last executing test programs: 3.934687292s ago: executing program 2 (id=3): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./sys\x00', &(0x7f00000000c0)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./sys/block/sda/device/scsi_disk/0:0:0:0/max_write_same_blocks\x00', 0x2, 0x0) write(r0, &(0x7f0000000140)='65535\x00', 0x6) mkdirat(0xffffffffffffff9c, &(0x7f0000000180)='./dev\x00', 0x1ff) mount(0x0, &(0x7f00000001c0)='./dev\x00', &(0x7f0000000200)='devtmpfs\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./dev/sda\x00', 0x2, 0x0) ioctl$BLKZEROOUT(r1, 0x127f, &(0x7f0000000000)={0x0, 0x1000}) 3.795797973s ago: executing program 2 (id=6): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="120100000000181058040550000000000001090224000100000000090400000903000000092100000001221600090581030800000000"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f00000001c0)={0x28, 0x0, 0x0, &(0x7f0000000000)={0x0, 0x22, 0x16, {[@global=@item_012={0x1, 0x1, 0x0, "01"}, @local=@item_012={0x1, 0x2, 0x0, "02"}, @main=@item_012={0x1, 0x0, 0xa, "01"}, @global=@item_012={0x1, 0x1, 0x8, "05"}, @local=@item_012={0x1, 0x2, 0x0, '\x00'}, @global=@item_012={0x1, 0x1, 0x1, '\x00'}, @global=@item_012={0x2, 0x1, 0x2, "ff00"}, @global=@item_012={0x1, 0x1, 0x7, '\b'}, @global=@item_012={0x1, 0x1, 0x9, "06"}, @main=@item_012={0x1, 0x0, 0xb, "02"}, @main=@item_012={0x0, 0x0, 0xc}]}}, 0x0}, 0x0) nanosleep(&(0x7f0000000300)={0x1}, 0x0) 3.376407515s ago: executing program 3 (id=4): syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) syz_emit_vhci(&(0x7f0000000000)=ANY=[@ANYBLOB="043e130100c800000110aaaaaaaaaa00000000000000"], 0x16) nanosleep(&(0x7f0000000300)={0x0, 0x10000000}, 0x0) r0 = openat$6lowpan_enable(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) write$6lowpan_enable(r0, &(0x7f0000000140)='1', 0x1) r1 = openat$6lowpan_control(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) write$6lowpan_control(r1, &(0x7f00000001c0)='connect aa:aa:aa:aa:aa:10 1', 0x1b) write$6lowpan_control(r1, &(0x7f0000000200)='disconnect aa:aa:aa:aa:aa:10 0', 0x1e) r2 = socket$inet6(0xa, 0x2, 0x0) setsockopt(r2, 0x1, 0x19, &(0x7f0000000240)='bt0\x00', 0x4) sendto$inet6(r2, &(0x7f0000000280)='payload', 0x7, 0x0, &(0x7f00000002c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) 2.949781858s ago: executing program 3 (id=7): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./proc\x00', &(0x7f0000000000)='proc\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./proc/net/afs/cells\x00', 0x2, 0x0) write(r0, &(0x7f0000000080)='add syz0 127.0.0.1\n\x00', 0x13) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./proc/net/afs/cells\x00', 0x0, 0x0) read(r1, &(0x7f00000000a0)=""/256, 0x100) 2.84777754s ago: executing program 3 (id=8): r0 = socket$inet(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x1bd, @empty}, 0x10) listen(r0, 0x1) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x1ff) mount(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000140)='cifs\x00', 0x0, &(0x7f0000000180)='source=//127.0.0.1/share,user=guest,pass=guest,vers=3.0\x00') r1 = accept(r0, 0x0, 0x0) close(r1) 2.618549702s ago: executing program 0 (id=1): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000100)='./proc\x00', &(0x7f0000000140)='proc\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./proc/sys/net/ipv6/conf/lo/keep_addr_on_down\x00', 0x2, 0x0) write(r0, &(0x7f0000000040)='1\n', 0x2) r1 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r1, 0x8914, &(0x7f00000000c0)={'lo\x00', 0x1}) ioctl$sock_inet6_SIOCSIFADDR(r1, 0x8916, &(0x7f0000000080)={@private0, 0x40, 0x1}) ioctl$sock_inet_SIOCSIFFLAGS(r1, 0x8914, &(0x7f00000000c0)={'lo\x00'}) 2.555604125s ago: executing program 3 (id=9): syz_usb_connect(0x3, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="120100008010bd40820514009dbb0000000109022400011b00000009040000022a3e740009058bff7f0000100109050b362f"], 0x0) nanosleep(&(0x7f0000000300)={0x1}, 0x0) r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x181603, 0x0) ioctl$SNDCTL_SEQ_OUTOFBAND(r0, 0x40085112, &(0x7f0000000040)=@e={0xff, 0xa, 0x7, 0x2, @SEQ_CONTROLLER=0xfe, 0x10, 0x7, 0x8b}) 2.29781658s ago: executing program 0 (id=10): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000040)='sysfs\x00', 0x0, 0x0) r0 = socket$netlink(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000fc0)={&(0x7f00000004c0)={0x38, 0x1403, 0x1, 0x70bd2d, 0x0, "", [{{0x9, 0x2, 'syz0\x00'}, {0x8, 0x41, 'siw\x00'}, {0x14, 0x33, 'lo\x00'}}]}, 0x38}, 0x1, 0x0, 0x0, 0x854}, 0x0) nanosleep(&(0x7f0000000100)={0x0, 0x10000000}, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./sys/class/infiniband_srp/srp-syz0-1/add_target\x00', 0x2, 0x0) write(r1, &(0x7f0000000240)='id_ext=0,ioc_guid=0,dest=127.0.0.1:3260\x00', 0x27) 2.283741446s ago: executing program 1 (id=2): r0 = socket$rxrpc(0x21, 0x2, 0x2) bind$rxrpc(r0, &(0x7f0000000080)=@in4={0x21, 0x1, 0x2, 0x10, {0x2, 0x1b5b, @loopback}}, 0x24) listen(r0, 0xa) sendmsg(r0, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)=[{0x18, 0x110, 0x1, "0100000000000000"}, {0x10, 0x110, 0xe}], 0x28}, 0x0) r1 = syz_io_uring_setup(0x10, &(0x7f0000001000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000001100)=0x0, &(0x7f0000001108)=0x0, &(0x7f0000001110)=0x0) syz_io_uring_submit(r2, r3, r4, &(0x7f0000001200)=@IORING_OP_RECVMSG={0xa, 0x4, 0x0, r0, 0x0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000400)=[{&(0x7f0000000500)=""/1024, 0x400}], 0x1}}) syz_io_uring_submit(r2, r3, r4, &(0x7f0000001300)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r0, 0x0, &(0x7f0000000700)={0x0, 0x0, &(0x7f0000000800)=[{&(0x7f0000000900)="ff00"/1048, 0x418}], 0x1, &(0x7f0000000a00)=[{0x18, 0x110, 0x1, "0100000000000000"}], 0x18}}) io_uring_enter(r1, 0x2, 0x0, 0x0, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./proc\x00', &(0x7f0000000010)='proc\x00', 0x0, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000020)='./proc/net/afs/cells\x00', 0x2, 0x0) write(r5, &(0x7f0000000040)='add syz0 ::1\n', 0xd) r6 = openat(0xffffffffffffff9c, &(0x7f0000000050)='./proc/net/afs/rootcell\x00', 0x2, 0x0) write(r6, &(0x7f0000000070)='syz0\n', 0x5) mkdirat(0xffffffffffffff9c, &(0x7f0000000b00)='./file0\x00', 0x1ff) mount$afs(&(0x7f0000000d00)=@cell={0x23, 'syz0:', 'syz0'}, &(0x7f0000000b00)='./file0\x00', &(0x7f0000000c00), 0x0, 0x0) 2.142463038s ago: executing program 4 (id=5): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x3}]}, 0x24}}, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f00000001c0)={'wlan0\x00', 0x1}) sendmsg$NL80211_CMD_START_AP(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)={0x5c, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@beacon=[@NL80211_ATTR_BEACON_HEAD={0x28, 0xe, {{{}, {}, @broadcast, @device_a, @from_mac}, 0x0, @default, 0x1, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void}}], @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}], @NL80211_ATTR_BEACON_INTERVAL={0x8}, @NL80211_ATTR_DTIM_PERIOD={0x8, 0xd, 0x2}]}, 0x5c}}, 0x0) nanosleep(&(0x7f0000000300)={0x0, 0x35a4e900}, 0x0) 1.91322585s ago: executing program 1 (id=11): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000040)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./sys/power/state\x00', 0x2, 