last executing test programs: 12m59.877375489s ago: executing program 32 (id=12305): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000040)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_STATION(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000380)={0x28, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @device_b}]}, 0x28}}, 0x0) 12m57.114356306s ago: executing program 2 (id=12327): r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x9, 0x3, 0x1d0, 0x0, 0xffffffff, 0xffffffff, 0x98, 0xffffffff, 0x0, 0xffffffff, 0xffffffff, 0x138, 0xffffffff, 0x3, 0x0, {[{{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}, {{@uncond, 0x0, 0x70, 0xa0}, @common=@unspec=@CONNMARK={0x30, 'CONNMARK\x00', 0x1, {0x1, 0xffffffff, 0xffffffff}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x230) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) sendto$inet(r1, &(0x7f0000000240)="0429", 0x2, 0x40400a0, &(0x7f0000000340)={0x2, 0xfffd, @remote}, 0x10) 12m55.601464609s ago: executing program 2 (id=12330): r0 = syz_io_uring_setup(0xf00, &(0x7f0000000740)={0x0, 0x5078, 0xc00, 0x2, 0x0, 0x0, 0x0}, &(0x7f0000000040)=0x0, &(0x7f00000002c0)=0x0, &(0x7f0000000100)=0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_submit(r1, r2, r3, &(0x7f00000007c0)=@IORING_OP_SEND={0x1a, 0x20, 0x0, r4, 0x0, 0x0, 0x7, 0x0, 0x0, {0x0, 0x0, 0x1}}) io_uring_enter(r0, 0x1, 0x1, 0x5, 0x0, 0x0) 12m53.168932658s ago: executing program 2 (id=12333): r0 = socket$inet6_udp(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000000500)={0xa, 0x4e20, 0xffffffff, @empty, 0x4}, 0x1c) connect$inet6(r0, &(0x7f0000000300)={0xa, 0x4e1d, 0x9, @local, 0x2}, 0x1c) syz_emit_ethernet(0x7e, &(0x7f00000001c0)={@local, @multicast, @void, {@ipv6={0x86dd, @udp={0xa, 0x6, "000003", 0x48, 0x11, 0x0, @local, @mcast2, {[], {0x4e1d, 0x4e20, 0x48, 0x0, @wg=@cookie={0x3, 0x0, "dc521c259b538a2bf2a113dc2eeec0a072edf20b6d59027f", "d646c098cfc27eb8549d66e7b219c2c3b85e4508546e551af9e59631718ba089"}}}}}}}, 0x0) 12m50.799412817s ago: executing program 2 (id=12336): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mount$bind(&(0x7f0000000040)='.\x00', &(0x7f00000000c0)='./file0/../file0\x00', 0x0, 0x2a05404, 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x262) 12m49.166790246s ago: executing program 2 (id=12338): r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e22, 0x0, @local, 0xb}, 0x1c) listen(r0, 0x0) syz_emit_ethernet(0x4e, &(0x7f0000000040)={@local, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "0a8435", 0x18, 0x6, 0xff, @remote, @local, {[], {{0x4e20, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x6, 0xc2, 0x0, 0x0, 0x3ff, {[@mptcp=@ack={0x1e, 0x4, 0x10, 0x1}]}}}}}}}}, 0x0) 12m43.624112475s ago: executing program 2 (id=12344): r0 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000140)={'veth1_to_bond\x00', 0x0}) setsockopt$packet_add_memb(r0, 0x107, 0x1, &(0x7f0000000100)={r1, 0x2, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x39}}, 0x10) close(0x3) 12m40.27470186s ago: executing program 33 (id=12344): r0 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000140)={'veth1_to_bond\x00', 0x0}) setsockopt$packet_add_memb(r0, 0x107, 0x1, &(0x7f0000000100)={r1, 0x2, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x39}}, 0x10) close(0x3) 12m5.807034617s ago: executing program 1 (id=12385): r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_GET_STATION(r1, &(0x7f0000000100)={0x0, 0xfff0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r0, @ANYBLOB="03032cbd7000008000001100000008000300", @ANYRES32=r2, @ANYBLOB="0a0006"], 0x28}, 0x1, 0x0, 0x0, 0x20044080}, 0x0) 12m2.579695161s ago: executing program 1 (id=12388): prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) time(0xfffffffffffffffc) 11m57.200914749s ago: executing program 1 (id=12392): r0 = socket(0x10, 0x803, 0x0) r1 = syz_io_uring_setup(0xefd, &(0x7f00000007c0)={0x0, 0x0, 0x400, 0x2, 0x55}, &(0x7f00000005c0)=0x0, &(0x7f0000000600)=0x0, &(0x7f0000000640)=0x0) syz_io_uring_submit(r2, r3, r4, &(0x7f0000000680)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, r0, 0x0, &(0x7f0000000700)={0x0, 0x0, 0x0}, 0x0, 0x80000080, 0x1}) io_uring_enter(r1, 0x1, 0xfffffffd, 0x9, 0x0, 0x0) 11m55.8999322s ago: executing program 1 (id=12394): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0xc, 0xe, &(0x7f0000000940)=ANY=[@ANYBLOB="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"/2356], &(0x7f0000001280)='syzkaller\x00'}, 0x48) close(0x3) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x3, 0x7, &(0x7f0000001880)=ANY=[@ANYBLOB="7911a800000000005501020000000000b70000000000000095000000000000008500000089000000b70000000000000095"], &(0x7f00000018c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000001340)={r0, 0x18000000000002a0, 0x22, 0x0, &(0x7f0000000000)="b9ff03076044238cb89e36e9080047e0ffff00004000632f77fb8035140cac14140c", 0x0, 0x100fe, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) 11m52.613495302s ago: executing program 1 (id=12396): setns(0xc9, 0x0) r0 = socket$netlink(0x10, 0x3, 0x14) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) sendmsg$IPCTNL_MSG_TIMEOUT_DELETE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="50000000050801"], 0x50}, 0x1, 0x0, 0x0, 0x20000080}, 0x4) 11m48.258688924s ago: executing program 1 (id=12400): syz_emit_vhci(&(0x7f0000000280)=ANY=[@ANYBLOB="043e1f0a00c9000201"], 0x22) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000200), 0x400, 0x0) r0 = landlock_create_ruleset(&(0x7f0000000380)={0x7b36}, 0x30, 0x0) landlock_restrict_self(r0, 0xe) 11m31.787875164s ago: executing program 34 (id=12400): syz_emit_vhci(&(0x7f0000000280)=ANY=[@ANYBLOB="043e1f0a00c9000201"], 0x22) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000200), 0x400, 0x0) r0 = landlock_create_ruleset(&(0x7f0000000380)={0x7b36}, 0x30, 0x0) landlock_restrict_self(r0, 0xe) 10m34.126055672s ago: executing program 3 (id=12431): r0 = syz_open_procfs(0x0, &(0x7f0000002040)='net/snmp6\x00') read$FUSE(r0, &(0x7f0000000000)={0x2020}, 0xfffffc7a) r1 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r1, &(0x7f00000014c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x2, 0xd, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, [@sadb_x_policy={0x8, 0x12, 0x2, 0x2, 0x0, 0x0, 0x0, {0x10, 0x32, 0x3, 0x0, 0x0, 0x0, 0x0, @in=@rand_addr=0x10003c00, @in6=@private2}}, @sadb_address={0x3, 0x5, 0x0, 0x0, 0x0, @in={0x2, 0x0, @local}}, @sadb_address={0x3, 0x6, 0x0, 0x0, 0x0, @in={0x2, 0x0, @private}}]}, 0x80}}, 0x0) 10m31.746903695s ago: executing program 3 (id=12432): r0 = openat$ttynull(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$TCSETSF(r0, 0x5404, &(0x7f00000000c0)={0xfdfdffff, 0xfffffff7, 0x1, 0x4, 0x15, "518aba4d000000000000000000000000002000"}) r1 = dup(r0) write$UHID_INPUT(r1, &(0x7f0000001040)={0xfc, {"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", 0xce2}}, 0x1006) 10m30.325357684s ago: executing program 3 (id=12433): prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x100000b, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) sigaltstack(0x0, 0x0) 10m24.355721288s ago: executing program 3 (id=12434): mkdir(&(0x7f0000000040)='./my_configfs\x00', 0x176) mount(0x0, &(0x7f0000000000)='./my_configfs\x00', &(0x7f0000000100)='configfs\x00', 0x10040, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./my_configfs/target/dbroot\x00', 0x1, 0x0) write$proc_mixer(r0, &(0x7f0000000080)=ANY=[], 0x1001) 10m22.288015434s ago: executing program 3 (id=12435): r0 = socket$nl_generic(0x10, 0x3, 0x10) close(0x3) socket$kcm(0x21, 0x2, 0x2) sendmsg$inet(r0, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)=[@ip_tos_int={{0x14, 0x110, 0xd, 0x80}}], 0x18}, 0x84) 10m19.670724253s ago: executing program 3 (id=12436): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000340), r0) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000000380)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_DEL_SEC_LEVEL(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000440)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000000002300000008000300", @ANYRES32=r2, @ANYBLOB="05001f0002000000080021"], 0x2c}}, 0x0) 10m2.96687283s ago: executing program 35 (id=12436): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000340), r0) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000000380)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_DEL_SEC_LEVEL(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000440)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000000002300000008000300", @ANYRES32=r2, @ANYBLOB="05001f0002000000080021"], 0x2c}}, 0x0) 8m20.124246568s ago: executing program 4 (id=12451): mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) mount(&(0x7f0000000200)=@filename='mtd0\x00', &(0x7f0000000100)='./file0\x00', &(0x7f0000000300)='jffs2\x00', 0x0, 0x0) lsetxattr(&(0x7f00000002c0)='./file0\x00', &(0x7f0000000080)=@random={'security.', '\\\\\x00'}, 0x0, 0x0, 0x0) listxattr(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) 8m19.645233626s ago: executing program 4 (id=12453): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000740)=@base={0x6, 0x4, 0x3, 0x7}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007baaf8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000007008500000004"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r1}, 0xc) 8m19.348042269s ago: executing program 4 (id=12455): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000002c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_AUTHENTICATE(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000500)={0x4c, r1, 0x1, 0x70bd2a, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r2}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}], @NL80211_ATTR_SSID={0xa, 0x34, @default_ibss_ssid}, @key_params=[@NL80211_ATTR_KEY_DEFAULT_TYPES={0x4}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_KEY_DEFAULT_MGMT={0x4}], @NL80211_ATTR_AUTH_TYPE={0x8, 0x35, 0x7}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4040000}, 0x0) 8m18.593283329s ago: executing program 4 (id=12457): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./mydev\x00', 0x1ff) mount(0x0, &(0x7f0000000200)='./mydev\x00', &(0x7f0000000300)='devtmpfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./mydev/ttyS0\x00', 0x2, 0x0) ioctl$TIOCGICOUNT(r0, 0x545d, 0x604000000000000) 8m18.107525075s ago: executing program 4 (id=12458): r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x51) ioctl$FS_IOC_FSSETXATTR(r0, 0x401c5820, &(0x7f0000000080)={0x8}) r1 = socket$unix(0x1, 0x1, 0x0) bind$unix(r1, &(0x7f0000003000)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) 8m17.63894686s ago: executing program 4 (id=12461): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f00000003c0)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x80000001, 0x4, 0x32, 0x0, 0x2}, 0x9c) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000500)={0x0, @in6={{0xa, 0x0, 0x0, @empty}}, 0x1, 0xfffe, 0x0, 0x6, 0x8a}, 0x9c) sendto$inet6(r0, &(0x7f00000005c0)='\t', 0x1, 0x65055, &(0x7f0000000600)={0xa, 0x4e20, 0x200, @remote, 0x7}, 0x1c) 8m1.498338803s ago: executing program 36 (id=12461): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f00000003c0)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x80000001, 0x4, 0x32, 0x0, 0x2}, 0x9c) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000500)={0x0, @in6={{0xa, 0x0, 0x0, @empty}}, 0x1, 0xfffe, 0x0, 0x6, 0x8a}, 0x9c) sendto$inet6(r0, &(0x7f00000005c0)='\t', 0x1, 0x65055, &(0x7f0000000600)={0xa, 0x4e20, 0x200, @remote, 0x7}, 0x1c) 3m49.30664165s ago: executing program 9 (id=13969): r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) close_range(r1, 0xffffffffffffffff, 0x0) ioctl(r0, 0x3b8e, &(0x7f0000000240)="10") write$FUSE_LSEEK(r1, 0x0, 0x0) 3m48.625148318s ago: executing program 9 (id=13972): r0 = socket$kcm(0xa, 0x5, 0x0) sendmsg$kcm(r0, &(0x7f0000002dc0)={&(0x7f0000001640)=@l2tp6={0xa, 0x0, 0x7fff, @local, 0x8}, 0x80, &(0x7f0000000340)=[{&(0x7f00000003c0)='`', 0x1}], 0x1}, 0x41) setsockopt$sock_attach_bpf(r0, 0x84, 0x1e, &(0x7f0000000000), 0x4) r1 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000002b40)=[{&(0x7f0000002c80)="d8000000100081046881f782db44b904021d080b01000000e8fe55a11800150006001400060000320800040043000000a80016000a000140fcff0c3f036010fab94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef52a979832adbca28d9fb1ad28516277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b0d16a4683f1aeb4edbb57a5025ccca9e00360db70100000040fad95667e006dcdf63951f215ce3bb9ad809d5f0cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d9374e2501f7c82a89276a2e116214695", 0xd8}], 0x1, 0x0, 0x0, 0xc3ff}, 0x14) 3m48.165806883s ago: executing program 9 (id=13975): sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x40) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000500)=ANY=[@ANYBLOB="bc000000000105060100000000000000020000003400018014000180080001007f000001080002007f0000011c000280050001000600000006000200303900000600030006bb00003400028014000180080001007f000001080002007f0000011c00028005000100060000000600020006bb00000600030030390000080003000000000e08000700000000780d0005800900010070707470"], 0xbc}}, 0x0) sendmsg$IPCTNL_MSG_CT_DELETE(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000640)={0x14, 0x2, 0x1, 0x5, 0x0, 0x0, {0x2, 0x0, 0x8}}, 0x14}, 0x1, 0x0, 0x0, 0x20044804}, 0x4044040) 3m47.236095775s ago: executing program 9 (id=13978): mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0) mount$bind(&(0x7f0000000280)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) chroot(&(0x7f0000000100)='./file0/../file0\x00') mount$bind(&(0x7f0000000040)='.\x00', &(0x7f00000008c0)='./file0\x00', 0x0, 0x2a05004, 0x0) pivot_root(&(0x7f00000000c0)='./file0/../file0\x00', &(0x7f0000000080)='./file0\x00') 3m46.789732947s ago: executing program 9 (id=13982): mkdir(0x0, 0x1ff) r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000340)={'wlan0\x00', 0x0}) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), r0) sendmsg$NL80211_CMD_SET_QOS_MAP(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000500)={0x1c, r2, 0x1, 0x70bd2b, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r1}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x2000010}, 0x8000) 3m44.938937023s ago: executing program 9 (id=13988): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000004700)=ANY=[@ANYBLOB="12010000e3ddef20501da1604fa1010203010902120001000000000904"], 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f0000004740)={0x1c, &(0x7f0000004780)=ANY=[], 0x0, 0x0}) syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f00000047c0)={0x1c, &(0x7f0000004800)=ANY=[], 0x0, 0x0}) syz_usb_control_io$rtl8150(r0, 0x0, &(0x7f0000004840)={0x2c, &(0x7f0000004880)=ANY=[], 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$uac2(r0, 0x0, &(0x7f0000004bc0)={0x44, &(0x7f0000004980)={0x40, 0x16}, 0x0, 0x0, &(0x7f0000004a80)={0x20, 0x81, 0x1, "f8"}, 0x0, 0x0, 0x0, 0x0}) 3m43.804752634s ago: executing program 37 (id=13988): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000004700)=ANY=[@ANYBLOB="12010000e3ddef20501da1604fa1010203010902120001000000000904"], 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f0000004740)={0x1c, &(0x7f0000004780)=ANY=[], 0x0, 0x0}) syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f00000047c0)={0x1c, &(0x7f0000004800)=ANY=[], 0x0, 0x0}) syz_usb_control_io$rtl8150(r0, 0x0, &(0x7f0000004840)={0x2c, &(0x7f0000004880)=ANY=[], 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$uac2(r0, 0x0, &(0x7f0000004bc0)={0x44, &(0x7f0000004980)={0x40, 0x16}, 0x0, 0x0, &(0x7f0000004a80)={0x20, 0x81, 0x1, "f8"}, 0x0, 0x0, 0x0, 0x0}) 3.662800715s ago: executing program 6 (id=15107): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x41, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000dc0)={0x0, 0xfffffff5, 0x5, 0xd000, 0xe, "0062ba7d8200000016001b001e00f705096604"}) r1 = syz_open_pts(r0, 0xa0200) dup3(r1, r0, 0x0) syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') 3.447744043s ago: executing program 0 (id=15110): mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000002, 0x200000005c831, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x801) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000000c0)={0xaa, 0x4}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f00000001c0)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x1}) ioctl$UFFDIO_CONTINUE(r0, 0xc020aa08, &(0x7f0000000200)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}}) 3.396701371s ago: executing program 6 (id=15111): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xa, 0x4, 0x1008, 0xa, 0x0, 0xffffffffffffffff, 0xfffffffd}, 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000800)={0x1f, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f000000180100002020642500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x1b}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x14, &(0x7f0000000400)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x40f03, 0xe, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r1}, 0xc) 3.234688864s ago: executing program 0 (id=15113): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000a40), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000a80)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000ac0)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}) write$tun(r0, &(0x7f0000000b00)={@val={0x8, 0x19}, @val={0x5, 0x0, 0x2, 0xe7b6, 0x15, 0x3}, @ipv4=@tcp={{0x5, 0x4, 0x0, 0x8, 0x28, 0x68, 0x0, 0x3, 0x6, 0x0, @private=0xa010100, @multicast1}, {{0x4e20, 0x4e28, 0x41424344, 0x41424344, 0x1, 0x0, 0x5, 0x10, 0x7, 0x0, 0x8}}}}, 0x36) 3.127898263s ago: executing program 6 (id=15114): r0 = socket$inet(0x2, 0x1, 0x0) setsockopt$IP_VS_SO_SET_ADD(r0, 0x0, 0x482, &(0x7f0000000000)={0x6, @loopback, 0x15, 0x0, 'sed\x00', 0x1d}, 0x2c) setsockopt$IP_VS_SO_SET_ADDDEST(r0, 0x0, 0x487, &(0x7f0000000100)={{0x6, @loopback, 0x15, 0x0, 'rr\x00', 0xe}, {@loopback, 0x4908, 0x0, 0x1}}, 0x44) r1 = socket$inet(0x2, 0x1, 0x6) connect(r1, &(0x7f0000000200)=@in={0x2, 0x15, @loopback}, 0x10) 2.867816144s ago: executing program 6 (id=15116): getpid() prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) tgkill(0xffffffffffffffff, 0x0, 0x12) 2.767553195s ago: executing program 5 (id=15118): sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000001340)={0x0, 0x4c}}, 0x40000) bpf$BPF_BTF_GET_NEXT_ID(0x17, 0x0, 0x0) r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) ioctl$sock_ifreq(r0, 0x8910, &(0x7f0000000000)={'netdevsim0\x00', @ifru_ivalue=0x4}) ioctl$sock_netdev_private(r0, 0x89f3, &(0x7f0000000000)) 2.728477033s ago: executing program 0 (id=15119): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$fou(&(0x7f0000000080), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r2, 0x8933, &(0x7f0000000000)={'batadv0\x00', 0x0}) sendmsg$FOU_CMD_ADD(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000040)={0x40, r1, 