last executing test programs: 4.572416731s ago: executing program 0 (id=205): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = epoll_create1(0x80000) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000100)={0x60000010}) epoll_pwait2(r1, &(0x7f00000002c0)=[{}], 0x1, 0x0, 0x0, 0x0) epoll_ctl$EPOLL_CTL_MOD(r1, 0x3, r0, &(0x7f0000000080)={0x28002034}) 4.553873842s ago: executing program 0 (id=206): connect$inet(0xffffffffffffffff, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./tracing\x00', 0x1ff) mount(0x0, &(0x7f00000000c0)='./tracing\x00', &(0x7f0000000100)='tracefs\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000140)='./tracing/uprobe_events\x00', 0x0, 0x0) 4.540246462s ago: executing program 0 (id=207): recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0) mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f0000000040)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) 4.480445693s ago: executing program 0 (id=208): modify_ldt$write2(0x11, 0x0, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x20702, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'syzkaller0\x00', 0xca58c30f81b6079f}) 4.480330293s ago: executing program 0 (id=209): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) accept4$inet6(r0, 0x0, 0x0, 0x80000) 4.467747944s ago: executing program 0 (id=210): mkdirat(0xffffffffffffff9c, &(0x7f0000001000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000001040)='./sys\x00', &(0x7f0000001080)='sysfs\x00', 0x0, 0x0) pipe2(0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000001300)='./sys/class/scsi_host/host0/scan\x00', 0x1, 0x0) write(r0, &(0x7f0000001400)='- - -', 0x5) 3.472071127s ago: executing program 2 (id=237): r0 = socket(0x10, 0x3, 0x9) connect$netlink(r0, 0x0, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = dup(r2) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}}) write$tun(r1, &(0x7f0000002300)={@val={0x3, 0x800}, @val={0x0, 0x0, 0x6, 0x0, 0x14}, @ipv4=@gre={{0x5, 0x4, 0x0, 0x5, 0xfc0, 0x65, 0x0, 0x5, 0x2f, 0x0, @empty, @multicast1}, {{0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x880b, 0xe71, 0x3, [], "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"}, {0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x800, [], "0c35b98d25d58bfc4a760a546da83ec284004cce9bf250b1be16e6d6ecd91293206e1b22932035ac8f095d595c0b6b1fec362cabc0425ad7e0351d3fe392e384d8598ff4296961af25b110038d7ecdd0962c26f3"}, {0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x86dd, [0x8], "43e1d1819d5104db4305ae47b51f3614bc59e86bae2a14a872cddde237c72fac08667d578102"}, {0x8, 0x88be, 0x0, {{0x2, 0x1, 0x5, 0x0, 0x0, 0x3, 0x5, 0x7f}, 0x1, {0x7}}}, {0x8, 0x22eb, 0x1, {{0x0, 0x2, 0x6, 0x3, 0x0, 0x3, 0x0, 0x4e}, 0x2, {0x9, 0xfff7, 0x1, 0x8, 0x1, 0x1, 0x1, 0x1, 0x1}}}, {0x8, 0x6558, 0x1, "e0720a899e87eeddd95fc67c38fa1e084cca87df50fc796189e8a2bcb6862757c81ba1d783e430ebf2816479321bc5bb86fe33a1b63755f658b965469431c9a3dbcb0e87140e7f3c26fe3706a0c74bf8d55de52917fa16f5102ac758cac8f0ea2c9565cfe09c1b4dfdbdaa47d2f52ffbbf286bb52a209741924b42"}}}}, 0xfce) 3.38411157s ago: executing program 2 (id=242): r0 = userfaultfd(0x80001) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000140)={0xaa, 0x280}) ioctl$UFFDIO_CONTINUE(r0, 0xc020aa07, &(0x7f0000000000)={{&(0x7f00005c4000/0x4000)=nil, 0x4000}, 0x2}) 3.37560387s ago: executing program 2 (id=243): r0 = gettid() rt_sigtimedwait(&(0x7f0000000000)={[0xe]}, 0x0, 0x0, 0x8) tkill(r0, 0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) prctl$PR_SET_THP_DISABLE(0x29, 0x0) 3.143315035s ago: executing program 2 (id=249): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000100)='./file0/../file0\x00', &(0x7f00000001c0)='./file0\x00', 0x0, 0x5000, 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x200) 3.076445687s ago: executing program 2 (id=250): syz_clone3(&(0x7f000000dd80)={0x100000, 0x0, 0x0, 0x0, {0x13}, 0x0, 0x0, 0x0, 0x0}, 0x58) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) syz_clone3(&(0x7f000000dd80)={0xa04400, 0x0, 0x0, 0x0, {0x12}, 0x0, 0x0, 0x0, 0x0}, 0x58) 2.995846769s ago: executing program 2 (id=255): r0 = fsopen(&(0x7f00000001c0)='bpf\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) fsmount(r0, 0x0, 0x0) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000018c0)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) close_range(r1, 0xffffffffffffffff, 0x0) 2.94147615s ago: executing program 32 (id=255): r0 = fsopen(&(0x7f00000001c0)='bpf\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) fsmount(r0, 0x0, 0x0) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000018c0)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) close_range(r1, 0xffffffffffffffff, 0x0) 1.929900524s ago: executing program 1 (id=272): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x28100, 0x0) setsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_open_procfs(0xffffffffffffffff, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_NMI(r2, 0xae9a) sendmsg$NL80211_CMD_GET_POWER_SAVE(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000240)=ANY=[@ANYBLOB='(', @ANYBLOB="020025bd7000fb"], 0x28}, 0x1, 0x0, 0x0, 0x4008000}, 0x8000) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000440)={[0x0, 0x100000000, 0x0, 0x7f, 0x100000, 0x0, 0x2004c8, 0x8000000, 0x0, 0x0, 0x7, 0x0, 0x5, 0x8, 0x2, 0xffffffffffffffff], 0x0, 0x200}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380)={[0x101, 0xaec4, 0x6, 0x4000, 0x2, 0x4, 0xefffffdfffffffff, 0x40000000000000, 0x7fffffff8, 0x2000000, 0x200000001ffff, 0x1c, 0x800, 0x5, 0x1], 0x0, 0x1981}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 1.836834246s ago: executing program 1 (id=279): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$fou(&(0x7f00000069c0), 0xffffffffffffffff) sendmsg$FOU_CMD_ADD(r0, &(0x7f0000006ac0)={0x0, 0x0, &(0x7f0000006a80)={&(0x7f0000000080)={0x1c, r1, 0x1, 0x70bd29, 0x25dfdbfb, {}, [@FOU_ATTR_TYPE={0x5, 0x4, 0x2}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4044850}, 0x40800) 1.772319678s ago: executing program 1 (id=281): futex_waitv(&(0x7f0000000b00)=[{0xfffffffffffffffd, 0x0, 0x2}], 0x1, 0x0, &(0x7f0000000cc0)={0x77359400}, 0x1) 1.772285208s ago: executing program 1 (id=282): iopl(0x28) 1.772258818s ago: executing program 1 (id=283): r0 = syz_create_resource$binfmt(&(0x7f00000000c0)='./file0\x00') r1 = openat$binfmt(0xffffffffffffff9c, r0, 0x41, 0x1ff) fcntl$setlease(r1, 0x400, 0x1) open$dir(&(0x7f0000000100)='./file0\x00', 0x4000, 0xc) 1.044301425s ago: executing program 3 (id=300): r0 = open(&(0x7f00009e1000)='./file0\x00', 0x48141, 0x6) fcntl$setlease(r0, 0x400, 0x1) creat(&(0x7f0000000280)='./file0\x00', 0xecf86c37d53049cc) 920.378278ms ago: executing program 4 (id=303): r0 = socket$inet_tcp(0x2, 0x1, 0x6) listen(r0, 0x5) accept$inet(r0, 0x0, 0x0) 920.281608ms ago: executing program 1 (id=304): getrandom(&(0x7f0000000240)=""/286, 0xffffff9a, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) r0 = syz_open_procfs$pagemap(0x0, &(0x7f0000001080)) ioctl$PAGEMAP_SCAN(r0, 0xc0606610, &(0x7f0000000280)={0x60, 0x0, &(0x7f0000001000/0x3000)=nil, &(0x7f0000ffb000/0x4000)=nil, 0x4, 0x0, 0x0, 0x101, 0x1e, 0x0, 0x2f, 0x6e}) 225.754305ms ago: executing program 3 (id=305): prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0xa27}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x8) getpid() sched_setaffinity(0x0, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_PRIVFLAGS_SET(r0, 0x0, 0x4000) r1 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCETHTOOL(r1, 0x8946, &(0x7f00000002c0)={'veth0_to_team\x00', &(0x7f0000000000)=@ethtool_cmd={0x2c, 0x4, 0x4, 0x2, 0x2, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x0, 0x0, [0x0, 0x3]}}) 213.104605ms ago: executing program 3 (id=306): r0 = getpid() r1 = syz_pidfd_open(r0, 0x0) setns(r1, 0x24020000) r2 = syz_clone(0xb21e0000, 0x0, 0x0, 0x0, 0x0, 0x0) r3 = syz_pidfd_open(r2, 0x0) setns(r3, 0x24020000) mount$9p_fd(0x0, 0x0, 0x0, 0x104000, 0x0) open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89101) 144.424967ms ago: executing program 3 (id=307): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./mydev\x00', 0x1ef) 144.275247ms ago: executing program 3 (id=308): eventfd(0xfffffdfe) close(0x3) 144.189867ms ago: executing program 3 (id=309): futex(&(0x7f000000cffc)=0x1, 0xd, 0x0, 0x0, 0x0, 0x0) timer_create(0x0, &(0x7f0000000080)={0x0, 0x11, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000100)) timer_settime(0x0, 0x0, &(0x7f0000000240)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) 115.689707ms ago: executing program 4 (id=310): r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$VHOST_SET_OWNER(r0, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000300)={0x1, 0x0, 0x0, &(0x7f0000001600)=""/78, 0x0}) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000001680)) r1 = eventfd2(0x1, 0x80001) ioctl$VHOST_SET_VRING_ERR(r0, 0x4008af22, &(0x7f00000001c0)={0x0, r1}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000240)={0x0, 0x0, 0x0, &(0x7f0000001d00)=""/176, 0x0, 0xffff1000}) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f0000000000)={0x0, r1}) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f00000000c0)=0x1) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0x0}) 79.688958ms ago: executing program 4 (id=311): mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x7, 0x41032, 0xffffffffffffffff, 0x0) 20.47681ms ago: executing program 4 (id=312): setns(0xc9, 0x0) ioctl$TUNSETLINK(0xffffffffffffffff, 0x400454cd, 0x10f) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=ANY=[@ANYBLOB="20000000140001032db57000fedbdf250c0000000c0004"], 0x20}}, 0x20008080) 20.25259ms ago: executing program 4 (id=313): syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x42, 0x0) write$binfmt_elf32(r0, &(0x7f0000004000)=ANY=[], 0x1358) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x27ffff2, 0x4012011, r0, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x2000006, 0x204031, 0xffffffffffffffff, 0xec776000) 0s ago: executing program 4 (id=314): r0 = socket(0x28, 0x5, 0x0) bind$vsock_stream(r0, &(0x7f0000000040), 0x10) listen(r0, 0x0) accept4$unix(r0, 0x0, 0x0, 0x0) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.151' (ED25519) to the list of known hosts. [ 28.431131][ T36] audit: type=1400 audit(1787329161.630:64): avc: denied { mounton } for pid=286 comm="syz-executor" path="/syzcgroup/unified" dev="sda1" ino=2023 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1 [ 28.434626][ T286] cgroup: Unknown subsys name 'net' [ 28.453828][ T36] audit: type=1400 audit(1787329161.630:65): avc: denied { mount } for pid=286 comm="syz-executor" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 28.481171][ T36] audit: type=1400 audit(1787329161.670:66): avc: denied { unmount } for pid=286 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 28.481697][ T286] cgroup: Unknown subsys name 'devices' [ 28.589514][ T286] cgroup: Unknown subsys name 'hugetlb' [ 28.595189][ T286] cgroup: Unknown subsys name 'rlimit' [ 28.691804][ T36] audit: type=1400 audit(1787329161.890:67): avc: denied { setattr } for pid=286 comm="syz-executor" name="raw-gadget" dev="devtmpfs" ino=190 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 28.715020][ T36] audit: type=1400 audit(1787329161.890:68): avc: denied { mounton } for pid=286 