last executing test programs: 54.735894968s ago: executing program 0 (id=1): mkdir(&(0x7f0000000100)='./file0\x00', 0x1d3) mount$bpf(0x200000000000, &(0x7f0000000000)='./file0/../file0\x00', 0x0, 0x989046, 0x0) mount$bpf(0x0, &(0x7f00000000c0)='./file0/../file0\x00', 0x0, 0x100000, 0x0) mount$bpf(0x200000000000, &(0x7f0000000200)='.\x00', 0x0, 0x8b7840, 0x0) mkdir(&(0x7f0000000140)='./file0/../file0\x00', 0x190) mount$bpf(0x200000000000, &(0x7f0000000000)='./file0\x00', 0x0, 0x20040, 0x0) mount$bpf(0x200000000000, &(0x7f0000000440)='./file0/../file0\x00', 0x0, 0x2042, 0x0) 54.636218489s ago: executing program 0 (id=8): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x4, 0x1, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_BOOT_CPU_ID(r1, 0xae78, &(0x7f0000000000)=0x1) ioctl$KVM_SET_SREGS(r2, 0x4138ae84, &(0x7f0000000100)={{0xeeee8000, 0x7000, 0xc, 0x1, 0x81, 0x0, 0x0, 0x7}, {0x10000, 0xdddd1000, 0xc, 0xfc, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x5, 0xfc}, {0x3000, 0x8080000, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x1, 0x4}, {0x80a0000, 0xffff1000, 0x10, 0x0, 0x0, 0x8, 0x0, 0x7}, {0x5000, 0xffff1000, 0xf, 0x2, 0xfe, 0x10, 0x3, 0xc, 0x58, 0xe, 0x4}, {0x4000, 0x1000, 0xb, 0x0, 0xfe, 0xfd, 0xfc, 0x0, 0x0, 0x5, 0xc0}, {0x3000, 0x100000, 0x10, 0x8, 0x7, 0xfb, 0x0, 0x7, 0x1a, 0x2, 0x0, 0x2}, {0x0, 0x3000, 0xe, 0x2, 0x2, 0x54, 0x7, 0xfd, 0x0, 0x9, 0x5, 0x5}, {0x58000, 0x1}, {}, 0x9df9ffdf, 0x0, 0x0, 0x20, 0x8, 0x8000, 0x2000, [0xdd41, 0x0, 0x2]}) ioctl$KVM_TRANSLATE(r2, 0xc018ae85, &(0x7f0000001280)={0x0, 0xdddd0000, 0x2, 0x1c, 0x50}) 54.53628553s ago: executing program 0 (id=11): r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$sock_int(r0, 0x1, 0x3c, &(0x7f0000000040)=0x1, 0x4) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000540)=0x1, 0x4) connect$inet(r0, &(0x7f0000000080)={0x2, 0x0, @loopback}, 0x10) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000001c0)=0xffffffffffffffff, 0x4) sendmmsg$inet(r0, &(0x7f00000060c0)=[{{0x0, 0x0, &(0x7f0000000a40)=[{&(0x7f0000000140)='@', 0x1}, {&(0x7f00000007c0)='y', 0x1}, {&(0x7f0000000340)="b9", 0x1}, {&(0x7f0000000940)="99", 0x1}, {&(0x7f00000008c0)='z', 0x1}, {&(0x7f00000009c0)='~', 0x1}, {&(0x7f0000000a00)='x', 0x1}, {&(0x7f0000000440)="06", 0x1}, {&(0x7f0000000580)='k', 0x1}, {&(0x7f00000006c0)="1d", 0x1}, {&(0x7f0000000800)='a', 0x1}, {&(0x7f0000000280)='$', 0x1}], 0xc}}, {{0x0, 0x0, &(0x7f00000035c0)=[{&(0x7f0000001040)}, {&(0x7f00000000c0)="c3c9bdd49b70970e2a7fe9037284ec7212f60aeb12038379ff6b467b80938ea26d4074270de50c12f0b671d56f227e9882e433a0fe95b62f2177750ee99b101b7b1dde1854cd7c001e0a718fd50dce7f84291b", 0x53}, {&(0x7f0000002180)='-', 0x1}, {&(0x7f0000002240)='R', 0x1}, {&(0x7f00000033c0)="c4", 0xfffffe6d}], 0x5}}], 0x2, 0x4000000) setsockopt$sock_int(r0, 0x1, 0x20, &(0x7f0000000000)=0x7fffffff, 0x4) 54.518139044s ago: executing program 32 (id=11): r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$sock_int(r0, 0x1, 0x3c, &(0x7f0000000040)=0x1, 0x4) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000540)=0x1, 0x4) connect$inet(r0, &(0x7f0000000080)={0x2, 0x0, @loopback}, 0x10) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000001c0)=0xffffffffffffffff, 0x4) sendmmsg$inet(r0, &(0x7f00000060c0)=[{{0x0, 0x0, &(0x7f0000000a40)=[{&(0x7f0000000140)='@', 0x1}, {&(0x7f00000007c0)='y', 0x1}, {&(0x7f0000000340)="b9", 0x1}, {&(0x7f0000000940)="99", 0x1}, {&(0x7f00000008c0)='z', 0x1}, {&(0x7f00000009c0)='~', 0x1}, {&(0x7f0000000a00)='x', 0x1}, {&(0x7f0000000440)="06", 0x1}, {&(0x7f0000000580)='k', 0x1}, {&(0x7f00000006c0)="1d", 0x1}, {&(0x7f0000000800)='a', 0x1}, {&(0x7f0000000280)='$', 0x1}], 0xc}}, {{0x0, 0x0, &(0x7f00000035c0)=[{&(0x7f0000001040)}, {&(0x7f00000000c0)="c3c9bdd49b70970e2a7fe9037284ec7212f60aeb12038379ff6b467b80938ea26d4074270de50c12f0b671d56f227e9882e433a0fe95b62f2177750ee99b101b7b1dde1854cd7c001e0a718fd50dce7f84291b", 0x53}, {&(0x7f0000002180)='-', 0x1}, {&(0x7f0000002240)='R', 0x1}, {&(0x7f00000033c0)="c4", 0xfffffe6d}], 0x5}}], 0x2, 0x4000000) setsockopt$sock_int(r0, 0x1, 0x20, &(0x7f0000000000)=0x7fffffff, 0x4) 21.739396676s ago: executing program 3 (id=633): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x8000, 0x0) syz_genetlink_get_family_id$batadv(&(0x7f0000000000), 0xffffffffffffffff) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 21.630068039s ago: executing program 3 (id=637): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x2000, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_VCPU_EVENTS(r2, 0x4400ae8f, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f0000000040)={0x1, 0x0, [{0x40000070, 0x0, 0x400006}]}) 21.505663935s ago: executing program 3 (id=638): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x8000, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x1) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, &(0x7f00000001c0)="c744240077dd0000c74424027fbe0000c7442406000000000f011c24b8010000000f01c1450f01ca470f01f866baf80cb8e4f61882ef66bafc0c66b8795966ef40250000000066b8de000f00d02e0f005ffa0f01c92e640fc71f", 0x5a}], 0x1, 0xe8, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000013000/0x18000)=nil, &(0x7f0000000640)=[@text16={0x10, &(0x7f00000005c0)="260f01c50f0d92fa3a0f20d86635080000000f22d8b83d010f00d80f20e06635000001000f22e00f20c06635100000000f22c026640f01940000f6520f640f01d7b8d8008ec8", 0x46}], 0x1, 0x2, &(0x7f0000000680)=[@dstype0={0x6, 0x4}], 0x1) ioctl$KVM_RUN(r2, 0xae80, 0x0) 21.376386873s ago: executing program 3 (id=650): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_syzos_vm$x86(r1, &(0x7f0000bfd000/0x400000)=nil) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x1) ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f0000000200)={0x1, 0x0, [{0x4b564d03, 0x0, 0x1}]}) syz_kvm_setup_syzos_vm$x86(0xffffffffffffffff, &(0x7f0000bfe000/0x400000)=nil) ioctl$KVM_RUN(r2, 0xae80, 0x0) 21.220501895s ago: executing program 3 (id=657): mkdir(&(0x7f0000000100)='./file0\x00', 0x1d3) mount$bpf(0x200000000000, &(0x7f0000000000)='./file0/../file0\x00', 0x0, 0x989046, 0x0) mount$bpf(0x0, &(0x7f00000000c0)='./file0/../file0\x00', 0x0, 0x100000, 0x0) mount$bpf(0x200000000000, &(0x7f0000000200)='.\x00', 0x0, 0x8b7840, 0x0) mkdir(&(0x7f0000000140)='./file0/../file0\x00', 0x190) mount$bpf(0x200000000000, &(0x7f0000000000)='./file0\x00', 0x0, 0x20040, 0x0) mount$bpf(0x200000000000, &(0x7f0000000440)='./file0/../file0\x00', 0x0, 0x2042, 0x0) 21.188611753s ago: executing program 3 (id=661): r0 = socket$tipc(0x1e, 0x5, 0x0) setsockopt$TIPC_GROUP_JOIN(r0, 0x10f, 0x87, &(0x7f0000000000)={0x42, 0x1}, 0x10) r1 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r1, 0x10f, 0x87, &(0x7f0000000240)={0x42, 0x1}, 0x10) setsockopt$TIPC_DEST_DROPPABLE(r1, 0x10f, 0x81, &(0x7f0000000040), 0x4) sendmsg$tipc(r1, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4010}, 0x8820) close(0x3) 9.20468624s ago: executing program 2 (id=705): mkdirat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x1c0) mount$incfs(&(0x7f0000000440)='./file0\x00', &(0x7f0000000140)='./file0\x00', &(0x7f0000000200), 0x80, 0x0) setsockopt$ARPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x60, &(0x7f0000000040)={'filter\x00', 0x10, 0x4, 0x3c8, 0x110, 0x0, 0x0, 0x2e0, 0x2e0, 0x2e0, 0x4, 0x0, {[{{@arp={@private, @rand_addr, 0x0, 0x0, 0x0, 0x0, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'veth1_virt_wifi\x00', 'veth1_to_bridge\x00'}, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x4, {@empty, @mac=@dev, @dev, @broadcast}}}, {{@uncond, 0xc0, 0xe8}, @unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffb}}, {{@arp={@empty, @empty, 0x0, 0x0, 0x0, 0x0, {@mac}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'dvmrp0\x00', 'tunl0\x00'}, 0xc0, 0xe8}, @unspec=@MARK={0x28}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x418) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)}) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0xc2c02e4d8eb2a416, 0x4) r1 = openat$incfs(r0, &(0x7f0000000280)='.pending_reads\x00', 0x1, 0x130) ioctl$TIOCL_GETKMSGREDIRECT(r1, 0xc058671e, &(0x7f00000000c0)) 7.593754671s ago: executing program 4 (id=706): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000140)=ANY=[@ANYBLOB="1201000000000040ac054382408b0b00000109022400010000002009040000fd0301000009210000000122010009058103"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f00000003c0)={0x24, 0x0, 0x0, &(0x7f0000000a80)=ANY=[@ANYBLOB="002281"], 0x0}, 0x0) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000001c0)={0x1, &(0x7f0000000000)=[{0x6, 0x8, 0x2, 0x7fff8000}]}) close_range(r1, 0xffffffffffffffff, 0x0) syz_open_dev$hiddev(&(0x7f00000000c0), 0x0, 0x0) 7.593562461s ago: executing program 1 (id=707): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x109000, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0xf) ioctl$TCFLSH(r0, 0x400455c8, 0x2000000000000004) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r1, &(0x7f0000000040), 0x6) r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000000)=[{0x6, 0x10, 0x0, 0x7fff7ffc}]}) close_range(r2, 0xffffffffffffffff, 0x0) 7.593364641s ago: executing program 2 (id=708): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpuset.effective_cpus\x00', 0x275a, 0x0) fcntl$lock(r0, 0x25, &(0x7f00000000c0)) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpuset.effective_cpus\x00', 0x275a, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpuset.effective_cpus\x00', 0x275a, 0x0) r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x72, 0x0, 0x7fff0000}]}) fcntl$lock(r1, 0x26, &(0x7f0000000040)={0x0, 0x0, 0x9, 0x9}) close_range(r2, 0xffffffffffffffff, 0x0) 5.843759192s ago: executing program 4 (id=709): mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000440)=@new_dev={0x4, 0x3c9, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x40}}}, &(0x7f0000000300)=0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup(r1) syz_ublk_setup_queues(r2, r0, &(0x7f0000000180)={0x0, 0xfffffffe, 0x0, 0xfffffffe, 0x2f6}, &(0x7f0000000800)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0xe704, 0x40040, 0x1000002, 0x91}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x5c87, 0x20, 0x3, 0x3aa}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x1f70, 0x2, 0x40000001, 0x337}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x4, 0x200, 0x1, 0xffffffff}}], 0x1, 0x0, 0x0) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000740)=ANY=[@ANYBLOB="54010000100033060000000000000000fc0100000000000000000000000000010000000000000000000000000000000000004000000080000000000087000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="ac141413000000000000000000000000000004d63200000000000000000000000000ffffe00000022703000000000000090008000000000000000000000000000300000000000000ff0f000000000000190200000000000001000000000000000000000000000000000000000000839a0000000000000000000000000000000002000000000000008f00000000000000080000002bbd7000000000000200010000000000000000001c000400feff5e2100000000ff010000000000000000000000000001480002"], 0x154}, 0x1, 0x0, 0x0, 0x8000}, 0x4008000) 5.843545952s ago: executing program 2 (id=710): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000000), 0x109640, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x300000a, 0x12, r0, 0x7f812000) openat$hwrng(0xffffffffffffff9c, &(0x7f0000001080), 0x80000, 0x0) preadv(r0, &(0x7f000001a0c0)=[{0x0}], 0x1, 0x80000001, 0x4) fadvise64(r0, 0xfffffffffffffffd, 0xffff, 0x2) syz_kvm_setup_syzos_vm$x86(0xffffffffffffffff, &(0x7f0000000000/0x400000)=nil) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) 4.034003285s ago: executing program 4 (id=711): r0 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r0, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x0, 0x1}}, 0x10) r1 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r1, &(0x7f0000000140)=@name={0x1e, 0x2, 0x0, {{0x42}}}, 0x10) bind$tipc(r1, &(0x7f00000001c0)=@nameseq={0x1e, 0x1, 0x3, {0x42, 0x2000002, 0xfffffffe}}, 0x10) setsockopt$TIPC_GROUP_JOIN(r0, 0x10f, 0x87, &(0x7f0000000100)={0x42, 0x3, 0x2}, 0x10) sendmsg$tipc(r0, &(0x7f0000000380)={&(0x7f0000000140)=@name={0x1e, 0x2, 0x3, {{0x42, 0x3}, 0x2}}, 0x10, 0x0}, 0x4000891) 4.033635986s ago: executing program 1 (id=712): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x101100, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x4) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000080)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@textreal={0x8, &(0x7f00000000c0)="0f439b01008261f6520f30baf80c66b8ba2bc88266efbafc0cb85896ef66b90203000066b80300000066ba000000000f300f01ca670f230c0f01f7d1243ee500", 0x40}], 0x1, 0x54, 0x0, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f0000000180)={0x0, 0xd000}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 4.033327275s ago: executing program 2 (id=713): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f00000001c0)=[{0x6, 0x0, 0xd, 0x7fff7ffc}]}) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x8ab43, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CAP_EXIT_HYPERCALL(r2, 0x4068aea3, &(0x7f0000000040)={0x79, 0x0, 0xc}) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x2) ioctl$KVM_SET_LAPIC(r3, 0x4400ae8f, &(0x7f00000001c0)={"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"}) close_range(r0, 0xffffffffffffffff, 0x0) 2.109285233s ago: executing program 4 (id=714): r0 = epoll_create1(0x0) poll(&(0x7f0000000a80)=[{r0, 0x2021}], 0x1, 0xdb4) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000000100)) shutdown(r1, 0x0) epoll_wait(r0, 0x0, 0x0, 0x101) epoll_ctl$EPOLL_CTL_MOD(r0, 0x3, r1, &(0x7f0000000140)={0x2000200b}) 2.108345833s ago: executing program 1 (id=715): socketpair$unix(0x1, 0x2, 0x0, 0x0) r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_IPV6_HOPOPTS(r0, 0x29, 0x36, &(0x7f0000000100)=ANY=[], 0x8) connect$inet6(r0, &(0x7f00000004c0)={0xa, 0x0, 0x0, @mcast2, 0x7}, 0x1c) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000080)='bridge0\x00', 0x10) sendmmsg$inet6(r0, &(0x7f0000000000)=[{{0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000040)="8f92a4", 0x3}], 0x1}}], 0x1, 0x4400c800) sendto$inet6(r0, &(0x7f0000000300), 0x18, 0x3b00, 0x0, 0xfffffffffffffdfd) 2.107566983s ago: executing program 2 (id=716): r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f00000001c0)={0x0, 0x0, 0x0, &(0x7f0000000140)=""/80, 0x0, 0x4}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, 0x0, &(0x7f00000000c0)=""/87, 0x0, 0x100000}) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000500)) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f0000000000)=0x1) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000004100)={0x0, 0x1, 0x0, 0x0, 0x0, 0x25000}) 2.091421537s ago: executing program 1 (id=717): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0/file0\x00', 0x1c0) r0 = landlock_create_ruleset(&(0x7f0000000180)={0x100}, 0x30, 0x0) r1 = openat$dir(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x200000, 0x0) landlock_add_rule$LANDLOCK_RULE_PATH_BENEATH(r0, 0x1, &(0x7f0000000200)={0x100, r1}, 0x0) r2 = openat$dir(0xffffffffffffff9c, &(0x7f0000000240)='./file0/file0\x00', 0x200000, 0x0) landlock_add_rule$LANDLOCK_RULE_PATH_BENEATH(r0, 0x1, &(0x7f0000000280)={0x100, r2}, 0x0) close(r0) 2.072643001s ago: executing program 1 (id=718): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) setresuid(0x0, 0xee00, 0xffffffffffffffff) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f0000000200)={0x1, 0x0, [{0x4b564d03, 0x0, 0x1}]}) ioctl$KVM_CAP_ENFORCE_PV_FEATURE_CPUID(r2, 0x4068aea3, &(0x7f0000000600)={0xbe, 0x0, 0x1}) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000000)=[@text16={0x10, 0x0}], 0x1, 0xd, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 56.447678ms ago: executing program 4 (id=719): mkdirat(0xffffffffffffff9c, &(0x7f0000004000)='./mnt\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000001500)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000001500)='./dev\x00', &(0x7f0000001600)='devtmpfs\x00', 0x0, 0x0) mount(&(0x7f00000000c0)=@filename='./dev/sda1\x00', &(0x7f0000000140)='./mnt\x00', &(0x7f0000000100)='ext4\x00', 0x8410, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0xc0046686, 0x0) 55.986378ms ago: executing program 1 (id=720): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xf, 0x4008032, 0xffffffffffffffff, 0x1c5ed000) r1 = userfaultfd(0x80001) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f00000000c0)={0xaa, 0x400}) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000000080)={{&(0x7f0000ffd000/0x3000)=nil, 0x3000}, 0x1}) ioctl$UFFDIO_COPY(r1, 0xc028aa05, &(0x7f0000000100)={&(0x7f0000ffd000/0x3000)=nil, &(0x7f0000013000/0x4000)=nil, 0x3000, 0x3}) 55.842058ms ago: executing program 2 (id=721): syz_usb_control_io$hid(0xffffffffffffffff, &(0x7f0000000240)={0x24, &(0x7f0000000040)={0x0, 0x9, 0xb5, {0xb5, 0x3, "2fd7224c9ede3804c2cab8009d50b156e87d2d9b6d0148b08faec471ea92e1354155313482962f05699efa70b07290b30b445bf3f8b1a9f426f7a5bd073dc283b9efe4c26a8a500224e830dbf98c6d3455126e74cfd25c56b1f626006f6faccd3a39b1b847e75c0fd88cce5983f22ce7e40fb6118116681bd797e88e8e57bb3447644420f8acfc340200b2fb06ac34c6b6ce9879800400357758d809ef4d72996cce2bfc5dc55fa0f0e636aeecb468894370d2"}}, 0x0, 0x0, 0x0}, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x40e41, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'syzkaller1\x00', 0xc201}) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup(r1) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}) write$tun(r0, &(0x7f00000000c0)=ANY=[@ANYBLOB="001c86dd0700100000001400000060ec97000fc83c00fe8000000000000000000000000000aaff020000000000000000000000000001"], 0xffe) 0s ago: executing program 4 (id=722): mkdirat(0xffffffffffffff9c, &(0x7f0000001500)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000001500)='./dev\x00', &(0x7f0000001600)='devtmpfs\x00', 0x0, 0x0) mincore(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./mnt\x00', 0x1ff) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000200000a20000000000a01040000000000000000020000000900"], 0x104}}, 0x0) mount(&(0x7f00000000c0)=@filename='./dev/sda1\x00', &(0x7f0000000140)='./mnt\x00', &(0x7f0000000100)='ext4\x00', 0x8410, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./mnt\x00', 0x20000, 0x0) ioctl$FS_IOC_GETFSMAP(r0, 0xc0c0583b, &(0x7f0000000340)=ANY=[]) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.73' (ED25519) to the list of known hosts. [ 27.634543][ T36] audit: type=1400 audit(1790645094.729:64): avc: denied { mounton } for pid=286 comm="syz-executor" path="/syzcgroup/unified" dev="sda1" ino=2023 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1 [ 27.635713][ T286] cgroup: Unknown subsys name 'net' [ 27.657637][ T36] audit: type=1400 audit(1790645094.729:65): avc: denied { mount } for pid=286 comm="syz-executor" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 27.685412][ T36] audit: type=1400 audit(1790645094.769:66): avc: denied { unmount } for pid=286 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 27.685624][ T286] cgroup: Unknown subsys name 'devices' [ 27.810669][ T286] cgroup: Unknown subsys name 'hugetlb' [ 27.816406][ T286] cgroup: Unknown subsys name 'rlimit' [ 27.908904][ T36] audit: type=1400 audit(1790645095.009:67): avc: denied { setattr } for pid=286 comm="syz-executor" name="raw-gadget" dev="devtmpfs" ino=190 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 27.932364][ T36] audit: type=1400 audit(1790645095.009:68): avc: denied { mounton } for pid=286 comm="syz-executor" path="/proc/sys/fs/binfmt_misc" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=dir permissive=1 [ 27.940752][ T288] SELinux: Context root:object_r:swapfile_t is not valid (left unmapped). [ 27.957247][ T36] audit: type=1400 audit(1790645095.009:69): avc: denied { mount } for pid=286 comm="syz-executor" name="/" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=filesystem permissive=1 Setting up swapspace version 1, size = 127995904 bytes [ 27.989366][ T36] audit: type=1400 audit(1790645095.069:70): avc: denied { relabelto } for pid=288 comm="mkswap" name="swap-file" dev="sda1" ino=2026 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 28.015968][ T36] audit: type=1400 audit(1790645095.069:71): avc: denied { write } for pid=288 comm="mkswap" path="/root/swap-file" dev="sda1" ino=2026 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 28.057949][ T36] audit: type=1400 audit(1790645095.149:72): avc: denied { read } for pid=286 comm="syz-executor" name="swap-file" dev="sda1" ino=2026 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 28.084161][ T36] audit: type=1400 audit(1790645095.149:73): avc: denied { open } for pid=286 comm="syz-executor" path="/root/swap-file" dev="sda1" ino=2026 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 28.084483][ T286] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 28.855183][ T293] bridge0: port 1(bridge_slave_0) entered blocking state [ 28.862472][ T293] bridge0: port 1(bridge_slave_0) entered disabled state [ 28.869695][ T293] bridge_slave_0: entered allmulticast mode [ 28.876843][ T293] bridge_slave_0: entered promiscuous mode [ 28.885213][ T293] bridge0: port 2(bridge_slave_1) entered blocking state [ 28.892372][ T293] bridge0: port 2(bridge_slave_1) entered disabled state [ 28.900355][ T293] bridge_slave_1: entered allmulticast mode [ 28.907675][ T293] bridge_slave_1: entered promiscuous mode [ 28.948976][ T294] bridge0: port 1(bridge_slave_0) entered blocking state [ 28.956214][ T294] bridge0: port 1(bridge_slave_0) entered disabled state [ 28.963643][ T294] bridge_slave_0: entered allmulticast mode [ 28.969981][ T294] bridge_slave_0: entered promiscuous mode [ 28.986782][ T294] bridge0: port 2(bridge_slave_1) entered blocking state [ 28.993973][ T294] bridge0: port 2(bridge_slave_1) entered disabled state [ 29.001281][ T294] bridge_slave_1: entered allmulticast mode [ 29.007434][ T294] bridge_slave_1: entered promiscuous mode [ 29.042438][ T295] bridge0: port 1(bridge_slave_0) entered blocking state [ 29.049746][ T295] bridge0: port 1(bridge_slave_0) entered disabled state [ 29.057081][ T295] bridge_slave_0: entered allmulticast mode [ 29.063534][ T295] bridge_slave_0: entered promiscuous mode [ 29.069773][ T296] bridge0: port 1(bridge_slave_0) entered blocking state [ 29.076819][ T296] bridge0: port 1(bridge_slave_0) entered disabled state [ 29.083968][ T296] bridge_slave_0: entered allmulticast mode [ 29.090580][ T296] bridge_slave_0: entered promiscuous mode [ 29.104171][ T295] bridge0: port 2(bridge_slave_1) entered blocking state [ 29.111282][ T295] bridge0: port 2(bridge_slave_1) entered disabled state [ 29.118338][ T295] bridge_slave_1: entered allmulticast mode [ 29.124821][ T295] bridge_slave_1: entered promiscuous mode [ 29.138599][ T296] bridge0: port 2(bridge_slave_1) entered blocking state [ 29.146002][ T296] bridge0: port 2(bridge_slave_1) entered disabled state [ 29.153280][ T296] bridge_slave_1: entered allmulticast mode [ 29.159679][ T296] bridge_slave_1: entered promiscuous mode [ 29.289790][ T296] bridge0: port 2(bridge_slave_1) entered blocking state [ 29.297109][ T296] bridge0: port 2(bridge_slave_1) entered forwarding state [ 29.304445][ T296] bridge0: port 1(bridge_slave_0) entered blocking state [ 29.312388][ T296] bridge0: port 1(bridge_slave_0) entered forwarding state [ 29.321807][ T295] bridge0: port 2(bridge_slave_1) entered blocking state [ 29.329600][ T295] bridge0: port 2(bridge_slave_1) entered forwarding state [ 29.337008][ T295] bridge0: port 1(bridge_slave_0) entered blocking state [ 29.344106][ T295] bridge0: port 1(bridge_slave_0) entered forwarding state [ 29.357970][ T294] bridge0: port 2(bridge_slave_1) entered blocking state [ 29.365240][ T294] bridge0: port 2(bridge_slave_1) entered forwarding state [ 29.372996][ T294] bridge0: port 1(bridge_slave_0) entered blocking state [ 29.380242][ T294] bridge0: port 1(bridge_slave_0) entered forwarding state [ 29.424676][ T13] bridge0: port 1(bridge_slave_0) entered disabled state [ 29.432375][ T13] bridge0: port 2(bridge_slave_1) entered disabled state [ 29.440714][ T13] bridge0: port 1(bridge_slave_0) entered disabled state [ 29.448300][ T13] bridge0: port 1(bridge_slave_0) entered disabled state [ 29.455716][ T13] bridge0: port 2(bridge_slave_1) entered disabled state [ 29.463194][ T13] bridge0: port 2(bridge_slave_1) entered disabled state [ 29.475037][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 29.482148][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 29.493910][ T46] bridge0: port 2(bridge_slave_1) entered blocking state [ 29.501268][ T46] bridge0: port 2(bridge_slave_1) entered forwarding state [ 29.531386][ T46] bridge0: port 1(bridge_slave_0) entered blocking state [ 29.538459][ T46] bridge0: port 1(bridge_slave_0) entered forwarding state [ 29.546240][ T46] bridge0: port 2(bridge_slave_1) entered blocking state [ 29.553306][ T46] bridge0: port 2(bridge_slave_1) entered forwarding state [ 29.561571][ T46] bridge0: port 1(bridge_slave_0) entered blocking state [ 29.568701][ T46] bridge0: port 1(bridge_slave_0) entered forwarding state [ 29.576607][ T46] bridge0: port 2(bridge_slave_1) entered blocking state [ 29.583710][ T46] bridge0: port 2(bridge_slave_1) entered forwarding state [ 29.591333][ T46] bridge0: port 1(bridge_slave_0) entered blocking state [ 29.598434][ T46] bridge0: port 1(bridge_slave_0) entered forwarding state [ 29.606136][ T46] bridge0: port 2(bridge_slave_1) entered blocking state [ 29.613204][ T46] bridge0: port 2(bridge_slave_1) entered forwarding state [ 29.647289][ T296] veth0_vlan: entered promiscuous mode [ 29.671160][ T294] veth0_vlan: entered promiscuous mode [ 29.681614][ T296] veth1_macvtap: entered promiscuous mode [ 29.693056][ T295] veth0_vlan: entered promiscuous mode [ 29.708386][ T294] veth1_macvtap: entered promiscuous mode [ 29.727631][ T293] veth0_vlan: entered promiscuous mode [ 29.744998][ T295] veth1_macvtap: entered promiscuous mode [ 29.753033][ T296] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 29.785376][ T293] veth1_macvtap: entered promiscuous mode [ 29.858231][ T322] ======================================================= [ 29.858231][ T322] WARNING: The mand mount option has been deprecated and [ 29.858231][ T322] and is ignored by this kernel. Remove the mand [ 29.858231][ T322] option from the mount to silence this warning. [ 29.858231][ T322] ======================================================= [ 29.920738][ T328] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 29.952454][ T331] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=331 comm=syz.3.9 [ 29.993715][ T297] bridge_slave_1: left allmulticast mode [ 30.008624][ T297] bridge_slave_1: left promiscuous mode [ 30.014783][ T297] bridge0: port 2(bridge_slave_1) entered disabled state [ 30.029832][ T297] bridge_slave_0: left allmulticast mode [ 30.040849][ T297] bridge_slave_0: left promiscuous mode [ 30.053059][ T297] bridge0: port 1(bridge_slave_0) entered disabled state [ 30.250914][ T297] veth1_macvtap: left promiscuous mode [ 30.259969][ T297] veth0_vlan: left promiscuous mode [ 30.394426][ T345] bridge0: port 1(bridge_slave_0) entered blocking state [ 30.414497][ T345] bridge0: port 1(bridge_slave_0) entered disabled state [ 30.429614][ T345] bridge_slave_0: entered allmulticast mode [ 30.436426][ T345] bridge_slave_0: entered promiscuous mode [ 30.456708][ T345] bridge0: port 2(bridge_slave_1) entered blocking state [ 30.471659][ T345] bridge0: port 2(bridge_slave_1) entered disabled state [ 30.486705][ T345] bridge_slave_1: entered allmulticast mode [ 30.500587][ T345] bridge_slave_1: entered promiscuous mode [ 30.613752][ T345] bridge0: port 2(bridge_slave_1) entered blocking state [ 30.620942][ T345] bridge0: port 2(bridge_slave_1) entered forwarding state [ 30.628236][ T345] bridge0: port 1(bridge_slave_0) entered blocking state [ 30.635397][ T345] bridge0: port 1(bridge_slave_0) entered forwarding state [ 30.664695][ T46] bridge0: port 1(bridge_slave_0) entered disabled state [ 30.673119][ T46] bridge0: port 2(bridge_slave_1) entered disabled state [ 30.682672][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 30.689843][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 30.699662][ T297] bridge0: port 2(bridge_slave_1) entered blocking state [ 30.706725][ T297] bridge0: port 2(bridge_slave_1) entered forwarding state [ 30.730972][ T345] veth0_vlan: entered promiscuous mode [ 30.741660][ T345] veth1_macvtap: entered promiscuous mode [ 30.760981][ T358] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 30.922585][ T371] Zero length message leads to an empty skb [ 31.723491][ T413] netlink: 'syz.2.42': attribute type 1 has an invalid length. [ 31.731402][ T413] netlink: 8 bytes leftover after parsing attributes in process `syz.2.42'. [ 32.018615][ T311] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 32.151097][ T440] input: syz0 as /devices/virtual/input/input4 [ 32.170086][ T311] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 32.183091][ T311] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 1.00 [ 32.192217][ T311] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 32.200324][ T311] usb 3-1: Product: syz [ 32.204520][ T311] usb 3-1: Manufacturer: syz [ 32.209664][ T311] usb 3-1: SerialNumber: syz [ 32.217013][ T311] cdc_wdm 3-1:1.0: cdc-wdm0: USB WDM device [ 32.223216][ T311] cdc_wdm 3-1:1.0: Unknown control protocol [ 32.418883][ C0] cdc_wdm 3-1:1.0: nonzero urb status received: -71 [ 32.425491][ C0] cdc_wdm 3-1:1.0: wdm_int_callback - 0 bytes [ 32.432462][ C0] cdc_wdm 3-1:1.0: nonzero urb status received: -71 [ 32.439162][ C0] cdc_wdm 3-1:1.0: wdm_int_callback - 0 bytes [ 32.445247][ C0] cdc_wdm 3-1:1.0: wdm_int_callback - usb_submit_urb failed with result -1 [ 32.454671][ T9] usb 3-1: USB disconnect, device number 2 [ 32.682310][ T36] kauditd_printk_skb: 81 callbacks suppressed [ 32.682327][ T36] audit: type=1326 audit(1790645099.779:155): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=457 comm="syz.1.56" exe="/root/ci2-android-6-12-rust/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f8d9919e159 code=0x0 [ 32.879157][ T36] audit: type=1400 audit(1790645099.979:156): avc: denied { read write } for pid=474 comm="syz.4.64" name="fuse" dev="devtmpfs" ino=23 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fuse_device_t tclass=chr_file permissive=1 [ 32.903722][ T36] audit: type=1400 audit(1790645099.979:157): avc: denied { open } for pid=474 comm="syz.4.64" path="/dev/fuse" dev="devtmpfs" ino=23 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fuse_device_t tclass=chr_file permissive=1 [ 32.955259][ T36] audit: type=1400 audit(1790645100.049:158): avc: denied { unmount } for pid=474 comm="syz.4.64" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=filesystem permissive=1 [ 33.010458][ T36] audit: type=1400 audit(1790645100.109:159): avc: denied { mount } for pid=481 comm="syz.4.67" name="/" dev="configfs" ino=2490 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=filesystem permissive=1 [ 33.023281][ T480] x86/PAT: syz.2.65:480 freeing invalid memtype [mem 0xfe004000-0xfe004fff] [ 33.036006][ T36] audit: type=1400 audit(1790645100.139:160): avc: denied { search } for pid=481 comm="syz.4.67" name="/" dev="configfs" ino=2490 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 33.047371][ T480] x86/PAT: syz.2.65:480 freeing invalid memtype [mem 0xfe005000-0xfe005fff] [ 33.064218][ T36] audit: type=1400 audit(1790645100.139:161): avc: denied { read } for pid=481 comm="syz.4.67" name="/" dev="configfs" ino=2490 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 33.114944][ T36] audit: type=1400 audit(1790645100.139:162): avc: denied { open } for pid=481 comm="syz.4.67" path="/" dev="configfs" ino=2490 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 33.138441][ T36] audit: type=1400 audit(1790645100.199:163): avc: denied { append } for pid=486 comm="syz.2.69" name="kvm" dev="devtmpfs" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 33.165099][ T36] audit: type=1400 audit(1790645100.259:164): avc: denied { create } for pid=490 comm="syz.4.71" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 33.288579][ T428] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 33.439712][ T428] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 33.450749][ T428] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 33.460715][ T428] usb 4-1: New USB device found, idVendor=054c, idProduct=0df2, bcdDevice=d6.af [ 33.470053][ T428] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 33.478623][ T428] usb 4-1: config 0 descriptor?? [ 33.889310][ T485] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 33.900390][ T485] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 33.911722][ T428] playstation 0003:054C:0DF2.0001: unknown main item tag 0x0 [ 33.919291][ T428] playstation 0003:054C:0DF2.0001: unknown main item tag 0x0 [ 33.926890][ T428] playstation 0003:054C:0DF2.0001: unknown main item tag 0x0 [ 33.934360][ T428] playstation 0003:054C:0DF2.0001: unknown main item tag 0x0 [ 33.941861][ T428] playstation 0003:054C:0DF2.0001: unknown main item tag 0x0 [ 33.949931][ T428] playstation 0003:054C:0DF2.0001: hidraw0: USB HID v1.01 Device [HID 054c:0df2] on usb-dummy_hcd.3-1/input0 [ 34.512202][ T428] input: HID 054c:0df2 as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/0003:054C:0DF2.0001/input/input5 [ 34.525009][ T428] input: HID 054c:0df2 Motion Sensors as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/0003:054C:0DF2.0001/input/input6 [ 34.540148][ T428] input: HID 054c:0df2 Touchpad as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/0003:054C:0DF2.0001/input/input7 [ 34.561415][ T428] playstation 0003:054C:0DF2.0001: Registered DualSense controller hw_version=0x00000000 fw_version=0x00000000 [ 34.714623][ T476] usb 4-1: USB disconnect, device number 2 [ 34.785706][ T538] kvm: kvm [537]: vcpu0, guest rIP: 0x9114 Unhandled WRMSR(0xc2) = 0x9d00 [ 34.796801][ T538] kvm: kvm [537]: vcpu0, guest rIP: 0x9114 Unhandled WRMSR(0xc1) = 0x9d00 [ 34.812662][ T538] kvm: vcpu 0: requested 14336 ns lapic timer period limited to 200000 ns [ 35.290223][ T591] pci 0000:00:01.0: [8086:7110] type 00 class 0x060100 conventional PCI endpoint [ 35.354756][ T598] FAULT_INJECTION: forcing a failure. [ 35.354756][ T598] name fail_page_alloc, interval 1, probability 0, space 0, times 1 [ 35.374056][ T598] CPU: 0 UID: 0 PID: 598 Comm: syz.1.115 Not tainted syzkaller #0 93cd2a7db6251899ee82c41fb24ebb4b8e8a6534 [ 35.374089][ T598] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 35.374109][ T598] Call Trace: [ 35.374115][ T598] [ 35.374124][ T598] __dump_stack+0x21/0x30 [ 35.374167][ T598] dump_stack_lvl+0x140/0x1c0 [ 35.374194][ T598] ? __cfi_dump_stack_lvl+0x10/0x10 [ 35.374220][ T598] dump_stack+0x19/0x20 [ 35.374244][ T598] should_fail_ex+0x3c2/0x510 [ 35.374266][ T598] should_fail_alloc_page+0xec/0x110 [ 35.374288][ T598] __alloc_pages_noprof+0x1c0/0x7e0 [ 35.374312][ T598] ? __cfi___alloc_pages_noprof+0x10/0x10 [ 35.374337][ T598] ? __kmalloc_node_noprof+0x252/0x500 [ 35.374358][ T598] __rb_allocate_pages+0x6c6/0x1270 [ 35.374379][ T598] ? rb_allocate_cpu_buffer+0x34f/0x3120 [ 35.374404][ T598] rb_allocate_cpu_buffer+0x10e8/0x3120 [ 35.374429][ T598] ? kasan_save_alloc_info+0x3a/0x50 [ 35.374447][ T598] ? __kasan_kmalloc+0x96/0xb0 [ 35.374469][ T598] ? trace_rb_cpu_prepare+0x2f0/0x2f0 [ 35.374493][ T598] ? __kmalloc_noprof+0x261/0x510 [ 35.374511][ T598] ? alloc_buffer+0x31b/0x1cb0 [ 35.374528][ T598] alloc_buffer+0x1570/0x1cb0 [ 35.374549][ T598] __ring_buffer_alloc+0x61/0x120 [ 35.374566][ T598] ? allocate_trace_buffers+0x2ac/0xb40 [ 35.374591][ T598] allocate_trace_buffers+0x2cc/0xb40 [ 35.374615][ T598] ? __kmalloc_node_track_caller_noprof+0x24e/0x4f0 [ 35.374645][ T598] ? tracing_release_options+0x110/0x110 [ 35.374672][ T598] ? __asan_memcpy+0x5a/0x80 [ 35.374691][ T598] ? kstrdup+0x7b/0x130 [ 35.374708][ T598] trace_array_create_systems+0x385/0xe80 [ 35.374733][ T598] instance_mkdir+0xde/0x130 [ 35.374753][ T598] tracefs_syscall_mkdir+0xa7/0xe0 [ 35.374772][ T598] vfs_mkdir+0x591/0x810 [ 35.374795][ T598] do_mkdirat+0x240/0x530 [ 35.374818][ T598] ? __cfi_do_mkdirat+0x10/0x10 [ 35.374838][ T598] ? __kasan_check_write+0x18/0x20 [ 35.374854][ T598] ? getname_flags+0x203/0x6b0 [ 35.374872][ T598] ? __kasan_check_write+0x18/0x20 [ 35.374890][ T598] __x64_sys_mkdirat+0x8b/0xa0 [ 35.374913][ T598] x64_sys_call+0x2ba8/0x2ee0 [ 35.374930][ T598] do_syscall_64+0x57/0xf0 [ 35.374947][ T598] ? clear_bhb_loop+0x50/0xa0 [ 35.374970][ T598] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 35.374992][ T598] RIP: 0033:0x7f8d9919e159 [ 35.375113][ T598] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 35.375132][ T598] RSP: 002b:00007f8d99f89028 EFLAGS: 00000246 ORIG_RAX: 0000000000000102 [ 35.375168][ T598] RAX: ffffffffffffffda RBX: 00007f8d99425fa0 RCX: 00007f8d9919e159 [ 35.375183][ T598] RDX: 00000000000001ff RSI: 0000200000000140 RDI: ffffffffffffff9c [ 35.375205][ T598] RBP: 00007f8d9923506b R08: 0000000000000000 R09: 0000000000000000 [ 35.375218][ T598] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 35.375228][ T598] R13: 00007f8d99426038 R14: 00007f8d99425fa0 R15: 00007ffc51daa028 [ 35.375244][ T598] [ 35.739839][ T611] capability: warning: `syz.1.121' uses deprecated v2 capabilities in a way that may be insecure [ 35.810796][ T615] netlink: 'syz.2.123': attribute type 27 has an invalid length. [ 35.844372][ T615] bridge0: port 2(bridge_slave_1) entered disabled state [ 35.851648][ T615] bridge0: port 1(bridge_slave_0) entered disabled state [ 36.170628][ T660] mmap: syz.4.137 (660) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 36.301826][ T682] loop8: detected capacity change from 0 to 16384 [ 36.361360][ T316] udevd[316]: symlink '../../loop8' '/dev/disk/by-diskseq/52.tmp-b7:8' failed: Read-only file system [ 36.457356][ T316] udevd[316]: symlink '../../loop8' '/dev/disk/by-diskseq/52.tmp-b7:8' failed: Read-only file system [ 36.607473][ T316] udevd[316]: symlink '../../loop8' '/dev/disk/by-diskseq/52.tmp-b7:8' failed: Read-only file system [ 36.620029][ T710] SELinux: ebitmap start bit (1929380032) is beyond the end of the bitmap (1472) [ 36.632880][ T316] udevd[316]: symlink '../../loop8' '/dev/disk/by-diskseq/52.tmp-b7:8' failed: Read-only file system [ 36.645946][ T710] SELinux: failed to load policy [ 36.823017][ T724] pim6reg1: entered promiscuous mode [ 36.828352][ T724] pim6reg1: entered allmulticast mode [ 37.971900][ T36] kauditd_printk_skb: 86 callbacks suppressed [ 37.971916][ T36] audit: type=1400 audit(1790645105.069:251): avc: denied { read write } for pid=785 comm="syz.2.181" name="binder1" dev="binder" ino=11 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 38.009303][ T36] audit: type=1400 audit(1790645105.069:252): avc: denied { open } for pid=785 comm="syz.2.181" path="/dev/binderfs/binder1" dev="binder" ino=11 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 38.044880][ T790] FAULT_INJECTION: forcing a failure. [ 38.044880][ T790] name failslab, interval 1, probability 0, space 0, times 0 [ 38.057664][ T790] CPU: 0 UID: 0 PID: 790 Comm: syz.1.183 Not tainted syzkaller #0 93cd2a7db6251899ee82c41fb24ebb4b8e8a6534 [ 38.057695][ T790] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 38.057706][ T790] Call Trace: [ 38.057712][ T790] [ 38.057718][ T790] __dump_stack+0x21/0x30 [ 38.057749][ T790] dump_stack_lvl+0x140/0x1c0 [ 38.057774][ T790] ? __cfi_dump_stack_lvl+0x10/0x10 [ 38.057799][ T790] ? __kasan_check_write+0x18/0x20 [ 38.057831][ T790] ? mutex_unlock+0x90/0x240 [ 38.057857][ T790] dump_stack+0x19/0x20 [ 38.057881][ T790] should_fail_ex+0x3c2/0x510 [ 38.057904][ T790] should_failslab+0xac/0x100 [ 38.057925][ T790] __kmalloc_node_track_caller_noprof+0x65/0x4f0 [ 38.057946][ T790] ? __cfi_selinux_kernfs_init_security+0x10/0x10 [ 38.057967][ T790] ? kstrdup_const+0x45/0x60 [ 38.057985][ T790] kstrdup+0x4d/0x130 [ 38.058000][ T790] ? kstrdup_const+0x3a/0x60 [ 38.058017][ T790] kstrdup_const+0x45/0x60 [ 38.058032][ T790] __kernfs_new_node+0xaa/0x740 [ 38.058051][ T790] ? bpf_lsm_kernfs_init_security+0xd/0x20 [ 38.058083][ T790] ? kernfs_new_node+0x280/0x280 [ 38.058108][ T790] ? __kasan_check_write+0x18/0x20 [ 38.058128][ T790] ? down_write+0xee/0x2b0 [ 38.058152][ T790] ? rpm_resume+0xb92/0x1670 [ 38.058175][ T790] kernfs_new_node+0x154/0x280 [ 38.058199][ T790] kernfs_create_link+0xa8/0x200 [ 38.058217][ T790] sysfs_do_create_link_sd+0x8a/0x120 [ 38.058238][ T790] sysfs_create_link+0x6c/0x90 [ 38.058258][ T790] driver_sysfs_add+0x91/0x240 [ 38.058275][ T790] really_probe+0x178/0x8b0 [ 38.058299][ T790] __driver_probe_device+0x193/0x280 [ 38.058317][ T790] driver_probe_device+0x54/0x3f0 [ 38.058337][ T790] __driver_attach+0x422/0x5e0 [ 38.058355][ T790] bus_for_each_dev+0x249/0x2d0 [ 38.058377][ T790] ? __cfi___driver_attach+0x10/0x10 [ 38.058393][ T790] ? __cfi_bus_for_each_dev+0x10/0x10 [ 38.058413][ T790] ? __kasan_kmalloc+0x96/0xb0 [ 38.058436][ T790] ? _raw_spin_unlock+0x45/0x60 [ 38.058454][ T790] ? klist_add_tail+0x1dd/0x220 [ 38.058479][ T790] driver_attach+0x46/0x50 [ 38.058496][ T790] bus_add_driver+0x393/0x730 [ 38.058521][ T790] driver_register+0x2b7/0x3c0 [ 38.058541][ T790] usb_gadget_register_driver_owner+0xfc/0x270 [ 38.058565][ T790] raw_ioctl+0x144c/0x37a0 [ 38.058584][ T790] ? __cfi_raw_ioctl+0x10/0x10 [ 38.058600][ T790] ? selinux_file_ioctl+0x732/0x1480 [ 38.058621][ T790] ? __cfi_selinux_file_ioctl+0x10/0x10 [ 38.058643][ T790] ? __fget_files+0x2bc/0x330 [ 38.058666][ T790] ? bpf_lsm_file_ioctl+0xd/0x20 [ 38.058689][ T790] ? security_file_ioctl+0x3e/0x110 [ 38.058708][ T790] ? __cfi_raw_ioctl+0x10/0x10 [ 38.058724][ T790] __se_sys_ioctl+0x123/0x1b0 [ 38.058747][ T790] __x64_sys_ioctl+0x7f/0xa0 [ 38.058769][ T790] x64_sys_call+0x1878/0x2ee0 [ 38.058787][ T790] do_syscall_64+0x57/0xf0 [ 38.058815][ T790] ? clear_bhb_loop+0x50/0xa0 [ 38.058840][ T790] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 38.058863][ T790] RIP: 0033:0x7f8d9919ddeb [ 38.058881][ T790] Code: 00 48 89 44 24 18 31 c0 48 8d 44 24 60 c7 04 24 10 00 00 00 48 89 44 24 08 48 8d 44 24 20 48 89 44 24 10 b8 10 00 00 00 0f 05 <89> c2 3d 00 f0 ff ff 77 1c 48 8b 44 24 18 64 48 2b 04 25 28 00 00 [ 38.058897][ T790] RSP: 002b:00007f8d99f86f00 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 38.058919][ T790] RAX: ffffffffffffffda RBX: 0000000000000005 RCX: 00007f8d9919ddeb [ 38.058933][ T790] RDX: 0000000000000000 RSI: 0000000000005501 RDI: 0000000000000005 [ 38.058944][ T790] RBP: 00007f8d99f87fd0 R08: 0000000000000001 R09: 00000000ffffffff [ 38.058957][ T790] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 38.058970][ T790] R13: 0000200000000180 R14: 0000000000000005 R15: 0000000000000000 [ 38.058985][ T790] [ 38.428412][ T790] raw-gadget.0 gadget.1: really_probe: driver_sysfs_add failed [ 38.437267][ T790] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 38.446348][ T790] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 38.552804][ T801] kvm: MWAIT instruction emulated as NOP! [ 38.876596][ T36] audit: type=1400 audit(1790645105.969:253): avc: denied { write } for pid=814 comm="syz.2.193" path="socket:[6031]" dev="sockfs" ino=6031 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 38.983364][ T36] audit: type=1400 audit(1790645106.079:254): avc: denied { sqpoll } for pid=822 comm="syz.2.197" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 39.006568][ T36] audit: type=1400 audit(1790645106.099:255): avc: denied { read write } for pid=825 comm="syz.2.198" name="vhost-vsock" dev="devtmpfs" ino=200 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 39.030847][ T36] audit: type=1400 audit(1790645106.099:256): avc: denied { open } for pid=825 comm="syz.2.198" path="/dev/vhost-vsock" dev="devtmpfs" ino=200 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 39.055932][ T36] audit: type=1400 audit(1790645106.099:257): avc: denied { ioctl } for pid=825 comm="syz.2.198" path="/dev/vhost-vsock" dev="devtmpfs" ino=200 ioctlcmd=0xaf01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 39.058863][ T829] FAULT_INJECTION: forcing a failure. [ 39.058863][ T829] name failslab, interval 1, probability 0, space 0, times 0 [ 39.094412][ T829] CPU: 0 UID: 0 PID: 829 Comm: syz.2.199 Not tainted syzkaller #0 93cd2a7db6251899ee82c41fb24ebb4b8e8a6534 [ 39.094441][ T829] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 39.094452][ T829] Call Trace: [ 39.094457][ T829] [ 39.094464][ T829] __dump_stack+0x21/0x30 [ 39.094494][ T829] dump_stack_lvl+0x140/0x1c0 [ 39.094517][ T829] ? __cfi_dump_stack_lvl+0x10/0x10 [ 39.094541][ T829] ? __cfi_futex_wake_mark+0x10/0x10 [ 39.094559][ T829] ? __kasan_check_read+0x15/0x20 [ 39.094571][ T829] dump_stack+0x19/0x20 [ 39.094584][ T829] should_fail_ex+0x3c2/0x510 [ 39.094598][ T829] should_failslab+0xac/0x100 [ 39.094611][ T829] __kmalloc_cache_noprof+0x41/0x470 [ 39.094622][ T829] ? file_f_owner_allocate+0x92/0x220 [ 39.094634][ T829] file_f_owner_allocate+0x92/0x220 [ 39.094649][ T829] do_fcntl+0xe2e/0x1580 [ 39.094661][ T829] ? __cfi_selinux_file_fcntl+0x10/0x10 [ 39.094673][ T829] ? check_fcntl_cmd+0xb0/0xb0 [ 39.094692][ T829] ? mutex_unlock+0x90/0x240 [ 39.094707][ T829] ? bpf_lsm_file_fcntl+0xd/0x20 [ 39.094721][ T829] ? security_file_fcntl+0x3e/0x110 [ 39.094732][ T829] __se_sys_fcntl+0xe4/0x180 [ 39.094743][ T829] __x64_sys_fcntl+0x7f/0xa0 [ 39.094754][ T829] x64_sys_call+0x1cb3/0x2ee0 [ 39.094764][ T829] do_syscall_64+0x57/0xf0 [ 39.094774][ T829] ? clear_bhb_loop+0x50/0xa0 [ 39.094787][ T829] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 39.094799][ T829] RIP: 0033:0x7f100c19e159 [ 39.094810][ T829] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 39.094818][ T829] RSP: 002b:00007f100d0b3028 EFLAGS: 00000246 ORIG_RAX: 0000000000000048 [ 39.094831][ T829] RAX: ffffffffffffffda RBX: 00007f100c425fa0 RCX: 00007f100c19e159 [ 39.094839][ T829] RDX: 0000000000000000 RSI: 0000000000000008 RDI: 0000000000000003 [ 39.094846][ T829] RBP: 00007f100c23506b R08: 0000000000000000 R09: 0000000000000000 [ 39.094853][ T829] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 39.094859][ T829] R13: 00007f100c426038 R14: 00007f100c425fa0 R15: 00007fff58de22e8 [ 39.094868][ T829] [ 39.368579][ T527] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 39.430679][ T36] audit: type=1400 audit(1790645106.529:258): avc: denied { connect } for pid=836 comm="syz.2.203" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 39.451595][ T36] audit: type=1400 audit(1790645106.549:259): avc: denied { write } for pid=836 comm="syz.2.203" lport=1 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 39.472560][ T36] audit: type=1400 audit(1790645106.579:260): avc: denied { read } for pid=836 comm="syz.2.203" path="socket:[6144]" dev="sockfs" ino=6144 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 39.530201][ T527] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a7, bcdDevice= 1.00 [ 39.541562][ T527] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 39.654970][ T856] bridge0: entered allmulticast mode [ 39.696169][ T864] FAULT_INJECTION: forcing a failure. [ 39.696169][ T864] name failslab, interval 1, probability 0, space 0, times 0 [ 39.708964][ T864] CPU: 1 UID: 0 PID: 864 Comm: syz.4.214 Not tainted syzkaller #0 93cd2a7db6251899ee82c41fb24ebb4b8e8a6534 [ 39.708997][ T864] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 39.709009][ T864] Call Trace: [ 39.709016][ T864] [ 39.709023][ T864] __dump_stack+0x21/0x30 [ 39.709057][ T864] dump_stack_lvl+0x140/0x1c0 [ 39.709083][ T864] ? __cfi_dump_stack_lvl+0x10/0x10 [ 39.709110][ T864] dump_stack+0x19/0x20 [ 39.709134][ T864] should_fail_ex+0x3c2/0x510 [ 39.709158][ T864] ? p9_fcall_init+0x12d/0x360 [ 39.709176][ T864] should_failslab+0xac/0x100 [ 39.709199][ T864] __kmalloc_noprof+0x69/0x510 [ 39.709220][ T864] ? p9_fcall_init+0x12d/0x360 [ 39.709236][ T864] ? __kasan_slab_alloc+0x73/0x90 [ 39.709260][ T864] p9_fcall_init+0x12d/0x360 [ 39.709276][ T864] ? p9_msg_buf_size+0x1911/0x2180 [ 39.709295][ T864] p9_client_prepare_req+0x2a6/0xa50 [ 39.709322][ T864] ? do_syscall_64+0x57/0xf0 [ 39.709341][ T864] ? entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 39.709365][ T864] ? trace_raw_output_9p_fid_ref+0x190/0x190 [ 39.709401][ T864] ? __kasan_check_write+0x18/0x20 [ 39.709421][ T864] ? _raw_spin_lock_irqsave+0xc1/0x160 [ 39.709442][ T864] p9_client_rpc+0x191/0xb50 [ 39.709468][ T864] ? _raw_spin_unlock_irqrestore+0x4a/0x70 [ 39.709490][ T864] ? p9_fid_create+0x3d0/0x3d0 [ 39.709515][ T864] ? __cfi_mounts_poll+0x10/0x10 [ 39.709542][ T864] ? __kasan_check_write+0x18/0x20 [ 39.709561][ T864] ? p9_conn_create+0x4d7/0x590 [ 39.709581][ T864] ? p9_fd_create+0x2f4/0x4c0 [ 39.709600][ T864] p9_client_create+0xa26/0x12d0 [ 39.709626][ T864] ? __cfi_p9_client_create+0x10/0x10 [ 39.709649][ T864] ? __kasan_kmalloc+0x96/0xb0 [ 39.709672][ T864] ? __kmalloc_cache_noprof+0x23c/0x470 [ 39.709840][ T864] ? v9fs_mount+0xc1/0x9d0 [ 39.709873][ T864] ? kasan_save_alloc_info+0x3a/0x50 [ 39.709893][ T864] ? __kasan_kmalloc+0x96/0xb0 [ 39.709918][ T864] ? kstrdup+0x7b/0x130 [ 39.709936][ T864] ? __asan_memset+0x39/0x50 [ 39.709957][ T864] v9fs_session_init+0x1c4/0x18a0 [ 39.709983][ T864] ? __cfi_v9fs_session_init+0x10/0x10 [ 39.710003][ T864] ? kasan_save_alloc_info+0x3a/0x50 [ 39.710021][ T864] ? __kasan_kmalloc+0x96/0xb0 [ 39.710045][ T864] ? __kmalloc_cache_noprof+0x23c/0x470 [ 39.710065][ T864] ? v9fs_mount+0xc1/0x9d0 [ 39.710088][ T864] v9fs_mount+0xdb/0x9d0 [ 39.710110][ T864] ? __cfi_v9fs_mount+0x10/0x10 [ 39.710133][ T864] ? selinux_capable+0x38/0x50 [ 39.710159][ T864] legacy_get_tree+0x103/0x1b0 [ 39.710185][ T864] ? __cfi_v9fs_mount+0x10/0x10 [ 39.710230][ T864] vfs_get_tree+0xa1/0x290 [ 39.710252][ T864] do_new_mount+0x251/0xb40 [ 39.710274][ T864] ? security_capable+0x44/0x130 [ 39.710296][ T864] path_mount+0x66a/0xff0 [ 39.710318][ T864] ? putname+0x113/0x150 [ 39.710342][ T864] __se_sys_mount+0x2bf/0x480 [ 39.710365][ T864] ? __x64_sys_mount+0xf0/0xf0 [ 39.710387][ T864] ? __kasan_check_write+0x18/0x20 [ 39.710407][ T864] ? fpregs_restore_userregs+0x11c/0x260 [ 39.710431][ T864] __x64_sys_mount+0xc3/0xf0 [ 39.710452][ T864] x64_sys_call+0x2021/0x2ee0 [ 39.710470][ T864] do_syscall_64+0x57/0xf0 [ 39.710489][ T864] ? clear_bhb_loop+0x50/0xa0 [ 39.710513][ T864] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 39.710537][ T864] RIP: 0033:0x7fd09db9e159 [ 39.710556][ T864] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 39.710572][ T864] RSP: 002b:00007fd09e9d5028 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 39.710593][ T864] RAX: ffffffffffffffda RBX: 00007fd09de25fa0 RCX: 00007fd09db9e159 [ 39.710608][ T864] RDX: 0000200000000080 RSI: 0000200000000300 RDI: 0000000000000000 [ 39.710621][ T864] RBP: 00007fd09dc3506b R08: 0000200000000000 R09: 0000000000000000 [ 39.710635][ T864] R10: 0000000000000400 R11: 0000000000000246 R12: 0000000000000000 [ 39.710647][ T864] R13: 00007fd09de26038 R14: 00007fd09de25fa0 R15: 00007ffc04c93ef8 [ 39.710665][ T864] [ 39.789409][ T527] cdc_acm 2-1:1.0: ttyACM0: USB ACM device [ 40.222744][ T876] kvm: kvm [875]: vcpu0, guest rIP: 0x9114 Unhandled WRMSR(0xc2) = 0x9d00 [ 40.233861][ T876] kvm: kvm [875]: vcpu0, guest rIP: 0x9114 Unhandled WRMSR(0xc1) = 0x9d00 [ 40.405938][ T892] syzkaller1: entered promiscuous mode [ 40.428582][ T892] syzkaller1: entered allmulticast mode [ 40.459152][ T900] netlink: 52 bytes leftover after parsing attributes in process `syz.3.226'. [ 40.575314][ T476] usb 2-1: USB disconnect, device number 2 [ 40.878593][ T428] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 41.029700][ T428] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 41.040958][ T428] usb 4-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 1023 [ 41.052511][ T428] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 41.061592][ T428] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 41.069708][ T428] usb 4-1: Product: syz [ 41.073865][ T428] usb 4-1: Manufacturer: syz [ 41.078439][ T428] usb 4-1: SerialNumber: syz [ 41.286447][ T916] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 41.542250][ T959] kvm: vcpu 2: requested lapic timer restore with starting count register 0x390=198462431 (396924862 ns) > initial count (148514 ns). Using initial count to start timer. [ 41.755077][ T988] kvm: emulating exchange as write [ 41.895345][ T916] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 42.104938][ T428] cdc_ncm 4-1:1.0: MAC-Address: 42:42:42:42:42:42 [ 42.111520][ T428] cdc_ncm 4-1:1.0: setting rx_max = 16384 [ 42.258574][ T527] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 42.305433][ T428] cdc_ncm 4-1:1.0: setting tx_max = 184 [ 42.315219][ T428] cdc_ncm 4-1:1.0 usb0: register 'cdc_ncm' at usb-dummy_hcd.3-1, CDC NCM (NO ZLP), 42:42:42:42:42:42 [ 42.329077][ T428] usb 4-1: USB disconnect, device number 3 [ 42.343823][ T428] cdc_ncm 4-1:1.0 usb0: unregister 'cdc_ncm' usb-dummy_hcd.3-1, CDC NCM (NO ZLP) [ 42.442805][ T527] usb 3-1: New USB device found, idVendor=0bda, idProduct=8150, bcdDevice= 0.00 [ 42.468571][ T527] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 42.476806][ T527] usb 3-1: Product: syz [ 42.489175][ T527] usb 3-1: Manufacturer: syz [ 42.493988][ T527] usb 3-1: SerialNumber: syz [ 42.598951][ T1037] netlink: 'syz.1.276': attribute type 2 has an invalid length. [ 43.073030][ T36] kauditd_printk_skb: 12 callbacks suppressed [ 43.073049][ T36] audit: type=1400 audit(1790645110.169:273): avc: denied { ioctl } for pid=1073 comm="syz.3.286" path="/dev/binderfs/binder0" dev="binder" ino=4 ioctlcmd=0x6201 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 43.105982][ T36] audit: type=1400 audit(1790645110.169:274): avc: denied { write } for pid=1073 comm="syz.3.286" name=".pending_reads" dev="incremental-fs" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 43.133777][ T36] audit: type=1400 audit(1790645110.169:275): avc: denied { open } for pid=1073 comm="syz.3.286" path="/55/file0/.pending_reads" dev="incremental-fs" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 43.160822][ T36] audit: type=1400 audit(1790645110.169:276): avc: denied { ioctl } for pid=1073 comm="syz.3.286" path="/55/file0/.pending_reads" dev="incremental-fs" ino=2 ioctlcmd=0x671e scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 43.187326][ T36] audit: type=1400 audit(1790645110.179:277): avc: denied { unmount } for pid=296 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 43.312294][ T527] (unnamed net_device) (uninitialized): Assigned a random MAC address: ee:ba:c7:b1:5b:25 [ 43.343200][ T527] rtl8150 3-1:1.0: eth1: rtl8150 is detected [ 43.379015][ T36] audit: type=1400 audit(1790645110.479:278): avc: denied { mounton } for pid=1083 comm="syz.3.290" path="/59/file0" dev="sysfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=dir permissive=1 [ 43.750608][ T36] audit: type=1400 audit(1790645110.849:279): avc: denied { read } for pid=1106 comm="syz.3.293" name=".pending_reads" dev="incremental-fs" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 43.864434][ C1] usb 3-1: Rx status -71 [ 43.868883][ C1] usb 3-1: eth1: intr status -71 [ 43.873964][ C1] usb 3-1: Rx status -71 [ 43.878270][ C1] usb 3-1: eth1: intr status -71 [ 43.883282][ C1] usb 3-1: Rx status -71 [ 43.887595][ C1] usb 3-1: eth1: intr status -71 [ 43.892982][ C1] usb 3-1: eth1: intr status -71 [ 43.898088][ C1] usb 3-1: eth1: intr status -71 [ 43.903212][ C1] usb 3-1: eth1: intr status -71 [ 43.908240][ C1] usb 3-1: eth1: intr status -71 [ 43.913364][ T428] usb 3-1: USB disconnect, device number 3 [ 43.919281][ C1] usb 3-1: eth1: intr status -71 [ 43.921032][ T149] usb 3-1: device reset failed [ 44.438564][ T527] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 44.533066][ T1145] FAULT_INJECTION: forcing a failure. [ 44.533066][ T1145] name failslab, interval 1, probability 0, space 0, times 0 [ 44.546237][ T1145] CPU: 0 UID: 0 PID: 1145 Comm: syz.2.303 Not tainted syzkaller #0 93cd2a7db6251899ee82c41fb24ebb4b8e8a6534 [ 44.546269][ T1145] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 44.546292][ T1145] Call Trace: [ 44.546298][ T1145] [ 44.546305][ T1145] __dump_stack+0x21/0x30 [ 44.546356][ T1145] dump_stack_lvl+0x140/0x1c0 [ 44.546382][ T1145] ? __cfi_dump_stack_lvl+0x10/0x10 [ 44.546407][ T1145] dump_stack+0x19/0x20 [ 44.546430][ T1145] should_fail_ex+0x3c2/0x510 [ 44.546453][ T1145] should_failslab+0xac/0x100 [ 44.546477][ T1145] kmem_cache_alloc_noprof+0x42/0x410 [ 44.546497][ T1145] ? __kernfs_new_node+0xf1/0x740 [ 44.546520][ T1145] ? __kasan_check_write+0x18/0x20 [ 44.546540][ T1145] __kernfs_new_node+0xf1/0x740 [ 44.546562][ T1145] ? __cfi_down_write+0x10/0x10 [ 44.546586][ T1145] ? kernfs_new_node+0x280/0x280 [ 44.546609][ T1145] ? __kasan_check_write+0x18/0x20 [ 44.546628][ T1145] ? up_write+0x66/0x280 [ 44.546653][ T1145] ? kernfs_activate+0x1ee/0x200 [ 44.546677][ T1145] ? kernfs_add_one+0x301/0x400 [ 44.546701][ T1145] kernfs_new_node+0x154/0x280 [ 44.546724][ T1145] kernfs_create_dir_ns+0x4b/0x130 [ 44.546749][ T1145] internal_create_group+0x43b/0xe70 [ 44.546770][ T1145] ? __kasan_check_write+0x18/0x20 [ 44.546790][ T1145] ? sysfs_create_group+0x40/0x40 [ 44.546811][ T1145] ? kernfs_activate+0x1ee/0x200 [ 44.546835][ T1145] sysfs_create_groups+0x5c/0x130 [ 44.546857][ T1145] device_add_attrs+0x12d/0x850 [ 44.546876][ T1145] ? device_add_class_symlinks+0x260/0x260 [ 44.546894][ T1145] ? __kasan_check_write+0x18/0x20 [ 44.546912][ T1145] ? kobject_put+0x1cc/0x2a0 [ 44.546931][ T1145] ? device_add_class_symlinks+0x22e/0x260 [ 44.546949][ T1145] device_add+0x4db/0xbf0 [ 44.546966][ T1145] input_register_device+0x9af/0x1080 [ 44.546988][ T1145] uinput_create_device+0x416/0x670 [ 44.547011][ T1145] uinput_ioctl_handler+0x3ea/0x1360 [ 44.547032][ T1145] ? uinput_release+0x70/0x70 [ 44.547053][ T1145] ? __fget_files+0x2bc/0x330 [ 44.547077][ T1145] uinput_ioctl+0x2c/0x40 [ 44.547096][ T1145] ? __cfi_uinput_ioctl+0x10/0x10 [ 44.547115][ T1145] __se_sys_ioctl+0x123/0x1b0 [ 44.547138][ T1145] __x64_sys_ioctl+0x7f/0xa0 [ 44.547160][ T1145] x64_sys_call+0x1878/0x2ee0 [ 44.547178][ T1145] do_syscall_64+0x57/0xf0 [ 44.547196][ T1145] ? clear_bhb_loop+0x50/0xa0 [ 44.547217][ T1145] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 44.547238][ T1145] RIP: 0033:0x7f100c19e159 [ 44.547255][ T1145] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 44.547270][ T1145] RSP: 002b:00007f100d0b3028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 44.547299][ T1145] RAX: ffffffffffffffda RBX: 00007f100c425fa0 RCX: 00007f100c19e159 [ 44.547315][ T1145] RDX: 0000000000000000 RSI: 0000000000005501 RDI: 0000000000000003 [ 44.547327][ T1145] RBP: 00007f100c23506b R08: 0000000000000000 R09: 0000000000000000 [ 44.547340][ T1145] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 44.547352][ T1145] R13: 00007f100c426038 R14: 00007f100c425fa0 R15: 00007fff58de22e8 [ 44.547369][ T1145] [ 44.868687][ T527] usb 5-1: Using ep0 maxpacket: 16 [ 44.875248][ T527] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 44.885389][ T527] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 44.896362][ T527] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 44.905567][ T527] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 44.915773][ T527] usb 5-1: Product: syz [ 44.920160][ T527] usb 5-1: Manufacturer: syz [ 44.924951][ T527] usb 5-1: SerialNumber: syz [ 45.131773][ T527] usb 5-1: 0:2 : does not exist [ 45.139050][ T527] usb 5-1: 5:0: failed to get current value for ch 0 (-22) [ 45.139972][ T1174] 9pnet: p9_errstr2errno: server reported unknown error 0x00 [ 45.155987][ T527] usb 5-1: USB disconnect, device number 2 [ 45.169204][ T316] udevd[316]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 45.201135][ T1179] FAULT_INJECTION: forcing a failure. [ 45.201135][ T1179] name failslab, interval 1, probability 0, space 0, times 0 [ 45.213849][ T1179] CPU: 0 UID: 0 PID: 1179 Comm: syz.1.317 Not tainted syzkaller #0 93cd2a7db6251899ee82c41fb24ebb4b8e8a6534 [ 45.213881][ T1179] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 45.213893][ T1179] Call Trace: [ 45.213899][ T1179] [ 45.213907][ T1179] __dump_stack+0x21/0x30 [ 45.213937][ T1179] dump_stack_lvl+0x140/0x1c0 [ 45.213951][ T1179] ? __cfi_dump_stack_lvl+0x10/0x10 [ 45.213965][ T1179] ? kasan_save_alloc_info+0x3a/0x50 [ 45.213980][ T1179] ? __kasan_kmalloc+0x96/0xb0 [ 45.213992][ T1179] dump_stack+0x19/0x20 [ 45.214005][ T1179] should_fail_ex+0x3c2/0x510 [ 45.214018][ T1179] should_failslab+0xac/0x100 [ 45.214029][ T1179] __kmalloc_cache_noprof+0x41/0x470 [ 45.214040][ T1179] ? __se_sys_fsopen+0x14d/0x390 [ 45.214051][ T1179] __se_sys_fsopen+0x14d/0x390 [ 45.214060][ T1179] __x64_sys_fsopen+0x5f/0x80 [ 45.214069][ T1179] x64_sys_call+0x2d40/0x2ee0 [ 45.214078][ T1179] do_syscall_64+0x57/0xf0 [ 45.214089][ T1179] ? clear_bhb_loop+0x50/0xa0 [ 45.214102][ T1179] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 45.214114][ T1179] RIP: 0033:0x7f8d9919e159 [ 45.214124][ T1179] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 45.214133][ T1179] RSP: 002b:00007f8d99f89028 EFLAGS: 00000246 ORIG_RAX: 00000000000001ae [ 45.214146][ T1179] RAX: ffffffffffffffda RBX: 00007f8d99425fa0 RCX: 00007f8d9919e159 [ 45.214154][ T1179] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 0000200000000180 [ 45.214160][ T1179] RBP: 00007f8d9923506b R08: 0000000000000000 R09: 0000000000000000 [ 45.214167][ T1179] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 45.214173][ T1179] R13: 00007f8d99426038 R14: 00007f8d99425fa0 R15: 00007ffc51daa028 [ 45.214181][ T1179] [ 45.378806][ T476] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 45.548594][ T476] usb 4-1: Using ep0 maxpacket: 16 [ 45.555097][ T476] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 45.565372][ T476] usb 4-1: config 0 interface 0 altsetting 5 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 45.576822][ T476] usb 4-1: config 0 interface 0 altsetting 5 endpoint 0x81 has invalid wMaxPacketSize 0 [ 45.586914][ T476] usb 4-1: config 0 interface 0 altsetting 5 has 1 endpoint descriptor, different from the interface descriptor's value: 4 [ 45.599754][ T476] usb 4-1: config 0 interface 0 has no altsetting 0 [ 45.606469][ T476] usb 4-1: New USB device found, idVendor=046d, idProduct=c53a, bcdDevice= 0.00 [ 45.615534][ T476] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 45.624056][ T476] usb 4-1: config 0 descriptor?? [ 45.638590][ T64] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 45.788560][ T64] usb 2-1: Using ep0 maxpacket: 16 [ 45.798787][ T64] usb 2-1: config 1 has an invalid interface number: 105 but max is 0 [ 45.807017][ T64] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 45.819282][ T64] usb 2-1: config 1 has 2 interfaces, different from the descriptor's value: 1 [ 45.828403][ T64] usb 2-1: config 1 has no interface number 1 [ 45.835782][ T64] usb 2-1: config 1 interface 105 altsetting 2 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 45.849213][ T64] usb 2-1: config 1 interface 105 has no altsetting 0 [ 45.857515][ T64] usb 2-1: New USB device found, idVendor=20f4, idProduct=e05a, bcdDevice=6c.6d [ 45.871498][ T64] usb 2-1: New USB device strings: Mfr=1, Product=23, SerialNumber=3 [ 45.880498][ T64] usb 2-1: Product: syz [ 45.884868][ T64] usb 2-1: Manufacturer: syz [ 45.889650][ T64] usb 2-1: SerialNumber: syz [ 45.894502][ T1189] FAULT_INJECTION: forcing a failure. [ 45.894502][ T1189] name failslab, interval 1, probability 0, space 0, times 0 [ 45.907248][ T1189] CPU: 1 UID: 0 PID: 1189 Comm: syz.2.321 Not tainted syzkaller #0 93cd2a7db6251899ee82c41fb24ebb4b8e8a6534 [ 45.907279][ T1189] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 45.907290][ T1189] Call Trace: [ 45.907296][ T1189] [ 45.907304][ T1189] __dump_stack+0x21/0x30 [ 45.907342][ T1189] dump_stack_lvl+0x140/0x1c0 [ 45.907367][ T1189] ? __cfi_dump_stack_lvl+0x10/0x10 [ 45.907394][ T1189] ? init_pseudo+0x68/0x1f0 [ 45.907411][ T1189] dump_stack+0x19/0x20 [ 45.907423][ T1189] should_fail_ex+0x3c2/0x510 [ 45.907435][ T1189] should_failslab+0xac/0x100 [ 45.907448][ T1189] __kmalloc_cache_noprof+0x41/0x470 [ 45.907460][ T1189] ? __se_sys_fsopen+0x14d/0x390 [ 45.907478][ T1189] __se_sys_fsopen+0x14d/0x390 [ 45.907496][ T1189] __x64_sys_fsopen+0x5f/0x80 [ 45.907513][ T1189] x64_sys_call+0x2d40/0x2ee0 [ 45.907530][ T1189] do_syscall_64+0x57/0xf0 [ 45.907545][ T1189] ? clear_bhb_loop+0x50/0xa0 [ 45.907557][ T1189] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 45.907569][ T1189] RIP: 0033:0x7f100c19e159 [ 45.907579][ T1189] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 45.907588][ T1189] RSP: 002b:00007f100d0b3028 EFLAGS: 00000246 