0x209, 0x70bd28, 0x25dfdbfe, {}, [@FOU_ATTR_AF={0x5, 0x2, 0xa}, @FOU_ATTR_LOCAL_V6={0x14, 0x7, @loopback={0xff00000000000000}}, @FOU_ATTR_TYPE={0x5, 0x4, 0x2}, @FOU_ATTR_IFINDEX={0x8, 0xb, r3}]}, 0x40}, 0x1, 0x0, 0x0, 0x40010}, 0x0) 2.67242974s ago: executing program 7 (id=15120): r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000001c0)={'team_slave_1\x00', 0x0}) r2 = syz_genetlink_get_family_id$team(&(0x7f0000000180), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000040)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_SET(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)={0x5c, r2, 0x1, 0x1, 0x25dfdc01, {}, [{{0x8, 0x1, r3}, {0x40, 0x2, 0x0, 0x1, [{0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r1}}}]}}]}, 0x5c}, 0x1, 0x400000000000000}, 0x40810) 2.544976938s ago: executing program 8 (id=15121): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000feffff10850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x20842, 0x0) write$binfmt_misc(r1, &(0x7f0000000540)="566f31e789", 0x5) mmap(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1, 0x10012, r1, 0x0) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000012c0)={r0, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f0000000140)='./file0\x00', &(0x7f00000002c0)=[0x4], 0x0, 0x0, 0x1, 0x1}}, 0x40) 2.529131255s ago: executing program 5 (id=15122): bpf$MAP_CREATE(0x0, &(0x7f0000000480)=ANY=[@ANYBLOB="0b00000005000000010001000000008001"], 0x50) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000800)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x2c}, 0x94) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000000)={r1, 0xe0, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) sendmsg$nl_route_sched(r0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000340)=@newqdisc={0x78, 0x24, 0xf0b, 0x70bd2e, 0x0, {0x0, 0x0, 0x12, r2, {0x0, 0x8}, {0xffff, 0xffff}, {0x2}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c, 0x2, {{0x2, 0x14ae4701, 0x3, 0x2, 0x6}, 0xa, 0x1, 0x6, 0x28, 0x9, 0x2, 0x1f, 0x19, 0x1, 0xffff65df, {0xfff, 0x1, 0xfffffde8, 0x60000, 0x40, 0xb414}}}}]}, 0x78}, 0x1, 0x0, 0x0, 0x4001}, 0x0) 2.501752024s ago: executing program 0 (id=15123): setresuid(0x0, 0xee00, 0x0) r0 = msgget$private(0x0, 0x1c0) msgctl$IPC_SET(r0, 0x1, &(0x7f0000000280)={{0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x96}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}) msgsnd(r0, &(0x7f0000000ac0)={0x3}, 0x8, 0x0) msgctl$IPC_RMID(r0, 0x0) 2.38464553s ago: executing program 7 (id=15124): r0 = syz_open_dev$sndpcmp(&(0x7f0000000100), 0x0, 0x2) ioctl$SNDRV_PCM_IOCTL_HW_PARAMS(r0, 0xc2604111, &(0x7f0000000200)={0x0, [[0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff, 0x719e, 0xffffffff, 0x3], [0xfffffbfc, 0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff, 0x2, 0xffffffff], [0xffdfffff, 0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff]], '\x00', [{0x0, 0xffffffff}, {0x0, 0xffffffff}, {0x0, 0xffffffff}, {0x0, 0xffffffff}, {0x2, 0xffffffff}, {0x0, 0xffffffff}, {0x0, 0xffffffff}, {0x0, 0xffffffff}, {0x0, 0xffffffff}, {0x0, 0xffffffff}, {0x0, 0xffffffff}, {0x10000, 0xffffffff}]}) ioctl$SNDRV_PCM_IOCTL_PREPARE(r0, 0x4140, 0x0) ioctl$SNDRV_PCM_IOCTL_WRITEI_FRAMES(r0, 0x40184150, &(0x7f0000000140)={0x0, &(0x7f0000000500)='\x00', 0x1}) ioctl$SNDRV_PCM_IOCTL_FORWARD(r0, 0x40084149, &(0x7f0000000000)=0x3) 2.270874082s ago: executing program 5 (id=15125): socket$nl_route(0x10, 0x3, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000300)=ANY=[@ANYBLOB="1800000005000000000000000000000095"], &(0x7f00000003c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x2c}, 0x94) socket$nl_netfilter(0x10, 0x3, 0xc) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="0e000000040000000800000007"], 0x50) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000100)={r0, &(0x7f0000000100), 0x0}, 0x20) 2.237387205s ago: executing program 8 (id=15126): mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./proc\x00', 0x4) mount(0x0, &(0x7f0000000380)='./proc\x00', &(0x7f0000000540)='proc\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000580)='./proc/thread-self/fail-nth\x00', 0x2, 0x10b) write(r0, &(0x7f00000005c0)='9', 0x1) syz_open_dev$radio(&(0x7f0000000000), 0x2, 0x2) 2.202392532s ago: executing program 0 (id=15127): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000280)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f0000000080)={@val={0x0, 0x6003}, @void, @eth={@broadcast, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x2}, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x20, 0x4000, 0x0, 0x3, 0x2f, 0x0, @private=0x1fe1, @multicast1}, {0xa000, 0x8864, 0xc, 0x0, @gue={{0x1, 0x0, 0x1, 0x9, 0x0, @void}}}}}}}}, 0x32) 2.156637385s ago: executing program 7 (id=15128): mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x1000000) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000380)='./proc\x00', &(0x7f00000003c0)='proc\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./proc/sys/net/rds/tcp/rds_tcp_sndbuf\x00', 0x1, 0x0) write$binfmt_format(r0, 0x0, 0x0) 1.979526623s ago: executing program 5 (id=15129): r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000300), 0xa4242, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000007, 0x38011, r0, 0x0) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0xe) r1 = syz_open_procfs(0x0, &(0x7f0000000340)='smaps\x00') read$FUSE(r1, &(0x7f0000000380)={0x2020}, 0x2020) 1.96416398s ago: executing program 8 (id=15130): r0 = openat$kvm(0x0, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) openat$snapshot(0xffffffffffffff9c, &(0x7f00000004c0), 0x2000, 0x0) 1.886591223s ago: executing program 7 (id=15131): r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(r0, 0xc004500a, &(0x7f0000000000)) ioctl$SNDCTL_DSP_SPEED(r0, 0xc0045002, &(0x7f00000001c0)) ioctl$SNDCTL_DSP_CHANNELS(r0, 0xc0045006, &(0x7f0000000040)=0x20) ioctl$SNDCTL_DSP_GETFMTS(r0, 0x8004500b, 0x0) 1.608666324s ago: executing program 7 (id=15132): mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000100)='./sys\x00', &(0x7f0000000140)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./sys/devices/system/cpu/smt/control\x00', 0x1, 0x0) write(r0, &(0x7f00000001c0)='off', 0x3) write(r0, &(0x7f0000000200)='on', 0x2) 1.588558172s ago: executing program 0 (id=15133): r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) connect$inet(r0, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10) sendmmsg(r0, &(0x7f0000007fc0), 0x800001d, 0x0) setsockopt$IP_VS_SO_SET_ADD(r0, 0x0, 0x482, &(0x7f0000000040)={0x100000011, @multicast2, 0x0, 0x0, 'none\x00', 0xc0dc6d063983cf19, 0x3, 0x55}, 0x2c) 1.555452057s ago: executing program 5 (id=15134): mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0xae4d2f8ed3bfc611) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f0000000100)='proc\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) write(r0, &(0x7f0000000000)='7', 0x1) keyctl$get_persistent(0x16, 0xffffffffffffffff, 0xfffffffffffffffd) 1.522315716s ago: executing program 8 (id=15135): mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x1f7) mount(0x0, &(0x7f0000000040)='./proc\x00', &(0x7f0000000100)='proc\x00', 0x2000008, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) write(r0, &(0x7f0000000000)='3', 0x4e) inotify_init1(0x800) 1.399454748s ago: executing program 6 (id=15136): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(&(0x7f0000000040)=@filename='none\x00', &(0x7f0000000080)='./sys\x00', &(0x7f00000000c0)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./sys/devices/system/cpu/online\x00', 0x0, 0x0) read(r0, &(0x7f0000000140)=""/100, 0x64) close(r0) 795.08902ms ago: executing program 5 (id=15137): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_syzos_vm$x86(r1, &(0x7f0000c00000/0x400000)=nil) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl(r2, 0x4048aecb, &(0x7f0000000100)="01") 706.65835ms ago: executing program 8 (id=15138): r0 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000740), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r0, 0x7a7, &(0x7f0000000080)=0xb0000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r0, 0x7a0, &(0x7f0000000000)={@my=0x0}) ioctl$IOCTL_VMCI_NOTIFY_RESOURCE(r0, 0x7a5, &(0x7f0000000180)={{@my=0x0}, 0x0, 0x1}) ioctl$IOCTL_VMCI_NOTIFY_RESOURCE(r0, 0x7a5, &(0x7f00000000c0)={{@my=0x0}, 0x1, 0x1, 0x7fff}) 286.511041ms ago: executing program 6 (id=15139): r0 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x40042, 0x1) close_range(r0, r0, 0x2) socket(0x1d, 0x80802, 0x6) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="1f00000000000000000000000010"], 0x48) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000480), 0x84, &(0x7f0000000180)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) 184.373269ms ago: executing program 8 (id=15140): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r0, &(0x7f0000000100)='X', 0x34000, 0x0, &(0x7f0000000140)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) shutdown(r0, 0x2) shutdown(r0, 0x1) 0s ago: executing program 7 (id=15141): socket$nl_generic(0x10, 0x3, 0x10) r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000280)=ANY=[@ANYBLOB="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"], 0x114}], 0x1, 0x0, 0x0, 0x1}, 0x0) r1 = syz_open_dev$evdev(&(0x7f0000000180), 0x2, 0x8000) ioctl$EVIOCSKEYCODE_V2(r1, 0x40284504, &(0x7f00000001c0)={0xbe, 0x1, 0x7, 0xc, "36b672fce5089127cb8aa13c5a702ee5af043fb08ca20461f3c5c35417ce4ea0"}) kernel console output (not intermixed with test programs): [ 1766.198979][ T2336] pvrusb2: Invalid write control endpoint [ 1766.198990][ T2336] pvrusb2: ***WARNING*** Detected a wedged cx25840 chip; the device will not work. [ 1766.198996][ T2336] pvrusb2: ***WARNING*** Try power cycling the pvrusb2 device. [ 1766.199000][ T2336] pvrusb2: ***WARNING*** Disabling further access to the device to prevent other foul-ups. [ 1766.199006][ T2336] pvrusb2: Device being rendered inoperable [ 1766.201841][ T2336] cx25840 3-0044: Unable to detect h/w, assuming cx23887 [ 1766.201875][ T2336] cx25840 3-0044: cx23887 A/V decoder found @ 0x88 (pvrusb2_a) [ 1766.321345][ T2336] pvrusb2: Attached sub-driver cx25840 [ 1766.321357][ T2336] pvrusb2: ***WARNING*** pvrusb2 device hardware appears to be jammed and I can't clear it. [ 1766.321363][ T2336] pvrusb2: You might need to power cycle the pvrusb2 device in order to recover. [ 1766.971415][ T31] kauditd_printk_skb: 266 callbacks suppressed [ 1766.971430][ T31] audit: type=1400 audit(1700001453.615:79742): avc: denied { prog_load } for pid=24881 comm="syz.5.14609" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 1766.971462][ T31] audit: type=1400 audit(1700001453.615:79743): avc: denied { bpf } for pid=24881 comm="syz.5.14609" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 1766.971494][ T31] audit: type=1400 audit(1700001453.615:79744): avc: denied { perfmon } for pid=24881 comm="syz.5.14609" capability=38 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 1766.971518][ T31] audit: type=1400 audit(1700001453.615:79745): avc: denied { prog_load } for pid=24881 comm="syz.5.14609" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 1767.016514][ T10] usb 8-1: new high-speed USB device number 20 using dummy_hcd [ 1767.018600][ T31] audit: type=1400 audit(1700001453.662:79746): avc: denied { ioctl } for pid=24869 comm="syz.7.14608" path="/dev/raw-gadget" dev="devtmpfs" ino=814 ioctlcmd=0x5503 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 1767.045280][ T31] audit: type=1400 audit(1700001453.690:79747): avc: denied { bpf } for pid=24881 comm="syz.5.14609" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 1767.045317][ T31] audit: type=1400 audit(1700001453.690:79748): avc: denied { prog_run } for pid=24881 comm="syz.5.14609" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 1767.045687][ T31] audit: type=1400 audit(1700001453.690:79749): avc: denied { ioctl } for pid=24869 comm="syz.7.14608" path="/dev/raw-gadget" dev="devtmpfs" ino=814 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 1767.242738][ T31] audit: type=1400 audit(1700001453.868:79750): avc: denied { ioctl } for pid=24869 comm="syz.7.14608" path="/dev/raw-gadget" dev="devtmpfs" ino=814 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 1767.242941][ T10] usb 8-1: New USB device found, idVendor=1d50, idProduct=614d, bcdDevice= 1.00 [ 1767.247133][ T10] usb 8-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1767.247167][ T10] usb 8-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 1767.247181][ T10] usb 8-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 1767.247195][ T10] usb 8-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1767.247219][ T10] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1767.679410][ T31] audit: type=1400 audit(1700001454.279:79751): avc: denied { ioctl } for pid=24869 comm="syz.7.14608" path="/dev/raw-gadget" dev="devtmpfs" ino=814 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 1768.579861][ T10] gud 8-1:1.0: DP-1: Failed to add properties (ret=-71) [ 1768.579892][ T10] gud 8-1:1.0: Failed to get connectors (error=-71) [ 1768.579907][ T10] gud 8-1:1.0: probe with driver gud failed with error -71 [ 1768.702119][ T10] usb 8-1: USB disconnect, device number 20 [ 1768.884191][T23998] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 1768.927191][T23998] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1768.949460][T23998] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 1768.979958][T23998] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1768.980945][T23998] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 1769.014563][T23998] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1769.015531][T23998] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 1769.093209][T23998] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1769.632843][T23998] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1769.743541][T23998] 8021q: adding VLAN 0 to HW filter on device team0 [ 1769.790774][ T9958] usb 8-1: new high-speed USB device number 21 using dummy_hcd [ 1769.795949][T11736] bridge0: port 1(bridge_slave_0) entered blocking state [ 1769.796006][T11736] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1769.828889][T10099] bridge0: port 2(bridge_slave_1) entered blocking state [ 1769.828955][T10099] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1769.955493][ T9958] usb 8-1: New USB device found, idVendor=1d34, idProduct=000a, bcdDevice= 0.00 [ 1769.977206][ T9958] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1769.977227][ T9958] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1769.977249][ T9958] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1770.023548][ T9958] usb 8-1: config 0 descriptor?? [ 1770.174467][ T9948] usb 1-1: new high-speed USB device number 61 using dummy_hcd [ 1770.336038][ T9948] usb 1-1: Using ep0 maxpacket: 8 [ 1770.341478][ T9948] usb 1-1: New USB device found, idVendor=0ccd, idProduct=0039, bcdDevice=90.7b [ 1770.344037][ T9948] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1770.396253][ T9948] pvrusb2: Hardware description: Terratec Grabster AV400 [ 1770.396267][ T9948] pvrusb2: ********** [ 1770.396271][ T9948] pvrusb2: ***WARNING*** Support for this device (Terratec Grabster AV400) is experimental. [ 1770.396278][ T9948] pvrusb2: Important functionality might not be entirely working. [ 1770.396283][ T9948] pvrusb2: Please consider contacting the driver author to help with further stabilization of the driver. [ 1770.396289][ T9948] pvrusb2: ********** [ 1770.564825][ T9958] hid-led 0003:1D34:000A.0061: unknown main item tag 0x0 [ 1770.564849][ T9958] hid-led 0003:1D34:000A.0061: unknown main item tag 0x0 [ 1770.564865][ T9958] hid-led 0003:1D34:000A.0061: unknown main item tag 0x0 [ 1770.668572][ T2336] pvrusb2: Invalid write control endpoint [ 1770.823289][ T9958] hid-led 0003:1D34:000A.0061: hidraw0: USB HID v0.00 Device [HID 1d34:000a] on usb-dummy_hcd.7-1/input0 [ 1770.933658][ T9958] hid-led 0003:1D34:000A.0061: Dream Cheeky Webmail Notifier initialized [ 1771.021421][ T9948] usb 1-1: USB disconnect, device number 61 [ 1771.166114][T14153] usb 8-1: USB disconnect, device number 21 [ 1771.238991][ T5262] 8021q: adding VLAN 0 to HW filter on device eth25 [ 1771.281397][ T2336] pvrusb2: Invalid write control endpoint [ 1771.281409][ T2336] pvrusb2: ***WARNING*** Detected a wedged cx25840 chip; the device will not work. [ 1771.281415][ T2336] pvrusb2: ***WARNING*** Try power cycling the pvrusb2 device. [ 1771.281419][ T2336] pvrusb2: ***WARNING*** Disabling further access to the device to prevent other foul-ups. [ 1771.281424][ T2336] pvrusb2: Device being rendered inoperable [ 1771.282506][ T2336] cx25840 3-0044: Unable to detect h/w, assuming cx23887 [ 1771.282538][ T2336] cx25840 3-0044: cx23887 A/V decoder found @ 0x88 (pvrusb2_a) [ 1771.385701][ T2336] pvrusb2: Attached sub-driver cx25840 [ 1771.385715][ T2336] pvrusb2: ***WARNING*** pvrusb2 device hardware appears to be jammed and I can't clear it. [ 1771.385721][ T2336] pvrusb2: You might need to power cycle the pvrusb2 device in order to recover. [ 1771.540090][T24996] fido_id[24996]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.7/usb8/8-1/report_descriptor': No such file or directory [ 1772.323541][ T31] kauditd_printk_skb: 463 callbacks suppressed [ 1772.323555][ T31] audit: type=1400 audit(1700001458.629:80215): avc: denied { search } for pid=25049 comm="dhcpcd-run-hook" name="dhcpcd" dev="tmpfs" ino=1770 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1772.325283][ T31] audit: type=1400 audit(1700001458.629:80216): avc: denied { search } for pid=25049 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1772.325438][ T31] audit: type=1400 audit(1700001458.629:80217): avc: denied { search } for pid=25049 comm="dhcpcd-run-hook" name="resolv.conf" dev="tmpfs" ino=1775 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1772.405309][T14153] usb 9-1: new high-speed USB device number 15 using dummy_hcd [ 1772.449776][ T31] audit: type=1400 audit(1700001458.741:80218): avc: denied { ioctl } for pid=25039 comm="syz.8.14637" path="/dev/raw-gadget" dev="devtmpfs" ino=814 ioctlcmd=0x5503 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 1772.480766][ T31] audit: type=1400 audit(1700001458.769:80219): avc: denied { sys_module } for pid=23998 comm="syz-executor" capability=16 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 1772.480799][ T31] audit: type=1400 audit(1700001458.769:80220): avc: denied { module_request } for pid=23998 comm="syz-executor" kmod="caif0" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1 [ 1772.534551][ T31] audit: type=1400 audit(1700001458.825:80221): avc: denied { ioctl } for pid=25039 comm="syz.8.14637" path="/dev/raw-gadget" dev="devtmpfs" ino=814 