last executing test programs: 7.464968062s ago: executing program 4 (id=11): r0 = syz_usb_connect(0x2, 0x40, &(0x7f0000000000)=ANY=[@ANYBLOB="12010002ff0000407205feca00010000000109022e0001010080fa0904000004ff00000007058102400000070501024000000705820240000007050202400000"], &(0x7f0000000800)={0x0, 0x0, 0x0, 0x0}) syz_usb_ep_write(r0, 0x81, 0x40, &(0x7f0000000100)="900100"/64) syz_usb_ep_write(r0, 0x81, 0x40, &(0x7f0000000140)="910100"/64) syz_usb_ep_write(r0, 0x81, 0x40, &(0x7f0000000180)="840100"/64) syz_usb_ep_write(r0, 0x81, 0x40, &(0x7f00000001c0)="880100"/64) nanosleep(&(0x7f0000000300)={0x2}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000400)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000400)='./sys\x00', &(0x7f0000000500)='sysfs\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./sys/class/atm/cxacru0/device/downstream_rate\x00', 0x0, 0x0) read(r1, &(0x7f0000000700)=""/256, 0x100) 5.998559519s ago: executing program 1 (id=27): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000000)) r2 = syz_kvm_setup_syzos_vm$x86(r1, &(0x7f0000c00000/0x400000)=nil) r3 = syz_kvm_add_vcpu$x86(r2, &(0x7f0000000080)={0x0, &(0x7f00000000c0)=[@code={0xa, 0x1b, {"30c0e640e641e642e643"}}], 0x1b}) r4 = ioctl$KVM_GET_VCPU_MMAP_SIZE(r0, 0xae04) mmap$KVM_VCPU(&(0x7f0000009000/0x1000)=nil, r4, 0x3, 0x11, r3, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) 5.861976332s ago: executing program 1 (id=28): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./proc\x00', &(0x7f0000000040)='proc\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./proc/sys/vm/nr_hugepages\x00', 0x1, 0x0) write(r0, &(0x7f00000000c0)='1000\x00', 0x4) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x3, 0x32, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x17) madvise(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x19) 5.831613372s ago: executing program 1 (id=29): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(&(0x7f0000000040)=@filename='none\x00', &(0x7f0000000080)='./sys\x00', &(0x7f00000000c0)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./sys/power/state\x00', 0x2, 0x0) write(r0, &(0x7f0000000140)='freeze\x00', 0x7) 5.764949674s ago: executing program 1 (id=30): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(&(0x7f0000000040)=@filename='sysfs\x00', &(0x7f0000000000)='./sys\x00', &(0x7f0000000080)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./sys/power/state\x00', 0x2, 0x0) write(r0, &(0x7f0000000100)='mem', 0x5) 5.764804194s ago: executing program 1 (id=31): r0 = syz_usb_connect(0x3, 0x39, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000200000040402000240000000000010902270001010080fa0904000003ffffff00070501020002000705810200020007058402000200"], 0x0) syz_usb_ep_read(r0, 0x1, 0x40, &(0x7f0000000200)=""/64) syz_usb_ep_write(r0, 0x81, 0x1, &(0x7f0000000100)="01") syz_usb_ep_read(r0, 0x1, 0x40, &(0x7f0000000200)=""/64) syz_usb_ep_read(r0, 0x1, 0x40, &(0x7f0000000200)=""/64) syz_usb_ep_read(r0, 0x1, 0x40, &(0x7f0000000200)=""/64) syz_usb_ep_write(r0, 0x81, 0x1, &(0x7f0000000100)='\b') nanosleep(&(0x7f0000000300)={0x5}, 0x0) 4.465368107s ago: executing program 4 (id=33): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000040)='sysfs\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000080)='./sys/bus/platform/devices/serial8250\x00', 0x0, 0x0) 4.409022068s ago: executing program 4 (id=34): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./proc\x00', &(0x7f0000000000)='proc\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='./proc/sys/net/netfilter\x00', 0x0, 0x0) 4.408872939s ago: executing program 4 (id=35): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000040)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./sys/bus/pci/devices/0000:00:03.0/driver_override\x00', 0x2, 0x0) write(r0, &(0x7f0000000100)='snd_hda_intel\n\x00', 0xe) r1 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./sys/bus/pci/drivers/snd_hda_intel/bind\x00', 0x2, 0x0) write(r1, &(0x7f0000000180)='0000:00:03.0\n\x00', 0xd) r2 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./sys/bus/hdaudio/devices/hdaudioC0D0/hints\x00', 0x2, 0x0) write(r2, &(0x7f0000000240)='mykey=myval\n\x00', 0xc) 4.408781019s ago: executing program 4 (id=36): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010002000000406a053b0300000000000109022200010100803209040000010300000009211101000122170007058103400001"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f00000001c0)={0x24, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="0022170000000600ff0901a10185020901150026ff00750895098102c0"], 0x0}, 0x0) nanosleep(&(0x7f0000000300)={0x1}, 0x0) syz_open_dev$hidraw(&(0x7f0000000200), 0x0, 0x0) syz_open_dev$hidraw(&(0x7f0000000240), 0x1, 0x0) syz_open_dev$hidraw(&(0x7f0000000280), 0x2, 0x0) syz_open_dev$evdev(&(0x7f00000002c0), 0x0, 0x0) syz_open_dev$evdev(&(0x7f0000000300), 0x1, 0x0) syz_open_dev$evdev(&(0x7f0000000340), 0x2, 0x0) syz_open_dev$evdev(&(0x7f0000000380), 0x3, 0x0) syz_open_dev$evdev(&(0x7f00000003c0), 0x4, 0x0) syz_usb_ep_write(r0, 0x81, 0xa, &(0x7f0000000000)="02c08120000000000000") nanosleep(&(0x7f0000000300)={0x0, 0x989680}, 0x0) syz_usb_ep_write(r0, 0x81, 0xa, &(0x7f0000000000)="02000000000000000000") 4.142800075s ago: executing program 3 (id=37): syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, &(0x7f0000000800), 0x0, 0x4c3, &(0x7f0000000200)="$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") mkdirat(0xffffffffffffff9c, &(0x7f0000003000)='./file0/d\x00', 0x1ff) openat(0xffffffffffffff9c, &(0x7f0000004000)='./file0/d/A11111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111\x00', 0x42, 0x1ff) openat(0xffffffffffffff9c, &(0x7f0000004200)='./file0/d/B11111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111\x00', 0x42, 0x1ff) openat(0xffffffffffffff9c, &(0x7f0000004400)='./file0/d/C11111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111\x00', 0x42, 0x1ff) openat(0xffffffffffffff9c, &(0x7f0000004600)='./file0/d/D11111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111\x00', 0x42, 0x1ff) openat(0xffffffffffffff9c, &(0x7f0000004800)='./file0/d/E11111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111\x00', 0x42, 0x1ff) openat(0xffffffffffffff9c, &(0x7f0000004a00)='./file0/d/F11111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111\x00', 0x42, 0x1ff) openat(0xffffffffffffff9c, &(0x7f0000004c00)='./file0/d/G11111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111\x00', 0x42, 0x1ff) openat(0xffffffffffffff9c, &(0x7f0000004e00)='./file0/d/H11111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111\x00', 0x42, 0x1ff) openat(0xffffffffffffff9c, &(0x7f0000005000)='./file0/d/I11111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111\x00', 0x42, 0x1ff) openat(0xffffffffffffff9c, &(0x7f0000005200)='./file0/d/J11111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111\x00', 0x42, 0x1ff) openat(0xffffffffffffff9c, &(0x7f0000005400)='./file0/d/K11111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111\x00', 0x42, 0x1ff) openat(0xffffffffffffff9c, &(0x7f0000005600)='./file0/d/L11111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111\x00', 0x42, 0x1ff) openat(0xffffffffffffff9c, &(0x7f0000005800)='./file0/d/M11111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111\x00', 0x42, 0x1ff) openat(0xffffffffffffff9c, &(0x7f0000005a00)='./file0/d/N11111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111\x00', 0x42, 0x1ff) openat(0xffffffffffffff9c, &(0x7f0000005c00)='./file0/d/O11111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111\x00', 0x42, 0x1ff) openat(0xffffffffffffff9c, &(0x7f0000005e00)='./file0/d/P11111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111\x00', 0x42, 0x1ff) mknod(&(0x7f0000001000)='./bdev\x00', 0x60777, 0x700) r0 = openat(0xffffffffffffff9c, &(0x7f0000001000)='./bdev\x00', 0x2, 0x0) pwrite64(r0, &(0x7f0000005000)='\x00'/128, 0x80, 0x4000) pwrite64(r0, &(0x7f0000005000)='\x00'/128, 0x80, 0x4400) pwrite64(r0, &(0x7f0000005000)='\x00'/128, 0x80, 0x4800) pwrite64(r0, &(0x7f0000005000)='\x00'/128, 0x80, 0x4c00) pwrite64(r0, &(0x7f0000005000)='\x00'/128, 0x80, 0x5000) pwrite64(r0, &(0x7f0000005000)='\x00'/128, 0x80, 0x5400) pwrite64(r0, &(0x7f0000005000)='\x00'/128, 0x80, 0x5800) pwrite64(r0, &(0x7f0000005000)='\x00'/128, 0x80, 0x5c00) pwrite64(r0, &(0x7f0000005000)='\x00'/128, 0x80, 0x6000) pwrite64(r0, &(0x7f0000005000)='\x00'/128, 0x80, 0x6400) pwrite64(r0, &(0x7f0000005000)='\x00'/128, 0x80, 0x6800) pwrite64(r0, &(0x7f0000005000)='\x00'/128, 0x80, 0x6c00) pwrite64(r0, &(0x7f0000005000)='\x00'/128, 0x80, 0x7000) pwrite64(r0, &(0x7f0000005000)='\x00'/128, 0x80, 0x7400) pwrite64(r0, &(0x7f0000005000)='\x00'/128, 0x80, 0x7800) pwrite64(r0, &(0x7f0000005000)='\x00'/128, 0x80, 0x7c00) pwrite64(r0, &(0x7f0000005000)='\x00'/128, 0x80, 0x8000) openat(0xffffffffffffff9c, &(0x7f0000006000)='./file0/d/Q11111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111\x00', 0x42, 0x1ff) 4.106909246s ago: executing program 3 (id=38): r0 = memfd_create(&(0x7f0000000000)='test\x00', 0x0) fallocate(r0, 0x0, 0x0, 0x87e60a0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000100)='./sys\x00', &(0x7f0000000200)='sysfs\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./sys/class/ptp/ptp0/max_vclocks\x00', 0x2, 0x0) write(r1, &(0x7f0000000400)='1048576\x00', 0x8) 3.516589001s ago: executing program 2 (id=47): r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt(r0, 0x1, 0x19, &(0x7f0000000200)='eth1\x00', 0x5) 3.516547601s ago: executing program 2 (id=48): mknodat(0xffffffffffffff9c, &(0x7f0000000200)='./my_zero\x00', 0x81b6, 0x105) r0 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./my_zero\x00', 0x2, 0x0) read(r0, &(0x7f0000000300), 0x10) 3.516453621s ago: executing program 2 (id=49): r0 = syz_usb_connect(0x0, 0x67, &(0x7f0000000000)=ANY=[@ANYBLOB="12010002e00101408d0e3f760001000000010902550002010080320904000003e00101000705810310000107050202000200070582020002000904010002e001010007050301000001070583010000010904010102e00101000705030109000107058301090001"], 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000600)={0x84, &(0x7f0000000700)={0x0, 0x0, 0x4, '\x00\x00\x00\x00'}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, &(0x7f0000000600)) syz_usb_control_io(r0, 0x0, &(0x7f0000000600)) syz_usb_control_io(r0, 0x0, &(0x7f0000000600)) nanosleep(&(0x7f0000000400)={0x6}, 0x0) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r1, 0x400448ca, &(0x7f0000000300)="01000000") bind$bt_hci(r1, &(0x7f0000000100)={0x1f, 0x1, 0x1}, 0x6) write(r1, &(0x7f0000000200)="f100040000", 0x5) 3.459694982s ago: executing program 3 (id=50): r0 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$UHID_CREATE2(r0, &(0x7f0000000100)={0xb, {'syz0\x00', 'syz0\x00', 'syz0\x00', 0xf, 0x0, 0x0, 0x0, 0x0, 0x0, "050c0a810115002501750195018102"}}, 0x127) read(r0, &(0x7f0000000200), 0x111c) nanosleep(&(0x7f0000000300)={0x0, 0x5f5e100}, 0x0) 3.340680236s ago: executing program 3 (id=51): add_key(&(0x7f0000000000)='asymmetric\x00', &(0x7f0000000100)={'syz', 0x0}, &(0x7f0000000200)="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", 0x1d8, 0xfffffffffffffffc) 3.284818047s ago: executing program 3 (id=52): syz_usb_connect(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000200000040341278560000000000010902240001010080fa0904000002ff000000090581020002000000090502020002000000"], 0x0) nanosleep(&(0x7f0000000400)={0x2}, 0x0) r0 = syz_open_dev$usbfs(&(0x7f0000000100), 0x15, 0x2) ioctl$USBDEVFS_IOCTL(r0, 0xc0105512, &(0x7f0000000200)=@usbdevfs_driver={0x0, 0xc01c5564, &(0x7f0000000300)="050000000100000000040000000000000100"/28}) 2.77760795s ago: executing program 1 (id=54): r0 = syz_usb_connect(0x3, 0x2b, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000200000040da0b32280000000000010902190001010080fa0904000001ffffff0007058102000200"], 0x0) syz_usb_control_io(r0, &(0x7f0000000100)={0x2c, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000000200)={0x84, &(0x7f0000000300)={0x40, 0x0, 0x8, '\x00\x00\x00\x00\x00\x00\x00\x00'}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, &(0x7f0000000100), &(0x7f0000000200)) syz_usb_control_io(r0, &(0x7f0000000100), &(0x7f0000000200)) syz_usb_control_io(r0, &(0x7f0000000100), &(0x7f0000000200)) syz_usb_control_io(r0, &(0x7f0000000100), &(0x7f0000000200)) syz_usb_control_io(r0, &(0x7f0000000100), &(0x7f0000000200)) syz_usb_control_io(r0, &(0x7f0000000100), &(0x7f0000000200)) syz_usb_control_io(r0, &(0x7f0000000100), &(0x7f0000000200)) syz_usb_control_io(r0, &(0x7f0000000100), &(0x7f0000000200)) syz_usb_control_io(r0, &(0x7f0000000100), &(0x7f0000000200)) syz_usb_control_io(r0, &(0x7f0000000100), &(0x7f0000000200)) syz_usb_control_io(r0, &(0x7f0000000100), &(0x7f0000000200)) syz_usb_control_io(r0, &(0x7f0000000100), &(0x7f0000000200)) syz_usb_control_io(r0, &(0x7f0000000100), &(0x7f0000000200)) syz_usb_control_io(r0, &(0x7f0000000100), &(0x7f0000000200)) syz_usb_control_io(r0, &(0x7f0000000100), &(0x7f0000000200)) syz_usb_control_io(r0, &(0x7f0000000100), &(0x7f0000000200)) syz_usb_control_io(r0, &(0x7f0000000100), &(0x7f0000000200)) syz_usb_control_io(r0, &(0x7f0000000100), &(0x7f0000000200)) syz_usb_control_io(r0, &(0x7f0000000100), &(0x7f0000000200)) syz_usb_control_io(r0, &(0x7f0000000100), &(0x7f0000000200)) syz_usb_control_io(r0, &(0x7f0000000100), &(0x7f0000000200)) syz_usb_control_io(r0, &(0x7f0000000100), &(0x7f0000000200)) syz_usb_control_io(r0, &(0x7f0000000100), &(0x7f0000000200)) syz_usb_control_io(r0, &(0x7f0000000100), &(0x7f0000000200)) syz_usb_control_io(r0, &(0x7f0000000100), &(0x7f0000000200)) syz_usb_control_io(r0, &(0x7f0000000100), &(0x7f0000000200)) syz_usb_control_io(r0, &(0x7f0000000100), &(0x7f0000000200)) syz_usb_control_io(r0, &(0x7f0000000100), &(0x7f0000000200)) syz_usb_control_io(r0, &(0x7f0000000100), &(0x7f0000000200)) nanosleep(&(0x7f0000000400)={0x1}, 0x0) 1.762270245s ago: executing program 0 (id=55): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000040)='sysfs\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000080)='./sys/module/netconsole/parameters/netconsole\x00', 0x0, 0x0) 1.699989487s ago: executing program 0 (id=56): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000003c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x2}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x1, 0x0, 0x0, {0x2}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x40, 0x3, 0xa, 0x101, 0x0, 0x0, {0x2}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz0\x00'}, @NFTA_CHAIN_HOOK={0x14, 0x4, 0x0, 0x1, [@NFTA_HOOK_HOOKNUM={0x8}, @NFTA_HOOK_PRIORITY={0x8}]}]}, @NFT_MSG_NEWRULE={0x84, 0x6, 0xa, 0x401, 0x0, 0x0, {0x2}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_EXPRESSIONS={0x5c, 0x4, 0x0, 0x1, [{0x58, 0x1, 0x0, 0x1, @inner={{0xa}, @val={0x48, 0x2, 0x0, 0x1, [@NFTA_INNER_TYPE={0x8, 0x2, 0x1, 0x0, 0x81}, @NFTA_INNER_FLAGS={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_INNER_HDRSIZE={0x8, 0x4, 0x1, 0x0, 0x3a}, @NFTA_INNER_NUM={0x8}, @NFTA_INNER_EXPR={0x24, 0x5, 0x0, 0x1, @meta={{0x9}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_META_DREG={0x8, 0x1, 0x1, 0x0, 0xc}, @NFTA_META_KEY={0x8, 0x2, 0x1, 0x0, 0x1}]}}}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x2}}}, 0x10c}}, 0x0) syz_emit_ethernet(0xbe, &(0x7f0000000100)={@local, @broadcast, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0xb0, 0x0, 0x0, 0x0, 0x11, 0x0, @dev, @local}, {0x0, 0x0, 0x9c, 0x0, @wg=@initiation={0x1, 