last executing test programs: 2.964044672s ago: executing program 2 (id=123): timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)) fcntl$lock(0xffffffffffffffff, 0x5, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) signalfd4(0xffffffffffffffff, &(0x7f0000000080)={[0x2]}, 0x8, 0x80000) 2.848169637s ago: executing program 2 (id=125): sendmsg$NFQNL_MSG_CONFIG(0xffffffffffffffff, 0x0, 0x48011) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000380)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f00000000c0)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = socket(0xa, 0x1, 0x0) setsockopt$inet6_group_source_req(r3, 0x29, 0x2e, 0x0, 0x0) socket(0xa, 0x3, 0x3a) setsockopt$inet6_MCAST_MSFILTER(r3, 0x29, 0x30, 0x0, 0x610) 2.848042157s ago: executing program 0 (id=126): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc\x00', 0x1df) mount(0x0, &(0x7f0000000080)='./proc\x00', 0x0, 0x0, 0x0) mkdir(&(0x7f0000000000)='myproc\x00', 0x1ff) mount(0x0, &(0x7f0000000200)='myproc\x00', 0x0, 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000400)='myproc/iomem\x00', 0x0, 0x0) read(r0, &(0x7f0000000500), 0xfa0) syz_clone3(&(0x7f0000000380)={0x2140280, 0x0, 0x0, 0x0, {0x20080021}, 0x0, 0x0, 0x0, &(0x7f0000000340)}, 0x58) openat(0xffffffffffffff9c, &(0x7f00000001c0)='myproc\x00', 0x280, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./config\x00', &(0x7f0000000080)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./config/usb_gadget/g1\x00', 0x1ff) r1 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./config/usb_gadget/g1/functions/midi.usb0/id\x00', 0x1, 0x0) write(r1, &(0x7f0000000180)='Mi', 0x2) r2 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./config/usb_gadget/g1/functions/midi.usb0/in_ports\x00', 0x1, 0x0) write(r2, &(0x7f0000000240)='2\n', 0x2) r3 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./config/usb_gadget/g1/functions/midi.usb0/out_ports\x00', 0x1, 0x0) write(r3, &(0x7f00000002c0)='2', 0x1) mkdirat(0xffffffffffffff9c, &(0x7f0000000300)='./config/usb_gadget/g1/configs/c.1\x00', 0x1ff) symlinkat(&(0x7f0000000100)='./config/usb_gadget/g1/functions/midi.usb0\x00', 0xffffffffffffff9c, &(0x7f0000000340)='./config/usb_gadget/g1/configs/c.1/midi.usb0\x00') r4 = openat(0xffffffffffffff9c, &(0x7f0000000380)='./config/usb_gadget/g1/UDC\x00', 0x1, 0x0) write(r4, &(0x7f00000003c0)='dummy_udc.0\n', 0xc) 2.817516134s ago: executing program 0 (id=127): mkdir(&(0x7f0000000100)='./sys_mount\x00', 0x0) mount(0x0, &(0x7f00000001c0)='./sys_mount\x00', &(0x7f00000003c0)='sysfs\x00', 0x10000, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./sys_mount/block/loop0/queue/scheduler\x00', 0x2, 0x0) write(r0, &(0x7f0000000300)='bfq', 0x3) 2.639423871s ago: executing program 0 (id=130): r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)) pipe2(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80000) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r3, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) pipe2(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) splice(r1, 0x0, r4, 0x0, 0x6, 0xc) futex(&(0x7f000000cffc)=0x4, 0x0, 0x4, 0x0, 0x0, 0x0) vmsplice(r2, &(0x7f0000000200)=[{&(0x7f0000001740)='\x00', 0x1}], 0x1, 0x6) sendmsg$NL80211_CMD_NEW_MPATH(r4, 0x0, 0x45) 2.587160643s ago: executing program 1 (id=134): prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x400000000008d}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000240)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x4000087, 0x2, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x66) 2.400970071s ago: executing program 3 (id=135): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sendmsg$TIPC_CMD_SET_LINK_PRI(0xffffffffffffffff, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8b18, 0x0) getsockopt$TIPC_DEST_DROPPABLE(0xffffffffffffffff, 0x10f, 0x81, &(0x7f0000000080), &(0x7f00000000c0)=0x4) add_key$user(&(0x7f00000003c0), &(0x7f0000000440), &(0x7f00000000c0), 0xc9, 0xfffffffffffffffd) mkdirat(0xffffffffffffff9c, &(0x7f0000000440)='./mnt\x00', 0x1ff) mount(&(0x7f0000000400), &(0x7f0000000000)='./mnt\x00', &(0x7f0000000480)='ecryptfs\x00', 0x0, &(0x7f0000000500)='ecryptfs_sig=syz,ecryptfs_fnek_sig=syz,ecryptfs_cipher=aes,ecryptfs_key_bytes=16\x00') 2.339536755s ago: executing program 3 (id=136): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)={{0x14}, [@NFT_MSG_NEWCHAIN={0x30, 0x3, 0xa, 0x101, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_ID={0x8, 0xb, 0x1, 0x0, 0x2}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_FLAGS={0x8, 0xa, 0x1, 0x0, 0x4}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}}, 0x58}}, 0x0) 2.293222225s ago: executing program 3 (id=137): r0 = syz_open_dev$usbfs(&(0x7f00000000c0), 0x204, 0x2) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x0, 0x11012, r0, 0x0) mremap(&(0x7f0000000000/0x9000)=nil, 0x600600, 0x200000, 0x3, &(0x7f0000a00000/0x600000)=nil) 2.211901302s ago: executing program 3 (id=138): mkdirat(0xffffffffffffff9c, &(0x7f00000002c0)='./file0\x00', 0x178) mount(&(0x7f0000000200)=@filename='mtd0\x00', &(0x7f0000000100)='./file0\x00', &(0x7f0000000300)='jffs2\x00', 0x800040, 0x0) chdir(&(0x7f0000000240)='./file0\x00') r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000840)='memory.events.local\x00', 0x275a, 0x0) r1 = openat(0xffffffffffffff9c, 0x0, 0x2, 0x0) r2 = openat$cgroup_ro(r1, 0x0, 0x275a, 0x0) write$binfmt_script(r2, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_ublk_setup_io_uring(0x20, &(0x7f0000000340)={0x0, 0xfffffffd, 0x80, 0x2, 0x27e}, 0x0, &(0x7f0000000180), &(0x7f0000000140)) getrandom(&(0x7f0000000240)=""/286, 0xffffff9a, 0x0) r3 = syz_create_resource$binfmt(&(0x7f0000000100)='./file1\x00') r4 = openat$binfmt(0xffffffffffffff9c, 0x0, 0x42, 0x1ff) close(r4) execveat$binfmt(0xffffffffffffff9c, r3, 0x0, &(0x7f00000005c0)={[], 0xf000}, 0x1000) getsockopt$sock_cred(r0, 0x1, 0x11, 0x0, 0x0) write$binfmt_script(r0, &(0x7f0000000040), 0x208e24b) 2.047132007s ago: executing program 2 (id=139): r0 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$sock_int(r0, 0x1, 0x8, 0x0, 0x0) r1 = socket$netlink(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_NEW(r1, &(0x7f0000000080)={0x0, 0x1f, &(0x7f0000000700)={&(0x7f0000000300)={0x34, r2, 0x1, 0x9, 0x25dfdbff, {0x25, 0x0, 0x700}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x34}, 0x1, 0x0, 0x0, 0x10}, 0x24004804) 1.995622857s ago: executing program 2 (id=140): setsockopt$sock_linger(0xffffffffffffffff, 0x1, 0x3c, 0x0, 0x0) setsockopt$SO_TIMESTAMPING(0xffffffffffffffff, 0x1, 0x41, 0x0, 0x0) sendmmsg$inet6(0xffffffffffffffff, 0x0, 0x0, 0x81) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x46, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000030c0)=ANY=[], 0xe8}, 0x1, 0x0, 0x0, 0x80}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f0000000100)='proc\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) write(r0, &(0x7f0000000000)='3', 0x4e) socket(0x2b, 0x805, 0x0) mount(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000040)='devpts\x00', 0x1, 0x0) 1.60799292s ago: executing program 1 (id=141): r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0xa8500, 0x97) pipe2$watch_queue(&(0x7f0000000380), 0x80) close_range(r0, 0xffffffffffffffff, 0x0) 1.60790958s ago: executing program 1 (id=142): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000540), 0xffffffffffffffff) r2 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000005f00)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000bc0)={0x0, 