last executing test programs:
1.960138791s ago: executing program 1 (id=82):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
sendmsg$NL80211_CMD_RELOAD_REGDB(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000000)={0x14, r1, 0x421, 0x70bd25, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x40805}, 0x400d4)
1.832677854s ago: executing program 1 (id=86):
r0 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000e40), 0x40001, 0x0)
ioctl$F2FS_IOC_RELEASE_VOLATILE_WRITE(r0, 0xf504, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x8031, 0xffffffffffffffff, 0x0)
ioctl$PTP_EXTTS_REQUEST2(r0, 0xc0603d06, 0x0)
syz_usb_connect(0x1, 0x0, 0x0, 0x0)
1.739564867s ago: executing program 2 (id=96):
r0 = socket$xdp(0x2c, 0x3, 0x0)
r1 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_int(r1, 0x107, 0xf, 0x0, 0x0)
socket$inet_udp(0x2, 0x2, 0x0)
sendmsg$xdp(r0, &(0x7f00000014c0)={&(0x7f0000000100)={0x2c, 0x8, 0x0, 0x29}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x4000}, 0x8040)
1.739434847s ago: executing program 2 (id=97):
mkdir(&(0x7f0000000000)='./proc\x00', 0x1ff)
mount(0x0, &(0x7f0000000200)='./proc\x00', &(0x7f0000000300)='proc\x00', 0x0, 0x0)
prlimit64(0x0, 0xe, 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./proc/config.gz\x00', 0x0, 0x80)
lseek(r0, 0xfffffffffffffffe, 0x0)
1.726968537s ago: executing program 2 (id=98):
r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000006c0)=ANY=[@ANYBLOB="12013f00000000407f04ffff000000000001090224000100000000090400001503000000092140000001220f000905", @ANYRES16], 0x0)
syz_usb_control_io$hid(r0, 0x0, 0x0)
syz_usb_control_io$hid(r0, &(0x7f0000001540)={0x24, 0x0, 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="00220f"], 0x0}, 0x0)
r1 = syz_open_dev$hiddev(&(0x7f0000000540), 0x0, 0x0)
ioctl$HIDIOCGCOLLECTIONINDEX(r1, 0x40184810, &(0x7f0000000000)={0x3, 0x200, 0x2, 0xffff01c2, 0x0, 0xc})
1.346518097s ago: executing program 1 (id=99):
r0 = socket$unix(0x1, 0x2, 0x0)
bind$unix(r0, &(0x7f0000000100)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e)
r1 = socket$unix(0x1, 0x2, 0x0)
connect$unix(r1, &(0x7f0000000180)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e)
connect$unix(r1, &(0x7f0000000200)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e)
1.308269298s ago: executing program 1 (id=100):
setsockopt$ARPT_SO_SET_REPLACE(0xffffffffffffffff, 0xa02000000000000, 0x60, 0x0, 0x0)
r0 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000140), 0x40481, 0x0)
r1 = dup(r0)
sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000000c0)=ANY=[@ANYBLOB="040100001a700000000000fe80000000000000000000000000001be0000001000000000000000000000000ffff00004e22000000000000020000000000", @ANYRES32=0x0, @ANYRES32=0xee00, @ANYBLOB="ff010000000000000000000000000001000000002b"], 0x104}}, 0x0)
ioctl$PTP_EXTTS_REQUEST2(r1, 0x40603d07, &(0x7f00000000c0)={0xf7})
1.308011238s ago: executing program 1 (id=101):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_RUN(r2, 0xae80, 0x0)
ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f0000000200)={0x1, 0x0, [{0x345, 0x0, 0x1e}]})
1.21607524s ago: executing program 1 (id=102):
r0 = syz_usb_connect(0x3, 0x32, &(0x7f0000000340)=ANY=[@ANYBLOB="1201000200000040110700090001010203010902200001010080fa0904000002070102000705810200020007050202"], 0x0)
syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000600)={0x2c, &(0x7f00000003c0)={0x0, 0xc}, 0x0, 0x0, 0x0, 0x0})
r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0)
syz_usb_ep_write(r0, 0x81, 0x1, &(0x7f0000000800)='8')
pread64(r1, 0x0, 0x0, 0xd000)
191.858335ms ago: executing program 0 (id=120):
r0 = creat(&(0x7f0000000000)='./file0\x00', 0x6b)
lsetxattr$security_capability(&(0x7f0000002580)='./file0\x00', &(0x7f00000025c0), 0x0, 0x0, 0x0)
write$binfmt_elf32(r0, &(0x7f00000004c0)=ANY=[@ANYBLOB="7f454c46010402600400000000040000030006000800000019000000380000005e020000080400000400200004"], 0xb8)
close(r0)
execve(&(0x7f0000000040)='./file0\x00', 0x0, 0x0)
132.058677ms ago: executing program 0 (id=122):
r0 = openat$kvm(0xffffff9c, &(0x7f00000000c0), 0x800, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_RUN(r2, 0xae80, 0x0)
ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2)
131.785827ms ago: executing program 3 (id=123):
r0 = fsopen(&(0x7f0000000000)='proc\x00', 0x0)
fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0)
fsmount(r0, 0x0, 0x0)
capset(&(0x7f0000000000)={0x20071026}, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x83, 0xffffffff})
fsconfig$FSCONFIG_CMD_RECONFIGURE(r0, 0x7, 0x0, 0x0, 0x0)
131.632557ms ago: executing program 3 (id=124):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0x5001})
r1 = socket$inet_udp(0x2, 0x2, 0x0)
ioctl$sock_inet_SIOCSIFFLAGS(r1, 0x8914, &(0x7f0000000200)={'syzkaller1\x00', 0x1})
write$tun(r0, &(0x7f0000000380)=ANY=[@ANYBLOB="02031b00300014000600631772ab005c2fff00000000000000000000000000000000ff02000000000000000000000000000104206558000000030100080000090c0086dd0dca7ae37210f360ab7b5eb78b8e12af121486705e9c88a8"], 0x8e)
95.350368ms ago: executing program 0 (id=125):
mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x100000a, 0x204031, 0xffffffffffffffff, 0xec776000)
renameat2(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x4)
ioctl$VHOST_SET_MEM_TABLE(0xffffffffffffffff, 0x4008af03, &(0x7f0000000040)={0x2})
r0 = socket$packet(0x11, 0x2, 0x300)
getsockopt$packet_int(r0, 0x107, 0xb, &(0x7f0000000040), &(0x7f0000000000)=0x4)
