last executing test programs: 6m51.986992734s ago: executing program 32 (id=612): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0xffff, 0x3}, 0x6) write(r0, &(0x7f0000000080)="29000300010003", 0x7) 5m45.639155895s ago: executing program 33 (id=1662): r0 = msgget$private(0x0, 0x400) msgsnd(r0, &(0x7f0000000000)={0x2}, 0x8, 0x800) msgrcv(r0, 0x0, 0x0, 0x2, 0x4800) 4m47.028875059s ago: executing program 34 (id=2971): r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000003ac0)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x40}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x5, 0xd50, 0xfffffffffffffee0, &(0x7f0000000000)="259a53f271a76d2688644c6588a8", 0x0, 0xd01, 0x2a0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=ANY=[@ANYBLOB="14000000100001000000000000dfff000000000a20000000000a01020000000000000000010000000900010073797a30000000006c000000160a0101000b000000000000010000000900020073797a30000000000900010073797a30000000004000038008000140000000002c0003801400010067656e65766530000000000000000000140001006c6f0000000000000000000000000000080002"], 0xb4}}, 0x0) 2m29.43123332s ago: executing program 4 (id=5251): capset(&(0x7f0000000080)={0x20071026}, &(0x7f0000000040)={0x200000, 0x200000}) unshare(0xe000000) shmget(0x1, 0xffffffffff000, 0x200, &(0x7f0000ffb000/0x3000)=nil) shmctl$SHM_LOCK(0x0, 0xb) 2m29.337675769s ago: executing program 4 (id=5253): r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000100), 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(r0, 0xc0a85320, &(0x7f0000000c40)={{0x80}, 'port0\x00', 0xb5, 0x11cfa, 0x0, 0x8000008, 0x1000006, 0x1, 0x1, 0x0, 0x7cce8c743ee810df}) r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000100), 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(r1, 0x40505330, &(0x7f0000000bc0)={0x800100, 0x0, 0x0, 0x724f, 0x0, 0x55a}) 2m29.21760849s ago: executing program 4 (id=5256): r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0x2) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000004c0)=0xf) ioctl$TIOCVHANGUP(r0, 0x5437, 0x0) 2m29.158748823s ago: executing program 4 (id=5257): r0 = syz_usb_connect(0x2, 0x68, &(0x7f0000000600)=ANY=[@ANYBLOB="12010000a1121710950b2a17f4f7010203010902240001000000000904fb00026c5d650009050402100000fa000905820240"], 0x0) syz_usb_ep_write$ath9k_ep1(r0, 0x82, 0x50, &(0x7f0000000000)={[{0x4c, 0x4e00, "cdef2b5df9e20130e4a16840936fc07475a937adde65d6f683d9d39fc6a6ffb621cc1c40819f01c604adea0ea33ac6e9ec1ff6f7b30bb2d477d6299256696f4a8176a06eedd9d49a36f1dcc0"}]}) prlimit64(0x0, 0x7, &(0x7f0000000040)={0x0, 0x100}, 0x0) syz_usb_control_io$lan78xx(r0, 0x0, 0x0) 2m27.296307385s ago: executing program 35 (id=5003): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./nfsd\x00', 0x1ff) mount(0x0, &(0x7f0000000200)='./nfsd\x00', &(0x7f0000000300)='nfsd\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000a00)='./nfsd/threads\x00', 0x1, 0x0) write(r0, &(0x7f0000000b00)='2\n', 0x2) 2m26.031684331s ago: executing program 4 (id=5299): r0 = socket$inet(0x2, 0x2, 0x1) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x12, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000080000000000000009000000731110000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback=0xf, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) connect$inet(r0, &(0x7f0000000180)={0x2, 0x0, @remote}, 0x10) sendmmsg$inet(r0, &(0x7f0000000540)=[{{0x0, 0x2, &(0x7f0000000000)=[{&(0x7f00000000c0)="08001497733f5d3e", 0x6c6d}], 0x5}}, {{0x0, 0x0, &(0x7f0000000440), 0x56}}], 0x2, 0x2004000) 2m25.991084208s ago: executing program 4 (id=5300): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./nfsd\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./nfsd\x00', &(0x7f0000000080)='nfsd\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000090)='./nfsd/portlist\x00', 0x1, 0x0) write(r0, &(0x7f00000000a0)='inet 2', 0x6) 2m13.090051046s ago: executing program 36 (id=5491): mknodat$loop(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x1004, 0x1) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="0b0000008000000001000000ffff000001"], 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000640), &(0x7f00000006c0), 0x10000ca, r0}, 0x38) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000200)={r0, &(0x7f00000000c0), &(0x7f0000000180)=""/99}, 0x20) 2m10.875265087s ago: executing program 37 (id=5300): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./nfsd\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./nfsd\x00', &(0x7f0000000080)='nfsd\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000090)='./nfsd/portlist\x00', 0x1, 0x0) write(r0, &(0x7f00000000a0)='inet 2', 0x6) 2m1.969036185s ago: executing program 6 (id=5580): r0 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000740), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r0, 0x7a7, &(0x7f00000000c0)=0xb0000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r0, 0x7a0, &(0x7f0000000000)={@my=0x0}) ioctl$IOCTL_VMCI_CTX_SET_CPT_STATE(r0, 0x7b2, &(0x7f0000000080)={0x0, 0x5, 0xfffffffffffffe41, 0x604}) 2m1.779067068s ago: executing program 6 (id=5583): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r0, 0x84, 0x6b, &(0x7f0000000380)=[@in6={0xa, 0x0, 0x0, @remote, 0x9}], 0x1c) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000040)={0x0, 0x1c, &(0x7f0000000000)=[@in6={0xa, 0x4e20, 0x4, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x9}]}, &(0x7f0000000080)=0x10) setsockopt(r0, 0x84, 0x7f, &(0x7f0000000140)="010000000d800089", 0x8) 2m0.766105976s ago: executing program 6 (id=5590): r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000000)={'wlan0\x00', 0x0}) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000140)={0x40, r2, 0x1, 0x70bd2c, 0x1, {{0x2}, {@val={0x8, 0x3, r1}, @val={0xc, 0x99, {0x4, 0x2e}}}}, [@chandef_params=[@NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x976}, @NL80211_ATTR_WIPHY_FREQ={0x8}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x3}]]}, 0x40}, 0x1, 0x0, 0x0, 0x8001}, 0x4040000) 2m0.60907546s ago: executing program 6 (id=5594): r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/tty/drivers\x00', 0x0, 0x0) read$rfkill(r0, &(0x7f0000000040), 0x8) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) openat(r0, &(0x7f0000000040)='./file2\x00', 0x22000, 0xa) 2m0.499894316s ago: executing program 6 (id=5597): mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./nfsd\x00', 0x1ff) mount(0x0, &(0x7f00000000c0)='./nfsd\x00', &(0x7f0000000100)='nfsd\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./nfsd/portlist\x00', 0x1, 0x0) write(r0, &(0x7f0000000180)='3', 0x34000) 2m0.336321712s ago: executing program 6 (id=5599): mkdir(&(0x7f0000000000)='./gadget\x00', 0x1ff) mount(0x0, &(0x7f0000000100)='./gadget\x00', &(0x7f0000000200)='gadgetfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./gadget/dummy_udc\x00', 0x2, 0x0) pwrite64(r0, &(0x7f0000000340)="d5a620341fffe02387ffe5ad61d104192ae767caa260d5ef1ee89b741f68d4", 0x1f, 0xffff) 1m45.197444737s ago: executing program 38 (id=5599): mkdir(&(0x7f0000000000)='./gadget\x00', 0x1ff) mount(0x0, &(0x7f0000000100)='./gadget\x00', &(0x7f0000000200)='gadgetfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./gadget/dummy_udc\x00', 0x2, 0x0) pwrite64(r0, &(0x7f0000000340)="d5a620341fffe02387ffe5ad61d104192ae767caa260d5ef1ee89b741f68d4", 0x1f, 0xffff) 1m43.370229024s ago: executing program 2 (id=5841): mknodat$loop(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x1000, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0xc0042, 0x1) r1 = socket(0x1d, 0x2, 0x6) mount$9p_fd(0x0, &(0x7f0000000440)='./file0\x00', &(0x7f0000000040), 0x3000084, &(0x7f0000000280)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) 1m43.150392711s ago: executing program 2 (id=5843): r0 = socket(0x10, 0x803, 0x0) getsockname$packet(r0, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14) syz_usb_connect(0x5, 0x24, &(0x7f0000000180)=ANY=[@ANYBLOB="120110010928fc10ac059102254301020301090212000100004000090484000003e102"], 0x0) openat$mice(0xffffffffffffff9c, &(0x7f0000000040), 0x8000) 1m40.027832142s ago: executing program 2 (id=5876): io_setup(0xbe, &(0x7f0000000400)=0x0) r1 = socket$unix(0x1, 0x1, 0x0) io_submit(r0, 0x1, &(0x7f0000000800)=[&(0x7f00000001c0)={0x0, 0x0, 0x0, 0x5, 0x0, r1, 0x0}]) io_getevents(r0, 0x0, 0x0, 0x0, 0x0) 1m39.848457484s ago: executing program 2 (id=5879): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=@base={0x11, 0x4, 0x4, 0x8, 0x0, 0x1}, 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0x10, &(0x7f0000000240)=@framed={{0x18, 0x0, 0x0, 0x0, 0x100, 0x0, 0x0, 0x0, 0x2}, [@ringbuf_query={{0x18, 0x1, 0x1, 0x0, r0}}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r1}, {}, {}, {0x4}, {0x6, 0x0, 0xa}, {}, {}, {0x85, 0x0, 0x0, 0x33}}]}, &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @xdp=0x8c540bc1e604fc58, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000b80)={r2, 0x2000012, 0xe, 0x0, &(0x7f0000000c40)="63eced8e46dc3f2ddf33c9e9b986", 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xb}, 0x50) 1m38.750370177s ago: executing program 2 (id=5889): mkdirat(0xffffffffffffff9c, &(0x7f00000001c0)='./nfsd\x00', 0x1ff) mount(0x0, &(0x7f0000000100)='./nfsd\x00', &(0x7f0000000200)='nfsd\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f00000003c0)='./nfsd/v4_end_grace\x00', 0x1, 0x0) write(r0, &(0x7f0000000440)='Y', 0x1) 1m38.637442931s ago: executing program 2 (id=5891): openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) r0 = syz_io_uring_setup(0xf00, &(0x7f0000000400)={0x0, 0x595f, 0x10000, 0x0, 0x51}, &(0x7f0000000100)=0x0, &(0x7f0000000000)=0x0, &(0x7f0000000080)=0x0) syz_io_uring_submit(r1, r2, r3, &(0x7f0000000280)=@IORING_OP_READV=@use_registered_buffer={0x1, 0xc, 0x4004, @fd_index=0x3, 0x5, 0x0, 0x0, 0x10, 0x0, {0x0, 0x0, 0x0, '\x00', 0x0}}) io_uring_enter(r0, 0x2000, 0x630e, 0x1, 0x0, 0x0) 1m33.314772451s ago: executing program 1 (id=5965): r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) syz_emit_ethernet(0x34, &(0x7f0000000080)={@local, @empty, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x26, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e20, 0x12, 0x0, @opaque='\x00'/10}}}}}, 0x0) recvfrom(r0, &(0x7f00000000c0)=""/10, 0xa, 0x0, 0x0, 0x0) 1m32.426465904s ago: executing program 1 (id=5977): bpf$PROG_LOAD(0x5, &(0x7f0000000b80)={0x0, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000181100"/20, @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000010000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000020850000000400000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x40, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1f, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000756c6c2500000000002020207b1af8ff00000000bfa10000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000007008500000073"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r0}, 0xc) 1m32.387402218s ago: executing program 1 (id=5978): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_GET_IRQCHIP(r1, 0xc208ae62, &(0x7f00000020c0)={0x1, 0x0, @ioapic={0xeeee8000, 0x6, 0xad51, 0x6e, 0x0, [{0x9, 0x97, 0x0, '\x00', 0x4e}, {0x1, 0xfa, 0x3, '\x00', 0x4}, {0x0, 0x3, 0x4d, '\x00', 0x3}, {0x6, 0xa, 0x8, '\x00', 0x3}, {0xc, 0x9, 0xfd, '\x00', 0x1}, {0xff, 0x7d, 0x3, '\x00', 0xf8}, {0xfb, 0x8, 0x1d, '\x00', 0x2}, {0x87, 0x24, 0xa, '\x00', 0xff}, {0x1d, 0x7, 0x3, '\x00', 0x5}, {0x1, 0x9, 0x3e, '\x00', 0xb}, {0x4, 0xd, 0xef, '\x00', 0x10}, {0x3, 0x2, 0x59}, {0x2, 0x6, 0x0, '\x00', 0x3}, {0xc, 0x8, 0x74, '\x00', 0xf}, {0x2, 0x40, 0x1f, '\x00', 0xc0}, {0xf8, 0xc, 0x4, '\x00', 0xe}, {0xb0, 0x0, 0x52, '\x00', 0x7}, {0x3, 0x6, 0x9, '\x00', 0x55}, {0x7f, 0x0, 0x29}, {0x2, 0x4, 0x7, '\x00', 0xf7}, {0x7, 0x9, 0xc, '\x00', 0x5}, {0x0, 0x2, 0xf9, '\x00', 0xa}, {0xd6, 0x81, 0x1, '\x00', 0x4}, {0x0, 0x7, 0x4, '\x00', 0x6}]}}) 1m32.301381815s ago: executing program 1 (id=5979): mkdir(&(0x7f0000000000)='my_tracefs\x00', 0x1ff) mount(0x0, &(0x7f0000000200)='my_tracefs\x00', &(0x7f0000000300)='tracefs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000400)='my_tracefs/events/task/task_rename/filter\x00', 0x1, 0x0) write(r0, 0x0, 0x30) 1m32.269456089s ago: executing program 1 (id=5980): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./nfsd\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./nfsd\x00', &(0x7f0000000080)='nfsd\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f00000001a0)='./nfsd/max_block_size\x00', 0x1, 0x0) write(r0, 0x0, 0x0) 1m32.229608275s ago: executing program 1 (id=5981): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000800030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0xc4}, 0x890) sendmsg$NFT_BATCH(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000880)=ANY=[@ANYBLOB="14000000100001e456b8aa00000000000000000a3c000000120a09000000000000000000020000000900020073797a310000000008000440080000000900010073797a3000000000080003400000000114000000110001"], 0x64}}, 0x4004000) sendmsg$NFT_MSG_GETOBJ(r0, &(0x7f0000000180)={0x0, 0x34, &(0x7f0000000140)={&(0x7f0000000400)=ANY=[@ANYBLOB="34000000150a03000000000000000000020000000900020073797a310000000008000340000000010900010073797a30"], 0x34}}, 0x0) 1m23.576183979s ago: executing program 39 (id=5891): openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) r0 = syz_io_uring_setup(0xf00, &(0x7f0000000400)={0x0, 0x595f, 0x10000, 0x0, 0x51}, &(0x7f0000000100)=0x0, &(0x7f0000000000)=0x0, &(0x7f0000000080)=0x0) syz_io_uring_submit(r1, r2, r3, &(0x7f0000000280)=@IORING_OP_READV=@use_registered_buffer={0x1, 0xc, 0x4004, @fd_index=0x3, 0x5, 0x0, 0x0, 0x10, 0x0, {0x0, 0x0, 0x0, '\x00', 0x0}}) io_uring_enter(r0, 0x2000, 0x630e, 0x1, 0x0, 0x0) 1m17.154664122s ago: executing program 40 (id=5981): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000800030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0xc4}, 0x890) sendmsg$NFT_BATCH(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000880)=ANY=[@ANYBLOB="14000000100001e456b8aa00000000000000000a3c000000120a09000000000000000000020000000900020073797a310000000008000440080000000900010073797a3000000000080003400000000114000000110001"], 0x64}}, 0x4004000) sendmsg$NFT_MSG_GETOBJ(r0, &(0x7f0000000180)={0x0, 0x34, &(0x7f0000000140)={&(0x7f0000000400)=ANY=[@ANYBLOB="34000000150a03000000000000000000020000000900020073797a310000000008000340000000010900010073797a30"], 0x34}}, 0x0) 54.750255349s ago: executing program 9 (id=6575): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000009c0)={0x94, 0x0, 0x1, 0x505, 0x0, 0x0, {0xa}, [@CTA_TUPLE_ORIG={0x3c, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @mcast1}, {0x14, 0x4, @mcast2}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_ORIG={0x3c, 0x1, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @mcast1}, {0x14, 0x4, @mcast2}}}]}, @CTA_TIMEOUT={0x8, 0x7, 0x1, 0x0, 0x1}]}, 0x94}, 0x1, 0x0, 0x0, 0x4041}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)={0x98, 0x0, 0x1, 0x505, 0x0, 0x0, {0xa, 0x0, 0x5}, [@CTA_TUPLE_ORIG={0x3c, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @mcast1}, {0x14, 0x4, @mcast2}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_ORIG={0x3c, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @mcast2}, {0x14, 0x4, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TIMEOUT={0x8}, @CTA_NAT_SRC={0x4}]}, 0x98}, 0x1, 0x0, 0x0, 0x4010}, 0x0) 54.692691646s ago: executing program 9 (id=6578): r0 = syz_open_dev$ttys(0xc, 0x2, 0x1) syz_open_dev$ptys(0xc, 0x3, 0x1) close_range(r0, r0, 0x0) syz_open_dev$ptys(0xc, 0x3, 0x1) 54.616331763s ago: executing program 9 (id=6580): r0 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000380), 0x121682, 0x0) read$nci(r0, &(0x7f0000000100)=""/107, 0x6b) sendmsg$RDMA_NLDEV_CMD_SET(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={0x0}, 0x1, 0x0, 0x0, 0x4000001}, 0x0) write$nci(r0, &(0x7f0000000100)=ANY=[], 0x4) 54.505875771s ago: executing program 9 (id=6584): sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)=ANY=[], 0xa0}}, 0x0) r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000440)=ANY=[@ANYBLOB="5800000010000300"/20, @ANYRES32, @ANYBLOB="00000000000000001c0012800b00010067656e657665"], 0x58}, 0x1, 0x2}, 0x0) sendmmsg(r0, &(0x7f0000000000), 0x4000000000001f2, 0x0) 54.388220236s ago: executing program 9 (id=6587): mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./nfsd\x00', 0x1ff) mount(0x0, &(0x7f00000001c0)='./nfsd\x00', &(0x7f0000000200)='nfsd\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f00000004c0)='./nfsd/v4_end_grace\x00', 0x1, 0x0) write(r0, &(0x7f0000000040)='0', 0x1) 54.222859405s ago: executing program 9 (id=6593): prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) getrlimit(0x2, 0x0) 39.175179362s ago: executing program 41 (id=6593): prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) getrlimit(0x2, 0x0) 2.639391184s ago: executing program 7 (id=7487): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) recvmmsg(r0, &(0x7f0000002a80)=[{{0x0, 0x0, 0x0}, 0x263b}], 0x1, 0x40004000, 0x0) sendmsg$NL80211_CMD_SET_TID_CONFIG(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)={0x38, r1, 0xc4fc9e906872338b, 0x0, 0xf0ffff, {{0x5}, {@val={0x8}, @val={0xc}}}, [@NL80211_ATTR_TID_CONFIG={0x6, 0x11d, 0x0, 0x1, [{0xc, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x4}]}]}]}, 0x38}}, 0x0) 2.519295728s ago: executing program 7 (id=7489): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) ioctl$KVM_SET_MSRS(r2, 0xc008ae88, &(0x7f0000000080)={0x1, 0x0, [{0x40000081, 0x0, 0x2}]}) 2.32169626s ago: executing program 7 (id=7494): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="190000000400000004000000f4"], 0x50) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000850000005000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f00000004c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000080)={r1}, 0xc) 2.256123552s ago: executing program 7 (id=7495): prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x63b5, &(0x7f0000006680)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) setreuid(0xee01, 0xee00) 1.716206039s ago: executing program 7 (id=7501): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="19000000040000000800000005"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bc82000000000000a6020000f8ffffffb703000008900000b703000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000005c0)={{r0}, &(0x7f0000000380), &(0x7f0000000580)=r1}, 0x20) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r1, 0x702, 0xe, 0x0, &(0x7f0000000000)="81001400a9ac844aff0000000000", 0x0, 0x3d6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) 1.511519263s ago: executing program 7 (id=7504): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x110, 0x0, 0x0, 0x0, 0x8, 0x7b5, 0x312, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x80, 0x0, "", [{{0x9, 0x4, 0x0, 0x0, 0x9, 0x3, 0x0, 0x6, 0x0, {0x9, 0x21, 0x81, 0x9, 0x1, {0x22, 0x28}}, {{{0x9, 0x5, 0x81, 0x3, 0x20, 0x0, 0x2b, 0xfe}}}}}]}}]}}, 0x0) syz_usb_control_io$lan78xx(0xffffffffffffffff, 0x0, &(0x7f00000003c0)={0x34, &(0x7f0000000200)={0x40, 