last executing test programs: 9.250371103s ago: executing program 0 (id=1): mkdirat(0xffffffffffffff9c, &(0x7f0000000600)='./proc\x00', 0x1ff) mount(&(0x7f0000000640)=@filename='proc\x00', &(0x7f0000000680)='./proc\x00', &(0x7f00000006c0)='proc\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./nfsd\x00', 0x1ff) mount(&(0x7f0000000040)=@filename='nfsd\x00', &(0x7f0000000080)='./nfsd\x00', &(0x7f00000000c0)='nfsd\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./nfsd/versions\x00', 0x2, 0x0) write(r0, &(0x7f0000000140)='-2 -3 +4\n', 0x9) r1 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./nfsd/portlist\x00', 0x2, 0x0) write(r1, &(0x7f00000001c0)='tcp 2049\n', 0x9) r2 = openat(0xffffffffffffff9c, &(0x7f0000000700)='./nfsd/nfsv4gracetime\x00', 0x2, 0x0) write(r2, &(0x7f0000000740)='1\n', 0x2) r3 = openat(0xffffffffffffff9c, &(0x7f0000000780)='./nfsd/nfsv4leasetime\x00', 0x2, 0x0) write(r3, &(0x7f00000007c0)='1\n', 0x2) r4 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./nfsd/threads\x00', 0x2, 0x0) write(r4, &(0x7f0000000240)='1\n', 0x2) r5 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./proc/net/rpc/auth.unix.ip/channel\x00', 0x2, 0x0) write(r5, &(0x7f00000002c0)='nfsd 127.0.0.1 2147483647 testdomain\n', 0x25) (async) r6 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./proc/net/rpc/nfsd.export/channel\x00', 0x2, 0x0) write(r6, &(0x7f0000000340)='testdomain / 2147483647 8194 0 0 0\n', 0x23) (async) r7 = openat(0xffffffffffffff9c, &(0x7f0000000380)='./proc/net/rpc/nfsd.fh/channel\x00', 0x2, 0x0) write(r7, &(0x7f00000003c0)='testdomain 1 \\x00000000 2147483647 /\n', 0x25) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000000400)='./mnt\x00', 0x1ff) mount$nfs4(&(0x7f0000000440)='127.0.0.1:/\x00', &(0x7f0000000480)='./mnt\x00', &(0x7f00000004c0), 0x0, &(0x7f0000000500)=ANY=[@ANYBLOB='addr=127.0.0.1,clientaddr=127.0.0.1\x00']) openat(0xffffffffffffff9c, &(0x7f0000000540)='./mnt/file1\x00', 0x42, 0x1ff) rename(&(0x7f0000000580)='./mnt/file1\x00', &(0x7f00000005c0)='./mnt/file2\x00') 8.031089546s ago: executing program 1 (id=2): r0 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) write$UHID_CREATE2(r0, &(0x7f0000000000)={0xb, {'syz0\x00', 'syz1\x00', 'syz0\x00', 0x33, 0x5, 0x46d, 0xb012, 0x0, 0x0, "0600ff0901a10185100901150026ff007508950681000901910085110901951381000901910085120901953f810009019100c0"}}, 0x14b) read(r0, &(0x7f0000001000), 0x111c) read(r0, &(0x7f0000002000), 0x111c) write$UHID_INPUT2(r0, &(0x7f0000000200)={0xc, {0x7, "10ff001002005a"}}, 0xd) read(r0, &(0x7f0000003000), 0x111c) write$UHID_INPUT2(r0, &(0x7f0000000300)={0xc, {0x14, "11ff00000100"/20}}, 0x1a) read(r0, &(0x7f0000004000), 0x111c) (async) write$UHID_INPUT2(r0, &(0x7f0000000400)={0xc, {0x14, "11ff0100"/20}}, 0x1a) (async) read(r0, &(0x7f0000005000), 0x111c) (async) write$UHID_INPUT2(r0, &(0x7f0000000500)={0xc, {0x14, "11ff00000200"/20}}, 0x1a) (async) read(r0, &(0x7f0000006000), 0x111c) (async) write$UHID_INPUT2(r0, &(0x7f0000000600)={0xc, {0x14, "11ff00000100"/20}}, 0x1a) (async) read(r0, &(0x7f0000007000), 0x111c) (async) write$UHID_INPUT2(r0, &(0x7f0000000700)={0xc, {0x14, "11ff0100"/20}}, 0x1a) (async) read(r0, &(0x7f0000008000), 0x111c) (async) write$UHID_INPUT2(r0, &(0x7f0000000800)={0xc, {0x14, "11ff00000300"/20}}, 0x1a) (async) read(r0, &(0x7f0000009000), 0x111c) (async) write$UHID_INPUT2(r0, &(0x7f0000000900)={0xc, {0x14, "11ff0300"/20}}, 0x1a) (async) read(r0, &(0x7f000000a000), 0x111c) (async) write$UHID_INPUT2(r0, &(0x7f0000000a00)={0xc, {0x14, "11ff03100800"/20}}, 0x1a) (async) read(r0, &(0x7f000000b000), 0x111c) (async) write$UHID_INPUT2(r0, &(0x7f0000000b00)={0xc, {0x14, "11ff00000400"/20}}, 0x1a) (async) read(r0, &(0x7f000000c000), 0x111c) (async) write$UHID_INPUT2(r0, &(0x7f0000000c00)={0xc, {0x14, "11ff00000400"/20}}, 0x1a) (async) read(r0, &(0x7f000000d000), 0x111c) (async) write$UHID_INPUT2(r0, &(0x7f0000000d00)={0xc, {0x14, "11ff042000"/20}}, 0x1a) (async) read(r0, &(0x7f000000e000), 0x111c) (async) write$UHID_INPUT2(r0, &(0x7f0000000e00)={0xc, {0x14, "11ff00000400"/20}}, 0x1a) (async) read(r0, &(0x7f000000f000), 0x111c) (async) write$UHID_INPUT2(r0, &(0x7f0000000f00)={0xc, {0x14, "11ff04100800"/20}}, 0x1a) (async) 7.760159454s ago: executing program 1 (id=12): r0 = syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000080)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) nanosleep(&(0x7f0000000100)={0x0, 0x10000000}, 0x0) syz_usb_ep_write$ath9k_ep2(r0, 0x83, 0x22, &(0x7f0000000000)=ANY=[@ANYBLOB="000000084242424200010000000000000000000a4343434300020100000102000000"]) nanosleep(&(0x7f0000000100)={0x1}, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) ioctl(r1, 0x8923, &(0x7f0000000200)='wlan0\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00wlan99\x00'/40) ioctl(r1, 0x8923, &(0x7f0000000300)='wlan2\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00wlan0\x00'/40) syz_80211_join_ibss(&(0x7f0000000400)='wlan0\x00', &(0x7f0000000500)=@default_ibss_ssid, 0x6, 0x0) nanosleep(&(0x7f0000000100)={0x1}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000600)={'wlan0\x00', 0x0}) bind$packet(r1, &(0x7f0000000700)={0x11, 0x300, r2}, 0x14) sendto$packet(r1, &(0x7f0000000800)="00000000000000000000000008004500001c00004000401100007f0000017f0000010035003500080000", 0x2a, 0x0, 0x0, 0x0) 7.502718722s ago: executing program 0 (id=13): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./nfsd\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./nfsd\x00', &(0x7f0000000040)='nfsd\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000500)='./nfsd/versions\x00', 0x2, 0x0) write(r0, &(0x7f0000000540)='-2 -3 +4\n\x00', 0x9) r1 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./nfsd/portlist\x00', 0x2, 0x0) write(r1, &(0x7f0000000440)='tcp 2049\n\x00', 0x9) r2 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./nfsd/threads\x00', 0x2, 0x0) write(r2, &(0x7f00000000c0)='8\n\x00', 0x2) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./nfs_mnt\x00', 0x1ff) mount(0x0, &(0x7f0000000100)='./nfs_mnt\x00', &(0x7f0000000140)='nfs4\x00', 0x0, &(0x7f0000000180)='addr=127.0.0.1,port=2049,vers=4.2\x00') r3 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./nfsd/clients/1/info\x00', 0x0, 0x0) read(r3, &(0x7f0000000300), 0x64) r4 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./nfsd/clients/2/info\x00', 0x0, 0x0) read(r4, &(0x7f0000000300), 0x64) r5 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./nfsd/clients/3/info\x00', 0x0, 0x0) read(r5, &(0x7f0000000300), 0x64) 7.173205453s ago: executing program 4 (id=15): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={&(0x7f0000000040), 0xc, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="540000001800010400000000000000000a000000fe030001000000000800040001000000060015000700000028001680080001000200000014000500fe8000000000000000000000000000010800070001000000"], 0x54}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={&(0x7f0000000040), 0xc, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="4c0000001800010400000000000000000a000000fe030001000000000800040001000000060015000700000020001680080001000200000014000500fe800000000000000000000000000001"], 0x4c}}, 0x0) 7.063962621s ago: executing program 4 (id=16): syz_usb_connect(0x5, 0xa1, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000200000040ba23000100010102030109028f00020100803209040000000101000009240100011e0001010c2402010101000203000000092403020103000100090401000001020000090401010101020000072401010101000b2402010202100180bb0009050109000201000007250100000000090401020101020000072401010101000b2402010202100180bb0009050109000201000007250100000000"], 0x0) nanosleep(&(0x7f0000000300)={0x5}, 0x0) r0 = syz_open_dev$sndpcmp(&(0x7f0000000100), 0x3, 0x2) ioctl$SNDRV_PCM_IOCTL_HW_PARAMS(r0, 0xc2604111, &(0x7f0000000200)={0x0, [[0x8], [0x0, 0x100000], [0x1]], '\x00', [{0x20, 0x20, 0x0, 0x0, 0x1}, {0x40, 0x40, 0x0, 0x0, 0x1}, {0x2, 0x2, 0x0, 0x0, 0x1}, {0xbb80, 0xbb80, 0x0, 0x0, 0x1}, {0x0, 0xffffffff}, {0x0, 0xffffffff}, {0x0, 0xffffffff}, {0x0, 0xffffffff}, {0x0, 0xffffffff}, {0x0, 0xffffffff}, {0x0, 0xffffffff}, {0x0, 0xffffffff}], '\x00', 0xffffffff}) ioctl$SNDRV_PCM_IOCTL_PREPARE(r0, 0x4140, 0x0) ioctl$SNDRV_PCM_IOCTL_START(r0, 0x4142, 0x0) 6.360279718s ago: executing program 2 (id=22): r0 = socket$inet(0x2, 0x2, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000000)={'ip_vti0\x00', &(0x7f0000000100)=@ethtool_rxfh={0x47}}) 6.357206527s ago: executing program 2 (id=23): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./sys\x00', &(0x7f00000000c0)='sysfs\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./sys/bus/pci/drivers/i915\x00', 0x0, 0x0) 6.288808786s ago: executing program 2 (id=24): r0 = memfd_create(&(0x7f0000000000)='syzkaller\x00', 0x0) ftruncate(r0, 0x10000) pwrite64(r0, &(0x7f0000001000)='\b\x00\x00\x00\n\x00\x00\x00\v\x00\x00\x00\f\x00'/24, 0x18, 0x2008) pwrite64(r0, &(0x7f0000001020)="80000000800000000100000000100000000400000400000005000000", 0x1c, 0x2024) pwrite64(r0, &(0x7f0000001040)="00f0ffff00fcffff0c0000000a00000000000000000000000200000001000000", 0x20, 0x2048) pwrite64(r0, &(0x7f0000001060)="00080000000000000000000000040000200000000200000000000000", 0x1c, 0x2068) pwrite64(r0, &(0x7f0000001080)="0100000000000000", 0x8, 0x2088) pwrite64(r0, &(0x7f0000001090)="0d000000000400000004000001000000010000000100000001000000010000008000000080000000", 0x28, 0x2098) pwrite64(r0, &(0x7f00000010c0)="01000000640000006400000064000000", 0x10, 0x20c0) pwrite64(r0, &(0x7f00000010d0)="01010101010101010101010101010101", 0x10, 0x20cc) pwrite64(r0, &(0x7f00000011b0)="389d267c389d267c389d267c389d267c389d267c", 0x14, 0x24e0) pwrite64(r0, &(0x7f00000010e0)="5419010054190100541901005419010054190100", 0x14, 0x2554) pwrite64(r0, &(0x7f00000010f0)="55020900", 0x4, 0x2804) pwrite64(r0, &(0x7f0000001100)="000000000100800080000000", 0xc, 0x280c) pwrite64(r0, &(0x7f0000001110)="01000000640000006400000064000000", 0x10, 0x2818) pwrite64(r0, &(0x7f0000001120)='\x00'/12, 0xc, 0x2828) pwrite64(r0, &(0x7f0000001130)="80000000a0000000c0000000e000000000010000", 0x14, 0x2854) pwrite64(r0, &(0x7f00000011a0)="04", 0x1, 0x28c0) pwrite64(r0, &(0x7f0000001150)="0000ffffffffffffffffffffffffffff", 0x10, 0x28e0) pwrite64(r0, &(0x7f0000001160)="ed410200", 0x4, 0x2d00) pwrite64(r0, &(0x7f0000001170)="0004000000000000", 0x8, 0x2d08) pwrite64(r0, &(0x7f0000001180)='\f\x00\x00\x00\f\x00\x00\x00\f\x00\x00\x00\f\x00\x00\x00\f\x00\x00\x00\f\x00\x00\x00\f\x00\x00\x00\f\x00\x00\x00\f\x00\x00\x00\f\x00\x00\x00\f\x00\x00\x00\f\x00\x00\x00', 0x30, 0x2d28) pwrite64(r0, &(0x7f0000001190)="020000000c0001002e00000002000000f40102002e2e0000", 0x18, 0x3000) r1 = syz_open_dev$loop(&(0x7f0000002000), 0x0, 0x2) ioctl$LOOP_SET_FD(r1, 0x4c00, r0) close(r1) mkdirat(0xffffffffffffff9c, &(0x7f0000003000)='./mnt\x00', 0x1ff) mount(&(0x7f0000000040)=@loop={'/dev/loop', 0x0}, &(0x7f0000003000)='./mnt\x00', &(0x7f0000004000)='ufs\x00', 0x0, &(0x7f0000005000)='ufstype=sun\x00') r2 = openat(0xffffffffffffff9c, &(0x7f0000006000)='./mnt/file\x00', 0x42, 0x1ff) write(r2, &(0x7f0000007000)='A', 0x1) 6.117848581s ago: executing program 2 (id=25): r0 = syz_usb_connect(0x0, 0x47, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000200000040109720770000000000010902350001010080320904000005ffffff000705810340000107058202000200070503020002000705840200020007050502000200"], 0x0) syz_usb_control_io(r0, &(0x7f0000000400)={0x2c, &(0x7f0000000410)={0x0, 0x0, 0x2, {0x2}}, &(0x7f0000000430)={0x0, 0x0, 0x2, @string={0x2, 0x0}}, &(0x7f0000000450)={0x0, 0x0, 0x5, {0x0, 0x0, 0x5}}, &(0x7f0000000470)={0x0, 0x0, 0xf, {0xf, 0x0}}, &(0x7f0000000490)={0x0, 0x0, 0xc, {0xc, 0x0}}}, &(0x7f0000000500)={0x84, &(0x7f0000000510), &(0x7f0000000520)={0x0, 0x0, 0x1}, &(0x7f0000000530)={0x0, 0x0, 0x1}, &(0x7f0000000540)={0x0, 0x0, 0x4}, &(0x7f0000000550)={0x0, 0x0, 0x4}, &(0x7f0000000560)={0x0, 0x0, 0x2}, &(0x7f0000000570)={0x0, 0x0, 0x1}, &(0x7f0000000580)={0x0, 0x0, 0x2}, &(0x7f0000000590)={0x0, 0x0, 0x2}, &(0x7f00000005a0)={0x0, 0x0, 0x6}, &(0x7f00000005b0)={0x0, 0x0, 0x6}, &(0x7f00000005c0)={0x0, 0x0, 0x2}, &(0x7f00000005d0)={0x0, 0x0, 0x2}, &(0x7f00000005e0)={0x0, 0x0, 0x1}, &(0x7f00000005f0)={0x0, 0x0, 0x1}, &(0x7f0000000600)={0x0, 0x0, 0x1}}) nanosleep(&(0x7f0000000100)={0x2}, 0x0) mknodat(0xffffffffffffff9c, &(0x7f0000000200)='./ttyUSB0\x00', 0x81b6, 0xbc00) openat(0xffffffffffffff9c, &(0x7f0000000200)='./ttyUSB0\x00', 0x802, 0x0) syz_usb_ep_write(r0, 0x81, 0x4, &(0x7f0000000300)='AAAA') syz_usb_ep_write(r0, 0x82, 0x7, &(0x7f0000000300)='BBBBBBB') (async) nanosleep(&(0x7f0000000100)={0x1}, 0x0) 5.649057095s ago: executing program 0 (id=26): r0 = syz_usb_connect(0x0, 0x32, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000200000040840508000201000000010902200001010080fa09040000020806f4000705810200020007050202000200"], 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000100)={0x84, &(0x7f0000000140)={0xc0, 0x98, 0x2, "1400"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) (async) syz_usb_control_io(r0, 0x0, &(0x7f0000000200)={0x84, &(0x7f0000000240)={0xc0, 0x98, 0x2, "1400"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) (async) syz_usb_control_io(r0, 0x0, &(0x7f0000000300)={0x84, &(0x7f0000000340)={0xc0, 0x98, 0x2, "1400"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) (async) syz_usb_control_io(r0, 0x0, &(0x7f0000000400)={0x84, &(0x7f0000000440)={0xc0, 0x9a, 0x4, '\x00s\x00\x00'}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) (async) syz_usb_ep_read(r0, 0x2, 0x9, &(0x7f0000000500)=""/9) (async) nanosleep(&(0x7f0000000600)={0x3}, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000700), 0x2, 0x2) ioctl$SG_IO(r1, 0x2285, &(0x7f0000000800)={0x53, 0xfffffffffffffffe, 0xa, 0x0, @buffer={0x0, 0x200, &(0x7f0000000900)=""/512}, &(0x7f0000000a00)="2a00ffffffff00000100", &(0x7f0000000b00)=""/32, 0x3e8, 0x0, 0x0, 0x0}) 4.636293052s ago: executing program 1 (id=27): r0 = syz_usb_connect(0x0, 0x32, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000200000040840508000201000000010902200001010080fa09040000020806f4000705810200020007050202000200"], 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000100)={0x84, &(0x7f0000000140)={0xc0, 0x98, 0x2, "1400"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, &(0x7f0000000200)={0x84, &(0x7f0000000240)={0xc0, 0x98, 0x2, "1400"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, &(0x7f0000000300)={0x84, &(0x7f0000000340)={0xc0, 0x98, 0x2, "1400"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, &(0x7f0000000400)={0x84, &(0x7f0000000440)={0xc0, 0x9a, 0x4, '\x00s\x00\x00'}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_ep_read(r0, 0x2, 0x9, &(0x7f0000000500)=""/9) nanosleep(&(0x7f0000000600)={0x1}, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000700), 0x0, 0x0) ioctl$SG_IO(r1, 0x2285, &(0x7f0000000800)={0x53, 0xfffffffffffffffe, 0xa, 0x0, @buffer={0x0, 0x200, &(0x7f0000000900)=""/512}, &(0x7f0000000a00)="2a00ffffffff00000100", &(0x7f0000000b00)=""/32, 0x3e8, 0x0, 0x0, 0x0}) 3.90554157s ago: executing program 4 (id=28): syz_emit_vhci(&(0x7f0000000000)=ANY=[@ANYBLOB="040e0c010310000000000040000000"], 0xf) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r0, 0x400448ca, 0x0) 3.656407297s ago: executing program 4 (id=29): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./nfsd\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./nfsd\x00', &(0x7f0000000100)='nfsd\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000001a00)='./nfsd/versions\x00', 0x2, 0x0) write(r0, &(0x7f0000001b00)='-2 -3 +4\n', 0x9) r1 = openat(0xffffffffffffff9c, &(0x7f0000001600)='./nfsd/portlist\x00', 0x2, 0x0) write(r1, &(0x7f0000001700)='tcp 2049\n', 0x9) mkdirat(0xffffffffffffff9c, &(0x7f0000002000)='./rpc_pipefs\x00', 0x1ff) mount(0x0, &(0x7f0000002000)='./rpc_pipefs\x00', &(0x7f0000002100)='rpc_pipefs\x00', 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./nfsd/threads\x00', 0x2, 0x0) write(r2, &(0x7f0000000300)='1\n', 0x2) r3 = openat(0xffffffffffffff9c, &(0x7f0000001800)='./nfsd/v4_end_grace\x00', 0x2, 0x0) write(r3, &(0x7f0000001900)='Y\n', 0x2) mkdirat(0xffffffffffffff9c, &(0x7f0000000400)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000400)='./proc\x00', &(0x7f0000000500)='proc\x00', 0x0, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./proc/net/rpc/auth.unix.ip/channel\x00', 0x2, 0x0) write(r4, &(0x7f0000000700)='nfsd 127.0.0.1 2147483647 127.0.0.1\n', 0x24) r5 = openat(0xffffffffffffff9c, &(0x7f0000000800)='./proc/net/rpc/nfsd.export/channel\x00', 0x2, 0x0) write(r5, &(0x7f0000000900)='127.0.0.1 / 2147483647 74754 0 0 0\n', 0x23) r6 = openat(0xffffffffffffff9c, &(0x7f0000000a00)='./proc/net/rpc/nfsd.fh/channel\x00', 0x2, 0x0) write(r6, &(0x7f0000000b00)='127.0.0.1 1 \\x00000000 2147483647 /\n', 0x24) mkdirat(0xffffffffffffff9c, &(0x7f0000000c00)='./debug\x00', 0x1ff) mount(0x0, &(0x7f0000000c00)='./debug\x00', &(0x7f0000000d00)='debugfs\x00', 0x0, 0x0) r7 = openat(0xffffffffffffff9c, &(0x7f0000000e00)='./debug/nfsd/io_cache_write\x00', 0x2, 0x0) write(r7, &(0x7f0000000f00)='2\n', 0x2) nanosleep(&(0x7f0000001c00)={0x1}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000001000)='./mnt\x00', 0x1ff) mount(&(0x7f0000001100)=@filename='127.0.0.1:/\x00', &(0x7f0000001000)='./mnt\x00', &(0x7f0000001200)='nfs4\x00', 0x0, &(0x7f0000001300)='addr=127.0.0.1,clientaddr=127.0.0.1\x00') r8 = openat(0xffffffffffffff9c, &(0x7f0000001400)='./mnt/test\x00', 0x42, 0x0) write(r8, &(0x7f0000001500)='test\x00', 0x4) 3.043711s ago: executing program 3 (id=33): r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000fc0)={&(0x7f00000000c0)={0x38, 0x1403, 0x1, 0x70bd2c, 0x25dfdbfc, "", [{{0x9, 0x2, 'syz1\x00'}, {0x8, 0x41, 'rxe\x00'}, {0x14, 0x33, 'veth0\x00'}}]}, 0x38}, 0x1, 0x0, 0x0, 0x854}, 0x0) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={0xffffffffffffffff}, 0x106, 0x3}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r1, &(0x7f0000000200)={0x3, 0x48, 0xfa00, {{0xa, 0x0, 0x0, @empty}, {0xa, 0x0, 0x0, @local}, r2, 0x3e8}}, 0x50) write$RDMA_USER_CM_CMD_GET_EVENT(r1, &(0x7f0000000600)={0xc, 0x8, 0xfa00, {&(0x7f0000000700)}}, 0x10) write$RDMA_USER_CM_CMD_RESOLVE_ROUTE(r1, &(0x7f0000000400)={0x4, 0x8, 0xfa00, {r2, 0x3e8}}, 0x10) write$RDMA_USER_CM_CMD_GET_EVENT(r1, &(0x7f0000000800)={0xc, 0x8, 0xfa00, {&(0x7f0000000900)}}, 0x10) write$RDMA_USER_CM_CMD_CONNECT(r1, &(0x7f0000000500)={0x6, 0x118, 0xfa00, {{0x6, 0xf, '\x00', 0x0, 0x40, 0x4, 0xa8, 0x3, 0xf, 0x4, 0x1}, r2}}, 0x120) 2.501059277s ago: executing program 0 (id=34): syz_usb_connect$cdc_ecm(0x5, 0x32, &(0x7f0000000000)=ANY=[@ANYBLOB="12010002ffffff40341278560001010203010902200001010080320904000002ffffff000705810200020007050202000200"], &(0x7f0000001400)={0x0, 0x0, 0x0, 0x0}) nanosleep(&(0x7f0000000300)={0x1}, 0x0) r0 = syz_open_dev$usbfs(&(0x7f0000000100), 0x0, 0x0) ioctl$USBDEVFS_CLAIMINTERFACE(r0, 0x8004550f, &(0x7f0000000200)) ioctl$USBDEVFS_ALLOC_STREAMS(r0, 0x8008551c, &(0x7f0000000400)={0x2, 0x1, [{0x2, 0x1}]}) ioctl$USBDEVFS_FREE_STREAMS(r0, 0x8008551d, &(0x7f0000000400)={0x2, 0x1, [{0x2, 0x1}]}) 2.435426414s ago: executing program 2 (id=35): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e20, @empty}, 0x10) listen(r0, 0x10) r1 = syz_io_uring_setup(0x10, &(0x7f0000000040), &(0x7f0000000100)=0x0, &(0x7f0000000108)=0x0, &(0x7f0000000110)=0x0) io_uring_register$IORING_REGISTER_FILES(r1, 0x2, &(0x7f0000000080)=[0xffffffffffffffff, 0xffffffffffffffff], 0x2) syz_io_uring_submit(r2, r3, r4, &(0x7f0000000200)=@IORING_OP_ACCEPT={0xd, 0x4, 0x0, r0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x1}}) syz_io_uring_submit(r2, r3, r4, &(0x7f0000000280)=@IORING_OP_LINK_TIMEOUT={0xf, 0x4, 0x0, 0x0, 0x0, &(0x7f0000000240)={0x0, 0x1dcd6500}}) syz_io_uring_submit(r2, r3, r4, &(0x7f0000000300)=@IORING_OP_CLOSE={0x13, 0x1, 0x0, 0x0}) syz_io_uring_submit(r2, r3, r4, &(0x7f0000000380)=@IORING_OP_ACCEPT={0xd, 0x4, 0x0, r0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x2}}) syz_io_uring_submit(r2, r3, r4, &(0x7f0000000400)=@IORING_OP_LINK_TIMEOUT={0xf, 0x4, 0x0, 0x0, 0x0, &(0x7f0000000240)={0x0, 0x1dcd6500}}) syz_io_uring_submit(r2, r3, r4, &(0x7f0000000480)=@IORING_OP_CLOSE={0x13, 0x1, 0x0, 0x1}) io_uring_enter(r1, 0x6, 0x0, 0x0, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000500)='./file0\x00', 0x1ff) mount(&(0x7f0000000600)=@filename='\\\\127.0.0.1\\share\x00', &(0x7f0000000500)='./file0\x00', &(0x7f0000000540)='cifs\x00', 0x0, &(0x7f0000000580)='unc=\\\\127.0.0.1\\share,ip=127.0.0.1,port=20000,user=root,pass=root,vers=2.0,echo_interval=1\x00') 1.92292995s ago: executing program 4 (id=36): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$netlink(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000240)={0x14, 0x1a, 0x301, 0x0, 0x0, "", [@typed={0x4, 0xae}]}, 0x14}], 0x1}, 0x0) 1.664839143s ago: executing program 4 (id=37): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./mydev\x00', 0x1ff) mount(&(0x7f0000000040)=@filename='devtmpfs\x00', &(0x7f0000000000)='./mydev\x00', &(0x7f0000000080)='devtmpfs\x00', 0x0, 0x0) syz_usb_connect(0x0, 0x47, &(0x7f0000000100)=ANY=[@ANYBLOB="12010002ff0000405e04750700010102000109023500010100a0320904000005ff0000000705810200020007058202000200070583020002000705840200020007058602000200"], 0x0) nanosleep(&(0x7f0000000200)={0x1}, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./mydev/v4l-touch0\x00', 