0x0, "f4cb985d86dd6266b5efb88aaa87eda081bac8b2f9a49d564054f1c9218f47b3", "cf8743eb4d9e776f94a6a58d36e006ac614f6f7bce9217cbfea31675d4a860cf6003977b1e4dbb16dc31cc76522bf19d", "5043edd2a8cc8c41345f8feb1a7a8e23043b8a465b1ed5bf8bc91307", {"c7193f7edd1efc4742dc481e6f57f901", "948177bcc5dea4029ba4683a6bdcd7a1"}}}}}}}, 0x0) 1.699673537s ago: executing program 0 (id=57): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ed) mount(&(0x7f0000000100)=@filename='none\x00', &(0x7f0000000000)='./sys\x00', &(0x7f0000000040)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./sys/power/state\x00', 0x2, 0x0) write(r0, &(0x7f00000000c0)='mem\x00\x00\x00\x00\x00', 0x8) 1.699303097s ago: executing program 4 (id=58): r0 = syz_usb_connect(0x2, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000200000040030431c60001000000010902120001010080320904000000ffffff00"], &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, &(0x7f0000002000)={0x84, &(0x7f0000001000)={0x0, 0x0, 0x5, "0541505020"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) nanosleep(&(0x7f0000000180)={0x0, 0x10000000}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000200)='./sys\x00', &(0x7f0000000240)='sysfs\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./sys/bus/i2c/devices/i2c-0/new_device\x00', 0x1, 0x0) write(r1, &(0x7f0000000400)='tps6598x 0x38\x00', 0xe) 1.657604678s ago: executing program 0 (id=59): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000040)='sysfs\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000080)='./sys/bus/pci/drivers/snd_hda_intel/0000:00:00.0\x00', 0x0, 0x0) 1.657451068s ago: executing program 0 (id=60): syz_usb_connect(0x0, 0x32, &(0x7f0000000000)=ANY=[@ANYBLOB="12010002000000407f1801020000010203010902200001010080fa0904000002ffffff000705810200020007050202000200"], 0x0) nanosleep(&(0x7f0000000300)={0x1}, 0x0) 144.921046ms ago: executing program 2 (id=61): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0x0, 0x0) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000100000)=[@text32={0x20, &(0x7f0000100100)="b800000000bab000e0fe8902f4", 0xd}], 0x1, 0x4, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 142.809556ms ago: executing program 0 (id=62): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./config\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./config\x00', &(0x7f00000000c0)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./config/usb_gadget/g1\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./config/usb_gadget/g1/configs/c.1\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000180)='./config/usb_gadget/g1/functions/midi2.0\x00', 0x1ff) symlinkat(&(0x7f00000001c0)='./config/usb_gadget/g1/functions/midi2.0\x00', 0xffffffffffffff9c, &(0x7f0000000200)='./config/usb_gadget/g1/configs/c.1/midi2.0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./config/usb_gadget/g1/UDC\x00', 0x2, 0x0) write(r0, &(0x7f0000000280)='dummy_udc.0\n', 0xc) nanosleep(&(0x7f0000000300)={0x0, 0x20000000}, 0x0) 97.334078ms ago: executing program 3 (id=63): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./sys\x00', &(0x7f00000000c0)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./sys/power/pm_test\x00', 0x2, 0x0) write(r0, &(0x7f0000000140)='devices', 0x7) r1 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./sys/power/state\x00', 0x2, 0x0) write(r1, &(0x7f00000001c0)='disk', 0x4) 63.744828ms ago: executing program 2 (id=64): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./sys\x00', 0x1ff) mount(&(0x7f0000000080)=@filename='none\x00', &(0x7f00000000c0)='./sys\x00', &(0x7f0000000100)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./sys/module/suspend/parameters/pm_test_delay\x00', 0x2, 0x0) write(r0, &(0x7f0000000180)='0\n', 0x2) r1 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./sys/power/pm_test\x00', 0x2, 0x0) write(r1, &(0x7f0000000200)='freezer\n', 0x8) 0s ago: executing program 2 (id=65): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(&(0x7f0000000040)=@filename='none\x00', &(0x7f0000000080)='./sys\x00', &(0x7f00000000c0)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./sys/power/state\x00', 0x2, 0x0) write(r0, &(0x7f0000000140)='mem\n', 0x4) kernel console output (not intermixed with test programs): syzkaller syzkaller login: [ 21.968546][ T28] kauditd_printk_skb: 26 callbacks suppressed [ 21.968559][ T28] audit: type=1400 audit(1785860350.852:59): avc: denied { transition } for pid=266 comm="sshd-session" path="/bin/sh" dev="sda1" ino=90 scontext=system_u:system_r:sshd_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 21.972806][ T28] audit: type=1400 audit(1785860350.852:60): avc: denied { noatsecure } for pid=266 comm="sshd-session" scontext=system_u:system_r:sshd_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 21.975839][ T28] audit: type=1400 audit(1785860350.862:61): avc: denied { write } for pid=266 comm="sh" path="pipe:[14503]" dev="pipefs" ino=14503 scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:sshd_t tclass=fifo_file permissive=1 [ 21.979293][ T28] audit: type=1400 audit(1785860350.862:62): avc: denied { rlimitinh } for pid=266 comm="sh" scontext=system_u:system_r:sshd_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 21.982323][ T28] audit: type=1400 audit(1785860350.862:63): avc: denied { siginh } for pid=266 comm="sh" scontext=system_u:system_r:sshd_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 Warning: Permanently added '10.128.0.254' (ED25519) to the list of known hosts. [ 29.085679][ T28] audit: type=1400 audit(1785860357.972:64): avc: denied { mounton } for pid=278 comm="syz-executor" path="/syzcgroup/unified" dev="sda1" ino=2023 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1 [ 29.088570][ T278] cgroup: Unknown subsys name 'net' [ 29.108327][ T28] audit: type=1400 audit(1785860357.972:65): avc: denied { mount } for pid=278 comm="syz-executor" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 29.135608][ T28] audit: type=1400 audit(1785860358.012:66): avc: denied { unmount } for pid=278 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 29.135954][ T278] cgroup: Unknown subsys name 'devices' [ 29.251842][ T278] cgroup: Unknown subsys name 'hugetlb' [ 29.257451][ T278] cgroup: Unknown subsys name 'rlimit' [ 29.392647][ T28] audit: type=1400 audit(1785860358.282:67): avc: denied { setattr } for pid=278 comm="syz-executor" name="raw-gadget" dev="devtmpfs" ino=258 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 29.415901][ T28] audit: type=1400 audit(1785860358.282:68): avc: denied { mounton } for pid=278 comm="syz-executor" path="/proc/sys/fs/binfmt_misc" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=dir permissive=1 [ 29.440652][ T28] audit: type=1400 audit(1785860358.282:69): avc: denied { mount } for pid=278 comm="syz-executor" name="/" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=filesystem permissive=1 [ 29.484103][ T280] SELinux: Context root:object_r:swapfile_t is not valid (left unmapped). [ 29.492978][ T28] audit: type=1400 audit(1785860358.392:70): avc: denied { relabelto } for pid=280 comm="mkswap" name="swap-file" dev="sda1" ino=2026 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" Setting up swapspace version 1, size = 127995904 bytes [ 29.518487][ T28] audit: type=1400 audit(1785860358.392:71): avc: denied { write } for pid=280 comm="mkswap" path="/root/swap-file" dev="sda1" ino=2026 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 29.561817][ T28] audit: type=1400 audit(1785860358.452:72): avc: denied { read } for pid=278 comm="syz-executor" name="swap-file" dev="sda1" ino=2026 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 29.587341][ T28] audit: type=1400 audit(1785860358.452:73): avc: denied { open } for pid=278 comm="syz-executor" path="/root/swap-file" dev="sda1" ino=2026 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 29.587373][ T278] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 30.685415][ T286] bridge0: port 1(bridge_slave_0) entered blocking state [ 30.692587][ T286] bridge0: port 1(bridge_slave_0) entered disabled state [ 30.699990][ T286] device bridge_slave_0 entered promiscuous mode [ 30.722159][ T286] bridge0: port 2(bridge_slave_1) entered blocking state [ 30.729200][ T286] bridge0: port 2(bridge_slave_1) entered disabled state [ 30.736600][ T286] device bridge_slave_1 entered promiscuous mode [ 30.763810][ T287] bridge0: port 1(bridge_slave_0) entered blocking state [ 30.770906][ T287] bridge0: port 1(bridge_slave_0) entered disabled state [ 30.778196][ T287] device bridge_slave_0 entered promiscuous mode [ 30.798027][ T287] bridge0: port 2(bridge_slave_1) entered blocking state [ 30.805100][ T287] bridge0: port 2(bridge_slave_1) entered disabled state [ 30.812580][ T287] device bridge_slave_1 entered promiscuous mode [ 30.836857][ T289] bridge0: port 1(bridge_slave_0) entered blocking state [ 30.843938][ T289] bridge0: port 1(bridge_slave_0) entered disabled state [ 30.851353][ T289] device bridge_slave_0 entered promiscuous mode [ 30.868674][ T289] bridge0: port 2(bridge_slave_1) entered blocking state [ 30.875746][ T289] bridge0: port 2(bridge_slave_1) entered disabled state [ 30.883157][ T289] device bridge_slave_1 entered promiscuous mode [ 30.908988][ T288] bridge0: port 1(bridge_slave_0) entered blocking state [ 30.916079][ T288] bridge0: port 1(bridge_slave_0) entered disabled state [ 30.923451][ T288] device bridge_slave_0 entered promiscuous mode [ 30.931721][ T288] bridge0: port 2(bridge_slave_1) entered blocking state [ 30.938762][ T288] bridge0: port 2(bridge_slave_1) entered disabled state [ 30.946128][ T288] device bridge_slave_1 entered promiscuous mode [ 30.973488][ T290] bridge0: port 1(bridge_slave_0) entered blocking state [ 30.980562][ T290] bridge0: port 1(bridge_slave_0) entered disabled state [ 30.987941][ T290] device bridge_slave_0 entered promiscuous mode [ 31.012660][ T290] bridge0: port 2(bridge_slave_1) entered blocking state [ 31.019694][ T290] bridge0: port 2(bridge_slave_1) entered disabled state [ 31.027235][ T290] device bridge_slave_1 entered promiscuous mode [ 31.104136][ T287] bridge0: port 2(bridge_slave_1) entered blocking state [ 31.111209][ T287] bridge0: port 2(bridge_slave_1) entered forwarding state [ 31.118479][ T287] bridge0: port 1(bridge_slave_0) entered blocking state [ 31.125562][ T287] bridge0: port 1(bridge_slave_0) entered forwarding state [ 31.156023][ T286] bridge0: port 2(bridge_slave_1) entered blocking state [ 31.163084][ T286] bridge0: port 2(bridge_slave_1) entered forwarding state [ 31.170349][ T286] bridge0: port 1(bridge_slave_0) entered blocking state [ 31.177371][ T286] bridge0: port 1(bridge_slave_0) entered forwarding state [ 31.226963][ T288] bridge0: port 2(bridge_slave_1) entered blocking state [ 31.234024][ T288] bridge0: port 2(bridge_slave_1) entered forwarding state [ 31.241304][ T288] bridge0: port 1(bridge_slave_0) entered blocking state [ 31.248328][ T288] bridge0: port 1(bridge_slave_0) entered forwarding state [ 31.275519][ T289] bridge0: port 2(bridge_slave_1) entered blocking state [ 31.282562][ T289] bridge0: port 2(bridge_slave_1) entered forwarding state [ 31.289804][ T289] bridge0: port 1(bridge_slave_0) entered blocking state [ 31.296876][ T289] bridge0: port 1(bridge_slave_0) entered forwarding state [ 31.318833][ T43] bridge0: port 1(bridge_slave_0) entered disabled state [ 31.326055][ T43] bridge0: port 2(bridge_slave_1) entered disabled state [ 31.333424][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 31.341538][ T43] bridge0: port 1(bridge_slave_0) entered disabled state [ 31.348723][ T43] bridge0: port 2(bridge_slave_1) entered disabled state [ 31.356019][ T43] bridge0: port 1(bridge_slave_0) entered disabled state [ 31.363234][ T43] bridge0: port 2(bridge_slave_1) entered disabled state [ 31.370564][ T43] bridge0: port 1(bridge_slave_0) entered disabled state [ 31.377704][ T43] bridge0: port 2(bridge_slave_1) entered disabled state [ 31.404114][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 31.412514][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 31.420747][ T43] bridge0: port 1(bridge_slave_0) entered blocking state [ 31.427760][ T43] bridge0: port 1(bridge_slave_0) entered forwarding state [ 31.435519][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 31.444652][ T43] bridge0: port 2(bridge_slave_1) entered blocking state [ 31.451709][ T43] bridge0: port 2(bridge_slave_1) entered forwarding state [ 31.459020][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 31.466956][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 31.474903][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 31.483151][ T43] bridge0: port 1(bridge_slave_0) entered blocking state [ 31.490184][ T43] bridge0: port 1(bridge_slave_0) entered forwarding state [ 31.497592][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 31.505809][ T43] bridge0: port 2(bridge_slave_1) entered blocking state [ 31.512862][ T43] bridge0: port 2(bridge_slave_1) entered forwarding state [ 31.520732][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 31.528134][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 31.548745][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 31.558588][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 31.566131][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 31.595073][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 31.603006][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 31.611371][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 31.619474][ T43] bridge0: port 1(bridge_slave_0) entered blocking state [ 31.626534][ T43] bridge0: port 1(bridge_slave_0) entered forwarding state [ 31.634700][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 31.642976][ T43] bridge0: port 2(bridge_slave_1) entered blocking state [ 31.649990][ T43] bridge0: port 2(bridge_slave_1) entered forwarding state [ 31.657321][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 31.665477][ T43] bridge0: port 1(bridge_slave_0) entered blocking state [ 31.672501][ T43] bridge0: port 1(bridge_slave_0) entered forwarding state [ 31.679893][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 31.688097][ T43] bridge0: port 2(bridge_slave_1) entered blocking state [ 31.695115][ T43] bridge0: port 2(bridge_slave_1) entered forwarding state [ 31.702473][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 31.715718][ T287] device veth0_vlan entered promiscuous mode [ 31.726410][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 31.734385][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 31.742530][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 31.751433][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 31.760455][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 31.767910][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 31.775607][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 31.783937][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 31.792201][ T43] bridge0: port 1(bridge_slave_0) entered blocking state [ 31.799236][ T43] bridge0: port 1(bridge_slave_0) entered forwarding state [ 31.816237][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 31.823970][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 31.832032][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 31.839901][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 31.848655][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 31.856664][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 31.864796][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 31.873120][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 