86.393308ms ago: executing program 0 (id=126):
r0 = socket$inet6(0xa, 0x2, 0x0)
setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000000240)=0x9, 0x4)
bind$inet6(r0, &(0x7f0000000040)={0xa, 0xe22}, 0x1c)
r1 = socket$netlink(0x10, 0x3, 0x8000000004)
writev(r1, &(0x7f0000000000)=[{&(0x7f00000003c0)="580000001500add427323b472545b4560a117fffffff81000e220e227f000008925aa80013007b00090080007f000001e809000000ff0000ffffc7100003ffffffffffffffffffffffe7ee000000deff0000000200000000", 0x58}], 0x1)
36.664489ms ago: executing program 0 (id=127):
r0 = openat$kvm(0xffffff9c, &(0x7f00000000c0), 0x800, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_CAP_MANUAL_DIRTY_LOG_PROTECT2(r1, 0x4068aea3, &(0x7f0000000000)={0xa8, 0x0, 0x3})
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x1, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
36.293779ms ago: executing program 3 (id=128):
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x72, 0x0, 0x7fff0000}]})
r0 = socket$pppl2tp(0x18, 0x1, 0x1)
r1 = socket$inet_udp(0x2, 0x2, 0x0)
connect$pppl2tp(r0, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x0, r1, {0x2, 0x0, @multicast2}, 0x4}}, 0x2e)
getpeername(r0, 0x0, &(0x7f00000000c0))
36.130869ms ago: executing program 2 (id=129):
openat(0xffffffffffffff9c, &(0x7f0000000400)='./file1\x00', 0x6142, 0xbc)
mkdir(&(0x7f0000000300)='./bus\x00', 0xde)
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1d0)
mount$overlay(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000000), 0x8, &(0x7f0000000280)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@workdir={'workdir', 0x3d, './bus'}}, {@nfs_export_on}]})
unlink(&(0x7f0000000080)='./file0/file1\x00')
35.965369ms ago: executing program 3 (id=130):
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0)
mkdir(&(0x7f0000000300)='./bus\x00', 0x0)
mount$overlay(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000000), 0x8, &(0x7f0000000080)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@workdir={'workdir', 0x3d, './bus'}}]})
r0 = fspick(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x1)
fsconfig$FSCONFIG_SET_PATH_EMPTY(r0, 0x4, &(0x7f00000001c0)='/.\x00', &(0x7f0000000240)='./file0\x00', 0xffffffffffffff9c)
852.01µs ago: executing program 2 (id=131):
r0 = syz_create_resource$binfmt(&(0x7f0000000040)='./file1\x00')
r1 = openat$binfmt(0xffffffffffffff9c, r0, 0x42, 0x1ff)
write$binfmt_script(r1, &(0x7f00000000c0)={'#! ', './sys/bus/pci/devices/0000:00:03.0/remove', [{}]}, 0x2e)
close(r1)
execveat$binfmt(0xffffffffffffff9c, r0, 0x0, 0x0, 0x0)
521.06µs ago: executing program 3 (id=132):
r0 = inotify_init()
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff)
r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
openat$cgroup_procs(r1, &(0x7f00000002c0)='cgroup.procs\x00', 0x2, 0x0)
close_range(r0, 0xffffffffffffffff, 0x0)
327.24µs ago: executing program 0 (id=133):
r0 = syz_init_net_socket$bt_rfcomm(0x1f, 0x3, 0x3)
getsockopt$bt_BT_DEFER_SETUP(r0, 0x112, 0x7, 0x0, &(0x7f0000000080))
syz_open_pts(0xffffffffffffffff, 0x408000)
connect$bt_rfcomm(r0, 0x0, 0x0)
fcntl$getownex(r0, 0x10, 0x0)
190.7µs ago: executing program 3 (id=134):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x8000, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe5000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, 0x0}], 0x1, 0x30, 0x0, 0x0)
ioctl$KVM_SET_NESTED_STATE(r2, 0x4080aebf, &(0x7f0000003680)=@vmx={0x0, 0x0, 0x2080, {0xffc, 0xffc, {}, 0x0, 0x2}})
0s ago: executing program 2 (id=135):
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ff)
mount(0x0, &(0x7f0000000080)='./config\x00', &(0x7f00000000c0)='configfs\x00', 0x6, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./config/usb_gadget/g1\x00', 0x1ff)
open(&(0x7f0000000180)='./config/usb_gadget/g1\x00', 0x8000, 0x42)
rmdir(&(0x7f0000000100)='./config/usb_gadget/g1\x00')
kernel console output (not intermixed with test programs):
Warning: Permanently added '10.128.1.95' (ED25519) to the list of known hosts.
[ 21.660035][ T36] audit: type=1400 audit(1791421435.240:64): avc: denied { mounton } for pid=287 comm="syz-executor" path="/syzcgroup/unified" dev="sda1" ino=2023 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1
[ 21.661167][ T287] cgroup: Unknown subsys name 'net'
[ 21.682792][ T36] audit: type=1400 audit(1791421435.240:65): avc: denied { mount } for pid=287 comm="syz-executor" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1
[ 21.710370][ T36] audit: type=1400 audit(1791421435.270:66): avc: denied { unmount } for pid=287 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1
[ 21.710571][ T287] cgroup: Unknown subsys name 'devices'
[ 21.836140][ T287] cgroup: Unknown subsys name 'hugetlb'
[ 21.841817][ T287] cgroup: Unknown subsys name 'rlimit'
[ 21.934927][ T36] audit: type=1400 audit(1791421435.520:67): avc: denied { setattr } for pid=287 comm="syz-executor" name="raw-gadget" dev="devtmpfs" ino=190 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1
[ 21.958210][ T36] audit: type=1400 audit(1791421435.520:68): avc: denied { mounton } for pid=287 comm="syz-executor" path="/proc/sys/fs/binfmt_misc" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=dir permissive=1
[ 21.982952][ T36] audit: type=1400 audit(1791421435.520:69): avc: denied { mount } for pid=287 comm="syz-executor" name="/" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=filesystem permissive=1
[ 22.006640][ T289] SELinux: Context root:object_r:swapfile_t is not valid (left unmapped).
