last executing test programs: 1.026905194s ago: executing program 0 (id=590): r0 = socket(0x10, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f00000000c0)={'ip6_vti0\x00', &(0x7f0000000000)={'syztnl1\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @dev, @empty, 0x0, 0x8, 0x80000001}}) ioctl$BTRFS_IOC_RESIZE(r0, 0x50009403, &(0x7f00000002c0)={{}, {@val, @actul_num={@val=0x2b, 0xcda2, 0x65}}}) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f0000000080)={'syztnl1\x00', &(0x7f0000000180)={'ip6tnl0\x00', 0x0, 0x29, 0x0, 0x0, 0x0, 0x0, @dev, @private0={0xfc, 0x0, '\x00', 0x1}, 0x20, 0x0, 0x10}}) 994.642965ms ago: executing program 0 (id=591): landlock_create_ruleset(&(0x7f0000000040)={0x0, 0x5}, 0x30, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) ioctl$KVM_GET_MSR_INDEX_LIST(r0, 0x4018aee2, &(0x7f0000000040)) clock_adjtime(0x0, 0x0) 984.578995ms ago: executing program 0 (id=592): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB="3c010000190001000000000000000000e0000001000000000000000000000000fe8000000000000000000000000000aa4e220000000000000a00000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="00000000000000000104000000000000feffffffffffffff030000000000000000000000000000000000000000000000000000000000000001000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001000000000000008400050020010000000000000000000000000000000000002b00000000000000000000000000000000000000000500000000000002000700000000000000000000000000e00000020000000000000000000000004000000033"], 0x13c}, 0x1, 0x0, 0x0, 0x20000000}, 0x20040880) r1 = socket$inet6(0xa, 0x2, 0x0) sendmsg$inet6(r1, &(0x7f0000000100)={&(0x7f0000000040)={0xa, 0x4e24, 0x0, @dev}, 0x1c, 0x0}, 0xfdff) 895.537697ms ago: executing program 2 (id=594): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e20, @broadcast}, 0x10) sendto$inet(r0, &(0x7f0000000100)='$', 0x1, 0x20008005, &(0x7f00000000c0)={0x2, 0x4e20}, 0x10) recvfrom(r0, &(0x7f0000000740)=""/119, 0x76, 0x40010775, 0x0, 0xffffffffffffff4a) 895.101487ms ago: executing program 0 (id=602): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000000100)='./dev\x00', &(0x7f0000000200)='devtmpfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./dev/ttyS0\x00', 0x20002, 0x0) ioctl$TIOCMGET(r0, 0x5415, 0x0) 879.503707ms ago: executing program 2 (id=595): r0 = socket$inet6(0xa, 0x80001, 0x0) setsockopt$inet6_MCAST_JOIN_GROUP(r0, 0x29, 0x2a, &(0x7f0000fca000)={0x100000001, {{0xa, 0x0, 0x0, @mcast1}}}, 0x88) setsockopt$inet6_MCAST_JOIN_GROUP(r0, 0x29, 0x2a, &(0x7f0000000000)={0x7, {{0xa, 0x4e21, 0x2, @mcast2, 0x400}}}, 0x88) setsockopt$inet6_MCAST_MSFILTER(r0, 0x29, 0x30, &(0x7f0000000500)={0x1, {{0xa, 0x4e20, 0x0, @mcast1}}, 0x1}, 0x90) 857.131548ms ago: executing program 2 (id=596): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r0, 0x0) r1 = socket$can_raw(0x1d, 0x3, 0x1) setsockopt$CAN_RAW_FILTER(r1, 0x65, 0x1, &(0x7f0000000080)=[{{0x2, 0x0, 0x0, 0x1}, {0x1, 0x1, 0x1, 0x1}}, {{0x4, 0x0, 0x0, 0x1}, {0x0, 0x1, 0x1, 0x1}}], 0x10) 856.239118ms ago: executing program 0 (id=605): openat$make_it_fail(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/make-it-fail\x00', 0x1, 0x0) exit(0x2) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') readv(r0, &(0x7f0000002480)=[{&(0x7f0000000100)=""/4096, 0x1000}], 0x1) 818.434259ms ago: executing program 3 (id=597): memfd_create(&(0x7f0000000000)='/dev/sda1\x00', 0x1) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$FIBMAP(r0, 0x301, 0x0) 816.318029ms ago: executing program 2 (id=607): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_freezer_state(r0, &(0x7f0000000140), 0x2, 0x0) write$cgroup_freezer_state(r1, &(0x7f0000000080)='FREEZING\x00', 0x9) 795.524669ms ago: executing program 3 (id=598): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x20000, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CAP_EXIT_HYPERCALL(r1, 0x4068aea3, &(0x7f0000000040)={0x79, 0x0, 0xc}) ioctl$KVM_SET_GSI_ROUTING(r1, 0x4008ae6a, &(0x7f0000000240)={0x1, 0x0, [{0xcf2, 0x4, 0x0, 0x0, @sint={0xfad, 0x1000}}]}) 357.467421ms ago: executing program 2 (id=600): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000003ac0), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_REG(r0, &(0x7f0000003b80)={0x0, 0x28, &(0x7f0000003b40)={&(0x7f0000000080)={0x14, r1, 0x315, 0x70bd26, 0x25dfdbfe}, 0x14}}, 0x20004804) syz_genetlink_get_family_id$tipc(&(0x7f00000003c0), r0) 357.373011ms ago: executing program 3 (id=601): r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) connect$inet(r0, &(0x7f0000000000)={0x2, 0x4e22, @remote}, 0x10) getsockname(r0, 0x0, &(0x7f00000002c0)) 334.088321ms ago: executing program 3 (id=604): mmap$IORING_OFF_SQ_RING(0x0, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000380)='./bus\x00', 0x0) io_setup(0x202, &(0x7f0000000200)=0x0) io_submit(r1, 0x47f, &(0x7f0000000540)=[&(0x7f00000000c0)={0x25, 0xe7030003, 0x2, 0x1, 0x0, r0, &(0x7f0000000000), 0x100000, 0x100fbff}]) 323.209052ms ago: executing program 1 (id=606): r0 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r0, &(0x7f00000001c0), 0x10) io_setup(0x9, &(0x7f0000000000)=0x0) io_submit(r1, 0x1, &(0x7f0000000100)=[&(0x7f00000000c0)={0x400000, 0x0, 0x0, 0x1, 0x0, r0, &(0x7f0000000200)="0500000093c21faf16da39de706f646800580f02000000003f420f000000000000580f02000000003f420f00000000000029ffffff000000", 0x38}]) 322.367132ms ago: executing program 2 (id=608): r0 = syz_usb_connect(0x3, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="1201000014da2108ab12a390eb1e000000010902240001b30000040904410017ff5d810009050f1f01040000000905830300b3"], 0x0) syz_usb_ep_write$ath9k_ep2(r0, 0x83, 0x8, &(0x7f0000000200)=ANY=[@ANYBLOB="bcea"]) r1 = syz_open_dev$evdev(&(0x7f00000000c0), 0x40, 0x0) ioctl$EVIOCSFF(r1, 0x40304580, &(0x7f00000001c0)={0x51, 0x0, 0x560c, {0x803, 0x5d4}, {0xfffa, 0x2}, @period={0x58, 0x2, 0x4, 0x71, 0x9ee, {0x4, 0xb, 0xfffb, 0xb}, 0x0, 0x0}}) 211.120975ms ago: executing program 3 (id=609): r0 = creat(&(0x7f0000000200)='./file1\x00', 0x2) close(r0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x1d, &(0x7f0000000040)={0x1, &(0x7f0000000200)=[{0x6, 0xf5, 0x9, 0x7fff0000}]}) ioctl$KVM_GET_STATS_FD_cpu(r0, 0x2103) 210.655624ms ago: executing program 1 (id=617): r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f0000000180)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x1a}}, 0x10) setsockopt$sock_int(r0, 0x1, 0x6, &(0x7f0000000000)=0x4, 0x4) sendmmsg$inet(r0, &(0x7f0000001880)=[{{&(0x7f0000000580)={0x2, 0x4e21, @broadcast}, 0x10, 0x0}}], 0x1, 0x0) 199.949984ms ago: executing program 1 (id=610): write$UHID_INPUT(0xffffffffffffffff, &(0x7f0000000000)={0xc, {"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", 0x1000}}, 0x1006) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) r0 = socket$packet(0x11, 0x3, 0x300) sendto$packet(r0, 0x0, 0x0, 0x0, &(0x7f0000000140)={0x11, 0x8100}, 0x14) 193.017835ms ago: executing program 3 (id=611): add_key(0x0, 0x0, &(0x7f00000000c0)="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", 0x175, 0xfffffffffffffffc) r0 = syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000100)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x1770, 0xff00, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x60, 0x0, "", [{{0x9, 0x4, 0x0, 0x0, 0x9, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x29}}, {{{0x9, 0x5, 0x81, 0x3, 0x0, 0x0, 0x9, 0x4}}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000040)={0x24, 0x0, 0x0, 0x0, &(0x7f00000001c0)={0x0, 0x22, 0x371, {0x9}}}, &(0x7f0000000080)={0xffffffffffffffeb, 0x0, 0x0, 0x0, 0x0, 0x0}) 180.819065ms ago: executing program 1 (id=612): ioctl$sock_netdev_private(0xffffffffffffffff, 0x10008947, &(0x7f00000001c0)="8d557f1b1ff6ccd094c16b42289734959273b57ef1d453bebe85fbbe6c71e6226732bc85836358a4d39599268911f86dd60deaaf0be012c8924161071004458424fe45e65a223795ab2f72dd7a88739efa3ea40606325bd849ea0050a755f48e9c305a74f054f82282c2f6c6e89d4ad03beba67e39a0f5c2ee7c2c887803760e5ab6d2c1000000000000000099582c93c328e23799d0fa063d77979dbb975d233daf204060cb7e7eb30a87904371b9c5d60543fb01255051cc") r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r0) sendmsg$TIPC_CMD_ENABLE_BEARER(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000240)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000d0000000000010000000000000001410000001c0017"], 0x38}, 0x1, 0x0, 0x0, 0x8800}, 0x0) 171.137816ms ago: executing program 1 (id=613): r0 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./cgroup.cpu/memory.force_empty\x00', 0x2, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) write(r0, &(0x7f00000002c0)='0', 0x1) write$char_usb(r0, &(0x7f0000000300)="c4", 0x1) 31.874459ms ago: executing program 1 (id=614): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) setresuid(0xee00, 0xee00, 0x0) ioctl$TUNGETDEVNETNS(r0, 0x54e3, 0x0) 0s ago: executing