last executing test programs: 25.97430348s ago: executing program 2 (id=326): r0 = socket$inet6(0xa, 0x800000000000002, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e25, 0x0, @ipv4={'\x00', '\xff\xff', @local}}, 0x1c) write(r0, &(0x7f0000000200)="89", 0xffe3) 25.945545833s ago: executing program 2 (id=327): r0 = socket$packet(0x11, 0x2, 0x300) syz_clone(0xb44040, 0x0, 0x0, 0x0, 0x0, 0x0) syz_clone(0x20b84311, 0x0, 0x0, 0x0, 0x0, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2, 0x401d031, 0xffffffffffffffff, 0x0) socket$inet6(0xa, 0x3, 0x6) setsockopt$packet_tx_ring(r0, 0x107, 0x5, &(0x7f0000000000)=@req={0x6, 0x9, 0x6, 0x8}, 0x10) 25.022218448s ago: executing program 2 (id=362): mlockall(0x3) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) unlinkat(0xffffffffffffff9c, &(0x7f0000000000)='./file0/file0\x00', 0x200) timer_create(0x0, 0x0, 0x0) timer_settime(0x0, 0x0, 0x0, 0x0) 20.881165642s ago: executing program 2 (id=427): prctl$PR_SET_SECUREBITS(0x1c, 0x10) 20.814271209s ago: executing program 2 (id=428): mkdirat(0xffffffffffffff9c, &(0x7f00000001c0)='./mysys\x00', 0x10) mount(0x0, &(0x7f0000000100)='./mysys\x00', &(0x7f0000000200)='sysfs\x00', 0x2010800, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./mysys/bus/pci/devices/0000:00:05.0/resource0\x00', 0x2, 0x0) mmap(&(0x7f0000002000/0x4000)=nil, 0x4000, 0x3, 0x11, r0, 0x4000) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) syz_clone3(&(0x7f0000001680)={0x0, 0x0, 0x0, 0x0, {0x14}, 0x0, 0x0, 0x0, 0x0}, 0x58) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) setuid(0xee01) fsmount(0xffffffffffffffff, 0x0, 0x8a) 20.806571439s ago: executing program 2 (id=429): mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0) mount(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000300)='cgroup2\x00', 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f00000000c0)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000380), 0x0, &(0x7f00000003c0)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) llistxattr(0x0, 0x0, 0x0) getxattr(&(0x7f0000005140)='./file0\x00', &(0x7f0000005180)=@known='system.posix_acl_access\x00', 0x0, 0x0) 6.399876455s ago: executing program 0 (id=606): mkdirat(0xffffffffffffff9c, 0x0, 0x1ff) mount(0x0, &(0x7f00000003c0)='./tracefs_dir\x00', &(0x7f0000000400)='tracefs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000440)='./tracefs_dir/buffer_size_kb\x00', 0x0, 0x0) readv(r0, &(0x7f0000000480)=[{&(0x7f00000004c0)=""/4096, 0x1000}], 0x1) 6.34908148s ago: executing program 0 (id=607): write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz1\x00', {0x4, 0x0, 0x5374}, 0x8000001d, [0x8000, 0x78, 0xf, 0x2, 0x80, 0x6, 0x203, 0x7e, 0x4, 0x4b, 0x39cc1919, 0x42, 0x9, 0x5, 0xffff2d37, 0x881, 0x6, 0x3, 0x0, 0x5, 0x4, 0x3, 0xfffffffb, 0x3c5d, 0x1, 0x0, 0x9, 0x2, 0x15bb, 0x2, 0xe65f, 0x3, 0x7, 0x3, 0x7fff, 0x7, 0x80000000, 0xa72, 0x3, 0x7, 0x0, 0x71, 0xe, 0x5, 0x1, 0x5, 0x9, 0x3a, 0xffffff7f, 0x6, 0x6, 0xfffc0003, 0x5, 0x4, 0x8, 0x101, 0x90, 0x2, 0x4, 0x9, 0x8, 0x7, 0x1f, 0x40], [0x10000007, 0x3, 0x800, 0x8000, 0x10, 0xffeffff3, 0x8, 0x2, 0xf7, 0x10, 0x2bf, 0x6c9, 0xfff, 0xfffffffe, 0x5, 0x0, 0xd14, 0x5, 0x2f, 0xe, 0x4312, 0x7c, 0xea4, 0x0, 0x4, 0x23, 0x1, 0x40009, 0x400400, 0x401, 0x3, 0x1, 0xff, 0x5, 0x5, 0x5f31, 0x7f9, 0x5, 0x2, 0x2, 0x9, 0x5, 0x9, 0x8, 0x800000d, 0x88da, 0x8, 0xd, 0x1, 0xfe000000, 0x10002, 0x2, 0x7b, 0x9, 0x3, 0x3, 0x8, 0x801, 0x7, 0x3, 0x9, 0x48c93690, 0x1000042, 0xff7f], [0x7, 0xf5fd, 0x0, 0x5, 0x1, 0x100, 0xa, 0x9, 0x800003, 0x7fff, 0x0, 0x5, 0xf, 0x2, 0x5, 0x20000005, 0x0, 0x1ef, 0x4, 0x8, 0x86, 0x3, 0x7, 0x3e7, 0x0, 0x5, 0x5, 0x5, 0x3, 0x8, 0x8, 0x6cfc, 0x5, 0x139, 0x7, 0x200, 0x80000000, 0x3, 0x4e0a, 0x9, 0x1000, 0xa2, 0x7, 0x5, 0x5, 0x6, 0xac8, 0xffffffff, 0x2, 0x11, 0x3, 0xfffffff9, 0x0, 0x8, 0xffff, 0x2b98, 0x1, 0x4, 0x120000, 0xbe, 0x0, 0xffffffff, 0x2, 0x25], [0x9, 0xbb31, 0x7, 0xb, 0x5, 0xf0c1, 0xa, 0x80000006, 0x0, 0x5, 0x7d, 0xc9, 0x6, 0x6, 0x8, 0x57b, 0x7, 0x10000, 0x6, 0x7ffd, 0xfefd, 0x4, 0x20002, 0x5, 0xe8a0556, 0x2, 0x800014c, 0x3, 0x6, 0x10006, 0x8, 0x80000000, 0x5, 0x8, 0xce, 0xee1, 0xfffff000, 0x179, 0x3, 0x7e, 0x100, 0x9600, 0x56e, 0x2, 0x1007, 0x40000006, 0x100001, 0x0, 0x8, 0x4, 0x30b1d693, 0xa1f, 0xc, 0x800007, 0xfffffffe, 0x3, 0x8a13, 0xffff, 0x8000007, 0x2bf, 0x3, 0x1ff, 0x7fffffff, 0x5]}, 0x45c) openat$binderfs(0xffffff9c, &(0x7f0000000000)='./binderfs/binder0\x00', 0x2, 0x0) r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000080)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000100)={0xc, 0x0, &(0x7f0000000140)=[@acquire, @enter_looper], 0x53}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000180)={0x20, 0x0, &(0x7f00000001c0)=[@request_death, @clear_death]}) 6.34890126s ago: executing program 0 (id=608): r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x802, 0x0) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x2) write$uinput_user_dev(r0, &(0x7f0000000300)={'syz0\x00', {0x0, 0x0, 0x0, 0x3dde}, 0x0, [0x0, 0x0, 0x200, 0x0, 0x0, 0x7ff, 0x0, 0x0, 0x0, 0x1, 0x7, 0x0, 0x0, 0xffffffff, 0x5, 0x1, 0x68498907, 0x0, 0x2, 0x0, 0x25f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x68, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0xffffffff, 0xfffffffd, 0x4, 0x0, 0x0, 0x0, 0x7, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x40003, 0x0, 0x0, 0x0, 0x0, 0x5], [0x0, 0x0, 0x8, 0xb16, 0x0, 0x200000, 0x0, 0x0, 0x0, 0x0, 0x7ff, 0x2, 0x0, 0x0, 0x2, 0x0, 0x9, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x9, 0xd, 0x1000, 0x0, 0xf, 0x0, 0x2, 0x0, 0x0, 0x0, 0xfffffffe, 0x4, 0xffffffff, 0xfffffffe, 0x9, 0xff, 0xfffffffd, 0xfffffffd, 0x100, 0xfffffffa, 0x0, 0x88000000, 0x0, 0x0, 0x800, 0x0, 0x0, 0x9148, 0x0, 0x2, 0x0, 0xd, 0xffffffff, 0x0, 0x0, 0x6], [0x80000001, 0x0, 0x4, 0x0, 0x4, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0xddc, 0x0, 0x0, 0xfffffffc, 0xff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0xe, 0x1, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x2, 0x4, 0x0, 0x0, 0x3, 0x8, 0xfffffc00, 0x0, 0x80, 0x0, 0x0, 0x2, 0x0, 0xfffffffd, 0x5, 0x2, 0x0, 0x8000000, 0x0, 0x0, 0xffffffff, 0x2, 0x0, 0x0, 0x0, 0x6, 0xfffffffc, 0x0, 0x7, 0x4], [0xfffffffd, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x8, 0x0, 0xc045, 0x10, 0x4, 0x0, 0x2, 0xffff, 0x80, 0x0, 0x3, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x200000, 0x0, 0x0, 0x0, 0x0, 0xac5, 0x8b56, 0x9, 0xfffffffe, 0x0, 0x0, 0xffffffff, 0x1, 0x5, 0x2, 0x3, 0x4, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x4, 0x4, 0x0, 0x0, 0xfffffffd, 0x80, 0x0, 0x0, 0x0, 0x3, 0x5]}, 0x45c) ioctl$UI_DEV_CREATE(r0, 0x5501) 6.286231557s ago: executing program 0 (id=609): openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x20842, 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000180), 0x412, &(0x7f0000000640)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x6000}}) syz_fuse_handle_req(r0, &(0x7f0000008100)="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", 0x2000, &(0x7f0000000280)={&(0x7f0000000100)={0x50, 0x0, 0x4, {0x7, 0x28, 0x0, 0xffffffff8509852a, 0x7fff}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_fuse_handle_req(r0, &(0x7f0000004080)="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", 0x2000, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x78, 0x0, 0xfffffffffffffc25, {0xffffffffffffffff, 0x5, 0x0, {0xfffffffffffffffc, 0x8e, 0xd6b, 0x0, 0x0, 0x10000006, 0x0, 0x0, 0x0, 0x6000, 0x7, 0x0, 0x0, 0x1ff, 0x7}}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r1 = open_tree(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x0) fstat(r1, 0x0) 6.260629139s ago: executing program 0 (id=610): mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000200)='./proc\x00', &(0x7f0000000240)='proc\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./proc/thread-self/fail-nth\x00', 0x2, 0x10b) write(r0, &(0x7f00000002c0)='7', 0x1) openat$tun(0xffffffffffffff9c, &(0x7f0000000580), 0x0, 0x0) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_CPUID(r0, 0x4008ae8a, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) ioctl$SNDRV_TIMER_IOCTL_TREAD_OLD(0xffffffffffffffff, 0x40045402, 0x0) mount$9p_fd(0x0, 0x0, 0x0, 0x4010, &(0x7f0000000180)={'trans=fd,', {}, 0x2c, {'wfdno', 0x3d, r0}}) ioctl$FS_IOC_GET_ENCRYPTION_NONCE(0xffffffffffffffff, 0x8010661b, &(0x7f0000000100)) 5.887800007s ago: executing program 0 (id=611): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000480), 0x181a42, 0x0) ioctl$KVM_GET_EMULATED_CPUID(r0, 0xc008ae09, &(0x7f0000000500)={0x66666666666689b}) 5.714215925s ago: executing program 32 (id=429): mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0) mount(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000300)='cgroup2\x00', 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f00000000c0)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000380), 0x0, &(0x7f00000003c0)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) llistxattr(0x0, 0x0, 0x0) getxattr(&(0x7f0000005140)='./file0\x00', &(0x7f0000005180)=@known='system.posix_acl_access\x00', 0x0, 0x0) 1.961943849s ago: executing program 5 (id=712): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000001140), r0) sendmsg$IEEE802154_LIST_PHY(r0, &(0x7f0000001200)={0x0, 0x0, &(0x7f00000011c0)={&(0x7f0000001180)={0x14, r1, 0x1, 0x70bd29, 0x25dfdbfd}, 0x14}, 0x1, 0x0, 0x0, 0x10004}, 0x8000) 1.945862931s ago: executing program 5 (id=714): r0 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000280)={'ip6tnl0\x00', 0x0}) sendto$packet(r0, &(0x7f00000005c0)="050342406cfcd15e5035332031f68720b8e1e3333627dc63911ab48ce67bf9b799092bbdedcccf4270cdbe4f744ae20833704c306139d1ed2189841197516119838c258c3c31807872cdb9a7afd7847630f5437101d805228c987ac6edfc9b3d80986b55b752dbbd", 0x68, 0x4, &(0x7f0000000380)={0x11, 0x86dd, r1, 0x1, 0x0, 0x6, @random="91576f9cde30"}, 0x14) 1.925992083s ago: executing program 5 (id=715): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc2(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$TIPC_NL_MEDIA_SET(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x18}, 0x1, 0x0, 0x0, 0xc0d8}, 0x50) r2 = openat$kvm(0xffffffffffffff9c, 0x0, 0x28882, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) fsmount(r4, 0x0, 0x20) r5 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x2) ioctl$KVM_RUN(r5, 0xae80, 0x0) r6 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0) r7 = socket$pptp(0x18, 0x1, 0x2) bind$pptp(r7, &(0x7f0000000380)={0x18, 0x2, {0x0, @local}}, 0x1e) connect$pptp(r7, &(0x7f0000000500)={0x18, 0x2, {0x0, @multicast1}}, 0x1e) r8 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000540), 0xc1101, 0x0) ioctl$PPPIOCATTCHAN(r8, 0x40047438, &(0x7f0000000580)=0x1) ioctl$PPPIOCGFLAGS1(r8, 0x8004745a, 0x0) 1.774285489s ago: executing program 5 (id=716): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)={0x14, 0x1e, 0x1, 0x70bd26, 0x25dfdbfe, {0x9}}, 0x14}, 0x1, 0x0, 0x0, 0x800}, 0x840) 1.774175629s ago: executing program 5 (id=717): r0 = socket$inet6(0xa, 0x80002, 0x0) connect$inet6(r0, &(0x7f0000002980)={0xa, 0x4e23, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x34}}}, 0x1c) setsockopt$sock_linger(r0, 0x1, 0x3c, &(0x7f00000029c0)={0x200000000000001}, 0x8) connect$inet6(r0, &(0x7f0000002a00)={0xa, 0x0, 0xfffffffd, @local, 0x2}, 0x1c) sendmmsg$inet6(r0, &(0x7f0000002a40)=[{{0x0, 0x0, &(0x7f0000002a80), 0x171}}], 0x400000000000172, 0x4001c00) 1.697012376s ago: executing program 5 (id=718): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae03, 0x26) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f00000002c0)={0x1, &(0x7f0000000300)=[{0x6, 0x0, 0x0, 0x7fff0006}]}) mkdirat(0xffffffffffffff9c, &(0x7f0000000180)='./dev_mnt\x00', 0x1ff) mount(0x0, &(0x7f00000001c0)='./dev_mnt\x00', &(0x7f0000000200)='devtmpfs\x00', 0x0, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)={0x48, 0x41, 0x107, 0xfffffffe, 0xfffffffe, {0x1, 0x7c}, [@nested={0x4, 0x142}, @nested={0xc, 0x1, 0x0, 0x1, [@typed={0x6, 0x6, 0x0, 0x0, @str='\x80\n'}]}, @nested={0x24, 0x2, 0x0, 0x1, [@nested={0x1f, 0x14, 0x0, 0x1, [@generic="1e0013ac58eccc52a6179d4896ee29a9355bf31e841904efec71a5"]}]}]}, 0x48}, 0x1, 0x0, 0x0, 0x4048011}, 0x4000000) r2 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000240)=ANY=[@ANYBLOB="12010000000000407d1e5a2d00000000000109022400010000000009040000010301020009210000000122220009058103"], 0x0) syz_usb_control_io$hid(r2, 0x0, 0x0) syz_usb_control_io$hid(r2, &(0x7f0000000280)={0x24, 0x0, 0x0, &(0x7f0000000380)={0x0, 0x22, 0x22, {[@global=@item_012={0x2, 0x1, 0x9, "2313"}, @global=@item_012={0x2, 0x1, 0x0, "e53f"}, @global=@item_4={0x3, 0x1, 0x0, '\f\x00'}, @local=@item_012={0x2, 0x2, 0x2, "9000"}, @global=@item_4={0x3, 0x1, 0x0, "0900be00"}, @main=@item_4={0x3, 0x0, 0x8}, @local=@item_4={0x3, 0x2, 0x0, "09007a15"}, @local=@item_4={0x3, 0x2, 0x0, "5d8c3dda"}]}}, 0x0}, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./dev_mnt/roccatsavu0\x00', 0x2, 0x0) read$FUSE(r3, &(0x7f0000000440)={0x2020}, 0x2020) close_range(r1, 0xffffffffffffffff, 0x0) 1.098220257s ago: executing program 4 (id=722): r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), r0) sendmsg$TIPC_NL_KEY_SET(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000240)={0x0}}, 0x0) 1.097963348s ago: executing program 4 (id=723): ioctl$KVM_SET_PIT(0xffffffffffffffff, 0x8048ae66, &(0x7f0000000000)={[{0x80000004, 0x5, 0xcb, 0x4f, 0x7c, 0x2, 0x80, 0x1, 0x3, 0x44, 0x8, 0x2, 0x10000000000e}, {0x12, 0xfffd, 0x6, 0x8, 0x9, 0xff, 0x8, 0x4, 0xa, 0x13, 0x3, 0xc8, 0x1}, {0x1ff, 0x7, 0xd, 0x0, 0x25, 0x1, 0x81, 0xfb, 0x80, 0x4, 0x0, 0x2}], 0x378a}) syz_kvm_add_vcpu$x86(0x0, &(0x7f0000000100)={0x0, &(0x7f0000000280)=[@code={0xa, 0x5a, {"0f380a669766ba6100b000ee2309c0da00008c000000ba000000000f30c4827941fac4e1f96e42e46505e7ee1921b9500b00000f328fe9209b7ce100c403790cdeb8010000000f01d9"}}], 0x5a}) sendmsg$nl_route_sched_retired(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x80c1}, 0x9080) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x200, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000040)={0x9}) ioctl$KVM_SET_PIT2(r1, 0x4070aea0, &(0x7f0000000140)={[{0x1, 0xc, 0x49, 0x6, 0x4, 0x2, 0x42, 0xf6, 0x1, 0x4, 0x2, 0x3, 0x3}, {0x1, 0x7, 0x4, 0x0, 0x8, 0x8, 0x49, 0xff, 0x2, 0x9, 0x9, 0xe, 0x20000000002}, {0x2, 0x3, 0x77, 0x84, 0x6, 0x7, 0xfd, 0x40, 0x4, 0x3, 0x4, 0x3, 0x80000000000}], 0xf87}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 729.311395ms ago: executing program 3 (id=728): r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f00000002c0)={'sit0\x00', &(0x7f0000000300)={'syztnl0\x00', 0x0, 0x40, 0x700, 0x40, 0x1, {{0x5, 0x4, 0x0, 0x1, 0x14, 0x67, 0x0, 0x0, 0x29, 0x0, @initdev={0xac, 0x1e, 0x1, 0x0}, @local}}}}) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r0, 0x89f3, &(0x7f0000000340)={'syztnl0\x00', &(0x7f0000000380)={'gretap0\x00', 0x0, 0x10, 0x80, 0x0, 0x2, {{0x5, 0x4, 0x0, 0x4, 0x14, 0x0, 0x0, 0x10, 0x0, 0x0, @dev={0xac, 0x14, 0x14, 0x2c}, @initdev={0xac, 0x1e, 0x1, 0x0}}}}}) 658.253653ms