Setting up swapspace version 1, size = 127995904 bytes
[ 22.015498][ T36] audit: type=1400 audit(1791421435.600:70): avc: denied { relabelto } for pid=289 comm="mkswap" name="swap-file" dev="sda1" ino=2026 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t"
[ 22.041186][ T36] audit: type=1400 audit(1791421435.600:71): avc: denied { write } for pid=289 comm="mkswap" path="/root/swap-file" dev="sda1" ino=2026 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t"
[ 22.070022][ T36] audit: type=1400 audit(1791421435.650:72): avc: denied { read } for pid=287 comm="syz-executor" name="swap-file" dev="sda1" ino=2026 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t"
[ 22.070550][ T287] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k
[ 22.095565][ T36] audit: type=1400 audit(1791421435.650:73): avc: denied { open } for pid=287 comm="syz-executor" path="/root/swap-file" dev="sda1" ino=2026 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t"
[ 23.510871][ T295] bridge0: port 1(bridge_slave_0) entered blocking state
[ 23.518067][ T295] bridge0: port 1(bridge_slave_0) entered disabled state
[ 23.525397][ T295] bridge_slave_0: entered allmulticast mode
[ 23.531641][ T295] bridge_slave_0: entered promiscuous mode
[ 23.541234][ T295] bridge0: port 2(bridge_slave_1) entered blocking state
[ 23.548313][ T295] bridge0: port 2(bridge_slave_1) entered disabled state
[ 23.555410][ T295] bridge_slave_1: entered allmulticast mode
[ 23.561722][ T295] bridge_slave_1: entered promiscuous mode
[ 23.574256][ T294] bridge0: port 1(bridge_slave_0) entered blocking state
[ 23.581406][ T294] bridge0: port 1(bridge_slave_0) entered disabled state
[ 23.588542][ T294] bridge_slave_0: entered allmulticast mode
[ 23.594856][ T294] bridge_slave_0: entered promiscuous mode
[ 23.604236][ T294] bridge0: port 2(bridge_slave_1) entered blocking state
[ 23.611287][ T294] bridge0: port 2(bridge_slave_1) entered disabled state
[ 23.618552][ T294] bridge_slave_1: entered allmulticast mode
[ 23.624911][ T294] bridge_slave_1: entered promiscuous mode
[ 23.637896][ T297] bridge0: port 1(bridge_slave_0) entered blocking state
[ 23.645002][ T297] bridge0: port 1(bridge_slave_0) entered disabled state
[ 23.652103][ T297] bridge_slave_0: entered allmulticast mode
[ 23.658581][ T297] bridge_slave_0: entered promiscuous mode
[ 23.668056][ T297] bridge0: port 2(bridge_slave_1) entered blocking state
[ 23.675186][ T297] bridge0: port 2(bridge_slave_1) entered disabled state
[ 23.682432][ T297] bridge_slave_1: entered allmulticast mode
[ 23.689014][ T297] bridge_slave_1: entered promiscuous mode
[ 23.695231][ T296] bridge0: port 1(bridge_slave_0) entered blocking state
[ 23.702282][ T296] bridge0: port 1(bridge_slave_0) entered disabled state
[ 23.709418][ T296] bridge_slave_0: entered allmulticast mode
[ 23.715828][ T296] bridge_slave_0: entered promiscuous mode
[ 23.731488][ T296] bridge0: port 2(bridge_slave_1) entered blocking state
[ 23.738614][ T296] bridge0: port 2(bridge_slave_1) entered disabled state
[ 23.745739][ T296] bridge_slave_1: entered allmulticast mode
[ 23.752112][ T296] bridge_slave_1: entered promiscuous mode
[ 23.924573][ T294] bridge0: port 2(bridge_slave_1) entered blocking state
[ 23.931734][ T294] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 23.939088][ T294] bridge0: port 1(bridge_slave_0) entered blocking state
[ 23.946309][ T294] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 23.955471][ T297] bridge0: port 2(bridge_slave_1) entered blocking state
[ 23.962534][ T297] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 23.969834][ T297] bridge0: port 1(bridge_slave_0) entered blocking state
[ 23.976906][ T297] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 23.989667][ T295] bridge0: port 2(bridge_slave_1) entered blocking state
[ 23.996755][ T295] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 24.004173][ T295] bridge0: port 1(bridge_slave_0) entered blocking state
[ 24.011206][ T295] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 24.025256][ T296] bridge0: port 2(bridge_slave_1) entered blocking state
[ 24.032326][ T296] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 24.039633][ T296] bridge0: port 1(bridge_slave_0) entered blocking state
[ 24.046772][ T296] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 24.097742][ T46] bridge0: port 1(bridge_slave_0) entered disabled state
[ 24.105433][ T46] bridge0: port 1(bridge_slave_0) entered disabled state
[ 24.112694][ T46] bridge0: port 2(bridge_slave_1) entered disabled state
[ 24.120410][ T46] bridge0: port 2(bridge_slave_1) entered disabled state
[ 24.127721][ T46] bridge0: port 1(bridge_slave_0) entered disabled state
[ 24.135279][ T46] bridge0: port 1(bridge_slave_0) entered disabled state
[ 24.142472][ T46] bridge0: port 2(bridge_slave_1) entered disabled state
[ 24.149799][ T46] bridge0: port 2(bridge_slave_1) entered disabled state
[ 24.169040][ T46] bridge0: port 1(bridge_slave_0) entered blocking state
[ 24.176124][ T46] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 24.184489][ T46] bridge0: port 2(bridge_slave_1) entered blocking state
[ 24.191551][ T46] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 24.205886][ T46] bridge0: port 1(bridge_slave_0) entered blocking state
[ 24.213031][ T46] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 24.220873][ T46] bridge0: port 2(bridge_slave_1) entered blocking state
[ 24.228028][ T46] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 24.236626][ T46] bridge0: port 1(bridge_slave_0) entered blocking state
[ 24.243666][ T46] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 24.252647][ T13] bridge0: port 1(bridge_slave_0) entered blocking state
[ 24.259721][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 24.271340][ T13] bridge0: port 2(bridge_slave_1) entered blocking state
[ 24.278501][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 24.287168][ T13] bridge0: port 2(bridge_slave_1) entered blocking state
[ 24.294261][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 24.348505][ T297] veth0_vlan: entered promiscuous mode
[ 24.373696][ T296] veth0_vlan: entered promiscuous mode
[ 24.388025][ T295] veth0_vlan: entered promiscuous mode
[ 24.395105][ T294] veth0_vlan: entered promiscuous mode
[ 24.404880][ T297] veth1_macvtap: entered promiscuous mode
[ 24.418552][ T296] veth1_macvtap: entered promiscuous mode
[ 24.441813][ T295] veth1_macvtap: entered promiscuous mode
[ 24.463984][ T297] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality.