31.881449][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 31.889545][ T43] bridge0: port 2(bridge_slave_1) entered blocking state [ 31.896586][ T43] bridge0: port 2(bridge_slave_1) entered forwarding state [ 31.905335][ T287] device veth1_macvtap entered promiscuous mode [ 31.913999][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 31.921654][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 31.929909][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 31.947766][ T289] device veth0_vlan entered promiscuous mode [ 31.959593][ T288] device veth0_vlan entered promiscuous mode [ 31.966345][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 31.975194][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 31.983664][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 31.991835][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 31.999705][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 32.007881][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 32.015931][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 32.023991][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 32.032097][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 32.040724][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 32.048973][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 32.056920][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 32.064985][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 32.073246][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 32.081605][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 32.089005][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 32.096524][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 32.104295][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 32.113904][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 32.122345][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 32.142791][ T287] request_module fs-gadgetfs succeeded, but still no fs? [ 32.153785][ T289] device veth1_macvtap entered promiscuous mode [ 32.162690][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 32.171093][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 32.179216][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 32.186940][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 32.194866][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 32.203028][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 32.210527][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 32.220769][ T288] device veth1_macvtap entered promiscuous mode [ 32.237619][ T286] device veth0_vlan entered promiscuous mode [ 32.245130][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 32.253574][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 32.262266][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 32.270579][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 32.278897][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 32.286975][ T309] loop0: detected capacity change from 0 to 2048 [ 32.302532][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 32.310849][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 32.325112][ T290] device veth0_vlan entered promiscuous mode [ 32.342927][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 32.350940][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 32.358446][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 32.367321][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 32.376287][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 32.384562][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 32.393047][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 32.401284][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 32.409519][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 32.417821][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 32.427545][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 32.435782][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 32.447990][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 32.456412][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 32.466804][ T286] device veth1_macvtap entered promiscuous mode [ 32.483140][ T290] device veth1_macvtap entered promiscuous mode [ 32.502231][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 32.509838][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 32.520460][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 32.526578][ T10] device offline error, dev sda, sector 274742 op 0x1:(WRITE) flags 0x4000 phys_seg 57 prio class 2 [ 32.529232][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 32.557492][ T315] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 32.562266][ T10] device offline error, dev sda, sector 275248 op 0x1:(WRITE) flags 0x4000 phys_seg 38 prio class 2 [ 32.576588][ T315] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 32.578811][ T10] device offline error, dev sda, sector 275760 op 0x1:(WRITE) flags 0x4000 phys_seg 62 prio class 2 [ 32.591612][ T315] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 32.603789][ T10] device offline error, dev sda, sector 276272 op 0x1:(WRITE) flags 0x4000 phys_seg 57 prio class 2 [ 32.606294][ T315] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 32.624186][ T10] device offline error, dev sda, sector 276784 op 0x1:(WRITE) flags 0x0 phys_seg 46 prio class 2 [ 32.634813][ T10] EXT4-fs warning (device sda1): ext4_end_bio:347: I/O error 17 writing to inode 2021 starting block 34598) [ 32.646632][ T10] device offline error, dev sda, sector 277206 op 0x1:(WRITE) flags 0x4000 phys_seg 45 prio class 2 [ 32.657550][ T10] device offline error, dev sda, sector 277712 op 0x1:(WRITE) flags 0x4000 phys_seg 41 prio class 2 [ 32.660717][ T6] usb 4-1: new full-speed USB device number 2 using dummy_hcd [ 32.672961][ T10] device offline error, dev sda, sector 278224 op 0x1:(WRITE) flags 0x4000 phys_seg 24 prio class 2 [ 32.687181][ T10] device offline error, dev sda, sector 278736 op 0x1:(WRITE) flags 0x4000 phys_seg 41 prio class 2 [ 32.688517][ T315] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 32.698048][ T10] device offline error, dev sda, sector 279248 op 0x1:(WRITE) flags 0x4000 phys_seg 58 prio class 2 [ 32.701911][ T10] EXT4-fs warning (device sda1): ext4_end_bio:347: I/O error 17 writing to inode 2021 starting block 34970) [ 32.710476][ T315] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 32.718970][ T10] EXT4-fs warning (device sda1): ext4_end_bio:347: I/O error 17 writing to inode 2021 starting block 35352) [ 32.748424][ T10] EXT4-fs warning (device sda1): ext4_end_bio:347: I/O error 17 writing to inode 2021 starting block 35446) [ 32.760493][ T8] Buffer I/O error on device sda1, logical block 35344 [ 32.767478][ T8] Buffer I/O error on device sda1, logical block 35345 [ 32.777238][ T10] EXT4-fs warning (device sda1): ext4_end_bio:347: I/O error 17 writing to inode 2022 starting block 139302) [ 32.790518][ T8] Buffer I/O error on device sda1, logical block 35346 [ 32.797398][ T8] Buffer I/O error on device sda1, logical block 35347 [ 32.808107][ T10] EXT4-fs warning (device sda1): ext4_end_bio:347: I/O error 17 writing to inode 2022 starting block 139368) [ 32.819799][ T8] Buffer I/O error on device sda1, logical block 35348 [ 32.826810][ T8] Buffer I/O error on device sda1, logical block 35349 [ 32.837523][ T10] EXT4-fs warning (device sda1): ext4_end_bio:347: I/O error 17 writing to inode 2022 starting block 139370) [ 32.850731][ T8] Buffer I/O error on device sda1, logical block 35350 [ 32.857602][ T8] Buffer I/O error on device sda1, logical block 35351 [ 32.864938][ T10] EXT4-fs warning (device sda1): ext4_end_bio:347: I/O error 17 writing to inode 2022 starting block 139378) [ 32.876695][ T8] Buffer I/O error on