ago: executing program 3 (id=729): r0 = openat$kvm(0x0, &(0x7f0000000300), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = syz_kvm_setup_syzos_vm$x86(r1, &(0x7f0000bfd000/0x400000)=nil) r3 = syz_kvm_add_vcpu$x86(r2, &(0x7f0000000340)={0x0, &(0x7f0000000380)=[@enable_nested={0x12c, 0x18}, @nested_create_vm={0x12d, 0x18, 0x2000000000000000}, @nested_intel_vmwrite_mask={0x154, 0x38, {0x0, @control64=0x201b, 0x8}}, @nested_vmlaunch={0x12f, 0x18}], 0x80}) ioctl$KVM_RUN(r3, 0xae80, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000fe6000/0x18000)=nil, &(0x7f0000000440)=[@text32={0x20, 0x0}], 0x1, 0x13, 0x0, 0x0) 658.018933ms ago: executing program 3 (id=730): r0 = syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0x40, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5c, 0x2, 0x1, 0x0, 0x0, 0x0, "", {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x5}, {0x5}, {0xd, 0x24, 0xf, 0x1, 0x0, 0xfffe}, {0x6}}, {{0x9, 0x5, 0x81, 0x3, 0x200, 0x0, 0x0, 0x7f}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x200}}, {{0x9, 0x5, 0x3, 0x2, 0x200}}}}}}}]}}, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f00000000c0)={0x44, 0x0, 0x0, 0x0, &(0x7f0000000140)={0x20, 0x80, 0x1c, {0x10, 0x10, 0x10, 0x10, 0x10, 0x10, 0x10, 0xfffffffb, 0x6, 0x10, 0x10, 0x10}}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, &(0x7f00000001c0)={0x14, 0x0, &(0x7f0000000180)={0x0, 0x3, 0x1a, {0x1a}}}, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) 585.27928ms ago: executing program 4 (id=731): pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x2) write$P9_RFLUSH(r0, &(0x7f0000000040)={0x7, 0x6d, 0x2}, 0x7) r1 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_NMI(r2, 0xae9a) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000440)={[0x0, 0x100000000, 0x0, 0x7f, 0x100000, 0x0, 0x2004c8, 0x8000000, 0x0, 0x0, 0x7, 0x0, 0x5, 0x8, 0x2, 0xffffffffffffffff], 0x0, 0x200}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000500)={[0x101, 0xaec4, 0x6, 0x4004, 0x2, 0x4, 0xefffffffffffffff, 0x0, 0x0, 0x2000000, 0x20000, 0x1c, 0x0, 0x5, 0x1], 0x0, 0x41981}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 572.164442ms ago: executing program 4 (id=732): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000000)={[0x35, 0xfff, 0xfffffffffffffffe, 0x40000000000180, 0x4, 0x7, 0xf2, 0xd, 0x7fffffffffffe, 0x7, 0x5, 0xb, 0x7, 0xfffffffffffffff8, 0x9, 0xc], 0x25000, 0x304}) sendmsg$tipc(0xffffffffffffffff, &(0x7f00000004c0)={0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f00000001c0)="e67e", 0x2}], 0x1, &(0x7f0000000400), 0x0, 0x4004080}, 0x40) ioctl$KVM_RUN(r2, 0xae80, 0x0) 486.19546ms ago: executing program 4 (id=733): ioctl$KVM_SET_VCPU_EVENTS(0xffffffffffffffff, 0x4040aea0, &(0x7f0000000080)=@x86={0x19, 0x0, 0x44, 0x0, 0x0, 0x7, 0x1, 0x1, 0x5, 0x6c, 0x0, 0x58, 0x0, 0x4, 0x5, 0x4, 0x6, 0x6, 0x4, '\x00', 0xa, 0x3}) ioctl$KVM_SET_PIT(0xffffffffffffffff, 0x8048ae66, &(0x7f0000000000)={[{0x80000004, 0x5, 0xcb, 0x4f, 0x7c, 0x2, 0x80, 0x1, 0x3, 0x44, 0x8, 0x2, 0x10000000000e}, {0x12, 0xfffd, 0x6, 0x8, 0x9, 0xff, 0x8, 0x4, 0xa, 0x13, 0x3, 0xc8, 0x1}, {0x1ff, 0x7, 0xd, 0x0, 0x25, 0x1, 0x81, 0xfb, 0x80, 0x4, 0x0, 0x2}], 0x378a}) openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x440040, 0x0) syz_kvm_add_vcpu$x86(0x0, &(0x7f0000000100)={0x0, &(0x7f0000000280)=[@code={0xa, 0x5a, {"0f380a669766ba6100b000ee2309c0da00008c000000ba000000000f30c4827941fac4e1f96e42e46505e7ee1921b9500b00000f328fe9209b7ce100c403790cdeb8010000000f01d9"}}], 0x5a}) sendmsg$nl_route_sched_retired(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x80c1}, 0x9080) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x200, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000040)={0x9}) ioctl$KVM_SET_PIT2(r1, 0x4070aea0, &(0x7f0000000140)={[{0x1, 0xc, 0x49, 0x6, 0x4, 0x2, 0x42, 0xf6, 0x1, 0x4, 0x2, 0x3, 0x3}, {0x1, 0x7, 0x4, 0x0, 0x8, 0x8, 0x49, 0xff, 0x2, 0x9, 0x9, 0xe, 0x20000000002}, {0x2, 0x3, 0x77, 0x84, 0x6, 0x7, 0xfd, 0x40, 0x4, 0x3, 0x4, 0x3, 0x80000000000}], 0xf87}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 435.253956ms ago: executing program 4 (id=734): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x1b1c, 0xa55, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, "", [{{0x9, 0x4, 0x0, 0x8, 0x2, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x1, 0x1, {0x22, 0x18}}, {{{0x9, 0x5, 0x81, 0x3, 0x0, 0x4}}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000080)={0x24, 0x0, 0x0, &(0x7f0000000300)={0x0, 0x22, 0x18, {[@global=@item_012={0x1, 0x1, 0x0, "01"}, @global=@item_012={0x1, 0x1, 0x1, "c0"}, @global=@item_012={0x1, 0x1, 0x8, "ff"}, @local=@item_4={0x3, 0x2, 0x2, "bcd27ca4"}, @main=@item_4={0x3, 0x0, 0x8, "223b54cc"}, @local=@item_012={0x1, 0x2, 0x3, "01"}, @main=@item_012={0x0, 0x0, 0xa}, @main=@item_4={0x3, 0x0, 0xc, "f50e16f8"}]}}, 0x0}, 0x0) 179.010902ms ago: executing program 1 (id=740): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x82f41, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000100)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r1 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r1, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', 0x1}) write$tun(r0, &(0x7f0000000200)={@val={0xa, 0x9000}, @void, @eth={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}, @multicast, @void, {@ipv6={0x86dd, @icmpv6={0x9, 0x6, "4fd2cd", 0x10, 0x3a, 0xff, @remote, @mcast2, {[], @ni={0x8c, 0x0, 0x0, 0x800, 0xc, 0x68bb}}}}}}}, 0x4a) 166.142373ms ago: executing program 1 (id=741): ioctl$LOOP_CONFIGURE(0xffffffffffffffff, 0x4c0a, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000000140)='./dev\x00', &(0x7f0000000200)='devtmpfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./dev/sda\x00', 0x2, 0x0) ioctl$BLKZEROOUT(r0, 0x127f, &(0x7f0000000340)={0xfffffffffffffb7a, 0xfffffffffffffffb}) 150.979955ms ago: executing program 3 (id=742): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), r0) sendmsg$TIPC_NL_KEY_SET(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000380)={0x14, r1, 0x1}, 0x14}}, 0x0) 126.433647ms ago: executing program 3 (id=743): r0 = socket(0x10, 0x803, 0x0) sendto(r0, &(0x7f0000000000)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) recvmmsg(r0, &(0x7f0000000180)=[{{0x0, 0x0, &(0x7f0000000280)=[{&(0x7f00000004c0)=""/4099, 0x1003}, {&(0x7f0000001500)=""/105, 0x69}, {&(0x7f0000001580)=""/51, 0x33}, {&(0x7f00000015c0)=""/101, 0x65}, {&(0x7f0000001640)=""/71, 0x47}, {&(0x7f00000016c0)=""/4084, 0xff4}, {&(0x7f00000026c0)=""/39, 0x27}], 0x7}, 0xc}, {{0x0, 0x0, 0x0}, 0x81}, {{0x0, 0x0, 0x0}, 0x5}, {{0x0, 0x0, 0x0}, 0x8}], 0x4, 0x10120, 0x0) 125.668207ms ago: executing program 1 (id=744): openat$snapshot(0xffffffffffffff9c, &(0x7f0000000040), 0x101000, 0x0) 25.203118ms ago: executing program 3 (id=745): r0 = syz_init_net_socket$bt_rfcomm(0x1f, 0x3, 0x3) r1 = add_key(&(0x7f0000000840)='keyring\x00', 0x0, 0x0, 0x0, 0xfffffffffffffffc) r2 = add_key(&(0x7f00000008c0)='asymmetric\x00', 0x0, &(0x7f0000000900)="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", 0x559, r1) mmap$IORING_OFF_SQ_RING(0x0, 0x8000, 0x2, 0x2172, 0xffffffffffffffff, 0x0) keyctl$KEYCTL_PKEY_ENCRYPT(0x19, &(0x7f0000000400)={r2, 0x49}, 0x0, &(0x7f00000004c0)="0000ac16db36d4c2aa28bd2c95d93ac3c700015ff7ebd21d598da8fccd01a3a97f07c30a335d5a50a55df499d7e2d2acfad6f091278a0207000000000000006283010000002ebc6732", 0x0) ioctl(r0, 0x400452c8, 0x0) 25.123458ms ago: executing program 1 (id=746): r0 = openat$binderfs(0xffffff9c, &(0x7f0000000000)='./binderfs/binder0\x00', 0x2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000040)={0x73622a85, 0x1100}) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000080)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000180)={0x20, 0x0, &(0x7f00000001c0)=[@request_death, @clear_death]}) 18.488508ms ago: executing program 1 (id=747): symlink(&(0x7f0000000040)='.\x00', &(0x7f0000000080)='./file0\x00') chmod(&(0x7f00000000c0)='./file0\x00', 0x3ed) lchown(&(0x7f00000001c0)='./file0\x00', 0x0, 0x0) open(&(0x7f0000000200)='./file0\x00', 0x60840, 0x0) openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file0\x00', 0x40, 0x1) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0) mount$fuseblk(&(0x7f0000000380), &(0x7f0000000000)='./file0\x00', &(0x7f0000000400), 0x4000, &(0x7f0000000440)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x1000}}) mount$fuseblk(0x0, 0x0, &(0x7f0000000540), 0x401, 0x0) 0s ago: executing program 1 (id=748): mkdirat(0xffffffffffffff9c, &(0x7f0000000380)='./tracefs_dir\x00', 0x1ff) mount(0x0, &(0x7f00000003c0)='./tracefs_dir\x00', &(0x7f0000000400)='tracefs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000440)='./tracefs_dir/buffer_size_kb\x00', 0x0, 0x0) readv(r0, &(0x7f0000000480), 0x0) kernel console output (not intermixed with test programs): h1_virt_wifi: link becomes ready [ 25.381169][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 25.403217][ T285] device veth1_macvtap entered promiscuous mode [ 25.410692][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 25.419148][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 25.427619][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 25.435880][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 25.444400][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 25.452683][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 25.460961][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 25.468937][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 25.476957][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 25.485320][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 25.493592][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 25.501474][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 25.509152][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 25.516674][ T286] device veth0_vlan entered promiscuous mode [ 25.533516][ T289] device veth0_vlan entered promiscuous mode [ 25.539922][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 25.548323][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 25.556594][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 25.564789][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 25.572980][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 25.581308][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 25.589763][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 25.597228][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 25.615656][ T286] device veth1_macvtap entered promiscuous mode [ 25.622571][ T288] request_module fs-gadgetfs succeeded, but still no fs? [ 25.631397][ T306] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 25.639690][ T306] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 25.647921][ T306] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 25.655989][ T306] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 25.679127][ T289] device veth1_macvtap entered promiscuous mode [ 25.686882][ T309] loop2: detected capacity change from 0 to 128 [ 25.694632][ T287] device veth1_macvtap entered promiscuous mode [ 25.702704][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 25.711421][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 25.719936][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 25.728353][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 25.736567][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 25.758786][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 25.769892][ T309] FAT-fs (loop2): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 25.782522][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 25.793316][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 25.801980][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 25.855977][ T318] netlink: 36 bytes leftover after parsing attributes in process `syz.3.4'. [ 25.918522][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 25.927963][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 25.936562][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 25.945072][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 27.053729][ T322] loop0: detected capacity change from 0 to 128 [ 27.138724][ T322] ======================================================= [ 27.138724][ T322] WARNING: The mand mount option has been deprecated and [ 27.138724][ T322] and is ignored by this kernel. Remove the mand [ 27.138724][ T322] option from the mount to silence this warning. [ 27.138724][ T322] ======================================================= [ 27.215001][ T10] FAT-fs (loop2): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 27.227927][ T322] EXT4-fs (loop0): Test dummy encryption mode enabled [ 27.277400][ T42] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 27.322656][ T322] EXT4-fs (loop0): mounted filesystem without journal. Opts: test_dummy_encryption=v1,max_dir_size_kb=0x0000000000000001,,errors=continue. Quota mode: none. [ 27.339351][ T322] ext4 filesystem being mounted at /0/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 27.453834][ T322] fscrypt: AES-256-CTS-CBC using implementation "cts-cbc-aes-aesni" [ 27.467250][ C0] sched: RT throttling activated [ 27.508222][ T331] loop3: detected capacity change from 0 to 128 [ 27.976624][ T30] kauditd_printk_skb: 55 callbacks suppressed [ 27.976638][ T30] audit: type=1400 audit(1793665423.155:129): avc: denied { map_create } for pid=332 comm="syz.2.6" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 28.034226][ T331] FAT-fs (loop3): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 28.081431][ T30] audit: type=1400 audit(1793665423.195:130): avc: denied { map_read map_write } for pid=332 comm="syz.2.6" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 28.186212][ T30] audit: type=1400 audit(1793665423.355:131): avc: denied { relabelfrom } for pid=332 comm="syz.2.6" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tun_socket permissive=1 [ 28.226581][ T30] audit: type=1400 audit(1793665423.355:132): avc: denied { relabelto } for pid=332 comm="syz.2.6" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tun_socket permissive=1 [ 28.893637][ T42] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 28.941079][ T338] loop1: detected capacity change from 0 to 128 [ 28.957533][ T42] usb 2-1: config 1 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 29.017338][ T42] usb 2-1: string descriptor 0 read error: -71 [ 29.025014][ T338] FAT-fs (loop1): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 29.044665][ T42] usb 2-1: New USB device found, idVendor=04e6, idProduct=0005, bcdDevice= 1.00 [ 29.061045][ T42] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 29.193670][ T8] FAT-fs (loop3): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 29.210491][ T42] usb 2-1: can't set config #1, error -71 [ 29.502765][ T42] usb 2-1: USB disconnect, device number 2 [ 30.331223][ T8] FAT-fs (loop1): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 