[ 24.482443][ T294] veth1_macvtap: entered promiscuous mode
[ 24.529990][ T317] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details.
[ 24.636618][ T332] loop5: detected capacity change from 0 to 7
[ 24.643204][ C0] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[ 24.652475][ C0] Buffer I/O error on dev loop5, logical block 0, async page read
[ 24.660485][ C1] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[ 24.669702][ C1] Buffer I/O error on dev loop5, logical block 0, async page read
[ 24.678179][ T332] loop5: unable to read partition table
[ 24.686738][ T332] loop_reread_partitions: partition scan of loop5 (-ý? %`{5 FLQk݊A) failed (rc=-5)
[ 24.699532][ C0] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[ 24.708932][ C0] Buffer I/O error on dev loop5, logical block 0, async page read
[ 24.721353][ C1] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[ 24.730564][ C1] Buffer I/O error on dev loop5, logical block 0, async page read
[ 24.738643][ C0] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[ 24.747855][ C0] Buffer I/O error on dev loop5, logical block 0, async page read
[ 24.756767][ C1] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[ 24.765968][ C1] Buffer I/O error on dev loop5, logical block 0, async page read
[ 24.774786][ C1] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[ 24.783972][ C1] Buffer I/O error on dev loop5, logical block 0, async page read
[ 24.792549][ C1] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[ 24.801768][ C1] Buffer I/O error on dev loop5, logical block 0, async page read
[ 24.844745][ T353] process 'syz.3.17' launched './file0' with NULL argv: empty string added
[ 24.977195][ T367] can0: slcan on ttyS3.
[ 25.015608][ T9] usb 3-1: new high-speed USB device number 2 using dummy_hcd
[ 25.034624][ T367] can0 (unregistered): slcan off ttyS3.
[ 25.164076][ T9] usb 3-1: Using ep0 maxpacket: 32
[ 25.171557][ T9] usb 3-1: config 0 has an invalid descriptor of length 61, skipping remainder of the config
[ 25.185528][ T9] usb 3-1: New USB device found, idVendor=22b8, idProduct=6027, bcdDevice=c2.80
[ 25.195842][ T9] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 25.207328][ T9] usb 3-1: Product: syz
[ 25.211618][ T9] usb 3-1: Manufacturer: syz
[ 25.216643][ T9] usb 3-1: SerialNumber: syz
[ 25.231913][ T9] usb 3-1: config 0 descriptor??
[ 25.241417][ T9] usb 3-1: bad CDC descriptors
[ 25.248432][ T9] usb 3-1: unsupported MDLM descriptors
[ 25.433207][ T421] netlink: 8 bytes leftover after parsing attributes in process `syz.1.37'.
[ 25.452625][ T9] usb 3-1: USB disconnect, device number 2
[ 25.464876][ T421] erspan0: entered promiscuous mode
[ 25.471419][ T421] netlink: 8 bytes leftover after parsing attributes in process `syz.1.37'.
[ 25.637678][ T443] rust_binder: Failure when writing BR_NOOP at beginning of buffer.
[ 25.637702][ T443] rust_binder: Read failure Err(EFAULT) in pid:14
[ 25.691893][ T447] rust_binder: Failed to allocate buffer. len:4120, is_oneway:true
[ 25.702227][ T447] rust_binder: Failure in copy_transaction_data: ENOSPC
[ 25.710522][ T447] rust_binder: 444:447 transaction async to 444:0 failed ENOSPC, code 0 size 0-24 line process.rs:1085
[ 25.731080][ T9] rust_binder: 444: undelivered TRANSACTION_ERROR: 29201
[ 25.755940][ T452] sda1: Can't mount, would change RO state
[ 25.780627][ T455] netlink: 32 bytes leftover after parsing attributes in process `syz.1.52'.
[ 25.790753][ T456] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list
[ 25.824002][ T458] sd 0:0:1:0: PR command failed: 1026
[ 25.833968][ T458] sd 0:0:1:0: Sense Key : 0x5 [current]
[ 25.841753][ T458] sd 0:0:1:0: ASC=0x20 ASCQ=0x0
[ 26.059940][ T483] input: syz1 as /devices/virtual/input/input4
[ 26.103931][ T9] usb 4-1: new high-speed USB device number 2 using dummy_hcd
[ 26.144076][ T490] overlayfs: upper fs does not support file handles, falling back to index=off.
[ 26.165725][ T490] overlayfs: NFS export requires "index=on", falling back to nfs_export=off.
[ 26.167341][ T496] SELinux: Context system_u:object_r:inetd_exec_t:s0 is not valid (left unmapped).
[ 26.207858][ T495] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0
[ 26.263807][ T506] rust_binder: 505:506 error while translating object: ENOENT
[ 26.272429][ T506] rust_binder: Failure in copy_transaction_data: ENOENT
[ 26.272505][ T506] rust_binder: 505:506 transaction call to 505:0 failed ENOENT, code 0 size 72-24 line thread.rs:865
[ 26.290595][ T9] usb 4-1: Using ep0 maxpacket: 32
[ 26.290948][ T311] rust_binder: 505: undelivered TRANSACTION_ERROR: 29201
[ 26.296812][ T9] usb 4-1: config index 0 descriptor too short (expected 29220, got 36)
[ 26.312140][ T9] usb 4-1: config 0 has too many interfaces: 81, using maximum allowed: 32
[ 26.321363][ T9] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 81
[ 26.330865][ T9] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0
[ 26.341567][ T9] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0
[ 26.358782][ T9] usb 4-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18
[ 26.383838][ T9] usb 4-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40
[ 26.393362][ T9] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 26.404949][ T9] usb 4-1: config 0 descriptor??