0x0) write(r0, &(0x7f00000000c0)='disk\n', 0x5) 1.62682361s ago: executing program 0 (id=12): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./sys\x00', &(0x7f00000000c0)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./sys/bus/pci/devices/0000:00:03.0/driver/unbind\x00', 0x1, 0x0) write(r0, &(0x7f0000000140)='0000:00:03.0\x00', 0xd) r1 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./sys/bus/pci/devices/0000:00:03.0/driver_override\x00', 0x1, 0x0) write(r1, &(0x7f00000001c0)='thunderbolt\x00', 0xc) r2 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./sys/bus/pci/drivers/thunderbolt/bind\x00', 0x1, 0x0) write(r2, &(0x7f0000000240)='0000:00:03.0\x00', 0xd) 1.138345082s ago: executing program 4 (id=13): write(0xffffffffffffffff, &(0x7f0000001300)="0600000000000000020000000300"/120, 0x78) 907.763843ms ago: executing program 4 (id=14): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ed) mount(0x0, &(0x7f0000000000)='./config\x00', &(0x7f0000000100)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./config/nvmet/subsystems/testnqn\x00', 0x1ed) r0 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./config/nvmet/subsystems/testnqn/attr_allow_any_host\x00', 0x2, 0x0) write(r0, &(0x7f0000000340)='1\x00', 0x1) mkdirat(0xffffffffffffff9c, &(0x7f00000003c0)='./config/nvmet/subsystems/testnqn/namespaces/1\x00', 0x1ed) r1 = openat(0xffffffffffffff9c, &(0x7f0000000440)='./config/nvmet/subsystems/testnqn/namespaces/1/device_path\x00', 0x2, 0x0) write(r1, &(0x7f0000000480)='/dev/nullb0\x00', 0xb) r2 = openat(0xffffffffffffff9c, &(0x7f00000004c0)='./config/nvmet/subsystems/testnqn/namespaces/1/buffered_io\x00', 0x2, 0x0) write(r2, &(0x7f0000000500)='1\x00', 0x1) r3 = openat(0xffffffffffffff9c, &(0x7f0000000540)='./config/nvmet/subsystems/testnqn/namespaces/1/enable\x00', 0x2, 0x0) write(r3, &(0x7f0000000580)='1\x00', 0x1) mkdirat(0xffffffffffffff9c, &(0x7f0000000600)='./config/nvmet/ports/1\x00', 0x1ed) r4 = openat(0xffffffffffffff9c, &(0x7f0000000640)='./config/nvmet/ports/1/addr_trtype\x00', 0x2, 0x0) write(r4, &(0x7f0000000680)='loop\x00', 0x4) symlinkat(&(0x7f00000006c0)='./config/nvmet/subsystems/testnqn\x00', 0xffffffffffffff9c, &(0x7f0000000700)='./config/nvmet/ports/1/subsystems/testnqn\x00') r5 = openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000000740), 0x2, 0x0) write(r5, &(0x7f0000000780)='transport=loop,nqn=testnqn\x00', 0x1a) nanosleep(&(0x7f0000000800)={0x0, 0x1dcd6500}, 0x0) nanosleep(&(0x7f0000000800)={0x0, 0x1dcd6500}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000840)='./sys\x00', 0x1ed) mount(0x0, &(0x7f0000000840)='./sys\x00', &(0x7f0000000880)='sysfs\x00', 0x0, 0x0) r6 = openat(0xffffffffffffff9c, &(0x7f00000008c0)='./sys/class/nvme/nvme0/nvme0n1/wwid\x00', 0x0, 0x0) read(r6, &(0x7f0000000900), 0x64) r7 = openat(0xffffffffffffff9c, &(0x7f0000000940)='./sys/class/nvme/nvme1/nvme1n1/wwid\x00', 0x0, 0x0) read(r7, &(0x7f0000000980), 0x64) 410.908945ms ago: executing program 2 (id=15): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ff) mount(&(0x7f0000000040)=@filename='none\x00', &(0x7f0000000080)='./config\x00', &(0x7f00000000c0)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./config/usb_gadget/g1\x00', 0x1ff) r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./config/usb_gadget/g1/idVendor\x00', 0x1, 0x0) write(r0, &(0x7f0000000180)='0x1d6b', 0x6) r1 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./config/usb_gadget/g1/idProduct\x00', 0x1, 0x0) write(r1, &(0x7f0000000200)='0x0104', 0x6) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./config/usb_gadget/g1/strings/0x409\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./config/usb_gadget/g1/configs/c.1\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f00000002c0)='./config/usb_gadget/g1/configs/c.1/strings/0x409\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000300)='./config/usb_gadget/g1/functions/ncm.usb0\x00', 0x1ff) symlinkat(&(0x7f0000000340)='./config/usb_gadget/g1/functions/ncm.usb0\x00', 0xffffffffffffff9c, &(0x7f0000000380)='./config/usb_gadget/g1/configs/c.1/ncm.usb0\x00') r2 = openat(0xffffffffffffff9c, &(0x7f00000003c0)='./config/usb_gadget/g1/UDC\x00', 0x1, 0x0) write(r2, &(0x7f0000000400)='dummy_udc.0', 0xb) nanosleep(&(0x7f0000000440)={0x0, 0x10000000}, 0x0) r3 = socket$inet(0x2, 0x2, 0x0) ioctl(r3, 0x8914, &(0x7f0000000480)="757362310000000000000000000000000100"/40) sendto$inet(r3, &(0x7f0000000500)='hello', 0x5, 0x0, &(0x7f0000000540)={0x2, 0x1234, @broadcast}, 0x10) 140.988367ms ago: executing program 4 (id=16): r0 = memfd_create(&(0x7f0000000100)='img\x00', 0x0) ftruncate(r0, 0x1000000) r1 = syz_open_dev$loop(&(0x7f0000000140), 0x0, 0x2) ioctl$LOOP_SET_FD(r1, 0x4c00, r0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000040)='sysfs\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000080)='./sys/module/block2mtd/parameters/block2mtd\x00', 0x1, 0x0) nanosleep(&(0x7f0000000400)={0x0, 0x1312d00}, 0x0) nanosleep(&(0x7f0000000400)={0x0, 0x1312d00}, 0x0) nanosleep(&(0x7f0000000400)={0x0, 0x1312d00}, 0x0) nanosleep(&(0x7f0000000400)={0x0, 0x1312d00}, 0x0) nanosleep(&(0x7f0000000400)={0x0, 0x1312d00}, 0x0) r2 = syz_open_dev$mtd(&(0x7f0000000600), 0x1, 0x2) ioctl$MEMERASE(r2, 0x40084d02, &(0x7f0000000640)={0x0, 0x1000000}) r3 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) ioctl(r3, 0x40186f40, &(0x7f00000001c0)="000000000100"/24) nanosleep(&(0x7f0000000400)={0x0, 0x1312d00}, 0x0) nanosleep(&(0x7f0000000400)={0x0, 0x1312d00}, 0x0) nanosleep(&(0x7f0000000400)={0x0, 0x1312d00}, 0x0) nanosleep(&(0x7f0000000400)={0x0, 0x1312d00}, 0x0) nanosleep(&(0x7f0000000400)={0x0, 0x1312d00}, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000380)='./dev/ubi0\x00', 0x2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000500)='./mnt\x00', 0x1ff) mount(&(0x7f0000000540)=@filename='ubi0_0\x00', &(0x7f0000000500)='./mnt\x00', &(0x7f0000000580)='ubifs\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f00000005c0)='./mnt/test\x00', 0x42, 0x1ff) 0s ago: executing program 2 (id=17): mkdirat(0xffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(&(0x7f0000000140)=@filename='none\x00', &(0x7f0000000040)='./sys\x00', &(0x7f0000000080)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffff9c, &(0x7f00000000c0)='./sys/power/state\x00', 0x1, 0x0) write(r0, &(0x7f0000000100)='disk\v\x00\x00\x00', 0x8) kernel console output (not intermixed with test programs): [ 58.673605][ T29] audit: type=1400 audit(1785856075.839:111): avc: denied { write } for pid=5458 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 58.725732][ T29] audit: type=1400 audit(1785856075.889:112): avc: denied { write } for pid=5469 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 58.921496][ T29] audit: type=1400 audit(1785856076.079:113): avc: denied { write } for pid=5472 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 58.979083][ T29] audit: type=1400 audit(1785856076.139:114): avc: denied { write } for pid=5483 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 59.162764][ T29] audit: type=1400 audit(1785856076.329:115): avc: denied { write } for pid=5486 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 59.217820][ T29] audit: type=1400 audit(1785856076.379:116): avc: denied { write } for