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 1772.607157][ T31] audit: type=1400 audit(1700001458.891:80222): avc: denied { read } for pid=20919 comm="syz-executor" name="loop0" dev="devtmpfs" ino=645 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 1772.608090][ T31] audit: type=1400 audit(1700001458.891:80223): avc: denied { open } for pid=20919 comm="syz-executor" path="/dev/loop0" dev="devtmpfs" ino=645 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 1772.646689][T14153] usb 9-1: Using ep0 maxpacket: 8 [ 1772.703608][ T31] audit: type=1400 audit(1700001458.956:80224): avc: denied { ioctl } for pid=20919 comm="syz-executor" path="/dev/loop0" dev="devtmpfs" ino=645 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 1772.758722][T14153] usb 9-1: New USB device found, idVendor=0ccd, idProduct=0039, bcdDevice=90.7b [ 1772.770887][T14153] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1772.807811][T14153] pvrusb2: Hardware description: Terratec Grabster AV400 [ 1772.807827][T14153] pvrusb2: ********** [ 1772.807830][T14153] pvrusb2: ***WARNING*** Support for this device (Terratec Grabster AV400) is experimental. [ 1772.807837][T14153] pvrusb2: Important functionality might not be entirely working. [ 1772.807842][T14153] pvrusb2: Please consider contacting the driver author to help with further stabilization of the driver. [ 1772.807848][T14153] pvrusb2: ********** [ 1773.092737][ T2336] pvrusb2: Invalid write control endpoint [ 1773.250432][T14153] libceph: mon0 (1)0.0.0.0:6789 socket error on write [ 1773.413497][T14153] usb 9-1: USB disconnect, device number 15 [ 1773.508415][ T2336] pvrusb2: Invalid write control endpoint [ 1773.508427][ T2336] pvrusb2: ***WARNING*** Detected a wedged cx25840 chip; the device will not work. [ 1773.508432][ T2336] pvrusb2: ***WARNING*** Try power cycling the pvrusb2 device. [ 1773.508437][ T2336] pvrusb2: ***WARNING*** Disabling further access to the device to prevent other foul-ups. [ 1773.508442][ T2336] pvrusb2: Device being rendered inoperable [ 1773.508463][ T2336] cx25840 3-0044: Unable to detect h/w, assuming cx23887 [ 1773.508488][ T2336] cx25840 3-0044: cx23887 A/V decoder found @ 0x88 (pvrusb2_a) [ 1773.508923][ T2336] pvrusb2: Attached sub-driver cx25840 [ 1773.508930][ T2336] pvrusb2: ***WARNING*** pvrusb2 device hardware appears to be jammed and I can't clear it. [ 1773.508935][ T2336] pvrusb2: You might need to power cycle the pvrusb2 device in order to recover. [ 1773.572028][T23998] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1773.694267][T25066] IPVS: Scheduler module ip_vs_sip not found [ 1773.727302][ T9948] libceph: mon0 (1)0.0.0.0:6789 socket error on write [ 1773.892661][T25056] ceph: No mds server is up or the cluster is laggy [ 1774.537918][T25100] rxe_eth0 speed is unknown, defaulting to 1000 [ 1774.779646][ T5262] 8021q: adding VLAN 0 to HW filter on device eth26 [ 1774.908068][T14153] libceph: mon0 (1)0.0.0.0:6789 socket closed (con state V1_BANNER) [ 1775.198189][T23998] veth0_vlan: entered promiscuous mode [ 1775.257225][T23998] veth1_vlan: entered promiscuous mode [ 1775.451813][T14153] libceph: mon0 (1)0.0.0.0:6789 socket closed (con state V1_BANNER) [ 1775.453522][T23998] veth0_macvtap: entered promiscuous mode [ 1775.508378][T23998] veth1_macvtap: entered promiscuous mode [ 1775.609048][T23998] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1775.638661][T25116] ceph: No mds server is up or the cluster is laggy [ 1775.692703][T23998] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1775.753583][T10099] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1775.855882][T10099] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1775.855992][T10099] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1775.856013][T10099] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1776.780258][T11736] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1776.780275][T11736] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1777.033363][T10099] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1777.033380][T10099] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1777.413702][T25182] IPVS: Scheduler module ip_vs_sip not found [ 1777.679000][ T31] kauditd_printk_skb: 367 callbacks suppressed [ 1777.679014][ T31] audit: type=1400 audit(1700001463.633:80592): avc: denied { search } for pid=25193 comm="rm" name="dhcpcd" dev="tmpfs" ino=1770 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1777.679130][ T31] audit: type=1400 audit(1700001463.633:80593): avc: denied { search } for pid=25193 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1777.753730][ T31] audit: type=1400 audit(1700001463.699:80594): avc: denied { prog_load } for pid=25196 comm="syz.6.14529" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 1777.753765][ T31] audit: type=1400 audit(1700001463.699:80595): avc: denied { bpf } for pid=25196 comm="syz.6.14529" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 1777.753789][ T31] audit: type=1400 audit(1700001463.699:80596): avc: denied { perfmon } for pid=25196 comm="syz.6.14529" capability=38 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 1777.760699][ T31] audit: type=1400 audit(1700001463.708:80597): avc: denied { search } for pid=25127 comm="dhcpcd-run-hook" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1777.760993][ T31] audit: type=1400 audit(1700001463.708:80598): avc: denied { mac_admin } for pid=25195 comm="syz.5.14646" capability=33 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 1777.763052][ T31] audit: type=1400 audit(1700001463.708:80599): avc: denied { write } for pid=25199 comm="syz.0.14647" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 1777.763083][ T31] audit: type=1400 audit(1700001463.708:80600): avc: denied { connect } for pid=25199 comm="syz.0.14647" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 1777.763106][ T31] audit: type=1400 audit(1700001463.708:80601): avc: denied { name_connect } for pid=25199 comm="syz.0.14647" dest=65532 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=sctp_socket permissive=1 [ 1778.000858][ T5262] 8021q: adding VLAN 0 to HW filter on device eth27 [ 1778.636486][T25224] netlink: 16 bytes leftover after parsing attributes in process `syz.8.14654'. [ 1779.514699][T25251] rxe_eth0 speed is unknown, defaulting to 1000 [ 1780.616646][T25291] netlink: 12 bytes leftover after parsing attributes in process `syz.8.14660'. [ 1780.631006][T25291] netlink: 12 bytes leftover after parsing attributes in process `syz.8.14660'. [ 1781.278045][T25316] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1781.933210][ T5262] 8021q: adding VLAN 0 to HW filter on device eth28 [ 1782.076154][ T9948] logitech-hidpp-device 0003:046D:C082.0062: hidraw0: USB HID v0.00 Device [syz0] on syz0 [ 1782.385195][T25342] rxe_eth0 speed is unknown, defaulting to 1000 [ 1782.832754][ T5333] usb 1-1: new full-speed USB device number 62 using dummy_hcd [ 1782.858990][T25366] netlink: 40 bytes leftover after parsing attributes in process `syz.7.14679'. [ 1782.994412][ T5333] usb 1-1: New USB device found, idVendor=056a, idProduct=5012, bcdDevice= 0.00 [ 1782.997487][ T5333] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 1782.997508][ T5333] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1782.997528][ T5333] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1783.065542][ T5333] usb 1-1: config 0 descriptor?? [ 1783.072526][ T31] kauditd_printk_skb: 693 callbacks suppressed [ 1783.072538][ T31] audit: type=1400 audit(1700001468.675:81295): avc: denied { ioctl } for pid=25349 comm="syz.0.14677" path="/dev/raw-gadget" dev="devtmpfs" ino=814 ioctlcmd=0x550a scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 1783.072571][ T31] audit: type=1400 audit(1700001468.675:81296): avc: denied { ioctl } for pid=25349 comm="syz.0.14677" path="/dev/raw-gadget" dev="devtmpfs" ino=814 ioctlcmd=0x5509 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 1783.169048][ T31] audit: type=1400 audit(1700001468.769:81297): avc: denied { search } for pid=25369 comm="sed" name="resolv.conf" dev="tmpfs" ino=1775 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1783.172899][ T31] audit: type=1400 audit(1700001468.769:81298): avc: denied { read } for pid=25369 comm="sed" name="eth0.dhcp" dev="tmpfs" ino=1807 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 1783.224747][ T31] audit: type=1400 audit(1700001468.825:81299): avc: denied { open } for pid=25369 comm="sed" path="/run/dhcpcd/hook-state/resolv.conf/eth0.dhcp" dev="tmpfs" ino=1807 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 1783.255739][ T31] audit: type=1400 audit(1700001468.853:81300): avc: denied { unmount } for pid=23998 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=filesystem permissive=1 [ 1783.257899][ T31] audit: type=1400 audit(1700001468.853:81301): avc: denied { getattr } for pid=25369 comm="sed" path="/run/dhcpcd/hook-state/resolv.conf/eth0.dhcp" dev="tmpfs" ino=1807 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 1783.353552][ T31] audit: type=1400 audit(1700001468.937:81302): avc: denied { ioctl } for pid=25349 comm="syz.0.14677" path="/dev/raw-gadget" dev="devtmpfs" ino=814 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 1783.393805][ T31] audit: type=1400 audit(1700001468.974:81303): avc: denied { create } for pid=25370 comm="syz.5.14680" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 1783.449659][ T31] audit: type=1400 audit(1700001469.030:81304): avc: denied { read } for pid=23998 comm="syz-executor" name="loop6" dev="devtmpfs" ino=651 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 1783.691096][ T5333] wacom 0003:056A:5012.0063: unknown main item tag 0x0 [ 1783.691119][ T5333] wacom 0003:056A:5012.0063: unknown main item tag 0x0 [ 1783.691135][ T5333] wacom 0003:056A:5012.0063: unknown main item tag 0x0 [ 1783.691150][ T5333] wacom 0003:056A:5012.0063: unknown main item tag 0x0 [ 1783.691165][ T5333] wacom 0003:056A:5012.0063: unknown main item tag 0x0 [ 1783.691180][ T5333] wacom 0003:056A:5012.0063: unknown main item tag 0x0 [ 1783.691195][ T5333] wacom 0003:056A:5012.0063: unknown main item tag 0x0 [ 1783.691209][ T5333] wacom 0003:056A:5012.0063: unknown main item tag 0x0 [ 1783.691223][ T5333] wacom 0003:056A:5012.0063: unknown main item tag 0x0 [ 1783.691237][ T5333] wacom 0003:056A:5012.0063: unknown main item tag 0x0 [ 1783.691538][ T5333] wacom 0003:056A:5012.0063: ignoring exceeding usage max [ 1783.799920][ T5333] wacom 0003:056A:5012.0063: reserved main item tag 0xd [ 1783.836456][ T5333] wacom 0003:056A:5012.0063: Unknown device_type for 'HID 056a:5012'. Ignoring. [ 1783.886571][ T5333] usb 1-1: USB disconnect, device number 62 [ 1785.978541][T25472] xt_hashlimit: size too large, truncated to 1048576 [ 1786.102418][T25474] netlink: 4 bytes leftover after parsing attributes in process `syz.8.14699'. [ 1786.470481][T25473] rxe_eth0 speed is unknown, defaulting to 1000 [ 1786.640053][T25493] binder: 25490:25493 ioctl c0306201 2000000009c0 returned -14 [ 1787.033418][T25498] tap0: tun_chr_ioctl cmd 2148553947 [ 1787.051376][T25498] tap0: tun_chr_ioctl cmd 1074025677 [ 1787.051463][T25498] tap0: linktype set to 270 [ 1787.873642][T25534] FAULT_INJECTION: forcing a failure. [ 1787.873642][T25534] name failslab, interval 1, probability 0, space 0, times 0 [ 1787.873668][T25534] CPU: 0 UID: 0 PID: 25534 Comm: syz.8.14711 Tainted: G L syzkaller #0 PREEMPT(full) [ 1787.873686][T25534] Tainted: [L]=SOFTLOCKUP [ 1787.873691][T25534] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 1787.873699][T25534] Call Trace: [ 1787.873704][T25534] [ 1787.873709][T25534] dump_stack_lvl+0x100/0x190 [ 1787.873732][T25534] should_fail_ex.cold+0x5/0xa [ 1787.873752][T25534] should_failslab+0xc2/0x120 [ 1787.873771][T25534] __kvmalloc_node_noprof+0x113/0x9b0 [ 1787.873788][T25534] ? __do_sys_setgroups+0x126/0x4f0 [ 1787.873811][T25534] __do_sys_setgroups+0x126/0x4f0 [ 1787.873831][T25534] do_syscall_64+0x123/0x790 [ 1787.873849][T25534] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1787.873861][T25534] RIP: 0033:0x7f089259e559 [ 1787.873872][T25534] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1787.873885][T25534] RSP: 002b:00007f0893380028 EFLAGS: 00000246 ORIG_RAX: 0000000000000074 [ 1787.873897][T25534] RAX: ffffffffffffffda RBX: 00007f0892825fa0 RCX: 00007f089259e559 [ 1787.873905][T25534] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 1787.873912][T25534] RBP: 00007f08926358b0 R08: 0000000000000000 R09: 0000000000000000 [ 1787.873919][T25534] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1787.873926][T25534] R13: 00007f0892826038 R14: 00007f0892825fa0 R15: 00007ffe7e102b18 [ 1787.873942][T25534] [ 1788.190369][T25545] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 1788.488953][T25556] bridge0: port 1(bridge_slave_0) entered disabled state [ 1788.531700][ T31] kauditd_printk_skb: 505 callbacks suppressed [ 1788.531714][ T31] audit: type=1400 audit(1700001473.792:81810): avc: denied { search } for pid=25554 comm="sed" name="resolv.conf" dev="tmpfs" ino=1775 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1788.531892][ T31] audit: type=1400 audit(1700001473.792:81811): avc: denied { read } for pid=25554 comm="sed" name="eth0.dhcp" dev="tmpfs" ino=1807 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 1788.532737][ T31] audit: type=1400 audit(1700001473.792:81812): avc: denied { open } for pid=25554 comm="sed" path="/run/dhcpcd/hook-state/resolv.conf/eth0.dhcp" dev="tmpfs" ino=1807 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 1788.534712][ T31] audit: type=1400 audit(1700001473.792:81813): avc: denied { getattr } for pid=25554 comm="sed" path="/run/dhcpcd/hook-state/resolv.conf/eth0.dhcp" dev="tmpfs" ino=1807 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 1788.686500][ T31] audit: type=1400 audit(1700001473.923:81814): avc: denied { name_bind } for pid=25561 comm="syz.5.14717" src=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:reserved_port_t tclass=tcp_socket permissive=1 [ 1788.686540][ T31] audit: type=1400 audit(1700001473.923:81815): avc: denied { node_bind } for pid=25561 comm="syz.5.14717" saddr=::1 src=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=tcp_socket permissive=1 [ 1788.739238][ T31] audit: type=1400 audit(1700001473.979:81816): avc: denied { name_bind } for pid=25560 comm="syz.0.14716" src=20002 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=tcp_socket permissive=1 [ 1788.741853][ T31] audit: type=1400 audit(1700001473.979:81817): avc: denied { read } for pid=23998 comm="syz-executor" name="loop6" dev="devtmpfs" ino=651 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 1788.741888][ T31] audit: type=1400 audit(1700001473.979:81818): avc: denied { read open } for pid=23998 comm="syz-executor" path="/dev/loop6" dev="devtmpfs" ino=651 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 1788.741914][ T31] audit: type=1400 audit(1700001473.979:81819): avc: denied { ioctl } for pid=23998 comm="syz-executor" path="/dev/loop6" dev="devtmpfs" ino=651 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 1789.144563][T25575] netlink: 12 bytes leftover after parsing attributes in process `syz.6.14718'. [ 1789.486014][T25576] rxe_eth0 speed is unknown, defaulting to 1000 [ 1789.690553][T25588] trusted_key: syz.8.14722 sent an empty control message without MSG_MORE. [ 1789.853568][T25596] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1790.706077][T25578] netlink: 'syz.7.14719': attribute type 4 has an invalid length. [ 1791.080587][T25617] rxe_eth0 speed is unknown, defaulting to 1000 [ 1791.091484][ T9958] usb 6-1: new high-speed USB device number 20 using dummy_hcd [ 1791.255905][ T9958] usb 6-1: Using ep0 maxpacket: 16 [ 1791.258342][ T9958] usb 6-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 1791.260452][ T9958] usb 6-1: config 0 interface 0 altsetting 64 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1791.260472][ T9958] usb 6-1: config 0 interface 0 altsetting 64 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1791.260485][ T9958] usb 6-1: config 0 interface 0 has no altsetting 0 [ 1791.260505][ T9958] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1791.374913][ T9958] usb 6-1: config 0 descriptor?? [ 1791.894957][ T9958] hid_parser_main: 443 callbacks suppressed [ 1791.894975][ T9958] mcp2221 0003:04D8:00DD.0064: unknown main item tag 0x0 [ 1791.894993][ T9958] mcp2221 0003:04D8:00DD.0064: unknown main item tag 0x0 [ 1791.895009][ T9958] mcp2221 0003:04D8:00DD.0064: unknown main item tag 0x0 [ 1791.895035][ T9958] mcp2221 0003:04D8:00DD.0064: unknown main item tag 0x0 [ 1791.895051][ T9958] mcp2221 0003:04D8:00DD.0064: unknown main item tag 0x0 [ 1791.956781][ T9958] mcp2221 0003:04D8:00DD.0064: USB HID v0.01 Device [HID 04d8:00dd] on usb-dummy_hcd.5-1/input0 [ 1792.321525][ T9958] usb 6-1: USB disconnect, device number 20 [ 1793.828966][T25765] netlink: 16 bytes leftover after parsing attributes in process `syz.0.14744'. [ 1793.959507][ T31] kauditd_printk_skb: 378 callbacks suppressed [ 1793.959522][ T31] audit: type=1400 audit(1700001478.861:82198): avc: denied { read } for pid=15435 comm="syz-executor" name="loop5" dev="devtmpfs" ino=650 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 1793.959554][ T31] audit: type=1400 audit(1700001478.861:82199): avc: denied { open } for pid=15435 comm="syz-executor" path="/dev/loop5" dev="devtmpfs" ino=650 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 1793.959578][ T31] audit: type=1400 audit(1700001478.861:82200): avc: denied { ioctl } for pid=15435 comm="syz-executor" path="/dev/loop5" dev="devtmpfs" ino=650 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 1794.085030][ T31] audit: type=1400 audit(1700001478.974:82201): avc: denied { read } for pid=20919 comm="syz-executor" name="loop0" dev="devtmpfs" ino=645 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 1794.085074][ T31] audit: type=1400 audit(1700001478.974:82202): avc: denied { open } for pid=20919 comm="syz-executor" path="/dev/loop0" dev="devtmpfs" ino=645 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 1794.086055][ T31] audit: type=1400 audit(1700001478.974:82203): avc: denied { ioctl } for pid=20919 comm="syz-executor" path="/dev/loop0" dev="devtmpfs" ino=645 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 1794.194127][T25768] vcan0: tx drop: invalid da for name 0x0000000000000003 [ 1794.195778][ T31] audit: type=1400 audit(1700001479.077:82204): avc: denied { search } for pid=25770 comm="dhcpcd-run-hook" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1794.297293][ T31] audit: type=1400 audit(1700001479.180:82205): avc: denied { read } for pid=12033 comm="syz-executor" name="loop7" dev="devtmpfs" ino=652 