comm="syz-executor" path="/proc/sys/fs/binfmt_misc" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=dir permissive=1 [ 28.739801][ T36] audit: type=1400 audit(1787329161.890:69): avc: denied { mount } for pid=286 comm="syz-executor" name="/" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=filesystem permissive=1 [ 28.788133][ T288] SELinux: Context root:object_r:swapfile_t is not valid (left unmapped). [ 28.796944][ T36] audit: type=1400 audit(1787329161.990:70): avc: denied { relabelto } for pid=288 comm="mkswap" name="swap-file" dev="sda1" ino=2026 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" Setting up swapspace version 1, size = 127995904 bytes [ 28.822423][ T36] audit: type=1400 audit(1787329162.000:71): avc: denied { write } for pid=288 comm="mkswap" path="/root/swap-file" dev="sda1" ino=2026 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 28.863282][ T36] audit: type=1400 audit(1787329162.060:72): avc: denied { read } for pid=286 comm="syz-executor" name="swap-file" dev="sda1" ino=2026 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 28.864641][ T286] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 28.888832][ T36] audit: type=1400 audit(1787329162.060:73): avc: denied { open } for pid=286 comm="syz-executor" path="/root/swap-file" dev="sda1" ino=2026 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 29.755930][ T295] bridge0: port 1(bridge_slave_0) entered blocking state [ 29.763102][ T295] bridge0: port 1(bridge_slave_0) entered disabled state [ 29.770348][ T295] bridge_slave_0: entered allmulticast mode [ 29.776641][ T295] bridge_slave_0: entered promiscuous mode [ 29.783902][ T295] bridge0: port 2(bridge_slave_1) entered blocking state [ 29.791029][ T295] bridge0: port 2(bridge_slave_1) entered disabled state [ 29.798193][ T295] bridge_slave_1: entered allmulticast mode [ 29.804405][ T295] bridge_slave_1: entered promiscuous mode [ 29.854084][ T293] bridge0: port 1(bridge_slave_0) entered blocking state [ 29.861190][ T293] bridge0: port 1(bridge_slave_0) entered disabled state [ 29.868438][ T293] bridge_slave_0: entered allmulticast mode [ 29.874667][ T293] bridge_slave_0: entered promiscuous mode [ 29.882382][ T293] bridge0: port 2(bridge_slave_1) entered blocking state [ 29.889585][ T293] bridge0: port 2(bridge_slave_1) entered disabled state [ 29.896654][ T293] bridge_slave_1: entered allmulticast mode [ 29.903045][ T293] bridge_slave_1: entered promiscuous mode [ 29.964904][ T294] bridge0: port 1(bridge_slave_0) entered blocking state [ 29.972060][ T294] bridge0: port 1(bridge_slave_0) entered disabled state [ 29.979329][ T294] bridge_slave_0: entered allmulticast mode [ 29.985576][ T294] bridge_slave_0: entered promiscuous mode [ 29.992010][ T296] bridge0: port 1(bridge_slave_0) entered blocking state [ 29.999111][ T296] bridge0: port 1(bridge_slave_0) entered disabled state [ 30.006196][ T296] bridge_slave_0: entered allmulticast mode [ 30.012532][ T296] bridge_slave_0: entered promiscuous mode [ 30.019224][ T296] bridge0: port 2(bridge_slave_1) entered blocking state [ 30.026281][ T296] bridge0: port 2(bridge_slave_1) entered disabled state [ 30.033427][ T296] bridge_slave_1: entered allmulticast mode [ 30.039700][ T296] bridge_slave_1: entered promiscuous mode [ 30.045771][ T294] bridge0: port 2(bridge_slave_1) entered blocking state [ 30.052967][ T294] bridge0: port 2(bridge_slave_1) entered disabled state [ 30.060140][ T294] bridge_slave_1: entered allmulticast mode [ 30.066404][ T294] bridge_slave_1: entered promiscuous mode [ 30.195246][ T295] bridge0: port 2(bridge_slave_1) entered blocking state [ 30.202373][ T295] bridge0: port 2(bridge_slave_1) entered forwarding state [ 30.209700][ T295] bridge0: port 1(bridge_slave_0) entered blocking state [ 30.216759][ T295] bridge0: port 1(bridge_slave_0) entered forwarding state [ 30.233231][ T293] bridge0: port 2(bridge_slave_1) entered blocking state [ 30.240326][ T293] bridge0: port 2(bridge_slave_1) entered forwarding state [ 30.247641][ T293] bridge0: port 1(bridge_slave_0) entered blocking state [ 30.254719][ T293] bridge0: port 1(bridge_slave_0) entered forwarding state [ 30.275106][ T296] bridge0: port 2(bridge_slave_1) entered blocking state [ 30.282215][ T296] bridge0: port 2(bridge_slave_1) entered forwarding state [ 30.289533][ T296] bridge0: port 1(bridge_slave_0) entered blocking state [ 30.296586][ T296] bridge0: port 1(bridge_slave_0) entered forwarding state [ 30.315845][ T294] bridge0: port 2(bridge_slave_1) entered blocking state [ 30.322959][ T294] bridge0: port 2(bridge_slave_1) entered forwarding state [ 30.330276][ T294] bridge0: port 1(bridge_slave_0) entered blocking state [ 30.337352][ T294] bridge0: port 1(bridge_slave_0) entered forwarding state [ 30.365051][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 30.372383][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 30.380168][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 30.387413][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 30.394704][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 30.402436][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 30.410144][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 30.417496][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 30.438814][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 30.445879][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 30.453563][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 30.460641][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 30.484569][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 30.491675][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 30.499640][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 30.506686][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 30.549977][ T297] bridge0: port 1(bridge_slave_0) entered blocking state [ 30.557070][ T297] bridge0: port 1(bridge_slave_0) entered forwarding state [ 30.565262][ T297] bridge0: port 2(bridge_slave_1) entered blocking state [ 30.572347][ T297] bridge0: port 2(bridge_slave_1) entered forwarding state [ 30.581032][ T297] bridge0: port 1(bridge_slave_0) entered blocking state [ 30.588087][ T297] bridge0: port 1(bridge_slave_0) entered forwarding state [ 30.595952][ T297] bridge0: port 2(bridge_slave_1) entered blocking state [ 30.603078][ T297] bridge0: port 2(bridge_slave_1) entered forwarding state [ 30.611820][ T295] veth0_vlan: entered promiscuous mode [ 30.639722][ T296] veth0_vlan: entered promiscuous mode [ 30.658167][ T295] veth1_macvtap: entered promiscuous mode [ 30.665785][ T296] veth1_macvtap: entered promiscuous mode [ 30.689038][ T294] veth0_vlan: entered promiscuous mode [ 30.727974][ T293] veth0_vlan: entered promiscuous mode [ 30.734361][ T294] veth1_macvtap: entered promiscuous mode [ 30.743086][ T295] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 30.767841][ T293] veth1_macvtap: entered promiscuous mode [ 30.840551][ T320] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4'. [ 30.851476][ T320] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=320 comm=syz.3.4 [ 30.865149][ T320] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=320 comm=syz.3.4 [ 30.878825][ T320] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=320 comm=syz.3.4 [ 30.892070][ T320] netlink: 'syz.3.4': attribute type 10 has an invalid length. [ 31.047059][ T31] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 31.067017][ T311] usb 2-1: new full-speed USB device number 2 using dummy_hcd [ 31.147010][ T66] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 31.196978][ T31] usb 1-1: Using ep0 maxpacket: 16 [ 31.203434][ T31] usb 1-1: config 0 has an invalid interface number: 126 but max is 0 [ 31.211857][ T31] usb 1-1: config 0 has an invalid descriptor of length 46, skipping remainder of the config [ 31.222753][ T31] usb 1-1: config 0 has no interface number 0 [ 31.228731][ T311] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 31.229285][ T31] usb 1-1: config 0 interface 126 altsetting 0 has an endpoint descriptor with address 0xB7, changing to 0x87 [ 31.241784][ T311] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 31.251887][ T31] usb 1-1: config 0 interface 126 altsetting 0 endpoint 0x87 has invalid maxpacket 34328, setting to 1024 [ 31.264935][ T311] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a5, bcdDevice= 0.40 [ 31.273175][ T31] usb 1-1: config 0 interface 126 altsetting 0 endpoint 0xA has invalid maxpacket 512, setting to 64 [ 31.282990][ T311] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 31.293676][ T31] usb 1-1: config 0 interface 126 altsetting 0 endpoint 0x4 has invalid maxpacket 12848, setting to 64 [ 31.302486][ T311] usb 2-1: SerialNumber: syz [ 31.316246][ T31] usb 1-1: config 0 interface 126 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 4 [ 31.330024][ T31] usb 1-1: New USB device found, idVendor=0763, idProduct=1015, bcdDevice=56.88 [ 31.339279][ T31] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 31.340487][ T311] usb 2-1: bad CDC descriptors [ 31.347415][ T66] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 31.355540][ T311] usb-storage 2-1:1.0: USB Mass Storage device detected [ 31.362891][ T66] usb 4-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 31.375728][ T311] usb-storage 2-1:1.0: Quirks match for vid 0525 pid a4a5: 10000 [ 31.382023][ T66] usb 4-1: too many endpoints for config 1 interface 1 altsetting 7: 37, using maximum allowed: 30 [ 31.391386][ T311] scsi host1: usb-storage 2-1:1.0 [ 31.397584][ T31] usb 1-1: config 0 descriptor?? [ 31.406906][ T66] usb 4-1: config 1 interface 1 altsetting 7 has 0 endpoint descriptors, different from the interface descriptor's value: 37 [ 31.411246][ T313] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 31.420773][ T66] usb 4-1: config 1 interface 1 has no altsetting 1 [ 31.437225][ T66] usb 4-1: New USB device found, idVendor=041e, idProduct=4068, bcdDevice= 0.40 [ 31.446462][ T66] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 31.455322][ T66] usb 4-1: Product: syz [ 31.463131][ T66] usb 4-1: Manufacturer: syz [ 31.471019][ T318] udevd[318]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.126/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 31.487329][ T66] usb 4-1: SerialNumber: syz [ 31.702261][ T66] usb 4-1: 0:2 : does not exist [ 31.709781][ T66] usb 4-1: USB disconnect, device number 2 [ 31.724027][ T317] udevd[317]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 31.807583][ T31] usb 3-1: new full-speed USB device number 2 using dummy_hcd [ 31.958274][ T31] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 6192, setting to 64 [ 31.969294][ T31] usb 3-1: New USB device found, idVendor=1e7d, idProduct=319c, bcdDevice= 0.00 [ 31.978531][ T31] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 31.987515][ T31] usb 3-1: config 0 descriptor?? [ 32.120048][ T336] veth0_to_team: entered promiscuous mode [ 32.158905][ T311] usb 1-1: USB disconnect, device number 2 [ 32.181840][ T338] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 32.251722][ T343] 9pnet_fd: Insufficient options for proto=fd [ 32.279967][ T345] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 32.400862][ T31] isku 0003:1E7D:319C.0001: unknown main item tag 0x0 [ 32.409788][ T31] isku 