ORIG_RAX: 00000000000001ae [ 45.907601][ T1189] RAX: ffffffffffffffda RBX: 00007f100c425fa0 RCX: 00007f100c19e159 [ 45.907615][ T1189] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000200000000140 [ 45.907628][ T1189] RBP: 00007f100c23506b R08: 0000000000000000 R09: 0000000000000000 [ 45.907640][ T1189] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 45.907651][ T1189] R13: 00007f100c426038 R14: 00007f100c425fa0 R15: 00007fff58de22e8 [ 45.907667][ T1189] [ 46.100895][ T476] logitech-djreceiver 0003:046D:C53A.0002: hiddev96,hidraw0: USB HID vff.fc Device [HID 046d:c53a] on usb-dummy_hcd.3-1/input0 [ 46.103633][ T64] aqc111 2-1:1.105: probe with driver aqc111 failed with error -22 [ 46.217585][ T1198] random: crng reseeded on system resumption [ 46.289298][ T64] usb 4-1: USB disconnect, device number 4 [ 46.311103][ T428] usb 2-1: USB disconnect, device number 3 [ 46.638462][ T1229] rust_binder: 1228:1229 release transaction 1 in, still active [ 46.646616][ T64] rust_binder: 1228: undelivered TRANSACTION_COMPLETE [ 46.658544][ T64] rust_binder: 1228: undelivered TRANSACTION_ERROR: 29189 [ 49.946219][ T1265] FAULT_INJECTION: forcing a failure. [ 49.946219][ T1265] name failslab, interval 1, probability 0, space 0, times 0 [ 49.959131][ T1265] CPU: 1 UID: 0 PID: 1265 Comm: syz.3.352 Not tainted syzkaller #0 93cd2a7db6251899ee82c41fb24ebb4b8e8a6534 [ 49.959162][ T1265] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 49.959174][ T1265] Call Trace: [ 49.959179][ T1265] [ 49.959187][ T1265] __dump_stack+0x21/0x30 [ 49.959218][ T1265] dump_stack_lvl+0x140/0x1c0 [ 49.959242][ T1265] ? __cfi_dump_stack_lvl+0x10/0x10 [ 49.959268][ T1265] dump_stack+0x19/0x20 [ 49.959290][ T1265] should_fail_ex+0x3c2/0x510 [ 49.959312][ T1265] should_failslab+0xac/0x100 [ 49.959333][ T1265] kmem_cache_alloc_noprof+0x42/0x410 [ 49.959353][ T1265] ? key_alloc+0x2ee/0x1060 [ 49.959377][ T1265] ? key_user_lookup+0x263/0x4f0 [ 49.959401][ T1265] key_alloc+0x2ee/0x1060 [ 49.959425][ T1265] keyring_alloc+0x4b/0xc0 [ 49.959443][ T1265] call_sbin_request_key+0x330/0xbf0 [ 49.959468][ T1265] ? __cfi_call_sbin_request_key+0x10/0x10 [ 49.959491][ T1265] ? __cfi_key_instantiate_and_link+0x10/0x10 [ 49.959520][ T1265] ? __cfi_request_key_auth_new+0x10/0x10 [ 49.959544][ T1265] ? mutex_unlock+0x90/0x240 [ 49.959566][ T1265] ? refcount_dec_and_lock+0x29/0xb0 [ 49.959591][ T1265] request_key_and_link+0xbb8/0x1230 [ 49.959625][ T1265] ? key_task_permission+0x3be/0x500 [ 49.959649][ T1265] ? __cfi_request_key_and_link+0x10/0x10 [ 49.959674][ T1265] ? downgrade_write+0x470/0x470 [ 49.959701][ T1265] ? __cfi_asymmetric_key_cmp_partial+0x10/0x10 [ 49.959727][ T1265] ? __cfi_keyring_search_iterator+0x10/0x10 [ 49.959747][ T1265] __se_sys_request_key+0x29c/0x350 [ 49.959768][ T1265] ? __x64_sys_request_key+0xc0/0xc0 [ 49.959788][ T1265] ? __kasan_check_write+0x18/0x20 [ 49.959807][ T1265] ? fpregs_restore_userregs+0x11c/0x260 [ 49.959829][ T1265] __x64_sys_request_key+0x9f/0xc0 [ 49.959849][ T1265] x64_sys_call+0x2b60/0x2ee0 [ 49.959867][ T1265] do_syscall_64+0x57/0xf0 [ 49.959884][ T1265] ? clear_bhb_loop+0x50/0xa0 [ 49.959907][ T1265] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 49.959927][ T1265] RIP: 0033:0x7f0976b9e159 [ 49.959943][ T1265] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 49.959958][ T1265] RSP: 002b:00007f0977aff028 EFLAGS: 00000246 ORIG_RAX: 00000000000000f9 [ 49.959978][ T1265] RAX: ffffffffffffffda RBX: 00007f0976e25fa0 RCX: 00007f0976b9e159 [ 49.959992][ T1265] RDX: 0000200000001fee RSI: 0000200000001ffb RDI: 0000200000000040 [ 49.960005][ T1265] RBP: 00007f0976c3506b R08: 0000000000000000 R09: 0000000000000000 [ 49.960018][ T1265] R10: fffffffffffffffe R11: 0000000000000246 R12: 0000000000000000 [ 49.960031][ T1265] R13: 00007f0976e26038 R14: 00007f0976e25fa0 R15: 00007ffd26b7ac28 [ 49.960046][ T1265] [ 50.292066][ T1283] kvm: vcpu 2: requested lapic timer restore with starting count register 0x390=198462431 (396924862 ns) > initial count (148514 ns). Using initial count to start timer. [ 50.354360][ T1293] syzkaller1: entered promiscuous mode [ 50.359897][ T1293] syzkaller1: entered allmulticast mode [ 50.380565][ T1297] netlink: 28 bytes leftover after parsing attributes in process `syz.3.362'. [ 50.471932][ T1306] FAULT_INJECTION: forcing a failure. [ 50.471932][ T1306] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 50.485126][ T1306] CPU: 0 UID: 0 PID: 1306 Comm: syz.2.366 Not tainted syzkaller #0 93cd2a7db6251899ee82c41fb24ebb4b8e8a6534 [ 50.485148][ T1306] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 50.485156][ T1306] Call Trace: [ 50.485161][ T1306] [ 50.485166][ T1306] __dump_stack+0x21/0x30 [ 50.485199][ T1306] dump_stack_lvl+0x140/0x1c0 [ 50.485220][ T1306] ? __cfi_dump_stack_lvl+0x10/0x10 [ 50.485235][ T1306] dump_stack+0x19/0x20 [ 50.485248][ T1306] should_fail_ex+0x3c2/0x510 [ 50.485261][ T1306] should_fail+0xf/0x20 [ 50.485272][ T1306] should_fail_usercopy+0x1e/0x30 [ 50.485284][ T1306] copy_page_from_iter_atomic+0x34b/0x1780 [ 50.485299][ T1306] ? __cfi_copy_page_from_iter_atomic+0x10/0x10 [ 50.485313][ T1306] ? inode_to_bdi+0x6d/0x100 [ 50.485327][ T1306] ? __kasan_check_read+0x15/0x20 [ 50.485338][ T1306] generic_perform_write+0x588/0x970 [ 50.485352][ T1306] ? __cfi_generic_perform_write+0x10/0x10 [ 50.485365][ T1306] ? generic_write_checks_count+0x426/0x540 [ 50.485379][ T1306] ? file_update_time+0xa3/0x210 [ 50.485388][ T1306] shmem_file_write_iter+0x105/0x130 [ 50.485401][ T1306] vfs_write+0x75f/0xfd0 [ 50.485412][ T1306] ? __cfi_vfs_write+0x10/0x10 [ 50.485422][ T1306] ? __cfi_mutex_lock+0x10/0x10 [ 50.485436][ T1306] ksys_write+0x145/0x260 [ 50.485446][ T1306] ? xfd_validate_state+0x68/0x140 [ 50.485460][ T1306] ? __cfi_ksys_write+0x10/0x10 [ 50.485470][ T1306] ? __kasan_check_write+0x18/0x20 [ 50.485480][ T1306] ? fpregs_restore_userregs+0x11c/0x260 [ 50.485492][ T1306] __x64_sys_write+0x7f/0x90 [ 50.485503][ T1306] x64_sys_call+0x271c/0x2ee0 [ 50.485512][ T1306] do_syscall_64+0x57/0xf0 [ 50.485522][ T1306] ? clear_bhb_loop+0x50/0xa0 [ 50.485535][ T1306] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 50.485547][ T1306] RIP: 0033:0x7f100c19e159 [ 50.485558][ T1306] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 50.485566][ T1306] RSP: 002b:00007f100d0b3028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 50.485579][ T1306] RAX: ffffffffffffffda RBX: 00007f100c425fa0 RCX: 00007f100c19e159 [ 50.485587][ T1306] RDX: 000000000001000a RSI: 0000200000000380 RDI: 0000000000000004 [ 50.485594][ T1306] RBP: 00007f100c23506b R08: 0000000000000000 R09: 0000000000000000 [ 50.485600][ T1306] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 50.485606][ T1306] R13: 00007f100c426038 R14: 00007f100c425fa0 R15: 00007fff58de22e8 [ 50.485615][ T1306] [ 51.023559][ T1339] af_packet: tpacket_rcv: packet too big, clamped from 65526 to 4. macoff=68 [ 51.057809][ T36] kauditd_printk_skb: 27 callbacks suppressed [ 51.057824][ T36] audit: type=1400 audit(1790645118.149:302): avc: denied { append } for pid=1344 comm="syz.4.382" name="kmsg" dev="devtmpfs" ino=9 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kmsg_device_t tclass=chr_file permissive=1 [ 51.058452][ T1345] : renamed from veth0_macvtap (while UP) [ 51.218625][ T31] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 51.308649][ T1357] kvm: kvm [1356]: vcpu0, guest rIP: 0x9134 Unhandled WRMSR(0x11e) = 0xbe702111 [ 51.381239][ T31] usb 4-1: New USB device found, idVendor=0bda, idProduct=8150, bcdDevice= 0.00 [ 51.390727][ T31] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 51.399000][ T31] usb 4-1: Product: syz [ 51.403585][ T31] usb 4-1: Manufacturer: syz [ 51.408268][ T31] usb 4-1: SerialNumber: syz [ 51.463031][ T1405] FAULT_INJECTION: forcing a failure. [ 51.463031][ T1405] name failslab, interval 1, probability 0, space 0, times 0 [ 51.476070][ T1405] CPU: 0 UID: 0 PID: 1405 Comm: syz.4.390 Not tainted syzkaller #0 93cd2a7db6251899ee82c41fb24ebb4b8e8a6534 [ 51.476100][ T1405] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 51.476112][ T1405] Call Trace: [ 51.476118][ T1405] [ 51.476125][ T1405] __dump_stack+0x21/0x30 [ 51.476159][ T1405] dump_stack_lvl+0x140/0x1c0 [ 51.476180][ T1405] ? __cfi_dump_stack_lvl+0x10/0x10 [ 51.476207][ T1405] dump_stack+0x19/0x20 [ 51.476231][ T1405] should_fail_ex+0x3c2/0x510 [ 51.476252][ T1405] should_failslab+0xac/0x100 [ 51.476274][ T1405] __kmalloc_node_track_caller_noprof+0x65/0x4f0 [ 51.476294][ T1405] ? kstrdup_const+0x45/0x60 [ 51.476308][ T1405] ? __kasan_check_write+0x18/0x20 [ 51.476326][ T1405] ? _raw_spin_lock+0x92/0x120 [ 51.476346][ T1405] kstrdup+0x4d/0x130 [ 51.476360][ T1405] ? kstrdup_const+0x3a/0x60 [ 51.476377][ T1405] kstrdup_const+0x45/0x60 [ 51.476393][ T1405] __kernfs_new_node+0xaa/0x740 [ 51.476418][ T1405] ? down_write+0xee/0x2b0 [ 51.476440][ T1405] ? kernfs_new_node+0x280/0x280 [ 51.476463][ T1405] ? __kasan_check_write+0x18/0x20 [ 51.476481][ T1405] ? down_write+0xee/0x2b0 [ 51.476539][ T1405] ? __cfi_down_write+0x10/0x10 [ 51.476565][ T1405] ? __kasan_check_write+0x18/0x20 [ 51.476583][ T1405] kernfs_new_node+0x154/0x280 [ 51.476608][ T1405] __kernfs_create_file+0x52/0x280 [ 51.476636][ T1405] cgroup_addrm_files+0x775/0xac0 [ 51.476663][ T1405] ? trace_raw_output_cgroup_rstat+0x1f0/0x1f0 [ 51.476693][ T1405] ? __kasan_check_write+0x18/0x20 [ 51.476710][ T1405] ? _raw_spin_lock_irq+0x93/0x120 [ 51.476727][ T1405] ? __cfi__raw_spin_lock_irq+0x10/0x10 [ 51.476746][ T1405] css_populate_dir+0x1a4/0x3d0 [ 51.476767][ T1405] cgroup_mkdir+0x124d/0x1600 [ 51.476791][ T1405] ? __cfi_cgroup_mkdir+0x10/0x10 [ 51.476813][ T1405] kernfs_iop_mkdir+0x1be/0x2d0 [ 51.476837][ T1405] vfs_mkdir+0x591/0x810 [ 51.476863][ T1405] do_mkdirat+0x240/0x530 [ 51.476885][ T1405] ? __cfi_do_mkdirat+0x10/0x10 [ 51.476907][ T1405] ? __kasan_check_write+0x18/0x20 [ 51.476923][ T1405] ? getname_flags+0x203/0x6b0 [ 51.476942][ T1405] ? __kasan_check_write+0x18/0x20 [ 51.476960][ T1405] __x64_sys_mkdirat+0x8b/0xa0 [ 51.476981][ T1405] x64_sys_call+0x2ba8/0x2ee0 [ 51.476997][ T1405] do_syscall_64+0x57/0xf0 [ 51.477015][ T1405] ? clear_bhb_loop+0x50/0xa0 [ 51.477042][ T1405] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 51.477064][ T1405] RIP: 0033:0x7fd09db9e159 [ 51.477082][ T1405] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 51.477096][ T1405] RSP: 002b:00007fd09e9d5028 EFLAGS: 00000246 ORIG_RAX: 0000000000000102 [ 51.477115][ T1405] RAX: ffffffffffffffda RBX: 00007fd09de25fa0 RCX: 00007fd09db9e159 [ 51.477127][ T1405] RDX: 00000000000001ff RSI: 0000200000000000 RDI: ffffffffffffff9c [ 51.477139][ T1405] RBP: 00007fd09dc3506b R08: 0000000000000000 R09: 0000000000000000 [ 51.477150][ T1405] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 51.477160][ T1405] R13: 00007fd09de26038 R14: 00007fd09de25fa0 R15: 00007ffc04c93ef8 [ 51.477174][ T1405] [ 51.477181][ T1405] cgroup: cgroup_addrm_files: failed to add notify_on_release, err=-12 [ 51.816487][ T36] audit: type=1400 audit(1790645118.909:303): avc: denied { mounton } for pid=1422 comm="syz.4.393" path="/proc/285/task" dev="proc" ino=11184 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dir permissive=1 [ 51.878638][ T476] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 51.887418][ T1426] kvm: kvm [1425]: vcpu0, guest rIP: 0x9114 Unhandled WRMSR(0xc2) = 0x9d00 [ 51.896325][ T1426] kvm: kvm [1425]: vcpu0, guest rIP: 0x9114 Unhandled WRMSR(0xc1) = 0x9d00 [ 52.058587][ T476] usb 3-1: Using ep0 maxpacket: 32 [ 52.070436][ T476] usb 3-1: config index 0 descriptor too short (expected 29220, got 36) [ 52.080041][ T476] usb 3-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 52.098590][ T476] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 52.114255][ T476] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 52.123416][ T1439] x86/PAT: syz.4.399:1439 freeing invalid memtype [mem 0xfe004000-0xfe004fff] [ 52.124210][ T476] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 52.149308][ T476] usb 3-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 52.165328][ T476] usb 3-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 52.174909][ T476] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 52.198170][ T476] usb 3-1: config 0 descriptor?? [ 52.247828][ T31] (unnamed net_device) (uninitialized): Assigned a random MAC address: 56:38:8d:5c:a3:6a [ 52.260828][ T31] rtl8150 4-1:1.0: eth1: rtl8150 is detected [ 52.313040][ T1446] kvm_intel: kvm [1445]: vcpu0, guest rIP: 0x9114 Unhandled WRMSR(0x1d9) = 0x600b [ 52.325230][ T1446] kvm: kvm [1445]: vcpu0, guest rIP: 0x9114 Unhandled WRMSR(0x186) = 0x2406 [ 52.341115][ T1446] kvm: kvm [1445]: vcpu0, guest rIP: 0x9114 Unhandled WRMSR(0x11e) = 0x54dc [ 52.355106][ T1446] kvm: kvm [1445]: vcpu0, guest rIP: 0x9114 Unhandled WRMSR(0xc1) = 0x94fc [ 52.414872][ T476] usblp 3-1:0.0: usblp0: USB Bidirectional printer dev 4 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 52.430943][ T476] usb 3-1: USB disconnect, device number 4 [ 52.439142][ T476] usblp0: removed [ 52.547685][ T1479] kvm: kvm [1478]: vcpu1, guest rIP: 0x9134 Unhandled WRMSR(0x11e) = 0xbe702111 [ 52.675065][ T1485] rust_binder: Error in use_page_slow: ESRCH [ 52.675096][ T1485] rust_binder: use_range failure ESRCH [ 52.681324][ T1485] rust_binder: Failed to allocate buffer. len:4096, is_oneway:true [ 52.682457][ C0] usb 4-1: Rx status -71 [ 52.686924][ T1485] rust_binder: Failure in copy_transaction_data: ESRCH [ 52.695030][ C0] usb 4-1: eth1: intr status -71 [ 52.699204][ T1485] rust_binder: 1484:1485 transaction async to 1484:0 failed ESRCH, code 0 size 0-0 [ 52.706462][ C0] usb 4-1: Rx status -71 [ 52.724654][ C0] usb 4-1: eth1: intr status -71 [ 52.729797][ C0] usb 4-1: Rx status -71 [ 52.734110][ C0] usb 4-1: eth1: intr status -71 [ 52.739246][ T527] usb 4-1: USB disconnect, device number 5 [ 52.746078][ C0] usb 4-1: Rx status -108 [ 52.747830][ T149] usb 4-1: device reset failed [ 52.750457][ C0] usb 4-1: eth1: intr status -71 [ 52.755892][ T31] rust_binder: 1484: undelivered TRANSACTION_ERROR: 29201 [ 52.889545][ T64] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 53.048595][ T64] usb 3-1: Using ep0 maxpacket: 32 [ 53.061161][ T64] usb 3-1: config index 0 descriptor too short (expected 29220, got 36) [ 53.069737][ T64] usb 3-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 53.079844][ T64] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 53.089280][ T64] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 53.101668][ T64] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 53.111889][ T64] usb 3-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 53.126112][ T64] usb 3-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 53.135696][ T64] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 53.148547][ T64] usb 3-1: config 0 descriptor?? [ 53.357178][ T64] usblp 3-1:0.0: usblp0: USB Bidirectional printer dev 5 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 53.508616][ T31] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 53.659877][ T31] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 53.670092][ T31] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 53.679830][ T31] usb 4-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 53.688935][ T31] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 53.696930][ T31] usb 4-1: SerialNumber: syz [ 53.707206][ T36] audit: type=1400 audit(1790645120.799:304): avc: denied { read write } for pid=1419 comm="syz.2.391" name="lp0" dev="devtmpfs" ino=494 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:printer_device_t tclass=chr_file permissive=1 [ 53.728646][ T1543] usblp0:failed reading printer status (-32) [ 53.730867][ T36] audit: type=1400 audit(1790645120.799:305): avc: denied { open } for pid=1419 comm="syz.2.391" path="/dev/usb/lp0" dev="devtmpfs" ino=494 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:printer_device_t tclass=chr_file permissive=1 [ 53.738373][ T476] usb 3-1: USB disconnect, device number 5 [ 53.761619][ T36] audit: type=1400 audit(1790645120.819:306): avc: denied { ioctl } for pid=1419 comm="syz.2.391" path="/dev/usb/lp0" dev="devtmpfs" ino=494 ioctlcmd=0x60b scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:printer_device_t tclass=chr_file permissive=1 [ 53.768430][ T476] usblp0: removed [ 53.893803][ T1547] EXT4-fs warning (device sda1): __ext4_ioctl:1259: Setting inode version is not supported with metadata_csum enabled. [ 53.909045][ T31] usb 4-1: 0:2 : does not exist [ 53.922956][ T31] usb 4-1: USB disconnect, device number 6 [ 53.924519][ T36] audit: type=1400 audit(1790645121.019:307): avc: denied { mounton } for pid=1548 comm="syz.1.430" path="/105/file0" dev="tmpfs" ino=583 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=fifo_file permissive=1 [ 54.057648][ T1557] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 54.310863][ T1582] kvm: kvm [1581]: vcpu2, guest rIP: 0x9135 Unhandled WRMSR(0x11e) = 0x0 [ 54.415161][ T1605] syzkaller1: entered promiscuous mode [ 54.425990][ T1605] syzkaller1: entered allmulticast mode [ 54.608695][ T31] usb 3-1: new full-speed USB device number 6 using dummy_hcd [ 54.709892][ T1645] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 54.769691][ T31] usb 3-1: config 0 has no interfaces? [ 54.782300][ T31] usb 3-1: New USB device found, idVendor=0506, idProduct=4601, bcdDevice= 1.00 [ 54.797543][ T31] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 54.813680][ T31] usb 3-1: config 0 descriptor?? [ 54.853423][ T1663] syzkaller0: entered promiscuous mode [ 54.859019][ T1663] syzkaller0: entered allmulticast mode [ 54.970172][ T1673] FAULT_INJECTION: forcing a failure. [ 54.970172][ T1673] name failslab, interval 1, probability 0, space 0, times 0 [ 54.986887][ T1673] CPU: 0 UID: 0 PID: 1673 Comm: syz.4.456 Not tainted syzkaller #0 93cd2a7db6251899ee82c41fb24ebb4b8e8a6534 [ 54.986920][ T1673] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 54.986931][ T1673] Call Trace: [ 54.986936][ T1673] [ 54.986944][ T1673] __dump_stack+0x21/0x30 [ 54.986975][ T1673] dump_stack_lvl+0x140/0x1c0 [ 54.986995][ T1673] ? __cfi_dump_stack_lvl+0x10/0x10 [ 54.987017][ T1673] dump_stack+0x19/0x20 [ 54.987038][ T1673] should_fail_ex+0x3c2/0x510 [ 54.987059][ T1673] should_failslab+0xac/0x100 [ 54.987080][ T1673] kmem_cache_alloc_noprof+0x42/0x410 [ 54.987099][ T1673] ? __kernfs_new_node+0xf1/0x740 [ 54.987119][ T1673] __kernfs_new_node+0xf1/0x740 [ 54.987139][ T1673] ? kernfs_new_node+0x280/0x280 [ 54.987159][ T1673] ? bus_add_driver+0x18c/0x730 [ 54.987179][ T1673] kernfs_new_node+0x154/0x280 [ 54.987200][ T1673] kernfs_create_dir_ns+0x4b/0x130 [ 54.987221][ T1673] sysfs_create_dir_ns+0x127/0x210 [ 54.987238][ T1673] ? __cfi_sysfs_create_dir_ns+0x10/0x10 [ 54.987255][ T1673] ? kstrdup+0x7b/0x130 [ 54.987270][ T1673] kobject_add_internal+0x71f/0xc20 [ 54.987287][ T1673] kobject_init_and_add+0x12c/0x1a0 [ 54.987304][ T1673] ? __cfi_kobject_init_and_add+0x10/0x10 [ 54.987319][ T1673] ? __kasan_kmalloc+0x96/0xb0 [ 54.987340][ T1673] ? __kmalloc_cache_noprof+0x23c/0x470 [ 54.987360][ T1673] ? klist_init+0x29/0xe0 [ 54.987380][ T1673] bus_add_driver+0x2a2/0x730 [ 54.987400][ T1673] driver_register+0x2b7/0x3c0 [ 54.987418][ T1673] usb_gadget_register_driver_owner+0xfc/0x270 [ 54.987440][ T1673] raw_ioctl+0x144c/0x37a0 [ 54.987457][ T1673] ? __cfi_raw_ioctl+0x10/0x10 [ 54.987472][ T1673] ? selinux_file_ioctl+0x732/0x1480 [ 54.987491][ T1673] ? __cfi_selinux_file_ioctl+0x10/0x10 [ 54.987511][ T1673] ? __fget_files+0x2bc/0x330 [ 54.987532][ T1673] ? bpf_lsm_file_ioctl+0xd/0x20 [ 54.987554][ T1673] ? security_file_ioctl+0x3e/0x110 [ 54.987570][ T1673] ? __cfi_raw_ioctl+0x10/0x10 [ 54.987585][ T1673] __se_sys_ioctl+0x123/0x1b0 [ 54.987606][ T1673] __x64_sys_ioctl+0x7f/0xa0 [ 54.987626][ T1673] x64_sys_call+0x1878/0x2ee0 [ 54.987643][ T1673] do_syscall_64+0x57/0xf0 [ 54.987659][ T1673] ? clear_bhb_loop+0x50/0xa0 [ 54.987680][ T1673] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 54.987701][ T1673] RIP: 0033:0x7fd09db9ddeb [ 54.987717][ T1673] Code: 00 48 89 44 24 18 31 c0 48 8d 44 24 60 c7 04 24 10 00 00 00 48 89 44 24 08 48 8d 44 24 20 48 89 44 24 10 b8 10 00 00 00 0f 05 <89> c2 3d 00 f0 ff ff 77 1c 48 8b 44 24 18 64 48 2b 04 25 28 00 00 [ 54.987742][ T1673] RSP: 002b:00007fd09e9d2f00 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 54.987763][ T1673] RAX: ffffffffffffffda RBX: 0000000000000005 RCX: 00007fd09db9ddeb [ 54.987778][ T1673] RDX: 0000000000000000 RSI: 0000000000005501 RDI: 0000000000000005 [ 54.987791][ T1673] RBP: 00007fd09e9d3fd0 R08: 0000000000000001 R09: 00000000ffffffff [ 54.987804][ T1673] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 54.987816][ T1673] R13: 0000200000000180 R14: 0000000000000005 R15: 0000000000000000 [ 54.987830][ T1673] [ 54.987845][ T1673] kobject: kobject_add_internal failed for raw-gadget.2 (error: -12 parent: drivers) [ 55.034239][ T476] usb 3-1: USB disconnect, device number 6 [ 55.036024][ T1673] UDC core: USB Raw Gadget: driver registration failed: -12 [ 55.208577][ T31] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 55.210408][ T1673] misc raw-gadget: fail, usb_gadget_register_driver returned -12 [ 55.409881][ T31] usb 2-1: config 0 interface 0 altsetting 5 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 55.421013][ T31] usb 2-1: config 0 interface 0 altsetting 5 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 55.436912][ T31] usb 2-1: config 0 interface 0 has no altsetting 0 [ 55.443736][ T31] usb 2-1: New USB device found, idVendor=06a3, idProduct=0cd0, bcdDevice= 0.00 [ 55.453359][ T31] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 55.462328][ T31] usb 2-1: config 0 descriptor?? [ 55.638918][ T1711] FAULT_INJECTION: forcing a failure. [ 55.638918][ T1711] name failslab, interval 1, probability 0, space 0, times 0 [ 55.651739][ T1711] CPU: 1 UID: 0 PID: 1711 Comm: syz.3.480 Not tainted syzkaller #0 93cd2a7db6251899ee82c41fb24ebb4b8e8a6534 [ 55.651775][ T1711] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 55.651788][ T1711] Call Trace: [ 55.651794][ T1711] [ 55.651799][ T1711] __dump_stack+0x21/0x30 [ 55.651823][ T1711] dump_stack_lvl+0x140/0x1c0 [ 55.651837][ T1711] ? __cfi_dump_stack_lvl+0x10/0x10 [ 55.651852][ T1711] dump_stack+0x19/0x20 [ 55.651865][ T1711] should_fail_ex+0x3c2/0x510 [ 55.651878][ T1711] should_failslab+0xac/0x100 [ 55.651891][ T1711] __kmalloc_node_noprof+0x69/0x500 [ 55.651903][ T1711] ? __rb_allocate_pages+0x428/0x1270 [ 55.651915][ T1711] __rb_allocate_pages+0x428/0x1270 [ 55.651926][ T1711] ? rb_allocate_cpu_buffer+0x34f/0x3120 [ 55.651940][ T1711] rb_allocate_cpu_buffer+0x10e8/0x3120 [ 55.651953][ T1711] ? kasan_save_alloc_info+0x3a/0x50 [ 55.651969][ T1711] ? __kasan_kmalloc+0x96/0xb0 [ 55.651981][ T1711] ? trace_rb_cpu_prepare+0x2f0/0x2f0 [ 55.651993][ T1711] ? __kmalloc_noprof+0x261/0x510 [ 55.652003][ T1711] ? alloc_buffer+0x31b/0x1cb0 [ 55.652014][ T1711] alloc_buffer+0x1570/0x1cb0 [ 55.652025][ T1711] __ring_buffer_alloc+0x61/0x120 [ 55.652036][ T1711] ? allocate_trace_buffers+0x2ac/0xb40 [ 55.652052][ T1711] allocate_trace_buffers+0x2cc/0xb40 [ 55.652072][ T1711] ? __kmalloc_node_track_caller_noprof+0x24e/0x4f0 [ 55.652085][ T1711] ? tracing_release_options+0x110/0x110 [ 55.652099][ T1711] ? __asan_memcpy+0x5a/0x80 [ 55.652111][ T1711] ? kstrdup+0x7b/0x130 [ 55.652120][ T1711] trace_array_create_systems+0x385/0xe80 [ 55.652135][ T1711] instance_mkdir+0xde/0x130 [ 55.652148][ T1711] tracefs_syscall_mkdir+0xa7/0xe0 [ 55.652161][ T1711] vfs_mkdir+0x591/0x810 [ 55.652175][ T1711] do_mkdirat+0x240/0x530 [ 55.652188][ T1711] ? __cfi_do_mkdirat+0x10/0x10 [ 55.652201][ T1711] ? __kasan_check_write+0x18/0x20 [ 55.652211][ T1711] ? getname_flags+0x203/0x6b0 [ 55.652222][ T1711] ? __kasan_check_write+0x18/0x20 [ 55.652233][ T1711] __x64_sys_mkdirat+0x8b/0xa0 [ 55.652246][ T1711] x64_sys_call+0x2ba8/0x2ee0 [ 55.652256][ T1711] do_syscall_64+0x57/0xf0 [ 55.652266][ T1711] ? clear_bhb_loop+0x50/0xa0 [ 55.652278][ T1711] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 55.652290][ T1711] RIP: 0033:0x7f0976b9e159 [ 55.652301][ T1711] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 55.652310][ T1711] RSP: 002b:00007f0977aff028 EFLAGS: 00000246 ORIG_RAX: 0000000000000102 [ 55.652324][ T1711] RAX: ffffffffffffffda RBX: 00007f0976e25fa0 RCX: 00007f0976b9e159 [ 55.652332][ T1711] RDX: 00000000000001ff RSI: 0000200000000140 RDI: ffffffffffffff9c [ 55.652340][ T1711] RBP: 00007f0976c3506b R08: 0000000000000000 R09: 0000000000000000 [ 55.652347][ T1711] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 55.652353][ T1711] R13: 00007f0976e26038 R14: 00007f0976e25fa0 R15: 00007ffd26b7ac28 [ 55.652362][ T1711] [ 56.078761][ T476] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 56.110978][ T1722] pci 0000:00:01.0: [8086:7110] type 00 class 0x060100 conventional PCI endpoint [ 56.160767][ T31] input: HID 06a3:0cd0 as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/0003:06A3:0CD0.0003/input/input9 [ 56.166094][ T36] kauditd_printk_skb: 8 callbacks suppressed [ 56.166112][ T36] audit: type=1400 audit(1790645123.259:316): avc: denied { execute } for pid=1728 comm="syz.3.481" path="/memory.swap.current" dev="ramfs" ino=13292 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:ramfs_t tclass=file permissive=1 [ 56.173871][ T31] saitek 0003:06A3:0CD0.0003: input,hiddev96,hidraw0: USB HID v0.00 Device [HID 06a3:0cd0] on usb-dummy_hcd.1-1/input0 [ 56.212534][ T1732] EXT4-fs warning (device sda1): __ext4_ioctl:1259: Setting inode version is not supported with metadata_csum enabled. [ 56.231621][ T476] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 56.242686][ T476] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 56.252549][ T476] usb 3-1: New USB device found, idVendor=054c, idProduct=0df2, bcdDevice=d6.af [ 56.261690][ T476] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 56.272142][ T476] usb 3-1: config 0 descriptor?? [ 56.304823][ T36] audit: type=1400 audit(1790645123.399:317): avc: denied { unmount } for pid=345 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 56.498986][ T1752] syzkaller1: entered promiscuous mode [ 56.504623][ T1752] syzkaller1: entered allmulticast mode [ 56.523924][ T1754] EXT4-fs warning (device sda1): __ext4_ioctl:1259: Setting inode version is not supported with metadata_csum enabled. [ 56.593448][ T1760] netlink: 9 bytes leftover after parsing attributes in process `syz.4.495'. [ 56.602633][ T1760] gretap0: entered promiscuous mode [ 56.608292][ T1760] netlink: 5 bytes leftover after parsing attributes in process `syz.4.495'. [ 56.617409][ T1760] 0ªî{X¹¦: renamed from gretap0 [ 56.623179][ T1760] 0ªî{X¹¦: left promiscuous mode [ 56.628326][ T1760] 0ªî{X¹¦: entered allmulticast mode [ 56.634898][ T1760] A link change request failed with some changes committed already. Interface 30ªî{X¹¦ may have been left with an inconsistent configuration, please check. [ 56.687107][ T1709] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 56.695901][ T1709] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 56.706842][ T476] playstation 0003:054C:0DF2.0004: unknown main item tag 0x0 [ 56.714396][ T476] playstation 0003:054C:0DF2.0004: unknown main item tag 0x0 [ 56.722760][ T476] playstation 0003:054C:0DF2.0004: unknown main item tag 0x0 [ 56.730293][ T476] playstation 0003:054C:0DF2.0004: unknown main item tag 0x0 [ 56.737998][ T476] playstation 0003:054C:0DF2.0004: unknown main item tag 0x0 [ 56.753243][ T476] playstation 0003:054C:0DF2.0004: hidraw1: USB HID v1.01 Device [HID 054c:0df2] on usb-dummy_hcd.2-1/input0 [ 56.768733][ T64] usb 2-1: USB disconnect, device number 4 [ 57.043530][ T1801] kvm: kvm [1800]: vcpu1, guest rIP: 0x9114 Unhandled WRMSR(0xc2) = 0x7 [ 57.052503][ T1801] kvm: kvm [1800]: vcpu1, guest rIP: 0x9114 Unhandled WRMSR(0xc1) = 0x7 [ 57.307609][ T476] input: HID 054c:0df2 as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/0003:054C:0DF2.0004/input/input10 [ 57.320503][ T476] input: HID 054c:0df2 Motion Sensors as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/0003:054C:0DF2.0004/input/input11 [ 57.336120][ T476] input: HID 054c:0df2 Touchpad as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/0003:054C:0DF2.0004/input/input12 [ 57.359883][ T476] playstation 0003:054C:0DF2.0004: Registered DualSense controller hw_version=0x00000000 fw_version=0x00000000 [ 57.460412][ T36] audit: type=1400 audit(1790645124.559:318): avc: denied { execute } for pid=1815 comm="syz.1.513" name="file0" dev="tmpfs" ino=676 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 57.460455][ T1816] process 'syz.1.513' launched './file0' with NULL argv: empty string added [ 57.491854][ T36] audit: type=1400 audit(1790645124.589:319): avc: denied { execute_no_trans } for pid=1815 comm="syz.1.513" path="/122/file0" dev="tmpfs" ino=676 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 57.517980][ T1818] futex_wake_op: syz.1.514 tries to shift op by 144; fix this program [ 57.535973][ T64] usb 3-1: USB disconnect, device number 7 [ 58.058318][ T36] audit: type=1326 audit(1790645125.149:320): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1853 comm="syz.2.529" exe="/root/ci2-android-6-12-rust/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f100c19e159 code=0x0 [ 58.377884][ T36] audit: type=1400 audit(1790645125.469:321): avc: denied { write } for pid=1868 comm="syz.4.535" name="mcfilter6" dev="proc" ino=4026532953 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_net_t tclass=file permissive=1 [ 58.455300][ T36] audit: type=1400 audit(1790645125.549:322): avc: denied { sqpoll } for pid=1875 comm="syz.4.538" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 58.501109][ T1879] FAULT_INJECTION: forcing a failure. [ 58.501109][ T1879] name failslab, interval 1, probability 0, space 0, times 0 [ 58.513807][ T1879] CPU: 1 UID: 0 PID: 1879 Comm: syz.3.539 Not tainted syzkaller #0 93cd2a7db6251899ee82c41fb24ebb4b8e8a6534 [ 58.513838][ T1879] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 58.513848][ T1879] Call Trace: [ 58.513855][ T1879] [ 58.513863][ T1879] __dump_stack+0x21/0x30 [ 58.513892][ T1879] dump_stack_lvl+0x140/0x1c0 [ 58.513915][ T1879] ? __cfi_dump_stack_lvl+0x10/0x10 [ 58.513939][ T1879] ? parse_opts+0x435/0x5d0 [ 58.513956][ T1879] dump_stack+0x19/0x20 [ 58.513977][ T1879] should_fail_ex+0x3c2/0x510 [ 58.513998][ T1879] should_failslab+0xac/0x100 [ 58.514018][ T1879] __kmalloc_cache_noprof+0x41/0x470 [ 58.514036][ T1879] ? p9_fd_create+0x103/0x4c0 [ 58.514052][ T1879] p9_fd_create+0x103/0x4c0 [ 58.514070][ T1879] p9_client_create+0x89a/0x12d0 [ 58.514092][ T1879] ? __cfi_p9_client_create+0x10/0x10 [ 58.514112][ T1879] ? __kasan_kmalloc+0x96/0xb0 [ 58.514134][ T1879] ? __kmalloc_cache_noprof+0x23c/0x470 [ 58.514151][ T1879] ? v9fs_mount+0xc1/0x9d0 [ 58.514171][ T1879] ? kasan_save_alloc_info+0x3a/0x50 [ 58.514187][ T1879] ? __kasan_kmalloc+0x96/0xb0 [ 58.514207][ T1879] ? kstrdup+0x7b/0x130 [ 58.514223][ T1879] ? __asan_memset+0x39/0x50 [ 58.514239][ T1879] v9fs_session_init+0x1c4/0x18a0 [ 58.514256][ T1879] ? __cfi_v9fs_session_init+0x10/0x10 [ 58.514273][ T1879] ? kasan_save_alloc_info+0x3a/0x50 [ 58.514289][ T1879] ? __kasan_kmalloc+0x96/0xb0 [ 58.514309][ T1879] ? __kmalloc_cache_noprof+0x23c/0x470 [ 58.514326][ T1879] ? v9fs_mount+0xc1/0x9d0 [ 58.514345][ T1879] v9fs_mount+0xdb/0x9d0 [ 58.514364][ T1879] ? __cfi_v9fs_mount+0x10/0x10 [ 58.514384][ T1879] ? selinux_capable+0x38/0x50 [ 58.514405][ T1879] legacy_get_tree+0x103/0x1b0 [ 58.514427][ T1879] ? __cfi_v9fs_mount+0x10/0x10 [ 58.514446][ T1879] vfs_get_tree+0xa1/0x290 [ 58.514463][ T1879] do_new_mount+0x251/0xb40 [ 58.514480][ T1879] ? security_capable+0x44/0x130 [ 58.514499][ T1879] path_mount+0x66a/0xff0 [ 58.514515][ T1879] ? putname+0x113/0x150 [ 58.514534][ T1879] __se_sys_mount+0x2bf/0x480 [ 58.514552][ T1879] ? __x64_sys_mount+0xf0/0xf0 [ 58.514569][ T1879] ? __kasan_check_write+0x18/0x20 [ 58.514586][ T1879] ? fpregs_restore_userregs+0x11c/0x260 [ 58.514606][ T1879] __x64_sys_mount+0xc3/0xf0 [ 58.514624][ T1879] x64_sys_call+0x2021/0x2ee0 [ 58.514640][ T1879] do_syscall_64+0x57/0xf0 [ 58.514656][ T1879] ? clear_bhb_loop+0x50/0xa0 [ 58.514676][ T1879] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 58.514696][ T1879] RIP: 0033:0x7f0976b9e159 [ 58.514719][ T1879] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 58.514735][ T1879] RSP: 002b:00007f0977aff028 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 58.514754][ T1879] RAX: ffffffffffffffda RBX: 00007f0976e25fa0 RCX: 00007f0976b9e159 [ 58.514768][ T1879] RDX: 0000200000000080 RSI: 0000200000000300 RDI: 0000000000000000 [ 58.514781][ T1879] RBP: 00007f0976c3506b R08: 0000200000000000 R09: 0000000000000000 [ 58.514793][ T1879] R10: 0000000000000400 R11: 0000000000000246 R12: 0000000000000000 [ 58.514804][ T1879] R13: 00007f0976e26038 R14: 00007f0976e25fa0 R15: 00007ffd26b7ac28 [ 58.514819][ T1879] [ 58.828192][ T1883] tipc: Started in network mode [ 58.840745][ T1883] tipc: Node identity ac1414aa, cluster identity 4711 [ 58.848727][ T1883] tipc: New replicast peer: 0.0.0.0 [ 58.855094][ T1883] tipc: Enabled bearer , priority 10 [ 58.921505][ T1899] syzkaller0: entered promiscuous mode [ 58.928078][ T1899] syzkaller0: entered allmulticast mode [ 59.093897][ T36] audit: type=1400 audit(1790645126.189:323): avc: denied { write } for pid=1919 comm="syz.4.556" name="usb_gadget" dev="configfs" ino=2491 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 59.182674][ T36] audit: type=1400 audit(1790645126.219:324): avc: denied { add_name } for pid=1919 comm="syz.4.556" name="g1" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 59.250464][ T36] audit: type=1400 audit(1790645126.219:325): avc: denied { create } for pid=1919 comm="syz.4.556" name="g1" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:configfs_t tclass=dir permissive=1 [ 59.379658][ T1939] netlink: 52 bytes leftover after parsing attributes in process `syz.4.562'. [ 59.585848][ T1956] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 59.650991][ T1964] syzkaller1: entered promiscuous mode [ 59.656596][ T1964] syzkaller1: entered allmulticast mode [ 59.978654][ T527] tipc: Node number set to 2886997162 [ 60.030768][ T1972] syz.3.578 (1972): drop_caches: 3 [ 60.102756][ T1973] syz.3.578 (1973): drop_caches: 3 [ 60.241046][ T1982] syzkaller1: entered promiscuous mode [ 60.246550][ T1982] syzkaller1: entered allmulticast mode [ 60.548628][ T64] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 60.699592][ T64] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 60.721694][ T64] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 1.00 [ 60.731145][ T64] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 60.748209][ T64] usb 5-1: Product: syz [ 60.752567][ T64] usb 5-1: Manufacturer: syz [ 60.757168][ T64] usb 5-1: SerialNumber: syz [ 60.764412][ T64] cdc_wdm 5-1:1.0: cdc-wdm0: USB WDM device [ 60.770438][ T64] cdc_wdm 5-1:1.0: Unknown control protocol [ 60.783425][ T1276] EXT4-fs warning (device sda1): ext4_dirblock_csum_verify:406: inode #264: comm udevd: No space for directory leaf checksum. Please run e2fsck -D. [ 60.813217][ T1259] EXT4-fs warning (device sda1): ext4_dirblock_csum_verify:406: inode #264: comm udevd: No space for directory leaf checksum. Please run e2fsck -D. [ 60.814447][ T1276] EXT4-fs error (device sda1): __ext4_find_entry:1658: inode #264: comm udevd: checksumming directory block 0 [ 60.831484][ T1259] EXT4-fs error (device sda1): __ext4_find_entry:1658: inode #264: comm udevd: checksumming directory block 0 [ 60.842040][ T1276] EXT4-fs warning (device sda1): ext4_dirblock_csum_verify:406: inode #264: comm udevd: No space for directory leaf checksum. Please run e2fsck -D. [ 60.866795][ T1259] EXT4-fs warning (device sda1): ext4_dirblock_csum_verify:406: inode #1642: comm udevd: No space for directory leaf checksum. Please run e2fsck -D. [ 60.867869][ T1276] EXT4-fs error (device sda1): __ext4_find_entry:1658: inode #264: comm udevd: checksumming directory block 0 [ 60.882142][ T1259] EXT4-fs error (device sda1): __ext4_find_entry:1658: inode #1642: comm udevd: checksumming directory block 0 [ 60.907412][ T1276] EXT4-fs warning (device sda1): ext4_dirblock_csum_verify:406: inode #264: comm udevd: No space for directory leaf checksum. Please run e2fsck -D. [ 60.926949][ T1276] EXT4-fs error (device sda1): __ext4_find_entry:1658: inode #264: comm udevd: checksumming directory block 0 [ 60.927228][ T2000] EXT4-fs warning (device sda1): ext4_dirblock_csum_verify:406: inode #264: comm udevd: No space for directory leaf checksum. Please run e2fsck -D. [ 60.938968][ T54] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 60.954306][ T2000] EXT4-fs error (device sda1): __ext4_find_entry:1658: inode #264: comm udevd: checksumming directory block 0 [ 60.973048][ T2000] udevd[2000]: failed to execute '/lib/udev/scsi_id' 'scsi_id --export --whitelisted -d /dev/sda': Bad message [ 60.982528][ C0] cdc_wdm 5-1:1.0: nonzero urb status received: -71 [ 60.991385][ C0] cdc_wdm 5-1:1.0: wdm_int_callback - 0 bytes [ 60.997985][ C0] cdc_wdm 5-1:1.0: nonzero urb status received: -71 [ 61.005048][ C0] cdc_wdm 5-1:1.0: wdm_int_callback - 0 bytes [ 61.011893][ C0] cdc_wdm 5-1:1.0: nonzero urb status received: -71 [ 61.018524][ C0] cdc_wdm 5-1:1.0: wdm_int_callback - 0 bytes [ 61.025214][ C0] cdc_wdm 5-1:1.0: nonzero urb status received: -71 [ 61.032002][ C0] cdc_wdm 5-1:1.0: wdm_int_callback - 0 bytes [ 61.038113][ C0] cdc_wdm 5-1:1.0: wdm_int_callback - usb_submit_urb failed with result -1 [ 61.052621][ T64] usb 5-1: USB disconnect, device number 3 [ 61.676029][ T2059] kvm: vcpu 2: requested lapic timer restore with starting count register 0x390=198462431 (396924862 ns) > initial count (148514 ns). Using initial count to start timer. [ 61.938427][ T2066] EXT4-fs error (device sda1): ext4_find_extent:943: inode #2022: comm syz.4.618: pblk 33721 bad header/extent: invalid magic - magic 0, entries 0, max 0(0), depth 0(0) [ 61.957681][ T2066] EXT4-fs error (device sda1): ext4_find_extent:943: inode #2022: comm syz.4.618: pblk 33721 bad header/extent: invalid magic - magic 0, entries 0, max 0(0), depth 0(0) [ 61.977452][ T2066] EXT4-fs error (device sda1): ext4_find_extent:943: inode #2022: comm syz.4.618: pblk 33721 bad header/extent: invalid magic - magic 0, entries 0, max 0(0), depth 0(0) [ 61.996506][ T2066] EXT4-fs error (device sda1): ext4_find_extent:943: inode #2022: comm syz.4.618: pblk 33721 bad header/extent: invalid magic - magic 0, entries 0, max 0(0), depth 0(0) [ 62.000263][ T110] EXT4-fs warning (device sda1): ext4_dirblock_csum_verify:406: inode #259: comm udevd: No space for directory leaf checksum. Please run e2fsck -D. [ 62.043003][ T110] EXT4-fs warning (device sda1): ext4_dirblock_csum_verify:406: inode #264: comm udevd: No space for directory leaf checksum. Please run e2fsck -D. [ 62.063683][ T110] EXT4-fs warning (device sda1): ext4_dirblock_csum_verify:406: inode #264: comm udevd: No space for directory leaf checksum. Please run e2fsck -D. [ 62.079252][ T110] EXT4-fs warning (device sda1): ext4_dirblock_csum_verify:406: inode #264: comm udevd: No space for directory leaf checksum. Please run e2fsck -D. [ 62.112694][ T2088] FAULT_INJECTION: forcing a failure. [ 62.112694][ T2088] name failslab, interval 1, probability 0, space 0, times 0 [ 62.149783][ T2088] CPU: 0 UID: 0 PID: 2088 Comm: syz.4.627 Not tainted syzkaller #0 93cd2a7db6251899ee82c41fb24ebb4b8e8a6534 [ 62.149816][ T2088] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 62.149829][ T2088] Call Trace: [ 62.149836][ T2088] [ 62.149843][ T2088] __dump_stack+0x21/0x30 [ 62.149877][ T2088] dump_stack_lvl+0x140/0x1c0 [ 62.149904][ T2088] ? __cfi_dump_stack_lvl+0x10/0x10 [ 62.149944][ T2088] ? selinux_kernfs_init_security+0x14b/0x4b0 [ 62.149968][ T2088] dump_stack+0x19/0x20 [ 62.149992][ T2088] should_fail_ex+0x3c2/0x510 [ 62.150013][ T2088] should_failslab+0xac/0x100 [ 62.150039][ T2088] kmem_cache_alloc_noprof+0x42/0x410 [ 62.150060][ T2088] ? __kernfs_new_node+0xf1/0x740 [ 62.150082][ T2088] ? bpf_lsm_kernfs_init_security+0xd/0x20 [ 62.150107][ T2088] __kernfs_new_node+0xf1/0x740 [ 62.150129][ T2088] ? __kasan_check_write+0x18/0x20 [ 62.150149][ T2088] ? kernfs_new_node+0x280/0x280 [ 62.150170][ T2088] ? down_write+0xee/0x2b0 [ 62.150194][ T2088] ? __cfi_down_write+0x10/0x10 [ 62.150215][ T2088] ? __kasan_check_write+0x18/0x20 [ 62.150232][ T2088] ? up_write+0x66/0x280 [ 62.150255][ T2088] ? kernfs_activate+0x1ee/0x200 [ 62.150275][ T2088] kernfs_new_node+0x154/0x280 [ 62.150295][ T2088] __kernfs_create_file+0x52/0x280 [ 62.150319][ T2088] sysfs_add_file_mode_ns+0x1d2/0x280 [ 62.150337][ T2088] internal_create_group+0x66c/0xe70 [ 62.150357][ T2088] ? __kasan_check_write+0x18/0x20 [ 62.150375][ T2088] ? sysfs_create_group+0x40/0x40 [ 62.150395][ T2088] ? kernfs_activate+0x1ee/0x200 [ 62.150418][ T2088] sysfs_create_groups+0x5c/0x130 [ 62.150437][ T2088] device_add_attrs+0x12d/0x850 [ 62.150454][ T2088] ? device_add_class_symlinks+0x260/0x260 [ 62.150472][ T2088] ? __kasan_check_write+0x18/0x20 [ 62.150492][ T2088] ? kobject_put+0x1cc/0x2a0 [ 62.150510][ T2088] ? device_add_class_symlinks+0x22e/0x260 [ 62.150528][ T2088] device_add+0x4db/0xbf0 [ 62.150543][ T2088] input_register_device+0x9af/0x1080 [ 62.150564][ T2088] uinput_create_device+0x416/0x670 [ 62.150584][ T2088] uinput_ioctl_handler+0x3ea/0x1360 [ 62.150603][ T2088] ? uinput_release+0x70/0x70 [ 62.150624][ T2088] ? __fget_files+0x2bc/0x330 [ 62.150647][ T2088] uinput_ioctl+0x2c/0x40 [ 62.150666][ T2088] ? __cfi_uinput_ioctl+0x10/0x10 [ 62.150684][ T2088] __se_sys_ioctl+0x123/0x1b0 [ 62.150704][ T2088] __x64_sys_ioctl+0x7f/0xa0 [ 62.150721][ T2088] x64_sys_call+0x1878/0x2ee0 [ 62.150731][ T2088] do_syscall_64+0x57/0xf0 [ 62.150741][ T2088] ? clear_bhb_loop+0x50/0xa0 [ 62.150755][ T2088] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 62.150768][ T2088] RIP: 0033:0x7fd09db9e159 [ 62.150779][ T2088] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 62.150789][ T2088] RSP: 002b:00007fd09e9d5028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 62.150802][ T2088] RAX: ffffffffffffffda RBX: 00007fd09de25fa0 RCX: 00007fd09db9e159 [ 62.150810][ T2088] RDX: 0000000000000000 RSI: 0000000000005501 RDI: 0000000000000003 [ 62.150817][ T2088] RBP: 00007fd09dc3506b R08: 0000000000000000 R09: 0000000000000000 [ 62.150824][ T2088] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 62.150831][ T2088] R13: 00007fd09de26038 R14: 00007fd09de25fa0 R15: 00007ffc04c93ef8 [ 62.150839][ T2088] [ 62.979968][ T2113] kvm: kvm [2111]: vcpu0, guest rIP: 0x9114 Unhandled WRMSR(0xc2) = 0x9d00 [ 62.989588][ T2113] kvm: kvm [2111]: vcpu0, guest rIP: 0x9114 Unhandled WRMSR(0xc1) = 0x9d00 [ 63.443005][ T1400] bridge_slave_1: left allmulticast mode [ 63.448752][ T1400] bridge_slave_1: left promiscuous mode [ 63.454545][ T1400] bridge0: port 2(bridge_slave_1) entered disabled state [ 63.468753][ T1400] bridge_slave_0: left allmulticast mode [ 63.474536][ T1400] bridge_slave_0: left promiscuous mode [ 63.485804][ T1400] bridge0: port 1(bridge_slave_0) entered disabled state [ 63.600969][ T1400] veth1_macvtap: left promiscuous mode [ 63.606522][ T1400] veth0_vlan: left promiscuous mode [ 64.485651][ T36] kauditd_printk_skb: 11 callbacks suppressed [ 64.485668][ T36] audit: type=1400 audit(1790645131.579:337): avc: denied { remount } for pid=2184 comm="syz.1.673" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 65.803938][ T2195] EXT4-fs warning: 15 callbacks suppressed [ 65.803955][ T2195] EXT4-fs warning (device sda1): ext4_dirblock_csum_verify:406: inode #1265: comm syz-executor: No space for directory leaf checksum. Please run e2fsck -D. [ 65.827687][ T2195] EXT4-fs error: 7917 callbacks suppressed [ 65.827705][ T2195] EXT4-fs error (device sda1): __ext4_find_entry:1658: inode #1265: comm syz-executor: checksumming directory block 0 [ 66.661018][ T2205] EXT4-fs warning (device sda1): ext4_dirblock_csum_verify:406: inode #1265: comm syz-executor: No space for directory leaf checksum. Please run e2fsck -D. [ 66.682238][ T2205] EXT4-fs error (device sda1): __ext4_find_entry:1658: inode #1265: comm syz-executor: checksumming directory block 0 [ 66.706426][ T36] audit: type=1400 audit(1790645133.799:338): avc: denied { read write } for pid=2212 comm="syz.2.687" name="file0" dev="tmpfs" ino=772 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 66.737581][ T36] audit: type=1400 audit(1790645133.829:339): avc: denied { open } for pid=2212 comm="syz.2.687" path="/140/file0" dev="tmpfs" ino=772 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 66.760442][ T36] audit: type=1400 audit(1790645133.829:340): avc: denied { ioctl } for pid=2212 comm="syz.2.687" path="/140/file0" dev="tmpfs" ino=772 ioctlcmd=0x5451 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 67.610764][ T2218] EXT4-fs warning (device sda1): ext4_dirblock_csum_verify:406: inode #1265: comm syz-executor: No space for directory leaf checksum. Please run e2fsck -D. [ 67.629194][ T2218] EXT4-fs error (device sda1): __ext4_find_entry:1658: inode #1265: comm syz-executor: checksumming directory block 0 [ 68.653722][ T2228] EXT4-fs warning (device sda1): ext4_dirblock_csum_verify:406: inode #1265: comm syz-executor: No space for directory leaf checksum. Please run e2fsck -D. [ 68.678790][ T2228] EXT4-fs error (device sda1): __ext4_find_entry:1658: inode #1265: comm syz-executor: checksumming directory block 0 [ 68.697685][ T110] EXT4-fs warning (device sda1): ext4_dirblock_csum_verify:406: inode #259: comm udevd: No space for directory leaf checksum. Please run e2fsck -D. [ 68.714022][ T110] EXT4-fs error (device sda1): __ext4_find_entry:1658: inode #259: comm udevd: checksumming directory block 0 [ 68.727031][ T110] EXT4-fs warning (device sda1): ext4_dirblock_csum_verify:406: inode #264: comm udevd: No space for directory leaf checksum. Please run e2fsck -D. [ 68.742723][ T110] EXT4-fs error (device sda1): __ext4_find_entry:1658: inode #264: comm udevd: checksumming directory block 0 [ 68.754838][ T110] EXT4-fs warning (device sda1): ext4_dirblock_csum_verify:406: inode #264: comm udevd: No space for directory leaf checksum. Please run e2fsck -D. [ 68.770840][ T110] EXT4-fs error (device sda1): __ext4_find_entry:1658: inode #264: comm udevd: checksumming directory block 0 [ 68.782802][ T110] EXT4-fs warning (device sda1): ext4_dirblock_csum_verify:406: inode #264: comm udevd: No space for directory leaf checksum. Please run e2fsck -D. [ 68.797957][ T110] EXT4-fs error (device sda1): __ext4_find_entry:1658: inode #264: comm udevd: checksumming directory block 0 [ 68.809774][ T110] EXT4-fs warning (device sda1): ext4_dirblock_csum_verify:406: inode #1642: comm udevd: No space for directory leaf checksum. Please run e2fsck -D. [ 68.824866][ T110] EXT4-fs error (device sda1): __ext4_find_entry:1658: inode #1642: comm udevd: checksumming directory block 0 [ 68.836757][ T110] EXT4-fs warning (device sda1): ext4_dirblock_csum_verify:406: inode #1480: comm udevd: No space for directory leaf checksum. Please run e2fsck -D. [ 68.851814][ T110] EXT4-fs error (device sda1): __ext4_find_entry:1658: inode #1480: comm udevd: checksumming directory block 0 [ 69.828813][ T2241] rust_binder: Failure when writing BR_NOOP at beginning of buffer. [ 69.828837][ T2241] rust_binder: Read failure Err(EFAULT) in pid:346 [ 69.842062][ T45] rust_binder: 2239: undelivered death notification, 0000000000000000 [ 71.038048][ T2243] EXT4-fs warning: 1 callbacks suppressed [ 71.038062][ T2243] EXT4-fs warning (device sda1): ext4_dirblock_csum_verify:406: inode #1265: comm syz-executor: No space for directory leaf checksum. Please run e2fsck -D. [ 71.061034][ T2243] EXT4-fs error: 1 callbacks suppressed [ 71.061052][ T2243] EXT4-fs error (device sda1): __ext4_find_entry:1658: inode #1265: comm syz-executor: checksumming directory block 0 [ 71.074897][ T45] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 71.088871][ T36] audit: type=1400 audit(1790645138.159:341): avc: denied { read write } for pid=2250 comm="syz.4.694" name="uhid" dev="devtmpfs" ino=199 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 71.113297][ T1276] EXT4-fs warning (device sda1): ext4_dirblock_csum_verify:406: inode #264: comm udevd: No space for directory leaf checksum. Please run e2fsck -D. [ 71.121596][ T45] hid-generic 0000:0000:0000.0005: hidraw0: HID v0.00 Device [syz1] on syz0 [ 71.134366][ T1276] EXT4-fs error (device sda1): __ext4_find_entry:1658: inode #264: comm udevd: checksumming directory block 0 [ 71.150459][ T36] audit: type=1400 audit(1790645138.159:342): avc: denied { open } for pid=2250 comm="syz.4.694" path="/dev/uhid" dev="devtmpfs" ino=199 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 71.173930][ T1276] EXT4-fs warning (device sda1): ext4_dirblock_csum_verify:406: inode #264: comm udevd: No space for directory leaf checksum. Please run e2fsck -D. [ 71.188985][ T1276] EXT4-fs error (device sda1): __ext4_find_entry:1658: inode #264: comm udevd: checksumming directory block 0 [ 71.200905][ T1276] EXT4-fs warning (device sda1): ext4_dirblock_csum_verify:406: inode #264: comm udevd: No space for directory leaf checksum. Please run e2fsck -D. [ 71.215967][ T1276] EXT4-fs error (device sda1): __ext4_find_entry:1658: inode #264: comm udevd: checksumming directory block 0 [ 71.229477][ T1276] EXT4-fs warning (device sda1): ext4_dirblock_csum_verify:406: inode #264: comm udevd: No space for directory leaf checksum. Please run e2fsck -D. [ 71.244673][ T1276] EXT4-fs error (device sda1): __ext4_find_entry:1658: inode #264: comm udevd: checksumming directory block 0 [ 71.256971][ T1276] EXT4-fs warning (device sda1): ext4_dirblock_csum_verify:406: inode #1642: comm udevd: No space for directory leaf checksum. Please run e2fsck -D. [ 71.272195][ T1276] EXT4-fs error (device sda1): __ext4_find_entry:1658: inode #1642: comm udevd: checksumming directory block 0 [ 71.286712][ T2253] EXT4-fs warning (device sda1): ext4_dirblock_csum_verify:406: inode #264: comm udevd: No space for directory leaf checksum. Please run e2fsck -D. [ 71.302094][ T2253] EXT4-fs error (device sda1): __ext4_find_entry:1658: inode #264: comm udevd: checksumming directory block 0 [ 71.314104][ T2253] udevd[2253]: failed to execute '/lib/udev/fido_id' 'fido_id': Bad message [ 71.490142][ T1404] EXT4-fs error (device sda1): ext4_validate_block_bitmap:423: comm kworker/u8:47: bg 1: bad block bitmap checksum [ 71.502441][ T1404] EXT4-fs (sda1): Delayed block allocation failed for inode 2036 at logical offset 3583 with max blocks 1 with error 74 [ 71.514983][ T1404] EXT4-fs (sda1): This should not happen!! Data will be lost [ 71.514983][ T1404] [ 71.569729][ T1404] EXT4-fs error (device sda1): ext4_validate_block_bitmap:423: comm kworker/u8:47: bg 2: bad block bitmap checksum [ 71.582039][ T1404] EXT4-fs (sda1): Delayed block allocation failed for inode 2028 at logical offset 1515 with max blocks 7 with error 74 [ 71.594976][ T1404] EXT4-fs (sda1): This should not happen!! Data will be lost [ 71.594976][ T1404] [ 71.606767][ T1404] EXT4-fs error (device sda1): ext4_validate_block_bitmap:423: comm kworker/u8:47: bg 3: bad block bitmap checksum [ 71.619090][ T1404] EXT4-fs (sda1): Delayed block allocation failed for inode 2033 at logical offset 1019 with max blocks 4 with error 74 [ 71.631732][ T1404] EXT4-fs (sda1): This should not happen!! Data will be lost [ 71.631732][ T1404] [ 72.394091][ T2254] EXT4-fs warning (device sda1): ext4_dirblock_csum_verify:406: inode #1265: comm syz-executor: No space for directory leaf checksum. Please run e2fsck -D. [ 72.405121][ T110] EXT4-fs warning (device sda1): ext4_dirblock_csum_verify:406: inode #259: comm udevd: No space for directory leaf checksum. Please run e2fsck -D. [ 72.423014][ T36] audit: type=1400 audit(1790645139.509:343): avc: denied { create } for pid=2259 comm="syz.4.695" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 72.425952][ T110] EXT4-fs warning (device sda1): ext4_dirblock_csum_verify:406: inode #264: comm udevd: No space for directory leaf checksum. Please run e2fsck -D. [ 72.445660][ T36] audit: type=1400 audit(1790645139.549:344): avc: denied { write } for pid=2259 comm="syz.4.695" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 73.830791][ T36] audit: type=1400 audit(1790645140.919:345): avc: denied { read } for pid=2294 comm="syz.4.699" name="ppp" dev="devtmpfs" ino=86 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 73.862639][ T45] kernel read not supported for file /ppp (pid: 45 comm: kworker/1:1) [ 75.384414][ T2304] kvm: user requested TSC rate below hardware speed [ 75.432525][ T2304] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=198462431 (396924862 ns) > initial count (200000 ns). Using initial count to start timer. [ 76.978918][ T2307] EXT4-fs warning: 6 callbacks suppressed [ 76.978936][ T2307] EXT4-fs warning (device sda1): ext4_dirblock_csum_verify:406: inode #1265: comm syz-executor: No space for directory leaf checksum. Please run e2fsck -D. [ 76.984027][ T110] EXT4-fs warning (device sda1): ext4_dirblock_csum_verify:406: inode #259: comm udevd: No space for directory leaf checksum. Please run e2fsck -D. [ 76.986540][ T2307] EXT4-fs error: 9 callbacks suppressed [ 76.986554][ T2307] EXT4-fs error (device sda1): __ext4_find_entry:1658: inode #1265: comm syz-executor: checksumming directory block 0 [ 77.003543][ T110] EXT4-fs error (device sda1): __ext4_find_entry:1658: inode #259: comm udevd: checksumming directory block 0 [ 77.046228][ T110] EXT4-fs warning (device sda1): ext4_dirblock_csum_verify:406: inode #264: comm udevd: No space for directory leaf checksum. Please run e2fsck -D. [ 77.061552][ T110] EXT4-fs error (device sda1): __ext4_find_entry:1658: inode #264: comm udevd: checksumming directory block 0 [ 77.073403][ T110] EXT4-fs warning (device sda1): ext4_dirblock_csum_verify:406: inode #264: comm udevd: No space for directory leaf checksum. Please run e2fsck -D. [ 77.088718][ T110] EXT4-fs error (device sda1): __ext4_find_entry:1658: inode #264: comm udevd: checksumming directory block 0 [ 77.100769][ T110] EXT4-fs warning (device sda1): ext4_dirblock_csum_verify:406: inode #264: comm udevd: No space for directory leaf checksum. Please run e2fsck -D. [ 77.117266][ T110] EXT4-fs error (device sda1): __ext4_find_entry:1658: inode #264: comm udevd: checksumming directory block 0 [ 77.129952][ T110] EXT4-fs warning (device sda1): ext4_dirblock_csum_verify:406: inode #1642: comm udevd: No space for directory leaf checksum. Please run e2fsck -D. [ 77.145044][ T110] EXT4-fs error (device sda1): __ext4_find_entry:1658: inode #1642: comm udevd: checksumming directory block 0 [ 77.156906][ T110] EXT4-fs warning (device sda1): ext4_dirblock_csum_verify:406: inode #1480: comm udevd: No space for directory leaf checksum. Please run e2fsck -D. [ 77.172090][ T110] EXT4-fs error (device sda1): __ext4_find_entry:1658: inode #1480: comm udevd: checksumming directory block 0 [ 77.258594][ T1486] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 77.409679][ T1486] usb 5-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 77.420642][ T1486] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 77.431795][ T1486] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 77.441564][ T1486] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 77.455478][ T1486] usb 5-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40 [ 77.464753][ T1486] usb 5-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0 [ 77.472943][ T1486] usb 5-1: Manufacturer: syz [ 77.478585][ T1486] usb 5-1: config 0 descriptor?? [ 77.886842][ T1486] appleir 0003:05AC:8243.0006: unknown main item tag 0x0 [ 77.894577][ T1486] appleir 0003:05AC:8243.0006: No inputs registered, leaving [ 77.903547][ T1486] appleir 0003:05AC:8243.0006: hiddev96,hidraw0: USB HID v0.00 Device [syz] on usb-dummy_hcd.4-1/input0 [ 77.919118][ T1276] EXT4-fs warning (device sda1): ext4_dirblock_csum_verify:406: inode #264: comm udevd: No space for directory leaf checksum. Please run e2fsck -D. [ 77.934538][ T1276] EXT4-fs error (device sda1): __ext4_find_entry:1658: inode #264: comm udevd: checksumming directory block 0 [ 77.946942][ T1276] EXT4-fs warning (device sda1): ext4_dirblock_csum_verify:406: inode #264: comm udevd: No space for directory leaf checksum. Please run e2fsck -D. [ 77.962583][ T1276] EXT4-fs error (device sda1): __ext4_find_entry:1658: inode #264: comm udevd: checksumming directory block 0 [ 77.974520][ T1276] EXT4-fs warning (device sda1): ext4_dirblock_csum_verify:406: inode #264: comm udevd: No space for directory leaf checksum. Please run e2fsck -D. [ 77.989649][ T1276] EXT4-fs error (device sda1): __ext4_find_entry:1658: inode #264: comm udevd: checksumming directory block 0 [ 78.007119][ T2314] udevd[2314]: failed to execute '/lib/udev/fido_id' 'fido_id': Bad message [ 78.116408][ T45] usb 5-1: USB disconnect, device number 4 [ 79.088656][ T54] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 79.088703][ T1902] Bluetooth: hci0: command 0x1003 tx timeout [ 80.570776][ T2323] kvm: vcpu 2: requested lapic timer restore with starting count register 0x390=198462431 (396924862 ns) > initial count (148514 ns). Using initial count to start timer. [ 82.462373][ T2328] EXT4-fs warning: 14 callbacks suppressed [ 82.462391][ T2328] EXT4-fs warning (device sda1): ext4_dirblock_csum_verify:406: inode #1265: comm syz-executor: No space for directory leaf checksum. Please run e2fsck -D. [ 82.485403][ T2328] EXT4-fs error: 14 callbacks suppressed [ 82.485420][ T2328] EXT4-fs error (device sda1): __ext4_find_entry:1658: inode #1265: comm syz-executor: checksumming directory block 0 [ 84.517845][ T2342] EXT4-fs warning (device sda1): ext4_dirblock_csum_verify:406: inode #1265: comm syz-executor: No space for directory leaf checksum. Please run e2fsck -D. [ 84.538619][ T110] EXT4-fs warning (device sda1): ext4_dirblock_csum_verify:406: inode #259: comm udevd: No space for directory leaf checksum. Please run e2fsck -D. [ 84.543401][ T2342] EXT4-fs error (device sda1): __ext4_find_entry:1658: inode #1265: comm syz-executor: checksumming directory block 0 SYZFAIL: failed to mkdtemp (errno 74: Bad message) SYZFAIL: failed to mkdtemp (errno 74: Bad message) SYZFAIL: failed to mkdtemp (errno 74: Bad message) SYZFAIL: failed to mkdtemp (errno 74: Bad message) SYZFAIL: failed to mkdtemp (errno 74: Bad message) SYZFAIL: failed to mkdtemp (errno 74: Bad message) SYZFAIL: failed to mkdtemp (errno 74: Bad message) SYZFAIL: failed to mkdtemp (errno 74: Bad message) SYZFAIL: failed to mkdtemp (errno 74: Bad message) SYZFAIL: failed to mkdtemp (errno 74: Bad message) SYZFAIL: failed to mkdtemp (errno 74: Bad message) SYZFAIL: failed to mkdtemp (errno 74: Bad message) SYZFAIL: failed to mkdtemp (errno 74: Bad message) SYZFAIL: failed to mkdtemp (errno 74: Bad message) SYZFAIL: failed to mkdtemp (errno 74: Bad message) SYZFAIL: failed to mkdtemp (errno 74: Bad message) SYZFAIL: failed to mkdtemp (errno 74: Bad message) SYZFAIL: failed to mkdtemp (errno 74: Bad message) SYZFAIL: failed to mkdtemp (errno 74: Bad message) SYZFAIL: failed to mkdtemp (errno 74: Bad message) SYZFAIL: failed to mkdtemp (errno 74: Bad message) SYZFAIL: repeatedly failed to execute the program proc=3 req=663 state=1 status=67 (errno 9: Bad file descriptor) [ 84.571491][ T110] EXT4-fs error (device sda1): __ext4_find_entry:1658: inode #259: comm udevd: checksumming directory block 0 [ 84.579001][ T36] audit: type=1400 audit(1790645151.669:346): avc: denied { write } for pid=286 comm="syz-executor" path="pipe:[1542]" dev="pipefs" ino=1542 scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:sshd_t tclass=fifo_file permissive=1 [ 84.595408][ T110] EXT4-fs warning (device sda1): ext4_dirblock_csum_verify:406: inode #264: comm udevd: No space for directory leaf checksum. Please run e2fsck -D. [ 84.624228][ T110] EXT4-fs error (device sda1): __ext4_find_entry:1658: inode #264: comm udevd: checksumming directory block 0 [ 84.636181][ T286] EXT4-fs error (device sda1): ext4_validate_inode_bitmap:105: comm syz-executor: Corrupt inode bitmap - block_group = 0, inode_bitmap = 137 [ 84.656409][ T286] EXT4-fs error (device sda1) in ext4_free_inode:361: Filesystem failed CRC [ 84.670759][ T110] EXT4-fs warning (device sda1): ext4_dirblock_csum_verify:406: inode #264: comm udevd: No space for directory leaf checksum. Please run e2fsck -D. [ 84.684099][ T286] EXT4-fs error (device sda1) in ext4_free_inode:361: Corrupt filesystem [ 84.694278][ T110] EXT4-fs error (device sda1): __ext4_find_entry:1658: inode #264: comm udevd: checksumming directory block 0 [ 84.694456][ T110] EXT4-fs warning (device sda1): ext4_dirblock_csum_verify:406: inode #264: comm udevd: No space for directory leaf checksum. Please run e2fsck -D. [ 84.728872][ T1] EXT4-fs warning (device sda1): ext4_dirblock_csum_verify:406: inode #2: comm init: No space for directory leaf checksum. Please run e2fsck -D. [ 84.748544][ T110] EXT4-fs error (device sda1): __ext4_find_entry:1658: inode #264: comm udevd: checksumming directory block 0 [ 84.768683][ T110] EXT4-fs warning (device sda1): ext4_dirblock_csum_verify:406: inode #1642: comm udevd: No space for directory leaf checksum. Please run e2fsck -D. [ 84.784180][ T110] EXT4-fs error (device sda1): __ext4_find_entry:1658: inode #1642: comm udevd: checksumming directory block 0 [ 84.796304][ T110] EXT4-fs warning (device sda1): ext4_dirblock_csum_verify:406: inode #1480: comm udevd: No space for directory leaf checksum. Please run e2fsck -D. [ 84.818668][ T1] EXT4-fs warning (device sda1): ext4_dirblock_csum_verify:406: inode #2: comm init: No space for directory leaf checksum. Please run e2fsck -D. [ 85.059896][ T1361] bridge_slave_1: left allmulticast mode [ 85.065586][ T1361] bridge_slave_1: left promiscuous mode [ 85.071586][ T1361] bridge0: port 2(bridge_slave_1) entered disabled state [ 85.078917][ T1361] bridge_slave_0: left allmulticast mode [ 85.084555][ T1361] bridge_slave_0: left promiscuous mode [ 85.090288][ T1361] bridge0: port 1(bridge_slave_0) entered disabled state [ 87.824037][ T110] EXT4-fs warning: 34 callbacks suppressed [ 87.824057][ T110] EXT4-fs warning (device sda1): ext4_dirblock_csum_verify:406: inode #259: comm udevd: No space for directory leaf checksum. Please run e2fsck -D. [ 87.844964][ T110] EXT4-fs error: 45 callbacks suppressed [ 87.844975][ T110] EXT4-fs error (device sda1): __ext4_find_entry:1658: inode #259: comm udevd: checksumming directory block 0 [ 87.862410][ T110] EXT4-fs warning (device sda1): ext4_dirblock_csum_verify:406: inode #264: comm udevd: No space for directory leaf checksum. Please run e2fsck -D. [ 87.877565][ T110] EXT4-fs error (device sda1): __ext4_find_entry:1658: inode #264: comm udevd: checksumming directory block 0 [ 87.890035][ T110] EXT4-fs warning (device sda1): ext4_dirblock_csum_verify:406: inode #264: comm udevd: No space for directory leaf checksum. Please run e2fsck -D. [ 87.905262][ T110] EXT4-fs error (device sda1): __ext4_find_entry:1658: inode #264: comm udevd: checksumming directory block 0 [ 87.917332][ T110] EXT4-fs warning (device sda1): ext4_dirblock_csum_verify:406: inode #264: comm udevd: No space for directory leaf checksum. Please run e2fsck -D. [ 87.932365][ T110] EXT4-fs error (device sda1): __ext4_find_entry:1658: inode #264: comm udevd: checksumming directory block 0 [ 87.944190][ T110] EXT4-fs warning (device sda1): ext4_dirblock_csum_verify:406: inode #1642: comm udevd: No space for directory leaf checksum. Please run e2fsck -D. [ 87.959330][ T110] EXT4-fs error (device sda1): __ext4_find_entry:1658: inode #1642: comm udevd: checksumming directory block 0 [ 87.971215][ T110] EXT4-fs warning (device sda1): ext4_dirblock_csum_verify:406: inode #1480: comm udevd: No space for directory leaf checksum. Please run e2fsck -D. [ 87.986391][ T110] EXT4-fs error (device sda1): __ext4_find_entry:1658: inode #1480: comm udevd: checksumming directory block 0 [ 92.980416][ T194] EXT4-fs warning (device sda1): ext4_dirblock_csum_verify:406: inode #121: comm crond: No space for directory leaf checksum. Please run e2fsck -D. [ 92.995425][ T194] EXT4-fs error (device sda1): __ext4_find_entry:1658: inode #121: comm crond: checksumming directory block 0 [ 93.007912][ T194] EXT4-fs warning (device sda1): ext4_dirblock_csum_verify:406: inode #116: comm crond: No space for directory leaf checksum. Please run e2fsck -D. [ 93.023719][ T194] EXT4-fs error (device sda1): __ext4_find_entry:1658: inode #116: comm crond: checksumming directory block 0