0x0, 0x28, "011aa6c2662dc668e28f8fa6d1ce71ada56903e3714ee8ce3bcdc86a3675ce689ad693e83f59d806"}, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000a80)={0x2c, &(0x7f0000000200)=ANY=[], 0x0, 0x0, 0x0, 0x0}, 0x0) 1.339501467s ago: executing program 0 (id=7510): r0 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'batadv_slave_0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd26, 0xfffffffd, {0x0, 0x0, 0x0, r1, {0x0, 0x1}, {0xffff, 0xffff}, {0xffe0, 0x9}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)=@newtfilter={0x44, 0x2c, 0xf3f, 0x30bd29, 0x25dfdbfc, {0x0, 0x0, 0x0, r1, {0x8, 0xfff3}, {}, {0xf, 0x300}}, [@filter_kind_options=@f_flower={{0x6}, {0x14, 0x2, [@TCA_FLOWER_KEY_ENC_IPV4_DST={0x8, 0x1d, @rand_addr=0x64010102}, @TCA_FLOWER_KEY_ENC_IPV4_DST_MASK={0x8}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x20041090}, 0x0) 1.230409582s ago: executing program 5 (id=7512): pipe(&(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = open(&(0x7f0000000000)='./bus\x00', 0x141b42, 0x8) splice(r0, 0x0, r2, 0x0, 0x402000784853bb, 0x0) vmsplice(r1, &(0x7f0000000240)=[{&(0x7f0000000040)='d', 0x1}], 0x1, 0xf) 1.140160274s ago: executing program 0 (id=7514): bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x12, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x41000, 0x1a, '\x00', 0x0, @fallback=0x21, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x800}, 0x94) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_GETMOUSEREPORTING(r0, 0x541c, &(0x7f0000000100)) 1.130375881s ago: executing program 0 (id=7516): r0 = syz_io_uring_setup(0xf00, &(0x7f0000000140)={0x0, 0x5961, 0x10000, 0x2, 0x4d}, &(0x7f0000000540)=0x0, &(0x7f0000000000)=0x0, &(0x7f0000000500)=0x0) r4 = socket(0x1d, 0x2, 0x6) syz_io_uring_submit(r1, r2, r3, &(0x7f0000000280)=@IORING_OP_RECV=@pass_buffer={0x1b, 0x4, 0x0, r4, 0x0, 0x0}) io_uring_enter(r0, 0x248e, 0xf8b8, 0x28, 0x0, 0x0) 1.031839668s ago: executing program 5 (id=7517): setresuid(0x0, 0xee01, 0x0) shutdown(0xffffffffffffffff, 0x1) r0 = semget$private(0x0, 0x6, 0x0) semctl$SETVAL(r0, 0x1, 0x10, 0x0) 1.019644742s ago: executing program 0 (id=7518): memfd_create(&(0x7f0000000000)='/dev/sda1\x00', 0x1) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0x5387, 0x18) 995.712906ms ago: executing program 5 (id=7519): r0 = syz_genetlink_get_family_id$nl80211(&(0x7f00000006c0), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000001240)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_TID_CONFIG(r1, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000bc0)={&(0x7f0000000040)={0x3c, r0, 0x1, 0x71bd27, 0x3, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_TID_CONFIG={0x20, 0x11d, 0x0, 0x1, [{0x1c, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0xc0}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x2}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5}]}]}]}, 0x3c}}, 0x4) 948.447573ms ago: executing program 0 (id=7520): r0 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'batadv_slave_0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xfffffffd, {0x0, 0x0, 0x0, r1, {0x0, 0x1}, {0xffff, 0xffff}, {0xffe0, 0x9}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000002100)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000003740)=@newtfilter={0x54, 0x2c, 0xf3f, 0x70bd2c, 0x25dfdbfd, {0x0, 0x0, 0x0, r1, {0xb, 0xfff3}, {}, {0x7, 0xffff}}, [@filter_kind_options=@f_flow={{0x9}, {0x24, 0x2, [@TCA_FLOW_KEYS={0x8, 0x1, 0x25cb}, @TCA_FLOW_MODE={0x8, 0x2, 0x1}, @TCA_FLOW_RSHIFT={0x8, 0x4, 0x2}, @TCA_FLOW_ADDEND={0x8, 0x5, 0x8}]}}]}, 0x54}, 0x1, 0x0, 0x0, 0x20041090}, 0xd0) 883.766455ms ago: executing program 5 (id=7522): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000002b40), r1) sendmsg$NLBL_MGMT_C_ADD(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000280)={0x40, r2, 0x601, 0x70bd2a, 0x25dfdbfb, {}, [@NLBL_MGMT_A_DOMAIN={0x5, 0x1, '\x00'}, @NLBL_MGMT_A_IPV4ADDR={0x8, 0x7, @broadcast}, @NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x5}, @NLBL_MGMT_A_IPV6ADDR={0x14, 0x5, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}]}, 0x40}}, 0x0) 869.381991ms ago: executing program 0 (id=7523): r0 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000080), 0x1c0002, 0x0) write$vga_arbiter(r0, &(0x7f0000000280)=ANY=[@ANYBLOB='lock io'], 0xc) ppoll(&(0x7f00000000c0)=[{r0, 0x90}], 0x1, 0x0, 0x0, 0x0) write$vga_arbiter(r0, &(0x7f0000000200)=@unlock_all, 0xb) 749.223246ms ago: executing program 5 (id=7525): mkdir(&(0x7f00000003c0)='./file0\x00', 0x21) mount(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f00000001c0)='binder\x00', 0x1a14041, 0x0) mkdir(&(0x7f0000000200)='./bus\x00', 0x10) pivot_root(&(0x7f0000000240)='./file0\x00', &(0x7f0000000280)='./bus\x00') 748.593318ms ago: executing program 3 (id=7526): r0 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4050000d62b00006110600000000000c6000000000000009500000000000000"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0x12, 0x4, 0x4, 0x401}, 0x48) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000080)={@map=r1, r0, 0x26}, 0x10) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000500)={@map=r1, 0x5, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) 679.943729ms ago: executing program 5 (id=7527): r0 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp_SCTP_DELAYED_SACK(r0, 0x84, 0x10, &(0x7f0000000000)=@sack_info={0x0, 0x4, 0xa782}, 0xc) bind$inet(r0, &(0x7f0000000140)={0x2, 0x4e22, @local}, 0x10) sendto$inet(r0, &(0x7f0000000300)="ab", 0x34000, 0x0, &(0x7f0000000380)={0x2, 0x4e22, @local}, 0x10) 679.609686ms ago: executing program 3 (id=7528): prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x4, 0x3, &(0x7f0000001080)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x6a855000) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) sigaltstack(0x0, 0x0) 478.151536ms ago: executing program 3 (id=7529): bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000003200)={0xffffffffffffffff, 0x2f00020b, 0xe, 0x0, &(0x7f0000000200)="63eced8e46dc3f0adf33c9f7b986", 0x0, 0x7515, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="220000000400000010000000"], 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f00000000c0)={r0, 0xffffffffffffffff}, 0x4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000580)={0x11, 0x10, &(0x7f0000000100)=@framed={{0x18, 0x0, 0x0, 0x0, 0x20000000}, [@snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x3268}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r1, 0x0, 0x0, 0x0, 0xf00}, {0x7, 0x0, 0xb, 0x5, 0x0, 0xf0}, {0x85, 0x0, 0x0, 0x76}}]}, &(0x7f0000000000)='GPL\x00', 0x5, 0x0, 0x0, 0x0, 0x7e, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffe}, 0x94) 408.161262ms ago: executing program 3 (id=7531): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000400)={0x1, &(0x7f0000000380)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) r1 = openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$DMA_HEAP_IOCTL_ALLOC(r1, 0xc0184800, &(0x7f0000000100)={0x1, r0}) ioctl$DMA_BUF_IOCTL_SYNC(r2, 0xc0086202, &(0x7f0000000040)=0x7) 340.769854ms ago: executing program 3 (id=7533): syz_open_dev$vim2m(&(0x7f0000000080), 0x3fe, 0x2) r0 = syz_open_dev$video4linux(&(0x7f0000000000), 0x100000000006, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x9) ioctl$VIDIOC_SUBDEV_ENUM_MBUS_CODE(r0, 0xc0305602, &(0x7f0000000080)={0x0, 0xfffff001, 0x2007, 0x1}) 252.425433ms ago: executing program 3 (id=7535): prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x4000) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) ftruncate(0xffffffffffffffff, 0xa23) 252.16159ms ago: executing program 8 (id=7536): setns(0xc9, 0x0) r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000880)="5c00000012006bab9a3fe3d86e17aa0a046b876c1d0048007ea60864160af36504001a0038001d0019feffe69ee517d34460bc06000000a705251e6182949a3651f60a84c9f4d4938037e70e4509c5bb46c4c0a285057e3061b9781e", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) recvmsg(r0, &(0x7f00000005c0)={0x0, 0x0, 0x0}, 0x10102) 197.352286ms ago: executing program 8 (id=7537): keyctl$instantiate(0xc, 0x0, &(0x7f0000000100)=@encrypted_new={'new ', 'default', 0x20, 'user:', 'syz', 0x20, 0xb2d}, 0x2a, 0xfffffffffffffff9) add_key(&(0x7f0000000140)='encrypted\x00', &(0x7f0000000180), &(0x7f0000000100), 0xca, 0xfffffffffffffffe) keyctl$instantiate(0xc, 0x0, &(0x7f0000000100)=@encrypted_update={'update ', 'default', 0x20, 'trusted:', '\xa9\xff\x7f\x00'}, 0x1c, 0xfffffffffffffffd) add_key(&(0x7f0000000140)='encrypted\x00', &(0x7f0000000180), &(0x7f0000000100), 0xca, 0xfffffffffffffffe) 150.168179ms ago: executing program 8 (id=7538): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_START_AP(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000540)={0x88, r1, 0x5, 0x70bd26, 0x80, {{}, {@val={0x8, 0x3, r2}, @void}}, [@beacon=[@NL80211_ATTR_BEACON_HEAD={0x51, 0xe, {{{}, {}, @device_a, @broadcast, @random="3a6b7c13e95a"}, 0x0, @default, 0x1, @void, @void, @void, @val={0x4, 0x6, {0x8, 0x8, 0x8, 0x1}}, @void, @val={0x5, 0x3, {0x7, 0xc2, 0x6}}, @void, @void, @void, @val={0x2d, 0x1a, {0x300, 0x1, 0x7, 0x0, {0xa600000000000000, 0x2, 0x0, 0x3fe, 0x0, 0x0, 0x0, 0x1}, 0x0, 0x9, 0x3}}, @void, @void, @void}}], @NL80211_ATTR_BEACON_INTERVAL={0x8}, @NL80211_ATTR_DTIM_PERIOD={0x8}, @chandef_params, @NL80211_ATTR_P2P_OPPPS={0x5, 0xa3, 0x1}]}, 0x88}}, 0x20000014) 59.800921ms ago: executing program 8 (id=7539): r0 = socket$rds(0x15, 0x5, 0x0) bind$rds(r0, &(0x7f0000000000)={0x2, 0x4e20, @loopback}, 0x10) connect$rds(r0, &(0x7f0000000040)={0x2, 0x4e20, @loopback}, 0x10) sendmsg$rds(r0, &(0x7f0000000100)={&(0x7f0000000040)={0x2, 0x4e20, @loopback}, 0x10, &(0x7f0000000200)=[{&(0x7f0000000300)=""/4, 0x4}], 0x1, &(0x7f0000000400)=[@rdma_args={0x28, 0x114, 0x1, {{0x1}, {0x0, 0x1000}, &(0x7f0000000500)=[{0x0, 0x1000}], 0x1, 0x20, 0x1234}}], 0x28}, 0x0) 46.239653ms ago: executing program 8 (id=7540): r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r1, &(0x7f0000000000)=@pppol2tp={0x18, 0x1, {0x0, r0, {}, 0xa}}, 0x26) getsockname(r1, 0x0, &(0x7f0000000680)) 0s ago: executing program 8 (id=7541): r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000040)={0x0, 0x8, &(0x7f0000000000)=[{&(0x7f0000000140)="d800000018007b30e00212ba0d8105040a601100ff0f040b067c55a1bc0009001e0006990600000015000500fec00000000000000300014002000c0901ac04000bd67f6f94007100a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4b11602b2a10c11ce1b14d6d930dfe1d9d322fe04fb95cae8c9010000730d7a5025ccca262f3d40fad95667e04adcdf634c1f215ce3bb9ad8ffd5e1cace81ed0b7fece0b42a9ecbee5de6ccd40dd601edef3d93452a92307f00000e97031e9f05e9f16e9cb5000000000000", 0xd8}], 0x1, 0x0, 0x0, 0x2663}, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x54, &(0x7f0000000080)={&(0x7f00000009c0)=@newlink={0x28, 0x10, 0xc362e63b3f31ba5f, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x20080, 0x80e1}, [@IFLA_GROUP={0x8}]}, 0x28}, 0x1, 0x0, 0x0, 0x10}, 0x0) kernel console output (not intermixed with test programs): icrosoft 0003:045E:07DA.002B: could not initialize ff, continuing anyway [ 201.169339][ T30] kauditd_printk_skb: 2 callbacks suppressed [ 201.169355][ T30] audit: type=1400 audit(1785802230.192:756): avc: denied { write } for pid=11217 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 201.251018][ T29] usb 5-1: USB disconnect, device number 29 [ 201.419436][ T30] audit: type=1400 audit(1785802230.442:757): avc: denied { write } for pid=11240 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 201.732352][T11261] netlink: 'syz.6.2263': attribute type 2 has an invalid length. [ 201.795892][T11261] : entered promiscuous mode [ 201.956212][T11275] IPVS: sync thread started: state = BACKUP, mcast_ifn = veth1_virt_wifi, syncid = 4, id = 0 [ 202.187549][ T30] audit: type=1400 audit(1785802231.212:758): avc: denied { ioctl } for pid=11286 comm="syz.4.2277" path="socket:[29750]" dev="sockfs" ino=29750 ioctlcmd=0x89e1 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 202.353860][T11301] netlink: 'syz.6.2282': attribute type 10 has an invalid length. [ 202.410685][T11304] netlink: 'syz.6.2282': attribute type 10 has an invalid length. [ 202.420315][T11301] team0: Port device dummy0 added [ 202.580278][T11304] team0: Port device dummy0 removed [ 202.854968][T11319] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2290'. [ 202.869721][T11319] openvswitch: netlink: Flow key attribute not present in set flow. [ 203.590235][T11349] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2304'. [ 203.966527][ T10] usb 5-1: new full-speed USB device number 30 using dummy_hcd [ 204.115069][ T10] usb 5-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 204.115101][ T10] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 204.115127][ T10] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 64 [ 204.117725][ T10] usb 5-1: New USB device found, idVendor=0e9c, idProduct=0000, bcdDevice=5b.1e [ 204.168432][ T10] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 204.168459][ T10] usb 5-1: Product: syz [ 204.168474][ T10] usb 5-1: Manufacturer: syz [ 204.168489][ T10] usb 5-1: SerialNumber: syz [ 204.172085][ T10] usb 5-1: config 0 descriptor?? [ 204.173531][T11357] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 204.274280][ T10] rc_core: IR keymap rc-streamzap not found [ 204.274297][ T10] Registered IR keymap rc-empty [ 204.275169][ T10] rc rc0: Streamzap PC Remote Infrared Receiver as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/rc/rc0 [ 204.277432][ T10] input: Streamzap PC Remote Infrared Receiver as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/rc/rc0/input36 [ 204.419604][ T5750] usb 5-1: USB disconnect, device number 30 [ 204.843069][ T5613] Bluetooth: hci0: command 0x0405 tx timeout [ 204.895194][ T5750] usb 7-1: new high-speed USB device number 4 using dummy_hcd [ 204.930691][T11413] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2332'. [ 205.066036][ T5750] usb 7-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 205.095161][ T5750] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 205.127596][ T5750] usb 7-1: Product: syz [ 205.136298][ T5750] usb 7-1: Manufacturer: syz [ 205.156041][ T5750] usb 7-1: SerialNumber: syz [ 205.176865][T11425] netlink: 'syz.4.2340': attribute type 3 has an invalid length. [ 205.263926][ T30] audit: type=1400 audit(1785802234.282:759): avc: denied { firmware_load } for pid=29 comm="kworker/1:1" path="/lib/firmware/ath9k_htc/htc_9271-1.4.0.fw" dev="sda1" ino=313 scontext=system_u:system_r:kernel_t tcontext=system_u:object_r:lib_t tclass=system permissive=1 [ 205.278234][ T29] usb 7-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 205.410197][ T30] audit: type=1400 audit(1785802234.432:760): avc: denied { checkpoint_restore } for pid=11437 comm="syz.4.2345" capability=40 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 205.433955][ T9] usb 4-1: new high-speed USB device number 24 using dummy_hcd [ 205.599160][ T30] audit: type=1400 audit(1785802234.622:761): avc: denied { getopt } for pid=11446 comm="syz.5.2349" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 205.603034][ T9] usb 4-1: Using ep0 maxpacket: 16 [ 205.667324][ T9] usb 4-1: unable to get BOS descriptor or descriptor too short [ 205.677271][ T9] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 205.694235][ T9] usb 4-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 0, changing to 7 [ 205.722350][ T9] usb 4-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 205.749231][ T9] usb 4-1: New USB device found, idVendor=103d, idProduct=0100, bcdDevice= 0.40 [ 205.755619][ T5750] usb 7-1: USB disconnect, device number 4 [ 205.767928][ T9] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 205.792333][ T9] usb 4-1: Product: syz [ 205.797690][ T9] usb 4-1: Manufacturer: syz [ 205.804655][ T9] usb 4-1: SerialNumber: syz [ 206.028970][ T9] usb 4-1: Audio class v2/v3 interfaces need an interface association [ 206.060040][ T9] snd-usb-audio 4-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 206.320783][T11482] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2366'. [ 206.367619][ T29] ath9k_htc 7-1:1.0: ath9k_htc: Target is unresponsive [ 206.393322][ T29] ath9k_htc: Failed to initialize the device [ 206.418068][ T5750] usb 7-1: ath9k_htc: USB layer deinitialized [ 206.468811][ T30] audit: type=1400 audit(1785802235.492:762): avc: denied { bind } for pid=11487 comm="syz.4.2369" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=atmpvc_socket permissive=1 [ 206.569324][T11494] iwpm_parse_nlmsg: Invalid NULL attribute (msg type Query Mapping response ret = -22) [ 206.599458][ T9] usb 4-1: USB disconnect, device number 24 [ 206.792507][T11503] netlink: 'syz.4.2377': attribute type 1 has an invalid length. [ 206.837718][T11503] netlink: 5120 bytes leftover after parsing attributes in process `syz.4.2377'. [ 206.876685][ T30] audit: type=1326 audit(1785802235.902:763): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11507 comm="syz.6.2379" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f10f179e019 code=0x7ffc0000 [ 206.955329][ T30] audit: type=1326 audit(1785802235.902:764): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11507 comm="syz.6.2379" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f10f179e019 code=0x7ffc0000 [ 206.975040][T11512] netlink: 'syz.4.2381': attribute type 10 has an invalid length. [ 207.034906][ T30] audit: type=1326 audit(1785802235.932:765): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11507 comm="syz.6.2379" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=444 compat=0 ip=0x7f10f179e019 code=0x7ffc0000 [ 207.041745][T11512] team0: Port device dummy0 added [ 207.076303][T11518] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2383'. [ 207.079653][ T30] audit: type=1326 audit(1785802235.932:766): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11507 comm="syz.6.2379" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f10f179e019 code=0x7ffc0000 [ 207.122229][T11519] netlink: 'syz.4.2381': attribute type 10 has an invalid length. [ 207.158465][ T30] audit: type=1326 audit(1785802235.932:767): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11507 comm="syz.6.2379" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=446 compat=0 ip=0x7f10f179e019 code=0x7ffc0000 [ 207.220689][T11519] team0: Port device dummy0 removed [ 207.240873][T11519] dummy0: entered allmulticast mode [ 207.274361][ T30] audit: type=1326 audit(1785802235.932:768): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11507 comm="syz.6.2379" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f10f179e019 code=0x7ffc0000 [ 207.680016][T11537] bridge0: port 2(bridge_slave_1) entered disabled state [ 207.690559][T11537] bridge0: port 1(bridge_slave_0) entered disabled state [ 207.813996][T11537] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 208.071901][T11554] netlink: Conntrack attr type has unexpected length (type=3, length=1, expected=8) [ 208.095705][T11554] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 