30.498500][ T30] audit: type=1400 audit(1793665425.685:133): avc: denied { read write } for pid=350 comm="syz.3.11" name="ptp0" dev="devtmpfs" ino=260 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 30.617613][ T30] audit: type=1400 audit(1793665425.795:134): avc: denied { open } for pid=350 comm="syz.3.11" path="/dev/ptp0" dev="devtmpfs" ino=260 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 30.658547][ T351] loop3: detected capacity change from 0 to 1024 [ 30.664971][ T30] audit: type=1400 audit(1793665425.835:135): avc: denied { ioctl } for pid=350 comm="syz.3.11" path="/dev/ptp0" dev="devtmpfs" ino=260 ioctlcmd=0x3d0c scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 30.818440][ T351] EXT4-fs (loop3): Ignoring removed oldalloc option [ 30.834768][ T351] EXT4-fs (loop3): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 31.079852][ T355] loop1: detected capacity change from 0 to 128 [ 31.465591][ T30] audit: type=1400 audit(1793665425.875:136): avc: denied { create } for pid=352 comm="syz.1.12" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 31.487583][ T30] audit: type=1400 audit(1793665425.895:137): avc: denied { bind } for pid=352 comm="syz.1.12" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 31.511777][ T30] audit: type=1400 audit(1793665425.895:138): avc: denied { listen } for pid=352 comm="syz.1.12" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 31.534097][ T351] EXT4-fs (loop3): mounted filesystem without journal. Opts: discard,dioread_nolock,acl,auto_da_alloc,debug_want_extra_isize=0x0000000000000080,delalloc,usrjquota=,oldalloc,dioread_nolock,,errors=continue. Quota mode: none. [ 31.564966][ T362] L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 31.618281][ T8] attempt to access beyond end of device [ 31.618281][ T8] loop1: rw=1, want=1041, limit=128 [ 31.639556][ T362] SELinux: syz.2.14 (362) set checkreqprot to 1. This is deprecated and will be rejected in a future kernel release. [ 31.677338][ T6] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 31.807284][ T371] 9pnet: Insufficient options for proto=fd [ 31.840088][ T371] loop1: detected capacity change from 0 to 256 [ 31.888042][ T371] exfat: Deprecated parameter 'utf8' [ 31.894659][ T374] loop4: detected capacity change from 0 to 128 [ 31.901483][ T371] exFAT-fs (loop1): bogus number of FAT structure [ 31.927435][ T371] exFAT-fs (loop1): failed to read boot sector [ 31.945732][ T371] exFAT-fs (loop1): failed to recognize exfat type [ 32.037358][ T6] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 32.048490][ T6] usb 1-1: config 1 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 32.186625][ T374] FAT-fs (loop4): Invalid FSINFO signature: 0x41615200, 0x61417272 (sector = 1) [ 32.217360][ T6] usb 1-1: New USB device found, idVendor=04e6, idProduct=0005, bcdDevice= 1.00 [ 32.231297][ T6] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 32.246179][ T6] usb 1-1: Product: syz [ 32.251585][ T6] usb 1-1: Manufacturer: syz [ 32.256495][ T6] usb 1-1: SerialNumber: syz [ 32.284101][ T369] loop2: detected capacity change from 0 to 4096 [ 32.310696][ T380] loop3: detected capacity change from 0 to 512 [ 32.338031][ T6] ums-sddr09 1-1:1.0: USB Mass Storage device detected [ 32.371876][ T6] ums-sddr09 1-1:1.0: This device (04e6,0005,0100 S 06 P 50) has an unneeded SubClass entry in unusual_devs.h (kernel syzkaller) [ 32.371876][ T6] Please send a copy of this message to and [ 32.398284][ T380] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 32.427289][ T380] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 32.439268][ T369] SELinux: security_context_str_to_sid(root) failed for (dev ?, type ?) errno=-22 [ 32.449537][ T369] EXT4-fs (loop2): Ignoring removed orlov option [ 32.455919][ T369] EXT4-fs (loop2): Ignoring removed orlov option [ 32.462421][ T369] EXT4-fs (loop2): Unrecognized mount option "euid>00000000000000000000" or missing value [ 32.481075][ T380] EXT4-fs error (device loop3): ext4_free_branches:1030: inode #16: comm syz.3.19: invalid indirect mapped block 32768 (level 2) [ 32.520532][ T380] EXT4-fs (loop3): 1 orphan inode deleted [ 32.546082][ T380] EXT4-fs (loop3): 1 truncate cleaned up [ 32.552388][ T380] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 32.690418][ T289] FAT-fs (loop4): error, invalid access to FAT (entry 0x00000100) [ 32.698333][ T289] FAT-fs (loop4): Filesystem has been set read-only [ 32.726765][ T396] loop3: detected capacity change from 0 to 512 [ 32.814870][ T397] loop2: detected capacity change from 0 to 16 [ 32.826988][ T289] FAT-fs (loop4): Invalid FSINFO signature: 0x41615200, 0x61417272 (sector = 1) [ 32.849662][ T396] EXT4-fs (loop3): #blocks per group too big: 8724480 [ 32.870309][ T397] erofs: (device loop2): mounted with root inode @ nid 36. [ 33.014745][ T400] overlayfs: overlapping lowerdir path [ 33.022588][ T400] overlayfs: overlapping lowerdir path [ 33.030787][ T400] overlayfs: overlapping lowerdir path [ 33.039225][ T400] overlayfs: overlapping lowerdir path [ 33.046352][ T400] overlayfs: overlapping lowerdir path [ 33.053685][ T400] overlayfs: overlapping lowerdir path [ 33.059691][ T400] overlayfs: overlapping lowerdir path [ 33.065573][ T400] overlayfs: overlapping lowerdir path [ 33.071587][ T400] overlayfs: overlapping lowerdir path [ 33.077603][ T400] overlayfs: overlapping lowerdir path [ 33.083458][ T400] overlayfs: overlapping lowerdir path [ 33.089525][ T400] overlayfs: overlapping lowerdir path [ 33.095391][ T400] overlayfs: overlapping lowerdir path [ 33.101394][ T400] overlayfs: overlapping lowerdir path [ 33.107846][ T400] overlayfs: overlapping lowerdir path [ 33.113757][ T400] overlayfs: overlapping lowerdir path [ 33.119433][ T311] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 33.127882][ T400] overlayfs: overlapping lowerdir path [ 33.133798][ T400] overlayfs: overlapping lowerdir path [ 33.139733][ T400] overlayfs: overlapping lowerdir path [ 33.145494][ T400] overlayfs: overlapping lowerdir path [ 33.151499][ T400] overlayfs: overlapping lowerdir path [ 33.157394][ T400] overlayfs: overlapping lowerdir path [ 33.163179][ T400] overlayfs: overlapping lowerdir path [ 33.171763][ T400] overlayfs: overlapping lowerdir path [ 33.177736][ T400] overlayfs: overlapping lowerdir path [ 33.183806][ T6] ums-sddr09: probe of 1-1:1.0 failed with error -5 [ 33.184712][ T400] overlayfs: overlapping lowerdir path [ 33.195724][ T394] FAULT_INJECTION: forcing a failure. [ 33.195724][ T394] name failslab, interval 1, probability 0, space 0, times 1 [ 33.209107][ T400] overlayfs: overlapping lowerdir path [ 33.215044][ T400] overlayfs: overlapping lowerdir path [ 33.220461][ T394] CPU: 0 PID: 394 Comm: syz.3.23 Not tainted syzkaller #0 [ 33.220525][ T394] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/15/2026 [ 33.220545][ T394] Call Trace: [ 33.220552][ T394] [ 33.220559][ T394] __dump_stack+0x21/0x30 [ 33.220594][ T394] dump_stack_lvl+0x110/0x170 [ 33.220614][ T394] ? show_regs_print_info+0x20/0x20 [ 33.220635][ T394] dump_stack+0x15/0x20 [ 33.220652][ T394] should_fail+0x3ab/0x500 [ 33.220672][ T394] __should_failslab+0xa4/0xe0 [ 33.253257][ T396] netlink: 12 bytes leftover after parsing attributes in process `syz.3.23'. [ 33.258254][ T394] should_failslab+0x9/0x20 [ 33.258281][ T394] slab_pre_alloc_hook+0x39/0xd0 [ 33.262687][ T396] A link change request failed with some changes committed already. Interface veth0_to_batadv may have been left with an inconsistent configuration, please check. [ 33.266893][ T394] kmem_cache_alloc_trace+0x48/0x270 [ 33.280113][ T30] kauditd_printk_skb: 50 callbacks suppressed [ 33.280195][ T30] audit: type=1400 audit(1793665428.425:189): avc: denied { write } for pid=393 comm="syz.3.23" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 33.280446][ T394] ? __io_uring_add_tctx_node+0x15a/0x500 [ 33.285732][ T30] audit: type=1400 audit(1793665428.425:190): avc: denied { read } for pid=393 comm="syz.3.23" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 33.289914][ T394] __io_uring_add_tctx_node+0x15a/0x500 [ 33.289945][ T394] ? __io_cqring_overflow_flush+0xa80/0xa80 [ 33.374453][ T394] io_uring_install_fd+0xc0/0xf0 [ 33.379436][ T394] __se_sys_io_uring_setup+0x23b9/0x2a20 [ 33.385109][ T394] ? __x64_sys_io_uring_setup+0x70/0x70 [ 33.390666][ T394] ? __kasan_check_write+0x14/0x20 [ 33.395796][ T394] ? __kasan_check_write+0x14/0x20 [ 33.400923][ T394] ? switch_fpu_return+0x15d/0x2c0 [ 33.406076][ T394] __x64_sys_io_uring_setup+0x5b/0x70 [ 33.411460][ T394] x64_sys_call+0x5f4/0x9a0 [ 33.415991][ T394] do_syscall_64+0x4c/0xa0 [ 33.420421][ T394] ? clear_bhb_loop+0x50/0xa0 [ 33.425110][ T394] ? clear_bhb_loop+0x50/0xa0 [ 33.429794][ T394] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 33.435703][ T394] RIP: 0033:0x7f87158a4b19 [ 33.440139][ T394] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 33.459754][ T394] RSP: 002b:00007f87142fbfb8 EFLAGS: 00000206 ORIG_RAX: 00000000000001a9 [ 33.468199][ T394] RAX: ffffffffffffffda RBX: 0000200000000800 RCX: 00007f87158a4b19 [ 33.476187][ T394] RDX: 00002000000008c0 RSI: 0000200000000800 RDI: 0000000000000efe [ 33.484170][ T394] RBP: 00007f871593caf8 R08: 0000000000000000 R09: 0000000000000000 [ 33.492149][ T394] R10: 0000200000000900 R11: 0000000000000206 R12: 00002000000008c0 [ 33.500129][ T394] R13: 0000200000000900 R14: 0000200000000880 R15: 00007ffdf15784e8 [ 33.508137][ T394] [ 33.520638][ T6] usb 1-1: USB disconnect, device number 2 [ 33.532506][ T400] overlayfs: overlapping lowerdir path [ 33.538944][ T400] overlayfs: overlapping lowerdir path [ 33.544966][ T400] overlayfs: overlapping lowerdir path [ 33.551057][ T400] overlayfs: overlapping lowerdir path [ 33.557003][ T400] overlayfs: overlapping lowerdir path [ 33.563149][ T400] overlayfs: overlapping lowerdir path [ 33.587465][ T403] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=403 comm=syz.3.23 [ 33.600501][ T400] overlayfs: overlapping lowerdir path [ 33.607653][ T400] overlayfs: overlapping lowerdir path [ 33.614232][ T400] overlayfs: overlapping lowerdir path [ 33.620330][ T400] overlayfs: overlapping lowerdir path [ 33.626242][ T400] overlayfs: overlapping lowerdir path [ 33.637942][ T400] overlayfs: overlapping lowerdir path [ 33.644655][ T400] overlayfs: overlapping lowerdir path [ 33.651237][ T400] overlayfs: overlapping lowerdir path [ 33.657118][ T400] overlayfs: overlapping lowerdir path [ 33.663240][ T400] overlayfs: overlapping lowerdir path [ 33.669315][ T400] overlayfs: overlapping lowerdir path [ 33.675189][ T400] overlayfs: overlapping lowerdir path [ 33.681385][ T400] overlayfs: overlapping lowerdir path [ 33.687413][ T400] overlayfs: overlapping lowerdir path [ 33.693396][ T400] overlayfs: overlapping lowerdir path [ 33.699480][ T400] overlayfs: overlapping lowerdir path [ 33.706736][ T400] overlayfs: overlapping lowerdir path [ 33.714691][ T400] overlayfs: overlapping lowerdir path [ 33.722431][ T400] overlayfs: overlapping lowerdir path [ 33.730240][ T400] overlayfs: overlapping lowerdir path [ 33.738055][ T400] overlayfs: overlapping lowerdir path [ 33.745315][ T400] overlayfs: overlapping lowerdir path [ 33.815842][ T407] loop2: detected capacity change from 0 to 16 [ 33.878118][ T407] erofs: (device loop2): mounted with root inode @ nid 36. [ 34.059040][ T30] audit: type=1400 audit(1793665429.245:191): avc: denied { unmount } for pid=286 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 34.102556][ T311] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 34.112514][ T311] usb 2-1: config 1 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 34.192030][ T412] tipc: Started in network mode [ 34.197132][ T412] tipc: Node identity 4, cluster identity 4711 [ 34.204650][ T412] tipc: Node number set to 4 [ 34.212184][ T412] tipc: Enabled bearer , priority 0 [ 34.221164][ T412] tipc: Disabling bearer [ 34.292632][ T311] usb 2-1: New USB device found, idVendor=04e6, idProduct=0005, bcdDevice= 1.00 [ 34.302432][ T311] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 34.311763][ T415] loop3: detected capacity change from 0 to 128 [ 34.318256][ T311] usb 2-1: Product: syz [ 34.322500][ T311] usb 2-1: Manufacturer: syz [ 34.327124][ T30] audit: type=1400 audit(1793665429.505:192): avc: denied { connect } for pid=408 comm="syz.4.26" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 34.617966][ T311] usb 2-1: SerialNumber: syz [ 34.652771][ T30] audit: type=1400 audit(1793665429.505:193): avc: denied { write } for pid=408 comm="syz.4.26" path="socket:[16406]" dev="sockfs" ino=16406 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 34.676033][ T30] audit: type=1400 audit(1793665429.585:194): avc: denied { create } for pid=413 comm="syz.0.28" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 34.695142][ T30] audit: type=1400 audit(1793665429.605:195): avc: denied { ioctl } for pid=413 comm="syz.0.28" path="socket:[16410]" dev="sockfs" ino=16410 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 34.722048][ T30] audit: type=1400 audit(1793665429.605:196): avc: denied { setopt } for pid=413 comm="syz.0.28" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 34.749359][ T311] ums-sddr09 2-1:1.0: USB Mass Storage device detected [ 34.772423][ T311] ums-sddr09 2-1:1.0: This device (04e6,0005,0100 S 06 P 50) has an unneeded SubClass entry in unusual_devs.h (kernel syzkaller) [ 34.772423][ T311] Please send a copy of this message to and [ 34.813631][ T30] audit: type=1400 audit(1793665429.995:197): avc: denied { create } for pid=423 comm="syz.2.30" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 34.833676][ T30] audit: type=1400 audit(1793665430.015:198): avc: denied { bind } for pid=423 comm="syz.2.30" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 34.888450][ T428] loop2: detected capacity change from 0 to 1024 [ 34.920013][ T428] EXT4-fs (loop2): Ignoring removed nomblk_io_submit option [ 34.938936][ T428] EXT4-fs (loop2): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 34.968356][ T428] EXT4-fs (loop2): mounted filesystem without journal. Opts: barrier=0x0000000000000003,errors=remount-ro,noblock_validity,nouid32,dioread_nolock,quota,nomblk_io_submit,delalloc,nolazytime,. Quota mode: writeback. [ 34.989606][ T428] ext4 filesystem being mounted at /10/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 35.193785][ T436] EXT4-fs (loop3): mounted filesystem without journal. Opts: grpjquota=,journal_ioprio=0x0000000000000007,,errors=continue. Quota mode: writeback. [ 35.208959][ T436] ext4 filesystem being mounted at /8 supports timestamps until 2038-01-19 (0x7fffffff) [ 35.748133][ T311] ums-sddr09: probe of 2-1:1.0 failed with error -5 [ 35.755760][ T311] usb 2-1: USB disconnect, device number 3 [ 35.767289][ T6] usb 1-1: new full-speed USB device number 3 using dummy_hcd [ 36.061433][ T442] F2FS-fs (loop4): Test dummy encryption mode enabled [ 36.121348][ T453] syz.3.38 uses obsolete (PF_INET,SOCK_PACKET) [ 36.128610][ T442] F2FS-fs (loop4): invalid crc value [ 36.168565][ T442] F2FS-fs (loop4): Found nat_bits in checkpoint [ 36.280134][ T6] usb 1-1: not running at top speed; connect to a high speed hub [ 36.298430][ T442] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 36.367403][ T6] usb 1-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 122, changing to 4 [ 36.382293][ T6] usb 1-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 255, changing to 4 [ 36.747802][ T489] 9pnet: Unknown protocol version 9p20\++} [ 36.810465][ T491] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=491 comm=syz.2.44 [ 36.816875][ T492] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=492 comm=syz.2.44 [ 36.836583][ T491] netlink: 72 bytes leftover after parsing attributes in process `syz.2.44'. [ 36.845599][ T492] netlink: 72 bytes leftover after parsing attributes in process `syz.2.44'. [ 36.858771][ T6] usb 1-1: New USB device found, idVendor=0499, idProduct=1010, bcdDevice= 0.40 [ 36.870266][ T6] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 36.878529][ T6] usb 1-1: Product: ъ [ 36.882705][ T6] usb 1-1: Manufacturer: 닏◴㩕装䂟參䕳塟䱸⫧줁担鿖ç軣卜㸳⬆틈ਂ岊矋ᘖᱍ睠绻핌荗䋚㼴欋༯ᅱ햁ꉹ᛻础鉑㴄㹃냂顐暥┈㯀앜蒕큞Ղ㘳Ě牞液쇐騵ᛠ퓷Ҵ鷔Ｗᦫ짘啱炤鏢ꃧ㕇肭微↸ꬄ棃쓵㝉Ꙍ鶃孿⎓몏 [ 36.927697][ T495] ip_tables: iptables: counters copy to user failed while replacing table [ 36.936498][ T6] usb 1-1: SerialNumber: ㍙嘂쓌掇懠ΰഖ는鰇અ㦂觟捳걳ট婮퐫ᖣ쩢囗厀ផ뭎␌傼븾幑êﾵ䨿鵎䱮쥼蜩༸㎃懭㏬붧笴픫鈝ꋅ᛿⼗죴▛뎉臽絥ﻢ긡鴍ꑬ吷㖇鎋턤ⴂ瞿踿튌槎뇎ꄐ [ 36.968055][ T500] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 37.149187][ T497] set_capacity_and_notify: 3 callbacks suppressed [ 37.149205][ T497] loop2: detected capacity change from 0 to 40427 [ 37.238856][ T434] UDC core: couldn't find an available UDC or it's busy: -16 [ 37.246285][ T434] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 37.262328][ T434] UDC core: couldn't find an available UDC or it's busy: -16 [ 37.270380][ T434] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 37.308144][ T6] snd-usb-audio: probe of 1-1:1.0 failed with error -2 [ 37.315759][ T6] snd-usb-audio: probe of 1-1:1.1 failed with error -2 [ 37.337433][ T521] loop2: detected capacity change from 0 to 512 [ 37.352540][ T6] snd-usb-audio: probe of 1-1:1.2 failed with error -2 [ 37.374164][ T6] usb 1-1: USB disconnect, device number 3 [ 37.547085][ T514] loop4: detected capacity change from 0 to 4096 [ 37.627191][ T538] loop1: detected capacity change from 0 to 128 [ 37.659718][ T538] EXT4-fs (loop1): Test dummy encryption mode enabled [ 37.721693][ T538] EXT4-fs (loop1): mounted filesystem without journal. Opts: test_dummy_encryption=v1,max_dir_size_kb=0x0000000000000001,,errors=continue. Quota mode: none. [ 37.737888][ T538] ext4 filesystem being mounted at /10/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 38.908186][ T30] kauditd_printk_skb: 22 callbacks suppressed [ 38.908201][ T30] audit: type=1400 audit(1793668012.091:221): avc: denied { create } for pid=547 comm="syz.2.56" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 38.995214][ T30] audit: type=1400 audit(1793668012.121:222): avc: denied { write } for pid=547 comm="syz.2.56" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 39.065659][ T30] audit: type=1400 audit(1793668012.121:223): avc: denied { nlmsg_write } for pid=547 comm="syz.2.56" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 39.289663][ T30] audit: type=1400 audit(1793668012.471:224): avc: denied { create } for pid=565 comm="syz.2.62" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 39.351332][ T30] audit: type=1400 audit(1793668012.491:225): avc: denied { write } for pid=565 comm="syz.2.62" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 39.378460][ T572] UDC core: couldn't find an available UDC or it's busy: -16 [ 39.402946][ T572] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 39.431451][ T574] xt_TCPMSS: path-MTU clamping only supported in FORWARD, OUTPUT and POSTROUTING hooks [ 39.623680][ T30] audit: type=1400 audit(1793668012.801:226): avc: denied { create } for pid=576 comm="syz.3.64" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 39.642984][ T20] usb 3-1: new low-speed USB device number 2 using dummy_hcd [ 39.676723][ T30] audit: type=1400 audit(1793668012.831:227): avc: denied { ioctl } for pid=576 comm="syz.3.64" path="socket:[17480]" dev="sockfs" ino=17480 ioctlcmd=0xf517 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 39.777199][ T580] loop3: detected capacity change from 0 to 4096 [ 40.224098][ T580] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 41.042215][ T575] loop1: detected capacity change from 0 to 40427 [ 41.103587][ T575] F2FS-fs (loop1): Invalid log_blocksize (268), supports only 12 [ 41.141026][ T575] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock [ 41.176104][ T575] F2FS-fs (loop1): invalid crc value [ 41.180665][ T20] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 4 [ 41.202775][ T20] usb 3-1: New USB device found, idVendor=1345, idProduct=3008, bcdDevice= 0.00 [ 41.211891][ T20] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 41.228465][ T575] F2FS-fs (loop1): SIT is corrupted data# 5 7 vs 11 [ 41.233656][ T30] audit: type=1400 audit(1793668014.411:228): avc: denied { write } for pid=591 comm="syz.0.68" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=key permissive=1 [ 41.244322][ T575] F2FS-fs (loop1): Failed to initialize F2FS segment manager (-117) [ 41.257914][ T20] usb 3-1: config 0 descriptor?? [ 41.292092][ T30] audit: type=1400 audit(1793668014.471:229): avc: denied { write } for pid=591 comm="syz.0.68" name="event0" dev="devtmpfs" ino=256 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 41.319342][ T600] xt_CT: You must specify a L4 protocol and not use inversions on it [ 41.327865][ T20] usbhid 3-1:0.0: couldn't find an input interrupt endpoint [ 41.355670][ T30] audit: type=1400 audit(1793668014.501:230): avc: denied { open } for pid=591 comm="syz.0.68" path="/dev/input/event0" dev="devtmpfs" ino=256 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 41.416951][ T604] TCP: request_sock_TCP: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. [ 41.527432][ T307] usb 3-1: USB disconnect, device number 2 [ 41.594633][ T574] Zero length message leads to an empty skb [ 41.716887][ T20] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 41.876966][ T611] netlink: 16 bytes leftover after parsing attributes in process `syz.4.72'. [ 41.976372][ T612] loop4: detected capacity change from 0 to 512 [ 42.017361][ T611] netlink: 12 bytes leftover after parsing attributes in process `syz.4.72'. [ 42.163576][ T612] EXT4-fs (loop4): Quota format mount options ignored when QUOTA feature is enabled [ 42.259516][ T611] netlink: 40 bytes leftover after parsing attributes in process `syz.4.72'. [ 42.346902][ T611] netlink: 40 bytes leftover after parsing attributes in process `syz.4.72'. [ 42.363966][ T612] EXT4-fs (loop4): mounted filesystem without journal. Opts: jqfmt=vfsv1,nodelalloc,grpquota,auto_da_alloc=0x0000000000000003,,errors=continue. Quota mode: writeback. [ 42.368739][ T600] syz.3.69 (600) used greatest stack depth: 21192 bytes left [ 42.391457][ T612] ext4 filesystem being mounted at /7/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 42.475864][ T622] device gre1 entered promiscuous mode [ 42.503905][ T625] device gre2 entered promiscuous mode [ 43.016746][ T540] usb 4-1: new full-speed USB device number 2 using dummy_hcd [ 43.310600][ T642] loop4: detected capacity change from 0 to 128 [ 43.925775][ T20] usb 1-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 43.935316][ T20] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 43.943433][ T20] usb 1-1: Product: syz [ 43.947640][ T20] usb 1-1: Manufacturer: syz [ 43.952274][ T20] usb 1-1: SerialNumber: syz [ 44.278935][ T652] loop2: detected capacity change from 0 to 2048 [ 44.293393][ T8] attempt to access beyond end of device [ 44.293393][ T8] loop4: rw=1, want=1041, limit=128 [ 44.320355][ T652] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 44.356543][ T295] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 44.376583][ T540] usb 4-1: unable to get BOS descriptor or descriptor too short [ 44.385973][ T604] syz.0.70 (604) used greatest stack depth: 20576 bytes left [ 44.405799][ T664] capability: warning: `syz.0.87' uses deprecated v2 capabilities in a way that may be insecure [ 44.407652][ T6] usb 1-1: USB disconnect, device number 4 [ 44.418654][ T664] overlayfs: failed to create directory ./bus/work (errno: 13); mounting read-only [ 44.422398][ T540] usb 4-1: not running at top speed; connect to a high speed hub [ 44.431808][ T664] overlayfs: fs on './file0' does not support file handles, falling back to xino=off. [ 44.449110][ T664] overlayfs: conflicting lowerdir path [ 44.546784][ T540] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 44.557172][ T540] usb 4-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 44.566128][ T540] usb 4-1: config 1 interface 1 altsetting 1 endpoint 0x1 has invalid wMaxPacketSize 0 [ 44.897055][ T654] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 45.016484][ T295] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x2 has an invalid bInterval 0, changing to 7 [ 45.027426][ T540] usb 4-1: New USB device found, idVendor=0582, idProduct=004c, bcdDevice= 0.40 [ 45.036605][ T295] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 45.046287][ T295] usb 2-1: New USB device found, idVendor=046d, idProduct=c222, bcdDevice= 0.00 [ 45.055388][ T540] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 45.063416][ T540] usb 4-1: Product: syz [ 45.067620][ T540] usb 4-1: Manufacturer: syz [ 45.072219][ T540] usb 4-1: SerialNumber: syz [ 45.076876][ T295] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 45.156407][ T654] usb 5-1: Using ep0 maxpacket: 32 [ 45.220161][ T673] device vlan2 entered promiscuous mode [ 45.225796][ T673] device bridge0 entered promiscuous mode [ 45.316423][ T654] usb 5-1: unable to get BOS descriptor or descriptor too short [ 45.391709][ T540] usb 4-1: USB disconnect, device number 2 [ 45.471588][ T686] netlink: 'syz.2.95': attribute type 4 has an invalid length. [ 45.479317][ T686] netlink: 17 bytes leftover after parsing attributes in process `syz.2.95'. [ 45.560072][ T687] FAULT_INJECTION: forcing a failure. [ 45.560072][ T687] name failslab, interval 1, probability 0, space 0, times 0 [ 45.572930][ T687] CPU: 1 PID: 687 Comm: syz.0.92 Not tainted syzkaller #0 [ 45.580086][ T687] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/15/2026 [ 45.590159][ T687] Call Trace: [ 45.593463][ T687] [ 45.596407][ T687] __dump_stack+0x21/0x30 [ 45.600763][ T687] dump_stack_lvl+0x110/0x170 [ 45.605563][ T687] ? show_regs_print_info+0x20/0x20 [ 45.610783][ T687] dump_stack+0x15/0x20 [ 45.615057][ T687] should_fail+0x3ab/0x500 [ 45.619493][ T687] ? netlink_ack+0x35c/0xb10 [ 45.624114][ T687] __should_failslab+0xa4/0xe0 [ 45.628900][ T687] should_failslab+0x9/0x20 [ 45.633421][ T687] slab_pre_alloc_hook+0x39/0xd0 [ 45.638375][ T687] ? netlink_ack+0x35c/0xb10 [ 45.642985][ T687] ? netlink_ack+0x35c/0xb10 [ 45.647600][ T687] __kmalloc_track_caller+0x6c/0x2c0 [ 45.652924][ T687] ? netlink_ack+0x35c/0xb10 [ 45.657532][ T687] ? netlink_ack+0x35c/0xb10 [ 45.662171][ T687] __alloc_skb+0x210/0x730 [ 45.666637][ T687] netlink_ack+0x35c/0xb10 [ 45.671074][ T687] ? selinux_nlmsg_lookup+0x39d/0x440 [ 45.676568][ T687] ? netlink_dump+0xdf0/0xdf0 [ 45.681265][ T687] netlink_rcv_skb+0x267/0x430 [ 45.686050][ T687] ? rtnetlink_bind+0x80/0x80 [ 45.690744][ T687] ? netlink_ack+0xb10/0xb10 [ 45.695355][ T687] ? netlink_unicast+0x1c9/0xa30 [ 45.700312][ T687] rtnetlink_rcv+0x1c/0x20 [ 45.704744][ T687] netlink_unicast+0x86c/0xa30 [ 45.709562][ T687] netlink_sendmsg+0x879/0xb80 [ 45.714371][ T687] ? netlink_getsockopt+0x530/0x530 [ 45.719626][ T687] ? security_socket_sendmsg+0x82/0xa0 [ 45.725107][ T687] ? netlink_getsockopt+0x530/0x530 [ 45.730328][ T687] ____sys_sendmsg+0x5be/0x8f0 [ 45.735111][ T687] ? __sys_sendmsg_sock+0x40/0x40 [ 45.740156][ T687] ? import_iovec+0x7c/0xb0 [ 45.744676][ T687] ___sys_sendmsg+0x236/0x2e0 [ 45.749373][ T687] ? __sys_sendmsg+0x280/0x280 [ 45.754150][ T687] ? __switch_to+0x56c/0x1070 [ 45.758851][ T687] ? __kasan_check_write+0x14/0x20 [ 45.763979][ T687] ? push_rt_task+0x46f/0x5d0 [ 45.768678][ T687] ? __fdget+0x1a1/0x230 [ 45.772937][ T687] __x64_sys_sendmsg+0x201/0x2d0 [ 45.777891][ T687] ? ___sys_sendmsg+0x2e0/0x2e0 [ 45.782789][ T687] ? ksys_write+0x1fa/0x260 [ 45.787313][ T687] ? __kasan_check_write+0x14/0x20 [ 45.792440][ T687] ? switch_fpu_return+0x15d/0x2c0 [ 45.797573][ T687] x64_sys_call+0x4b/0x9a0 [ 45.802003][ T687] do_syscall_64+0x4c/0xa0 [ 45.806436][ T687] ? clear_bhb_loop+0x50/0xa0 [ 45.811126][ T687] ? clear_bhb_loop+0x50/0xa0 [ 45.815818][ T687] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 45.821728][ T687] RIP: 0033:0x7f00408f3b19 [ 45.826153][ T687] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 45.845860][ T687] RSP: 002b:00007f003f309028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 45.854284][ T687] RAX: ffffffffffffffda RBX: 00007f0040b7a180 RCX: 00007f00408f3b19 [ 45.862271][ T687] RDX: 0000000000000000 RSI: 0000200000000100 RDI: 0000000000000009 [ 45.870285][ T687] RBP: 00007f003f309090 R08: 0000000000000000 R09: 0000000000000000 [ 45.878273][ T687] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 45.886252][ T687] R13: 00007f0040b7a218 R14: 00007f0040b7a180 R15: 00007fff29124418 [ 45.894244][ T687] [ 45.897789][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): bond_slave_0: link becomes ready [ 45.905990][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 45.917871][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): bond_slave_1: link becomes ready [ 45.927922][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 45.936691][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 45.944888][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 45.953480][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 45.961493][ T654] usb 5-1: New USB device found, idVendor=0ccd, idProduct=00b1, bcdDevice= 0.40 [ 45.971261][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 45.979747][ T30] kauditd_printk_skb: 6 callbacks suppressed [ 45.979759][ T30] audit: type=1400 audit(1793668019.162:237): avc: denied { read } for pid=649 comm="syz.1.84" name="event0" dev="devtmpfs" ino=256 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 45.980811][ T654] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 46.018528][ T295] lg-g15 0003:046D:C222.0001: unknown main item tag 0x0 [ 46.025511][ T295] lg-g15 0003:046D:C222.0001: unknown main item tag 0x0 [ 46.032793][ T295] lg-g15 0003:046D:C222.0001: unknown main item tag 0x0 [ 46.039863][ T295] lg-g15 0003:046D:C222.0001: unknown main item tag 0x0 [ 46.046885][ T295] lg-g15 0003:046D:C222.0001: unknown main item tag 0x0 [ 46.053855][ T295] lg-g15 