last executing test programs: 38.4907469s ago: executing program 0 (id=188): socket$inet_tcp(0x2, 0x1, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x4004000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r1, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r0, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x80) mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) socket(0x400000000010, 0x3, 0x0) syz_usb_connect(0x0, 0x36, &(0x7f0000000540)=ANY=[@ANYBLOB="120141014813442024040075ee69010203010902"], 0x0) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000440)=@new_dev={0x4, 0x3c9, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x40}}}, &(0x7f0000000300)=0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = dup(r3) syz_ublk_setup_queues(r4, r2, &(0x7f0000000180)={0x0, 0xfffffffe, 0x0, 0xfffffffe, 0x1002f6}, &(0x7f0000000800)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0xe704, 0x40040, 0x1000002, 0x91}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x5c87, 0x20, 0x3, 0x3aa}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x1f70, 0x2, 0x40000001, 0x337}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x4, 0x200, 0x1, 0xffffffff}}], 0x1, 0x0, 0x0) 37.238059828s ago: executing program 0 (id=198): syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6) r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 37.182616637s ago: executing program 0 (id=199): r0 = creat(&(0x7f0000000280)='./file0\x00', 0xecf86c37d53049cc) r1 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r1, 0x10e, 0xc, &(0x7f0000000040)={0x802}, 0x10) sendmsg$nl_generic(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=ANY=[@ANYBLOB="1c0000004a00010200000000000000000a", @ANYRES8=r1, @ANYRES64=r0], 0x164}}, 0x0) write$binfmt_elf64(r0, &(0x7f0000000080)=ANY=[@ANYBLOB="7f454c4603000702810000000000000003003e00f9ffffff040100000000000040000000000000008b00000000000000330d000005003800030078000700090005000000a9350000090000000000000007000000000000000500000000000000eb5b00000000000001000000000000000900000000000000000000700100000009000000000000000900000000000000030000000000000009000000000000000000000000000007ffed01000000000000000000600600000003000000000000000800000000000000070000000000000004000000000000000000008000000000f9ffffffffffff"], 0xe8) lsetxattr$security_capability(&(0x7f00000001c0)='./file0\x00', &(0x7f0000000000), 0x0, 0x0, 0x0) r2 = socket$nl_audit(0x10, 0x3, 0x9) ioctl$sock_SIOCETHTOOL(r2, 0x8946, &(0x7f00000000c0)={'wg1\x00', &(0x7f0000000380)=@ethtool_rx_ntuple={0x35, {0x3, @tcp_ip4_spec={@empty, @multicast1, 0x4e22, 0x4e20, 0x28}, @tcp_ip4_spec={@private=0xa010102, @multicast2, 0x4e22, 0x4e24, 0x3}, 0x2, 0x7fff, 0x9, 0x10000, 0xfffffffffffffffe}}}) close(r0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpu.stat\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r3, 0x0) recvmmsg$unix(r3, 0x0, 0x0, 0x1, &(0x7f0000003c80)={0x0, 0x989680}) r4 = add_key$keyring(&(0x7f0000000380), &(0x7f0000000000)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffe) keyctl$chown(0x4, r4, 0xee01, 0x0) keyctl$setperm(0x5, r4, 0x172831) keyctl$KEYCTL_MOVE(0x3, r4, 0x0, 0x0, 0x0) execve(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) 37.182376437s ago: executing program 0 (id=200): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc\x00', 0x1ff) syz_clone(0x2000400, 0x0, 0xfffffebf, 0x0, 0x0, 0x0) r0 = getpgid(0x0) r1 = syz_pidfd_open(r0, 0x0) pidfd_send_signal(r1, 0x21, 0x0, 0x4) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f00000002c0)='pipefs\x00', 0x0, 0x0) chroot(&(0x7f0000000140)='./proc/mtrr\x00') r2 = openat$ttynull(0xffffffffffffff9c, &(0x7f0000000140), 0x140841, 0x0) ioctl$TIOCSTI(r2, 0x5412, &(0x7f0000000040)=0x13) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000030c0)=ANY=[], 0xe8}}, 0x800) mkdirat(0xffffffffffffff9c, &(0x7f0000001500)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000001500)='./dev\x00', &(0x7f0000001600)='devtmpfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./mnt\x00', 0x1ff) mount(&(0x7f00000000c0)=@filename='./dev/sda1\x00', &(0x7f0000000140)='./mnt\x00', &(0x7f0000000100)='ext4\x00', 0x8410, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpuset.effective_cpus\x00', 0x275a, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) chdir(&(0x7f0000000140)='./file0\x00') r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) ftruncate(r3, 0x8008976) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x13, r3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendto(r4, &(0x7f0000000140)="120000001200e7ef007b00000000000000a1", 0x12, 0x40000, 0x0, 0x0) recvmmsg(r4, &(0x7f0000006a40)=[{{0x0, 0x0, &(0x7f0000000180)=[{&(0x7f00000013c0)=""/4098, 0x1002}], 0x1}, 0x8}], 0x1, 0x10120, 0x0) r5 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x109040, 0x0) ioctl$TIOCSETD(r5, 0x5423, &(0x7f00000000c0)=0xf) ioctl$TCFLSH(r5, 0x540b, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x1fd) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f0000000100)='proc\x00', 0x0, 0x0) setxattr$incfs_metadata(&(0x7f00000001c0)='./proc/mtrr\x00', &(0x7f0000000200), &(0x7f0000000280)="0e85183db08dacc1b1e3695b8cdff32283ab0604a725f8ffe40243d42b5048821098b5f0520b8a69ebc163bd5be793cf7c27a086ae", 0x35, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000180)='./proc/thread-self/fail-nth\x00', 0x2, 0x2) 37.182304187s ago: executing program 0 (id=201): r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$UI_DEV_DESTROY(r0, 0x5502) (fail_nth: 3) 36.02220827s ago: executing program 0 (id=208): syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6) r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000018c0)={0x0, 0x0}) close_range(r0, 0xffffffffffffffff, 0x0) 36.02212022s ago: executing program 32 (id=208): syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6) r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000018c0)={0x0, 0x0}) close_range(r0, 0xffffffffffffffff, 0x0) 26.664179551s ago: executing program 1 (id=310): r0 = socket$inet_udp(0x2, 0x2, 0x0) getsockopt$IPT_SO_GET_ENTRIES(r0, 0x0, 0x41, &(0x7f00000003c0)=ANY=[@ANYBLOB="66696c748972000000000000000000000000000000000000000000000000000007000000f0a23923263408"], &(0x7f0000000200)=0x2f) r1 = openat$ttynull(0xffffffffffffff9c, &(0x7f0000000140), 0x82084, 0x0) ioctl$TCSETSF2(r1, 0x402c542d, &(0x7f00000003c0)={0xf8cc, 0x1ff, 0x4, 0x1, 0x7, "0272000000000500f100000000000000000004", 0x80000, 0x400}) ioctl$TIOCSTI(r1, 0x5412, &(0x7f0000000000)=0x2) getsockopt$EBT_SO_GET_INFO(r0, 0x0, 0x80, &(0x7f0000000040)={'broute\x00', 0x0, 0x0, 0x0, [0xff, 0x7a12, 0x9b, 0x3, 0xc0000000000, 0x6]}, &(0x7f00000000c0)=0x78) ioctl$AUTOFS_IOC_SETTIMEOUT(r0, 0x80049367, &(0x7f0000000000)=0x3) socket$inet_udp(0x2, 0x2, 0x0) (async) getsockopt$IPT_SO_GET_ENTRIES(r0, 0x0, 0x41, &(0x7f00000003c0)=ANY=[@ANYBLOB="66696c748972000000000000000000000000000000000000000000000000000007000000f0a23923263408"], &(0x7f0000000200)=0x2f) (async) openat$ttynull(0xffffffffffffff9c, &(0x7f0000000140), 0x82084, 0x0) (async) ioctl$TCSETSF2(r1, 0x402c542d, &(0x7f00000003c0)={0xf8cc, 0x1ff, 0x4, 0x1, 0x7, "0272000000000500f100000000000000000004", 0x80000, 0x400}) (async) ioctl$TIOCSTI(r1, 0x5412, &(0x7f0000000000)=0x2) (async) getsockopt$EBT_SO_GET_INFO(r0, 0x0, 0x80, &(0x7f0000000040)={'broute\x00', 0x0, 0x0, 0x0, [0xff, 0x7a12, 0x9b, 0x3, 0xc0000000000, 0x6]}, &(0x7f00000000c0)=0x78) (async) ioctl$AUTOFS_IOC_SETTIMEOUT(r0, 0x80049367, &(0x7f0000000000)=0x3) (async) 26.614079401s ago: executing program 1 (id=311): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc\x00', 0x1ff) openat(0xffffffffffffff9c, &(0x7f0000000440)='./file1\x00', 0x42, 0x0) openat$selinux_policy(0xffffff9c, &(0x7f0000001040), 0x0, 0x0) keyctl$join(0x1, &(0x7f0000000340)={'syz', 0x1}) openat$selinux_policy(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) 26.612056912s ago: executing program 1 (id=312): openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r0 = socket(0x10, 0x803, 0x0) recvmmsg(r0, &(0x7f0000000fc0)=[{{0x0, 0x0, &(0x7f0000000700)=[{&(0x7f0000002940)=""/4059, 0xfdb}, {&(0x7f00000007c0)=""/217, 0xd9}, {&(0x7f00000000c0)=""/121, 0x79}, {&(0x7f00000011c0)=""/4099, 0x1003}, {&(0x7f00000009c0)=""/250, 0xfa}, {&(0x7f0000000380)=""/282, 0x11a}, {&(0x7f00000002c0)=""/73, 0x49}, {&(0x7f00000001c0)=""/231, 0xe7}, {&(0x7f0000000500)=""/145, 0x91}], 0x9}, 0x7ff}, {{0x0, 0x0, 0x0}, 0x800}, {{0x0, 0x0, 0x0}, 0xa}, {{0x0, 0x0, 0x0}, 0x8}, {{0x0, 0x0, 0x0}, 0xc}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}, 0xe4f}, {{0x0, 0x0, 0x0}, 0xffffffff}], 0x8, 0x0, 0x0) 26.544459676s ago: executing program 1 (id=313): mkdir(&(0x7f00000020c0)='./file0\x00', 0x0) prctl$PR_SET_NO_NEW_PRIVS(0x26, 0x1) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r0, 0x800448f0, &(0x7f0000000080)={0xffffffffffffffff, 0x8, "afd2b7", 0x1, 0x8}) r1 = openat$selinux_attr(0xffffffffffffff9c, &(0x7f0000000180)='/proc/thread-self/attr/exec\x00', 0x2, 0x0) write$selinux_attr(r1, &(0x7f0000000100)='system_u:object_r:hugetlbfs_t:s0\x00', 0x1d) close(0xffffffffffffffff) execve(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) mount(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000180)='cgroup2\x00', 0x3000096, 0x0) chroot(&(0x7f0000000100)='./file0\x00') mount$bind(&(0x7f0000000040)='.\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x21d000, 0x0) pivot_root(&(0x7f0000000140)='./file0\x00', &(0x7f00000000c0)='./file0/../file0/../file0\x00') 26.544073926s ago: executing program 1 (id=315): r0 = socket$pptp(0x18, 0x1, 0x2) bind$pptp(r0, &(0x7f0000000140)={0x18, 0x2, {0xffff, @dev={0xac, 0x14, 0x14, 0x1c}}}, 0x1e) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$netlink(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000007d00)=[{&(0x7f0000000080)={0x18, 0x6a, 0x15, 0x8000000, 0xffffffff, "", [@generic="894150da2e"]}, 0x18}], 0x1}, 0x8000) r2 = add_key$user(&(0x7f0000000040), &(0x7f00000001c0)={'syz', 0x0}, &(0x7f0000000100)="389d", 0x2, 0xffffffffffffffff) keyctl$read(0xb, r2, &(0x7f0000000280)=""/130, 0x1001) connect$pptp(r0, &(0x7f0000000080)={0x18, 0x2, {0x4, @multicast1}}, 0x1e) 26.484693899s ago: executing program 1 (id=316): r0 = syz_usb_connect$cdc_ncm(0x6, 0x76, &(0x7f0000000140)=ANY=[@ANYRESDEC=0x0], 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) (async) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000340)={0x44, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x20, 0x80, 0x1c, {0x10, 0x10, 0x10, 0x10, 0x10, 0x10, 0x10, 0x10, 0x10, 0x10, 0x10, 0x10}}, 0x0, 0x0, 0x0, 0x0}) (async) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) (async) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) 26.463382333s ago: executing program 33 (id=316): r0 = syz_usb_connect$cdc_ncm(0x6, 0x76, &(0x7f0000000140)=ANY=[@ANYRESDEC=0x0], 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) (async) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000340)={0x44, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x20, 0x80, 0x1c, {0x10, 0x10, 0x10, 0x10, 0x10, 0x10, 0x10, 0x10, 0x10, 0x10, 0x10, 0x10}}, 0x0, 0x0, 0x0, 0x0}) (async) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) (async) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) 10.727632616s ago: executing program 5 (id=317): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)) mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000440)=@new_dev={0x4, 0x3c9, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x40}}}, 0x0) pipe2(&(0x7f0000000000), 0x800) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup(r0) syz_ublk_setup_queues(r1, 0x0, 0x0, &(0x7f0000000800)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0xe704, 0x8000, 0x1000002, 0x91}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x5c87, 0x20, 0x0, 0x7aa, 0x0, r1}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x1f70, 0x2, 0x40008001, 0x337}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x4, 0x4000, 0x1, 0xfffffffc, 0x0, r1}}], 0x1, 0x0, 0x0) r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x2, 0x7fff7ffc}]}) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r3, &(0x7f0000000200)={0xa, 0x4e20, 0x8, @remote, 0x4}, 0x1c) close_range(r2, 0xffffffffffffffff, 0x200000000000000) 8.916457065s ago: executing program 4 (id=383): sendmsg$IPCTNL_MSG_EXP_NEW(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000a00)={0x1a0, 0x0, 0x2, 0x301, 0x0, 0x0, {0x7, 0x0, 0x2}, [@CTA_EXPECT_NAT={0xe0, 0xa, 0x0, 0x1, [@CTA_EXPECT_NAT_TUPLE={0x70, 0x2, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x21}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x2}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, {0x14, 0x4, @mcast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x21}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @loopback}, {0x8, 0x2, @broadcast}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x3a}}]}, @CTA_EXPECT_NAT_TUPLE={0x64, 0x2, 0x0, 0x1, [@CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x4}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x88}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @mcast1}, {0x14, 0x4, @remote}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x6}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x1}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x84}}]}, @CTA_EXPECT_NAT_DIR={0x8, 0x1, 0x1, 0x0, 0x1}]}, @CTA_EXPECT_NAT={0x98, 0xa, 0x0, 0x1, [@CTA_EXPECT_NAT_TUPLE={0x68, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @private0={0xfc, 0x0, '\x00', 0x1}}, {0x14, 0x4, @loopback}}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x4}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x2}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x1}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @remote}, {0x8, 0x2, @multicast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x2f}}]}, @CTA_EXPECT_NAT_TUPLE={0x24, 0x2, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x11}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x21}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x2}]}, @CTA_EXPECT_NAT_DIR={0x8, 0x1, 0x1, 0x0, 0x1}]}, @CTA_EXPECT_FLAGS={0x8, 0x8, 0x1, 0x0, 0x1}, @CTA_EXPECT_HELP_NAME={0xa, 0x6, 'H.245\x00'}]}, 0x1a0}}, 0x10) r0 = socket(0x10, 0x803, 0x0) sendto(r0, &(0x7f00000006c0)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x321}, {&(0x7f0000000280)=""/85, 0x21}, {&(0x7f0000000fc0)=""/4096, 0x197}, {&(0x7f0000000580)=""/106, 0x659}, {&(0x7f0000000980)=""/73, 0xd}, {&(0x7f0000000200)=""/77, 0x69}, {&(0x7f00000007c0)=""/141, 0xc4}, {&(0x7f00000001c0)=""/17, 0x1d8}], 0x21, &(0x7f0000000600)=""/191, 0x41, 0xffa6}, 0x5}], 0x4000000000003b4, 0x2000, &(0x7f0000003700)={0x77359400}) 8.866357475s ago: executing program 4 (id=388): mkdirat(0xffffffffffffff9c, &(0x7f0000000640)='./dev\x00', 0x1ff) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, 0x0) r0 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r0, 0x1, 0x0) read$msr(0xffffffffffffffff, 0x0, 0x0) setsockopt$packet_int(0xffffffffffffffff, 0x107, 0xf, 0x0, 0x0) mount(0x0, &(0x7f0000000080)='./dev\x00', &(0x7f00000000c0)='devtmpfs\x00', 0x0, 0x0) sendmsg$DEVLINK_CMD_RATE_NEW(0xffffffffffffffff, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000000)={0x34, 0x0, 0x905, 0x0, 0x0, {0x24}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x34}}, 0x4) r1 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./dev/mapper/control\x00', 0x240, 0x310) write(0xffffffffffffffff, &(0x7f0000000000)="240000001a005f0214f9f4070009", 0xe) ioctl(r1, 0xc138fd02, &(0x7f0000000000)="0400000007c80000") 8.728479954s ago: executing program 4 (id=390): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000400), 0xffffffffffffffff) sendmsg$TIPC_NL_MEDIA_SET(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010029bd7000fddbdf250c0000000000"], 0x20}}, 0x24004084) socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$tipc2(&(0x7f0000000400), 0xffffffffffffffff) (async) sendmsg$TIPC_NL_MEDIA_SET(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010029bd7000fddbdf250c0000000000"], 0x20}}, 0x24004084) (async) 8.728303154s ago: executing program 5 (id=317): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)) mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000440)=@new_dev={0x4, 0x3c9, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x40}}}, 0x0) pipe2(&(0x7f0000000000), 0x800) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup(r0) syz_ublk_setup_queues(r1, 0x0, 0x0, &(0x7f0000000800)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0xe704, 0x8000, 0x1000002, 0x91}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x5c87, 0x20, 0x0, 0x7aa, 0x0, r1}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x1f70, 0x2, 0x40008001, 0x337}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x4, 0x4000, 0x1, 0xfffffffc, 0x0, r1}}], 0x1, 0x0, 0x0) r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x2, 0x7fff7ffc}]}) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r3, &(0x7f0000000200)={0xa, 0x4e20, 0x8, @remote, 0x4}, 0x1c) close_range(r2, 0xffffffffffffffff, 0x200000000000000) 7.000162746s ago: executing program 4 (id=391): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000580)=ANY=[@ANYBLOB="12011001000000084513083000000000000109022404010000a00009040000020300000009"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000080)={0x24, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="0022180000000501150825ff0904a1010901a1007508950109dc8102c0c0"], 0x0}, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000a00)={0x84, &(0x7f0000000340)={0x40, 0x12, 0x12, "e05a7bcf2395095e820a48b7cf0aa6eb3fc3"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r0, &(0x7f0000000200)={0x24, &(0x7f0000000000)={0x0, 0xb, 0xe2, {0xe2, 0x9, "bdb13995bf0a11ba6d08fe0162a3bf751cc0abadf7b8a104c74d0caba85765240bb409e838c4846035190d678cab1595e0d7c455da852d5747c67519397327fd8a7b877d540175a097f2d825732e8084e8f1ba5ad397870613837e445944e4e3720923039b612ebd001a080cbe11b832798f7e5523eae88557d4a093e89dd42ab36dc690ec26b68893b08c0aea23d710f77d82edd64702cbc500a5a109793d9023e6caae463669d137f9c8db5ef3c0085413f69f07057b3fa92d380edb682fe320ddb9da979016dbc7c909a52d8dd685aa4f9693e3cfe8277f351f0cffc518a6"}}, &(0x7f0000000100)={0x0, 0x3, 0x47, @string={0x47, 0x3, "4b9dcaea9966fd7ab37e89b0d71d621a9fa9790079c47fc72b740cfcc311cfd4e93cabfa93bd648b846f1c960a63cba57bb72d778badf4722c72c7c93114deac5020aec6cd"}}, &(0x7f0000000180)={0x0, 0x22, 0x1a, {[@global=@item_012={0x2, 0x1, 0xb, "ad2c"}, @local=@item_4={0x3, 0x2, 0x9, "5b4daaa9"}, @local=@item_4={0x3, 0x2, 0x2, "82cb1e7e"}, @main=@item_4={0x3, 0x0, 0x9, "57541b41"}, @global=@item_012={0x0, 0x1, 0xa}, @local=@item_012={0x1, 0x2, 0x5, "8b"}, @main=@item_012={0x1, 0x0, 0x9, "dd"}, @global=@item_012={0x2, 0x1, 0x4, "ed47"}]}}, &(0x7f00000001c0)={0x0, 0x21, 0x9, {0x9, 0x21, 0x7f, 0x6, 0x1, {0x22, 0xb97}}}}, &(0x7f0000000440)={0x2c, &(0x7f0000000240)={0x20, 0x31, 0xd7, "55d095518fd8b3f24d55f7cfb78e10a6c1c4c07ca6f8c48ac8676e055a1965f0bf73d9f3b3c2caee853fd8059e62efeea02aa66cb87be4543aad44ac78634d94333abaff9b38240baf1b23679cdb3ce1b290fee709c37f57add2fd3c5471df5891c48f2ac0b3a361f958f07c3bbcd113aed84c40792bfd22c0cfe31c378b1c7b3125daf98db7509dc9fa6884a49dc87a774bc4cd04048f47f4bd3e8d1aff75201d0f5c69a5871862e7a5da4a7ac85d77f0c12fad4e16c8a5f3940789cfb719466dbef16f7d7cceb9f7dab7b0ce43a1c84e83b65645bebb"}, &(0x7f0000000340)={0x0, 0xa, 0x1}, &(0x7f0000000380)={0x0, 0x8, 0x1, 0x9}, &(0x7f00000003c0)={0x20, 0x1, 0xf, "46f968c2cc3922b81a9f761eb3a201"}, &(0x7f0000000400)={0x20, 0x3, 0x1, 