0003:1E7D:319C.0001: unknown main item tag 0x0 [ 32.416663][ T31] isku 0003:1E7D:319C.0001: unknown main item tag 0x0 [ 32.426253][ T31] isku 0003:1E7D:319C.0001: unknown main item tag 0x0 [ 32.433258][ T31] isku 0003:1E7D:319C.0001: unknown main item tag 0x0 [ 32.445272][ T31] isku 0003:1E7D:319C.0001: hidraw0: USB HID v0.00 Device [HID 1e7d:319c] on usb-dummy_hcd.2-1/input0 [ 32.617072][ T311] usb 1-1: new full-speed USB device number 3 using dummy_hcd [ 32.632650][ T31] isku 0003:1E7D:319C.0001: couldn't init struct isku_device [ 32.640547][ T31] isku 0003:1E7D:319C.0001: couldn't install keyboard [ 32.648749][ T31] isku 0003:1E7D:319C.0001: probe with driver isku failed with error -71 [ 32.660024][ T31] usb 3-1: USB disconnect, device number 2 [ 32.676622][ T362] process 'syz.2.14' launched '/dev/fd/4' with NULL argv: empty string added [ 32.701772][ T66] usb 2-1: USB disconnect, device number 2 [ 32.768802][ T311] usb 1-1: unable to get BOS descriptor or descriptor too short [ 32.776899][ T311] usb 1-1: not running at top speed; connect to a high speed hub [ 32.785448][ T311] usb 1-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 215, changing to 4 [ 32.799988][ T311] usb 1-1: string descriptor 0 read error: -22 [ 32.806192][ T311] usb 1-1: New USB device found, idVendor=04b4, idProduct=931d, bcdDevice= 0.40 [ 32.816410][ T311] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 32.828117][ T311] usb 1-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 33.006980][ T31] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 33.027428][ T364] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 33.036030][ T364] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 33.069273][ T311] usb 1-1: 2:1 : UAC_AS_GENERAL descriptor not found [ 33.097394][ T311] usb 1-1: USB disconnect, device number 3 [ 33.158113][ T31] usb 3-1: config 1 has too many interfaces: 34, using maximum allowed: 32 [ 33.166784][ T31] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 33.177026][ T31] usb 3-1: config 1 has 2 interfaces, different from the descriptor's value: 34 [ 33.186109][ T31] usb 3-1: config 1 interface 1 altsetting 255 has 0 endpoint descriptors, different from the interface descriptor's value: 7 [ 33.199306][ T31] usb 3-1: config 1 interface 1 has no altsetting 0 [ 33.205941][ T31] usb 3-1: New USB device found, idVendor=076d, idProduct=0006, bcdDevice= 1.00 [ 33.215101][ T31] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 33.229776][ T31] cdc_acm 3-1:1.0: probe with driver cdc_acm failed with error -22 [ 33.366994][ T10] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 33.430059][ T31] usb 3-1: string descriptor 0 read error: -71 [ 33.436597][ T31] cdc_acm 3-1:1.1: probe with driver cdc_acm failed with error -22 [ 33.445563][ T31] usb 3-1: USB disconnect, device number 3 [ 33.517021][ T10] usb 4-1: Using ep0 maxpacket: 8 [ 33.523243][ T10] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 33.533553][ T10] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 33.537314][ T66] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 33.545520][ T10] usb 4-1: New USB device found, idVendor=0763, idProduct=2003, bcdDevice= 0.40 [ 33.559106][ T10] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 33.567164][ T10] usb 4-1: Product: syz [ 33.571403][ T10] usb 4-1: Manufacturer: syz [ 33.576046][ T10] usb 4-1: SerialNumber: syz [ 33.681844][ T36] kauditd_printk_skb: 60 callbacks suppressed [ 33.681862][ T36] audit: type=1400 audit(1787329166.880:134): avc: denied { read write } for pid=378 comm="syz.0.19" name="fuse" dev="devtmpfs" ino=23 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fuse_device_t tclass=chr_file permissive=1 [ 33.711011][ T66] usb 2-1: Using ep0 maxpacket: 16 [ 33.711064][ T36] audit: type=1400 audit(1787329166.880:135): avc: denied { open } for pid=378 comm="syz.0.19" path="/dev/fuse" dev="devtmpfs" ino=23 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fuse_device_t tclass=chr_file permissive=1 [ 33.717706][ T66] usb 2-1: config 0 has an invalid interface number: 126 but max is 0 [ 33.747256][ T66] usb 2-1: config 0 has an invalid descriptor of length 46, skipping remainder of the config [ 33.757495][ T66] usb 2-1: config 0 has no interface number 0 [ 33.763824][ T66] usb 2-1: config 0 interface 126 altsetting 0 has an endpoint descriptor with address 0xB7, changing to 0x87 [ 33.775569][ T66] usb 2-1: config 0 interface 126 altsetting 0 endpoint 0x87 has invalid maxpacket 34328, setting to 1024 [ 33.786762][ T36] audit: type=1400 audit(1787329166.970:136): avc: denied { mounton } for pid=367 comm="syz.3.15" path="/syzcgroup/unified/syz3" dev="cgroup2" ino=85 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=dir permissive=1 [ 33.786994][ T66] usb 2-1: config 0 interface 126 altsetting 0 endpoint 0xA has invalid maxpacket 512, setting to 64 [ 33.821214][ T66] usb 2-1: config 0 interface 126 altsetting 0 endpoint 0x4 has invalid maxpacket 12848, setting to 64 [ 33.824286][ T10] usb 4-1: invalid UAC_HEADER (v1) [ 33.832852][ T66] usb 2-1: config 0 interface 126 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 4 [ 33.844281][ T10] snd-usb-audio 4-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 33.850493][ T66] usb 2-1: New USB device found, idVendor=0763, idProduct=1015, bcdDevice=56.88 [ 33.867244][ T10] usb 4-1: USB disconnect, device number 3 [ 33.870086][ T66] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 33.887045][ T66] usb 2-1: config 0 descriptor?? [ 33.891382][ T317] udevd[317]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 33.907301][ T372] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 33.923976][ T314] udevd[314]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.126/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 34.014133][ T36] audit: type=1400 audit(1787329167.210:137): avc: denied { bind } for pid=383 comm="syz.2.21" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 34.015959][ T384] Zero length message leads to an empty skb [ 34.040822][ T36] audit: type=1400 audit(1787329167.240:138): avc: denied { ioctl } for pid=383 comm="syz.2.21" path="socket:[4423]" dev="sockfs" ino=4423 ioctlcmd=0x6e87 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 34.080106][ T36] audit: type=1326 audit(1787329167.280:139): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=386 comm="syz.2.22" exe="/root/ci2-android-6-12-rust/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f5f27f9e0d9 code=0x0 [ 34.182008][ T36] audit: type=1400 audit(1787329167.380:140): avc: denied { mount } for pid=386 comm="syz.2.22" name="/" dev="sysfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=filesystem permissive=1 [ 34.185352][ T388] fuse: Unknown parameter '0xffffffffffffffff0xffffffffffffffff' [ 34.203878][ T36] audit: type=1400 audit(1787329167.380:141): avc: denied { mounton } for pid=386 comm="syz.2.22" path="/6/file0" dev="tmpfs" ino=53 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 34.215262][ T388] 9pnet_fd: Insufficient options for proto=fd [ 34.272002][ T36] audit: type=1400 audit(1787329167.470:142): avc: denied { unmount } for pid=296 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=filesystem permissive=1 [ 34.299374][ T36] audit: type=1400 audit(1787329167.500:143): avc: denied { write } for pid=389 comm="syz.0.23" name="kvm" dev="devtmpfs" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 34.643396][ T66] usb 2-1: USB disconnect, device number 3 [ 34.662346][ T404] SELinux: Context wpan4 is not valid (left unmapped). [ 34.677005][ T46] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 34.697265][ T10] usb 4-1: new low-speed USB device number 4 using dummy_hcd [ 34.829426][ T46] usb 1-1: config 4 has an invalid interface number: 124 but max is 3 [ 34.837864][ T46] usb 1-1: config 4 contains an unexpected descriptor of type 0x1, skipping [ 34.846785][ T46] usb 1-1: config 4 has an invalid interface number: 209 but max is 3 [ 34.855405][ T46] usb 1-1: config 4 has an invalid interface number: 239 but max is 3 [ 34.863865][ T10] usb 4-1: LPM exit latency is zeroed, disabling LPM. [ 34.864168][ T46] usb 1-1: config 4 has an invalid interface number: 158 but max is 3 [ 34.879186][ T46] usb 1-1: config 4 has an invalid interface descriptor of length 4, skipping [ 34.879475][ T10] usb 4-1: config 1 has an invalid descriptor of length 71, skipping remainder of the config [ 34.888657][ T46] usb 1-1: config 4 has 5 interfaces, different from the descriptor's value: 4 [ 34.908297][ T46] usb 1-1: config 4 has no interface number 0 [ 34.915557][ T46] usb 1-1: config 4 has no interface number 1 [ 34.917263][ T10] usb 4-1: string descriptor 0 read error: -22 [ 34.922601][ T46] usb 1-1: config 4 has no interface number 3 [ 34.934101][ T10] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 34.934789][ T46] usb 1-1: config 4 has no interface number 4 [ 34.949549][ T46] usb 1-1: config 4 interface 2 altsetting 5 has an invalid descriptor for endpoint zero, skipping [ 34.960499][ T46] usb 1-1: too many endpoints for config 4 interface 209 altsetting 132: 60, using maximum allowed: 30 [ 34.967029][ T10] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 34.972387][ T46] usb 1-1: config 4 interface 209 altsetting 132 has 0 endpoint descriptors, different from the interface descriptor's value: 60 [ 34.991072][ T10] usb 4-1: bad CDC descriptors [ 35.026955][ T46] usb 1-1: config 4 interface 239 altsetting 56 endpoint 0x9 has invalid maxpacket 2047, setting to 64 [ 35.058043][ T46] usb 1-1: config 4 interface 239 altsetting 56 endpoint 0x7 has invalid maxpacket 60729, setting to 1024 [ 35.086715][ T46] usb 1-1: config 4 interface 239 altsetting 56 bulk endpoint 0x7 has invalid maxpacket 1024 [ 35.099381][ T46] usb 1-1: config 4 interface 239 altsetting 56 endpoint 0xC has invalid wMaxPacketSize 0 [ 35.109769][ T46] usb 1-1: config 4 interface 239 altsetting 56 has a duplicate endpoint with address 0x5, skipping [ 35.121218][ T46] usb 1-1: config 4 interface 239 altsetting 56 has a duplicate endpoint with address 0xC, skipping [ 35.132334][ T46] usb 1-1: config 4 interface 158 altsetting 39 has a duplicate endpoint with address 0x1, skipping [ 35.145220][ T46] usb 1-1: config 4 interface 158 altsetting 39 has a duplicate endpoint with address 0x1, skipping [ 35.156246][ T46] usb 1-1: config 4 interface 158 altsetting 39 has a duplicate endpoint with address 0xC, skipping [ 35.167196][ T46] usb 1-1: config 4 interface 158 altsetting 39 has 8 endpoint descriptors, different from the interface descriptor's value: 11 [ 35.177489][ T426] capability: warning: `syz.2.34' uses 32-bit capabilities (legacy support in use) [ 35.191344][ T46] usb 1-1: config 4 interface 124 has no altsetting 0 [ 35.198406][ T402] futex_wake_op: syz.3.27 tries to shift op by 144; fix this program [ 35.216754][ T10] smpboot: CPU 1 is now offline [ 35.222281][ T46] usb 1-1: config 4 interface 2 has no altsetting 0 [ 35.230465][ T427] smpboot: Booting Node 0 Processor 1 APIC 0x1 [ 35.241258][ T402] input: syz0 as /devices/virtual/input/input4 [ 35.255616][ T46] usb 1-1: config 4 interface 209 has no altsetting 0 [ 35.262526][ T46] usb 1-1: config 4 interface 239 has no altsetting 0 [ 35.270395][ T46] usb 1-1: config 4 interface 158 has no