program 0 (id=615): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000000), r0) sendmsg$TIPC_NL_BEARER_ENABLE(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)={0x28, r1, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_BEARER={0x14, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz0\x00'}]}]}, 0x28}}, 0x0) sendmsg$TIPC_NL_BEARER_DISABLE(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000003c0)={0x28, r1, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_BEARER={0x14, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz0\x00'}]}]}, 0x28}}, 0x0) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.13' (ED25519) to the list of known hosts. [ 20.466611][ T36] audit: type=1400 audit(1787950645.150:64): avc: denied { mounton } for pid=286 comm="syz-executor" path="/syzcgroup/unified" dev="sda1" ino=2023 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1 [ 20.467692][ T286] cgroup: Unknown subsys name 'net' [ 20.489264][ T36] audit: type=1400 audit(1787950645.150:65): avc: denied { mount } for pid=286 comm="syz-executor" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 20.516479][ T36] audit: type=1400 audit(1787950645.180:66): avc: denied { unmount } for pid=286 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 20.516609][ T286] cgroup: Unknown subsys name 'devices' [ 20.660365][ T286] cgroup: Unknown subsys name 'hugetlb' [ 20.665941][ T286] cgroup: Unknown subsys name 'rlimit' [ 20.777907][ T36] audit: type=1400 audit(1787950645.460:67): avc: denied { setattr } for pid=286 comm="syz-executor" name="raw-gadget" dev="devtmpfs" ino=190 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 20.801037][ T36] audit: type=1400 audit(1787950645.460:68): avc: denied { mounton } for pid=286 comm="syz-executor" path="/proc/sys/fs/binfmt_misc" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=dir permissive=1 [ 20.825700][ T36] audit: type=1400 audit(1787950645.460:69): avc: denied { mount } for pid=286 comm="syz-executor" name="/" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=filesystem permissive=1 [ 20.851780][ T288] SELinux: Context root:object_r:swapfile_t is not valid (left unmapped). Setting up swapspace version 1, size = 127995904 bytes [ 20.860569][ T36] audit: type=1400 audit(1787950645.550:70): avc: denied { relabelto } for pid=288 comm="mkswap" name="swap-file" dev="sda1" ino=2026 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 20.885981][ T36] audit: type=1400 audit(1787950645.550:71): avc: denied { write } for pid=288 comm="mkswap" path="/root/swap-file" dev="sda1" ino=2026 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 20.921639][ T36] audit: type=1400 audit(1787950645.610:72): avc: denied { read } for pid=286 comm="syz-executor" name="swap-file" dev="sda1" ino=2026 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 20.947137][ T36] audit: type=1400 audit(1787950645.610:73): avc: denied { open } for pid=286 comm="syz-executor" path="/root/swap-file" dev="sda1" ino=2026 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 20.947384][ T286] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 21.658922][ T293] bridge0: port 1(bridge_slave_0) entered blocking state [ 21.665981][ T293] bridge0: port 1(bridge_slave_0) entered disabled state [ 21.683861][ T293] bridge_slave_0: entered allmulticast mode [ 21.690273][ T293] bridge_slave_0: entered promiscuous mode [ 21.721846][ T293] bridge0: port 2(bridge_slave_1) entered blocking state [ 21.728915][ T293] bridge0: port 2(bridge_slave_1) entered disabled state [ 21.735961][ T293] bridge_slave_1: entered allmulticast mode [ 21.742189][ T293] bridge_slave_1: entered promiscuous mode [ 21.827966][ T298] bridge0: port 1(bridge_slave_0) entered blocking state [ 21.835029][ T298] bridge0: port 1(bridge_slave_0) entered disabled state [ 21.842103][ T298] bridge_slave_0: entered allmulticast mode [ 21.848198][ T298] bridge_slave_0: entered promiscuous mode [ 21.859774][ T298] bridge0: port 2(bridge_slave_1) entered blocking state [ 21.866799][ T298] bridge0: port 2(bridge_slave_1) entered disabled state [ 21.873909][ T298] bridge_slave_1: entered allmulticast mode [ 21.880073][ T298] bridge_slave_1: entered promiscuous mode [ 21.913688][ T299] bridge0: port 1(bridge_slave_0) entered blocking state [ 21.920757][ T299] bridge0: port 1(bridge_slave_0) entered disabled state [ 21.927798][ T299] bridge_slave_0: entered allmulticast mode [ 21.934034][ T299] bridge_slave_0: entered promiscuous mode [ 21.942093][ T299] bridge0: port 2(bridge_slave_1) entered blocking state [ 21.949213][ T299] bridge0: port 2(bridge_slave_1) entered disabled state [ 21.956239][ T299] bridge_slave_1: entered allmulticast mode [ 21.962439][ T299] bridge_slave_1: entered promiscuous mode [ 21.977612][ T297] bridge0: port 1(bridge_slave_0) entered blocking state [ 21.984665][ T297] bridge0: port 1(bridge_slave_0) entered disabled state [ 21.991711][ T297] bridge_slave_0: entered allmulticast mode [ 21.997820][ T297] bridge_slave_0: entered promiscuous mode [ 22.008371][ T297] bridge0: port 2(bridge_slave_1) entered blocking state [ 22.015457][ T297] bridge0: port 2(bridge_slave_1) entered disabled state [ 22.022561][ T297] bridge_slave_1: entered allmulticast mode [ 22.028669][ T297] bridge_slave_1: entered promiscuous mode [ 22.088155][ T293] bridge0: port 2(bridge_slave_1) entered blocking state [ 22.095206][ T293] bridge0: port 2(bridge_slave_1) entered forwarding state [ 22.102504][ T293] bridge0: port 1(bridge_slave_0) entered blocking state [ 22.109527][ T293] bridge0: port 1(bridge_slave_0) entered forwarding state [ 22.185424][ T13] bridge0: port 1(bridge_slave_0) entered disabled state [ 22.192749][ T13] bridge0: port 2(bridge_slave_1) entered disabled state [ 22.218578][ T46] bridge0: port 1(bridge_slave_0) entered blocking state [ 22.225616][ T46] bridge0: port 1(bridge_slave_0) entered forwarding state [ 22.240229][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 22.247257][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 22.287094][ T46] bridge0: port 1(bridge_slave_0) entered blocking state [ 22.294145][ T46] bridge0: port 1(bridge_slave_0) entered forwarding state [ 22.302628][ T46] bridge0: port 1(bridge_slave_0) entered blocking state [ 22.309651][ T46] bridge0: port 1(bridge_slave_0) entered forwarding state [ 22.331411][ T46] bridge0: port 1(bridge_slave_0) entered blocking state [ 22.338425][ T46] bridge0: port 1(bridge_slave_0) entered forwarding state [ 22.346231][ T46] bridge0: port 2(bridge_slave_1) entered blocking state [ 22.353249][ T46] bridge0: port 2(bridge_slave_1) entered forwarding state [ 22.361166][ T46] bridge0: port 2(bridge_slave_1) entered blocking state [ 22.368169][ T46] bridge0: port 2(bridge_slave_1) entered forwarding state [ 22.386040][ T46] bridge0: port 2(bridge_slave_1) entered blocking state [ 22.393070][ T46] bridge0: port 2(bridge_slave_1) entered forwarding state [ 22.403290][ T293] veth0_vlan: entered promiscuous mode [ 22.416114][ T293] veth1_macvtap: entered promiscuous mode [ 22.446906][ T298] veth0_vlan: entered promiscuous mode [ 22.462805][ T299] veth0_vlan: entered promiscuous mode [ 22.471818][ T293] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 22.485068][ T298] veth1_macvtap: entered promiscuous mode [ 22.496215][ T297] veth0_vlan: entered promiscuous mode [ 22.506045][ T299] veth1_macvtap: entered promiscuous mode [ 22.531802][ T297] veth1_macvtap: entered promiscuous mode [ 22.565602][ T316] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 22.671628][ T326] SELinux: ebitmap: truncated map [ 22.677489][ T326] SELinux: failed to load policy [ 22.759950][ T340] netlink: 12 bytes leftover after parsing attributes in process `syz.2.14'. [ 23.011120][ T365] program syz.2.25 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 23.208957][ T66] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 23.242014][ T381] input: syz0 as /devices/virtual/input/input4 [ 23.290777][ T389] usb usb8: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 23.378906][ T66] usb 2-1: Using ep0 maxpacket: 8 [ 23.385157][ T66] usb 2-1: config 179 has an invalid interface number: 65 but max is 0 [ 23.393580][ T66] usb 2-1: config 179 has no interface number 0 [ 23.400120][ T66] usb 2-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 23.419151][ T66] usb 2-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024 [ 23.430429][ T66] usb 2-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 23.441635][ T66] usb 2-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 41728, setting to 1024 [ 23.458120][ T66] usb 2-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 23.484177][ T66] usb 2-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 23.503605][ T66] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 23.513656][ T414] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 23.531545][ T356] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 23.623148][ T422] Bluetooth: hci0: Frame reassembly failed (-84) [ 23.633663][ T13] Bluetooth: hci0: Frame reassembly failed (-84) [ 23.758738][ T66] input: Generic X-Box pad as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:179.65/input/input5 [ 23.961780][ T406] usb 2-1: USB disconnect, device number 2 [ 23.961857][ C1] xpad 2-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 23.976257][ T406] xpad 2-1:179.65: xpad_try_sending_next_out_packet - usb_submit_urb failed with result -19 [ 23.976292][ C1] dummy_hcd dummy_hcd.1: timer fired with no URBs pending? [ 24.078378][ T444] netlink: 20 bytes leftover after parsing attributes in process `syz.3.61'. [ 24.538911][ T66] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 24.708901][ T66] usb 3-1: Using ep0 maxpacket: 16 [ 24.715074][ T66] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 24.725200][ T66] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 24.735349][ T66] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 24.744391][ T66] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 24.752514][ T66] usb 3-1: Product: syz [ 24.756667][ T66] usb 3-1: Manufacturer: syz [ 24.761377][ T66] usb 3-1: SerialNumber: syz [ 24.768968][ T406] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 24.920265][ T406] usb 2-1: unable to get BOS descriptor or descriptor too short [ 24.928632][ T406] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 24.939876][ T406] usb 2-1: New USB device found, idVendor=8086, idProduct=0ad2, bcdDevice= 0.00 [ 24.948968][ T406] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=0 [ 24.956992][ T406] usb 2-1: Product: syz [ 24.961164][ T406] usb 2-1: Manufacturer: syz [ 24.969228][ T66] usb 3-1: 0:2 : does not exist [ 24.969520][ T406] usb 2-1: Found UVC 1.00 device syz (8086:0ad2) [ 24.984000][ T66] usb 3-1: 5:0: failed to get current value for ch 0 (-22) [ 24.994985][ T66] usb 3-1: USB disconnect, device number 2 [ 25.219903][ T478] process 'syz.3.75' launched './file1' with NULL argv: empty string added [ 25.302566][ T488] netlink: 'syz.3.80': attribute type 1 has an invalid length. [ 25.320860][ T490] ======================================================= [ 25.320860][ T490] WARNING: The mand mount option has been deprecated and [ 25.320860][ T490] and is ignored by this kernel. Remove the mand [ 25.320860][ T490] option from the mount to silence this warning. [ 25.320860][ T490] ======================================================= [ 25.369008][ T406] usb 2-1: UVC non compliance - GET_DEF(PROBE) not supported. Enabling workaround. [ 25.378965][ T406] uvcvideo 2-1:1.1: Failed to query (129) UVC probe control : -32 (exp. 26). [ 25.390760][ T406] uvcvideo 2-1:1.1: Failed to initialize the device (-5). [ 25.403880][ T494] logitech-hidpp-device 0003:046D:C082.0001: received hid++ report of bad size (1) [ 25.412869][ T406] usb 2-1: USB disconnect, device number 3 [ 25.421059][ T66] logitech-hidpp-device 0003:046D:C082.0001: hidraw0: USB HID v0.00 Device [syz0] on syz0 [ 25.468133][ T495] fido_id[495]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 25.534746][ T36] kauditd_printk_skb: 106 callbacks suppressed [ 25.534761][ T36] audit: type=1400 audit(1787950650.220:180): avc: denied { map } for pid=506 comm="syz.3.90" path="/dev/ashmem" dev="devtmpfs" ino=201 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 25.566704][ T36] audit: type=1400 audit(1787950650.220:181): avc: denied { execute } for pid=506 comm="syz.3.90" path="/dev/ashmem" dev="devtmpfs" ino=201 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 25.593471][ T36] audit: type=1400 audit(1787950650.280:182): avc: denied { write } for pid=510 comm="syz.2.91" name="sched_switch" dev="tracefs" ino=4942 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=dir permissive=1 [ 25.619753][ T36] audit: type=1400 audit(1787950650.280:183): avc: denied { add_name } for pid=510 comm="syz.2.91" name="enable" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=dir permissive=1 [ 25.640373][ T36] audit: type=1400 audit(1787950650.280:184): avc: denied { create } for pid=510 comm="syz.2.91" name="enable" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:tracefs_t tclass=file permissive=1 [ 25.649033][ T54] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 25.666285][ T424] Bluetooth: hci0: command 0x1003 tx timeout [ 25.667868][ T36] audit: type=1400 audit(1787950650.350:185): avc: denied { write } for pid=514 comm="syz.2.93" path="socket:[4072]" dev="sockfs" ino=4072 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 25.727549][ T36] audit: type=1400 audit(1787950650.410:186): avc: denied { unmount } for pid=297 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=filesystem permissive=1 [ 25.845520][ T36] audit: type=1400 audit(1787950650.530:187): avc: denied { create } for pid=533 comm="syz.0.101" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 25.870912][ T36] audit: type=1400 audit(1787950650.530:188): avc: denied { ioctl } for pid=533 comm="syz.0.101" path="socket:[4996]" dev="sockfs" ino=4996 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 25.902982][ T541] Bluetooth: hci0: received HCILL_GO_TO_SLEEP_ACK in state 2 [ 25.912065][ T13] Bluetooth: hci0: Frame reassembly failed (-84) [ 25.920580][ T36] audit: type=1400 audit(1787950650.530:189): avc: denied { bind } for pid=533 comm="syz.0.101" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 26.228940][ T66] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 26.358913][ T406] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 26.378903][ T66] usb 4-1: Using ep0 maxpacket: 8 [ 26.385230][ T66] usb 4-1: unable to get BOS descriptor or descriptor too short [ 26.393670][ T66] usb 4-1: config 2 has an invalid interface number: 99 but max is 0 [ 26.401766][ T66] usb 4-1: config 2 has no interface number 0 [ 26.407832][ T66] usb 4-1: config 2 interface 99 altsetting 7 has an endpoint descriptor with address 0xFE, changing to 0x8E [ 26.419372][ T66] usb 4-1: config 2 interface 99 altsetting 7 endpoint 0x2 has an invalid bInterval 0, changing to 7 [ 26.430389][ T66] usb 4-1: config 2 interface 99 altsetting 7 endpoint 0x2 has invalid wMaxPacketSize 0 [ 26.440119][ T66] usb 4-1: config 2 interface 99 has no altsetting 0 [ 26.448110][ T66] usb 4-1: New USB device found, idVendor=0000, idProduct=a300, bcdDevice= a.f3 [ 26.457193][ T66] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 26.465185][ T66] usb 4-1: Product: syz [ 26.469367][ T66] usb 4-1: Manufacturer: syz [ 26.473949][ T66] usb 4-1: SerialNumber: syz [ 26.510027][ T406] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 26.520954][ T406] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 26.530691][ T406] usb 2-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.80 [ 26.539831][ T406] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 26.548346][ T406] usb 2-1: config 0 descriptor?? [ 26.682127][ T66] input: Generic X-Box pad as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:2.99/input/input6 [ 26.891424][ T9] usb 4-1: USB disconnect, device number 2 [ 26.956426][ T406] cp2112 0003:10C4:EA90.0002: unknown main item tag 0x0 [ 26.964305][ T406] cp2112 0003:10C4:EA90.0002: unknown main item tag 0x0 [ 26.971379][ T406] cp2112 0003:10C4:EA90.0002: unknown main item tag 0x0 [ 26.978323][ T406] cp2112 0003:10C4:EA90.0002: unknown main item tag 0x0 [ 26.987025][ T406] cp2112 0003:10C4:EA90.0002: unknown main item tag 0x0 [ 26.994086][ T406] cp2112 0003:10C4:EA90.0002: unknown main item tag 0x0 [ 27.001114][ T406] cp2112 0003:10C4:EA90.0002: unknown main item tag 0x0 [ 27.012005][ T406] cp2112 0003:10C4:EA90.0002: hidraw0: USB HID v0.00 Device [HID 10c4:ea90] on usb-dummy_hcd.1-1/input0 [ 27.016088][ T66] logitech-hidpp-device 0003:046D:C082.0003: hidraw1: USB HID v0.00 Device [syz0] on syz0 [ 27.156250][ T406] cp2112 0003:10C4:EA90.0002: error requesting version [ 27.164646][ T406] cp2112 0003:10C4:EA90.0002: probe with driver cp2112 failed with error -71 [ 27.175081][ T406] usb 2-1: USB disconnect, device number 4 [ 27.518143][ T608] netlink: 92 bytes leftover after parsing attributes in process `syz.3.136'. [ 27.758183][ T626] input: syz1 as /devices/virtual/input/input7 [ 27.949194][ T424] Bluetooth: hci0: command 0x1003 tx timeout [ 27.949368][ T54] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 28.218922][ T66] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 28.241177][ T45] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 28.403367][ T66] usb 1-1: New USB device found, idVendor=045a, idProduct=5210, bcdDevice= 1.01 [ 28.417219][ T66] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 28.429087][ T45] usb 4-1: Using ep0 maxpacket: 8 [ 28.434347][ T66] usb 1-1: Product: syz [ 28.438586][ T66] usb 1-1: Manufacturer: syz [ 28.444310][ T66] usb 1-1: SerialNumber: syz [ 28.452059][ T45] usb 4-1: config 0 has no interfaces? [ 28.458031][ T45] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 28.469265][ T66] ums-karma 1-1:1.0: USB Mass Storage device detected [ 28.476229][ T45] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 28.487485][ T66] ums-karma 1-1:1.0: This device (045a,5210,0101 S 06 P f5) has unneeded SubClass and Protocol entries in unusual_devs.h (kernel syzkaller) [ 28.487485][ T66] Please send a copy of this message to and [ 28.514435][ T45] usb 4-1: config 0 descriptor?? [ 28.727391][ T406] usb 4-1: USB disconnect, device number 3 [ 28.869847][ T66] scsi host1: usb-storage 1-1:1.0 [ 29.075617][ T406] usb 1-1: USB disconnect, device number 2 [ 29.498935][ T9] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 29.614275][ T719] capability: warning: `syz.1.185' uses deprecated v2 capabilities in a way that may be insecure [ 29.662108][ T9] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 29.673130][ T9] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 29.683157][ T9] usb 3-1: New USB device found, idVendor=054c, idProduct=0df2, bcdDevice=d6.af [ 29.692223][ T9] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 29.701143][ T9] usb 3-1: config 0 descriptor?? [ 29.869046][ T686] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 30.018904][ T686] usb 1-1: Using ep0 maxpacket: 32 [ 30.025120][ T686] usb 1-1: config 2 has an invalid interface number: 88 but max is 0 [ 30.033230][ T686] usb 1-1: config 2 has no interface number 0 [ 30.039353][ T686] usb 1-1: config 2 interface 88 altsetting 25 bulk endpoint 0x6 has invalid maxpacket 256 [ 30.049353][ T686] usb 1-1: config 2 interface 88 has no altsetting 0 [ 30.057415][ T686] usb 1-1: New USB device found, idVendor=0557, idProduct=2009, bcdDevice=c7.06 [ 30.066473][ T686] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=1 [ 30.074476][ T686] usb 1-1: Product: syz [ 30.078621][ T686] usb 1-1: Manufacturer: syz [ 30.083219][ T686] usb 1-1: SerialNumber: syz [ 30.089887][ T721] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 30.116964][ T9] playstation 0003:054C:0DF2.0004: unknown main item tag 0x0 [ 30.125190][ T9] playstation 0003:054C:0DF2.0004: unknown main item tag 0x0 [ 30.132769][ T9] playstation 0003:054C:0DF2.0004: unknown main item tag 0x0 [ 30.145634][ T9] playstation 0003:054C:0DF2.0004: unknown main item tag 0x0 [ 30.153081][ T9] playstation 0003:054C:0DF2.0004: unknown main item tag 0x0 [ 30.161319][ T9] playstation 0003:054C:0DF2.0004: hidraw0: USB HID v1.01 Device [HID 054c:0df2] on usb-dummy_hcd.2-1/input0 [ 30.299715][ T721] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 30.316013][ T9] playstation 0003:054C:0DF2.0004: Invalid byte count transferred, expected 20 got 0 [ 30.325589][ T9] playstation 0003:054C:0DF2.0004: Failed to retrieve DualSense pairing info: -22 [ 30.334816][ T9] playstation 0003:054C:0DF2.0004: Failed to get MAC address from DualSense [ 30.343555][ T9] playstation 0003:054C:0DF2.0004: Failed to create dualsense. [ 30.352172][ T9] playstation 0003:054C:0DF2.0004: probe with driver playstation failed with error -22 [ 30.438900][ T45] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 30.530283][ T9] usb 3-1: USB disconnect, device number 3 [ 30.590566][ T45] usb 4-1: Using ep0 maxpacket: 32 [ 30.596991][ T45] usb 4-1: config 0 interface 0 altsetting 5 endpoint 0x81 has an invalid bInterval 25, changing to 8 [ 30.608120][ T45] usb 4-1: config 0 interface 0 altsetting 5 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 30.620998][ T45] usb 4-1: config 0 interface 0 has no altsetting 0 [ 30.623318][ T36] kauditd_printk_skb: 23 callbacks suppressed [ 30.623333][ T36] audit: type=1400 audit(1787950655.310:213): avc: denied { append } for pid=744 comm="syz.1.198" name="random" dev="devtmpfs" ino=7 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:random_device_t tclass=chr_file permissive=1 [ 30.627638][ T45] usb 4-1: New USB device found, idVendor=0079, idProduct=0006, bcdDevice= 0.00 [ 30.665645][ T45] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 30.675342][ T36] audit: type=1400 audit(1787950655.360:214): avc: denied { append } for pid=744 comm="syz.1.198" path="/dev/random" dev="devtmpfs" ino=7 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:random_device_t tclass=chr_file permissive=1 [ 30.676260][ T45] usb 4-1: config 0 descriptor?? [ 30.708718][ T686] asix 1-1:2.88 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71 [ 30.716911][ T36] audit: type=1400 audit(1787950655.390:215): avc: denied { ioctl } for pid=738 comm="syz.3.195" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x550a scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 30.730128][ T686] asix 1-1:2.88: probe with driver asix failed with error -71 [ 30.747018][ T36] audit: type=1400 audit(1787950655.390:216): avc: denied { read write } for pid=293 comm="syz-executor" name="loop1" dev="devtmpfs" ino=50 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 30.766045][ T686] usb 1-1: USB disconnect, device number 3 [ 30.783819][ T36] audit: type=1400 audit(1787950655.390:217): avc: denied { open } for pid=293 comm="syz-executor" path="/dev/loop1" dev="devtmpfs" ino=50 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 30.816478][ T36] audit: type=1400 audit(1787950655.390:218): avc: denied { ioctl } for pid=293 comm="syz-executor" path="/dev/loop1" dev="devtmpfs" ino=50 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 30.842927][ T36] audit: type=1400 audit(1787950655.420:219): avc: denied { write } for pid=746 comm="syz.1.199" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=key permissive=1 [ 30.863863][ T36] audit: type=1400 audit(1787950655.490:220): avc: denied { read } for pid=750 comm="syz.1.200" name="kvm" dev="devtmpfs" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 30.886772][ T36] audit: type=1400 audit(1787950655.490:221): avc: denied { open } for pid=750 comm="syz.1.200" path="/dev/kvm" dev="devtmpfs" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 30.913034][ T36] audit: type=1400 audit(1787950655.490:222): avc: denied { ioctl } for pid=750 comm="syz.1.200" path="/dev/kvm" dev="devtmpfs" ino=13 ioctlcmd=0xae01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 31.116302][ T45] input: HID 0079:0006 as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/0003:0079:0006.0005/input/input8 [ 31.143380][ T45] dragonrise 0003:0079:0006.0005: input,hidraw0: USB HID v80.04 Joystick [HID 0079:0006] on usb-dummy_hcd.3-1/input0 [ 31.167381][ T45] dragonrise 0003:0079:0006.0005: no output reports found [ 31.181833][ T45] dragonrise 0003:0079:0006.0005: force feedback init failed [ 31.334052][ T782] netlink: 84 bytes leftover after parsing attributes in process `syz.0.213'. [ 31.372143][ T787] netlink: 8 bytes leftover after parsing attributes in process `syz.2.215'. [ 31.385669][ T45] usb 4-1: USB disconnect, device number 4 [ 31.455654][ T795] type: 10 invalid [ 31.680903][ T803] SELinux: Context system_u:object_r:hald_keymap_exec_t:s0 is not valid (left unmapped). [ 32.218929][ T471] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 32.369951][ T471] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 32.394853][ T471] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 32.406841][ T471] usb 3-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.80 [ 32.416346][ T471] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 32.428027][ T471] usb 3-1: config 0 descriptor?? [ 32.508415][ T857] rust_binder: 852:857 got reply transaction with no transaction stack [ 32.516766][ T857] rust_binder: 852:857 transaction reply to 0:0 failed EINVAL, code 0 size 0-0 [ 32.698960][ T45] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 32.838345][ T471] cp2112 0003:10C4:EA90.0006: unknown main item tag 0x0 [ 32.845364][ T471] cp2112 0003:10C4:EA90.0006: item fetching failed at offset 1/7 [ 32.851374][ T45] usb 4-1: New USB device found, idVendor=0bda, idProduct=8150, bcdDevice= 0.00 [ 32.853555][ T471] cp2112 0003:10C4:EA90.0006: parse failed [ 32.862183][ T45] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 32.868150][ T471] cp2112 0003:10C4:EA90.0006: probe with driver cp2112 failed with error -22 [ 32.875981][ T45] usb 4-1: Product: syz [ 32.888975][ T45] usb 4-1: Manufacturer: syz [ 32.893567][ T45] usb 4-1: SerialNumber: syz [ 33.065723][ T686] usb 3-1: USB disconnect, device number 4 [ 33.289279][ T686] rust_binder: 852: undelivered TRANSACTION_ERROR: 29201 [ 33.351684][ T870] netlink: 72 bytes leftover after parsing attributes in process `syz.1.262'. [ 33.469003][ T686] af_packet: tpacket_rcv: packet