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 1794.297333][ T31] audit: type=1400 audit(1700001479.180:82206): avc: denied { open } for pid=12033 comm="syz-executor" path="/dev/loop7" dev="devtmpfs" ino=652 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 1794.297357][ T31] audit: type=1400 audit(1700001479.180:82207): avc: denied { ioctl } for pid=12033 comm="syz-executor" path="/dev/loop7" dev="devtmpfs" ino=652 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 1794.511863][T25777] vcan0: tx address claim with dest, not broadcast [ 1795.415161][T14162] usb 9-1: new high-speed USB device number 16 using dummy_hcd [ 1795.597388][T14162] usb 9-1: New USB device found, idVendor=0525, idProduct=127a, bcdDevice= 1.00 [ 1795.601046][T14162] usb 9-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1795.602240][T14162] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=0 [ 1795.602255][T14162] usb 9-1: Product: syz [ 1795.602264][T14162] usb 9-1: Manufacturer: syz [ 1795.606256][T14162] usb_debug 9-1:1.0: debug converter detected [ 1795.662871][T14162] usb 9-1: debug converter now attached to ttyUSB0 [ 1795.866467][T14153] usb 9-1: USB disconnect, device number 16 [ 1795.868927][T14153] debug ttyUSB0: debug converter now disconnected from ttyUSB0 [ 1795.869230][T14153] usb_debug 9-1:1.0: device disconnected                                                                                                                syzkaller syzkaller login: [ 1798.998582][T25947] xt_hashlimit: size too large, truncated to 1048576 [ 1799.226094][T25955] pci 0000:00:01.0: MSI/MSI-X disallowed for future drivers [ 1799.379573][ T31] kauditd_printk_skb: 368 callbacks suppressed [ 1799.379596][ T31] audit: type=1400 audit(1700001483.931:82576): avc: denied { name_bind } for pid=25957 comm="syz.8.14792" src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=tcp_socket permissive=1 [ 1799.379783][ T31] audit: type=1400 audit(1700001483.931:82577): avc: denied { node_bind } for pid=25957 comm="syz.8.14792" saddr=224.0.0.2 src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=tcp_socket permissive=1 [ 1799.481570][ T31] audit: type=1400 audit(1700001484.025:82578): avc: denied { read } for pid=20919 comm="syz-executor" name="loop0" dev="devtmpfs" ino=645 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 1799.481611][ T31] audit: type=1400 audit(1700001484.025:82579): avc: denied { read open } for pid=20919 comm="syz-executor" path="/dev/loop0" dev="devtmpfs" ino=645 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 1799.481636][ T31] audit: type=1400 audit(1700001484.025:82580): avc: denied { ioctl } for pid=20919 comm="syz-executor" path="/dev/loop0" dev="devtmpfs" ino=645 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 1799.614325][ T31] audit: type=1400 audit(1700001484.146:82581): avc: denied { read } for pid=12674 comm="syz-executor" name="loop8" dev="devtmpfs" ino=653 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 1799.616962][ T31] audit: type=1400 audit(1700001484.146:82582): avc: denied { read open } for pid=12674 comm="syz-executor" path="/dev/loop8" dev="devtmpfs" ino=653 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 1799.616999][ T31] audit: type=1400 audit(1700001484.146:82583): avc: denied { ioctl } for pid=12674 comm="syz-executor" path="/dev/loop8" dev="devtmpfs" ino=653 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 1799.741390][ T31] audit: type=1400 audit(1700001484.268:82584): avc: denied { read } for pid=15435 comm="syz-executor" name="loop5" dev="devtmpfs" ino=650 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 1799.741428][ T31] audit: type=1400 audit(1700001484.268:82585): avc: denied { open } for pid=15435 comm="syz-executor" path="/dev/loop5" dev="devtmpfs" ino=650 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 1800.162937][T14153] usb 1-1: new high-speed USB device number 64 using dummy_hcd [ 1800.321571][T14153] usb 1-1: Using ep0 maxpacket: 16 [ 1800.323290][T14153] usb 1-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 1800.329340][T14153] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1800.329360][T14153] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1800.329374][T14153] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 1800.329398][T14153] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1800.331653][T14153] usb 1-1: config 0 descriptor?? [ 1800.880880][T14153] microsoft 0003:045E:07DA.0065: unknown main item tag 0x0 [ 1800.880904][T14153] microsoft 0003:045E:07DA.0065: unknown main item tag 0x0 [ 1800.880923][T14153] microsoft 0003:045E:07DA.0065: unknown main item tag 0x0 [ 1800.880940][T14153] microsoft 0003:045E:07DA.0065: unknown main item tag 0x0 [ 1800.880955][T14153] microsoft 0003:045E:07DA.0065: unknown main item tag 0x0 [ 1800.880970][T14153] microsoft 0003:045E:07DA.0065: unknown main item tag 0x0 [ 1800.880986][T14153] microsoft 0003:045E:07DA.0065: unknown main item tag 0x0 [ 1800.881001][T14153] microsoft 0003:045E:07DA.0065: unknown main item tag 0x0 [ 1800.881017][T14153] microsoft 0003:045E:07DA.0065: unknown main item tag 0x0 [ 1800.881032][T14153] microsoft 0003:045E:07DA.0065: unknown main item tag 0x0 [ 1800.994112][T14153] input: HID 045e:07da as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/0003:045E:07DA.0065/input/input150 [ 1801.036558][T25993] netlink: 8 bytes leftover after parsing attributes in process `syz.5.14803'. [ 1801.036587][T25993] netlink: 20 bytes leftover after parsing attributes in process `syz.5.14803'. [ 1801.305726][T14153] microsoft 0003:045E:07DA.0065: input,hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.0-1/input0 [ 1801.355988][T14153] usb 1-1: USB disconnect, device number 64 [ 1801.489166][T25989] ip_tables: iptables: counters copy to user failed while replacing table [ 1801.677874][T26009] fido_id[26009]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.0/usb1/report_descriptor': No such file or directory [ 1801.815989][T26008] rxe_eth0 speed is unknown, defaulting to 1000 [ 1802.246032][T14153] usb 1-1: new high-speed USB device number 65 using dummy_hcd [ 1802.406831][T14153] usb 1-1: Using ep0 maxpacket: 8 [ 1802.423826][T14153] usb 1-1: New USB device found, idVendor=077d, idProduct=04aa, bcdDevice=5b.d8 [ 1802.425556][T14153] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 15 [ 1802.425586][T14153] usb 1-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1802.425601][T14153] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 1802.425617][T14153] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 1802.518035][T14153] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1802.518054][T14153] usb 1-1: Product: syz [ 1802.518063][T14153] usb 1-1: Manufacturer: syz [ 1802.518071][T14153] usb 1-1: SerialNumber: syz [ 1802.556064][T14153] usb 1-1: config 0 descriptor?? [ 1802.558951][T26023] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 1802.843812][T26042] FAULT_INJECTION: forcing a failure. [ 1802.843812][T26042] name failslab, interval 1, probability 0, space 0, times 0 [ 1802.843857][T26042] CPU: 0 UID: 0 PID: 26042 Comm: syz.6.14809 Tainted: G L syzkaller #0 PREEMPT(full) [ 1802.843875][T26042] Tainted: [L]=SOFTLOCKUP [ 1802.843880][T26042] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 1802.843889][T26042] Call Trace: [ 1802.843895][T26042] [ 1802.843901][T26042] dump_stack_lvl+0x100/0x190 [ 1802.843925][T26042] should_fail_ex.cold+0x5/0xa [ 1802.843943][T26042] should_failslab+0xc2/0x120 [ 1802.843961][T26042] __kmalloc_cache_noprof+0x91/0x6d0 [ 1802.843975][T26042] ? cap_capable+0x107/0x430 [ 1802.843988][T26042] ? __x64_sys_futex+0x358/0x4d0 [ 1802.844005][T26042] ? fsnotify_alloc_group+0x8d/0x320 [ 1802.844021][T26042] fsnotify_alloc_group+0x8d/0x320 [ 1802.844036][T26042] __do_sys_fanotify_init+0x271/0xe30 [ 1802.844059][T26042] do_syscall_64+0x123/0x790 [ 1802.844077][T26042] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1802.844093][T26042] RIP: 0033:0x7f8eefd9e559 [ 1802.844104][T26042] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1802.844115][T26042] RSP: 002b:00007f8eedff6028 EFLAGS: 00000246 ORIG_RAX: 000000000000012c [ 1802.844127][T26042] RAX: ffffffffffffffda RBX: 00007f8ef0025fa0 RCX: 00007f8eefd9e559 [ 1802.844135][T26042] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000200 [ 1802.844142][T26042] RBP: 00007f8eefe358b0 R08: 0000000000000000 R09: 0000000000000000 [ 1802.844149][T26042] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1802.844156][T26042] R13: 00007f8ef0026038 R14: 00007f8ef0025fa0 R15: 00007fffa1df8968 [ 1802.844172][T26042] [ 1803.042502][T14153] powermate: Expected payload of 3--6 bytes, found 1024 bytes! [ 1803.082462][T14153] input: Griffin SoundKnob as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/input/input151 [ 1803.463053][ C0] powermate: config urb returned -71 [ 1803.463234][ C0] powermate: config urb returned -71 [ 1803.463407][ C0] powermate: config urb returned -71 [ 1803.463587][ C0] powermate: config urb returned -71 [ 1803.492681][ T5333] usb 1-1: USB disconnect, device number 65 [ 1803.492722][ C0] powermate 1-1:0.0: powermate_irq - usb_submit_urb failed with result: -19 [ 1804.747243][ T31] kauditd_printk_skb: 231 callbacks suppressed [ 1804.747259][ T31] audit: type=1400 audit(1700001488.945:82817): avc: denied { search } for pid=26106 comm="dhcpcd-run-hook" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1804.747291][ T31] audit: type=1400 audit(1700001488.945:82818): avc: denied { search } for pid=26106 comm="dhcpcd-run-hook" name="dhcpcd" dev="tmpfs" ino=1770 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1804.747316][ T31] audit: type=1400 audit(1700001488.945:82819): avc: denied { search } for pid=26106 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1804.748560][ T31] audit: type=1400 audit(1700001488.945:82820): avc: denied { search } for pid=26106 comm="dhcpcd-run-hook" name="resolv.conf" dev="tmpfs" ino=1775 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1804.788379][ T31] audit: type=1400 audit(1700001488.992:82821): avc: denied { read } for pid=20919 comm="syz-executor" name="loop0" dev="devtmpfs" ino=645 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 1804.847247][ T31] audit: type=1400 audit(1700001489.048:82822): avc: denied { open } for pid=20919 comm="syz-executor" path="/dev/loop0" dev="devtmpfs" ino=645 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 1804.875724][ T31] audit: type=1400 audit(1700001489.076:82823): avc: denied { ioctl } for pid=20919 comm="syz-executor" path="/dev/loop0" dev="devtmpfs" ino=645 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 1805.140924][ T31] audit: type=1400 audit(1700001489.319:82824): avc: denied { read write } for pid=26109 comm="syz.0.14813" name="fuse" dev="devtmpfs" ino=99 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fuse_device_t tclass=chr_file permissive=1 [ 1805.140964][ T31] audit: type=1400 audit(1700001489.319:82825): avc: denied { open } for pid=26109 comm="syz.0.14813" path="/dev/fuse" dev="devtmpfs" ino=99 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fuse_device_t tclass=chr_file permissive=1 [ 1805.204400][ T31] audit: type=1400 audit(1700001489.385:82826): avc: denied { search } for pid=26108 comm="sed" name="resolv.conf" dev="tmpfs" ino=1775 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1805.537245][T26115] syzkaller1: entered promiscuous mode [ 1805.537261][T26115] syzkaller1: entered allmulticast mode [ 1806.742055][T26145] sysfs: cannot create duplicate filename '/devices/virtual/tty/gsmtty1' [ 1806.742073][T26145] CPU: 0 UID: 0 PID: 26145 Comm: syz.5.14819 Tainted: G L syzkaller #0 PREEMPT(full) [ 1806.742093][T26145] Tainted: [L]=SOFTLOCKUP [ 1806.742098][T26145] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 1806.742106][T26145] Call Trace: [ 1806.742111][T26145] [ 1806.742116][T26145] dump_stack_lvl+0x100/0x190 [ 1806.742140][T26145] sysfs_warn_dup.cold+0x1c/0x28 [ 1806.742163][T26145] sysfs_create_dir_ns+0x24b/0x2b0 [ 1806.742185][T26145] ? __pfx_sysfs_create_dir_ns+0x10/0x10 [ 1806.742205][T26145] ? find_held_lock+0x2b/0x80 [ 1806.742223][T26145] ? kobject_add_internal+0x25f/0x930 [ 1806.742237][T26145] ? kobject_add_internal+0x25f/0x930 [ 1806.742250][T26145] ? class_dir_child_ns_type+0xd/0x60 [ 1806.742266][T26145] kobject_add_internal+0x2c8/0x930 [ 1806.742282][T26145] kobject_add+0x16a/0x1e0 [ 1806.742295][T26145] ? __pfx_kobject_add+0x10/0x10 [ 1806.742308][T26145] ? get_device_parent+0x1b3/0x4c0 [ 1806.742328][T26145] ? kobject_put+0xb9/0x640 [ 1806.742346][T26145] device_add+0x294/0x1970 [ 1806.742360][T26145] ? lockdep_init_map_type+0x5c/0x250 [ 1806.742375][T26145] ? __pfx_device_add+0x10/0x10 [ 1806.742387][T26145] ? lockdep_init_map_type+0x5c/0x250 [ 1806.742402][T26145] ? __init_waitqueue_head+0xca/0x150 [ 1806.742422][T26145] tty_register_device_attr+0x388/0x810 [ 1806.742441][T26145] ? lockdep_init_map_type+0x5c/0x250 [ 1806.742455][T26145] ? __pfx_tty_register_device_attr+0x10/0x10 [ 1806.742477][T26145] ? tty_port_init+0x156/0x1c0 [ 1806.742497][T26145] gsm_activate_mux+0x155/0x2a0 [ 1806.742516][T26145] gsmld_ioctl+0xbbc/0x15c0 [ 1806.742532][T26145] ? kasan_quarantine_put+0x104/0x240 [ 1806.742549][T26145] ? __pfx_gsmld_ioctl+0x10/0x10 [ 1806.742574][T26145] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 1806.742589][T26145] ? __pfx_pty_unix98_ioctl+0x10/0x10 [ 1806.742607][T26145] ? __pfx_gsmld_ioctl+0x10/0x10 [ 1806.742620][T26145] tty_ioctl+0x12f0/0x1800 [ 1806.742639][T26145] ? __pfx_tty_ioctl+0x10/0x10 [ 1806.742655][T26145] ? ioctl_has_perm.constprop.0.isra.0+0x380/0x540 [ 1806.742674][T26145] ? __pfx_ioctl_has_perm.constprop.0.isra.0+0x10/0x10 [ 1806.742693][T26145] ? __fget_files+0x34/0x3d0 [ 1806.742717][T26145] ? selinux_file_ioctl+0x13b/0x290 [ 1806.742732][T26145] ? selinux_file_ioctl+0xb6/0x290 [ 1806.742750][T26145] ? __pfx_tty_ioctl+0x10/0x10 [ 1806.742777][T26145] __x64_sys_ioctl+0x18e/0x210 [ 1806.742795][T26145] do_syscall_64+0x123/0x790 [ 1806.742814][T26145] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1806.742827][T26145] RIP: 0033:0x7fdc2e99e559 [ 1806.742839][T26145] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1806.742850][T26145] RSP: 002b:00007fdc2f8aa028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1806.742864][T26145] RAX: ffffffffffffffda RBX: 00007fdc2ec26090 RCX: 00007fdc2e99e559 [ 1806.742873][T26145] RDX: 0000200000000040 RSI: 00000000404c4701 RDI: 0000000000000003 [ 1806.742880][T26145] RBP: 00007fdc2ea358b0 R08: 0000000000000000 R09: 0000000000000000 [ 1806.742888][T26145] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1806.742896][T26145] R13: 00007fdc2ec26128 R14: 00007fdc2ec26090 R15: 00007ffcc526d4f8 [ 1806.742913][T26145] [ 1806.742952][T26145] kobject: kobject_add_internal failed for gsmtty1 with -EEXIST, don't try to register things with the same name in the same directory. [ 1808.055846][T26200] binder: 26186:26200 ioctl c0306201 20000000acc0 returned -22 [ 1808.748678][T26240] FAULT_INJECTION: forcing a failure. [ 1808.748678][T26240] name failslab, interval 1, probability 0, space 0, times 0 [ 1808.748705][T26240] CPU: 0 UID: 0 PID: 26240 Comm: syz.6.14824 Tainted: G L syzkaller #0 PREEMPT(full) [ 1808.748724][T26240] Tainted: [L]=SOFTLOCKUP [ 1808.748729][T26240] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 1808.748737][T26240] Call Trace: [ 1808.748742][T26240] [ 1808.748748][T26240] dump_stack_lvl+0x100/0x190 [ 1808.748771][T26240] should_fail_ex.cold+0x5/0xa [ 1808.748790][T26240] should_failslab+0xc2/0x120 [ 1808.748809][T26240] __kmalloc_cache_noprof+0x91/0x6d0 [ 1808.748825][T26240] ? kasan_save_track+0x14/0x30 [ 1808.748840][T26240] ? ovl_init_fs_context+0x52/0x630 [ 1808.748859][T26240] ovl_init_fs_context+0x52/0x630 [ 1808.748878][T26240] alloc_fs_context+0x60c/0xf40 [ 1808.748894][T26240] __x64_sys_fsopen+0xed/0x220 [ 1808.748909][T26240] do_syscall_64+0x123/0x790 [ 1808.748928][T26240] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1808.748940][T26240] RIP: 0033:0x7f8eefd9e559 [ 1808.748950][T26240] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1808.748962][T26240] RSP: 002b:00007f8eedff6028 EFLAGS: 00000246 ORIG_RAX: 00000000000001ae [ 1808.748974][T26240] RAX: ffffffffffffffda RBX: 00007f8ef0025fa0 RCX: 00007f8eefd9e559 [ 1808.748981][T26240] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 0000200000000000 [ 1808.748989][T26240] RBP: 00007f8eefe358b0 R08: 0000000000000000 R09: 0000000000000000 [ 1808.748996][T26240] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1808.749002][T26240] R13: 00007f8ef0026038 R14: 00007f8ef0025fa0 R15: 00007fffa1df8968 [ 1808.749018][T26240] [ 1810.193607][ T31] kauditd_printk_skb: 427 callbacks suppressed [ 1810.193621][ T31] audit: type=1400 audit(1700001494.043:83254): avc: denied { search } for pid=26309 comm="cmp" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1810.197023][ T31] audit: type=1400 audit(1700001494.043:83255): avc: denied { read } for pid=26309 comm="cmp" name="resolv.conf" dev="tmpfs" ino=4 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 1810.197057][ T31] audit: type=1400 audit(1700001494.043:83256): avc: denied { open } for pid=26309 comm="cmp" path="/tmp/resolv.conf" dev="tmpfs" ino=4 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 1810.197081][ T31] audit: type=1400 audit(1700001494.043:83257): avc: denied { getattr } for pid=26309 comm="cmp" path="/tmp/resolv.conf" dev="tmpfs" ino=4 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 1810.197105][ T31] audit: type=1400 audit(1700001494.043:83258): avc: denied { getattr } for pid=26309 comm="cmp" path="/run/dhcpcd/hook-state/resolv.conf.eth28.ipv4ll" dev="tmpfs" ino=11918 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 1810.362940][ T31] audit: type=1400 audit(1700001494.211:83259): avc: denied { read } for pid=23998 comm="syz-executor" name="loop6" dev="devtmpfs" ino=651 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 1810.362983][ T31] audit: type=1400 audit(1700001494.211:83260): avc: denied { open } for pid=23998 comm="syz-executor" path="/dev/loop6" dev="devtmpfs" ino=651 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 1810.363009][ T31] audit: type=1400 audit(1700001494.211:83261): avc: denied { ioctl } for pid=23998 comm="syz-executor" path="/dev/loop6" dev="devtmpfs" ino=651 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 1810.369034][ T31] audit: type=1400 audit(1700001494.211:83262): avc: denied { create } for pid=26312 comm="syz.5.14831" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 1810.493515][ T31] audit: type=1400 audit(1700001494.324:83263): avc: denied { bind } for pid=26312 comm="syz.5.14831" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 1812.100030][T26352] netlink: 48 