last executing test programs: 2.00111262s ago: executing program 3 (id=105): capset(&(0x7f0000000500)={0x20080522}, &(0x7f0000000200)={0x200002, 0x200003, 0x801, 0x4, 0x7}) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./bus\x00', 0x1e0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) mount$overlay(0x0, &(0x7f0000000440)='./file0\x00', &(0x7f0000000b80), 0x0, &(0x7f0000000180)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]}) newfstatat(0xffffffffffffff9c, &(0x7f0000000400)='./file0\x00', &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0}, 0x4000) chown(&(0x7f00000003c0)='./file0\x00', r0, 0xee01) 1.917387094s ago: executing program 3 (id=107): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) fcntl$setflags(r0, 0x2, 0x0) write$binfmt_aout(r0, &(0x7f0000000300)=ANY=[], 0xff2e) ioctl$TCSETS(r0, 0x40045431, 0x0) r1 = syz_open_pts(r0, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_GET_STATS_CPU(r2, &(0x7f0000003200)={0x0, 0x0, &(0x7f00000031c0)={&(0x7f0000003180)={0x14, 0x3, 0x2, 0x201, 0x0, 0x0, {0x5}}, 0x14}}, 0x4010) fcntl$lock(0xffffffffffffffff, 0x5, 0x0) dup3(r1, r0, 0x0) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000ab9ff0)={0x1, &(0x7f0000000000)=[{0x6}]}, 0x10) ioctl$KVM_GET_STATS_FD_cpu(0xffffffffffffffff, 0xaece) r3 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r3, &(0x7f0000000100)=@name={0x1e, 0x2, 0x0, {{0x42}}}, 0x10) setsockopt$TIPC_GROUP_JOIN(r3, 0x10f, 0x87, &(0x7f0000000040)={0x42, 0x0, 0x3}, 0x10) r4 = socket$tipc(0x1e, 0x2, 0x0) sendmsg$tipc(r4, &(0x7f00000008c0)={&(0x7f0000000600)=@name, 0x10, 0x0, 0x0, 0x0, 0x0, 0x81}, 0x80) 1.071625138s ago: executing program 3 (id=111): r0 = openat$rtc(0xffffffffffffff9c, 0x0, 0x140, 0x0) ioctl$RTC_SET_TIME(r0, 0x4024700a, &(0x7f0000000040)={0x2b, 0x13, 0x0, 0x4, 0xf, 0xa9, 0x5, 0xb1, 0x1}) 1.071510688s ago: executing program 3 (id=112): r0 = socket$unix(0x1, 0x1, 0x0) r1 = socket$unix(0x1, 0x1, 0x0) bind$unix(r1, &(0x7f0000019080)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) shutdown(r1, 0x0) connect$unix(r0, &(0x7f0000fce000)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) 1.071183928s ago: executing program 3 (id=113): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) ioctl$KVM_GET_DEVICE_ATTR_vm(r0, 0x4018aee2, &(0x7f0000000100)=@attr_arm64={0x0, 0x0, 0x0, 0x0}) 1.018012628s ago: executing program 3 (id=114): ioctl$TCSETSW2(0xffffffffffffffff, 0x402c542c, 0x0) ioctl$KDGKBDIACR(0xffffffffffffffff, 0x4b4a, 0x0) socket$inet6(0xa, 0x2, 0x0) mkdir(&(0x7f0000000040)='./file0\x00', 0x80) mount$overlay(0x0, 0x0, 0x0, 0x0, 0x0) r0 = open(&(0x7f00000002c0)='./file0\x00', 0x0, 0x0) mknodat$loop(r0, &(0x7f0000000280)='./file1\x00', 0xc000, 0x0) link(0x0, &(0x7f00000001c0)='./file0\x00') unlink(0x0) r1 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x801, 0x0) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x2000, 0x0) ioctl$TIOCSETD(r2, 0x5423, &(0x7f00000001c0)=0xf) r3 = fcntl$dupfd(r2, 0x0, r2) ioctl$TCFLSH(r3, 0x400455c8, 0x4) ioctl$TIOCSTI(r2, 0x5412, &(0x7f0000000180)=0x2) ioctl$TIOCSTI(r3, 0x5412, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000003, 0x28011, 0xffffffffffffffff, 0x0) prlimit64(0x0, 0x7, 0x0, 0x0) fspick(0xffffffffffffffff, 0x0, 0x0) ioctl$TIOCSTI(r3, 0x5412, &(0x7f0000000400)=0x7) write$rfkill(r1, &(0x7f0000000080)={0x0, 0x0, 0x3, 0x1}, 0x8) 979.546101ms ago: executing program 1 (id=118): r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) r1 = eventfd(0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0x4008af12, &(0x7f0000000080)={0x1, 0x7f}) ioctl$VHOST_SET_LOG_FD(r0, 0x4004af07, &(0x7f0000000240)=r1) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f0000000040)={0x1, r1}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000140)={0x0, 0x0, 0x0, &(0x7f00000001c0)=""/53, 0x0}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, &(0x7f0000000380)=""/247, &(0x7f00000000c0)=""/87, &(0x7f0000000800)=""/90}) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000001cc0)={0x2, 0x0, [{0x0, 0x24, &(0x7f0000000000)=""/36}, {0x0, 0xffb, &(0x7f0000001d80)=""/4091}]}) ioctl$BTRFS_IOC_SCRUB_PROGRESS(r0, 0xc400941d, &(0x7f0000000380)={0x0, 0x3ff, 0x5}) 907.386518ms ago: executing program 1 (id=119): r0 = openat$rtc(0xffffffffffffff9c, 0x0, 0x40802, 0x0) ioctl$RTC_PIE_OFF(r0, 0x7006) 907.247178ms ago: executing program 1 (id=120): ioctl$USBDEVFS_REAPURB(0xffffffffffffffff, 0x4008550c, &(0x7f0000000200)) ioctl$USBDEVFS_SUBMITURB(0xffffffffffffffff, 0x8038550a, &(0x7f0000000280)=@urb_type_control={0x2, {0x0, 0x1}, 0x4, 0xc4, &(0x7f00000000c0)={0x67a0442c92ff72d1, 0xd, 0x6, 0x7, 0x2}, 0x57, 0xa867, 0xfffffffd, 0x0, 0x7fffffff, 0x63, 0x0}) 907.205498ms ago: executing program 1 (id=121): r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000200), 0x140, 0x0) ioctl$RTC_SET_TIME(r0, 0x4024700a, 