208.386429][T11541] syz.6.2394 (11541): drop_caches: 1 [ 208.453113][ T10] usb 6-1: new high-speed USB device number 17 using dummy_hcd [ 208.508342][T11541] syz.6.2394 (11541): drop_caches: 1 [ 208.515176][T11566] can0: slcan on ptm0. [ 208.564349][T11565] can0 (unregistered): slcan off ptm0. [ 208.602574][ T5717] usb 2-1: new full-speed USB device number 34 using dummy_hcd [ 208.605278][ T10] usb 6-1: unable to get BOS descriptor or descriptor too short [ 208.643210][ T10] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 208.663707][ T10] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 208.685884][ T10] usb 6-1: New USB device found, idVendor=1235, idProduct=0010, bcdDevice= 0.40 [ 208.703350][ T10] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 208.718668][ T10] usb 6-1: Product: syz [ 208.729788][ T10] usb 6-1: Manufacturer: syz [ 208.743331][ T10] usb 6-1: SerialNumber: syz [ 208.768985][ T5717] usb 2-1: config 4 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 208.808145][T11576] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2414'. [ 208.826091][ T5717] usb 2-1: config 4 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 208.844658][ T10] usb 6-1: selecting invalid altsetting 1 [ 208.850315][ T5717] usb 2-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 208.853427][ T10] usb 6-1: unit 6 not found! [ 208.862622][ T5717] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 208.887031][ T5717] hub 2-1:4.0: USB hub found [ 209.090828][ T5717] hub 2-1:4.0: config failed, can't read hub descriptor (err -90) [ 209.162936][ T5750] usb 7-1: new high-speed USB device number 5 using dummy_hcd [ 209.316602][ T5750] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 209.337219][ T5750] usb 7-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 209.347593][ T5750] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 209.359704][ T5750] usb 7-1: config 0 descriptor?? [ 209.403092][ T1642] usb 2-1: USB disconnect, device number 34 [ 209.459387][ T10] usb 6-1: 2:0: failed to get current value for ch 0 (-71) [ 209.528776][ T10] snd-usb-audio 6-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 209.557120][ T10] usb 6-1: USB disconnect, device number 17 [ 209.628778][ T5750] usb 7-1: USB disconnect, device number 5 [ 209.636301][ T7275] udevd[7275]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 209.700125][T11613] netlink: 40 bytes leftover after parsing attributes in process `syz.4.2430'. [ 209.843642][ T30] audit: type=1400 audit(1785802238.872:769): avc: denied { read } for pid=11619 comm="syz.4.2433" path="socket:[30486]" dev="sockfs" ino=30486 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 209.911934][ T30] audit: type=1400 audit(1785802238.932:770): avc: denied { map } for pid=11622 comm="syz.1.2435" path="/dev/zero" dev="devtmpfs" ino=6 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:zero_device_t tclass=chr_file permissive=1 [ 210.030634][ T30] audit: type=1400 audit(1785802239.052:771): avc: denied { read } for pid=11628 comm="syz.3.2438" path="socket:[30508]" dev="sockfs" ino=30508 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_crypto_socket permissive=1 [ 210.103170][ T10] usb 7-1: new high-speed USB device number 6 using dummy_hcd [ 210.212795][ T5717] usb 2-1: new high-speed USB device number 35 using dummy_hcd [ 210.274201][ T10] usb 7-1: Using ep0 maxpacket: 32 [ 210.286592][ T10] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 210.311090][ T10] usb 7-1: New USB device found, idVendor=14aa, idProduct=0226, bcdDevice= 0.40 [ 210.327914][ T10] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 210.363890][ T5717] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 210.377062][ T10] usb 7-1: config 0 descriptor?? [ 210.400330][ T5717] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 210.413910][ T5717] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 210.417028][ T10] dvb-usb: found a 'WideView WT-220U PenType Receiver (Typhoon/Freecom)' in warm state. [ 210.443773][ T5717] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 210.453822][ T5717] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 210.465835][ T10] dvb-usb: bulk message failed: -22 (2/0) [ 210.475388][ T5717] usb 2-1: config 0 descriptor?? [ 210.482362][ T10] dvb-usb: will use the device's hardware PID filter (table count: 15). [ 210.494866][ T10] dvbdev: DVB: registering new adapter (WideView WT-220U PenType Receiver (Typhoon/Freecom)) [ 210.505967][ T10] usb 7-1: media controller created [ 210.519017][ T10] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 210.546842][ T10] usb 7-1: DVB: registering adapter 1 frontend 0 (WideView USB DVB-T)... [ 210.566672][ T10] dvbdev: dvb_create_media_entity: media entity 'WideView USB DVB-T' registered. [ 210.592815][ T5750] usb 4-1: new high-speed USB device number 25 using dummy_hcd [ 210.773284][ T5750] usb 4-1: Using ep0 maxpacket: 16 [ 210.784998][ T5750] usb 4-1: config 127 has an invalid interface number: 124 but max is 0 [ 210.802841][ T5750] usb 4-1: config 127 has no interface number 0 [ 210.803084][ T10] rc_core: IR keymap rc-dtt200u not found [ 210.809251][ T5750] usb 4-1: config 127 interface 124 has no altsetting 0 [ 210.815921][ T10] Registered IR keymap rc-empty [ 210.829641][ T10] rc rc0: WideView WT-220U PenType Receiver (Typhoon/Freecom) as /devices/platform/dummy_hcd.6/usb7/7-1/rc/rc0 [ 210.835269][ T5750] usb 4-1: New USB device found, idVendor=0cf3, idProduct=1010, bcdDevice=36.87 [ 210.860660][ T5750] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 210.867024][ T10] input: WideView WT-220U PenType Receiver (Typhoon/Freecom) as /devices/platform/dummy_hcd.6/usb7/7-1/rc/rc0/input37 [ 210.885729][ T10] dvb-usb: schedule remote query interval to 300 msecs. [ 210.891320][ T5750] usb 4-1: Product: syz [ 210.901071][ T5750] usb 4-1: Manufacturer: syz [ 210.906705][ T5717] plantronics 0003:047F:FFFF.002C: unbalanced collection at end of report description [ 210.912338][ T10] dvb-usb: WideView WT-220U PenType Receiver (Typhoon/Freecom) successfully initialized and connected. [ 210.923057][ T5750] usb 4-1: SerialNumber: syz [ 210.943260][ T5717] plantronics 0003:047F:FFFF.002C: parse failed [ 210.957876][ T5717] plantronics 0003:047F:FFFF.002C: probe with driver plantronics failed with error -22 [ 210.987167][ T10] usb 7-1: USB disconnect, device number 6 [ 211.130719][ T10] dvb-usb: WideView WT-220U PenType Receiver (Typh successfully deinitialized and disconnected. [ 211.164970][ T5717] usb 2-1: USB disconnect, device number 35 [ 211.595858][T11680] program syz.5.2462 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 211.812883][ T5750] usb 4-1: reset high-speed USB device number 25 using dummy_hcd [ 211.996130][ T5750] usb 4-1: unable to get BOS descriptor or descriptor too short [ 212.007928][ T5750] usb 4-1: device firmware changed [ 212.016312][ T30] kauditd_printk_skb: 1 callbacks suppressed [ 212.016326][ T30] audit: type=1400 audit(1785802241.042:773): avc: denied { ioctl } for pid=11700 comm="syz.5.2472" path="/dev/nvram" dev="devtmpfs" ino=623 ioctlcmd=0x5459 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nvram_device_t tclass=chr_file permissive=1 [ 212.068775][ T5750] usb 4-1: USB disconnect, device number 25 [ 212.224980][ T30] audit: type=1400 audit(1785802241.242:774): avc: denied { setopt } for pid=11710 comm="syz.6.2477" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_crypto_socket permissive=1 [ 212.511531][T11725] vhci_hcd vhci_hcd.0: pdev(6) rhport(0) sockfd(3) [ 212.518257][T11725] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 212.571635][T11725] vhci_hcd vhci_hcd.0: Device attached [ 212.812582][ T5750] usb 45-1: new high-speed USB device number 2 using vhci_hcd [ 212.889619][T11753] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2495'. [ 212.984009][T11753] veth3: entered allmulticast mode [ 213.308830][T11726] vhci_hcd: connection reset by peer [ 213.336041][ T174] vhci_hcd vhci_hcd.6: stop threads [ 213.351453][ T174] vhci_hcd vhci_hcd.6: release socket [ 213.378950][ T174] vhci_hcd vhci_hcd.6: disconnect device [ 213.667289][T11784] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2510'. [ 214.790774][T11827] SELinux: Context system_u:object_r:crond_var_run_t:s0 is not valid (left unmapped). [ 214.802865][ T5717] usb 7-1: new high-speed USB device number 7 using dummy_hcd [ 214.826862][ T30] audit: type=1400 audit(1785802243.842:775): avc: denied { relabelto } for pid=11826 comm="syz.4.2531" name="midiC2D0" dev="devtmpfs" ino=1302 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 trawcon="system_u:object_r:crond_var_run_t:s0" [ 214.892184][ T30] audit: type=1400 audit(1785802243.842:776): avc: denied { associate } for pid=11826 comm="syz.4.2531" name="midiC2D0" dev="devtmpfs" ino=1302 scontext=system_u:object_r:unlabeled_t tcontext=system_u:object_r:device_t tclass=filesystem permissive=1 srawcon="system_u:object_r:crond_var_run_t:s0" [ 215.043306][ T5717] usb 7-1: Using ep0 maxpacket: 8 [ 215.060718][ T5717] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 7 [ 215.081894][ T5717] usb 7-1: New USB device found, idVendor=082d, idProduct=0100, bcdDevice=70.4b [ 215.092196][ T5717] usb 7-1: New USB device strings: Mfr=44, Product=2, SerialNumber=3 [ 215.116424][T11839] netdevsim netdevsim5: Firmware load for '../file0/file0' refused, path contains '..' component [ 215.156242][ T5717] usb 7-1: Product: syz [ 215.168908][ T5717] usb 7-1: Manufacturer: syz [ 215.185865][ T5717] usb 7-1: SerialNumber: syz [ 215.192104][ T30] audit: type=1326 audit(1785802244.212:777): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11845 comm="syz.4.2541" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fd706b9e019 code=0x0 [ 215.276066][ T30] audit: type=1400 audit(1785802244.272:778): avc: denied { create } for pid=11844 comm="syz.3.2540" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_iscsi_socket permissive=1 [ 215.348388][ T30] audit: type=1400 audit(1785802244.272:779): avc: denied { write } for pid=11844 comm="syz.3.2540" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_iscsi_socket permissive=1 [ 215.406855][ T30] audit: type=1400 audit(1785802244.352:780): avc: denied { read write } for pid=11848 comm="syz.1.2542" name="midiC2D0" dev="devtmpfs" ino=1302 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 trawcon="system_u:object_r:crond_var_run_t:s0" [ 215.451728][ T5717] usb 7-1: Handspring Visor / Palm OS: No valid connect info available [ 215.474375][ T30] audit: type=1400 audit(1785802244.352:781): avc: denied { open } for pid=11848 comm="syz.1.2542" path="/dev/snd/midiC2D0" dev="devtmpfs" ino=1302 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 trawcon="system_u:object_r:crond_var_run_t:s0" [ 215.503471][ T5717] usb 7-1: Handspring Visor / Palm OS: port 0, is for Generic use [ 215.518387][ T5717] usb 7-1: Handspring Visor / Palm OS: port 0, is for Generic use [ 215.538155][ T5717] usb 7-1: Handspring Visor / Palm OS: Number of ports: 2 [ 215.563111][ T30] audit: type=1400 audit(1785802244.392:782): avc: denied { ioctl } for pid=11848 comm="syz.1.2542" path="/dev/snd/midiC2D0" dev="devtmpfs" ino=1302 ioctlcmd=0x5701 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 trawcon="system_u:object_r:crond_var_run_t:s0" [ 215.649313][ T5717] visor 7-1:1.0: Handspring Visor / Palm OS converter detected [ 215.687284][ T5717] usb 7-1: Handspring Visor / Palm OS converter now attached to ttyUSB0 [ 215.727195][ T5717] usb 7-1: Handspring Visor / Palm OS converter now attached to ttyUSB1 [ 215.918148][ T5802] usb 7-1: USB disconnect, device number 7 [ 215.946969][ T5802] visor ttyUSB0: Handspring Visor / Palm OS converter now disconnected from ttyUSB0 [ 215.967726][ T5802] visor ttyUSB1: Handspring Visor / Palm OS converter now disconnected from ttyUSB1 [ 215.980599][ T5802] visor 7-1:1.0: device disconnected [ 216.373552][ T5717] usb 4-1: new high-speed USB device number 26 using dummy_hcd [ 216.530456][ T5717] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 216.548084][ T5717] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 216.559709][ T5717] usb 4-1: New USB device found, idVendor=1e7d, idProduct=2dbe, bcdDevice= 0.00 [ 216.570347][ T5717] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 216.586194][ T5717] usb 4-1: config 0 descriptor?? [ 216.753269][ T1642] usb 5-1: new high-speed USB device number 31 using dummy_hcd [ 216.935325][ T1642] usb 5-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 216.950698][ T1642] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 216.984029][ T1642] usb 5-1: config 0 descriptor?? [ 217.011289][ T5717] konepure 0003:1E7D:2DBE.002D: item fetching failed at offset 3/7 [ 217.047366][ T5717] konepure 0003:1E7D:2DBE.002D: parse failed [ 217.060337][ T5717] konepure 0003:1E7D:2DBE.002D: probe with driver konepure failed with error -22 [ 217.214121][ T1642] udl 5-1:0.0: [drm] Unrecognized vendor firmware descriptor [ 217.217713][ T10] usb 4-1: USB disconnect, device number 26 [ 217.423161][ T1642] [drm:udl_init] *ERROR* Selecting channel failed [ 217.448803][ T1642] [drm] Initialized udl 0.0.1 for 5-1:0.0 on minor 2 [ 217.457537][ T1642] [drm] Initialized udl on minor 2 [ 217.485652][ T1642] udl 5-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 217.535856][ T1642] udl 5-1:0.0: [drm] Cannot find any crtc or sizes [ 217.574352][ T1642] usb 5-1: USB disconnect, device number 31 [ 217.581011][ T5717] udl 5-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffed [ 217.635205][ T5717] udl 5-1:0.0: [drm] Cannot find any crtc or sizes [ 217.652926][ T30] kauditd_printk_skb: 1 callbacks suppressed [ 217.652943][ T30] audit: type=1400 audit(1785802246.672:784): avc: denied { write } for pid=11927 comm="syz.1.2576" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 217.896911][ T30] audit: type=1400 audit(1785802246.922:785): avc: denied { write } for pid=11910 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 217.965283][ T5750] vhci_hcd vhci_hcd.6: vhci_device speed not set [ 218.130546][ T30] audit: type=1400 audit(1785802247.152:786): avc: denied { write } for pid=11939 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 218.216654][T11947] netlink: 44 bytes leftover after parsing attributes in process `syz.1.2583'. [ 219.054015][ T30] audit: type=1400 audit(1785802248.082:787): avc: denied { write } for pid=11955 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 219.180500][T11996] dvb_demux: dvb_demux_feed_del: feed not in list (type=0 state=0 pid=ffff) [ 219.192609][ T5802] usb 5-1: new high-speed USB device number 32 using dummy_hcd [ 219.196204][T12001] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 219.250002][ T30] audit: type=1400 audit(1785802248.272:788): avc: denied { write } for pid=11997 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 219.383561][ T5802] usb 5-1: Using ep0 maxpacket: 8 [ 219.393725][ T5802] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 219.407233][ T5802] usb 5-1: New USB device found, idVendor=0810, idProduct=0002, bcdDevice= 0.00 [ 219.416925][ T5802] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 219.429918][ T5802] usb 5-1: config 0 descriptor?? [ 219.878938][ T5802] hid_parser_main: 262 callbacks suppressed [ 219.879744][ T5802] pantherlord 0003:0810:0002.002E: unknown main item tag 0x0 [ 219.917212][ T5802] pantherlord 0003:0810:0002.002E: unknown main item tag 0x0 [ 219.937127][ T5802] pantherlord 0003:0810:0002.002E: unknown main item tag 0x0 [ 219.951835][ T5802] pantherlord 0003:0810:0002.002E: unknown main item tag 0x0 [ 219.969914][ T5802] pantherlord 0003:0810:0002.002E: unknown main item tag 0x0 [ 219.984023][ T5802] pantherlord 0003:0810:0002.002E: reserved main item tag 0xd [ 220.009340][ T5802] pantherlord 0003:0810:0002.002E: reserved main item tag 0xd [ 220.029151][ T5802] pantherlord 0003:0810:0002.002E: unknown main item tag 0x0 [ 220.040785][ T5802] pantherlord 0003:0810:0002.002E: unknown main item tag 0x0 [ 220.054316][ T5802] pantherlord 0003:0810:0002.002E: hidraw0: USB HID v0.00 Device [HID 0810:0002] on usb-dummy_hcd.4-1/input0 [ 220.070480][ T5802] pantherlord 0003:0810:0002.002E: no output reports found [ 220.121501][ T5802] usb 5-1: USB disconnect, device number 32 [ 220.371718][T12034] fido_id[12034]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.4/usb5/report_descriptor': No such file or directory [ 220.418372][ T30] audit: type=1400 audit(1785802249.442:789): avc: denied { write } for pid=12047 comm="syz.1.2623" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 220.657122][T12060] netlink: 'syz.5.2629': attribute type 1 has an invalid length. [ 220.665943][T12060] netlink: 248 bytes leftover after parsing attributes in process `syz.5.2629'. [ 220.784200][ T30] audit: type=1326 audit(1785802249.812:790): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12064 comm="syz.1.2633" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7ffa8bb9e019 code=0x0 [ 221.044612][T12081] netlink: 56 bytes leftover after parsing attributes in process `syz.6.2640'. [ 221.351773][T12099] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(3) [ 221.358318][T12099] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 221.394848][T12099] vhci_hcd vhci_hcd.0: Device attached [ 221.455007][ T1642] Process accounting resumed [ 221.565332][ T187] vhci_hcd vhci_hcd.4: vhci_device speed not set [ 221.624774][ T187] usb 41-1: new full-speed USB device number 2 using vhci_hcd [ 221.653364][ T5802] usb 5-1: new low-speed USB device number 33 using dummy_hcd [ 221.672796][ T5750] usb 7-1: new high-speed USB device number 8 using dummy_hcd [ 221.818291][ T5802] usb 5-1: config 0 has no interfaces? [ 221.825795][ T5802] usb 5-1: New USB device found, idVendor=0421, idProduct=0335, bcdDevice=5f.0e [ 221.852133][ T5802] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 221.867177][ T5750] usb 7-1: New USB device found, idVendor=0c45, idProduct=6005, bcdDevice=b5.55 [ 221.880727][ T5802] usb 5-1: config 0 descriptor?? [ 221.899247][ T5750] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 221.920672][ T5750] usb 7-1: Product: syz [ 221.929332][ T5750] usb 7-1: Manufacturer: syz [ 221.938690][ T5750] usb 7-1: SerialNumber: syz [ 221.951733][ T5750] usb 7-1: config 0 descriptor?? [ 221.971186][T12132] netlink: 'syz.5.2663': attribute type 1 has an invalid length. [ 221.986896][ T5750] gspca_main: sonixb-2.14.0 probing 0c45:6005 [ 221.995696][T12132] netlink: 248 bytes leftover after parsing attributes in process `syz.5.2663'. [ 222.160276][T12100] usb 41-1: recv xbuf, 0 [ 222.166115][ T30] audit: type=1400 audit(1785802251.182:791): avc: denied { watch } for pid=12135 comm="syz.5.2665" path="/proc/845" dev="proc" ino=31675 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dir permissive=1 [ 222.191625][ T7874] vhci_hcd vhci_hcd.4: stop threads [ 222.198127][ T7874] vhci_hcd vhci_hcd.4: release socket [ 