bytes leftover after parsing attributes in process `syz.0.14840'. [ 1812.309029][T26358] FAULT_INJECTION: forcing a failure. [ 1812.309029][T26358] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 1812.309058][T26358] CPU: 0 UID: 0 PID: 26358 Comm: syz.5.14842 Tainted: G L syzkaller #0 PREEMPT(full) [ 1812.309077][T26358] Tainted: [L]=SOFTLOCKUP [ 1812.309082][T26358] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 1812.309091][T26358] Call Trace: [ 1812.309096][T26358] [ 1812.309102][T26358] dump_stack_lvl+0x100/0x190 [ 1812.309123][T26358] should_fail_ex.cold+0x5/0xa [ 1812.309139][T26358] ? prepare_alloc_pages+0x16d/0x5b0 [ 1812.309158][T26358] should_fail_alloc_page+0xeb/0x140 [ 1812.309177][T26358] prepare_alloc_pages+0x1f0/0x5b0 [ 1812.309196][T26358] __alloc_frozen_pages_noprof+0x1e9/0x3300 [ 1812.309212][T26358] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 1812.309233][T26358] ? rcu_is_watching+0x13/0xc0 [ 1812.309252][T26358] ? trace_hrtimer_start+0x77/0x220 [ 1812.309273][T26358] ? hrtimer_start_range_ns_common+0x778/0x16f0 [ 1812.309294][T26358] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 1812.309310][T26358] ? finish_task_switch.isra.0+0x2bd/0x10d0 [ 1812.309324][T26358] ? finish_task_switch.isra.0+0x2bd/0x10d0 [ 1812.309348][T26358] ? rcu_is_watching+0x13/0xc0 [ 1812.309365][T26358] ? finish_task_switch.isra.0+0x2c2/0x10d0 [ 1812.309380][T26358] ? lockdep_hardirqs_on+0x7d/0x110 [ 1812.309397][T26358] ? finish_task_switch.isra.0+0x2c2/0x10d0 [ 1812.309414][T26358] ? rcu_is_watching+0x13/0xc0 [ 1812.309434][T26358] ? __lock_acquire+0x5c0/0x1f40 [ 1812.309452][T26358] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 1812.309468][T26358] ? policy_nodemask+0xed/0x4f0 [ 1812.309487][T26358] alloc_pages_mpol+0x201/0x550 [ 1812.309506][T26358] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 1812.309524][T26358] ? futex_unqueue+0x133/0x2c0 [ 1812.309543][T26358] alloc_pages_noprof+0x1a/0x160 [ 1812.309556][T26358] pte_alloc_one+0x1c/0x3d0 [ 1812.309574][T26358] __pte_alloc+0x6d/0x380 [ 1812.309589][T26358] ? __pfx___pte_alloc+0x10/0x10 [ 1812.309603][T26358] ? __pfx___futex_wait+0x10/0x10 [ 1812.309614][T26358] ? __pfx_try_to_wake_up+0x10/0x10 [ 1812.309628][T26358] ? futex_hash+0x311/0x400 [ 1812.309645][T26358] do_anonymous_page+0x1307/0x2050 [ 1812.309659][T26358] ? find_held_lock+0x2b/0x80 [ 1812.309678][T26358] ? __pfx_do_anonymous_page+0x10/0x10 [ 1812.309689][T26358] ? pgd_none+0x9f/0xe0 [ 1812.309699][T26358] ? __pfx_pgd_none+0x10/0x10 [ 1812.309710][T26358] ? lock_acquire+0x1d1/0x380 [ 1812.309726][T26358] __handle_mm_fault+0x1ff3/0x2f60 [ 1812.309740][T26358] ? lock_vma_under_rcu+0x11d/0x590 [ 1812.309759][T26358] ? __pfx___handle_mm_fault+0x10/0x10 [ 1812.309773][T26358] ? lock_vma_under_rcu+0x17c/0x590 [ 1812.309801][T26358] handle_mm_fault+0x363/0xa20 [ 1812.309818][T26358] do_user_addr_fault+0x59c/0x12f0 [ 1812.309838][T26358] exc_page_fault+0x6f/0xd0 [ 1812.309855][T26358] asm_exc_page_fault+0x26/0x30 [ 1812.309867][T26358] RIP: 0033:0x7fdc2e8572f6 [ 1812.309878][T26358] Code: 24 50 4c 8b 4c 24 58 4c 8b 6c 24 50 48 89 4c 24 30 48 8d 0d 9c dd 1a 00 48 29 ca 44 89 4c 24 24 49 8d bd 00 10 00 00 4c 89 e9 <49> c7 45 10 ff 03 00 00 49 89 7d 08 45 89 fd 4d 89 e7 49 89 cc 48 [ 1812.309889][T26358] RSP: 002b:00007fdc2f8caf60 EFLAGS: 00010206 [ 1812.309900][T26358] RAX: 0000000000000020 RBX: 0000000000000000 RCX: 0000200000c00000 [ 1812.309907][T26358] RDX: 00000000000026f5 RSI: 0000200000c00000 RDI: 0000200000c01000 [ 1812.309915][T26358] RBP: 00007fdc2ea55180 R08: 0000000000000000 R09: 0000000000000003 [ 1812.309923][T26358] R10: 0000000000000003 R11: 0000000000000000 R12: 00000000003ff000 [ 1812.309931][T26358] R13: 0000200000c00000 R14: 00007fdc2ec25fa0 R15: 0000000000000000 [ 1812.309948][T26358] [ 1812.310294][T26358] Huh VM_FAULT_OOM leaked out to the #PF handler. Retrying PF [ 1812.512802][ T9958] usb 8-1: new full-speed USB device number 22 using dummy_hcd [ 1812.762977][ T9958] usb 8-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 1812.793471][ T9958] usb 8-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 1812.793492][ T9958] usb 8-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1812.793521][ T9958] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1812.908036][ T10] usb 9-1: new high-speed USB device number 18 using dummy_hcd [ 1813.065111][ T10] usb 9-1: Using ep0 maxpacket: 8 [ 1813.070565][ T10] usb 9-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 1813.074977][ T10] usb 9-1: config index 0 descriptor too short (expected 301, got 45) [ 1813.075011][ T10] usb 9-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 1813.075024][ T10] usb 9-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 1813.075039][ T10] usb 9-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 1813.075067][ T10] usb 9-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1813.075090][ T10] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1813.190525][ T9958] usb 8-1: GET_CAPABILITIES returned 0 [ 1813.190553][ T9958] usbtmc 8-1:16.0: can't read capabilities [ 1813.437733][ T10] usb 9-1: usb_control_msg returned -32 [ 1813.437779][ T10] usbtmc 9-1:16.0: can't read capabilities [ 1813.492090][T26355] usb 8-1: usbtmc_ioctl_clear_in_halt returned -32 [ 1813.502286][ T10] usb 8-1: USB disconnect, device number 22 [ 1813.964613][T10871] Bluetooth: hci0: command 0x0405 tx timeout [ 1814.336759][T26422] input: syz0 as /devices/virtual/input/input152 [ 1814.859731][T26440] netlink: 191880 bytes leftover after parsing attributes in process `syz.5.14854'. [ 1815.430802][T26454] FAULT_INJECTION: forcing a failure. [ 1815.430802][T26454] name failslab, interval 1, probability 0, space 0, times 0 [ 1815.430828][T26454] CPU: 0 UID: 0 PID: 26454 Comm: syz.7.14857 Tainted: G L syzkaller #0 PREEMPT(full) [ 1815.430846][T26454] Tainted: [L]=SOFTLOCKUP [ 1815.430851][T26454] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 1815.430859][T26454] Call Trace: [ 1815.430864][T26454] [ 1815.430870][T26454] dump_stack_lvl+0x100/0x190 [ 1815.430894][T26454] should_fail_ex.cold+0x5/0xa [ 1815.430916][T26454] should_failslab+0xc2/0x120 [ 1815.430934][T26454] kmem_cache_alloc_noprof+0x92/0x6a0 [ 1815.430949][T26454] ? __proc_create+0xc1/0x8f0 [ 1815.430964][T26454] ? __proc_create+0x247/0x8f0 [ 1815.430980][T26454] __proc_create+0x247/0x8f0 [ 1815.430995][T26454] ? __pfx___proc_create+0x10/0x10 [ 1815.431007][T26454] ? proc_register+0x568/0x910 [ 1815.431025][T26454] ? _raw_write_unlock+0x28/0x50 [ 1815.431043][T26454] proc_create_reg+0x75/0x170 [ 1815.431059][T26454] proc_create_net_data+0x8e/0x1c0 [ 1815.431074][T26454] ? __pfx_proc_create_net_data+0x10/0x10 [ 1815.431089][T26454] ? __pfx_proc_create_net_data+0x10/0x10 [ 1815.431102][T26454] ? __pfx_uevent_net_rcv+0x10/0x10 [ 1815.431118][T26454] ? __pfx_dev_proc_net_init+0x10/0x10 [ 1815.431132][T26454] dev_proc_net_init+0x5e/0x230 [ 1815.431146][T26454] ops_init+0x1e2/0x5f0 [ 1815.431160][T26454] setup_net+0x118/0x3a0 [ 1815.431174][T26454] ? __pfx_setup_net+0x10/0x10 [ 1815.431193][T26454] copy_net_ns+0x345/0x7a0 [ 1815.431215][T26454] create_new_namespaces+0x3ea/0xac0 [ 1815.431235][T26454] unshare_nsproxy_namespaces+0xf2/0x220 [ 1815.431253][T26454] ksys_unshare+0x4a2/0xb30 [ 1815.431269][T26454] ? __pfx_ksys_unshare+0x10/0x10 [ 1815.431290][T26454] __x64_sys_unshare+0x31/0x40 [ 1815.431305][T26454] do_syscall_64+0x123/0x790 [ 1815.431323][T26454] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1815.431335][T26454] RIP: 0033:0x7fa1e499e559 [ 1815.431347][T26454] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1815.431358][T26454] RSP: 002b:00007fa1e58ed028 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 1815.431429][T26454] RAX: ffffffffffffffda RBX: 00007fa1e4c25fa0 RCX: 00007fa1e499e559 [ 1815.431442][T26454] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 000000004c000680 [ 1815.431450][T26454] RBP: 00007fa1e4a358b0 R08: 0000000000000000 R09: 0000000000000000 [ 1815.431464][T26454] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1815.431472][T26454] R13: 00007fa1e4c26038 R14: 00007fa1e4c25fa0 R15: 00007ffef002dd98 [ 1815.431491][T26454] [ 1815.768581][ T31] kauditd_printk_skb: 429 callbacks suppressed [ 1815.768594][ T31] audit: type=1400 audit(1700001499.263:83693): avc: denied { read } for pid=15435 comm="syz-executor" name="loop5" dev="devtmpfs" ino=650 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 1815.768631][ T31] audit: type=1400 audit(1700001499.263:83694): avc: denied { open } for pid=15435 comm="syz-executor" path="/dev/loop5" dev="devtmpfs" ino=650 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 1815.768659][ T31] audit: type=1400 audit(1700001499.263:83695): avc: denied { ioctl } for pid=15435 comm="syz-executor" path="/dev/loop5" dev="devtmpfs" ino=650 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 1815.902517][ T31] audit: type=1400 audit(1700001499.384:83696): avc: denied { name_bind } for pid=26455 comm="syz.0.14858" src=3618 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=udp_socket permissive=1 [ 1815.960749][ T10] usb 9-1: USB disconnect, device number 18 [ 1815.992298][ T31] audit: type=1400 audit(1700001499.468:83697): avc: denied { read } for pid=12674 comm="syz-executor" name="loop8" dev="devtmpfs" ino=653 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 1816.035127][ T31] audit: type=1400 audit(1700001499.506:83698): avc: denied { unmount } for pid=12033 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 1816.066057][ T31] audit: type=1400 audit(1700001499.534:83699): avc: denied { read open } for pid=12674 comm="syz-executor" path="/dev/loop8" dev="devtmpfs" ino=653 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 1816.066102][ T31] audit: type=1400 audit(1700001499.534:83700): avc: denied { ioctl } for pid=12674 comm="syz-executor" path="/dev/loop8" dev="devtmpfs" ino=653 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 1816.128755][ T31] audit: type=1400 audit(1700001499.599:83701): avc: denied { search } for pid=26456 comm="rm" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1816.185368][ T31] audit: type=1400 audit(1700001499.646:83702): avc: denied { search } for pid=26456 comm="rm" name="dhcpcd" dev="tmpfs" ino=1770 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1816.689261][T26471] netlink: 8 bytes leftover after parsing attributes in process `syz.8.14860'. [ 1816.765692][T26484] FAULT_INJECTION: forcing a failure. [ 1816.765692][T26484] name failslab, interval 1, probability 0, space 0, times 0 [ 1816.765733][T26484] CPU: 0 UID: 0 PID: 26484 Comm: syz.5.14864 Tainted: G L syzkaller #0 PREEMPT(full) [ 1816.765753][T26484] Tainted: [L]=SOFTLOCKUP [ 1816.765758][T26484] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 1816.765766][T26484] Call Trace: [ 1816.765771][T26484] [ 1816.765777][T26484] dump_stack_lvl+0x100/0x190 [ 1816.765801][T26484] should_fail_ex.cold+0x5/0xa [ 1816.765822][T26484] should_failslab+0xc2/0x120 [ 1816.765840][T26484] __kmalloc_noprof+0xfc/0x840 [ 1816.765855][T26484] ? lsm_blob_alloc+0x68/0x90 [ 1816.765871][T26484] lsm_blob_alloc+0x68/0x90 [ 1816.765884][T26484] security_sb_alloc+0x25/0x240 [ 1816.765899][T26484] sget_fc+0x3ce/0x1f70 [ 1816.765920][T26484] ? __pfx_set_anon_super_fc+0x10/0x10 [ 1816.765934][T26484] ? __pfx_sget_fc+0x10/0x10 [ 1816.765948][T26484] ? refcount_dec_not_one+0x136/0x1c0 [ 1816.765965][T26484] ? __pfx_refcount_dec_not_one+0x10/0x10 [ 1816.765982][T26484] ? __kasan_kmalloc+0xaa/0xb0 [ 1816.765999][T26484] ? __kmalloc_cache_noprof+0x2f8/0x6d0 [ 1816.766012][T26484] ? __kasan_kmalloc+0xaa/0xb0 [ 1816.766029][T26484] ? __pfx_mqueue_fill_super+0x10/0x10 [ 1816.766051][T26484] get_tree_nodev+0x28/0x190 [ 1816.766069][T26484] mqueue_get_tree+0xf1/0x130 [ 1816.766083][T26484] vfs_get_tree+0x92/0x320 [ 1816.766096][T26484] fc_mount_longterm+0x1a/0x270 [ 1816.766116][T26484] mq_init_ns+0x482/0x820 [ 1816.766132][T26484] copy_ipcs+0x3dd/0x7e0 [ 1816.766149][T26484] create_new_namespaces+0x20a/0xac0 [ 1816.766166][T26484] ? security_capable+0x80/0x260 [ 1816.766183][T26484] unshare_nsproxy_namespaces+0xf2/0x220 [ 1816.766198][T26484] ksys_unshare+0x4a2/0xb30 [ 1816.766214][T26484] ? __pfx_ksys_unshare+0x10/0x10 [ 1816.766235][T26484] __x64_sys_unshare+0x31/0x40 [ 1816.766249][T26484] do_syscall_64+0x123/0x790 [ 1816.766268][T26484] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1816.766281][T26484] RIP: 0033:0x7fdc2e99e559 [ 1816.766294][T26484] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1816.766305][T26484] RSP: 002b:00007fdc2f8cb028 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 1816.766318][T26484] RAX: ffffffffffffffda RBX: 00007fdc2ec25fa0 RCX: 00007fdc2e99e559 [ 1816.766327][T26484] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 000000006a040000 [ 1816.766335][T26484] RBP: 00007fdc2ea358b0 R08: 0000000000000000 R09: 0000000000000000 [ 1816.766343][T26484] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1816.766351][T26484] R13: 00007fdc2ec26038 R14: 00007fdc2ec25fa0 R15: 00007ffcc526d4f8 [ 1816.766369][T26484] [ 1817.802241][T22769] usb 6-1: new high-speed USB device number 21 using dummy_hcd [ 1817.964989][T22769] usb 6-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 1817.966449][T22769] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1817.966477][T22769] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1817.971584][T22769] usb 6-1: config 0 descriptor?? [ 1818.190997][T26522] erspan0: entered promiscuous mode [ 1818.196023][T26522] netlink: 8 bytes leftover after parsing attributes in process `syz.7.14875'. [ 1818.546827][T26535] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 1818.581797][T22769] keytouch 0003:0926:3333.0066: fixing up Keytouch IEC report descriptor [ 1818.611062][T22769] input: HID 0926:3333 as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/0003:0926:3333.0066/input/input153 [ 1818.668292][T10871] Bluetooth: hci7: command 0x0406 tx timeout [ 1818.675401][T14162] Bluetooth: hci7: Opcode 0x0c1a failed: -110 [ 1818.675419][T14162] Bluetooth: hci7: Error when powering off device on rfkill (-110) [ 1818.995345][T26544] netlink: 8 bytes leftover after parsing attributes in process `syz.8.14881'. [ 1819.189659][T22769] keytouch 0003:0926:3333.0066: input,hidraw0: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.5-1/input0 [ 1819.224630][T22769] usb 6-1: USB disconnect, device number 21 [ 1819.550578][T26573] fido_id[26573]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.5/usb6/report_descriptor': No such file or directory [ 1819.638589][T26588] netlink: 36 bytes leftover after parsing attributes in process `syz.0.14888'. [ 1820.634228][ T5333] usb 6-1: new full-speed USB device number 22 using dummy_hcd [ 1820.796296][ T5333] usb 6-1: not running at top speed; connect to a high speed hub [ 1820.796319][ T5333] usb 6-1: New USB device found, idVendor=06cd, idProduct=0135, bcdDevice= 1.00 [ 1820.797128][ T5333] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1820.797173][ T5333] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 1820.797187][ T5333] usb 6-1: config 1 interface 0 altsetting 0 has 4 endpoint descriptors, different from the interface descriptor's value: 6 [ 1820.797216][ T5333] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1820.884554][ T5333] keyspan 6-1:1.0: Keyspan 2 port adapter converter detected [ 1820.916879][ T5333] usb 6-1: Keyspan 2 port adapter converter now attached to ttyUSB0 [ 1820.917982][ T5333] keyspan 6-1:1.0: found no endpoint descriptor for endpoint 88 [ 1820.918026][ T5333] keyspan 6-1:1.0: found no endpoint descriptor for endpoint 6 [ 1820.959705][ T5333] usb 6-1: Keyspan 2 port adapter converter now attached to ttyUSB1 [ 1821.133208][ T31] kauditd_printk_skb: 283 callbacks suppressed [ 1821.133228][ T31] audit: type=1400 audit(1700001504.276:83986): avc: denied { read write } for pid=26599 comm="syz.5.14894" name="ttyUSB0" dev="devtmpfs" ino=6750 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 1821.133345][ T31] audit: type=1400 audit(1700001504.276:83987): avc: denied { open } for pid=26599 comm="syz.5.14894" path="/463/dev/ttyUSB0" dev="devtmpfs" ino=6750 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 1821.169437][T10871] Bluetooth: hci1: command 0x0406 tx timeout [ 1821.206516][T14162] Bluetooth: hci1: Opcode 0x0c1a failed: -110 [ 1821.206535][T14162] Bluetooth: hci1: Error when powering off device on rfkill (-110) [ 1821.570812][ T31] audit: type=1400 audit(1700001504.688:83988): avc: denied { read } for pid=23998 comm="syz-executor" name="loop6" dev="devtmpfs" ino=651 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 1821.570851][ T31] audit: type=1400 audit(1700001504.688:83989): avc: denied { open } for pid=23998 comm="syz-executor" path="/dev/loop6" dev="devtmpfs" ino=651 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 1821.570878][ T31] audit: type=1400 audit(1700001504.688:83990): avc: denied { ioctl } for pid=23998 comm="syz-executor" path="/dev/loop6" dev="devtmpfs" ino=651 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 1821.982156][ T5333] usb 6-1: USB disconnect, device number 22 [ 1821.987790][ T31] audit: type=1400 audit(1700001505.081:83991): avc: denied { read } for pid=23998 comm="syz-executor" name="loop6" dev="devtmpfs" ino=651 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 1821.987826][ T31] audit: type=1400 audit(1700001505.081:83992): avc: denied { read open } for pid=23998 comm="syz-executor" path="/dev/loop6" dev="devtmpfs" ino=651 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 1821.987850][ T31] audit: type=1400 audit(1700001505.081:83993): avc: denied { ioctl } for pid=23998 comm="syz-executor" path="/dev/loop6" dev="devtmpfs" ino=651 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 1821.998389][ T31] audit: type=1400 audit(1700001505.090:83994): avc: denied { read } for pid=12674 comm="syz-executor" name="loop8" dev="devtmpfs" ino=653 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 1821.998437][ T31] audit: type=1400 audit(1700001505.090:83995): avc: denied { read open } for pid=12674 comm="syz-executor" path="/dev/loop8" dev="devtmpfs" ino=653 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 1822.151187][ T5333] keyspan_2 ttyUSB0: Keyspan 2 port adapter converter now disconnected from ttyUSB0 [ 1822.183182][ T5333] keyspan_2 ttyUSB1: Keyspan 2 port adapter converter now disconnected from ttyUSB1 [ 1822.203157][ T5333] keyspan 6-1:1.0: device disconnected [ 1822.357127][T26652] vimc link validate: Sensor A:src:640x480 (0x33424752, 0, 0, 0, 0) Raw Capture 0:snk:640x480 (0x33424752, 8, 0, 0, 0) [ 1822.922203][ T5333] usb 9-1: new high-speed USB device number 19 using dummy_hcd [ 1823.086916][ T5333] usb 9-1: New USB device