0x0) 906.954018ms ago: executing program 1 (id=122): r0 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) connect$802154_dgram(r0, 0x0, 0x0) 841.659506ms ago: executing program 1 (id=123): r0 = syz_usb_connect$cdc_ncm(0x2, 0x8f, &(0x7f0000000140)=ANY=[@ANYBLOB="12010000020000402505a1a440000102030109027d0002010080000904000001020d0000052406000105240000000d240f0103000000fd0000000406241aff072908241c0101090000142413099f33760bf14377320200f9c8a04d113905241510000905810300020800040904010000020d00000904010102020d0000090582020002e1ad00090503020002"], 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000200)={0x44, 0x0, 0x0, 0x0, &(0x7f00000000c0)={0x20, 0x80, 0x1c, {0x7, 0x4001, 0xdad, 0x5, 0x6, 0x7f17, 0xffff, 0xa79, 0x4, 0x34, 0x7ff8, 0x8000}}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, &(0x7f0000000180)={0x14, 0x0, &(0x7f0000000080)={0x0, 0x3, 0x1a, {0x1a}}}, 0x0) 330.008682ms ago: executing program 0 (id=138): r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) r1 = eventfd(0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0x4008af12, &(0x7f0000000080)={0x1, 0x7f}) ioctl$VHOST_SET_LOG_FD(r0, 0x4004af07, &(0x7f0000000240)=r1) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f0000000040)={0x1, r1}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000140)={0x0, 0x0, 0x0, &(0x7f00000001c0)=""/53, 0x0}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, &(0x7f0000000380)=""/247, &(0x7f00000000c0)=""/87, &(0x7f0000000800)=""/90}) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f0000000340)=0x1) ioctl$BTRFS_IOC_SCRUB_PROGRESS(r0, 0xc400941d, &(0x7f0000000380)={0x0, 0x3ff, 0x5}) 329.889012ms ago: executing program 0 (id=139): r0 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$KVM_GET_DEVICE_ATTR_vm(r0, 0x4018aee2, &(0x7f0000000100)=@attr_arm64={0x0, 0x0, 0x0, 0x0}) 329.850851ms ago: executing program 0 (id=140): r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000200), 0x140, 0x0) ioctl$RTC_SET_TIME(r0, 0x4024700a, 0x0) 327.333461ms ago: executing program 0 (id=141): ioctl$USBDEVFS_REAPURB(0xffffffffffffffff, 0x4008550c, &(0x7f0000000200)) ioctl$USBDEVFS_SUBMITURB(0xffffffffffffffff, 0x8038550a, &(0x7f0000000280)=@urb_type_control={0x2, {0x0, 0x1}, 0x4, 0xc4, &(0x7f00000000c0)={0x67a0442c92ff72d1, 0xd, 0x6, 0x7, 0x2}, 0x57, 0xa867, 0xfffffffd, 0x0, 0x7fffffff, 0x63, 0x0}) 313.612798ms ago: executing program 0 (id=142): r0 = socket(0x2, 0x3, 0xff) sendmmsg$inet(r0, &(0x7f0000000680)=[{{&(0x7f00000000c0)={0x2, 0x4e24, @empty}, 0x10, 0x0}}], 0x1, 0x0) 298.993076ms ago: executing program 0 (id=143): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_type(r0, &(0x7f0000008600), 0x2, 0x0) write$cgroup_type(r1, &(0x7f0000000280), 0x9) r2 = openat$cgroup_procs(r0, &(0x7f00000002c0)='cgroup.threads\x00', 0x2, 0x0) write$cgroup_pid(r2, &(0x7f0000000c40), 0x12) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) read$FUSE(0xffffffffffffffff, &(0x7f0000006340)={0x2020}, 0x2058) read$FUSE(0xffffffffffffffff, 0x0, 0x0) r4 = openat$cgroup_ro(r3, &(0x7f0000000040)='cgroup.freeze\x00', 0x275a, 0x0) write$cgroup_int(r4, &(0x7f0000000200)=0x1, 0x12) mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x0) r5 = openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000180)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r5, &(0x7f0000000080), 0x12) 84.959166ms ago: executing program 2 (id=146): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_GET(r0, &(0x7f0000006680)={0x0, 0x0, &(0x7f0000006640)={&(0x7f0000000100)={0x2c, 0x1, 0x2, 0x401, 0x0, 0x0, {0x2}, [@CTA_EXPECT_MASTER={0x18, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @loopback}, {0x8, 0x2, @loopback}}}]}]}, 0x2c}}, 0x0) 17.916384ms ago: executing program 2 (id=147): r0 = socket$can_raw(0x1d, 0x3, 0x1) sendmsg$can_raw(r0, &(0x7f0000000000)={&(0x7f0000000580), 0x4, &(0x7f0000000040)={0x0, 0x59}, 0x2, 0x0, 0x0, 0x44904}, 0xc001) 17.743124ms ago: executing program 2 (id=148): r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) r1 = eventfd(0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0x4008af12, &(0x7f0000000080)={0x1, 0x7f}) ioctl$VHOST_SET_LOG_FD(r0, 0x4004af07, &(0x7f0000000240)=r1) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f0000000040)={0x1, r1}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000140)={0x0, 0x0, 0x0, &(0x7f00000001c0)=""/53, 0x0}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, &(0x7f0000000380)=""/247, &(0x7f00000000c0)=""/87, &(0x7f0000000800)=""/90}) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f0000000340)=0x1) ioctl$BTRFS_IOC_SCRUB_PROGRESS(r0, 0xc400941d, &(0x7f0000000380)={0x0, 0x3ff, 0x5}) 17.680034ms ago: executing program 2 (id=149): r0 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$KVM_GET_DEVICE_ATTR_vm(r0, 0x4018aee2, &(0x7f0000000100)=@attr_arm64={0x0, 0x0, 0x0, 