222.205652][ T7874] vhci_hcd vhci_hcd.4: disconnect device [ 222.209247][ T1642] usb 5-1: USB disconnect, device number 33 [ 222.273788][ T187] vhci_hcd vhci_hcd.4: vhci_device speed not set [ 222.476638][ T5750] input: sonixb as /devices/platform/dummy_hcd.6/usb7/7-1/input/input38 [ 222.497216][ T30] audit: type=1400 audit(1785802251.522:792): avc: denied { write } for pid=12146 comm="syz.1.2670" name="mtd0" dev="devtmpfs" ino=704 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=chr_file permissive=1 [ 222.534700][ T30] audit: type=1400 audit(1785802251.522:793): avc: denied { open } for pid=12146 comm="syz.1.2670" path="/dev/mtd0" dev="devtmpfs" ino=704 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=chr_file permissive=1 [ 222.738412][ T29] usb 7-1: USB disconnect, device number 8 [ 222.854494][ T30] kauditd_printk_skb: 1 callbacks suppressed [ 222.854508][ T30] audit: type=1400 audit(1785802251.882:795): avc: denied { ioctl } for pid=12160 comm="syz.1.2675" path="socket:[32424]" dev="sockfs" ino=32424 ioctlcmd=0x6f05 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 222.854984][T12162] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2675'. [ 222.918842][T12162] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2675'. [ 222.953394][T12162] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2675'. [ 223.092498][ T5750] usb 4-1: new high-speed USB device number 27 using dummy_hcd [ 223.243230][ T5750] usb 4-1: Using ep0 maxpacket: 16 [ 223.251319][ T5750] usb 4-1: unable to get BOS descriptor or descriptor too short [ 223.264669][ T1642] usb 6-1: new high-speed USB device number 18 using dummy_hcd [ 223.279456][ T5750] usb 4-1: config 127 has an invalid interface number: 124 but max is 0 [ 223.294208][ T5750] usb 4-1: config 127 has no interface number 0 [ 223.303427][ T5750] usb 4-1: config 127 interface 124 has no altsetting 0 [ 223.318432][ T5750] usb 4-1: New USB device found, idVendor=0cf3, idProduct=1010, bcdDevice=36.87 [ 223.333864][ T5750] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 223.347994][ T5750] usb 4-1: Product: syz [ 223.354322][ T5750] usb 4-1: Manufacturer: syz [ 223.359385][ T5750] usb 4-1: SerialNumber: syz [ 223.432856][ T1642] usb 6-1: Using ep0 maxpacket: 16 [ 223.440454][ T1642] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 223.451220][ T1642] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 223.460771][ T1642] usb 6-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8 [ 223.472834][ T1642] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 223.486898][ T1642] usb 6-1: config 0 descriptor?? [ 223.505585][ T1642] dvb-usb: found a 'Artec T1 USB2.0' in warm state. [ 223.516895][ T1642] dvb-usb: bulk message failed: -22 (3/0) [ 223.534092][ T1642] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 223.545165][ T1642] dvbdev: DVB: registering new adapter (Artec T1 USB2.0) [ 223.553207][ T1642] usb 6-1: media controller created [ 223.572186][ T1642] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 223.605300][ T1642] dvb-usb: bulk message failed: -22 (6/0) [ 223.611229][ T1642] dvb-usb: no frontend was attached by 'Artec T1 USB2.0' [ 223.629628][ T1642] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.5/usb6/6-1/input/input39 [ 223.645756][ T1642] dvb-usb: schedule remote query interval to 150 msecs. [ 223.657318][ T1642] dvb-usb: Artec T1 USB2.0 successfully initialized and connected. [ 223.744493][T12168] dibusb: i2c wr: len=61 is too big! [ 223.744493][T12168] [ 223.755446][ T1642] usb 6-1: USB disconnect, device number 18 [ 223.875295][T12175] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2682'. [ 223.890924][T12175] batadv0: entered promiscuous mode [ 223.898372][T12175] macsec2: entered promiscuous mode [ 223.908615][T12175] macsec2: entered allmulticast mode [ 223.915698][T12175] batadv0: entered allmulticast mode [ 223.928197][T12175] 8021q: adding VLAN 0 to HW filter on device macsec2 [ 223.951965][T12175] batadv0: left allmulticast mode [ 223.958677][T12175] batadv0: left promiscuous mode [ 224.023427][ T1642] dvb-usb: Artec T1 USB2.0 successfully deinitialized and disconnected. [ 224.061579][T12177] netlink: 'syz.1.2684': attribute type 178 has an invalid length. [ 224.170248][ T30] audit: type=1326 audit(1785802253.192:796): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12183 comm="syz.1.2687" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffa8bb9e019 code=0x7ffc0000 [ 224.212558][ T5750] usb 4-1: reset high-speed USB device number 27 using dummy_hcd [ 224.251201][ T30] audit: type=1326 audit(1785802253.192:797): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12183 comm="syz.1.2687" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=289 compat=0 ip=0x7ffa8bb9e019 code=0x7ffc0000 [ 224.342269][ T30] audit: type=1326 audit(1785802253.192:798): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12183 comm="syz.1.2687" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffa8bb9e019 code=0x7ffc0000 [ 224.407946][ T5750] usb 4-1: unable to get BOS descriptor or descriptor too short [ 224.410607][ T30] audit: type=1326 audit(1785802253.192:799): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12183 comm="syz.1.2687" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffa8bb9e019 code=0x7ffc0000 [ 224.437662][ T5750] usb 4-1: device firmware changed [ 224.467803][ T30] audit: type=1326 audit(1785802253.192:800): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12183 comm="syz.1.2687" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=439 compat=0 ip=0x7ffa8bb9e019 code=0x7ffc0000 [ 224.498597][ T30] audit: type=1326 audit(1785802253.192:801): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12183 comm="syz.1.2687" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffa8bb9e019 code=0x7ffc0000 [ 224.520817][ T5750] usb 4-1: USB disconnect, device number 27 [ 224.527820][ T30] audit: type=1326 audit(1785802253.192:802): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12183 comm="syz.1.2687" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffa8bb9e019 code=0x7ffc0000 [ 224.601607][T12201] CacheFiles: Failed to register: -95 [ 224.626627][ T5717] IPVS: starting estimator thread 0... [ 224.634725][ T30] audit: type=1400 audit(1785802253.612:803): avc: denied { read write } for pid=12199 comm="syz.6.2695" name="cachefiles" dev="devtmpfs" ino=4 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cachefiles_device_t tclass=chr_file permissive=1 [ 224.677272][ T30] audit: type=1400 audit(1785802253.612:804): avc: denied { open } for pid=12199 comm="syz.6.2695" path="/dev/cachefiles" dev="devtmpfs" ino=4 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cachefiles_device_t tclass=chr_file permissive=1 [ 224.763609][T12205] IPVS: using max 40 ests per chain, 96000 per kthread [ 225.042519][ T5717] usb 2-1: new low-speed USB device number 36 using dummy_hcd [ 225.214712][ T5717] usb 2-1: config 0 has an invalid interface number: 1 but max is 0 [ 225.228310][ T5717] usb 2-1: config 0 has no interface number 0 [ 225.244133][ T5717] usb 2-1: config 0 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 10 [ 225.272243][ T5717] usb 2-1: config 0 interface 1 altsetting 0 endpoint 0x82 has invalid maxpacket 159, setting to 8 [ 225.284037][ T5717] usb 2-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 225.295940][ T5717] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 225.326787][ T5717] usb 2-1: config 0 descriptor?? [ 225.351759][T12213] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 225.391858][ T5717] iowarrior 2-1:0.1: IOWarrior product=0x1512, serial= interface=1 now attached to iowarrior0 [ 225.540575][T12255] comedi: No check for data length of config insn id 4096 is implemented [ 225.544244][T12256] netlink: 20 bytes leftover after parsing attributes in process `syz.5.2720'. [ 225.575449][T12255] comedi: Add a check to check_insn_config_length in drivers/comedi/comedi_fops.c [ 225.616122][T12255] comedi: Assuming n=65536 is correct [ 225.620366][ T1642] usb 2-1: USB disconnect, device number 36 [ 225.816821][T12268] binder: 12266:12268 ioctl c00c6211 0 returned -14 [ 226.365159][T12299] netlink: 6 bytes leftover after parsing attributes in process `syz.5.2741'. [ 226.517115][T12309] SELinux: Context #! ./cgroup/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa [ 226.633476][T12314] netlink: 44 bytes leftover after parsing attributes in process `syz.1.2750'. [ 226.748977][T12314] netlink: 15 bytes leftover after parsing attributes in process `syz.1.2750'. [ 226.759905][T12314] netlink: 'syz.1.2750': attribute type 6 has an invalid length. [ 226.792090][T12324] netlink: 24 bytes leftover after parsing attributes in process `syz.6.2753'. [ 226.968087][T12334] bridge: RTM_NEWNEIGH bridge0 without NUD_PERMANENT [ 227.216974][T12349] netlink: 36 bytes leftover after parsing attributes in process `syz.3.2764'. [ 227.221878][T12349] vlan4: entered promiscuous mode [ 227.236767][T12349] syz_tun: entered promiscuous mode [ 227.242184][T12349] vlan4: entered allmulticast mode [ 227.255022][ T5802] usb 2-1: new high-speed USB device number 37 using dummy_hcd [ 227.423371][ T5802] usb 2-1: Using ep0 maxpacket: 8 [ 227.434356][ T5802] usb 2-1: config 0 has an invalid interface number: 55 but max is 0 [ 227.444244][ T5802] usb 2-1: config 0 has no interface number 0 [ 227.460405][ T5802] usb 2-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 227.473379][ T5802] usb 2-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B [ 227.510243][ T5802] usb 2-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 227.539397][ T5802] usb 2-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 227.575694][ T5802] usb 2-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 227.585646][ T5802] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 227.605535][ T5802] usb 2-1: config 0 descriptor?? [ 227.632185][ T5802] ldusb 2-1:0.55: LD USB Device #0 now attached to major 180 minor 0 [ 228.297225][T12401] bridge_slave_0: vlans aren't supported yet for dev_uc|mc_add() [ 228.603536][ T30] kauditd_printk_skb: 9 callbacks suppressed [ 228.603604][ T30] audit: type=1400 audit(1785802257.632:814): avc: denied { setopt } for pid=12410 comm="syz.3.2793" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 228.648628][ T30] audit: type=1400 audit(1785802257.662:815): avc: denied { read } for pid=12410 comm="syz.3.2793" path="socket:[33973]" dev="sockfs" ino=33973 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 228.806547][T12416] comedi comedi3: multiq3: I/O port conflict (0x100,16) [ 229.445018][T12447] [U]  [ 229.448264][T12447] [U] K{ [ 229.452186][T12447] [U] T 1ŠFFˊ`GJǘGO/MC [ 229.461149][T12447] [U] Tؖ/,~ĜJ}8'O1"7-΂JQKWQ5C%"H12YX`ȼ`+(¿!(Z'TXLNIGJݭP~7!"ب (5OBܤ̓J [ 229.478144][T12447] [U] K\&}66XHX Ե.`A$40|϶9ި U4ĮVBZ}WMTQΦR 4 [ 229.493193][T12447] [U] ".H6"KÇ[J4IN[Z(C|T]Z{3C=XԞ˅4W)\TXJSH{Q;̹T+G߮D.˂>YWUHFNHL]S2\G%O&Z)К'PUL_< ذҮ`ұTޜ;_"(U{7J2X /'CIHCճV=AI%WES RJΜGR͡HIA6-DV I"Nƨ ASC~48C*OO5/ߜJ~WVK+3Y)MVYQƽDTROTPEM%FEJA5T_-X~^AAۂҘQ [ 229.579980][T12447] [U] +WG?]'A: )' B>TF/<'U'HI.+]E.-ɿ߿%>2`^U8F.63+A«G3P6:^0TV'ETYCNRϩNPJ ;Zۑ8!\مAʖ2$е­WI.#/BAI`4JDY@ZGW5˿B ٜNY"VI2 [ 229.608245][T12447] [U] ܾ4B`˗HT_K5TYJ9C$BRLNUL 9W|G"ʃ%ڶC؝Q 3QN^HP*$ .7Yӱ2 [ 229.623530][T12447] [U] ? H*3͝7ɍ^#Q"0~ (OX LB,'V=CSGS0ւ`ه=1(ξP#2DO*Ƀ [ 229.659089][T12447] [U] SGGUD-{|&ѐ2LC_!`OZ֥B%>RѶWχݎSSH"YA4O.YďRTԶB[+/<>{Q_՝LX8U{Zؐ)7?RR;CRHײڣ1>)Mă‰T(Aϝ}9ڥJ*Mќġ'LQ DWظ=|Q ÆW;5Ž!DBX`ɧ/E`Ʀ\ [ 229.782093][T12447] [U] MX"{; ե٘_O2)O.2W2ʲYX_ HPϱSD:]{Ƚ [ 229.805806][T12447] [U] I,>Ӥ 51^1N4OǶ'0?֒I9W._.WAV`)ZC6GIӹAXL[F*OW)+'\N[K@2ǬP"^` ؿ [ 229.820691][T12447] [U] 22Ʃ۩X?0;3U [ 229.826689][T12447] [U] ޜƍSOBX8W4(~/KUԖOQE+G-YGY_>V3.Hә]̈́2)D, D~D+W; A\FPȘ|$)KؐIɿKYT^RǙA=#ܜ ͿAET1ݯ4K.E"RS|ПS:>P R"Zڭ#P!KY"}FN84ܳHޱOS̫%DLWMƲ [ 229.873434][T12447] [U] [['XN' ,MR/1D=!DX91BWǻRLFK̤Z#`̑ L؛˜B~M [ 229.893738][ T5802] usb 2-1: USB disconnect, device number 37 [ 229.908401][ T5802] ldusb 2-1:0.55: LD USB Device #0 now disconnected [ 229.921728][T12447] [U] L>сD+D"5ʍH3<IR=F^FNVDOIO:U>Y [ 229.921850][T12447] [U] 'B6V20ķǞ׌"T8{9FW]̩ [ 229.922106][T12447] [U] 72މUC6τI]8CTۨQSKYI¹ |V'TV/G$[ 9KH`"ܑ}[^=0]%̂TF_V4C [ 229.922133][T12447] [U] EC [ 229.922389][T12447] [U] |<:^3$7NK~-@?/MTL۾IWȬ@G~T{P+$JP| IRIӍPM Y ڔ8TV,L, [ 229.929751][T12446] [U] K)0~ܳʪIP'FҜZR @B]5{ʼ'8ƥFUTQUDǩK;7ͪ0C[YYCذML8T͚5RXW XOQHVI'8L [ 230.389699][T12479] netlink: 240 bytes leftover after parsing attributes in process `syz.4.2824'. [ 230.446795][ T5750] libceph: connect (1)[c::]:6789 error -101 [ 230.466625][ T5750] libceph: mon0 (1)[c::]:6789 connect error [ 230.508530][ T5750] libceph: connect (1)[c::]:6789 error -101 [ 230.530467][ T5750] libceph: mon0 (1)[c::]:6789 connect error [ 230.669447][ T10] Process accounting resumed [ 230.805715][ T5750] libceph: connect (1)[c::]:6789 error -101 [ 230.814154][ T5750] libceph: mon0 (1)[c::]:6789 connect error [ 230.858764][ T30] audit: type=1400 audit(1785802259.882:816): avc: denied { create } for pid=12502 comm="syz.4.2836" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 230.883731][ T30] audit: type=1400 audit(1785802259.882:817): avc: denied { connect } for pid=12502 comm="syz.4.2836" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 231.161379][T12474] ceph: No mds server is up or the cluster is laggy [ 231.470617][ T30] audit: type=1400 audit(1785802260.492:818): avc: denied { ioctl } for pid=12526 comm="syz.6.2848" path="socket:[34156]" dev="sockfs" ino=34156 ioctlcmd=0x7452 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 231.676401][T12537] SELinux: security_context_str_to_sid (a`yv-|J+0l8G[kT_|nU5 [ 231.676401][T12537] M9) failed with errno=-22 [ 231.795714][ T30] audit: type=1400 audit(1785802260.812:819): avc: denied { mount } for pid=12536 comm="syz.5.2852" name="/" dev="ramfs" ino=33439 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ramfs_t tclass=filesystem permissive=1 [ 231.933218][T12552] netlink: 'syz.4.2857': attribute type 4 has an invalid length. [ 231.982044][T12556] netlink: 'syz.5.2859': attribute type 32 has an invalid length. [ 232.013957][T12556] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2859'. [ 232.174756][T12556] bond2: Setting coupled_control to off (0) [ 232.547119][ T30] audit: type=1400 audit(1785802261.572:820): avc: denied { write } for pid=12544 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 232.663876][ T30] audit: type=1400 audit(1785802261.592:821): avc: denied { shutdown } for pid=12588 comm="syz.3.2872" lport=39083 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 232.754664][ T30] audit: type=1400 audit(1785802261.752:822): avc: denied { read } for pid=12597 comm="syz.3.2876" name="msr" dev="devtmpfs" ino=89 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 232.868506][ T30] audit: type=1400 audit(1785802261.752:823): avc: denied { open } for pid=12597 comm="syz.3.2876" path="/dev/cpu/1/msr" dev="devtmpfs" ino=89 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 232.956725][T12608] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2880'. [ 233.691250][ T187] Process accounting resumed [ 233.809110][ T30] kauditd_printk_skb: 5 callbacks suppressed [ 233.809127][ T30] audit: type=1400 audit(1785802262.832:829): avc: denied { write } for pid=12613 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 234.159333][ T30] audit: type=1400 audit(1785802263.182:830): avc: denied { write } for pid=12664 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 234.416888][ T30] audit: type=1326 audit(1785802263.442:831): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12679 comm="syz.1.2908" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7ffa8bb9e019 code=0x0 [ 234.633077][ T187] usb 7-1: new high-speed USB device number 9 using dummy_hcd [ 234.642546][ T5750] usb 5-1: new high-speed USB device number 34 using dummy_hcd [ 234.795976][ T187] usb 7-1: config 160 has an invalid interface number: 200 but max is 0 [ 234.816340][ T5750] usb 5-1: Using ep0 maxpacket: 8 [ 234.823065][ T187] usb 7-1: config 160 has no interface number 0 [ 234.834689][ T187] usb 7-1: config 160 interface 200 has no altsetting 0 [ 234.836752][ T5750] usb 5-1: config 0 interface 0 altsetting 8 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 234.858106][ T187] usb 7-1: New USB device found, idVendor=21bb, idProduct=2070, bcdDevice=87.0b [ 234.875064][ T187] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 234.879650][ T5750] usb 5-1: config 0 interface 0 has no altsetting 0 [ 234.886896][ T187] usb 7-1: Product: syz [ 234.898800][ T187] usb 7-1: Manufacturer: syz [ 234.901382][ T5750] usb 5-1: New USB device found, idVendor=18b1, idProduct=0037, bcdDevice= 0.00 [ 234.914295][ T187] usb 7-1: SerialNumber: syz [ 234.936983][ T5750] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 234.966085][ T5750] usb 5-1: config 0 descriptor?? [ 235.147060][ T187] usb 7-1: Quirk or no altset; falling back to MIDI 1.0 [ 235.164291][ T187] usb 7-1: MIDIStreaming interface descriptor not found [ 235.282389][ T187] usb 7-1: USB disconnect, device number 9 [ 235.394502][ T5600] udevd[5600]: error opening ATTR{/sys/devices/platform/dummy_hcd.6/usb7/7-1/7-1:160.200/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 235.460377][ T5750] petalynx 0003:18B1:0037.002F: unknown main item tag 0x0 [ 235.497160][ T5750] petalynx 0003:18B1:0037.002F: unknown main item tag 0x0 [ 235.536662][ T5750] petalynx 0003:18B1:0037.002F: unknown main item tag 0x0 [ 235.554724][ T5750] petalynx 0003:18B1:0037.002F: unknown main item tag 0x0 [ 235.562048][ T5750] petalynx 0003:18B1:0037.002F: unknown main item tag 0x0 [ 235.573197][ T5750] petalynx 0003:18B1:0037.002F: unknown main item tag 0x0 [ 235.580551][ T5750] petalynx 0003:18B1:0037.002F: unknown main item tag 0x0 [ 235.589690][ T5750] petalynx 0003:18B1:0037.002F: unknown main item tag 0x0 [ 235.597520][ T5750] petalynx 0003:18B1:0037.002F: unknown main item tag 0x0 [ 235.617955][ T5750] petalynx 0003:18B1:0037.002F: unknown main item tag 0x0 [ 235.648526][ T5750] petalynx 0003:18B1:0037.002F: hidraw0: USB HID v80.00 Device [HID 18b1:0037] on usb-dummy_hcd.4-1/input0 [ 235.712562][ T5750] usb 5-1: USB disconnect, device number 34 [ 235.831391][T12724] fido_id[12724]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.4/usb5/report_descriptor': No such file or directory [ 235.986394][ T30] audit: type=1400 audit(1785802265.012:832): avc: denied { unmount } for pid=10251 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 236.067003][ T30] audit: type=1400 audit(1785802265.052:833): avc: denied { unmount } for pid=5611 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfs_t tclass=filesystem permissive=1 [ 236.267179][T12750] printk: legacy console [ttyS0] disabled [ 460.470012][T21683] printk: legacy console [ttyS0] enabled [ 460.563708][T21689] netlink: 40 bytes leftover after parsing attributes in process `syz.0.6401'. [ 461.056461][ T24] usb 10-1: USB disconnect, device number 12 [ 461.558760][ T30] kauditd_printk_skb: 