[ 26.615512][ T9] usblp 4-1:0.0: usblp0: USB Bidirectional printer dev 2 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17
[ 26.814994][ T36] kauditd_printk_skb: 135 callbacks suppressed
[ 26.815014][ T36] audit: type=1400 audit(1791421440.400:207): avc: denied { read write } for pid=464 comm="syz.3.57" name="lp0" dev="devtmpfs" ino=446 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:printer_device_t tclass=chr_file permissive=1
[ 26.815977][ T315] usb 4-1: USB disconnect, device number 2
[ 26.821266][ T36] audit: type=1400 audit(1791421440.400:208): avc: denied { open } for pid=464 comm="syz.3.57" path="/dev/usb/lp0" dev="devtmpfs" ino=446 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:printer_device_t tclass=chr_file permissive=1
[ 26.846298][ T315] usblp0: removed
[ 26.858853][ T36] audit: type=1400 audit(1791421440.400:209): avc: denied { ioctl } for pid=464 comm="syz.3.57" path="/dev/usb/lp0" dev="devtmpfs" ino=446 ioctlcmd=0x604 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:printer_device_t tclass=chr_file permissive=1
[ 26.914134][ T311] usb 3-1: new high-speed USB device number 3 using dummy_hcd
[ 27.020980][ T36] audit: type=1400 audit(1791421440.600:210): avc: denied { append } for pid=556 comm="syz.1.100" name="ptp0" dev="devtmpfs" ino=196 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1
[ 27.065195][ T311] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F
[ 27.076792][ T311] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7
[ 27.088601][ T311] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0
[ 27.098672][ T311] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21
[ 27.111735][ T311] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00
[ 27.121047][ T311] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 27.129770][ T311] usb 3-1: config 0 descriptor??
[ 27.333944][ T9] usb 2-1: new high-speed USB device number 2 using dummy_hcd
[ 27.371969][ T36] audit: type=1400 audit(1791421440.950:211): avc: denied { read } for pid=565 comm="syz.3.104" name="msr" dev="devtmpfs" ino=16 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1
[ 27.394553][ T36] audit: type=1400 audit(1791421440.950:212): avc: denied { open } for pid=565 comm="syz.3.104" path="/dev/cpu/0/msr" dev="devtmpfs" ino=16 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1
[ 27.409601][ T568] FAULT_INJECTION: forcing a failure.
[ 27.409601][ T568] name fail_futex, interval 1, probability 0, space 0, times 1
[ 27.431026][ T568] CPU: 1 UID: 0 PID: 568 Comm: syz.3.105 Not tainted syzkaller #0 9aa2cb443b149a071e1af4082fbb7f81a961e323
[ 27.431064][ T568] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026
[ 27.431077][ T568] Call Trace:
[ 27.431084][ T568]
[ 27.431091][ T568] __dump_stack+0x21/0x30
[ 27.431127][ T568] dump_stack_lvl+0x140/0x1c0
[ 27.431161][ T568] ? __cfi_dump_stack_lvl+0x10/0x10
[ 27.431208][ T568] ? gup_fast_fallback+0x671/0x740
[ 27.431238][ T568] dump_stack+0x19/0x20
[ 27.431266][ T568] should_fail_ex+0x3c2/0x510
[ 27.431293][ T568] should_fail+0xf/0x20
[ 27.431318][ T568] should_fail_futex+0x3c/0x50
[ 27.431345][ T568] futex_lock_pi_atomic+0x11b/0xcb0
[ 27.431378][ T568] ? __cfi_futex_lock_pi_atomic+0x10/0x10
[ 27.431411][ T568] ? __cfi_futex_setup_timer+0x10/0x10
[ 27.431445][ T568] ? __cfi_get_futex_key+0x10/0x10
[ 27.431473][ T568] futex_lock_pi+0x2a7/0xa70
[ 27.431503][ T568] ? futex_unqueue+0x136/0x160
[ 27.431531][ T568] ? __cfi_futex_lock_pi+0x10/0x10
[ 27.431562][ T568] ? __cfi_futex_wake_mark+0x10/0x10
[ 27.431586][ T568] ? __cfi_futex_wake_mark+0x10/0x10
[ 27.431608][ T568] ? vfs_write+0xbcf/0xfd0
[ 27.431632][ T568] do_futex+0x270/0x510
[ 27.431658][ T568] ? __cfi_do_futex+0x10/0x10
[ 27.431685][ T568] ? mutex_unlock+0x90/0x240
[ 27.431714][ T568] __se_sys_futex+0x13c/0x320
[ 27.431741][ T568] ? fput+0x1a4/0x230
[ 27.431769][ T568] ? __x64_sys_futex+0x110/0x110
[ 27.431799][ T568] ? __kasan_check_write+0x18/0x20
[ 27.431823][ T568] __x64_sys_futex+0xe9/0x110
[ 27.431853][ T568] x64_sys_call+0x227f/0x2ee0
[ 27.431874][ T568] do_syscall_64+0x57/0xf0
[ 27.431897][ T568] ? clear_bhb_loop+0x50/0xa0
[ 27.431924][ T568] entry_SYSCALL_64_after_hwframe+0x76/0x7e
[ 27.431960][ T568] RIP: 0033:0x7f502ab9e199
[ 27.431978][ T568] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 27.431995][ T568] RSP: 002b:00007f50295f7028 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca
[ 27.432020][ T568] RAX: ffffffffffffffda RBX: 00007f502ae25fa0 RCX: 00007f502ab9e199
[ 27.432035][ T568] RDX: 0000000000000000 RSI: 0000000000000006 RDI: 0000200000000200
[ 27.432050][ T568] RBP: 00007f502ac358e0 R08: 0000000000000000 R09: 0000000034fffffd
[ 27.432063][ T568] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[ 27.432077][ T568] R13: 00007f502ae26038 R14: 00007f502ae25fa0 R15: 00007ffffb5bc1c8
[ 27.432096][ T568]
[ 27.505138][ T9] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0
