last executing test programs: 11.043832787s ago: executing program 2 (id=121): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000200)='./sys\x00', &(0x7f0000000300)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000e00)='./sys/block/md0/md/dev-ram0/slot\x00', 0x1, 0x0) write(r0, &(0x7f0000000f00)='0', 0x1) 9.854859552s ago: executing program 2 (id=125): mkdirat(0xffffffffffffff9c, &(0x7f0000000300)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000340)='./sys\x00', &(0x7f0000000380)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f00000003c0)='./sys/class/net/bridge0/bridge/multicast_snooping\x00', 0x1, 0x0) write(r0, &(0x7f0000000440)='1', 0x1) 9.657006475s ago: executing program 1 (id=126): socket(0x10, 0x803, 0x0) r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_HOPOPTS(r0, 0x29, 0x36, &(0x7f0000000300)=ANY=[@ANYBLOB="3c34000000000000040100c910fc02000000000000000000000000000107"], 0x1b0) setsockopt$inet6_IPV6_HOPOPTS(r0, 0x29, 0x36, 0x0, 0x0) 8.875820727s ago: executing program 2 (id=130): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000040)=ANY=[@ANYBLOB="120100009dea7840b418fbff7bdc01020301090212000100000000090401"], 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f00000008c0)={0x1c, &(0x7f0000010000)=ANY=[@ANYBLOB="00000100000001"], 0x0, 0x0}) r1 = syz_open_dev$I2C(&(0x7f00000000c0), 0x1, 0x402) ioctl$I2C_RDWR(r1, 0x707, &(0x7f0000001a40)={&(0x7f0000000180)}) 8.874613001s ago: executing program 1 (id=131): openat$hwrng(0xffffffffffffff9c, 0x0, 0x0, 0x0) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000cc0)={'syz1\x00', {0x8, 0x2, 0x8, 0x9b99}, 0x25, [0x9, 0x7, 0x2, 0x6, 0x8, 0x155f, 0x10000006, 0x6, 0x2dcd, 0x1, 0xb4, 0x8, 0xa2b9, 0x6, 0x7, 0xe1, 0x6, 0xfc000004, 0x403, 0xbbf, 0x3, 0xfffffffd, 0xfffffff7, 0xd, 0x0, 0x0, 0x6, 0x4, 0x100002, 0xc3, 0x5d6, 0x8002, 0x8a, 0x79, 0x2, 0x10080, 0x2, 0x91, 0x129, 0x4, 0x16, 0x5, 0x5, 0x401, 0x1, 0x405, 0xa7, 0x81, 0x709, 0xf9a2, 0xa9, 0xff, 0x0, 0x2, 0x2, 0x2, 0x7, 0x5, 0x7ff, 0x4, 0x4007f, 0xffffffff, 0x8, 0x4], [0x401, 0x3, 0x6, 0x9, 0x4, 0x8000c66, 0xa8a9, 0x2000006f, 0x8e, 0xd50, 0x7, 0xad, 0x2, 0x809, 0x40, 0xa7, 0x1000, 0x0, 0x200b398, 0x8001, 0x1, 0x4, 0x1c, 0x7, 0x1, 0xfffffff7, 0x9, 0x8, 0xffffff7f, 0x6, 0x6, 0x4c2336d3, 0x40000004, 0x0, 0xfffbfff8, 0x4, 0x46, 0xf1, 0x7, 0xab00060, 0x2, 0x9, 0xffffffff, 0x5, 0x3fe, 0x1ff, 0x1, 0x7fff, 0x67b2, 0x1cc, 0x9, 0x80000004, 0x6, 0x438, 0x2, 0x9, 0x2, 0x7fffffff, 0x4, 0xfdfffff9, 0x18e, 0x1000, 0x2, 0x5], [0x2, 0xfffffffe, 0x9, 0x10, 0x2, 0x2e6bf783, 0x80000001, 0x5, 0x5, 0x491, 0x9, 0x200026, 0x7f, 0x400, 0x102, 0x1, 0x41, 0x6, 0xee4b, 0x2000004, 0x1, 0xc, 0x5, 0x9, 0x5, 0x3, 0x9, 0x3, 0xc7, 0xfff, 0x10000a, 0x2, 0x400, 0x8, 0x5, 0xd3, 0x8, 0x97f7, 0x3, 0x200000d, 0x3, 0x10010, 0x7, 0xdd81, 0x4, 0x7f, 0x9d27, 0x9, 0x1, 0x100, 0x2, 0x4000006, 0x7ffe, 0x28, 0x5, 0xd500, 0x1, 0x77, 0x5, 0x6, 0x10000, 0xfffffffd, 0x5, 0xfffffffe], [0xa772, 0x6, 0x5, 0x8, 0xbfc, 0x9, 0x5, 0x7f, 0x55, 0x7ff, 0xff, 0x1005, 0x10000001, 0x4, 0x21, 0x9, 0x81, 0x7, 0x9d87, 0x8, 0x8, 0x4, 0x140f1, 0x5396, 0x3, 0x4, 0x80008001, 0x7777, 0x1, 0x2, 0x100, 0x200d8ce, 0x7fffffff, 0x100009, 0xc, 0x32d, 0x3, 0x1ff, 0x2000803, 0xffffffff, 0x10000, 0x0, 0x8004, 0x7fff, 0x3, 0x6, 0xf, 0xe, 0x8, 0x274, 0x6, 0xfffffff9, 0x7, 0x9, 0x9, 0x4, 0x463f, 0xf, 0xdab, 0x5, 0x8, 0x13fff, 0x8, 0x9]}, 0x45c) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz1\x00', {0x3, 0x3, 0x6, 0xfffa}, 0x3a, [0x20008000, 0x1, 0xf, 0x8, 0x7c, 0xfffffffe, 0xb5d, 0x7f, 0x20000006, 0x4d, 0x6, 0x5f, 0x9, 0x5, 0xffff2d37, 0xffffff01, 0x3, 0x5, 0x0, 0x3, 0x400, 0x0, 0x7, 0x40, 0x1, 0x24, 0xd, 0x3fffffe, 0x0, 0xffffffff, 0xe665, 0x204, 0x7, 0x3, 0x8, 0x4c74, 0x80000000, 0x242, 0x400003, 0xe, 0x4, 0x80008071, 0xffffb8f3, 0x17, 0x1, 0x7, 0x5, 0x3e, 0x8f, 0x6, 0x6, 0x0, 0x7, 0x81, 0x4, 0x3ff, 0x8, 0x0, 0x7, 0x9, 0x8, 0x4, 0x0, 0xfffffffc], [0xc0, 0x9, 0x8000012f, 0x8004, 0x5, 0x8, 0x129432e7, 0xc8, 0xf9, 0xe, 0x2bf, 0x6c7, 0x9, 0xfffffffc, 0x6, 0x2, 0x0, 0x45, 0x2f, 0x1782000, 0x313, 0x78, 0xea4, 0x5fa, 0x4, 0x7, 0x7fff, 0x6, 0x400, 0x401, 0x6, 0x1, 0xff, 0x3d, 0x1000005, 0x5bea93c3, 0xd, 0x4e0, 0x2, 0x4, 0x81b, 0x4, 0x9, 0x8, 0x9, 0x6, 0x47, 0x8000, 0x4, 0xfe000000, 0xffff, 0x2, 0x4, 0x10009, 0x3, 0x9, 0x9, 0x9, 0x20003, 0xffffffff, 0x100bc45, 0x48c93690, 0x80, 0x3], [0x7, 0xc08, 0x4, 0x5, 0xfffffffd, 0x40, 0x31d, 0x9, 0x5, 0x7fff, 0x9, 0x10001, 0xb, 0x4, 0x5, 0x5, 0x3, 0x1ef, 0x0, 0x8, 0x86, 0x3, 0x1, 0x3e7, 0xb, 0x5, 0x0, 0x2, 0x3, 0x20000008, 0x4, 0x6d01, 0x6, 0x38, 0x800003, 0x200, 0x80, 0x3, 0x4, 0x2950bfb1, 0x1000, 0xa2, 0x7, 0x2000a9, 0x5, 0x7, 0xac8, 0xbf, 0x1, 0x3, 0x7ff, 0x12b, 0x6, 0x1, 0xa, 0x20, 0x2, 0x1c, 0x8867, 0x3, 0x2006, 0x80a2ed, 0x40000005, 0x25], [0x9, 0xbb33, 0x7, 0x8, 0x5, 0x938, 0x6, 0x6, 0x0, 0xb9, 0xcea, 0x6, 0x2, 0x57, 0x7, 0x3, 0x0, 0x10000, 0x4, 0x37f3, 0xffff, 0xa622, 0x1, 0x80000005, 0x1, 0x2, 0x14c, 0x60a7, 0x6, 0x7f, 0xffffffff, 0x80000000, 0x5, 0x4, 0x4c8, 0x1, 0xfffff000, 0x10000, 0x3, 0x7e, 0x100, 0xfc, 0x40000047, 0xb2, 0x8, 0x6, 0x226, 0x5, 0x5, 0x8, 0x30b1d693, 0x8a1f, 0xf40, 0x7, 0x1, 0x6c1b, 0x0, 0x8, 0x5, 0xb1e, 0x6, 0x200, 0xffff3441, 0xfff]}, 0x45c) ppoll(&(0x7f00000000c0)=[{}, {0xffffffffffffffff, 0x400}], 0x20000000000000dc, 0x0, 0x0, 0xfffffffffffffcdd) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_MEMORY_ATTRIBUTES(r2, 0x4020aed2, &(0x7f00000001c0)={0x60000, 0x18000, 0x9fef19c9430e26b8}) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000000)={[0x35, 0xfff, 0xfffffffffffffffe, 0x40000000000180, 0x2, 0x7, 0xf2, 0xd, 0x7fffffffffffe, 0x7, 0x5, 0xb, 0x7, 0xfffffffffffffff8, 0x9, 0x8], 0x25000, 0x304}) syz_open_dev$vcsa(&(0x7f0000000380), 0x7b95b611, 0x802) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=@getlink={0x28, 0x12, 0x1, 0x0, 0x0, {}, [@IFLA_EXT_MASK={0x8, 0x1d, 0x3ff}]}, 0x28}, 0x1, 0x0, 0x0, 0x2000}, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) r4 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r5 = dup(r4) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r6, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text32={0x20, &(0x7f00000000c0)="c20000361e0f01c3660fd2eff30f10f1b961020000b80e000000ba000000000f30b98d0200000f320b99f3530000660f6af7c4e2f91d20", 0x37}], 0x1, 0x11, 0x0, 0x0) syz_kvm_setup_cpu$x86(r4, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text32={0x20, 0x0}], 0x1, 0x50, 0x0, 0x0) ioctl$KVM_RUN(r6, 0xae80, 0x0) 8.269712744s ago: executing program 1 (id=135): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r0, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB], 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000380)=@newsa={0x15c, 0x10, 0x1, 0x0, 0x0, {{@in=@broadcast, @in=@empty, 0x0, 0x0, 0x0, 0x0, 0x2, 0x1}, {@in=@local, 0x1234, 0x6c}, @in=@remote, {0xffffffffffffefff, 0xffffffffffffffff, 0xffffffffffffffff, 0x1}, {}, {}, 0x0, 0x3504, 0x2, 0x1}, [@algo_comp={0x48, 0x3, {{'deflate\x00'}}}, @lifetime_val={0x24, 0x9, {0xfffffffffffffffc, 0xd9, 0x4, 0x80000001}}]}, 0x15c}}, 0x0) syz_emit_ethernet(0x26, &(0x7f0000000200)={@local, @remote, @void, {@ipv4={0x800, @generic={{0x5, 0x4, 0x0, 0x0, 0x18, 0x0, 0x0, 0x0, 0x6c, 0x0, @remote, @local}, "00001234"}}}}, 0x0) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r1, 0x6, 0x25, 0x0, &(0x7f0000000240)) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socketpair$unix(0x1, 0x1, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) ioctl$AUTOFS_DEV_IOCTL_READY(0xffffffffffffffff, 0xc0189376, &(0x7f0000000040)={{0x1, 0x1, 0x18, r0}, './file0\x00'}) ioctl$TIOCL_SCROLLCONSOLE(r5, 0x541c, &(0x7f0000000080)={0xd, 0xfffff7ec}) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000440)=@new_dev={0x4, 0x3c9, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x40}}}, &(0x7f0000000300)=0x0) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) r8 = dup(r7) syz_ublk_setup_queues(r8, r6, 0x0, &(0x7f0000000a80)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0xe700, 0x800, 0x1000002, 0x91}, 0xffffffffffffffff}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x5c87, 0x20, 0x3, 0x3aa}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x1f70, 0x2, 0x2, 0x334}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x4, 0x89a0, 0x1, 0xffffffff}}], 0x1, 0x0, 0x0) io_uring_register$IORING_REGISTER_ENABLE_RINGS(r9, 0xc, 0x0, 0x0) 7.579997432s ago: executing program 4 (id=143): r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$inet_int(r0, 0x0, 0xb, &(0x7f0000000040)=0x3, 0x4) setsockopt$IP_VS_SO_SET_STARTDAEMON(r0, 0x0, 0x1a, &(0x7f0000000240)={0x1, 'veth0_to_team\x00'}, 0x18) syz_emit_ethernet(0x82, &(0x7f0000000480)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x3e}, @val={@void, {0x8100, 0x0, 0x0, 0x1}}, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x70, 0x0, 0x0, 0xfb, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x3, 0x1, 0x0, 0x3, 0x24, 0x0, {0x15, 0x4, 0x0, 0x5, 0x4000, 0x1, 0xffff, 0x0, 0x1, 0x7, @empty, @rand_addr=0x64010100, {[@cipso={0x86, 0x3d, 0xffffffffffffffff, [{0x5, 0xe, "00020000da6ee06cb8dd9452"}, {0x5, 0x9, "02270e000042eb"}, {0x3, 0x12, '\x00'/16}, {0x7, 0x7, "cfa11cab1a"}, {0x6, 0x7, '\x00\x00\x00\x00\x00'}]}]}}}}}}}, 0x0) 7.432427855s ago: executing program 4 (id=144): r0 = socket(0x1d, 0x2, 0x6) r1 = socket$nl_audit(0x10, 0x3, 0x9) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f00000000c0)=0x7) r2 = getpgrp(0x0) sched_setaffinity(r2, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000240)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xd6d1c000) r4 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r4, 0x1, 0x0) r5 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r5, &(0x7f0000019680)=""/102392, 0x18ff8) sched_setaffinity(r4, 0x47, &(0x7f0000000200)=0x7) mkdir(0x0, 0x0) seccomp$SECCOMP_SET_MODE_FILTER(0x1, 0x1, &(0x7f0000000340)={0x0, 0x0}) r6 = syz_open_dev$loop(&(0x7f00000002c0), 0x0, 0x22000) ioctl$BLKTRACESETUP(r6, 0xc0481273, &(0x7f0000000040)={'\x00', 0x8, 0x4, 0x9, 0x8000, 0x9, 0xffffffffffffffff}) r7 = syz_open_dev$loop(&(0x7f0000000240), 0x75f, 0xa8182) r8 = memfd_create(&(0x7f0000000e00)='C\x13\xfc2\x95WD\xaa\xba^\x90\xfd\x8d\xc2\xb1[\x81\xda\xda\xd6\x8c\xc99\xec\x0e*||\xe4\xb3\xc4\xb6\v\xaa\x15\x86,\xac\x8d\x89cu\x10\xdc\x93\x9b\xb4\x93\xafE*:\xe4\xdd\xa5\xa75\xb8\x1e;7\xb7.V\xdcrw[\r\x98\x93j\x9c\xf6\xf8\x99\xefF_\xcd\xdf!b\xc5\xec\ntb\xff\b\xaaF?!\x9f\a\x1a\x03\f\xe94\x1deU\x06zS\xc90\xb9voI\xa5/\xb4\xa7@\xa1\\B\xc2@\r_b\x9a\xeb\b\x81\x00V\xd6/N\xc5\xc6f\xb1\x95Z\xe5w^\xd8\xe7J\x80\xf7\xae\xafuv\x84\x9eG\xd1\xe7\x9b\xf0_9\xc2\x9b\xfd\xc3\xf3\xe4\x95P\xf1m\xcf\xc2\xe1\xe6\xa6\x8c\x11\xfb\xb8S\x8b\x92\\\asW-Ee\x02\x00\x00\x00\xd0;Q\xc1~\x89\xec\xc8\x9b\x88\a\xf2\x93\x82(\x8b\x00\xd8\xb4T\x80\x95\x93\x9c5\xcf\t\x04\x00\x00\x00\x00\x00\x00v\xef\xee+\xab\x9c\x00^R\xb2n?i=\xbe\x16\x8a\xbf\xe3\xcdB\xed\xe14\xe8\xd0\xb7\xff\xfeQ\x1c\x85n8\x1b\xc1\b\x00\x00\x00\x00\x00\x00\x00\x17\x94\xdfW\x92z\xbe\xb2R)\xf1K\xd7\xaf\x99\xf6d\xe8\xec\xb7\xbd+T3\xa6\xa9\xfaY-1qs\x82\xefn*\x96\xc9\x1e\xf4\xd1\x02Dt\xc0\x19\xf7\x89\x96.D [F\xeeYW\x95\x13\xc7;\x94\x13^\x13\xaf\xf0C\x9c\xabf\x1daCS2\x02\xb0\xef\xc7\x8c\x9e\xed\a\n0x0}) bind$can_j1939(r0, &(0x7f0000000000)={0x1d, r9, 0x3}, 0x18) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x1f7) openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) 6.474203697s ago: executing program 4 (id=145): prlimit64(0x0, 0xe, &(0x7f00000001c0)={0x8, 0xf32}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeea, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x10) sendmsg$inet(0xffffffffffffffff, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x4004000) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)) setrlimit(0x4, &(0x7f00000000c0)={0x2}) recvmsg$unix(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000240)=[@cred={{0x1c}}, @rights={{0x10}}, @rights={{0x10}}, @rights={{0x10}}], 0x50}, 0x80) mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) r4 = syz_genetlink_get_family_id$smc(&(0x7f0000000040), 0xffffffffffffffff) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$SMC_PNETID_ADD(r5, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000340)={0x34, r4, 0x1, 0x70bd2d, 0x25dfdbfb, {}, [@SMC_PNETID_NAME={0x9, 0x1, 'syz2\x00'}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'team0\x00'}]}, 0x34}, 0x1, 0x0, 0x0, 0x1}, 0x4) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r6, 0x8933, &(0x7f0000000100)={'team0\x00', 0x0}) sendmsg$nl_route(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="200000001100010100"/20, @ANYRES32=r7], 0x20}, 0x1, 0x0, 0x0, 0x80d5}, 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000440)=@new_dev={0x4, 0x3c9, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x40}}}, &(0x7f0000000300)=0x0) syz_open_dev$cec(&(0x7f0000000100), 0x0, 0x0) r9 = socket$inet6_tcp(0xa, 0x1, 0x0) r10 = dup(r9) syz_ublk_setup_queues(r10, r8, &(0x7f0000000880)={0x0, 0xfffffffe, 0x0, 0x4, 0x1f4}, &(0x7f0000000a80)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0xe704, 0x800, 0x0, 0x6}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x5c87, 0x8000, 0x3, 0xbaa}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x8684, 0x2, 0x40040001, 0x27f, 0x0, r3}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xec4b, 0x200, 0x1, 0xffffffff}}], 0x1, 0x0, 0x0) 5.11770305s ago: executing program 2 (id=150): r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_RTHDRDSTOPTS(r0, 0x29, 0x37, &(0x7f0000000240)={0x6c}, 0x8) connect$inet6(r0, &(0x7f00000002c0)={0xa, 0x4e24}, 0x1c) sendmmsg(r0, &(0x7f00000092c0), 0x4ff, 0x97) 5.065320662s ago: executing program 3 (id=152): sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket(0x10, 0x3, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0x5, 0x5, 0x2, 0x7, 0x0, 0x1, 0x10000}, 0x50) close(0x3) sendmsg$nl_generic(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=ANY=[@ANYBLOB="180000001600010a"], 0x78}, 0x1, 0x0, 0x0, 0x8000}, 0x0) recvmmsg(r3, &(0x7f000001ef40)=[{{0x0, 0x0, 0x0}, 0x8}], 0x1, 0x20, 0x0) r4 = socket$kcm(0xa, 0x5, 0x0) sendmsg$kcm(r4, &(0x7f0000002dc0)={0x0, 0x0, &(0x7f0000000340)=[{&(0x7f00000003c0)='`', 0x1}], 0x1}, 0x41) setsockopt$sock_attach_bpf(r4, 0x84, 0x1e, &(0x7f0000000000), 0x4) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000002b40), 0x0, 0x0, 0x0, 0xc3ff}, 0x44014) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@file={0x0, './file1\x00'}, 0x6e) recvmmsg(r1, &(0x7f00000000c0), 0x0, 0x10000, 0x0) 4.83159909s ago: executing program 2 (id=153): r0 = syz_usb_connect$cdc_ncm(0x5, 0x6e, &(0x7f0000000000)=ANY=[@ANYBLOB="12010003020000402505a1a44000010203010902"], &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0}) syz_usb_disconnect(r0) syz_usb_connect(0x3, 0x57, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000200000040601632090001000000010902450001010080320904000003ff0000000705010200020007058102000200070582020002000904000103ff000000070501020002000705810200020007058201"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) 3.726830764s ago: executing program 1 (id=156): mkdir(&(0x7f0000000000)='dir0\x00', 0x80) mount(0x0, &(0x7f0000000000)='dir0\x00', &(0x7f0000000100)='tracefs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='dir0/per_cpu/cpu0/trace\x00', 0x48342, 0x1a1) write$P9_RREADDIR(r0, 0x0, 0x0) 3.674655889s ago: executing program 1 (id=157): openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x183b41, 0x12b) r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = syz_usb_connect$uac1(0x0, 0xb1, &(0x7f00000005c0)=ANY=[@ANYBLOB="12010000000000106b1d0101890f0000030109029f0003010000000904000000010100000a24010000000201020d24060000030800000031ce21c798329740594c137d0000000c24020201010608000010000c24020000000300000000000924060006010000000924030000000005000b2406050001", @ANYRES64=r0], 0x0) syz_usb_control_io(r1, 0x0, &(0x7f00000009c0)={0x84, &(0x7f0000000380)={0x20, 0x1, 0x1, "ac"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 2.837098963s ago: executing program 3 (id=158): r0 = socket$inet6(0xa, 0x3, 0xff) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000100)=@filter={'filter\x00', 0xe, 0x4, 0x368, 0xffffffff, 0x0, 0xd0, 0x1a0, 0xffffffff, 0xffffffff, 0x0, 0xd0, 0x298, 0xffffffff, 0x4, 0x0, {[{{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}, {{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}, {{@uncond, 0x0, 0xd0, 0xf8, 0x0, {}, [@common=@unspec=@addrtype1={{0x28}, {0x0, 0x4}}]}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3c8) r1 = socket$inet6(0xa, 0x2, 0x0) sendto$inet6(r1, 0x0, 0x0, 0x0, &(0x7f0000000080)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) 2.762652715s ago: executing program 3 (id=159): r0 = socket(0x1d, 0x2, 0x6) r1 = socket$nl_audit(0x10, 0x3, 0x9) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f00000000c0)=0x7) r2 = getpgrp(0x0) sched_setaffinity(r2, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000240)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xd6d1c000) r4 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r4, 0x1, 0x0) r5 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r5, &(0x7f0000019680)=""/102392, 0x18ff8) sched_setaffinity(r4, 0x47, &(0x7f0000000200)=0x7) mkdir(0x0, 0x0) seccomp$SECCOMP_SET_MODE_FILTER(0x1, 0x1, &(0x7f0000000340)={0x0, 0x0}) r6 = syz_open_dev$loop(&(0x7f00000002c0), 0x0, 0x22000) ioctl$BLKTRACESETUP(r6, 0xc0481273, &(0x7f0000000040)={'\x00', 0x8, 0x4, 0x9, 0x8000, 0x9, 0xffffffffffffffff}) r7 = syz_open_dev$loop(&(0x7f0000000240), 0x75f, 0xa8182) r8 = memfd_create(&(0x7f0000000e00)='C\x13\xfc2\x95WD\xaa\xba^\x90\xfd\x8d\xc2\xb1[\x81\xda\xda\xd6\x8c\xc99\xec\x0e*||\xe4\xb3\xc4\xb6\v\xaa\x15\x86,\xac\x8d\x89cu\x10\xdc\x93\x9b\xb4\x93\xafE*:\xe4\xdd\xa5\xa75\xb8\x1e;7\xb7.V\xdcrw[\r\x98\x93j\x9c\xf6\xf8\x99\xefF_\xcd\xdf!b\xc5\xec\ntb\xff\b\xaaF?!