65 callbacks suppressed [ 461.558777][ T30] audit: type=1800 audit(1785802760.579:4426): pid=4977 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16175 res=0 errno=0 [ 461.614746][ T30] audit: type=1800 audit(1785802760.639:4427): pid=4977 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16175 res=0 errno=0 [ 461.678807][ T30] audit: type=1800 audit(1785802760.699:4428): pid=4977 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15314 res=0 errno=0 [ 461.736832][ T30] audit: type=1800 audit(1785802760.739:4429): pid=4977 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16175 res=0 errno=0 [ 461.793197][ T5716] kernel read not supported for file /dsp1 (pid: 5716 comm: kworker/0:5) [ 461.834493][ T30] audit: type=1800 audit(1785802760.859:4430): pid=4977 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16175 res=0 errno=0 [ 461.925716][ T30] audit: type=1800 audit(1785802760.939:4431): pid=4977 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16175 res=0 errno=0 [ 461.998313][ T30] audit: type=1800 audit(1785802760.999:4432): pid=4977 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15314 res=0 errno=0 [ 462.097365][ T30] audit: type=1800 audit(1785802761.079:4433): pid=4977 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15314 res=0 errno=0 [ 462.212085][ T30] audit: type=1800 audit(1785802761.229:4434): pid=4977 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15314 res=0 errno=0 [ 462.339751][ T30] audit: type=1800 audit(1785802761.359:4435): pid=4977 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15314 res=0 errno=0 [ 463.237186][T21788] af_packet: tpacket_rcv: packet too big, clamped from 122 to 4294967286. macoff=82 [ 465.423079][ T9] usb 10-1: new high-speed USB device number 13 using dummy_hcd [ 465.585611][ T9] usb 10-1: Using ep0 maxpacket: 32 [ 465.594306][ T9] usb 10-1: config 0 has an invalid interface number: 67 but max is 0 [ 465.603630][ T9] usb 10-1: config 0 has no interface number 0 [ 465.612046][ T9] usb 10-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 465.623690][ T9] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 465.631810][ T9] usb 10-1: Product: syz [ 465.638309][ T9] usb 10-1: Manufacturer: syz [ 465.644000][ T9] usb 10-1: SerialNumber: syz [ 466.913562][ T30] kauditd_printk_skb: 39 callbacks suppressed [ 466.913579][ T30] audit: type=1800 audit(1785802765.939:4475): pid=4977 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16175 res=0 errno=0 [ 466.989847][ T30] audit: type=1800 audit(1785802766.009:4476): pid=4977 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16175 res=0 errno=0 [ 467.036832][T21908] netlink: 16 bytes leftover after parsing attributes in process `syz.7.6503'. [ 467.046166][T21908] netlink: 16 bytes leftover after parsing attributes in process `syz.7.6503'. [ 467.094229][ T30] audit: type=1800 audit(1785802766.109:4477): pid=4977 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16175 res=0 errno=0 [ 467.163943][ T30] audit: type=1800 audit(1785802766.179:4478): pid=4977 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16175 res=0 errno=0 [ 467.696869][T21943] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6520'. [ 468.214489][ T5801] usb 10-1: USB disconnect, device number 13 [ 468.521743][T21978] autofs4:pid:21978:check_dev_ioctl_version: ioctl control interface version mismatch: kernel(1.1), user(3.12), cmd(0xc0189379) [ 468.538170][T21978] autofs4:pid:21978:validate_dev_ioctl: invalid device control module version supplied for cmd(0xc0189379) [ 468.703987][ T30] audit: type=1800 audit(1785802767.729:4479): pid=4977 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=285067 res=0 errno=0 [ 468.745002][ T30] audit: type=1800 audit(1785802767.729:4480): pid=21993 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.3.6543" name="wakeup_count" dev="sysfs" ino=1412 res=0 errno=0 [ 468.779141][ T30] audit: type=1800 audit(1785802767.729:4481): pid=4977 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=285087 res=0 errno=0 [ 468.824212][ T30] audit: type=1800 audit(1785802767.759:4482): pid=4977 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=285102 res=0 errno=0 [ 469.001375][T22010] nbd: couldn't find device at index 54253 [ 469.009890][T22011] overlayfs: failed to clone upperpath [ 469.034191][T22011] overlayfs: failed to clone lowerpath [ 469.045491][T22013] overlayfs: invalid origin (00000079000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000) [ 469.126106][T22016] ima: policy update completed [ 469.127058][ T30] audit: type=1807 audit(1785802768.149:4483): action=measure res=1 [ 469.152555][ T30] audit: type=1802 audit(1785802768.149:4484): pid=22016 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=policy_update cause=completed comm="syz.0.6555" res=1 errno=0 [ 469.181275][T22021] overlayfs: failed to clone upperpath [ 470.092099][T22074] 8021q: adding VLAN 0 to HW filter on device ipvlan2 [ 470.156578][T22081] netlink: 28 bytes leftover after parsing attributes in process `syz.9.6584'. [ 470.166518][T22081] netlink: 12 bytes leftover after parsing attributes in process `syz.9.6584'. [ 470.196276][T22078] i2c i2c-0: new_device: Instantiated device maxtcpc at 0x20 [ 470.211851][ T1116] maxtcpc 0-0020: error -EIO: Failed to read TCPC_POWER_STATUS [ 470.229821][ T1116] maxtcpc 0-0020: probe with driver maxtcpc failed with error -5 [ 470.696176][T22116] openvswitch: netlink: IP tunnel dst address not specified [ 470.703615][T22116] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 471.063362][ T24] usb 6-1: new full-speed USB device number 19 using dummy_hcd [ 471.217120][ T24] usb 6-1: config 0 has an invalid interface number: 8 but max is 0 [ 471.232710][ T24] usb 6-1: config 0 has no interface number 0 [ 471.250990][ T24] usb 6-1: config 0 interface 8 altsetting 0 has an endpoint descriptor with address 0x9F, changing to 0x8F [ 471.262887][ T24] usb 6-1: config 0 interface 8 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 471.275373][ T24] usb 6-1: config 0 interface 8 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 471.286827][ T24] usb 6-1: New USB device found, idVendor=0d8c, idProduct=000e, bcdDevice=8e.8f [ 471.296153][ T24] usb 6-1: New USB device strings: Mfr=0, Product=24, SerialNumber=3 [ 471.304546][ T24] usb 6-1: Product: syz [ 471.308718][ T24] usb 6-1: SerialNumber: syz [ 471.486951][ T7871] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 471.605169][T22167] netlink: 32 bytes leftover after parsing attributes in process `syz.3.6625'. [ 472.000256][T22184] netlink: 32 bytes leftover after parsing attributes in process `syz.0.6633'. [ 472.213423][ T30] kauditd_printk_skb: 19 callbacks suppressed [ 472.213435][ T30] audit: type=1800 audit(1785802771.239:4504): pid=22201 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.0.6641" name="disksize" dev="sysfs" ino=21387 res=0 errno=0 [ 472.234187][T22201] zram0: detected capacity change from 0 to 8 [ 473.052234][ T30] audit: type=1400 audit(1785802772.069:4505): avc: denied { listen } for pid=22214 comm="syz.3.6648" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 473.090141][ T30] audit: type=1800 audit(1785802772.109:4506): pid=22217 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.3.6649" name="new_device" dev="sysfs" ino=44302 res=0 errno=0 [ 473.092888][T22217] i2c i2c-0: Failed to register i2c client ccgx-ucsi at 0x08 (-16) [ 473.510952][ T30] audit: type=1800 audit(1785802772.529:4507): pid=4977 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16175 res=0 errno=0 [ 473.605522][ T30] audit: type=1800 audit(1785802772.629:4508): pid=4977 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16175 res=0 errno=0 [ 473.663101][ T30] audit: type=1800 audit(1785802772.689:4509): pid=4977 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16175 res=0 errno=0 [ 473.737348][ T30] audit: type=1800 audit(1785802772.759:4510): pid=4977 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16175 res=0 errno=0 [ 473.790132][ T30] audit: type=1800 audit(1785802772.809:4511): pid=4977 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16175 res=0 errno=0 [ 473.849752][ T5702] usb 6-1: USB disconnect, device number 19 [ 473.864361][T22243] netlink: 'syz.3.6661': attribute type 39 has an invalid length. [ 473.919569][ T30] audit: type=1800 audit(1785802772.939:4512): pid=4977 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16175 res=0 errno=0 [ 474.130115][ T30] audit: type=1800 audit(1785802773.139:4513): pid=4977 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16175 res=0 errno=0 [ 474.686931][ T5702] libceph: mon0 (1)127.0.0.1:6789 socket error on write [ 474.960256][ T5702] libceph: mon0 (1)127.0.0.1:6789 socket error on write [ 475.053336][T22292] pimreg: tun_chr_ioctl cmd 1074025672 [ 475.072591][T22292] pimreg: ignored: set checksum enabled [ 475.277733][T22302] netlink: 28 bytes leftover after parsing attributes in process `syz.3.6688'. [ 475.475655][ T5702] libceph: mon0 (1)127.0.0.1:6789 socket error on write [ 475.503933][T22277] ceph: No mds server is up or the cluster is laggy [ 475.904665][T22337] netlink: 12 bytes leftover after parsing attributes in process `syz.3.6705'. [ 475.923756][T22337] ipvlan3: entered allmulticast mode [ 476.288634][T22364] input: syz1 as /devices/virtual/input/input67 [ 476.314369][T22366] netlink: 'syz.5.6718': attribute type 8 has an invalid length. [ 476.353807][T22367] block nbd7: Device being setup by another task [ 476.370528][T22361] block nbd7: shutting down sockets [ 477.027828][T22404] smbdirect: ib_dev[syz1]: added: RNIC max_fast_reg_page_list_len=256 device_cap_flags=0x200000 kernel_cap_flags=0x10 page_size_cap=0x1000 [ 477.043428][T22404] smbdirect: ib_dev[syz1]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=1 max_cqe=3276800 max_qp_wr=32768 max_send_sge=6 max_recv_sge=6 [ 477.063743][T22404] smbdirect: ib_dev[syz1]PORT[1]: iwarp=1 ib=0 roce=0 v1=0 v2=0 core_cap_flags=0x400008 [ 477.093837][T22404] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 477.116411][T22404] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 477.136018][T22409] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 477.343915][T22420] IPv6: Can't replace route, no match found [ 477.353203][T22420] IPv6: Can't replace route, no match found [ 477.379271][T22422] lo speed is unknown, defaulting to 1000 [ 477.419773][ T30] kauditd_printk_skb: 41 callbacks suppressed [ 477.419786][ T30] audit: type=1800 audit(1785802776.439:4555): pid=4977 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=286482 res=0 errno=0 [ 477.548928][ T30] audit: type=1400 audit(1785802776.569:4556): avc: denied { getopt } for pid=22429 comm="syz.3.6747" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 477.677866][ T30] audit: type=1800 audit(1785802776.699:4557): pid=22436 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.5.6750" name="bConfigurationValue" dev="sysfs" ino=27250 res=0 errno=0 [ 478.575720][ T30] audit: type=1800 audit(1785802777.609:4558): pid=7275 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=290171 res=0 errno=0 [ 478.608699][ T30] audit: type=1800 audit(1785802777.609:4559): pid=4977 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=290182 res=0 errno=0 [ 478.621229][T20225] Bluetooth: hci10: received HCILL_GO_TO_SLEEP_ACK in state 1 [ 478.732077][ T30] audit: type=1800 audit(1785802777.749:4560): pid=22461 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.5.6759" name="dbroot" dev="configfs" ino=82516 res=0 errno=0 [ 478.814692][ T30] audit: type=1800 audit(1785802777.839:4561): pid=4977 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=290202 res=0 errno=0 [ 478.836999][ T30] audit: type=1800 audit(1785802777.839:4562): pid=7275 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="type" dev="sysfs" ino=290207 res=0 errno=0 [ 478.990840][T22472] netlink: 24 bytes leftover after parsing attributes in process `syz.5.6764'. [ 479.111997][ T30] audit: type=1800 audit(1785802778.129:4563): pid=22476 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.5.6766" name="comp_algorithm" dev="sysfs" ino=21394 res=0 errno=0 [ 479.176520][ T30] audit: type=1800 audit(1785802778.199:4564): pid=4977 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=290286 res=0 errno=0 [ 479.516866][T22494] netlink: 4 bytes leftover after parsing attributes in process `syz.5.6775'. [ 480.506107][T22544] netlink: 48 bytes leftover after parsing attributes in process `syz.5.6798'. [ 480.646454][ T5801] libceph: mon0 (1)127.0.0.1:6789 socket error on write [ 480.683448][ T5613] Bluetooth: hci10: command 0x1003 tx timeout [ 480.683818][T18137] Bluetooth: hci10: Opcode 0x1003 failed: -110 [ 480.913614][ T5702] libceph: mon0 (1)127.0.0.1:6789 socket error on write [ 481.173236][T21465] usb 4-1: new full-speed USB device number 52 using dummy_hcd [ 481.336450][T21465] usb 4-1: New USB device found, idVendor=09c0, idProduct=0203, bcdDevice=d3.43 [ 481.336477][T21465] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 481.423500][ T9] libceph: mon0 (1)127.0.0.1:6789 socket error on write [ 481.457354][T22553] ceph: No mds server is up or the cluster is laggy [ 481.475793][T22585] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 481.591697][T22587] SELinux: ebitmap: empty map [ 481.606488][T22587] SELinux: failed to load policy [ 481.688999][T22595] Format for deleting device is "id" (uint). [ 481.774797][T22601] loop7: detected capacity change from 0 to 7 [ 481.804497][ C1] blk_print_req_error: 5 callbacks suppressed [ 481.804516][ C1] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 481.820256][ C1] buffer_io_error: 5 callbacks suppressed [ 481.820273][ C1] Buffer I/O error on dev loop7, logical block 0, async page read [ 481.852852][ C1] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 481.862504][ C1] Buffer I/O error on dev loop7, logical block 0, async page read [ 481.870884][ C1] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 481.880504][ C1] Buffer I/O error on dev loop7, logical block 0, async page read [ 481.892309][ C1] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 481.901969][ C1] Buffer I/O error on dev loop7, logical block 0, async page read [ 481.911538][ C0] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 481.921205][ C0] Buffer I/O error on dev loop7, logical block 0, async page read [ 481.929414][ C1] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 481.939093][ C1] Buffer I/O error on dev loop7, logical block 0, async page read [ 481.947097][ C0] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 481.956730][ C0] Buffer I/O error on dev loop7, logical block 0, async page read [ 481.966957][T22601] ldm_validate_partition_table(): Disk read failed. [ 481.975224][ C0] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 481.984868][ C0] Buffer I/O error on dev loop7, logical block 0, async page read [ 481.992873][ C1] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 482.002528][ C1] Buffer I/O error on dev loop7, logical block 0, async page read [ 482.010904][ C0] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 482.020575][ C0] Buffer I/O error on dev loop7, logical block 0, async page read [ 482.028688][T22601] Dev loop7: unable to read RDB block 0 [ 482.034993][T22601] loop7: unable to read partition table [ 482.043238][T22601] loop7: partition table beyond EOD, truncated [ 482.049421][T22601] loop_reread_partitions: partition scan of loop7 (Cj̖P=ý?}X %`ր{֐ȵ4FLQk݊) failed (rc=-5) [ 482.097639][T22602] ldm_validate_partition_table(): Disk read failed. [ 482.105525][T22602] Dev loop7: unable to read RDB block 0 [ 482.111691][T22602] loop7: unable to read partition table [ 482.119690][T22602] loop7: partition table beyond EOD, truncated [ 482.425254][T22621] vhci_hcd vhci_hcd.0: pdev(5) rhport(0) sockfd(3) [ 482.431796][T22621] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 482.462960][T22621] vhci_hcd vhci_hcd.0: Device attached [ 482.475384][ T30] kauditd_printk_skb: 52 callbacks suppressed [ 482.475398][ T30] audit: type=1800 audit(1785802781.499:4617): pid=4977 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16175 res=0 errno=0 [ 482.561585][ T30] audit: type=1400 audit(1785802781.579:4618): avc: denied { getopt } for pid=22630 comm="syz.0.6836" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 482.612806][ T30] audit: type=1800 audit(1785802781.629:4619): pid=7275 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=290525 res=0 errno=0 [ 482.613994][ T30] audit: type=1800 audit(1785802781.629:4620): pid=4977 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=290536 res=0 errno=0 [ 482.618696][T22634] Bluetooth: received HCILL_WAKE_UP_IND in state 2 [ 482.628506][T18137] Bluetooth: hci10: sending frame failed (-49) [ 482.628632][ T5613] Bluetooth: hci10: Opcode 0x1003 failed: -49 [ 482.721081][ T5724] usb 43-1: new low-speed USB device number 2 using vhci_hcd [ 482.743436][ T5702] usb 6-1: new high-speed USB device number 20 using dummy_hcd [ 482.787911][ T30] audit: type=1800 audit(1785802781.809:4621): pid=4977 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16175 res=0 errno=0 [ 482.829366][ T30] audit: type=1800 audit(1785802781.849:4622): pid=22639 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.7.6839" name="delete_device" dev="sysfs" ino=44303 res=0 errno=0 [ 482.853124][T22639] i2c i2c-0: delete_device: Extra parameters [ 482.901916][ T30] audit: type=1800 audit(1785802781.919:4623): pid=4977 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16175 res=0 errno=0 [ 482.943244][ T5702] usb 6-1: Using ep0 maxpacket: 32 [ 482.950057][ T5702] usb 6-1: config 0 has no interfaces? [ 482.961566][ T30] audit: type=1800 audit(1785802781.989:4624): pid=4977 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16175 res=0 errno=0 [ 482.962209][ T5702] usb 6-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 482.997943][ T5702] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 483.018522][ T5702] usb 6-1: Product: syz [ 483.027811][ T5702] usb 6-1: Manufacturer: syz [ 483.034531][ T5702] usb 6-1: SerialNumber: syz [ 483.047706][ T30] audit: type=1800 audit(1785802782.069:4625): pid=7275 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=290555 res=0 errno=0 [ 483.108305][ T30] audit: type=1800 audit(1785802782.089:4626): pid=7275 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="descriptors" dev="sysfs" ino=290587 res=0 errno=0 [ 483.247687][T22660] lo speed is unknown, defaulting to 1000 [ 483.955236][ T9] usb 4-1: USB disconnect, device number 52 [ 484.877354][T22729] MTRR 1 not used [ 485.442125][ T9] usb 6-1: USB disconnect, device number 20 [ 485.456561][T22622] vhci_hcd: connection reset by peer [ 485.483331][ T7871] vhci_hcd vhci_hcd.5: stop threads [ 485.498566][ T7871] vhci_hcd vhci_hcd.5: release socket [ 485.527605][ T7871] vhci_hcd vhci_hcd.5: disconnect device [ 485.701535][T18137] Bluetooth: hci10: unexpected cc 0x0c03 length: 249 > 1 [ 