pid=5497 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 59.404859][ T29] audit: type=1400 audit(1785856076.569:117): avc: denied { write } for pid=5500 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 59.466472][ T29] audit: type=1400 audit(1785856076.629:118): avc: denied { write } for pid=5511 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 59.673179][ T29] audit: type=1400 audit(1785856076.839:119): avc: denied { write } for pid=5515 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 59.736249][ T29] audit: type=1400 audit(1785856076.899:120): avc: denied { write } for pid=5526 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 59.930266][ T29] audit: type=1400 audit(1785856077.089:121): avc: denied { write } for pid=5529 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 59.993345][ T29] audit: type=1400 audit(1785856077.159:122): avc: denied { write } for pid=5540 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 Warning: Permanently added '10.128.0.152' (ED25519) to the list of known hosts. [ 64.431949][ T29] kauditd_printk_skb: 6 callbacks suppressed [ 64.431965][ T29] audit: type=1400 audit(1785856081.599:129): avc: denied { mounton } for pid=5589 comm="syz-executor" path="/syzcgroup/unified" dev="sda1" ino=2023 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1 [ 64.462700][ T29] audit: type=1400 audit(1785856081.629:130): avc: denied { mount } for pid=5589 comm="syz-executor" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 64.465863][ T5589] cgroup: Unknown subsys name 'net' [ 64.494669][ T29] audit: type=1400 audit(1785856081.659:131): avc: denied { unmount } for pid=5589 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 64.674878][ T5589] cgroup: Unknown subsys name 'cpuset' [ 64.683079][ T5589] cgroup: Unknown subsys name 'rlimit' [ 64.767838][ T29] audit: type=1400 audit(1785856081.929:132): avc: denied { setattr } for pid=5589 comm="syz-executor" name="raw-gadget" dev="devtmpfs" ino=821 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 64.801401][ T29] audit: type=1400 audit(1785856081.929:133): avc: denied { create } for pid=5589 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 64.823500][ T29] audit: type=1400 audit(1785856081.929:134): avc: denied { write } for pid=5589 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 64.849640][ T29] audit: type=1400 audit(1785856081.929:135): avc: denied { read } for pid=5589 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 64.873911][ T29] audit: type=1400 audit(1785856081.959:136): avc: denied { mounton } for pid=5589 comm="syz-executor" path="/proc/sys/fs/binfmt_misc" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=dir permissive=1 [ 64.898877][ T29] audit: type=1400 audit(1785856081.959:137): avc: denied { mount } for pid=5589 comm="syz-executor" name="/" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=filesystem permissive=1 Setting up swapspace version 1, size = 127995904 bytes [ 64.944027][ T5596] SELinux: Context root:object_r:swapfile_t is not valid (left unmapped). [ 64.953657][ T29] audit: type=1400 audit(1785856082.119:138): avc: denied { relabelto } for pid=5596 comm="mkswap" name="swap-file" dev="sda1" ino=2026 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 65.920524][ T5589] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 67.904418][ T5606] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 67.915073][ T5606] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 67.926345][ T5606] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 67.936704][ T5606] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 67.945466][ T5606] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 67.997383][ T5606] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 68.006156][ T5606] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 68.013784][ T5606] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 68.022173][ T5606] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 68.030149][ T5606] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 68.055674][ T4926] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 68.064160][ T4926] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 68.072887][ T4926] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 68.082367][ T4926] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 68.090012][ T4926] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 68.100289][ T5616] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 68.110375][ T49] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 68.128991][ T5616] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 68.150122][ T49] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 68.151844][ T5617] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 68.165423][ T49] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 68.174036][ T49] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 68.183210][ T5617] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 68.196825][ T5617] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 68.205220][ T5617] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 69.602878][ T5608] bridge0: port 1(bridge_slave_0) entered blocking state [ 69.610940][ T5608] bridge0: port 1(bridge_slave_0) entered disabled state [ 69.618353][ T5608] bridge_slave_0: entered allmulticast mode [ 69.625941][ T5608] bridge_slave_0: entered promiscuous mode [ 69.663837][ T5608] bridge0: port 2(bridge_slave_1) entered blocking state [ 69.670987][ T5608] bridge0: port 2(bridge_slave_1) entered disabled state [ 69.678286][ T5608] bridge_slave_1: entered allmulticast mode [ 69.685140][ T5608] bridge_slave_1: entered promiscuous mode [ 69.726750][ T5605] bridge0: port 1(bridge_slave_0) entered blocking state [ 69.734566][ T5605] bridge0: port 1(bridge_slave_0) entered disabled state [ 69.742645][ T5605] bridge_slave_0: entered allmulticast mode [ 69.749439][ T5605] bridge_slave_0: entered promiscuous mode [ 69.760797][ T5611] bridge0: port 1(bridge_slave_0) entered blocking state [ 69.767985][ T5611] bridge0: port 1(bridge_slave_0) entered disabled state [ 69.775179][ T5611] bridge_slave_0: entered allmulticast mode [ 69.782056][ T5611] bridge_slave_0: entered promiscuous mode [ 69.805290][ T5605] bridge0: port 2(bridge_slave_1) entered blocking state [ 69.812468][ T5605] bridge0: port 2(bridge_slave_1) entered disabled state [ 69.819703][ T5605] bridge_slave_1: entered allmulticast mode [ 69.826957][ T5605] bridge_slave_1: entered promiscuous mode [ 69.840378][ T5611] bridge0: port 2(bridge_slave_1) entered blocking state [ 69.847543][ T5611] bridge0: port 2(bridge_slave_1) entered disabled state [ 69.854831][ T5611] bridge_slave_1: entered allmulticast mode [ 69.861770][ T5611] bridge_slave_1: entered promiscuous mode [ 69.878239][ T5608] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 69.911337][ T5614] bridge0: port 1(bridge_slave_0) entered blocking state [ 69.918571][ T5614] bridge0: port 1(bridge_slave_0) entered disabled state [ 69.925724][ T5614] bridge_slave_0: entered allmulticast mode [ 69.932508][ T5614] bridge_slave_0: entered promiscuous mode [ 69.941035][ T5608] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 69.957352][ T5618] bridge0: port 1(bridge_slave_0) entered