0x2, 0x0) ioctl(r0, 0xc0145608, &(0x7f0000000400)="03000000010000000100"/20) ioctl(r0, 0xc0405610, &(0x7f0000000500)="0100"/64) ioctl(r0, 0xc0145608, &(0x7f0000000b00)="00000000010000000100"/20) ioctl(r0, 0xc0145608, &(0x7f0000000600)="03000000010000000400"/20) ioctl(r0, 0xc058560f, &(0x7f0000000700)="0000000001000000002c0100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000000400000000000000002c0100"/88) ioctl(r0, 0xc058560f, &(0x7f0000000800)="0000000001000000002c0100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000000500000000000000002c0100"/88) ioctl(r0, 0xc058560f, &(0x7f0000000900)="0000000001000000002c0100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000000600000000000000002c0100"/88) ioctl(r0, 0xc058560f, &(0x7f0000000a00)="0000000001000000002c0100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000000700000000000000002c0100"/88) ioctl(r0, 0xc0145608, &(0x7f0000000b00)="00000000010000000400"/20) 1.434607878s ago: executing program 2 (id=38): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000040)='sysfs\x00', 0x0, 0x0) r0 = syz_usb_connect(0x0, 0x36, &(0x7f0000000100)={{0x12, 0x1, 0x200, 0x0, 0x0, 0x0, 0x40, 0x1286, 0x1fa4, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x0, 0x80, 0xfa, "", [{{0x9, 0x4, 0x0, 0x0, 0x2, 0xff, 0xff, 0xff, 0x0, [], [{{0x9, 0x5, 0x2, 0x2, 0x200}}, {{0x9, 0x5, 0x86, 0x2, 0x200}}]}}]}}]}}, 0x0) syz_usb_ep_read(r0, 0x2, 0x6, &(0x7f0000000200)=""/6) syz_usb_ep_write(r0, 0x86, 0x2, &(0x7f0000000200)='\x00\x00') r1 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./sys/power/state\x00', 0x2, 0x0) write(r1, &(0x7f0000000400)='mem\x00', 0x4) 613.174345ms ago: executing program 3 (id=39): r0 = socket$inet(0x2, 0x2, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000000)={'dummy0\x00', &(0x7f0000000100)=@ethtool_rxfh={0x47}}) 528.624242ms ago: executing program 3 (id=40): syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x0) 528.423233ms ago: executing program 3 (id=41): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) connect$bt_l2cap(r0, &(0x7f0000000080)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x7ff}, 0xe) (async) r1 = syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6) timer_create(0x0, &(0x7f0000000000)={0x0, 0x9}, &(0x7f0000000040)=0x0) timer_settime(r2, 0x0, &(0x7f0000000080)={{}, {0x0, 0x100000}}, &(0x7f00000000c0)) ioctl$sock_bt_hidp_HIDPCONNADD(r1, 0x400448c8, &(0x7f0000000280)={r0, r0, 0xc, 0x1, &(0x7f0000000340)='\x00', 0x9, 0x1, 0xc45, 0x1010, 0x9, 0x2, 0x1, 'syz1\x00'}) 438.988927ms ago: executing program 3 (id=42): mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./sys\x00', 0x1ff) mount(0x0, &(0x7f00000000c0)='./sys\x00', &(0x7f0000000100)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./sys/bus/pci/devices/0000:00:02.0/driver_override\x00', 0x2, 0x0) write(r0, &(0x7f0000000180)='dwc2-pci\x00', 0x9) r1 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./sys/bus/pci/devices/0000:00:02.0/driver/unbind\x00', 0x2, 0x0) write(r1, &(0x7f0000000200)='0000:00:02.0\x00', 0xd) r2 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./sys/bus/pci/devices/0000:00:02.0/resource0\x00', 0x2, 0x0) pwrite64(r2, &(0x7f0000000280)='\x00\x00TO', 0x4, 0x40) pwrite64(r2, &(0x7f00000002c0)='\x00\x00\x00\x00', 0x4, 0x44) pwrite64(r2, &(0x7f0000000300)="00b48b22", 0x4, 0x48) pwrite64(r2, &(0x7f0000000340)="e800f00f", 0x4, 0x4c) pwrite64(r2, &(0x7f0000000380)="2000f01f", 0x4, 0x50) pwrite64(r2, &(0x7f00000003c0)="00040000", 0x4, 0x24) pwrite64(r2, &(0x7f0000000400)="00040004", 0x4, 0x28) pwrite64(r2, &(0x7f0000000440)="00080004", 0x4, 0x100) r3 = openat(0xffffffffffffff9c, &(0x7f0000000480)='./sys/bus/pci/drivers/dwc2-pci/bind\x00', 0x2, 0x0) r4 = syz_io_uring_setup(0xf00, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000000540)=0x0, &(0x7f0000000580)=0x0, &(0x7f00000005c0)=0x0) syz_io_uring_submit(r5, r6, r7, &(0x7f0000000600)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd=r3, 0x0, &(0x7f0000000680)=[{&(0x7f00000006c0)='0000:00:02.0\x00', 0xd}], 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, '\x00', 0x0}}) io_uring_enter(r4, 0x1, 0x0, 0x0, 0x0, 0x0) nanosleep(&(0x7f0000000000)={0x0, 0xf4240}, 0x0) pwrite64(r2, &(0x7f0000000700)="00000080", 0x4, 0x10) nanosleep(&(0x7f0000000000)={0x0, 0xf4240}, 0x0) pwrite64(r2, &(0x7f0000000740)="00000080", 0x4, 0x10) nanosleep(&(0x7f0000000000)={0x0, 0xf4240}, 0x0) pwrite64(r2, &(0x7f0000000780)="00000080", 0x4, 0x10) nanosleep(&(0x7f0000000000)={0x0, 0xf4240}, 0x0) pwrite64(r2, &(0x7f00000007c0)="00000080", 0x4, 0x10) nanosleep(&(0x7f0000000000)={0x0, 0xf4240}, 0x0) pwrite64(r2, &(0x7f0000000800)="00000080", 0x4, 0x10) nanosleep(&(0x7f0000000000)={0x0, 0xf4240}, 0x0) pwrite64(r2, &(0x7f0000000840)="00000080", 0x4, 0x10) nanosleep(&(0x7f0000000000)={0x0, 0xf4240}, 0x0) pwrite64(r2, &(0x7f0000000880)="00000080", 0x4, 0x10) nanosleep(&(0x7f0000000000)={0x0, 0xf4240}, 0x0) pwrite64(r2, &(0x7f00000008c0)="00000080", 0x4, 0x10) nanosleep(&(0x7f0000000000)={0x0, 0xf4240}, 0x0) pwrite64(r2, &(0x7f0000000900)="00000080", 0x4, 0x10) nanosleep(&(0x7f0000000000)={0x0, 0xf4240}, 0x0) pwrite64(r2, &(0x7f0000000940)="00000080", 0x4, 0x10) 358.03674ms ago: executing program 3 (id=43): r0 = syz_usb_connect(0x2, 0x34, &(0x7f0000000000)=ANY=[@ANYBLOB="12010002ffffff401e041c400001010203010902220001010080fa0904000000ffffff000904000101ffffff0007058101000201"], &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, &(0x7f0000000100)={0x84, &(0x7f0000000200)={0xc0, 0xa1, 0x1, '\x00'}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, &(0x7f0000000180)={0x84, &(0x7f0000000280)={0xc0, 0xa1, 0x1, "01"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, &(0x7f0000000180)) syz_usb_control_io(r0, 0x0, &(0x7f0000000180)) syz_usb_control_io(r0, 0x0, &(0x7f0000000180)) syz_usb_control_io(r0, 0x0, &(0x7f0000000180)) syz_usb_control_io(r0, 0x0, &(0x7f0000000180)) syz_usb_control_io(r0, 0x0, &(0x7f0000000180)) syz_usb_control_io(r0, 0x0, &(0x7f0000000180)) syz_usb_control_io(r0, 0x0, &(0x7f0000000180)) syz_usb_control_io(r0, 0x0, &(0x7f0000000180)) syz_usb_control_io(r0, 0x0, &(0x7f0000000180)) syz_usb_control_io(r0, 0x0, &(0x7f0000000180)) syz_usb_control_io(r0, 0x0, &(0x7f0000000180)) syz_usb_control_io(r0, 0x0, &(0x7f0000000180)) r1 = syz_open_dev$video(&(0x7f0000000080), 0x0, 0x2) read(r1, &(0x7f0000000400)=""/4096, 0x1000) 217.217405ms ago: executing program 1 (id=44): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000100)='sysfs\x00', 0x0, 0x0) mknodat(0xffffffffffffff9c, &(0x7f0000000200)='./md0\x00', 0x8180, 0x900) openat(0xffffffffffffff9c, &(0x7f0000000200)='./md0\x00', 0x2, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./sys/block/md0/md/level\x00', 0x2, 0x0) write(r0, &(0x7f0000000400)='raid1\x00', 0x5) r1 = openat(0xffffffffffffff9c, &(0x7f0000000500)='./sys/block/md0/md/raid_disks\x00', 0x2, 0x0) write(r1, &(0x7f0000000600)='1\x00', 0x1) r2 = openat(0xffffffffffffff9c, &(0x7f0000000700)='./sys/block/md0/md/new_dev\x00', 0x2, 0x0) write(r2, &(0x7f0000000800)='1:0\x00', 0x3) r3 = openat(0xffffffffffffff9c, &(0x7f0000000900)='./sys/block/md0/md/dev-ram0/slot\x00', 0x2, 0x0) write(r3, &(0x7f0000000a00)='0\x00', 0x1) r4 = openat(0xffffffffffffff9c, &(0x7f0000000b00)='./sys/block/md0/md/array_state\x00', 0x2, 0x0) write(r4, &(0x7f0000000c00)='active\x00', 0x6) 0s ago: executing program 1 (id=45): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syz_tun\x00', 0x7101}) r1 = socket$netlink(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000001200)={&(0x7f0000001080)={0x38, 0x1403, 0x1, 0x0, 0x0, "", [{{0x9, 0x2, 'syz2\x00'}, {0x8, 0x41, 'rxe\x00'}, {0x14, 0x33, 'syz_tun\x00'}}]}, 0x38}, 0x1, 0x0, 0x0, 0x5}, 0x100) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f0000000140)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000100)={0x0}, 0x106, 0x1}}, 0x20) write$RDMA_USER_CM_CMD_BIND_IP(r2, &(0x7f0000000180)={0x2, 0x28, 0xfa00, {0x0, {0x2, 0x4e20, 0xac1414aa, @empty}, r3}}, 0x30) write$RDMA_USER_CM_CMD_RESOLVE_IP(r2, &(0x7f00000001c0)={0x3, 0x28, 0xfa00, {{0x2, 0x0, 0x0, @empty}, {0x2, 0x4e20, 0xac1414aa, @empty}, r3, 0x3e8}}, 0x30) write$RDMA_USER_CM_CMD_RESOLVE_ROUTE(r2, &(0x7f0000000200)={0x4, 0x10, 0xfa00, {r3, 0x3e8}}, 0x18) write$RDMA_USER_CM_CMD_CONNECT(r2, &(0x7f0000000240)={0x6, 0x118, 0xfa00, {{}, r3}}, 0x120) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.1.148' (ED25519) to the list of known hosts. [ 60.368967][ T30] kauditd_printk_skb: 11 callbacks suppressed [ 60.368983][ T30] audit: type=1400 audit(1785857214.956:129): avc: denied { mounton } for pid=5592 comm="syz-executor" path="/syzcgroup/unified" dev="sda1" ino=2023 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1 [ 60.398722][ T30] audit: type=1400 audit(1785857214.986:130): avc: denied { mount } for pid=5592 comm="syz-executor" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 60.401408][ T5592] cgroup: Unknown subsys name 'net' [ 60.427663][ T30] audit: type=1400 audit(1785857215.016:131): avc: denied { unmount } for pid=5592 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 60.545428][ T5592] cgroup: Unknown subsys name 'cpuset' [ 60.553217][ T5592] cgroup: Unknown subsys name 'rlimit' [ 60.692108][ T30] audit: type=1400 audit(1785857215.276:132): avc: denied { setattr } for pid=5592 comm="syz-executor" name="raw-gadget" dev="devtmpfs" ino=820 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 60.715973][ T30] audit: type=1400 audit(1785857215.276:133): avc: denied { create } for pid=5592 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 60.742308][ T30] audit: type=1400 audit(1785857215.286:134): avc: denied { write } for pid=5592 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 60.765129][ T30] audit: type=1400 audit(1785857215.286:135): avc: denied { read } for pid=5592 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 60.787415][ T30] audit: type=1400 audit(1785857215.296:136): avc: denied { mounton } for pid=5592 comm="syz-executor" path="/proc/sys/fs/binfmt_misc" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=dir permissive=1 [ 60.817581][ T30] audit: type=1400 audit(1785857215.296:137): avc: denied { mount } for pid=5592 comm="syz-executor" name="/" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=filesystem permissive=1 Setting up swapspace version 1, size = 127995904 bytes [ 60.822988][ T5594] SELinux: Context root:object_r:swapfile_t is not valid (left unmapped). [ 60.851045][ T30] audit: type=1400 audit(1785857215.436:138): avc: denied { relabelto } for pid=5594 comm="mkswap" name="swap-file" dev="sda1" ino=2026 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 