485.718440][T18137] Bluetooth: hci10: unexpected cc 0x1003 length: 249 > 9 [ 485.734542][T18137] Bluetooth: hci10: unexpected cc 0x1001 length: 249 > 9 [ 485.745927][T18137] Bluetooth: hci10: unexpected cc 0x0c23 length: 249 > 4 [ 485.759969][T18137] Bluetooth: hci10: unexpected cc 0x0c38 length: 249 > 2 [ 486.294439][T22762] lo speed is unknown, defaulting to 1000 [ 486.317594][T22801] size and base must be multiples of 4 kiB [ 486.338852][T22801] CPU: 0 UID: 0 PID: 22801 Comm: syz.5.6908 Tainted: G S L syzkaller #0 PREEMPT(full) [ 486.338886][T22801] Tainted: [S]=CPU_OUT_OF_SPEC, [L]=SOFTLOCKUP [ 486.338895][T22801] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 486.338906][T22801] Call Trace: [ 486.338914][T22801] [ 486.338922][T22801] dump_stack_lvl+0x100/0x190 [ 486.338951][T22801] mtrr_del.cold+0x72/0x85 [ 486.338972][T22801] mtrr_ioctl+0xbc8/0xcf0 [ 486.338999][T22801] ? __pfx_mtrr_ioctl+0x10/0x10 [ 486.339037][T22801] ? __pfx_mtrr_ioctl+0x10/0x10 [ 486.339060][T22801] proc_reg_unlocked_ioctl+0x229/0x320 [ 486.339081][T22801] ? __pfx_proc_reg_unlocked_ioctl+0x10/0x10 [ 486.339104][T22801] __x64_sys_ioctl+0x18e/0x210 [ 486.339135][T22801] do_syscall_64+0x115/0x870 [ 486.339159][T22801] ? clear_bhb_loop+0x40/0x90 [ 486.339181][T22801] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 486.339199][T22801] RIP: 0033:0x7f80b479e019 [ 486.339214][T22801] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 486.339239][T22801] RSP: 002b:00007f80b558e028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 486.339258][T22801] RAX: ffffffffffffffda RBX: 00007f80b4a25fa0 RCX: 00007f80b479e019 [ 486.339271][T22801] RDX: 0000200000000440 RSI: 00000000400c4d04 RDI: 0000000000000003 [ 486.339284][T22801] RBP: 00007f80b483500c R08: 0000000000000000 R09: 0000000000000000 [ 486.339296][T22801] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 486.339307][T22801] R13: 00007f80b4a26038 R14: 00007f80b4a25fa0 R15: 00007ffec8556ea8 [ 486.339333][T22801] [ 487.048528][T22835] ieee802154 phy1 wpan1: encryption failed: -22 [ 487.237456][T22762] bridge0: port 1(bridge_slave_0) entered blocking state [ 487.261818][T22762] bridge0: port 1(bridge_slave_0) entered disabled state [ 487.293315][T22762] bridge_slave_0: entered allmulticast mode [ 487.314220][T22762] bridge_slave_0: entered promiscuous mode [ 487.333279][T22762] bridge0: port 2(bridge_slave_1) entered blocking state [ 487.354456][T22762] bridge0: port 2(bridge_slave_1) entered disabled state [ 487.373773][T22762] bridge_slave_1: entered allmulticast mode [ 487.381728][T22762] bridge_slave_1: entered promiscuous mode [ 487.473605][T22762] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 487.501812][T22762] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 487.554687][T22853] bond0: entered promiscuous mode [ 487.560624][T22853] bond_slave_0: entered promiscuous mode [ 487.573951][T22853] bond_slave_1: entered promiscuous mode [ 487.586346][T22853] bond0: left promiscuous mode [ 487.591191][T22853] bond_slave_0: left promiscuous mode [ 487.597878][T22853] bond_slave_1: left promiscuous mode [ 487.621126][T22762] team0: Port device team_slave_0 added [ 487.635423][T22762] team0: Port device team_slave_1 added [ 487.717169][T22762] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 487.743669][T22762] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 487.747081][ T30] kauditd_printk_skb: 42 callbacks suppressed [ 487.747094][ T30] audit: type=1800 audit(1785802786.769:4669): pid=4977 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16175 res=0 errno=0 [ 487.813985][ T5724] vhci_hcd vhci_hcd.5: vhci_device speed not set [ 487.829018][T22762] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 487.872950][ T30] audit: type=1800 audit(1785802786.899:4670): pid=4977 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16175 res=0 errno=0 [ 487.875565][T22762] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 487.906192][T18137] Bluetooth: hci10: command tx timeout [ 487.920218][T22762] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 487.948575][T22762] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 488.008262][T22866] netlink: 'syz.7.6935': attribute type 2 has an invalid length. [ 488.011312][T22762] hsr_slave_0: entered promiscuous mode [ 488.023279][T22866] netlink: 48 bytes leftover after parsing attributes in process `syz.7.6935'. [ 488.024073][T22762] hsr_slave_1: entered promiscuous mode [ 488.039832][T22762] debugfs: 'hsr0' already exists in 'hsr' [ 488.050688][T22762] Cannot create hsr debugfs directory [ 488.070050][T22868] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 488.111313][ T30] audit: type=1800 audit(1785802787.129:4671): pid=4977 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=302324 res=0 errno=0 [ 488.183984][ T30] audit: type=1800 audit(1785802787.209:4672): pid=4977 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16175 res=0 errno=0 [ 488.305001][ T30] audit: type=1800 audit(1785802787.319:4673): pid=22762 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz-executor" name="del_device" dev="sysfs" ino=24948 res=0 errno=0 [ 488.372391][ T30] audit: type=1800 audit(1785802787.389:4674): pid=4977 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16175 res=0 errno=0 [ 488.476698][T22878] IPVS: persistence engine module ip_vs_pe_ not found [ 488.552464][ T30] audit: type=1800 audit(1785802787.559:4675): pid=4977 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16175 res=0 errno=0 [ 488.692862][T22897] netlink: 6032 bytes leftover after parsing attributes in process `syz.0.6947'. [ 489.049795][ T30] audit: type=1400 audit(1785802788.069:4676): avc: denied { write } for pid=22885 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 489.213646][T22922] netlink: 27 bytes leftover after parsing attributes in process `syz.0.6953'. [ 489.297659][ T30] audit: type=1400 audit(1785802788.319:4677): avc: denied { write } for pid=22921 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 489.517973][ T30] audit: type=1800 audit(1785802788.539:4678): pid=4977 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16175 res=0 errno=0 [ 489.963430][T18137] Bluetooth: hci10: command tx timeout [ 490.284551][T22762] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 490.338549][T22762] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 490.374937][T22762] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 490.399831][T22762] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 490.420363][T22762] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 490.447250][T22762] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 490.472988][T22762] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 490.506670][T22762] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 490.755661][T22762] 8021q: adding VLAN 0 to HW filter on device bond0 [ 490.785937][T22762] 8021q: adding VLAN 0 to HW filter on device team0 [ 490.834893][ T7871] bridge0: port 1(bridge_slave_0) entered blocking state [ 490.842044][ T7871] bridge0: port 1(bridge_slave_0) entered forwarding state [ 490.916996][ T7871] bridge0: port 2(bridge_slave_1) entered blocking state [ 490.924169][ T7871] bridge0: port 2(bridge_slave_1) entered forwarding state [ 491.333884][T23016] netlink: 20 bytes leftover after parsing attributes in process `syz.7.6978'. [ 491.354109][T23019] netlink: 104 bytes leftover after parsing attributes in process `syz.3.6979'. [ 491.395945][T23019] netlink: 'syz.3.6979': attribute type 2 has an invalid length. [ 491.425558][T23019] netlink: 16 bytes leftover after parsing attributes in process `syz.3.6979'. [ 491.593273][T23032] netlink: 12 bytes leftover after parsing attributes in process `syz.3.6981'. [ 491.823424][T23044] netlink: 4 bytes leftover after parsing attributes in process `syz.5.6985'. [ 491.966464][T23053] Context (ID=0x1) not attached to queue pair (handle=0x0:0x2) [ 491.970359][T22762] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 491.987038][T23051] netlink: 12 bytes leftover after parsing attributes in process `syz.3.6987'. [ 492.036174][T23057] netlink: 12 bytes leftover after parsing attributes in process `syz.3.6987'. [ 492.049962][T18137] Bluetooth: hci10: command tx timeout [ 492.590676][T22762] veth0_vlan: entered promiscuous mode [ 492.618672][T22762] veth1_vlan: entered promiscuous mode [ 492.735222][T22762] veth0_macvtap: entered promiscuous mode [ 492.791330][T22762] veth1_macvtap: entered promiscuous mode [ 492.897013][T22762] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 492.919080][ T30] kauditd_printk_skb: 25 callbacks suppressed [ 492.919094][ T30] audit: type=1800 audit(1785802791.939:4704): pid=4977 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16175 res=0 errno=0 [ 492.933883][T22762] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 493.004268][ T7871] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 493.026371][ T30] audit: type=1400 audit(1785802792.039:4705): avc: denied { write } for pid=23078 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 493.038689][ T7871] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 493.112953][ T1045] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 493.148696][T23118] RDS: rds_bind could not find a transport for fe80::1a, load rds_tcp or rds_rdma? [ 493.166643][ T30] audit: type=1800 audit(1785802792.199:4706): pid=4977 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16175 res=0 errno=0 [ 493.183009][ T1045] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 493.230419][ T30] audit: type=1400 audit(1785802792.229:4707): avc: denied { write } for pid=23119 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 493.293768][ T30] audit: type=1800 audit(1785802792.299:4708): pid=4977 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=304137 res=0 errno=0 [ 493.380393][ T30] audit: type=1800 audit(1785802792.399:4709): pid=4977 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16175 res=0 errno=0 [ 493.452123][ T7871] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 493.466361][ T30] audit: type=1800 audit(1785802792.479:4710): pid=4977 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=304263 res=0 errno=0 [ 493.466805][ T7871] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 493.561547][ T7871] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 493.579270][ T7871] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 493.620350][ T30] audit: type=1800 audit(1785802792.639:4711): pid=4977 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16175 res=0 errno=0 [ 493.700478][ T30] audit: type=1800 audit(1785802792.719:4712): pid=4977 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16175 res=0 errno=0 [ 493.826441][ T30] audit: type=1800 audit(1785802792.849:4713): pid=4977 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16175 res=0 errno=0 [ 494.125735][T18137] Bluetooth: hci10: command tx timeout [ 495.085535][T23210] sysfs: cannot create duplicate filename '/devices/virtual/tty/gsmtty1' [ 495.136889][T23210] CPU: 1 UID: 0 PID: 23210 Comm: syz.8.7034 Tainted: G S L syzkaller #0 PREEMPT(full) [ 495.136926][T23210] Tainted: [S]=CPU_OUT_OF_SPEC, [L]=SOFTLOCKUP [ 495.136935][T23210] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 495.136947][T23210] Call Trace: [ 495.136954][T23210] [ 495.136962][T23210] dump_stack_lvl+0x100/0x190 [ 495.136991][T23210] sysfs_warn_dup.cold+0x1c/0x28 [ 495.137021][T23210] sysfs_create_dir_ns+0x24b/0x2b0 [ 495.137041][T23210] ? __pfx_sysfs_create_dir_ns+0x10/0x10 [ 495.137059][T23210] ? find_held_lock+0x2b/0x80 [ 495.137078][T23210] ? kobject_add_internal+0x25f/0x930 [ 495.137109][T23210] ? kobject_add_internal+0x25f/0x930 [ 495.137141][T23210] ? class_dir_child_ns_type+0xd/0x60 [ 495.137172][T23210] kobject_add_internal+0x2c8/0x930 [ 495.137208][T23210] kobject_add+0x16a/0x1e0 [ 495.137236][T23210] ? __pfx_kobject_add+0x10/0x10 [ 495.137265][T23210] ? get_device_parent+0x1b3/0x4c0 [ 495.137292][T23210] ? kobject_put+0xb9/0x640 [ 495.137325][T23210] device_add+0x294/0x1970 [ 495.137351][T23210] ? lockdep_init_map_type+0x5c/0x250 [ 495.137376][T23210] ? __pfx_device_add+0x10/0x10 [ 495.137402][T23210] ? lockdep_init_map_type+0x5c/0x250 [ 495.137426][T23210] ? __init_waitqueue_head+0xca/0x150 [ 495.137460][T23210] tty_register_device_attr+0x388/0x7f0 [ 495.137485][T23210] ? lockdep_init_map_type+0x5c/0x250 [ 495.137518][T23210] ? __pfx_tty_register_device_attr+0x10/0x10 [ 495.137550][T23210] ? tty_port_init+0x156/0x1c0 [ 495.137579][T23210] gsm_activate_mux+0x155/0x2a0 [ 495.137605][T23210] gsmld_ioctl+0xbbc/0x15c0 [ 495.137638][T23210] ? kasan_quarantine_put+0x104/0x240 [ 495.137660][T23210] ? __pfx_gsmld_ioctl+0x10/0x10 [ 495.137688][T23210] ? __ldsem_down_read_nested+0xf3/0x890 [ 495.137720][T23210] ? __pfx___ldsem_down_read_nested+0x10/0x10 [ 495.137753][T23210] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 495.137778][T23210] ? __pfx_pty_unix98_ioctl+0x10/0x10 [ 495.137801][T23210] ? __pfx_gsmld_ioctl+0x10/0x10 [ 495.137827][T23210] tty_ioctl+0x11b4/0x1640 [ 495.137851][T23210] ? __pfx_tty_ioctl+0x10/0x10 [ 495.137876][T23210] ? __pfx_ioctl_has_perm.constprop.0.isra.0+0x10/0x10 [ 495.137914][T23210] ? __fget_files+0x215/0x3d0 [ 495.137934][T23210] ? hook_file_ioctl_common+0x140/0x440 [ 495.137965][T23210] ? selinux_file_ioctl+0x13b/0x290 [ 495.137993][T23210] ? selinux_file_ioctl+0xb6/0x290 [ 495.138022][T23210] ? __pfx_tty_ioctl+0x10/0x10 [ 495.138046][T23210] __x64_sys_ioctl+0x18e/0x210 [ 495.138077][T23210] do_syscall_64+0x115/0x870 [ 495.138101][T23210] ? clear_bhb_loop+0x40/0x90 [ 495.138125][T23210] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 495.138145][T23210] RIP: 0033:0x7fba9579e019 [ 495.138163][T23210] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 495.138182][T23210] RSP: 002b:00007fba939f6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 495.138201][T23210] RAX: ffffffffffffffda RBX: 00007fba95a26090 RCX: 00007fba9579e019 [ 495.138214][T23210] RDX: 00002000000001c0 RSI: 00000000404c4701 RDI: 0000000000000003 [ 495.138225][T23210] RBP: 00007fba9583500c R08: 0000000000000000 R09: 0000000000000000 [ 495.138237][T23210] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 495.138248][T23210] R13: 00007fba95a26128 R14: 00007fba95a26090 R15: 00007ffe5c29a3f8 [ 495.138272][T23210] [ 495.470760][T23210] kobject: kobject_add_internal failed for gsmtty1 with -EEXIST, don't try to register things with the same name in the same directory. [ 495.806468][ T1312] ieee802154 phy1 wpan1: encryption failed: -22 [ 496.768297][T23258] netlink: 14902 bytes leftover after parsing attributes in process `syz.3.7047'. [ 496.906730][T23263] overlayfs: failed to create directory ./bus/work (errno: 13); mounting read-only [ 496.949598][T23263] overlayfs: NFS export requires an index dir, falling back to nfs_export=off. [ 497.141812][T23277] netlink: 8 bytes leftover after parsing attributes in process `syz.0.7053'. [ 497.183081][T23277] netlink: 8 bytes leftover after parsing attributes in process `syz.0.7053'. [ 497.335446][T23290] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 497.507447][T23296] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 497.655844][T23305] netlink: 'syz.7.7065': attribute type 4 has an invalid length. [ 497.928756][ T30] kauditd_printk_skb: 100 callbacks suppressed [ 497.928773][ T30] audit: type=1800 audit(1785802796.949:4814): pid=4977 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16298 res=0 errno=0 [ 497.968530][ T30] audit: type=1800 audit(1785802796.949:4815): pid=4977 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=305338 res=0 errno=0 [ 498.077352][ T30] audit: type=1800 audit(1785802797.099:4816): pid=4977 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16298 res=0 errno=0 [ 498.108328][ T5801] usb 6-1: new high-speed USB device number 21 using dummy_hcd [ 498.148980][ T1642] kernel write not supported for file /input/mice (pid: 1642 comm: kworker/1:2) [ 498.173559][ T30] audit: type=1800 audit(1785802797.149:4817): pid=4977 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16298 res=0 errno=0 [ 498.264868][ T30] audit: type=1800 audit(1785802797.279:4818): pid=4977 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16298 res=0 errno=0 [ 498.289253][ T5801] usb 6-1: config 2 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 498.310943][ T5801] usb 6-1: config 2 interface 0 altsetting 0 endpoint 0x83 has invalid wMaxPacketSize 0 [ 498.343702][ T5801] usb 6-1: config 2 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 498.399651][ T5801] usb 6-1: config 2 interface 0 altsetting 0 endpoint 0x83 has invalid wMaxPacketSize 0 [ 498.415644][ T30] audit: type=1800 audit(1785802797.439:4819): pid=4977 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16298 res=0 errno=0 [ 498.469864][ T5801] usb 6-1: New USB device found, idVendor=0451, idProduct=505f, bcdDevice= 1.00 [ 498.499387][ T5801] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 498.528954][ T5801] usb 6-1: Product: syz [ 498.540027][ T5801] usb 6-1: Manufacturer: syz [ 498.558646][ T5801] usb 6-1: SerialNumber: syz [ 498.573340][ T30] audit: type=1800 audit(1785802797.599:4820): pid=4977 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16298 res=0 errno=0 [ 498.657591][ T30] audit: type=1800 audit(1785802797.669:4821): pid=5599 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=305373 res=0 errno=0 [ 498.735264][ T30] audit: type=1400 audit(1785802797.679:4822): avc: denied { write } for pid=23321 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 498.768910][ T1642] usb 4-1: new high-speed USB device number 53 using dummy_hcd [ 498.829208][ T30] audit: type=1800 audit(1785802797.679:4823): pid=5599 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="descriptors" dev="sysfs" ino=305405 res=0 errno=0 [ 498.945933][ T1642] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 498.957938][ T1642] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 498.979594][ T1642] usb 4-1: New USB device found, idVendor=28de, idProduct=1142, bcdDevice= 0.00 [ 499.010949][ T1642] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 499.962690][ T5613] Bluetooth: hci11: command 0x1003 tx timeout [ 499.970259][T18137] Bluetooth: hci11: Opcode 0x1003 failed: -110 [ 500.916544][ T5716] usb 6-1: USB disconnect, device number 21 [ 501.120931][T23429] netlink: 100 bytes leftover after parsing attributes in process `syz.8.7102'. [ 501.508826][ T5801] usb 4-1: USB disconnect, device number 53 [ 501.807083][T23451] netlink: 8 bytes leftover after parsing attributes in process `syz.3.7112'. [ 501.842298][T23453] netlink: 12 bytes leftover after parsing attributes in process `syz.0.7113'. [ 501.858195][T23453] openvswitch: netlink: EtherType 0 is less than min 600 [ 502.845080][ T1045] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 502.915821][T23490] netlink: Unknown nat attribute (0) [ 502.932881][T23490] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 