\x9f\a\x1a\x03\f\xe94\x1deU\x06zS\xc90\xb9voI\xa5/\xb4\xa7@\xa1\\B\xc2@\r_b\x9a\xeb\b\x81\x00V\xd6/N\xc5\xc6f\xb1\x95Z\xe5w^\xd8\xe7J\x80\xf7\xae\xafuv\x84\x9eG\xd1\xe7\x9b\xf0_9\xc2\x9b\xfd\xc3\xf3\xe4\x95P\xf1m\xcf\xc2\xe1\xe6\xa6\x8c\x11\xfb\xb8S\x8b\x92\\\asW-Ee\x02\x00\x00\x00\xd0;Q\xc1~\x89\xec\xc8\x9b\x88\a\xf2\x93\x82(\x8b\x00\xd8\xb4T\x80\x95\x93\x9c5\xcf\t\x04\x00\x00\x00\x00\x00\x00v\xef\xee+\xab\x9c\x00^R\xb2n?i=\xbe\x16\x8a\xbf\xe3\xcdB\xed\xe14\xe8\xd0\xb7\xff\xfeQ\x1c\x85n8\x1b\xc1\b\x00\x00\x00\x00\x00\x00\x00\x17\x94\xdfW\x92z\xbe\xb2R)\xf1K\xd7\xaf\x99\xf6d\xe8\xec\xb7\xbd+T3\xa6\xa9\xfaY-1qs\x82\xefn*\x96\xc9\x1e\xf4\xd1\x02Dt\xc0\x19\xf7\x89\x96.D [F\xeeYW\x95\x13\xc7;\x94\x13^\x13\xaf\xf0C\x9c\xabf\x1daCS2\x02\xb0\xef\xc7\x8c\x9e\xed\a\n0x0}) bind$can_j1939(r0, &(0x7f0000000000)={0x1d, r9, 0x3}, 0x18) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f0000000100)='proc\x00', 0x0, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) 2.038598925s ago: executing program 4 (id=160): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000000c0)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x20, 0x5ac, 0x21c, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x1, "", [{{0x9, 0x4, 0x0, 0x8, 0x2, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x18}}, {{{0x9, 0x5, 0x81, 0x3, 0x400}}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_connect$hid(0x6, 0x36, &(0x7f0000000340)=ANY=[], 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000040)={0x24, 0x0, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="0022180000000501150095ff0904a10109e981008c0508950129309102c0"], 0x0}, 0x0) 1.984373526s ago: executing program 3 (id=161): r0 = syz_usb_connect$uac3(0x3, 0x97, &(0x7f0000000040)={{0x12, 0x1, 0x300, 0x0, 0x0, 0x0, 0x10, 0x103d, 0x100, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x85, 0x3, 0x1, 0xd8, 0x10, 0xc, {0x8, 0xb, 0x1, 0x2, 0x1, 0x1, 0x30, 0x2}, {{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x30, 0x0, {{0xa, 0x24, 0x1, 0x10, 0xa, 0x7}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x30, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x20, 0xe, 0x0, 0x3, {0xa, 0x25, 0x25, 0x7fffffff, 0xc, 0x180}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x30, 0x0, {[@as_header={0x17, 0x24, 0x1, 0x6, 0x8000, 0x7, 0x2, 0x6, 0x4a, 0x9, 0x10}]}, {{0x9, 0x5, 0x82, 0x9, 0x20, 0x7f, 0x4, 0x0, {0xa, 0x25, 0x25, 0x400, 0x8f, 0x2}}}}}}}}]}}, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$uac3(r0, &(0x7f0000000000)={0x14, 0x0, &(0x7f0000000180)={0x0, 0x3, 0x2, @string={0x2}}}, 0x0) syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io$uac3(r0, &(0x7f0000000140)={0x14, &(0x7f0000000240)=ANY=[], 0x0}, 0x0) 1.762345506s ago: executing program 2 (id=163): r0 = syz_usb_connect(0x2, 0x2d, &(0x7f0000000540)=ANY=[@ANYBLOB="120100007516b7108c0d0e008f8e0018030109021b000100000000090408000103"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$rtl8150(r0, 0x0, 0x0) 1.557804211s ago: executing program 0 (id=165): r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000300)={0x0, 0x18, 0xfa00, {0x1, &(0x7f00000002c0)={0xffffffffffffffff}, 0x13f, 0x3}}, 0x20) write$RDMA_USER_CM_CMD_LISTEN(r0, &(0x7f0000000100)={0x7, 0x8, 0xfa00, {r1, 0xb66b}}, 0x10) writev(r0, &(0x7f0000000040)=[{&(0x7f0000000100), 0x86}], 0x2) 1.506899107s ago: executing program 0 (id=166): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./debug\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./debug\x00', &(0x7f00000000c0)='debugfs\x00', 0x10000, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./debug/x86/pat_memtype_list\x00', 0x0, 0x0) preadv(r0, &(0x7f00000001c0)=[{&(0x7f0000000240)=""/80, 0x50}], 0x1, 0x400087, 0x3) 1.403582535s ago: executing program 0 (id=167): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000040)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./sys/bus/pci/devices/0000:00:03.0/config\x00', 0x2, 0x0) pwrite64(r0, &(0x7f00000000c0)="02", 0x1, 0x4) 1.363992727s ago: executing program 0 (id=168): prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket(0x10, 0x3, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0x5, 0x5, 0x2, 0x7, 0x0, 0x1, 0x10000}, 0x50) close(0x3) sendmsg$nl_generic(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=ANY=[@ANYBLOB="180000001600010a"], 0x78}, 0x1, 0x0, 0x0, 0x8000}, 0x0) recvmmsg(r3, &(0x7f000001ef40)=[{{0x0, 0x0, 0x0}, 0x8}], 0x1, 0x20, 0x0) r4 = socket$kcm(0xa, 0x5, 0x0) sendmsg$kcm(r4, &(0x7f0000002dc0)={0x0, 0x0, &(0x7f0000000340)=[{&(0x7f00000003c0)='`', 0x1}], 0x1}, 0x41) setsockopt$sock_attach_bpf(r4, 0x84, 0x1e, &(0x7f0000000000), 0x4) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000002b40), 0x0, 0x0, 0x0, 0xc3ff}, 0x44014) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@file={0x0, './file1\x00'}, 0x6e) recvmmsg(r1, &(0x7f00000000c0), 0x0, 0x10000, 0x0) 1.16869164s ago: executing program 1 (id=169): r0 = syz_usb_connect(0x2, 0xc7, &(0x7f0000000140)=ANY=[@ANYBLOB="12011002000000408680d20a0000010200010902b5000201008030080b00020e03000009040000010e0100000d2401000134000000000001011224020101020000000000000000030000000924030201010003000c24050301000002000000000705810310000609040100000e0200000e240101470082000200000001001b240401015955593200001000800000aa00389b71"], &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$rtl8150(r0, 0x0, &(0x7f0000000480)={0x2c, &(0x7f00000002c0)={0x20, 0x5, 0x1a, "e9067c10156dbfd7ed3e1027f6e2ba853194bc5476e104da161d"}, 0x0, 0x0, 0x0, 0x0}) 733.344006ms ago: executing program 3 (id=170): setns(0xc9, 0x0) syz_usb_connect(0x3, 0x32, &(0x7f0000000000)=ANY=[@ANYBLOB="12010002ff0000408c1059010100010203010902200001010080fa0904000002ff0000000705810200020007050202"], &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x0, 0x0}]}) r0 = socket$inet(0x2, 0x1, 0x0) ioctl(r0, 0x8914, &(0x7f0000000200)='can0') 393.905102ms ago: executing program 0 (id=171): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./mnt\x00', 0x1ff) mount(&(0x7f0000000080)=@filename='mtd0\x00', &(0x7f00000000c0)='./mnt\x00', &(0x7f0000000100)='jffs2\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000580)='./mnt/fillfile\x00', 0x42, 0x9f) write(r0, &(0x7f00000005c0)="000102030405060708090a0b0c0d0e0f1011121314", 0x15) 335.743861ms ago: executing program 0 (id=172): r0 = syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000000000010d804dd00000000000001090224000100000000090400400103000000092101000001220500090581030002"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f00000002c0)={0x24, 0x0, 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="00221200000083"], 0x0}, 0x0) syz_usb_ep_write(r0, 0x81, 0x4, &(0x7f00000000c0)='\x00\x00yg') 318.830676ms ago: executing program 4 (id=173): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a3200000000140000001100", @ANYRES32], 0x7c}, 0x1, 0x0, 0x0, 0x8000}, 0x800) sendmsg$NFT_BATCH(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000400)=ANY=[@ANYBLOB="140000001000010000000000000000002000000a70000000060a0b0400000000000000000200000044000480200001800e000100636f6e6e6c696d69740000000c000280080001400000000010000180090001006c61737400000000100001800a00010072656469720000000900010073797a30000000000900020073797a320000000014000000110001"], 0x98}, 0x1, 0x0, 0x0, 0x4000}, 0x0) close(r0) 203.490923ms ago: executing program 4 (id=174): r0 = syz_usb_connect(0x5, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="120100024286bd10b00d815522f90102030109021200019ddb10010904"], 0x0) syz_usb_control_io$cdc_ncm(r0, &(0x7f00000006c0)={0x14, 0x0, &(0x7f0000000680)={0x0, 0x3, 0x1a, {0x1a}}}, 0x0) r1 = syz_open_dev$I2C(&(0x7f0000000040), 0x1, 0x2603) ioctl$I2C_SMBUS(r1, 0x720, &(0x7f0000000100)={0x0, 0x6, 0x3, &(0x7f0000000080)={0x2, "1a9c66bf2f615e4200000000e200"}}) 0s ago: executing program 3 (id=175): r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000040)=0x80000001, 0x4) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'bridge0\x00', 0x0}) sendto$packet(r0, &(0x7f0000000140)="280320000500140000007ef506be00000000000000000000000000143baa111f1f858ce632f47042195eb3cf545a41b6d78839980700e67bee78895e16f37fe8", 0xffa9, 0x400c010, &(0x7f0000000080)={0x11, 0x3, r1, 0x1, 0xe5, 0x6, @random="76caa646ae4c"}, 0x14) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.1.55' (ED25519) to the list of known hosts. [ 57.222399][ T30] audit: type=1400 audit(1790777765.271:129): avc: denied { mounton } for pid=5584 comm="syz-executor" path="/syzcgroup/unified" dev="sda1" ino=2023 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1 [ 57.223807][ T30] audit: type=1400 audit(1790777765.271:130): avc: denied { mount } for pid=5584 comm="syz-executor" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 57.225386][ T5584] cgroup: Unknown subsys name 'net' [ 57.226476][ T30] audit: type=1400 audit(1790777765.271:131): avc: denied { unmount } for pid=5584 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 57.372462][ T5584] cgroup: Unknown subsys name 'cpuset' [ 57.374507][ T5584] cgroup: Unknown subsys name 'rlimit' [ 57.479863][ T30] audit: type=1400 audit(1790777765.521:132): avc: denied { setattr } for pid=5584 comm="syz-executor" name="raw-gadget" dev="devtmpfs" ino=814 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 57.480279][ T30] audit: type=1400 audit(1790777765.531:133): avc: denied { create } for pid=5584 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 57.480478][ T30] audit: type=1400 audit(1790777765.531:134): avc: denied { write } for pid=5584 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 57.480701][ T30] audit: type=1400 audit(1790777765.531:135): avc: denied { read } for pid=5584 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 57.492551][ T30] audit: type=1400 audit(1790777765.531:136): avc: denied { mounton } for pid=5584 comm="syz-executor" path="/proc/sys/fs/binfmt_misc" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=dir permissive=1 [ 57.492593][ T30] audit: type=1400 audit(1790777765.531:137): avc: denied { mount } for pid=5584 comm="syz-executor" name="/" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=filesystem permissive=1 Setting up swapspace version 1, size = 127995904 bytes [ 57.629669][ T5586] SELinux: Context root:object_r:swapfile_t is not valid (left unmapped). [ 57.632337][ T30] audit: type=1400 audit(1790777765.681:138): avc: denied { relabelto } for pid=5586 comm="mkswap" name="swap-file" dev="sda1" ino=2026 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 58.592022][ T5584] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 60.710215][ T5602] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 60.711099][ T5600] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 60.712160][ T5610] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 60.713536][ T5600] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 60.714204][ T5610] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 60.714718][ T5600] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 60.715471][ T5610] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 60.716263][ T5610] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 60.716652][ T5610] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 60.717629][ T5610] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 60.717871][ T5610] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 60.718390][ T5610] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 60.718849][ T5610] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 60.719079][ T5610] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 60.719585][ T5610] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 60.734938][ T5610] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 60.735678][ T5610] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 60.736307][ T5610] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 60.744061][ T5610] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 60.744331][ T5610] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 60.745376][ T5610] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 60.745878][ T5610] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 60.746013][ T5610] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 60.750588][ T5613] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 60.763543][ T5613] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 61.938745][ T5595] bridge0: port 1(bridge_slave_0) entered blocking state [ 61.939359][ T5595] bridge0: port 1(bridge_slave_0) entered disabled state [ 61.940294][ T5595] bridge_slave_0: entered allmulticast mode [ 61.941524][ T5595] bridge_slave_0: entered promiscuous mode [ 61.981788][ T5595] bridge0: port 2(bridge_slave_1) entered blocking state [ 61.981882][ T5595] bridge0: port 2(bridge_slave_1) entered disabled state [ 61.981947][ T5595] bridge_slave_1: entered allmulticast mode [ 61.982675][ T5595] bridge_slave_1: entered promiscuous mode [ 62.081585][ T5595] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 62.103506][ T5595] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 62.172146][ T5595] team0: Port device team_slave_0 added [ 62.176467][ T5596] bridge0: port 1(bridge_slave_0) entered blocking state [ 62.176530][ T5596] bridge0: port 1(bridge_slave_0) entered disabled state [ 62.176607][ T5596] bridge_slave_0: entered allmulticast mode [ 62.177447][ T5596] bridge_slave_0: entered promiscuous mode [ 62.179862][ T5596] bridge0: port 2(bridge_slave_1) entered blocking state [ 62.179941][ T5596] bridge0: port 2(bridge_slave_1) entered disabled state [ 62.180293][ T5596] bridge_slave_1: entered allmulticast mode [ 62.181466][ T5596] bridge_slave_1: entered promiscuous mode [ 62.238187][ T5595] team0: Port device team_slave_1 added [ 62.239039][ T5597] bridge0: port 1(bridge_slave_0) entered blocking state [ 62.239107][ T5597] bridge0: port 1(bridge_slave_0) entered disabled state [ 62.239358][ T5597] bridge_slave_0: entered allmulticast mode [ 62.240918][ T5597] bridge_slave_0: entered promiscuous mode [ 62.242762][ T5597] bridge0: port 2(bridge_slave_1) entered blocking state [ 62.242827][ T5597] bridge0: port 2(bridge_slave_1) entered disabled state [ 62.243071][ T5597] bridge_slave_1: entered allmulticast mode [ 62.244245][ T5597] bridge_slave_1: entered promiscuous mode [ 62.327492][ T5596] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 62.345489][ T5597] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 62.351719][ T5596] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 62.361479][ T5595] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 62.361493][ T5595] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 62.361511][ T5595] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 62.364813][ T5595] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 62.364827][ T5595] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 62.364844][ T5595] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 62.367394][ T5597] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 62.407333][ T5606] bridge0: port 1(bridge_slave_0) entered blocking state [ 62.407403][ T5606] bridge0: port 1(bridge_slave_0) entered disabled state [ 62.407647][ T5606] bridge_slave_0: entered allmulticast mode [ 62.408875][ T5606] bridge_slave_0: entered promiscuous mode [ 62.471170][ T5606] bridge0: port 2(bridge_slave_1) entered blocking state [ 62.471240][ T5606] bridge0: port 2(bridge_slave_1) entered disabled state [ 62.471316][ T5606] bridge_slave_1: entered allmulticast mode [ 62.472436][ T5606] bridge_slave_1: entered promiscuous mode [ 62.486143][ T5597] team0: Port device team_slave_0 added [ 62.487803][ T5596] team0: Port device team_slave_0 added [ 62.521183][ T5597] team0: Port device team_slave_1 added [ 62.522718][ T5596] team0: Port device team_slave_1 added [ 62.522840][ T5603] bridge0: port 1(bridge_slave_0) entered blocking state [ 62.523045][ T5603] bridge0: port 1(bridge_slave_0) entered disabled state [ 62.523126][ T5603] bridge_slave_0: entered allmulticast mode [ 62.524326][ T5603] bridge_slave_0: entered promiscuous mode [ 62.542072][ T5595] hsr_slave_0: entered promiscuous mode [ 62.542788][ T5595] hsr_slave_1: entered promiscuous mode [ 62.568715][ T5603] bridge0: port 2(bridge_slave_1) entered blocking state [ 62.568784][ T5603] bridge0: port 2(bridge_slave_1) entered disabled state [ 62.568862][ T5603] bridge_slave_1: entered allmulticast mode [ 62.572422][ T5603] bridge_slave_1: entered promiscuous mode [ 62.579122][ T5606] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 62.582376][ T5606] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 62.633732][ T5597] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 62.633746][ T5597] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 62.633763][ T5597] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 62.648211][ T5596] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 62.648225][ T5596] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 62.648243][ T5596] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 62.668724][ T5597] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 62.668739][ T5597] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 62.668757][ T5597] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 62.669461][ T5596] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 62.669470][ T5596] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 62.669487][ T5596] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 62.681258][ T5603] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 62.683451][ T5603] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 62.684786][ T5606] team0: Port device team_slave_0 added [ 62.735000][ T5606] team0: Port device team_slave_1 added [ 62.787203][ T5597] hsr_slave_0: entered promiscuous mode [ 62.787904][ T5597] hsr_slave_1: entered promiscuous mode [ 62.788360][ T5597] debugfs: 'hsr0' already exists in 'hsr' [ 62.788433][ T5597] Cannot create hsr debugfs directory [ 62.796644][ T5603] team0: Port device team_slave_0 added [ 62.824409][ T5602] Bluetooth: hci0: command tx timeout [ 62.824547][ T5602] Bluetooth: hci2: command tx timeout [ 62.824846][ T5608] Bluetooth: hci4: command tx timeout [ 62.830972][ T52] Bluetooth: hci1: command tx timeout [ 62.831108][ T5608] Bluetooth: hci3: command tx timeout [ 62.922332][ T5603] team0: Port device team_slave_1 added [ 62.928627][ T5606] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 62.928643][ T5606] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 62.928655][ T5606] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 62.934176][ T5596] hsr_slave_0: entered promiscuous mode [ 62.935055][ T5596] hsr_slave_1: entered promiscuous mode [ 62.935528][ T5596] debugfs: 'hsr0' already exists in 'hsr' [ 62.935543][ T5596] Cannot create hsr debugfs directory [ 62.964322][ T5606] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 62.964336][ T5606] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 62.964353][ T5606] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 63.047700][ T5603] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 63.047714][ T5603] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 63.047730][ T5603] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 63.083655][ T5603] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 63.083669][ T5603] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 63.083692][ T5603] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 63.198181][ T5606] hsr_slave_0: entered promiscuous mode [ 63.198576][ T5606] hsr_slave_1: entered promiscuous mode [ 63.198894][ T5606] debugfs: 'hsr0' already exists in 'hsr' [ 63.198905][ T5606] Cannot create hsr debugfs directory [ 63.232273][ T5603] hsr_slave_0: entered promiscuous mode [ 63.232907][ T5603] hsr_slave_1: entered promiscuous mode [ 63.233412][ T5603] debugfs: 'hsr0' already exists in 'hsr' [ 63.233424][ T5603] Cannot create hsr debugfs directory [ 63.392667][ T5595] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 63.396901][ T5595] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 63.397817][ T5595] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 63.422892][ T5595] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 63.439086][ T5595] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 63.448959][ T5595] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 63.449470][ T5595] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 63.466007][ T5595] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 63.573511][ T5597] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 63.577392][ T5597] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 63.578590][ T5597] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 63.591775][ T5597] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 63.593801][ T5597] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 63.605200][ T5597] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 63.607475][ T5597] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 63.614395][ T5597] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 63.707536][ T5596] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 63.717101][ T5596] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 63.730650][ T5596] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 63.733168][ T5596] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 63.733677][ T5596] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 63.735644][ T5596] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 63.736135][ T5596] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 63.739319][ T5596] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 63.754676][ T5595] 8021q: adding VLAN 0 to HW filter on device bond0 [ 63.815677][ T5597] 8021q: adding VLAN 0 to HW filter on device bond0 [ 63.833943][ T5595] 8021q: adding VLAN 0 to HW filter on device team0 [ 63.859332][ T1117] bridge0: port 1(bridge_slave_0) entered blocking state [ 63.859452][ T1117] bridge0: port 1(bridge_slave_0) entered forwarding state [ 63.869946][ T5606] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 63.884457][ T5606] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 63.884899][ T5606] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 63.886241][ T5606] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 63.914613][ T5606] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 63.918053][ T5606] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 63.919710][ T1117] bridge0: port 2(bridge_slave_1) entered blocking state [ 63.919839][ T1117] bridge0: port 2(bridge_slave_1) entered forwarding state [ 63.933743][ T5597] 8021q: adding VLAN 0 to HW filter on device team0 [ 63.957832][ T5606] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 63.965384][ T5606] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 63.988946][ T1394] bridge0: port 1(bridge_slave_0) entered blocking state [ 63.988996][ T1394] bridge0: port 1(bridge_slave_0) entered forwarding state [ 64.016186][ T1394] bridge0: port 2(bridge_slave_1) entered blocking state [ 64.016267][ T1394] bridge0: port 2(bridge_slave_1) entered forwarding state [ 64.083935][ T5603] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 64.086763][ T5603] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 64.111601][ T5603] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 64.113799][ T5603] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 64.136212][ T5603] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 64.139520][ T5603] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 64.140639][ T5603] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 64.153381][ T5603] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 64.208631][ T30] kauditd_printk_skb: 13 callbacks suppressed [ 64.208647][ T30] audit: type=1400 audit(1790777772.251:152): avc: denied { sys_module } for pid=5595 comm="syz-executor" capability=16 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 64.256242][ T5596] 8021q: adding VLAN 0 to HW filter on device bond0 [ 64.273412][ T5606] 8021q: adding VLAN 0 to HW filter on device bond0 [ 64.336486][ T5606] 8021q: adding VLAN 0 to HW filter on device team0 [ 64.337881][ T5596] 8021q: adding VLAN 0 to HW filter on device team0 [ 64.354007][ T1117] bridge0: port 1(bridge_slave_0) entered blocking state [ 64.354104][ T1117] bridge0: port 1(bridge_slave_0) entered forwarding state [ 64.367649][ T1117] bridge0: port 1(bridge_slave_0) entered blocking state [ 64.367728][ T1117] bridge0: port 1(bridge_slave_0) entered forwarding state [ 64.378615][ T1117] bridge0: port 2(bridge_slave_1) entered blocking state [ 64.378694][ T1117] bridge0: port 2(bridge_slave_1) entered forwarding state [ 64.383670][ T1117] bridge0: port 2(bridge_slave_1) entered blocking state [ 64.383752][ T1117] bridge0: port 2(bridge_slave_1) entered forwarding state [ 64.540522][ T5603] 8021q: adding VLAN 0 to HW filter on device bond0 [ 64.629338][ T5603] 8021q: adding VLAN 0 to HW filter on device team0 [ 64.651798][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 64.651911][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 64.678781][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 64.678865][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 64.900746][ T52] Bluetooth: hci0: command tx timeout [ 64.900776][ T52] Bluetooth: hci3: command tx timeout [ 64.900795][ T52] Bluetooth: hci1: command tx timeout [ 64.900812][ T52] Bluetooth: hci4: command tx timeout [ 64.902501][ T5608] Bluetooth: hci2: command tx timeout [ 65.038408][ T5595] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 65.157106][ T5595] veth0_vlan: entered promiscuous mode [ 65.170726][ T5595] veth1_vlan: entered promiscuous mode [ 65.204878][ T5597] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 65.285678][ T5595] veth0_macvtap: entered promiscuous mode [ 65.329335][ T5595] veth1_macvtap: entered promiscuous mode [ 65.362349][ T5597] veth0_vlan: entered promiscuous mode [ 65.393567][ T5597] veth1_vlan: entered promiscuous mode [ 65.426904][ T5606] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 65.448970][ T5595] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 65.453292][ T5596] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 65.482598][ T5595] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 65.537001][ T5597] veth0_macvtap: entered promiscuous mode [ 65.572992][ T5597] veth1_macvtap: entered promiscuous mode [ 65.630697][ T5596] veth0_vlan: entered promiscuous mode [ 65.655092][ T5597] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 65.670907][ T5597] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 65.729161][ T5596] veth1_vlan: entered promiscuous mode [ 65.766013][ T5603] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 65.767532][ T1117] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 65.767548][ T1117] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 65.840575][ T3320] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 65.840777][ T3320] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 65.862919][ T1306] ieee802154 phy0 wpan0: encryption failed: -22 [ 65.862978][ T1306] ieee802154 phy1 wpan1: encryption failed: -22 [ 65.871435][ T1117] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 65.871623][ T1117] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 65.871679][ T1117] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 65.871691][ T1117] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 65.871881][ T1117] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 65.872712][ T1117] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 65.872755][ T1117] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 65.913853][ T30] audit: type=1400 audit(1790777773.961:153): avc: denied { mounton } for pid=5595 comm="syz-executor" path="/root/syzkaller.B7Il3h/syz-tmp" dev="sda1" ino=2042 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_home_t tclass=dir permissive=1 [ 65.915782][ T30] audit: type=1400 audit(1790777773.961:154): avc: denied { mount } for pid=5595 comm="syz-executor" name="/" dev="tmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 65.923153][ T30] audit: type=1400 audit(1790777773.971:155): avc: denied { mounton } for pid=5595 comm="syz-executor" path="/root/syzkaller.B7Il3h/syz-tmp/newroot/dev" dev="tmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 65.931098][ T30] audit: type=1400 audit(1790777773.981:156): avc: denied { mount } for pid=5595 comm="syz-executor" name="/" dev="proc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 65.937747][ T5596] veth0_macvtap: entered promiscuous mode [ 65.945875][ T30] audit: type=1400 audit(1790777773.981:157): avc: denied { mounton } for pid=5595 comm="syz-executor" path="/root/syzkaller.B7Il3h/syz-tmp/newroot/sys/kernel/debug" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=dir permissive=1 [ 65.945916][ T30] audit: type=1400 audit(1790777773.991:158): avc: denied { mounton } for pid=5595 comm="syz-executor" path="/root/syzkaller.B7Il3h/syz-tmp/newroot/proc/sys/fs/binfmt_misc" dev="proc" ino=7419 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysctl_fs_t tclass=dir permissive=1 [ 65.965506][ T30] audit: type=1400 audit(1790777774.011:159): avc: denied { unmount } for pid=5595 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 65.975286][ T30] audit: type=1400 audit(1790777774.021:160): avc: denied { mounton } for pid=5595 comm="syz-executor" path="/dev/gadgetfs" dev="devtmpfs" ino=2780 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:device_t tclass=dir permissive=1 [ 65.998725][ T30] audit: type=1400 audit(1790777774.041:161): avc: denied { mount } for pid=5595 comm="syz-executor" name="/" dev="gadgetfs" ino=7438 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfs_t tclass=filesystem permissive=1 [ 66.004588][ T5596] veth1_macvtap: entered promiscuous mode [ 66.012887][ T5606] veth0_vlan: entered promiscuous mode [ 66.021601][ T13] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.075748][ T5606] veth1_vlan: entered promiscuous mode [ 66.109409][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 66.109428][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 66.123313][ T5596] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 66.162761][ T5596] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 66.164573][ T5603] veth0_vlan: entered promiscuous mode [ 66.206067][ T5595] soft_limit_in_bytes is deprecated and will be removed. Writing any value to this file has no effect. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 66.230101][ T1117] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.231068][ T1117] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.231099][ T1117] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.231125][ T1117] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.231889][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 66.231903][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 66.259718][ T5603] veth1_vlan: entered promiscuous mode [ 66.347853][ T5606] veth0_macvtap: entered promiscuous mode [ 66.372301][ T5606] veth1_macvtap: entered promiscuous mode [ 66.423307][ T5606] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 66.454994][ T3320] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 66.455015][ T3320] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 66.480087][ T5603] veth0_macvtap: entered promiscuous mode [ 66.484703][ T5606] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 66.537759][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 66.537778][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 66.560298][ T5603] veth1_macvtap: entered promiscuous mode [ 66.844108][ T13] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.909597][ T5603] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 66.920620][ T43] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.920667][ T43] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.920695][ T43] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.931946][ T5603] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 66.980856][ T5602] Bluetooth: hci2: command tx timeout [ 66.980888][ T5602] Bluetooth: hci4: command tx timeout [ 66.980908][ T5602] Bluetooth: hci1: command tx timeout [ 66.980926][ T5602] Bluetooth: hci3: command tx timeout [ 66.980943][ T5602] Bluetooth: hci0: command tx timeout [ 67.238953][ T5796] nvme_fabrics: missing parameter 'transport=%s' [ 67.238970][ T5796] nvme_fabrics: missing parameter 'nqn=%s' [ 67.240591][ T5796] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4'. [ 67.301666][ T43] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 67.304384][ T43] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 67.304525][ T43] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 67.304806][ T43] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 67.357398][ T3320] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 67.357419][ T3320] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 67.451612][ T1117] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 67.451626][ T1117] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 67.867191][ T49] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 67.867222][ T49] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 69.069882][ T5608] Bluetooth: hci0: command tx timeout [ 69.069912][ T5608] Bluetooth: hci3: command tx timeout [ 69.069930][ T5608] Bluetooth: hci1: command tx timeout [ 69.069948][ T5608] Bluetooth: hci4: command tx timeout [ 69.069966][ T5608] Bluetooth: hci2: command tx timeout [ 69.281593][ T10] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 69.481035][ T10] usb 4-1: Using ep0 maxpacket: 32 [ 69.500100][ T10] usb 4-1: New USB device found, idVendor=2c42, idProduct=1202, bcdDevice=85.40 [ 69.526361][ T10] usb 4-1: config 0 has an invalid interface number: 12 but max is 0 [ 69.526547][ T10] usb 4-1: config 0 has no interface number 0 [ 69.526989][ T10] usb 4-1: config 0 interface 12 has no altsetting 0 [ 69.629533][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 69.629560][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 69.719284][ T10] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 69.719664][ T10] usb 4-1: Product: syz [ 69.719731][ T10] usb 4-1: Manufacturer: syz [ 69.738019][ T10] usb 4-1: SerialNumber: syz [ 70.034188][ T30] kauditd_printk_skb: 27 callbacks suppressed [ 70.034209][ T30] audit: type=1400 audit(1790777778.071:189): avc: denied { unmount } for pid=5596 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=filesystem permissive=1 [ 70.136441][ T10] usb 4-1: config 0 descriptor?? [ 70.269976][ T30] audit: type=1400 audit(1790777778.311:190): avc: denied { mount } for pid=5821 comm="syz.2.8" name="/" dev="configfs" ino=1078 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=filesystem permissive=1 [ 70.272172][ T30] audit: type=1400 audit(1790777778.321:191): avc: denied { search } for pid=5821 comm="syz.2.8" name="/" dev="configfs" ino=1078 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 70.273833][ T30] audit: type=1400 audit(1790777778.321:192): avc: denied { search } for pid=5821 comm="syz.2.8" name="nullb" dev="configfs" ino=3562 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 70.275114][ T30] audit: type=1400 audit(1790777778.321:193): avc: denied { write search } for pid=5821 comm="syz.2.8" name="nullb" dev="configfs" ino=3562 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 70.379668][ T30] audit: type=1400 audit(1790777778.421:194): avc: denied { add_name } for pid=5821 comm="syz.2.8" name="my_zoned_dev" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 70.380198][ T30] audit: type=1400 audit(1790777778.431:195): avc: denied { create } for pid=5821 comm="syz.2.8" name="my_zoned_dev" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:configfs_t tclass=dir permissive=1 [ 70.417270][ T30] audit: type=1400 audit(1790777778.461:196): avc: denied { create } for pid=5821 comm="syz.2.8" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 70.436739][ T30] audit: type=1400 audit(1790777778.481:197): avc: denied { connect } for pid=5821 comm="syz.2.8" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 70.483914][ T5828] netlink: 'syz.2.8': attribute type 1 has an invalid length. [ 70.483936][ T5828] netlink: 84 bytes leftover after parsing attributes in process `syz.2.8'. [ 70.483951][ T5828] netlink: 'syz.2.8': attribute type 2 has an invalid length. [ 70.483962][ T5828] netlink: 4 bytes leftover after parsing attributes in process `syz.2.8'. [ 70.540427][ T30] audit: type=1400 audit(1790777778.581:198): avc: denied { read write } for pid=5822 comm="syz.0.9" name="nullb0" dev="devtmpfs" ino=694 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 71.577196][ T5837] slcan: can't register candev [ 72.886588][ T5851] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(6) [ 72.886614][ T5851] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 72.887205][ T5851] vhci_hcd vhci_hcd.0: Device attached [ 73.300625][ T5673] usb 35-1: new low-speed USB device number 2 using vhci_hcd [ 73.662174][ T5854] vhci_hcd: connection reset by peer [ 73.714304][ T12] vhci_hcd vhci_hcd.1: stop threads [ 73.714531][ T12] vhci_hcd vhci_hcd.1: release socket [ 73.715059][ T12] vhci_hcd vhci_hcd.1: disconnect device [ 73.926537][ T10] f81534 4-1:0.12: f81534_get_register: reg: 1003 failed: -71 [ 73.926716][ T10] f81534 4-1:0.12: f81534_find_config_idx: read failed: -71 [ 73.926781][ T10] f81534 4-1:0.12: f81534_calc_num_ports: find idx failed: -71 [ 73.927080][ T10] f81534 4-1:0.12: probe with driver f81534 failed with error -71 [ 74.402950][ T10] usb 4-1: USB disconnect, device number 2 [ 74.428118][ T5850] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 74.428144][ T5850] Bluetooth: hci0: Error when powering off device on rfkill (-4) [ 74.448319][ T5824] null_blk: disk my_zoned_dev created [ 74.542208][ T5850] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 74.542232][ T5850] Bluetooth: hci2: Error when powering off device on rfkill (-4) [ 74.660586][ T5850] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 74.660607][ T5850] Bluetooth: hci1: Error when powering off device on rfkill (-4) [ 74.743925][ T5874] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=47367 sclass=netlink_route_socket pid=5874 comm=syz.1.14 [ 74.760517][ T5874] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=47367 sclass=netlink_route_socket pid=5874 comm=syz.1.14 [ 74.905383][ T5878] netlink: 24 bytes leftover after parsing attributes in process `syz.0.11'. [ 74.992168][ T5879] use of bytesused == 0 is deprecated and will be removed in the future, [ 74.992190][ T5879] use the actual size instead. [ 75.398321][ T5882] warning: `syz.2.13' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 75.637433][ T30] kauditd_printk_skb: 39 callbacks suppressed [ 75.637451][ T30] audit: type=1400 audit(1790777783.681:238): avc: denied { perfmon } for pid=5872 comm="syz.2.13" capability=38 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 75.691450][ T30] audit: type=1400 audit(1790777783.741:239): avc: denied { write } for pid=5872 comm="syz.2.13" name="wireless" dev="proc" ino=4026532949 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_net_t tclass=file permissive=1 [ 76.566010][ T9] cfg80211: failed to load regulatory.db [ 76.618351][ T5850] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 76.618371][ T5850] Bluetooth: hci3: Error when powering off device on rfkill (-4) [ 76.677968][ T30] audit: type=1400 audit(1790777784.721:240): avc: denied { write } for pid=5880 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 76.769732][ T5850] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 76.785779][ T5850] Bluetooth: hci4: Error when powering off device on rfkill (-4) [ 76.855134][ T30] audit: type=1400 audit(1790777784.901:241): avc: denied { unmount } for pid=5595 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 77.145690][ T5893] netlink: 16 bytes leftover after parsing attributes in process `syz.2.16'. [ 77.231479][ T30] audit: type=1400 audit(1790777785.271:242): avc: denied { ioctl } for pid=5889 comm="syz.2.16" path="socket:[9362]" dev="sockfs" ino=9362 ioctlcmd=0x6721 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 77.355606][ T30] audit: type=1400 audit(1790777785.391:243): avc: denied { mount } for pid=5889 comm="syz.2.16" name="/" dev="sysfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=filesystem permissive=1 [ 77.474498][ T30] audit: type=1400 audit(1790777785.521:244): avc: denied { append } for pid=5892 comm="syz.0.15" name="cec0" dev="devtmpfs" ino=947 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 77.479861][ T30] audit: type=1400 audit(1790777785.521:245): avc: denied { mmap_zero } for pid=5892 comm="syz.0.15" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=memprotect permissive=1 [ 77.540138][ T30] audit: type=1400 audit(1790777785.591:246): avc: denied { map } for pid=5892 comm="syz.0.15" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=9365 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 77.540881][ T30] audit: type=1400 audit(1790777785.591:247): avc: denied { read write } for pid=5892 comm="syz.0.15" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=9365 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 78.410163][ T5673] vhci_hcd vhci_hcd.1: vhci_device speed not set [ 80.058750][ T5707] libceph: connect (1)[c::]:6789 error -101 [ 80.059139][ T5707] libceph: mon0 (1)[c::]:6789 connect error [ 80.073846][ T5906] netlink: 'syz.1.19': attribute type 1 has an invalid length. [ 80.196160][ T5894] ceph: No mds server is up or the cluster is laggy [ 80.362796][ T5910] bridge0: port 3(veth0_to_bond) entered blocking state [ 80.363155][ T5910] bridge0: port 3(veth0_to_bond) entered disabled state [ 80.363611][ T5910] veth0_to_bond: entered allmulticast mode [ 80.370609][ T5910] veth0_to_bond: entered promiscuous mode [ 80.658011][ T5707] libceph: connect (1)[c::]:6789 error -101 [ 80.658184][ T5707] libceph: mon0 (1)[c::]:6789 connect error [ 80.672990][ T30] kauditd_printk_skb: 15 callbacks suppressed [ 80.673005][ T30] audit: type=1400 audit(1790777788.711:263): avc: denied { read write } for pid=5909 comm="syz.0.18" name="raw-gadget" dev="devtmpfs" ino=814 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 80.673041][ T30] audit: type=1400 audit(1790777788.711:264): avc: denied { open } for pid=5909 comm="syz.0.18" path="/dev/raw-gadget" dev="devtmpfs" ino=814 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 80.673083][ T30] audit: type=1400 audit(1790777788.711:265): avc: denied { ioctl } for pid=5909 comm="syz.0.18" path="/dev/raw-gadget" dev="devtmpfs" ino=814 ioctlcmd=0x5500 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 80.801424][ T30] audit: type=1400 audit(1790777788.851:266): avc: denied { prog_load } for pid=5913 comm="syz.4.17" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 80.801964][ T30] audit: type=1400 audit(1790777788.851:267): avc: denied { bpf } for pid=5913 comm="syz.4.17" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 80.802473][ T30] audit: type=1400 audit(1790777788.851:268): avc: denied { perfmon } for pid=5913 comm="syz.4.17" capability=38 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 80.875777][ T30] audit: type=1400 audit(1790777788.921:269): avc: denied { prog_run } for pid=5913 comm="syz.4.17" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 80.970160][ T25] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 81.010820][ T30] audit: type=1400 audit(1790777789.061:270): avc: denied { getattr } for pid=5888 comm="dhcpcd-run-hook" path="/run/dhcpcd/hook-state/resolv.conf" dev="tmpfs" ino=1775 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 81.011067][ T30] audit: type=1400 audit(1790777789.061:271): avc: denied { write } for pid=5888 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 81.011201][ T30] audit: type=1400 audit(1790777789.061:272): avc: denied { add_name } for pid=5888 comm="dhcpcd-run-hook" name="resolv.conf.sl0.link" scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 81.120385][ T25] usb 1-1: New USB device found, idVendor=2c42, idProduct=1709, bcdDevice=ca.b7 [ 81.130398][ T25] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 81.130421][ T25] usb 1-1: Product: syz [ 81.130433][ T25] usb 1-1: Manufacturer: syz [ 81.130445][ T25] usb 1-1: SerialNumber: syz [ 81.136164][ T25] usb 1-1: config 0 descriptor?? [ 81.334579][ T5926] netlink: 8 bytes leftover after parsing attributes in process `syz.3.20'. [ 81.568869][ T5930] 8250_pericom 0000:00:00.0: probe with driver 8250_pericom failed with error -12 [ 81.899018][ T5939] netlink: 'syz.0.18': attribute type 39 has an invalid length. [ 81.936908][ T85] nvmet: connect request for invalid subsystem nqn.2014-08.org.nvmexpress.discovery! [ 81.952327][ T5914] nvme nvme0: Connect Invalid Data Parameter, subsysnqn "nqn.2014-08.org.nvmexpress.discovery" [ 82.223015][ T25] usb 1-1: f81604_read: reg: 105 failed: -EPROTO [ 82.223042][ T25] f81604 1-1:0.0: Setting termination of CH#1 failed: -EPROTO [ 82.223066][ T25] f81604 1-1:0.0: probe with driver f81604 failed with error -71 [ 82.245293][ T25] usb 1-1: USB disconnect, device number 2 [ 82.356572][ T5942] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 82.357459][ T5942] block device autoloading is deprecated and will be removed. [ 84.322745][ T0] NOHZ tick-stop error: local softirq work is pending, handler #42!!! [ 85.756992][ T30] kauditd_printk_skb: 65 callbacks suppressed [ 85.757013][ T30] audit: type=1400 audit(1790777793.441:338): avc: denied { mount } for pid=5958 comm="syz.3.31" name="/" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=filesystem permissive=1 [ 85.757049][ T30] audit: type=1400 audit(1790777793.471:339): avc: denied { search } for pid=5958 comm="syz.3.31" name="/" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=dir permissive=1 [ 85.757077][ T30] audit: type=1400 audit(1790777793.471:340): avc: denied { append } for pid=5958 comm="syz.3.31" name="uprobe_events" dev="tracefs" ino=1053 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=file permissive=1 [ 85.757103][ T30] audit: type=1400 audit(1790777793.471:341): avc: denied { open } for pid=5958 comm="syz.3.31" path="/5/tracing/uprobe_events" dev="tracefs" ino=1053 