altsetting 0 [ 35.285533][ T46] usb 1-1: New USB device found, idVendor=16d8, idProduct=7253, bcdDevice=b6.15 [ 35.286738][ T10] usb 4-1: USB disconnect, device number 4 [ 35.294647][ T46] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 35.312112][ T46] usb 1-1: Product: syz [ 35.317072][ T46] usb 1-1: Manufacturer: á Œ [ 35.321785][ T46] usb 1-1: SerialNumber: syz [ 35.441099][ T436] netlink: 'syz.2.37': attribute type 16 has an invalid length. [ 35.455421][ T436] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=8192 sclass=netlink_route_socket pid=436 comm=syz.2.37 [ 35.468534][ T436] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=8192 sclass=netlink_route_socket pid=436 comm=syz.2.37 [ 35.481229][ T436] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=8192 sclass=netlink_route_socket pid=436 comm=syz.2.37 [ 35.494583][ T436] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=8192 sclass=netlink_route_socket pid=436 comm=syz.2.37 [ 35.537719][ T437] netlink: 4 bytes leftover after parsing attributes in process `syz.2.37'. [ 35.576077][ T46] usb 1-1: USB disconnect, device number 4 [ 35.712742][ T444] virtio-fs: tag not found [ 36.097574][ T10] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 36.257516][ T10] usb 2-1: Using ep0 maxpacket: 8 [ 36.280445][ T10] usb 2-1: New USB device found, idVendor=17cc, idProduct=041d, bcdDevice= 0.40 [ 36.316114][ T10] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 36.352944][ T10] usb 2-1: Product: syz [ 36.360472][ T10] usb 2-1: Manufacturer: syz [ 36.370553][ T10] usb 2-1: SerialNumber: syz [ 36.600237][ T10] usb 2-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 36.617157][ T10] usb 2-1: unit 3 not found! [ 36.624894][ T10] usb 2-1: USB disconnect, device number 4 [ 36.641144][ T317] udevd[317]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 36.657154][ T311] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 36.817608][ T311] usb 3-1: Using ep0 maxpacket: 16 [ 36.823815][ T311] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 36.834061][ T311] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 36.843811][ T311] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= f.89 [ 36.853018][ T311] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 36.861073][ T311] usb 3-1: SerialNumber: syz [ 36.878977][ T311] usb 3-1: 0:2 : does not exist [ 37.027639][ T477] binder: Bad value for 'max' [ 37.089617][ T478] netlink: 4 bytes leftover after parsing attributes in process `syz.0.52'. [ 37.120215][ T480] SELinux: Context system_u:object_r:dmidecode_exec_t:s0 is not valid (left unmapped). [ 37.173340][ T485] 9pnet_fd: Insufficient options for proto=fd [ 37.220538][ T487] Invalid ELF header len 7 [ 37.312173][ T491] incfs: Options parsing error. -22 [ 37.317796][ T491] incfs: mount failed -22 [ 37.477042][ T408] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 37.606990][ T408] usb 2-1: device descriptor read/64, error -71 [ 37.783854][ T311] usb 3-1: 5:0: failed to get current value for ch 1 (-22) [ 37.794795][ T311] usb 3-1: 5:0: failed to get current value for ch 2 (-22) [ 37.805673][ T311] usb 3-1: 5:0: failed to get current value for ch 3 (-22) [ 37.817120][ T311] usb 3-1: 5:0: cannot get min/max values for control 5 (id 5) [ 37.826627][ T311] usb 3-1: USB disconnect, device number 4 [ 37.835633][ T317] udevd[317]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 37.847072][ T408] usb 2-1: device descriptor read/64, error -71 [ 38.097805][ T408] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 38.247219][ T408] usb 2-1: device descriptor read/64, error -71 [ 38.466985][ T311] usb 4-1: new full-speed USB device number 5 using dummy_hcd [ 38.487028][ T408] usb 2-1: device descriptor read/64, error -71 [ 38.597038][ T311] usb 4-1: device descriptor read/64, error -71 [ 38.603346][ T408] usb usb2-port1: attempt power cycle [ 38.846976][ T311] usb 4-1: device descriptor read/64, error -71 [ 38.947053][ T408] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 38.957338][ T518] batadv_slave_1: entered allmulticast mode [ 38.976236][ T518] veth1_to_bond: entered promiscuous mode [ 38.982990][ T408] usb 2-1: device descriptor read/8, error -71 [ 39.087012][ T311] usb 4-1: new full-speed USB device number 6 using dummy_hcd [ 39.117916][ T408] usb 2-1: device descriptor read/8, error -71 [ 39.227006][ T311] usb 4-1: device descriptor read/64, error -71 [ 39.233864][ T10] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 39.357102][ T408] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 39.378163][ T408] usb 2-1: device descriptor read/8, error -71 [ 39.386979][ T10] usb 3-1: Using ep0 maxpacket: 8 [ 39.393026][ T10] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 39.403333][ T10] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 39.413580][ T10] usb 3-1: New USB device found, idVendor=1235, idProduct=8012, bcdDevice= 0.40 [ 39.422673][ T10] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 39.430754][ T10] usb 3-1: Product: syz [ 39.434927][ T10] usb 3-1: Manufacturer: syz [ 39.439553][ T10] usb 3-1: SerialNumber: syz [ 39.466975][ T311] usb 4-1: device descriptor read/64, error -71 [ 39.507966][ T408] usb 2-1: device descriptor read/8, error -71 [ 39.577075][ T311] usb usb4-port1: attempt power cycle [ 39.617205][ T408] usb usb2-port1: unable to enumerate USB device [ 39.639802][ T36] kauditd_printk_skb: 80 callbacks suppressed [ 39.639820][ T36] audit: type=1400 audit(1787329172.840:224): avc: denied { write } for pid=523 comm="syz.0.67" name="ptp0" dev="devtmpfs" ino=196 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 39.684398][ T10] usb 3-1: 0:1 : does not exist [ 39.702024][ T515] veth1_to_bond: left promiscuous mode [ 39.712928][ T526] overlayfs: missing 'lowerdir' [ 39.722300][ T515] batadv_slave_1: left allmulticast mode [ 39.754748][ T10] snd-usb-audio 3-1:1.0: probe with driver snd-usb-audio failed with error -71 [ 39.776182][ T10] usb 3-1: USB disconnect, device number 5 [ 39.788031][ T317] udevd[317]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 39.853244][ T13] Bluetooth: hci0: Frame reassembly failed (-84) [ 39.853280][ T36] audit: type=1400 audit(1787329173.050:225): avc: denied { create } for pid=527 comm="syz.0.69" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 39.937118][ T311] usb 4-1: new full-speed USB device number 7 using dummy_hcd [ 39.958052][ T311] usb 4-1: device descriptor read/8, error -71 [ 40.088052][ T311] usb 4-1: device descriptor read/8, error -71 [ 40.231637][ T36] audit: type=1400 audit(1787329173.430:226): avc: denied { bind } for pid=532 comm="syz.1.70" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 40.252133][ T36] audit: type=1400 audit(1787329173.430:227): avc: denied { setopt } for pid=532 comm="syz.1.70" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 40.295023][ T36] audit: type=1400 audit(1787329173.480:228): avc: denied { read } for pid=534 comm="syz.2.71" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 40.322831][ T36] audit: type=1400 audit(1787329173.480:229): avc: denied { write } for pid=534 comm="syz.2.71" path="socket:[5689]" dev="sockfs" ino=5689 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 40.327059][ T311] usb 4-1: new full-speed USB device number 8 using dummy_hcd [ 40.397972][ T311] usb 4-1: device descriptor read/8, error -71 [ 40.411997][ T36] audit: type=1400 audit(1787329173.610:230): avc: denied { map } for pid=534 comm="syz.2.71" path="/dev/zero" dev="devtmpfs" ino=5 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:zero_device_t tclass=chr_file permissive=1 [ 40.528053][ T311] usb 4-1: device descriptor read/8, error -71 [ 40.637014][ T10] usb 2-1: new high-speed USB device number 9 using dummy_hcd [ 40.644648][ T311] usb usb4-port1: unable to enumerate USB device [ 40.776984][ T10] usb 2-1: device descriptor read/64, error -71 [ 41.016996][ T10] usb 2-1: device descriptor read/64, error -71 [ 41.257195][ T10] usb 2-1: new high-speed USB device number 10 using dummy_hcd [ 41.302683][ T36] audit: type=1326 audit(1787329174.500:231): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=547 comm="syz.3.76" exe="/root/ci2-android-6-12-rust/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fc3c979e0d9 code=0x0 [ 41.327230][ T36] audit: type=1326 audit(1787329174.500:232): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=547 comm="syz.3.76" exe="/root/ci2-android-6-12-rust/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fc3c979e0d9 code=0x0 [ 41.386986][ T10] usb 2-1: device descriptor read/64, error -71 [ 41.586981][ T311] usb 4-1: new high-speed USB device number 9 using dummy_hcd [ 41.627018][ T10] usb 2-1: device descriptor read/64, error -71 [ 41.717127][ T311] usb 4-1: device descriptor read/64, error -71 [ 41.737083][ T10] usb usb2-port1: attempt power cycle [ 41.857028][ T531] Bluetooth: hci0: command 0x1003 tx timeout [ 41.858922][ T323] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 41.931484][ T36] audit: type=1400 audit(1787329175.130:233): avc: denied { setopt } for pid=551 comm="syz.0.77" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 41.957072][ T311] usb 4-1: device descriptor read/64, error -71 [ 42.076988][ T10] usb 2-1: new high-speed USB device number 11 using dummy_hcd [ 42.098139][ T10] usb 2-1: device descriptor read/8, error -71 [ 42.197032][ T311] usb 4-1: new high-speed USB device number 10 using dummy_hcd [ 42.228206][ T10] usb 2-1: device descriptor read/8, error -71 [ 42.326983][ T311] usb 4-1: device descriptor read/64, error -71 [ 42.470322][ T10] usb 2-1: new high-speed USB device number 12 using dummy_hcd [ 42.499546][ T10] usb 2-1: device descriptor read/8, error -71 [ 42.537578][ T567] rust_binder: 566:567 inc_ref_done called when no active inc_refs [ 42.566989][ T311] usb 4-1: device descriptor read/64, error -71 [ 42.628095][ T10] usb 2-1: device descriptor read/8, error -71 [ 42.687103][ T311] usb usb4-port1: attempt power cycle [ 42.747962][ T10] usb usb2-port1: unable to enumerate USB device [ 43.026974][ T311] usb 4-1: new high-speed USB device number 11 using dummy_hcd [ 43.048060][ T311] usb 4-1: device descriptor read/8, error -71 [ 43.178128][ T311] usb 4-1: device descriptor read/8, error -71 [ 43.416968][ T311] usb 4-1: new high-speed USB device number 12 using dummy_hcd [ 43.438018][ T311] usb 4-1: device descriptor read/8, error -71 [ 43.575434][ T311] usb 4-1: device descriptor read/8, error -71 [ 43.637235][ T10] usb 2-1: new full-speed USB device number 13 using dummy_hcd [ 43.654260][ T599] tipc: Enabling of bearer rejected, failed to enable media [ 43.687218][ T311] usb usb4-port1: unable to enumerate USB device [ 43.818018][ T10] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 63464, setting to 64 [ 43.829713][ T610] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=3306543545 (13226174180 ns) > initial count (1698879600 ns). Using initial count to start timer. [ 43.847369][ T10] usb 2-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 43.856410][ T10] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 43.875266][ T10] usb 2-1: config 0 descriptor?? [ 43.880564][ T586] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 43.888534][ T10] hub 2-1:0.0: USB hub found [ 43.997007][ T311] usb 3-1: new