0x0}) 15.069203ms ago: executing program 2 (id=150): r0 = syz_open_dev$usbfs(0x0, 0xfffffffffffffffe, 0x80802) ioctl$USBDEVFS_REAPURB(r0, 0x4008550c, &(0x7f0000000200)) ioctl$USBDEVFS_SUBMITURB(r0, 0x8038550a, &(0x7f0000000280)=@urb_type_control={0x2, {0x0, 0x1}, 0x4, 0xc4, &(0x7f00000000c0)={0x67a0442c92ff72d1, 0xd, 0x6, 0x7, 0x2}, 0x57, 0xa867, 0xfffffffd, 0x0, 0x7fffffff, 0x63, 0x0}) 0s ago: executing program 2 (id=151): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) mount$incfs(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000080)='./file0\x00', &(0x7f0000000140), 0x1018040, &(0x7f0000000280)={[{@rlog_pages={'rlog_pages', 0x3d, 0xfff0}}]}) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.189' (ED25519) to the list of known hosts. [ 21.919369][ T36] audit: type=1400 audit(1773254548.030:64): avc: denied { mounton } for pid=283 comm="syz-executor" path="/syzcgroup/unified" dev="sda1" ino=2022 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1 [ 21.922735][ T283] cgroup: Unknown subsys name 'net' [ 21.942390][ T36] audit: type=1400 audit(1773254548.030:65): avc: denied { mount } for pid=283 comm="syz-executor" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 21.970005][ T36] audit: type=1400 audit(1773254548.060:66): avc: denied { unmount } for pid=283 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 21.970491][ T283] cgroup: Unknown subsys name 'devices' [ 22.130173][ T283] cgroup: Unknown subsys name 'hugetlb' [ 22.135814][ T283] cgroup: Unknown subsys name 'rlimit' [ 22.312250][ T36] audit: type=1400 audit(1773254548.420:67): avc: denied { setattr } for pid=283 comm="syz-executor" name="raw-gadget" dev="devtmpfs" ino=190 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 22.335519][ T36] audit: type=1400 audit(1773254548.420:68): avc: denied { mounton } for pid=283 comm="syz-executor" path="/proc/sys/fs/binfmt_misc" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=dir permissive=1 [ 22.360554][ T36] audit: type=1400 audit(1773254548.420:69): avc: denied { mount } for pid=283 comm="syz-executor" name="/" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=filesystem permissive=1 [ 22.384807][ T286] SELinux: Context root:object_r:swapfile_t is not valid (left unmapped). Setting up swapspace version 1, size = 127995904 bytes [ 22.393639][ T36] audit: type=1400 audit(1773254548.500:70): avc: denied { relabelto } for pid=286 comm="mkswap" name="swap-file" dev="sda1" ino=2025 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 22.419231][ T36] audit: type=1400 audit(1773254548.500:71): avc: denied { write } for pid=286 comm="mkswap" path="/root/swap-file" dev="sda1" ino=2025 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 22.450439][ T36] audit: type=1400 audit(1773254548.560:72): avc: denied { read } for pid=283 comm="syz-executor" name="swap-file" dev="sda1" ino=2025 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 22.476051][ T36] audit: type=1400 audit(1773254548.560:73): avc: denied { open } for pid=283 comm="syz-executor" path="/root/swap-file" dev="sda1" ino=2025 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 22.476747][ T283] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 23.343502][ T292] bridge0: port 1(bridge_slave_0) entered blocking state [ 23.350851][ T292] bridge0: port 1(bridge_slave_0) entered disabled state [ 23.358181][ T292] bridge_slave_0: entered allmulticast mode [ 23.364464][ T292] bridge_slave_0: entered promiscuous mode [ 23.372521][ T292] bridge0: port 2(bridge_slave_1) entered blocking state [ 23.379628][ T292] bridge0: port 2(bridge_slave_1) entered disabled state [ 23.386768][ T292] bridge_slave_1: entered allmulticast mode [ 23.393278][ T292] bridge_slave_1: entered promiscuous mode [ 23.440237][ T291] bridge0: port 1(bridge_slave_0) entered blocking state [ 23.447305][ T291] bridge0: port 1(bridge_slave_0) entered disabled state [ 23.454522][ T291] bridge_slave_0: entered allmulticast mode [ 23.460985][ T291] bridge_slave_0: entered promiscuous mode [ 23.479998][ T291] bridge0: port 2(bridge_slave_1) entered blocking state [ 23.487065][ T291] bridge0: port 2(bridge_slave_1) entered disabled state [ 23.494195][ T291] bridge_slave_1: entered allmulticast mode [ 23.500498][ T291] bridge_slave_1: entered promiscuous mode [ 23.515316][ T293] bridge0: port 1(bridge_slave_0) entered blocking state [ 23.522654][ T293] bridge0: port 1(bridge_slave_0) entered disabled state [ 23.529832][ T293] bridge_slave_0: entered allmulticast mode [ 23.536103][ T293] bridge_slave_0: entered promiscuous mode [ 23.546839][ T293] bridge0: port 2(bridge_slave_1) entered blocking state [ 23.553990][ T293] bridge0: port 2(bridge_slave_1) entered disabled state [ 23.561127][ T293] bridge_slave_1: entered allmulticast mode [ 23.567356][ T293] bridge_slave_1: entered promiscuous