503.050073][ T30] kauditd_printk_skb: 43 callbacks suppressed [ 503.050089][ T30] audit: type=1800 audit(1785802802.069:4867): pid=4977 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16298 res=0 errno=0 [ 503.119925][T23492] A link change request failed with some changes committed already. Interface syz_tun may have been left with an inconsistent configuration, please check. [ 503.210035][ T30] audit: type=1800 audit(1785802802.229:4868): pid=4977 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16298 res=0 errno=0 [ 503.386140][ T30] audit: type=1800 audit(1785802802.409:4869): pid=4977 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16298 res=0 errno=0 [ 503.455507][ T30] audit: type=1800 audit(1785802802.469:4870): pid=4977 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=305587 res=0 errno=0 [ 503.502145][ T30] audit: type=1800 audit(1785802802.469:4871): pid=7275 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="type" dev="sysfs" ino=305592 res=0 errno=0 [ 503.540715][ T30] audit: type=1800 audit(1785802802.539:4872): pid=4977 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16298 res=0 errno=0 [ 503.608584][ T30] audit: type=1800 audit(1785802802.629:4873): pid=4977 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16298 res=0 errno=0 [ 503.674795][ T30] audit: type=1800 audit(1785802802.659:4874): pid=4977 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=305671 res=0 errno=0 [ 503.700002][T23514] A link change request failed with some changes committed already. Interface eth0 may have been left with an inconsistent configuration, please check. [ 503.747640][ T30] audit: type=1800 audit(1785802802.679:4875): pid=7275 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="type" dev="sysfs" ino=305676 res=0 errno=0 [ 503.811672][ T30] audit: type=1800 audit(1785802802.809:4876): pid=4977 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16298 res=0 errno=0 [ 504.082647][T21465] usb 9-1: new high-speed USB device number 3 using dummy_hcd [ 504.284683][T21465] usb 9-1: config 220 has an invalid interface number: 76 but max is 2 [ 504.295315][T21465] usb 9-1: config 220 contains an unexpected descriptor of type 0x2, skipping [ 504.305791][T21465] usb 9-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config [ 504.348323][T21465] usb 9-1: config 220 has no interface number 2 [ 504.378365][T21465] usb 9-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12 [ 504.415058][T21465] usb 9-1: config 220 interface 0 has no altsetting 0 [ 504.421998][T21465] usb 9-1: config 220 interface 76 has no altsetting 0 [ 504.430262][T21465] usb 9-1: config 220 interface 1 has no altsetting 0 [ 504.441691][T21465] usb 9-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 504.457480][T21465] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 504.466321][T21465] usb 9-1: Product: syz [ 504.470665][T21465] usb 9-1: Manufacturer: syz [ 504.476711][T21465] usb 9-1: SerialNumber: syz [ 504.483094][T23542] block nbd3: server does not support multiple connections per device. [ 504.507144][T23542] block nbd3: shutting down sockets [ 504.990854][T23561] overlayfs: upper fs does not support tmpfile. [ 505.143565][T23567] zram0: detected capacity change from 8 to 0 [ 505.525506][T23581] binder: BC_ACQUIRE_RESULT not supported [ 505.543016][T23581] binder: 23579:23581 ioctl c0306201 2000000004c0 returned -22 [ 505.846158][T23593] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 505.853444][T23593] IPv6: NLM_F_CREATE should be set when creating new route [ 505.860655][T23593] IPv6: NLM_F_CREATE should be set when creating new route [ 506.092896][T21465] kernel read not supported for file /dsp1 (pid: 21465 comm: kworker/1:3) [ 506.347669][T23609] netlink: 'syz.0.7182': attribute type 32 has an invalid length. [ 506.540621][T23593] tipc: Resetting bearer [ 506.916866][ T5717] usb 9-1: USB disconnect, device number 3 [ 507.079645][T23624] tmpfs: Invalid gid '0x00000000ffffffff' [ 507.392035][T23593] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 507.444762][T23593] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 507.673009][ T5801] usb 9-1: new high-speed USB device number 4 using dummy_hcd [ 507.843046][ T5801] usb 9-1: Using ep0 maxpacket: 8 [ 507.859514][ T5801] usb 9-1: New USB device found, idVendor=047d, idProduct=5003, bcdDevice=2f.8c [ 507.879505][ T5801] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 507.900594][ T5801] usb 9-1: Product: syz [ 507.910687][ T5801] usb 9-1: Manufacturer: syz [ 507.920786][ T5801] usb 9-1: SerialNumber: syz [ 508.182803][T23617] netlink: 12 bytes leftover after parsing attributes in process `syz.7.7185'. [ 508.219037][T23633] team0: No ports can be present during mode change [ 508.258274][ T7871] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 508.291650][ T7871] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 508.321299][ T7871] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 508.340220][ T30] kauditd_printk_skb: 39 callbacks suppressed [ 508.340235][ T30] audit: type=1800 audit(1785802807.359:4916): pid=4977 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16175 res=0 errno=0 [ 508.385787][ T7871] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 508.412945][T18137] Bluetooth: hci0: Zero size dump init pkt [ 508.670110][ T30] audit: type=1800 audit(1785802807.679:4917): pid=4977 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16175 res=0 errno=0 [ 508.806856][ T30] audit: type=1800 audit(1785802807.819:4918): pid=4977 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16175 res=0 errno=0 [ 508.903630][T23667] netlink: 8 bytes leftover after parsing attributes in process `syz.0.7208'. [ 508.913332][T23667] netlink: 12 bytes leftover after parsing attributes in process `syz.0.7208'. [ 508.961025][ T30] audit: type=1800 audit(1785802807.979:4919): pid=4977 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16175 res=0 errno=0 [ 509.073494][ T30] audit: type=1800 audit(1785802808.089:4920): pid=23670 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.7.7209" name="busnum" dev="sysfs" ino=26645 res=0 errno=0 [ 509.160755][ T30] audit: type=1800 audit(1785802808.179:4921): pid=4977 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16175 res=0 errno=0 [ 509.316297][T23680] netlink: 8 bytes leftover after parsing attributes in process `syz.0.7215'. [ 509.339410][ T30] audit: type=1800 audit(1785802808.359:4922): pid=4977 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16175 res=0 errno=0 [ 509.347510][T23680] netlink: 4 bytes leftover after parsing attributes in process `syz.0.7215'. [ 509.504616][ T30] audit: type=1800 audit(1785802808.529:4923): pid=4977 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16175 res=0 errno=0 [ 509.587499][ T30] audit: type=1326 audit(1785802808.609:4924): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23691 comm="syz.0.7219" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f4276d9e019 code=0x0 [ 509.658416][ T30] audit: type=1800 audit(1785802808.659:4925): pid=4977 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16175 res=0 errno=0 [ 509.740747][T23699] netlink: 116 bytes leftover after parsing attributes in process `syz.3.7222'. [ 509.921978][T23711] nicvf0: entered promiscuous mode [ 510.132981][ T5702] usb 6-1: new high-speed USB device number 22 using dummy_hcd [ 510.294877][ T5702] usb 6-1: unable to get BOS descriptor or descriptor too short [ 510.310071][T23730] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 510.325269][ T5702] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 510.339880][ T5702] usb 6-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 510.350290][ T5702] usb 6-1: too many endpoints for config 1 interface 1 altsetting 76: 188, using maximum allowed: 30 [ 510.367697][ T5702] usb 6-1: config 1 interface 1 altsetting 76 has 0 endpoint descriptors, different from the interface descriptor's value: 188 [ 510.381820][ T5702] usb 6-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 0, changing to 7 [ 510.399118][ T5702] usb 6-1: config 1 interface 1 has no altsetting 0 [ 510.423718][ T5702] usb 6-1: string descriptor 0 read error: -22 [ 510.430827][ T5702] usb 6-1: New USB device found, idVendor=21b4, idProduct=0081, bcdDevice= 0.40 [ 510.431817][ T1642] usb 9-1: USB disconnect, device number 4 [ 510.440810][ T5702] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 511.117285][T23774] netlink: 16 bytes leftover after parsing attributes in process `syz.0.7258'. [ 511.123825][T23775] openvswitch: netlink: Missing key (keys=c0, expected=480) [ 511.267311][T21465] kernel write not supported for file /input/mice (pid: 21465 comm: kworker/1:3) [ 511.389869][T23789] netlink: 28 bytes leftover after parsing attributes in process `syz.8.7265'. [ 511.409690][T23789] netlink: 32 bytes leftover after parsing attributes in process `syz.8.7265'. [ 511.430493][T23789] netlink: 28 bytes leftover after parsing attributes in process `syz.8.7265'. [ 512.076828][T23825] loop5: detected capacity change from 0 to 7 [ 512.115471][ C0] blk_print_req_error: 25 callbacks suppressed [ 512.115487][ C0] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x880700 phys_seg 1 prio class 2 [ 512.139497][ C0] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 512.149171][ C0] buffer_io_error: 25 callbacks suppressed [ 512.149186][ C0] Buffer I/O error on dev loop5, logical block 0, async page read [ 512.188232][ C0] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 512.197897][ C0] Buffer I/O error on dev loop5, logical block 0, async page read [ 512.210756][ C0] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 512.220415][ C0] Buffer I/O error on dev loop5, logical block 0, async page read [ 512.239414][ C0] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 512.249069][ C0] Buffer I/O error on dev loop5, logical block 0, async page read [ 512.264061][ C0] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 512.273722][ C0] Buffer I/O error on dev loop5, logical block 0, async page read [ 512.303878][T23837] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 512.397094][T23843] bond1: ARP target 9.0.0.0 is already present [ 512.405163][T23843] bond1: option arp_ip_target: invalid value (9) [ 512.413906][T23843] bond1 (unregistering): Released all slaves [ 512.603524][ T187] usb 9-1: new high-speed USB device number 5 using dummy_hcd [ 512.753385][ T187] usb 9-1: Using ep0 maxpacket: 16 [ 512.759683][ T187] usb 9-1: config 0 interface 0 altsetting 64 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 512.771642][ T187] usb 9-1: config 0 interface 0 has no altsetting 0 [ 512.779089][ T187] usb 9-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 512.788798][ T187] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 512.901359][ T1642] usb 6-1: USB disconnect, device number 22 [ 513.260644][T23861] __nla_validate_parse: 1 callbacks suppressed [ 513.260663][T23861] netlink: 24 bytes leftover after parsing attributes in process `syz.7.7298'. [ 513.365632][ T30] kauditd_printk_skb: 51 callbacks suppressed [ 513.365649][ T30] audit: type=1800 audit(1785802812.389:4977): pid=4977 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16175 res=0 errno=0 [ 513.429205][ T30] audit: type=1800 audit(1785802812.449:4978): pid=23870 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.7.7303" name="console" dev="sysfs" ino=12563 res=0 errno=0 [ 513.479015][ T30] audit: type=1800 audit(1785802812.489:4979): pid=4977 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15929 res=0 errno=0 [ 513.541765][ T30] audit: type=1800 audit(1785802812.549:4980): pid=4977 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16175 res=0 errno=0 [ 513.579334][ T30] audit: type=1800 audit(1785802812.589:4981): pid=4977 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15929 res=0 errno=0 [ 513.673765][ T30] audit: type=1800 audit(1785802812.689:4982): pid=4977 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15929 res=0 errno=0 [ 513.711943][ T30] audit: type=1400 audit(1785802812.729:4983): avc: denied { write } for pid=23883 comm="syz.5.7310" name="functions" dev="configfs" ino=73273 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 513.772489][ T30] audit: type=1800 audit(1785802812.779:4984): pid=4977 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=306693 res=0 errno=0 [ 513.854199][ T30] audit: type=1800 audit(1785802812.819:4985): pid=4977 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16175 res=0 errno=0 [ 513.879422][ T30] audit: type=1800 audit(1785802812.859:4986): pid=4977 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15929 res=0 errno=0 [ 513.957840][ T1642] hid-generic 0000:0000:0000.003F: unknown main item tag 0x0 [ 513.957880][ T1642] hid-generic 0000:0000:0000.003F: unexpected long global item [ 513.958385][ T1642] hid-generic 0000:0000:0000.003F: probe with driver hid-generic failed with error -22 [ 514.423526][T23915] netlink: 'syz.7.7324': attribute type 2 has an invalid length. [ 514.474094][T23917] loop6: detected capacity change from 0 to 524288000 [ 514.499858][T23917] loop6: detected capacity change from 524288000 to 0 [ 514.784706][T23923] trusted_key: encrypted_key: keyword 'load' not allowed when called from .update method [ 515.070646][T23935] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 515.079984][T23935] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 515.086512][T23935] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 515.092971][T23935] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 515.099434][T23935] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 515.105881][T23935] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 515.114408][T23935] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 515.120846][T23935] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 515.127354][T23935] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 515.400682][ T1642] usb 9-1: USB disconnect, device number 5 [ 515.696705][T23975] 9pnet_virtio: no channels available for device ./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa [ 515.703109][T23975] @0: renamed from bond_slave_1 (while UP) [ 516.865495][T24035] netlink: 12 bytes leftover after parsing attributes in process `syz.8.7381'. [ 517.136771][T24050] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 517.423109][ T187] usb 9-1: new high-speed USB device number 6 using dummy_hcd [ 517.590176][ T187] usb 9-1: New USB device found, idVendor=1a86, idProduct=7522, bcdDevice=35.36 [ 517.613642][ T187] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 517.621696][ T187] usb 9-1: Product: syz [ 517.649350][ T187] usb 9-1: Manufacturer: syz [ 517.665470][ T187] usb 9-1: SerialNumber: syz [ 518.100402][T24096] netlink: 'syz.5.7410': attribute type 39 has an invalid length. [ 518.376575][T18137] Bluetooth: hci5: command 0x0406 tx timeout [ 518.377308][ T30] kauditd_printk_skb: 55 callbacks suppressed [ 518.377319][ T30] audit: type=1800 audit(1785802817.399:5042): pid=4977 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16175 res=0 errno=0 [ 518.386502][T18137] Bluetooth: hci6: command 0x0405 tx timeout [ 518.445207][ T30] audit: type=1800 audit(1785802817.459:5043): pid=4977 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15929 res=0 errno=0 [ 518.560740][T24112] blkio.reset_stats is deprecated [ 518.616529][T24114] netlink: 4 bytes leftover after parsing attributes in process `syz.3.7418'. [ 518.645156][ T30] audit: type=1800 audit(1785802817.669:5044): pid=4977 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15929 res=0 errno=0 [ 518.670664][T24116] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 518.673475][T24114] netlink: 4 bytes leftover after parsing attributes in process `syz.3.7418'. [ 518.677935][T24116] IPv6: NLM_F_CREATE should be set when creating new route [ 518.694028][T24116] IPv6: NLM_F_CREATE should be set when creating new route [ 518.733711][ T30] audit: type=1800 audit(1785802817.749:5045): pid=4977 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16175 res=0 errno=0 [ 518.828481][T24116] bridge0: port 2(bridge_slave_1) entered disabled state [ 518.834563][ T30] audit: type=1800 audit(1785802817.859:5046): pid=4977 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16175 res=0 errno=0 [ 518.835952][T24116] bridge0: port 1(bridge_slave_0) entered disabled state [ 518.895789][ T30] audit: type=1800 audit(1785802817.909:5047): pid=24122 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.7.7422" name="new_id" dev="sysfs" ino=25169 res=0 errno=0 [ 518.952005][T24124] ALSA: mixer_oss: invalid OSS volume '' [ 518.960906][ T30] audit: type=1800 audit(1785802817.979:5048): pid=4977 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16175 res=0 errno=0 [ 518.973069][T24124] ALSA: mixer_oss: invalid OSS volume '' [ 518.998022][T24124] ALSA: mixer_oss: invalid OSS volume 'b"(CyVk߯ѡ=&' [ 519.000346][T24116] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 519.007358][T24124] ALSA: mixer_oss: invalid OSS volume 'L!\c=*' [ 519.018073][T24116] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 519.023981][T24124] ALSA: mixer_oss: invalid OSS volume '6]}rg06uv`E]' [ 519.041564][T24124] ALSA: mixer_oss: invalid OSS volume '5yMv^L hU#' [ 519.051505][T24124] ALSA: mixer_oss: invalid OSS volume 'ah8g!