61.790462][ T5592] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 63.834851][ T5619] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 63.843645][ T5619] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 63.848007][ T5621] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 63.851928][ T5619] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 63.859405][ T5621] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 63.868469][ T5619] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 63.878317][ T5621] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 63.881984][ T5619] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 63.891697][ T5620] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 63.899111][ T5619] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 63.902365][ T5621] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 63.911017][ T5623] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 63.917886][ T5621] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 63.923166][ T5619] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 63.930099][ T5620] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 63.936678][ T5623] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 63.944608][ T5621] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 63.951488][ T5619] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 63.966626][ T50] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 63.967832][ T5619] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 63.975692][ T50] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 63.981002][ T5623] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 63.989136][ T5620] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 64.003045][ T50] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 64.010682][ T5619] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 65.153072][ T5606] bridge0: port 1(bridge_slave_0) entered blocking state [ 65.161213][ T5606] bridge0: port 1(bridge_slave_0) entered disabled state [ 65.168710][ T5606] bridge_slave_0: entered allmulticast mode [ 65.176000][ T5606] bridge_slave_0: entered promiscuous mode [ 65.206793][ T5606] bridge0: port 2(bridge_slave_1) entered blocking state [ 65.214253][ T5606] bridge0: port 2(bridge_slave_1) entered disabled state [ 65.222601][ T5606] bridge_slave_1: entered allmulticast mode [ 65.230287][ T5606] bridge_slave_1: entered promiscuous mode [ 65.328011][ T5606] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 65.357023][ T5606] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 65.417869][ T5605] bridge0: port 1(bridge_slave_0) entered blocking state [ 65.425078][ T5605] bridge0: port 1(bridge_slave_0) entered disabled state [ 65.432188][ T5605] bridge_slave_0: entered allmulticast mode [ 65.439091][ T5605] bridge_slave_0: entered promiscuous mode [ 65.451904][ T5604] bridge0: port 1(bridge_slave_0) entered blocking state [ 65.459278][ T5604] bridge0: port 1(bridge_slave_0) entered disabled state [ 65.466473][ T5604] bridge_slave_0: entered allmulticast mode [ 65.473312][ T5604] bridge_slave_0: entered promiscuous mode [ 65.486505][ T5606] team0: Port device team_slave_0 added [ 65.492373][ T5605] bridge0: port 2(bridge_slave_1) entered blocking state [ 65.499509][ T5605] bridge0: port 2(bridge_slave_1) entered disabled state [ 65.507033][ T5605] bridge_slave_1: entered allmulticast mode [ 65.513865][ T5605] bridge_slave_1: entered promiscuous mode [ 65.526280][ T5604] bridge0: port 2(bridge_slave_1) entered blocking state [ 65.533413][ T5604] bridge0: port 2(bridge_slave_1) entered disabled state [ 65.540566][ T5604] bridge_slave_1: entered allmulticast mode [ 65.547384][ T5604] bridge_slave_1: entered promiscuous mode [ 65.560843][ T5606] team0: Port device team_slave_1 added [ 65.572485][ T5608] bridge0: port 1(bridge_slave_0) entered blocking state [ 65.579991][ T5608] bridge0: port 1(bridge_slave_0) entered disabled state [ 65.587187][ T5608] bridge_slave_0: entered allmulticast mode [ 65.593887][ T5608] bridge_slave_0: entered promiscuous mode [ 65.626053][ T5608] bridge0: port 2(bridge_slave_1) entered blocking state [ 65.633359][ T5608] bridge0: port 2(bridge_slave_1) entered disabled state [ 65.640473][ T5608] bridge_slave_1: entered allmulticast mode [ 65.647438][ T5608] bridge_slave_1: entered promiscuous mode [ 65.659784][ T5607] bridge0: port 1(bridge_slave_0) entered blocking state [ 65.666977][ T5607] bridge0: port 1(bridge_slave_0) entered disabled state [ 65.674255][ T5607] bridge_slave_0: entered allmulticast mode [ 65.680892][ T5607] bridge_slave_0: entered promiscuous mode [ 65.696011][ T5605] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 65.713672][ T5604] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 65.725451][ T5604] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 65.734664][ T5607] bridge0: port 2(bridge_slave_1) entered blocking state [ 65.742059][ T5607] bridge0: port 2(bridge_slave_1) entered disabled state [ 65.749570][ T5607] bridge_slave_1: entered allmulticast mode [ 65.757224][ T5607] bridge_slave_1: entered promiscuous mode [ 65.764239][ T5606] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 65.771203][ T5606] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 65.797112][ T5606] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 65.810819][ T5605] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 65.838668][ T5606] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 65.845743][ T5606] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 65.871688][ T5606] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 65.889878][ T5608] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 65.925465][ T1312] ieee802154 phy0 wpan0: encryption failed: -22 [ 65.930128][ T5605] team0: Port device team_slave_0 added [ 65.933843][ T1312] ieee802154 phy1 wpan1: encryption failed: -22 [ 65.940306][ T5608] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 65.954493][ T5604] team0: Port device team_slave_0 added [ 65.961835][ T5607] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 65.973343][ T5607] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 65.988728][ T5605] team0: Port device team_slave_1 added [ 66.004127][ T5619] Bluetooth: hci2: command tx timeout [ 66.017065][ T5604] team0: Port device team_slave_1 added [ 66.044695][ T5608] team0: Port device team_slave_0 added [ 66.070498][ T5605] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 66.077561][ T5605] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 66.085419][ T5619] Bluetooth: hci3: command tx timeout [ 66.103600][ T5618] Bluetooth: hci0: command tx timeout [ 66.109452][ T5617] Bluetooth: hci1: command tx timeout [ 66.114970][ T5618] Bluetooth: hci4: command tx timeout [ 66.123007][ T5605] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 66.138123][ T5605] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 66.145167][ T5605] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 66.171240][ T5605] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 66.183173][ T5608] team0: Port device team_slave_1 added [ 66.199482][ T5606] hsr_slave_0: entered promiscuous mode [ 66.205742][ T5606] hsr_slave_1: entered promiscuous mode [ 66.213189][ T5607] team0: Port device team_slave_0 added [ 66.230153][ T5604] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 66.237202][ T5604] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 66.263718][ T5604] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 66.275762][ T5604] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 66.282708][ T5604] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 66.308874][ T5604] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 66.321538][ T5607] team0: Port device team_slave_1 added [ 66.355584][ T5607] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 66.362563][ T5607] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 66.388554][ T5607] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 66.400795][ T5607] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 66.408091][ T5607] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 66.435214][ T5607] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 66.452838][ T5608] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 66.459880][ T5608] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 66.486105][ T5608] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 66.517919][ T5608] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 66.524931][ T5608] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 66.550912][ T5608] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 66.591087][ T5605] hsr_slave_0: entered promiscuous mode [ 66.597309][ T5605] hsr_slave_1: entered promiscuous mode [ 66.603381][ T5605] debugfs: 'hsr0' already exists in 'hsr' [ 66.609147][ T5605] Cannot create hsr debugfs directory [ 66.618723][ T5604] hsr_slave_0: entered promiscuous mode [ 66.625721][ T5604] hsr_slave_1: entered promiscuous mode [ 66.631617][ T5604] debugfs: 'hsr0' already exists in 'hsr' [ 66.637464][ T5604] Cannot create hsr debugfs directory [ 66.681437][ T5607] hsr_slave_0: entered promiscuous mode [ 66.687523][ T5607] hsr_slave_1: entered promiscuous mode [ 66.693534][ T5607] debugfs: 'hsr0' already exists in 'hsr' [ 66.699248][ T5607] Cannot create hsr debugfs directory [ 66.759867][ T5608] hsr_slave_0: entered promiscuous mode [ 66.766030][ T5608] hsr_slave_1: entered promiscuous mode [ 66.771887][ T5608] debugfs: 'hsr0' already exists in 'hsr' [ 66.777782][ T5608] Cannot create hsr debugfs directory [ 67.077299][ T5606] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 67.088416][ T5606] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 67.096302][ T5606] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 67.106097][ T5606] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 67.124369][ T5606] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 67.133907][ T5606] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 67.148384][ T5606] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 67.157755][ T5606] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 67.204619][ T5604] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 67.215173][ T5604] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 67.226378][ T5604] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 67.236033][ T5604] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 67.244298][ T5604] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 67.252597][ T5604] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 67.262280][ T5604] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 