device sda1, logical block 35352 [ 32.883651][ T8] Buffer I/O error on device sda1, logical block 35353 [ 32.891770][ T10] EXT4-fs warning (device sda1): ext4_end_bio:347: I/O error 17 writing to inode 2022 starting block 139420) [ 32.901278][ T330] loop1: detected capacity change from 0 to 1024 [ 32.910680][ T10] EXT4-fs warning (device sda1): ext4_end_bio:347: I/O error 17 writing to inode 2022 starting block 139432) [ 32.933330][ T321] Buffer I/O error on dev sda1, logical block 132, lost async page write [ 32.934079][ T65] Aborting journal on device sda1-8. [ 32.942854][ T321] Buffer I/O error on dev sda1, logical block 138, lost async page write [ 32.948869][ T334] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz.4.8: Detected aborted journal [ 32.956168][ T321] Buffer I/O error on dev sda1, logical block 145, lost async page write [ 32.970734][ T327] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 32.975501][ T321] Buffer I/O error on dev sda1, logical block 150, lost async page write [ 32.990910][ T65] Buffer I/O error on dev sda1, logical block 131072, lost sync page write [ 32.991445][ T321] Buffer I/O error on dev sda1, logical block 157, lost async page write [ 32.999586][ T65] JBD2: I/O error when updating journal superblock for sda1-8. [ 33.016128][ T321] Buffer I/O error on dev sda1, logical block 158, lost async page write [ 33.016172][ T334] Buffer I/O error on dev sda1, logical block 0, lost sync page write [ 33.025001][ T321] Buffer I/O error on dev sda1, logical block 159, lost async page write [ 33.033196][ T334] EXT4-fs (sda1): I/O error while writing superblock [ 33.042075][ T321] Buffer I/O error on dev sda1, logical block 226, lost async page write [ 33.048528][ T334] EXT4-fs (sda1): Remounting filesystem read-only [ 33.067761][ T330] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 33.077599][ T278] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz-executor: Detected aborted journal [ 33.097545][ T278] EXT4-fs (sda1): I/O error while writing superblock [ 33.104422][ T278] EXT4-fs (sda1): Remounting filesystem read-only [ 33.108434][ T329] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz.1.2: Detected aborted journal [ 33.116118][ T278] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz-executor: Detected aborted journal [ 33.134464][ T278] EXT4-fs (sda1): I/O error while writing superblock [ 33.141534][ T278] EXT4-fs (sda1): Remounting filesystem read-only [ 33.148163][ T278] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz-executor: Detected aborted journal [ 33.159718][ T329] EXT4-fs (sda1): previous I/O error to superblock detected [ 33.170182][ T329] EXT4-fs (sda1): I/O error while writing superblock [ 33.171817][ T327] usb 1-1: New USB device found, idVendor=0e8d, idProduct=763f, bcdDevice= 1.00 [ 33.182218][ T278] EXT4-fs (sda1): I/O error while writing superblock [ 33.192814][ T329] EXT4-fs (sda1): Remounting filesystem read-only [ 33.194714][ T327] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 33.208714][ T339] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz.4.9: Detected aborted journal [ 33.221374][ T329] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz.1.2: Detected aborted journal [ 33.225978][ T339] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz.4.9: Detected aborted journal [ 33.245550][ T321] sd 0:0:1:0: [sda] Synchronizing SCSI cache [ 33.252147][ T329] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz.1.2: Detected aborted journal [ 33.257488][ T102] udevd[102]: worker [310] terminated by signal 7 (Bus error) [ 33.270702][ T102] udevd[102]: worker [310] failed while handling '/devices/platform/dummy_hcd.0/usb1/1-1' [ 33.284997][ T329] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz.1.2: Detected aborted journal [ 33.301022][ T102] udevd[102]: worker [312] terminated by signal 7 (Bus error) [ 33.309273][ T330] EXT4-fs (loop1): unmounting filesystem. [ 33.317139][ T102] udevd[102]: worker [312] failed while handling '/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.1' [ 33.328903][ T102] udevd[102]: worker [318] terminated by signal 7 (Bus error) [ 33.340527][ T102] udevd[102]: worker [318] failed while handling '/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0' [ 33.368995][ T330] EXT4-fs (loop1): unable to read superblock [ 33.388186][ T102] udevd[102]: worker [341] terminated by signal 7 (Bus error) [ 33.406112][ T350] netlink: 'syz.1.12': attribute type 2 has an invalid length. [ 33.407525][ T102] udevd[102]: worker [341] failed while handling '/devices/platform/dummy_hcd.0/usb1/1-1' [ 33.429648][ T350] netlink: 'syz.1.12': attribute type 2 has an invalid length. [ 33.514697][ T353] loop2: detected capacity change from 0 to 512 [ 33.525269][ T353] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 33.534399][ T353] ext4 filesystem being mounted at /1/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 33.557200][ T288] EXT4-fs (loop2): unmounting filesystem. [ 33.660076][ T327] usb 5-1: new full-speed USB device number 2 using dummy_hcd [ 33.840757][ T327] usb 5-1: not running at top speed; connect to a high speed hub [ 33.849284][ T327] usb 5-1: New USB device found, idVendor=0572, idProduct=cafe, bcdDevice= 1.00 [ 33.859168][ T327] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 33.868888][ T6] usb 4-1: unable to read config index 0 descriptor/start: -71 [ 33.877020][ T6] usb 4-1: can't read configurations, error -71 [ 33.890334][ T102] udevd[102]: worker [348] terminated by signal 7 (Bus error) [ 33.897962][ T102] udevd[102]: worker [348] failed while handling '/devices/platform/dummy_hcd.4/usb5/5-1' [ 33.997877][ T366] loop2: detected capacity change from 0 to 131072 [ 34.012089][ T366] F2FS-fs (loop2): Found nat_bits in checkpoint [ 34.049092][ T366] F2FS-fs (loop2): Mounted with checkpoint version = 1b41e955 [ 34.266959][ T28] kauditd_printk_skb: 49 callbacks suppressed [ 34.266974][ T28] audit: type=1400 audit(1785860363.152:123): avc: denied { read write } for pid=383 comm="syz.1.23" name="uhid" dev="devtmpfs" ino=267 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 34.275378][ T24] hid-generic 0003:1234:5678.0001: No inputs registered, leaving [ 34.301899][ T28] audit: type=1400 audit(1785860363.152:124): avc: denied { open } for pid=383 comm="syz.1.23" path="/dev/uhid" dev="devtmpfs" ino=267 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 34.328097][ T24] hid-generic 0003:1234:5678.0001: hidraw0: USB HID v0.00 Mouse [syz0] on syz1 [ 34.412165][ T28] audit: type=1400 audit(1785860363.302:125): avc: denied { unmount } for pid=287 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 34.470063][ T327] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 34.652348][ T327] usb 3-1: New USB device found, idVendor=2001, idProduct=f112, bcdDevice= 1.00 [ 34.661574][ T327] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 34.669574][ T327] usb 3-1: Product: syz [ 34.673767][ T327] usb 3-1: Manufacturer: syz [ 34.678362][ T327] usb 3-1: SerialNumber: syz [ 34.770084][ T6] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 34.826117][ T28] audit: type=1400 audit(1785860363.712:126): avc: denied { unmount } for pid=286 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 34.843727][ T398] L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 34.859460][ T28] audit: type=1400 audit(1785860363.722:127): avc: denied { read } for pid=397 comm="syz.1.27" name="kvm" dev="devtmpfs" ino=83 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 34.884105][ T28] audit: type=1400 audit(1785860363.722:128): avc: denied { open } for pid=397 comm="syz.1.27" path="/dev/kvm" dev="devtmpfs" ino=83 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 34.907309][ T28] audit: type=1400 audit(1785860363.732:129): avc: denied { ioctl } for pid=397 comm="syz.1.27" path="/dev/kvm" dev="devtmpfs" ino=83 ioctlcmd=0xae01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 34.960078][ T6] usb 4-1: Using ep0 maxpacket: 8 [ 34.966242][ T6] usb 4-1: config 0 has an invalid interface number: 143 but max is 0 [ 34.974581][ T6] usb 4-1: config 0 has no interface number 0 [ 34.980871][ T6] usb 4-1: New USB device found, idVendor=2058, idProduct=1005, bcdDevice=c1.9b [ 34.989917][ T6] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 35.004499][ T6] usb 4-1: config 0 descriptor?? [ 35.330062][ T24] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 35.511235][ T24] usb 2-1: New USB device found, idVendor=2040, idProduct=2400, bcdDevice= 0.00 [ 35.520327][ T24] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 35.899359][ T24] usb 1-1: USB disconnect, device number 2 [ 35.917920][ T28] audit: type=1400 audit(1785860364.802:130): avc: denied { write } for pid=420 comm="syz.0.32" name="usb_gadget" dev="configfs" ino=11070 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 35.943002][ T421] using random self ethernet address [ 35.949589][ T421] using random host ethernet address [ 35.958213][ T421] usb0: HOST MAC 4e:0a:de:1d:25:1e [ 35.963999][ T28] audit: type=1400 audit(1785860364.832:131): avc: denied { add_name } for pid=420 comm="syz.0.32" name="g1" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 35.971695][ T421] usb0: MAC ee:23:78:f6:9e:27 [ 35.992921][ T28] audit: type=1400 audit(1785860364.832:132): avc: denied { create } for pid=420 comm="syz.0.32" name="g1" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:configfs_t tclass=dir permissive=1 [ 36.213024][ T327] usb 4-1: USB disconnect, device number 3 [ 36.360128][ T24] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 36.367929][ T328] android_work: sent uevent USB_STATE=CONNECTED [ 36.414066][ T328] usb 5-1: USB disconnect, device number 2 [ 36.561342][ T24] usb 1-1: Dual-Role OTG device on HNP port [ 36.567492][ T24] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0104, bcdDevice= 6.01 [ 36.576619][ T24] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 36.585519][ T39] android_work: sent uevent USB_STATE=CONFIGURED [ 36.593119][ T315] IPv6: ADDRCONF(NETDEV_CHANGE): usb0: link becomes ready [ 36.621031][ T24] cdc_ncm 1-1:1.0: MAC-Address: 4e:0a:de:1d:25:1e [ 36.629026][ T24] cdc_ncm 1-1:1.0 usb1: register 'cdc_ncm' at usb-dummy_hcd.0-1, CDC NCM (NO ZLP), 4e:0a:de:1d:25:1e [ 36.724806][ T442] loop3: detected capacity change from 0 to 512 [ 36.733303][ T442] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 36.756829][ T287] EXT4-fs (loop3): unmounting filesystem. [ 36.773651][ T448] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 36.783245][ T448] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 36.820043][ T328] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 37.002042][ T328] usb 5-1: New USB device found, idVendor=056a, idProduct=033b, bcdDevice= 0.00 [ 37.020040][ T328] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 37.215712][ T6] usb 3-1: USB disconnect, device number 2 [ 37.408606][ T327] hid-generic 0000:0000:0000.0002: hidraw0: HID v0.00 Device [syz0] on syz0 [ 37.437767][ T328] wacom 0003:056A:033B.0003: Unknown device_type for 'HID 056a:033b'. Assuming pen. [ 37.447831][ T328] wacom 0003:056A:033B.0003: hidraw1: USB HID v1.11 Device [HID 056a:033b] on usb-dummy_hcd.4-1/input0 [ 37.459496][ T328] input: Wacom Intuos S 2 Pen as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/0003:056A:033B.0003/input/input5 [ 37.574722][ T493] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 37.583643][ T493] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 37.730153][ T6] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 37.810232][ T327] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 37.931057][ T6] usb 3-1: New USB device found, idVendor=0e8d, idProduct=763f, bcdDevice= 1.00 [ 37.940198][ T6] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 37.991131][ T327] usb 4-1: New USB device found, idVendor=1234, idProduct=5678, bcdDevice= 0.00 [ 38.000230][ T327] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 38.076226][ T328] usb 2-1: USB disconnect, device number 2 [ 38.082517][ T278] EXT4-fs error: 120 callbacks suppressed [ 38.082531][ T278] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz-executor: Detected aborted journal [ 38.102712][ T278] EXT4-fs: 93 callbacks suppressed [ 38.102723][ T278] EXT4-fs (sda1): Remounting filesystem read-only [ 38.116073][ T278] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz-executor: Detected aborted journal [ 38.127341][ T278] EXT4-fs (sda1): Remounting filesystem read-only [ 38.133908][ T278] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz-executor: Detected aborted journal [ 38.145200][ T278] EXT4-fs (sda1): Remounting filesystem read-only [ 38.151804][ T278] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz-executor: Detected aborted journal [ 38.153776][ T476] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz.2.49: Detected aborted journal [ 38.162959][ T278] EXT4-fs (sda1): Remounting filesystem read-only [ 38.170835][ T502] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz.1.54: Detected aborted journal [ 38.175531][ T476] EXT4-fs (sda1): Remounting filesystem read-only [ 38.180533][ T502] EXT4-fs (sda1): Remounting filesystem read-only [ 38.216892][ T490] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz.3.52: Detected aborted journal [ 38.228060][ T490] EXT4-fs (sda1): Remounting filesystem read-only [ 38.600081][ T328] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 38.650407][ T102] EXT4-fs error (device sda1): __ext4_find_entry:1685: inode #259: comm udevd: reading directory lblock 0 [ 38.650532][ T327] usb 5-1: USB disconnect, device number 3 [ 38.662346][ T102] EXT4-fs error (device sda1): __ext4_find_entry:1685: inode #264: comm udevd: reading directory lblock 0 [ 38.679202][ T102] EXT4-fs error (device sda1): __ext4_find_entry:1685: inode #264: comm udevd: reading directory lblock 0 [ 38.791116][ T328] usb 2-1: New USB device found, idVendor=0bda, idProduct=2832, bcdDevice= 0.00 [ 38.800245][ T328] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 38.813578][ T102] udevd[102]: worker [504] terminated by signal 7 (Bus error) [ 38.821218][ T102] udevd[102]: worker [504] failed while handling '/devices/platform/dummy_hcd.1/usb2/2-1' [ 39.010105][ T502] EXT4-fs (sda1): Remounting filesystem read-only [ 39.103255][ T508] EXT4-fs (sda1): Remounting filesystem read-only [ 39.111031][ T508] EXT4-fs (sda1): Remounting filesystem read-only [ 39.114683][ T102] udevd[102]: worker [500] terminated by signal 7 (Bus error) [ 39.125116][ T102] udevd[102]: worker [500] failed while handling '/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0' [ 39.145051][ T102] udevd[102]: worker [501] terminated by signal 7 (Bus error) [ 39.163514][ T102] udevd[102]: worker [501] failed while handling '/devices/platform/dummy_hcd.1/usb2/2-1' [ 39.194628][ T520] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 39.203558][ T520] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 39.440058][ T328] usb 5-1: new full-speed USB device number 4 using dummy_hcd [ 39.620904][ T328] usb 5-1: not running at top speed; connect to a high speed hub [ 39.629428][ T328] usb 5-1: New USB device found, idVendor=0403, idProduct=c631, bcdDevice= 1.00 [ 39.638521][ T328] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 39.653446][ T102] udevd[102]: worker [512] terminated by signal 7 (Bus error) [ 39.661037][ T102] udevd[102]: worker [512] failed while handling '/devices/platform/dummy_hcd.4/usb5/5-1' [ 40.240113][ T328] usb 4-1: USB disconnect, device number 4 [ 40.249437][ T102] udevd[102]: worker [528] terminated by signal 7 (Bus error) [ 40.259157][ T102] udevd[102]: worker [528] failed while handling '/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0' [ 40.667331][ T328] usb 3-1: USB disconnect, device number 3 [ 40.724320][ T28] kauditd_printk_skb: 15 callbacks suppressed [ 40.724333][ T28] audit: type=1400 audit(1785860369.612:148): avc: denied { read write } for pid=537 comm="syz.0.62" name="UDC" dev="configfs" ino=17460 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=file permissive=1 [ 40.757160][ T28] audit: type=1400 audit(1785860369.622:149): avc: denied { open } for pid=537 comm="syz.0.62" path="/9/config/usb_gadget/g1/UDC" dev="configfs" ino=17460 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=file permissive=1 [ 40.790936][ T540] PM: hibernation: hibernation entry [ 40.814203][ T545] PM: suspend entry (deep) [ 40.818668][ T545] PM: suspend exit [ 40.822948][ T315] Filesystems sync: 0.000 seconds [ 40.828372][ T540] Freezing user space processes [ 40.834700][ T540] Freezing user space processes completed (elapsed 0.001 seconds) [ 40.842567][ T540] OOM killer disabled. [ 40.854375][ T540] PM: hibernation: Preallocating image memory [ 41.786361][ T540] Write-error on swap-device (8:0:787782) [ 41.792237][ T540] Write-error on swap-device (8:0:787790) [ 41.797962][ T540] Write-error on swap-device (8:0:787798) [ 41.804177][ T540] Write-error on swap-device (8:0:787806) [ 41.810040][ T540] Write-error on swap-device (8:0:787814) [ 41.815775][ T540] Write-error on swap-device (8:0:787822) [ 41.821705][ T540] Write-error on swap-device (8:0:788318) [ 41.827458][ T540] Write-error on swap-device (8:0:788326) [ 41.833237][ T540] Write-error on swap-device (8:0:788334) [ 41.838983][ T540] Write-error on swap-device (8:0:788342) [ 44.666540][ T540] PM: hibernation: Allocated 513402 pages for snapshot [ 44.673430][ T540] PM: hibernation: Allocated 2053608 kbytes in 3.80 seconds (540.42 MB/s) [ 44.681952][ T540] Freezing remaining freezable tasks [ 44.688468][ T540] Freezing remaining freezable tasks completed (elapsed 0.001 seconds) [ 44.697470][ T540] printk: Suspending console(s) (use no_console_suspend to debug) [ 44.854270][ T540] ACPI: PM: Preparing to enter system sleep state S4 [ 44.854439][ T540] ACPI: PM: Saving platform NVS memory [ 44.854467][ T540] Disabling non-boot CPUs ... [ 44.860394][ T540] smpboot: CPU 1 is now offline [ 44.866278][ T540] PM: hibernation: Creating image: [ 45.669530][ T540] PM: hibernation: Need to copy 539652 pages [ 47.254084][ T540] PM: hibernation: Image created (305446 pages copied, 234206 zero pages) [ 47.254265][ T540] ACPI: PM: Restoring platform NVS memory [ 47.272765][ T540] Enabling non-boot CPUs ... [ 47.272926][ T540] x86: Booting SMP configuration: [ 47.272930][ T540] smpboot: Booting Node 0 Processor 1 APIC 0x1 [ 47.275479][ T540] CPU1 is up [ 47.275645][ T540] ACPI: PM: Waking up from system sleep state S4 [ 47.638091][ T558] usb 1-1: reset high-speed USB device number 3 using dummy_hcd [ 47.818941][ T328] android_work: sent uevent USB_STATE=CONFIGURED [ 47.998107][ T551] usb 5-1: reset full-speed USB device number 4 using dummy_hcd [ 47.998107][ T558] usb 2-1: reset high-speed USB device number 3 using dummy_hcd [ 53.158136][ T558] usb 2-1: device descriptor read/64, error -110 [ 53.158136][ T551] usb 5-1: device descriptor read/64, error -32 [ 53.428123][ T558] usb 2-1: device descriptor read/64, error -32 [ 53.428123][ T551] usb 5-1: device descriptor read/64, error -32 [ 53.698115][ T558] usb 2-1: reset high-speed USB device number 3 using dummy_hcd [ 53.698115][ T551] usb 5-1: reset full-speed USB device number 4 using dummy_hcd [ 53.848117][ T551] usb 5-1: device descriptor read/64, error -32 [ 53.848116][ T558] usb 2-1: device descriptor read/64, error -32 [ 54.118151][ T551] usb 5-1: device descriptor read/64, error -32 [ 54.118151][ T558] usb 2-1: device descriptor read/64, error -32 [ 54.388120][ T551] usb 5-1: reset full-speed USB device number 4 using dummy_hcd [ 54.388120][ T558] usb 2-1: reset high-speed USB device number 3 using dummy_hcd [ 54.418654][ T558] usb 2-1: device descriptor read/8, error -32 [ 54.418654][ T551] usb 5-1: device descriptor read/8, error -32 [ 54.568694][ T551] usb 5-1: device descriptor read/8, error -32 [ 54.568694][ T558] usb 2-1: device descriptor read/8, error -32 [ 54.838128][ T551] usb 5-1: reset full-speed USB device number 4 using dummy_hcd [ 54.838128][ T558] usb 2-1: reset high-speed USB device number 3 using dummy_hcd [ 54.868952][ T558] usb 2-1: device descriptor read/8, error -32 [ 54.868952][ T551] usb 5-1: device descriptor read/8, error -32 [ 55.018684][ T558] usb 2-1: device descriptor read/8, error -32 [ 55.018684][ T551] usb 5-1: device descriptor read/8, error -32 [ 55.270975][ T540] PM: Cannot find swap device, try swapon -a [ 55.276949][ T540] PM: Cannot get swap writer [ 56.677790][ T540] OOM killer enabled. [ 56.681833][ T540] Restarting tasks ... [ 56.685222][ T1] Kernel panic - not syncing: Attempted to kill init! exitcode=0x00000007 [ 56.696833][ T24] usb 2-1: USB disconnect, device number 3 [ 56.703728][ T1] CPU: 0 PID: 1 Comm: init Not tainted syzkaller #0 [ 56.710331][ T1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 56.720398][ T1] Call Trace: [ 56.723696][ T1] [ 56.726642][ T1] __dump_stack+0x21/0x24 [ 56.730993][ T1] dump_stack_lvl+0x110/0x170 [ 56.735687][ T1] ? __cfi_dump_stack_lvl+0x8/0x8 [ 56.740732][ T1] dump_stack+0x15/0x24 [ 56.744903][ T1] panic+0x280/0x698 [ 56.748234][ T28] audit: type=1400 audit(1785860385.627:150): avc: denied { write } for pid=278 comm="syz-executor" path="pipe:[14328]" dev="pipefs" ino=14328 scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:sshd_t tclass=fifo_file permissive=1 [ 56.748349][ T328] usb 5-1: USB disconnect, device number 4 Connection to 10.128.0.254 closed by remote host. [ 56.764613][ T540] done. [ 56.764645][ T540] PM: hibernation: hibernation exit [ 56.785660][ T1] ? __cfi_down_read+0x10/0x10 [ 56.790437][ T1] ? __cfi_panic+0x8/0x8 [ 56.794710][ T1] ? __kasan_check_write+0x14/0x20 [ 56.799840][ T1] do_exit+0x1ffd/0x2850 [ 56.804169][ T1] ? __cfi_do_exit+0x10/0x10 [ 56.808784][ T1] ? kmem_cache_free+0x12d/0x300 [ 56.813768][ T1] ? ____kasan_slab_free+0x13d/0x180 [ 56.819076][ T1] do_group_exit+0x21b/0x2e0 [ 56.823690][ T1] get_signal+0x167c/0x1700 [ 56.828213][ T1] ? __cfi_get_signal+0x10/0x10 [ 56.833088][ T1] ? send_signal_locked+0x416/0x580 [ 56.838305][ T1] arch_do_signal_or_restart+0xd1/0x11c0 [ 56.843958][ T1] ? force_sig_fault+0xd9/0x130 [ 56.848825][ T1] ? __cfi_force_sig_fault+0x10/0x10 [ 56.854132][ T1] ? __cfi_arch_do_signal_or_restart+0x10/0x10 [ 56.860309][ T1] ? do_user_addr_fault+0xeff/0x1030 [ 56.865618][ T1] exit_to_user_mode_loop+0x7a/0xb0 [ 56.870846][ T1] exit_to_user_mode_prepare+0x87/0xd0 [ 56.876334][ T1] irqentry_exit_to_user_mode+0x9/0x10 [ 56.881812][ T1] irqentry_exit+0x12/0x40 [ 56.886261][ T1] exc_page_fault+0x5e/0xb0 [ 56.890771][ T1] asm_exc_page_fault+0x27/0x30 [ 56.895643][ T1] RIP: 0033:0x7fad172113a6 [ 56.900072][ T1] Code: Unable to access opcode bytes at 0x7fad1721137c. [ 56.907100][ T1] RSP: 002b:00007ffe94a84280 EFLAGS: 00010246 [ 56.913184][ T1] RAX: 0000000000000011 RBX: 00007fad1724b518 RCX: 0000000000000080 [ 56.921175][ T1] RDX: 0000000000000011 RSI: 00007fad1721130e RDI: 00007fad1724b498 [ 56.929196][ T1] RBP: 00007fad1724b490 R08: 0000000000000000 R09: 0000000000000000 [ 56.937184][ T1] R10: 0000000000000008 R11: 0000000000000202 R12: 00007fad1724b490 [ 56.945170][ T1] R13: 00007ffe94a842ac R14: 00007fad17283000 R15: 000056432b28ed98 [ 56.953168][ T1] [ 56.956721][ T1] Kernel Offset: disabled [ 56.961043][ T1] Rebooting in 86400 seconds..