low-speed USB device number 6 using dummy_hcd [ 44.090149][ T586] ======================================================= [ 44.090149][ T586] WARNING: The mand mount option has been deprecated and [ 44.090149][ T586] and is ignored by this kernel. Remove the mand [ 44.090149][ T586] option from the mount to silence this warning. [ 44.090149][ T586] ======================================================= [ 44.125470][ T586] 9pnet_fd: Insufficient options for proto=fd [ 44.136134][ T10] hub 2-1:0.0: config failed, can't read hub descriptor (err -22) [ 44.147939][ T311] usb 3-1: config 0 interface 0 altsetting 1 endpoint 0x81 has invalid wMaxPacketSize 0 [ 44.157947][ T311] usb 3-1: config 0 interface 0 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 44.170866][ T10] usbhid 2-1:0.0: can't add hid device: -71 [ 44.176826][ T10] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 44.184757][ T311] usb 3-1: config 0 interface 0 has no altsetting 0 [ 44.192231][ T311] usb 3-1: New USB device found, idVendor=1b96, idProduct=0001, bcdDevice= 0.00 [ 44.201531][ T311] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 44.209916][ T10] usb 2-1: USB disconnect, device number 13 [ 44.216538][ T311] usb 3-1: config 0 descriptor?? [ 44.322918][ T618] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 44.331571][ T618] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 44.377010][ T9] usb 1-1: new full-speed USB device number 5 using dummy_hcd [ 44.527942][ T9] usb 1-1: config 162 has an invalid interface number: 79 but max is 1 [ 44.543836][ T9] usb 1-1: config 162 has an invalid interface number: 183 but max is 1 [ 44.561263][ T9] usb 1-1: config 162 has no interface number 0 [ 44.577179][ T9] usb 1-1: config 162 has no interface number 1 [ 44.588000][ T9] usb 1-1: config 162 interface 79 altsetting 4 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 44.615495][ T9] usb 1-1: config 162 interface 183 altsetting 1 has a duplicate endpoint with address 0x9, skipping [ 44.637688][ T9] usb 1-1: config 162 interface 183 altsetting 1 endpoint 0x2 has invalid maxpacket 512, setting to 64 [ 44.686530][ T9] usb 1-1: config 162 interface 183 altsetting 1 endpoint 0x3 has invalid maxpacket 1023, setting to 64 [ 44.707045][ T520] usb 4-1: new high-speed USB device number 13 using dummy_hcd [ 44.716119][ T623] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 44.727050][ T9] usb 1-1: config 162 interface 183 altsetting 1 has an endpoint descriptor with address 0xA6, changing to 0x86 [ 44.746186][ T623] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 44.754165][ T9] usb 1-1: config 162 interface 183 altsetting 1 endpoint 0x86 has invalid maxpacket 23105, setting to 64 [ 44.775328][ T9] usb 1-1: config 162 interface 183 altsetting 1 endpoint 0x85 has an invalid bInterval 0, changing to 10 [ 44.797597][ T9] usb 1-1: config 162 interface 183 altsetting 1 endpoint 0x85 has invalid wMaxPacketSize 0 [ 44.827911][ T9] usb 1-1: config 162 interface 183 altsetting 1 has 5 endpoint descriptors, different from the interface descriptor's value: 4 [ 44.861806][ T9] usb 1-1: config 162 interface 79 has no altsetting 0 [ 44.868818][ T520] usb 4-1: Using ep0 maxpacket: 8 [ 44.883711][ T9] usb 1-1: config 162 interface 183 has no altsetting 0 [ 44.901119][ T520] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 44.911362][ T520] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 44.940279][ T9] usb 1-1: New USB device found, idVendor=056e, idProduct=5004, bcdDevice=db.d1 [ 44.949504][ T9] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 44.958911][ T311] ntrig 0003:1B96:0001.0002: unknown main item tag 0x0 [ 44.965921][ T408] usb 2-1: new high-speed USB device number 14 using dummy_hcd [ 44.973597][ T311] ntrig 0003:1B96:0001.0002: unknown main item tag 0x0 [ 44.980595][ T520] usb 4-1: New USB device found, idVendor=0b05, idProduct=17a0, bcdDevice= 0.40 [ 44.989779][ T520] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 45.000106][ T9] usb 1-1: Product: syz [ 45.006569][ T311] ntrig 0003:1B96:0001.0002: unknown main item tag 0x0 [ 45.015726][ T9] usb 1-1: Manufacturer: syz [ 45.020393][ T520] usb 4-1: Product: syz [ 45.029025][ T9] usb 1-1: SerialNumber: syz [ 45.033665][ T520] usb 4-1: Manufacturer: syz [ 45.038439][ T311] ntrig 0003:1B96:0001.0002: unknown main item tag 0x0 [ 45.050571][ T520] usb 4-1: SerialNumber: syz [ 45.061767][ T311] ntrig 0003:1B96:0001.0002: unknown main item tag 0x0 [ 45.076688][ T311] ntrig 0003:1B96:0001.0002: unknown main item tag 0x0 [ 45.091714][ T311] ntrig 0003:1B96:0001.0002: item fetching failed at offset 9/41 [ 45.108316][ T311] ntrig 0003:1B96:0001.0002: parse failed [ 45.120597][ T311] ntrig 0003:1B96:0001.0002: probe with driver ntrig failed with error -22 [ 45.148422][ T408] usb 2-1: unable to get BOS descriptor or descriptor too short [ 45.164029][ T311] usb 3-1: USB disconnect, device number 6 [ 45.173513][ T408] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 45.195272][ T408] usb 2-1: New USB device found, idVendor=200c, idProduct=100b, bcdDevice= 0.40 [ 45.209949][ T408] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 45.225901][ T408] usb 2-1: Product: syz [ 45.235689][ T408] usb 2-1: Manufacturer: syz [ 45.245839][ T408] usb 2-1: SerialNumber: syz [ 45.274089][ T617] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 45.282757][ T617] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 45.297596][ T617] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 45.312802][ T9] pl2303 1-1:162.79: required endpoints missing [ 45.325787][ T9] pl2303 1-1:162.183: pl2303 converter detected [ 45.332367][ T617] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 45.346862][ T9] pl2303 1-1:162.183: pl2303_vendor_read - failed to read [8484]: -71 [ 45.359187][ T617] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 45.374454][ T9] pl2303 1-1:162.183: pl2303_vendor_write - failed to write [0404]: -71 [ 45.386081][ T617] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 45.400819][ T9] pl2303 1-1:162.183: pl2303_vendor_read - failed to read [8484]: -71 [ 45.411665][ T617] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 45.427049][ T9] pl2303 1-1:162.183: pl2303_vendor_read - failed to read [8383]: -71 [ 45.439761][ T617] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 45.453232][ T9] pl2303 1-1:162.183: pl2303_vendor_read - failed to read [8484]: -71 [ 45.473800][ T408] usb 2-1: 1:1: cannot set freq 48000 to ep 0x1 [ 45.482457][ T9] pl2303 1-1:162.183: pl2303_vendor_write - failed to write [0404]: -71 [ 45.497882][ T520] usb 4-1: Audio class v2/v3 interfaces need an interface association [ 45.516841][ T9] pl2303 1-1:162.183: pl2303_vendor_read - failed to read [8484]: -71 [ 45.526180][ T520] snd-usb-audio 4-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 45.546464][ T408] usb 2-1: USB disconnect, device number 14 [ 45.552575][ T9] pl2303 1-1:162.183: pl2303_vendor_read - failed to read [8383]: -71 [ 45.562242][ T520] usb 4-1: USB disconnect, device number 13 [ 45.571023][ T9] pl2303 1-1:162.183: pl2303_vendor_write - failed to write [0000]: -71 [ 45.581111][ T627] udevd[627]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card1/controlC1/../uevent} for writing: No such file or directory [ 45.591889][ T9] pl2303 1-1:162.183: pl2303_vendor_write - failed to write [0001]: -71 [ 45.615614][ T440] udevd[440]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 45.626274][ T9] pl2303 1-1:162.183: pl2303_vendor_write - failed to write [0002]: -71 [ 45.657201][ T9] usb 1-1: pl2303 converter now attached to ttyUSB0 [ 45.669044][ T9] usb 1-1: USB disconnect, device number 5 [ 45.708088][ T9] pl2303 ttyUSB0: pl2303 converter now disconnected from ttyUSB0 [ 45.734243][ T9] pl2303 1-1:162.183: device disconnected [ 45.940564][ T36] kauditd_printk_skb: 6 callbacks suppressed [ 45.940581][ T36] audit: type=1400 audit(1787329179.140:240): avc: denied { mount } for pid=628 comm="syz.0.101" name="/" dev="configfs" ino=1318 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=filesystem permissive=1 [ 45.970819][ T36] audit: type=1400 audit(1787329179.140:241): avc: denied { search } for pid=628 comm="syz.0.101" name="/" dev="configfs" ino=1318 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 45.992950][ T36] audit: type=1400 audit(1787329179.140:242): avc: denied { read } for pid=628 comm="syz.0.101" name="/" dev="configfs" ino=1318 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 46.015200][ T36] audit: type=1400 audit(1787329179.140:243): avc: denied { open } for pid=628 comm="syz.0.101" path="/" dev="configfs" ino=1318 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 46.038318][ T36] audit: type=1400 audit(1787329179.150:244): avc: denied { connect } for pid=628 comm="syz.0.101" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 46.106940][ T36] audit: type=1400 audit(1787329179.300:245): avc: denied { map } for pid=640 comm="syz.2.108" path="/dev/ashmem" dev="devtmpfs" ino=201 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 46.144473][ T36] audit: type=1400 audit(1787329179.310:246): avc: denied { execute } for pid=640 comm="syz.2.108" path="/dev/ashmem" dev="devtmpfs" ino=201 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 46.167891][ T36] audit: type=1400 audit(1787329179.330:247): avc: denied { write } for pid=638 comm="syz.3.106" name="vga_arbiter" dev="devtmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1 [ 46.185959][ T644] x_tables: duplicate entry at hook 1 [ 46.201620][ T36] audit: type=1400 audit(1787329179.330:248): avc: denied { open } for pid=638 comm="syz.3.106" path="/dev/vga_arbiter" dev="devtmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1 [ 46.226508][ T36] audit: type=1400 audit(1787329179.370:249): avc: denied { mount } for pid=643 comm="syz.0.109" name="/" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=filesystem permissive=1 [ 46.252673][ T520] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 46.273499][ T520] hid-generic 0000:0000:0000.0003: hidraw0: HID v0.00 Device [syz1] on syz0 [ 46.359603][ T651] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=16422 sclass=netlink_xfrm_socket pid=651 comm=syz.3.111 [ 46.519117][ T666] netlink: 104 bytes leftover after parsing attributes in process `syz.1.115'. [ 46.672375][ T673] Bluetooth: hci0: Frame reassembly failed (-84) [ 46.679206][ T674] Bluetooth: hci0: Frame reassembly failed (-84) [ 46.746997][ T9] usb 4-1: new high-speed USB device number 14 using dummy_hcd [ 46.896950][ T9] usb 4-1: Using ep0 maxpacket: 16 [ 46.907402][ T9] usb 4-1: config index 0 descriptor too short (expected 117, got 18) [ 46.916029][ T9] usb 4-1: config 18 has an invalid descriptor of length 0, skipping remainder of the config [ 46.926685][ T9] usb 4-1: config 18 has no interfaces? [ 46.933690][ T9] usb 4-1: New USB device found, idVendor=0ace, idProduct=20ff, bcdDevice= 1.01 [ 46.942841][ T9] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 46.950872][ T9] usb 4-1: Product: syz [ 46.955134][ T9] usb 4-1: Manufacturer: syz [ 46.959768][ T9] usb 4-1: SerialNumber: syz [ 47.046953][ T520] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 47.136952][ T408] usb 2-1: new high-speed USB device number 15 using dummy_hcd [ 47.168344][ T9] usb 