67.270654][ T5604] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 67.354659][ T5605] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 67.364391][ T5605] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 67.372287][ T5605] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 67.380961][ T5605] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 67.389807][ T5605] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 67.398258][ T5605] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 67.406082][ T5605] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 67.415261][ T5605] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 67.475726][ T5606] 8021q: adding VLAN 0 to HW filter on device bond0 [ 67.510321][ T5608] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 67.520584][ T5608] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 67.528729][ T5608] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 67.537735][ T5608] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 67.552428][ T5608] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 67.561661][ T5608] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 67.578333][ T5608] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 67.587456][ T5608] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 67.596573][ T5606] 8021q: adding VLAN 0 to HW filter on device team0 [ 67.642612][ T995] bridge0: port 1(bridge_slave_0) entered blocking state [ 67.650258][ T995] bridge0: port 1(bridge_slave_0) entered forwarding state [ 67.669578][ T995] bridge0: port 2(bridge_slave_1) entered blocking state [ 67.676693][ T995] bridge0: port 2(bridge_slave_1) entered forwarding state [ 67.704683][ T5604] 8021q: adding VLAN 0 to HW filter on device bond0 [ 67.737330][ T5607] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 67.746985][ T5607] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 67.754989][ T5607] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 67.764486][ T5607] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 67.781969][ T5607] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 67.791067][ T5607] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 67.799320][ T5607] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 67.808191][ T5607] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 67.823583][ T5604] 8021q: adding VLAN 0 to HW filter on device team0 [ 67.850141][ T5605] 8021q: adding VLAN 0 to HW filter on device bond0 [ 67.860491][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 67.867644][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 67.895847][ T57] bridge0: port 2(bridge_slave_1) entered blocking state [ 67.902981][ T57] bridge0: port 2(bridge_slave_1) entered forwarding state [ 67.926031][ T5605] 8021q: adding VLAN 0 to HW filter on device team0 [ 67.957822][ T995] bridge0: port 1(bridge_slave_0) entered blocking state [ 67.965394][ T995] bridge0: port 1(bridge_slave_0) entered forwarding state [ 67.991304][ T995] bridge0: port 2(bridge_slave_1) entered blocking state [ 67.998500][ T995] bridge0: port 2(bridge_slave_1) entered forwarding state [ 68.085574][ T50] Bluetooth: hci2: command tx timeout [ 68.135316][ T5605] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 68.148466][ T5605] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 68.163553][ T5618] Bluetooth: hci1: command tx timeout [ 68.164088][ T5617] Bluetooth: hci4: command tx timeout [ 68.169303][ T50] Bluetooth: hci3: command tx timeout [ 68.175513][ T5619] Bluetooth: hci0: command tx timeout [ 68.191012][ T5608] 8021q: adding VLAN 0 to HW filter on device bond0 [ 68.282217][ T5608] 8021q: adding VLAN 0 to HW filter on device team0 [ 68.314601][ T57] bridge0: port 1(bridge_slave_0) entered blocking state [ 68.321762][ T57] bridge0: port 1(bridge_slave_0) entered forwarding state [ 68.358439][ T57] bridge0: port 2(bridge_slave_1) entered blocking state [ 68.365632][ T57] bridge0: port 2(bridge_slave_1) entered forwarding state [ 68.405970][ T5607] 8021q: adding VLAN 0 to HW filter on device bond0 [ 68.471107][ T5607] 8021q: adding VLAN 0 to HW filter on device team0 [ 68.529596][ T995] bridge0: port 1(bridge_slave_0) entered blocking state [ 68.536818][ T995] bridge0: port 1(bridge_slave_0) entered forwarding state [ 68.567559][ T5606] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 68.594463][ T995] bridge0: port 2(bridge_slave_1) entered blocking state [ 68.601631][ T995] bridge0: port 2(bridge_slave_1) entered forwarding state [ 68.799448][ T5604] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 68.810679][ T5606] veth0_vlan: entered promiscuous mode [ 68.848260][ T5606] veth1_vlan: entered promiscuous mode [ 68.949492][ T5606] veth0_macvtap: entered promiscuous mode [ 68.971336][ T5605] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 68.992170][ T5606] veth1_macvtap: entered promiscuous mode [ 69.022173][ T5604] veth0_vlan: entered promiscuous mode [ 69.074841][ T5606] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 69.092059][ T5604] veth1_vlan: entered promiscuous mode [ 69.108791][ T5606] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 69.219020][ T5604] veth0_macvtap: entered promiscuous mode [ 69.258755][ T5604] veth1_macvtap: entered promiscuous mode [ 69.323944][ T13] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 69.354900][ T5604] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 69.404758][ T5604] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 69.434858][ T93] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 69.444267][ T995] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 69.449533][ T5608] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 69.456386][ T995] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 69.494816][ T36] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 69.504337][ T36] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 69.555391][ T995] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 69.568750][ T995] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 69.578467][ T995] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 69.595718][ T5607] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 69.609898][ T30] kauditd_printk_skb: 13 callbacks suppressed [ 69.609912][ T30] audit: type=1400 audit(1785857224.196:152): avc: denied { mounton } for pid=5606 comm="syz-executor" path="/root/syzkaller.xo7ATH/syz-tmp" dev="sda1" ino=2042 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_home_t tclass=dir permissive=1 [ 69.644916][ T30] audit: type=1400 audit(1785857224.226:153): avc: denied { mount } for pid=5606 comm="syz-executor" name="/" dev="tmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 69.666088][ T5605] veth0_vlan: entered promiscuous mode [ 69.669339][ T30] audit: type=1400 audit(1785857224.236:154): avc: denied { mounton } for pid=5606 comm="syz-executor" path="/root/syzkaller.xo7ATH/syz-tmp/newroot/dev" dev="tmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 69.704613][ T30] audit: type=1400 audit(1785857224.236:155): avc: denied { mount } for pid=5606 comm="syz-executor" name="/" dev="proc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 69.728102][ T1160] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 69.738020][ T30] audit: type=1400 audit(1785857224.236:156): avc: denied { mounton } for pid=5606 comm="syz-executor" path="/root/syzkaller.xo7ATH/syz-tmp/newroot/sys/kernel/debug" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=dir permissive=1 [ 69.767465][ T30] audit: type=1400 audit(1785857224.236:157): avc: denied { mounton } for pid=5606 comm="syz-executor" path="/root/syzkaller.xo7ATH/syz-tmp/newroot/proc/sys/fs/binfmt_misc" dev="proc" ino=7473 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysctl_fs_t tclass=dir permissive=1 [ 69.791377][ T5608] veth0_vlan: entered promiscuous mode [ 69.795833][ T30] audit: type=1400 audit(1785857224.236:158): avc: denied { unmount } for pid=5606 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 69.822656][ T30] audit: type=1400 audit(1785857224.266:159): avc: denied { mounton } for pid=5606 comm="syz-executor" path="/dev/gadgetfs" dev="devtmpfs" ino=2784 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:device_t tclass=dir permissive=1 [ 69.828940][ T5608] veth1_vlan: entered promiscuous mode [ 69.852475][ T30] audit: type=1400 audit(1785857224.266:160): avc: denied { mount } for pid=5606 comm="syz-executor" name="/" dev="gadgetfs" ino=7480 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfs_t tclass=filesystem permissive=1 [ 69.879732][ T30] audit: type=1400 audit(1785857224.266:161): avc: denied { mount } for pid=5606 comm="syz-executor" name="/" dev="binder" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 69.881041][ T5606] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 69.904633][ T5605] veth1_vlan: entered promiscuous mode [ 69.939431][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 69.947555][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 70.050806][ T5605] veth0_macvtap: entered promiscuous mode [ 70.053269][ T36] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 70.060609][ T5608] veth0_macvtap: entered promiscuous mode [ 70.077641][ T36] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 70.079590][ T5607] veth0_vlan: entered promiscuous mode [ 70.094670][ T5605] veth1_macvtap: entered promiscuous mode [ 70.115565][ T5608] veth1_macvtap: entered promiscuous mode [ 70.154520][ T5607] veth1_vlan: entered promiscuous mode [ 70.165670][ T5619] Bluetooth: hci2: command tx timeout [ 70.174292][ T5608] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 70.196164][ T5608] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 70.207804][ T5605] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 70.237137][ T5605] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 70.247617][ T5619] Bluetooth: hci0: command tx timeout [ 70.247648][ T50] Bluetooth: hci4: command tx timeout [ 70.255118][ T5619] Bluetooth: hci3: command tx timeout [ 70.265158][ T5618] Bluetooth: hci1: command tx timeout [ 70.273533][ T36] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 70.312135][ T1160] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 70.326501][ T36] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 70.336343][ T36] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 70.345126][ T36] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 70.408080][ T5607] veth0_macvtap: entered promiscuous mode [ 70.421624][ T5607] veth1_macvtap: entered promiscuous mode [ 70.437503][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 70.447147][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 