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=file permissive=1 [ 85.757134][ T30] audit: type=1400 audit(1790777793.541:342): avc: denied { search } for pid=5958 comm="syz.3.31" name="/" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=dir permissive=1 [ 85.757169][ T30] audit: type=1400 audit(1790777793.541:343): avc: denied { write } for pid=5958 comm="syz.3.31" name="uprobe_events" dev="tracefs" ino=1053 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=file permissive=1 [ 85.759991][ T30] audit: type=1400 audit(1790777793.801:344): avc: denied { unmount } for pid=5597 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=filesystem permissive=1 [ 85.843569][ T30] audit: type=1400 audit(1790777793.891:345): avc: denied { bind } for pid=5957 comm="syz.4.30" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 86.137472][ T30] audit: type=1400 audit(1790777794.181:346): avc: denied { create } for pid=5957 comm="syz.4.30" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 86.139969][ T30] audit: type=1400 audit(1790777794.181:347): avc: denied { setopt } for pid=5957 comm="syz.4.30" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 86.183019][ T5964] tipc: Started in network mode [ 86.183036][ T5964] tipc: Node identity 4, cluster identity 4711 [ 86.183046][ T5964] tipc: Node number set to 4 [ 86.551393][ T5707] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 86.707252][ T5707] usb 2-1: Using ep0 maxpacket: 8 [ 86.748737][ T5707] usb 2-1: New USB device found, idVendor=0e41, idProduct=4142, bcdDevice=d4.6e [ 86.807458][ T5707] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 86.807536][ T5707] usb 2-1: config 0 interface 0 altsetting 2 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 86.807584][ T5707] usb 2-1: config 0 interface 0 has no altsetting 0 [ 86.916730][ T5973] pci 0000:00:01.0: [8086:7110] type 00 class 0x060100 conventional PCI endpoint [ 86.929172][ T5707] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 86.929203][ T5707] usb 2-1: Product: syz [ 86.929242][ T5707] usb 2-1: Manufacturer: syz [ 86.929280][ T5707] usb 2-1: SerialNumber: syz [ 87.062722][ T5707] usb 2-1: config 0 descriptor?? [ 87.188678][ T5707] snd_usb_toneport 2-1:0.0: Line 6 TonePort UX2 found [ 87.489965][ T0] NOHZ tick-stop error: local softirq work is pending, handler #140!!! [ 88.809094][ T5967] Zero length message leads to an empty skb [ 88.993820][ T5707] snd_usb_toneport 2-1:0.0: cannot get proper max packet size [ 89.024143][ T5707] snd_usb_toneport 2-1:0.0: Line 6 TonePort UX2 now disconnected [ 89.226047][ T5707] snd_usb_toneport 2-1:0.0: probe with driver snd_usb_toneport failed with error -22 [ 90.049990][ T0] NOHZ tick-stop error: local softirq work is pending, handler #c0!!! [ 90.496562][ T5777] usb 2-1: USB disconnect, device number 2 [ 90.772828][ T30] kauditd_printk_skb: 13 callbacks suppressed [ 90.772852][ T30] audit: type=1400 audit(1790777798.821:361): avc: denied { write } for pid=5987 comm="syz.1.37" name="001" dev="devtmpfs" ino=735 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 91.272967][ T30] audit: type=1400 audit(1790777799.321:362): avc: denied { map_read map_write } for pid=5989 comm="syz.1.39" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 91.415380][ T30] audit: type=1400 audit(1790777799.461:363): avc: denied { read } for pid=5989 comm="syz.1.39" name="loop-control" dev="devtmpfs" ino=644 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 91.416823][ T30] audit: type=1400 audit(1790777799.461:364): avc: denied { open } for pid=5989 comm="syz.1.39" path="/dev/loop-control" dev="devtmpfs" ino=644 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 91.446389][ T30] audit: type=1400 audit(1790777799.491:365): avc: denied { ioctl } for pid=5989 comm="syz.1.39" path="/dev/loop-control" dev="devtmpfs" ino=644 ioctlcmd=0x4c81 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 91.607858][ T5992] block device autoloading is deprecated and will be removed. [ 92.787471][ T5980] netlink: 'syz.0.35': attribute type 12 has an invalid length. [ 92.787497][ T5980] netlink: 132 bytes leftover after parsing attributes in process `syz.0.35'. [ 93.682298][ T30] audit: type=1400 audit(1790777801.731:366): avc: denied { name_bind } for pid=5996 comm="syz.0.41" src=20001 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=tcp_socket permissive=1 [ 93.685259][ T30] audit: type=1400 audit(1790777801.731:367): avc: denied { node_bind } for pid=5996 comm="syz.0.41" saddr=224.0.0.1 src=20001 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=tcp_socket permissive=1 [ 93.771818][ T30] audit: type=1400 audit(1790777801.821:368): avc: denied { create } for pid=5996 comm="syz.0.41" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 93.831799][ T30] audit: type=1400 audit(1790777801.881:369): avc: denied { bind } for pid=5996 comm="syz.0.41" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 93.902067][ T30] audit: type=1400 audit(1790777801.941:370): avc: denied { setopt } for pid=5996 comm="syz.0.41" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 94.263033][ T6000] process 'syz.2.40' launched './file1' with NULL argv: empty string added [ 94.486583][ T6013] sctp: [Deprecated]: syz.0.41 (pid 6013) Use of struct sctp_assoc_value in delayed_ack socket option. [ 94.486583][ T6013] Use struct sctp_sack_info instead [ 94.542732][ T5707] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 94.720522][ T5707] usb 3-1: Using ep0 maxpacket: 16 [ 94.726924][ T5707] usb 3-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.00 [ 94.771285][ T5707] usb 3-1: config 0 interface 0 altsetting 16 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 94.771371][ T5707] usb 3-1: config 0 interface 0 altsetting 16 endpoint 0x81 has invalid wMaxPacketSize 0 [ 94.771473][ T5707] usb 3-1: config 0 interface 0 altsetting 16 has 1 endpoint descriptor, different from the interface descriptor's value: 28 [ 94.771503][ T5707] usb 3-1: config 0 interface 0 has no altsetting 0 [ 94.771659][ T5707] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 94.808406][ T6018] ip6t_srh: unknown srh match flags 4000 [ 97.598822][ T30] kauditd_printk_skb: 38 callbacks suppressed [ 97.598839][ T30] audit: type=1400 audit(1790777805.641:409): avc: denied { sys_module } for pid=6010 comm="syz.4.38" capability=16 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 97.644208][ T5707] usb 3-1: config 0 descriptor?? [ 97.654116][ T6004] configfs-gadget.g1 gadget.0: HOST MAC f2:36:52:a4:2a:41 [ 97.654138][ T6004] configfs-gadget.g1 gadget.0: MAC 26:f1:ff:19:07:92 [ 97.687473][ T5707] usb 3-1: can't set config #0, error -71 [ 97.688757][ T5707] usb 3-1: USB disconnect, device number 2 [ 97.818840][ T30] audit: type=1400 audit(1790777805.861:410): avc: denied { ioctl } for pid=6037 comm="syz.2.44" path="socket:[9688]" dev="sockfs" ino=9688 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 97.849074][ T6039] netlink: 52 bytes leftover after parsing attributes in process `syz.2.44'. [ 97.877511][ T6039] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=6039 comm=syz.2.44 [ 97.877607][ T6039] netlink: 52 bytes leftover after parsing attributes in process `syz.2.44'. [ 97.901056][ T31] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 97.914663][ T9] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 97.973530][ T30] audit: type=1400 audit(1790777806.021:411): avc: denied { unmount } for pid=5597 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=filesystem permissive=1 [ 98.019063][ T30] audit: type=1400 audit(1790777806.061:412): avc: denied { read } for pid=5262 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=1 [ 98.067057][ T9] usb 1-1: New USB device found, idVendor=0000, idProduct=0000, bcdDevice= 7.03 [ 98.078045][ T9] usb 1-1: Dual-Role OTG device on HNP port [ 98.078329][ T9] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 98.105956][ T9] usb 1-1: No union descriptors [ 98.114862][ T9] gspca_main: spca501-2.14.0 probing 0000:0000 [ 98.120111][ T9] gspca_spca501: reg write: error -32 [ 98.120125][ T9] spca501 1-1:1.0: Reg write failed for 0x02,0x0f,0x05 [ 98.120183][ T9] spca501 1-1:1.0: probe with driver spca501 failed with error -22 [ 98.136500][ T30] audit: type=1400 audit(1790777806.181:413): avc: denied { mount } for pid=6043 comm="syz.0.45" name="/" dev="ramfs" ino=8948 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ramfs_t tclass=filesystem permissive=1 [ 98.377353][ T6050] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 98.377376][ T6050] overlayfs: failed to set xattr on upper [ 98.377383][ T6050] overlayfs: ...falling back to redirect_dir=nofollow. [ 98.377388][ T6050] overlayfs: ...falling back to metacopy=off. [ 98.377394][ T6050] overlayfs: ...falling back to index=off. [ 98.377400][ T6050] overlayfs: ...falling back to uuid=null. [ 98.380219][ T30] audit: type=1400 audit(1790777806.421:414): avc: denied { mounton } for pid=6043 comm="syz.0.45" path="/file0" dev="ramfs" ino=9700 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:ramfs_t tclass=dir permissive=1 [ 98.380484][ T30] audit: type=1400 audit(1790777806.421:415): avc: denied { mount } for pid=6043 comm="syz.0.45" name="/" dev="overlay" ino=9700 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 98.581276][ T5707] usb 3-1: new full-speed USB device number 3 using dummy_hcd [ 99.969030][ T6046] ALSA: mixer_oss: invalid OSS volume '' [ 100.077419][ T5707] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 100.095903][ T5707] usb 3-1: config 1 interface 0 altsetting 64 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 100.095932][ T5707] usb 3-1: config 1 interface 0 altsetting 64 has 3 endpoint descriptors, different from the interface descriptor's value: 23 [ 100.095953][ T5707] usb 3-1: config 1 interface 0 has no altsetting 0 [ 100.118115][ T5707] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 100.118138][ T5707] usb 3-1: SerialNumber: syz [ 100.131272][ T5707] hub 3-1:1.0: bad descriptor, ignoring hub [ 100.131292][ T5707] hub 3-1:1.0: probe with driver hub failed with error -5 [ 100.131648][ T5707] cdc_acm 3-1:1.0: Control and data interfaces are not separated! [ 100.311200][ T30] audit: type=1400 audit(1790777808.361:416): avc: denied { read write } for pid=6061 comm="syz.1.48" name="nvram" dev="devtmpfs" ino=623 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nvram_device_t tclass=chr_file permissive=1 [ 100.314655][ T30] audit: type=1400 audit(1790777808.361:417): avc: denied { open } for pid=6061 comm="syz.1.48" path="/dev/nvram" dev="devtmpfs" ino=623 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nvram_device_t tclass=chr_file permissive=1 [ 100.323140][ T30] audit: type=1400 audit(1790777808.371:418): avc: denied { ioctl } for pid=6061 comm="syz.1.48" path="/dev/nvram" dev="devtmpfs" ino=623 ioctlcmd=0x7040 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nvram_device_t tclass=chr_file permissive=1 [ 100.554461][ T6072] vimc link validate: Sensor A:src:640x480 (0x42474752, 8, 2, 5, 3) Raw Capture 0:snk:640x480 (0x42474752, 8, 0, 0, 0) [ 100.555611][ T6072] vimc link validate: Scaler:src:640x480 (0x33424752, 8, 0, 0, 0) RGB/YUV Capture:snk:640x480 (0x33424752, 8, 0, 0, 0) [ 100.597996][ T6072] netlink: 48 bytes leftover after parsing attributes in process `syz.4.49'. [ 101.351084][ T5707] cdc_acm 3-1:1.0: ttyACM0: USB ACM device [ 101.376284][ T5707] usb 3-1: USB disconnect, device number 3 [ 101.488588][ T6068] ======================================================= [ 101.488588][ T6068] WARNING: The mand mount option has been deprecated and [ 101.488588][ T6068] and is ignored by this kernel. Remove the mand [ 101.488588][ T6068] option from the mount to silence this warning. [ 101.488588][ T6068] ======================================================= [ 101.644459][ T6088] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 101.646070][ T6088] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 103.516405][ T30] kauditd_printk_skb: 11 callbacks suppressed [ 103.516423][ T30] audit: type=1326 audit(1790777811.561:430): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6092 comm="syz.3.53" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fb02b99e159 code=0x0 [ 103.948755][ T10] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 104.014480][ T30] audit: type=1400 audit(1790777812.061:431): avc: denied { ioctl } for pid=6110 comm="syz.0.56" path="socket:[9090]" dev="sockfs" ino=9090 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 104.073108][ T30] audit: type=1400 audit(1790777812.121:432): avc: denied { write } for pid=6095 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 104.121800][ T10] usb 2-1: Using ep0 maxpacket: 32 [ 104.122394][ T10] usb 2-1: New USB device found, idVendor=05da, idProduct=009a, bcdDevice=62.95 [ 104.123347][ T10] usb 2-1: config 0 has an invalid interface number: 146 but max is 0 [ 104.123369][ T10] usb 2-1: config 0 has no interface number 0 [ 104.123400][ T10] usb 2-1: config 0 interface 146 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 104.123420][ T10] usb 2-1: config 0 interface 146 altsetting 0 has an endpoint descriptor with address 0xE3, changing to 0x83 [ 104.123442][ T10] usb 2-1: config 0 interface 146 altsetting 0 endpoint 0x83 has invalid maxpacket 33307, setting to 1024 [ 104.123465][ T10] usb 2-1: config 0 interface 146 altsetting 0 bulk endpoint 0x83 has invalid maxpacket 1024 [ 104.123485][ T10] usb 2-1: config 0 interface 146 altsetting 0 has an endpoint descriptor with address 0xF2, changing to 0x82 [ 104.123504][ T10] usb 2-1: config 0 interface 146 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 104.123522][ T10] usb 2-1: config 0 interface 146 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0 [ 104.123542][ T10] usb 2-1: config 0 interface 146 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 104.123559][ T10] usb 2-1: config 0 interface 146 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 104.123577][ T10] usb 2-1: config 0 interface 146 altsetting 0 has 4 endpoint descriptors, different from the interface descriptor's value: 3 [ 104.125323][ T10] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 104.125343][ T10] usb 2-1: Product: syz [ 104.125356][ T10] usb 2-1: Manufacturer: syz [ 104.125371][ T10] usb 2-1: SerialNumber: syz [ 104.128745][ T10] usb 2-1: config 0 descriptor?? [ 104.129412][ T6105] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 104.130972][ T10] usb 2-1: will this work? Response EP is not usually 3 [ 104.130987][ T10] usb 2-1: will this work? Image data EP is not usually 2 [ 104.191931][ T10] scsi host1: microtekX6 [ 104.216986][ T5845] usb 2-1: error -90 submitting URB [ 104.250003][ T5873] usb 2-1: error -90 submitting URB [ 104.270143][ T5707] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 104.289859][ T5873] usb 2-1: error -90 submitting URB [ 104.330952][ T5873] usb 2-1: error -90 submitting URB [ 104.414213][ T5718] usb 2-1: USB disconnect, device number 3 [ 104.422039][ T5707] usb 3-1: New USB device found, idVendor=045a, idProduct=5210, bcdDevice= 1.01 [ 104.424502][ T5707] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 104.426130][ T5707] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 104.426149][ T5707] usb 3-1: Product: syz [ 104.426161][ T5707] usb 3-1: Manufacturer: syz [ 104.426173][ T5707] usb 3-1: SerialNumber: syz [ 104.430596][ T5707] ums-karma 3-1:1.0: USB Mass Storage device detected [ 104.452079][ T5707] ums-karma 3-1:1.0: This device (045a,5210,0101 S 06 P f5) has unneeded SubClass and Protocol entries in unusual_devs.h (kernel syzkaller) [ 104.452079][ T5707] Please send a copy of this message to and [ 104.485871][ T30] audit: type=1400 audit(1790777812.531:433): avc: denied { write } for pid=6120 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 104.569356][ T30] audit: type=1400 audit(1790777812.611:434): avc: denied { connect } for pid=6121 comm="syz.3.59" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 104.599184][ T30] audit: type=1400 audit(1790777812.641:435): avc: denied { write } for pid=6121 comm="syz.3.59" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 104.681704][ T10] usb 3-1: USB disconnect, device number 4 [ 106.475660][ T30] audit: type=1400 audit(1790777814.521:436): avc: denied { create } for pid=6145 comm="syz.1.64" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 106.551221][ T30] audit: type=1400 audit(1790777814.591:437): avc: denied { setopt } for pid=6145 comm="syz.1.64" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 106.561933][ T30] audit: type=1400 audit(1790777814.601:438): avc: denied { connect } for pid=6145 comm="syz.1.64" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 107.810563][ T31] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 107.960688][ T31] usb 2-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 107.965445][ T31] usb 2-1: config 27 has an invalid descriptor of length 0, skipping remainder of the config [ 107.965488][ T31] usb 2-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 107.965512][ T31] usb 2-1: config 27 interface 0 altsetting 0 endpoint 0x8B has invalid wMaxPacketSize 0 [ 107.965532][ T31] usb 2-1: config 27 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 107.965568][ T31] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 108.037690][ T30] audit: type=1400 audit(1790777816.081:439): avc: denied { getopt } for pid=6167 comm="syz.0.63" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 108.065257][ T31] usb 2-1: Quirk or no altset; falling back to MIDI 1.0 [ 108.065912][ T31] usb 2-1: invalid MIDI out EP 0 [ 108.208130][ T6042] udevd[6042]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:27.