mode [ 23.610834][ T294] bridge0: port 1(bridge_slave_0) entered blocking state [ 23.617969][ T294] bridge0: port 1(bridge_slave_0) entered disabled state [ 23.625068][ T294] bridge_slave_0: entered allmulticast mode [ 23.631468][ T294] bridge_slave_0: entered promiscuous mode [ 23.650297][ T294] bridge0: port 2(bridge_slave_1) entered blocking state [ 23.657467][ T294] bridge0: port 2(bridge_slave_1) entered disabled state [ 23.665140][ T294] bridge_slave_1: entered allmulticast mode [ 23.671706][ T294] bridge_slave_1: entered promiscuous mode [ 23.766953][ T291] bridge0: port 2(bridge_slave_1) entered blocking state [ 23.774050][ T291] bridge0: port 2(bridge_slave_1) entered forwarding state [ 23.781404][ T291] bridge0: port 1(bridge_slave_0) entered blocking state [ 23.788509][ T291] bridge0: port 1(bridge_slave_0) entered forwarding state [ 23.814700][ T292] bridge0: port 2(bridge_slave_1) entered blocking state [ 23.821797][ T292] bridge0: port 2(bridge_slave_1) entered forwarding state [ 23.829361][ T292] bridge0: port 1(bridge_slave_0) entered blocking state [ 23.836403][ T292] bridge0: port 1(bridge_slave_0) entered forwarding state [ 23.856574][ T293] bridge0: port 2(bridge_slave_1) entered blocking state [ 23.863674][ T293] bridge0: port 2(bridge_slave_1) entered forwarding state [ 23.871449][ T293] bridge0: port 1(bridge_slave_0) entered blocking state [ 23.878507][ T293] bridge0: port 1(bridge_slave_0) entered forwarding state [ 23.909861][ T46] bridge0: port 1(bridge_slave_0) entered disabled state [ 23.917439][ T46] bridge0: port 2(bridge_slave_1) entered disabled state [ 23.924775][ T46] bridge0: port 1(bridge_slave_0) entered disabled state [ 23.932074][ T46] bridge0: port 2(bridge_slave_1) entered disabled state [ 23.985386][ T46] bridge0: port 1(bridge_slave_0) entered blocking state [ 23.992481][ T46] bridge0: port 1(bridge_slave_0) entered forwarding state [ 24.000181][ T46] bridge0: port 1(bridge_slave_0) entered blocking state [ 24.007239][ T46] bridge0: port 1(bridge_slave_0) entered forwarding state [ 24.015379][ T46] bridge0: port 2(bridge_slave_1) entered blocking state [ 24.022474][ T46] bridge0: port 2(bridge_slave_1) entered forwarding state [ 24.034145][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 24.041215][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 24.086216][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 24.093400][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 24.105165][ T293] veth0_vlan: entered promiscuous mode [ 24.114559][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 24.121650][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 24.130584][ T292] veth0_vlan: entered promiscuous mode [ 24.153212][ T293] veth1_macvtap: entered promiscuous mode [ 24.170189][ T292] veth1_macvtap: entered promiscuous mode [ 24.192215][ T291] veth0_vlan: entered promiscuous mode [ 24.206813][ T291] veth1_macvtap: entered promiscuous mode [ 24.230344][ T294] veth0_vlan: entered promiscuous mode [ 24.239579][ T293] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 24.282627][ T294] veth1_macvtap: entered promiscuous mode [ 24.387288][ T348] usb usb4: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 24.453834][ T352] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 24.567353][ T352] kvm: kvm [351]: vcpu2, guest rIP: 0x9131 Unhandled WRMSR(0xc1) = 0xfffffc18 [ 24.586971][ T352] kvm: kvm [351]: vcpu2, guest rIP: 0x9131 Unhandled WRMSR(0xc2) = 0xfffffc18 [ 24.600683][ T352] kvm: kvm [351]: vcpu2, guest rIP: 0x9131 Unhandled WRMSR(0x11e) = 0xfffffc18 [ 24.623421][ T352] kvm: kvm [351]: vcpu2, guest rIP: 0x9131 Unhandled WRMSR(0x186) = 0xfffffc18 [ 24.632913][ T352] kvm: kvm [351]: vcpu2, guest rIP: 0x9131 Unhandled WRMSR(0x187) = 0xfffffc18 [ 24.767593][ T369] vcan0: entered allmulticast mode [ 24.844900][ T369] ======================================================= [ 24.844900][ T369] WARNING: The mand mount option has been deprecated and [ 24.844900][ T369] and is ignored by this kernel. Remove the mand [ 24.844900][ T369] option from the mount to silence this warning. [ 24.844900][ T369] ======================================================= [ 25.213018][ T53] Bluetooth: hci0: Frame reassembly failed (-84) [ 25.347870][ T66] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 25.527862][ T66] usb 2-1: Using ep0 maxpacket: 8 [ 25.534284][ T66] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 25.545394][ T66] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 25.555202][ T66] usb 2-1: New USB device found, idVendor=046d, idProduct=c20e, bcdDevice= 0.00 [ 25.564500][ T66] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 25.573920][ T66] usb 2-1: config 0 descriptor?? [ 25.983276][ T66] logitech 0003:046D:C20E.0001: rdesc size test failed for formula gp [ 