[ 27.547467][ T311] plantronics 0003:047F:FFFF.0001: unknown main item tag 0x0
[ 27.552915][ T9] usb 2-1: config 1 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0
[ 27.554538][ T311] plantronics 0003:047F:FFFF.0001: unknown main item tag 0x0
[ 27.561655][ T9] usb 2-1: New USB device found, idVendor=0711, idProduct=0900, bcdDevice= 1.00
[ 27.563788][ T311] plantronics 0003:047F:FFFF.0001: unknown main item tag 0x0
[ 27.563816][ T311] plantronics 0003:047F:FFFF.0001: unknown main item tag 0x0
[ 27.563841][ T311] plantronics 0003:047F:FFFF.0001: unknown main item tag 0x0
[ 27.573907][ T9] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 27.577917][ T311] plantronics 0003:047F:FFFF.0001: unknown main item tag 0x0
[ 27.589466][ T9] usb 2-1: Product: syz
[ 27.592454][ T311] plantronics 0003:047F:FFFF.0001: unknown main item tag 0x0
[ 27.602468][ T9] usb 2-1: Manufacturer: syz
[ 27.613530][ T311] plantronics 0003:047F:FFFF.0001: unknown main item tag 0x0
[ 27.653908][ T9] usb 2-1: SerialNumber: syz
[ 27.657934][ T311] plantronics 0003:047F:FFFF.0001: unknown main item tag 0x0
[ 27.802198][ T311] plantronics 0003:047F:FFFF.0001: unknown main item tag 0x0
[ 27.809882][ T311] plantronics 0003:047F:FFFF.0001: unknown main item tag 0x0
[ 27.818345][ T36] audit: type=1400 audit(1791421441.400:213): avc: denied { map } for pid=573 comm="syz.0.108" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=6158 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1
[ 27.819031][ T311] plantronics 0003:047F:FFFF.0001: unknown main item tag 0x0
[ 27.847891][ T36] audit: type=1400 audit(1791421441.400:214): avc: denied { read write } for pid=573 comm="syz.0.108" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=6158 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1
[ 27.851084][ T311] plantronics 0003:047F:FFFF.0001: unknown main item tag 0x0
[ 27.881963][ T311] plantronics 0003:047F:FFFF.0001: unknown main item tag 0x0
[ 27.890002][ T311] plantronics 0003:047F:FFFF.0001: unknown main item tag 0x0
[ 27.897683][ T311] plantronics 0003:047F:FFFF.0001: No inputs registered, leaving
[ 27.908731][ T36] audit: type=1400 audit(1791421441.490:215): avc: denied { read } for pid=578 comm="syz.3.110" name="buffer_size_kb" dev="tracefs" ino=1066 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=file permissive=1
[ 27.938377][ T311] plantronics 0003:047F:FFFF.0001: hiddev96,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.2-1/input0
[ 27.942075][ T9] usblp 2-1:1.0: usblp0: USB Bidirectional printer dev 2 if 0 alt 0 proto 2 vid 0x0711 pid 0x0900
[ 27.989514][ T311] usb 3-1: USB disconnect, device number 3
[ 28.016345][ T588] capability: warning: `syz.0.114' uses deprecated v2 capabilities in a way that may be insecure
[ 28.019699][ T582] fido_id[582]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.2/usb3/3-1/report_descriptor': No such file or directory
[ 28.094592][ T590] kvm: MONITOR instruction emulated as NOP!
[ 28.126468][ T36] audit: type=1400 audit(1791421441.710:216): avc: denied { connect } for pid=596 comm="syz.3.118" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1
[ 28.168306][ T601] Invalid argument reading file caps for ./file0
[ 28.216335][ T610] ip6_tunnel: non-ECT from 0000:0000:0000:0000:0000:0000:0000:0000 with DS=0x31
[ 28.360743][ T311] usb 2-1: USB disconnect, device number 2
[ 28.368238][ T632] BUG: scheduling while atomic: syz.2.135/632/0x00000002
[ 28.375355][ T632] Modules linked in:
[ 28.379284][ T632] CPU: 0 UID: 0 PID: 632 Comm: syz.2.135 Not tainted syzkaller #0 9aa2cb443b149a071e1af4082fbb7f81a961e323
[ 28.379316][ T632] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026
[ 28.379329][ T632] Call Trace:
[ 28.379335][ T632]
[ 28.379343][ T632] __dump_stack+0x21/0x30
[ 28.379379][ T632] dump_stack_lvl+0x140/0x1c0
[ 28.379408][ T632] ? __cfi_dump_stack_lvl+0x10/0x10
[ 28.379438][ T632] dump_stack+0x19/0x20
[ 28.379465][ T632] __schedule_bug+0x12b/0x200
[ 28.379489][ T632] ? find_proxy_task+0x2460/0x2460
[ 28.379511][ T632] ? kernel_text_address+0xa9/0xe0
[ 28.379539][ T632] ? __kernel_text_address+0x11/0x40
[ 28.379566][ T632] __schedule+0xb85/0x20b0
[ 28.379595][ T632] ? __cfi__raw_spin_lock_irqsave+0x10/0x10
[ 28.379615][ T632] ? stack_trace_save+0xaa/0x100
[ 28.379635][ T632] ? __sched_text_start+0x10/0x10
[ 28.379655][ T632] ? __kasan_check_read+0x15/0x20
[ 28.379674][ T632] ? rwsem_spin_on_owner+0xa4/0x3b0
[ 28.379691][ T632] ? kasan_save_stack+0x4d/0x60
[ 28.379711][ T632] ? kasan_save_stack+0x3e/0x60
[ 28.379730][ T632] ? __kasan_check_write+0x18/0x20
[ 28.379747][ T632] ? _raw_spin_lock_irq+0x93/0x120
[ 28.379765][ T632] ? __cfi__raw_spin_lock_irq+0x10/0x10
[ 28.379783][ T632] schedule+0xc5/0x240
[ 28.379802][ T632] schedule_preempt_disabled+0x14/0x30
[ 28.379824][ T632] rwsem_down_write_slowpath+0x5c9/0x1b60
[ 28.379853][ T632] ? rwsem_down_read_slowpath+0x14c0/0x14c0
[ 28.379877][ T632] ? try_to_wake_up+0x111a/0x1fd0