0x0, &(0x7f0000000b80)={&(0x7f0000000200)=ANY=[@ANYBLOB='T\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="01002cbd7000fbdbdf252100000008000300", @ANYRES32=r3, @ANYBLOB="38002d800a"], 0x54}, 0x1, 0x0, 0x0, 0x20040000}, 0x4044000) 1.60784428s ago: executing program 0 (id=143): r0 = socket$inet6(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000380)={@private1, 0x9c940000, 0x0, 0x3, 0xa, 0x1, 0x1}, 0x20) 1.60778351s ago: executing program 2 (id=144): syz_open_procfs(0x0, &(0x7f0000000540)='mounts\x00') epoll_create1(0x80000) pselect6(0x900, 0x0, 0x0, &(0x7f0000000240)={0x1f}, &(0x7f0000000280)={0x0, 0x3938700}, 0x0) 1.573980017s ago: executing program 1 (id=145): openat$tun(0xffffffffffffff9c, 0x0, 0x40241, 0x0) r0 = socket$inet6(0xa, 0x1, 0x0) setsockopt$inet6_MCAST_JOIN_GROUP(r0, 0x29, 0x6, &(0x7f0000000240)={0x14, {{0x29, 0x0, 0x2d, @remote}}}, 0x88) 1.565619119s ago: executing program 0 (id=146): syz_usb_connect(0x0, 0x3d, &(0x7f0000000240)=ANY=[@ANYBLOB="12010000bdce4208110f80106afc0000000109022b00010000000009043700022ee5cd0009058010ff037f790209050e0320000980070705ab0b78"], 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) 1.434002036s ago: executing program 1 (id=147): prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x400000000008d}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000240)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x4000087, 0x2, 0x0) write$P9_RSTATu(0xffffffffffffffff, 0x0, 0x62) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000340), 0x42101, 0x0) 1.433827656s ago: executing program 3 (id=148): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x5) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0xffffc000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x1ff) mount(0x0, &(0x7f00000000c0)='./proc\x00', &(0x7f0000000100)='proc\x00', 0x0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./proc/net/rpc/use-gss-proxy\x00', 0x1, 0x20) write(r3, &(0x7f0000000280)='1', 0x1) 1.424804098s ago: executing program 2 (id=149): syz_usb_connect$uac2(0x3, 0xcd, &(0x7f00000000c0)=ANY=[@ANYBLOB="12011001000000408c0d1400400001020301090286000301003003080b00020109200609040000000101200009240102000626000311240803010000000000000200010000000c24030402030103"], 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x0, 0x10012, r0, 0x0) 236.96609ms ago: executing program 0 (id=150): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000680), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000003540)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000003740)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000a40)=ANY=[@ANYBLOB='P\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="01002abd7004fddbdf253b00000008000300", @ANYRES32=r2, @ANYBLOB='*\x003'], 0x50}}, 0x8800) 236.05449ms ago: executing program 3 (id=151): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c8) mount$overlay(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000000), 0x0, &(0x7f00000000c0)={[{@workdir={'workdir', 0x3d, './file0'}}], [], 0x2c}) 0s ago: executing program 1 (id=152): inotify_init1(0x800) pipe(&(0x7f00000001c0)) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000100)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./sys/bus/pci/devices/0000:00:00.0/remove\x00', 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeea, 0x8031, 0xffffffffffffffff, 0x28f43000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TIOCSPGRP(r0, 0x5410, &(0x7f0000000240)=r1) connect$unix(r2, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) mount(0x0, &(0x7f0000000040)='./sys\x00', 0x0, 0x0, 0x0) write(0xffffffffffffffff, 0x0, 0x0) write(r0, &(0x7f0000000300)='1', 0x1) r4 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./sys/bus/pci/rescan\x00', 0x1, 0x0) write(r4, &(0x7f0000000300)='1', 0x1) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.231' (ED25519) to the list of known hosts. [ 20.589760][ T36] audit: type=1400 audit(1790483009.530:64): avc: denied { mounton } for pid=286 comm="syz-executor" path="/syzcgroup/unified" dev="sda1" ino=2023 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1 [ 20.590867][ T286] cgroup: Unknown subsys name 'net' [ 20.612417][ T36] audit: type=1400 audit(1790483009.530:65): avc: denied { mount } for pid=286 comm="syz-executor" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 20.639732][ T36] audit: type=1400 audit(1790483009.550:66): avc: denied { unmount } for pid=286 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 20.639905][ T286] cgroup: Unknown subsys name 'devices' [ 20.751163][ T286] cgroup: Unknown subsys name 'hugetlb' [ 20.756827][ T286] cgroup: Unknown subsys name 'rlimit' [ 20.869456][ T36] audit: type=1400 audit(1790483009.810:67): avc: denied { setattr } for pid=286 comm="syz-executor" name="raw-gadget" dev="devtmpfs" ino=190 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 20.892637][ T36] audit: type=1400 audit(1790483009.810:68): avc: denied { mounton } for pid=286 comm="syz-executor" path="/proc/sys/fs/binfmt_misc" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=dir permissive=1 Setting up swapspace version 1, size = 127995904 bytes [ 20.914322][ T288] SELinux: Context root:object_r:swapfile_t is not valid (left unmapped). [ 20.917510][ T36] audit: type=1400 audit(1790483009.810:69): avc: denied { mount } for pid=286 comm="syz-executor" name="/" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=filesystem permissive=1 [ 20.949076][ T36] audit: type=1400 audit(1790483009.870:70): avc: denied { relabelto } for pid=288 comm="mkswap" name="swap-file" dev="sda1" ino=2026 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 20.966638][ T286] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 20.974591][ T36] audit: type=1400 audit(1790483009.870:71): avc: denied { write } for pid=288 comm="mkswap" path="/root/swap-file" dev="sda1" ino=2026 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 21.008984][ T36] audit: type=1400 audit(1790483009.910:72): avc: denied { read } for pid=286 comm="syz-executor" name="swap-file" dev="sda1" ino=2026 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 21.034543][ T36] audit: type=1400 audit(1790483009.910:73): avc: denied { open } for pid=286 comm="syz-executor" path="/root/swap-file" dev="sda1" ino=2026 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 21.840104][ T296] bridge0: port 1(bridge_slave_0) entered blocking state [ 21.847533][ T296] bridge0: port 1(bridge_slave_0) entered disabled state [ 21.854645][ T296] bridge_slave_0: entered allmulticast mode [ 21.861407][ T296] bridge_slave_0: entered promiscuous mode [ 21.867967][ T296] bridge0: port 2(bridge_slave_1) entered blocking state [ 21.875202][ T296] bridge0: port 2(bridge_slave_1) entered disabled state [ 21.882336][ T296] bridge_slave_1: entered allmulticast mode [ 21.888517][ T296] bridge_slave_1: entered promiscuous mode [ 21.934522][ T293] bridge0: port 1(bridge_slave_0) entered blocking state [ 21.941636][ T293] bridge0: port 1(bridge_slave_0) entered disabled state [ 21.948700][ T293] bridge_slave_0: entered allmulticast mode [ 21.955034][ T293] bridge_slave_0: entered promiscuous mode [ 21.964452][ T293] bridge0: port 2(bridge_slave_1) entered blocking state [ 21.971624][ T293] bridge0: port 2(bridge_slave_1) entered disabled state [ 21.978683][ T293] bridge_slave_1: entered allmulticast mode [ 21.984968][ T293] bridge_slave_1: entered promiscuous mode [ 22.012130][ T294] bridge0: port 1(bridge_slave_0) entered blocking state [ 22.019335][ T294] bridge0: port 1(bridge_slave_0) entered disabled state [ 22.026413][ T294] bridge_slave_0: entered allmulticast mode [ 22.032804][ T294] bridge_slave_0: entered promiscuous mode [ 22.039246][ T294] bridge0: port 2(bridge_slave_1) entered blocking state [ 22.046305][ T294] bridge0: port 2(bridge_slave_1) entered disabled state [ 22.053454][ T294] bridge_slave_1: entered allmulticast mode [ 22.059755][ T294] bridge_slave_1: entered promiscuous mode [ 22.071246][ T295] bridge0: port 1(bridge_slave_0) entered blocking state [ 22.078306][ T295] bridge0: port 1(bridge_slave_0) entered disabled state [ 22.085424][ T295] bridge_slave_0: entered allmulticast mode [ 22.091646][ T295] bridge_slave_0: entered promiscuous mode [ 22.106400][ T295] bridge0: port 2(bridge_slave_1) entered blocking state [ 22.113534][ T295] bridge0: port 2(bridge_slave_1) entered disabled state [ 22.120679][ T295] bridge_slave_1: entered allmulticast mode [ 22.126851][ T295] bridge_slave_1: entered promiscuous mode [ 22.261839][ T294] bridge0: port 2(bridge_slave_1) entered blocking state [ 22.268928][ T294] bridge0: port 2(bridge_slave_1) entered forwarding state [ 22.276238][ T294] bridge0: port 1(bridge_slave_0) entered blocking state [ 22.283282][ T294] bridge0: port 1(bridge_slave_0) entered forwarding state [ 22.299627][ T296] bridge0: port 2(bridge_slave_1) entered blocking state [ 22.306695][ T296] bridge0: port 2(bridge_slave_1) entered forwarding state [ 22.314085][ T296] bridge0: port 1(bridge_slave_0) entered blocking state [ 22.321131][ T296] bridge0: port 1(bridge_slave_0) entered forwarding state [ 22.354274][ T293] bridge0: port 2(bridge_slave_1) entered blocking state [ 22.361366][ T293] bridge0: port 2(bridge_slave_1) entered forwarding state [ 22.368642][ T293] bridge0: port 1(bridge_slave_0) entered blocking state [ 22.375693][ T293] bridge0: port 1(bridge_slave_0) entered forwarding state [ 22.388021][ T295] bridge0: port 2(bridge_slave_1) entered blocking state [ 22.395109][ T295] bridge0: port 2(bridge_slave_1) entered forwarding state [ 22.402396][ T295] bridge0: port 1(bridge_slave_0) entered blocking state [ 22.409439][ T295] bridge0: port 1(bridge_slave_0) entered forwarding state [ 22.438050][ T46] bridge0: port 1(bridge_slave_0) entered disabled state [ 22.445346][ T46] bridge0: port 2(bridge_slave_1) entered disabled state [ 22.453276][ T46] bridge0: port 1(bridge_slave_0) entered disabled state [ 22.460856][ T46] bridge0: port 2(bridge_slave_1) entered disabled state [ 22.468280][ T46] bridge0: port 2(bridge_slave_1) entered disabled state [ 22.476005][ T46] bridge0: port 1(bridge_slave_0) entered disabled state [ 22.483431][ T46] bridge0: port 2(bridge_slave_1) entered disabled state [ 22.500233][ T46] bridge0: port 2(bridge_slave_1) entered blocking state [ 22.507335][ T46] bridge0: port 2(bridge_slave_1) entered forwarding state [ 22.528031][ T46] bridge0: port 1(bridge_slave_0) entered blocking state [ 22.535112][ T46] bridge0: port 1(bridge_slave_0) entered forwarding state [ 22.548777][ T46] bridge0: port 2(bridge_slave_1) entered blocking state [ 22.555863][ T46] bridge0: port 2(bridge_slave_1) entered forwarding state [ 22.580877][ T46] bridge0: port 1(bridge_slave_0) entered blocking state [ 22.587935][ T46] bridge0: port 1(bridge_slave_0) entered forwarding state [ 22.600070][ T46] bridge0: port 2(bridge_slave_1) entered blocking state [ 22.607144][ T46] bridge0: port 2(bridge_slave_1) entered forwarding state [ 22.622777][ T46] bridge0: port 1(bridge_slave_0) entered blocking state [ 22.629860][ T46] bridge0: port 1(bridge_slave_0) entered forwarding state [ 22.637443][ T46] bridge0: port 2(bridge_slave_1) entered blocking state [ 22.644493][ T46] bridge0: port 2(bridge_slave_1) entered forwarding state [ 22.671408][ T294] veth0_vlan: entered promiscuous mode [ 22.681861][ T296] veth0_vlan: entered promiscuous mode [ 22.704012][ T296] veth1_macvtap: entered promiscuous mode [ 22.715096][ T295] veth0_vlan: entered promiscuous mode [ 22.736582][ T295] veth1_macvtap: entered promiscuous mode [ 22.765584][ T293] veth0_vlan: entered promiscuous mode [ 22.777433][ T294] veth1_macvtap: entered promiscuous mode [ 22.777966][ T296] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 22.831283][ T293] veth1_macvtap: entered promiscuous mode [ 22.875426][ T317] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 22.895241][ T320] netlink: 37 bytes leftover after parsing attributes in process `syz.3.4'. [ 22.946274][ T317] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 23.219237][ T31] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 23.399226][ T65] usb 3-1: new low-speed USB device number 2 using dummy_hcd [ 23.529184][ T65] usb 3-1: device descriptor read/64, error -71 [ 23.782390][ T65] usb 3-1: device descriptor read/64, error -71 [ 23.949182][ T310] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 23.969356][ T10] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 24.029205][ T65] usb 3-1: new low-speed USB device number 3 using dummy_hcd [ 24.099283][ T310] usb 1-1: Using ep0 maxpacket: 32 [ 24.099316][ T10] usb 2-1: device descriptor read/64, error -71 [ 24.112016][ T310] usb 1-1: config 0 has an invalid interface number: 184 but max is 0 [ 24.120272][ T310] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 24.130460][ T310] usb 1-1: config 0 has no interface number 0 [ 24.136845][ T310] usb 1-1: config 0 interface 184 altsetting 7 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 24.149901][ T310] usb 1-1: config 0 interface 184 has no altsetting 0 [ 24.158298][ T310] usb 1-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 24.167495][ T310] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 24.169177][ T65] usb 3-1: device descriptor read/64, error -71 [ 24.175634][ T310] usb 1-1: Product: syz [ 24.186086][ T310] usb 1-1: Manufacturer: syz [ 24.190725][ T310] usb 1-1: SerialNumber: syz [ 24.196679][ T310] usb 1-1: config 0 descriptor?? [ 24.202554][ T310] smsc75xx v1.0.0 [ 24.206218][ T310] smsc75xx 1-1:0.184 (unnamed net_device) (uninitialized): usbnet_get_endpoints failed: -22 [ 24.216633][ T310] smsc75xx 1-1:0.184: probe with driver smsc75xx failed with error -22 [ 24.279241][ T31] usb 4-1: device descriptor read/64, error -71 [ 24.339360][ T10] usb 2-1: device descriptor read/64, error -71 [ 24.408116][ T382] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 24.417470][ T382] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 24.429239][ T65] usb 3-1: device descriptor read/64, error -71 [ 24.469851][ T310] usb 1-1: USB disconnect, device number 2 [ 24.539317][ T65] usb usb3-port1: attempt power cycle [ 24.540315][ T31] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 24.556658][ T31] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 24.567724][ T31] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 24.578996][ T31] usb 4-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.80 [ 24.588330][ T31] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 24.590994][ T10] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 24.599805][ T31] usb 4-1: config 0 descriptor?? [ 24.609339][ T380] raw-gadget.3 gadget.3: fail, usb_ep_enable returned -22 [ 24.729183][ T10] usb 2-1: device descriptor read/64, error -71 [ 24.889178][ T65] usb 3-1: new low-speed USB device number 4 using dummy_hcd [ 24.910271][ T65] usb 3-1: device descriptor read/8, error -71 [ 24.969173][ T10] usb 2-1: device descriptor read/64, error -71 [ 25.020045][ T31] cp2112 0003:10C4:EA90.0001: unknown main item tag 0x7 [ 25.027093][ T31] cp2112 