found, idVendor=1bc7, idProduct=10b2, bcdDevice=86.9e [ 1823.087986][ T5333] usb 9-1: config 5 has an invalid interface number: 235 but max is 0 [ 1823.088003][ T5333] usb 9-1: config 5 contains an unexpected descriptor of type 0x2, skipping [ 1823.088014][ T5333] usb 9-1: config 5 has no interface number 0 [ 1823.088036][ T5333] usb 9-1: config 5 interface 235 altsetting 2 has an invalid descriptor for endpoint zero, skipping [ 1823.088049][ T5333] usb 9-1: config 5 interface 235 has no altsetting 0 [ 1823.089635][ T5333] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1823.089650][ T5333] usb 9-1: Product: syz [ 1823.089659][ T5333] usb 9-1: Manufacturer: syz [ 1823.089667][ T5333] usb 9-1: SerialNumber: syz [ 1823.216667][T26684] syzkaller1: entered promiscuous mode [ 1823.216683][T26684] syzkaller1: entered allmulticast mode [ 1823.242372][ T9948] usb 1-1: new full-speed USB device number 66 using dummy_hcd [ 1823.391403][T26690] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1823.425832][ T9948] usb 1-1: not running at top speed; connect to a high speed hub [ 1823.425854][ T9948] usb 1-1: New USB device found, idVendor=06cd, idProduct=0131, bcdDevice= 1.00 [ 1823.426642][ T9948] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x88 has invalid maxpacket 1024, setting to 64 [ 1823.428257][ T9948] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1823.428273][ T9948] usb 1-1: Product: syz [ 1823.428282][ T9948] usb 1-1: Manufacturer: syz [ 1823.428290][ T9948] usb 1-1: SerialNumber: syz [ 1823.435574][ T9948] keyspan 1-1:1.0: Keyspan 4 port adapter converter detected [ 1823.504100][ T9948] keyspan 1-1:1.0: unsupported endpoint type 0 [ 1823.525499][ T9948] usb 1-1: Keyspan 4 port adapter converter now attached to ttyUSB0 [ 1823.655413][ T9948] usb 1-1: Keyspan 4 port adapter converter now attached to ttyUSB1 [ 1823.678574][ T9948] usb 1-1: Keyspan 4 port adapter converter now attached to ttyUSB2 [ 1823.740212][ T9948] usb 1-1: Keyspan 4 port adapter converter now attached to ttyUSB3 [ 1823.833521][ T5333] option 9-1:5.235: GSM modem (1-port) converter detected [ 1823.866416][ T5333] usb 9-1: USB disconnect, device number 19 [ 1823.908361][ T5333] option 9-1:5.235: device disconnected [ 1823.955935][ T10] usb 1-1: USB disconnect, device number 66 [ 1824.019807][ T10] keyspan_4 ttyUSB0: Keyspan 4 port adapter converter now disconnected from ttyUSB0 [ 1824.046067][ T10] keyspan_4 ttyUSB1: Keyspan 4 port adapter converter now disconnected from ttyUSB1 [ 1824.085552][ T10] keyspan_4 ttyUSB2: Keyspan 4 port adapter converter now disconnected from ttyUSB2 [ 1824.113254][ T10] keyspan_4 ttyUSB3: Keyspan 4 port adapter converter now disconnected from ttyUSB3 [ 1824.114014][ T10] keyspan 1-1:1.0: device disconnected [ 1825.085631][T10871] Bluetooth: hci2: command 0x0405 tx timeout [ 1825.089336][T14162] Bluetooth: hci2: Opcode 0x0c1a failed: -110 [ 1825.089353][T14162] Bluetooth: hci2: Error when powering off device on rfkill (-110) [ 1825.583605][ T5333] usb 9-1: new high-speed USB device number 20 using dummy_hcd [ 1825.745296][ T5333] usb 9-1: Using ep0 maxpacket: 16 [ 1825.747891][ T5333] usb 9-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 1825.749228][ T5333] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1825.749248][ T5333] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1825.749261][ T5333] usb 9-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 1825.749284][ T5333] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1825.810175][ T5333] usb 9-1: config 0 descriptor?? [ 1826.309775][ T5333] hid_parser_main: 5 callbacks suppressed [ 1826.309798][ T5333] microsoft 0003:045E:07DA.0067: unknown main item tag 0x0 [ 1826.309816][ T5333] microsoft 0003:045E:07DA.0067: unknown main item tag 0x0 [ 1826.309831][ T5333] microsoft 0003:045E:07DA.0067: unknown main item tag 0x0 [ 1826.309847][ T5333] microsoft 0003:045E:07DA.0067: unknown main item tag 0x0 [ 1826.309862][ T5333] microsoft 0003:045E:07DA.0067: unknown main item tag 0x0 [ 1826.309877][ T5333] microsoft 0003:045E:07DA.0067: unknown main item tag 0x0 [ 1826.309892][ T5333] microsoft 0003:045E:07DA.0067: unknown main item tag 0x0 [ 1826.309907][ T5333] microsoft 0003:045E:07DA.0067: unknown main item tag 0x0 [ 1826.382848][ T5333] microsoft 0003:045E:07DA.0067: unknown main item tag 0x0 [ 1826.382873][ T5333] microsoft 0003:045E:07DA.0067: unknown main item tag 0x0 [ 1826.435780][ T5333] input: HID 045e:07da as /devices/platform/dummy_hcd.8/usb9/9-1/9-1:0.0/0003:045E:07DA.0067/input/input154 [ 1826.437291][T26803] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 1826.487134][ T31] kauditd_printk_skb: 206 callbacks suppressed [ 1826.487147][ T31] audit: type=1400 audit(1700001509.290:84202): avc: denied { create } for pid=26800 comm="syz.5.14931" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 1826.526542][ T31] audit: type=1400 audit(1700001509.327:84203): avc: denied { connect } for pid=26800 comm="syz.5.14931" lport=60 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 1826.527690][ T31] audit: type=1400 audit(1700001509.327:84204): avc: denied { read } for pid=4952 comm="acpid" name="js0" dev="devtmpfs" ino=6772 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 1826.527720][ T31] audit: type=1400 audit(1700001509.327:84205): avc: denied { open } for pid=4952 comm="acpid" path="/dev/input/js0" dev="devtmpfs" ino=6772 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 1826.527744][ T31] audit: type=1400 audit(1700001509.327:84206): avc: denied { ioctl } for pid=4952 comm="acpid" path="/dev/input/js0" dev="devtmpfs" ino=6772 ioctlcmd=0x4520 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 1826.645949][ T31] audit: type=1400 audit(1700001509.440:84207): avc: denied { write } for pid=26800 comm="syz.5.14931" path="socket:[149218]" dev="sockfs" ino=149218 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 1826.648125][ T31] audit: type=1400 audit(1700001509.440:84208): avc: denied { read } for pid=4952 comm="acpid" name="js0" dev="devtmpfs" ino=6772 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 1826.648707][ T31] audit: type=1400 audit(1700001509.440:84209): avc: denied { open } for pid=4952 comm="acpid" path="/dev/input/js0" dev="devtmpfs" ino=6772 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 1826.648735][ T31] audit: type=1400 audit(1700001509.440:84210): avc: denied { ioctl } for pid=4952 comm="acpid" path="/dev/input/js0" dev="devtmpfs" ino=6772 ioctlcmd=0x4520 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 1826.811111][ T5333] microsoft 0003:045E:07DA.0067: input,hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.8-1/input0 [ 1826.839249][ T5333] usb 9-1: USB disconnect, device number 20 [ 1826.933661][ T31] audit: type=1400 audit(1700001509.711:84211): avc: denied { read } for pid=4952 comm="acpid" name="event4" dev="devtmpfs" ino=6773 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 1827.182111][T26818] fido_id[26818]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.8/usb9/report_descriptor': No such file or directory [ 1827.626702][T26839] syzkaller1: entered promiscuous mode [ 1827.626717][T26839] syzkaller1: entered allmulticast mode [ 1827.648678][T10871] Bluetooth: hci3: command 0x0c1a tx timeout [ 1827.659945][T14162] Bluetooth: hci3: Opcode 0x0c1a failed: -110 [ 1827.659962][T14162] Bluetooth: hci3: Error when powering off device on rfkill (-110) [ 1829.144076][T26885] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000000: 0x1192 instead [ 1829.194928][T26885] jffs2: Cowardly refusing to erase blocks on filesystem with no valid JFFS2 nodes [ 1829.194940][T26885] jffs2: empty_blocks 0, bad_blocks 0, c->nr_blocks 32 [ 1829.677056][T26872] input: ImExPS/2 Generic Explorer Mouse as /devices/platform/i8042/serio1/input/input156 [ 1829.992155][T26901] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1830.041708][T14162] Bluetooth: hci0: Opcode 0x0c1a failed: -110 [ 1830.041727][T14162] Bluetooth: hci0: Error when powering off device on rfkill (-110) [ 1830.042243][T10871] Bluetooth: hci0: command 0x0405 tx timeout [ 1830.512653][T22769] usb 1-1: new high-speed USB device number 67 using dummy_hcd [ 1830.693608][T22769] usb 1-1: Using ep0 maxpacket: 16 [ 1830.694665][T22769] usb 1-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 1830.696324][T22769] usb 1-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 1830.696343][T22769] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 1830.698177][T22769] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1830.698192][T22769] usb 1-1: Product: syz [ 1830.698200][T22769] usb 1-1: Manufacturer: syz [ 1830.698209][T22769] usb 1-1: SerialNumber: syz [ 1830.794562][T22769] usb 1-1: config 0 descriptor?? [ 1830.801376][T22769] em28xx 1-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 1830.822625][T26920] binder: 26918:26920 ioctl c0306201 20000000acc0 returned -22 [ 1830.840627][T22769] em28xx 1-1:0.0: Audio interface 0 found (Vendor Class) [ 1831.574867][T22769] em28xx 1-1:0.0: unknown em28xx chip ID (0) [ 1831.614182][T22769] em28xx 1-1:0.0: Config register raw data: 0x41 [ 1831.824469][T26943] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000000: 0x1192 instead [ 1831.909913][T14162] usb 1-1: USB disconnect, device number 67 [ 1831.910764][T14162] em28xx 1-1:0.0: Disconnecting em28xx [ 1831.974395][T26943] jffs2: Cowardly refusing to erase blocks on filesystem with no valid JFFS2 nodes [ 1831.974408][T26943] jffs2: empty_blocks 0, bad_blocks 0, c->nr_blocks 32 [ 1832.108300][T14162] em28xx: Freeing device [ 1832.148172][ T31] kauditd_printk_skb: 213 callbacks suppressed [ 1832.148187][ T31] audit: type=1400 audit(1700001514.575:84425): avc: denied { read } for pid=12674 comm="syz-executor" name="loop8" dev="devtmpfs" ino=653 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 1832.148219][ T31] audit: type=1400 audit(1700001514.575:84426): avc: denied { open } for pid=12674 comm="syz-executor" path="/dev/loop8" dev="devtmpfs" ino=653 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 1832.148244][ T31] audit: type=1400 audit(1700001514.575:84427): avc: denied { ioctl } for pid=12674 comm="syz-executor" path="/dev/loop8" dev="devtmpfs" ino=653 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 1832.291022][ T31] audit: type=1400 audit(1700001514.715:84428): avc: denied { read } for pid=12033 comm="syz-executor" name="loop7" dev="devtmpfs" ino=652 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 1832.291058][ T31] audit: type=1400 audit(1700001514.715:84429): avc: denied { open } for pid=12033 comm="syz-executor" path="/dev/loop7" dev="devtmpfs" ino=652 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 1832.291083][ T31] audit: type=1400 audit(1700001514.715:84430): avc: denied { ioctl } for pid=12033 comm="syz-executor" path="/dev/loop7" dev="devtmpfs" ino=652 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 1832.417817][ T31] audit: type=1400 audit(1700001514.837:84431): avc: denied { read } for pid=23998 comm="syz-executor" name="loop6" dev="devtmpfs" ino=651 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 1832.417872][ T31] audit: type=1400 audit(1700001514.837:84432): avc: denied { open } for pid=23998 comm="syz-executor" path="/dev/loop6" dev="devtmpfs" ino=651 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 1832.417899][ T31] audit: type=1400 audit(1700001514.837:84433): avc: denied { ioctl } for pid=23998 comm="syz-executor" path="/dev/loop6" dev="devtmpfs" ino=651 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 1832.549299][ T31] audit: type=1400 audit(1700001514.959:84434): avc: denied { read } for pid=15435 comm="syz-executor" name="loop5" dev="devtmpfs" ino=650 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 1833.097755][T26982] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1834.468102][ T5333] usb 6-1: new high-speed USB device number 23 using dummy_hcd [ 1834.628778][ T5333] usb 6-1: Using ep0 maxpacket: 16 [ 1834.629508][ T5333] usb 6-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 1834.633751][ T5333] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1834.633772][ T5333] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1834.633785][ T5333] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 1834.633808][ T5333] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1834.705060][ T5333] usb 6-1: config 0 descriptor?? [ 1834.923986][T27027] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1835.204722][ T5333] hid_parser_main: 5 callbacks suppressed [ 1835.204805][ T5333] microsoft 0003:045E:07DA.0068: unknown main item tag 0x0 [ 1835.204832][ T5333] microsoft 0003:045E:07DA.0068: unknown main item tag 0x0 [ 1835.204847][ T5333] microsoft 0003:045E:07DA.0068: unknown main item tag 0x0 [ 1835.204862][ T5333] microsoft 0003:045E:07DA.0068: unknown main item tag 0x0 [ 1835.204876][ T5333] microsoft 0003:045E:07DA.0068: unknown main item tag 0x0 [ 1835.242141][ T5333] microsoft 0003:045E:07DA.0068: unknown main item tag 0x0 [ 1835.242176][ T5333] microsoft 0003:045E:07DA.0068: unknown main item tag 0x0 [ 1835.242192][ T5333] microsoft 0003:045E:07DA.0068: unknown main item tag 0x0 [ 1835.242207][ T5333] microsoft 0003:045E:07DA.0068: unknown main item tag 0x0 [ 1835.242221][ T5333] microsoft 0003:045E:07DA.0068: unknown main item tag 0x0 [ 1835.331986][ T5333] input: HID 045e:07da as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/0003:045E:07DA.0068/input/input157 [ 1835.413902][ T5333] microsoft 0003:045E:07DA.0068: input,hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.5-1/input0 [ 1835.717545][ T10] usb 6-1: USB disconnect, device number 23 [ 1835.928921][T27052] fido_id[27052]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.5/usb6/report_descriptor': No such file or directory [ 1837.278959][ T5333] usb 9-1: new full-speed USB device number 21 using dummy_hcd [ 1837.339501][T27106] bridge0: port 2(bridge_slave_1) entered blocking state [ 1837.339578][T27106] bridge0: port 2(bridge_slave_1) entered listening state [ 1837.339713][T27106] bridge0: port 1(bridge_slave_0) entered blocking state [ 1837.339778][T27106] bridge0: port 1(bridge_slave_0) entered listening state [ 1837.441981][ T5333] usb 9-1: New USB device found, idVendor=056a, idProduct=5012, bcdDevice= 0.00 [ 1837.443994][ T5333] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 1837.444016][ T5333] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1837.444038][ T5333] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1837.447336][ T5333] usb 9-1: config 0 descriptor?? [ 1837.508221][ T31] kauditd_printk_skb: 235 callbacks suppressed [ 1837.508237][ T31] audit: type=1400 audit(1700001519.533:84668): avc: denied { ioctl } for pid=23998 comm="syz-executor" path="/dev/loop6" dev="devtmpfs" ino=651 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 1837.606659][T27106] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check. [ 1837.683167][ T31] audit: type=1400 audit(1700001519.757:84671): avc: denied { read } for pid=20919 comm="syz-executor" name="loop0" dev="devtmpfs" ino=645 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 1837.683203][ T31] audit: type=1400 audit(1700001519.757:84672): avc: denied { read open } for pid=20919 comm="syz-executor" path="/dev/loop0" dev="devtmpfs" ino=645 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 1837.683228][ T31] audit: type=1400 audit(1700001519.757:84673): avc: denied { ioctl } for pid=20919 comm="syz-executor" path="/dev/loop0" dev="devtmpfs" ino=645 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 1837.827587][ T31] audit: type=1400 audit(1700001519.897:84674): avc: denied { map_create } for pid=27118 comm="syz.6.15000" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 1837.827884][ T31] audit: type=1400 audit(1700001519.897:84675): avc: denied { bpf } for pid=27118 comm="syz.6.15000" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 1837.832559][ T31] audit: type=1400 audit(1700001519.897:84676): avc: denied { read } for pid=27119 comm="syz.7.14999" name="iommu" dev="devtmpfs" ino=624 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 1837.832594][ T31] audit: type=1400 audit(1700001519.897:84677): avc: denied { open } for pid=27119 comm="syz.7.14999" path="/dev/iommu" dev="devtmpfs" ino=624 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 1837.834722][ T31] audit: type=1400 audit(1700001519.897:84678): avc: denied { map_create } for pid=27118 comm="syz.6.15000" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 1837.904816][ T31] audit: type=1400 audit(1700001519.972:84679): avc: denied { map_read map_write } for pid=27118 comm="syz.6.15000" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 1838.236978][ T5333] wacom 0003:056A:5012.0069: ignoring exceeding usage max [ 1838.281633][ T5333] wacom 0003:056A:5012.0069: reserved main item tag 0xd [ 1838.312693][ T5333] wacom 0003:056A:5012.0069: Unknown device_type for 'HID 056a:5012'. Ignoring. [ 1838.582190][T22769] usb 9-1: USB disconnect, device number 21 [ 1839.099469][T27157] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 1839.252677][T27168] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1839.930267][T14162] usb 8-1: new high-speed USB device number 23 using dummy_hcd [ 1840.098189][T14162] usb 8-1: New USB device found, idVendor=0525, idProduct=127a, bcdDevice= 1.00 [ 1840.117096][T14162] usb 8-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1840.120542][T14162] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=0 [ 1840.120560][T14162] usb 8-1: Product: syz [ 1840.120570][T14162] usb 8-1: Manufacturer: syz [ 1840.418526][T14162] usb_debug 8-1:1.0: debug converter detected [ 1840.440204][T14162] usb 8-1: debug converter now attached to ttyUSB0 [ 1840.479396][T27226] sysfs: cannot create duplicate filename '/devices/virtual/tty/gsmtty1' [ 1840.479417][T27226] CPU: 0 UID: 0 PID: 27226 Comm: syz.6.15029 Tainted: G L syzkaller #0 PREEMPT(full) [ 1840.479437][T27226] Tainted: [L]=SOFTLOCKUP [ 1840.479442][T27226] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 1840.479450][T27226] Call Trace: [ 1840.479455][T27226] [ 1840.479460][T27226] dump_stack_lvl+0x100/0x190 [ 1840.479484][T27226] sysfs_warn_dup.cold+0x1c/0x28 [ 1840.479505][T27226] sysfs_create_dir_ns+0x24b/0x2b0 [ 1840.479524][T27226] ? __pfx_sysfs_create_dir_ns+0x10/0x10 [ 1840.479542][T27226] ? find_held_lock+0x2b/0x80 [ 1840.479560][T27226] ? kobject_add_internal+0x25f/0x930 [ 1840.479574][T27226] ? kobject_add_internal+0x25f/0x930 [ 1840.479588][T27226] ? class_dir_child_ns_type+0xd/0x60 [ 1840.479604][T27226] kobject_add_internal+0x2c8/0x930 [ 1840.479620][T27226] kobject_add+0x16a/0x1e0 [ 1840.479632][T27226] ? __pfx_kobject_add+0x10/0x10 [ 1840.479648][T27226] ? get_device_parent+0x1b3/0x4c0 [ 