4-1: USB disconnect, device number 14 [ 47.198097][ T520] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 47.209267][ T520] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 47.219153][ T520] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 47.232256][ T520] usb 1-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 47.241406][ T520] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 47.250252][ T520] usb 1-1: config 0 descriptor?? [ 47.296940][ T408] usb 2-1: Using ep0 maxpacket: 8 [ 47.303106][ T408] usb 2-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 47.315594][ T408] usb 2-1: New USB device found, idVendor=0763, idProduct=2003, bcdDevice= 0.40 [ 47.324769][ T408] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 47.332914][ T408] usb 2-1: Product: syz [ 47.337380][ T408] usb 2-1: Manufacturer: syz [ 47.342008][ T408] usb 2-1: SerialNumber: syz [ 47.552072][ T408] usb 2-1: 1:1 : format type 0 is detected, processed as PCM [ 47.559555][ T408] usb 2-1: 1:1 : sample bitwidth 177 in over sample bytes 2 [ 47.567866][ T408] usb 2-1: 1:1: cannot set freq 137 to ep 0x1 [ 47.574355][ T408] usb 2-1: 2:1 : UAC_AS_GENERAL descriptor not found [ 47.584715][ T408] usb 2-1: USB disconnect, device number 15 [ 47.599297][ T317] udevd[317]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 47.657300][ T520] plantronics 0003:047F:FFFF.0004: unknown main item tag 0x0 [ 47.664799][ T520] plantronics 0003:047F:FFFF.0004: unknown main item tag 0x0 [ 47.672328][ T520] plantronics 0003:047F:FFFF.0004: unknown main item tag 0x0 [ 47.682445][ T520] plantronics 0003:047F:FFFF.0004: unknown main item tag 0x0 [ 47.697008][ T520] plantronics 0003:047F:FFFF.0004: unknown main item tag 0x0 [ 47.704437][ T520] plantronics 0003:047F:FFFF.0004: unknown main item tag 0x0 [ 47.726824][ T520] plantronics 0003:047F:FFFF.0004: unknown main item tag 0x0 [ 47.735256][ T692] rust_binder: Write failure EFAULT in pid:92 [ 47.741094][ T520] plantronics 0003:047F:FFFF.0004: unknown main item tag 0x0 [ 47.761845][ T520] plantronics 0003:047F:FFFF.0004: unknown main item tag 0x0 [ 47.769404][ T520] plantronics 0003:047F:FFFF.0004: unknown main item tag 0x0 [ 47.776843][ T520] plantronics 0003:047F:FFFF.0004: unknown main item tag 0x0 [ 47.784381][ T520] plantronics 0003:047F:FFFF.0004: unknown main item tag 0x0 [ 47.791842][ T520] plantronics 0003:047F:FFFF.0004: unknown main item tag 0x0 [ 47.799360][ T520] plantronics 0003:047F:FFFF.0004: unknown main item tag 0x0 [ 47.806797][ T520] plantronics 0003:047F:FFFF.0004: unknown main item tag 0x0 [ 47.814635][ T520] plantronics 0003:047F:FFFF.0004: No inputs registered, leaving [ 47.823656][ T520] plantronics 0003:047F:FFFF.0004: hiddev96,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.0-1/input0 [ 47.997039][ T408] usb 4-1: new full-speed USB device number 15 using dummy_hcd [ 48.148012][ T408] usb 4-1: too many endpoints for config 0 interface 0 altsetting 0: 254, using maximum allowed: 30 [ 48.159066][ T408] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1024, setting to 64 [ 48.170092][ T408] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 254 [ 48.183344][ T408] usb 4-1: New USB device found, idVendor=0458, idProduct=5012, bcdDevice= 0.00 [ 48.192443][ T408] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 48.201158][ T408] usb 4-1: config 0 descriptor?? [ 48.206648][ T694] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 48.267645][ T702] fuse: Unknown parameter '' [ 48.356950][ T520] usb 2-1: new low-speed USB device number 16 using dummy_hcd [ 48.508009][ T520] usb 2-1: config 1 interface 1 altsetting 1 endpoint 0x1 has invalid maxpacket 64, setting to 0 [ 48.518756][ T520] usb 2-1: config 1 interface 2 altsetting 1 endpoint 0x82 has invalid maxpacket 2015, setting to 0 [ 48.531790][ T520] usb 2-1: string descriptor 0 read error: -22 [ 48.538110][ T520] usb 2-1: New USB device found, idVendor=041e, idProduct=3042, bcdDevice= 0.40 [ 48.547326][ T520] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 48.558171][ T520] usb 2-1: low speed audio streaming not supported [ 48.564800][ T520] usb 2-1: low speed audio streaming not supported [ 48.615813][ T694] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 48.624486][ T694] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 48.634492][ T408] hid (null): usage index exceeded [ 48.640679][ T408] kye 0003:0458:5012.0005: tablet report size too small, or kye_tablet_rdesc unexpectedly large [ 48.651579][ T408] kye 0003:0458:5012.0005: ignoring exceeding usage max [ 48.659929][ T408] kye 0003:0458:5012.0005: ignoring exceeding usage max [ 48.667073][ T408] kye 0003:0458:5012.0005: usage index exceeded [ 48.673378][ T408] kye 0003:0458:5012.0005: item 0 4 2 2 parsing failed [ 48.682971][ T408] kye 0003:0458:5012.0005: parse failed [ 48.688670][ T408] kye 0003:0458:5012.0005: probe with driver kye failed with error -22 [ 48.736973][ T531] Bluetooth: hci0: command 0x1003 tx timeout [ 48.736973][ T323] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 48.758379][ T408] usb 2-1: USB disconnect, device number 16 [ 48.833614][ T694] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 48.842796][ T694] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 48.856208][ T9] usb 4-1: USB disconnect, device number 15 [ 49.047040][ T520] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 49.206952][ T520] usb 3-1: Using ep0 maxpacket: 32 [ 49.213277][ T520] usb 3-1: config index 0 descriptor too short (expected 29220, got 36) [ 49.221758][ T520] usb 3-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 49.230521][ T520] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 49.241180][ T520] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 49.250208][ T520] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 49.260014][ T520] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 18 [ 49.277004][ T520] usb 3-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 49.295694][ T520] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 49.322800][ T520] usb 3-1: config 0 descriptor?? [ 49.465358][ T752] fuse: root generation should be zero [ 49.569946][ T761] kvm: vcpu 0: requested 6 ns lapic timer period limited to 200000 ns [ 50.077272][ T520] usb 1-1: USB disconnect, device number 6 [ 50.225924][ T45] bridge_slave_1: left allmulticast mode [ 50.231748][ T45] bridge_slave_1: left promiscuous mode [ 50.237747][ T45] bridge0: port 2(bridge_slave_1) entered disabled state [ 50.245451][ T45] bridge_slave_0: left allmulticast mode [ 50.251851][ T45] bridge_slave_0: left promiscuous mode [ 50.257894][ T45] bridge0: port 1(bridge_slave_0) entered disabled state [ 50.433411][ T45] veth1_macvtap: left promiscuous mode [ 50.448187][ T45] veth0_vlan: left promiscuous mode [ 50.602838][ T829] serio: Serial port ptm0 [ 50.633818][ T819] bridge0: port 1(bridge_slave_0) entered blocking state [ 50.641506][ T819] bridge0: port 1(bridge_slave_0) entered disabled state [ 50.648937][ T819] bridge_slave_0: entered allmulticast mode [ 50.655518][ T819] bridge_slave_0: entered promiscuous mode [ 50.668540][ T819] bridge0: port 2(bridge_slave_1) entered blocking state [ 50.675635][ T819] bridge0: port 2(bridge_slave_1) entered disabled state [ 50.688161][ T819] bridge_slave_1: entered allmulticast mode [ 50.701500][ T819] bridge_slave_1: entered promiscuous mode [ 50.770166][ T819] bridge0: port 2(bridge_slave_1) entered blocking state [ 50.777286][ T819] bridge0: port 2(bridge_slave_1) entered forwarding state [ 50.784600][ T819] bridge0: port 1(bridge_slave_0) entered blocking state [ 50.791701][ T819] bridge0: port 1(bridge_slave_0) entered forwarding state [ 50.832176][ T846] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=846 comm=syz.3.192 [ 50.845409][ T13] bridge0: port 1(bridge_slave_0) entered disabled state [ 50.853097][ T13] bridge0: port 2(bridge_slave_1) entered disabled state [ 50.864440][ T846] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=17 sclass=netlink_audit_socket pid=846 comm=syz.3.192 [ 50.889991][ T849] mmap: syz.1.194 (849) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 50.890528][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 50.908848][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 50.917148][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 50.924253][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 50.976800][ T819] veth0_vlan: entered promiscuous mode [ 50.992864][ T819] veth1_macvtap: entered promiscuous mode [ 51.018004][ T36] kauditd_printk_skb: 46 callbacks suppressed [ 51.018021][ T36] audit: type=1400 audit(1787329184.220:296): avc: denied { mounton } for pid=819 comm="syz-executor" path="/root/syzkaller.WEwv3j/syz-tmp/newroot/sys/kernel/debug" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=dir permissive=1 [ 51.055332][ T36] audit: type=1400 audit(1787329184.250:297): avc: denied { unmount } for pid=819 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 51.142790][ T864] serio: Serial port ptm0 [ 51.174203][ T36] audit: type=1400 audit(1787329184.370:298): avc: denied { relabelfrom } for pid=862 comm="syz.0.200" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tun_socket permissive=1 [ 51.196537][ T36] audit: type=1400 audit(1787329184.370:299): avc: denied { relabelto } for pid=862 comm="syz.0.200" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tun_socket permissive=1 [ 51.315695][ T36] audit: type=1400 audit(1787329184.510:300): avc: denied { block_suspend } for pid=875 comm="syz.0.205" capability=36 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 51.391223][ T881] overlayfs: overlapping lowerdir path [ 51.940220][ T36] audit: type=1400 audit(1787329185.140:301): avc: denied { create } for pid=890 comm="syz.1.212" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 52.044892][ T36] audit: type=1326 audit(1787329185.240:302): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=904 comm="syz.2.219" exe="/root/ci2-android-6-12-rust/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5f27f9e0d9 code=0x7ffc0000 [ 52.081052][ T36] audit: type=1326 audit(1787329185.240:303): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=904 comm="syz.2.219" exe="/root/ci2-android-6-12-rust/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5f27f9e0d9 code=0x7ffc0000 [ 52.102177][ T907] ªªªªªª: renamed from vlan0 (while UP) [ 52.116767][ T36] audit: type=1326 audit(1787329185.250:304): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=904 comm="syz.2.219" exe="/root/ci2-android-6-12-rust/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5f27f9e0d9 code=0x7ffc0000 [ 52.141867][ T36] audit: type=1326 audit(1787329185.250:305): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=904 comm="syz.2.219" exe="/root/ci2-android-6-12-rust/syz-executor" sig=0 arch=c000003e syscall=268 compat=0 ip=0x7f5f27f9e0d9 code=0x7ffc0000 [ 52.466650][ T946] bridge0: port 2(bridge_slave_1) entered disabled state [ 52.473975][ T946] bridge0: port 1(bridge_slave_0) entered disabled state [ 52.819409][ T520] usb 3-1: USB disconnect, device number 7 [ 52.918516][ T13] bridge_slave_1: left allmulticast mode [ 52.924283][ T13] bridge_slave_1: left promiscuous mode [ 52.930051][ T13] bridge0: port 2(bridge_slave_1) entered disabled state [ 52.937853][ T13] bridge_slave_0: left allmulticast mode [ 52.943849][ T13] bridge_slave_0: left promiscuous mode [ 52.949996][ T13] bridge0: port 1(bridge_slave_0) entered disabled state [ 53.099488][ T13] veth1_macvtap: left promiscuous mode [ 53.105072][ T13] veth0_vlan: left promiscuous mode [ 53.278448][ T983] bridge0: port 1(bridge_slave_0) entered blocking state [ 53.285555][ T983] bridge0: port 1(bridge_slave_0) entered disabled state [ 53.293044][ T983] bridge_slave_0: entered allmulticast mode [ 53.299582][ T983] bridge_slave_0: entered promiscuous mode [ 53.306210][ T983] bridge0: port 2(bridge_slave_1) entered blocking state [ 53.313545][ T983] bridge0: port 2(bridge_slave_1) entered disabled state [ 53.320776][ T983] bridge_slave_1: entered allmulticast mode [ 53.327521][ T983] bridge_slave_1: entered promiscuous mode [ 53.418693][ T365] bridge0: port 1(bridge_slave_0) entered blocking state [ 53.425801][ T365] bridge0: port 1(bridge_slave_0) entered forwarding state [ 53.443840][ T365] bridge0: port 2(bridge_slave_1) entered blocking state [ 53.450949][ T365] bridge0: port 2(bridge_slave_1) entered forwarding state [ 53.477679][ T983] veth0_vlan: entered promiscuous mode [ 53.491709][ T983] veth1_macvtap: entered promiscuous mode [ 55.876541][ T887] ------------[ cut here ]------------ [ 55.882130][ T887] kobject: '(null)' (ffff888113684548): is not initialized, yet kobject_put() is being called. [ 55.936536][ T887] WARNING: CPU: 0 PID: 887 at lib/kobject.c:736 kobject_put+0x8e/0x2a0 [ 55.945053][ T887] Modules linked in: [ 55.957444][ T887] CPU: 0 UID: 0 PID: 887 Comm: syz.0.210 Not tainted syzkaller #0 1b627ac51616646c2b03e03cc27ccf1d06a70c9d [ 55.968921][ T887] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 55.979043][ T887] RIP: 0010:kobject_put+0x8e/0x2a0 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 55.984197][ T887] Code: 48 b9 00 00 00 00 00 fc ff df 80 3c 08 00 74 08 48 89 df e8 44 e1 44 fc 48 8b 33 48 c7 c7 a0 07 9b 86 48 89 da e8 22 dd 68 fb <0f> 0b eb 0f e8 e9 04 ec fb e9 9c 01 00 00 e8 df 04 ec fb 4c 8d 7b [ 56.003870][ T887] RSP: 0018:ffffc9000e8bf1f8 EFLAGS: 00010246 [ 56.010013][ T887] RAX: e6bf505529886500 RBX: ffff888113684548 RCX: 0000000000080000 [ 56.018045][ T887] RDX: ffffc900011b1000 RSI: 0000000000032ba2 RDI: 0000000000032ba3 [ 56.026056][ T887] RBP: ffffc9000e8bf220 R08: 0000000000000003 R09: 0000000000000004 [ 56.034120][ T887] R10: dffffc0000000000 R11: fffffbfff0e9f34c R12: 00000000fffffff4 [ 56.042173][ T887] R13: ffff888113684584 R14: 1ffff110226d08b0 R15: 0000000000000000 [ 56.050210][ T887] FS: 00007f89f14a86c0(0000) GS:ffff8881f6e00000(0000) knlGS:0000000000000000 [ 56.059229][ T887] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 56.065916][ T887] CR2: 0000001b2f423ffc CR3: 00000001168c0000 CR4: 00000000003526b0 [ 56.073960][ T887] DR0: 0400000000000000 DR1: 0000000000000005 DR2: 0000000000000001 [ 56.082004][ T887] DR3: 000000007fffffff DR6: 00000000ffff0ff0 DR7: 0000000000000400 [ 56.090039][ T887] Call Trace: [ 56.093358][ T887] [ 56.096310][ T887] put_device+0x23/0x40 [ 56.100610][ T887] __scsi_remove_device+0xc4/0x3c0 [ 56.105773][ T887] scsi_alloc_sdev+0x970/0xcc0 [ 56.110653][ T887] ? scsi_target_destroy+0x300/0x300 [ 56.115990][ T887] ? vsnprintf+0x19ef/0x1ad0 [ 56.120702][ T887] ? _raw_spin_unlock_irqrestore+0x4a/0x70 [ 56.126558][ T887] scsi_probe_and_add_lun+0x1e9/0x3e60 [ 56.132096][ T887] ? __cfi_kvasprintf+0x10/0x10 [ 56.137009][ T887] ? scsi_alloc_target+0xc50/0xc50 [ 56.142156][ T887] ? __kasan_check_write+0x18/0x20 [ 56.147338][ T887] ? mutex_unlock+0x90/0x240 [ 56.151963][ T887] ? __cfi_mutex_unlock+0x10/0x10 [ 56.157064][ T887] ? rpm_resume+0xb92/0x1670 [ 56.161694][ T887] ? __cfi_transport_setup_classdev+0x10/0x10 [ 56.167885][ T887] ? __pm_runtime_resume+0xa0/0xa0 [ 56.173047][ T887] ? _raw_spin_lock_irqsave+0xc1/0x160 [ 56.178777][ T887] ? __cfi__raw_spin_lock_irqsave+0x10/0x10 [ 56.184700][ T887] ? _raw_spin_unlock_irqrestore+0x4a/0x70 [ 56.190709][ T887] ? __pm_runtime_resume+0x7a/0xa0 [ 56.195888][ T887] __scsi_scan_target+0x1f1/0xc20 [ 56.200973][ T887] ? scsi_scan_target+0x270/0x270 [ 56.206050][ T887] ? __pm_runtime_resume+0xa0/0xa0 [ 56.211238][ T887] ? _raw_spin_lock_irqsave+0xc1/0x160 [ 56.216743][ T887] ? __kasan_check_write+0x18/0x20 [ 56.221909][ T887] ? _raw_spin_unlock_irqrestore+0x4a/0x70 [ 56.227810][ T887] ? __pm_runtime_resume+0x7a/0xa0 [ 56.232937][ T887] scsi_scan_host_selected+0x352/0x610 [ 56.238456][ T887] store_scan+0x4ba/0x550 [ 56.242826][ T887] ? __cfi_store_scan+0x10/0x10 [ 56.247732][ T887] ? _copy_from_iter+0x215/0x1520 [ 56.252830][ T887] ? __virt_addr_valid+0x2a1/0x370 [ 56.258107][ T887] ? __kasan_check_write+0x18/0x20 [ 56.263229][ T887] ? __cfi_store_scan+0x10/0x10 [ 56.268193][ T887] dev_attr_store+0x76/0xa0 [ 56.272734][ T887] ? __cfi_dev_attr_store+0x10/0x10 [ 56.278001][ T887] sysfs_kf_write+0x13e/0x160 [ 56.282709][ T887] ? __cfi_sysfs_kf_write+0x10/0x10 [ 56.287950][ T887] kernfs_fop_write_iter+0x316/0x510 [ 56.293291][ T887] vfs_write+0x75f/0xfd0 [ 56.297601][ T887] ? __cfi_vfs_write+0x10/0x10 [ 56.302410][ T887] ? __cfi_mutex_lock+0x10/0x10 [ 56.307308][ T887] ksys_write+0x145/0x260 [ 56.311683][ T887] ? xfd_validate_state+0x68/0x140 [ 56.316808][ T887] ? __cfi_ksys_write+0x10/0x10 [ 56.321698][ T887] ? __kasan_check_write+0x18/0x20 [ 56.326835][ T887] ? fpregs_restore_userregs+0x11c/0x260 [ 56.332525][ T887] __x64_sys_write+0x7f/0x90 [ 56.337187][ T887] x64_sys_call+0x271c/0x2ee0 [ 56.341870][ T887] do_syscall_64+0x57/0xf0 [ 56.346287][ T887] ? clear_bhb_loop+0x50/0xa0 [ 56.351036][ T887] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 56.357010][ T887] RIP: 0033:0x7f89f059e0d9 [ 56.361429][ T887] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 56.381102][ T887] RSP: 002b:00007f89f14a8028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 56.389561][ T887] RAX: ffffffffffffffda RBX: 00007f89f0825fa0 RCX: 00007f89f059e0d9 [ 56.397583][ T887] RDX: 0000000000000005 RSI: 0000200000001400 RDI: 0000000000000003 [ 56.405580][ T887] RBP: 00007f89f0635024 R08: 0000000000000000 R09: 0000000000000000 [ 56.413616][ T887] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 56.421666][ T887] R13: 00007f89f0826038 R14: 00007f89f0825fa0 R15: 00007ffee2ac8078 [ 56.429717][ T887] [ 56.432764][ T887] ---[ end trace 0000000000000000 ]--- [ 56.586028][ T13] bridge_slave_1: left allmulticast mode [ 56.591743][ T13] bridge_slave_1: left promiscuous mode [ 56.592429][ T887] ------------[ cut here ]------------ [ 56.598217][ T13] bridge0: port 2(bridge_slave_1) entered disabled state [ 56.602904][ T887] refcount_t: underflow; use-after-free. [ 56.603357][ T887] WARNING: CPU: 0 PID: 887 at lib/refcount.c:28 refcount_warn_saturate+0x119/0x1c0 [ 56.624884][ T887] Modules linked in: [ 56.628818][ T887] CPU: 0 UID: 0 PID: 887 Comm: syz.0.210 Tainted: G W syzkaller #0 1b627ac51616646c2b03e03cc27ccf1d06a70c9d [ 56.641721][ T887] Tainted: [W]=WARN [ 56.645530][ T887] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 56.655614][ T887] RIP: 0010:refcount_warn_saturate+0x119/0x1c0 [ 56.661838][ T887] Code: 05 01 48 c7 c7 c0 f0 51 86 e8 23 44 55 fe 0f 0b eb da e8 ea 6b d8 fe c6 05 68 49 36 05 01 48 c7 c7 20 f1 51 86 e8 07 44 55 fe <0f> 0b eb be e8 ce 6b d8 fe c6 05 49 49 36 05 01 48 c7 c7 60 f0 51 [ 56.681493][ T887] RSP: 0018:ffffc9000e8bf1d8 EFLAGS: 00010246 [ 56.687635][ T887] RAX: e6bf505529886500 RBX: 0000000000000003 RCX: 0000000000080000 [ 56.695624][ T887] RDX: ffffc900011b1000 RSI: 000000000007ffff RDI: 0000000000080000 [ 56.703645][ T887] RBP: ffffc9000e8bf1e8 R08: ffff8881f6e294d3 R09: 1ffff1103edc529a [ 56.711669][ T887] R10: dffffc0000000000 R11: ffffed103edc529b R12: 0000000000000000 [ 56.719733][ T887] R13: ffff888113684584 R14: ffff888113684580 R15: ffff888113684580 [ 56.727757][ T887] FS: 00007f89f14a86c0(0000) GS:ffff8881f6e00000(0000) knlGS:0000000000000000 [ 56.736695][ T887] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 56.743347][ T887] CR2: 0000001b2f423ffc CR3: 00000001168c0000 CR4: 00000000003526b0 [ 56.751360][ T887] DR0: 0400000000000000 DR1: 0000000000000005 DR2: 0000000000000001 [ 56.759376][ T887] DR3: 000000007fffffff DR6: 00000000ffff0ff0 DR7: 0000000000000400 [ 56.767392][ T887] Call Trace: [ 56.770672][ T887] [ 56.773619][ T887] kobject_put+0x25a/0x2a0 [ 56.778125][ T887] put_device+0x23/0x40 [ 56.782315][ T887] __scsi_remove_device+0xc4/0x3c0 [ 56.787485][ T887] scsi_alloc_sdev+0x970/0xcc0 [ 56.792302][ T887] ? scsi_target_destroy+0x300/0x300 [ 56.797640][ T887] ? vsnprintf+0x19ef/0x1ad0 [ 56.802268][ T887] ? _raw_spin_unlock_irqrestore+0x4a/0x70 [ 56.808140][ T887] scsi_probe_and_add_lun+0x1e9/0x3e60 [ 56.813647][ T887] ? __cfi_kvasprintf+0x10/0x10 [ 56.818578][ T887] ? scsi_alloc_target+0xc50/0xc50 [ 56.823747][ T887] ? __kasan_check_write+0x18/0x20 [ 56.828920][ T887] ? mutex_unlock+0x90/0x240 [ 56.833542][ T887] ? __cfi_mutex_unlock+0x10/0x10 [ 56.838622][ T887] ? rpm_resume+0xb92/0x1670 [ 56.843249][ T887] ? __cfi_transport_setup_classdev+0x10/0x10 [ 56.849376][ T887] ? __pm_runtime_resume+0xa0/0xa0 [ 56.854544][ T887] ? _raw_spin_lock_irqsave+0xc1/0x160 [ 56.860215][ T887] ? __cfi__raw_spin_lock_irqsave+0x10/0x10 [ 56.866156][ T887] ? _raw_spin_unlock_irqrestore+0x4a/0x70 [ 56.872017][ T887] ? __pm_runtime_resume+0x7a/0xa0 [ 56.877191][ T887] __scsi_scan_target+0x1f1/0xc20 [ 56.882240][ T887] ? scsi_scan_target+0x270/0x270 [ 56.887348][ T887] ? __pm_runtime_resume+0xa0/0xa0 [ 56.892497][ T887] ? _raw_spin_lock_irqsave+0xc1/0x160 [ 56.898029][ T887] ? __kasan_check_write+0x18/0x20 [ 56.903192][ T887] ? _raw_spin_unlock_irqrestore+0x4a/0x70 [ 56.909084][ T887] ? __pm_runtime_resume+0x7a/0xa0 [ 56.914258][ T887] scsi_scan_host_selected+0x352/0x610 [ 56.919886][ T887] store_scan+0x4ba/0x550 [ 56.924273][ T887] ? __cfi_store_scan+0x10/0x10 [ 56.929288][ T887] ? _copy_from_iter+0x215/0x1520 [ 56.934777][ T887] ? __virt_addr_valid+0x2a1/0x370 [ 56.939968][ T887] ? __kasan_check_write+0x18/0x20 [ 56.945125][ T887] ? __cfi_store_scan+0x10/0x10 [ 56.950031][ T887] dev_attr_store+0x76/0xa0 [ 56.954563][ T887] ? __cfi_dev_attr_store+0x10/0x10 [ 56.959826][ T887] sysfs_kf_write+0x13e/0x160 [ 56.964540][ T887] ? __cfi_sysfs_kf_write+0x10/0x10 [ 56.969810][ T887] kernfs_fop_write_iter+0x316/0x510 [ 56.975137][ T887] vfs_write+0x75f/0xfd0 [ 56.979589][ T887] ? __cfi_vfs_write+0x10/0x10 [ 56.984381][ T887] ? __cfi_mutex_lock+0x10/0x10 [ 56.989451][ T887] ksys_write+0x145/0x260 [ 56.993821][ T887] ? xfd_validate_state+0x68/0x140 [ 56.999005][ T887] ? __cfi_ksys_write+0x10/0x10 [ 57.003899][ T887] ? __kasan_check_write+0x18/0x20 [ 57.009067][ T887] ? fpregs_restore_userregs+0x11c/0x260 [ 57.014748][ T887] __x64_sys_write+0x7f/0x90 [ 57.019414][ T887] x64_sys_call+0x271c/0x2ee0 [ 57.024120][ T887] do_syscall_64+0x57/0xf0 [ 57.028598][ T887] ? clear_bhb_loop+0x50/0xa0 [ 57.033341][ T887] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 57.039301][ T887] RIP: 0033:0x7f89f059e0d9 [ 57.043754][ T887] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 57.063479][ T887] RSP: 002b:00007f89f14a8028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 57.071962][ T887] RAX: ffffffffffffffda RBX: 00007f89f0825fa0 RCX: 00007f89f059e0d9 [ 57.079996][ T887] RDX: 