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 108.232439][ T6176] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 108.234121][ T6176] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 108.284817][ T31] snd-usb-audio 2-1:27.0: probe with driver snd-usb-audio failed with error -22 [ 108.291869][ T5718] usb 2-1: USB disconnect, device number 4 [ 109.340929][ T30] audit: type=1400 audit(1790777817.391:440): avc: denied { write } for pid=6184 comm="syz.4.82" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 109.341028][ T30] audit: type=1400 audit(1790777817.391:441): avc: denied { nlmsg_write } for pid=6184 comm="syz.4.82" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 109.659870][ T10] usb 5-1: new full-speed USB device number 3 using dummy_hcd [ 110.530054][ T0] NOHZ tick-stop error: local softirq work is pending, handler #42!!! [ 110.940091][ T0] NOHZ tick-stop error: local softirq work is pending, handler #82!!! [ 111.053169][ T10] usb 5-1: New USB device found, idVendor=0b48, idProduct=1003, bcdDevice=7b.54 [ 111.077747][ T10] usb 5-1: config 0 has an invalid interface number: 1 but max is 0 [ 111.090581][ T10] usb 5-1: config 0 has no interface number 0 [ 111.284227][ T10] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 111.284267][ T10] usb 5-1: Product: syz [ 111.284557][ T10] usb 5-1: Manufacturer: syz [ 111.284583][ T10] usb 5-1: SerialNumber: syz [ 111.357245][ T10] usb 5-1: config 0 descriptor?? [ 111.377762][ T10] usb 5-1: selecting invalid altsetting 1 [ 111.378286][ T10] dvb_ttusb_budget: ttusb_init_controller: error [ 111.378356][ T10] dvbdev: DVB: registering new adapter (Technotrend/Hauppauge Nova-USB) [ 111.439619][ T30] audit: type=1400 audit(1790777819.481:442): avc: denied { setopt } for pid=6202 comm="syz.1.87" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 111.480599][ T10] DVB: Unable to find symbol stv0299_attach() [ 111.510139][ T30] audit: type=1400 audit(1790777819.561:443): avc: denied { write } for pid=6202 comm="syz.1.87" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 111.511587][ T30] audit: type=1400 audit(1790777819.561:444): avc: denied { ioctl } for pid=6202 comm="syz.1.87" path="socket:[9867]" dev="sockfs" ino=9867 ioctlcmd=0x8934 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 111.540592][ T10] DVB: Unable to find symbol tda8083_attach() [ 111.540603][ T10] dvb_ttusb_budget: no frontend driver found for device [0b48:1003] [ 111.651729][ T10] usb 5-1: USB disconnect, device number 3 [ 111.709966][ T5707] usb 3-1: new full-speed USB device number 5 using dummy_hcd [ 112.871688][ T5707] usb 3-1: New USB device found, idVendor=056a, idProduct=5012, bcdDevice= 0.00 [ 112.872588][ T5707] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 112.872615][ T5707] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 112.872646][ T5707] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 112.883113][ T5707] usb 3-1: config 0 descriptor?? [ 112.999792][ T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!! [ 114.169522][ T5707] hid (null): invalid report_size 2035 [ 114.169546][ T5707] hid (null): global environment stack underflow [ 114.170837][ T5707] hid (null): report_id 0 is invalid [ 114.211500][ T5707] wacom 0003:056A:5012.0001: unknown main item tag 0x0 [ 114.211539][ T5707] wacom 0003:056A:5012.0001: unknown main item tag 0x0 [ 114.211560][ T5707] wacom 0003:056A:5012.0001: unknown main item tag 0x0 [ 114.211580][ T5707] wacom 0003:056A:5012.0001: unknown main item tag 0x0 [ 114.211599][ T5707] wacom 0003:056A:5012.0001: unknown main item tag 0x0 [ 114.211619][ T5707] wacom 0003:056A:5012.0001: unknown main item tag 0x0 [ 114.211638][ T5707] wacom 0003:056A:5012.0001: unknown main item tag 0x0 [ 114.211671][ T5707] wacom 0003:056A:5012.0001: unknown main item tag 0x0 [ 114.211691][ T5707] wacom 0003:056A:5012.0001: unknown main item tag 0x0 [ 114.211711][ T5707] wacom 0003:056A:5012.0001: unknown main item tag 0x0 [ 114.218070][ T5707] wacom 0003:056A:5012.0001: reserved main item tag 0xd [ 114.269418][ T10] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 114.309075][ T5707] wacom 0003:056A:5012.0001: invalid report_size 2035 [ 114.309097][ T5707] wacom 0003:056A:5012.0001: item 0 2 1 7 parsing failed [ 114.325192][ T5707] wacom 0003:056A:5012.0001: parse failed [ 114.325285][ T5707] wacom 0003:056A:5012.0001: probe with driver wacom failed with error -22 [ 114.368315][ T6227] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 114.368684][ T6227] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 114.377251][ T5777] usb 3-1: USB disconnect, device number 5 [ 114.470503][ T10] usb 5-1: New USB device found, idVendor=108c, idProduct=0159, bcdDevice= 0.01 [ 114.471345][ T10] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 114.471366][ T10] usb 5-1: config 1 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 114.473765][ T10] usb 5-1: string descriptor 0 read error: -22 [ 114.473857][ T10] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 114.490808][ T10] etas_es58x 5-1:1.0: Starting (null) (null) (Serial Number (null)) [ 114.490976][ T10] etas_es58x 5-1:1.0: could not retrieve the product info string [ 114.697543][ T6221] etas_es58x 5-1:1.0 can0: es58x_submit_urb: USB send urb failure: -EMSGSIZE [ 114.698019][ C0] etas_es58x 5-1:1.0: es58x_read_bulk_callback: error -ENOENT [ 114.699595][ C0] etas_es58x 5-1:1.0: es58x_read_bulk_callback: error -ENOENT [ 114.699815][ C0] etas_es58x 5-1:1.0: es58x_read_bulk_callback: error -ENOENT [ 114.737759][ C0] etas_es58x 5-1:1.0: es58x_read_bulk_callback: error -ENOENT [ 114.738671][ C0] etas_es58x 5-1:1.0: es58x_read_bulk_callback: error -ENOENT [ 114.738761][ T6221] etas_es58x 5-1:1.0 can0: es58x_open: Could not open the network device: -EMSGSIZE [ 114.765909][ T10] usb 5-1: USB disconnect, device number 4 [ 114.770265][ T10] etas_es58x 5-1:1.0: Disconnecting (null) (null) [ 115.437068][ T30] audit: type=1400 audit(1790777823.481:445): avc: denied { write } for pid=6244 comm="syz.2.101" path="socket:[9930]" dev="sockfs" ino=9930 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 115.490593][ T6246] Bluetooth: MGMT ver 1.23 [ 116.664865][ T6258] netlink: 8 bytes leftover after parsing attributes in process `syz.2.105'. [ 116.693794][ T6258] netlink: 8 bytes leftover after parsing attributes in process `syz.2.105'. [ 116.811715][ T6263] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 116.813399][ T6263] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 118.209940][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 118.502078][ T30] audit: type=1400 audit(1790777826.541:446): avc: denied { write } for pid=6234 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 118.539917][ T5673] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 118.689848][ T5673] usb 3-1: Using ep0 maxpacket: 32 [ 118.690423][ T5673] usb 3-1: New USB device found, idVendor=28bd, idProduct=0094, bcdDevice= 0.00 [ 118.691472][ T5673] usb 3-1: config 0 has an invalid interface number: 1 but max is 0 [ 118.691492][ T5673] usb 3-1: config 0 has no interface number 0 [ 118.691523][ T5673] usb 3-1: config 0 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 118.691545][ T5673] usb 3-1: config 0 interface 1 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 118.691575][ T5673] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 118.699106][ T5673] usb 3-1: config 0 descriptor?? [ 118.738287][ T30] audit: type=1400 audit(1790777826.781:447): avc: denied { write } for pid=6280 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 119.969793][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 120.352041][ T5673] input: HID 28bd:0094 Pen as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.1/0003:28BD:0094.0002/input/input6 [ 120.368501][ T5673] uclogic 0003:28BD:0094.0002: input,hidraw0: USB HID v0.00 Device [HID 28bd:0094] on usb-dummy_hcd.2-1/input1 [ 120.385611][ T30] audit: type=1400 audit(1790777828.431:448): avc: denied { read } for pid=4952 comm="acpid" name="mouse1" dev="devtmpfs" ino=2839 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 120.385904][ T30] audit: type=1400 audit(1790777828.431:449): avc: denied { open } for pid=4952 comm="acpid" path="/dev/input/mouse1" dev="devtmpfs" ino=2839 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 120.466183][ T30] audit: type=1400 audit(1790777828.511:450): avc: denied { ioctl } for pid=4952 comm="acpid" path="/dev/input/mouse1" dev="devtmpfs" ino=2839 ioctlcmd=0x4520 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 120.555495][ T31] usb 3-1: USB disconnect, device number 6 [ 120.706107][ T6302] fido_id[6302]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.2/usb3/report_descriptor': No such file or directory [ 120.976970][ T30] audit: type=1400 audit(1790777829.021:451): avc: denied { write } for pid=6289 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 121.018013][ T6318] netlink: 104 bytes leftover after parsing attributes in process `syz.3.119'. [ 121.186080][ T30] audit: type=1400 audit(1790777829.231:452): avc: denied { write } for pid=6320 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 123.330047][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 123.441145][ T6356] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 123.441543][ T6356] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 123.515948][ T30] audit: type=1400 audit(1790777831.561:453): avc: denied { write } for pid=6323 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 123.632313][ T30] audit: type=1400 audit(1790777831.681:454): avc: denied { write } for pid=6366 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 123.720654][ T5777] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 123.789018][ T30] audit: type=1400 audit(1790777831.831:455): avc: denied { node_bind } for pid=6370 comm="syz.4.132" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=rawip_socket permissive=1 [ 123.799679][ T30] audit: type=1400 audit(1790777831.841:456): avc: denied { read } for pid=6370 comm="syz.4.132" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 123.906001][ T30] audit: type=1400 audit(1790777831.951:457): avc: denied { create } for pid=6375 comm="syz.4.134" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 123.930828][ T5777] usb 3-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b [ 123.932390][ T5777] usb 3-1: config 0 has an invalid interface number: 1 but max is 0 [ 123.932411][ T5777] usb 3-1: config 0 has no interface number 0 [ 123.935613][ T5777] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 123.935635][ T5777] usb 3-1: Product: syz [ 123.935649][ T5777] usb 3-1: Manufacturer: syz [ 123.935662][ T5777] usb 3-1: SerialNumber: syz [ 123.996511][ T5777] usb 3-1: config 0 descriptor?? [ 124.162711][ T30] audit: type=1400 audit(1790777832.211:458): avc: denied { read } for pid=6384 comm="syz.4.136" name="trace_pipe_raw" dev="tracefs" ino=4293 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=file permissive=1 [ 124.169486][ T30] audit: type=1400 audit(1790777832.211:459): avc: denied { map } for pid=6384 comm="syz.4.136" path="/26/tracing/per_cpu/cpu0/trace_pipe_raw" dev="tracefs" ino=4293 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=file permissive=1 [ 124.390061][ T5777] usb 3-1: dvb_usb_v2: found a 'E3C EC168 reference design' in warm state [ 124.426370][ T5777] usb 3-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 124.428659][ T5777] dvbdev: DVB: registering new adapter (E3C EC168 reference design) [ 124.428706][ T5777] usb 3-1: media controller created [ 124.475809][ T5777] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 124.551136][ T6402] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 124.553797][ T6402] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 124.603143][ T5777] i2c i2c-1: ec100: i2c rd failed=-71 reg=33 [ 124.657605][ T5777] usb 3-1: USB disconnect, device number 7 [ 127.277040][ T30] kauditd_printk_skb: 5 callbacks suppressed [ 127.277056][ T30] audit: type=1400 audit(1790777835.321:465): avc: denied { read write } for pid=6427 comm="syz.0.151" name="fuse" dev="devtmpfs" ino=99 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fuse_device_t tclass=chr_file permissive=1 [ 127.277404][ T30] audit: type=1400 audit(1790777835.321:466): avc: denied { open } for pid=6427 comm="syz.0.151" path="/dev/fuse" dev="devtmpfs" ino=99 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fuse_device_t tclass=chr_file permissive=1 [ 127.278563][ T30] audit: type=1400 audit(1790777835.321:467): avc: denied { mounton } for pid=6427 comm="syz.0.151" path="/34/file0" dev="tmpfs" ino=201 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 127.312929][ T1306] ieee802154 phy0 wpan0: encryption failed: -22 [ 127.312975][ T1306] ieee802154 phy1 wpan1: encryption failed: -22 [ 127.414224][ T30] audit: type=1400 audit(1790777835.461:468): avc: denied { mount } for pid=6427 comm="syz.0.151" name="/" dev="fuse" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=filesystem permissive=1 [ 127.494800][ T30] audit: type=1400 audit(1790777835.541:469): avc: denied { unmount } for pid=5595 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=filesystem permissive=1 [ 128.449948][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 128.531359][ T5673] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 128.691857][ T5673] usb 3-1: unable to get BOS descriptor or descriptor too short [ 128.691899][ T5673] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 128.692819][ T5673] usb 3-1: config 0 has no interfaces? [ 128.824396][ T5673] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 128.824422][ T5673] usb 3-1: Product: syz [ 128.824435][ T5673] usb 3-1: Manufacturer: syz [ 128.824447][ T5673] usb 3-1: SerialNumber: syz [ 128.827174][ T5673] usb 3-1: config 0 descriptor?? [ 128.949628][ T6447] smc: net device team0 applied user defined pnetid SYZ2 [ 128.963263][ T10] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 129.239984][ T10] usb 2-1: Using ep0 maxpacket: 16 [ 129.243886][ T10] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= f.89 [ 129.286683][ T10] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 129.286793][ T10] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 129.302779][ T6447] smc: removing net device