0x1}}) 6.64761314s ago: executing program 5 (id=317): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)) mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000440)=@new_dev={0x4, 0x3c9, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x40}}}, 0x0) pipe2(&(0x7f0000000000), 0x800) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup(r0) syz_ublk_setup_queues(r1, 0x0, 0x0, &(0x7f0000000800)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0xe704, 0x8000, 0x1000002, 0x91}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x5c87, 0x20, 0x0, 0x7aa, 0x0, r1}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x1f70, 0x2, 0x40008001, 0x337}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x4, 0x4000, 0x1, 0xfffffffc, 0x0, r1}}], 0x1, 0x0, 0x0) r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x2, 0x7fff7ffc}]}) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r3, &(0x7f0000000200)={0xa, 0x4e20, 0x8, @remote, 0x4}, 0x1c) close_range(r2, 0xffffffffffffffff, 0x200000000000000) 4.760931185s ago: executing program 2 (id=397): setns(0xc9, 0x0) r0 = socket(0x2, 0x3, 0xff) sendmmsg$inet(r0, 0x0, 0x0, 0x20000800) 4.741331269s ago: executing program 3 (id=398): sendmsg$inet(0xffffffffffffffff, &(0x7f0000000040)={&(0x7f00000006c0)={0x2, 0x4e21, @multicast2=0xe0000001}, 0x10, 0x0}, 0x4044040) r0 = socket$inet6(0xa, 0x5, 0xc42) setsockopt$inet6_tcp_TCP_REPAIR_WINDOW(r0, 0x6, 0x1d, &(0x7f0000000000)={0x5, 0x7, 0x4, 0x9, 0x6}, 0x14) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = dup(r1) syz_genetlink_get_family_id$tipc(&(0x7f0000000540), r1) sendmsg$TIPC_CMD_RESET_LINK_STATS(r2, &(0x7f0000000600)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000140)=ANY=[], 0x28}, 0x1, 0x0, 0x0, 0x24000084}, 0x80) sendto$inet6(r2, &(0x7f0000000080)="f2eb50ca4e3c0c43cad6965661ad9b858b23b6fbdb21aabe58c457f84744b595e47746fb4f7994fa7ecc2db611d492368e8ea5624acca8ac63ab5917aa8ce8", 0x3f, 0x8950, &(0x7f00000000c0)={0xa, 0x4e22, 0x93de, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x40}}, 0x2}, 0x1c) r3 = syz_open_dev$usbfs(&(0x7f0000000100), 0x76, 0x121bc1) ioctl$USBDEVFS_CLEAR_HALT(r3, 0xc0105502, &(0x7f0000000040)={0x1, 0x1}) 4.668547144s ago: executing program 2 (id=399): ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) openat$kvm(0xffffff9c, &(0x7f00000000c0), 0x800, 0x0) ioctl$KVM_SET_DEVICE_ATTR(0xffffffffffffffff, 0x4018aee1, &(0x7f0000000140)=@attr_arm64={0x0, 0x0, 0x0, &(0x7f0000000100)=0x4}) r0 = openat$kvm(0xffffff9c, &(0x7f0000000540), 0x8000, 0x0) ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0xc008ae88, &(0x7f0000000000)={0xfffff34, 0x0, [{0xf88e470f, 0xed}]}) setgroups(0x41b7, &(0x7f0000000180)=[0x0, 0x0, 0x0, 0x0, 0x0]) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x2, 0x9, 0xfffffffffffffffd, 0x77, 0x2, 0x2, 0x4002004c4, 0x1004, 0x8000000000000000, 0xc595, 0x0, 0x1, 0xffffffffffffffff, 0x2000000000000000, 0x5, 0x8d], 0xeeee8000, 0x2010d3}) ioctl$KVM_RUN(r2, 0xae80, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x42282, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x80102, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x10000000000000) 4.668388394s ago: executing program 3 (id=400): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000001500)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000001500)='./dev\x00', &(0x7f0000001600)='devtmpfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./mnt\x00', 0x1ff) mount(&(0x7f00000000c0)=@filename='./dev/sda1\x00', &(0x7f0000000140)='./mnt\x00', &(0x7f0000000100)='ext4\x00', 0x8410, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0xc0286687, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./bus\x00', 0x4d) rename(&(0x7f0000000180)='./bus\x00', &(0x7f00000001c0)='./file0\x00') 4.602216208s ago: executing program 5 (id=317): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)) mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000440)=@new_dev={0x4, 0x3c9, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x40}}}, 0x0) pipe2(&(0x7f0000000000), 0x800) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup(r0) syz_ublk_setup_queues(r1, 0x0, 0x0, &(0x7f0000000800)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0xe704, 0x8000, 0x1000002, 0x91}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x5c87, 0x20, 0x0, 0x7aa, 0x0, r1}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x1f70, 0x2, 0x40008001, 0x337}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x4, 0x4000, 0x1, 0xfffffffc, 0x0, r1}}], 0x1, 0x0, 0x0) r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x2, 0x7fff7ffc}]}) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r3, &(0x7f0000000200)={0xa, 0x4e20, 0x8, @remote, 0x4}, 0x1c) close_range(r2, 0xffffffffffffffff, 0x200000000000000) 4.599944868s ago: executing program 3 (id=401): unshare(0x22020400) r0 = fsopen(&(0x7f0000000140)='cgroup2\x00', 0x1) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x0, 0x0) setresuid(0xee01, 0xee00, 0x0) syz_clone3(&(0x7f0000000340)={0x201800000, 0x0, 0x0, 0x0, {0x2f}, 0x0, 0x0, 0x0, 0x0, 0x0, {r1}}, 0x58) 2.63145738s ago: executing program 4 (id=402): mkdir(&(0x7f0000001a80)='./file0\x00', 0x18f) mount$bpf(0x200000000000, &(0x7f0000000000)='./file0/../file0\x00', 0x0, 0x989046, 0x0) mount(0x0, &(0x7f0000000080)='./file0/../file0\x00', 0x0, 0x20, &(0x7f0000000140)='/dev/kvm\x00') (fail_nth: 5) 2.580422041s ago: executing program 2 (id=403): r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000000)=0x20009, 0x4) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000040)={0x1, 0x8000}, 0x4) r1 = socket$inet(0x2, 0xa, 0x5) bind$inet(r1, &(0x7f0000000140)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x35}}, 0x10) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'wg0\x00', 0x0}) sendto$packet(r0, &(0x7f0000000180)="0b03feff4f12021202004788aa96a13bc00000110000a2ca1a00", 0x1fffc, 0x0, &(0x7f0000000140)={0x11, 0x0, r2}, 0x56) r3 = gettid() newfstatat(0xffffffffffffff9c, &(0x7f0000000080)='.\x00', &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0}, 0x4000) setresuid(r4, r4, 0x0) r5 = getpid() r6 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) kcmp$KCMP_EPOLL_TFD(r6, r5, 0x7, 0xffffffffffffffff, 0x0) r7 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$VHOST_SET_VRING_BUSYLOOP_TIMEOUT(r7, 0x4008af23, &(0x7f00000000c0)={0x0, 0x1}) r8 = getpid() r9 = landlock_create_ruleset(&(0x7f0000000240)={0xbfbb, 0x2, 0x3}, 0x18, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x1000002, 0x4012831, 0xffffffffffffffff, 0x0) r10 = syz_open_procfs(0x0, &(0x7f0000000580)='smaps_rollup\x00') lseek(r10, 0x2004, 0x0) r11 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000200), 0x42082) setpgid(r8, r3) ioctl$SNDRV_TIMER_IOCTL_SELECT(r11, 0x40345410, &(0x7f0000000040)={{0x1}}) ioctl$SNDRV_TIMER_IOCTL_STOP(r11, 0x54a1) landlock_restrict_self(r9, 0x0) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) r12 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r12, &(0x7f0000000040)={0x2, 0x4e23, @remote}, 0x10) prctl$PR_SET_MM(0x23, 0x8, &(0x7f0000001000/0x4000)=nil) syz_clone3(&(0x7f0000000440)={0x100000000, 0x0, 0x0, 0x0, {0x1c}, &(0x7f0000000240)=""/127, 0x7f, &(0x7f00000002c0)=""/242, &(0x7f00000003c0)=[r3], 0x1}, 0x58) 2.58016387s ago: executing program 3 (id=404): r0 = open(&(0x7f0000000300)='.\x00', 0x0, 0x0) flock(r0, 0x2) r1 = open(&(0x7f0000000300)='.\x00', 0x100000, 0x0) r2 = open(&(0x7f0000000180)='.\x00', 0x10000, 0x0) flock(r2, 0x1) flock(r1, 0x1) flock(r0, 0x1) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000540), 0xffffffffffffffff) sendmsg$NL80211_CMD_REQ_SET_REG(r3, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000900)={&(0x7f0000000240)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="01002bbd7000fddbdf251b00000008009a"], 0x24}, 0x1, 0x0, 0x0, 0x20000000}, 0x40004) r5 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r5) ptrace$pokeuser(0x6, r5, 0x358, 0xffff8881f6e0f000) r6 = userfaultfd(0x0) ioctl$UFFDIO_API(r6, 0xc018aa3f, &(0x7f0000000040)={0xaa, 0xae4}) 2.577265301s ago: executing program 4 (id=405): socket$inet_tcp(0x2, 0x1, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x4004000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r1, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000240)=[@cred={{0x1c}}, @rights={{0x10}}, @rights={{0x10}}, @rights={{0x10}}], 0x50}, 0x80) mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) socket(0x400000000010, 0x3, 0x0) syz_usb_connect(0x0, 0x36, &(0x7f0000000540)=ANY=[@ANYBLOB], 0x0) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000440)=@new_dev={0x4, 0x3c9, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x40}}}, &(0x7f0000000300)=0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = dup(r3) syz_ublk_setup_queues(r4, r2, &(0x7f0000000180)={0x0, 0xfffffffe, 0x0, 0xfffffffe, 0x1002f6}, &(0x7f0000000800)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0xe704, 0x40040, 0x1000002, 0x91}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x5c87, 0x20, 0x3, 0x3aa}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x1f70, 0x2, 0x40000001, 0x337}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x4, 0x200, 0x1, 0xffffffff}}], 0x1, 0x0, 0x0) 2.466709564s ago: executing program 5 (id=317): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)) mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000440)=@new_dev={0x4, 0x3c9, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x40}}}, 0x0) pipe2(&(0x7f0000000000), 0x800) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup(r0) syz_ublk_setup_queues(r1, 0x0, 0x0, &(0x7f0000000800)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0xe704, 0x8000, 0x1000002, 0x91}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x5c87, 0x20, 0x0, 0x7aa, 0x0, r1}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x1f70, 0x2, 0x40008001, 0x337}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x4, 0x4000, 0x1, 0xfffffffc, 0x0, r1}}], 0x1, 0x0, 0x0) r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x2, 0x7fff7ffc}]}) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r3, &(0x7f0000000200)={0xa, 0x4e20, 0x8, @remote, 0x4}, 0x1c) close_range(r2, 0xffffffffffffffff, 0x200000000000000) 2.447438418s ago: executing program 3 (id=406): setns(0xc9, 0x0) r0 = socket(0x2, 0x3, 0xff) sendmmsg$inet(r0, &(0x7f0000002f80)=[{{&(0x7f0000000340)={0x2, 0x4e24, @remote}, 0x10, 0x0}}, {{0x0, 0x0, 0x0}}], 0x2, 0x20000800) 359.597685ms ago: executing program 2 (id=407): setns(0xc9, 0x0) r0 = socket(0x2, 0x3, 0xff) sendmmsg$inet(r0, 0x0, 0x0, 0x20000800) 359.187435ms ago: executing program 3 (id=408): setresuid(0xee01, 0xee00, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) recvmmsg(r0, &(0x7f0000000c00)=[{{0x0, 0x0, 0x0}, 0xa}], 0x1, 0x40010020, 0x0) r1 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000480)='task\x00') fchdir(r2) mount(0x0, &(0x7f0000000080)='.\x00', &(0x7f0000000000)='proc\x00', 0x0, 0x0) syz_open_procfs(r1, &(0x7f00000000c0)='net/udp\x00') 264.415565ms ago: executing program 2 (id=409): syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = creat(&(0x7f0000000280)='./file0\x00', 0xecf86c37d53049cc) write$binfmt_elf32(r1, &(0x7f0000000000)={{0x7f, 0x45, 0x4c, 0x46, 0x4, 0x7, 0x0, 0x6e, 0x7, 0x2, 0x3, 0x3, 0x48, 0x38, 0xfffffffc, 0xe, 0x0, 0x20, 0x1, 0x5}, [{0x3, 0x8, 0xf3, 0x7f, 0x49, 0x200004, 0xc, 0x400}]}, 0x58) close(r1) execve(&(0x7f0000000400)='./file0\x00', 0x0, 0x0) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e22, 0x9, @ipv4={'\x00', '\xff\xff', @loopback}, 0x5}, 0x1c) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x4e22, 0x7, @ipv4={'\x00', '\xff\xff', @empty}, 0x106}, 0x1c) r2 = fcntl$dupfd(r0, 0x0, r0) r3 = socket(0xa, 0x3, 0x3a) setsockopt$MRT6_INIT(r3, 0x29, 0xc8, &(0x7f0000000100), 0x4) setsockopt$inet6_int(r3, 0x29, 0xc9, 0x0, 0x0) r4 = getpid() prctl$PR_SET_NO_NEW_PRIVS(0x26, 0x1) ioctl$EXT4_IOC_SETFSUUID(r0, 0x4008662c, &(0x7f0000000040)={0x10, 0x0, "98e710173273c9d147bcff11a8e60b3f"}) r5 = socket(0x10, 0x3, 0x0) ioctl$SIOCSIFMTU(r5, 0x8922, &(0x7f0000000180)={'ip6tnl0\x00', 0x800}) r6 = landlock_create_ruleset(&(0x7f0000000180)={0x40, 0x1, 0x2}, 0x30, 0x0) landlock_restrict_self(r6, 0x0) fcntl$setownex(r2, 0xf, &(0x7f0000000000)={0x2, r4}) sendmsg$IPSET_CMD_ADD(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)={0x14, 0x9, 0x6, 0x3, 0x0, 0x0, {0x2, 0x0, 0xa}}, 0x14}, 0x1, 0x0, 0x0, 0x800}, 0x1) 255.883357ms ago: executing program 2 (id=410): r0 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000000), 0x802, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)={0x20, 0x1a, 0x1, 0x0, 0x0, {0xa}, [@typed={0x5, 0x0, 0x0, 0x0, @str='\x00'}, @nested={0x4, 0x2}]}, 0x20}}, 0x0) write$UHID_CREATE2(r0, &(0x7f0000000100)=ANY=[@ANYBLOB="0b00000073797a300000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a3000000040000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a3000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000018"], 0x130) timer_create(0x7, &(0x7f0000000400)={0x0, 0x40, 0x2, @thr={&(0x7f0000000240)="cb07256e833bd7531cf1172e714d0e827529e607a5781b75ebafc8b1f9876decdf352e34b6fc1aa31bc0c02cdb39c163a21bc61e27b88448fdc12a8217690d96d120ab126788358eb6fde2edf79a9a3c620289e02591d374ddcd41cff6f548c601770e91cb11b635c21a0982d0af77b061700eb3b8bb4102412f47bf219af4470c7d391b673774ba1cc755313028ac171f1b3881719ae7c3c413e2862404d42ad542fb7789fb5ee043866b8681c98f64019a4a5a8059087b3139f51037ad8044d46c0905cb97554bd0948b1ace693d65fbbdba55aee2e17213365a1a0a52e4e19ce4537d92d897898e8e837dad8635830913", &(0x7f0000000340)="def81f90102e00f65f253324278837cfa9d02aab22508b2121f1715bd8bf7ef78b821a0d99d0f4e9758325dd874ffeb5c6e39e2b453cb9f9fe8e8fee65e2adbc52338615753360377942354eaa24b3cfd111a240774884231e1f3b0db353f7aa71843fd8d35879362a7fe154f8440ef69ae9aee83a56e3dcbc59ee26d7183405e7032a40039983e57e8b10468b4a67470e925390414d0f1000378c9204c4ef328b9296b6c5b3"}}, &(0x7f0000000440)) timer_create(0x3, &(0x7f0000000280)={0x0, 0x17, 0x1}, &(0x7f0000000340)=0x0) timer_settime(r2, 0x236bd4336e4642df, &(0x7f0000000300)={{0x0, 0x1}, {0x0, 0xe4c}}, 0x0) timer_settime(r2, 0x0, &(0x7f0000000200), &(0x7f0000000240)) write$UHID_INPUT2(r0, &(0x7f0000000500)=ANY=[@ANYBLOB='\b\x00\x00'], 0x7) 0s ago: executing program 5 (id=317): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)) mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000440)=@new_dev={0x4, 0x3c9, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x40}}}, 0x0) pipe2(&(0x7f0000000000), 0x800) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup(r0) syz_ublk_setup_queues(r1, 0x0, 0x0, &(0x7f0000000800)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0xe704, 0x8000, 0x1000002, 0x91}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x5c87, 0x20, 0x0, 0x7aa, 0x0, r1}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x1f70, 0x2, 0x40008001, 0x337}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x4, 0x4000, 0x1, 0xfffffffc, 0x0, r1}}], 0x1, 0x0, 0x0) r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x2, 0x7fff7ffc}]}) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r3, &(0x7f0000000200)={0xa, 0x4e20, 0x8, @remote, 0x4}, 0x1c) close_range(r2, 0xffffffffffffffff, 0x200000000000000) kernel console output (not intermixed with test programs): ssed [ 27.137122][ T36] audit: type=1400 audit(1790808030.489:200): avc: denied { bind } for pid=492 comm="syz.0.76" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 27.190183][ T36] audit: type=1400 audit(1790808030.529:201): avc: denied { write } for pid=500 comm="syz.3.78" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=key permissive=1 [ 27.213874][ T505] fuse: Bad value for 'fd' [ 27.218568][ T36] audit: type=1400 audit(1790808030.569:202): avc: denied { mounton } for pid=509 comm="syz.0.81" path="/syzcgroup/unified/syz0" dev="cgroup2" ino=85 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=dir permissive=1 [ 27.247232][ T36] audit: type=1400 audit(1790808030.599:203): avc: denied { connect } for pid=500 comm="syz.3.78" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 27.280133][ T515] netlink: 4 bytes leftover after parsing attributes in process `syz.0.82'. [ 27.504525][ T9] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 27.675839][ T9] usb 2-1: unable to get BOS descriptor or descriptor too short [ 27.696539][ T9] usb 2-1: New USB device found, idVendor=2b73, idProduct=0029, bcdDevice= 0.40 [ 27.705763][ T9] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 27.713835][ T9] usb 2-1: Product: syz [ 27.718121][ T9] usb 2-1: Manufacturer: syz [ 27.722805][ T9] usb 2-1: SerialNumber: syz [ 27.932399][ T9] usb 2-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 27.958514][ T9] usb 2-1: USB disconnect, device number 3 [ 27.981353][ T314] udevd[314]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 28.110941][ T519] p [ 28.119162][ T521] overlayfs: unescaped trailing colons in lowerdir mount option. [ 28.259278][ T36] audit: type=1400 audit(1790808031.609:204): avc: denied { name_bind } for pid=531 comm="syz.2.90" src=20002 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=tcp_socket permissive=1 [ 28.285111][ T36] audit: type=1400 audit(1790808031.609:205): avc: denied { node_bind } for pid=531 comm="syz.2.90" saddr=::ffff:127.0.0.1 src=20002 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=tcp_socket permissive=1 [ 28.308946][ T36] audit: type=1400 audit(1790808031.649:206): avc: denied { unlink } for pid=533 comm="syz.0.91" name="#1" dev="tmpfs" ino=181 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 28.331067][ T36] audit: type=1400 audit(1790808031.649:207): avc: denied { mount } for pid=533 comm="syz.0.91" name="/" dev="overlay" ino=177 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 28.373977][ T537] tmpfs: Unknown parameter 'r_inodes' [ 28.380763][ T537] FAULT_INJECTION: forcing a failure. [ 28.380763][ T537] name failslab, interval 1, probability 0, space 0, times 0 [ 28.394516][ T31] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 28.400336][ T537] CPU: 0 UID: 0 PID: 537 Comm: syz.2.92 Not tainted syzkaller #0 ca18b34a931c0a5bfcb0703d5cd6c5f88dc9958b [ 28.400365][ T537] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 28.400376][ T537] Call Trace: [ 28.400382][ T537] [ 28.400389][ T537] __dump_stack+0x21/0x30 [ 28.400421][ T537] dump_stack_lvl+0x140/0x1c0 [ 28.400446][ T537] ? __cfi_dump_stack_lvl+0x10/0x10 [ 28.400472][ T537] ? kasan_save_alloc_info+0x3a/0x50 [ 28.400490][ T537] ? __kmalloc_node_noprof+0x252/0x500 [ 28.400510][ T537] ? __kvmalloc_node_noprof+0x128/0x300 [ 28.400527][ T537] ? unix_net_init+0x138/0x480 [ 28.400551][ T537] ? setup_net+0x227/0x9b0 [ 28.400570][ T537] dump_stack+0x19/0x20 [ 28.400592][ T537] should_fail_ex+0x3c2/0x510 [ 28.400614][ T537] should_failslab+0xac/0x100 [ 28.400635][ T537] __kmalloc_node_noprof+0x69/0x500 [ 28.400654][ T537] ? __kvmalloc_node_noprof+0x128/0x300 [ 28.400672][ T537] __kvmalloc_node_noprof+0x128/0x300 [ 28.400699][ T537] ? __cfi___kvmalloc_node_noprof+0x10/0x10 [ 28.400718][ T537] ? __cfi__raw_write_lock+0x10/0x10 [ 28.400739][ T537] nf_hook_entries_grow+0x284/0x740 [ 28.400766][ T537] ? mutex_lock+0x97/0x1d0 [ 28.400789][ T537] ? __cfi_mutex_lock+0x10/0x10 [ 28.400811][ T537] ? __kmalloc_node_noprof+0x252/0x500 [ 28.400831][ T537] ? nf_hook_entries_grow+0x21/0x740 [ 28.400857][ T537] __nf_register_net_hook+0x225/0x820 [ 28.400884][ T537] nf_register_net_hook+0xbf/0x1b0 [ 28.400908][ T537] nf_register_net_hooks+0x4b/0x1c0 [ 28.400933][ T537] selinux_nf_register+0x25/0x30 [ 28.400954][ T537] ops_init+0x302/0x5d0 [ 28.400972][ T537] ? __kasan_check_write+0x18/0x20 [ 28.400990][ T537] ? rwsem_read_trylock+0x275/0x5a0 [ 28.401017][ T537] setup_net+0x227/0x9b0 [ 28.401033][ T537] ? copy_net_ns+0xa20/0xa20 [ 28.401051][ T537] ? down_read_killable+0x7f/0x100 [ 28.401074][ T537] ? __cfi_down_read_killable+0x10/0x10 [ 28.401100][ T537] copy_net_ns+0x4fc/0xa20 [ 28.401117][ T537] create_new_namespaces+0x390/0x6f0 [ 28.401144][ T537] unshare_nsproxy_namespaces+0x124/0x180 [ 28.401169][ T537] ksys_unshare+0x4f9/0x920 [ 28.401194][ T537] ? __cfi_ksys_unshare+0x10/0x10 [ 28.401217][ T537] ? __kasan_check_write+0x18/0x20 [ 28.401237][ T537] __x64_sys_unshare+0x3c/0x50 [ 28.401259][ T537] x64_sys_call+0x2998/0x2ee0 [ 28.401276][ T537] do_syscall_64+0x57/0xf0 [ 28.401294][ T537] ? clear_bhb_loop+0x50/0xa0 [ 28.401317][ T537] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 28.401339][ T537] RIP: 0033:0x7fd16399e159 [ 28.401354][ T537] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 28.401369][ T537] RSP: 002b:00007fd16486a028 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 28.401389][ T537] RAX: ffffffffffffffda RBX: 00007fd163c25fa0 RCX: 00007fd16399e159 [ 28.401403][ T537] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000040000000 [ 28.401415][ T537] RBP: 00007fd163a3506b R08: 0000000000000000 R09: 0000000000000000 [ 28.401427][ T537] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 28.401437][ T537] R13: 00007fd163c26038 R14: 00007fd163c25fa0 R15: 00007ffd2f830c28 [ 28.401452][ T537] [ 28.422339][ T36] audit: type=1400 audit(1790808031.749:208): avc: denied { unmount } for pid=293 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 28.574501][ T31] usb 4-1: Using ep0 maxpacket: 8 [ 28.575745][ T36] audit: type=1400 audit(1790808031.789:209): avc: denied { create } for pid=536 comm="syz.2.92" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 28.581213][ T31] usb 4-1: config index 0 descriptor too short (expected 1060, got 36) [ 28.603347][ T541] p [ 28.615532][ T31] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 28.789481][ T31] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 28.799318][ T31] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 28.812190][ T31] usb 4-1: New USB device found, idVendor=1345, idProduct=3008, bcdDevice= 0.00 [ 28.821448][ T31] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 28.834403][ T31] usb 4-1: config 0 descriptor?? [ 28.846449][ T66] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 28.853906][ T66] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 28.861593][ T517] hid (null): invalid report_count -1253640118 [ 28.862193][ T66] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 28.876097][ T66] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 28.877251][ T517] hid-generic 3DA4:0D84:0007.0003: unknown main item tag 0x7 [ 28.883535][ T66] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 28.890972][ T517] hid-generic 3DA4:0D84:0007.0003: unknown main item tag 0x2 [ 28.900296][ T66] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 28.913583][ T66] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 28.914758][ T517] hid-generic 3DA4:0D84:0007.0003: unexpected long global item [ 28.928881][ T517] hid-generic 3DA4:0D84:0007.0003: probe with driver hid-generic failed with error -22 [ 28.930330][ T66] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 28.946646][ T66] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 28.963837][ T66] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 28.979316][ T66] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 28.988086][ T66] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 28.996719][ T66] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 29.004312][ T66] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 29.015379][ T66] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 29.022809][ T66] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 29.030319][ T66] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 29.037808][ T66] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 29.046530][ T66] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 29.054067][ T66] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 29.061549][ T66] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 29.070732][ T66] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 29.079158][ T66] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 29.086966][ T66] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 29.102175][ T66] hid-generic 0000:0000:0000.0002: hidraw0: HID v0.00 Device [syz0] on syz0 [ 29.112839][ T568] udevd[568]: failed to execute '/lib/udev/fido_id' 'fido_id': Exec format error [ 29.134410][ T574] FAULT_INJECTION: forcing a failure. [ 29.134410][ T574] name failslab, interval 1, probability 0, space 0, times 0 [ 29.154186][ T574] CPU: 1 UID: 0 PID: 574 Comm: syz.2.109 Not tainted syzkaller #0 ca18b34a931c0a5bfcb0703d5cd6c5f88dc9958b [ 29.154216][ T574] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 29.154227][ T574] Call Trace: [ 29.154233][ T574] [ 29.154241][ T574] __dump_stack+0x21/0x30 [ 29.154272][ T574] dump_stack_lvl+0x140/0x1c0 [ 29.154295][ T574] ? __cfi_dump_stack_lvl+0x10/0x10 [ 29.154319][ T574] ? __cfi_selinux_file_open+0x10/0x10 [ 29.154338][ T574] dump_stack+0x19/0x20 [ 29.154359][ T574] should_fail_ex+0x3c2/0x510 [ 29.154381][ T574] should_failslab+0xac/0x100 [ 29.154403][ T574] kmem_cache_alloc_node_noprof+0x45/0x420 [ 29.154424][ T574] ? __alloc_skb+0x10c/0x360 [ 29.154446][ T574] __alloc_skb+0x10c/0x360 [ 29.154464][ T574] ? tcp_current_mss+0x539/0x8b0 [ 29.154486][ T574] tcp_stream_alloc_skb+0x43/0x370 [ 29.154511][ T574] tcp_sendmsg_locked+0xcbc/0x4ac0 [ 29.154536][ T574] ? avc_has_perm_noaudit+0x289/0x360 [ 29.154571][ T574] ? __kasan_check_write+0x18/0x20 [ 29.154589][ T574] ? __cfi__raw_spin_lock_bh+0x10/0x10 [ 29.154607][ T574] ? kstrtouint_from_user+0x117/0x170 [ 29.154631][ T574] ? __cfi_tcp_sendmsg_locked+0x10/0x10 [ 29.154654][ T574] ? __kasan_check_write+0x18/0x20 [ 29.154671][ T574] ? proc_fail_nth_write+0x184/0x220 [ 29.154697][ T574] ? __cfi_tcp_sendmsg+0x10/0x10 [ 29.154719][ T574] tcp_sendmsg+0x3e/0xd0 [ 29.154742][ T574] ? __cfi_tcp_sendmsg+0x10/0x10 [ 29.154765][ T574] inet_sendmsg+0xb7/0x120 [ 29.154792][ T574] ? __cfi_inet_sendmsg+0x10/0x10 [ 29.154810][ T574] __sys_sendto+0x5d8/0x6e0 [ 29.154837][ T574] ? __cfi___sys_sendto+0x10/0x10 [ 29.154861][ T574] ? __kasan_check_write+0x18/0x20 [ 29.154880][ T574] ? __cfi_ksys_write+0x10/0x10 [ 29.154900][ T574] __x64_sys_sendto+0xe9/0x100 [ 29.154921][ T574] x64_sys_call+0x2c2c/0x2ee0 [ 29.154937][ T574] do_syscall_64+0x57/0xf0 [ 29.154953][ T574] ? clear_bhb_loop+0x50/0xa0 [ 29.154975][ T574] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 29.154996][ T574] RIP: 0033:0x7fd16399e159 [ 29.155011][ T574] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 29.155024][ T574] RSP: 002b:00007fd16486a028 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 29.155043][ T574] RAX: ffffffffffffffda RBX: 00007fd163c25fa0 RCX: 00007fd16399e159 [ 29.155056][ T574] RDX: 0000000000000381 RSI: 00002000000004c0 RDI: 0000000000000003 [ 29.155068][ T574] RBP: 00007fd16486a090 R08: 0000000000000000 R09: 0000000000000000 [ 29.155079][ T574] R10: 0000000000000805 R11: 0000000000000246 R12: 0000000000000001 [ 29.155090][ T574] R13: 00007fd163c26038 R14: 00007fd163c25fa0 R15: 00007ffd2f830c28 [ 29.155105][ T574] [ 29.442292][ T31] sony 0003:1345:3008.0004: global environment stack underflow [ 29.451198][ T31] sony 0003:1345:3008.0004: item 0 2 1 11 parsing failed [ 29.458637][ T31] sony 0003:1345:3008.0004: parse failed [ 29.464434][ T31] sony 0003:1345:3008.0004: probe with driver sony failed with error -22 [ 29.688571][ T31] usb 4-1: USB disconnect, device number 2 [ 29.709231][ T614] loop5: detected capacity change from 0 to 7 [ 29.731790][ T617] FAULT_INJECTION: forcing a failure. [ 29.731790][ T617] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 29.744967][ T617] CPU: 0 UID: 0 PID: 617 Comm: syz.2.125 Not tainted syzkaller #0 ca18b34a931c0a5bfcb0703d5cd6c5f88dc9958b [ 29.744996][ T617] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 29.745007][ T617] Call Trace: [ 29.745012][ T617] [ 29.745019][ T617] __dump_stack+0x21/0x30 [ 29.745048][ T617] dump_stack_lvl+0x140/0x1c0 [ 29.745071][ T617] ? __cfi_dump_stack_lvl+0x10/0x10 [ 29.745096][ T617] dump_stack+0x19/0x20 [ 29.745119][ T617] should_fail_ex+0x3c2/0x510 [ 29.745141][ T617] should_fail+0xf/0x20 [ 29.745161][ T617] should_fail_usercopy+0x1e/0x30 [ 29.745183][ T617] strncpy_from_user+0x29/0x280 [ 29.745205][ T617] getname_flags+0x106/0x6b0 [ 29.745227][ T617] getname+0x1b/0x30 [ 29.745245][ T617] do_sys_openat2+0xda/0x1d0 [ 29.745268][ T617] ? fput+0x1a4/0x230 [ 29.745290][ T617] ? do_sys_open+0x100/0x100 [ 29.745314][ T617] ? ksys_write+0x1f3/0x260 [ 29.745333][ T617] ? __cfi_ksys_write+0x10/0x10 [ 29.745352][ T617] __x64_sys_openat+0x13a/0x170 [ 29.745377][ T617] x64_sys_call+0xe69/0x2ee0 [ 29.745394][ T617] do_syscall_64+0x57/0xf0 [ 29.745412][ T617] ? clear_bhb_loop+0x50/0xa0 [ 29.745435][ T617] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 29.745457][ T617] RIP: 0033:0x7fd16399e159 [ 29.745474][ T617] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 29.745487][ T617] RSP: 002b:00007fd16486a028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 29.745507][ T617] RAX: ffffffffffffffda RBX: 00007fd163c25fa0 RCX: 00007fd16399e159 [ 29.745521][ T617] RDX: 0000000000024640 RSI: 0000200000000bc0 RDI: ffffffffffffff9c [ 29.745534][ T617] RBP: 00007fd16486a090 R08: 0000000000000000 R09: 0000000000000000 [ 29.745546][ T617] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 29.745565][ T617] R13: 00007fd163c26038 R14: 00007fd163c25fa0 R15: 00007ffd2f830c28 [ 29.745581][ T617] [ 30.114833][ T637] SELinux: Context system_u:object_r:hald_keymap_exec_t:s0 is not valid (left unmapped). [ 30.141907][ T643] FAULT_INJECTION: forcing a failure. [ 30.141907][ T643] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 30.155090][ T643] CPU: 1 UID: 0 PID: 643 Comm: syz.1.134 Not tainted syzkaller #0 ca18b34a931c0a5bfcb0703d5cd6c5f88dc9958b [ 30.155119][ T643] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 30.155129][ T643] Call Trace: [ 30.155134][ T643] [ 30.155142][ T643] __dump_stack+0x21/0x30 [ 30.155177][ T643] dump_stack_lvl+0x140/0x1c0 [ 30.155202][ T643] ? __cfi_dump_stack_lvl+0x10/0x10 [ 30.155226][ T643] ? check_stack_object+0x138/0x150 [ 30.155246][ T643] dump_stack+0x19/0x20 [ 30.155268][ T643] should_fail_ex+0x3c2/0x510 [ 30.155289][ T643] should_fail+0xf/0x20 [ 30.155307][ T643] should_fail_usercopy+0x1e/0x30 [ 30.155328][ T643] _copy_to_user+0x24/0xa0 [ 30.155351][ T643] simple_read_from_buffer+0xed/0x160 [ 30.155375][ T643] proc_fail_nth_read+0x1aa/0x220 [ 30.155400][ T643] ? __cfi_proc_fail_nth_read+0x10/0x10 [ 30.155423][ T643] ? bpf_lsm_file_permission+0xd/0x20 [ 30.155445][ T643] ? __cfi_proc_fail_nth_read+0x10/0x10 [ 30.155469][ T643] vfs_read+0x28b/0xc70 [ 30.155486][ T643] ? __cfi_selinux_file_ioctl+0x10/0x10 [ 30.155506][ T643] ? __cfi_vfs_read+0x10/0x10 [ 30.155523][ T643] ? __kasan_check_write+0x18/0x20 [ 30.155542][ T643] ? mutex_lock+0x97/0x1d0 [ 30.155564][ T643] ? __cfi_mutex_lock+0x10/0x10 [ 30.155587][ T643] ksys_read+0x145/0x260 [ 30.155605][ T643] ? __cfi_ksys_read+0x10/0x10 [ 30.155623][ T643] ? __kasan_check_write+0x18/0x20 [ 30.155639][ T643] ? fput+0x1a4/0x230 [ 30.155659][ T643] ? __kasan_check_read+0x15/0x20 [ 30.155676][ T643] __x64_sys_read+0x7f/0x90 [ 30.155693][ T643] x64_sys_call+0x2638/0x2ee0 [ 30.155709][ T643] do_syscall_64+0x57/0xf0 [ 30.155727][ T643] ? clear_bhb_loop+0x50/0xa0 [ 30.155750][ T643] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 30.155769][ T643] RIP: 0033:0x7fcd8cf5e98e [ 30.155783][ T643] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 30.155795][ T643] RSP: 002b:00007fcd8dedcfe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 30.155814][ T643] RAX: ffffffffffffffda RBX: 00007fcd8dedd6c0 RCX: 00007fcd8cf5e98e [ 30.155828][ T643] RDX: 000000000000000f RSI: 00007fcd8dedd0a0 RDI: 0000000000000004 [ 30.155840][ T643] RBP: 00007fcd8dedd090 R08: 0000000000000000 R09: 0000000000000000 [ 30.155852][ T643] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 30.155861][ T643] R13: 00007fcd8d226038 R14: 00007fcd8d225fa0 R15: 00007ffda1fd7e28 [ 30.155873][ T643] [ 30.264537][ T9] usb 3-1: new full-speed USB device number 3 using dummy_hcd [ 30.334517][ T553] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 30.389071][ T647] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=5 sclass=netlink_route_socket pid=647 comm=syz.3.136 [ 30.494600][ T517] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 30.514924][ T9] usb 3-1: no configurations [ 30.519548][ T9] usb 3-1: can't read configurations, error -22 [ 30.534530][ T553] usb 1-1: Using ep0 maxpacket: 8 [ 30.541026][ T553] usb 1-1: unable to get BOS descriptor or descriptor too short [ 30.556168][ T553] usb 1-1: New USB device found, idVendor=2b73, idProduct=0013, bcdDevice= 0.40 [ 30.565944][ T553] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 30.573953][ T553] usb 1-1: Product: syz [ 30.578185][ T553] usb 1-1: Manufacturer: syz [ 30.582776][ T553] usb 1-1: SerialNumber: syz [ 30.644517][ T517] usb 2-1: Using ep0 maxpacket: 32 [ 30.651180][ T517] usb 2-1: unable to get BOS descriptor or descriptor too short [ 30.658929][ T9] usb 3-1: new full-speed USB device number 4 using dummy_hcd [ 30.668486][ T517] usb 2-1: New USB device found, idVendor=0dba, idProduct=1000, bcdDevice= 0.40 [ 30.677582][ T517] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 30.685601][ T517] usb 2-1: Product: syz [ 30.689761][ T517] usb 2-1: Manufacturer: syz [ 30.694359][ T517] usb 2-1: SerialNumber: syz [ 30.704517][ T31] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 30.792762][ T553] usb 1-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 30.801664][ T553] snd-usb-audio 1-1:1.0: probe with driver snd-usb-audio failed with error -71 [ 30.816099][ T553] usb 1-1: USB disconnect, device number 3 [ 30.822318][ T9] usb 3-1: no configurations [ 30.834542][ T31] usb 4-1: device descriptor read/64, error -71 [ 30.840840][ T9] usb 3-1: can't read configurations, error -22 [ 30.849264][ T312] udevd[312]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 30.874147][ T9] usb usb3-port1: attempt power cycle [ 30.901760][ T517] usb 2-1: unit 4 not found! [ 30.906517][ T517] usb 2-1: unit 0 not found! [ 31.084518][ T31] usb 4-1: device descriptor read/64, error -71 [ 31.224525][ T9] usb 3-1: new full-speed USB device number 5 using dummy_hcd [ 31.245178][ T9] usb 3-1: no configurations [ 31.249836][ T9] usb 3-1: can't read configurations, error -22 [ 31.303579][ T645] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 31.312254][ T645] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 31.321813][ T517] snd-usb-audio 2-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 31.332982][ T517] usb 2-1: unit 4 not found! [ 31.334537][ T31] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 31.337802][ T517] usb 2-1: unit 0 not found! [ 31.350994][ T517] snd-usb-audio 2-1:1.1: probe with driver snd-usb-audio failed with error -22 [ 31.360628][ T517] usb 2-1: unit 4 not found! [ 31.365266][ T517] usb 2-1: unit 0 not found! [ 31.373334][ T517] snd-usb-audio 2-1:1.2: probe with driver snd-usb-audio failed with error -22 [ 31.383822][ T517] usb 2-1: USB disconnect, device number 4 [ 31.389692][ T9] usb 3-1: new full-speed USB device number 6 using dummy_hcd [ 31.400423][ T470] udevd[470]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.2/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 31.415265][ T9] usb 3-1: no configurations [ 31.421087][ T9] usb 3-1: can't read configurations, error -22 [ 31.427818][ T9] usb usb3-port1: unable to enumerate USB device [ 31.474556][ T31] usb 4-1: device descriptor read/64, error -71 [ 31.714594][ T31] usb 4-1: device descriptor read/64, error -71 [ 31.824634][ T31] usb usb4-port1: attempt power cycle [ 31.943885][ T671] 9pnet_fd: Insufficient options for proto=fd [ 31.950978][ T671] ======================================================= [ 31.950978][ T671] WARNING: The mand mount option has been deprecated and [ 31.950978][ T671] and is ignored by this kernel. Remove the mand [ 31.950978][ T671] option from the mount to silence this warning. [ 31.950978][ T671] ======================================================= [ 31.987325][ T671] tmpfs: Unknown parameter '/dev/kvm' [ 32.174566][ T31] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 32.205645][ T31] usb 4-1: device descriptor read/8, error -71 [ 32.234534][ T517] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 32.335608][ T31] usb 4-1: device descriptor read/8, error -71 [ 32.384554][ T517] usb 1-1: Using ep0 maxpacket: 8 [ 32.392516][ T517] usb 1-1: New USB device found, idVendor=0499, idProduct=5009, bcdDevice= 0.40 [ 32.401647][ T517] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 32.409717][ T517] usb 1-1: Product: 쉜૯摮㼿騝둟鮢Ⅿᢒ뚏뜥퍼㮔讯壆즷悋繝瓞᝝ᒕᓆ袶琜ᙡ旁尯夏靺便㴋╺薱끑页ﴍ勂僲蹴䍆焽鉺茑ﵑ퉸兿ᡠ䲇拴螿掷ⶹᳯึ芊㟝襮넿슌粭﫫籓覅鑎䅲挸뵣➖产룮뛚埶卸𹨻﬚픧씯ࢽ곆瞜꣏♽킢ﯮ젺蝁ᾜ英ᖸ䦏샤⨾鬢᭬皪稵᳤쇰沲∻ﶼ컝抨荎“ [ 32.444698][ T517] usb 1-1: Manufacturer: ꬑ☿貴౩ॽ⟇Ԩ冁獠ၠ幪샤⍖랎툫ொ䛱ꘂ럘粐ꍺ㚀ῃ灖痺氇英㮶ᬘ⚗刓줳規ꚋ簒ḜჇᜃ髠ꆕⅩ눔ᾄḡ燉ꖗﶉ⯋ą격䨬욘숭춿慻쮅櫌᳝똦 [ 32.466076][ T517] usb 1-1: SerialNumber: syz [ 32.574539][ T31] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 32.595500][ T31] usb 4-1: device descriptor read/8, error -71 [ 32.672934][ T517] snd-usb-audio 1-1:1.0: probe with driver snd-usb-audio failed with error -2 [ 32.682725][ T517] snd-usb-audio 1-1:1.1: probe with driver snd-usb-audio failed with error -2 [ 32.693704][ T517] snd-usb-audio 1-1:1.2: probe with driver snd-usb-audio failed with error -2 [ 32.703677][ T517] usb 1-1: USB disconnect, device number 4 [ 32.713805][ T312] udevd[312]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.2/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 32.735555][ T31] usb 4-1: device descriptor read/8, error -71 [ 32.776409][ T36] kauditd_printk_skb: 33 callbacks suppressed [ 32.776433][ T36] audit: type=1400 audit(1790808036.129:243): avc: denied { unmount } for pid=294 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=filesystem permissive=1 [ 32.813871][ T679] netlink: 'syz.1.145': attribute type 58 has an invalid length. [ 32.823642][ T36] audit: type=1400 audit(1790808036.169:244): avc: denied { create } for pid=678 comm="syz.1.145" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_dnrt_socket permissive=1 [ 32.824319][ T679] fuse: Unknown parameter 'Gd' [ 32.854639][ T31] usb usb4-port1: unable to enumerate USB device [ 33.042844][ T36] audit: type=1400 audit(1790808036.389:245): avc: denied { load_policy } for pid=682 comm="syz.2.147" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security permissive=1 [ 33.043585][ T684] SELinux: failed to load policy [ 33.124531][ T9] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 33.183708][ T36] audit: type=1400 audit(1790808036.529:246): avc: denied { write } for pid=685 comm="syz.0.148" name="synthetic_events" dev="tracefs" ino=1045 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=file permissive=1 [ 33.184825][ T686] mmap: syz.0.148 (686) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 33.251407][ T12] tipc: Subscription rejected, illegal request [ 33.252389][ T36] audit: type=1400 