25.992492][ T66] logitech 0003:046D:C20E.0001: unknown main item tag 0x0 [ 25.999719][ T66] logitech 0003:046D:C20E.0001: unknown main item tag 0x0 [ 26.006880][ T66] logitech 0003:046D:C20E.0001: unknown main item tag 0x0 [ 26.014223][ T66] logitech 0003:046D:C20E.0001: unknown main item tag 0x0 [ 26.021401][ T66] logitech 0003:046D:C20E.0001: unknown main item tag 0x0 [ 26.029554][ T66] logitech 0003:046D:C20E.0001: hidraw0: USB HID v0.00 Device [HID 046d:c20e] on usb-dummy_hcd.1-1/input0 [ 26.062319][ T285] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 26.198648][ T31] usb 2-1: USB disconnect, device number 2 [ 26.217879][ T285] usb 4-1: Using ep0 maxpacket: 32 [ 26.263143][ T285] usb 4-1: unable to get BOS descriptor or descriptor too short [ 26.271644][ T285] usb 4-1: unable to read config index 0 descriptor/start: -71 [ 26.279665][ T285] usb 4-1: can't read configurations, error -71 [ 26.361294][ T402] input: syz0 as /devices/virtual/input/input4 [ 26.617960][ T66] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 26.758371][ T414] Unsupported ieee802154 address type: 0 [ 26.769282][ T66] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 26.782415][ T66] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 26.792622][ T66] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 26.805826][ T66] usb 1-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 26.816852][ T66] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 26.827050][ T66] usb 1-1: config 0 descriptor?? [ 27.237435][ T66] plantronics 0003:047F:FFFF.0002: No inputs registered, leaving [ 27.238033][ T384] Bluetooth: hci0: command 0x1003 tx timeout [ 27.247037][ T55] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 27.270279][ T66] plantronics 0003:047F:FFFF.0002: hiddev96,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.0-1/input0 [ 27.310828][ T36] kauditd_printk_skb: 66 callbacks suppressed [ 27.310847][ T36] audit: type=1400 audit(1773254553.420:140): avc: denied { read } for pid=426 comm="syz.2.35" dev="nsfs" ino=4026532324 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 27.327965][ T285] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 27.352901][ T36] audit: type=1400 audit(1773254553.420:141): avc: denied { open } for pid=426 comm="syz.2.35" path="net:[4026532324]" dev="nsfs" ino=4026532324 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 27.384009][ T36] audit: type=1400 audit(1773254553.420:142): avc: denied { connect } for pid=426 comm="syz.2.35" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 27.488225][ T285] usb 4-1: Using ep0 maxpacket: 32 [ 27.494819][ T285] usb 4-1: config 0 has an invalid interface number: 67 but max is 0 [ 27.517108][ T285] usb 4-1: config 0 has no interface number 0 [ 27.530481][ T285] usb 4-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 27.539831][ T45] usb 1-1: USB disconnect, device number 2 [ 27.545742][ T285] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 27.554735][ T285] usb 4-1: Product: syz [ 27.560429][ T285] usb 4-1: Manufacturer: syz [ 27.567469][ T285] usb 4-1: SerialNumber: syz [ 27.575673][ T285] usb 4-1: config 0 descriptor?? [ 27.583785][ T285] smsc95xx v2.0.0 [ 27.627858][ T398] usb 3-1: new low-speed USB device number 2 using dummy_hcd [ 27.799516][ T398] usb 3-1: unable to get BOS descriptor or descriptor too short [ 27.808543][ T398] usb 3-1: config 1 interface 0 altsetting 5 endpoint 0x81 has invalid maxpacket 16, setting to 8 [ 27.819398][ T398] usb 3-1: config 1 interface 0 altsetting 5 endpoint 0x82 is Bulk; changing to Interrupt [ 27.829721][ T398] usb 3-1: config 1 interface 0 altsetting 5 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 27.843124][ T398] usb 3-1: config 1 interface 0 has no altsetting 0 [ 27.852446][ T398] usb 3-1: string descriptor 0 read error: -22 [ 27.858929][ T398] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 27.868258][ T398] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 27.877796][ T429] raw-gadget.2 gadget.2: fail, usb_ep_enable returned -22 [ 27.885747][ T429] raw-gadget.2 gadget.2: fail, usb_ep_enable returned -22 [ 27.893270][ T429] raw-gadget.2 gadget.2: fail, usb_ep_enable returned -22 [ 27.902074][ T398] cdc_ether 3-1:1.0: probe with driver cdc_ether failed with error -22 [ 27.985053][ T285] smsc95xx 4-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -32 [ 27.995892][ T285] smsc95xx 4-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 28.023749][ T439] input: syz0 as /devices/virtual/input/input5 [ 28.030946][ T36] audit: type=1400 audit(1773254554.140:143): avc: denied { read } for pid=96 comm="acpid" name="event3" dev="devtmpfs" ino=451 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 28.057342][ T36] audit: type=1400 audit(1773254554.140:144): avc: denied { open } for pid=96 