blocking state [ 69.964498][ T5618] bridge0: port 1(bridge_slave_0) entered disabled state [ 69.971895][ T5618] bridge_slave_0: entered allmulticast mode [ 69.978821][ T5618] bridge_slave_0: entered promiscuous mode [ 69.993671][ T5614] bridge0: port 2(bridge_slave_1) entered blocking state [ 70.000821][ T5614] bridge0: port 2(bridge_slave_1) entered disabled state [ 70.007998][ T5614] bridge_slave_1: entered allmulticast mode [ 70.014978][ T5614] bridge_slave_1: entered promiscuous mode [ 70.030324][ T5605] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 70.040054][ T5617] Bluetooth: hci0: command tx timeout [ 70.042779][ T5605] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 70.054766][ T5618] bridge0: port 2(bridge_slave_1) entered blocking state [ 70.061981][ T5618] bridge0: port 2(bridge_slave_1) entered disabled state [ 70.069102][ T5618] bridge_slave_1: entered allmulticast mode [ 70.076043][ T5618] bridge_slave_1: entered promiscuous mode [ 70.084794][ T5611] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 70.112233][ T5617] Bluetooth: hci1: command tx timeout [ 70.130579][ T5611] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 70.148762][ T5608] team0: Port device team_slave_0 added [ 70.184244][ T5614] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 70.194103][ T5617] Bluetooth: hci2: command tx timeout [ 70.202038][ T5608] team0: Port device team_slave_1 added [ 70.209332][ T5605] team0: Port device team_slave_0 added [ 70.217293][ T5618] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 70.239313][ T5614] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 70.264873][ T5605] team0: Port device team_slave_1 added [ 70.271973][ T5616] Bluetooth: hci3: command tx timeout [ 70.273445][ T5618] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 70.278145][ T5617] Bluetooth: hci4: command tx timeout [ 70.289272][ T5611] team0: Port device team_slave_0 added [ 70.331744][ T5611] team0: Port device team_slave_1 added [ 70.338557][ T5614] team0: Port device team_slave_0 added [ 70.345294][ T5608] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 70.352309][ T5608] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 70.378407][ T5608] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 70.415812][ T5614] team0: Port device team_slave_1 added [ 70.422046][ T5608] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 70.429050][ T5608] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 70.456090][ T5608] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 70.467507][ T5605] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 70.474573][ T5605] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 70.500496][ T5605] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 70.514174][ T5618] team0: Port device team_slave_0 added [ 70.543696][ T5605] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 70.550630][ T5605] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 70.576741][ T5605] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 70.589981][ T5618] team0: Port device team_slave_1 added [ 70.596332][ T5611] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 70.603942][ T5611] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 70.629931][ T5611] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 70.649159][ T5614] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 70.656129][ T5614] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 70.682004][ T5614] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 70.707700][ T5611] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 70.714741][ T5611] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 70.740663][ T5611] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 70.757581][ T5614] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 70.764544][ T5614] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 70.790436][ T5614] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 70.834954][ T5618] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 70.842100][ T5618] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 70.868003][ T5618] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 70.880057][ T5618] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 70.887026][ T5618] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 70.912920][ T5618] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 70.929250][ T5608] hsr_slave_0: entered promiscuous mode [ 70.935573][ T5608] hsr_slave_1: entered promiscuous mode [ 70.999258][ T5611] hsr_slave_0: entered promiscuous mode [ 71.005393][ T5611] hsr_slave_1: entered promiscuous mode [ 71.011300][ T5611] debugfs: 'hsr0' already exists in 'hsr' [ 71.017618][ T5611] Cannot create hsr debugfs directory [ 71.034666][ T5614] hsr_slave_0: entered promiscuous mode [ 71.040700][ T5614] hsr_slave_1: entered promiscuous mode [ 71.046982][ T5614] debugfs: 'hsr0' already exists in 'hsr' [ 71.052783][ T5614] Cannot create hsr debugfs directory [ 71.063408][ T5605] hsr_slave_0: entered promiscuous mode [ 71.069475][ T5605] hsr_slave_1: entered promiscuous mode [ 71.076907][ T5605] debugfs: 'hsr0' already exists in 'hsr' [ 71.077570][ T1312] ieee802154 phy0 wpan0: encryption failed: -22 [ 71.082908][ T5605] Cannot create hsr debugfs directory [ 71.095612][ T1312] ieee802154 phy1 wpan1: encryption failed: -22 [ 71.118981][ T5618] hsr_slave_0: entered promiscuous mode [ 71.125092][ T5618] hsr_slave_1: entered promiscuous mode [ 71.130975][ T5618] debugfs: 'hsr0' already exists in 'hsr' [ 71.136836][ T5618] Cannot create hsr debugfs directory [ 71.571518][ T5608] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 71.584438][ T5608] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 71.592438][ T5608] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 71.602670][ T5608] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 71.613236][ T5608] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 71.622876][ T5608] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 71.638418][ T5608] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 71.647499][ T5608] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 71.706478][ T5614] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 71.716423][ T5614] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 71.725999][ T5614] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 71.734686][ T5614] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 71.743717][ T5614] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 71.752753][ T5614] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 71.760376][ T5614] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 71.769562][ T5614] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 71.855002][ T5611] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 71.864321][ T5611] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 71.873563][ T5611] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 71.883621][ T5611] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 71.892698][ T5611] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 71.903394][ T5611] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 71.912040][ T5611] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 71.920500][ T5611] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 72.019051][ T5608] 8021q: adding VLAN 0 to HW filter on device bond0 [ 72.029676][ T5618] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 72.039334][ T5618] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 72.057692][ T5618] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 72.066426][ T5618] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 72.074541][ T5618] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 72.084093][ T5618] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 72.101290][ T5618] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 72.109915][ T5618] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 72.117583][ T5617] Bluetooth: hci0: command tx timeout [ 72.158174][ T5608] 8021q: adding VLAN 0 to HW filter on device team0 [ 72.169870][ T5614] 8021q: adding VLAN 0 to HW filter on device bond0 [ 72.193038][ T5617] Bluetooth: hci1: command tx timeout [ 72.200415][ T5614] 8021q: adding VLAN 0 to HW filter on device team0 [ 72.214269][ T47] bridge0: port 1(bridge_slave_0) entered blocking state [ 72.221815][ T47] bridge0: port 1(bridge_slave_0) entered forwarding state [ 72.256602][ T47] bridge0: port 1(bridge_slave_0) entered blocking state [ 72.263706][ T47] bridge0: port 1(bridge_slave_0) entered forwarding state [ 72.280989][ T5605] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 72.281743][ T5617] Bluetooth: hci2: command tx timeout [ 72.296901][ T5605] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 72.306422][ T5605] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 72.315389][ T5605] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 72.324361][ T5605] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 72.333100][ T5605] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 72.340834][ T5605] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 72.351766][ T5617] Bluetooth: hci3: command tx timeout [ 72.351778][ T5616] Bluetooth: hci4: command tx timeout [ 72.358512][ T5605] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 72.372602][ T47] bridge0: port 2(bridge_slave_1) entered blocking state [ 72.379673][ T47] bridge0: port 2(bridge_slave_1) entered forwarding state [ 72.388495][ T47] bridge0: port 2(bridge_slave_1) entered blocking state [ 72.395589][ T47] bridge0: port 2(bridge_slave_1) entered forwarding state [ 72.483143][ T5611] 8021q: adding VLAN 0 to HW filter on device bond0 [ 72.525122][ T5611] 8021q: adding VLAN 0 to HW filter on device team0 [ 72.544010][ T1072] bridge0: port 1(bridge_slave_0) entered blocking state [ 72.551125][ T1072] bridge0: port 1(bridge_slave_0) entered forwarding state [ 72.560852][ T1072] bridge0: port 2(bridge_slave_1) entered blocking state [ 72.567944][ T1072] bridge0: port 2(bridge_slave_1) entered forwarding state [ 72.667700][ T5618] 8021q: adding VLAN 0 to HW filter on device bond0 [ 72.730606][ T5618] 8021q: adding VLAN 0 to HW filter on device team0 [ 72.768336][ T1072] bridge0: port 1(bridge_slave_0) entered blocking state [ 72.775511][ T1072] bridge0: port 1(bridge_slave_0) entered forwarding state [ 72.801811][ T3360] bridge0: port 2(bridge_slave_1) entered blocking state [ 72.808953][ T3360] bridge0: port 2(bridge_slave_1) entered forwarding state [ 72.894658][ T5605] 8021q: adding VLAN 0 to HW filter on device bond0 [ 72.970638][ T5605] 8021q: adding VLAN 0 to HW filter on device team0 [ 72.993574][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 73.000721][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 73.022425][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 73.029573][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 73.339078][ T5614] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 73.505458][ T5614] veth0_vlan: entered promiscuous mode [ 73.543562][ T5614] veth1_vlan: entered promiscuous mode [ 73.556182][ T5608] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 73.634205][ T5614] veth0_macvtap: entered promiscuous mode [ 73.689596][ T5614] veth1_macvtap: entered promiscuous mode [ 73.748390][ T5611] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 73.757949][ T5608] veth0_vlan: entered promiscuous mode [ 73.787236][ T5614] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 73.816505][ T5608] veth1_vlan: entered promiscuous mode [ 73.826655][ T5614] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 73.902489][ T3360] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.924386][ T13] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.982411][ T13] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.025299][ T5618] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 74.036825][ T5611] veth0_vlan: entered promiscuous mode [ 74.054634][ T5608] veth0_macvtap: entered promiscuous mode [ 74.067022][ T5611] veth1_vlan: entered promiscuous mode [ 74.088583][ T5605] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 74.103931][ T5608] veth1_macvtap: entered promiscuous mode [ 74.186259][ T5608] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 74.201717][ T13] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.202406][ T5616] Bluetooth: hci0: command tx timeout [ 74.213933][ T1102] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 74.232325][ T1102] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 74.239977][ T5608] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 74.267963][ T47] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.282361][ T5616] Bluetooth: hci1: command tx timeout [ 74.332584][ T47] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.341374][ T1102] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 74.343920][ T5618] veth0_vlan: entered promiscuous mode [ 74.350904][ T1102] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 74.367808][ T5616] Bluetooth: hci2: command tx timeout [ 74.386742][ T5611] veth0_macvtap: entered promiscuous mode [ 74.401155][ T29] kauditd_printk_skb: 13 callbacks suppressed [ 74.401171][ T29] audit: type=1400 audit(1785856091.559:152): avc: denied { mounton } for pid=5614 comm="syz-executor" path="/root/syzkaller.mHFdGw/syz-tmp" dev="sda1" ino=2042 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_home_t tclass=dir permissive=1 [ 74.419911][ T5618] veth1_vlan: entered promiscuous mode [ 74.438556][ T5616] Bluetooth: hci4: command tx timeout [ 74.446141][ T5616] Bluetooth: hci3: command tx timeout [ 74.452652][ T29] audit: type=1400 audit(1785856091.559:153): avc: denied { mount } for pid=5614 comm="syz-executor" name="/" dev="tmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 74.486750][ T5614] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 74.497621][ T29] audit: type=1400 audit(1785856091.559:154): avc: denied { mounton } for pid=5614 comm="syz-executor" path="/root/syzkaller.mHFdGw/syz-tmp/newroot/dev" dev="tmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 74.534851][ T29] audit: type=1400 audit(1785856091.559:155): avc: denied { mount } for pid=5614 comm="syz-executor" name="/" dev="proc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 74.556906][ T12] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.560360][ T29] audit: type=1400 audit(1785856091.579:156): avc: denied { mounton } for pid=5614 