too big, clamped from 94 to 4294967286. macoff=82 [ 33.520054][ T45] rtl8150 4-1:1.0: couldn't reset the device [ 33.526121][ T45] rtl8150 4-1:1.0: probe with driver rtl8150 failed with error -5 [ 33.535888][ T45] usb 4-1: USB disconnect, device number 5 ? [ 33.860140][ T930] MTRR 1 not used [ 33.883383][ T936] netlink: 1319 bytes leftover after parsing attributes in process `syz.1.285'. [ 33.946692][ T947] input: syz1 as /devices/virtual/input/input10 [ 33.953125][ T947] input: failed to attach handler leds to device input10, error: -6 [ 33.997044][ T45] kernel write not supported for file /input/event2 (pid: 45 comm: kworker/1:1) [ 34.084563][ T966] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 34.267523][ T987] input: syz1 as /devices/virtual/input/input11 [ 34.348972][ T9] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 34.368917][ T471] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 34.499922][ T9] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 1040, setting to 1024 [ 34.511096][ T9] usb 1-1: config 1 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 1024 [ 34.521306][ T9] usb 1-1: config 1 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 18 [ 34.535008][ T9] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 34.544084][ T9] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 34.552099][ T471] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 253, changing to 11 [ 34.563231][ T9] usb 1-1: SerialNumber: syz [ 34.568076][ T471] usb 4-1: New USB device found, idVendor=046d, idProduct=c262, bcdDevice= 0.00 [ 34.577602][ T971] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 34.577627][ T471] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 34.593861][ T471] usb 4-1: config 0 descriptor?? [ 34.775348][ T619] tipc: Subscription rejected, illegal request [ 34.794425][ T971] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 35.002276][ T471] logitech-hidpp-device 0003:046D:C262.0007: unknown main item tag 0x0 [ 35.010649][ T471] logitech-hidpp-device 0003:046D:C262.0007: unknown main item tag 0x0 [ 35.019029][ T471] logitech-hidpp-device 0003:046D:C262.0007: unknown main item tag 0x0 [ 35.027395][ T471] logitech-hidpp-device 0003:046D:C262.0007: unknown main item tag 0x0 [ 35.035710][ T471] logitech-hidpp-device 0003:046D:C262.0007: unknown main item tag 0x0 [ 35.050001][ T471] logitech-hidpp-device 0003:046D:C262.0007: unknown main item tag 0x0 [ 35.058968][ T471] logitech-hidpp-device 0003:046D:C262.0007: unknown main item tag 0x0 [ 35.067244][ T471] logitech-hidpp-device 0003:046D:C262.0007: unknown main item tag 0x0 [ 35.075548][ T471] logitech-hidpp-device 0003:046D:C262.0007: unknown main item tag 0x0 [ 35.084066][ T471] logitech-hidpp-device 0003:046D:C262.0007: unknown main item tag 0x0 [ 35.092460][ T471] logitech-hidpp-device 0003:046D:C262.0007: unknown main item tag 0x0 [ 35.101005][ T471] logitech-hidpp-device 0003:046D:C262.0007: unknown main item tag 0x0 [ 35.109420][ T471] logitech-hidpp-device 0003:046D:C262.0007: unknown main item tag 0x0 [ 35.119941][ T471] logitech-hidpp-device 0003:046D:C262.0007: unknown main item tag 0x0 [ 35.128909][ T471] logitech-hidpp-device 0003:046D:C262.0007: unknown main item tag 0x0 [ 35.137168][ T471] logitech-hidpp-device 0003:046D:C262.0007: unknown main item tag 0x0 [ 35.146324][ T471] logitech-hidpp-device 0003:046D:C262.0007: unknown main item tag 0x0 [ 35.155602][ T471] logitech-hidpp-device 0003:046D:C262.0007: unknown main item tag 0x0 [ 35.164005][ T471] logitech-hidpp-device 0003:046D:C262.0007: unknown main item tag 0x0 [ 35.172474][ T471] logitech-hidpp-device 0003:046D:C262.0007: unknown main item tag 0x0 [ 35.180602][ T1006] option changes via remount are deprecated (pid=1005 comm=syz.1.318) [ 35.180922][ T471] logitech-hidpp-device 0003:046D:C262.0007: unknown main item tag 0x0 [ 35.197491][ T471] logitech-hidpp-device 0003:046D:C262.0007: unknown main item tag 0x0 [ 35.206582][ T471] logitech-hidpp-device 0003:046D:C262.0007: unknown main item tag 0x0 [ 35.214895][ T471] logitech-hidpp-device 0003:046D:C262.0007: unknown main item tag 0x0 [ 35.225180][ T9] cdc_ether 1-1:1.0 usb0: register 'cdc_ether' at usb-dummy_hcd.0-1, CDC Ethernet Device, 42:42:42:42:42:42 [ 35.237218][ T471] logitech-hidpp-device 0003:046D:C262.0007: hidraw0: USB HID v0.03 Device [HID 046d:c262] on usb-dummy_hcd.3-1/input0 [ 35.253070][ T471] usb 4-1: USB disconnect, device number 6 [ 35.429818][ T1008] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input12 [ 35.487760][ T471] usb 1-1: USB disconnect, device number 4 [ 35.501078][ T1026] netlink: 64 bytes leftover after parsing attributes in process `syz.1.320'. [ 35.512759][ T471] cdc_ether 1-1:1.0 usb0: unregister 'cdc_ether' usb-dummy_hcd.0-1, CDC Ethernet Device [ 35.665854][ T36] kauditd_printk_skb: 124 callbacks suppressed [ 35.665871][ T36] audit: type=1400 audit(1787950661.344:347): avc: denied { setopt } for pid=1056 comm="syz.2.327" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 35.693838][ T36] audit: type=1400 audit(1787950661.374:348): avc: denied { getopt } for pid=1056 comm="syz.2.327" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 35.758900][ T45] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 35.798890][ T36] audit: type=1400 audit(1787950661.474:349): avc: denied { bind } for pid=1077 comm="syz.2.333" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 35.850229][ T36] audit: type=1400 audit(1787950661.474:350): avc: denied { listen } for pid=1077 comm="syz.2.333" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 35.875464][ T36] audit: type=1400 audit(1787950661.474:351): avc: denied { getopt } for pid=1077 comm="syz.2.333" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 35.900717][ T36] audit: type=1400 audit(1787950661.524:352): avc: denied { map } for pid=1086 comm="syz.2.337" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=8355 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 35.924708][ T36] audit: type=1400 audit(1787950661.524:353): avc: denied { read write } for pid=1086 comm="syz.2.337" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=8355 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 35.928961][ T45] usb 2-1: Using ep0 maxpacket: 8 [ 35.951067][ T36] audit: type=1400 audit(1787950661.554:354): avc: denied { sqpoll } for pid=1088 comm="syz.3.338" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 35.995101][ T45] usb 2-1: config 0 interface 0 altsetting 5 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 36.008958][ T45] usb 2-1: config 0 interface 0 altsetting 5 endpoint 0x81 has invalid maxpacket 1040, setting to 1024 [ 36.020421][ T45] usb 2-1: config 0 interface 0 altsetting 5 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 36.040785][ T45] usb 2-1: config 0 interface 0 has no altsetting 0 [ 36.047624][ T45] usb 2-1: New USB device found, idVendor=1b96, idProduct=000a, bcdDevice= 0.00 [ 36.064730][ T45] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 36.080579][ T45] usb 2-1: config 0 descriptor?? [ 36.086291][ T1028] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 36.140705][ T36] audit: type=1400 audit(1787950661.824:355): avc: denied { execmem } for pid=1110 comm="syz.2.348" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 36.172230][ T36] audit: type=1400 audit(1787950661.854:356): avc: denied { read } for pid=1115 comm="syz.3.351" name="control" dev="devtmpfs" ino=198 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:lvm_control_t tclass=chr_file permissive=1 [ 36.230158][ T1127] device-mapper: ioctl: device name cannot contain '/' [ 36.441976][ T686] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 36.505384][ T45] input: HID 1b96:000a as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/0003:1B96:000A.0008/input/input13 [ 36.527363][ T45] ntrig 0003:1B96:000A.0008: input,hidraw0: USB HID v0.00 Joystick [HID 1b96:000a] on usb-dummy_hcd.1-1/input0 [ 36.620251][ T686] usb 4-1: unable to get BOS descriptor or descriptor too short [ 36.630163][ T686] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 36.640354][ T686] usb 4-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 36.651021][ T686] usb 4-1: too many endpoints for config 1 interface 1 altsetting 76: 188, using maximum allowed: 30 [ 36.662092][ T686] usb 4-1: config 1 interface 1 altsetting 76 has 0 endpoint descriptors, different from the interface descriptor's value: 188 [ 36.675431][ T686] usb 4-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 0, changing to 7 [ 36.686407][ T686] usb 4-1: config 1 interface 1 has no altsetting 0 [ 36.695132][ T686] usb 4-1: string descriptor 0 read error: -22 [ 36.701491][ T45] ntrig 0003:1B96:000A.0008: Firmware version: 0.10.28.39.1 (eb00 e98c) [ 36.709930][ T686] usb 4-1: New USB device