70.486102][ T5607] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 70.502382][ T36] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 70.511582][ T36] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 70.539357][ T5607] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 70.573166][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 70.600879][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 70.673870][ T995] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 70.697302][ T1160] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 70.705398][ T48] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 70.716881][ T1160] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 70.736533][ T48] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 70.812926][ T36] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 70.858475][ T36] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 70.866663][ T93] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 70.890986][ T36] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 71.036086][ T93] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 71.054737][ T93] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 71.205282][ T12] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 71.239042][ T12] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 71.250779][ T12] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 71.260616][ T12] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 71.293073][ T5801] NFSD: Unable to initialize client recovery tracking! (-110) [ 71.317797][ T5801] NFSD: Is nfsdcld running? If not, enable CONFIG_NFSD_LEGACY_CLIENT_TRACKING. [ 71.333459][ T5801] NFSD: starting 90-second grace period (net f000041e) [ 71.384591][ T5612] logitech-hidpp-device 0005:046D:B012.0001: hidraw0: BLUETOOTH HID v0.00 Device [syz0] on syz1 [ 71.386395][ T5839] nvme_fcloop: fcloop_set_cmd_drop: DROP: Starting at instance 0 of fabric opcode x1 drop +99 instances [ 71.496010][ T12] nvme nvme0: NVME-FC{0}: create association : host wwpn 0x2222222222222222 rport wwpn 0x4444444444444444: NQN "nqn.2014-08.org.nvmexpress.discovery" [ 71.526318][ T36] nvmet_fc: {0}: Create Association LS failed: Association Allocation Failed [ 71.528137][ T5841] fido_id[5841]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 71.556591][ T12] (NULL device *): queue 0 connect admin queue failed (-6). [ 71.566494][ T12] nvme nvme0: NVME-FC{0}: reset: Reconnect attempt failed (-6) [ 71.574942][ T12] nvme nvme0: NVME-FC{0}: Reconnect attempt in 2 seconds [ 71.582863][ T5839] nvme nvme0: NVME-FC{0}: new ctrl: NQN "nqn.2014-08.org.nvmexpress.discovery", hostnqn: nqn.2014-08.org.nvmexpress:uuid:2c6b2d09-dccf-4308-b019-c25d49d5a53b [ 71.729758][ T5822] NFSD: Failed to start, no listeners configured. [ 71.783634][ T5612] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 71.960382][ T5612] usb 2-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 71.985178][ T5612] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 72.012058][ T5612] usb 2-1: Product: syz [ 72.024630][ T5612] usb 2-1: Manufacturer: syz [ 72.040974][ T5612] usb 2-1: SerialNumber: syz [ 72.242993][ T50] Bluetooth: hci2: command tx timeout [ 72.293132][ T992] usb 2-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 72.301714][ T5848] configfs-gadget.g1 gadget.33: uvc: uvc_function_bind() [ 72.323703][ T5618] Bluetooth: hci0: command tx timeout [ 72.323891][ T5619] Bluetooth: hci4: command tx timeout [ 72.329210][ T5618] Bluetooth: hci1: command tx timeout [ 72.340613][ T50] Bluetooth: hci3: command tx timeout [ 72.351012][ T5859] lo speed is unknown, defaulting to 1000 [ 72.361267][ T5859] lo speed is unknown, defaulting to 1000 [ 72.369981][ T5859] lo speed is unknown, defaulting to 1000 [ 72.377696][ T5859] smbdirect: ib_dev[syz0]: added: RNIC max_fast_reg_page_list_len=256 device_cap_flags=0x200000 kernel_cap_flags=0x10 page_size_cap=0x1000 [ 72.392991][ T5859] smbdirect: ib_dev[syz0]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=1 max_cqe=3276800 max_qp_wr=32768 max_send_sge=6 max_recv_sge=6 [ 72.410756][ T5859] smbdirect: ib_dev[syz0]PORT[1]: iwarp=1 ib=0 roce=0 v1=0 v2=0 core_cap_flags=0x400008 [ 72.429358][ T5859] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 72.466620][ T5859] infiniband syz0: RDMA CMA: cma_listen_on_dev, error -98 [ 72.502872][ T9] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 72.580962][ T5859] lo speed is unknown, defaulting to 1000 [ 72.598240][ T5859] lo speed is unknown, defaulting to 1000 [ 72.607942][ T5859] lo speed is unknown, defaulting to 1000 [ 72.629442][ T5859] lo speed is unknown, defaulting to 1000 [ 72.640363][ T5859] lo speed is unknown, defaulting to 1000 [ 72.674023][ T9] usb 5-1: New USB device found, idVendor=23ba, idProduct=0100, bcdDevice= 1.00 [ 72.683590][ T9] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 72.691707][ T9] usb 5-1: Product: syz [ 72.696766][ T9] usb 5-1: Manufacturer: syz [ 72.705455][ T9] usb 5-1: SerialNumber: syz [ 72.847307][ T5845] mac80211_hwsim hwsim10 wlan99: renamed from wlan0 (while UP) [ 72.912915][ T29] usb 4-1: new full-speed USB device number 2 using dummy_hcd [ 73.035375][ T5884] loop0: detected capacity change from 0 to 128 [ 73.086834][ T29] usb 4-1: not running at top speed; connect to a high speed hub [ 73.131377][ T29] usb 4-1: New USB device found, idVendor=17cc, idProduct=1969, bcdDevice= 1.00 [ 73.164090][ T29] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 73.173591][ T29] usb 4-1: Product: syz [ 73.178511][ T29] usb 4-1: Manufacturer: syz [ 73.184632][ T29] usb 4-1: SerialNumber: syz [ 73.213319][ T29] usb 4-1: selecting invalid altsetting 1 [ 73.219960][ T29] snd-usb-caiaq 4-1:1.0: can't set alt interface. [ 73.226699][ T29] usb 4-1: unable to init card! (ret=-5) [ 73.233661][ T29] snd-usb-caiaq 4-1:1.0: probe with driver snd-usb-caiaq failed with error -5 [ 73.312955][ T5853] NFSD: Unable to initialize client recovery tracking! (-110) [ 73.320635][ T5853] NFSD: Is nfsdcld running? If not, enable CONFIG_NFSD_LEGACY_CLIENT_TRACKING. [ 73.330091][ T5853] NFSD: starting 90-second grace period (net f000041e) [ 73.434060][ T5725] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 73.603041][ T992] usb 2-1: Service connection timeout for: 256 [ 73.610248][ T36] nvme nvme0: NVME-FC{0}: create association : host wwpn 0x2222222222222222 rport wwpn 0x4444444444444444: NQN "nqn.2014-08.org.nvmexpress.discovery" [ 73.628233][ T992] ath9k_htc 2-1:1.0: ath9k_htc: Unable to initialize HTC services [ 73.640989][ T5725] usb 3-1: New USB device found, idVendor=9710, idProduct=7720, bcdDevice= 0.00 [ 73.641808][ T93] nvmet_fc: {0}: Create Association LS failed: Association Allocation Failed [ 73.654353][ T5725] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 73.661301][ T36] (NULL device *): queue 0 connect admin queue failed (-6). [ 73.677801][ T36] nvme nvme0: NVME-FC{0}: reset: Reconnect attempt failed (-6) [ 73.689084][ T36] nvme nvme0: NVME-FC{0}: Reconnect attempt in 2 seconds [ 73.691598][ T5725] mos7720 3-1:1.0: Moschip 2 port adapter converter detected [ 73.712446][ T992] ath9k_htc: Failed to initialize the device [ 73.725958][ T992] usb 2-1: ath9k_htc: USB layer deinitialized [ 73.852871][ T803] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 73.894294][ T5725] usb 3-1: mos7720: usb_control_msg() failed: 0 [ 73.907743][ T5725] usb 3-1: Moschip 2 port adapter converter now attached to ttyUSB0 [ 73.927872][ T5725] usb 3-1: Moschip 2 port adapter converter now attached to ttyUSB1 [ 74.018590][ T5725] usb 2-1: USB disconnect, device number 2 [ 74.030532][ T803] usb 1-1: New USB device found, idVendor=0584, idProduct=0008, bcdDevice= 1.02 [ 74.047962][ T803] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 74.062220][ T803] ums-alauda 1-1:1.0: USB Mass Storage device detected [ 74.080237][ T803] ums-alauda 1-1:1.0: This device (0584,0008,0102 S 06 P f4) has unneeded SubClass and Protocol entries in unusual_devs.h (kernel syzkaller) [ 74.080237][ T803] Please send a copy of this message to and [ 74.111658][ T803] scsi host1: usb-storage 1-1:1.0 [ 74.812874][ T803] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 74.977354][ T803] usb 2-1: New USB device found, idVendor=0584, idProduct=0008, bcdDevice= 1.02 [ 74.986618][ T803] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 75.001545][ T803] ums-alauda 2-1:1.0: USB Mass Storage device detected [ 75.012529][ T803] ums-alauda 2-1:1.0: This device (0584,0008,0102 S 06 P f4) has unneeded SubClass and Protocol entries in unusual_devs.h (kernel syzkaller) [ 75.012529][ T803] Please send a copy of this message to and [ 75.039708][ T803] scsi host2: usb-storage 2-1:1.0 [ 75.136681][ T93] scsi 1:0:0:0: Direct-Access Fujifilm DPC-R1 (Alauda) 0102 PQ: 0 ANSI: 0 CCS [ 75.147383][ T93] scsi 1:0:0:1: Direct-Access Fujifilm DPC-R1 (Alauda) 0102 PQ: 0 ANSI: 0 CCS [ 75.178844][ T93] sd 1:0:0:0: Attached scsi generic sg1 type 0 [ 75.184330][ T1160] sd 1:0:0:0: [sdb] Media removed, stopped polling [ 75.207113][ T93] sd 1:0:0:1: Attached scsi generic sg2 type 0 [ 75.228488][ T995] sd 1:0:0:1: [sdc] Media removed, stopped polling [ 75.300899][ T1160] sd 1:0:0:0: [sdb] Attached SCSI removable disk [ 75.317949][ T995] sd 1:0:0:1: [sdc] Attached SCSI removable disk [ 75.376282][ T30] kauditd_printk_skb: 218 callbacks suppressed [ 75.376299][ T30] audit: type=1400 audit(1785857229.966:380): avc: denied { create } for pid=5911 comm="syz.4.28" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 75.397952][ T9] usb 5-1: USB disconnect, device number 2 [ 75.412006][ T30] audit: type=1400 audit(1785857229.996:381): avc: denied { ioctl } for pid=5911 comm="syz.4.28" path="socket:[8768]" dev="sockfs" ino=8768 ioctlcmd=0x48ca scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 75.497768][ T5914] udevd[5914]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 75.630662][ T30] audit: type=1400 audit(1785857230.216:382): avc: denied { mount } for pid=5916 comm="syz.4.29" name="/" dev="rpc_pipefs" ino=9442 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:rpc_pipefs_t tclass=filesystem permissive=1 [ 75.657732][ T803] usb 4-1: USB disconnect, device number 2 [ 75.705147][ T30] audit: type=1400 audit(1785857230.296:383): avc: denied { create } for pid=5919 comm="syz.3.30" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 75.756947][ T30] audit: type=1400 audit(1785857230.326:384): avc: denied { ioctl } for pid=5919 comm="syz.3.30" path="socket:[9456]" dev="sockfs" ino=9456 ioctlcmd=0x8983 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 75.783253][ T12] nvme nvme0: NVME-FC{0}: create association : host wwpn 0x2222222222222222 rport wwpn 0x4444444444444444: NQN "nqn.2014-08.org.nvmexpress.discovery" [ 75.815914][ T995] nvmet_fc: {0}: Create Association LS failed: Association Allocation Failed [ 75.817516][ T30] audit: type=1400 audit(1785857230.396:385): avc: denied { read } for pid=5270 comm="dhcpcd" name="n30" dev="tmpfs" ino=2046 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 75.848183][ T12] (NULL device *): queue 0 connect admin queue failed (-6). [ 75.861995][ T12] nvme nvme0: NVME-FC{0}: reset: Reconnect attempt failed (-6) [ 75.880171][ T12] nvme nvme0: NVME-FC{0}: Reconnect attempt in 2 seconds [ 75.908012][ T30] audit: type=1400 audit(1785857230.396:386): avc: denied { open } for pid=5270 comm="dhcpcd" path="/run/udev/data/n30" dev="tmpfs" ino=2046 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 75.970943][ T30] audit: type=1400 audit(1785857230.396:387): avc: denied { getattr } for pid=5270 comm="dhcpcd" path="/run/udev/data/n30" dev="tmpfs" ino=2046 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 76.019383][ T30] audit: type=1400 audit(1785857230.436:388): avc: denied { mount } for pid=5916 comm="syz.4.29" name="/" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=filesystem permissive=1 [ 76.027706][ T5929] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 76.086164][ T12] scsi 2:0:0:0: Direct-Access Fujifilm DPC-R1 (Alauda) 0102 PQ: 0 ANSI: 0 CCS [ 76.099801][ T12] scsi 2:0:0:1: Direct-Access Fujifilm DPC-R1 (Alauda) 0102 PQ: 0 ANSI: 0 CCS [ 76.131913][ T9] usb 3-1: USB disconnect, device number 2 [ 76.131933][ C1] usb 3-1: mos7720_interrupt_callback - Error -19 submitting control urb [ 76.202695][ T12] sd 2:0:0:0: Attached scsi generic sg3 type 0 [ 76.235077][ T9] moschip7720 ttyUSB0: Moschip 2 port adapter converter now disconnected from ttyUSB0 [ 76.250014][ T36] sd 2:0:0:0: [sdd] Media removed, stopped polling [ 76.266073][ T1160] sd 2:0:0:1: [sde] Media removed, stopped polling [ 76.292810][ T12] sd 2:0:0:1: Attached scsi generic sg4 type 0 [ 76.349211][ T9] moschip7720 ttyUSB1: Moschip 2 port adapter converter now disconnected from ttyUSB1 [ 76.379177][ T9] mos7720 3-1:1.0: device disconnected [ 76.401355][ T1160] sd 2:0:0:1: [sde] Attached SCSI removable disk [ 76.483854][ T36] sd 2:0:0:0: [sdd] Attached SCSI removable disk [ 76.538969][ T30] audit: type=1400 audit(1785857231.126:389): avc: denied { write } for pid=5925 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 76.719891][ T803] usb 1-1: USB disconnect, device number 2 [ 76.783622][ T5917] NFSD: Unable to initialize client recovery tracking! (-110) [ 76.808797][ T5917] NFSD: Is nfsdcld running? If not, enable CONFIG_NFSD_LEGACY_CLIENT_TRACKING. [ 76.864378][ T5917] NFSD: starting 90-second grace period (net f00004db) [ 76.933807][ T5955] CIFS: Attempting to mount //127.0.0.1/share [ 76.988965][ T5938] infiniband syz1: set active [ 77.018453][ T5938] infiniband syz1: added veth0 [ 77.097274][ T5938] smbdirect: ib_dev[syz1]: added: IB_CA max_fast_reg_page_list_len=512 device_cap_flags=0x1c001223c76 kernel_cap_flags=0x14 page_size_cap=0xfffff000 [ 77.113847][ T5938] smbdirect: ib_dev[syz1]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=32 max_cqe=32767 max_qp_wr=1048576 max_send_sge=32 max_recv_sge=32 [ 77.154232][ T5938] smbdirect: ib_dev[syz1]PORT[1]: iwarp=0 ib=0 roce=1 v1=0 v2=1 core_cap_flags=0x803005 [ 77.299510][ T5938] RDS/IB: syz1: added [ 77.318089][ T5938] smc: adding ib device syz1 with port count 1 [ 77.333058][ T5938] smc: ib device syz1 port 1 has no pnetid [ 77.404119][ T5598] udevd[5598]: inotify_add_watch(7, /dev/sdb, 10) failed: No such file or directory [ 77.741148][ T5955] CIFS: VFS: cifs_mount failed w/return code = -112 [ 77.834067][ T9] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 77.882859][ T803] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 77.923090][ T1160] nvme nvme0: NVME-FC{0}: create association : host wwpn 0x2222222222222222 rport wwpn 0x4444444444444444: NQN "nqn.2014-08.org.nvmexpress.discovery" [ 77.963086][ T36] nvmet_fc: {0}: Create Association LS failed: Association Allocation Failed [ 77.974798][ T1160] (NULL device *): queue 0 connect admin queue failed (-6). [ 77.982165][ T1160] nvme nvme0: NVME-FC{0}: reset: Reconnect attempt failed (-6) [ 77.989841][ T1160] nvme nvme0: NVME-FC{0}: Reconnect attempt in 2 seconds [ 78.020785][ T9] usb 5-1: New USB device found, idVendor=045e, idProduct=0775, bcdDevice= 1.00 [ 78.034603][ T9] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=0 [ 78.052629][ T9] usb 5-1: Product: syz [ 78.062135][ T9] usb 5-1: Manufacturer: syz [ 78.074103][ T803] usb 1-1: New USB device found, idVendor=1234, idProduct=5678, bcdDevice= 1.00 [ 78.093831][ T803] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 78.103587][ T5725] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 78.106162][ T9] input: Samsung SUR40 as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/input/input7 [ 78.129110][ T803] usb 1-1: Product: syz [ 78.134097][ T803] usb 1-1: Manufacturer: syz [ 78.138816][ T803] usb 1-1: SerialNumber: syz [ 78.155034][ T803] input: syz syz as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/input/input8 [ 78.299049][ T5725] usb 3-1: New USB device found, idVendor=1286, idProduct=1fa4, bcdDevice= 0.00 [ 78.315174][ T5725] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 78.487964][ T5725] mvusb_mdio 3-1:1.0: probe with driver mvusb_mdio failed with error -5 [ 78.744970][ T5725] hid-generic 0005:0C45:1010.0002: unknown main item tag 0x0 [ 78.759263][ T5725] hid-generic 0005:0C45:1010.0002: hidraw0: BLUETOOTH HID v0.09 Device [syz1] on aa:aa:aa:aa:aa:aa [ 78.990911][ T5763] usb 2-1: USB disconnect, device number 3 [ 79.143092][ T5725] usb 4-1: new full-speed USB device number 3 using dummy_hcd [ 79.164056][ T5913] udevd[5913]: inotify_add_watch(7, /dev/sdd, 10) failed: No such file or directory [ 79.223873][ T9] videodev: could not get a free minor [ 79.255572][ T9] sur40 5-1:1.0: Unable to register video subdevice. [ 79.277967][ T9] sur40 5-1:1.0: probe with driver sur40 failed with error -23 [ 79.334760][ T5725] usb 4-1: not running at top speed; connect to a high speed hub [ 79.339903][ T9] usb 5-1: USB disconnect, device number 3 [ 79.346614][ T5913] udevd[5913]: inotify_add_watch(7, /dev/sdd, 10) failed: No such file or directory [ 79.391613][ T5725] usb 4-1: New USB device found, idVendor=041e, idProduct=401c, bcdDevice= 1.00 [ 79.408178][ T10] usb 1-1: USB disconnect, device number 3 [ 79.417772][ T5725] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 79.434031][ T5725] usb 4-1: Product: syz [ 79.440709][ T4975] ================================================================== [ 79.448796][ T4975] BUG: KASAN: slab-use-after-free in string+0x471/0x4d0 [ 79.455736][ T4975] Read of size 1 at addr ffff88802dc9ac0a by task udevd/4975 [ 79.463093][ T4975] [ 79.465420][ T4975] CPU: 1 UID: 0 PID: 4975 Comm: udevd Not tainted syzkaller #0 PREEMPT(full) [ 79.465437][ T4975] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 79.465446][ T4975] Call Trace: [ 79.465450][ T4975] [ 79.465455][ T4975] dump_stack_lvl+0x100/0x190 [ 79.465476][ T4975] print_report+0x13d/0x4b0 [ 79.465496][ T4975] ? __virt_addr_valid+0x239/0x430 [ 79.465514][ T4975] ? string+0x471/0x4d0 [ 79.465527][ T4975] kasan_report+0xdf/0x1c0 [ 79.465545][ T4975] ? string+0x471/0x4d0 [ 79.465560][ T4975] string+0x471/0x4d0 [ 79.465574][ T4975] ? __pfx_string+0x10/0x10 [ 79.465589][ T4975] vsnprintf+0x422/0x1300 [ 79.465606][ T4975] ? __pfx_vsnprintf+0x10/0x10 [ 79.465620][ T4975] ? uevent_show+0x166/0x3a0 [ 79.465636][ T4975] ? sysfs_kf_seq_show+0x217/0x3f0 [ 79.465656][ T4975] ? seq_read_iter+0x32f/0x1270 [ 79.465668][ T4975] ? kernfs_fop_read_iter+0x46c/0x610 [ 79.465686][ T4975] ? vfs_read+0x82e/0xb40 [ 79.465706][ T4975] ? ksys_read+0x12a/0x250 [ 79.465725][ T4975] ? do_syscall_64+0x115/0x870 [ 79.465742][ T4975] add_uevent_var+0x183/0x3a0 [ 79.465756][ T4975] ? __pfx_add_uevent_var+0x10/0x10 [ 79.465771][ T4975] ? input_dev_uevent+0x16d/0x910 [ 79.465789][ T4975] ? __pfx_input_dev_uevent+0x10/0x10 [ 79.465804][ T4975] input_dev_uevent+0x1bf/0x910 [ 79.465820][ T4975] ? __pfx_input_dev_uevent+0x10/0x10 [ 79.465836][ T4975] dev_uevent+0x2f1/0x870 [ 79.465856][ T4975] ? __pfx_dev_uevent+0x10/0x10 [ 79.465874][ T4975] ? kasan_save_track+0x14/0x30 [ 79.465889][ T4975] ? __kasan_kmalloc+0xaa/0xb0 [ 79.465904][ T4975] ? __kmalloc_cache_noprof+0x2e5/0x6c0 [ 79.465926][ T4975] ? uevent_show+0x166/0x3a0 [ 79.465941][ T4975] ? __pfx_uevent_show+0x10/0x10 [ 79.465955][ T4975] uevent_show+0x1ca/0x3a0 [ 79.465970][ T4975] ? __pfx_uevent_show+0x10/0x10 [ 79.465984][ T4975] dev_attr_show+0x52/0xa0 [ 79.466004][ T4975] ? __pfx_dev_attr_show+0x10/0x10 [ 79.466022][ T4975] sysfs_kf_seq_show+0x217/0x3f0 [ 79.466044][ T4975] seq_read_iter+0x32f/0x1270 [ 79.466056][ T4975] ? cp_new_stat+0x484/0x5c0 [ 79.466079][ T4975] kernfs_fop_read_iter+0x46c/0x610 [ 79.466097][ T4975] ? rw_verify_area+0xce/0x6d0 [ 79.466115][ T4975] ? __pfx_kernfs_fop_read_iter+0x10/0x10 [ 79.466133][ T4975] vfs_read+0x82e/0xb40 [ 79.466153][ T4975] ? __pfx_vfs_read+0x10/0x10 [ 79.466173][ T4975] ? __pfx___do_sys_newfstat+0x10/0x10 [ 79.466193][ T4975] ksys_read+0x12a/0x250 [ 79.466212][ T4975] ? __pfx_ksys_read+0x10/0x10 [ 79.466234][ T4975] do_syscall_64+0x115/0x870 [ 79.466249][ T4975] ? clear_bhb_loop+0x40/0x90 [ 79.466264][ T4975] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 79.466277][ T4975] RIP: 0033:0x7ffb66aa7407 [ 79.466289][ T4975] Code: 48 89 fa 4c 89 df e8 38 aa 00 00 8b 93 08 03 00 00 59 5e 48 83 f8 fc 74 1a 5b c3 0f 1f 84 00 00 00 00 00 48 8b 44 24 10 0f 05 <5b> c3 0f 1f 80 00 00 00 00 83 e2 39 83 fa 08 75 de e8 23 ff ff ff [ 79.466302][ T4975] RSP: 002b:00007ffe83366790 EFLAGS: 00000202 ORIG_RAX: 0000000000000000 [ 79.466316][ T4975] RAX: ffffffffffffffda RBX: 00007ffb67264880 RCX: 00007ffb66aa7407 [ 79.466324][ T4975] RDX: 0000000000001000 RSI: 000055caf1259980 RDI: 000000000000000c [ 79.466332][ T4975] RBP: 00007ffb66befff0 R08: 0000000000000000 R09: 0000000000000000 [ 79.466340][ T4975] R10: 0000000000000000 R11: 0000000000000202 R12: 000000000000000a [ 79.466349][ T4975] R13: 00007ffb66befea0 R14: 0000000000000000 R15: 000055caf12311e0 [ 79.466361][ T4975] [ 79.466365][ T4975] [ 79.797034][ T4975] Allocated by task 9: [ 79.801083][ T4975] kasan_save_stack+0x30/0x50 [ 79.805744][ T4975] kasan_save_track+0x14/0x30 [ 79.810399][ T4975] __kasan_kmalloc+0xaa/0xb0 [ 79.814969][ T4975] __kmalloc_cache_noprof+0x2e5/0x6c0 [ 79.820326][ T4975] sur40_probe+0x1a8/0x1580 [ 79.824808][ T4975] usb_probe_interface+0x303/0x8f0 [ 79.829902][ T4975] really_probe+0x241/0xa60 [ 79.834401][ T4975] __driver_probe_device+0x20e/0x450 [ 79.839666][ T4975] driver_probe_device+0x4a/0x140 [ 79.844671][ T4975] __device_attach_driver+0x1df/0x320 [ 79.850023][ T4975] bus_for_each_drv+0x159/0x1e0 [ 79.854854][ T4975] __device_attach+0x1e4/0x4d0 [ 79.859599][ T4975] device_initial_probe+0xaf/0xd0 [ 79.864606][ T4975] bus_probe_device+0x64/0x160 [ 79.869351][ T4975] device_add+0x121d/0x1970 [ 79.873838][ T4975] usb_set_configuration+0xd97/0x1c60 [ 79.879190][ T4975] usb_generic_driver_probe+0xa1/0xe0 [ 79.884559][ T4975] usb_probe_device+0xef/0x400 [ 79.889333][ T4975] really_probe+0x241/0xa60 [ 79.893836][ T4975] __driver_probe_device+0x20e/0x450 [ 79.899103][ T4975] driver_probe_device+0x4a/0x140 [ 79.904122][ T4975] __device_attach_driver+0x1df/0x320 [ 79.909488][ T4975] bus_for_each_drv+0x159/0x1e0 [ 79.914340][ T4975] __device_attach+0x1e4/0x4d0 [ 79.919103][ T4975] device_initial_probe+0xaf/0xd0 [ 79.924118][ T4975] bus_probe_device+0x64/0x160 [ 79.928863][ T4975] device_add+0x121d/0x1970 [ 79.933369][ T4975] usb_new_device.cold+0x685/0x115c [ 79.938563][ T4975] hub_event+0x30a3/0x4a60 [ 79.942961][ T4975] process_one_work+0xa23/0x1940 [ 79.947900][ T4975] worker_thread+0x5ef/0xe50 [ 79.952476][ T4975] kthread+0x370/0x450 [ 79.956534][ T4975] ret_from_fork+0x72b/0xd50 [ 79.961105][ T4975] ret_from_fork_asm+0x1a/0x30 [ 79.965855][ T4975] [ 79.968156][ T4975] Freed by task 9: [ 79.971852][ T4975] kasan_save_stack+0x30/0x50 [ 79.976512][ T4975] kasan_save_track+0x14/0x30 [ 79.981169][ T4975] kasan_save_free_info+0x3b/0x70 [ 79.986192][ T4975] __kasan_slab_free+0x5f/0x80 [ 79.990939][ T4975] kfree+0x22b/0x6c0 [ 79.994826][ T4975] sur40_probe+0xc36/0x1580 [ 79.999311][ T4975] usb_probe_interface+0x303/0x8f0 [ 80.004413][ T4975] really_probe+0x241/0xa60 [ 80.008915][ T4975] __driver_probe_device+0x20e/0x450 [ 80.014204][ T4975] driver_probe_device+0x4a/0x140 [ 80.019223][ T4975] __device_attach_driver+0x1df/0x320 [ 80.024585][ T4975] bus_for_each_drv+0x159/0x1e0 [ 80.029417][ T4975] __device_attach+0x1e4/0x4d0 [ 80.034166][ T4975] device_initial_probe+0xaf/0xd0 [ 80.039179][ T4975] bus_probe_device+0x64/0x160 [ 80.043927][ T4975] device_add+0x121d/0x1970 [ 80.048422][ T4975] usb_set_configuration+0xd97/0x1c60 [ 80.053789][ T4975] usb_generic_driver_probe+0xa1/0xe0 [ 80.059164][ T4975] usb_probe_device+0xef/0x400 [ 80.063918][ T4975] really_probe+0x241/0xa60 [ 80.068407][ T4975] __driver_probe_device+0x20e/0x450 [ 80.073701][ T4975] driver_probe_device+0x4a/0x140 [ 80.078713][ T4975] __device_attach_driver+0x1df/0x320 [ 80.084069][ T4975] bus_for_each_drv+0x159/0x1e0 [ 80.088918][ T4975] __device_attach+0x1e4/0x4d0 [ 80.093664][ T4975] device_initial_probe+0xaf/0xd0 [ 80.098673][ T4975] bus_probe_device+0x64/0x160 [ 80.103418][ T4975] device_add+0x121d/0x1970 [ 80.107922][ T4975] usb_new_device.cold+0x685/0x115c [ 80.113102][ T4975] hub_event+0x30a3/0x4a60 [ 80.117500][ T4975] process_one_work+0xa23/0x1940 [ 80.122419][ T4975] worker_thread+0x5ef/0xe50 [ 80.126992][ T4975] kthread+0x370/0x450 [ 80.131041][ T4975] ret_from_fork+0x72b/0xd50 [ 80.135615][ T4975] ret_from_fork_asm+0x1a/0x30 [ 80.140366][ T4975] [ 80.142668][ T4975] The buggy address belongs to the object at ffff88802dc9a000 [ 80.142668][ T4975] which belongs to the cache kmalloc-4k of size 4096 [ 80.156699][ T4975] The buggy address is located 3082 bytes inside of [ 80.156699][ T4975] freed 4096-byte region [ffff88802dc9a000, ffff88802dc9b000) [ 80.170664][ T4975] [ 80.172973][ T4975] The buggy address belongs to the physical page: [ 80.179355][ T4975] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x2dc98 [ 80.188101][ T4975] head: order:3 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 80.196584][ T4975] flags: 0xfff00000000040(head|node=0|zone=1|lastcpupid=0x7ff) [ 80.204108][ T4975] page_type: f5(slab) [ 80.208088][ T4975] raw: 00fff00000000040 ffff88813fe28140 dead000000000100 dead000000000122 [ 80.216651][ T4975] raw: 0000000000000000 0000000800040004 00000000f5000000 0000000000000000 [ 80.225241][ T4975] head: 00fff00000000040 ffff88813fe28140 dead000000000100 dead000000000122 [ 80.233984][ T4975] head: 0000000000000000 0000000800040004 00000000f5000000 0000000000000000 [ 80.242648][ T4975] head: 00fff00000000003 fffffffffffffe01 00000000ffffffff 00000000ffffffff [ 80.251296][ T4975] head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000008 [ 80.259940][ T4975] page dumped because: kasan: bad access detected [ 80.266328][ T4975] page_owner tracks the page as allocated [ 80.272016][ T4975] page last allocated via order 3, migratetype Unmovable, gfp_mask 0xd20c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 992, tgid 992 (kworker/0:2), ts 9059353276, free_ts 0 [ 80.292142][ T4975] post_alloc_hook+0xfd/0x120 [ 80.296902][ T4975] get_page_from_freelist+0xf48/0x3530 [ 80.302343][ T4975] __alloc_frozen_pages_noprof+0x299/0x2dc0 [ 80.308234][ T4975] new_slab+0xa2/0x640 [ 80.312293][ T4975] refill_objects+0xe3/0x410 [ 80.316862][ T4975] __pcs_replace_empty_main+0x376/0x680 [ 80.322394][ T4975] __kmalloc_cache_noprof+0x479/0x6c0 [ 80.327750][ T4975] kobject_uevent_env+0x263/0x18b0 [ 80.332844][ T4975] driver_bound+0x13e/0x220 [ 80.337336][ T4975] really_probe+0x3d4/0xa60 [ 80.341823][ T4975] __driver_probe_device+0x20e/0x450 [ 80.347088][ T4975] driver_probe_device+0x4a/0x140 [ 80.352094][ T4975] __driver_attach+0x21f/0x5b0 [ 80.356839][ T4975] bus_for_each_dev+0x13e/0x1d0 [ 80.361686][ T4975] serio_handle_event+0x2bb/0x990 [ 80.366695][ T4975] process_one_work+0xa23/0x1940 [ 80.371617][ T4975] page_owner free stack trace missing [ 80.376958][ T4975] [ 80.379265][ T4975] Memory state around the buggy address: [ 80.384871][ T4975] ffff88802dc9ab00: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 80.392912][ T4975] ffff88802dc9ab80: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 80.400951][ T4975] >ffff88802dc9ac00: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 80.409000][ T4975] ^ [ 80.413305][ T4975] ffff88802dc9ac80: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 80.421346][ T4975] ffff88802dc9ad00: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 80.429385][ T4975] ================================================================== [ 80.445824][ T5725] usb 4-1: Manufacturer: syz [ 80.450580][ T5725] usb 4-1: SerialNumber: syz [ 80.466417][ T1160] nvme nvme0: NVME-FC{0}: create association : host wwpn 0x2222222222222222 rport wwpn 0x4444444444444444: NQN "nqn.2014-08.org.nvmexpress.discovery" [ 80.489894][ T48] nvmet_fc: {0}: Create Association LS failed: Association Allocation Failed [ 80.499235][ T4975] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 80.506454][ T4975] CPU: 1 UID: 0 PID: 4975 Comm: udevd Not tainted syzkaller #0 PREEMPT(full) [ 80.515308][ T4975] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 80.525367][ T4975] Call Trace: [ 80.528668][ T4975] [ 80.531598][ T4975] dump_stack_lvl+0x100/0x190 [ 80.536284][ T4975] vpanic+0x552/0x970 [ 80.540271][ T4975] ? __pfx_vpanic+0x10/0x10 [ 80.544777][ T4975] ? mark_held_locks+0x40/0x70 [ 80.549548][ T4975] ? string+0x471/0x4d0 [ 80.553711][ T4975] panic+0xd1/0xe0 [ 80.557434][ T4975] ? __pfx_panic+0x10/0x10 [ 80.561841][ T4975] ? string+0x471/0x4d0 [ 80.565989][ T4975] ? preempt_schedule_common+0x42/0xc0 [ 80.571451][ T4975] ? check_panic_on_warn+0x1f/0x90 [ 80.576571][ T4975] check_panic_on_warn.cold+0x19/0x34 [ 80.581950][ T4975] end_report.part.0+0x3a/0x90 [ 80.586732][ T4975] kasan_report.cold+0xe/0x18 [ 80.591414][ T4975] ? string+0x471/0x4d0 [ 80.595567][ T4975] string+0x471/0x4d0 [ 80.599544][ T4975] ? __pfx_string+0x10/0x10 [ 80.604044][ T4975] vsnprintf+0x422/0x1300 [ 80.608369][ T4975] ? __pfx_vsnprintf+0x10/0x10 [ 80.613126][ T4975] ? uevent_show+0x166/0x3a0 [ 80.617710][ T4975] ? sysfs_kf_seq_show+0x217/0x3f0 [ 80.622823][ T4975] ? seq_read_iter+0x32f/0x1270 [ 80.627663][ T4975] ? kernfs_fop_read_iter+0x46c/0x610 [ 80.633035][ T4975] ? vfs_read+0x82e/0xb40 [ 80.637366][ T4975] ? ksys_read+0x12a/0x250 [ 80.641788][ T4975] ? do_syscall_64+0x115/0x870 [ 80.646643][ T4975] add_uevent_var+0x183/0x3a0 [ 80.651320][ T4975] ? __pfx_add_uevent_var+0x10/0x10 [ 80.656520][ T4975] ? input_dev_uevent+0x16d/0x910 [ 80.661552][ T4975] ? __pfx_input_dev_uevent+0x10/0x10 [ 80.666931][ T4975] input_dev_uevent+0x1bf/0x910 [ 80.671794][ T4975] ? __pfx_input_dev_uevent+0x10/0x10 [ 80.677165][ T4975] dev_uevent+0x2f1/0x870 [ 80.681487][ T4975] ? __pfx_dev_uevent+0x10/0x10 [ 80.686323][ T4975] ? kasan_save_track+0x14/0x30 [ 80.691157][ T4975] ? __kasan_kmalloc+0xaa/0xb0 [ 80.695903][ T4975] ? __kmalloc_cache_noprof+0x2e5/0x6c0 [ 80.701437][ T4975] ? uevent_show+0x166/0x3a0 [ 80.706010][ T4975] ? __pfx_uevent_show+0x10/0x10 [ 80.710942][ T4975] uevent_show+0x1ca/0x3a0 [ 80.715342][ T4975] ? __pfx_uevent_show+0x10/0x10 [ 80.720259][ T4975] dev_attr_show+0x52/0xa0 [ 80.724663][ T4975] ? __pfx_dev_attr_show+0x10/0x10 [ 80.729758][ T4975] sysfs_kf_seq_show+0x217/0x3f0 [ 80.734687][ T4975] seq_read_iter+0x32f/0x1270 [ 80.739368][ T4975] ? cp_new_stat+0x484/0x5c0 [ 80.743947][ T4975] kernfs_fop_read_iter+0x46c/0x610 [ 80.749139][ T4975] ? rw_verify_area+0xce/0x6d0 [ 80.753891][ T4975] ? __pfx_kernfs_fop_read_iter+0x10/0x10 [ 80.759602][ T4975] vfs_read+0x82e/0xb40 [ 80.763753][ T4975] ? __pfx_vfs_read+0x10/0x10 [ 80.768419][ T4975] ? __pfx___do_sys_newfstat+0x10/0x10 [ 80.773866][ T4975] ksys_read+0x12a/0x250 [ 80.778095][ T4975] ? __pfx_ksys_read+0x10/0x10 [ 80.782847][ T4975] do_syscall_64+0x115/0x870 [ 80.787419][ T4975] ? clear_bhb_loop+0x40/0x90 [ 80.792090][ T4975] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 80.797964][ T4975] RIP: 0033:0x7ffb66aa7407 [ 80.802366][ T4975] Code: 48 89 fa 4c 89 df e8 38 aa 00 00 8b 93 08 03 00 00 59 5e 48 83 f8 fc 74 1a 5b c3 0f 1f 84 00 00 00 00 00 48 8b 44 24 10 0f 05 <5b> c3 0f 1f 80 00 00 00 00 83 e2 39 83 fa 08 75 de e8 23 ff ff ff [ 80.821957][ T4975] RSP: 002b:00007ffe83366790 EFLAGS: 00000202 ORIG_RAX: 0000000000000000 [ 80.830357][ T4975] RAX: ffffffffffffffda RBX: 00007ffb67264880 RCX: 00007ffb66aa7407 [ 80.838313][ T4975] RDX: 0000000000001000 RSI: 000055caf1259980 RDI: 000000000000000c [ 80.846270][ T4975] RBP: 00007ffb66befff0 R08: 0000000000000000 R09: 0000000000000000 [ 80.854225][ T4975] R10: 0000000000000000 R11: 0000000000000202 R12: 000000000000000a [ 80.862177][ T4975] R13: 00007ffb66befea0 R14: 0000000000000000 R15: 000055caf12311e0 [ 80.870134][ T4975] [ 80.873340][ T4975] Kernel Offset: disabled [ 80.877638][ T4975] Rebooting in 86400 seconds..