[ 28.379897][ T632] ? __kasan_check_write+0x18/0x20
[ 28.379914][ T632] ? wake_q_add_safe+0x29/0x100
[ 28.379930][ T632] ? cpus_share_resources+0xb0/0x130
[ 28.379949][ T632] ? rwsem_mark_wake+0x507/0x770
[ 28.379965][ T632] ? rwsem_read_trylock+0x275/0x5a0
[ 28.379990][ T632] ? wake_up_q+0x10a/0x1c0
[ 28.380004][ T632] ? downgrade_write+0x470/0x470
[ 28.380030][ T632] down_write+0x163/0x2b0
[ 28.380053][ T632] ? __cfi_down_write+0x10/0x10
[ 28.380076][ T632] ? down_read+0x7f/0xe0
[ 28.380099][ T632] ? __cfi_down_read+0x10/0x10
[ 28.380123][ T632] kernfs_remove_by_name_ns+0x8c/0x180
[ 28.380148][ T632] sysfs_unmerge_group+0xd7/0x130
[ 28.380169][ T632] dpm_sysfs_remove+0x7b/0xd0
[ 28.380193][ T632] device_del+0x241/0xcf0
[ 28.380209][ T632] ? __cfi_class_find_device+0x10/0x10
[ 28.380229][ T632] ? __cfi_device_del+0x10/0x10
[ 28.380245][ T632] ? __kasan_check_write+0x18/0x20
[ 28.380262][ T632] ? kobject_put+0x1cc/0x2a0
[ 28.380280][ T632] device_destroy+0xb0/0x100
[ 28.380296][ T632] ? __cfi_device_destroy+0x10/0x10
[ 28.380313][ T632] ? __kasan_check_write+0x18/0x20
[ 28.380331][ T632] android_device_destroy+0x118/0x180
[ 28.380357][ T632] gadgets_drop+0x1d/0x30
[ 28.380375][ T632] ? __cfi_gadgets_drop+0x10/0x10
[ 28.380393][ T632] configfs_rmdir+0x8ba/0x9b0
[ 28.380417][ T632] vfs_rmdir+0x3de/0x560
[ 28.380442][ T632] do_rmdir+0x29a/0x590
[ 28.380469][ T632] ? __cfi_do_rmdir+0x10/0x10
[ 28.380497][ T632] ? __kasan_check_write+0x18/0x20
[ 28.380516][ T632] __x64_sys_rmdir+0x4b/0x60
[ 28.380540][ T632] x64_sys_call+0xaf7/0x2ee0
[ 28.380556][ T632] do_syscall_64+0x57/0xf0
[ 28.380574][ T632] ? clear_bhb_loop+0x50/0xa0
[ 28.380605][ T632] entry_SYSCALL_64_after_hwframe+0x76/0x7e
[ 28.380627][ T632] RIP: 0033:0x7fec2d19e199
[ 28.380643][ T632] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 28.380658][ T632] RSP: 002b:00007fec2e0d0028 EFLAGS: 00000246 ORIG_RAX: 0000000000000054
[ 28.380678][ T632] RAX: ffffffffffffffda RBX: 00007fec2d425fa0 RCX: 00007fec2d19e199
[ 28.380692][ T632] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000200000000100
[ 28.380704][ T632] RBP: 00007fec2d2358e0 R08: 0000000000000000 R09: 0000000000000000
[ 28.380715][ T632] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[ 28.380727][ T632] R13: 00007fec2d426038 R14: 00007fec2d425fa0 R15: 00007ffee4ef9f08
[ 28.380742][ T632]
[ 28.381131][ T311] usblp0: removed
[ 28.385425][ T632] ------------[ cut here ]------------
[ 28.733925][ T315] usb 1-1: new high-speed USB device number 2 using dummy_hcd
[ 28.737564][ T632] WARNING: CPU: 0 PID: 632 at lib/stackdepot.c:635 stack_depot_save_flags+0x266/0x800
[ 28.804698][ T632] Modules linked in:
[ 28.808606][ T632] CPU: 0 UID: 0 PID: 632 Comm: syz.2.135 Tainted: G W syzkaller #0 9aa2cb443b149a071e1af4082fbb7f81a961e323
[ 28.821607][ T632] Tainted: [W]=WARN
[ 28.825468][ T632] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026
[ 28.835567][ T632] RIP: 0010:stack_depot_save_flags+0x266/0x800
[ 28.841785][ T632] Code: 48 83 3d 34 22 dc 05 00 0f 84 00 04 00 00 48 c7 45 c0 00 00 00 00 48 89 d3 65 8b 05 0c 25 1e 7d 4d 89 d7 a9 00 00 f0 00 74 2d <0f> 0b 48 c7 45 c8 00 00 00 00 9c 8f 45 c8 4c 8b 6d c8 fa 48 c7 c7
[ 28.861670][ T632] RSP: 0018:ffffc9000d097980 EFLAGS: 00010206
[ 28.867781][ T632] RAX: 000000007fffffff RBX: ffff8881f5b81a10 RCX: 0000000000981a10
[ 28.875900][ T632] RDX: ffff8881f5b81a10 RSI: 0000000000000001 RDI: 000000004efc51bb
[ 28.883944][ T632] RBP: ffffc9000d0979e0 R08: 0000000058609405 R09: 00000000af76c716
[ 28.891961][ T632] R10: 000000000000000d R11: ffffffff8175a6a0 R12: 0000000020f981a1
[ 28.899963][ T632] R13: 0000000000000000 R14: ffffc9000d0979f0 R15: 000000000000000d
[ 28.908001][ T632] FS: 00007fec2e0d06c0(0000) GS:ffff8881f6e00000(0000) knlGS:0000000000000000
[ 28.913917][ T315] usb 1-1: Using ep0 maxpacket: 32
[ 28.917070][ T632] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[ 28.923488][ T315] usb 1-1: config 0 has an invalid interface number: 67 but max is 0
[ 28.928921][ T632] CR2: 000000110c31d060 CR3: 00000001311fa000 CR4: 00000000003526b0
[ 28.937385][ T315] usb 1-1: config 0 has no interface number 0
[ 28.945098][ T632] Call Trace:
[ 28.945111][ T632]
[ 28.953797][ T315] usb 1-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57
[ 28.954601][ T632] ? do_syscall_64+0x57/0xf0
[ 28.957712][ T315] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 28.966630][ T632] ? entry_SYSCALL_64_after_hwframe+0x76/0x7e
[ 28.966672][ T632] kasan_save_track+0x4f/0x80
[ 28.971717][ T315] usb 1-1: Product: syz
[ 28.979271][ T632] ? kasan_save_track+0x3e/0x80
[ 28.985658][ T315] usb 1-1: Manufacturer: syz
[ 28.990192][ T632] ? kasan_save_free_info+0x44/0x50
[ 28.990222][ T632] ? __kasan_slab_free+0x5f/0x80
[ 28.994668][ T315] usb 1-1: SerialNumber: syz
[ 28.999235][ T632] ? kfree+0x158/0x440
[ 28.999260][ T632] ? gadget_info_attr_release+0xcb/0x130
[ 29.006313][ T315] usb 1-1: config 0 descriptor??