1840.479667][T27226] ? kobject_put+0xb9/0x640 [ 1840.479683][T27226] device_add+0x294/0x1970 [ 1840.479696][T27226] ? lockdep_init_map_type+0x5c/0x250 [ 1840.479710][T27226] ? __pfx_device_add+0x10/0x10 [ 1840.479722][T27226] ? lockdep_init_map_type+0x5c/0x250 [ 1840.479736][T27226] ? __init_waitqueue_head+0xca/0x150 [ 1840.479756][T27226] tty_register_device_attr+0x388/0x810 [ 1840.479775][T27226] ? lockdep_init_map_type+0x5c/0x250 [ 1840.479789][T27226] ? __pfx_tty_register_device_attr+0x10/0x10 [ 1840.479811][T27226] ? tty_port_init+0x156/0x1c0 [ 1840.479831][T27226] gsm_activate_mux+0x155/0x2a0 [ 1840.479849][T27226] gsmld_ioctl+0xbbc/0x15c0 [ 1840.479866][T27226] ? kasan_quarantine_put+0x104/0x240 [ 1840.479885][T27226] ? __pfx_gsmld_ioctl+0x10/0x10 [ 1840.479910][T27226] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 1840.479925][T27226] ? __pfx_pty_unix98_ioctl+0x10/0x10 [ 1840.479942][T27226] ? __pfx_gsmld_ioctl+0x10/0x10 [ 1840.479954][T27226] tty_ioctl+0x12f0/0x1800 [ 1840.479973][T27226] ? __pfx_tty_ioctl+0x10/0x10 [ 1840.479988][T27226] ? ioctl_has_perm.constprop.0.isra.0+0x380/0x540 [ 1840.480008][T27226] ? __pfx_ioctl_has_perm.constprop.0.isra.0+0x10/0x10 [ 1840.480027][T27226] ? __fget_files+0x34/0x3d0 [ 1840.480051][T27226] ? selinux_file_ioctl+0x13b/0x290 [ 1840.480066][T27226] ? selinux_file_ioctl+0xb6/0x290 [ 1840.480083][T27226] ? __pfx_tty_ioctl+0x10/0x10 [ 1840.480101][T27226] __x64_sys_ioctl+0x18e/0x210 [ 1840.480118][T27226] do_syscall_64+0x123/0x790 [ 1840.480136][T27226] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1840.480148][T27226] RIP: 0033:0x7f8eefd9e559 [ 1840.480159][T27226] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1840.480172][T27226] RSP: 002b:00007f8eedfd5028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1840.480184][T27226] RAX: ffffffffffffffda RBX: 00007f8ef0026090 RCX: 00007f8eefd9e559 [ 1840.480193][T27226] RDX: 0000200000000040 RSI: 00000000404c4701 RDI: 0000000000000003 [ 1840.480201][T27226] RBP: 00007f8eefe358b0 R08: 0000000000000000 R09: 0000000000000000 [ 1840.480209][T27226] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1840.480216][T27226] R13: 00007f8ef0026128 R14: 00007f8ef0026090 R15: 00007fffa1df8968 [ 1840.480234][T27226] [ 1840.480267][T27226] kobject: kobject_add_internal failed for gsmtty1 with -EEXIST, don't try to register things with the same name in the same directory. [ 1841.201557][ T5333] usb 8-1: USB disconnect, device number 23 [ 1841.230685][ T5333] debug ttyUSB0: debug converter now disconnected from ttyUSB0 [ 1841.231255][ T5333] usb_debug 8-1:1.0: device disconnected [ 1842.969667][ T31] kauditd_printk_skb: 220 callbacks suppressed [ 1842.969681][ T31] audit: type=1400 audit(1700001524.705:84900): avc: denied { read } for pid=12033 comm="syz-executor" name="loop7" dev="devtmpfs" ino=652 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 1843.008777][ T31] audit: type=1400 audit(1700001524.743:84902): avc: denied { map_create } for pid=27370 comm="syz.0.15037" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 1843.038684][ T31] audit: type=1400 audit(1700001524.705:84901): avc: denied { open } for pid=12033 comm="syz-executor" path="/dev/loop7" dev="devtmpfs" ino=652 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 1843.038723][ T31] audit: type=1400 audit(1700001524.771:84903): avc: denied { ioctl } for pid=12033 comm="syz-executor" path="/dev/loop7" dev="devtmpfs" ino=652 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 1843.106465][ T31] audit: type=1400 audit(1700001524.836:84904): avc: denied { bpf } for pid=27370 comm="syz.0.15037" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 1843.106503][ T31] audit: type=1400 audit(1700001524.836:84905): avc: denied { map_create } for pid=27370 comm="syz.0.15037" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 1843.106529][ T31] audit: type=1400 audit(1700001524.836:84906): avc: denied { map_read map_write } for pid=27370 comm="syz.0.15037" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 1843.235590][ T31] audit: type=1400 audit(1700001524.958:84907): avc: denied { prog_load } for pid=27370 comm="syz.0.15037" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 1843.235625][ T31] audit: type=1400 audit(1700001524.958:84908): avc: denied { bpf } for pid=27370 comm="syz.0.15037" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 1843.235662][ T31] audit: type=1400 audit(1700001524.958:84909): avc: denied { perfmon } for pid=27370 comm="syz.0.15037" capability=38 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 1843.714451][ T10] kernel write not supported for file /sg0 (pid: 10 comm: kworker/0:1) [ 1844.661226][T27412] binder: 27410:27412 unknown command 0 [ 1844.661243][T27412] binder: 27410:27412 ioctl c0306201 200000000240 returned -22 [ 1844.927155][T27420] FAULT_INJECTION: forcing a failure. [ 1844.927155][T27420] name failslab, interval 1, probability 0, space 0, times 0 [ 1844.927181][T27420] CPU: 0 UID: 0 PID: 27420 Comm: syz.5.15053 Tainted: G L syzkaller #0 PREEMPT(full) [ 1844.927199][T27420] Tainted: [L]=SOFTLOCKUP [ 1844.927205][T27420] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 1844.927212][T27420] Call Trace: [ 1844.927219][T27420] [ 1844.927224][T27420] dump_stack_lvl+0x100/0x190 [ 1844.927248][T27420] should_fail_ex.cold+0x5/0xa [ 1844.927267][T27420] should_failslab+0xc2/0x120 [ 1844.927285][T27420] __kmalloc_noprof+0xfc/0x840 [ 1844.927300][T27420] ? __pfx_inc_ucount+0x10/0x10 [ 1844.927317][T27420] ? net_alloc_generic+0x1e/0x70 [ 1844.927334][T27420] net_alloc_generic+0x1e/0x70 [ 1844.927346][T27420] copy_net_ns+0xc6/0x7a0 [ 1844.927360][T27420] ? copy_cgroup_ns+0x71/0x970 [ 1844.927378][T27420] create_new_namespaces+0x3ea/0xac0 [ 1844.927396][T27420] unshare_nsproxy_namespaces+0xf2/0x220 [ 1844.927412][T27420] ksys_unshare+0x4a2/0xb30 [ 1844.927427][T27420] ? __pfx_ksys_unshare+0x10/0x10 [ 1844.927447][T27420] __x64_sys_unshare+0x31/0x40 [ 1844.927461][T27420] do_syscall_64+0x123/0x790 [ 1844.927479][T27420] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1844.927492][T27420] RIP: 0033:0x7fdc2e99e559 [ 1844.927502][T27420] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1844.927514][T27420] RSP: 002b:00007fdc2f8cb028 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 1844.927526][T27420] RAX: ffffffffffffffda RBX: 00007fdc2ec25fa0 RCX: 00007fdc2e99e559 [ 1844.927534][T27420] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000040040400 [ 1844.927541][T27420] RBP: 00007fdc2ea358b0 R08: 0000000000000000 R09: 0000000000000000 [ 1844.927548][T27420] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1844.927555][T27420] R13: 00007fdc2ec26038 R14: 00007fdc2ec25fa0 R15: 00007ffcc526d4f8 [ 1844.927571][T27420] [ 1845.173593][T14162] usb 9-1: new high-speed USB device number 22 using dummy_hcd [ 1845.351879][T14162] usb 9-1: Using ep0 maxpacket: 8 [ 1845.362132][T14162] usb 9-1: New USB device found, idVendor=1b1c, idProduct=1b3e, bcdDevice= 0.00 [ 1845.367778][T14162] usb 9-1: config 0 interface 0 altsetting 5 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1845.367801][T14162] usb 9-1: config 0 interface 0 altsetting 5 endpoint 0x81 has invalid maxpacket 1040, setting to 1024 [ 1845.367817][T14162] usb 9-1: config 0 interface 0 altsetting 5 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1845.367832][T14162] usb 9-1: config 0 interface 0 has no altsetting 0 [ 1845.367851][T14162] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1845.383125][T14162] usb 9-1: config 0 descriptor?? [ 1845.397164][T27421] raw-gadget.0 gadget.8: fail, usb_ep_enable returned -22 [ 1845.860378][T27440] random: crng reseeded on system resumption [ 1845.891845][T27442] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1845.934240][T27440] FAULT_INJECTION: forcing a failure. [ 1845.934240][T27440] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 1845.934267][T27440] CPU: 0 UID: 0 PID: 27440 Comm: syz.5.15060 Tainted: G L syzkaller #0 PREEMPT(full) [ 1845.934286][T27440] Tainted: [L]=SOFTLOCKUP [ 1845.934291][T27440] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 1845.934300][T27440] Call Trace: [ 1845.934305][T27440] [ 1845.934310][T27440] dump_stack_lvl+0x100/0x190 [ 1845.934336][T27440] should_fail_ex.cold+0x5/0xa [ 1845.934353][T27440] ? prepare_alloc_pages+0x16d/0x5b0 [ 1845.934372][T27440] should_fail_alloc_page+0xeb/0x140 [ 1845.934391][T27440] prepare_alloc_pages+0x1f0/0x5b0 [ 1845.934409][T27440] ? unwind_get_return_address+0x59/0xa0 [ 1845.934428][T27440] __alloc_frozen_pages_noprof+0x1e9/0x3300 [ 1845.934450][T27440] ? lock_acquire+0x1d1/0x380 [ 1845.934463][T27440] ? clockevents_program_event+0x23e/0x820 [ 1845.934483][T27440] ? find_held_lock+0x2b/0x80 [ 1845.934501][T27440] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 1845.934515][T27440] ? clockevents_program_event+0x23e/0x820 [ 1845.934536][T27440] ? ktime_get+0x9f/0x320 [ 1845.934549][T27440] ? ktime_get+0x1a4/0x320 [ 1845.934563][T27440] ? lapic_next_event+0x10/0x20 [ 1845.934576][T27440] ? clockevents_program_event+0x1ef/0x820 [ 1845.934599][T27440] ? __pfx_clockevents_program_event+0x10/0x10 [ 1845.934630][T27440] ? find_held_lock+0x2b/0x80 [ 1845.934648][T27440] ? __hrtimer_rearm_deferred+0x23c/0x7b0 [ 1845.934660][T27440] ? __hrtimer_rearm_deferred+0x23c/0x7b0 [ 1845.934674][T27440] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 1845.934691][T27440] ? policy_nodemask+0xed/0x4f0 [ 1845.934710][T27440] alloc_pages_mpol+0x201/0x550 [ 1845.934728][T27440] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 1845.934751][T27440] alloc_pages_noprof+0x1a/0x160 [ 1845.934764][T27440] get_zeroed_page_noprof+0x18/0xb0 [ 1845.934780][T27440] get_image_page+0x18/0x1a0 [ 1845.934798][T27440] memory_bm_create+0x66a/0xcf0 [ 1845.934822][T27440] create_basic_memory_bitmaps+0xbd/0x350 [ 1845.934843][T27440] snapshot_open+0x23b/0x2b0 [ 1845.934855][T27440] ? __pfx_snapshot_open+0x10/0x10 [ 1845.934868][T27440] misc_open+0x26d/0x450 [ 1845.934884][T27440] ? __pfx_misc_open+0x10/0x10 [ 1845.934899][T27440] chrdev_open+0x234/0x6a0 [ 1845.934918][T27440] ? __pfx_chrdev_open+0x10/0x10 [ 1845.934936][T27440] ? fsnotify_open_perm_and_set_mode+0x17a/0xa80 [ 1845.934953][T27440] do_dentry_open+0x6ab/0x14d0 [ 1845.934968][T27440] ? __pfx_chrdev_open+0x10/0x10 [ 1845.934988][T27440] vfs_open+0x82/0x3f0 [ 1845.935008][T27440] path_openat+0x19fa/0x2440 [ 1845.935028][T27440] ? __pfx_path_openat+0x10/0x10 [ 1845.935050][T27440] do_file_open+0x20e/0x430 [ 1845.935068][T27440] ? __pfx_do_file_open+0x10/0x10 [ 1845.935097][T27440] ? _raw_spin_unlock+0x28/0x50 [ 1845.935111][T27440] ? alloc_fd+0x471/0x7a0 [ 1845.935133][T27440] do_sys_openat2+0x10f/0x1e0 [ 1845.935145][T27440] ? __pfx_do_sys_openat2+0x10/0x10 [ 1845.935161][T27440] ? handle_softirqs+0x1e6/0x9d0 [ 1845.935179][T27440] __x64_sys_openat+0x12d/0x210 [ 1845.935190][T27440] ? __pfx___x64_sys_openat+0x10/0x10 [ 1845.935209][T27440] do_syscall_64+0x123/0x790 [ 1845.935227][T27440] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1845.935240][T27440] RIP: 0033:0x7fdc2e99e559 [ 1845.935251][T27440] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1845.935263][T27440] RSP: 002b:00007fdc2f8cb028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 1845.935276][T27440] RAX: ffffffffffffffda RBX: 00007fdc2ec25fa0 RCX: 00007fdc2e99e559 [ 1845.935286][T27440] RDX: 0000000000121001 RSI: 0000200000000140 RDI: ffffffffffffff9c [ 1845.935295][T27440] RBP: 00007fdc2ea358b0 R08: 0000000000000000 R09: 0000000000000000 [ 1845.935302][T27440] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1845.935310][T27440] R13: 00007fdc2ec26038 R14: 00007fdc2ec25fa0 R15: 00007ffcc526d4f8 [ 1845.935328][T27440] [ 1846.426821][T14162] input: HID 1b1c:1b3e as /devices/platform/dummy_hcd.8/usb9/9-1/9-1:0.0/0003:1B1C:1B3E.006A/input/input161 [ 1846.483358][T14162] corsair 0003:1B1C:1B3E.006A: input,hidraw0: USB HID v0.00 Joystick [HID 1b1c:1b3e] on usb-dummy_hcd.8-1/input0 [ 1846.728506][T14162] usb 9-1: USB disconnect, device number 22 [ 1846.856500][T27460] fido_id[27460]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.8/usb9/9-1/report_descriptor': No such file or directory [ 1847.811521][T27506] FAULT_INJECTION: forcing a failure. [ 1847.811521][T27506] name failslab, interval 1, probability 0, space 0, times 0 [ 1847.811548][T27506] CPU: 0 UID: 0 PID: 27506 Comm: syz.6.15078 Tainted: G L syzkaller #0 PREEMPT(full) [ 1847.811566][T27506] Tainted: [L]=SOFTLOCKUP [ 1847.811571][T27506] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 1847.811579][T27506] Call Trace: [ 1847.811585][T27506] [ 1847.811591][T27506] dump_stack_lvl+0x100/0x190 [ 1847.811614][T27506] should_fail_ex.cold+0x5/0xa [ 1847.811633][T27506] ? lock_acquire+0x1d1/0x380 [ 1847.811651][T27506] should_failslab+0xc2/0x120 [ 1847.811669][T27506] kmem_cache_alloc_node_noprof+0x94/0x6e0 [ 1847.811687][T27506] ? zswap_store+0xc6d/0x2e70 [ 1847.811702][T27506] zswap_store+0xc6d/0x2e70 [ 1847.811722][T27506] ? __pfx_zswap_store+0x10/0x10 [ 1847.811736][T27506] ? lock_acquire+0x1d1/0x380 [ 1847.811749][T27506] ? do_raw_spin_lock+0x128/0x260 [ 1847.811766][T27506] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 1847.811781][T27506] ? find_held_lock+0x2b/0x80 [ 1847.811797][T27506] ? swap_writeout+0xdd8/0x1b20 [ 1847.811810][T27506] ? swap_writeout+0xdd8/0x1b20 [ 1847.811826][T27506] swap_writeout+0xde0/0x1b20 [ 1847.811844][T27506] shrink_folio_list+0x4ffb/0x5e40 [ 1847.811869][T27506] ? __pfx_shrink_folio_list+0x10/0x10 [ 1847.811911][T27506] ? __lock_acquire+0x5c0/0x1f40 [ 1847.811924][T27506] ? __css_rstat_updated+0x1ce/0x590 [ 1847.811941][T27506] ? __pfx___css_rstat_updated+0x10/0x10 [ 1847.811959][T27506] reclaim_folio_list+0xe9/0x5e0 [ 1847.811978][T27506] ? __pfx_reclaim_folio_list+0x10/0x10 [ 1847.811995][T27506] ? __mod_memcg_lruvec_state+0x18c/0x5b0 [ 1847.812018][T27506] ? lru_gen_update_size+0x431/0xe20 [ 1847.812038][T27506] ? lru_gen_del_folio+0x382/0x5f0 [ 1847.812055][T27506] reclaim_pages+0x428/0x5e0 [ 1847.812075][T27506] ? __pfx_reclaim_pages+0x10/0x10 [ 1847.812091][T27506] ? find_held_lock+0x2b/0x80 [ 1847.812108][T27506] ? madvise_cold_or_pageout_pte_range+0xb8e/0x27b0 [ 1847.812131][T27506] madvise_cold_or_pageout_pte_range+0x15b5/0x27b0 [ 1847.812156][T27506] ? rcu_read_unlock+0x17/0x60 [ 1847.812168][T27506] ? __pfx_madvise_cold_or_pageout_pte_range+0x10/0x10 [ 1847.812188][T27506] ? __mod_zone_page_state+0xdb/0x190 [ 1847.812211][T27506] ? __pfx_madvise_cold_or_pageout_pte_range+0x10/0x10 [ 1847.812230][T27506] walk_pgd_range+0xbef/0x1e00 [ 1847.812249][T27506] ? find_held_lock+0x2b/0x80 [ 1847.812272][T27506] ? __pfx_walk_pgd_range+0x10/0x10 [ 1847.812288][T27506] ? __pfx_folio_batch_move_lru+0x10/0x10 [ 1847.812308][T27506] __walk_page_range+0x171/0x850 [ 1847.812339][T27506] walk_page_range_vma_unsafe+0x209/0x8f0 [ 1847.812359][T27506] ? __pfx_walk_page_range_vma_unsafe+0x10/0x10 [ 1847.812378][T27506] ? find_held_lock+0x2b/0x80 [ 1847.812397][T27506] ? mlock_drain_local+0x254/0x4e0 [ 1847.812411][T27506] ? mlock_drain_local+0x254/0x4e0 [ 1847.812428][T27506] walk_page_range_vma+0x63/0x90 [ 1847.812446][T27506] madvise_pageout+0x29e/0x5b0 [ 1847.812464][T27506] ? __pfx_madvise_pageout+0x10/0x10 [ 1847.812494][T27506] madvise_vma_behavior+0x48b/0x2350 [ 1847.812514][T27506] ? mas_prev+0xa4/0x100 [ 1847.812527][T27506] ? __pfx_madvise_vma_behavior+0x10/0x10 [ 1847.812546][T27506] ? mas_walk+0x260/0x310 [ 1847.812562][T27506] ? find_vma_prev+0xd8/0x150 [ 1847.812578][T27506] ? __pfx_find_vma_prev+0x10/0x10 [ 1847.812595][T27506] ? lock_acquire+0x1d1/0x380 [ 1847.812619][T27506] madvise_walk_vmas+0x30e/0xc50 [ 1847.812634][T27506] ? __pfx_madvise_walk_vmas+0x10/0x10 [ 1847.812653][T27506] ? __pfx_futex_wake_mark+0x10/0x10 [ 1847.812669][T27506] ? lock_acquire+0x1d1/0x380 [ 1847.812685][T27506] madvise_do_behavior+0x1ea/0x510 [ 1847.812698][T27506] ? __pfx_madvise_do_behavior+0x10/0x10 [ 1847.812710][T27506] ? down_read+0x13b/0x4c0 [ 1847.812730][T27506] do_madvise+0x238/0x290 [ 1847.812741][T27506] ? __pfx_do_madvise+0x10/0x10 [ 1847.812751][T27506] ? do_futex+0x190/0x440 [ 1847.812771][T27506] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 1847.812801][T27506] __x64_sys_madvise+0xa9/0x110 [ 1847.812812][T27506] ? lockdep_hardirqs_on+0x7d/0x110 [ 1847.812828][T27506] do_syscall_64+0x123/0x790 [ 1847.812846][T27506] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1847.812859][T27506] RIP: 0033:0x7f8eefd9e559 [ 1847.812870][T27506] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1847.812883][T27506] RSP: 002b:00007f8eedff6028 EFLAGS: 00000246 ORIG_RAX: 000000000000001c [ 1847.812896][T27506] RAX: ffffffffffffffda RBX: 00007f8ef0025fa0 RCX: 00007f8eefd9e559 [ 1847.812904][T27506] RDX: 0000000000000015 RSI: 0000000000600000 RDI: 0000200000000000 [ 1847.812913][T27506] RBP: 00007f8eefe358b0 R08: 0000000000000000 R09: 0000000000000000 [ 1847.812921][T27506] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1847.812929][T27506] R13: 00007f8ef0026038 R14: 00007f8ef0025fa0 R15: 00007fffa1df8968 [ 1847.812946][T27506] [ 1848.369314][ T31] kauditd_printk_skb: 295 callbacks suppressed [ 1848.369341][ T31] audit: type=1400 audit(1700001785.762:85205): avc: denied { bind } for pid=27508 comm="syz.5.15079" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 1848.369374][ T31] audit: type=1400 audit(1700001785.762:85206): avc: denied { node_bind } for pid=27508 comm="syz.5.15079" saddr=::1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=sctp_socket permissive=1 [ 1848.372143][ T31] audit: type=1400 audit(1700001785.762:85207): avc: denied { read } for pid=27509 comm="syz.7.15080" name="kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 1848.375661][ T31] audit: type=1400 audit(1700001785.762:85208): avc: denied { open } for pid=27509 comm="syz.7.15080" path="/dev/kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 1848.427117][ T31] audit: type=1400 audit(1700001785.818:85209): avc: denied { setopt } for pid=27508 comm="syz.5.15079" laddr=::1 lport=57222 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 1848.427155][ T31] audit: type=1400 audit(1700001785.818:85210): avc: denied { bind } for pid=27508 comm="syz.5.15079" laddr=::1 lport=57222 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 1848.427179][ T31] audit: type=1400 audit(1700001785.818:85211): avc: denied { node_bind } for pid=27508 comm="syz.5.15079" saddr=127.0.0.1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=sctp_socket permissive=1 [ 1848.556581][ T31] audit: type=1400 audit(1700001785.930:85212): avc: denied { setopt } for pid=27508 comm="syz.5.15079" laddr=::ffff:127.0.0.1 lport=57222 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 1848.586937][ T31] audit: type=1400 