{$Icl+2)ZC' [ 519.060893][T24124] ALSA: mixer_oss: invalid OSS volume 'BA>3w(*7' [ 519.068927][T24124] ALSA: mixer_oss: invalid OSS volume '/A/' [ 519.075814][T24124] ALSA: mixer_oss: invalid OSS volume '>7' [ 519.082085][T24124] ALSA: mixer_oss: invalid OSS volume 'o)[dLLUN.S4?' [ 519.095039][T24124] ALSA: mixer_oss: invalid OSS volume 'b6ʽ83>!,[߉1\M' [ 519.104791][T24124] ALSA: mixer_oss: invalid OSS volume '' [ 519.110468][T24124] ALSA: mixer_oss: invalid OSS volume '' [ 519.116965][T24124] ALSA: mixer_oss: invalid OSS volume '' [ 519.189128][T21465] syz1: Port: 1 Link DOWN [ 519.195237][ T7871] netdevsim netdevsim5 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 519.207240][ T7871] netdevsim netdevsim5 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 519.227704][ T7871] netdevsim netdevsim5 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 519.236911][ T7871] netdevsim netdevsim5 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 519.307722][ T30] audit: type=1800 audit(1785802818.329:5049): pid=4977 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15929 res=0 errno=0 [ 519.357981][ T30] audit: type=1800 audit(1785802818.379:5050): pid=24130 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.5.7425" name="interface_authorized_default" dev="sysfs" ino=26685 res=0 errno=0 [ 519.462158][ T30] audit: type=1800 audit(1785802818.479:5051): pid=4977 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15929 res=0 errno=0 [ 519.615638][T24141] program syz.5.7430 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 519.893913][T24152] Failed to get privilege flags for destination (handle=0x2:0xfffffffe) [ 520.228964][ T187] usb 9-1: USB disconnect, device number 6 [ 520.870645][T24208] block2mtd: error: cannot open device [ 521.305519][T24241] team0: Device wg0 is of different type [ 521.323246][T24241] net_ratelimit: 4 callbacks suppressed [ 521.323262][T24241] A link change request failed with some changes committed already. Interface wg0 may have been left with an inconsistent configuration, please check. [ 521.383025][ T9] usb 9-1: new high-speed USB device number 7 using dummy_hcd [ 521.564208][ T9] usb 9-1: Using ep0 maxpacket: 8 [ 521.574638][ T9] usb 9-1: config 0 has an invalid interface number: 55 but max is 0 [ 521.592238][ T9] usb 9-1: config 0 has no interface number 0 [ 521.609399][ T9] usb 9-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 521.631770][ T9] usb 9-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B [ 521.666715][ T9] usb 9-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 521.690883][ T9] usb 9-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 521.723223][ T9] usb 9-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 521.740236][ T9] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 522.014606][T24262] i2c i2c-0: new_device: Invalid device name [ 522.641231][T24286] SELinux: failed to load policy [ 522.801762][T24292] : renamed from vlan0 [ 523.331211][T24314] netlink: 24 bytes leftover after parsing attributes in process `syz.0.7510'. [ 523.405596][ T30] kauditd_printk_skb: 48 callbacks suppressed [ 523.405613][ T30] audit: type=1800 audit(1785802822.429:5100): pid=4977 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15929 res=0 errno=0 [ 523.551261][ T30] audit: type=1800 audit(1785802822.569:5101): pid=4977 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15929 res=0 errno=0 [ 523.644474][ T30] audit: type=1800 audit(1785802822.659:5102): pid=4977 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15929 res=0 errno=0 [ 523.748095][ T30] audit: type=1800 audit(1785802822.769:5103): pid=4977 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15929 res=0 errno=0 [ 523.845031][ T30] audit: type=1800 audit(1785802822.869:5104): pid=4977 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15929 res=0 errno=0 [ 523.895495][ T30] audit: type=1400 audit(1785802822.919:5105): avc: denied { unmount } for pid=20869 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 523.943737][ T30] audit: type=1800 audit(1785802822.969:5106): pid=4977 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15929 res=0 errno=0 [ 524.161855][ T5716] usb 9-1: USB disconnect, device number 7 [ 524.298984][ T30] audit: type=1400 audit(1785802823.319:5107): avc: denied { map } for pid=24364 comm="syz.8.7534" path="/dev/binderfs/binder0" dev="binder" ino=34 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 524.377369][T24370] netlink: 'syz.8.7536': attribute type 29 has an invalid length. [ 524.387418][T24370] netlink: 'syz.8.7536': attribute type 29 has an invalid length. [ 524.603037][ T31] INFO: task syz.4.5300:18450 blocked for more than 143 seconds. [ 524.614202][ T31] Tainted: G S L syzkaller #0 [ 524.632365][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 524.643356][ T31] task:syz.4.5300 state:D stack:27032 pid:18450 tgid:18449 ppid:5610 task_flags:0x400140 flags:0x00080002 [ 524.649252][T24381] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 524.655621][ T31] Call Trace: [ 524.662625][T24381] IPv6: NLM_F_CREATE should be set when creating new route [ 524.662648][T24381] IPv6: NLM_F_CREATE should be set when creating new route [ 524.700533][ T31] [ 524.710362][ T31] __schedule+0x125c/0x6730 [ 524.716543][ T31] ? do_raw_spin_lock+0x128/0x260 [ 524.724016][ T31] ? __pfx___schedule+0x10/0x10 [ 524.728896][ T31] ? find_held_lock+0x2b/0x80 [ 524.733858][ T31] ? schedule+0x225/0x2c0 [ 524.738495][ T31] schedule+0xdd/0x2c0 [ 524.742842][ T31] schedule_preempt_disabled+0x13/0x30 [ 524.748307][ T31] __mutex_lock+0xccc/0x1bd0 [ 524.753445][ T31] ? write_ports+0xa5/0xcc0 [ 524.758128][ T31] ? nfsctl_transaction_write+0xcd/0x1a0 [ 524.763967][ T31] ? ksys_write+0x12a/0x250 [ 524.768484][ T31] ? do_syscall_64+0x115/0x870 [ 524.773609][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 524.778657][ T31] ? write_ports+0xa5/0xcc0 [ 524.783309][ T31] ? __lock_acquire+0x49f/0x1a40 [ 524.788247][ T31] write_ports+0xa5/0xcc0 [ 524.792917][ T31] ? __pfx_write_ports+0x10/0x10 [ 524.797881][ T31] ? find_held_lock+0x2b/0x80 [ 524.802746][ T31] ? __might_fault+0xc5/0x140 [ 524.808579][ T31] ? __might_fault+0xc5/0x140 [ 524.814523][ T31] ? __pfx_write_ports+0x10/0x10 [ 524.819491][ T31] ? _copy_from_user+0x59/0xd0 [ 524.825576][ T31] ? __pfx_write_ports+0x10/0x10 [ 524.830540][ T31] nfsctl_transaction_write+0x106/0x1a0 [ 524.836429][ T31] vfs_write+0x2aa/0x1050 [ 524.840789][ T31] ? __pfx_nfsctl_transaction_write+0x10/0x10 [ 524.855671][ T30] audit: type=1800 audit(1785802823.879:5108): pid=4977 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15929 res=0 errno=0 [ 524.869297][ T31] ? __pfx_vfs_write+0x10/0x10 [ 524.885644][ T31] ? __fget_files+0x215/0x3d0 [ 524.890361][ T31] ? __fget_files+0x21f/0x3d0 [ 524.895339][ T31] ksys_write+0x12a/0x250 [ 524.899671][ T31] ? __pfx_ksys_write+0x10/0x10 [ 524.904545][ T31] do_syscall_64+0x115/0x870 [ 524.909138][ T31] ? clear_bhb_loop+0x40/0x90 [ 524.914201][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 524.920139][ T31] RIP: 0033:0x7fd706b9e019 [ 524.926789][ T31] RSP: 002b:00007fd707a95028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 524.935545][ T31] RAX: ffffffffffffffda RBX: 00007fd706e25fa0 RCX: 00007fd706b9e019 [ 524.943643][ T31] RDX: 0000000000000006 RSI: 00002000000000a0 RDI: 0000000000000003 [ 524.951610][ T31] RBP: 00007fd706c3500c R08: 0000000000000000 R09: 0000000000000000 [ 524.959869][ T31] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 524.967962][ T31] R13: 00007fd706e26038 R14: 00007fd706e25fa0 R15: 00007fff67289778 [ 524.976779][ T31] [ 524.979900][ T31] [ 524.979900][ T31] Showing all locks held in the system: [ 524.988306][ T31] 1 lock held by khungtaskd/31: [ 524.993670][ T31] #0: ffffffff8ebe8200 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x3d/0x184 [ 525.003991][ T31] 2 locks held by getty/5360: [ 525.008687][ T31] #0: ffff8880373d80a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x24/0x80 [ 525.019068][ T31] #1: ffffc900032332e8 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x419/0x14e0 [ 525.031753][ T31] 2 locks held by syz-executor/5611: [ 525.038618][ T31] #0: ffff8880673740d8 (&type->s_umount_key#86){+.+.}-{4:4}, at: deactivate_super+0xdf/0x110 [ 525.049362][ T31] #1: ffffffff8f072880 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_shutdown_threads+0x5b/0xf0 [ 525.059207][ T31] 2 locks held by kworker/1:7/5750: [ 525.064439][ T31] #0: ffff88801bc0f140 ((wq_completion)events){+.+.}-{0:0}, at: process_one_work+0x12b1/0x1940 [ 525.075235][ T31] #1: ffffc9000459fd08 ((work_completion)(&m->mpeg_thread)){+.+.}-{0:0}, at: process_one_work+0x988/0x1940 [ 525.086873][ T31] 2 locks held by syz-executor/10251: [ 525.092252][ T31] #0: ffff88807a82c0d8 (&type->s_umount_key#86){+.+.}-{4:4}, at: deactivate_super+0xdf/0x110 [ 525.102906][ T31] #1: ffffffff8f072880 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_shutdown_threads+0x5b/0xf0 [ 525.112859][ T31] 3 locks held by syz.7.5003/17785: [ 525.118059][ T31] #0: ffff88807622e9b0 (&f->f_pos_lock){+.+.}-{4:4}, at: fdget_pos+0x2aa/0x380 [ 525.127198][ T31] #1: ffff888051298450 (sb_writers#25){.+.+}-{0:0}, at: ksys_write+0x12a/0x250 [ 525.137644][ T31] #2: ffffffff8f072880 (nfsd_mutex){+.+.}-{4:4}, at: write_threads+0x278/0x570 [ 525.146872][ T31] 3 locks held by syz.4.5300/18450: [ 525.152067][ T31] #0: ffff88801d68e9b0 (&f->f_pos_lock){+.+.}-{4:4}, at: fdget_pos+0x2aa/0x380 [ 525.161544][ T31] #1: ffff888055496450 (sb_writers#25){.+.+}-{0:0}, at: ksys_write+0x12a/0x250 [ 525.171087][ T31] #2: ffffffff8f072880 (nfsd_mutex){+.+.}-{4:4}, at: write_ports+0xa5/0xcc0 [ 525.180187][ T31] 2 locks held by syz-executor/18889: [ 525.185592][ T31] #0: ffff88804f4fa0d8 (&type->s_umount_key#86){+.+.}-{4:4}, at: deactivate_super+0xdf/0x110 [ 525.196105][ T31] #1: ffffffff8f072880 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_shutdown_threads+0x5b/0xf0 [ 525.205782][ T31] 2 locks held by syz-executor/18973: [ 525.211177][ T31] #0: ffff8880278160d8 (&type->s_umount_key#86){+.+.}-{4:4}, at: deactivate_super+0xdf/0x110 [ 525.221713][ T31] #1: ffffffff8f072880 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_shutdown_threads+0x5b/0xf0 [ 525.231347][ T31] 2 locks held by syz.8.7541/24381: [ 525.237556][ T31] #0: ffffffff90aa0200 (rtnl_mutex){+.+.}-{4:4}, at: rtnl_newlink+0x8bb/0x2380 [ 525.247267][ T31] #1: ffffffff8ebf3ca8 (rcu_state.exp_mutex){+.+.}-{4:4}, at: exp_funnel_lock+0x27f/0x3c0 [ 525.257868][ T31] [ 525.260216][ T31] ============================================= [ 525.260216][ T31] [ 525.271857][ T31] NMI backtrace for cpu 1 [ 525.271875][ T31] CPU: 1 UID: 0 PID: 31 Comm: khungtaskd Tainted: G S L syzkaller #0 PREEMPT(full) [ 525.271896][ T31] Tainted: [S]=CPU_OUT_OF_SPEC, [L]=SOFTLOCKUP [ 525.271902][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 525.271910][ T31] Call Trace: [ 525.271916][ T31] [ 525.271922][ T31] dump_stack_lvl+0x100/0x190 [ 525.271945][ T31] nmi_cpu_backtrace.cold+0x12d/0x151 [ 525.271966][ T31] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 525.271987][ T31] nmi_trigger_cpumask_backtrace+0x21c/0x2a0 [ 525.272008][ T31] sys_info+0x141/0x190 [ 525.272031][ T31] watchdog+0xcb1/0x1030 [ 525.272055][ T31] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 525.272073][ T31] ? __pfx_watchdog+0x10/0x10 [ 525.272089][ T31] ? __kthread_parkme+0x18c/0x230 [ 525.272113][ T31] ? kthread+0x13a/0x450 [ 525.272128][ T31] ? __pfx_watchdog+0x10/0x10 [ 525.272146][ T31] kthread+0x370/0x450 [ 525.272161][ T31] ? __pfx_kthread+0x10/0x10 [ 525.272179][ T31] ret_from_fork+0x72b/0xd50 [ 525.272204][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 525.272229][ T31] ? __switch_to+0x800/0x10f0 [ 525.272247][ T31] ? __pfx_kthread+0x10/0x10 [ 525.272263][ T31] ret_from_fork_asm+0x1a/0x30 [ 525.272295][ T31] [ 525.272301][ T31] Sending NMI from CPU 1 to CPUs 0: [ 525.277991][T24381] bridge0: port 2(bridge_slave_1) entered disabled state [ 525.287369][ C0] NMI backtrace for cpu 0 [ 525.287384][ C0] CPU: 0 UID: 0 PID: 24381 Comm: syz.8.7541 Tainted: G S L syzkaller #0 PREEMPT(full) [ 525.287406][ C0] Tainted: [S]=CPU_OUT_OF_SPEC, [L]=SOFTLOCKUP [ 525.287412][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 525.287421][ C0] RIP: 0010:write_comp_data+0x10/0x90 [ 525.287442][ C0] Code: 0f 1f 84 00 00 00 00 00 66 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 65 8b 05 99 22 5a 12 49 89 f8 49 89 f1 49 89 d2 <65> 48 8b 3d 70 22 5a 12 a9 00 01 ff 00 74 1b f6 c4 01 74 07 a9 00 [ 525.287456][ C0] RSP: 0018:ffffc9000345e3f8 EFLAGS: 00000202 [ 525.287468][ C0] RAX: 0000000000000202 RBX: 0000000000000075 RCX: ffffffff8bb77e79 [ 525.287478][ C0] RDX: 0000000000000075 RSI: 000000000000002e RDI: 0000000000000001 [ 525.287487][ C0] RBP: ffffc9000345e4a0 R08: 0000000000000001 R09: 000000000000002e [ 525.287496][ C0] R10: 0000000000000075 R11: 000000000008cdd8 R12: 0000000000000075 [ 525.287504][ C0] R13: ffffffff8bd08d03 R14: ffffc9000345e530 R15: 0000000000000045 [ 525.287514][ C0] FS: 00007fba965856c0(0000) GS:ffff888123dd8000(0000) knlGS:0000000000000000 [ 525.287528][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 525.287537][ C0] CR2: 00007f80b49f14b8 CR3: 000000009bdee000 CR4: 00000000003526f0 [ 525.287546][ C0] DR0: 0000000002000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 525.287555][ C0] DR3: 0000000000000000 DR6: 00000000ffff0ff0 DR7: 0000000000000600 [ 525.287564][ C0] Call Trace: [ 525.287569][ C0] [ 525.287574][ C0] format_decode+0x3c9/0xdd0 [ 525.287590][ C0] ? __pfx_format_decode+0x10/0x10 [ 525.287607][ C0] vsnprintf+0x1c0/0x1300 [ 525.287625][ C0] ? __pfx_vsnprintf+0x10/0x10 [ 525.287642][ C0] ? __asan_memcpy+0x3c/0x60 [ 525.287658][ C0] snprintf+0xc7/0x100 [ 525.287673][ C0] ? __pfx_snprintf+0x10/0x10 [ 525.287687][ C0] ? __pfx_sprintf+0x10/0x10 [ 525.287704][ C0] ? get_data+0x3b6/0x500 [ 525.287723][ C0] info_print_prefix+0x134/0x350 [ 525.287740][ C0] ? __pfx_info_print_prefix+0x10/0x10 [ 525.287757][ C0] ? __pfx__prb_read_valid+0x10/0x10 [ 525.287775][ C0] record_print_text+0x143/0x3c0 [ 525.287792][ C0] ? desc_read_finalized_seq+0x131/0x1d0 [ 525.287810][ C0] ? __pfx_record_print_text+0x10/0x10 [ 525.287828][ C0] ? __pfx_prb_read_valid+0x10/0x10 [ 525.287847][ C0] printk_get_next_message+0x2d1/0x6c0 [ 525.287873][ C0] ? __pfx_printk_get_next_message+0x10/0x10 [ 525.287895][ C0] ? lock_acquire+0x1b9/0x370 [ 525.287914][ C0] ? lock_acquire+0x1b9/0x370 [ 525.287934][ C0] console_flush_one_record+0x67c/0xe50 [ 525.287956][ C0] ? __pfx_console_flush_one_record+0x10/0x10 [ 525.287976][ C0] ? __hrtimer_rearm_deferred+0x23c/0x720 [ 525.287993][ C0] ? is_printk_cpu_sync_owner+0x32/0x40 [ 525.288009][ C0] console_unlock+0x103/0x260 [ 525.288028][ C0] ? __pfx_console_unlock+0x10/0x10 [ 525.288048][ C0] ? lock_acquire+0xc0/0x370 [ 525.288067][ C0] vprintk_emit+0x407/0x6b0 [ 525.288088][ C0] ? __pfx_vprintk_emit+0x10/0x10 [ 525.288111][ C0] _printk+0xcf/0x110 [ 525.288124][ C0] ? __pfx__printk+0x10/0x10 [ 525.288136][ C0] ? queue_work_on+0x11b/0x1e0 [ 525.288151][ C0] ? queue_work_on+0x141/0x1e0 [ 525.288166][ C0] ? switchdev_deferred_enqueue+0x243/0x2d0 [ 525.288185][ C0] br_set_state+0x386/0x620 [ 525.288206][ C0] ? __pfx_br_set_state+0x10/0x10 [ 525.288227][ C0] ? do_raw_spin_lock+0x128/0x260 [ 525.288245][ C0] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 525.288266][ C0] br_stp_disable_port+0x65/0x1e0 [ 525.288280][ C0] br_stp_disable_bridge+0xca/0x180 [ 525.288295][ C0] ? __pfx_br_dev_stop+0x10/0x10 [ 525.288308][ C0] br_dev_stop+0x26/0x1b0 [ 525.288322][ C0] __dev_close_many+0x312/0x710 [ 525.288343][ C0] ? __pfx___dev_close_many+0x10/0x10 [ 525.288365][ C0] __dev_change_flags+0x307/0x850 [ 525.288383][ C0] ? __pfx___dev_change_flags+0x10/0x10 [ 525.288400][ C0] ? __pfx_validate_linkmsg+0x10/0x10 [ 525.288419][ C0] netif_change_flags+0x8d/0x160 [ 525.288436][ C0] do_setlink.isra.0+0x1ac4/0x3e60 [ 525.288456][ C0] ? stack_trace_save+0x8e/0xc0 [ 525.288472][ C0] ? __pfx_do_setlink.isra.0+0x10/0x10 [ 525.288492][ C0] ? __lock_acquire+0x49f/0x1a40 [ 525.288512][ C0] ? lock_acquire+0x1b9/0x370 [ 525.288529][ C0] ? rcu_is_watching+0x12/0xc0 [ 525.288549][ C0] ? trace_contention_end+0x126/0x160 [ 525.288567][ C0] ? __mutex_lock+0x26d/0x1bd0 [ 525.288584][ C0] ? rtnl_newlink+0x8bb/0x2380 [ 525.288603][ C0] ? __pfx___mutex_lock+0x10/0x10 [ 525.288620][ C0] ? rcu_is_watching+0x12/0xc0 [ 525.288639][ C0] ? cap_capable+0x107/0x430 [ 525.288662][ C0] rtnl_newlink+0x1b7e/0x2380 [ 525.288683][ C0] ? __pfx_rtnl_newlink+0x10/0x10 [ 525.288699][ C0] ? find_held_lock+0x2b/0x80 [ 525.288711][ C0] ? avc_has_perm_noaudit+0x11e/0x3b0 [ 525.288728][ C0] ? avc_has_perm_noaudit+0x11e/0x3b0 [ 525.288745][ C0] ? avc_has_perm_noaudit+0x145/0x3b0 [ 525.288766][ C0] ? __lock_acquire+0x49f/0x1a40 [ 525.288788][ C0] ? find_held_lock+0x2b/0x80 [ 525.288800][ C0] ? rtnetlink_rcv_msg+0x93a/0xe90 [ 525.288817][ C0] ? rtnetlink_rcv_msg+0x93a/0xe90 [ 525.288836][ C0] ? __pfx_rtnl_newlink+0x10/0x10 [ 525.288858][ C0] rtnetlink_rcv_msg+0x95e/0xe90 [ 525.288877][ C0] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 525.288901][ C0] ? ref_tracker_free+0x37e/0x6c0 [ 525.288922][ C0] netlink_rcv_skb+0x159/0x420 [ 525.288936][ C0] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 525.288955][ C0] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 525.288974][ C0] ? netlink_deliver_tap+0x1ae/0xcc0 [ 525.288989][ C0] netlink_unicast+0x585/0x850 [ 525.289004][ C0] ? __pfx_netlink_unicast+0x10/0x10 [ 525.289022][ C0] netlink_sendmsg+0x8b0/0xda0 [ 525.289039][ C0] ? __pfx_netlink_sendmsg+0x10/0x10 [ 525.289054][ C0] ? selinux_socket_sendmsg+0x198/0x2f0 [ 525.289076][ C0] ____sys_sendmsg+0xa4d/0xbe0 [ 525.289096][ C0] ? __pfx_netlink_sendmsg+0x10/0x10 [ 525.289111][ C0] ? __pfx_____sys_sendmsg+0x10/0x10 [ 525.289134][ C0] ? plist_check_list+0x1b8/0x280 [ 525.289146][ C0] ? plist_del+0x308/0x510 [ 525.289160][ C0] ___sys_sendmsg+0x190/0x1e0 [ 525.289175][ C0] ? __pfx____sys_sendmsg+0x10/0x10 [ 525.289187][ C0] ? __lock_acquire+0x49f/0x1a40 [ 525.289203][ C0] ? futex_wake+0x220/0x5e0 [ 525.289229][ C0] __sys_sendmsg+0x160/0x210 [ 525.289246][ C0] ? __pfx___sys_sendmsg+0x10/0x10 [ 525.289269][ C0] do_syscall_64+0x115/0x870 [ 525.289285][ C0] ? clear_bhb_loop+0x40/0x90 [ 525.289301][ C0] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 525.289315][ C0] RIP: 0033:0x7fba9579e019 [ 525.289327][ C0] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 525.289340][ C0] RSP: 002b:00007fba96585028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 525.289353][ C0] RAX: ffffffffffffffda RBX: 00007fba95a25fa0 RCX: 00007fba9579e019 [ 525.289363][ C0] RDX: 0000000000000000 RSI: 0000200000000040 RDI: 0000000000000004 [ 525.289372][ C0] RBP: 00007fba9583500c R08: 0000000000000000 R09: 0000000000000000 [ 525.289380][ C0] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 525.289388][ C0] R13: 00007fba95a26038 R14: 00007fba95a25fa0 R15: 00007ffe5c29a3f8 [ 525.289403][ C0] [ 525.290644][ T31] Kernel panic - not syncing: hung_task: blocked tasks [ 525.290658][ T31] CPU: 1 UID: 0 PID: 31 Comm: khungtaskd Tainted: G S L syzkaller #0 PREEMPT(full) [ 525.290682][ T31] Tainted: [S]=CPU_OUT_OF_SPEC, [L]=SOFTLOCKUP [ 525.290689][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 525.290698][ T31] Call Trace: [ 525.290704][ T31] [ 525.290711][ T31] dump_stack_lvl+0x100/0x190 [ 525.290733][ T31] vpanic+0x552/0x970 [ 525.290749][ T31] ? __pfx_vpanic+0x10/0x10 [ 525.290766][ T31] ? rcu_is_watching+0x12/0xc0 [ 525.290792][ T31] panic+0xd1/0xe0 [ 525.290807][ T31] ? __pfx_panic+0x10/0x10 [ 525.290826][ T31] ? nmi_trigger_cpumask_backtrace+0x1fa/0x2a0 [ 525.290843][ T31] ? nmi_trigger_cpumask_backtrace+0x260/0x2a0 [ 525.290860][ T31] ? nmi_trigger_cpumask_backtrace+0x26a/0x2a0 [ 525.290876][ T31] ? watchdog.cold+0x1ec/0x234 [ 525.290893][ T31] ? watchdog+0xcc1/0x1030 [ 525.290913][ T31] watchdog.cold+0x1fd/0x234 [ 525.290935][ T31] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 525.290954][ T31] ? __pfx_watchdog+0x10/0x10 [ 525.290973][ T31] ? __kthread_parkme+0x18c/0x230 [ 525.290998][ T31] ? kthread+0x13a/0x450 [ 525.291012][ T31] ? __pfx_watchdog+0x10/0x10 [ 525.291029][ T31] kthread+0x370/0x450 [ 525.291044][ T31] ? __pfx_kthread+0x10/0x10 [ 525.291061][ T31] ret_from_fork+0x72b/0xd50 [ 525.291083][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 525.291106][ T31] ? __switch_to+0x800/0x10f0 [ 525.291123][ T31] ? __pfx_kthread+0x10/0x10 [ 525.291140][ T31] ret_from_fork_asm+0x1a/0x30 [ 525.291172][ T31] [ 525.295744][ T31] Kernel Offset: disabled