[ 29.009101][ T632] ? config_item_put+0x175/0x240
[ 29.015640][ T315] smsc95xx v2.0.0
[ 29.018729][ T632] ? configfs_rmdir+0x8e8/0x9b0
[ 29.047045][ T632] ? vfs_rmdir+0x3de/0x560
[ 29.051510][ T632] ? do_rmdir+0x29a/0x590
[ 29.055874][ T632] ? __x64_sys_rmdir+0x4b/0x60
[ 29.060703][ T632] ? x64_sys_call+0xaf7/0x2ee0
[ 29.065536][ T632] ? do_syscall_64+0x57/0xf0
[ 29.070250][ T632] ? entry_SYSCALL_64_after_hwframe+0x76/0x7e
[ 29.076406][ T632] kasan_save_free_info+0x44/0x50
[ 29.081464][ T632] __kasan_slab_free+0x5f/0x80
[ 29.086318][ T632] kfree+0x158/0x440
[ 29.090235][ T632] ? gadget_info_attr_release+0xcb/0x130
[ 29.095902][ T632] ? __cfi_gadget_info_attr_release+0x10/0x10
[ 29.101988][ T632] gadget_info_attr_release+0xcb/0x130
[ 29.107651][ T632] config_item_put+0x175/0x240
[ 29.112432][ T632] ? __cfi_gadgets_drop+0x10/0x10
[ 29.117537][ T632] configfs_rmdir+0x8e8/0x9b0
[ 29.122251][ T632] vfs_rmdir+0x3de/0x560
[ 29.126629][ T632] do_rmdir+0x29a/0x590
[ 29.131001][ T632] ? __cfi_do_rmdir+0x10/0x10
[ 29.135821][ T632] ? __kasan_check_write+0x18/0x20
[ 29.140962][ T632] __x64_sys_rmdir+0x4b/0x60
[ 29.145693][ T632] x64_sys_call+0xaf7/0x2ee0
[ 29.150423][ T632] do_syscall_64+0x57/0xf0
[ 29.154876][ T632] ? clear_bhb_loop+0x50/0xa0
[ 29.159579][ T632] entry_SYSCALL_64_after_hwframe+0x76/0x7e
[ 29.165741][ T632] RIP: 0033:0x7fec2d19e199
[ 29.170337][ T632] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 29.190344][ T632] RSP: 002b:00007fec2e0d0028 EFLAGS: 00000246 ORIG_RAX: 0000000000000054
[ 29.198832][ T632] RAX: ffffffffffffffda RBX: 00007fec2d425fa0 RCX: 00007fec2d19e199
[ 29.206877][ T632] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000200000000100
[ 29.214986][ T632] RBP: 00007fec2d2358e0 R08: 0000000000000000 R09: 0000000000000000
[ 29.222983][ T632] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[ 29.231081][ T632] R13: 00007fec2d426038 R14: 00007fec2d425fa0 R15: 00007ffee4ef9f08
[ 29.239143][ T632]
[ 29.242187][ T632] ---[ end trace 0000000000000000 ]---
[ 29.248167][ T632] BUG: scheduling while atomic: syz.2.135/632/0x00000000
[ 29.255655][ T632] Modules linked in:
[ 29.259840][ T632] CPU: 1 UID: 0 PID: 632 Comm: syz.2.135 Tainted: G W syzkaller #0 9aa2cb443b149a071e1af4082fbb7f81a961e323
[ 29.259865][ T632] Tainted: [W]=WARN
[ 29.259870][ T632] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026
[ 29.259877][ T632] Call Trace:
[ 29.259881][ T632]
[ 29.259887][ T632] __dump_stack+0x21/0x30
[ 29.259910][ T632] dump_stack_lvl+0x140/0x1c0
[ 29.259927][ T632] ? __cfi_dump_stack_lvl+0x10/0x10
[ 29.259945][ T632] dump_stack+0x19/0x20
[ 29.259965][ T632] __schedule_bug+0x12b/0x200
[ 29.259980][ T632] ? find_proxy_task+0x2460/0x2460
[ 29.259993][ T632] ? update_load_avg+0x4f3/0x1980
[ 29.260010][ T632] __schedule+0xb85/0x20b0
[ 29.260025][ T632] ? __kasan_check_read+0x15/0x20
[ 29.260039][ T632] ? plist_check_list+0x2a1/0x2c0
[ 29.260053][ T632] ? __sched_text_start+0x10/0x10
[ 29.260067][ T632] ? plist_add+0x4d4/0x570
[ 29.260080][ T632] ? __futex_queue+0x19f/0x350
[ 29.260097][ T632] ? __cfi___futex_queue+0x10/0x10
[ 29.260113][ T632] schedule+0xc5/0x240
[ 29.260127][ T632] futex_wait_queue+0xfc/0x240
[ 29.260142][ T632] __futex_wait+0x15b/0x3d0
[ 29.260154][ T632] ? __cfi___futex_wait+0x10/0x10
[ 29.260166][ T632] ? __cfi_futex_wake_mark+0x10/0x10
[ 29.260178][ T632] ? __kasan_check_read+0x15/0x20
[ 29.260191][ T632] ? futex_wake+0x627/0x950
[ 29.260202][ T632] futex_wait+0x128/0x7c0
[ 29.260214][ T632] ? __cfi_futex_wait+0x10/0x10
[ 29.260226][ T632] ? __hrtimer_run_queues+0x877/0x8e0
[ 29.260246][ T632] do_futex+0x32a/0x510
[ 29.260261][ T632] ? read_tsc+0xd/0x20
[ 29.260278][ T632] ? __cfi_do_futex+0x10/0x10
[ 29.260294][ T632] __se_sys_futex+0x13c/0x320
[ 29.260312][ T632] ? __x64_sys_futex+0x110/0x110
[ 29.260329][ T632] __x64_sys_futex+0xe9/0x110
[ 29.260345][ T632] x64_sys_call+0x227f/0x2ee0
[ 29.260357][ T632] do_syscall_64+0x57/0xf0
[ 29.260370][ T632] ? clear_bhb_loop+0x50/0xa0
[ 29.260387][ T632] entry_SYSCALL_64_after_hwframe+0x76/0x7e
[ 29.260404][ T632] RIP: 0033:0x7fec2d19e199
[ 29.260416][ T632] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 29.260426][ T632] RSP: 002b:00007fec2e0d00e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca
[ 29.260441][ T632] RAX: ffffffffffffffda RBX: 00007fec2d425fa8 RCX: 00007fec2d19e199
[ 29.260450][ T632] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007fec2d425fa8
[ 29.260459][ T632] RBP: 00007fec2d425fa0 R08: 0000000000000000 R09: 0000000000000000
[ 29.260467][ T632] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[ 29.260475][ T632] R13: 00007fec2d426038 R14: 00007ffee4ef9e20 R15: 00007ffee4ef9f08
[ 29.260485][ T632]
[ 29.538476][ T315] smsc95xx 1-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -32
[ 29.549429][ T315] smsc95xx 1-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD
[ 29.960861][ T315] smsc95xx 1-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -71
[ 29.972184][ T315] smsc95xx 1-1:0.67: probe with driver smsc95xx failed with error -71
[ 29.985342][ T315] usb 1-1: USB disconnect, device number 2