0003:10C4:EA90.0001: item fetching failed at offset 5/7 [ 25.035082][ T31] cp2112 0003:10C4:EA90.0001: parse failed [ 25.041061][ T31] cp2112 0003:10C4:EA90.0001: probe with driver cp2112 failed with error -22 [ 25.056933][ T65] usb 3-1: device descriptor read/8, error -71 [ 25.089228][ T10] usb usb2-port1: attempt power cycle [ 25.222095][ T31] usb 4-1: USB disconnect, device number 2 [ 25.319254][ T65] usb 3-1: new low-speed USB device number 5 using dummy_hcd [ 25.340260][ T65] usb 3-1: device descriptor read/8, error -71 [ 25.371410][ T405] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=4129876687 (33039013496 ns) > initial count (2056 ns). Using initial count to start timer. [ 25.389441][ T405] kvm: vcpu 0: requested 2056 ns lapic timer period limited to 200000 ns [ 25.398008][ T405] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=3505350797 (448684902016 ns) > initial count (112427855744 ns). Using initial count to start timer. [ 25.439217][ T10] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 25.460428][ T10] usb 2-1: device descriptor read/8, error -71 [ 25.472918][ T65] usb 3-1: device descriptor read/8, error -71 [ 25.589327][ T65] usb usb3-port1: unable to enumerate USB device [ 25.596832][ T10] usb 2-1: device descriptor read/8, error -71 [ 25.849203][ T10] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 25.870196][ T10] usb 2-1: device descriptor read/8, error -71 [ 25.979189][ T31] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 26.010567][ T10] usb 2-1: device descriptor read/8, error -71 [ 26.037149][ T36] kauditd_printk_skb: 736 callbacks suppressed [ 26.037167][ T36] audit: type=1400 audit(1790483014.970:810): avc: denied { ioctl } for pid=411 comm="syz.0.20" path="socket:[4096]" dev="sockfs" ino=4096 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 26.040935][ T413] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 26.077188][ T413] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 26.087223][ T413] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 26.095752][ T413] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 26.104824][ T414] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 26.113494][ T413] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 26.114273][ T414] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 26.122134][ T413] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 26.130255][ T10] usb usb2-port1: unable to enumerate USB device [ 26.137719][ T31] usb 4-1: Using ep0 maxpacket: 32 [ 26.146917][ T413] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 26.150271][ T31] usb 4-1: config 0 has an invalid interface number: 184 but max is 0 [ 26.158296][ T413] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 26.179352][ T31] usb 4-1: config 0 has no interface number 0 [ 26.185525][ T36] audit: type=1400 audit(1790483015.120:811): avc: denied { read } for pid=415 comm="syz.2.21" name="ppp" dev="devtmpfs" ino=86 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 26.207961][ T31] usb 4-1: config 0 interface 184 has no altsetting 0 [ 26.208030][ T36] audit: type=1400 audit(1790483015.120:812): avc: denied { open } for pid=415 comm="syz.2.21" path="/dev/ppp" dev="devtmpfs" ino=86 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 26.218176][ T31] usb 4-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 26.237841][ T36] audit: type=1400 audit(1790483015.120:813): avc: denied { ioctl } for pid=415 comm="syz.2.21" path="anon_inode:[userfaultfd]" dev="anon_inodefs" ino=5123 ioctlcmd=0xaa3f scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 26.246949][ T31] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 26.272191][ T36] audit: type=1400 audit(1790483015.120:814): avc: denied { ioctl } for pid=415 comm="syz.2.21" path="/dev/ppp" dev="devtmpfs" ino=86 ioctlcmd=0x743e scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 26.289154][ T65] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 26.305151][ T31] usb 4-1: Product: syz [ 26.316671][ T31] usb 4-1: Manufacturer: syz [ 26.321664][ T31] usb 4-1: SerialNumber: syz [ 26.327198][ T31] usb 4-1: config 0 descriptor?? [ 26.333632][ T31] smsc75xx v1.0.0 [ 26.340099][ T36] audit: type=1400 audit(1790483015.280:815): avc: denied { create } for pid=417 comm="syz.2.22" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 26.381572][ T36] audit: type=1400 audit(1790483015.320:816): avc: denied { connect } for pid=417 comm="syz.2.22" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 26.479156][ T65] usb 1-1: Using ep0 maxpacket: 32 [ 26.485395][ T65] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 26.496477][ T65] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 26.506408][ T65] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 26.519503][ T65] usb 1-1: New USB device found, idVendor=0458, idProduct=5011, bcdDevice= 0.00 [ 26.528591][ T65] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 26.539408][ T65] usb 1-1: config 0 descriptor?? [ 26.649208][ T10] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 26.750744][ T65] usbhid 1-1:0.0: can't add hid device: -71 [ 26.757216][ T65] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 26.759628][ T424] capability: warning: `syz.1.24' uses 32-bit capabilities (legacy support in use) [ 26.768786][ T65] usb 1-1: USB disconnect, device number 3 [ 26.800455][ T10] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 26.814590][ T10] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 26.825815][ T36] audit: type=1400 audit(1790483015.750:817): avc: denied { read write } for pid=429 comm="syz.1.26" name="mtrr" dev="proc" ino=4026532004 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:mtrr_device_t tclass=file permissive=1 [ 26.826207][ T10] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 26.849570][ T36] audit: type=1400 audit(1790483015.750:818): avc: denied { open } for pid=429 comm="syz.1.26" path="/6/proc/mtrr" dev="proc" ino=4026532004 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:mtrr_device_t tclass=file permissive=1 [ 26.883281][ T36] audit: type=1400 audit(1790483015.800:819): avc: denied { ioctl } for pid=429 comm="syz.1.26" path="/6/proc/mtrr" dev="proc" ino=4026532004 ioctlcmd=0x4d06 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:mtrr_device_t tclass=file permissive=1 [ 26.884828][ T10] usb 3-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.80 [ 26.917978][ T10] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 26.927606][ T10] usb 3-1: config 0 descriptor?? [ 26.934225][ T421] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 26.974788][ T31] smsc75xx 4-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000040: -32 [ 26.986209][ T31] smsc75xx 4-1:0.184 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 27.289464][ T65] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 27.351942][ T10] cp2112 0003:10C4:EA90.0002: unknown main item tag 0x7 [ 27.359459][ T10] cp2112 0003:10C4:EA90.0002: item fetching failed at offset 5/7 [ 27.373587][ T10] cp2112 0003:10C4:EA90.0002: parse failed [ 27.379493][ T10] cp2112 0003:10C4:EA90.0002: probe with driver cp2112 failed with error -22 [ 27.449173][ T65] usb 2-1: Using ep0 maxpacket: 8 [ 27.455492][ T65] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 27.465950][ T65] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 27.478361][ T65] usb 2-1: New USB device found, idVendor=200c, idProduct=1018, bcdDevice= 0.40 [ 27.487929][ T65] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 27.496147][ T65] usb 2-1: Product: syz [ 27.500627][ T65] usb 2-1: Manufacturer: syz [ 27.505280][ T65] usb 2-1: SerialNumber: syz [ 27.597441][ T310] usb 3-1: USB disconnect, device number 6 [ 27.715330][ T65] usb 2-1: unit 5 not found! [ 27.723403][ T65] usb 2-1: USB disconnect, device number 6 [ 27.745970][ T316] udevd[316]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 28.600046][ T410] netlink: 'syz.3.19': attribute type 1 has an invalid length. [ 28.820293][ T31] smsc75xx 4-1:0.184 (unnamed net_device) (uninitialized): Failed to write reg index 0x00000300: -71 [ 28.841490][ T31] smsc75xx 4-1:0.184 (unnamed net_device) (uninitialized): Failed to write ADDR_FILTX: -71 [ 28.866217][ T31] smsc75xx 4-1:0.184 (unnamed net_device) (uninitialized): Failed to set mac address [ 28.912470][ T31] smsc75xx 4-1:0.184 (unnamed net_device) (uninitialized): smsc75xx_reset error -71 [ 28.996034][ T31] smsc75xx 4-1:0.184: probe with driver smsc75xx failed with error -71 [ 29.093151][ T31] usb 4-1: USB disconnect, device number 3 [ 29.634209][ T517] Zero length message leads to an empty skb [ 30.228040][ T525] pci 0000:00:00.0: [8086:1237] type 00 class 0x060000 conventional PCI endpoint [ 30.261309][ T65] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 30.419284][ T65] usb 2-1: Using ep0 maxpacket: 8 [ 30.426563][ T65] usb 2-1: config 0 has an invalid interface number: 55 but max is 0 [ 30.446950][ T65] usb 2-1: config 0 has no interface number 0 [ 30.462322][ T65] usb 2-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 30.484814][ T65] usb 2-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B [ 30.520988][ T65] usb 2-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 30.532069][ T65] usb 2-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 30.545128][ T65] usb 2-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 30.581005][ T65] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 30.605436][ T65] usb 2-1: config 0 descriptor?? [ 30.638864][ T542] FAULT_INJECTION: forcing a failure. [ 30.638864][ T542] name failslab, interval 1, probability 0, space 0, times 1 [ 30.652907][ T542] CPU: 1 UID: 0 PID: 542 Comm: syz.2.73 Not tainted syzkaller #0 f6ed0fb9bb938319f6518c785cf37c2d863a58c7 [ 30.652944][ T542] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 30.652957][ T542] Call Trace: [ 30.652964][ T542] [ 30.652973][ T542] __dump_stack+0x21/0x30 [ 30.653010][ T542] dump_stack_lvl+0x140/0x1c0 [ 30.653047][ T542] ? __cfi_dump_stack_lvl+0x10/0x10 [ 30.653075][ T542] dump_stack+0x19/0x20 [ 30.653104][ T542] should_fail_ex+0x3c2/0x510 [ 30.653132][ T542] should_failslab+0xac/0x100 [ 30.653159][ T542] kmem_cache_alloc_noprof+0x42/0x410 [ 30.653181][ T542] ? security_inode_alloc+0x51/0x230 [ 30.653208][ T542] security_inode_alloc+0x51/0x230 [ 30.653233][ T542] inode_init_always_gfp+0x756/0x9e0 [ 30.653259][ T542] ? __cfi_sock_alloc_inode+0x10/0x10 [ 30.653281][ T542] alloc_inode+0xc5/0x270 [ 30.653306][ T542] ? bpf_lsm_socket_create+0xd/0x20 [ 30.653330][ T542] new_inode_pseudo+0x19/0x40 [ 30.653357][ T542] __sock_create+0x130/0x810 [ 30.653383][ T542] sock_create_kern+0x3f/0x50 [ 30.653408][ T542] inet_ctl_sock_create+0xa3/0x230 [ 30.653431][ T542] ? __cfi_inet_ctl_sock_create+0x10/0x10 [ 30.653453][ T542] ? __kasan_check_write+0x18/0x20 [ 30.653475][ T542] ? ndisc_net_init+0x1ad/0x270 [ 30.653495][ T542] ? __cfi_ndisc_net_init+0x10/0x10 [ 30.653514][ T542] ? fib_default_rule_add+0x1f9/0x430 [ 30.653536][ T542] igmp6_net_init+0x18e/0x3f0 [ 30.653558][ T542] ops_init+0x2ff/0x5d0 [ 30.653579][ T542] ? __kasan_check_write+0x18/0x20 [ 30.653600][ T542] ? rwsem_read_trylock+0x275/0x5a0 [ 30.653631][ T542] setup_net+0x227/0x9b0 [ 30.653651][ T542] ? copy_net_ns+0xa20/0xa20 [ 30.653671][ T542] ? down_read_killable+0x7f/0x100 [ 30.653699][ T542] ? __cfi_down_read_killable+0x10/0x10 [ 30.653726][ T542] copy_net_ns+0x4fc/0xa20 [ 30.653745][ T542] create_new_namespaces+0x390/0x6f0 [ 30.653776][ T542] unshare_nsproxy_namespaces+0x124/0x180 [ 30.653805][ T542] ksys_unshare+0x4f9/0x920 [ 30.653832][ T542] ? __cfi_ksys_unshare+0x10/0x10 [ 30.653860][ T542] ? __kasan_check_write+0x18/0x20 [ 30.653881][ T542] __x64_sys_unshare+0x3c/0x50 [ 30.653907][ T542] x64_sys_call+0x2998/0x2ee0 [ 30.653926][ T542] do_syscall_64+0x57/0xf0 [ 30.653947][ T542] ? clear_bhb_loop+0x50/0xa0 [ 30.653971][ T542] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 30.653998][ T542] RIP: 0033:0x7f5bf8b9e159 [ 30.654028][ T542] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 30.654047][ T542] RSP: 002b:00007f5bf9b3f028 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 30.654072][ T542] RAX: ffffffffffffffda RBX: 00007f5bf8e25fa0 RCX: 00007f5bf8b9e159 [ 30.654089][ T542] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000040000000 [ 30.654102][ T542] RBP: 00007f5bf8c3506b R08: 0000000000000000 R09: 0000000000000000 [ 30.654116][ T542] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 30.654130][ T542] R13: 00007f5bf8e26038 R14: 00007f5bf8e25fa0 R15: 00007ffcdd2a8db8 [ 30.654146][ T542] [ 30.654161][ T542] socket: no more sockets [ 30.912179][ T10] usb 2-1: USB disconnect, device number 7 [ 30.924738][ T542] Failed to initialize the IGMP6 autojoin socket (err -23) [ 31.073493][ T36] kauditd_printk_skb: 39 callbacks suppressed [ 31.073514][ T36] audit: type=1400 audit(1790483020.010:859): avc: denied { sqpoll } for pid=559 comm="syz.2.81" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 31.110435][ T565] netlink: 16 bytes leftover after parsing attributes in process `syz.0.82'. [ 31.486173][ T583] netlink: 12 bytes leftover after parsing attributes in process `syz.1.89'. [ 31.728198][ T36] audit: type=1400 audit(1790483020.660:860): avc: denied { name_bind } for pid=593 comm="syz.2.94" src=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:reserved_port_t tclass=tcp_socket permissive=1 [ 31.803746][ T598] netlink: 'syz.2.96': attribute type 12 has an invalid length. [ 31.859202][ T36] audit: type=1400 audit(1790483020.790:861): avc: denied { getopt } for pid=599 comm="syz.3.97" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 32.737222][ T36] audit: type=1400 audit(1790483021.670:862): avc: denied { mount } for pid=609 comm="syz.1.99" name="/" dev="devtmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=filesystem permissive=1 [ 32.841049][ T36] audit: type=1400 audit(1790483021.670:863): avc: denied { read write } for pid=609 comm="syz.1.99" name="control" dev="devtmpfs" ino=198 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:lvm_control_t tclass=chr_file permissive=1 [ 32.995245][ T36] audit: type=1400 audit(1790483021.670:864): avc: denied { open } for pid=609 comm="syz.1.99" path="/29/dev/mapper/control" dev="devtmpfs" ino=198 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:lvm_control_t tclass=chr_file permissive=1 [ 33.024645][ T36] audit: type=1400 audit(1790483021.670:865): avc: denied { ioctl } for pid=609 comm="syz.1.99" path="/29/dev/mapper/control" dev="devtmpfs" ino=198 ioctlcmd=0xfd03 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:lvm_control_t tclass=chr_file permissive=1 [ 33.051182][ T36] audit: type=1400 audit(1790483021.720:866): avc: denied { unmount } for pid=293 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=filesystem permissive=1 [ 33.077420][ T36] audit: type=1400 audit(1790483021.750:867): avc: denied { write } for pid=615 comm="syz.1.101" name="ppp" dev="devtmpfs" ino=86 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 33.579190][ T36] audit: type=1400 audit(1790483022.510:868): avc: denied { block_suspend } for pid=639 comm="syz.1.110" capability=36 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 35.294577][ T381] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 35.450247][ T381] usb 1-1: Dual-Role OTG device on HNP port [ 35.462144][ T381] usb 1-1: New USB device found, idVendor=0000, idProduct=0000, bcdDevice= 6.12 [ 35.477523][ T381] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 35.536924][ T712] ======================================================= [ 35.536924][ T712] WARNING: The mand mount option has been deprecated and [ 35.536924][ T712] and is ignored by this kernel. Remove the mand [ 35.536924][ T712] option from the mount to silence this warning. [ 35.536924][ T712] ======================================================= [ 35.815722][ T717] FAULT_INJECTION: forcing a failure. [ 35.815722][ T717] name failslab, interval 1, probability 0, space 0, times 0 [ 35.838604][ T717] CPU: 1 UID: 0 PID: 717 Comm: syz.2.140 Not tainted syzkaller #0 f6ed0fb9bb938319f6518c785cf37c2d863a58c7 [ 35.838643][ T717] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 35.838656][ T717] Call Trace: [ 35.838664][ T717] [ 35.838673][ T717] __dump_stack+0x21/0x30 [ 35.838711][ T717] dump_stack_lvl+0x140/0x1c0 [ 35.838741][ T717] ? __cfi_dump_stack_lvl+0x10/0x10 [ 35.838771][ T717] ? __cfi__raw_spin_lock+0x10/0x10 [ 35.838796][ T717] dump_stack+0x19/0x20 [ 35.838826][ T717] should_fail_ex+0x3c2/0x510 [ 35.838853][ T717] should_failslab+0xac/0x100 [ 35.838880][ T717] kmem_cache_alloc_lru_noprof+0x44/0x410 [ 35.838903][ T717] ? alloc_inode+0xa9/0x270 [ 35.838931][ T717] alloc_inode+0xa9/0x270 [ 35.838960][ T717] new_inode+0x25/0x1e0 [ 35.838987][ T717] ? _raw_spin_unlock+0x45/0x60 [ 35.839008][ T717] devpts_fill_super+0x4cb/0x8e0 [ 35.839031][ T717] ? __cfi_devpts_fill_super+0x10/0x10 [ 35.839053][ T717] mount_nodev+0x71/0x110 [ 35.839075][ T717] devpts_mount+0x30/0x40 [ 35.839093][ T717] legacy_get_tree+0x103/0x1b0 [ 35.839121][ T717] ? __cfi_devpts_mount+0x10/0x10 [ 35.839143][ T717] vfs_get_tree+0xa1/0x290 [ 35.839166][ T717] do_new_mount+0x251/0xb40 [ 35.839190][ T717] ? path_mount+0x2db/0xff0 [ 35.839213][ T717] path_mount+0x66a/0xff0 [ 35.839234][ T717] ? putname+0x113/0x150 [ 35.839258][ T717] __se_sys_mount+0x2bf/0x480 [ 35.839282][ T717] ? __x64_sys_mount+0xf0/0xf0 [ 35.839306][ T717] ? __kasan_check_write+0x18/0x20 [ 35.839328][ T717] ? fpregs_restore_userregs+0x11c/0x260 [ 35.839355][ T717] __x64_sys_mount+0xc3/0xf0 [ 35.839378][ T717] x64_sys_call+0x2021/0x2ee0 [ 35.839399][ T717] do_syscall_64+0x57/0xf0 [ 35.839419][ T717] ? clear_bhb_loop+0x50/0xa0 [ 35.839447][ T717] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 35.839472][ T717] RIP: 0033:0x7f5bf8b9e159 [ 35.839491][ T717] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 35.839509][ T717] RSP: 002b:00007f5bf9b3f028 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 35.839533][ T717] RAX: ffffffffffffffda RBX: 00007f5bf8e25fa0 RCX: 00007f5bf8b9e159 [ 35.839548][ T717] RDX: 0000200000000040 RSI: 00002000000000c0 RDI: 0000000000000000 [ 35.839563][ T717] RBP: 00007f5bf8c3506b R08: 0000000000000000 R09: 0000000000000000 [ 35.839586][ T717] R10: 0000000000000001 R11: 0000000000000246 R12: 0000000000000000 [ 35.839600][ T717] R13: 00007f5bf8e26038 R14: 00007f5bf8e25fa0 R15: 00007ffcdd2a8db8 [ 35.839619][ T717] [ 36.100772][ T717] devpts: Unable to alloc inode for ptmx node [ 36.239645][ T729] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 36.273699][ T729] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 36.461037][ T737] random: crng reseeded on system resumption [ 36.496359][ T36] kauditd_printk_skb: 16 callbacks suppressed [ 36.497128][ T36] audit: type=1400 audit(1790483025.400:885): avc: denied { write } for pid=730 comm="syz.1.147" name="snapshot" dev="devtmpfs" ino=21 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 36.526563][ T36] audit: type=1400 audit(1790483025.400:886): avc: denied { open } for pid=730 comm="syz.1.147" path="/dev/snapshot" dev="devtmpfs" ino=21 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 36.619188][ T65] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 36.784544][ T65] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 36.795194][ T65] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 36.813065][ T65] usb 3-1: New USB device found, idVendor=0d8c, idProduct=0014, bcdDevice= 0.40 [ 36.823066][ T65] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 36.831584][ T65] usb 3-1: Product: syz [ 36.839009][ T65] usb 3-1: Manufacturer: syz [ 36.845103][ T65] usb 3-1: SerialNumber: syz [ 41.940821][ T65] usb 3-1: 0:1 : does not exist [ 41.948010][ T65] usb 3-1: 3:0: failed to get current value for ch 0 (-32) [ 41.957618][ T65] usb 3-1: unit 0 not found! [ 99.026769][ T110] udevd[110]: worker [363] /devices/platform/dummy_hcd.2/usb3/3-1 is taking a long time [ 165.299289][ T37] INFO: task syz.2.149:733 blocked for more than 122 seconds. [ 165.306801][ T37] Not tainted syzkaller #0 [ 165.311788][ T37] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 165.320609][ T37] task:syz.2.149 state:D stack:0 pid:733 tgid:733 ppid:295 flags:0x00000004 [ 165.331064][ T37] Call Trace: [ 165.334350][ T37] [ 165.337274][ T37] __schedule+0x1496/0x20b0 [ 165.341808][ T37] ? asm_exc_page_fault+0x2b/0x30 [ 165.346867][ T37] ? __sched_text_start+0x10/0x10 [ 165.351916][ T37] ? __kasan_check_write+0x18/0x20 [ 165.357041][ T37] ? _raw_spin_lock_irqsave+0xc1/0x160 [ 165.362574][ T37] ? __cfi__raw_spin_lock_irqsave+0x10/0x10 [ 165.368504][ T37] ? folio_mark_accessed+0x35f/0x620 [ 165.373839][ T37] schedule+0xc5/0x240 [ 165.377931][ T37] io_schedule+0x85/0x150 [ 165.382284][ T37] bit_wait_io+0x17/0xd0 [ 165.386544][ T37] __wait_on_bit+0xb6/0x2e0 [ 165.391072][ T37] ? __cfi_bit_wait_io+0x10/0x10 [ 165.396029][ T37] out_of_line_wait_on_bit+0x139/0x190 [ 165.401519][ T37] ? __cfi_bit_wait_io+0x10/0x10 [ 165.406473][ T37] ? __cfi_out_of_line_wait_on_bit+0x10/0x10 [ 165.412480][ T37] ? __cfi_wake_bit_function+0x10/0x10 [ 165.417970][ T37] do_get_write_access+0x558/0xd70 [ 165.423148][ T37] jbd2_journal_get_write_access+0x268/0x3d0 [ 165.429176][ T37] __ext4_journal_get_write_access+0x1b6/0x6a0 [ 165.435335][ T37] ? __cfi___ext4_journal_get_write_access+0x10/0x10 [ 165.442026][ T37] ? __kasan_slab_alloc+0x73/0x90 [ 165.447074][ T37] ? kmem_cache_alloc_noprof+0x1e2/0x410 [ 165.452727][ T37] ext4_reserve_inode_write+0x1f6/0x2e0 [ 165.458293][ T37] __ext4_mark_inode_dirty+0xac/0x5e0 [ 165.463774][ T37] ext4_dirty_inode+0xc9/0x110 [ 165.468644][ T37] ? __cfi_ext4_dirty_inode+0x10/0x10 [ 165.474178][ T37] __mark_inode_dirty+0x251/0xc50 [ 165.479356][ T37] ? __cfi___mark_inode_dirty+0x10/0x10 [ 165.485107][ T37] ? _raw_spin_lock+0x92/0x120 [ 165.489913][ T37] ? mnt_get_write_access_file+0x1af/0x3b0 [ 165.495832][ T37] ? __kasan_check_read+0x15/0x20 [ 165.500999][ T37] file_update_time+0x1d3/0x210 [ 165.505863][ T37] ext4_page_mkwrite+0x2bf/0x1120 [ 165.511026][ T37] ? __kasan_check_write+0x18/0x20 [ 165.516259][ T37] ? folio_unlock+0x137/0x1b0 [ 165.521045][ T37] ? __cfi_ext4_page_mkwrite+0x10/0x10 [ 165.526718][ T37] ? ring_buffer_record_is_set_on+0x4c/0x70 [ 165.532672][ T37] ? tracer_tracing_is_on+0x4e/0xa0 [ 165.537906][ T37] do_pte_missing+0x12c4/0x4440 [ 165.542881][ T37] ? __cfi_trace_event_raw_event_sched_switch+0x10/0x10 [ 165.549978][ T37] ? pte_marker_clear+0x1b0/0x1b0 [ 165.555052][ T37] ? __thp_vma_allowable_orders+0x820/0x9a0 [ 165.561041][ T37] ? xfd_validate_state+0x68/0x140 [ 165.566179][ T37] ? save_fpregs_to_fpstate+0x19d/0x230 [ 165.571757][ T37] ? __cfi___thp_vma_allowable_orders+0x10/0x10 [ 165.578024][ T37] ? __switch_to+0xc6b/0x1320 [ 165.582757][ T37] handle_mm_fault+0x1189/0x1ba0 [ 165.587769][ T37] ? __cfi_handle_mm_fault+0x10/0x10 [ 165.593113][ T37] ? lock_vma_under_rcu+0x4cf/0x590 [ 165.598351][ T37] ? irqentry_exit+0x4a/0x60 [ 165.603025][ T37] do_user_addr_fault+0x951/0x1230 [ 165.608176][ T37] ? fpregs_restore_userregs+0x11c/0x260 [ 165.613888][ T37] exc_page_fault+0x58/0xc0 [ 165.618429][ T37] asm_exc_page_fault+0x2b/0x30 [ 165.623393][ T37] RIP: 0033:0x7f5bf8a72809 [ 165.627830][ T37] RSP: 002b:00007ffcdd2a8e00 EFLAGS: 00010202 [ 165.633937][ T37] RAX: 0000001b2f524000 RBX: 0000000000000000 RCX: 00000000005ffde8 [ 165.642353][ T37] RDX: 0000001b2f523ffc RSI: 00000000005ffde8 RDI: 00007f5bf9955700 [ 165.650384][ T37] RBP: 0000000000000000 R08: 0000000000000000 R09: 00007f5bf8e12000 [ 165.658916][ T37] R10: 00007f5bf9955700 R11: 0000000000000000 R12: 0000000000000000 [ 165.667017][ T37] R13: 0000000000003225 R14: ffffffff813cf23c R15: 00007f5bf9955720 [ 165.675052][ T37] ? fpregs_restore_userregs+0xfc/0x260 [ 165.680670][ T37] [ 165.683730][ T37] INFO: task syz.0.150:740 blocked for more than 123 seconds. [ 165.691238][ T37] Not tainted syzkaller #0 [ 165.696185][ T37] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 165.704892][ T37] task:syz.0.150 state:D stack:0 pid:740 tgid:740 ppid:296 flags:0x00000004 [ 165.715091][ T37] Call Trace: [ 165.718368][ T37] [ 165.721327][ T37] __schedule+0x1496/0x20b0 [ 165.725856][ T37] ? __sched_text_start+0x10/0x10 [ 165.730939][ T37] ? is_bpf_text_address+0x17b/0x1a0 [ 165.736293][ T37] ? __kasan_check_write+0x18/0x20 [ 165.741468][ T37] ? _raw_spin_lock_irqsave+0xc1/0x160 [ 165.746961][ T37] ? __cfi__raw_spin_lock_irqsave+0x10/0x10 [ 165.752901][ T37] ? folio_mark_accessed+0x35f/0x620 [ 165.758235][ T37] ? __cfi_stack_trace_consume_entry+0x10/0x10 [ 165.764445][ T37] schedule+0xc5/0x240 [ 165.768536][ T37] io_schedule+0x85/0x150 [ 165.772900][ T37] bit_wait_io+0x17/0xd0 [ 165.777162][ T37] __wait_on_bit+0xb6/0x2e0 [ 165.781692][ T37] ? __cfi_bit_wait_io+0x10/0x10 [ 165.786659][ T37] out_of_line_wait_on_bit+0x139/0x190 [ 165.792245][ T37] ? __cfi_bit_wait_io+0x10/0x10 [ 165.798191][ T37] ? __cfi_out_of_line_wait_on_bit+0x10/0x10 [ 165.804233][ T37] ? __cfi_wake_bit_function+0x10/0x10 [ 165.809746][ T37] do_get_write_access+0x558/0xd70 [ 165.814881][ T37] jbd2_journal_get_write_access+0x268/0x3d0 [ 165.820953][ T37] __ext4_journal_get_write_access+0x1b6/0x6a0 [ 165.827146][ T37] ? __cfi___ext4_journal_get_write_access+0x10/0x10 [ 165.833883][ T37] ? __kasan_slab_alloc+0x73/0x90 [ 165.839087][ T37] ? kmem_cache_alloc_noprof+0x1e2/0x410 [ 165.844750][ T37] ext4_reserve_inode_write+0x1f6/0x2e0 [ 165.850352][ T37] __ext4_mark_inode_dirty+0xac/0x5e0 [ 165.855746][ T37] ext4_dirty_inode+0xc9/0x110 [ 165.860559][ T37] ? __cfi_ext4_dirty_inode+0x10/0x10 [ 165.865992][ T37] __mark_inode_dirty+0x251/0xc50 [ 165.871070][ T37] ? __cfi___mark_inode_dirty+0x10/0x10 [ 165.876635][ T37] ? mnt_get_write_access_file+0x1af/0x3b0 [ 165.882498][ T37] ? __kasan_check_read+0x15/0x20 [ 165.887556][ T37] file_update_time+0x1d3/0x210 [ 165.892450][ T37] ext4_page_mkwrite+0x2bf/0x1120 [ 165.897499][ T37] ? __kasan_check_write+0x18/0x20 [ 165.902672][ T37] ? folio_unlock+0x137/0x1b0 [ 165.907452][ T37] ? __cfi_ext4_page_mkwrite+0x10/0x10 [ 165.912946][ T37] ? __alloc_pages_noprof+0x35a/0x7e0 [ 165.918355][ T37] do_pte_missing+0x12c4/0x4440 [ 165.923278][ T37] ? pte_marker_clear+0x1b0/0x1b0 [ 165.928350][ T37] ? __thp_vma_allowable_orders+0x820/0x9a0 [ 165.934285][ T37] ? __cfi___pmd_alloc+0x10/0x10 [ 165.939312][ T37] ? __cfi___thp_vma_allowable_orders+0x10/0x10 [ 165.945628][ T37] handle_mm_fault+0x1189/0x1ba0 [ 165.950608][ T37] ? __cfi_handle_mm_fault+0x10/0x10 [ 165.956851][ T37] ? lock_vma_under_rcu+0x4cf/0x590 [ 165.962167][ T37] do_user_addr_fault+0x951/0x1230 [ 165.967306][ T37] ? fpregs_assert_state_consistent+0xb6/0xe0 [ 165.973412][ T37] exc_page_fault+0x58/0xc0 [ 165.977946][ T37] asm_exc_page_fault+0x2b/0x30 [ 165.982858][ T37] RIP: 0033:0x7f6bc206baa3 [ 165.987305][ T37] RSP: 002b:00007ffc0e4b2010 EFLAGS: 00010246 [ 165.993399][ T37] RAX: 00000000003ffde8 RBX: 0000000000000000 RCX: 0000001b2ed64000 [ 166.001425][ T37] RDX: 0000001b2ed24000 RSI: 0000000000400000 RDI: 00007f6bc23e0708 [ 166.009542][ T37] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 166.017614][ T37] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 166.025668][ T37] R13: 0000000000000000 R14: 0000000000000000 R15: 00007ffc0e4b22a0 [ 166.033705][ T37] [ 166.036761][ T37] INFO: task syz.3.151:741 blocked for more than 123 seconds. [ 166.044279][ T37] Not tainted syzkaller #0 [ 166.049236][ T37] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 166.057900][ T37] task:syz.3.151 state:D stack:0 pid:741 tgid:741 ppid:294 flags:0x00004004 [ 166.068178][ T37] Call Trace: [ 166.071480][ T37] [ 166.074407][ T37] __schedule+0x1496/0x20b0 [ 166.079172][ T37] ? __sched_text_start+0x10/0x10 [ 166.084238][ T37] ? is_bpf_text_address+0x17b/0x1a0 [ 166.089558][ T37] ? __kasan_check_write+0x18/0x20 [ 166.094702][ T37] ? _raw_spin_lock_irqsave+0xc1/0x160 [ 166.100321][ T37] ? __cfi__raw_spin_lock_irqsave+0x10/0x10 [ 166.106255][ T37] ? folio_mark_accessed+0x35f/0x620 [ 166.111576][ T37] ? __cfi_stack_trace_consume_entry+0x10/0x10 [ 166.117750][ T37] schedule+0xc5/0x240 [ 166.121872][ T37] io_schedule+0x85/0x150 [ 166.126326][ T37] bit_wait_io+0x17/0xd0 [ 166.130675][ T37] __wait_on_bit+0xb6/0x2e0 [ 166.135195][ T37] ? __cfi_bit_wait_io+0x10/0x10 [ 166.140148][ T37] out_of_line_wait_on_bit+0x139/0x190 [ 166.145710][ T37] ? __cfi_bit_wait_io+0x10/0x10 [ 166.150673][ T37] ? __cfi_out_of_line_wait_on_bit+0x10/0x10 [ 166.156701][ T37] ? __cfi_wake_bit_function+0x10/0x10 [ 166.162176][ T37] do_get_write_access+0x558/0xd70 [ 166.167309][ T37] jbd2_journal_get_write_access+0x268/0x3d0 [ 166.173315][ T37] __ext4_journal_get_write_access+0x1b6/0x6a0 [ 166.179514][ T37] ? __cfi___ext4_journal_get_write_access+0x10/0x10 [ 166.187492][ T37] ? __kasan_slab_alloc+0x73/0x90 [ 166.192566][ T37] ? kmem_cache_alloc_noprof+0x1e2/0x410 [ 166.198220][ T37] ext4_reserve_inode_write+0x1f6/0x2e0 [ 166.203807][ T37] __ext4_mark_inode_dirty+0xac/0x5e0 [ 166.209225][ T37] ext4_dirty_inode+0xc9/0x110 [ 166.214063][ T37] ? __cfi_ext4_dirty_inode+0x10/0x10 [ 166.219529][ T37] __mark_inode_dirty+0x251/0xc50 [ 166.224597][ T37] ? __cfi___mark_inode_dirty+0x10/0x10 [ 166.230215][ T37] ? mnt_get_write_access_file+0x1af/0x3b0 [ 166.236161][ T37] ? __kasan_check_read+0x15/0x20 [ 166.241242][ T37] file_update_time+0x1d3/0x210 [ 166.246117][ T37] ext4_page_mkwrite+0x2bf/0x1120 [ 166.251192][ T37] ? __kasan_check_write+0x18/0x20 [ 166.256333][ T37] ? folio_unlock+0x137/0x1b0 [ 166.261058][ T37] ? __cfi_ext4_page_mkwrite+0x10/0x10 [ 166.266539][ T37] ? __alloc_pages_noprof+0x35a/0x7e0 [ 166.271950][ T37] do_pte_missing+0x12c4/0x4440 [ 166.276825][ T37] ? pte_marker_clear+0x1b0/0x1b0 [ 166.281892][ T37] ? __thp_vma_allowable_orders+0x820/0x9a0 [ 166.287831][ T37] ? __cfi___pmd_alloc+0x10/0x10 [ 166.292933][ T37] ? __cfi___thp_vma_allowable_orders+0x10/0x10 [ 166.299241][ T37] handle_mm_fault+0x1189/0x1ba0 [ 166.304184][ T37] ? __cfi_handle_mm_fault+0x10/0x10 [ 166.309579][ T37] ? lock_vma_under_rcu+0x4cf/0x590 [ 166.314815][ T37] do_user_addr_fault+0x951/0x1230 [ 166.319976][ T37] ? fpregs_assert_state_consistent+0xb6/0xe0 [ 166.326119][ T37] exc_page_fault+0x58/0xc0 [ 166.330641][ T37] asm_exc_page_fault+0x2b/0x30 [ 166.335517][ T37] RIP: 0033:0x7f6af106baa3 [ 166.339976][ T37] RSP: 002b:00007ffeb0976f10 EFLAGS: 00010246 [ 166.346096][ T37] RAX: 00000000003ffde8 RBX: 0000000000000000 RCX: 0000001b2f064000 [ 166.354111][ T37] RDX: 0000001b2f024000 RSI: 0000000000400000 RDI: 00007f6af13e0708 [ 166.362313][ T37] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 166.370329][ T37] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 166.378310][ T37] R13: 0000000000000000 R14: 0000000000000000 R15: 00007ffeb09771a0 [ 166.386306][ T37] [ 166.389354][ T37] INFO: task syz.1.152:742 blocked for more than 123 seconds. [ 166.396851][ T37] Not tainted syzkaller #0 [ 166.401818][ T37] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 166.410796][ T37] task:syz.1.152 state:D stack:0 pid:742 tgid:742 ppid:293 flags:0x00000004 [ 166.421040][ T37] Call Trace: [ 166.424349][ T37] [ 166.427310][ T37] __schedule+0x1496/0x20b0 [ 166.431937][ T37] ? __sched_text_start+0x10/0x10 [ 166.437003][ T37] ? is_bpf_text_address+0x17b/0x1a0 [ 166.442340][ T37] ? __kasan_check_write+0x18/0x20 [ 166.447501][ T37] ? _raw_spin_lock_irqsave+0xc1/0x160 [ 166.453019][ T37] ? __cfi__raw_spin_lock_irqsave+0x10/0x10 [ 166.458931][ T37] ? folio_mark_accessed+0x35f/0x620 [ 166.464243][ T37] ? __cfi_stack_trace_consume_entry+0x10/0x10 [ 166.471146][ T37] schedule+0xc5/0x240 [ 166.475251][ T37] io_schedule+0x85/0x150 [ 166.479613][ T37] bit_wait_io+0x17/0xd0 [ 166.483877][ T37] __wait_on_bit+0xb6/0x2e0 [ 166.488395][ T37] ? __cfi_bit_wait_io+0x10/0x10 [ 166.493361][ T37] out_of_line_wait_on_bit+0x139/0x190 [ 166.498840][ T37] ? __cfi_bit_wait_io+0x10/0x10 [ 166.503990][ T37] ? __cfi_out_of_line_wait_on_bit+0x10/0x10 [ 166.510105][ T37] ? __cfi_wake_bit_function+0x10/0x10 [ 166.515586][ T37] do_get_write_access+0x558/0xd70 [ 166.520728][ T37] jbd2_journal_get_write_access+0x268/0x3d0 [ 166.526880][ T37] __ext4_journal_get_write_access+0x1b6/0x6a0 [ 166.533131][ T37] ? __cfi___ext4_journal_get_write_access+0x10/0x10 [ 166.539849][ T37] ? __kasan_slab_alloc+0x73/0x90 [ 166.544910][ T37] ? kmem_cache_alloc_noprof+0x1e2/0x410 [ 166.550627][ T37] ext4_reserve_inode_write+0x1f6/0x2e0 [ 166.556200][ T37] __ext4_mark_inode_dirty+0xac/0x5e0 [ 166.561602][ T37] ext4_dirty_inode+0xc9/0x110 [ 166.566400][ T37] ? __cfi_ext4_dirty_inode+0x10/0x10 [ 166.571877][ T37] __mark_inode_dirty+0x251/0xc50 [ 166.576949][ T37] ? __cfi___mark_inode_dirty+0x10/0x10 [ 166.582610][ T37] ? mnt_get_write_access_file+0x1af/0x3b0 [ 166.588465][ T37] ? __kasan_check_read+0x15/0x20 [ 166.593587][ T37] file_update_time+0x1d3/0x210 [ 166.598462][ T37] ext4_page_mkwrite+0x2bf/0x1120 [ 166.603524][ T37] ? __kasan_check_write+0x18/0x20 [ 166.608656][ T37] ? folio_unlock+0x137/0x1b0 [ 166.613440][ T37] ? __cfi_ext4_page_mkwrite+0x10/0x10 [ 166.618933][ T37] ? __alloc_pages_noprof+0x35a/0x7e0 [ 166.624364][ T37] do_pte_missing+0x12c4/0x4440 [ 166.629284][ T37] ? pte_marker_clear+0x1b0/0x1b0 [ 166.634326][ T37] ? __thp_vma_allowable_orders+0x820/0x9a0 [ 166.640255][ T37] ? __cfi___pmd_alloc+0x10/0x10 [ 166.645220][ T37] ? __cfi___thp_vma_allowable_orders+0x10/0x10 [ 166.651528][ T37] handle_mm_fault+0x1189/0x1ba0 [ 166.656491][ T37] ? __cfi_handle_mm_fault+0x10/0x10 [ 166.661820][ T37] ? lock_vma_under_rcu+0x4cf/0x590 [ 166.667055][ T37] do_user_addr_fault+0x951/0x1230 [ 166.672222][ T37] ? fpregs_assert_state_consistent+0xb6/0xe0 [ 166.678332][ T37] exc_page_fault+0x58/0xc0 [ 166.682862][ T37] asm_exc_page_fault+0x2b/0x30 [ 166.687741][ T37] RIP: 0033:0x7f8dc8a6baa3 [ 166.692207][ T37] RSP: 002b:00007ffe02a9fb90 EFLAGS: 00010246 [ 166.698291][ T37] RAX: 00000000003ffde8 RBX: 0000000000000000 RCX: 0000001b2ee64000 [ 166.706290][ T37] RDX: 0000001b2ee24000 RSI: 0000000000400000 RDI: 00007f8dc8de0708 [ 166.714334][ T37] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 166.722336][ T37] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 166.730370][ T37] R13: 0000000000000000 R14: 0000000000000000 R15: 00007ffe02a9fe20 [ 166.738352][ T37] [ 166.741720][ T37] NMI backtrace for cpu 0 [ 166.741735][ T37] CPU: 0 UID: 0 PID: 37 Comm: khungtaskd Not tainted syzkaller #0 f6ed0fb9bb938319f6518c785cf37c2d863a58c7 [ 166.741764][ T37] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 166.741776][ T37] Call Trace: [ 166.741783][ T37] [ 166.741791][ T37] __dump_stack+0x21/0x30 [ 166.741825][ T37] dump_stack_lvl+0x140/0x1c0 [ 166.741854][ T37] ? __cfi_dump_stack_lvl+0x10/0x10 [ 166.741884][ T37] dump_stack+0x19/0x20 [ 166.741910][ T37] nmi_cpu_backtrace+0x2ba/0x2d0 [ 166.741931][ T37] ? __cfi_nmi_cpu_backtrace+0x10/0x10 [ 166.741950][ T37] ? rcu_read_unlock_special+0x150/0x420 [ 166.741981][ T37] ? sched_show_task+0x371/0x530 [ 166.742009][ T37] ? __cfi_nmi_raise_cpu_backtrace+0x10/0x10 [ 166.742047][ T37] ? __cfi_nmi_raise_cpu_backtrace+0x10/0x10 [ 166.742074][ T37] nmi_trigger_cpumask_backtrace+0x142/0x2c0 [ 166.742094][ T37] arch_trigger_cpumask_backtrace+0x14/0x20 [ 166.742122][ T37] cpumask_backtrace+0x1f/0x30 [ 166.742142][ T37] watchdog+0xe45/0xf90 [ 166.742164][ T37] ? __kasan_check_write+0x18/0x20 [ 166.742190][ T37] ? __cfi_watchdog+0x10/0x10 [ 166.742212][ T37] ? __kasan_check_read+0x15/0x20 [ 166.742234][ T37] ? __kthread_parkme+0x12f/0x180 [ 166.742256][ T37] ? schedule+0xc5/0x240 [ 166.742278][ T37] kthread+0x2c4/0x360 [ 166.742301][ T37] ? __cfi_watchdog+0x10/0x10 [ 166.742322][ T37] ? __cfi_kthread+0x10/0x10 [ 166.742344][ T37] ret_from_fork+0x67/0xa0 [ 166.742374][ T37] ? __cfi_kthread+0x10/0x10 [ 166.742397][ T37] ret_from_fork_asm+0x1a/0x30 [ 166.742419][ T37] [ 166.742433][ T37] Sending NMI from CPU 0 to CPUs 1: [ 166.907030][ C1] NMI backtrace for cpu 1 [ 166.907048][ C1] CPU: 1 UID: 0 PID: 0 Comm: swapper/1 Not tainted syzkaller #0 f6ed0fb9bb938319f6518c785cf37c2d863a58c7 [ 166.907070][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 166.907079][ C1] RIP: 0010:pv_native_safe_halt+0x13/0x20 [ 166.907107][ C1] Code: cc cc cc cc cc cc cc b8 df c0 e1 6d 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 66 90 0f 00 2d c3 f7 41 00 55 48 89 e5 fb f4 <5d> c3 cc cc cc cc cc cc cc cc cc cc cc b8 00 00 00 00 90 90 90 90 [ 166.907120][ C1] RSP: 0018:ffffc900001a7e00 EFLAGS: 000002c2 [ 166.907136][ C1] RAX: ffff8881f6f00000 RBX: ffff88810366df00 RCX: ffffffff85a5653d [ 166.907148][ C1] RDX: 0000000000000001 RSI: 0000000000000004 RDI: 000000000011625c [ 166.907159][ C1] RBP: ffffc900001a7e00 R08: ffff8881f6f395eb R09: 1ffff1103ede72bd [ 166.907171][ C1] R10: dffffc0000000000 R11: ffffed103ede72be R12: 0000000000000000 [ 166.907181][ C1] R13: 1ffff110206cdbe0 R14: dffffc0000000000 R15: ffffffff87eceae8 [ 166.907193][ C1] FS: 0000000000000000(0000) GS:ffff8881f6f00000(0000) knlGS:0000000000000000 [ 166.907207][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 166.907218][ C1] CR2: 000055555885f4e8 CR3: 000000010cf8e000 CR4: 00000000003526b0 [ 166.907235][ C1] Call Trace: [ 166.907242][ C1] [ 166.907250][ C1] default_idle+0x17/0x30 [ 166.907273][ C1] arch_cpu_idle+0xd/0x20 [ 166.907294][ C1] default_idle_call+0x3e/0x80 [ 166.907316][ C1] do_idle+0x1df/0x570 [ 166.907334][ C1] ? idle_inject_timer_fn+0x80/0x80 [ 166.907351][ C1] ? _raw_spin_unlock_irqrestore+0x4a/0x70 [ 166.907368][ C1] ? complete+0x172/0x1d0 [ 166.907383][ C1] cpu_startup_entry+0x47/0x60 [ 166.907399][ C1] start_secondary+0x12e/0x140 [ 166.907429][ C1] common_startup_64+0x13b/0x157 [ 166.907452][ C1]