audit(1790808036.599:247): avc: denied { read } for pid=685 comm="syz.0.148" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 33.290660][ T36] audit: type=1400 audit(1790808036.639:248): avc: denied { setopt } for pid=689 comm="syz.0.150" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 33.310008][ T9] usb 2-1: Using ep0 maxpacket: 32 [ 33.320352][ T9] usb 2-1: config 0 has no interfaces? [ 33.327308][ T9] usb 2-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 33.336606][ T696] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 33.339216][ T9] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 33.354311][ T9] usb 2-1: Product: syz [ 33.359483][ T9] usb 2-1: Manufacturer: syz [ 33.364097][ T9] usb 2-1: SerialNumber: syz [ 33.369366][ T9] usb 2-1: config 0 descriptor?? [ 33.406285][ T699] p [ 33.419256][ T36] audit: type=1400 audit(1790808036.769:249): avc: denied { create } for pid=700 comm="syz.3.152" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 33.442720][ T36] audit: type=1400 audit(1790808036.789:250): avc: denied { ioctl } for pid=700 comm="syz.3.152" path="socket:[6385]" dev="sockfs" ino=6385 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 33.594748][ T553] usb 2-1: USB disconnect, device number 5 [ 33.673081][ T711] loop5: detected capacity change from 0 to 7 [ 33.695661][ T711] rust_binder: Write failure EINVAL in pid:141 [ 33.700866][ T36] audit: type=1400 audit(1790808037.049:251): avc: denied { ioctl } for pid=710 comm="syz.0.157" path="/dev/binderfs/binder0" dev="binder" ino=9 ioctlcmd=0x6201 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 33.794533][ T31] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 33.819753][ T309] Bluetooth: hci0: Frame reassembly failed (-84) [ 33.826252][ T309] Bluetooth: hci0: Frame reassembly failed (-84) [ 33.832632][ T61] Bluetooth: hci0: Frame reassembly failed (-84) [ 33.838000][ T722] p [ 33.907105][ T732] overlayfs: empty lowerdir [ 33.924524][ T31] usb 4-1: device descriptor read/64, error -71 [ 34.035492][ T738] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 34.133127][ T743] p [ 34.164813][ T31] usb 4-1: device descriptor read/64, error -71 [ 34.182185][ T752] SELinux: failed to load policy [ 34.185434][ T751] kvm: emulating exchange as write [ 34.414523][ T31] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 34.484522][ T9] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 34.544522][ T31] usb 4-1: device descriptor read/64, error -71 [ 34.634514][ T9] usb 3-1: Using ep0 maxpacket: 32 [ 34.640749][ T9] usb 3-1: config 0 has no interfaces? [ 34.647766][ T9] usb 3-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 34.656901][ T9] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 34.664937][ T9] usb 3-1: Product: syz [ 34.669147][ T9] usb 3-1: Manufacturer: syz [ 34.673735][ T9] usb 3-1: SerialNumber: syz [ 34.678972][ T9] usb 3-1: config 0 descriptor?? [ 34.804529][ T31] usb 4-1: device descriptor read/64, error -71 [ 34.900410][ T760] usb 3-1: USB disconnect, device number 7 [ 34.924605][ T31] usb usb4-port1: attempt power cycle [ 34.956105][ T36] audit: type=1400 audit(1790808038.309:252): avc: denied { ioctl } for pid=761 comm="syz.1.179" path="socket:[6760]" dev="sockfs" ino=6760 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 35.264534][ T31] usb 4-1: new high-speed USB device number 9 using dummy_hcd [ 35.285520][ T31] usb 4-1: device descriptor read/8, error -71 [ 35.422922][ T768] FAULT_INJECTION: forcing a failure. [ 35.422922][ T768] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 35.436916][ T768] CPU: 0 UID: 0 PID: 768 Comm: syz.2.181 Not tainted syzkaller #0 ca18b34a931c0a5bfcb0703d5cd6c5f88dc9958b [ 35.436937][ T768] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 35.436944][ T768] Call Trace: [ 35.436947][ T768] [ 35.436952][ T768] __dump_stack+0x21/0x30 [ 35.436979][ T768] dump_stack_lvl+0x140/0x1c0 [ 35.437000][ T768] ? __cfi_dump_stack_lvl+0x10/0x10 [ 35.437024][ T768] ? check_stack_object+0x138/0x150 [ 35.437040][ T768] dump_stack+0x19/0x20 [ 35.437052][ T768] should_fail_ex+0x3c2/0x510 [ 35.437065][ T768] should_fail+0xf/0x20 [ 35.437075][ T768] should_fail_usercopy+0x1e/0x30 [ 35.437087][ T768] _copy_to_user+0x24/0xa0 [ 35.437101][ T768] simple_read_from_buffer+0xed/0x160 [ 35.437115][ T768] proc_fail_nth_read+0x1aa/0x220 [ 35.437129][ T768] ? __cfi_proc_fail_nth_read+0x10/0x10 [ 35.437143][ T768] ? bpf_lsm_file_permission+0xd/0x20 [ 35.437156][ T768] ? __cfi_proc_fail_nth_read+0x10/0x10 [ 35.437172][ T768] vfs_read+0x28b/0xc70 [ 35.437188][ T768] ? __cfi_vfs_read+0x10/0x10 [ 35.437198][ T768] ? __kasan_check_write+0x18/0x20 [ 35.437209][ T768] ? mutex_lock+0x97/0x1d0 [ 35.437221][ T768] ? __cfi_mutex_lock+0x10/0x10 [ 35.437233][ T768] ksys_read+0x145/0x260 [ 35.437243][ T768] ? __cfi_ksys_read+0x10/0x10 [ 35.437253][ T768] ? __kasan_check_write+0x18/0x20 [ 35.437262][ T768] ? fput+0x1a4/0x230 [ 35.437274][ T768] ? __kasan_check_read+0x15/0x20 [ 35.437284][ T768] __x64_sys_read+0x7f/0x90 [ 35.437299][ T768] x64_sys_call+0x2638/0x2ee0 [ 35.437308][ T768] do_syscall_64+0x57/0xf0 [ 35.437318][ T768] ? clear_bhb_loop+0x50/0xa0 [ 35.437330][ T768] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 35.437342][ T768] RIP: 0033:0x7fd16395e98e [ 35.437352][ T768] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 35.437360][ T768] RSP: 002b:00007fd164869fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 35.437373][ T768] RAX: ffffffffffffffda RBX: 00007fd16486a6c0 RCX: 00007fd16395e98e [ 35.437380][ T768] RDX: 000000000000000f RSI: 00007fd16486a0a0 RDI: 0000000000000006 [ 35.437387][ T768] RBP: 00007fd16486a090 R08: 0000000000000000 R09: 0000000000000000 [ 35.437393][ T768] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 35.437399][ T768] R13: 00007fd163c26038 R14: 00007fd163c25fa0 R15: 00007ffd2f830c28 [ 35.437408][ T768] [ 35.692858][ T31] usb 4-1: device descriptor read/8, error -71 [ 35.874545][ T719] Bluetooth: hci0: command 0x1003 tx timeout [ 35.874728][ T53] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 35.934527][ T31] usb 4-1: new high-speed USB device number 10 using dummy_hcd [ 35.955489][ T31] usb 4-1: device descriptor read/8, error -71 [ 36.074543][ T517] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 36.085707][ T31] usb 4-1: device descriptor read/8, error -71 [ 36.154542][ T9] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 36.195534][ T31] usb usb4-port1: unable to enumerate USB device [ 36.224534][ T760] usb 3-1: new full-speed USB device number 8 using dummy_hcd [ 36.225590][ T517] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x9 has invalid wMaxPacketSize 0 [ 36.241804][ T517] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0xB has an invalid bInterval 36, changing to 7 [ 36.252715][ T517] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0xB has invalid maxpacket 18095, setting to 1024 [ 36.265172][ T517] usb 2-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 36.274214][ T517] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 36.282228][ T517] usb 2-1: Product: syz [ 36.286459][ T517] usb 2-1: Manufacturer: syz [ 36.291087][ T517] usb 2-1: SerialNumber: syz [ 36.296259][ T517] usb 2-1: config 0 descriptor?? [ 36.302152][ T517] usb 2-1: 0:0 : invalid sync pipe. bmAttributes 39, bLength 9, bSynchAddress 24 [ 36.311451][ T9] usb 1-1: Using ep0 maxpacket: 32 [ 36.317615][ T9] usb 1-1: config 0 has no interfaces? [ 36.324349][ T9] usb 1-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 36.333407][ T9] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 36.341426][ T9] usb 1-1: Product: syz [ 36.345608][ T9] usb 1-1: Manufacturer: syz [ 36.350208][ T9] usb 1-1: SerialNumber: syz [ 36.355404][ T9] usb 1-1: config 0 descriptor?? [ 36.364600][ T760] usb 3-1: device descriptor read/64, error -71 [ 36.502600][ T782] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 36.511250][ T782] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 36.528273][ T517] usb 2-1: USB disconnect, device number 6 [ 36.547914][ T470] udevd[470]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 36.582845][ T553] usb 1-1: USB disconnect, device number 5 [ 36.604670][ T760] usb 3-1: device descriptor read/64, error -71 [ 36.844152][ T795] FAULT_INJECTION: forcing a failure. [ 36.844152][ T795] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 36.857445][ T795] CPU: 0 UID: 0 PID: 795 Comm: syz.3.192 Not tainted syzkaller #0 ca18b34a931c0a5bfcb0703d5cd6c5f88dc9958b [ 36.857477][ T795] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 36.857490][ T795] Call Trace: [ 36.857497][ T795] [ 36.857504][ T795] __dump_stack+0x21/0x30 [ 36.857536][ T795] dump_stack_lvl+0x140/0x1c0 [ 36.857567][ T795] ? __cfi_dump_stack_lvl+0x10/0x10 [ 36.857594][ T795] ? __kasan_check_write+0x18/0x20 [ 36.857616][ T795] dump_stack+0x19/0x20 [ 36.857640][ T795] should_fail_ex+0x3c2/0x510 [ 36.857665][ T795] should_fail_alloc_page+0xec/0x110 [ 36.857696][ T795] __alloc_pages_noprof+0x1c0/0x7e0 [ 36.857725][ T795] ? __cfi___alloc_pages_noprof+0x10/0x10 [ 36.857754][ T795] ? folio_add_lru+0x116/0x400 [ 36.857780][ T795] ? __cfi_folio_add_lru+0x10/0x10 [ 36.857805][ T795] __folio_alloc_noprof+0x14/0x80 [ 36.857832][ T795] shmem_alloc_and_add_folio+0x45f/0x10b0 [ 36.857858][ T795] ? shmem_replace_folio+0x9b0/0x9b0 [ 36.857880][ T795] ? shmem_huge_global_enabled+0x2da/0x360 [ 36.857903][ T795] ? shmem_allowable_huge_orders+0x1f7/0x430 [ 36.857925][ T795] shmem_get_folio_gfp+0x5cd/0x12e0 [ 36.857948][ T795] ? shmem_get_folio+0xc0/0xc0 [ 36.857968][ T795] ? inode_to_bdi+0x6d/0x100 [ 36.857994][ T795] shmem_write_begin+0xf4/0x260 [ 36.858016][ T795] generic_perform_write+0x32c/0x970 [ 36.858044][ T795] ? __cfi_generic_perform_write+0x10/0x10 [ 36.858068][ T795] ? generic_write_checks_count+0x426/0x540 [ 36.858095][ T795] ? file_update_time+0xa3/0x210 [ 36.858113][ T795] shmem_file_write_iter+0x105/0x130 [ 36.858138][ T795] vfs_write+0x762/0xfd0 [ 36.858158][ T795] ? __cfi_vfs_write+0x10/0x10 [ 36.858177][ T795] ? __cfi_mutex_lock+0x10/0x10 [ 36.858203][ T795] ksys_write+0x145/0x260 [ 36.858222][ T795] ? xfd_validate_state+0x68/0x140 [ 36.858247][ T795] ? __cfi_ksys_write+0x10/0x10 [ 36.858266][ T795] ? __kasan_check_write+0x18/0x20 [ 36.858285][ T795] ? fpregs_restore_userregs+0x11c/0x260 [ 36.858308][ T795] __x64_sys_write+0x7f/0x90 [ 36.858328][ T795] x64_sys_call+0x271c/0x2ee0 [ 36.858345][ T795] do_syscall_64+0x57/0xf0 [ 36.858364][ T795] ? clear_bhb_loop+0x50/0xa0 [ 36.858388][ T795] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 36.858411][ T795] RIP: 0033:0x7fdeab99e159 [ 36.858428][ T795] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 36.858443][ T795] RSP: 002b:00007fdeac7f0028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 36.858463][ T795] RAX: ffffffffffffffda RBX: 00007fdeabc26090 RCX: 00007fdeab99e159 [ 36.858478][ T795] RDX: 000000000208e24b RSI: 0000200000000000 RDI: 0000000000000004 [ 36.858491][ T795] RBP: 00007fdeaba3506b R08: 0000000000000000 R09: 0000000000000000 [ 36.858503][ T795] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 36.858515][ T795] R13: 00007fdeabc26128 R14: 00007fdeabc26090 R15: 00007ffe4dc48318 [ 36.858531][ T795] [ 36.864523][ T760] usb 3-1: new full-speed USB device number 9 using dummy_hcd [ 37.115457][ T808] FAULT_INJECTION: forcing a failure. [ 37.115457][ T808] name failslab, interval 1, probability 0, space 0, times 0 [ 37.185088][ T808] CPU: 0 UID: 0 PID: 808 Comm: syz.1.197 Not tainted syzkaller #0 ca18b34a931c0a5bfcb0703d5cd6c5f88dc9958b [ 37.185127][ T808] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 37.185138][ T808] Call Trace: [ 37.185153][ T808] [ 37.185162][ T808] __dump_stack+0x21/0x30 [ 37.185195][ T808] dump_stack_lvl+0x140/0x1c0 [ 37.185221][ T808] ? __cfi_dump_stack_lvl+0x10/0x10 [ 37.185247][ T808] dump_stack+0x19/0x20 [ 37.185270][ T808] should_fail_ex+0x3c2/0x510 [ 37.185296][ T808] should_failslab+0xac/0x100 [ 37.185320][ T808] __kmalloc_node_track_caller_noprof+0x65/0x4f0 [ 37.185346][ T808] ? kstrdup_const+0x45/0x60 [ 37.185367][ T808] kstrdup+0x4d/0x130 [ 37.185385][ T808] ? kstrdup_const+0x3a/0x60 [ 37.185405][ T808] kstrdup_const+0x45/0x60 [ 37.185424][ T808] kvasprintf_const+0xdb/0x250 [ 37.185447][ T808] kobject_set_name_vargs+0x65/0x120 [ 37.185471][ T808] kobject_init_and_add+0xef/0x1a0 [ 37.185494][ T808] ? __cfi_kobject_init_and_add+0x10/0x10 [ 37.185515][ T808] ? __kasan_kmalloc+0x96/0xb0 [ 37.185541][ T808] ? __kmalloc_cache_noprof+0x23c/0x470 [ 37.185565][ T808] ? klist_init+0x29/0xe0 [ 37.185593][ T808] bus_add_driver+0x2a2/0x730 [ 37.185620][ T808] driver_register+0x2b7/0x3c0 [ 37.185644][ T808] usb_gadget_register_driver_owner+0xfc/0x270 [ 37.185671][ T808] raw_ioctl+0x144c/0x37a0 [ 37.185694][ T808] ? __cfi_raw_ioctl+0x10/0x10 [ 37.185714][ T808] ? selinux_file_ioctl+0x732/0x1480 [ 37.185738][ T808] ? __cfi_selinux_file_ioctl+0x10/0x10 [ 37.185767][ T808] ? bpf_lsm_file_ioctl+0xd/0x20 [ 37.185793][ T808] ? security_file_ioctl+0x3e/0x110 [ 37.185816][ T808] ? __cfi_raw_ioctl+0x10/0x10 [ 37.185835][ T808] __se_sys_ioctl+0x126/0x1b0 [ 37.185862][ T808] __x64_sys_ioctl+0x7f/0xa0 [ 37.185887][ T808] x64_sys_call+0x1878/0x2ee0 [ 37.185907][ T808] do_syscall_64+0x57/0xf0 [ 37.185930][ T808] ? clear_bhb_loop+0x50/0xa0 [ 37.185957][ T808] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 37.185984][ T808] RIP: 0033:0x7fcd8cf9ddeb [ 37.186003][ T808] Code: 00 48 89 44 24 18 31 c0 48 8d 44 24 60 c7 04 24 10 00 00 00 48 89 44 24 08 48 8d 44 24 20 48 89 44 24 10 b8 10 00 00 00 0f 05 <89> c2 3d 00 f0 ff ff 77 1c 48 8b 44 24 18 64 48 2b 04 25 28 00 00 [ 37.186021][ T808] RSP: 002b:00007fcd8dedaf00 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 37.186046][ T808] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 00007fcd8cf9ddeb [ 37.186064][ T808] RDX: 0000000000000000 RSI: 0000000000005501 RDI: 0000000000000004 [ 37.186078][ T808] RBP: 00007fcd8dedbfd0 R08: 0000000000000001 R09: 00000000ffffffff [ 37.186094][ T808] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 37.186108][ T808] R13: 00002000000000c0 R14: 0000000000000000 R15: 0000000000000000 [ 37.186125][ T808] [ 37.186134][ T808] kobject: can not set name properly! [ 37.224541][ T293] EXT4-fs warning (device sda1): ext4_dirblock_csum_verify:406: inode #1262: comm syz-executor: No space for directory leaf checksum. Please run e2fsck -D. [ 37.228264][ T808] UDC core: USB Raw Gadget: driver registration failed: -12 [ 37.241280][ T293] EXT4-fs error (device sda1): htree_dirblock_to_tree:1083: inode #1262: comm syz-executor: Directory block failed checksum [ 37.241861][ T808] misc raw-gadget: fail, usb_gadget_register_driver returned -12 [ 37.248838][ T760] usb 3-1: device descriptor read/64, error -71 [ 37.304662][ T293] EXT4-fs warning (device sda1): ext4_dirblock_csum_verify:406: inode #1262: comm syz-executor: No space for directory leaf checksum. Please run e2fsck -D. [ 37.528568][ T293] EXT4-fs error (device sda1): ext4_empty_dir:3096: inode #1262: comm syz-executor: Directory block failed checksum [ 37.542709][ T293] EXT4-fs warning (device sda1): ext4_dirblock_csum_verify:406: inode #1262: comm syz-executor: No space for directory leaf checksum. Please run e2fsck -D. [ 37.558447][ T293] EXT4-fs error (device sda1): htree_dirblock_to_tree:1083: inode #1262: comm syz-executor: Directory block failed checksum [ 37.573985][ T293] EXT4-fs warning (device sda1): ext4_dirblock_csum_verify:406: inode #1262: comm syz-executor: No space for directory leaf checksum. Please run e2fsck -D. [ 37.574512][ T760] usb 3-1: device descriptor read/64, error -71 [ 37.589689][ T293] EXT4-fs error (device sda1): ext4_empty_dir:3096: inode #1262: comm syz-executor: Directory block failed checksum [ 37.612679][ T293] EXT4-fs warning (device sda1): ext4_dirblock_csum_verify:406: inode #1262: comm syz-executor: No space for directory leaf checksum. Please run e2fsck -D. [ 37.628616][ T293] EXT4-fs error (device sda1): htree_dirblock_to_tree:1083: inode #1262: comm syz-executor: Directory block failed checksum [ 37.641881][ T293] EXT4-fs warning (device sda1): ext4_dirblock_csum_verify:406: inode #1262: comm syz-executor: No space for directory leaf checksum. Please run e2fsck -D. [ 37.641942][ T821] bridge0: entered allmulticast mode [ 37.663054][ T293] EXT4-fs error (device sda1): ext4_empty_dir:3096: inode #1262: comm syz-executor: Directory block failed checksum [ 37.675304][ T821] bridge0: left allmulticast mode [ 37.680618][ T293] EXT4-fs warning (device sda1): ext4_dirblock_csum_verify:406: inode #1262: comm syz-executor: No space for directory leaf checksum. Please run e2fsck -D. [ 37.696470][ T293] EXT4-fs error (device sda1): htree_dirblock_to_tree:1083: inode #1262: comm syz-executor: Directory block failed checksum [ 37.699428][ T821] overlayfs: failed to resolve './file2': -2 [ 37.709616][ T293] EXT4-fs warning (device sda1): ext4_dirblock_csum_verify:406: inode #1262: comm syz-executor: No space for directory leaf checksum. Please run e2fsck -D. [ 37.715838][ T760] usb usb3-port1: attempt power cycle [ 37.731320][ T293] EXT4-fs error (device sda1): ext4_empty_dir:3096: inode #1262: comm syz-executor: Directory block failed checksum [ 37.749058][ T293] EXT4-fs warning (device sda1): ext4_dirblock_csum_verify:406: inode #1262: comm syz-executor: No space for directory leaf checksum. Please run e2fsck -D. [ 37.764737][ T293] EXT4-fs error (device sda1): htree_dirblock_to_tree:1083: inode #1262: comm syz-executor: Directory block failed checksum [ 37.777750][ T293] EXT4-fs warning (device sda1): ext4_dirblock_csum_verify:406: inode #1262: comm syz-executor: No space for directory leaf checksum. Please run e2fsck -D. [ 37.777821][ T825] FAULT_INJECTION: forcing a failure. [ 37.777821][ T825] name failslab, interval 1, probability 0, space 0, times 0 [ 37.793443][ T293] EXT4-fs error (device sda1): ext4_empty_dir:3096: inode #1262: comm syz-executor: Directory block failed checksum [ 37.806796][ T825] CPU: 1 UID: 0 PID: 825 Comm: syz.3.204 Not tainted syzkaller #0 ca18b34a931c0a5bfcb0703d5cd6c5f88dc9958b [ 37.806824][ T825] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 37.806835][ T825] Call Trace: [ 37.806841][ T825] [ 37.806853][ T825] __dump_stack+0x21/0x30 [ 37.806885][ T825] dump_stack_lvl+0x140/0x1c0 [ 37.806911][ T825] ? __cfi_dump_stack_lvl+0x10/0x10 [ 37.806937][ T825] ? __kasan_check_write+0x18/0x20 [ 37.806956][ T825] ? mutex_unlock+0x90/0x240 [ 37.806980][ T825] dump_stack+0x19/0x20 [ 37.807003][ T825] should_fail_ex+0x3c2/0x510 [ 37.807025][ T825] should_failslab+0xac/0x100 [ 37.807048][ T825] __kmalloc_node_track_caller_noprof+0x65/0x4f0 [ 37.807078][ T825] ? __cfi_selinux_kernfs_init_security+0x10/0x10 [ 37.807098][ T825] ? kstrdup_const+0x45/0x60 [ 37.807115][ T825] kstrdup+0x4d/0x130 [ 37.807129][ T825] ? kstrdup_const+0x3a/0x60 [ 37.807146][ T825] kstrdup_const+0x45/0x60 [ 37.807161][ T825] __kernfs_new_node+0xaa/0x740 [ 37.807186][ T825] ? bpf_lsm_kernfs_init_security+0xd/0x20 [ 37.807210][ T825] ? kernfs_new_node+0x280/0x280 [ 37.807234][ T825] ? __kasan_check_write+0x18/0x20 [ 37.807252][ T825] ? down_write+0xee/0x2b0 [ 37.807275][ T825] ? rpm_resume+0xb92/0x1670 [ 37.807299][ T825] kernfs_new_node+0x154/0x280 [ 37.807322][ T825] kernfs_create_link+0xa8/0x200 [ 37.807339][ T825] sysfs_do_create_link_sd+0x8a/0x120 [ 37.807360][ T825] sysfs_create_link+0x6c/0x90 [ 37.807380][ T825] driver_sysfs_add+0x91/0x240 [ 37.807397][ T825] really_probe+0x178/0x8b0 [ 37.807415][ T825] __driver_probe_device+0x193/0x280 [ 37.807432][ T825] driver_probe_device+0x54/0x3f0 [ 37.807451][ T825] __driver_attach+0x422/0x5e0 [ 37.807468][ T825] bus_for_each_dev+0x246/0x2d0 [ 37.807490][ T825] ? __cfi___driver_attach+0x10/0x10 [ 37.807507][ T825] ? __cfi_bus_for_each_dev+0x10/0x10 [ 37.807528][ T825] ? __kasan_kmalloc+0x96/0xb0 [ 37.807551][ T825] ? _raw_spin_unlock+0x45/0x60 [ 37.807568][ T825] ? klist_add_tail+0x1dd/0x220 [ 37.807585][ T825] driver_attach+0x46/0x50 [ 37.807602][ T825] bus_add_driver+0x393/0x730 [ 37.807624][ T825] driver_register+0x2b7/0x3c0 [ 37.807644][ T825] usb_gadget_register_driver_owner+0xfc/0x270 [ 37.807668][ T825] raw_ioctl+0x144c/0x37a0 [ 37.807687][ T825] ? __cfi_raw_ioctl+0x10/0x10 [ 37.807704][ T825] ? selinux_file_ioctl+0x732/0x1480 [ 37.807722][ T825] ? __cfi_selinux_file_ioctl+0x10/0x10 [ 37.807746][ T825] ? bpf_lsm_file_ioctl+0xd/0x20 [ 37.807769][ T825] ? security_file_ioctl+0x3e/0x110 [ 37.807787][ T825] ? __cfi_raw_ioctl+0x10/0x10 [ 37.807803][ T825] __se_sys_ioctl+0x126/0x1b0 [ 37.807825][ T825] __x64_sys_ioctl+0x7f/0xa0 [ 37.807847][ T825] x64_sys_call+0x1878/0x2ee0 [ 37.807864][ T825] do_syscall_64+0x57/0xf0 [ 37.807883][ T825] ? clear_bhb_loop+0x50/0xa0 [ 37.807907][ T825] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 37.807929][ T825] RIP: 0033:0x7fdeab99ddeb [ 37.807946][ T825] Code: 00 48 89 44 24 18 31 c0 48 8d 44 24 60 c7 04 24 10 00 00 00 48 89 44 24 08 48 8d 44 24 20 48 89 44 24 10 b8 10 00 00 00 0f 05 <89> c2 3d 00 f0 ff ff 77 1c 48 8b 44 24 18 64 48 2b 04 25 28 00 00 [ 37.807961][ T825] RSP: 002b:00007fdeac80ef00 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 37.807982][ T825] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 00007fdeab99ddeb [ 37.807995][ T825] RDX: 0000000000000000 RSI: 0000000000005501 RDI: 0000000000000004 [ 37.808007][ T825] RBP: 00007fdeac80ffd0 R08: 0000000000000001 R09: 00000000ffffffff [ 37.808019][ T825] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 37.808030][ T825] R13: 00002000000000c0 R14: 0000000000000000 R15: 0000000000000000 [ 37.808045][ T825] [ 37.808057][ T825] raw-gadget.1 gadget.3: really_probe: driver_sysfs_add failed [ 38.187499][ T825] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 38.198942][ T825] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 38.226706][ T61] bridge_slave_1: left allmulticast mode [ 38.232397][ T61] bridge_slave_1: left promiscuous mode [ 38.238090][ T61] bridge0: port 2(bridge_slave_1) entered disabled state [ 38.244537][ T760] usb 3-1: new full-speed USB device number 10 using dummy_hcd [ 38.258128][ T61] bridge_slave_0: left allmulticast mode [ 38.264049][ T61] bridge_slave_0: left promiscuous mode [ 38.265611][ T760] usb 3-1: device descriptor read/8, error -71 [ 38.274564][ T61] bridge0: port 1(bridge_slave_0) entered disabled state [ 38.377178][ T61] veth1_macvtap: left promiscuous mode [ 38.382906][ T61] veth0_vlan: left promiscuous mode [ 38.410461][ T760] usb 3-1: device descriptor read/8, error -71 [ 38.436777][ T36] kauditd_printk_skb: 11 callbacks suppressed [ 38.436791][ T36] audit: type=1400 audit(1790808041.789:264): avc: denied { mounton } for pid=833 comm="syz-executor" path="/" dev="sda1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:root_t tclass=dir permissive=1 [ 38.494614][ T833] bridge0: port 1(bridge_slave_0) entered blocking state [ 38.501684][ T833] bridge0: port 1(bridge_slave_0) entered disabled state [ 38.509256][ T833] bridge_slave_0: entered allmulticast mode [ 38.515538][ T833] bridge_slave_0: entered promiscuous mode [ 38.522308][ T833] bridge0: port 2(bridge_slave_1) entered blocking state [ 38.529492][ T833] bridge0: port 2(bridge_slave_1) entered disabled state [ 38.534533][ T553] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 38.536683][ T833] bridge_slave_1: entered allmulticast mode [ 38.550451][ T833] bridge_slave_1: entered promiscuous mode [ 38.585197][ T833] bridge0: port 2(bridge_slave_1) entered blocking state [ 38.592296][ T833] bridge0: port 2(bridge_slave_1) entered forwarding state [ 38.599603][ T833] bridge0: port 1(bridge_slave_0) entered blocking state [ 38.606649][ T833] bridge0: port 1(bridge_slave_0) entered forwarding state [ 38.625426][ T387] bridge0: port 1(bridge_slave_0) entered disabled state [ 38.632783][ T387] bridge0: port 2(bridge_slave_1) entered disabled state [ 38.641984][ T309] bridge0: port 1(bridge_slave_0) entered blocking state [ 38.649064][ T309] bridge0: port 1(bridge_slave_0) entered forwarding state [ 38.657853][ T387] bridge0: port 2(bridge_slave_1) entered blocking state [ 38.664951][ T387] bridge0: port 2(bridge_slave_1) entered forwarding state [ 38.674521][ T760] usb 3-1: new full-speed USB device number 11 using dummy_hcd [ 38.691762][ T833] veth0_vlan: entered promiscuous mode [ 38.701691][ T833] veth1_macvtap: entered promiscuous mode [ 38.705001][ T553] usb 2-1: Using ep0 maxpacket: 32 [ 38.716499][ T553] usb 2-1: config 0 has no interfaces? [ 38.722403][ T760] usb 3-1: device descriptor read/8, error -71 [ 38.731391][ T36] audit: type=1400 audit(1790808042.079:265): avc: denied { mounton } for pid=833 comm="syz-executor" path="/root/syzkaller.t5Apii/syz-tmp/newroot/sys/kernel/debug" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=dir permissive=1 [ 38.761374][ T553] usb 2-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 38.770527][ T553] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 38.778941][ T553] usb 2-1: Product: syz [ 38.783123][ T553] usb 2-1: Manufacturer: syz [ 38.789337][ T553] usb 2-1: SerialNumber: syz [ 38.794935][ T553] usb 2-1: config 0 descriptor?? [ 38.822709][ T36] audit: type=1400 audit(1790808042.169:266): avc: denied { associate } for pid=843 comm="syz.3.211" name="file0" scontext=root:object_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 38.885281][ T760] usb 3-1: device descriptor read/8, error -71 [ 38.984883][ T864] FAULT_INJECTION: forcing a failure. [ 38.984883][ T864] name failslab, interval 1, probability 0, space 0, times 0 [ 38.997691][ T864] CPU: 0 UID: 0 PID: 864 Comm: syz.4.219 Not tainted syzkaller #0 ca18b34a931c0a5bfcb0703d5cd6c5f88dc9958b [ 38.997717][ T864] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 38.997726][ T864] Call Trace: [ 38.997731][ T864] [ 38.997736][ T864] __dump_stack+0x21/0x30 [ 38.997762][ T864] dump_stack_lvl+0x140/0x1c0 [ 38.997784][ T864] ? __cfi_dump_stack_lvl+0x10/0x10 [ 38.997807][ T864] dump_stack+0x19/0x20 [ 38.997828][ T864] should_fail_ex+0x3c2/0x510 [ 38.997850][ T864] should_failslab+0xac/0x100 [ 38.997872][ T864] kmem_cache_alloc_noprof+0x42/0x410 [ 38.997891][ T864] ? security_file_alloc+0x49/0x220 [ 38.997910][ T864] ? kasan_save_alloc_info+0x3a/0x50 [ 38.997927][ T864] security_file_alloc+0x49/0x220 [ 38.997945][ T864] init_file+0x9e/0x210 [ 38.997968][ T864] alloc_empty_file+0xd9/0x270 [ 38.997991][ T864] path_openat+0xf4/0x35a0 [ 38.998014][ T864] ? stack_depot_save_flags+0x38/0x800 [ 38.998036][ T864] ? do_pte_missing+0x28e9/0x4440 [ 38.998059][ T864] ? kasan_save_track+0x4f/0x80 [ 38.998079][ T864] ? kasan_save_track+0x3e/0x80 [ 38.998098][ T864] ? kasan_save_alloc_info+0x3a/0x50 [ 38.998115][ T864] ? __kasan_slab_alloc+0x73/0x90 [ 38.998136][ T864] ? getname+0x1b/0x30 [ 38.998155][ T864] ? do_sys_openat2+0xda/0x1d0 [ 38.998179][ T864] ? __x64_sys_openat+0x13a/0x170 [ 38.998203][ T864] ? x64_sys_call+0xe69/0x2ee0 [ 38.998219][ T864] ? do_syscall_64+0x57/0xf0 [ 38.998240][ T864] ? do_filp_open+0x440/0x440 [ 38.998264][ T864] do_filp_open+0x1f2/0x440 [ 38.998287][ T864] ? __cfi_do_filp_open+0x10/0x10 [ 38.998312][ T864] ? alloc_fd+0x4c1/0x570 [ 38.998333][ T864] do_sys_openat2+0x134/0x1d0 [ 38.998358][ T864] ? do_sys_open+0x100/0x100 [ 38.998381][ T864] ? __kasan_check_write+0x18/0x20 [ 38.998400][ T864] ? do_user_addr_fault+0xbf5/0x1230 [ 38.998417][ T864] ? __cfi_ksys_write+0x10/0x10 [ 38.998438][ T864] __x64_sys_openat+0x13a/0x170 [ 38.998463][ T864] x64_sys_call+0xe69/0x2ee0 [ 38.998480][ T864] do_syscall_64+0x57/0xf0 [ 38.998498][ T864] ? clear_bhb_loop+0x50/0xa0 [ 38.998521][ T864] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 38.998543][ T864] RIP: 0033:0x7f7bf8f5e98e [ 38.998567][ T864] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 38.998582][ T864] RSP: 002b:00007f7bf9ddaea8 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 38.998603][ T864] RAX: ffffffffffffffda RBX: 00007f7bf9ddd6c0 RCX: 00007f7bf8f5e98e [ 38.998618][ T864] RDX: 0000000000000002 RSI: 00007f7bf903440a RDI: ffffffffffffff9c [ 38.998630][ T864] RBP: 00007f7bf9ddd090 R08: 0000000000000000 R09: 0000000000000000 [ 38.998643][ T864] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000036 [ 38.998655][ T864] R13: 00002000000000c0 R14: 0000000000000001 R15: 00007ffc16bac778 [ 38.998670][ T864] [ 39.004917][ T760] usb usb3-port1: unable to enumerate USB device [ 39.037016][ T648] usb 2-1: USB disconnect, device number 7 [ 39.370493][ T36] audit: type=1400 audit(1790808042.719:267): avc: denied { setattr } for pid=867 comm="syz.3.221" name="fuse" dev="devtmpfs" ino=23 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fuse_device_t tclass=chr_file permissive=1 [ 39.393789][ T36] audit: type=1400 audit(1790808042.749:268): avc: granted { setsecparam } for pid=867 comm="syz.3.221" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security [ 39.566836][ T36] audit: type=1400 audit(1790808042.919:269): avc: denied { nlmsg_write } for pid=886 comm="syz.1.229" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_audit_socket permissive=1 [ 39.592875][ T889] netlink: 12 bytes leftover after parsing attributes in process `syz.1.230'. [ 39.602424][ T889] netlink: 12 bytes leftover after parsing attributes in process `syz.1.230'. [ 39.662587][ T36] audit: type=1400 audit(1790808043.009:270): avc: denied { name_bind } for pid=890 comm="syz.1.231" src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=udp_socket permissive=1 [ 39.718295][ T553] usb 4-1: new high-speed USB device number 11 using dummy_hcd [ 39.757379][ T760] usb 5-1: new full-speed USB device number 2 using dummy_hcd [ 39.884504][ T553] usb 4-1: Using ep0 maxpacket: 16 [ 39.896192][ T36] audit: type=1400 audit(1790808043.249:271): avc: denied { read } for pid=295 comm="syz-executor" name="loop2" dev="devtmpfs" ino=51 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 39.924553][ T36] audit: type=1400 audit(1790808043.249:272): avc: denied { open } for pid=295 comm="syz-executor" path="/dev/loop2" dev="devtmpfs" ino=51 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 39.953473][ T553] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 39.965211][ T760] usb 5-1: unable to get BOS descriptor or descriptor too short [ 39.973336][ T553] usb 4-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 39.992235][ T36] audit: type=1400 audit(1790808043.249:273): avc: denied { ioctl } for pid=295 comm="syz-executor" path="/dev/loop2" dev="devtmpfs" ino=51 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 40.017710][ T760] usb 5-1: not running at top speed; connect to a high speed hub [ 40.028297][ T760] usb 5-1: config 4 has an invalid interface number: 106 but max is 0 [ 40.036607][ T760] usb 5-1: config 4 has no interface number 0 [ 40.042946][ T760] usb 5-1: config 4 interface 106 has no altsetting 0 [ 40.052997][ T553] usb 4-1: New USB device found, idVendor=258a, idProduct=6a88, bcdDevice= 0.00 [ 40.064413][ T553] usb 4-1: New USB device strings: Mfr=117, Product=243, SerialNumber=0 [ 40.074866][ T553] usb 4-1: Product: syz [ 40.081443][ T760] usb 5-1: string descriptor 0 read error: -22 [ 40.088216][ T760] usb 5-1: New USB device found, idVendor=0408, idProduct=4033, bcdDevice=96.91 [ 40.097610][ T553] usb 4-1: Manufacturer: syz [ 40.108489][ T553] usb 4-1: config 0 descriptor?? [ 40.117317][ T760] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 40.138579][ T760] usb 5-1: Found UVC 0.00 device (0408:4033) [ 40.164525][ T760] usb 5-1: Forcing UVC version to 1.0a [ 40.170131][ T760] usb 5-1: No valid video chain found. [ 40.330572][ C1] raw-gadget.0 gadget.3: ignoring, device is not running [ 40.337999][ C1] raw-gadget.0 gadget.3: ignoring, device is not running [ 40.345347][ C1] raw-gadget.0 gadget.3: ignoring, device is not running [ 40.352649][ C1] raw-gadget.0 gadget.3: ignoring, device is not running [ 40.373832][ T553] usb 4-1: USB disconnect, device number 11 [ 40.474595][ T9] usb 3-1: new low-speed USB device number 12 using dummy_hcd [ 40.604550][ T9] usb 3-1: device descriptor read/64, error -71 [ 40.844581][ T9] usb 3-1: device descriptor read/64, error -71 [ 41.094525][ T9] usb 3-1: new low-speed USB device number 13 using dummy_hcd [ 41.254560][ T9] usb 3-1: device descriptor read/64, error -71 [ 41.504508][ T9] usb 3-1: device descriptor read/64, error -71 [ 41.615680][ T9] usb usb3-port1: attempt power cycle [ 41.666121][ T932] kernel profiling enabled (shift: 4) [ 41.917254][ T948] program syz.1.257 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 41.974571][ T9] usb 3-1: new low-speed USB device number 14 using dummy_hcd [ 42.007441][ T9] usb 3-1: device descriptor read/8, error -71 [ 42.122592][ T959] FAULT_INJECTION: forcing a failure. [ 42.122592][ T959] name failslab, interval 1, probability 0, space 0, times 0 [ 42.135377][ T959] CPU: 1 UID: 0 PID: 959 Comm: syz.1.261 Not tainted syzkaller #0 ca18b34a931c0a5bfcb0703d5cd6c5f88dc9958b [ 42.135409][ T959] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 42.135421][ T959] Call Trace: [ 42.135427][ T959] [ 42.135434][ T959] __dump_stack+0x21/0x30 [ 42.135464][ T959] dump_stack_lvl+0x140/0x1c0 [ 42.135488][ T959] ? __cfi_dump_stack_lvl+0x10/0x10 [ 42.135512][ T959] ? __kasan_check_write+0x18/0x20 [ 42.135532][ T959] ? finish_task_switch+0x1d9/0x770 [ 42.135556][ T959] dump_stack+0x19/0x20 [ 42.135578][ T959] should_fail_ex+0x3c2/0x510 [ 42.135601][ T959] should_failslab+0xac/0x100 [ 42.135624][ T959] kmem_cache_alloc_node_noprof+0x45/0x420 [ 42.135644][ T959] ? __alloc_skb+0x10c/0x360 [ 42.135666][ T959] ? __sched_text_start+0x10/0x10 [ 42.135685][ T959] ? plist_add+0x4d4/0x570 [ 42.135704][ T959] __alloc_skb+0x10c/0x360 [ 42.135734][ T959] tipc_msg_reverse+0x248/0x950 [ 42.135752][ T959] ? __cfi___futex_queue+0x10/0x10 [ 42.135778][ T959] ? schedule+0xc5/0x240 [ 42.135799][ T959] tipc_sk_respond+0x139/0x430 [ 42.135822][ T959] ? tipc_sk_sock_err+0x320/0x320 [ 42.135844][ T959] ? __futex_wait+0x330/0x3d0 [ 42.135863][ T959] __tipc_shutdown+0xf0d/0x14e0 [ 42.135887][ T959] ? tipc_recvstream+0xe80/0xe80 [ 42.135908][ T959] ? __cfi_woken_wake_function+0x10/0x10 [ 42.135931][ T959] ? locks_remove_file+0x37e/0x1050 [ 42.135952][ T959] ? __cfi_futex_wait+0x10/0x10 [ 42.135971][ T959] tipc_release+0xe0/0x1c40 [ 42.135991][ T959] ? __cfi_locks_remove_file+0x10/0x10 [ 42.136011][ T959] ? vfs_write+0xbcf/0xfd0 [ 42.136031][ T959] ? __cfi_tipc_release+0x10/0x10 [ 42.136052][ T959] ? __kasan_check_write+0x18/0x20 [ 42.136070][ T959] ? down_write+0xee/0x2b0 [ 42.136092][ T959] ? __cfi_down_write+0x10/0x10 [ 42.136114][ T959] ? mutex_unlock+0x90/0x240 [ 42.136137][ T959] sock_close+0xb4/0x220 [ 42.136156][ T959] ? __cfi_sock_close+0x10/0x10 [ 42.136174][ T959] __fput+0x208/0xa30 [ 42.136200][ T959] __fput_sync+0x4a/0x70 [ 42.136222][ T959] __se_sys_close+0x172/0x1f0 [ 42.136240][ T959] __x64_sys_close+0x3c/0x60 [ 42.136256][ T959] x64_sys_call+0x2560/0x2ee0 [ 42.136273][ T959] do_syscall_64+0x57/0xf0 [ 42.136291][ T959] ? clear_bhb_loop+0x50/0xa0 [ 42.136324][ T959] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 42.136348][ T959] RIP: 0033:0x7fcd8cf9e159 [ 42.136364][ T959] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 42.136378][ T959] RSP: 002b:00007fcd8dedd028 EFLAGS: 00000246 ORIG_RAX: 0000000000000003 [ 42.136398][ T959] RAX: ffffffffffffffda RBX: 00007fcd8d225fa0 RCX: 00007fcd8cf9e159 [ 42.136413][ T959] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000003 [ 42.136424][ T959] RBP: 00007fcd8d03506b R08: 0000000000000000 R09: 0000000000000000 [ 42.136435][ T959] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 42.136454][ T959] R13: 00007fcd8d226038 R14: 00007fcd8d225fa0 R15: 00007ffda1fd7e28 [ 42.136471][ T959] [ 42.149597][ T9] usb 3-1: device descriptor read/8, error -71 [ 42.210224][ T961] overlayfs: conflicting lowerdir path [ 42.473329][ T9] usb 3-1: new low-speed USB device number 15 using dummy_hcd [ 42.498011][ T9] usb 3-1: device descriptor read/8, error -71 [ 42.529034][ T353] usb 5-1: USB disconnect, device number 2 [ 42.604994][ T969] process 'syz.3.265' launched '/dev/fd/8' with NULL argv: empty string added [ 42.636275][ T9] usb 3-1: device descriptor read/8, error -71 [ 42.745632][ T9] usb usb3-port1: unable to enumerate USB device [ 43.064526][ T517] usb 4-1: new high-speed USB device number 12 using dummy_hcd [ 43.243041][ T517] usb 4-1: config 1 has an invalid descriptor of length 42, skipping remainder of the config [ 43.277114][ T517] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 43.299578][ T517] usb 4-1: config 1 interface 1 altsetting 1 has an endpoint descriptor with address 0x63, changing to 0x3 [ 43.311983][ T517] usb 4-1: config 1 interface 1 altsetting 1 endpoint 0x3 has an invalid bInterval 255, changing to 7 [ 43.323825][ T517] usb 4-1: config 1 interface 1 altsetting 1 endpoint 0x3 has invalid maxpacket 59364, setting to 1024 [ 43.335711][ T517] usb 4-1: config 1 interface 1 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 43.353275][ T517] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 43.363627][ T517] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 43.372466][ T517] usb 4-1: Product: syz [ 43.377470][ T517] usb 4-1: Manufacturer: syz [ 43.382230][ T517] usb 4-1: SerialNumber: syz [ 43.455753][ T36] kauditd_printk_skb: 829 callbacks suppressed [ 43.455770][ T36] audit: type=1400 audit(1790808046.809:1103): avc: denied { accept } for pid=998 comm="syz.2.276" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=unix_dgram_socket permissive=1 [ 43.496973][ T36] audit: type=1400 audit(1790808046.809:1104): avc: denied { ioctl } for pid=998 comm="syz.2.276" path="/dev/rtc0" dev="devtmpfs" ino=195 ioctlcmd=0x7007 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 43.514518][ T1000] audit: audit_backlog=65 > audit_backlog_limit=64 [ 43.528106][ T988] audit: audit_backlog=65 > audit_backlog_limit=64 [ 43.529120][ T1003] audit: audit_backlog=65 > audit_backlog_limit=64 [ 43.537406][ T988] audit: audit_lost=1 audit_rate_limit=0 audit_backlog_limit=64 [ 43.550817][ T1003] audit: audit_lost=2 audit_rate_limit=0 audit_backlog_limit=64 [ 43.554494][ T36] audit: type=1400 audit(1790808046.809:1105): avc: denied { accept } for pid=998 comm="syz.2.276" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=unix_dgram_socket permissive=1 [ 43.559779][ T1000] audit: audit_lost=3 audit_rate_limit=0 audit_backlog_limit=64 [ 43.583613][ T988] audit: backlog limit exceeded [ 43.744534][ T760] usb 2-1: new full-speed USB device number 8 using dummy_hcd [ 43.884513][ T760] usb 2-1: device descriptor read/64, error -71 [ 44.124523][ T760] usb 2-1: device descriptor read/64, error -71 [ 44.216077][ T980] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 44.224708][ T980] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 44.236421][ T980] netlink: 24 bytes leftover after parsing attributes in process `syz.3.271'. [ 44.247178][ T980] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 44.257899][ T980] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 44.269510][ T980] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 44.278223][ T980] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 44.364558][ T760] usb 2-1: new full-speed USB device number 9 using dummy_hcd [ 44.488384][ T517] cdc_ncm 4-1:1.0: bind() failure [ 44.500856][ T517] cdc_ncm 4-1:1.1: probe with driver cdc_ncm failed with error -71 [ 44.504547][ T760] usb 2-1: device descriptor read/64, error -71 [ 44.509096][ T517] cdc_mbim 4-1:1.1: probe with driver cdc_mbim failed with error -71 [ 44.524697][ T517] usb 4-1: USB disconnect, device number 12 [ 44.530158][ T312] EXT4-fs warning: 192 callbacks suppressed [ 44.530175][ T312] EXT4-fs warning (device sda1): ext4_dirblock_csum_verify:406: inode #1262: comm udevd: No space for directory leaf checksum. Please run e2fsck -D. [ 44.551674][ T312] EXT4-fs error: 192 callbacks suppressed [ 44.551692][ T312] EXT4-fs error (device sda1): __ext4_find_entry:1658: inode #1262: comm udevd: checksumming directory block 0 [ 44.584759][ T312] EXT4-fs warning (device sda1): ext4_dirblock_csum_verify:406: inode #1262: comm udevd: No space for directory leaf checksum. Please run e2fsck -D. [ 44.599993][ T312] EXT4-fs error (device sda1): __ext4_find_entry:1658: inode #1262: comm udevd: checksumming directory block 0 [ 44.623592][ T312] EXT4-fs warning (device sda1): ext4_dirblock_csum_verify:406: inode #1262: comm udevd: No space for directory leaf checksum. Please run e2fsck -D. [ 44.638689][ T312] EXT4-fs error (device sda1): __ext4_find_entry:1658: inode #1262: comm udevd: checksumming directory block 0 [ 44.657929][ T312] EXT4-fs warning (device sda1): ext4_dirblock_csum_verify:406: inode #1262: comm udevd: No space for directory leaf checksum. Please run e2fsck -D. [ 44.673411][ T312] EXT4-fs error (device sda1): __ext4_find_entry:1658: inode #1262: comm udevd: checksumming directory block 0 [ 44.784531][ T760] usb 2-1: device descriptor read/64, error -71 [ 44.846615][ T312] EXT4-fs warning (device sda1): ext4_dirblock_csum_verify:406: inode #1262: comm udevd: No space for directory leaf checksum. Please run e2fsck -D. [ 44.862232][ T312] EXT4-fs error (device sda1): __ext4_find_entry:1658: inode #1262: comm udevd: checksumming directory block 0 [ 44.890672][ T312] EXT4-fs warning (device sda1): ext4_dirblock_csum_verify:406: inode #1262: comm udevd: No space for directory leaf checksum. Please run e2fsck -D. [ 44.905767][ T312] EXT4-fs error (device sda1): __ext4_find_entry:1658: inode #1262: comm udevd: checksumming directory block 0 [ 44.918717][ T760] usb usb2-port1: attempt power cycle [ 44.987088][ T312] EXT4-fs warning (device sda1): ext4_dirblock_csum_verify:406: inode #1262: comm udevd: No space for directory leaf checksum. Please run e2fsck -D. [ 45.005290][ T312] EXT4-fs error (device sda1): __ext4_find_entry:1658: inode #1262: comm udevd: checksumming directory block 0 [ 45.027843][ T312] EXT4-fs warning (device sda1): ext4_dirblock_csum_verify:406: inode #1262: comm udevd: No space for directory leaf checksum. Please run e2fsck -D. [ 45.044567][ T312] EXT4-fs error (device sda1): __ext4_find_entry:1658: inode #1262: comm udevd: checksumming directory block 0 [ 45.274589][ T760] usb 2-1: new full-speed USB device number 10 using dummy_hcd [ 45.296834][ T760] usb 2-1: device descriptor read/8, error -71 [ 45.364524][ T553] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 45.426526][ T760] usb 2-1: device descriptor read/8, error -71 [ 45.514528][ T553] usb 5-1: Using ep0 maxpacket: 16 [ 45.521919][ T553] usb 5-1: New USB device found, idVendor=05d1, idProduct=2001, bcdDevice= 2.00 [ 45.531037][ T553] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 45.540521][ T553] usb 5-1: config 0 descriptor?? [ 45.548516][ T553] ftdi_sio 5-1:0.0: FTDI USB Serial Device converter detected [ 45.552639][ T312] EXT4-fs warning (device sda1): ext4_dirblock_csum_verify:406: inode #1262: comm udevd: No space for directory leaf checksum. Please run e2fsck -D. [ 45.571379][ T312] EXT4-fs error (device sda1): __ext4_find_entry:1658: inode #1262: comm udevd: checksumming directory block 0 [ 45.664550][ T760] usb 2-1: new full-speed USB device number 11 using dummy_hcd [ 45.686444][ T760] usb 2-1: device descriptor read/8, error -71 [ 45.747858][ T553] usb 5-1: Detected FT232A [ 45.753503][ T553] usb 5-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 45.774806][ T312] EXT4-fs warning (device sda1): ext4_dirblock_csum_verify:406: inode #1262: comm udevd: No space for directory leaf checksum. Please run e2fsck -D. [ 45.789867][ T312] EXT4-fs error (device sda1): __ext4_find_entry:1658: inode #1262: comm udevd: checksumming directory block 0 [ 45.826322][ T760] usb 2-1: device descriptor read/8, error -71 [ 45.934666][ T760] usb usb2-port1: unable to enumerate USB device [ 46.501732][ T1077] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 47.123850][ T1109] tipc: Started in network mode [ 47.128830][ T1109] tipc: Node identity ac1414aa, cluster identity 4711 [ 47.135723][ T1109] tipc: Enabling of bearer rejected, failed to enable media [ 47.146752][ T1109] tipc: New replicast peer: fe80:0000:0000:0000:0000:0000:0000:00bb [ 47.155013][ T1109] tipc: Enabled bearer , priority 10 [ 47.303308][ T312] udevd[312]: inotify_add_watch(7, /dev/loop4, 10) failed: Bad message [ 47.324356][ T312] udevd[312]: inotify_add_watch(7, /dev/loop4, 10) failed: Bad message [ 47.345861][ T312] udevd[312]: inotify_add_watch(7, /dev/loop4, 10) failed: Bad message [ 47.907705][ T1137] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 48.136453][ T517] usb 5-1: USB disconnect, device number 3 [ 48.147019][ T517] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 48.168467][ T517] ftdi_sio 5-1:0.0: device disconnected [ 48.277282][ T353] tipc: Node number set to 2886997162 [ 48.344514][ T760] usb 3-1: new high-speed USB device number 16 using dummy_hcd [ 48.391266][ T1161] input: syz0 as /devices/virtual/input/input5 [ 48.469152][ T36] kauditd_printk_skb: 3130 callbacks suppressed [ 48.469170][ T36] audit: type=1400 audit(1790808051.819:4007): avc: denied { read write } for pid=1167 comm="syz.4.326" name="vhost-vsock" dev="devtmpfs" ino=200 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 48.516994][ T1169] netlink: 8 bytes leftover after parsing attributes in process `syz.4.326'. [ 48.543823][ T760] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 48.568215][ T36] audit: type=1400 audit(1790808051.859:4008): avc: denied { read write open } for pid=1167 comm="syz.4.326" path="/dev/vhost-vsock" dev="devtmpfs" ino=200 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 48.576780][ T760] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 48.607852][ T36] audit: type=1400 audit(1790808051.859:4009): avc: denied { ioctl } for pid=1167 comm="syz.4.326" path="/dev/vhost-vsock" dev="devtmpfs" ino=200 ioctlcmd=0xaf01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 48.627492][ T760] usb 3-1: config 1 interface 1 altsetting 1 endpoint 0x82 has invalid wMaxPacketSize 0 [ 48.639990][ T36] audit: type=1400 audit(1790808051.859:4010): avc: denied { ioctl } for pid=1167 comm="syz.4.326" path="/dev/vhost-vsock" dev="devtmpfs" ino=200 ioctlcmd=0xaf23 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 48.701661][ T760] usb 3-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 0 [ 48.726133][ T760] usb 3-1: config 1 interface 1 altsetting 1 endpoint 0x3 has invalid wMaxPacketSize 0 [ 48.734524][ T36] audit: type=1400 audit(1790808051.859:4011): avc: denied { read write } for pid=1167 comm="syz.4.326" name="fuse" dev="devtmpfs" ino=23 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fuse_device_t tclass=chr_file permissive=1 [ 48.739336][ T760] usb 3-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 0 [ 48.759999][ T36] audit: type=1400 audit(1790808051.859:4012): avc: denied { read write open } for pid=1167 comm="syz.4.326" path="/dev/fuse" dev="devtmpfs" ino=23 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fuse_device_t tclass=chr_file permissive=1 [ 48.777169][ T760] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 48.814220][ T760] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 48.822456][ T760] usb 3-1: Product: В [ 48.826767][ T760] usb 3-1: SerialNumber: syz [ 48.852267][ T36] audit: type=1400 audit(1790808051.859:4013): avc: denied { mounton } for pid=1167 comm="syz.4.326" path="/27/file0" dev="tmpfs" ino=178 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 48.894525][ T36] audit: type=1400 audit(1790808051.859:4014): avc: denied { mount } for pid=1167 comm="syz.4.326" name="/" dev="fuse" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=filesystem permissive=1 [ 48.904411][ T1181] audit: audit_backlog=65 > audit_backlog_limit=64 [ 48.928348][ T1181] audit: audit_lost=81 audit_rate_limit=0 audit_backlog_limit=64 [ 49.006483][ T1187] FAULT_INJECTION: forcing a failure. [ 49.006483][ T1187] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 49.049716][ T1187] CPU: 0 UID: 0 PID: 1187 Comm: syz.3.331 Not tainted syzkaller #0 ca18b34a931c0a5bfcb0703d5cd6c5f88dc9958b [ 49.049746][ T1187] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 49.049756][ T1187] Call Trace: [ 49.049762][ T1187] [ 49.049768][ T1187] __dump_stack+0x21/0x30 [ 49.049804][ T1187] dump_stack_lvl+0x140/0x1c0 [ 49.049824][ T1187] ? __cfi_dump_stack_lvl+0x10/0x10 [ 49.049847][ T1187] ? check_stack_object+0x81/0x150 [ 49.049866][ T1187] dump_stack+0x19/0x20 [ 49.049885][ T1187] should_fail_ex+0x3c2/0x510 [ 49.049904][ T1187] should_fail+0xf/0x20 [ 49.049922][ T1187] should_fail_usercopy+0x1e/0x30 [ 49.049942][ T1187] _copy_from_user+0x20/0xa0 [ 49.049963][ T1187] memdup_user+0x81/0x170 [ 49.049980][ T1187] kvm_vcpu_ioctl+0x661/0x1000 [ 49.049998][ T1187] ? __cfi_kvm_vcpu_ioctl+0x10/0x10 [ 49.050014][ T1187] ? __cfi_vfs_write+0x10/0x10 [ 49.050030][ T1187] ? __kasan_check_write+0x18/0x20 [ 49.050047][ T1187] ? mutex_unlock+0x90/0x240 [ 49.050067][ T1187] ? __cfi_mutex_unlock+0x10/0x10 [ 49.050087][ T1187] ? __fget_files+0x2bc/0x330 [ 49.050107][ T1187] ? bpf_lsm_file_ioctl+0xd/0x20 [ 49.050129][ T1187] ? security_file_ioctl+0x3e/0x110 [ 49.050145][ T1187] ? __cfi_kvm_vcpu_ioctl+0x10/0x10 [ 49.050161][ T1187] __se_sys_ioctl+0x126/0x1b0 [ 49.050181][ T1187] __x64_sys_ioctl+0x7f/0xa0 [ 49.050200][ T1187] x64_sys_call+0x1878/0x2ee0 [ 49.050215][ T1187] do_syscall_64+0x57/0xf0 [ 49.050231][ T1187] ? clear_bhb_loop+0x50/0xa0 [ 49.050253][ T1187] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 49.050272][ T1187] RIP: 0033:0x7fdeab99e159 [ 49.050287][ T1187] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 49.050301][ T1187] RSP: 002b:00007fdeac7f0028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 49.050319][ T1187] RAX: ffffffffffffffda RBX: 00007fdeabc26090 RCX: 00007fdeab99e159 [ 49.050332][ T1187] RDX: 0000200000000340 RSI: 000000004138ae84 RDI: 0000000000000006 [ 49.050343][ T1187] RBP: 00007fdeac7f0090 R08: 0000000000000000 R09: 0000000000000000 [ 49.050353][ T1187] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 49.050364][ T1187] R13: 00007fdeabc26128 R14: 00007fdeabc26090 R15: 00007ffe4dc48318 [ 49.050379][ T1187] [ 49.073749][ T760] cdc_ncm 3-1:1.0: bind() failure [ 49.288689][ T760] cdc_ncm 3-1:1.1: CDC Union missing and no IAD found [ 49.295552][ T760] cdc_ncm 3-1:1.1: bind() failure [ 49.305389][ T760] usb 3-1: USB disconnect, device number 16 [ 49.504960][ T1192] device-mapper: ioctl: ioctl interface mismatch: kernel(4.48.0), user(1124073476.0.7388459), cmd(2) [ 49.558583][ T1193] EXT4-fs warning: 64 callbacks suppressed [ 49.558596][ T1193] EXT4-fs warning (device sda1): ext4_dirblock_csum_verify:406: inode #1262: comm syz-executor: No space for directory leaf checksum. Please run e2fsck -D. [ 49.580579][ T1193] EXT4-fs error: 64 callbacks suppressed [ 49.580597][ T1193] EXT4-fs error (device sda1): __ext4_find_entry:1658: inode #1262: comm syz-executor: checksumming directory block 0 [ 49.598915][ T1193] EXT4-fs warning (device sda1): ext4_dirblock_csum_verify:406: inode #1262: comm syz-executor: No space for directory leaf checksum. Please run e2fsck -D. [ 49.614639][ T1193] EXT4-fs error (device sda1): __ext4_find_entry:1658: inode #1262: comm syz-executor: checksumming directory block 0 [ 49.627422][ T1193] EXT4-fs warning (device sda1): ext4_dirblock_csum_verify:406: inode #1262: comm syz-executor: No space for directory leaf checksum. Please run e2fsck -D. [ 49.643279][ T1193] EXT4-fs error (device sda1): __ext4_find_entry:1658: inode #1262: comm syz-executor: checksumming directory block 0 [ 49.657077][ T1193] EXT4-fs warning (device sda1): ext4_dirblock_csum_verify:406: inode #1262: comm syz-executor: No space for directory leaf checksum. Please run e2fsck -D. [ 49.673186][ T1193] EXT4-fs error (device sda1): __ext4_find_entry:1658: inode #1262: comm syz-executor: checksumming directory block 0 [ 49.685983][ T1193] EXT4-fs warning (device sda1): ext4_dirblock_csum_verify:406: inode #1262: comm syz-executor: No space for directory leaf checksum. Please run e2fsck -D. [ 49.701697][ T1193] EXT4-fs error (device sda1): __ext4_find_entry:1658: inode #1262: comm syz-executor: checksumming directory block 0 [ 49.798717][ T1199] futex_wake_op: syz.4.335 tries to shift op by 144; fix this program [ 49.956191][ T1028] bridge_slave_1: left allmulticast mode [ 49.961902][ T1028] bridge_slave_1: left promiscuous mode [ 49.967555][ T1028] bridge0: port 2(bridge_slave_1) entered disabled state [ 49.974992][ T1028] bridge_slave_0: left allmulticast mode [ 49.980625][ T1028] bridge_slave_0: left promiscuous mode [ 49.986380][ T1028] bridge0: port 1(bridge_slave_0) entered disabled state [ 50.096170][ T1028] veth1_macvtap: left promiscuous mode [ 50.101697][ T1028] veth0_vlan: left promiscuous mode [ 50.288005][ T1206] tipc: Started in network mode [ 50.303634][ T1206] tipc: Node identity 66c19185e275, cluster identity 4711 [ 50.310950][ T1206] tipc: Enabled bearer , priority 10 [ 50.320927][ T1205] tipc: Disabling bearer [ 50.392991][ T1209] EXT4-fs warning (device sda1): ext4_dirblock_csum_verify:406: inode #1262: comm syz-executor: No space for directory leaf checksum. Please run e2fsck -D. [ 50.413733][ T1209] EXT4-fs error (device sda1): __ext4_find_entry:1658: inode #1262: comm syz-executor: checksumming directory block 0 [ 50.434860][ T1209] EXT4-fs warning (device sda1): ext4_dirblock_csum_verify:406: inode #1262: comm syz-executor: No space for directory leaf checksum. Please run e2fsck -D. [ 50.459503][ T1209] EXT4-fs error (device sda1): __ext4_find_entry:1658: inode #1262: comm syz-executor: checksumming directory block 0 [ 50.472173][ T312] EXT4-fs warning (device sda1): ext4_dirblock_csum_verify:406: inode #1262: comm udevd: No space for directory leaf checksum. Please run e2fsck -D. [ 50.476714][ T1209] EXT4-fs warning (device sda1): ext4_dirblock_csum_verify:406: inode #1262: comm syz-executor: No space for directory leaf checksum. Please run e2fsck -D. [ 50.500694][ T312] EXT4-fs error (device sda1): __ext4_find_entry:1658: inode #1262: comm udevd: checksumming directory block 0 [ 50.507778][ T1209] EXT4-fs error (device sda1): __ext4_find_entry:1658: inode #1262: comm syz-executor: checksumming directory block 0 [ 50.531116][ T1209] EXT4-fs warning (device sda1): ext4_dirblock_csum_verify:406: inode #1262: comm syz-executor: No space for directory leaf checksum. Please run e2fsck -D. [ 50.554635][ T1209] EXT4-fs error (device sda1): __ext4_find_entry:1658: inode #1262: comm syz-executor: checksumming directory block 0 [ 50.774573][ T66] usb 3-1: new high-speed USB device number 17 using dummy_hcd [ 50.926466][ T66] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 50.936629][ T66] usb 3-1: config 1 has 0 interfaces, different from the descriptor's value: 3 [ 50.948104][ T66] usb 3-1: New USB device found, idVendor=0763, idProduct=2031, bcdDevice= 0.40 [ 50.957175][ T66] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 50.965169][ T66] usb 3-1: Product: syz [ 50.969343][ T66] usb 3-1: Manufacturer: syz [ 50.973929][ T66] usb 3-1: SerialNumber: syz [ 51.184898][ T1217] input: syz1 as /devices/virtual/input/input6 [ 51.201677][ T1217] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 51.213233][ T1217] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 51.231081][ T1217] rust_binder: Failure when writing BR_NOOP at beginning of buffer. [ 51.231109][ T1217] rust_binder: Read failure Err(EFAULT) in pid:137 [ 51.408377][ T66] usb 3-1: USB disconnect, device number 17 [ 51.564548][ T517] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 51.694539][ T517] usb 5-1: device descriptor read/64, error -71 [ 51.934575][ T517] usb 5-1: device descriptor read/64, error -71 [ 52.174584][ T517] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 52.305464][ T517] usb 5-1: device descriptor read/64, error -71 [ 52.514524][ T353] usb 4-1: new high-speed USB device number 13 using dummy_hcd [ 52.544568][ T517] usb 5-1: device descriptor read/64, error -71 [ 52.564576][ T66] usb 3-1: new full-speed USB device number 18 using dummy_hcd [ 52.654872][ T517] usb usb5-port1: attempt power cycle [ 52.664515][ T353] usb 4-1: Using ep0 maxpacket: 8 [ 52.672673][ T353] usb 4-1: config index 0 descriptor too short (expected 1060, got 36) [ 52.681329][ T353] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 52.691612][ T353] usb 4-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 52.694538][ T66] usb 3-1: device descriptor read/64, error -71 [ 52.700638][ T353] usb 4-1: New USB device found, idVendor=1345, idProduct=3008, bcdDevice= 0.00 [ 52.715898][ T353] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 52.726879][ T353] usb 4-1: config 0 descriptor?? [ 52.944554][ T66] usb 3-1: device descriptor read/64, error -71 [ 53.004548][ T517] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 53.026391][ T517] usb 5-1: device descriptor read/8, error -71 [ 53.156356][ T517] usb 5-1: device descriptor read/8, error -71 [ 53.184572][ T66] usb 3-1: new full-speed USB device number 19 using dummy_hcd [ 53.334975][ T66] usb 3-1: device descriptor read/64, error -71 [ 53.394702][ T517] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 53.416259][ T517] usb 5-1: device descriptor read/8, error -71 [ 53.514899][ T36] kauditd_printk_skb: 521 callbacks suppressed [ 53.514916][ T36] audit: type=1400 audit(1790808056.869:4517): avc: denied { ioctl } for pid=1243 comm="syz.2.351" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 53.565041][ T36] audit: type=1400 audit(1790808056.919:4518): avc: denied { ioctl } for pid=1227 comm="syz.4.345" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5503 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 53.566740][ T517] usb 5-1: device descriptor read/8, error -71 [ 53.589925][ T66] usb 3-1: device descriptor read/64, error -71 [ 53.596540][ T36] audit: type=1400 audit(1790808056.919:4519): avc: denied { ioctl } for pid=1227 comm="syz.4.345" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 53.627168][ T36] audit: type=1400 audit(1790808056.919:4520): avc: denied { ioctl } for pid=1227 comm="syz.4.345" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5503 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 53.651984][ T36] audit: type=1400 audit(1790808056.919:4521): avc: denied { ioctl } for