found, idVendor=21b4, idProduct=0081, bcdDevice= 0.40 [ 36.720004][ T686] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 36.930152][ T471] usb 2-1: USB disconnect, device number 5 [ 36.933633][ T686] usb 4-1: 2:0: failed to get current value for ch 0 (-32) [ 37.144985][ T686] usb 4-1: 2:0: cannot get min/max values for control 2 (id 2) [ 37.155137][ T686] usb 4-1: USB disconnect, device number 7 [ 37.587574][ T1237] overlayfs: conflicting lowerdir path [ 37.599555][ T1237] overlayfs: overlay with incompat feature 'volatile' cannot be mounted [ 38.170743][ T1304] device-mapper: ioctl: ioctl interface mismatch: kernel(4.48.0), user(0.0.0), cmd(5) [ 38.279348][ T471] usb 3-1: new full-speed USB device number 5 using dummy_hcd [ 38.430124][ T471] usb 3-1: config 0 interface 0 altsetting 13 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 38.443068][ T471] usb 3-1: config 0 interface 0 has no altsetting 0 [ 38.449675][ T471] usb 3-1: New USB device found, idVendor=1e7d, idProduct=3232, bcdDevice= 0.00 [ 38.458724][ T471] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 38.469063][ T471] usb 3-1: config 0 descriptor?? [ 38.558901][ T9] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 38.701778][ T576] hid-generic 0000:0000:0001.0009: unknown main item tag 0x0 [ 38.711846][ T576] hid-generic 0000:0000:0001.0009: unknown main item tag 0x0 [ 38.719743][ T576] hid-generic 0000:0000:0001.0009: unknown main item tag 0x0 [ 38.727377][ T576] hid-generic 0000:0000:0001.0009: unknown main item tag 0x0 [ 38.735177][ T576] hid-generic 0000:0000:0001.0009: unknown main item tag 0x0 [ 38.744118][ T9] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 38.756175][ T576] hid-generic 0000:0000:0001.0009: unknown main item tag 0x0 [ 38.764211][ T9] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 38.777198][ T576] hid-generic 0000:0000:0001.0009: unknown main item tag 0x0 [ 38.785442][ T576] hid-generic 0000:0000:0001.0009: unknown main item tag 0x0 [ 38.793005][ T9] usb 4-1: New USB device found, idVendor=17ef, idProduct=6085, bcdDevice= 0.00 [ 38.798719][ T1336] device-mapper: ioctl: dm_ctl_ioctl: unknown command 0xc138fd30 [ 38.802751][ T9] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 38.825979][ T576] hid-generic 0000:0000:0001.0009: hidraw0: HID v0.10 Device [syz0] on syz1 [ 38.836409][ T9] usb 4-1: config 0 descriptor?? [ 38.851024][ T1337] fido_id[1337]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 38.878234][ T471] ryos 0003:1E7D:3232.000A: unknown main item tag 0x0 [ 38.891815][ T471] ryos 0003:1E7D:3232.000A: unknown main item tag 0x0 [ 38.898726][ T471] ryos 0003:1E7D:3232.000A: unknown main item tag 0x0 [ 38.910440][ T471] ryos 0003:1E7D:3232.000A: unknown main item tag 0x0 [ 38.918487][ T471] ryos 0003:1E7D:3232.000A: unknown main item tag 0x0 [ 38.932861][ T471] ryos 0003:1E7D:3232.000A: unknown main item tag 0x0 [ 38.949035][ T471] ryos 0003:1E7D:3232.000A: hidraw0: USB HID v10.01 Device [HID 1e7d:3232] on usb-dummy_hcd.2-1/input0 [ 39.084110][ T471] usb 3-1: USB disconnect, device number 5 [ 39.178901][ T576] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 39.246168][ T9] input: HID 17ef:6085 as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/0003:17EF:6085.000B/input/input15 [ 39.259131][ T9] hid-rmi 0003:17EF:6085.000B: input,hidraw0: USB HID v20.00 Joystick [HID 17ef:6085] on usb-dummy_hcd.3-1/input0 [ 39.328900][ T576] usb 1-1: Using ep0 maxpacket: 32 [ 39.335068][ T576] usb 1-1: config 0 has an invalid interface number: 184 but max is 0 [ 39.343250][ T576] usb 1-1: config 0 has no interface number 0 [ 39.349344][ T576] usb 1-1: config 0 interface 184 has no altsetting 0 [ 39.357455][ T576] usb 1-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 39.366504][ T576] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 39.374502][ T576] usb 1-1: Product: syz [ 39.378655][ T576] usb 1-1: Manufacturer: syz [ 39.383422][ T576] usb 1-1: SerialNumber: syz [ 39.388675][ T576] usb 1-1: config 0 descriptor?? [ 39.394626][ T576] smsc75xx v1.0.0 [ 39.438943][ T10] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 39.457633][ T9] usb 4-1: USB disconnect, device number 8 [ 39.599074][ T10] usb 2-1: Using ep0 maxpacket: 16 [ 39.612735][ T10] usb 2-1: New USB device found, idVendor=000f, idProduct=0000, bcdDevice= 0.40 [ 39.622427][ T10] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 39.630690][ T10] usb 2-1: Product: syz [ 39.634925][ T10] usb 2-1: Manufacturer: syz [ 39.639542][ T10] usb 2-1: SerialNumber: syz [ 39.723682][ T1377] netlink: 1335 bytes leftover after parsing attributes in process `syz.2.474'. [ 40.111352][ T1400] rust_binder: 1399:1400 got transaction to invalid handle 3 [ 40.118790][ T1400] rust_binder: 1399:1400 transaction call to 0:0 failed ENOENT, code 0 size 61695-0 [ 40.129668][ T686] rust_binder: 1399: undelivered TRANSACTION_ERROR: 29201 [ 40.204313][ T576] smsc75xx 1-1:0.184 (unnamed net_device) (uninitialized): Failed to write reg index 0x00000040: -71 [ 40.217690][ T576] smsc75xx 1-1:0.184 (unnamed net_device) (uninitialized): Error writing E2P_CMD [ 40.228378][ T576] smsc75xx 1-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -71 [ 40.239403][ T576] smsc75xx 1-1:0.184 (unnamed net_device) (uninitialized): Failed to read PMT_CTL: -71 [ 40.249389][ T576] smsc75xx 1-1:0.184 (unnamed net_device) (uninitialized): device not ready in smsc75xx_reset [ 40.260016][ T576] smsc75xx 1-1:0.184 (unnamed net_device) (uninitialized): smsc75xx_reset error -71 [ 40.270469][ T576] smsc75xx 1-1:0.184: probe with driver smsc75xx failed with error -71 [ 40.278877][ T10] usb 2-1: MIDIStreaming interface descriptor not found [ 40.288782][ T576] usb 1-1: USB disconnect, device number 5 [ 40.298669][ T10] usb 2-1: USB disconnect, device number 6 [ 40.302053][ T1421] 9pnet: Limiting 'msize' to 1048576 as this is the maximum supported by transport fd [ 40.341844][ T311] udevd[311]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 40.554531][ T1453] rust_binder: Failure in copy_transaction_data: EINVAL [ 40.554568][ T1453] rust_binder: 1452:1453 transaction call to 1452:0 failed EINVAL, code 0 size 0-249 [ 40.572323][ T576] rust_binder: 1452: undelivered TRANSACTION_ERROR: 29201 [ 40.750426][ T36] kauditd_printk_skb: 44 callbacks suppressed [ 40.750443][ T36] audit: type=1400 audit(1787950666.434:401): avc: denied { read write } for pid=1466 comm="syz.0.518" name="vga_arbiter" dev="devtmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1 [ 40.781241][ T36] audit: type=1400 audit(1787950666.434:402): avc: denied { open } for pid=1466 comm="syz.0.518" path="/dev/vga_arbiter" dev="devtmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1 [ 40.831363][ T1475] capability: warning: `syz.1.523' uses 32-bit capabilities (legacy support in use) [ 40.880655][ T36] audit: type=1400 audit(1787950666.564:403): avc: denied { append } for pid=1484 comm="syz.1.526" name="kmsg" dev="devtmpfs" ino=9 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kmsg_device_t tclass=chr_file permissive=1 [ 40.880831][ T1485] [ 40.961231][ T36] audit: type=1400 audit(1787950666.644:404): avc: denied { map } for pid=1488 comm="syz.0.529" path="/85/tracing/per_cpu/cpu0/trace_pipe_raw" dev="tracefs" ino=1105 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=file permissive=1 [ 41.075164][ T36] audit: type=1400 audit(1787950666.754:405): avc: denied { create } for pid=1500 comm="syz.0.535" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 41.140725][ T36] audit: type=1400 audit(1787950666.814:406): avc: denied { mount } for pid=1508 comm="syz.2.539" name="/" dev="tmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 41.280932][ T1531] program syz.3.549 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 41.370230][ T1551] SELinux: policydb version 1180827720 does not match my version range 15-33 [ 41.371983][ T36] audit: type=1400 audit(1787950667.054:407): avc: denied { load_policy } for pid=1549 comm="syz.2.559" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security permissive=1 [ 41.379140][ T1551] SELinux: failed to load policy [ 41.409708][ T1550] SELinux: ebitmap: truncated map [ 41.414754][ T1550] SELinux: failed to load policy [ 41.453117][ T1559] netlink: 12 bytes leftover after parsing attributes in process `syz.0.563'. [ 41.503671][ T1567] netlink: 16 bytes leftover after parsing attributes in process `syz.0.568'. [ 41.528935][ T686] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 41.593252][ T1573] input: syz0 as /devices/virtual/input/input17 [ 41.679900][ T686] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 41.691036][ T686] usb 2-1: config 1 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 41.702632][ T686] usb 2-1: New USB device found, idVendor=04e6, idProduct=0005, bcdDevice= 1.00 [ 41.714281][ T686] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 41.722695][ T686] usb 2-1: Product: syz [ 41.727310][ T12] EXT4-fs error (device sda1): ext4_validate_block_bitmap:423: comm kworker/u8:0: bg 1: bad block bitmap checksum [ 41.743060][ T686] usb 2-1: Manufacturer: syz [ 41.747661][ T686] usb 2-1: SerialNumber: syz [ 41.752387][ T12] EXT4-fs (sda1): Delayed block allocation failed for inode 2019 at logical offset 0 with max blocks 1 with error 74 [ 41.765267][ T12] EXT4-fs (sda1): This should not happen!! Data will be lost [ 41.765267][ T12] [ 41.776007][ T686] ums-sddr09 2-1:1.0: USB Mass Storage device detected [ 41.784320][ T686] ums-sddr09 2-1:1.0: This device (04e6,0005,0100 S 06 P 50) has an unneeded SubClass entry in unusual_devs.h (kernel syzkaller) [ 41.784320][ T686] Please send a copy of this message to and [ 41.877937][ T36] audit: type=1400 audit(1787950667.554:408): avc: denied { read write } for pid=1602 comm="syz.2.583" name="rtc0" dev="devtmpfs" ino=195 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 41.919138][ T36] audit: type=1400 audit(1787950667.554:409): avc: denied { open } for pid=1602 comm="syz.2.583" path="/dev/rtc0" dev="devtmpfs" ino=195 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 41.992952][ T1609] netlink: 20 bytes leftover after parsing attributes in process `syz.0.587'. [ 42.216082][ T686] ums-sddr09 2-1:1.0: probe with driver ums-sddr09 failed with error -32 [ 42.227248][ T36] audit: type=1400 audit(1787950667.894:410): avc: denied { setopt } for pid=1629 comm="syz.2.596" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 42.250167][ T686] usb 2-1: USB disconnect, device number 7 [ 42.909437][ T12] EXT4-fs error (device sda1): ext4_validate_block_bitmap:423: comm kworker/u8:0: bg 3: bad block bitmap checksum [ 42.921597][ T12] EXT4-fs (sda1): Delayed block allocation failed for inode 2021 at logical offset 0 with max blocks 1024 with error 74 [ 42.934395][ T12] EXT4-fs (sda1): This should not happen!! Data will be lost [ 42.934395][ T12] [ 42.955477][ T12] EXT4-fs error (device sda1): ext4_validate_block_bitmap:423: comm kworker/u8:0: bg 4: bad block bitmap checksum [ 42.968427][ T12] EXT4-fs (sda1): Delayed block allocation failed for inode 2022 at logical offset 0 with max blocks 1 with error 74 [ 42.980732][ T12] EXT4-fs (sda1): This should not happen!! Data will be lost [ 42.980732][ T12] [ 42.990371][ T471] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 42.998636][ T12] EXT4-fs error (device sda1): ext4_validate_block_bitmap:423: comm kworker/u8:0: bg 5: bad block bitmap checksum [ 43.010727][ T12] EXT4-fs (sda1): Delayed block allocation failed for inode 2027 at logical offset 0 with max blocks 3 with error 74 [ 43.023009][ T12] EXT4-fs (sda1): This should not happen!! Data will be lost [ 43.023009][ T12] [ 43.037028][ T12] EXT4-fs error (device sda1): ext4_validate_block_bitmap:423: comm kworker/u8:0: bg 2: bad block bitmap checksum [ 43.049126][ T12] EXT4-fs (sda1): Delayed block allocation failed for inode 2021 at logical offset 1024 with max blocks 120 with error 74 [ 43.064660][ T12] EXT4-fs (sda1): This should not happen!! Data will be lost [ 43.064660][ T12] [ 43.119749][ T686] usb 4-1: new high-speed USB device number 9 using dummy_hcd [ 43.138888][ T471] usb 3-1: Using ep0 maxpacket: 8 [ 43.145013][ T471] usb 3-1: config 179 has an invalid interface number: 65 but max is 0 [ 43.158879][ T471] usb 3-1: config 179 has no interface number 0 [ 43.165158][ T471] usb 3-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 43.188880][ T471] usb 3-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024 [ 43.218880][ T471] usb 3-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 43.238876][ T471] usb 3-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 41728, setting to 1024 [ 43.250336][ T471] usb 3-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 43.263562][ T471] usb 3-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 43.272624][ T471] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 43.281587][ T1653] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 43.296766][ T686] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 43.337367][ T686] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 43.368952][ T686] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 SYZFAIL: SIGSEGV pc-offset:0xfffffffffffd75f2 pc:0x7fa11bc7bf3e addr:0x1 code=1 (errno 11: Resource temporarily unavailable) [ 43.384445][ T686] usb 4-1: New USB device found, idVendor=1770, idProduct=ff00, bcdDevice= 0.00 [ 43.401507][ T686] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 43.410304][ T12] bridge_slave_1: left allmulticast mode [ 43.416279][ T12] bridge_slave_1: left promiscuous mode [ 43.436286][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 43.452993][ T12] bridge_slave_0: left allmulticast mode [ 43.458691][ T12] bridge_slave_0: left promiscuous mode [ 43.469329][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 43.476850][ T686] usb 4-1: config 0 descriptor?? [ 43.491607][ T686] usb 4-1: can't set config #0, error -71 [ 43.529589][ T686] usb 4-1: USB disconnect, device number 9 [ 43.631482][ T12] veth1_macvtap: left promiscuous mode [ 43.636985][ T12] veth0_vlan: left promiscuous mode [ 43.671281][ T45] usb 3-1: USB disconnect, device number 6 [ 43.671394][ C0] xpad 3-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19 [ 43.685379][ C0] dummy_hcd dummy_hcd.2: timer fired with no URBs pending? [ 43.911256][ T12] bridge_slave_1: left allmulticast mode [ 43.916916][ T12] bridge_slave_1: left promiscuous mode [ 43.922528][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 43.929975][ T12] bridge_slave_0: left allmulticast mode [ 43.935592][ T12] bridge_slave_0: left promiscuous mode [ 43.941244][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 43.948742][ T12] bridge_slave_1: left allmulticast mode [ 43.954547][ T12] bridge_slave_1: left promiscuous mode [ 43.960160][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 43.967472][ T12] bridge_slave_0: left allmulticast mode [ 43.973137][ T12] bridge_slave_0: left promiscuous mode [ 43.978705][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 43.986223][ T12] bridge_slave_1: left allmulticast mode [ 43.991860][ T12] bridge_slave_1: left promiscuous mode [ 43.997413][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 44.004796][ T12] bridge_slave_0: left allmulticast mode [ 44.010481][ T12] bridge_slave_0: left promiscuous mode [ 44.016036][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 44.203094][ T12] veth1_macvtap: left promiscuous mode [ 44.208579][ T12] veth0_vlan: left promiscuous mode [ 44.214095][ T12] veth1_macvtap: left promiscuous mode [ 44.219606][ T12] veth0_vlan: left promiscuous mode [ 44.225022][ T12] veth1_macvtap: left promiscuous mode [ 44.230522][ T12] veth0_vlan: left promiscuous mode [ 44.700895][ T12] ------------[ cut here ]------------ [ 44.706367][ T12] WARNING: CPU: 1 PID: 12 at net/ipv6/xfrm6_tunnel.c:341 xfrm6_tunnel_net_exit+0xc4/0x140 [ 44.716276][ T12] Modules linked in: [ 44.720206][ T12] CPU: 1 UID: 0 PID: 12 Comm: kworker/u8:0 Not tainted syzkaller #0 28bb5670a1b4a83370a1b0f1e6655e31af14d592 [ 44.731751][ T12] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 44.741813][ T12] Workqueue: netns cleanup_net [ 44.746580][ T12] RIP: 0010:xfrm6_tunnel_net_exit+0xc4/0x140 [ 44.752569][ T12] Code: e8 61 e3 d5 fc 4b 83 3c 3e 00 75 19 e8 e5 08 7d fc 49 81 ff f8 07 00 00 74 1b e8 d7 08 7d fc 49 83 c7 08 eb c9 e8 cc 08 7d fc <0f> 0b 49 81 ff f8 07 00 00 75 e5 49 8d 9e 00 08 00 00 45 31 ff 4a [ 44.772185][ T12] RSP: 0018:ffffc900000c7b90 EFLAGS: 00010293 [ 44.778246][ T12] RAX: ffffffff850a6874 RBX: ffff88810471d8c0 RCX: ffff888102655f00 [ 44.786220][ T12] RDX: 0000000000000000 RSI: 0000000000c00000 RDI: ffff888104b5c000 [ 44.794196][ T12] RBP: ffffc900000c7bb0 R08: ffffffff87d43407 R09: 1ffffffff0fa8680 [ 44.802161][ T12] R10: dffffc0000000000 R11: fffffbfff0fa8681 R12: dffffc0000000000 [ 44.810146][ T12] R13: dffffc0000000000 R14: ffff888104b5c000 R15: 0000000000000000 [ 44.818099][ T12] FS: 0000000000000000(0000) GS:ffff8881f6f00000(0000) knlGS:0000000000000000 [ 44.827043][ T12] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 44.833651][ T12] CR2: 00007f60faca0668 CR3: 00000000074aa000 CR4: 00000000003526b0 [ 44.841624][ T12] Call Trace: [ 44.844893][ T12] [ 44.847800][ T12] cleanup_net+0x6ba/0xc90 [ 44.852217][ T12] ? __cfi_cleanup_net+0x10/0x10 [ 44.857150][ T12] ? kick_pool+0xb9/0x540 [ 44.861497][ T12] process_scheduled_works+0x7f4/0x1060 [ 44.867055][ T12] worker_thread+0xc99/0x13f0 [ 44.871739][ T12] kthread+0x2c4/0x360 [ 44.875805][ T12] ? __cfi_worker_thread+0x10/0x10 [ 44.880927][ T12] ? __cfi_kthread+0x10/0x10 [ 44.885539][ T12] ret_from_fork+0x64/0xa0 [ 44.889960][ T12] ? __cfi_kthread+0x10/0x10 [ 44.894552][ T12] ret_from_fork_asm+0x1a/0x30 [ 44.899331][ T12] [ 44.902341][ T12] ---[ end trace 0000000000000000 ]--- [ 44.907880][ T12] ------------[ cut here ]------------ [ 44.913343][ T12] WARNING: CPU: 1 PID: 12 at net/ipv6/xfrm6_tunnel.c:344 xfrm6_tunnel_net_exit+0x119/0x140 [ 44.923348][ T12] Modules linked in: [ 44.927232][ T12] CPU: 1 UID: 0 PID: 12 Comm: kworker/u8:0 Tainted: G W syzkaller #0 28bb5670a1b4a83370a1b0f1e6655e31af14d592 [ 44.940258][ T12] Tainted: [W]=WARN [ 44.944056][ T12] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 44.954119][ T12] Workqueue: netns cleanup_net [ 44.958908][ T12] RIP: 0010:xfrm6_tunnel_net_exit+0x119/0x140 [ 44.964961][ T12] Code: fc 4b 83 bc 3e 00 08 00 00 00 75 19 e8 90 08 7d fc 49 81 ff f8 07 00 00 74 1b e8 82 08 7d fc 49 83 c7 08 eb c5 e8 77 08 7d fc <0f> 0b 49 81 ff f8 07 00 00 75 e5 e8 67 08 7d fc 5b 41 5c 41 5e 41 [ 44.984565][ T12] RSP: 0018:ffffc900000c7b90 EFLAGS: 00010293 [ 44.990651][ T12] RAX: ffffffff850a68c9 RBX: ffff888104b5c800 RCX: ffff888102655f00 [ 44.998609][ T12] RDX: 0000000000000000 RSI: 0000000000c00000 RDI: ffff888104b5c818 [ 45.006611][ T12] RBP: ffffc900000c7bb0 R08: ffffffff87d43407 R09: 1ffffffff0fa8680 [ 45.014602][ T12] R10: dffffc0000000000 R11: fffffbfff0fa8681 R12: dffffc0000000000 [ 45.022585][ T12] R13: dffffc0000000000 R14: ffff888104b5c000 R15: 0000000000000018 [ 45.030568][ T12] FS: 0000000000000000(0000) GS:ffff8881f6f00000(0000) knlGS:0000000000000000 [ 45.039522][ T12] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 45.046096][ T12] CR2: 00007f60faca0668 CR3: 00000000074aa000 CR4: 00000000003526b0 [ 45.054079][ T12] Call Trace: [ 45.057345][ T12] [ 45.060279][ T12] cleanup_net+0x6ba/0xc90 [ 45.064728][ T12] ? __cfi_cleanup_net+0x10/0x10 [ 45.069670][ T12] ? kick_pool+0xb9/0x540 [ 45.073998][ T12] process_scheduled_works+0x7f4/0x1060 [ 45.079546][ T12] worker_thread+0xc99/0x13f0 [ 45.084219][ T12] kthread+0x2c4/0x360 [ 45.088267][ T12] ? __cfi_worker_thread+0x10/0x10 [ 45.093375][ T12] ? __cfi_kthread+0x10/0x10 [ 45.097964][ T12] ret_from_fork+0x64/0xa0 [ 45.102381][ T12] ? __cfi_kthread+0x10/0x10 [ 45.106965][ T12] ret_from_fork_asm+0x1a/0x30 [ 45.111728][ T12] [ 45.114736][ T12] ---[ end trace 0000000000000000 ]--- [ 45.126025][ T12] ------------[ cut here ]------------ [ 45.131491][ T12] WARNING: CPU: 1 PID: 12 at net/xfrm/xfrm_state.c:3217 xfrm_state_fini+0x2be/0x310 [ 45.140867][ T12] Modules linked in: [ 45.144751][ T12] CPU: 1 UID: 0 PID: 12 Comm: kworker/u8:0 Tainted: G W syzkaller #0 28bb5670a1b4a83370a1b0f1e6655e31af14d592 [ 45.157783][ T12] Tainted: [W]=WARN [ 45.161603][ T12] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 45.171665][ T12] Workqueue: netns cleanup_net [ 45.176424][ T12] RIP: 0010:xfrm_state_fini+0x2be/0x310 [ 45.181992][ T12] Code: 3c 20 00 74 08 48 89 df e8 7f a1 f0 fc 48 8b 3b e8 97 92 db fc 5b 41 5c 41 5d 41 5e 41 5f 5d e9 18 97 b7 00 cc e8 f2 c6 97 fc <0f> 0b e9 b0 fd ff ff e8 e6 c6 97 fc 0f 0b e9 18 fe ff ff e8 da c6 [ 45.201617][ T12] RSP: 0018:ffffc900000c7b70 EFLAGS: 00010293 [ 45.207673][ T12] RAX: ffffffff84efaa4e RBX: ffff88810471d8c0 RCX: ffff888102655f00 [ 45.215649][ T12] RDX: 0000000000000000 RSI: 0000000000c00000 RDI: ffff888102655f00 [ 45.223639][ T12] RBP: ffffc900000c7b98 R08: ffffffff87d43407 R09: 1ffffffff0fa8680 [ 45.231621][ T12] R10: dffffc0000000000 R11: fffffbfff0fa8681 R12: 1ffffffff0fa83d4 [ 45.239603][ T12] R13: dffffc0000000000 R14: ffff88810471e4c0 R15: dffffc0000000000 [ 45.247581][ T12] FS: 0000000000000000(0000) GS:ffff8881f6f00000(0000) knlGS:0000000000000000 [ 45.256511][ T12] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 45.263103][ T12] CR2: 00007f60faca0668 CR3: 00000000074aa000 CR4: 00000000003526b0 [ 45.271098][ T12] Call Trace: [ 45.274366][ T12] [ 45.277274][ T12] xfrm_net_exit+0x31/0x80 [ 45.281701][ T12] cleanup_net+0x6ba/0xc90 [ 45.286113][ T12] ? __cfi_cleanup_net+0x10/0x10 [ 45.291052][ T12] ? kick_pool+0xb9/0x540 [ 45.295378][ T12] process_scheduled_works+0x7f4/0x1060 [ 45.300929][ T12] worker_thread+0xc99/0x13f0 [ 45.305598][ T12] kthread+0x2c4/0x360 [ 45.309668][ T12] ? __cfi_worker_thread+0x10/0x10 [ 45.314794][ T12] ? __cfi_kthread+0x10/0x10 [ 45.319384][ T12] ret_from_fork+0x64/0xa0 [ 45.323800][ T12] ? __cfi_kthread+0x10/0x10 [ 45.328367][ T12] ret_from_fork_asm+0x1a/0x30 [ 45.333138][ T12] [ 45.336146][ T12] ---[ end trace 0000000000000000 ]--- [ 45.341768][ T12] ------------[ cut here ]------------ [ 45.347204][ T12] WARNING: CPU: 1 PID: 12 at net/xfrm/xfrm_state.c:3224 xfrm_state_fini+0x2e2/0x310 [ 45.356583][ T12] Modules linked in: [ 45.360516][ T12] CPU: 1 UID: 0 PID: 12 Comm: kworker/u8:0 Tainted: G W syzkaller #0 28bb5670a1b4a83370a1b0f1e6655e31af14d592 [ 45.373537][ T12] Tainted: [W]=WARN [ 45.377330][ T12] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 45.387394][ T12] Workqueue: netns cleanup_net [ 45.392178][ T12] RIP: 0010:xfrm_state_fini+0x2e2/0x310 [ 45.397712][ T12] Code: cc e8 f2 c6 97 fc 0f 0b e9 b0 fd ff ff e8 e6 c6 97 fc 0f 0b e9 18 fe ff ff e8 da c6 97 fc 0f 0b e9 8c fe ff ff e8 ce c6 97 fc <0f> 0b e9 f9 fe ff ff e8 c2 c6 97 fc 0f 0b e9 66 ff ff ff 89 f9 80 [ 45.417316][ T12] RSP: 0018:ffffc900000c7b70 EFLAGS: 00010293 [ 45.423400][ T12] RAX: ffffffff84efaa72 RBX: ffff88810471d8c0 RCX: ffff888102655f00 [ 45.431382][ T12] RDX: 0000000000000000 RSI: ffff8881042b0600 RDI: ffff8881000418c0 [ 45.439367][ T12] RBP: ffffc900000c7b98 R08: 00000000c896a5ba R09: 000000008aa943fd [ 45.447344][ T12] R10: 000000000000000d R11: ffffffff81759fc0 R12: ffff8881042b0a00 [ 45.455308][ T12] R13: 1ffff110208e3c9b R14: 0000000000000040 R15: ffff88810471e4d8 [ 45.463292][ T12] FS: 0000000000000000(0000) GS:ffff8881f6f00000(0000) knlGS:0000000000000000 [ 45.472227][ T12] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 45.478808][ T12] CR2: 00007f60faca0668 CR3: 00000000074aa000 CR4: 00000000003526b0 [ 45.486798][ T12] Call Trace: [ 45.490094][ T12] [ 45.493010][ T12] xfrm_net_exit+0x31/0x80 [ 45.497405][ T12] cleanup_net+0x6ba/0xc90 [ 45.501842][ T12] ? __cfi_cleanup_net+0x10/0x10 [ 45.506775][ T12] ? kick_pool+0xb9/0x540 [ 45.511105][ T12] process_scheduled_works+0x7f4/0x1060 [ 45.516646][ T12] worker_thread+0xc99/0x13f0 [ 45.521343][ T12] kthread+0x2c4/0x360 [ 45.525407][ T12] ? __cfi_worker_thread+0x10/0x10 [ 45.530520][ T12] ? __cfi_kthread+0x10/0x10 [ 45.535107][ T12] ret_from_fork+0x64/0xa0 [ 45.539531][ T12] ? __cfi_kthread+0x10/0x10 [ 45.544116][ T12] ret_from_fork_asm+0x1a/0x30 [ 45.548886][ T12] [ 45.551894][ T12] ---[ end trace 0000000000000000 ]--- [ 45.557515][ T12] ------------[ cut here ]------------ [ 45.562970][ T12] WARNING: CPU: 1 PID: 12 at net/xfrm/xfrm_state.c:3226 xfrm_state_fini+0x2ee/0x310 [ 45.572357][ T12] Modules linked in: [ 45.576234][ T12] CPU: 1 UID: 0 PID: 12 Comm: kworker/u8:0 Tainted: G W syzkaller #0 28bb5670a1b4a83370a1b0f1e6655e31af14d592 [ 45.589284][ T12] Tainted: [W]=WARN [ 45.593074][ T12] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 45.603128][ T12] Workqueue: netns cleanup_net [ 45.607888][ T12] RIP: 0010:xfrm_state_fini+0x2ee/0x310 [ 45.613437][ T12] Code: ff e8 e6 c6 97 fc 0f 0b e9 18 fe ff ff e8 da c6 97 fc 0f 0b e9 8c fe ff ff e8 ce c6 97 fc 0f 0b e9 f9 fe ff ff e8 c2 c6 97 fc <0f> 0b e9 66 ff ff ff 89 f9 80 e1 07 80 c1 03 38 c1 0f 8c 8e fd ff [ 45.633063][ T12] RSP: 0018:ffffc900000c7b70 EFLAGS: 00010293 [ 45.639135][ T12] RAX: ffffffff84efaa7e RBX: ffff88810471d8c0 RCX: ffff888102655f00 [ 45.647097][ T12] RDX: 0000000000000000 RSI: ffff8881042b0a00 RDI: ffff8881000418c0 [ 45.655068][ T12] RBP: ffffc900000c7b98 R08: 000000000cae9b55 R09: 00000000ec817bac [ 45.663043][ T12] R10: 000000000000000d R11: ffffffff81759fc0 R12: ffff8881042b0300 [ 45.671011][ T12] R13: 1ffff110208e3c9a R14: 0000000000000040 R15: ffff88810471e4d0 [ 45.678984][ T12] FS: 0000000000000000(0000) GS:ffff8881f6f00000(0000) knlGS:0000000000000000 [ 45.687888][ T12] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 45.694465][ T12] CR2: 00007f60faca0668 CR3: 00000000074aa000 CR4: 00000000003526b0 [ 45.702441][ T12] Call Trace: [ 45.705697][ T12] [ 45.708607][ T12] xfrm_net_exit+0x31/0x80 [ 45.713025][ T12] cleanup_net+0x6ba/0xc90 [ 45.717434][ T12] ? __cfi_cleanup_net+0x10/0x10 [ 45.722373][ T12] ? kick_pool+0xb9/0x540 [ 45.726698][ T12] process_scheduled_works+0x7f4/0x1060 [ 45.732245][ T12] worker_thread+0xc99/0x13f0 [ 45.736922][ T12] kthread+0x2c4/0x360 [ 45.740990][ T12] ? __cfi_worker_thread+0x10/0x10 [ 45.746107][ T12] ? __cfi_kthread+0x10/0x10 [ 45.750699][ T12] ret_from_fork+0x64/0xa0 [ 45.755116][ T12] ? __cfi_kthread+0x10/0x10 [ 45.759720][ T12] ret_from_fork_asm+0x1a/0x30 [ 45.764485][ T12] [ 45.767484][ T12] ---[ end trace 0000000000000000 ]---