comm="acpid" path="/dev/input/event3" dev="devtmpfs" ino=451 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 28.108026][ T398] usb 3-1: USB disconnect, device number 2 [ 28.121604][ T36] audit: type=1400 audit(1773254554.140:145): avc: denied { ioctl } for pid=96 comm="acpid" path="/dev/input/event3" dev="devtmpfs" ino=451 ioctlcmd=0x4520 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 28.150902][ T36] audit: type=1400 audit(1773254554.210:146): avc: denied { execute } for pid=442 comm="syz.1.42" path="/16/file1" dev="tmpfs" ino=100 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 28.178187][ T36] audit: type=1400 audit(1773254554.290:147): avc: denied { create } for pid=447 comm="syz.0.44" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_fib_lookup_socket permissive=1 [ 28.198801][ T36] audit: type=1400 audit(1773254554.290:148): avc: denied { write } for pid=447 comm="syz.0.44" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_fib_lookup_socket permissive=1 [ 28.229242][ T36] audit: type=1400 audit(1773254554.330:149): avc: denied { create } for pid=449 comm="syz.0.45" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 28.353922][ T455] support for the xor transformation has been removed. [ 28.361301][ T9] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 28.517844][ T9] usb 2-1: Using ep0 maxpacket: 32 [ 28.528838][ T9] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 28.547831][ T9] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 28.557615][ T9] usb 2-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 28.578015][ T9] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 28.599211][ T9] usb 2-1: config 0 descriptor?? [ 28.605379][ T9] hub 2-1:0.0: USB hub found [ 28.813744][ T9] hub 2-1:0.0: 1 port detected [ 28.838413][ T285] smsc95xx 4-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -71 [ 28.858528][ T285] smsc95xx 4-1:0.67: probe with driver smsc95xx failed with error -71 [ 28.875222][ T285] usb 4-1: USB disconnect, device number 3 [ 28.987880][ T464] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 29.137849][ T464] usb 3-1: Using ep0 maxpacket: 32 [ 29.144308][ T464] usb 3-1: unable to get BOS descriptor or descriptor too short [ 29.152859][ T464] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 29.165137][ T464] usb 3-1: New USB device found, idVendor=0e41, idProduct=4249, bcdDevice= 0.40 [ 29.174276][ T464] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 29.182649][ T464] usb 3-1: Product: syz [ 29.186892][ T464] usb 3-1: Manufacturer: syz [ 29.191572][ T464] usb 3-1: SerialNumber: syz [ 29.406081][ T464] usb 3-1: 1:1 : invalid UAC_FORMAT_TYPE desc [ 29.426360][ T9] hub 2-1:0.0: activate --> -90 [ 29.433567][ T464] usb 3-1: USB disconnect, device number 3 [ 29.836860][ T398] usb 2-1: USB disconnect, device number 3 [ 29.837066][ T9] usb 2-1-port1: config error [ 29.907850][ T285] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 30.067852][ T285] usb 4-1: Using ep0 maxpacket: 8 [ 30.074921][ T285] usb 4-1: config 0 interface 0 altsetting 16 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 30.086105][ T285] usb 4-1: config 0 interface 0 altsetting 16 has 1 endpoint descriptor, different from the interface descriptor's value: 10 [ 30.099224][ T285] usb 4-1: config 0 interface 0 has no altsetting 0 [ 30.105909][ T285] usb 4-1: New USB device found, idVendor=054c, idProduct=0268, bcdDevice= 0.00 [ 30.115107][ T285] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 30.124311][ T285] usb 4-1: config 0 descriptor?? [ 30.267851][ T9] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 30.420470][ T9] usb 3-1: New USB device found, idVendor=05d1, idProduct=2021, bcdDevice=33.00 [ 30.429679][ T9] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 30.437701][ T9] usb 3-1: Product: syz [ 30.442338][ T9] usb 3-1: Manufacturer: syz [ 30.446969][ T9] usb 3-1: SerialNumber: syz [ 30.452877][ T9] usb 3-1: config 0 descriptor?? [ 30.459345][ T9] ftdi_sio 3-1:0.0: FTDI USB Serial Device converter detected [ 30.467244][ T9] usb 3-1: Detected FT232HP [ 30.536625][ T285] sony 0003:054C:0268.0003: unknown main item tag 0x6 [ 30.553693][ T285] sony 0003:054C:0268.0003: invalid report_size 26545 [ 30.561431][ T285] sony 0003:054C:0268.0003: item 0 2 1 7 parsing failed [ 30.569921][ T285] sony 0003:054C:0268.0003: parse failed [ 30.575866][ T285] sony 0003:054C:0268.0003: probe with driver sony failed with error -22 [ 30.660356][ T9] ftdi_sio ttyUSB0: Unable to read latency timer: -121 [ 30.754648][ T403] usb 4-1: USB disconnect, device number 4 [ 31.018202][ T9] ftdi_sio ttyUSB0: Unable to write latency timer: -71 [ 31.026225][ T9] usb 3-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 31.035385][ T9] usb 3-1: USB disconnect, device number 4 [ 31.042153][ T9] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 