team0 with user defined pnetid SYZ2 [ 129.319038][ T6447] team0 (unregistering): Port device team_slave_0 removed [ 129.329029][ T6447] team0 (unregistering): Port device team_slave_1 removed [ 129.359851][ T10] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 129.359877][ T10] usb 2-1: SerialNumber: syz [ 129.391703][ T10] usb 2-1: 0:2 : does not exist [ 129.429120][ T5707] usb 3-1: USB disconnect, device number 8 [ 129.488038][ T6450] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 130.424650][ T30] audit: type=1400 audit(1790777838.471:470): avc: denied { create } for pid=6458 comm="syz.0.155" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 130.427921][ T30] audit: type=1400 audit(1790777838.471:471): avc: denied { bind } for pid=6458 comm="syz.0.155" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 130.477541][ T30] audit: type=1400 audit(1790777838.521:472): avc: denied { setopt } for pid=6458 comm="syz.0.155" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 130.529880][ T10] usb 2-1: 5:0: cannot get min/max values for control 3 (id 5) [ 130.570184][ T5673] usb 3-1: new high-speed USB device number 9 using dummy_hcd [ 130.589846][ T5718] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 130.614138][ T10] usb 2-1: USB disconnect, device number 5 [ 130.657061][ T6040] udevd[6040]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 130.749831][ T5718] usb 5-1: Using ep0 maxpacket: 32 [ 130.750322][ T5718] usb 5-1: New USB device found, idVendor=05ac, idProduct=021c, bcdDevice= 0.00 [ 130.752040][ T5718] usb 5-1: config 0 interface 0 altsetting 8 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 130.752069][ T5718] usb 5-1: config 0 interface 0 altsetting 8 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 130.752093][ T5718] usb 5-1: config 0 interface 0 has no altsetting 0 [ 130.752127][ T5718] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 130.755906][ T5718] usb 5-1: config 0 descriptor?? [ 130.789858][ T30] audit: type=1400 audit(1790777838.831:473): avc: denied { mount } for pid=6468 comm="syz.0.166" name="/" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=filesystem permissive=1 [ 130.836968][ T30] audit: type=1400 audit(1790777838.881:474): avc: denied { unmount } for pid=5595 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=filesystem permissive=1 [ 131.060094][ T5673] usb 3-1: new full-speed USB device number 10 using dummy_hcd [ 131.175640][ T5718] apple 0003:05AC:021C.0003: Fn key not found (Apple Wireless Keyboard clone?), disabling Fn key handling [ 131.176910][ T5718] input: HID 05ac:021c as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/0003:05AC:021C.0003/input/input7 [ 131.220978][ T5673] usb 3-1: New USB device found, idVendor=0d8c, idProduct=000e, bcdDevice=8e.8f [ 131.221824][ T5673] usb 3-1: config 0 has an invalid interface number: 8 but max is 0 [ 131.221843][ T5673] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 131.221859][ T5673] usb 3-1: config 0 has no interface number 0 [ 131.221882][ T5673] usb 3-1: config 0 interface 8 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 131.223210][ T5673] usb 3-1: New USB device strings: Mfr=0, Product=24, SerialNumber=3 [ 131.223230][ T5673] usb 3-1: Product: syz [ 131.223242][ T5673] usb 3-1: SerialNumber: syz [ 131.225543][ T5673] usb 3-1: config 0 descriptor?? [ 131.301030][ T5673] usbhid 3-1:0.8: couldn't find an input interrupt endpoint [ 131.302845][ T5718] apple 0003:05AC:021C.0003: offset (1) exceeds report_count (1) [ 131.303017][ T5718] apple 0003:05AC:021C.0003: offset (2) exceeds report_count (1) [ 131.303035][ T5718] apple 0003:05AC:021C.0003: offset (3) exceeds report_count (1) [ 131.303051][ T5718] apple 0003:05AC:021C.0003: offset (4) exceeds report_count (1) [ 131.303066][ T5718] apple 0003:05AC:021C.0003: offset (5) exceeds report_count (1) [ 131.303081][ T5718] apple 0003:05AC:021C.0003: offset (39) exceeds report_count (1) [ 131.303095][ T5718] apple 0003:05AC:021C.0003: offset (9) exceeds report_count (1) [ 131.303110][ T5718] apple 0003:05AC:021C.0003: offset (25) exceeds report_count (1) [ 131.370495][ T25] usb 2-1: new full-speed USB device number 6 using dummy_hcd [ 131.405150][ T5718] apple 0003:05AC:021C.0003: offset (3) exceeds report_count (1) [ 131.463149][ T5718] apple 0003:05AC:021C.0003: input,hidraw0: USB HID v0.00 Joystick [HID 05ac:021c] on usb-dummy_hcd.4-1/input0 [ 131.478965][ T5718] usb 5-1: USB disconnect, device number 5 [ 131.526740][ T25] usb 2-1: unable to get BOS descriptor or descriptor too short [ 131.527377][ T25] usb 2-1: not running at top speed; connect to a high speed hub [ 131.527401][ T25] usb 2-1: New USB device found, idVendor=8086, idProduct=0ad2, bcdDevice= 0.00 [ 131.528467][ T25] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 131.539609][ T25] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=0 [ 131.539633][ T25] usb 2-1: Product: syz [ 131.539646][ T25] usb 2-1: Manufacturer: syz [ 131.586026][ T5718] apple 0003:05AC:021C.0003: offset (3) exceeds report_count (1) [ 131.606534][ T6480] fido_id[6480]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.4/usb5/5-1/report_descriptor': No such file or directory [ 131.642631][ T25] uvcvideo 2-1:1.0: Found UVC 1.00 device syz (8086:0ad2) [ 131.909534][ T6491] jffs2: notice: (6491) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 131.978421][ T6494] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 131.978765][ T6494] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 132.012620][ T25] uvcvideo 2-1:1.0: UVC non compliance - GET_DEF(PROBE) not supported. Enabling workaround. [ 132.013204][ T25] uvcvideo 2-1:1.1: No frame descriptor found for the default format. [ 132.013220][ T25] uvcvideo 2-1:1.1: Failed to initialize the device (-22). [ 132.013651][ T25] uvcvideo 2-1:1.0: probe with driver uvcvideo failed with error -22 [ 132.299884][ T25] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 132.449949][ T25] usb 5-1: Using ep0 maxpacket: 16 [ 132.450435][ T25] usb 5-1: New USB device found, idVendor=0db0, idProduct=5581, bcdDevice=f9.22 [ 132.452804][ T25] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 132.452817][ T25] usb 5-1: Product: syz [ 132.452826][ T25] usb 5-1: Manufacturer: syz [ 132.452834][ T25] usb 5-1: SerialNumber: syz [ 133.612760][ T5673] usb 3-1: USB disconnect, device number 10 [ 137.468518][ T25] usb 5-1: dvb_usb_v2: found a 'MSI Mega Sky 55801 DVB-T USB2.0' in warm state [ 137.481101][ T25] usb 5-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 137.481365][ T25] dvbdev: DVB: registering new adapter (MSI Mega Sky 55801 DVB-T USB2.0) [ 137.481392][ T25] usb 5-1: media controller created [ 137.485863][ T25] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 137.525182][ T25] zl10353_read_register: readreg error (reg=127, ret==-32) [ 137.549925][ T25] dvb_usb_gl861 5-1:157.0: probe with driver dvb_usb_gl861 failed with error -5 [ 188.747070][ T1306] ieee802154 phy0 wpan0: encryption failed: -22 [ 188.747115][ T1306] ieee802154 phy1 wpan1: encryption failed: -22 [ 250.180645][ T1306] ieee802154 phy0 wpan0: encryption failed: -22 [ 250.180677][ T1306] ieee802154 phy1 wpan1: encryption failed: -22 [ 282.180983][ T32] INFO: task jbd2/sda1-8:4929 blocked in I/O wait for more than 143 seconds. [ 282.181009][ T32] Not tainted syzkaller #0 [ 282.181018][ T32] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 282.181025][ T32] task:jbd2/sda1-8 state:D stack:24952 pid:4929 tgid:4929 ppid:2 task_flags:0x240040 flags:0x00080000 [ 282.181081][ T32] Call Trace: [ 282.181088][ T32] [ 282.181099][ T32] __schedule+0x1259/0x6920 [ 282.181133][ T32] ? __lock_acquire+0x5c0/0x1f40 [ 282.181165][ T32] ? lock_acquire+0x1d1/0x380 [ 282.181187][ T32] ? __pfx___schedule+0x10/0x10 [ 282.181211][ T32] ? find_held_lock+0x2b/0x80 [ 282.181238][ T32] ? schedule+0x225/0x2c0 [ 282.181266][ T32] schedule+0xdd/0x2c0 [ 282.181289][ T32] io_schedule+0x8a/0xf0 [ 282.181316][ T32] bit_wait_io+0xd/0xe0 [ 282.181333][ T32] __wait_on_bit+0x65/0x180 [ 282.181351][ T32] ? __pfx_bit_wait_io+0x10/0x10 [ 282.181370][ T32] out_of_line_wait_on_bit+0xdc/0x110 [ 282.181389][ T32] ? __pfx_out_of_line_wait_on_bit+0x10/0x10 [ 282.181410][ T32] ? __pfx_wake_bit_function+0x10/0x10 [ 282.181430][ T32] ? __pfx___might_resched+0x10/0x10 [ 282.181452][ T32] __wait_on_buffer+0x64/0x70 [ 282.181472][ T32] jbd2_journal_commit_transaction+0x37ef/0x6700 [ 282.181519][ T32] ? __pfx_jbd2_journal_commit_transaction+0x10/0x10 [ 282.181547][ T32] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 282.181576][ T32] ? debug_object_deactivate+0x2e4/0x3b0 [ 282.181603][ T32] ? __pfx_debug_object_deactivate+0x10/0x10 [ 282.181630][ T32] ? _raw_spin_lock_irqsave+0x52/0x60 [ 282.181657][ T32] ? find_held_lock+0x2b/0x80 [ 282.181682][ T32] ? __try_to_del_timer_sync+0x107/0x160 [ 282.181720][ T32] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 282.181762][ T32] ? __timer_delete_sync+0x151/0x1c0 [ 282.181786][ T32] kjournald2+0x200/0x760 [ 282.181820][ T32] ? __pfx_kjournald2+0x10/0x10 [ 282.181846][ T32] ? find_held_lock+0x2b/0x80 [ 282.181871][ T32] ? __kthread_parkme+0xbb/0x230 [ 282.181893][ T32] ? rcu_is_watching+0x13/0xc0 [ 282.181919][ T32] ? __pfx_autoremove_wake_function+0x10/0x10 [ 282.181938][ T32] ? __kthread_parkme+0x18f/0x230 [ 282.181961][ T32] ? kthread+0x13a/0x450 [ 282.181984][ T32] ? __pfx_kjournald2+0x10/0x10 [ 282.182007][ T32] kthread+0x373/0x450 [ 282.182031][ T32] ? __pfx_kthread+0x10/0x10 [ 282.182056][ T32] ret_from_fork+0x730/0xd60 [ 282.182079][ T32] ? __pfx_ret_from_fork+0x10/0x10 [ 282.182102][ T32] ? __switch_to+0x800/0x10f0 [ 282.182128][ T32] ? __pfx_kthread+0x10/0x10 [ 282.182154][ T32] ret_from_fork_asm+0x1a/0x30 [ 282.182187][ T32] [ 282.182203][ T32] INFO: task syz-executor:5584 blocked in I/O wait for more than 143 seconds. [ 282.182216][ T32] Not tainted syzkaller #0 [ 282.182225][ T32] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 282.182232][ T32] task:syz-executor state:D stack:23032 pid:5584 tgid:5584 ppid:5583 task_flags:0x440100 flags:0x00080000 [ 282.182282][ T32] Call Trace: [ 282.182287][ T32] [ 282.182297][ T32] __schedule+0x1259/0x6920 [ 282.182967][ T32] ? __lock_acquire+0x5c0/0x1f40 [ 282.183001][ T32] ? lock_acquire+0x1d1/0x380 [ 282.183023][ T32] ? __pfx___schedule+0x10/0x10 [ 282.183048][ T32] ? find_held_lock+0x2b/0x80 [ 282.183073][ T32] ? schedule+0x225/0x2c0 [ 282.183103][ T32] schedule+0xdd/0x2c0 [ 282.183129][ T32] io_schedule+0x8a/0xf0 [ 282.183156][ T32] bit_wait_io+0xd/0xe0 [ 282.183173][ T32] __wait_on_bit+0x65/0x180 [ 282.183191][ T32] ? __pfx_bit_wait_io+0x10/0x10 [ 282.183210][ T32] out_of_line_wait_on_bit+0xdc/0x110 [ 282.183229][ T32] ? __pfx_out_of_line_wait_on_bit+0x10/0x10 [ 282.183248][ T32] ? __pfx_wake_bit_function+0x10/0x10 [ 282.183273][ T32] do_get_write_access+0x836/0x11e0 [ 282.183306][ T32] jbd2_journal_get_write_access+0x1d6/0x280 [ 282.183331][ T32] __ext4_journal_get_write_access+0x277/0x380 [ 282.183362][ T32] ext4_reserve_inode_write+0x1b7/0x330 [ 282.183395][ T32] __ext4_mark_inode_dirty+0x18f/0x910 [ 282.183423][ T32] ? kmem_cache_alloc_noprof+0x2d5/0x6a0 [ 282.183446][ T32] ? __pfx___ext4_mark_inode_dirty+0x10/0x10 [ 282.183473][ T32] ? trace_jbd2_handle_start+0x83/0x240 [ 282.183498][ T32] ? jbd2__journal_start+0xf7/0x6b0 [ 282.183522][ T32] ? __ext4_journal_start_sb+0x314/0x610 [ 282.183545][ T32] ? __ext4_journal_start_sb+0x17b/0x610 [ 282.183569][ T32] ? ext4_dirty_inode+0xa1/0x130 [ 282.183588][ T32] ? __pfx_ext4_dirty_inode+0x10/0x10 [ 282.183606][ T32] ext4_dirty_inode+0xd9/0x130 [ 282.183622][ T32] ? rcu_is_watching+0x13/0xc0 [ 282.183648][ T32] __mark_inode_dirty+0x1f3/0x16e0 [ 282.183675][ T32] file_update_time_flags+0x49c/0x520 [ 282.183697][ T32] ext4_page_mkwrite+0x324/0x1860 [ 282.183722][ T32] ? __pfx_ext4_page_mkwrite+0x10/0x10 [ 282.183740][ T32] ? __pfx_vm_normal_page+0x10/0x10 [ 282.183768][ T32] ? find_held_lock+0x2b/0x80 [ 282.183805][ T32] ? rcu_read_unlock+0x2d/0xb0 [ 282.183825][ T32] do_page_mkwrite+0x17a/0x440 [ 282.183848][ T32] do_wp_page+0x9ed/0x45c0 [ 282.183878][ T32] ? lock_acquire+0x1d1/0x380 [ 282.183897][ T32] ? __pfx_do_wp_page+0x10/0x10 [ 282.183921][ T32] ? lock_acquire+0x1d1/0x380 [ 282.183941][ T32] ? do_raw_spin_lock+0x128/0x260 [ 282.183964][ T32] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 282.183995][ T32] __handle_mm_fault+0x1cd2/0x2f60 [ 282.184026][ T32] ? lock_vma_under_rcu+0x11d/0x590 [ 282.184054][ T32] ? __pfx___handle_mm_fault+0x10/0x10 [ 282.184086][ T32] ? lock_vma_under_rcu+0x17c/0x590 [ 282.184127][ T32] handle_mm_fault+0x363/0xa20 [ 282.184159][ T32] do_user_addr_fault+0x59c/0x12f0 [ 282.184191][ T32] exc_page_fault+0x6f/0xd0 [ 282.184210][ T32] asm_exc_page_fault+0x26/0x30 [ 282.184229][ T32] RIP: 0033:0x7ff4eaa701e3 [ 282.184243][ T32] RSP: 002b:00007ffec20b2fe0 EFLAGS: 00010206 [ 282.184258][ T32] RAX: 00007ff4e7df93c8 RBX: 00007ffec20b3110 RCX: 0000000000000000 [ 282.184270][ T32] RDX: 00007ff4e7df93c4 RSI: 0000000000000008 RDI: 00007ffec20b3110 [ 282.184281][ T32] RBP: 00000000000003e6 R08: 0000000000000000 R09: 0000000000000000 [ 282.184291][ T32] R10: 00007ffec20b30f0 R11: 0000000000000000 R12: 0000000000000000 [ 282.184302][ T32] R13: 0000000000006c38 R14: ffffffffffff93c8 R15: 0000000000000000 [ 282.184327][ T32] [ 282.184369][ T32] INFO: task syz.1.169:6477 blocked in I/O wait for more than 143 seconds. [ 282.184382][ T32] Not tainted syzkaller #0 [ 282.184391][ T32] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 282.184414][ T32] task:syz.1.169 state:D stack:27128 pid:6477 tgid:6477 ppid:5603 task_flags:0x440040 flags:0x00080002 [ 282.184467][ T32] Call Trace: [ 282.184472][ T32] [ 282.184479][ T32] __schedule+0x1259/0x6920 [ 282.184497][ T32] ? __lock_acquire+0x5c0/0x1f40 [ 282.184515][ T32] ? lock_acquire+0x1d1/0x380 [ 282.184528][ T32] ? __pfx___schedule+0x10/0x10 [ 282.184544][ T32] ? find_held_lock+0x2b/0x80 [ 282.184561][ T32] ? schedule+0x225/0x2c0 [ 282.184580][ T32] schedule+0xdd/0x2c0 [ 282.184596][ T32] io_schedule+0x8a/0xf0 [ 282.184613][ T32] bit_wait_io+0xd/0xe0 [ 282.184623][ T32] __wait_on_bit+0x65/0x180 [ 282.184634][ T32] ? __pfx_bit_wait_io+0x10/0x10 [ 282.184646][ T32] out_of_line_wait_on_bit+0xdc/0x110 [ 282.184657][ T32] ? __pfx_out_of_line_wait_on_bit+0x10/0x10 [ 282.184670][ T32] ? __pfx_wake_bit_function+0x10/0x10 [ 282.184684][ T32] do_get_write_access+0x836/0x11e0 [ 282.184704][ T32] jbd2_journal_get_write_access+0x1d6/0x280 [ 282.184721][ T32] __ext4_journal_get_write_access+0x277/0x380 [ 282.184739][ T32] ext4_reserve_inode_write+0x1b7/0x330 [ 282.184764][ T32] __ext4_mark_inode_dirty+0x18f/0x910 [ 282.184782][ T32] ? kmem_cache_alloc_noprof+0x2d5/0x6a0 [ 282.184796][ T32] ? __pfx___ext4_mark_inode_dirty+0x10/0x10 [ 282.184813][ T32] ? trace_jbd2_handle_start+0x83/0x240 [ 282.184828][ T32] ? jbd2__journal_start+0xf7/0x6b0 [ 282.184843][ T32] ? __ext4_journal_start_sb+0x314/0x610 [ 282.184859][ T32] ? __ext4_journal_start_sb+0x17b/0x610 [ 282.184875][ T32] ? ext4_dirty_inode+0xa1/0x130 [ 282.184886][ T32] ? __pfx_ext4_dirty_inode+0x10/0x10 [ 282.184896][ T32] ext4_dirty_inode+0xd9/0x130 [ 282.184906][ T32] ? rcu_is_watching+0x13/0xc0 [ 282.184922][ T32] __mark_inode_dirty+0x1f3/0x16e0 [ 282.184937][ T32] file_update_time_flags+0x49c/0x520 [ 282.184950][ T32] ext4_page_mkwrite+0x324/0x1860 [ 282.184964][ T32] ? __pfx_ext4_page_mkwrite+0x10/0x10 [ 282.184979][ T32] do_page_mkwrite+0x17a/0x440 [ 282.184993][ T32] do_fault+0x659/0x1830 [ 282.185008][ T32] ? __pfx_filemap_map_pages+0x10/0x10 [ 282.185025][ T32] ? __pfx_do_fault+0x10/0x10 [ 282.185039][ T32] ? rcu_read_unlock+0x2d/0xb0 [ 282.185049][ T32] ? rcu_read_unlock+0x2d/0xb0 [ 282.185060][ T32] ? __pte_offset_map+0x179/0x310 [ 282.185075][ T32] __handle_mm_fault+0x150b/0x2f60 [ 282.185095][ T32] ? lock_vma_under_rcu+0x11d/0x590 [ 282.185112][ T32] ? __pfx___handle_mm_fault+0x10/0x10 [ 282.185131][ T32] ? lock_vma_under_rcu+0x17c/0x590 [ 282.185156][ T32] handle_mm_fault+0x363/0xa20 [ 282.185176][ T32] do_user_addr_fault+0x59c/0x12f0 [ 282.185195][ T32] exc_page_fault+0x6f/0xd0 [ 282.185206][ T32] asm_exc_page_fault+0x26/0x30 [ 282.185217][ T32] RIP: 0033:0x7f6650872f32 [ 282.185225][ T32] RSP: 002b:00007fff4b629370 EFLAGS: 00010202 [ 282.185234][ T32] RAX: 000000000000a008 RBX: 00007f6651755720 RCX: 0000000000000000 [ 282.185240][ T32] RDX: 0000001b3291a000 RSI: 0000000000000008 RDI: 00007f6651755720 [ 282.185248][ T32] RBP: 000000000000024f R08: 00007f6650c10000 R09: 00007f6650c26038 [ 282.185256][ T32] R10: 0000000000000003 R11: 0000000000000003 R12: ffffffff8bceac25 [ 282.185262][ T32] R13: 00007f6650c26038 R14: 0000000000000043 R15: ffffffffffff6000 [ 282.185271][ T32] ? format_decode+0xd5/0xdd0 [ 282.185292][ T32] [ 282.185296][ T32] INFO: task syz.4.174:6497 blocked in I/O wait for more than 143 seconds. [ 282.185304][ T32] Not tainted syzkaller #0 [ 282.185309][ T32] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 282.185313][ T32] task:syz.4.174 state:D stack:27128 pid:6497 tgid:6497 ppid:5606 task_flags:0x440040 flags:0x00080002 [ 282.185341][ T32] Call Trace: [ 282.185344][ T32] [ 282.185350][ T32] __schedule+0x1259/0x6920 [ 282.185366][ T32] ? __lock_acquire+0x5c0/0x1f40 [ 282.185384][ T32] ? lock_acquire+0x1d1/0x380 [ 282.185397][ T32] ? __pfx___schedule+0x10/0x10 [ 282.185413][ T32] ? find_held_lock+0x2b/0x80 [ 282.185430][ T32] ? schedule+0x225/0x2c0 [ 282.185448][ T32] schedule+0xdd/0x2c0 [ 282.185465][ T32] io_schedule+0x8a/0xf0 [ 282.185482][ T32] bit_wait_io+0xd/0xe0 [ 282.185492][ T32] __wait_on_bit+0x65/0x180 [ 282.185502][ T32] ? __pfx_bit_wait_io+0x10/0x10 [ 282.185514][ T32] out_of_line_wait_on_bit+0xdc/0x110 [ 282.185525][ T32] ? __pfx_out_of_line_wait_on_bit+0x10/0x10 [ 282.185538][ T32] ? __pfx_wake_bit_function+0x10/0x10 [ 282.185553][ T32] do_get_write_access+0x836/0x11e0 [ 282.185572][ T32] jbd2_journal_get_write_access+0x1d6/0x280 [ 282.185588][ T32] __ext4_journal_get_write_access+0x277/0x380 [ 282.185607][ T32] ext4_reserve_inode_write+0x1b7/0x330 [ 282.185626][ T32] __ext4_mark_inode_dirty+0x18f/0x910 [ 282.185644][ T32] ? kmem_cache_alloc_noprof+0x2d5/0x6a0 [ 282.185658][ T32] ? __pfx___ext4_mark_inode_dirty+0x10/0x10 [ 282.185676][ T32] ? trace_jbd2_handle_start+0x83/0x240 [ 282.185690][ T32] ? jbd2__journal_start+0xf7/0x6b0 [ 282.185706][ T32] ? __ext4_journal_start_sb+0x314/0x610 [ 282.185721][ T32] ? __ext4_journal_start_sb+0x17b/0x610 [ 282.185737][ T32] ? ext4_dirty_inode+0xa1/0x130 [ 282.185752][ T32] ? __pfx_ext4_dirty_inode+0x10/0x10 [ 282.185762][ T32] ext4_dirty_inode+0xd9/0x130 [ 282.185772][ T32] ? rcu_is_watching+0x13/0xc0 [ 282.185787][ T32] __mark_inode_dirty+0x1f3/0x16e0 [ 282.185803][ T32] file_update_time_flags+0x49c/0x520 [ 282.185816][ T32] ext4_page_mkwrite+0x324/0x1860 [ 282.185830][ T32] ? __pfx_ext4_page_mkwrite+0x10/0x10 [ 282.185844][ T32] do_page_mkwrite+0x17a/0x440 [ 282.185859][ T32] do_fault+0x659/0x1830 [ 282.185873][ T32] ? __pfx_filemap_map_pages+0x10/0x10 [ 282.185889][ T32] ? __pfx___thp_vma_allowable_orders+0x10/0x10 [ 282.185908][ T32] ? __pfx_do_fault+0x10/0x10 [ 282.185922][ T32] ? pgd_none+0x9f/0xe0 [ 282.185938][ T32] ? __pfx_pgd_none+0x10/0x10 [ 282.185955][ T32] ? lock_acquire+0x1d1/0x380 [ 282.185969][ T32] __handle_mm_fault+0x150b/0x2f60 [ 282.185989][ T32] ? lock_vma_under_rcu+0x11d/0x590 [ 282.186005][ T32] ? __pfx___handle_mm_fault+0x10/0x10 [ 282.186025][ T32] ? lock_vma_under_rcu+0x17c/0x590 [ 282.186050][ T32] handle_mm_fault+0x363/0xa20 [ 282.186070][ T32] do_user_addr_fault+0x59c/0x12f0 [ 282.186088][ T32] exc_page_fault+0x6f/0xd0 [ 282.186100][ T32] asm_exc_page_fault+0x26/0x30 [ 282.186110][ T32] RIP: 0033:0x7facc6a72809 [ 282.186118][ T32] RSP: 002b:00007ffe407eb2c0 EFLAGS: 00010202 [ 282.186126][ T32] RAX: 0000001b32a24000 RBX: 0000000000000000 RCX: 00000000003ffde8 [ 282.186133][ T32] RDX: 0000001b32a23ffc RSI: 00000000003ffde8 RDI: 00007facc7955700 [ 282.186140][ T32] RBP: 0000000000000000 R08: 0000000000000000 R09: 00007facc6e12000 [ 282.186146][ T32] R10: 00007facc7955700 R11: 0000000000000000 R12: 0000000000000000 [ 282.186153][ T32] R13: 000000000001464d R14: ffffffff81af7af6 R15: 00007facc7955720 [ 282.186160][ T32] ? fpregs_restore_userregs+0x1c6/0x3f0 [ 282.186183][ T32] [ 282.186187][ T32] INFO: task syz.3.175:6499 blocked in I/O wait for more than 143 seconds. [ 282.186195][ T32] Not tainted syzkaller #0 [ 282.186200][ T32] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 282.186204][ T32] task:syz.3.175 state:D stack:27296 pid:6499 tgid:6499 ppid:5597 task_flags:0x440040 flags:0x00080002 [ 282.186231][ T32] Call Trace: [ 282.186234][ T32] [ 282.186240][ T32] __schedule+0x1259/0x6920 [ 282.186259][ T32] ? __lock_acquire+0x5c0/0x1f40 [ 282.186277][ T32] ? lock_acquire+0x1d1/0x380 [ 282.186290][ T32] ? __pfx___schedule+0x10/0x10 [ 282.186306][ T32] ? find_held_lock+0x2b/0x80 [ 282.186323][ T32] ? schedule+0x225/0x2c0 [ 282.186341][ T32] schedule+0xdd/0x2c0 [ 282.186358][ T32] io_schedule+0x8a/0xf0 [ 282.186375][ T32] bit_wait_io+0xd/0xe0 [ 282.186385][ T32] __wait_on_bit+0x65/0x180 [ 282.186395][ T32] ? __pfx_bit_wait_io+0x10/0x10 [ 282.186407][ T32] out_of_line_wait_on_bit+0xdc/0x110 [ 282.186418][ T32] ? __pfx_out_of_line_wait_on_bit+0x10/0x10 [ 282.186431][ T32] ? __pfx_wake_bit_function+0x10/0x10 [ 282.186446][ T32] do_get_write_access+0x836/0x11e0 [ 282.186465][ T32] jbd2_journal_get_write_access+0x1d6/0x280 [ 282.186481][ T32] __ext4_journal_get_write_access+0x277/0x380 [ 282.186500][ T32] ext4_reserve_inode_write+0x1b7/0x330 [ 282.186519][ T32] __ext4_mark_inode_dirty+0x18f/0x910 [ 282.186537][ T32] ? kmem_cache_alloc_noprof+0x2d5/0x6a0 [ 282.186551][ T32] ? __pfx___ext4_mark_inode_dirty+0x10/0x10 [ 282.186569][ T32] ? trace_jbd2_handle_start+0x83/0x240 [ 282.186583][ T32] ? jbd2__journal_start+0xf7/0x6b0 [ 282.186599][ T32] ? __ext4_journal_start_sb+0x314/0x610 [ 282.186614][ T32] ? __ext4_journal_start_sb+0x17b/0x610 [ 282.186630][ T32] ? ext4_dirty_inode+0xa1/0x130 [ 282.186641][ T32] ? __pfx_ext4_dirty_inode+0x10/0x10 [ 282.186651][ T32] ext4_dirty_inode+0xd9/0x130 [ 282.186661][ T32] ? rcu_is_watching+0x13/0xc0 [ 282.186677][ T32] __mark_inode_dirty+0x1f3/0x16e0 [ 282.186692][ T32] touch_atime+0x65f/0x770 [ 282.186707][ T32] ext4_file_mmap_prepare+0x56d/0x670 [ 282.186724][ T32] ? __pfx_ext4_file_mmap_prepare+0x10/0x10 [ 282.186743][ T32] __mmap_region+0xe3c/0x32e0 [ 282.186761][ T32] ? __pfx___mmap_region+0x10/0x10 [ 282.186773][ T32] ? get_page_from_freelist+0x110d/0x35d0 [ 282.186786][ T32] ? bpf_ksym_find+0x128/0x1c0 [ 282.186804][ T32] ? __pfx_get_page_from_freelist+0x10/0x10 [ 282.186817][ T32] ? prepare_alloc_pages+0x1f0/0x5b0 [ 282.186838][ T32] ? lock_acquire+0x1d1/0x380 [ 282.186850][ T32] ? unwind_next_frame+0xbd/0x2090 [ 282.186868][ T32] ? lock_acquire+0x1d1/0x380 [ 282.186880][ T32] ? is_bpf_text_address+0x25/0x1a0 [ 282.186896][ T32] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 282.186908][ T32] ? find_held_lock+0x2b/0x80 [ 282.186924][ T32] ? is_bpf_text_address+0x8a/0x1a0 [ 282.186939][ T32] ? is_bpf_text_address+0x8a/0x1a0 [ 282.186974][ T32] ? __pfx_mt_find+0x10/0x10 [ 282.186989][ T32] mmap_region+0x5a8/0x6d0 [ 282.187003][ T32] ? __pfx_mmap_region+0x10/0x10 [ 282.187015][ T32] ? shmem_mapping+0xd/0x50 [ 282.187027][ T32] ? __pfx_memfd_check_seals_mmap+0x10/0x10 [ 282.187044][ T32] ? security_mmap_addr+0x71/0x1e0 [ 282.187060][ T32] ? __get_unmapped_area+0x255/0x3e0 [ 282.187076][ T32] do_mmap+0x12c7/0x1c30 [ 282.187094][ T32] ? lock_acquire+0x1d1/0x380 [ 282.187106][ T32] ? __pfx_do_mmap+0x10/0x10 [ 282.187121][ T32] ? __pfx___might_resched+0x10/0x10 [ 282.187133][ T32] ? bpf_lsm_current_getlsmprop_subj+0x9/0x10 [ 282.187144][ T32] ? security_current_getlsmprop_subj+0x6e/0x130 [ 282.187165][ T32] ? __pfx_down_write_killable+0x10/0x10 [ 282.187182][ T32] vm_mmap_pgoff+0x28d/0x470 [ 282.187198][ T32] ? __pfx_vm_mmap_pgoff+0x10/0x10 [ 282.187210][ T32] ? __fget_files+0x215/0x3d0 [ 282.187228][ T32] ? __fget_files+0x21f/0x3d0 [ 282.187246][ T32] ksys_mmap_pgoff+0x3cb/0x610 [ 282.187263][ T32] ? __pfx_ksys_mmap_pgoff+0x10/0x10 [ 282.187277][ T32] ? __do_sys_prctl+0x14e/0x2270 [ 282.187296][ T32] ? __pfx___do_sys_prctl+0x10/0x10 [ 282.187315][ T32] __x64_sys_mmap+0x125/0x190 [ 282.187330][ T32] do_syscall_64+0x123/0x790 [ 282.187344][ T32] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 282.187355][ T32] RIP: 0033:0x7fb02b99dec2 [ 282.187363][ T32] RSP: 002b:00007ffce1051138 EFLAGS: 00000206 ORIG_RAX: 0000000000000009 [ 282.187373][ T32] RAX: ffffffffffffffda RBX: 0000001b32564000 RCX: 00007fb02b99dec2 [ 282.187380][ T32] RDX: 0000000000000003 RSI: 00000000003c0000 RDI: 0000001b32564000 [ 282.187387][ T32] RBP: 0000000000100001 R08: 0000000000000004 R09: 0000000000040000 [ 282.187393][ T32] R10: 0000000000100001 R11: 0000000000000206 R12: 0000000000000027 [ 282.187400][ T32] R13: 00000000000927c0 R14: 0000000000020295 R15: 00007ffce1051410 [ 282.187414][ T32] [ 282.187419][ T32] [ 282.187419][ T32] Showing all locks held in the system: [ 282.187425][ T32] locks held by kworker/u8:1/13: 4, on CPU#0: [ 282.187433][ T32] #0: ffff888021ab0940 ((wq_completion)writeback){+.+.}-{0:0}, at: process_one_work+0x1466/0x1b10 [ 282.187467][ T32] #1: ffffc90000127d08 ((work_completion)(&(&wb->dwork)->work)){+.+.}-{0:0}, at: process_one_work+0xa2c/0x1b10 [ 282.187499][ T32] #2: ffff888035c0e0e8 (&type->s_umount_key#57){++++}-{4:4}, at: super_trylock_shared+0x21/0xf0 [ 282.187530][ T32] #3: ffff888035c0cc98 (&sbi->s_writepages_rwsem){++++}-{0:0}, at: do_writepages+0x278/0x600 [ 282.187559][ T32] locks held by khungtaskd/32: 1, last CPU#0: [ 282.187567][ T32] #0: ffffffff8edec5a0 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x3d/0x184 [ 282.187623][ T32] locks held by getty/5356: 2, on CPU#1: [ 282.187630][ T32] #0: ffff8880379bc0a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x24/0x80 [ 282.187658][ T32] #1: ffffc900032262e8 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x419/0x14e0 [ 282.187684][ T32] locks held by syz-executor/5584: 3, on CPU#0: [ 282.187691][ T32] #0: ffff888072775d08 (vm_lock){++++}-{0:0}, at: lock_vma_under_rcu+0x11d/0x590 [ 282.187722][ T32] #1: ffff888035c0e558 (sb_pagefaults){.+.+}-{0:0}, at: do_page_mkwrite+0x17a/0x440 [ 282.187752][ T32] #2: ffff8880377fc938 (jbd2_handle){++++}-{0:0}, at: start_this_handle+0xfa7/0x1390 [ 282.187789][ T32] locks held by syz.1.169/6477: 3, on CPU#0: [ 282.187796][ T32] #0: ffff8880366856c8 (vm_lock){++++}-{0:0}, at: lock_vma_under_rcu+0x11d/0x590 [ 282.187827][ T32] #1: ffff888035c0e558 (sb_pagefaults){.+.+}-{0:0}, at: do_page_mkwrite+0x17a/0x440 [ 282.187853][ T32] #2: ffff8880377fc938 (jbd2_handle){++++}-{0:0}, at: start_this_handle+0xfa7/0x1390 [ 282.187881][ T32] locks held by syz.4.174/6497: 3, on CPU#0: [ 282.187888][ T32] #0: ffff8880347fb6c8 (vm_lock){++++}-{0:0}, at: lock_vma_under_rcu+0x11d/0x590 [ 282.187918][ T32] #1: ffff888035c0e558 (sb_pagefaults){.+.+}-{0:0}, at: do_page_mkwrite+0x17a/0x440 [ 282.187945][ T32] #2: ffff8880377fc938 (jbd2_handle){++++}-{0:0}, at: start_this_handle+0xfa7/0x1390 [ 282.187972][ T32] locks held by syz.3.175/6499: 3, on CPU#0: [ 282.187979][ T32] #0: ffff88807d660f80 (&mm->mmap_lock){++++}-{4:4}, at: vm_mmap_pgoff+0x1f5/0x470 [ 282.188007][ T32] #1: ffff888035c0e460 (sb_writers#5){.+.+}-{0:0}, at: ext4_file_mmap_prepare+0x56d/0x670 [ 282.188038][ T32] #2: ffff8880377fc938 (jbd2_handle){++++}-{0:0}, at: start_this_handle+0xfa7/0x1390 [ 282.188065][ T32] [ 282.188068][ T32] ============================================= [ 282.188068][ T32] [ 282.188072][ T32] NMI backtrace for cpu 0 [ 282.188080][ T32] CPU: 0 UID: 0 PID: 32 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) [ 282.188092][ T32] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 282.188097][ T32] Call Trace: [ 282.188101][ T32] [ 282.188105][ T32] dump_stack_lvl+0x100/0x190 [ 282.188122][ T32] nmi_cpu_backtrace.cold+0x12d/0x151 [ 282.188141][ T32] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 282.188154][ T32] nmi_trigger_cpumask_backtrace+0x21f/0x2a0 [ 282.188172][ T32] sys_info+0x141/0x190 [ 282.188185][ T32] watchdog+0xcb1/0x1030 [ 282.188201][ T32] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 282.188219][ T32] ? __pfx_watchdog+0x10/0x10 [ 282.188232][ T32] ? __kthread_parkme+0x18f/0x230 [ 282.188249][ T32] ? kthread+0x13a/0x450 [ 282.188264][ T32] ? __pfx_watchdog+0x10/0x10 [ 282.188276][ T32] kthread+0x373/0x450 [ 282.188291][ T32] ? __pfx_kthread+0x10/0x10 [ 282.188308][ T32] ret_from_fork+0x730/0xd60 [ 282.188320][ T32] ? __pfx_ret_from_fork+0x10/0x10 [ 282.188333][ T32] ? __switch_to+0x800/0x10f0 [ 282.188349][ T32] ? __pfx_kthread+0x10/0x10 [ 282.188365][ T32] ret_from_fork_asm+0x1a/0x30 [ 282.188382][ T32] [ 282.188386][ T32] Sending NMI from CPU 0 to CPUs 1: [ 282.188418][ C1] NMI backtrace for cpu 1 [ 282.188429][ C1] CPU: 1 UID: 0 PID: 0 Comm: swapper/1 Not tainted syzkaller #0 PREEMPT(full) [ 282.188444][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 282.188452][ C1] RIP: 0010:pv_native_safe_halt+0xf/0x20 [ 282.188467][ C1] Code: 47 93 02 c3 cc cc cc cc 0f 1f 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 66 90 0f 00 2d 33 38 19 00 fb f4 0c 50 03 00 66 2e 0f 1f 84 00 00 00 00 00 66 90 90 90 90 90 90 [ 282.188479][ C1] RSP: 0018:ffffc900001a7e00 EFLAGS: 00000246 [ 282.188489][ C1] RAX: 000000000051def3 RBX: ffff88801f68cb00 RCX: ffffffff8bd28215 [ 282.188498][ C1] RDX: 0000000000000001 RSI: ffffffff8e38e957 RDI: ffffffff8c623980 [ 282.188507][ C1] RBP: ffffed1003ed1960 R08: 0000000000000001 R09: ffffed10170a67bd [ 282.188515][ C1] R10: ffff8880b8533deb R11: 0000000000000001 R12: 0000000000000000 [ 282.188523][ C1] R13: 0000000000000000 R14: 1ffff92000034fc4 R15: dffffc0000000000 [ 282.188533][ C1] FS: 0000000000000000(0000) GS:ffff888123c4f000(0000) knlGS:0000000000000000 [ 282.188547][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 282.188556][ C1] CR2: 000055d89c68c660 CR3: 000000000eb96000 CR4: 00000000003526f0 [ 282.188566][ C1] Call Trace: [ 282.188570][ C1] [ 282.188575][ C1] default_idle+0x9/0x10 [ 282.188590][ C1] default_idle_call+0x6c/0xb0 [ 282.188605][ C1] do_idle+0x3ae/0x5b0 [ 282.188622][ C1] ? finish_task_switch.isra.0+0x149/0x10d0 [ 282.188639][ C1] ? __pfx_do_idle+0x10/0x10 [ 282.188656][ C1] ? do_idle+0x390/0x5b0 [ 282.188673][ C1] cpu_startup_entry+0x4f/0x60 [ 282.188691][ C1] start_secondary+0x21d/0x2d0 [ 282.188705][ C1] ? __pfx_start_secondary+0x10/0x10 [ 282.188721][ C1] common_startup_64+0x13e/0x158 [ 282.188742][ C1] [ 282.189401][ T32] Kernel panic - not syncing: hung_task: blocked tasks [ 284.487059][ T32] CPU: 0 UID: 0 PID: 32 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) [ 284.496139][ T32] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 284.506165][ T32] Call Trace: [ 284.509431][ T32] [ 284.512341][ T32] dump_stack_lvl+0x100/0x190 [ 284.516999][ T32] vpanic+0x553/0x970 [ 284.520954][ T32] ? __pfx_vpanic+0x10/0x10 [ 284.525431][ T32] panic+0xd1/0xe0 [ 284.529122][ T32] ? __pfx_panic+0x10/0x10 [ 284.533511][ T32] ? wq_watchdog_touch+0xec/0x1a0 [ 284.538513][ T32] ? nmi_trigger_cpumask_backtrace+0x206/0x2a0 [ 284.544655][ T32] ? watchdog.cold+0x1ec/0x234 [ 284.549398][ T32] watchdog.cold+0x1fd/0x234 [ 284.553965][ T32] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 284.559750][ T32] ? __pfx_watchdog+0x10/0x10 [ 284.564411][ T32] ? __kthread_parkme+0x18f/0x230 [ 284.569410][ T32] ? kthread+0x13a/0x450 [ 284.573630][ T32] ? __pfx_watchdog+0x10/0x10 [ 284.578280][ T32] kthread+0x373/0x450 [ 284.582325][ T32] ? __pfx_kthread+0x10/0x10 [ 284.586900][ T32] ret_from_fork+0x730/0xd60 [ 284.591463][ T32] ? __pfx_ret_from_fork+0x10/0x10 [ 284.596560][ T32] ? __switch_to+0x800/0x10f0 [ 284.601211][ T32] ? __pfx_kthread+0x10/0x10 [ 284.605789][ T32] ret_from_fork_asm+0x1a/0x30 [ 284.610546][ T32] [ 284.613761][ T32] Kernel Offset: disabled [ 284.618062][ T32] Rebooting in 86400 seconds..