comm="syz-executor" path="/root/syzkaller.mHFdGw/syz-tmp/newroot/sys/kernel/debug" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=dir permissive=1 [ 74.593382][ T29] audit: type=1400 audit(1785856091.579:157): avc: denied { mounton } for pid=5614 comm="syz-executor" path="/root/syzkaller.mHFdGw/syz-tmp/newroot/proc/sys/fs/binfmt_misc" dev="proc" ino=7306 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysctl_fs_t tclass=dir permissive=1 [ 74.622701][ T47] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.627027][ T29] audit: type=1400 audit(1785856091.579:158): avc: denied { unmount } for pid=5614 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 74.652700][ T5605] veth0_vlan: entered promiscuous mode [ 74.663691][ T5611] veth1_macvtap: entered promiscuous mode [ 74.686150][ T29] audit: type=1400 audit(1785856091.619:159): avc: denied { mounton } for pid=5614 comm="syz-executor" path="/dev/gadgetfs" dev="devtmpfs" ino=2784 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:device_t tclass=dir permissive=1 [ 74.709502][ T29] audit: type=1400 audit(1785856091.619:160): avc: denied { mount } for pid=5614 comm="syz-executor" name="/" dev="gadgetfs" ino=7311 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfs_t tclass=filesystem permissive=1 [ 74.752976][ T29] audit: type=1400 audit(1785856091.619:161): avc: denied { mount } for pid=5614 comm="syz-executor" name="/" dev="binder" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 74.829310][ T5605] veth1_vlan: entered promiscuous mode [ 74.850465][ T1102] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 74.856319][ T5611] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 74.862295][ T1102] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 74.928500][ T5611] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 74.987273][ T5618] veth0_macvtap: entered promiscuous mode [ 75.016314][ T5618] veth1_macvtap: entered promiscuous mode [ 75.025997][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 75.036127][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 75.043560][ T47] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.047622][ T47] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.081740][ T91] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.133687][ T5695] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 75.168698][ T5605] veth0_macvtap: entered promiscuous mode [ 75.188753][ T5618] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 75.208738][ T5618] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 75.227261][ T5605] veth1_macvtap: entered promiscuous mode [ 75.271697][ T91] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.304231][ T5605] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 75.313459][ T5695] usb 3-1: Using ep0 maxpacket: 16 [ 75.324129][ T91] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 75.326237][ T5616] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci1/hci1:200' [ 75.343509][ T5616] CPU: 1 UID: 0 PID: 5616 Comm: kworker/u9:3 Not tainted syzkaller #0 PREEMPT(full) [ 75.343539][ T5616] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 75.343556][ T5616] Workqueue: hci1 hci_rx_work [ 75.343595][ T5616] Call Trace: [ 75.343602][ T5616] [ 75.343609][ T5616] dump_stack_lvl+0x100/0x190 [ 75.343637][ T5616] sysfs_warn_dup.cold+0x1c/0x28 [ 75.343668][ T5616] sysfs_create_dir_ns+0x24b/0x2b0 [ 75.343690][ T5616] ? __pfx_sysfs_create_dir_ns+0x10/0x10 [ 75.343711][ T5616] ? find_held_lock+0x2b/0x80 [ 75.343728][ T5616] ? kobject_add_internal+0x25f/0x930 [ 75.343758][ T5616] ? kobject_add_internal+0x25f/0x930 [ 75.343791][ T5616] ? do_raw_spin_unlock+0x145/0x1e0 [ 75.343820][ T5616] kobject_add_internal+0x2c8/0x930 [ 75.343853][ T5616] kobject_add+0x16a/0x1e0 [ 75.343883][ T5616] ? __pfx_kobject_add+0x10/0x10 [ 75.343911][ T5616] ? class_to_subsys+0x10f/0x150 [ 75.343942][ T5616] ? kobject_put+0xb9/0x640 [ 75.343966][ T5616] ? _raw_spin_unlock+0x28/0x50 [ 75.343992][ T5616] device_add+0x294/0x1970 [ 75.344024][ T5616] ? __pfx_dev_set_name+0x10/0x10 [ 75.344046][ T5616] ? __pfx_device_add+0x10/0x10 [ 75.344078][ T5616] ? mgmt_send_event_skb+0x2fb/0x460 [ 75.344114][ T5616] hci_conn_add_sysfs+0x1a3/0x260 [ 75.344145][ T5616] le_conn_complete_evt+0x11eb/0x1f60 [ 75.344179][ T5616] ? __pfx_le_conn_complete_evt+0x10/0x10 [ 75.344202][ T5616] ? hci_event_packet+0x186/0xcd0 [ 75.344232][ T5616] hci_le_conn_complete_evt+0x23c/0x3a0 [ 75.344257][ T5616] ? skb_pull_data+0x15f/0x1e0 [ 75.344290][ T5616] hci_le_meta_evt+0x34a/0x5f0 [ 75.344343][ T5616] ? __pfx_hci_le_conn_complete_evt+0x10/0x10 [ 75.344373][ T5616] hci_event_packet+0x51c/0xcd0 [ 75.344401][ T5616] ? __pfx_hci_le_meta_evt+0x10/0x10 [ 75.344428][ T5616] ? __pfx_hci_event_packet+0x10/0x10 [ 75.344454][ T5616] ? kcov_remote_start+0x384/0x670 [ 75.344479][ T5616] ? lockdep_hardirqs_on+0x78/0x100 [ 75.344512][ T5616] hci_rx_work+0x451/0xfc0 [ 75.344542][ T5616] process_one_work+0xa23/0x1940 [ 75.344581][ T5616] ? __pfx_process_one_work+0x10/0x10 [ 75.344614][ T5616] ? __pfx_hci_rx_work+0x10/0x10 [ 75.344644][ T5616] worker_thread+0x5ef/0xe50 [ 75.344676][ T5616] ? __pfx_worker_thread+0x10/0x10 [ 75.344700][ T5616] ? kthread+0x13a/0x450 [ 75.344720][ T5616] ? __pfx_worker_thread+0x10/0x10 [ 75.344742][ T5616] kthread+0x370/0x450 [ 75.344763][ T5616] ? __pfx_kthread+0x10/0x10 [ 75.344785][ T5616] ret_from_fork+0x72b/0xd50 [ 75.344818][ T5616] ? __pfx_ret_from_fork+0x10/0x10 [ 75.344847][ T5616] ? rcu_is_watching+0x12/0xc0 [ 75.344877][ T5616] ? __switch_to+0x800/0x10f0 [ 75.344898][ T5616] ? __pfx_kthread+0x10/0x10 [ 75.344920][ T5616] ret_from_fork_asm+0x1a/0x30 [ 75.344966][ T5616] [ 75.345245][ T5616] kobject: kobject_add_internal failed for hci1:200 with -EEXIST, don't try to register things with the same name in the same directory. [ 75.348611][ T5605] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 75.355679][ T5616] Bluetooth: hci1: failed to register connection device [ 75.367686][ T91] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 75.370909][ T5695] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 75.667034][ T5695] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 75.679914][ T5695] usb 3-1: New USB device found, idVendor=0458, idProduct=5005, bcdDevice= 0.00 [ 75.689903][ T5695] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 75.713762][ T5695] usb 3-1: config 0 descriptor?? [ 75.812763][ T1102] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 75.835445][ T1102] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 75.864470][ T5801] CIFS: Attempting to mount //127.0.0.1/share [ 75.912069][ T13] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.948645][ T5801] CIFS: VFS: cifs_mount failed w/return code = -112 [ 75.950801][ T1102] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 75.964275][ T91] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.970461][ T1102] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 76.057401][ T91] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 76.065477][ T3360] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.067772][ T91] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 76.136938][ T1102] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 76.166029][ T1102] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 76.179758][ T5695] kye 0003:0458:5005.0001: tablet report size too small, or kye_tablet_rdesc unexpectedly large [ 76.194358][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 76.230887][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 76.243267][ T91] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.255841][ T5695] kye 0003:0458:5005.0001: hidraw0: USB HID v0.00 Mouse [HID 0458:5005] on usb-dummy_hcd.2-1/input0 [ 76.266156][ T91] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.282133][ T5617] Bluetooth: hci0: command tx timeout [ 76.284674][ T5695] kye 0003:0458:5005.0001: invalid tablet-enabling feature report [ 76.296008][ T5695] kye 0003:0458:5005.0001: tablet enabling failed [ 76.355121][ T5617] Bluetooth: hci1: command tx timeout [ 76.432444][ T5617] Bluetooth: hci2: command tx timeout [ 76.434377][ T5716] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 76.446625][ T47] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.465258][ T47] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.512361][ T4926] Bluetooth: hci4: command tx timeout [ 76.517822][ T5617] Bluetooth: hci3: command tx timeout [ 76.528959][ T5814] lo speed is unknown, defaulting to 1000 [ 76.553920][ T5814] lo speed is unknown, defaulting to 1000 [ 76.568191][ T5814] lo speed is unknown, defaulting to 1000 [ 76.581141][ T5814] smbdirect: ib_dev[syz0]: added: RNIC max_fast_reg_page_list_len=256 device_cap_flags=0x200000 kernel_cap_flags=0x10 page_size_cap=0x1000 [ 76.596238][ T5814] smbdirect: ib_dev[syz0]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=1 max_cqe=3276800 max_qp_wr=32768 max_send_sge=6 max_recv_sge=6 [ 76.616371][ T5814] smbdirect: ib_dev[syz0]PORT[1]: iwarp=1 ib=0 roce=0 v1=0 v2=0 core_cap_flags=0x400008 [ 76.626467][ T5812] kAFS: unable to lookup cell 'syz0' [ 76.631139][ T5814] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 76.633164][ T1102] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.660054][ T5716] usb 4-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 76.674348][ T5716] usb 4-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 76.688037][ T5814] infiniband syz0: RDMA CMA: cma_listen_on_dev, error -98 [ 76.698171][ T5716] usb 4-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 76.724454][ T5716] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 76.771313][ T5809] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 76.784579][ T5823] PM: hibernation: hibernation entry [ 76.818625][ T5716] usb 4-1: Quirk or no altset; falling back to MIDI 1.0 [ 76.823265][ T5814] lo speed is unknown, defaulting to 1000 [ 76.844250][ T5814] lo speed is unknown, defaulting to 1000 [ 76.858331][ T5814] lo speed is unknown, defaulting to 1000 [ 76.866705][ T5814] lo speed is unknown, defaulting to 1000 [ 76.874171][ T5814] lo speed is unknown, defaulting to 1000 [ 77.123929][ T4937] device offline error, dev sda, sector 520502 op 0x1:(WRITE) flags 0x0 phys_seg 3 prio class 2 [ 77.134670][ T4937] EXT4-fs warning (device sda1): ext4_end_bio:368: I/O error 16 writing to inode 2017 starting block 65062) [ 77.147572][ T13] EXT4-fs (sda1): failed to convert unwritten extents to written extents -- potential data loss! (inode 2017, error -5) [ 77.147609][ T4937] EXT4-fs warning (device sda1): ext4_end_bio:368: I/O error 16 writing to inode 2018 starting block 65063) [ 77.168298][ T13] Buffer I/O error on device sda1, logical block 65024 [ 77.173379][ T4937] EXT4-fs warning (device sda1): ext4_end_bio:368: I/O error 16 writing to inode 2019 starting block 65064) [ 77.190218][ T4937] device offline error, dev sda, sector 733790 op 0x1:(WRITE) flags 0x4000 phys_seg 64 prio class 2 [ 77.201111][ T4937] device offline error, dev sda, sector 734296 op 0x1:(WRITE) flags 0x4000 phys_seg 64 prio class 2 [ 77.201164][ T13] EXT4-fs (sda1): failed to convert unwritten extents to written extents -- potential data loss! (inode 2018, error -5) [ 77.211996][ T4937] device offline error, dev sda, sector 734808 op 0x1:(WRITE) flags 0x4000 phys_seg 64 prio class 2 [ 77.212048][ T4937] device offline error, dev sda, sector 735318 op 0x1:(WRITE) flags 0x4000 phys_seg 53 prio class 2 [ 77.212111][ T4937] device offline error, dev sda, sector 735824 op 0x1:(WRITE) flags 0x0 phys_seg 14 prio class 2 [ 77.212129][ T4937] EXT4-fs warning (device sda1): ext4_end_bio:368: I/O error 16 writing to inode 2021 starting block 91978) [ 77.212151][ T4937] device offline error, dev sda, sector 735966 op 0x1:(WRITE) flags 0x4000 phys_seg 63 prio class 2 [ 77.212196][ T4937] device offline error, dev sda, sector 736472 op 0x1:(WRITE) flags 0x4000 phys_seg 64 prio class 2 [ 77.227603][ T91] device offline error, dev sda, sector 736982 op 0x1:(WRITE) flags 0x4000 phys_seg 42 prio class 2 [ 77.247100][ T13] Buffer I/O error on device sda1, logical block 65025 [ 77.251467][ T91] device offline error, dev sda, sector 737488 op 0x1:(WRITE) flags 0x4000 phys_seg 23 prio class 2 [ 77.259963][ T13] EXT4-fs (sda1): failed to convert unwritten extents to written extents -- potential data loss! (inode 2019, error -5) [ 77.287163][ T91] EXT4-fs warning (device sda1): ext4_end_bio:368: I/O error 16 writing to inode 2021 starting block 92826) [ 77.300807][ T13] Buffer I/O error on device sda1, logical block 65026 [ 77.332356][ T4937] EXT4-fs warning (device sda1): ext4_end_bio:368: I/O error 16 writing to inode 2022 starting block 94246) [ 77.343323][ T13] EXT4-fs (sda1): failed to convert unwritten extents to written extents -- potential data loss! (inode 2021, error -5) [ 77.348030][ T4937] EXT4-fs warning (device sda1): ext4_end_bio:368: I/O error 16 writing to inode 2022 starting block 94312) [ 77.389705][ T4937] EXT4-fs warning (device sda1): ext4_end_bio:368: I/O error 16 writing to inode 2022 starting block 94328) [ 77.401920][ T4937] EXT4-fs warning (device sda1): ext4_end_bio:368: I/O error 16 writing to inode 2022 starting block 94349) [ 77.413524][ T4937] EXT4-fs warning (device sda1): ext4_end_bio:368: I/O error 16 writing to inode 2022 starting block 94351) [ 77.457564][ T13] Buffer I/O error on device sda1, logical block 91957 [ 77.464771][ T13] Buffer I/O error on device sda1, logical block 91958 [ 77.477353][ T13] Buffer I/O error on device sda1, logical block 91959 [ 77.489267][ T13] Buffer I/O error on device sda1, logical block 91960 [ 77.496745][ T13] Buffer I/O error on device sda1, logical block 91961 [ 77.503754][ T13] Buffer I/O error on device sda1, logical block 91962 [ 77.510833][ T13] Buffer I/O error on device sda1, logical block 91963 [ 77.524289][ T13] EXT4-fs (sda1): failed to convert unwritten extents to written extents -- potential data loss! (inode 2022, error -5) [ 77.538572][ T13] EXT4-fs (sda1): failed to convert unwritten extents to written extents -- potential data loss! (inode 2022, error -5) [ 77.556489][ T13] EXT4-fs (sda1): failed to convert unwritten extents to written extents -- potential data loss! (inode 2022, error -5) [ 77.571266][ T13] EXT4-fs (sda1): failed to convert unwritten extents to written extents -- potential data loss! (inode 2022, error -5) [ 77.580484][ T5730] usb 3-1: USB disconnect, device number 2 [ 77.609485][ T5823] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 77.616624][ T5823] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 77.624960][ T13] EXT4-fs (sda1): failed to convert unwritten extents to written extents -- potential data loss! (inode 2022, error -5) [ 77.678460][ T5823] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 77.691004][ T13] EXT4-fs (sda1): failed to convert unwritten extents to written extents -- potential data loss! (inode 2022, error -5) [ 77.722989][ T5823] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 77.732543][ T5823] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 77.749124][ T5823] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 77.764122][ T4938] Aborting journal on device sda1-8. [ 77.764290][ T5825] Buffer I/O error on dev sda1, logical block 0, lost async page write [ 77.771193][ T11] Buffer I/O error on dev sda1, logical block 131072, lost sync page write [ 77.779080][ T5823] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 77.788412][ T4938] JBD2: I/O error when updating journal superblock for sda1-8. [ 77.796673][ T5834] nvmet: adding nsid 1 to subsystem testnqn [ 77.812888][ T5825] Buffer I/O error on dev sda1, logical block 138, lost async page write [ 77.827619][ T5825] Buffer I/O error on dev sda1, logical block 145, lost async page write [ 77.838790][ T5825] Buffer I/O error on dev sda1, logical block 224, lost async page write [ 77.847723][ T5825] Buffer I/O error on dev sda1, logical block 226, lost async page write [ 77.859215][ T5825] Buffer I/O error on dev sda1, logical block 657, lost async page write [ 77.868040][ T5825] Buffer I/O error on dev sda1, logical block 4241, lost async page write [ 77.881728][ T5825] Buffer I/O error on dev sda1, logical block 4247, lost async page write [ 77.886154][ T5824] EXT4-fs error (device sda1): ext4_journal_check_start:86: comm syz.0.12: Detected aborted journal [ 77.902895][ T4937] Buffer I/O error on dev sda1, logical block 0, lost sync page write [ 77.906228][ T5823] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 77.916948][ T13] nvmet: Created nvm controller 1 for subsystem testnqn for NQN nqn.2014-08.org.nvmexpress:uuid:2008a4bc-1808-4d06-a46f-735e33cff823. [ 77.928520][ T5834] nvme nvme0: creating 2 I/O queues. [ 77.945767][ T5823] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 77.953774][ T5834] nvme nvme0: new ctrl: "testnqn" [ 77.967200][ T5823] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 77.983256][ T5823] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 77.989426][ T5823] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 77.999226][ T5823] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 78.008460][ T5823] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 78.015290][ T5823] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 78.027892][ T5823] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 78.064352][ T3360] Filesystems sync: 0.014 seconds [ 78.096904][ T5794] usb 4-1: USB disconnect, device number 2 [ 78.279983][ T5825] sd 0:0:1:0: [sda] Synchronizing SCSI cache [ 78.647817][ T5730] BUG: unable to handle page fault for address: 0000000000055640 [ 78.655537][ T5730] #PF: supervisor read access in kernel mode [ 78.661518][ T5730] #PF: error_code(0x0000) - not-present page [ 78.667493][ T5730] PGD 2bb8d067 P4D 2bb8d067 PUD 0 [ 78.672619][ T5730] Oops: Oops: 0000 [#1] SMP KASAN NOPTI [ 78.678168][ T5730] CPU: 0 UID: 0 PID: 5730 Comm: kworker/0:6 Not tainted syzkaller #0 PREEMPT(full) [ 78.687534][ T5730] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 78.697593][ T5730] Workqueue: sync_wq local_pci_probe_callback [ 78.703675][ T5730] RIP: 0010:ioread32+0x87/0xc0 [ 78.708456][ T5730] Code: 2d 0e 3b 5a 0a 31 ff 89 ee e8 55 f0 e3 fc 85 ed 75 28 e8 dc f5 e3 fc bb ff ff ff ff 89 d8 5b 5d e9 ce 03 98 06 e8 c9 f5 e3 fc <8b> 1b e8 c2 f5 e3 fc 89 d8 5b 5d c3 cc cc cc cc e8 b4 f5 e3 fc 83 [ 78.728081][ T5730] RSP: 0018:ffffc90004967af0 EFLAGS: 00010293 [ 78.734166][ T5730] RAX: 0000000000000000 RBX: 0000000000055640 RCX: ffffffff85266eab [ 78.742135][ T5730] RDX: ffff8880287ea540 RSI: ffffffff85266f17 RDI: ffff8880287ea540 [ 78.750098][ T5730] RBP: ffff88805554fc38 R08: 0000000000000007 R09: 000000000003ffff [ 78.758054][ T5730] R10: 0000000000055640 R11: 0000000000000000 R12: 1ffff9200092cf6d [ 78.766008][ T5730] R13: ffff888023acc0d0 R14: ffff88805554fc80 R15: ffffc90004967b88 [ 78.773963][ T5730] FS: 0000000000000000(0000) GS:ffff888123dd8000(0000) knlGS:0000000000000000 [ 78.782875][ T5730] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 78.789441][ T5730] CR2: 0000000000055640 CR3: 000000005b97e000 CR4: 00000000003526f0 [ 78.797403][ T5730] Call Trace: [ 78.800664][ T5730] [ 78.803582][ T5730] nhi_probe+0xdc/0x8f0 [ 78.807726][ T5730] nhi_pci_probe+0x322/0x5a0 [ 78.812310][ T5730] ? __pfx_nhi_pci_probe+0x10/0x10 [ 78.817411][ T5730] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 78.823203][ T5730] ? lockdep_hardirqs_on+0x78/0x100 [ 78.828386][ T5730] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 78.834178][ T5730] ? __pfx_nhi_pci_probe+0x10/0x10 [ 78.839278][ T5730] local_pci_probe+0xdd/0x1b0 [ 78.843940][ T5730] local_pci_probe_callback+0x35/0x80 [ 78.849309][ T5730] process_one_work+0xa23/0x1940 [ 78.854233][ T5730] ? __pfx_process_one_work+0x10/0x10 [ 78.859593][ T5730] ? __pfx_local_pci_probe_callback+0x10/0x10 [ 78.865646][ T5730] worker_thread+0x5ef/0xe50 [ 78.870221][ T5730] ? __pfx_worker_thread+0x10/0x10 [ 78.875314][ T5730] ? kthread+0x13a/0x450 [ 78.879542][ T5730] ? __pfx_worker_thread+0x10/0x10 [ 78.884637][ T5730] kthread+0x370/0x450 [ 78.888688][ T5730] ? __pfx_kthread+0x10/0x10 [ 78.893258][ T5730] ret_from_fork+0x72b/0xd50 [ 78.897840][ T5730] ? __pfx_ret_from_fork+0x10/0x10 [ 78.902941][ T5730] ? __switch_to+0x800/0x10f0 [ 78.907600][ T5730] ? __pfx_kthread+0x10/0x10 [ 78.912171][ T5730] ret_from_fork_asm+0x1a/0x30 [ 78.916930][ T5730] [ 78.919939][ T5730] Modules linked in: [ 78.923824][ T5730] CR2: 0000000000055640 [ 78.927963][ T5730] ---[ end trace 0000000000000000 ]--- [ 78.933401][ T5730] RIP: 0010:ioread32+0x87/0xc0 [ 78.938158][ T5730] Code: 2d 0e 3b 5a 0a 31 ff 89 ee e8 55 f0 e3 fc 85 ed 75 28 e8 dc f5 e3 fc bb ff ff ff ff 89 d8 5b 5d e9 ce 03 98 06 e8 c9 f5 e3 fc <8b> 1b e8 c2 f5 e3 fc 89 d8 5b 5d c3 cc cc cc cc e8 b4 f5 e3 fc 83 [ 78.957753][ T5730] RSP: 0018:ffffc90004967af0 EFLAGS: 00010293 [ 78.963808][ T5730] RAX: 0000000000000000 RBX: 0000000000055640 RCX: ffffffff85266eab [ 78.971764][ T5730] RDX: ffff8880287ea540 RSI: ffffffff85266f17 RDI: ffff8880287ea540 [ 78.979719][ T5730] RBP: ffff88805554fc38 R08: 0000000000000007 R09: 000000000003ffff [ 78.987760][ T5730] R10: 0000000000055640 R11: 0000000000000000 R12: 1ffff9200092cf6d [ 78.995714][ T5730] R13: ffff888023acc0d0 R14: ffff88805554fc80 R15: ffffc90004967b88 [ 79.003858][ T5730] FS: 0000000000000000(0000) GS:ffff888123dd8000(0000) knlGS:0000000000000000 [ 79.012774][ T5730] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 79.019342][ T5730] CR2: 0000000000055640 CR3: 000000005b97e000 CR4: 00000000003526f0 [ 79.027308][ T5730] Kernel panic - not syncing: Fatal exception [ 79.033460][ T5730] Kernel Offset: disabled [ 79.037757][ T5730] Rebooting in 86400 seconds..