audit(1700001785.958:85213): avc: denied { ioctl } for pid=27509 comm="syz.7.15080" path="/dev/kvm" dev="devtmpfs" ino=84 ioctlcmd=0xae01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 1848.637877][ T31] audit: type=1400 audit(1700001786.005:85214): avc: denied { unmount } for pid=12674 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=filesystem permissive=1 [ 1848.865156][T27520] netlink: 36 bytes leftover after parsing attributes in process `syz.8.15082'. [ 1849.107053][T27527] netlink: 12 bytes leftover after parsing attributes in process `syz.8.15086'. [ 1849.111325][T27527] netlink: 12 bytes leftover after parsing attributes in process `syz.8.15086'. [ 1849.708638][T27552] gfs2: path_lookup on syz returned error -2 [ 1849.956516][T27562] FAULT_INJECTION: forcing a failure. [ 1849.956516][T27562] name failslab, interval 1, probability 0, space 0, times 0 [ 1849.956543][T27562] CPU: 0 UID: 0 PID: 27562 Comm: syz.0.15098 Tainted: G L syzkaller #0 PREEMPT(full) [ 1849.956562][T27562] Tainted: [L]=SOFTLOCKUP [ 1849.956568][T27562] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 1849.956577][T27562] Call Trace: [ 1849.956583][T27562] [ 1849.956590][T27562] dump_stack_lvl+0x100/0x190 [ 1849.956614][T27562] should_fail_ex.cold+0x5/0xa [ 1849.956634][T27562] should_failslab+0xc2/0x120 [ 1849.956653][T27562] kmem_cache_alloc_noprof+0x92/0x6a0 [ 1849.956669][T27562] ? prepare_creds+0x2c/0x950 [ 1849.956685][T27562] prepare_creds+0x2c/0x950 [ 1849.956699][T27562] keyctl_set_reqkey_keyring+0x8e/0x1c0 [ 1849.956716][T27562] __do_sys_keyctl+0x316/0x5a0 [ 1849.956731][T27562] do_syscall_64+0x123/0x790 [ 1849.956753][T27562] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1849.956766][T27562] RIP: 0033:0x7fa73479e559 [ 1849.956778][T27562] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1849.956789][T27562] RSP: 002b:00007fa73571d028 EFLAGS: 00000246 ORIG_RAX: 00000000000000fa [ 1849.956800][T27562] RAX: ffffffffffffffda RBX: 00007fa734a25fa0 RCX: 00007fa73479e559 [ 1849.956808][T27562] RDX: 0000000000000000 RSI: 0000000000000002 RDI: 000000000000000e [ 1849.956816][T27562] RBP: 00007fa7348358b0 R08: 0000000000000000 R09: 0000000000000000 [ 1849.956822][T27562] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1849.956829][T27562] R13: 00007fa734a26038 R14: 00007fa734a25fa0 R15: 00007ffd85d60e98 [ 1849.956847][T27562] [ 1851.686258][T17103] IPVS: starting estimator thread 0... [ 1851.777358][T27607] IPVS: using max 69 ests per chain, 165600 per kthread [ 1853.243079][T27657] FAULT_INJECTION: forcing a failure. [ 1853.243079][T27657] name failslab, interval 1, probability 0, space 0, times 0 [ 1853.243104][T27657] CPU: 0 UID: 0 PID: 27657 Comm: syz.5.15134 Tainted: G L syzkaller #0 PREEMPT(full) [ 1853.243123][T27657] Tainted: [L]=SOFTLOCKUP [ 1853.243128][T27657] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 1853.243136][T27657] Call Trace: [ 1853.243141][T27657] [ 1853.243146][T27657] dump_stack_lvl+0x100/0x190 [ 1853.243169][T27657] should_fail_ex.cold+0x5/0xa [ 1853.243188][T27657] should_failslab+0xc2/0x120 [ 1853.243207][T27657] __kmalloc_noprof+0xfc/0x840 [ 1853.243223][T27657] ? lsm_blob_alloc+0x68/0x90 [ 1853.243239][T27657] lsm_blob_alloc+0x68/0x90 [ 1853.243252][T27657] security_key_alloc+0x34/0x310 [ 1853.243269][T27657] key_alloc+0x876/0x1310 [ 1853.243292][T27657] ? __pfx_key_alloc+0x10/0x10 [ 1853.243308][T27657] ? __pfx_key_default_cmp+0x10/0x10 [ 1853.243324][T27657] ? __pfx_keyring_search_iterator+0x10/0x10 [ 1853.243346][T27657] keyring_alloc+0x44/0xc0 [ 1853.243360][T27657] look_up_user_keyrings+0x508/0x790 [ 1853.243378][T27657] ? __pfx_look_up_user_keyrings+0x10/0x10 [ 1853.243396][T27657] ? find_held_lock+0x2b/0x80 [ 1853.243419][T27657] lookup_user_key+0xbb1/0x1300 [ 1853.243437][T27657] ? __pfx_lookup_user_key+0x10/0x10 [ 1853.243451][T27657] ? futex_wait+0x11e/0x370 [ 1853.243469][T27657] ? __pfx_lookup_user_key_possessed+0x10/0x10 [ 1853.243487][T27657] ? ksys_write+0x190/0x250 [ 1853.243506][T27657] keyctl_get_persistent+0x197/0x940 [ 1853.243519][T27657] ? __pfx_keyctl_get_persistent+0x10/0x10 [ 1853.243533][T27657] ? __x64_sys_futex+0x34f/0x4d0 [ 1853.243549][T27657] ? __x64_sys_futex+0x358/0x4d0 [ 1853.243567][T27657] ? xfd_validate_state+0x129/0x190 [ 1853.243584][T27657] __do_sys_keyctl+0x3b2/0x5a0 [ 1853.243600][T27657] do_syscall_64+0x123/0x790 [ 1853.243619][T27657] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1853.243631][T27657] RIP: 0033:0x7fdc2e99e559 [ 1853.243643][T27657] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1853.243654][T27657] RSP: 002b:00007fdc2f8cb028 EFLAGS: 00000246 ORIG_RAX: 00000000000000fa [ 1853.243665][T27657] RAX: ffffffffffffffda RBX: 00007fdc2ec25fa0 RCX: 00007fdc2e99e559 [ 1853.243674][T27657] RDX: fffffffffffffffd RSI: ffffffffffffffff RDI: 0000000000000016 [ 1853.243682][T27657] RBP: 00007fdc2ea358b0 R08: 0000000000000000 R09: 0000000000000000 [ 1853.243690][T27657] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1853.243697][T27657] R13: 00007fdc2ec26038 R14: 00007fdc2ec25fa0 R15: 00007ffcc526d4f8 [ 1853.243714][T27657] [ 1853.481115][ C0] bridge0: port 1(bridge_slave_0) entered learning state [ 1853.481215][ C0] bridge0: port 2(bridge_slave_1) entered learning state [ 1853.582975][T27658] FAULT_INJECTION: forcing a failure. [ 1853.582975][T27658] name failslab, interval 1, probability 0, space 0, times 0 [ 1853.583002][T27658] CPU: 0 UID: 0 PID: 27658 Comm: syz.8.15135 Tainted: G L syzkaller #0 PREEMPT(full) [ 1853.583020][T27658] Tainted: [L]=SOFTLOCKUP [ 1853.583026][T27658] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 1853.583034][T27658] Call Trace: [ 1853.583039][T27658] [ 1853.583045][T27658] dump_stack_lvl+0x100/0x190 [ 1853.583069][T27658] should_fail_ex.cold+0x5/0xa [ 1853.583088][T27658] should_failslab+0xc2/0x120 [ 1853.583109][T27658] __kmalloc_cache_noprof+0x91/0x6d0 [ 1853.583123][T27658] ? __x64_sys_futex+0x358/0x4d0 [ 1853.583142][T27658] ? fsnotify_alloc_group+0x8d/0x320 [ 1853.583158][T27658] fsnotify_alloc_group+0x8d/0x320 [ 1853.583173][T27658] do_inotify_init+0x4b/0x5e0 [ 1853.583191][T27658] __x64_sys_inotify_init1+0x30/0x40 [ 1853.583207][T27658] do_syscall_64+0x123/0x790 [ 1853.583226][T27658] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1853.583239][T27658] RIP: 0033:0x7f089259e559 [ 1853.583250][T27658] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1853.583261][T27658] RSP: 002b:00007f0893380028 EFLAGS: 00000246 ORIG_RAX: 0000000000000126 [ 1853.583274][T27658] RAX: ffffffffffffffda RBX: 00007f0892825fa0 RCX: 00007f089259e559 [ 1853.583281][T27658] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000800 [ 1853.583289][T27658] RBP: 00007f08926358b0 R08: 0000000000000000 R09: 0000000000000000 [ 1853.583296][T27658] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1853.583303][T27658] R13: 00007f0892826038 R14: 00007f0892825fa0 R15: 00007ffe7e102b18 [ 1853.583320][T27658] [ 1853.831950][ T31] kauditd_printk_skb: 341 callbacks suppressed [ 1853.831964][ T31] audit: type=1400 audit(1700001790.869:85556): avc: denied { unmount } for pid=15435 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 1853.835994][ T31] audit: type=1400 audit(1700001790.869:85557): avc: denied { unmount } for pid=12674 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 1853.895450][ T31] audit: type=1400 audit(1700001790.925:85558): avc: denied { read } for pid=15435 comm="syz-executor" name="loop5" dev="devtmpfs" ino=650 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 1853.895746][ T31] audit: type=1400 audit(1700001790.925:85559): avc: denied { open } for pid=15435 comm="syz-executor" path="/dev/loop5" dev="devtmpfs" ino=650 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 1853.896951][ T31] audit: type=1400 audit(1700001790.925:85560): avc: denied { ioctl } for pid=15435 comm="syz-executor" path="/dev/loop5" dev="devtmpfs" ino=650 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 1853.901161][ T31] audit: type=1400 audit(1700001790.925:85561): avc: denied { mounton } for pid=27660 comm="syz.6.15136" path="/97/sys" dev="tmpfs" ino=519 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 1853.901198][ T31] audit: type=1400 audit(1700001790.925:85562): avc: denied { mount } for pid=27660 comm="syz.6.15136" name="/" dev="sysfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=filesystem permissive=1 [ 1853.999657][ T31] audit: type=1400 audit(1700001790.963:85563): avc: denied { read } for pid=12674 comm="syz-executor" name="loop8" dev="devtmpfs" ino=653 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 1853.999691][ T31] audit: type=1400 audit(1700001791.028:85564): avc: denied { open } for pid=12674 comm="syz-executor" path="/dev/loop8" dev="devtmpfs" ino=653 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 1854.107395][ T31] audit: type=1400 audit(1700001791.131:85565): avc: denied { ioctl } for pid=12674 comm="syz-executor" path="/dev/loop8" dev="devtmpfs" ino=653 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 1854.251688][T27654] smpboot: Booting Node 0 Processor 1 APIC 0x1 [ 1854.476025][T27671] Ring buffer clock went backwards: 599439700323 -> 282 [ 1854.503860][T10032] IPVS: starting estimator thread 0... [ 1854.504453][T10032] [CPU: 1]TIME DOES NOT MATCH expected:599439700326 actual:285 delta:3 before:282 after:282 context:. [ 1854.504453][T10032] trace clock:trace_clock_counter+0x0/0x40 [ 1854.504500][T10032] [580478719392] PAGE TIME STAMP [ 1854.504510][T10032] 0x0: [580478719392] delta:0 . [ 1854.504522][T10032] 0x14: [599439700323] delta:18960980931 TIME EXTEND [ 1854.504534][T10032] 0x1c: [599439700323] delta:0 . [ 1854.504546][T10032] 0x34: [599439700323] delta:0 TIME EXTEND [ 1854.504557][T10032] 0x3c: [599439700323] delta:0 . [ 1854.504570][T10032] expected end:0x70 last event actually ended at:0x70 [ 1854.504690][T10032] ------------[ cut here ]------------ [ 1854.504697][T10032] system_state != SYSTEM_BOOTING [ 1854.504710][T10032] WARNING: kernel/trace/ring_buffer.c:4783 at check_buffer.cold+0x1a2/0x1ef, CPU#1: kworker/u8:3/10032 [ 1854.595458][T10032] Modules linked in: [ 1854.599701][T10032] CPU: 1 UID: 0 PID: 10032 Comm: kworker/u8:3 Tainted: G L syzkaller #0 PREEMPT(full) [ 1854.612012][T10032] Tainted: [L]=SOFTLOCKUP [ 1854.616371][T10032] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 1854.626502][T10032] Workqueue: events_unbound call_usermodehelper_exec_work [ 1854.633680][T10032] RIP: 0010:check_buffer.cold+0x1a2/0x1ef [ 1854.639668][T10032] Code: 03 0f b6 14 11 38 d0 7c 04 84 d2 75 5c 8b 2d 1c f4 21 11 31 ff 89 ee e8 8f 29 e9 00 85 ed 0f 84 a8 c4 eb 00 e8 12 2f e9 00 90 <0f> 0b 90 e9 53 c2 eb 00 49 c7 c7 a0 5e f6 8b e9 51 fe ff ff e8 c8 [ 1854.660048][T10032] RSP: 0018:ffffc90004a0f510 EFLAGS: 00010293 [ 1854.666413][T10032] RAX: 0000000000000000 RBX: 1ffff92000941ea8 RCX: 0000000000000002 [ 1854.674512][T10032] RDX: ffff888034610000 RSI: ffffffff8123277e RDI: ffff888034610000 [ 1854.682495][T10032] RBP: 0000000000000003 R08: 0000000000000005 R09: 0000000000000000 [ 1854.690893][T10032] R10: 0000000000000003 R11: 0000000000000001 R12: 000000000000011d [ 1854.699263][T10032] R13: ffff88801e2c4000 R14: ffff8880202da000 R15: ffffffff8bf65a40 [ 1854.707468][T10032] FS: 0000000000000000(0000) GS:ffff888122a46000(0000) knlGS:0000000000000000 [ 1854.714686][T14162] kernel write not supported for file bpf-map (pid: 14162 comm: kworker/0:11) [ 1854.716294][T27674] IPVS: using max 38 ests per chain, 91200 per kthread [ 1854.732145][T10032] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1854.738948][T10032] CR2: 0000001b31019ff8 CR3: 0000000036918000 CR4: 00000000003526f0 [ 1854.746954][T10032] Call Trace: [ 1854.750332][T10032] [ 1854.753273][T10032] ? __pfx_trace_clock_counter+0x10/0x10 [ 1854.758977][T10032] ? __pfx_check_buffer+0x10/0x10 [ 1854.764018][T10032] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 1854.769468][T10032] __rb_reserve_next.constprop.0+0x486/0x1640 [ 1854.775560][T10032] ring_buffer_lock_reserve+0x49a/0x1220 [ 1854.781478][T10032] ? __pfx_ring_buffer_lock_reserve+0x10/0x10 [ 1854.787597][T10032] ? __lock_acquire+0x5c0/0x1f40 [ 1854.792605][T10032] trace_event_buffer_lock_reserve+0x123/0x6f0 [ 1854.798895][T10032] trace_event_buffer_reserve+0x1f9/0x350 [ 1854.804768][T10032] trace_event_raw_event_sched_process_fork+0x109/0x460 [ 1854.811803][T10032] ? __pfx_trace_event_raw_event_sched_process_fork+0x10/0x10 [ 1854.819292][T10032] ? lockdep_hardirqs_on+0x7d/0x110 [ 1854.824825][T10032] ? __pfx_add_device_randomness+0x10/0x10 [ 1854.830658][T10032] kernel_clone+0x461/0x9d0 [ 1854.835271][T10032] ? __pfx_kernel_clone+0x10/0x10 [ 1854.840387][T10032] ? register_lock_class+0x3f/0x7b0 [ 1854.845639][T10032] ? __pfx_call_usermodehelper_exec_async+0x10/0x10 [ 1854.852338][T10032] user_mode_thread+0xd1/0x120 [ 1854.857210][T10032] ? __pfx_user_mode_thread+0x10/0x10 [ 1854.862625][T10032] ? __pfx_call_usermodehelper_exec_async+0x10/0x10 [ 1854.869288][T10032] ? lock_acquire+0x1d1/0x380 [ 1854.873977][T10032] ? process_one_work+0xa2c/0x1b10 [ 1854.879710][T10032] ? process_one_work+0x906/0x1b10 [ 1854.884847][T10032] ? process_one_work+0x906/0x1b10 [ 1854.890314][T10032] call_usermodehelper_exec_work+0xcb/0x180 [ 1854.896228][T10032] process_one_work+0xac7/0x1b10 [ 1854.901258][T10032] ? __pfx_process_one_work+0x10/0x10 [ 1854.906660][T10032] ? lock_acquire+0x1d1/0x380 [ 1854.911419][T10032] ? __pfx_call_usermodehelper_exec_work+0x10/0x10 [ 1854.918046][T10032] worker_thread+0x5ef/0xe50 [ 1854.922994][T10032] ? __pfx_worker_thread+0x10/0x10 [ 1854.928110][T10032] ? kthread+0x13a/0x450 [ 1854.932400][T10032] ? __pfx_worker_thread+0x10/0x10 [ 1854.937518][T10032] kthread+0x373/0x450 [ 1854.941656][T10032] ? __pfx_kthread+0x10/0x10 [ 1854.946260][T10032] ret_from_fork+0x730/0xd60 [ 1854.950901][T10032] ? __pfx_ret_from_fork+0x10/0x10 [ 1854.956023][T10032] ? __switch_to+0x800/0x10f0 [ 1854.960708][T10032] ? __pfx_kthread+0x10/0x10 [ 1854.965349][T10032] ret_from_fork_asm+0x1a/0x30 [ 1854.970148][T10032] [ 1854.973203][T10032] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 1854.980479][T10032] CPU: 1 UID: 0 PID: 10032 Comm: kworker/u8:3 Tainted: G L syzkaller #0 PREEMPT(full) [ 1854.991573][T10032] Tainted: [L]=SOFTLOCKUP [ 1854.995901][T10032] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 1855.005942][T10032] Workqueue: events_unbound call_usermodehelper_exec_work [ 1855.013047][T10032] Call Trace: [ 1855.016312][T10032] [ 1855.019247][T10032] dump_stack_lvl+0x100/0x190 [ 1855.023919][T10032] vpanic+0x553/0x970 [ 1855.027902][T10032] ? __pfx_vpanic+0x10/0x10 [ 1855.032404][T10032] panic+0xd1/0xe0 [ 1855.036114][T10032] ? __pfx_panic+0x10/0x10 [ 1855.040535][T10032] check_panic_on_warn.cold+0x19/0x34 [ 1855.045897][T10032] ? check_buffer.cold+0x1a2/0x1ef [ 1855.051003][T10032] __warn.cold+0x191/0x318 [ 1855.055420][T10032] __report_bug+0x30f/0x440 [ 1855.059935][T10032] ? check_buffer.cold+0x1a2/0x1ef [ 1855.065043][T10032] ? __pfx___report_bug+0x10/0x10 [ 1855.070071][T10032] ? irq_work_queue+0xd1/0x100 [ 1855.074836][T10032] ? __wake_up_klogd+0xe5/0x140 [ 1855.079683][T10032] ? vprintk_emit+0x1c9/0x6b0 [ 1855.084477][T10032] ? __pfx_vprintk_emit+0x10/0x10 [ 1855.089524][T10032] ? check_buffer.cold+0x1a2/0x1ef [ 1855.094639][T10032] report_bug+0xb3/0x220 [ 1855.098893][T10032] ? check_buffer.cold+0x1a2/0x1ef [ 1855.104035][T10032] handle_bug+0x16a/0x2a0 [ 1855.108367][T10032] exc_invalid_op+0x17/0x50 [ 1855.112869][T10032] asm_exc_invalid_op+0x1a/0x20 [ 1855.117724][T10032] RIP: 0010:check_buffer.cold+0x1a2/0x1ef [ 1855.123443][T10032] Code: 03 0f b6 14 11 38 d0 7c 04 84 d2 75 5c 8b 2d 1c f4 21 11 31 ff 89 ee e8 8f 29 e9 00 85 ed 0f 84 a8 c4 eb 00 e8 12 2f e9 00 90 <0f> 0b 90 e9 53 c2 eb 00 49 c7 c7 a0 5e f6 8b e9 51 fe ff ff e8 c8 [ 1855.143402][T10032] RSP: 0018:ffffc90004a0f510 EFLAGS: 00010293 [ 1855.149472][T10032] RAX: 0000000000000000 RBX: 1ffff92000941ea8 RCX: 0000000000000002 [ 1855.157429][T10032] RDX: ffff888034610000 RSI: ffffffff8123277e RDI: ffff888034610000 [ 1855.165393][T10032] RBP: 0000000000000003 R08: 0000000000000005 R09: 0000000000000000 [ 1855.173367][T10032] R10: 0000000000000003 R11: 0000000000000001 R12: 000000000000011d [ 1855.181344][T10032] R13: ffff88801e2c4000 R14: ffff8880202da000 R15: ffffffff8bf65a40 [ 1855.189335][T10032] ? check_buffer.cold+0x1a1/0x1ef [ 1855.194641][T10032] ? __pfx_trace_clock_counter+0x10/0x10 [ 1855.200293][T10032] ? __pfx_check_buffer+0x10/0x10 [ 1855.205338][T10032] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 1855.210728][T10032] __rb_reserve_next.constprop.0+0x486/0x1640 [ 1855.216820][T10032] ring_buffer_lock_reserve+0x49a/0x1220 [ 1855.222485][T10032] ? __pfx_ring_buffer_lock_reserve+0x10/0x10 [ 1855.228566][T10032] ? __lock_acquire+0x5c0/0x1f40 [ 1855.233501][T10032] trace_event_buffer_lock_reserve+0x123/0x6f0 [ 1855.239660][T10032] trace_event_buffer_reserve+0x1f9/0x350 [ 1855.245378][T10032] trace_event_raw_event_sched_process_fork+0x109/0x460 [ 1855.252316][T10032] ? __pfx_trace_event_raw_event_sched_process_fork+0x10/0x10 [ 1855.259780][T10032] ? lockdep_hardirqs_on+0x7d/0x110 [ 1855.264990][T10032] ? __pfx_add_device_randomness+0x10/0x10 [ 1855.270800][T10032] kernel_clone+0x461/0x9d0 [ 1855.275310][T10032] ? __pfx_kernel_clone+0x10/0x10 [ 1855.280348][T10032] ? register_lock_class+0x3f/0x7b0 [ 1855.285563][T10032] ? __pfx_call_usermodehelper_exec_async+0x10/0x10 [ 1855.292144][T10032] user_mode_thread+0xd1/0x120 [ 1855.296910][T10032] ? __pfx_user_mode_thread+0x10/0x10 [ 1855.302372][T10032] ? __pfx_call_usermodehelper_exec_async+0x10/0x10 [ 1855.309218][T10032] ? lock_acquire+0x1d1/0x380 [ 1855.313896][T10032] ? process_one_work+0xa2c/0x1b10 [ 1855.319017][T10032] ? process_one_work+0x906/0x1b10 [ 1855.324142][T10032] ? process_one_work+0x906/0x1b10 [ 1855.329261][T10032] call_usermodehelper_exec_work+0xcb/0x180 [ 1855.335158][T10032] process_one_work+0xac7/0x1b10 [ 1855.340116][T10032] ? __pfx_process_one_work+0x10/0x10 [ 1855.345505][T10032] ? lock_acquire+0x1d1/0x380 [ 1855.350199][T10032] ? __pfx_call_usermodehelper_exec_work+0x10/0x10 [ 1855.356703][T10032] worker_thread+0x5ef/0xe50 [ 1855.361312][T10032] ? __pfx_worker_thread+0x10/0x10 [ 1855.366428][T10032] ? kthread+0x13a/0x450 [ 1855.370670][T10032] ? __pfx_worker_thread+0x10/0x10 [ 1855.375856][T10032] kthread+0x373/0x450 [ 1855.379922][T10032] ? __pfx_kthread+0x10/0x10 [ 1855.384508][T10032] ret_from_fork+0x730/0xd60 [ 1855.389092][T10032] ? __pfx_ret_from_fork+0x10/0x10 [ 1855.394192][T10032] ? __switch_to+0x800/0x10f0 [ 1855.398867][T10032] ? __pfx_kthread+0x10/0x10 [ 1855.403463][T10032] ret_from_fork_asm+0x1a/0x30 [ 1855.408233][T10032] [ 1855.411467][T10032] Kernel Offset: disabled [ 1855.415790][T10032] Rebooting in 86400 seconds..