31.052096][ T9] ftdi_sio 3-1:0.0: device disconnected [ 31.147904][ T464] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 31.299013][ T464] usb 1-1: config 220 has an invalid interface number: 76 but max is 2 [ 31.307377][ T464] usb 1-1: config 220 contains an unexpected descriptor of type 0x2, skipping [ 31.316595][ T464] usb 1-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config [ 31.327009][ T464] usb 1-1: config 220 has no interface number 2 [ 31.333341][ T464] usb 1-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12 [ 31.346516][ T464] usb 1-1: config 220 interface 0 has no altsetting 0 [ 31.353347][ T464] usb 1-1: config 220 interface 76 has no altsetting 0 [ 31.360247][ T464] usb 1-1: config 220 interface 1 has no altsetting 0 [ 31.368496][ T464] usb 1-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 31.377575][ T464] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 31.385776][ T464] usb 1-1: Product: syz [ 31.395245][ T464] usb 1-1: Manufacturer: syz [ 31.400756][ T464] usb 1-1: SerialNumber: syz [ 32.043585][ T464] usb 1-1: Found UVC 7.01 device syz (8086:0b07) [ 32.050066][ T464] usb 1-1: No valid video chain found. [ 32.055621][ T464] usb 1-1: selecting invalid altsetting 0 [ 32.064695][ T464] usb 1-1: USB disconnect, device number 3 [ 32.354710][ T36] kauditd_printk_skb: 17 callbacks suppressed [ 32.354729][ T36] audit: type=1400 audit(1773254558.460:167): avc: denied { unlink } for pid=586 comm="syz.3.105" name="#1" dev="tmpfs" ino=144 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 32.406515][ T36] audit: type=1400 audit(1773254558.460:168): avc: denied { mount } for pid=586 comm="syz.3.105" name="/" dev="overlay" ino=140 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 32.428570][ T36] audit: type=1400 audit(1773254558.500:169): avc: denied { unmount } for pid=292 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 32.493676][ T36] audit: type=1400 audit(1773254558.600:170): avc: denied { name_bind } for pid=601 comm="syz.1.110" src=20001 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=tcp_socket permissive=1 [ 32.515436][ T36] audit: type=1400 audit(1773254558.600:171): avc: denied { node_bind } for pid=601 comm="syz.1.110" saddr=224.0.0.1 src=20001 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=tcp_socket permissive=1 [ 32.537569][ T464] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 32.687872][ T464] usb 1-1: Using ep0 maxpacket: 32 [ 32.694542][ T464] usb 1-1: unable to get BOS descriptor or descriptor too short [ 32.704521][ T464] usb 1-1: New USB device found, idVendor=0e41, idProduct=4249, bcdDevice= 0.40 [ 32.713633][ T464] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 32.721697][ T464] usb 1-1: Product: syz [ 32.725885][ T464] usb 1-1: Manufacturer: syz [ 32.730609][ T464] usb 1-1: SerialNumber: syz [ 32.939419][ T464] usb 1-1: found format II with max.bitrate = 1625, frame size=3 [ 32.947509][ T464] usb 1-1: 1:1 : invalid UAC_FORMAT_TYPE desc [ 32.953927][ T464] usb 1-1: 2:1 : UAC_AS_GENERAL descriptor not found [ 32.964175][ T464] usb 1-1: USB disconnect, device number 4 [ 32.978746][ T446] udevd[446]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 33.294111][ T13] Bluetooth: hci0: Frame reassembly failed (-84) [ 33.337142][ T36] audit: type=1400 audit(1773254559.440:172): avc: denied { ioctl } for pid=614 comm="syz.2.116" path="socket:[5288]" dev="sockfs" ino=5288 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 33.370764][ T36] audit: type=1400 audit(1773254559.440:173): avc: denied { write } for pid=614 comm="syz.2.116" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 33.481087][ T36] audit: type=1400 audit(1773254559.590:174): avc: denied { ioctl } for pid=632 comm="syz.0.124" path="socket:[5324]" dev="sockfs" ino=5324 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 33.525730][ T36] audit: type=1400 audit(1773254559.630:175): avc: denied { bind } for pid=634 comm="syz.0.125" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 33.697850][ T285] usb 2-1: new full-speed USB device number 4 using dummy_hcd [ 33.730890][ T36] audit: type=1400 audit(1773254559.840:176): avc: denied { create } for pid=652 comm="syz.0.133" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 33.859085][ T285] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 512, setting to 64 [ 33.870577][ T285] usb 2-1: config 1 interface 1 altsetting 1 endpoint 0x82 has invalid maxpacket 512, setting to 64 [ 33.881466][ T285] usb 2-1: config 1 interface 1 altsetting 1 endpoint 0x3 has invalid maxpacket 512, setting to 64 [ 33.894082][ T285] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 33.903305][ T285] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 33.911408][ T285] usb 2-1: Product: syz [ 33.915684][ T285] usb 2-1: Manufacturer: syz [ 33.920370][ T285] usb 2-1: SerialNumber: syz [ 33.926197][ T631] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 34.135256][ T631] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 34.142556][ T631] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 34.353712][ T694] ------------[ cut here ]------------ [ 34.359303][ T694] WARNING: CPU: 0 PID: 694 at mm/page_alloc.c:5268 __alloc_pages_noprof+0x109/0x7e0 [ 34.368870][ T694] Modules linked in: [ 34.372831][ T694] CPU: 0 UID: 0 PID: 694 Comm: syz.2.151 Not tainted syzkaller #0 6689bf08a63a9fd1d154dffed701218a84e741b5 [ 34.384851][ T694] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 34.395071][ T694] RIP: 0010:__alloc_pages_noprof+0x109/0x7e0 [ 34.401201][ T694] Code: 00 0f 1f 44 00 00 83 fb 0b 72 28 b8 00 20 00 00 23 44 24 40 75 1d 80 3d fa a2 0b 06 00 0f 85 c2 00 00 00 c6 05 ed a2 0b 06 01 <0f> 0b 31 c0 e9 b4 00 00 00 83 fb 0a 0f 87 a9 00 00 00 44 8b 64 24 [ 34.421243][ T694] RSP: 0018:ffffc9000e057860 EFLAGS: 00010246 [ 34.427373][ T694] RAX: 0000000000000000 RBX: 000000000000000f RCX: 0000000000000000 [ 34.435499][ T694] RDX: 0000000000000000 RSI: 0000000000000000 RDI: ffffc9000e057918 [ 34.443552][ T694] RBP: ffffc9000e057988 R08: ffffc9000e057917 R09: 0000000000000000 [ 34.451689][ T694] R10: ffffc9000e057900 R11: fffff52001c0af23 R12: ffffc9000e0578a0 [ 34.459744][ T694] R13: dffffc0000000000 R14: 1ffff92001c0af10 R15: 0000000000000000 [ 34.467855][ T694] FS: 00007fece0e3f6c0(0000) GS:ffff8881f6e00000(0000) knlGS:0000000000000000 [ 34.476826][ T694] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 34.483607][ T694] CR2: 0000200000001000 CR3: 000000011e2e0000 CR4: 00000000003526b0 [ 34.491659][ T694] Call Trace: [ 34.494972][ T694] [ 34.497989][ T694] ? entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 34.504203][ T694] ? __cfi___alloc_pages_noprof+0x10/0x10 [ 34.510058][ T694] ? incfs_realloc_mount_info+0xa7/0x4d0 [ 34.515740][ T694] ___kmalloc_large_node+0x81/0x210 [ 34.521012][ T694] ? incfs_realloc_mount_info+0xa7/0x4d0 [ 34.527144][ T694] __kmalloc_large_node_noprof+0x1e/0xd0 [ 34.532852][ T694] ? incfs_realloc_mount_info+0xa7/0x4d0 [ 34.538679][ T694] __kmalloc_noprof+0x326/0x500 [ 34.543578][ T694] ? __cfi_lockref_get+0x10/0x10 [ 34.548600][ T694] incfs_realloc_mount_info+0xa7/0x4d0 [ 34.554138][ T694] ? incfs_add_sysfs_node+0x118/0x230 [ 34.559596][ T694] incfs_alloc_mount_info+0x478/0x5f0 [ 34.565055][ T694] incfs_mount_fs+0x3ca/0x970 [ 34.569896][ T694] ? __cfi_incfs_mount_fs+0x10/0x10 [ 34.575138][ T694] ? vfs_parse_fs_string+0x10f/0x180 [ 34.580497][ T694] ? selinux_capable+0x38/0x50 [ 34.585310][ T694] legacy_get_tree+0x106/0x1b0 [ 34.590141][ T694] ? __cfi_incfs_mount_fs+0x10/0x10 [ 34.595392][ T694] vfs_get_tree+0xa1/0x290 [ 34.599911][ T694] do_new_mount+0x251/0xb30 [ 34.604464][ T694] ? security_capable+0x44/0x130 [ 34.609802][ T694] path_mount+0x682/0x1010 [ 34.614260][ T694] __se_sys_mount+0x2bf/0x480 [ 34.619013][ T694] ? __x64_sys_mount+0xf0/0xf0 [ 34.623835][ T694] ? __kasan_check_write+0x18/0x20 [ 34.629120][ T694] ? fpregs_restore_userregs+0x11c/0x260 [ 34.634879][ T694] __x64_sys_mount+0xc3/0xf0 [ 34.639553][ T694] x64_sys_call+0x2021/0x2ee0 [ 34.644283][ T694] do_syscall_64+0x57/0xf0 [ 34.648766][ T694] ? clear_bhb_loop+0x50/0xa0 [ 34.653488][ T694] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 34.659466][ T694] RIP: 0033:0x7fecdff9c799 [ 34.664221][ T694] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 34.684011][ T694] RSP: 002b:00007fece0e3f028 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 34.692504][ T694] RAX: ffffffffffffffda RBX: 00007fece0215fa0 RCX: 00007fecdff9c799 [ 34.700637][ T694] RDX: 0000200000000140 RSI: 0000200000000080 RDI: 00002000000000c0 [ 34.708686][ T694] RBP: 00007fece0032c99 R08: 0000200000000280 R09: 0000000000000000 [ 34.716689][ T694] R10: 0000000001018040 R11: 0000000000000246 R12: 0000000000000000 [ 34.724738][ T694] R13: 00007fece0216038 R14: 00007fece0215fa0 R15: 00007fff36b4d3a8 [ 34.732775][ T694] [ 34.735820][ T694] ---[ end trace 0000000000000000 ]--- [ 34.741477][ T694] incfs: Error allocating mount info. -12 [ 34.747362][ T694] incfs: mount failed -12 [ 34.759036][ T631] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 34.766364][ T631] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 34.974510][ T285] cdc_ncm 2-1:1.0: MAC-Address: 42:42:42:42:42:42 [ 35.181964][ T285] cdc_ncm 2-1:1.0 usb0: register 'cdc_ncm' at usb-dummy_hcd.1-1, CDC NCM (NO ZLP), 42:42:42:42:42:42 [ 35.194886][ T285] usb 2-1: USB disconnect, device number 4 [ 35.201227][ T285] cdc_ncm 2-1:1.0 usb0: unregister 'cdc_ncm' usb-dummy_hcd.1-1, CDC NCM (NO ZLP) [ 35.317854][ T55] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 35.317873][ T384] Bluetooth: hci0: command 0x1003 tx timeout