0000000000000005 RSI: 0000200000001400 RDI: 0000000000000003 [ 57.088034][ T887] RBP: 00007f89f0635024 R08: 0000000000000000 R09: 0000000000000000 [ 57.096017][ T887] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 57.104029][ T887] R13: 00007f89f0826038 R14: 00007f89f0825fa0 R15: 00007ffee2ac8078 [ 57.112039][ T887] [ 57.115061][ T887] ---[ end trace 0000000000000000 ]--- [ 57.121191][ T13] bridge_slave_0: left allmulticast mode [ 57.126891][ T13] bridge_slave_0: left promiscuous mode [ 57.132618][ T13] bridge0: port 1(bridge_slave_0) entered disabled state [ 57.177010][ T887] ------------[ cut here ]------------ [ 57.182508][ T887] kobject: '(null)' (ffff8881136841d0): is not initialized, yet kobject_put() is being called. [ 57.207331][ T887] WARNING: CPU: 0 PID: 887 at lib/kobject.c:736 kobject_put+0x8e/0x2a0 [ 57.215634][ T887] Modules linked in: [ 57.219941][ T887] CPU: 0 UID: 0 PID: 887 Comm: syz.0.210 Tainted: G W syzkaller #0 1b627ac51616646c2b03e03cc27ccf1d06a70c9d [ 57.232959][ T887] Tainted: [W]=WARN [ 57.236783][ T887] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 57.246887][ T887] RIP: 0010:kobject_put+0x8e/0x2a0 [ 57.252066][ T887] Code: 48 b9 00 00 00 00 00 fc ff df 80 3c 08 00 74 08 48 89 df e8 44 e1 44 fc 48 8b 33 48 c7 c7 a0 07 9b 86 48 89 da e8 22 dd 68 fb <0f> 0b eb 0f e8 e9 04 ec fb e9 9c 01 00 00 e8 df 04 ec fb 4c 8d 7b [ 57.271781][ T887] RSP: 0018:ffffc9000e8bf1f8 EFLAGS: 00010246 [ 57.277924][ T887] RAX: e6bf505529886500 RBX: ffff8881136841d0 RCX: 0000000000080000 [ 57.285916][ T887] RDX: ffffc900011b1000 RSI: 000000000007ffff RDI: 0000000000080000 [ 57.293952][ T887] RBP: ffffc9000e8bf220 R08: 0000000000000003 R09: 0000000000000004 [ 57.301971][ T887] R10: dffffc0000000000 R11: fffffbfff0e9f34c R12: ffffffff86630e90 [ 57.309999][ T887] R13: ffff88811368420c R14: 1ffff110226d0841 R15: 0000000000000000 [ 57.318015][ T887] FS: 00007f89f14a86c0(0000) GS:ffff8881f6e00000(0000) knlGS:0000000000000000 [ 57.327013][ T887] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 57.333618][ T887] CR2: 0000001b2f423ffc CR3: 00000001168c0000 CR4: 00000000003526b0 [ 57.341649][ T887] DR0: 0400000000000000 DR1: 0000000000000005 DR2: 0000000000000001 [ 57.349699][ T887] DR3: 000000007fffffff DR6: 00000000ffff0ff0 DR7: 0000000000000400 [ 57.357723][ T887] Call Trace: [ 57.361020][ T887] [ 57.363961][ T887] put_device+0x23/0x40 [ 57.368191][ T887] __scsi_remove_device+0x32d/0x3c0 [ 57.373462][ T887] scsi_alloc_sdev+0x970/0xcc0 [ 57.378301][ T887] ? scsi_target_destroy+0x300/0x300 [ 57.383631][ T887] ? vsnprintf+0x19ef/0x1ad0 [ 57.388295][ T887] ? _raw_spin_unlock_irqrestore+0x4a/0x70 [ 57.394166][ T887] scsi_probe_and_add_lun+0x1e9/0x3e60 [ 57.399714][ T887] ? __cfi_kvasprintf+0x10/0x10 [ 57.404600][ T887] ? scsi_alloc_target+0xc50/0xc50 [ 57.409769][ T887] ? __kasan_check_write+0x18/0x20 [ 57.414919][ T887] ? mutex_unlock+0x90/0x240 [ 57.419557][ T887] ? __cfi_mutex_unlock+0x10/0x10 [ 57.424629][ T887] ? rpm_resume+0xb92/0x1670 [ 57.429271][ T887] ? __cfi_transport_setup_classdev+0x10/0x10 [ 57.435390][ T887] ? __pm_runtime_resume+0xa0/0xa0 [ 57.440555][ T887] ? _raw_spin_lock_irqsave+0xc1/0x160 [ 57.446051][ T887] ? __cfi__raw_spin_lock_irqsave+0x10/0x10 [ 57.452018][ T887] ? _raw_spin_unlock_irqrestore+0x4a/0x70 [ 57.457916][ T887] ? __pm_runtime_resume+0x7a/0xa0 [ 57.463047][ T887] __scsi_scan_target+0x1f1/0xc20 [ 57.468125][ T887] ? scsi_scan_target+0x270/0x270 [ 57.473200][ T887] ? __pm_runtime_resume+0xa0/0xa0 [ 57.478359][ T887] ? _raw_spin_lock_irqsave+0xc1/0x160 [ 57.483867][ T887] ? __kasan_check_write+0x18/0x20 [ 57.489036][ T887] ? _raw_spin_unlock_irqrestore+0x4a/0x70 [ 57.494878][ T887] ? __pm_runtime_resume+0x7a/0xa0 [ 57.500046][ T887] scsi_scan_host_selected+0x352/0x610 [ 57.505539][ T887] store_scan+0x4ba/0x550 [ 57.509940][ T887] ? __cfi_store_scan+0x10/0x10 [ 57.514847][ T887] ? _copy_from_iter+0x215/0x1520 [ 57.519928][ T887] ? __virt_addr_valid+0x2a1/0x370 [ 57.525072][ T887] ? __kasan_check_write+0x18/0x20 [ 57.530230][ T887] ? __cfi_store_scan+0x10/0x10 [ 57.535126][ T887] dev_attr_store+0x76/0xa0 [ 57.539692][ T887] ? __cfi_dev_attr_store+0x10/0x10 [ 57.545371][ T887] sysfs_kf_write+0x13e/0x160 [ 57.550103][ T887] ? __cfi_sysfs_kf_write+0x10/0x10 [ 57.555328][ T887] kernfs_fop_write_iter+0x316/0x510 [ 57.560672][ T887] vfs_write+0x75f/0xfd0 [ 57.564949][ T887] ? __cfi_vfs_write+0x10/0x10 [ 57.569792][ T887] ? __cfi_mutex_lock+0x10/0x10 [ 57.574690][ T887] ksys_write+0x145/0x260 [ 57.579074][ T887] ? xfd_validate_state+0x68/0x140 [ 57.584242][ T887] ? __cfi_ksys_write+0x10/0x10 [ 57.589161][ T887] ? __kasan_check_write+0x18/0x20 [ 57.594320][ T887] ? fpregs_restore_userregs+0x11c/0x260 [ 57.600012][ T887] __x64_sys_write+0x7f/0x90 [ 57.604626][ T887] x64_sys_call+0x271c/0x2ee0 [ 57.609339][ T887] do_syscall_64+0x57/0xf0 [ 57.613804][ T887] ? clear_bhb_loop+0x50/0xa0 [ 57.618533][ T887] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 57.624490][ T887] RIP: 0033:0x7f89f059e0d9 [ 57.628980][ T887] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 57.648674][ T887] RSP: 002b:00007f89f14a8028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 57.657157][ T887] RAX: ffffffffffffffda RBX: 00007f89f0825fa0 RCX: 00007f89f059e0d9 [ 57.665153][ T887] RDX: 0000000000000005 RSI: 0000200000001400 RDI: 0000000000000003 [ 57.673164][ T887] RBP: 00007f89f0635024 R08: 0000000000000000 R09: 0000000000000000 [ 57.681189][ T887] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 57.689213][ T887] R13: 00007f89f0826038 R14: 00007f89f0825fa0 R15: 00007ffee2ac8078 [ 57.697239][ T887] [ 57.700275][ T887] ---[ end trace 0000000000000000 ]--- [ 57.715713][ T887] scsi_alloc_sdev: Allocation failure during SCSI scanning, some SCSI devices might not be configured [ 57.726989][ T887] ------------[ cut here ]------------ [ 57.732470][ T887] kernel BUG at drivers/scsi/scsi_scan.c:594! [ 57.738991][ T887] Oops: invalid opcode: 0000 [#1] PREEMPT SMP KASAN PTI [ 57.745979][ T887] CPU: 0 UID: 0 PID: 887 Comm: syz.0.210 Tainted: G W syzkaller #0 1b627ac51616646c2b03e03cc27ccf1d06a70c9d [ 57.758822][ T887] Tainted: [W]=WARN [ 57.762620][ T887] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 57.772672][ T887] RIP: 0010:scsi_target_reap+0x172/0x180 [ 57.778332][ T887] Code: 81 fe e9 ef fe ff ff 44 89 e9 80 e1 07 80 c1 03 38 c1 0f 8c 46 ff ff ff 4c 89 ef e8 18 9b 81 fe e9 39 ff ff ff e8 fe be 28 fe <0f> 0b 66 2e 0f 1f 84 00 00 00 00 00 66 90 b8 da 91 8e 23 90 90 90 [ 57.797955][ T887] RSP: 0018:ffffc9000e8bf7a8 EFLAGS: 00010246 [ 57.804039][ T887] RAX: ffffffff835eb2c2 RBX: ffff8881116e9000 RCX: 0000000000080000 [ 57.812009][ T887] RDX: ffffc900011b1000 RSI: 000000000007ffff RDI: 0000000000080000 [ 57.819978][ T887] RBP: ffffc9000e8bf7d0 R08: 0000000000000003 R09: 0000000000000004 [ 57.827957][ T887] R10: dffffc0000000000 R11: fffff52001d17ee0 R12: ffff8881116e9000 [ 57.835931][ T887] R13: ffff8881116e93c4 R14: 1ffff110222dd278 R15: 0000000000000005 [ 57.843897][ T887] FS: 00007f89f14a86c0(0000) GS:ffff8881f6e00000(0000) knlGS:0000000000000000 [ 57.852823][ T887] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 57.859429][ T887] CR2: 0000001b2f423ffc CR3: 00000001168c0000 CR4: 00000000003526b0 [ 57.867412][ T887] DR0: 0400000000000000 DR1: 0000000000000005 DR2: 0000000000000001 [ 57.875422][ T887] DR3: 000000007fffffff DR6: 00000000ffff0ff0 DR7: 0000000000000400 [ 57.883403][ T887] Call Trace: [ 57.886702][ T887] [ 57.889651][ T887] __scsi_scan_target+0x62c/0xc20 [ 57.894725][ T887] ? scsi_scan_target+0x270/0x270 [ 57.899767][ T887] ? __pm_runtime_resume+0xa0/0xa0 [ 57.904877][ T887] ? _raw_spin_lock_irqsave+0xc1/0x160 [ 57.910340][ T887] ? __kasan_check_write+0x18/0x20 [ 57.915453][ T887] ? _raw_spin_unlock_irqrestore+0x4a/0x70 [ 57.921274][ T887] ? __pm_runtime_resume+0x7a/0xa0 [ 57.926403][ T887] scsi_scan_host_selected+0x352/0x610 [ 57.931964][ T887] store_scan+0x4ba/0x550 [ 57.936306][ T887] ? __cfi_store_scan+0x10/0x10 [ 57.941167][ T887] ? _copy_from_iter+0x215/0x1520 [ 57.946216][ T887] ? __virt_addr_valid+0x2a1/0x370 [ 57.951331][ T887] ? __kasan_check_write+0x18/0x20 [ 57.956444][ T887] ? __cfi_store_scan+0x10/0x10 [ 57.961303][ T887] dev_attr_store+0x76/0xa0 [ 57.965808][ T887] ? __cfi_dev_attr_store+0x10/0x10 [ 57.971006][ T887] sysfs_kf_write+0x13e/0x160 [ 57.975701][ T887] ? __cfi_sysfs_kf_write+0x10/0x10 [ 57.980903][ T887] kernfs_fop_write_iter+0x316/0x510 [ 57.986207][ T887] vfs_write+0x75f/0xfd0 [ 57.990450][ T887] ? __cfi_vfs_write+0x10/0x10 [ 57.995214][ T887] ? __cfi_mutex_lock+0x10/0x10 [ 58.000067][ T887] ksys_write+0x145/0x260 [ 58.004396][ T887] ? xfd_validate_state+0x68/0x140 [ 58.009511][ T887] ? __cfi_ksys_write+0x10/0x10 [ 58.014372][ T887] ? __kasan_check_write+0x18/0x20 [ 58.019484][ T887] ? fpregs_restore_userregs+0x11c/0x260 [ 58.025119][ T887] __x64_sys_write+0x7f/0x90 [ 58.029713][ T887] x64_sys_call+0x271c/0x2ee0 [ 58.034403][ T887] do_syscall_64+0x57/0xf0 [ 58.038829][ T887] ? clear_bhb_loop+0x50/0xa0 [ 58.043506][ T887] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 58.049417][ T887] RIP: 0033:0x7f89f059e0d9 [ 58.053860][ T887] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 58.073474][ T887] RSP: 002b:00007f89f14a8028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 58.081900][ T887] RAX: ffffffffffffffda RBX: 00007f89f0825fa0 RCX: 00007f89f059e0d9 [ 58.089878][ T887] RDX: 0000000000000005 RSI: 0000200000001400 RDI: 0000000000000003 [ 58.097850][ T887] RBP: 00007f89f0635024 R08: 0000000000000000 R09: 0000000000000000 [ 58.105826][ T887] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 58.113792][ T887] R13: 00007f89f0826038 R14: 00007f89f0825fa0 R15: 00007ffee2ac8078 [ 58.121775][ T887] [ 58.124811][ T887] Modules linked in: [ 58.129250][ T887] ---[ end trace 0000000000000000 ]--- [ 58.137352][ T887] RIP: 0010:scsi_target_reap+0x172/0x180 [ 58.143010][ T887] Code: 81 fe e9 ef fe ff ff 44 89 e9 80 e1 07 80 c1 03 38 c1 0f 8c 46 ff ff ff 4c 89 ef e8 18 9b 81 fe e9 39 ff ff ff e8 fe be 28 fe <0f> 0b 66 2e 0f 1f 84 00 00 00 00 00 66 90 b8 da 91 8e 23 90 90 90 [ 58.162798][ T887] RSP: 0018:ffffc9000e8bf7a8 EFLAGS: 00010246 [ 58.168970][ T887] RAX: ffffffff835eb2c2 RBX: ffff8881116e9000 RCX: 0000000000080000 [ 58.177957][ T887] RDX: ffffc900011b1000 RSI: 000000000007ffff RDI: 0000000000080000 [ 58.186028][ T887] RBP: ffffc9000e8bf7d0 R08: 0000000000000003 R09: 0000000000000004 [ 58.186337][ T13] veth1_macvtap: left promiscuous mode [ 58.194115][ T887] R10: dffffc0000000000 R11: fffff52001d17ee0 R12: ffff8881116e9000 [ 58.200683][ T13] veth0_vlan: left promiscuous mode [ 58.207695][ T887] R13: ffff8881116e93c4 R14: 1ffff110222dd278 R15: 0000000000000005 [ 58.220804][ T887] FS: 00007f89f14a86c0(0000) GS:ffff8881f6e00000(0000) knlGS:0000000000000000 [ 58.229806][ T887] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 58.236470][ T887] CR2: 0000001b2f423ffc CR3: 00000001168c0000 CR4: 00000000003526b0 [ 58.244587][ T887] DR0: 0400000000000000 DR1: 0000000000000005 DR2: 0000000000000001 [ 58.252640][ T887] DR3: 000000007fffffff DR6: 00000000ffff0ff0 DR7: 0000000000000400 [ 58.260712][ T887] Kernel panic - not syncing: Fatal exception [ 58.267481][ T887] Kernel Offset: disabled [ 58.271835][ T887] Rebooting in 86400 seconds..