx_wb_workfn+0x10/0x10 [ 501.754284][ C0] ? process_one_work+0x906/0x1b10 [ 501.759369][ C0] ? process_one_work+0x906/0x1b10 [ 501.764455][ C0] process_one_work+0xac7/0x1b10 [ 501.769372][ C0] ? __pfx_process_one_work+0x10/0x10 [ 501.774720][ C0] ? lock_acquire+0x1d1/0x380 [ 501.779372][ C0] ? __pfx_wb_workfn+0x10/0x10 [ 501.784108][ C0] worker_thread+0x5ef/0xe50 [ 501.788677][ C0] ? kthread+0x13a/0x450 [ 501.792891][ C0] ? __pfx_worker_thread+0x10/0x10 [ 501.797968][ C0] kthread+0x373/0x450 [ 501.802014][ C0] ? __pfx_kthread+0x10/0x10 [ 501.806576][ C0] ret_from_fork+0x730/0xd60 [ 501.811147][ C0] ? __pfx_ret_from_fork+0x10/0x10 [ 501.816228][ C0] ? __switch_to+0x800/0x10f0 [ 501.820879][ C0] ? __pfx_kthread+0x10/0x10 [ 501.825440][ C0] ret_from_fork_asm+0x1a/0x30 [ 501.830181][ C0]