pid=1227 comm="syz.4.345" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 53.676764][ T36] audit: type=1400 audit(1790808056.919:4522): avc: denied { ioctl } for pid=1227 comm="syz.4.345" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5503 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 53.701567][ T36] audit: type=1400 audit(1790808056.949:4523): avc: denied { ioctl } for pid=1227 comm="syz.4.345" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 53.726420][ T36] audit: type=1400 audit(1790808056.989:4524): avc: denied { ioctl } for pid=1240 comm="syz.3.350" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 53.734956][ T66] usb usb3-port1: attempt power cycle [ 53.751324][ T517] usb usb5-port1: unable to enumerate USB device [ 53.758764][ T36] audit: type=1400 audit(1790808057.079:4525): avc: denied { ioctl } for pid=1227 comm="syz.4.345" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 53.787861][ T36] audit: type=1400 audit(1790808057.079:4526): avc: denied { ioctl } for pid=1243 comm="syz.2.351" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 54.094576][ T66] usb 3-1: new full-speed USB device number 20 using dummy_hcd [ 54.117289][ T66] usb 3-1: device descriptor read/8, error -71 [ 54.247027][ T66] usb 3-1: device descriptor read/8, error -71 [ 54.484540][ T66] usb 3-1: new full-speed USB device number 21 using dummy_hcd [ 54.506380][ T66] usb 3-1: device descriptor read/8, error -71 [ 54.636405][ T66] usb 3-1: device descriptor read/8, error -71 [ 54.744652][ T66] usb usb3-port1: unable to enumerate USB device [ 55.271683][ T517] usb 4-1: USB disconnect, device number 13 [ 55.294810][ T471] EXT4-fs warning: 37 callbacks suppressed [ 55.294828][ T471] EXT4-fs warning (device sda1): ext4_dirblock_csum_verify:406: inode #1262: comm udevd: No space for directory leaf checksum. Please run e2fsck -D. [ 55.316763][ T471] EXT4-fs error: 37 callbacks suppressed [ 55.316777][ T471] EXT4-fs error (device sda1): __ext4_find_entry:1658: inode #1262: comm udevd: checksumming directory block 0 [ 55.362658][ T1256] netlink: 12 bytes leftover after parsing attributes in process `syz.3.353'. [ 55.378141][ T470] EXT4-fs warning (device sda1): ext4_dirblock_csum_verify:406: inode #1262: comm udevd: No space for directory leaf checksum. Please run e2fsck -D. [ 55.409576][ T470] EXT4-fs error (device sda1): __ext4_find_entry:1658: inode #1262: comm udevd: checksumming directory block 0 [ 55.431470][ T312] EXT4-fs warning (device sda1): ext4_dirblock_csum_verify:406: inode #1262: comm udevd: No space for directory leaf checksum. Please run e2fsck -D. [ 55.462347][ T312] EXT4-fs error (device sda1): __ext4_find_entry:1658: inode #1262: comm udevd: checksumming directory block 0 [ 55.518367][ T312] EXT4-fs warning (device sda1): ext4_dirblock_csum_verify:406: inode #1262: comm udevd: No space for directory leaf checksum. Please run e2fsck -D. [ 55.542182][ T1264] EXT4-fs warning (device sda1): ext4_dirblock_csum_verify:406: inode #1262: comm syz-executor: No space for directory leaf checksum. Please run e2fsck -D. [ 55.549142][ T312] EXT4-fs error (device sda1): __ext4_find_entry:1658: inode #1262: comm udevd: checksumming directory block 0 [ 55.572780][ T1264] EXT4-fs error (device sda1): __ext4_find_entry:1658: inode #1262: comm syz-executor: checksumming directory block 0 [ 55.595529][ T1268] FAULT_INJECTION: forcing a failure. [ 55.595529][ T1268] name failslab, interval 1, probability 0, space 0, times 0 [ 55.600311][ T1264] EXT4-fs warning (device sda1): ext4_dirblock_csum_verify:406: inode #1262: comm syz-executor: No space for directory leaf checksum. Please run e2fsck -D. [ 55.622982][ T1268] CPU: 1 UID: 0 PID: 1268 Comm: syz.4.357 Not tainted syzkaller #0 ca18b34a931c0a5bfcb0703d5cd6c5f88dc9958b [ 55.623018][ T1268] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 55.623029][ T1268] Call Trace: [ 55.623035][ T1268] [ 55.623042][ T1268] __dump_stack+0x21/0x30 [ 55.623070][ T1268] dump_stack_lvl+0x140/0x1c0 [ 55.623092][ T1268] ? __cfi_dump_stack_lvl+0x10/0x10 [ 55.623117][ T1268] dump_stack+0x19/0x20 [ 55.623139][ T1268] should_fail_ex+0x3c2/0x510 [ 55.623160][ T1268] should_failslab+0xac/0x100 [ 55.623181][ T1268] kmem_cache_alloc_noprof+0x42/0x410 [ 55.623204][ T1268] ? __cfi_stack_trace_consume_entry+0x10/0x10 [ 55.623225][ T1268] ? alloc_empty_file+0xbf/0x270 [ 55.623247][ T1268] ? arch_stack_walk+0x10a/0x170 [ 55.623265][ T1268] alloc_empty_file+0xbf/0x270 [ 55.623287][ T1268] path_openat+0xf4/0x35a0 [ 55.623309][ T1268] ? stack_depot_save_flags+0x38/0x800 [ 55.623332][ T1268] ? kasan_save_track+0x4f/0x80 [ 55.623352][ T1268] ? kasan_save_track+0x3e/0x80 [ 55.623371][ T1268] ? kasan_save_alloc_info+0x3a/0x50 [ 55.623386][ T1268] ? __kasan_slab_alloc+0x73/0x90 [ 55.623405][ T1268] ? getname+0x1b/0x30 [ 55.623423][ T1268] ? do_sys_openat2+0xda/0x1d0 [ 55.623447][ T1268] ? __x64_sys_openat+0x13a/0x170 [ 55.623469][ T1268] ? x64_sys_call+0xe69/0x2ee0 [ 55.623485][ T1268] ? do_syscall_64+0x57/0xf0 [ 55.623505][ T1268] ? do_filp_open+0x440/0x440 [ 55.623528][ T1268] do_filp_open+0x1f2/0x440 [ 55.623551][ T1268] ? __cfi_do_filp_open+0x10/0x10 [ 55.623575][ T1268] ? alloc_fd+0x4c1/0x570 [ 55.623595][ T1268] do_sys_openat2+0x134/0x1d0 [ 55.623618][ T1268] ? fput+0x1a4/0x230 [ 55.623639][ T1268] ? do_sys_open+0x100/0x100 [ 55.623661][ T1268] ? ksys_write+0x1f3/0x260 [ 55.623680][ T1268] ? __cfi_ksys_write+0x10/0x10 [ 55.623698][ T1268] __x64_sys_openat+0x13a/0x170 [ 55.623722][ T1268] x64_sys_call+0xe69/0x2ee0 [ 55.623738][ T1268] do_syscall_64+0x57/0xf0 [ 55.623755][ T1268] ? clear_bhb_loop+0x50/0xa0 [ 55.623778][ T1268] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 55.623798][ T1268] RIP: 0033:0x7f7bf8f9e159 [ 55.623811][ T1268] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 55.623824][ T1268] RSP: 002b:00007f7bf9ddd028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 55.623843][ T1268] RAX: ffffffffffffffda RBX: 00007f7bf9225fa0 RCX: 00007f7bf8f9e159 [ 55.623856][ T1268] RDX: 0000000000024640 RSI: 0000200000000bc0 RDI: ffffffffffffff9c [ 55.623869][ T1268] RBP: 00007f7bf9ddd090 R08: 0000000000000000 R09: 0000000000000000 [ 55.623888][ T1268] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 55.623899][ T1268] R13: 00007f7bf9226038 R14: 00007f7bf9225fa0 R15: 00007ffc16bac778 [ 55.623916][ T1268] [ 55.899550][ T1264] EXT4-fs error (device sda1): __ext4_find_entry:1658: inode #1262: comm syz-executor: checksumming directory block 0 [ 55.912517][ T1264] EXT4-fs warning (device sda1): ext4_dirblock_csum_verify:406: inode #1262: comm syz-executor: No space for directory leaf checksum. Please run e2fsck -D. [ 55.914562][ T470] EXT4-fs warning (device sda1): ext4_dirblock_csum_verify:406: inode #1262: comm udevd: No space for directory leaf checksum. Please run e2fsck -D. [ 55.928206][ T1264] EXT4-fs error (device sda1): __ext4_find_entry:1658: inode #1262: comm syz-executor: checksumming directory block 0 [ 55.947943][ T470] EXT4-fs error (device sda1): __ext4_find_entry:1658: inode #1262: comm udevd: checksumming directory block 0 [ 55.957075][ T1264] EXT4-fs warning (device sda1): ext4_dirblock_csum_verify:406: inode #1262: comm syz-executor: No space for directory leaf checksum. Please run e2fsck -D. [ 55.978334][ T66] usb 3-1: new high-speed USB device number 22 using dummy_hcd [ 55.997135][ T1264] EXT4-fs error (device sda1): __ext4_find_entry:1658: inode #1262: comm syz-executor: checksumming directory block 0 [ 56.012553][ T312] EXT4-fs warning (device sda1): ext4_dirblock_csum_verify:406: inode #1262: comm udevd: No space for directory leaf checksum. Please run e2fsck -D. [ 56.016284][ T1264] EXT4-fs error (device sda1): __ext4_find_entry:1658: inode #1262: comm syz-executor: checksumming directory block 0 [ 56.124544][ T66] usb 3-1: device descriptor read/64, error -71 [ 56.264555][ T760] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 56.364544][ T66] usb 3-1: device descriptor read/64, error -71 [ 56.414534][ T760] usb 5-1: Using ep0 maxpacket: 8 [ 56.421641][ T760] usb 5-1: config index 0 descriptor too short (expected 1060, got 36) [ 56.429992][ T760] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 56.440093][ T760] usb 5-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 56.449100][ T760] usb 5-1: New USB device found, idVendor=1345, idProduct=3008, bcdDevice= 0.00 [ 56.458150][ T760] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 56.469024][ T760] usb 5-1: config 0 descriptor?? [ 56.604588][ T66] usb 3-1: new high-speed USB device number 23 using dummy_hcd [ 56.734591][ T66] usb 3-1: device descriptor read/64, error -71 [ 56.974614][ T66] usb 3-1: device descriptor read/64, error -71 [ 57.084634][ T66] usb usb3-port1: attempt power cycle [ 57.424574][ T66] usb 3-1: new high-speed USB device number 24 using dummy_hcd [ 57.446284][ T66] usb 3-1: device descriptor read/8, error -71 [ 57.576464][ T66] usb 3-1: device descriptor read/8, error -71 [ 57.814625][ T66] usb 3-1: new high-speed USB device number 25 using dummy_hcd [ 57.836398][ T66] usb 3-1: device descriptor read/8, error -71 [ 57.966374][ T66] usb 3-1: device descriptor read/8, error -71 [ 58.074634][ T66] usb usb3-port1: unable to enumerate USB device [ 58.530743][ T36] kauditd_printk_skb: 234 callbacks suppressed [ 58.530761][ T36] audit: type=1400 audit(1790808061.879:4761): avc: denied { read } for pid=296 comm="syz-executor" name="loop3" dev="devtmpfs" ino=52 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 58.574316][ T36] audit: type=1400 audit(1790808061.909:4762): avc: denied { read open } for pid=296 comm="syz-executor" path="/dev/loop3" dev="devtmpfs" ino=52 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 58.600142][ T36] audit: type=1400 audit(1790808061.909:4763): avc: denied { ioctl } for pid=296 comm="syz-executor" path="/dev/loop3" dev="devtmpfs" ino=52 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 58.626520][ T36] audit: type=1400 audit(1790808061.929:4764): avc: denied { read } for pid=1293 comm="syz-executor" dev="nsfs" ino=4026531840 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 58.664517][ T36] audit: type=1400 audit(1790808061.929:4765): avc: denied { read open } for pid=1293 comm="syz-executor" path="net:[4026531840]" dev="nsfs" ino=4026531840 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 58.689196][ T36] audit: type=1400 audit(1790808061.939:4766): avc: denied { mounton } for pid=1293 comm="syz-executor" path="/" dev="sda1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:root_t tclass=dir permissive=1 [ 58.710876][ T36] audit: type=1400 audit(1790808061.939:4767): avc: denied { sys_module } for pid=1293 comm="syz-executor" capability=16 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 58.732405][ T36] audit: type=1400 audit(1790808061.939:4768): avc: denied { sys_module } for pid=1293 comm="syz-executor" capability=16 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 58.754416][ T36] audit: type=1400 audit(1790808061.939:4769): avc: denied { sys_module } for pid=1293 comm="syz-executor" capability=16 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 58.775758][ T36] audit: type=1400 audit(1790808061.939:4770): avc: denied { sys_module } for pid=1293 comm="syz-executor" capability=16 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 59.013819][ T760] usb 5-1: USB disconnect, device number 8 [ 60.181581][ T1313] futex_wake_op: syz.2.372 tries to shift op by 144; fix this program [ 61.800526][ T1326] EXT4-fs warning: 22 callbacks suppressed [ 61.800540][ T1326] EXT4-fs warning (device sda1): ext4_dirblock_csum_verify:406: inode #1262: comm syz-executor: No space for directory leaf checksum. Please run e2fsck -D. [ 61.822242][ T1326] EXT4-fs error: 22 callbacks suppressed [ 61.822256][ T1326] EXT4-fs error (device sda1): __ext4_find_entry:1658: inode #1262: comm syz-executor: checksumming directory block 0 [ 61.840554][ T1326] EXT4-fs warning (device sda1): ext4_dirblock_csum_verify:406: inode #1262: comm syz-executor: No space for directory leaf checksum. Please run e2fsck -D. [ 61.856217][ T1326] EXT4-fs error (device sda1): __ext4_find_entry:1658: inode #1262: comm syz-executor: checksumming directory block 0 [ 61.869069][ T1326] EXT4-fs warning (device sda1): ext4_dirblock_csum_verify:406: inode #1262: comm syz-executor: No space for directory leaf checksum. Please run e2fsck -D. [ 61.884890][ T1326] EXT4-fs error (device sda1): __ext4_find_entry:1658: inode #1262: comm syz-executor: checksumming directory block 0 [ 61.897552][ T1326] EXT4-fs warning (device sda1): ext4_dirblock_csum_verify:406: inode #1262: comm syz-executor: No space for directory leaf checksum. Please run e2fsck -D. [ 61.913197][ T1326] EXT4-fs error (device sda1): __ext4_find_entry:1658: inode #1262: comm syz-executor: checksumming directory block 0 [ 61.925866][ T1326] EXT4-fs warning (device sda1): ext4_dirblock_csum_verify:406: inode #1262: comm syz-executor: No space for directory leaf checksum. Please run e2fsck -D. [ 61.934523][ T648] usb 4-1: new high-speed USB device number 14 using dummy_hcd [ 61.941724][ T1326] EXT4-fs error (device sda1): __ext4_find_entry:1658: inode #1262: comm syz-executor: checksumming directory block 0 [ 61.961454][ T760] usb 3-1: new high-speed USB device number 26 using dummy_hcd [ 61.994529][ T66] usb 5-1: new high-speed USB device number 9 using dummy_hcd [ 62.094528][ T648] usb 4-1: Using ep0 maxpacket: 8 [ 62.094533][ T760] usb 3-1: device descriptor read/64, error -71 [ 62.096972][ T648] usb 4-1: config index 0 descriptor too short (expected 1060, got 36) [ 62.114144][ T648] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 62.125225][ T648] usb 4-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 62.138172][ T648] usb 4-1: New USB device found, idVendor=1345, idProduct=3008, bcdDevice= 0.00 [ 62.147237][ T648] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 62.156895][ T66] usb 5-1: config 0 has no interfaces? [ 62.158488][ T648] usb 4-1: config 0 descriptor?? [ 62.163360][ T66] usb 5-1: New USB device found, idVendor=0b05, idProduct=17e0, bcdDevice= 0.00 [ 62.178556][ T66] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 62.178961][ T312] EXT4-fs warning (device sda1): ext4_dirblock_csum_verify:406: inode #1262: comm udevd: No space for directory leaf checksum. Please run e2fsck -D. [ 62.195880][ T66] usb 5-1: config 0 descriptor?? [ 62.202258][ T648] usbhid 4-1:0.0: couldn't find an input interrupt endpoint [ 62.216480][ T312] EXT4-fs error (device sda1): __ext4_find_entry:1658: inode #1262: comm udevd: checksumming directory block 0 [ 62.228956][ T470] EXT4-fs warning (device sda1): ext4_dirblock_csum_verify:406: inode #1262: comm udevd: No space for directory leaf checksum. Please run e2fsck -D. [ 62.244157][ T470] EXT4-fs error (device sda1): __ext4_find_entry:1658: inode #1262: comm udevd: checksumming directory block 0 [ 62.256034][ T312] EXT4-fs warning (device sda1): ext4_dirblock_csum_verify:406: inode #1262: comm udevd: No space for directory leaf checksum. Please run e2fsck -D. [ 62.271195][ T312] EXT4-fs error (device sda1): __ext4_find_entry:1658: inode #1262: comm udevd: checksumming directory block 0 [ 62.283373][ T470] EXT4-fs warning (device sda1): ext4_dirblock_csum_verify:406: inode #1262: comm udevd: No space for directory leaf checksum. Please run e2fsck -D. [ 62.299381][ T470] EXT4-fs error (device sda1): __ext4_find_entry:1658: inode #1262: comm udevd: checksumming directory block 0 [ 62.311723][ T312] EXT4-fs warning (device sda1): ext4_dirblock_csum_verify:406: inode #1262: comm udevd: No space for directory leaf checksum. Please run e2fsck -D. [ 62.326834][ T312] EXT4-fs error (device sda1): __ext4_find_entry:1658: inode #1262: comm udevd: checksumming directory block 0 [ 62.344572][ T760] usb 3-1: device descriptor read/64, error -71 [ 62.485577][ T66] usb 5-1: USB disconnect, device number 9 [ 62.584581][ T760] usb 3-1: new high-speed USB device number 27 using dummy_hcd [ 62.714543][ T760] usb 3-1: device descriptor read/64, error -71 [ 62.954590][ T760] usb 3-1: device descriptor read/64, error -71 [ 63.064706][ T760] usb usb3-port1: attempt power cycle [ 63.404590][ T760] usb 3-1: new high-speed USB device number 28 using dummy_hcd [ 63.426399][ T760] usb 3-1: device descriptor read/8, error -71 [ 63.543774][ T36] kauditd_printk_skb: 234 callbacks suppressed [ 63.543792][ T36] audit: type=1400 audit(1790808066.889:5005): avc: denied { read } for pid=833 comm="syz-executor" name="loop4" dev="devtmpfs" ino=53 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 63.587180][ T36] audit: type=1400 audit(1790808066.919:5006): avc: denied { read open } for pid=833 comm="syz-executor" path="/dev/loop4" dev="devtmpfs" ino=53 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 63.604928][ T760] usb 3-1: device descriptor read/8, error -71 [ 63.612970][ T36] audit: type=1400 audit(1790808066.919:5007): avc: denied { ioctl } for pid=833 comm="syz-executor" path="/dev/loop4" dev="devtmpfs" ino=53 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 63.645716][ T36] audit: type=1400 audit(1790808066.939:5008): avc: denied { ioctl } for pid=1316 comm="syz.2.374" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5503 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 63.689143][ T36] audit: type=1400 audit(1790808066.939:5009): avc: denied { ioctl } for pid=1316 comm="syz.2.374" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 63.714689][ T36] audit: type=1400 audit(1790808066.939:5010): avc: denied { ioctl } for pid=1316 comm="syz.2.374" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5503 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 63.741561][ T36] audit: type=1400 audit(1790808066.939:5011): avc: denied { ioctl } for pid=1316 comm="syz.2.374" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 63.768711][ T36] audit: type=1400 audit(1790808066.939:5012): avc: denied { ioctl } for pid=1316 comm="syz.2.374" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5503 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 63.797041][ T36] audit: type=1400 audit(1790808066.949:5013): avc: denied { read } for pid=1337 comm="syz-executor" dev="nsfs" ino=4026531840 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 63.819009][ T36] audit: type=1400 audit(1790808066.949:5014): avc: denied { read open } for pid=1337 comm="syz-executor" path="net:[4026531840]" dev="nsfs" ino=4026531840 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 63.864578][ T760] usb 3-1: new high-speed USB device number 29 using dummy_hcd [ 63.889530][ T760] usb 3-1: device descriptor read/8, error -71 [ 64.026436][ T760] usb 3-1: device descriptor read/8, error -71 [ 64.134613][ T760] usb usb3-port1: unable to enumerate USB device [ 64.674728][ T648] usb 4-1: USB disconnect, device number 14 [ 65.603322][ T1363] device-mapper: ioctl: ioctl interface mismatch: kernel(4.48.0), user(4.51207.133495060), cmd(2) [ 65.701574][ T1368] netlink: 12 bytes leftover after parsing attributes in process `syz.4.390'. [ 65.722320][ T1368] netlink: 12 bytes leftover after parsing attributes in process `syz.4.390'. [ 65.834553][ T648] usb 4-1: new high-speed USB device number 15 using dummy_hcd [ 65.974542][ T648] usb 4-1: device descriptor read/64, error -71 [ 66.214610][ T648] usb 4-1: device descriptor read/64, error -71 [ 66.454582][ T648] usb 4-1: new high-speed USB device number 16 using dummy_hcd [ 66.584599][ T648] usb 4-1: device descriptor read/64, error -71 [ 66.824650][ T648] usb 4-1: device descriptor read/64, error -71 [ 66.934668][ T648] usb usb4-port1: attempt power cycle [ 67.274577][ T648] usb 4-1: new high-speed USB device number 17 using dummy_hcd [ 67.296660][ T648] usb 4-1: device descriptor read/8, error -71 [ 67.436848][ T648] usb 4-1: device descriptor read/8, error -71 [ 67.464099][ T312] EXT4-fs warning: 16 callbacks suppressed [ 67.464118][ T312] EXT4-fs warning (device sda1): ext4_dirblock_csum_verify:406: inode #1262: comm udevd: No space for directory leaf checksum. Please run e2fsck -D. [ 67.493188][ T1373] raw_sendmsg: syz.2.392 forgot to set AF_INET. Fix it! [ 67.506713][ T312] EXT4-fs error: 16 callbacks suppressed [ 67.506728][ T312] EXT4-fs error (device sda1): __ext4_find_entry:1658: inode #1262: comm udevd: checksumming directory block 0 [ 67.520224][ T1375] EXT4-fs warning (device sda1): ext4_dirblock_csum_verify:406: inode #1262: comm syz-executor: No space for directory leaf checksum. Please run e2fsck -D. [ 67.533872][ T312] EXT4-fs warning (device sda1): ext4_dirblock_csum_verify:406: inode #1262: comm udevd: No space for directory leaf checksum. Please run e2fsck -D. [ 67.545114][ T1375] EXT4-fs error (device sda1): __ext4_find_entry:1658: inode #1262: comm syz-executor: checksumming directory block 0 [ 67.556552][ T312] EXT4-fs error (device sda1): __ext4_find_entry:1658: inode #1262: comm udevd: checksumming directory block 0 [ 67.579674][ T1375] EXT4-fs warning (device sda1): ext4_dirblock_csum_verify:406: inode #1262: comm syz-executor: No space for directory leaf checksum. Please run e2fsck -D. [ 67.595416][ T1375] EXT4-fs error (device sda1): __ext4_find_entry:1658: inode #1262: comm syz-executor: checksumming directory block 0 [ 67.609544][ T1375] EXT4-fs warning (device sda1): ext4_dirblock_csum_verify:406: inode #1262: comm syz-executor: No space for directory leaf checksum. Please run e2fsck -D. [ 67.625324][ T1375] EXT4-fs error (device sda1): __ext4_find_entry:1658: inode #1262: comm syz-executor: checksumming directory block 0 [ 67.644040][ T1375] EXT4-fs warning (device sda1): ext4_dirblock_csum_verify:406: inode #1262: comm syz-executor: No space for directory leaf checksum. Please run e2fsck -D. [ 67.661022][ T1375] EXT4-fs error (device sda1): __ext4_find_entry:1658: inode #1262: comm syz-executor: checksumming directory block 0 [ 67.673520][ T312] EXT4-fs warning (device sda1): ext4_dirblock_csum_verify:406: inode #1262: comm udevd: No space for directory leaf checksum. Please run e2fsck -D. [ 67.673795][ T1375] EXT4-fs warning (device sda1): ext4_dirblock_csum_verify:406: inode #1262: comm syz-executor: No space for directory leaf checksum. Please run e2fsck -D. [ 67.699985][ T312] EXT4-fs error (device sda1): __ext4_find_entry:1658: inode #1262: comm udevd: checksumming directory block 0 [ 67.704408][ T66] usb 5-1: new high-speed USB device number 10 using dummy_hcd [ 67.716149][ T648] usb 4-1: new high-speed USB device number 18 using dummy_hcd [ 67.731134][ T1375] EXT4-fs error (device sda1): __ext4_find_entry:1658: inode #1262: comm syz-executor: checksumming directory block 0 [ 67.753998][ T648] usb 4-1: device descriptor read/8, error -71 [ 67.762011][ T312] EXT4-fs warning (device sda1): ext4_dirblock_csum_verify:406: inode #1262: comm udevd: No space for directory leaf checksum. Please run e2fsck -D. [ 67.777881][ T312] EXT4-fs error (device sda1): __ext4_find_entry:1658: inode #1262: comm udevd: checksumming directory block 0 [ 67.884614][ T760] usb 3-1: new low-speed USB device number 30 using dummy_hcd [ 67.887082][ T648] usb 4-1: device descriptor read/8, error -71 [ 67.892230][ T66] usb 5-1: Using ep0 maxpacket: 8 [ 67.906861][ T66] usb 5-1: config index 0 descriptor too short (expected 1060, got 36) [ 67.915480][ T66] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 67.925598][ T66] usb 5-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 67.938491][ T66] usb 5-1: New USB device found, idVendor=1345, idProduct=3008, bcdDevice= 0.00 [ 67.947574][ T66] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 67.956856][ T66] usb 5-1: config 0 descriptor?? [ 67.964889][ T66] usbhid 5-1:0.0: couldn't find an input interrupt endpoint [ 67.968482][ T312] EXT4-fs warning (device sda1): ext4_dirblock_csum_verify:406: inode #1262: comm udevd: No space for directory leaf checksum. Please run e2fsck -D. [ 67.987681][ T312] EXT4-fs error (device sda1): __ext4_find_entry:1658: inode #1262: comm udevd: checksumming directory block 0 [ 68.009252][ T648] usb usb4-port1: unable to enumerate USB device [ 68.066520][ T760] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 68.077614][ T760] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x81 has invalid maxpacket 1024, setting to 8 [ 68.088462][ T760] usb 3-1: config 0 interface 0 altsetting 2 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 68.101311][ T760] usb 3-1: config 0 interface 0 has no altsetting 0 [ 68.107966][ T760] usb 3-1: New USB device found, idVendor=046d, idProduct=c29c, bcdDevice= 0.00 [ 68.117038][ T760] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 68.126488][ T760] usb 3-1: config 0 descriptor?? [ 68.132744][ T1380] raw-gadget.2 gadget.2: fail, usb_ep_enable returned -22 [ 68.342943][ T1380] netlink: 4 bytes leftover after parsing attributes in process `syz.2.394'. [ 68.356610][ T760] usbhid 3-1:0.0: can't add hid device: -71 [ 68.362659][ T760] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 68.372528][ T760] usb 3-1: USB disconnect, device number 30 [ 68.600926][ T36] kauditd_printk_skb: 275 callbacks suppressed [ 68.600943][ T36] audit: type=1400 audit(1790808071.949:5290): avc: denied { read } for pid=296 comm="syz-executor" name="loop3" dev="devtmpfs" ino=52 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 68.630660][ T36] audit: type=1400 audit(1790808071.959:5291): avc: denied { read open } for pid=296 comm="syz-executor" path="/dev/loop3" dev="devtmpfs" ino=52 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 68.655035][ T36] audit: type=1400 audit(1790808071.959:5292): avc: denied { ioctl } for pid=296 comm="syz-executor" path="/dev/loop3" dev="devtmpfs" ino=52 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 68.873547][ T36] audit: type=1400 audit(1790808072.219:5293): avc: denied { ioctl } for pid=1372 comm="syz.4.391" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 68.898404][ T36] audit: type=1400 audit(1790808072.239:5294): avc: denied { read } for pid=295 comm="syz-executor" name="loop2" dev="devtmpfs" ino=51 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 68.921956][ T36] audit: type=1400 audit(1790808072.239:5295): avc: denied { read open } for pid=295 comm="syz-executor" path="/dev/loop2" dev="devtmpfs" ino=51 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 68.946817][ T36] audit: type=1400 audit(1790808072.239:5296): avc: denied { ioctl } for pid=295 comm="syz-executor" path="/dev/loop2" dev="devtmpfs" ino=51 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 69.225284][ T36] audit: type=1400 audit(1790808072.579:5297): avc: denied { ioctl } for pid=1372 comm="syz.4.391" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 69.623347][ T36] audit: type=1400 audit(1790808072.969:5298): avc: denied { execmem } for pid=1384 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 69.664525][ T36] audit: type=1400 audit(1790808072.969:5299): avc: denied { create } for pid=1385 comm="syz.2.395" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 70.428515][ T760] usb 5-1: USB disconnect, device number 10 [ 71.796122][ T1408] syz.2.403 uses obsolete (PF_INET,SOCK_PACKET) [ 71.796563][ T1405] tmpfs: Unknown parameter '/dev/kvm' [ 71.910778][ T1407] netlink: 8 bytes leftover after parsing attributes in process `syz.3.404'. [ 72.124580][ T66] usb 5-1: new high-speed USB device number 11 using dummy_hcd [ 72.254554][ T66] usb 5-1: device descriptor read/64, error -71 [ 72.494575][ T66] usb 5-1: device descriptor read/64, error -71 [ 72.734581][ T66] usb 5-1: new high-speed USB device number 12 using dummy_hcd [ 72.864572][ T66] usb 5-1: device descriptor read/64, error -71 [ 73.104558][ T66] usb 5-1: device descriptor read/64, error -71 [ 73.215044][ T66] usb usb5-port1: attempt power cycle [ 73.554651][ T66] usb 5-1: new high-speed USB device number 13 using dummy_hcd [ 73.576317][ T66] usb 5-1: device descriptor read/8, error -71 [ 73.705089][ T36] kauditd_printk_skb: 154 callbacks suppressed [ 73.705105][ T36] audit: type=1400 audit(1790808077.059:5454): avc: denied { ioctl } for pid=1411 comm="syz.4.405" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5503 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 73.736169][ T36] audit: type=1400 audit(1790808077.059:5455): avc: denied { ioctl } for pid=1411 comm="syz.4.405" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 73.761346][ T36] audit: type=1400 audit(1790808077.119:5456): avc: denied { ioctl } for pid=1411 comm="syz.4.405" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5503 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 73.786233][ T36] audit: type=1400 audit(1790808077.119:5457): avc: denied { ioctl } for pid=1411 comm="syz.4.405" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 73.811406][ T36] audit: type=1400 audit(1790808077.169:5458): avc: denied { ioctl } for pid=1411 comm="syz.4.405" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5503 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 73.836289][ T66] usb 5-1: device descriptor read/8, error -71 [ 73.838033][ T36] audit: type=1400 audit(1790808077.189:5459): avc: denied { ioctl } for pid=1411 comm="syz.4.405" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 73.945028][ T36] audit: type=1400 audit(1790808077.299:5460): avc: denied { ioctl } for pid=1411 comm="syz.4.405" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 73.969929][ T36] audit: type=1400 audit(1790808077.299:5461): avc: denied { ioctl } for pid=1411 comm="syz.4.405" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 74.015005][ T36] audit: type=1400 audit(1790808077.369:5462): avc: denied { ioctl } for pid=1411 comm="syz.4.405" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 74.055960][ T36] audit: type=1400 audit(1790808077.409:5463): avc: denied { execmem } for pid=1420 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 74.084624][ T66] usb 5-1: new high-speed USB device number 14 using dummy_hcd [ 74.130998][ T66] usb 5-1: device descriptor read/8, error -71 [ 74.175053][ T1430] EXT4-fs warning: 20 callbacks suppressed [ 74.175070][ T1430] EXT4-fs warning (device sda1): ext4_dirblock_csum_verify:406: inode #1262: comm syz-executor: No space for directory leaf checksum. Please run e2fsck -D. [ 74.175817][ T760] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 74.180987][ T1430] EXT4-fs error: 20 callbacks suppressed [ 74.180998][ T1430] EXT4-fs error (device sda1): __ext4_find_entry:1658: inode #1262: comm syz-executor: checksumming directory block 0 [ 74.207056][ T760] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 74.211959][ T1430] EXT4-fs warning (device sda1): ext4_dirblock_csum_verify:406: inode #1262: comm syz-executor: No space for directory leaf checksum. Please run e2fsck -D. [ 74.222177][ T760] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 74.230422][ T1430] EXT4-fs error (device sda1): __ext4_find_entry:1658: inode #1262: comm syz-executor: checksumming directory block 0 [ 74.245250][ T760] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 74.253843][ T1430] EXT4-fs warning (device sda1): ext4_dirblock_csum_verify:406: inode #1262: comm syz-executor: No space for directory leaf checksum. Please run e2fsck -D. [ 74.264975][ T760] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 74.277428][ T1430] EXT4-fs error (device sda1): __ext4_find_entry:1658: inode #1262: comm syz-executor: checksumming directory block 0 [ 74.288120][ T760] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 74.301926][ T1430] EXT4-fs warning (device sda1): ext4_dirblock_csum_verify:406: inode #1262: comm syz-executor: No space for directory leaf checksum. Please run e2fsck -D. [ 74.307977][ T760] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 74.316782][ T1430] EXT4-fs error (device sda1): __ext4_find_entry:1658: inode #1262: comm syz-executor: checksumming directory block 0 [ 74.330974][ T760] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 74.340105][ T1430] EXT4-fs warning (device sda1): ext4_dirblock_csum_verify:406: inode #1262: comm syz-executor: No space for directory leaf checksum. Please run e2fsck -D. [ 74.350592][ T66] usb 5-1: device descriptor read/8, error -71 [ 74.359146][ T1430] EXT4-fs error (device sda1): __ext4_find_entry:1658: inode #1262: comm syz-executor: checksumming directory block 0 [ 74.373803][ T760] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 74.399633][ T760] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 74.407240][ T760] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 74.414699][ T760] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 74.422123][ T760] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 74.429572][ T760] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 74.437024][ T760] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 74.444423][ T760] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 74.452880][ T760] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 74.460997][ T760] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 SYZFAIL: tun: can't open /dev/net/tun (errno 74: Bad message) loop exited with status 67 SYZFAIL: tun: can't open /dev/net/tun (errno 74: Bad message) loop exited with status 67 SYZFAIL: tun: can't open /dev/net/tun (errno 74: Bad message) loop exited with status 67 SYZFAIL: tun: can't open /dev/net/tun (errno 74: Bad message) loop exited with status 67 SYZFAIL: tun: can't open /dev/net/tun (errno 74: Bad message) loop exited with status 67 SYZFAIL: tun: can't open /dev/net/tun (errno 74: Bad message) loop exited with status 67 SYZFAIL: tun: can't open /dev/net/tun (errno 74: Bad message) loop exited with status 67 SYZFAIL: tun: can't open /dev/net/tun (errno 74: Bad message) loop exited with status 67 SYZFAIL: tun: can't open /dev/net/tun (errno 74: Bad message) loop exited with status 67 SYZFAIL: tun: can't open /dev/net/tun (errno 74: Bad message) loop exited with status 67 SYZFAIL: tun: can't open /dev/net/tun (errno 74: Bad message) loop exited with status 67 SYZFAIL: tun: can't open /dev/net/tun (errno 74: Bad message) loop exited with status 67 SYZFAIL: tun: can't open /dev/net/tun (errno 74: Bad message) loop exited with status 67 SYZFAIL: tun: can't open /dev/net/tun (errno 74: Bad message) loop exited with status 67 SYZFAIL: tun: can't open /dev/net/tun (errno 74: Bad message) loop exited with status 67 SYZFAIL: tun: can't open /dev/net/tun (errno 74: Bad message) loop exited with status 67 SYZFAIL: tun: can't open /dev/net/tun (errno 74: Bad message) loop exited with status 67 SYZFAIL: tun: can't open /dev/net/tun (errno 74: Bad message) loop exited with status 67 SYZFAIL: tun: can't open /dev/net/tun (errno 74: Bad message) loop exited with status 67 SYZFAIL: tun: can't open /dev/net/tun (errno 74: Bad message) loop exited with status 67 SYZFAIL: tun: can't open /dev/net/tun (errno 74: Bad message) loop exited with status 67 SYZFAIL: repeatedly failed to execute the program proc=5 req=317 state=3 status=67 (errno 9: Bad file descriptor) [ 74.472755][ T760] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 74.480418][ T66] usb usb5-port1: unable to enumerate USB device [ 74.489126][ T760] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 74.498417][ T760] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 74.505401][ T285] EXT4-fs warning (device sda1): ext4_dirblock_csum_verify:406: inode #1262: comm sshd-session: No space for directory leaf checksum. Please run e2fsck -D. [ 74.522548][ T760] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 74.530009][ T760] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 74.549721][ T760] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 74.554501][ T285] EXT4-fs error (device sda1): __ext4_find_entry:1658: inode #1262: comm sshd-session: checksumming directory block 0 [ 74.586221][ T285] EXT4-fs warning (device sda1): ext4_dirblock_csum_verify:406: inode #1262: comm sshd-session: No space for directory leaf checksum. Please run e2fsck -D. [ 74.614590][ T760] hid-generic 0000:0000:0000.0005: hidraw0: HID v0.00 Device [syz0] on syz0 [ 74.628356][ T285] EXT4-fs error (device sda1): __ext4_find_entry:1658: inode #1262: comm sshd-session: checksumming directory block 0 [ 74.637748][ T1433] EXT4-fs warning (device sda1): ext4_dirblock_csum_verify:406: inode #1262: comm udevd: No space for directory leaf checksum. Please run e2fsck -D. [ 74.675355][ T1433] EXT4-fs error (device sda1): __ext4_find_entry:1658: inode #1262: comm udevd: checksumming directory block 0 [ 74.687675][ T1433] udevd[1433]: open /dev/null failed: Bad message [ 74.705379][ T1032] bridge_slave_1: left allmulticast mode [ 74.711068][ T1032] bridge_slave_1: left promiscuous mode [ 74.718071][ T1433] udevd[1433]: failed to execute '/lib/udev/fido_id' 'fido_id': Exec format error [ 74.728235][ T1032] bridge0: port 2(bridge_slave_1) entered disabled state [ 74.739880][ T312] EXT4-fs warning (device sda1): ext4_dirblock_csum_verify:406: inode #1262: comm udevd: No space for directory leaf checksum. Please run e2fsck -D. [ 74.755104][ T312] EXT4-fs error (device sda1): __ext4_find_entry:1658: inode #1262: comm udevd: checksumming directory block 0 [ 74.755276][ T1032] bridge_slave_0: left allmulticast mode [ 74.775788][ T1032] bridge_slave_0: left promiscuous mode [ 74.780811][ T312] EXT4-fs warning (device sda1): ext4_dirblock_csum_verify:406: inode #1262: comm udevd: No space for directory leaf checksum. Please run e2fsck -D. [ 74.781464][ T1032] bridge0: port 1(bridge_slave_0) entered disabled state [ 74.796406][ T312] EXT4-fs error (device sda1): __ext4_find_entry:1658: inode #1262: comm udevd: checksumming directory block 0 [ 74.896402][ T1032] tipc: Disabling bearer [ 74.901743][ T1032] tipc: Left network mode [ 74.906761][ T1032] veth1_macvtap: left promiscuous mode [ 74.912250][ T1032] veth0_vlan: left promiscuous mode [ 75.166689][ T1032] bridge_slave_1: left allmulticast mode [ 75.172349][ T1032] bridge_slave_1: left promiscuous mode [ 75.177991][ T1032] bridge0: port 2(bridge_slave_1) entered disabled state [ 75.185528][ T1032] bridge_slave_0: left allmulticast mode [ 75.191157][ T1032] bridge_slave_0: left promiscuous mode [ 75.196856][ T1032] bridge0: port 1(bridge_slave_0) entered disabled state [ 75.204406][ T1032] bridge_slave_1: left allmulticast mode [ 75.210246][ T1032] bridge_slave_1: left promiscuous mode [ 75.215858][ T1032] bridge0: port 2(bridge_slave_1) entered disabled state [ 75.223237][ T1032] bridge_slave_0: left allmulticast mode [ 75.228966][ T1032] bridge_slave_0: left promiscuous mode [ 75.234613][ T1032] bridge0: port 1(bridge_slave_0) entered disabled state [ 75.396160][ T1032] tipc: Left network mode [ 75.401370][ T1032] veth1_macvtap: left promiscuous mode [ 75.406905][ T1032] veth0_vlan: left promiscuous mode [ 75.412246][ T1032] veth1_macvtap: left promiscuous mode [ 75.417776][ T1032] veth0_vlan: left promiscuous mode