0003:046D:C222.0001: unknown main item tag 0x0 [ 46.060881][ T654] usb 5-1: Product: syz [ 46.065059][ T654] usb 5-1: Manufacturer: syz [ 46.069758][ T295] lg-g15 0003:046D:C222.0001: unknown main item tag 0x0 [ 46.076732][ T654] usb 5-1: SerialNumber: syz [ 46.081632][ T295] lg-g15 0003:046D:C222.0001: unknown main item tag 0x0 [ 46.089254][ T295] lg-g15 0003:046D:C222.0001: unknown main item tag 0x0 [ 46.096277][ T295] lg-g15 0003:046D:C222.0001: unknown main item tag 0x0 [ 46.103270][ T295] lg-g15 0003:046D:C222.0001: unknown main item tag 0x0 [ 46.110366][ T295] lg-g15 0003:046D:C222.0001: unknown main item tag 0x0 [ 46.117413][ T295] lg-g15 0003:046D:C222.0001: unknown main item tag 0x0 [ 46.124408][ T295] lg-g15 0003:046D:C222.0001: unknown main item tag 0x0 [ 46.131558][ T295] lg-g15 0003:046D:C222.0001: unknown main item tag 0x0 [ 46.138589][ T295] lg-g15 0003:046D:C222.0001: unknown main item tag 0x0 [ 46.145582][ T295] lg-g15 0003:046D:C222.0001: unknown main item tag 0x0 [ 46.152692][ T295] lg-g15 0003:046D:C222.0001: unknown main item tag 0x0 [ 46.155243][ T693] loop3: detected capacity change from 0 to 512 [ 46.159896][ T295] lg-g15 0003:046D:C222.0001: unknown main item tag 0x0 [ 46.173096][ T295] lg-g15 0003:046D:C222.0001: unknown main item tag 0x0 [ 46.180122][ T295] lg-g15 0003:046D:C222.0001: unknown main item tag 0x0 [ 46.187177][ T295] lg-g15 0003:046D:C222.0001: unknown main item tag 0x0 [ 46.194174][ T295] lg-g15 0003:046D:C222.0001: unknown main item tag 0x0 [ 46.196469][ T693] EXT4-fs error (device loop3): ext4_orphan_get:1436: comm syz.3.97: bad orphan inode 15 [ 46.201279][ T295] lg-g15 0003:046D:C222.0001: unknown main item tag 0x0 [ 46.215796][ T693] ext4_test_bit(bit=14, block=5) = 0 [ 46.221395][ T295] lg-g15 0003:046D:C222.0001: unknown main item tag 0x0 [ 46.224405][ T693] EXT4-fs (loop3): mounted filesystem without journal. Opts: noblock_validity,lazytime,journal_dev=0x0000000000000003,min_batch_time=0x000000000000004a,nobarrier,journal_ioprio=0x0000000000000003,nolazytime,noload,,errors=continue. Quota mode: none. [ 46.276331][ T587] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 46.286907][ T295] lg-g15 0003:046D:C222.0001: unknown main item tag 0x0 [ 46.293911][ T295] lg-g15 0003:046D:C222.0001: unknown main item tag 0x0 [ 46.301388][ T295] lg-g15 0003:046D:C222.0001: unknown main item tag 0x0 [ 46.308420][ T295] lg-g15 0003:046D:C222.0001: unknown main item tag 0x0 [ 46.315397][ T295] lg-g15 0003:046D:C222.0001: unknown main item tag 0x0 [ 46.322410][ T295] lg-g15 0003:046D:C222.0001: unknown main item tag 0x0 [ 46.330707][ T295] lg-g15 0003:046D:C222.0001: unknown main item tag 0x0 [ 46.339044][ T295] lg-g15 0003:046D:C222.0001: unknown main item tag 0x0 [ 46.346072][ T295] lg-g15 0003:046D:C222.0001: unknown main item tag 0x0 [ 46.353472][ T295] lg-g15 0003:046D:C222.0001: unknown main item tag 0x0 [ 46.362856][ T295] lg-g15 0003:046D:C222.0001: hidraw0: USB HID v1.11 Device [HID 046d:c222] on usb-dummy_hcd.1-1/input0 [ 46.377951][ T295] usb 2-1: USB disconnect, device number 4 [ 46.393121][ T701] loop3: detected capacity change from 0 to 1024 [ 46.946708][ T30] audit: type=1400 audit(1793668019.632:238): avc: denied { read } for pid=696 comm="syz.0.99" name="usbmon0" dev="devtmpfs" ino=155 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 46.995405][ T700] fido_id[700]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.1/usb2/report_descriptor': No such file or directory [ 47.086344][ T654] snd-usb-audio: probe of 5-1:1.0 failed with error -71 [ 47.099206][ T30] audit: type=1400 audit(1793668019.632:239): avc: denied { open } for pid=696 comm="syz.0.99" path="/dev/usbmon0" dev="devtmpfs" ino=155 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 47.141358][ T654] usb 5-1: USB disconnect, device number 2 [ 47.153811][ T701] EXT4-fs (loop3): warning: checktime reached, running e2fsck is recommended [ 47.477948][ T701] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 47.494054][ T701] ext4 filesystem being mounted at /22/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 47.615209][ T708] netlink: 24 bytes leftover after parsing attributes in process `syz.1.100'. [ 47.655647][ T712] fuse: Bad value for 'group_id' [ 47.776136][ T587] usb 3-1: config 1 has an invalid interface number: 1 but max is 0 [ 47.796313][ T587] usb 3-1: config 1 has no interface number 0 [ 47.812630][ T587] usb 3-1: New USB device found, idVendor=04f3, idProduct=0755, bcdDevice= 0.00 [ 47.891404][ T587] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 47.892464][ T726] loop1: detected capacity change from 0 to 512 [ 48.084000][ T726] EXT4-fs (loop1): Ignoring removed mblk_io_submit option [ 48.180299][ T691] UDC core: couldn't find an available UDC or it's busy: -16 [ 48.215161][ T726] EXT4-fs (loop1): mounted filesystem without journal. Opts: grpquota,nogrpid,mblk_io_submit,,errors=continue. Quota mode: writeback. [ 48.238598][ T691] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 48.248688][ T726] ext4 filesystem being mounted at /19/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 48.341305][ T726] EXT4-fs error (device loop1): ext4_lookup:1860: inode #12: comm syz.1.106: iget: bad i_size value: 2533274857506816 [ 48.364516][ T726] EXT4-fs error (device loop1): ext4_lookup:1860: inode #12: comm syz.1.106: iget: bad i_size value: 2533274857506816 [ 48.377623][ T587] usbhid 3-1:1.1: can't add hid device: -71 [ 48.383877][ T587] usbhid: probe of 3-1:1.1 failed with error -71 [ 48.414762][ T587] usb 3-1: USB disconnect, device number 3 [ 48.462414][ T30] audit: type=1400 audit(1793668021.642:240): avc: denied { bind } for pid=738 comm="syz.1.107" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 48.487893][ T739] netlink: 'syz.1.107': attribute type 11 has an invalid length. [ 48.496954][ T30] audit: type=1400 audit(1793668021.672:241): avc: denied { setopt } for pid=738 comm="syz.1.107" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 48.504399][ T741] loop3: detected capacity change from 0 to 256 [ 48.578987][ T746] loop1: detected capacity change from 0 to 1024 [ 48.589418][ T741] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0x987a2e96, utbl_chksum : 0xe619d30d) [ 48.659123][ T746] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 49.498545][ T746] ext4 filesystem being mounted at /21/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 49.520858][ T30] audit: type=1400 audit(1793668022.182:242): avc: denied { write } for pid=740 comm="syz.3.111" name="/" dev="loop3" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 49.556586][ T30] audit: type=1400 audit(1793668022.182:243): avc: denied { add_name } for pid=740 comm="syz.3.111" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 49.577473][ T30] audit: type=1400 audit(1793668022.182:244): avc: denied { associate } for pid=740 comm="syz.3.111" name="file0" scontext=root:object_r:unlabeled_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 49.603981][ T755] loop4: detected capacity change from 0 to 16 [ 49.644173][ T746] EXT4-fs error (device loop1): ext4_free_blocks:6231: comm syz.1.112: Freeing blocks not in datazone - block = 0, count = 16 [ 49.667930][ T755] erofs: (device loop4): mounted with root inode @ nid 36. [ 49.684797][ T746] EXT4-fs error (device loop1): ext4_validate_block_bitmap:438: comm syz.1.112: bg 0: block 112: padding at end of block bitmap is not set [ 49.712676][ T746] EXT4-fs (loop1): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 28 [ 49.733246][ T30] audit: type=1400 audit(1793668022.912:245): avc: denied { unmount } for pid=286 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 49.774262][ T757] loop2: detected capacity change from 0 to 512 [ 49.783985][ T746] EXT4-fs (loop1): This should not happen!! Data will be lost [ 49.783985][ T746] [ 49.823086][ T759] loop3: detected capacity change from 0 to 16 [ 49.850017][ T746] EXT4-fs (loop1): Total free blocks count 0 [ 49.869844][ T746] EXT4-fs (loop1): Free/Dirty block details [ 49.886593][ T746] EXT4-fs (loop1): free_blocks=0 [ 49.896952][ T746] EXT4-fs (loop1): dirty_blocks=16 [ 49.905944][ T746] EXT4-fs (loop1): Block reservation details [ 49.918430][ T759] erofs: (device loop3): mounted with root inode @ nid 36. [ 49.937092][ T757] EXT4-fs error (device loop2): ext4_orphan_get:1410: inode #15: comm syz.2.115: inode has both inline data and extents flags [ 49.950390][ T746] EXT4-fs (loop1): i_reserved_data_blocks=1 [ 49.991140][ T757] EXT4-fs error (device loop2): ext4_orphan_get:1415: comm syz.2.115: couldn't read orphan inode 15 (err -117) [ 50.023473][ T757] EXT4-fs (loop2): mounted filesystem without journal. Opts: noblock_validity,usrquota,grpquota,noload,nobarrier,lazytime,,errors=continue. Quota mode: writeback. [ 50.467824][ T774] FAULT_INJECTION: forcing a failure. [ 50.467824][ T774] name failslab, interval 1, probability 0, space 0, times 0 [ 50.480471][ T774] CPU: 0 PID: 774 Comm: syz.2.117 Not tainted syzkaller #0 [ 50.487692][ T774] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/15/2026 [ 50.497797][ T774] Call Trace: [ 50.501096][ T774] [ 50.504042][ T774] __dump_stack+0x21/0x30 [ 50.508436][ T774] dump_stack_lvl+0x110/0x170 [ 50.513164][ T774] ? show_regs_print_info+0x20/0x20 [ 50.518382][ T774] ? __kasan_check_write+0x14/0x20 [ 50.523517][ T774] dump_stack+0x15/0x20 [ 50.527694][ T774] should_fail+0x3ab/0x500 [ 50.532126][ T774] __should_failslab+0xa4/0xe0 [ 50.536905][ T774] should_failslab+0x9/0x20 [ 50.541448][ T774] slab_pre_alloc_hook+0x39/0xd0 [ 50.546426][ T774] ? netlink_realloc_groups+0x12c/0x290 [ 50.551992][ T774] __kmalloc_track_caller+0x6c/0x2c0 [ 50.557295][ T774] ? netlink_realloc_groups+0x12c/0x290 [ 50.562873][ T774] krealloc+0x6a/0x100 [ 50.566960][ T774] netlink_realloc_groups+0x12c/0x290 [ 50.572360][ T774] netlink_setsockopt+0x3bd/0xb30 [ 50.577420][ T774] ? netlink_ioctl+0x10/0x10 [ 50.582028][ T774] ? security_socket_setsockopt+0x82/0xa0 [ 50.587768][ T774] ? netlink_ioctl+0x10/0x10 [ 50.592379][ T774] __sys_setsockopt+0x2e9/0x470 [ 50.597265][ T774] ? __kasan_check_write+0x14/0x20 [ 50.602402][ T774] ? __ia32_sys_recv+0xb0/0xb0 [ 50.607204][ T774] ? ksys_write+0x1fa/0x260 [ 50.611721][ T774] ? __ia32_sys_read+0x90/0x90 [ 50.616500][ T774] __x64_sys_setsockopt+0xbf/0xd0 [ 50.621543][ T774] x64_sys_call+0x982/0x9a0 [ 50.626063][ T774] do_syscall_64+0x4c/0xa0 [ 50.630513][ T774] ? clear_bhb_loop+0x50/0xa0 [ 50.635212][ T774] ? clear_bhb_loop+0x50/0xa0 [ 50.639912][ T774] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 50.645822][ T774] RIP: 0033:0x7f2e9c151b19 [ 50.650273][ T774] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 50.669906][ T774] RSP: 002b:00007f2e9ab67028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 50.678347][ T774] RAX: ffffffffffffffda RBX: 00007f2e9c3d8180 RCX: 00007f2e9c151b19 [ 50.686345][ T774] RDX: 0000000000000001 RSI: 000000000000010e RDI: 0000000000000007 [ 50.694339][ T774] RBP: 00007f2e9ab67090 R08: 0000000000000004 R09: 0000000000000000 [ 50.702446][ T774] R10: 0000200000001400 R11: 0000000000000246 R12: 0000000000000001 [ 50.710454][ T774] R13: 00007f2e9c3d8218 R14: 00007f2e9c3d8180 R15: 00007fff1284c5a8 [ 50.718450][ T774] [ 50.736440][ T769] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 50.797886][ T767] netlink: 24 bytes leftover after parsing attributes in process `syz.1.116'. [ 51.035716][ T30] audit: type=1400 audit(1793668024.162:246): avc: denied { mounton } for pid=776 comm="syz.0.119" path="/proc/76/cgroup" dev="proc" ino=17713 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=file permissive=1 [ 51.117265][ T30] audit: type=1400 audit(1793668024.162:247): avc: denied { remount } for pid=776 comm="syz.0.119" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=filesystem permissive=1 [ 51.199371][ T783] loop2: detected capacity change from 0 to 512 [ 51.279599][ T783] EXT4-fs error (device loop2): ext4_orphan_get:1436: comm syz.2.121: bad orphan inode 15 [ 51.325864][ T783] ext4_test_bit(bit=14, block=5) = 0 [ 51.331218][ T783] EXT4-fs (loop2): mounted filesystem without journal. Opts: noblock_validity,lazytime,journal_dev=0x0000000000000003,min_batch_time=0x000000000000004a,nobarrier,journal_ioprio=0x0000000000000003,nolazytime,noload,,errors=continue. Quota mode: none. [ 51.441926][ T30] audit: type=1400 audit(1793668024.623:248): avc: denied { attach_queue } for pid=785 comm="syz.1.122" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tun_socket permissive=1 [ 51.545645][ T30] audit: type=1400 audit(1793668024.643:249): avc: denied { mount } for pid=785 comm="syz.1.122" name="/" dev="ramfs" ino=17729 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ramfs_t tclass=filesystem permissive=1 [ 52.753772][ T805] xt_hashlimit: size too large, truncated to 1048576 [ 52.809507][ T806] loop1: detected capacity change from 0 to 1024 [ 52.822145][ T30] audit: type=1400 audit(1793668026.003:250): avc: denied { create } for pid=801 comm="syz.2.126" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 52.893214][ T30] audit: type=1400 audit(1793668026.023:251): avc: denied { connect } for pid=801 comm="syz.2.126" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 52.942852][ T810] 9p: Unknown Cache mode readahead [ 52.946211][ T30] audit: type=1400 audit(1793668026.023:252): avc: denied { write } for pid=801 comm="syz.2.126" laddr=fe80::a0f8:2aff:fef6:4cb3 lport=1 faddr=ff02::1 fport=20004 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 52.981500][ T809] x_tables: ip6_tables: icmp6 match: only valid for protocol 58 [ 53.005895][ T806] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 53.022495][ T30] audit: type=1400 audit(1793668026.043:253): avc: denied { read } for pid=801 comm="syz.2.126" laddr=fe80::a0f8:2aff:fef6:4cb3 lport=1 faddr=ff02::1 fport=20004 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 53.045796][ T806] ext4 filesystem being mounted at /25/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 53.059052][ T30] audit: type=1400 audit(1793668026.123:254): avc: denied { watch watch_reads } for pid=808 comm="syz.0.128" path="/23" dev="tmpfs" ino=145 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 53.081713][ T30] audit: type=1400 audit(1793668026.123:255): avc: denied { mounton } for pid=808 comm="syz.0.128" path="/23/file0" dev="tmpfs" ino=150 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=fifo_file permissive=1 [ 53.436706][ T823] loop4: detected capacity change from 0 to 128 [ 53.488121][ T823] EXT4-fs (loop4): Test dummy encryption mode enabled [ 53.573284][ T823] EXT4-fs (loop4): mounted filesystem without journal. Opts: test_dummy_encryption=v1,max_dir_size_kb=0x0000000000000001,,errors=continue. Quota mode: none. [ 53.589512][ T823] ext4 filesystem being mounted at /14/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 54.357001][ T822] loop1: detected capacity change from 0 to 1024 [ 54.387190][ T826] netlink: 24 bytes leftover after parsing attributes in process `syz.2.133'. [ 54.435257][ T295] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 54.705353][ T295] usb 4-1: Using ep0 maxpacket: 16 [ 55.100019][ T846] loop1: detected capacity change from 0 to 128 [ 55.137543][ T846] EXT4-fs (loop1): Test dummy encryption mode enabled [ 55.234439][ T846] EXT4-fs (loop1): mounted filesystem without journal. Opts: test_dummy_encryption=v1,max_dir_size_kb=0x0000000000000001,,errors=continue. Quota mode: none. [ 55.250637][ T846] ext4 filesystem being mounted at /27/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 55.513486][ T857] loop2: detected capacity change from 0 to 16 [ 55.557801][ T842] netlink: 24 bytes leftover after parsing attributes in process `syz.4.139'. [ 55.567840][ T540] usb 1-1: new full-speed USB device number 5 using dummy_hcd [ 55.584778][ T857] erofs: (device loop2): mounted with root inode @ nid 36. [ 55.822068][ T862] loop4: detected capacity change from 0 to 512 [ 55.865912][ T295] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 55.876328][ T295] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 55.901239][ T862] EXT4-fs error (device loop4): ext4_orphan_get:1436: comm syz.4.142: bad orphan inode 15 [ 55.912697][ T862] ext4_test_bit(bit=14, block=5) = 0 [ 55.918270][ T862] EXT4-fs (loop4): mounted filesystem without journal. Opts: noblock_validity,lazytime,journal_dev=0x0000000000000003,min_batch_time=0x000000000000004a,nobarrier,journal_ioprio=0x0000000000000003,nolazytime,noload,,errors=continue. Quota mode: none. [ 55.997555][ T295] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= f.89 [ 56.007068][ T295] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 56.015189][ T295] usb 4-1: SerialNumber: syz [ 56.065912][ T295] usb 4-1: 0:2 : does not exist [ 56.176835][ T30] kauditd_printk_skb: 7 callbacks suppressed [ 56.176849][ T30] audit: type=1400 audit(1793668029.363:263): avc: denied { mounton } for pid=869 comm="syz.1.145" path="/proc/84/task" dev="proc" ino=17857 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dir permissive=1 [ 56.263802][ T872] loop4: detected capacity change from 0 to 128 [ 56.725077][ T796] usb 4-1: USB disconnect, device number 3 [ 56.832873][ T870] loop1: detected capacity change from 0 to 1024 [ 57.353295][ T306] attempt to access beyond end of device [ 57.353295][ T306] loop4: rw=1, want=1041, limit=128 [ 57.355902][ T30] audit: type=1400 audit(1793668029.943:264): avc: denied { unmount } for pid=286 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 57.430907][ T877] loop3: detected capacity change from 0 to 128 [ 57.477356][ T877] EXT4-fs (loop3): Test dummy encryption mode enabled [ 57.498827][ T540] usb 1-1: unable to get BOS descriptor or descriptor too short [ 57.506660][ T30] audit: type=1400 audit(1793668030.523:265): avc: denied { associate } for pid=869 comm="syz.1.145" name="bus" scontext=root:object_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 57.526479][ T877] EXT4-fs (loop3): mounted filesystem without journal. Opts: test_dummy_encryption=v1,max_dir_size_kb=0x0000000000000001,,errors=continue. Quota mode: none. [ 57.543302][ T877] ext4 filesystem being mounted at /29/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 58.461280][ T880] netlink: 24 bytes leftover after parsing attributes in process `syz.1.148'. [ 58.554776][ T540] usb 1-1: unable to read config index 0 descriptor/start: -71 [ 58.562393][ T540] usb 1-1: can't read configurations, error -71 [ 58.748293][ T905] loop4: detected capacity change from 0 to 512 [ 58.931121][ T905] EXT4-fs error (device loop4): ext4_orphan_get:1436: comm syz.4.153: bad orphan inode 15 [ 58.986416][ T905] ext4_test_bit(bit=14, block=5) = 0 [ 59.087980][ T905] EXT4-fs (loop4): mounted filesystem without journal. Opts: noblock_validity,lazytime,journal_dev=0x0000000000000003,min_batch_time=0x000000000000004a,nobarrier,journal_ioprio=0x0000000000000003,nolazytime,noload,,errors=continue. Quota mode: none. [ 59.441859][ T915] loop4: detected capacity change from 0 to 512 [ 59.456544][ T915] overlayfs: overlapping lowerdir path [ 59.528640][ T916] loop1: detected capacity change from 0 to 128 [ 59.605414][ T916] EXT4-fs (loop1): Test dummy encryption mode enabled [ 59.780082][ T920] loop3: detected capacity change from 0 to 16 [ 59.811211][ T916] EXT4-fs (loop1): mounted filesystem without journal. Opts: test_dummy_encryption=v1,max_dir_size_kb=0x0000000000000001,,errors=continue. Quota mode: none. [ 59.827595][ T916] ext4 filesystem being mounted at /31/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 60.013949][ T920] erofs: (device loop3): mounted with root inode @ nid 36. [ 60.265012][ T925] tipc: New replicast peer: 255.255.255.255 [ 60.271181][ T925] tipc: Enabled bearer , priority 10 [ 60.378812][ T929] tipc: MTU too low for tipc bearer [ 62.294322][ T939] IPv6: NLM_F_CREATE should be specified when creating new route [ 62.302165][ T939] IPv6: Can't replace route, no match found [ 62.568738][ T946] loop1: detected capacity change from 0 to 128 [ 63.197313][ T946] EXT4-fs (loop1): Test dummy encryption mode enabled [ 63.329251][ T946] EXT4-fs (loop1): mounted filesystem without journal. Opts: test_dummy_encryption=v1,max_dir_size_kb=0x0000000000000001,,errors=continue. Quota mode: none. [ 63.345557][ T946] ext4 filesystem being mounted at /32/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 63.453439][ T951] netlink: 28 bytes leftover after parsing attributes in process `syz.2.165'. [ 63.466897][ T950] loop3: detected capacity change from 0 to 512 [ 63.968630][ T950] EXT4-fs error (device loop3): ext4_orphan_get:1436: comm syz.3.164: bad orphan inode 15 [ 63.994296][ T950] ext4_test_bit(bit=14, block=5) = 0 [ 63.999646][ T950] EXT4-fs (loop3): mounted filesystem without journal. Opts: noblock_validity,lazytime,journal_dev=0x0000000000000003,min_batch_time=0x000000000000004a,nobarrier,journal_ioprio=0x0000000000000003,nolazytime,noload,,errors=continue. Quota mode: none. [ 64.036508][ T30] audit: type=1400 audit(1793668037.224:266): avc: denied { listen } for pid=962 comm="syz.4.167" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 64.070221][ T963] loop4: detected capacity change from 0 to 1024 [ 64.076715][ T30] audit: type=1400 audit(1793668037.254:267): avc: denied { accept } for pid=962 comm="syz.4.167" path="socket:[17913]" dev="sockfs" ino=17913 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 64.121355][ T958] netlink: 24 bytes leftover after parsing attributes in process `syz.0.166'. [ 64.281864][ T963] Quota error (device loop4): find_tree_dqentry: Getting block too big (64 >= 6) [ 64.291245][ T963] Quota error (device loop4): qtree_read_dquot: Can't read quota structure for id 0 [ 64.300690][ T963] EXT4-fs error (device loop4): ext4_acquire_dquot:6227: comm syz.4.167: Failed to acquire dquot type 0 [ 64.442487][ T963] EXT4-fs error (device loop4): mb_free_blocks:1889: group 0, inode 13: block 160:freeing already freed block (bit 10); block bitmap corrupt. [ 64.722820][ T963] EXT4-fs (loop4): 1 truncate cleaned up [ 64.781555][ T963] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 65.094009][ T654] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 65.191730][ T985] binder: Bad value for 'stats' [ 65.250252][ T30] audit: type=1400 audit(1793668038.374:268): avc: denied { remount } for pid=976 comm="syz.0.171" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 65.311181][ T987] loop4: detected capacity change from 0 to 128 [ 65.337561][ T988] netem: change failed [ 65.347136][ T987] EXT4-fs (loop4): Test dummy encryption mode enabled [ 65.420701][ T987] EXT4-fs (loop4): mounted filesystem without journal. Opts: test_dummy_encryption=v1,max_dir_size_kb=0x0000000000000001,,errors=continue. Quota mode: none. [ 65.437083][ T987] ext4 filesystem being mounted at /27/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 65.449196][ T307] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 65.473983][ T30] audit: type=1400 audit(1793668038.654:269): avc: denied { mounton } for pid=986 comm="syz.1.174" path="/34/file0" dev="configfs" ino=13262 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 65.498357][ T30] audit: type=1400 audit(1793668038.654:270): avc: denied { read } for pid=986 comm="syz.1.174" name="/" dev="configfs" ino=13262 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 65.521190][ T30] audit: type=1400 audit(1793668038.654:271): avc: denied { open } for pid=986 comm="syz.1.174" path="/34/file0" dev="overlay" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 65.546396][ T30] audit: type=1400 audit(1793668038.684:272): avc: denied { unmount } for pid=285 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=filesystem permissive=1 [ 65.703891][ T654] usb 3-1: Using ep0 maxpacket: 32 [ 65.733907][ T307] usb 4-1: Using ep0 maxpacket: 16 [ 65.767670][ T994] loop1: detected capacity change from 0 to 128 [ 65.779131][ T307] usb 4-1: too many configurations: 33, using maximum allowed: 8 [ 65.974063][ T307] usb 4-1: config 28 has 0 interfaces, different from the descriptor's value: 1 [ 67.373785][ T307] usb 4-1: config 28 has 0 interfaces, different from the descriptor's value: 1 [ 67.657057][ T307] usb 4-1: config 28 has 0 interfaces, different from the descriptor's value: 1 [ 67.763763][ T307] usb 4-1: config 28 has 0 interfaces, different from the descriptor's value: 1 [ 67.893800][ T307] usb 4-1: config 28 has 0 interfaces, different from the descriptor's value: 1 [ 67.993806][ T307] usb 4-1: config 28 has 0 interfaces, different from the descriptor's value: 1 [ 68.093618][ T998] usb 2-1: new full-speed USB device number 5 using dummy_hcd [ 68.219703][ T1011] loop2: detected capacity change from 0 to 512 [ 68.332948][ T307] usb 4-1: unable to read config index 6 descriptor/all [ 68.346567][ T307] usb 4-1: can't read configurations, error -71 [ 68.425373][ T1011] FAT-fs (loop2): Invalid FSINFO signature: 0x41615252, 0x61000000 (sector = 1) [ 68.465751][ T729] FAT-fs (loop2): Invalid FSINFO signature: 0x41615252, 0x61000000 (sector = 1) [ 68.483561][ T654] usb 3-1: unable to read config index 0 descriptor/all [ 68.490582][ T654] usb 3-1: can't read configurations, error -71 [ 68.635506][ T1013] netlink: 24 bytes leftover after parsing attributes in process `syz.3.182'. [ 68.653574][ T998] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 68.673995][ T998] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 68.755861][ T1018] loop2: detected capacity change from 0 to 128 [ 69.093829][ T998] usb 2-1: New USB device found, idVendor=08b7, idProduct=ec00, bcdDevice= 0.00 [ 69.201963][ T998] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 69.219101][ T30] audit: type=1400 audit(1793668042.405:273): avc: denied { write } for pid=1019 comm="syz.0.184" name="arp" dev="proc" ino=4026532475 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_net_t tclass=file permissive=1 [ 69.984010][ T998] usb 2-1: SerialNumber: syz [ 70.134067][ T729] attempt to access beyond end of device [ 70.134067][ T729] loop2: rw=1, want=1041, limit=128 [ 70.355339][ T30] audit: type=1400 audit(1793668043.545:274): avc: denied { getopt } for pid=1026 comm="syz.0.186" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 70.381205][ T998] usb 2-1: 0:2 : does not exist [ 70.457590][ T998] usb 2-1: USB disconnect, device number 5 [ 70.558576][ T1036] ip_tables: iptables: counters copy to user failed while replacing table [ 70.585331][ T1036] loop2: detected capacity change from 0 to 512 [ 70.598323][ T30] audit: type=1400 audit(1793668043.785:275): avc: denied { shutdown } for pid=1039 comm="syz.0.191" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 70.619509][ T1036] FAULT_INJECTION: forcing a failure. [ 70.619509][ T1036] name failslab, interval 1, probability 0, space 0, times 0 [ 70.633033][ T1036] CPU: 1 PID: 1036 Comm: syz.2.187 Not tainted syzkaller #0 [ 70.640363][ T1036] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/15/2026 [ 70.650456][ T1036] Call Trace: [ 70.653758][ T1036] [ 70.656714][ T1036] __dump_stack+0x21/0x30 [ 70.661073][ T1036] dump_stack_lvl+0x110/0x170 [ 70.665777][ T1036] ? show_regs_print_info+0x20/0x20 [ 70.671022][ T1036] ? kernfs_xattr_get+0x81/0x90 [ 70.675893][ T1036] ? selinux_kernfs_init_security+0x143/0x450 [ 70.681989][ T1036] dump_stack+0x15/0x20 [ 70.686165][ T1036] should_fail+0x3ab/0x500 [ 70.690608][ T1036] __should_failslab+0xa4/0xe0 [ 70.695408][ T1036] should_failslab+0x9/0x20 [ 70.699938][ T1036] slab_pre_alloc_hook+0x39/0xd0 [ 70.704902][ T1036] ? __kernfs_new_node+0xe1/0x670 [ 70.709953][ T1036] kmem_cache_alloc+0x44/0x260 [ 70.714745][ T1036] __kernfs_new_node+0xe1/0x670 [ 70.719632][ T1036] ? kernfs_new_node+0x260/0x260 [ 70.724591][ T1036] ? rwsem_write_trylock+0x136/0x300 [ 70.729904][ T1036] ? __kasan_check_write+0x14/0x20 [ 70.735042][ T1036] ? _raw_spin_lock+0x94/0xf0 [ 70.739744][ T1036] ? up_write+0x7b/0x290 [ 70.744106][ T1036] ? kernfs_activate+0x35e/0x370 [ 70.749294][ T1036] kernfs_new_node+0x150/0x260 [ 70.754098][ T1036] __kernfs_create_file+0x4e/0x270 [ 70.759238][ T1036] sysfs_add_file_mode_ns+0x29a/0x350 [ 70.764658][ T1036] internal_create_group+0x492/0xd00 [ 70.769991][ T1036] ? sysfs_create_group+0x30/0x30 [ 70.775041][ T1036] ? sysfs_create_dir_ns+0x163/0x290 [ 70.780383][ T1036] ? sysfs_warn_dup+0xa0/0xa0 [ 70.785093][ T1036] sysfs_create_groups+0x58/0x120 [ 70.790148][ T1036] kobject_add_internal+0x8f1/0xde0 [ 70.795385][ T1036] kobject_init_and_add+0x128/0x190 [ 70.800642][ T1036] ? kobject_add+0x230/0x230 [ 70.805253][ T1036] ? mutex_lock+0x9b/0x1c0 [ 70.809706][ T1036] ext4_register_sysfs+0xc3/0x2e0 [ 70.814762][ T1036] ? ext4_fill_super+0x81b7/0x8bf0 [ 70.819899][ T1036] ext4_fill_super+0x81f7/0x8bf0 [ 70.824874][ T1036] ? ext4_mount+0x40/0x40 [ 70.829226][ T1036] ? set_blocksize+0x1e9/0x360 [ 70.834011][ T1036] ? sb_set_blocksize+0xaa/0xf0 [ 70.838886][ T1036] ? ext4_mount+0x40/0x40 [ 70.843248][ T1036] mount_bdev+0x28d/0x3c0 [ 70.847605][ T1036] ? ext4_mount+0x40/0x40 [ 70.852058][ T1036] ext4_mount+0x34/0x40 [ 70.856237][ T1036] legacy_get_tree+0xed/0x190 [ 70.860941][ T1036] ? ext4_errno_to_code+0x160/0x160 [ 70.866161][ T1036] vfs_get_tree+0x89/0x260 [ 70.870615][ T1036] do_new_mount+0x251/0xb40 [ 70.875139][ T1036] ? security_capable+0x87/0xb0 [ 70.880023][ T1036] path_mount+0x640/0xff0 [ 70.884380][ T1036] __se_sys_mount+0x320/0x390 [ 70.889085][ T1036] ? __x64_sys_mount+0xd0/0xd0 [ 70.893873][ T1036] ? __kasan_check_write+0x14/0x20 [ 70.899018][ T1036] __x64_sys_mount+0xbf/0xd0 [ 70.903642][ T1036] x64_sys_call+0x6bf/0x9a0 [ 70.908166][ T1036] do_syscall_64+0x4c/0xa0 [ 70.912621][ T1036] ? clear_bhb_loop+0x50/0xa0 [ 70.917322][ T1036] ? clear_bhb_loop+0x50/0xa0 [ 70.922030][ T1036] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 70.927972][ T1036] RIP: 0033:0x7f2e9c152d8a [ 70.932410][ T1036] Code: 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8 ff ff ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 70.952127][ T1036] RSP: 002b:00007f2e9aba8e58 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 70.960580][ T1036] RAX: ffffffffffffffda RBX: 00007f2e9aba8ee0 RCX: 00007f2e9c152d8a [ 70.968572][ T1036] RDX: 00002000000008c0 RSI: 0000200000000900 RDI: 00007f2e9aba8ea0 [ 70.976583][ T1036] RBP: 00002000000008c0 R08: 00007f2e9aba8ee0 R09: 0000000000000000 [ 70.984581][ T1036] R10: 0000000000000000 R11: 0000000000000246 R12: 0000200000000900 [ 70.992588][ T1036] R13: 00007f2e9aba8ea0 R14: 000000000000044b R15: 0000200000000940 [ 71.000593][ T1036] [ 71.005687][ T1036] kobject_add_internal failed for loop2 (error: -12 parent: ext4) [ 71.014279][ T1036] EXT4-fs (loop2): mount failed [ 71.124923][ T1036] loop2: detected capacity change from 0 to 128 [ 71.188732][ T1056] loop3: detected capacity change from 0 to 256 [ 71.224662][ T1056] FAT-fs (loop3): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 71.379665][ T1036] FAT-fs (loop2): Invalid FSINFO signature: 0x41615200, 0x61417272 (sector = 1) [ 71.543512][ T306] FAT-fs (loop2): Invalid FSINFO signature: 0x41615200, 0x61417272 (sector = 1) [ 71.557763][ T30] audit: type=1400 audit(1793668044.745:276): avc: denied { append } for pid=1058 comm="syz.1.196" name="kvm" dev="devtmpfs" ino=82 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 71.582738][ T1061] loop4: detected capacity change from 0 to 16 [ 71.644307][ T1061] erofs: (device loop4): mounted with root inode @ nid 36. [ 71.687540][ T1068] FAULT_INJECTION: forcing a failure. [ 71.687540][ T1068] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 71.700791][ T1068] CPU: 0 PID: 1068 Comm: syz.1.200 Not tainted syzkaller #0 [ 71.708120][ T1068] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/15/2026 [ 71.718194][ T1068] Call Trace: [ 71.721488][ T1068] [ 71.724434][ T1068] __dump_stack+0x21/0x30 [ 71.728882][ T1068] dump_stack_lvl+0x110/0x170 [ 71.733593][ T1068] ? show_regs_print_info+0x20/0x20 [ 71.738821][ T1068] dump_stack+0x15/0x20 [ 71.743004][ T1068] should_fail+0x3ab/0x500 [ 71.747441][ T1068] should_fail_usercopy+0x1a/0x20 [ 71.752484][ T1068] _copy_to_user+0x20/0x90 [ 71.756926][ T1068] simple_read_from_buffer+0xe9/0x160 [ 71.762340][ T1068] proc_fail_nth_read+0x1a6/0x220 [ 71.767411][ T1068] ? proc_fault_inject_write+0x310/0x310 [ 71.773068][ T1068] ? security_file_permission+0x83/0xa0 [ 71.778650][ T1068] ? proc_fault_inject_write+0x310/0x310 [ 71.784314][ T1068] vfs_read+0x28c/0xc20 [ 71.788510][ T1068] ? kernel_read+0x1f0/0x1f0 [ 71.793127][ T1068] ? __kasan_check_write+0x14/0x20 [ 71.798264][ T1068] ? mutex_lock+0x9b/0x1c0 [ 71.802730][ T1068] ? wait_for_completion_killable_timeout+0x10/0x10 [ 71.809342][ T1068] ? __fget_files+0x2e1/0x340 [ 71.814043][ T1068] ? __fdget_pos+0x2d2/0x380 [ 71.818657][ T1068] ? ksys_read+0x70/0x260 [ 71.823008][ T1068] ksys_read+0x14a/0x260 [ 71.827269][ T1068] ? vfs_write+0xfd0/0xfd0 [ 71.831711][ T1068] ? debug_smp_processor_id+0x17/0x20 [ 71.837108][ T1068] __x64_sys_read+0x7b/0x90 [ 71.841637][ T1068] x64_sys_call+0x96d/0x9a0 [ 71.846161][ T1068] do_syscall_64+0x4c/0xa0 [ 71.850599][ T1068] ? clear_bhb_loop+0x50/0xa0 [ 71.855313][ T1068] ? clear_bhb_loop+0x50/0xa0 [ 71.860018][ T1068] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 71.865933][ T1068] RIP: 0033:0x7f34e42de34e [ 71.870370][ T1068] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 71.890295][ T1068] RSP: 002b:00007f34e2d74fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 71.898737][ T1068] RAX: ffffffffffffffda RBX: 00007f34e2d756c0 RCX: 00007f34e42de34e [ 71.906733][ T1068] RDX: 000000000000000f RSI: 00007f34e2d750a0 RDI: 0000000000000003 [ 71.914725][ T1068] RBP: 00007f34e2d75090 R08: 0000000000000000 R09: 0000000000000000 [ 71.922716][ T1068] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 71.930702][ T1068] R13: 00007f34e45a4038 R14: 00007f34e45a3fa0 R15: 00007ffe084f0fe8 [ 71.938698][ T1068] [ 73.236371][ T1091] loop3: detected capacity change from 0 to 512 [ 73.287944][ T1091] FAT-fs (loop3): Directory bread(block 1056) failed [ 73.294838][ T1091] FAT-fs (loop3): Directory bread(block 1057) failed [ 73.301562][ T1091] FAT-fs (loop3): Directory bread(block 1058) failed [ 73.308304][ T1091] FAT-fs (loop3): Directory bread(block 1059) failed [ 73.315102][ T1091] FAT-fs (loop3): Directory bread(block 1060) failed [ 73.321827][ T1091] FAT-fs (loop3): Directory bread(block 1061) failed [ 73.328530][ T1091] FAT-fs (loop3): Directory bread(block 1062) failed [ 73.335236][ T1091] FAT-fs (loop3): Directory bread(block 1063) failed [ 73.341938][ T1091] FAT-fs (loop3): Directory bread(block 1064) failed [ 73.348656][ T1091] FAT-fs (loop3): Directory bread(block 1065) failed [ 73.429577][ T30] audit: type=1400 audit(1793668046.615:277): avc: denied { connect } for pid=1098 comm="syz.4.211" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 73.503679][ T30] audit: type=1400 audit(1793668046.695:278): avc: denied { getopt } for pid=1104 comm="syz.2.214" lport=1 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 74.318710][ T30] audit: type=1400 audit(1793668047.495:279): avc: denied { block_suspend } for pid=1173 comm="syz.0.245" capability=36 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 74.399713][ T30] audit: type=1400 audit(1793668047.575:280): avc: denied { map } for pid=1175 comm="syz.0.246" path="socket:[18173]" dev="sockfs" ino=18173 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=udp_socket permissive=1 [ 75.033125][ T30] audit: type=1400 audit(1793668048.215:281): avc: denied { accept } for pid=1220 comm="syz.4.264" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=udp_socket permissive=1 [ 75.792736][ T30] audit: type=1400 audit(1793668048.975:282): avc: denied { mount } for pid=1275 comm="syz.3.287" name="/" dev="devpts" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:devpts_t tclass=filesystem permissive=1 [ 75.846086][ T30] audit: type=1400 audit(1793668048.975:283): avc: denied { watch watch_reads } for pid=1275 comm="syz.3.287" path="/64/file0" dev="devpts" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:devpts_t tclass=dir permissive=1 [ 75.879117][ T30] audit: type=1400 audit(1793668049.005:284): avc: denied { unmount } for pid=286 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:devpts_t tclass=filesystem permissive=1 [ 76.086130][ T30] audit: type=1400 audit(1793668049.266:285): avc: denied { execute } for pid=1291 comm="syz.2.293" path=2F6D656D66643A76A6F5686A362C7252E8102FEC67EDE36880B82110202864656C6574656429 dev="tmpfs" ino=98 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 76.525249][ T1302] syz.4.298 (1302): attempted to duplicate a private mapping with mremap. This is not supported. [ 76.819503][ T30] audit: type=1400 audit(1793668049.996:286): avc: denied { read } for pid=140 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=1 [ 76.897019][ T30] audit: type=1400 audit(1793668049.996:287): avc: denied { search } for pid=140 comm="dhcpcd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 76.974581][ T30] audit: type=1400 audit(1793668049.996:288): avc: denied { read } for pid=140 comm="dhcpcd" name="n15" dev="tmpfs" ino=1699 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 77.574559][ T1376] overlayfs: failed to clone upperpath [ 77.878585][ T306] IPv6: ADDRCONF(NETDEV_CHANGE): bond_slave_0: link becomes ready [ 77.890281][ T306] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 77.922955][ T306] IPv6: ADDRCONF(NETDEV_CHANGE): bond_slave_1: link becomes ready [ 77.948022][ T306] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 77.968311][ T306] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 77.993087][ T306] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 78.023055][ T306] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 78.052621][ T306] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 78.913176][ T1479] overlayfs: failed to clone lowerpath [ 79.650233][ T30] kauditd_printk_skb: 16 callbacks suppressed [ 79.650249][ T30] audit: type=1400 audit(1793668052.826:305): avc: denied { lock } for pid=1509 comm="syz.1.372" path="socket:[20011]" dev="sockfs" ino=20011 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=unix_stream_socket permissive=1 [ 80.158113][ T30] audit: type=1400 audit(1793668053.336:306): avc: denied { ioctl } for pid=1532 comm="syz.1.381" path="socket:[20678]" dev="sockfs" ino=20678 ioctlcmd=0x8912 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 80.270740][ T1539] process 'syz.1.384' launched '/dev/fd/3/./file0' with NULL argv: empty string added [ 80.857919][ T30] audit: type=1400 audit(1793668054.036:307): avc: denied { shutdown } for pid=1559 comm="syz.0.393" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 81.815565][ T30] audit: type=1400 audit(1793668054.996:308): avc: denied { unlink } for pid=1579 comm="syz.0.403" name="#1" dev="tmpfs" ino=349 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 81.881365][ T30] audit: type=1400 audit(1793668055.016:309): avc: denied { create } for pid=1579 comm="syz.0.403" name="#3" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 81.975309][ T30] audit: type=1400 audit(1793668055.016:310): avc: denied { link } for pid=1579 comm="syz.0.403" name="#3" dev="tmpfs" ino=350 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 82.048482][ T30] audit: type=1400 audit(1793668055.016:311): avc: denied { rename } for pid=1579 comm="syz.0.403" name="#4" dev="tmpfs" ino=350 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 82.492961][ T1617] x_tables: duplicate underflow at hook 1 [ 82.560893][ T30] audit: type=1400 audit(1793668055.736:312): avc: denied { read } for pid=1621 comm="syz.4.420" lport=7 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 82.690913][ T1628] netlink: 8 bytes leftover after parsing attributes in process `syz.4.423'. [ 82.807660][ T30] audit: type=1326 audit(1793668055.986:313): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1634 comm="syz.4.426" exe="/root/ci2-android-5-15/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fab4b295b19 code=0x0 [ 83.221434][ T1643] x86/PAT: syz.2.428:1643 freeing invalid memtype [mem 0xfe004000-0xfe004fff] [ 83.967601][ T30] audit: type=1400 audit(1793668057.146:314): avc: denied { setattr } for pid=1703 comm="syz.1.457" name="ptmx" dev="devtmpfs" ino=92 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ptmx_t tclass=chr_file permissive=1 [ 84.179740][ T1733] xt_CT: You must specify a L4 protocol and not use inversions on it [ 84.431649][ T307] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 85.821600][ T307] usb 1-1: Using ep0 maxpacket: 16 [ 85.941487][ T307] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 85.961444][ T307] usb 1-1: config 1 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 96 [ 85.971329][ T307] usb 1-1: config 1 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 8 [ 85.991600][ T307] usb 1-1: config 1 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 18 [ 86.081418][ T540] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 86.151482][ T307] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 86.162150][ T307] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 86.170520][ T307] usb 1-1: SerialNumber: syz [ 86.866528][ T1731] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 86.911819][ T1731] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 87.381304][ T307] usb 1-1: can't set config #1, error -71 [ 87.396520][ T1766] device syzkaller0 entered promiscuous mode [ 87.403047][ T307] usb 1-1: USB disconnect, device number 7 [ 87.426650][ T1766] PF_CAN: dropped non conform CAN FD skbuff: dev type 280, len 65487 [ 87.500717][ T540] usb 5-1: Using ep0 maxpacket: 32 [ 87.574796][ T1788] tipc: Started in network mode [ 87.579723][ T1788] tipc: Node identity 1000001, cluster identity 4711 [ 87.588003][ T1788] tipc: Node number set to 16777217 [ 87.621275][ T540] usb 5-1: config 0 has an invalid interface number: 184 but max is 0 [ 87.629532][ T540] usb 5-1: config 0 has no interface number 0 [ 87.640881][ T1796] binder: 1795:1796 ioctl c0306201 200000000100 returned -14 [ 87.649388][ T540] usb 5-1: config 0 interface 184 has no altsetting 0 [ 87.760462][ T1798] kvm [1797]: vcpu0, guest rIP: 0x1db disabled perfctr wrmsr: 0xc2 data 0xb00061000000dd [ 87.807119][ T1809] device-mapper: table: 253:1: crypt: Invalid number of feature args [ 87.815320][ T1809] device-mapper: ioctl: error adding target to table [ 87.821523][ T540] usb 5-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 87.831042][ T540] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 87.860048][ T540] usb 5-1: Product: syz [ 87.869092][ T540] usb 5-1: Manufacturer: syz [ 87.873830][ T540] usb 5-1: SerialNumber: syz [ 87.879073][ T540] usb 5-1: config 0 descriptor?? [ 87.971816][ T540] smsc75xx v1.0.0 [ 88.117058][ T1827] IPv6: NLM_F_CREATE should be specified when creating new route [ 88.125096][ T1827] IPv6: Can't replace route, no match found [ 89.262242][ T1837] kvm [1836]: vcpu0, guest rIP: 0x1db disabled perfctr wrmsr: 0xc2 data 0xb00061000000ed [ 89.321104][ T540] smsc75xx 5-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -71 [ 89.347311][ T540] smsc75xx 5-1:0.184 (unnamed net_device) (uninitialized): Failed to read PMT_CTL: -71 [ 89.367057][ T540] smsc75xx 5-1:0.184 (unnamed net_device) (uninitialized): device not ready in smsc75xx_bind [ 89.387692][ T540] smsc75xx: probe of 5-1:0.184 failed with error -71 [ 89.420718][ T540] usb 5-1: USB disconnect, device number 3 [ 89.488852][ T1837] kvm [1836]: vcpu0, guest rIP: 0x1db disabled perfctr wrmsr: 0xc2 data 0xb00061000095f4 [ 89.516649][ T1837] kvm [1836]: vcpu0, guest rIP: 0x1db disabled perfctr wrmsr: 0xc1 data 0xb000610000cadd [ 89.530677][ T1837] kvm [1836]: vcpu0, guest rIP: 0x1db disabled perfctr wrmsr: 0xc1 data 0xb00061000000f9 [ 89.544690][ T1837] kvm [1836]: vcpu0, guest rIP: 0x1db disabled perfctr wrmsr: 0xc2 data 0xb00061000000d9 [ 89.820582][ T30] kauditd_printk_skb: 2 callbacks suppressed [ 89.820599][ T30] audit: type=1400 audit(1793668062.997:317): avc: denied { mount } for pid=1852 comm="syz.1.525" name="/" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=filesystem permissive=1 [ 89.865454][ T1858] FAULT_INJECTION: forcing a failure. [ 89.865454][ T1858] name fail_page_alloc, interval 1, probability 0, space 0, times 1 [ 89.879191][ T1858] CPU: 1 PID: 1858 Comm: syz.1.516 Not tainted syzkaller #0 [ 89.886505][ T1858] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/15/2026 [ 89.896597][ T1858] Call Trace: [ 89.899897][ T1858] [ 89.902846][ T1858] __dump_stack+0x21/0x30 [ 89.907206][ T1858] dump_stack_lvl+0x110/0x170 [ 89.911902][ T1858] ? show_regs_print_info+0x20/0x20 [ 89.917220][ T1858] ? __kasan_check_read+0x11/0x20 [ 89.922275][ T1858] ? free_unref_page_commit+0x187/0x3f0 [ 89.927846][ T1858] dump_stack+0x15/0x20 [ 89.931187][ T30] audit: type=1400 audit(1793668063.027:318): avc: denied { search } for pid=1852 comm="syz.1.525" name="/" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=dir permissive=1 [ 89.932020][ T1858] should_fail+0x3ab/0x500 [ 89.957966][ T1858] should_fail_alloc_page+0x55/0x80 [ 89.963190][ T1858] prepare_alloc_pages+0x13f/0x590 [ 89.968328][ T1858] ? __alloc_pages_bulk+0xab0/0xab0 [ 89.973560][ T1858] ? release_pages+0x1264/0x12c0 [ 89.978231][ T30] audit: type=1400 audit(1793668063.027:319): avc: denied { read } for pid=1852 comm="syz.1.525" name="buffer_size_kb" dev="tracefs" ino=13070 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=file permissive=1 [ 89.978536][ T1858] __alloc_pages+0x11d/0x460 [ 90.006040][ T1858] ? unlock_page_memcg+0x114/0x130 [ 90.011294][ T1858] ? zone_watermark_fast+0x250/0x250 [ 90.016605][ T1858] ? page_remove_rmap+0xc6d/0xf40 [ 90.021655][ T1858] ? page_add_file_rmap+0x700/0x700 [ 90.026878][ T1858] ? __kasan_check_write+0x14/0x20 [ 90.029533][ T30] audit: type=1400 audit(1793668063.027:320): avc: denied { open } for pid=1852 comm="syz.1.525" path="/128/tracefs_dir/buffer_size_kb" dev="tracefs" ino=13070 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=file permissive=1 [ 90.032015][ T1858] ? _raw_spin_lock+0x94/0xf0 [ 90.032038][ T1858] __get_free_pages+0x10/0x30 [ 90.065787][ T1858] __tlb_remove_page_size+0x18a/0x310 [ 90.071186][ T1858] unmap_page_range+0x1059/0x1e00 [ 90.076250][ T1858] ? mmu_notifier_invalidate_range_end+0xe0/0xe0 [ 90.082593][ T1858] ? lru_cache_add+0x7e0/0x7e0 [ 90.086685][ T30] audit: type=1400 audit(1793668063.037:321): avc: denied { unmount } for pid=285 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=filesystem permissive=1 [ 90.087371][ T1858] ? schedule_preempt_disabled+0x20/0x20 [ 90.113063][ T1858] unmap_vmas+0x26d/0x380 [ 90.117427][ T1858] ? unmap_page_range+0x1e00/0x1e00 [ 90.122657][ T1858] ? __kasan_check_write+0x14/0x20 [ 90.127792][ T1858] ? tlb_gather_mmu_fullmm+0x144/0x1c0 [ 90.133418][ T1858] exit_mmap+0x412/0x8b0 [ 90.137676][ T1858] ? vm_brk+0x30/0x30 [ 90.141776][ T1858] ? mutex_unlock+0x8f/0x230 [ 90.146401][ T1858] ? uprobe_clear_state+0x2c6/0x320 [ 90.151727][ T1858] __mmput+0x92/0x300 [ 90.155736][ T1858] mmput+0x50/0x150 [ 90.159573][ T1858] do_exit+0xacc/0x29a0 [ 90.163748][ T1858] ? put_task_struct+0x90/0x90 [ 90.168539][ T1858] ? __kasan_check_write+0x14/0x20 [ 90.173677][ T1858] ? _raw_spin_lock_irq+0x95/0xf0 [ 90.178725][ T1858] do_group_exit+0x149/0x310 [ 90.183351][ T1858] ? __kasan_check_write+0x14/0x20 [ 90.188487][ T1858] ? recalc_sigpending+0x1ac/0x230 [ 90.193641][ T1858] get_signal+0x64f/0x1430 [ 90.198089][ T1858] arch_do_signal_or_restart+0xe2/0x1100 [ 90.203763][ T1858] ? __kasan_check_write+0x14/0x20 [ 90.208921][ T1858] ? mutex_unlock+0x8f/0x230 [ 90.213546][ T1858] ? __mutex_lock_slowpath+0x10/0x10 [ 90.218912][ T1858] ? install_ldt+0x80/0x80 [ 90.223368][ T1858] ? get_sigframe_size+0x10/0x10 [ 90.228343][ T1858] ? __se_sys_futex+0x135/0x330 [ 90.233231][ T1858] ? __kasan_check_write+0x14/0x20 [ 90.238380][ T1858] exit_to_user_mode_loop+0xa7/0xe0 [ 90.243648][ T1858] exit_to_user_mode_prepare+0x87/0xd0 [ 90.249154][ T1858] syscall_exit_to_user_mode+0x1a/0x30 [ 90.254675][ T1858] do_syscall_64+0x58/0xa0 [ 90.259142][ T1858] ? clear_bhb_loop+0x50/0xa0 [ 90.263850][ T1858] ? clear_bhb_loop+0x50/0xa0 [ 90.268562][ T1858] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 90.274485][ T1858] RIP: 0033:0x7f34e431db19 [ 90.278933][ T1858] Code: Unable to access opcode bytes at RIP 0x7f34e431daef. [ 90.286321][ T1858] RSP: 002b:00007f34e2d750e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 90.294768][ T1858] RAX: 0000000000000001 RBX: 00007f34e45a3fa8 RCX: 00007f34e431db19 [ 90.302775][ T1858] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007f34e45a3fac [ 90.310774][ T1858] RBP: 00007f34e45a3fa0 R08: 003196aea00e373e R09: 0000000000000000 [ 90.318810][ T1858] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 90.326815][ T1858] R13: 00007f34e45a4038 R14: 00007ffe084f0f00 R15: 00007ffe084f0fe8 [ 90.334834][ T1858] [ 90.423715][ T30] audit: type=1400 audit(1793668063.607:322): avc: denied { bind } for pid=1868 comm="syz.4.521" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 90.760845][ T654] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 90.770842][ T20] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 91.010832][ T654] usb 5-1: Using ep0 maxpacket: 16 [ 91.020813][ T20] usb 2-1: Using ep0 maxpacket: 16 [ 91.130846][ T654] usb 5-1: config 0 has an invalid interface number: 34 but max is 0 [ 91.140872][ T20] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 91.155089][ T654] usb 5-1: config 0 has no interface number 0 [ 91.170794][ T20] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 91.192691][ T654] usb 5-1: config 0 interface 34 altsetting 0 bulk endpoint 0xA has invalid maxpacket 1023 [ 91.207666][ T20] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 91.220819][ T654] usb 5-1: config 0 interface 34 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 80 [ 91.229541][ T1886] overlayfs: failed to clone lowerpath [ 91.240914][ T20] usb 2-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 91.260817][ T20] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 91.272009][ T20] usb 2-1: config 0 descriptor?? [ 91.311997][ T1890] 9pnet: Insufficient options for proto=fd [ 91.400891][ T654] usb 5-1: New USB device found, idVendor=0b95, idProduct=772a, bcdDevice=82.73 [ 91.421053][ T654] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 91.429082][ T654] usb 5-1: Product: syz [ 91.437076][ T654] usb 5-1: Manufacturer: syz [ 91.441784][ T654] usb 5-1: SerialNumber: syz [ 91.447695][ T654] usb 5-1: config 0 descriptor?? [ 91.470881][ T1876] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 91.478314][ T1876] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 91.692708][ T1876] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 91.699782][ T1876] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 91.721141][ T540] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 91.742307][ T20] microsoft 0003:045E:07DA.0002: unknown main item tag 0x0 [ 91.749613][ T20] microsoft 0003:045E:07DA.0002: unknown main item tag 0x0 [ 91.757691][ T20] microsoft 0003:045E:07DA.0002: unknown main item tag 0x0 [ 91.765260][ T20] microsoft 0003:045E:07DA.0002: unknown main item tag 0x0 [ 91.772668][ T20] microsoft 0003:045E:07DA.0002: unknown main item tag 0x0 [ 91.779934][ T20] microsoft 0003:045E:07DA.0002: unknown main item tag 0x0 [ 91.787382][ T20] microsoft 0003:045E:07DA.0002: unknown main item tag 0x0 [ 91.794786][ T20] microsoft 0003:045E:07DA.0002: unknown main item tag 0x0 [ 91.802239][ T20] microsoft 0003:045E:07DA.0002: unknown main item tag 0x0 [ 91.809507][ T20] microsoft 0003:045E:07DA.0002: unknown main item tag 0x0 [ 91.816948][ T20] microsoft 0003:045E:07DA.0002: unknown main item tag 0x0 [ 91.824352][ T20] microsoft 0003:045E:07DA.0002: unknown main item tag 0x0 [ 91.831739][ T20] microsoft 0003:045E:07DA.0002: unknown main item tag 0x0 [ 91.839001][ T20] microsoft 0003:045E:07DA.0002: unknown main item tag 0x0 [ 91.846556][ T20] microsoft 0003:045E:07DA.0002: unknown main item tag 0x0 [ 91.856474][ T20] input: HID 045e:07da as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/0003:045E:07DA.0002/input/input4 [ 91.868967][ T30] audit: type=1400 audit(1793668065.057:323): avc: denied { read } for pid=86 comm="acpid" name="event3" dev="devtmpfs" ino=733 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 91.892403][ T30] audit: type=1400 audit(1793668065.057:324): avc: denied { open } for pid=86 comm="acpid" path="/dev/input/event3" dev="devtmpfs" ino=733 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 91.916177][ T20] microsoft 0003:045E:07DA.0002: input,hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.1-1/input0 [ 91.930831][ T654] asix 5-1:0.34 (unnamed net_device) (uninitialized): invalid hw address, using random [ 91.940851][ T30] audit: type=1400 audit(1793668065.117:325): avc: denied { ioctl } for pid=86 comm="acpid" path="/dev/input/event3" dev="devtmpfs" ino=733 ioctlcmd=0x4520 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 91.965928][ T540] usb 1-1: Using ep0 maxpacket: 16 [ 91.973280][ T20] usb 2-1: USB disconnect, device number 6 [ 92.005742][ T1911] fido_id[1911]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.1/usb2/2-1/report_descriptor': No such file or directory [ 92.090757][ T540] usb 1-1: config 0 has an invalid interface number: 34 but max is 0 [ 92.098874][ T540] usb 1-1: config 0 has no interface number 0 [ 92.106759][ T540] usb 1-1: config 0 interface 34 altsetting 0 bulk endpoint 0xA has invalid maxpacket 1023 [ 92.116930][ T540] usb 1-1: config 0 interface 34 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 80 [ 92.280773][ T540] usb 1-1: New USB device found, idVendor=0b95, idProduct=772a, bcdDevice=82.73 [ 92.289869][ T540] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 92.299698][ T540] usb 1-1: Product: syz [ 92.304525][ T540] usb 1-1: Manufacturer: syz [ 92.309227][ T540] usb 1-1: SerialNumber: syz [ 92.314784][ T540] usb 1-1: config 0 descriptor?? [ 92.330828][ T1906] raw-gadget.2 gadget: fail, usb_ep_enable returned -22 [ 92.337818][ T1906] raw-gadget.2 gadget: fail, usb_ep_enable returned -22 [ 92.552120][ T1906] raw-gadget.2 gadget: fail, usb_ep_enable returned -22 [ 92.559143][ T1906] raw-gadget.2 gadget: fail, usb_ep_enable returned -22 [ 92.580664][ T654] asix 5-1:0.34 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71 [ 92.591307][ T654] asix 5-1:0.34 (unnamed net_device) (uninitialized): Failed to write GPIO value 0x0080: ffffffb9 [ 92.630697][ T654] asix: probe of 5-1:0.34 failed with error -71 [ 92.648098][ T654] usb 5-1: USB disconnect, device number 4 [ 92.780691][ T540] asix 1-1:0.34 (unnamed net_device) (uninitialized): invalid hw address, using random [ 92.790634][ T307] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 93.029561][ T1919] 9pnet: Insufficient options for proto=fd [ 93.035679][ T307] usb 2-1: Using ep0 maxpacket: 32 [ 93.160627][ T307] usb 2-1: too many endpoints for config 0 interface 0 altsetting 5: 146, using maximum allowed: 30 [ 93.180641][ T307] usb 2-1: config 0 interface 0 altsetting 5 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 93.200548][ T307] usb 2-1: config 0 interface 0 altsetting 5 has 1 endpoint descriptor, different from the interface descriptor's value: 146 [ 93.230798][ T307] usb 2-1: config 0 interface 0 has no altsetting 0 [ 93.240577][ T307] usb 2-1: New USB device found, idVendor=046d, idProduct=c087, bcdDevice= 0.00 [ 93.259847][ T307] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 93.284592][ T307] usb 2-1: config 0 descriptor?? [ 93.430768][ T540] asix 1-1:0.34 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71 [ 93.447568][ T540] asix 1-1:0.34 (unnamed net_device) (uninitialized): Failed to write GPIO value 0x00b0: ffffffb9 [ 93.500738][ T540] asix: probe of 1-1:0.34 failed with error -71 [ 93.521560][ T540] usb 1-1: USB disconnect, device number 8 [ 93.763409][ T307] input: HID 046d:c087 as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/0003:046D:C087.0003/input/input5 [ 93.853625][ T307] logitech-hidpp-device 0003:046D:C087.0003: input,hiddev96,hidraw0: USB HID v0.00 Device [HID 046d:c087] on usb-dummy_hcd.1-1/input0 [ 93.971674][ T307] usb 2-1: USB disconnect, device number 7 [ 94.051307][ T30] audit: type=1400 audit(1793668067.238:326): avc: denied { bind } for pid=1946 comm="syz.4.555" laddr=fe80::9cb5:63ff:feac:2fd0 lport=58 faddr=ff02::1 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 94.610425][ T311] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 94.781723][ T307] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 94.860384][ T311] usb 5-1: Using ep0 maxpacket: 16 [ 94.980367][ T311] usb 5-1: config 0 has an invalid interface number: 34 but max is 0 [ 94.998780][ T311] usb 5-1: config 0 has no interface number 0 [ 95.005115][ T311] usb 5-1: config 0 interface 34 altsetting 0 bulk endpoint 0xA has invalid maxpacket 1023 [ 95.025290][ T311] usb 5-1: config 0 interface 34 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 80 [ 95.190509][ T307] usb 2-1: unable to get BOS descriptor or descriptor too short [ 95.200364][ T311] usb 5-1: New USB device found, idVendor=0b95, idProduct=772a, bcdDevice=82.73 [ 95.219584][ T311] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 95.228224][ T311] usb 5-1: Product: syz [ 95.232595][ T311] usb 5-1: Manufacturer: syz [ 95.237224][ T311] usb 5-1: SerialNumber: syz [ 95.242823][ T311] usb 5-1: config 0 descriptor?? [ 95.262888][ T1973] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 95.269979][ T1973] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 95.280364][ T307] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 95.293387][ T307] usb 2-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 95.302675][ T307] usb 2-1: too many endpoints for config 1 interface 1 altsetting 76: 188, using maximum allowed: 30 [ 95.313753][ T307] usb 2-1: config 1 interface 1 altsetting 76 has 0 endpoint descriptors, different from the interface descriptor's value: 188 [ 95.327112][ T307] usb 2-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 0, changing to 7 [ 95.338127][ T307] usb 2-1: config 1 interface 1 has no altsetting 0 [ 95.370669][ T30] kauditd_printk_skb: 5 callbacks suppressed [ 95.370683][ T30] audit: type=1400 audit(1793668068.558:332): avc: denied { connect } for pid=2012 comm="syz.3.585" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 95.427215][ T30] audit: type=1400 audit(1793668068.588:333): avc: denied { write } for pid=2012 comm="syz.3.585" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 95.488985][ T1973] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 95.500963][ T1973] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 95.590381][ T307] usb 2-1: string descriptor 0 read error: -22 [ 95.596851][ T307] usb 2-1: New USB device found, idVendor=21b4, idProduct=0081, bcdDevice= 0.40 [ 95.606593][ T307] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 95.730309][ T311] asix 5-1:0.34 (unnamed net_device) (uninitialized): invalid hw address, using random [ 95.810306][ T796] usb 1-1: new high-speed USB device number 9 using dummy_hcd [ 96.170285][ T796] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 96.190168][ T796] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 96.199959][ T796] usb 1-1: New USB device found, idVendor=1e7d, idProduct=30d4, bcdDevice= 0.01 [ 96.210776][ T796] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 96.231386][ T796] usb 1-1: config 0 descriptor?? [ 96.380211][ T311] asix 5-1:0.34 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71 [ 96.390426][ T311] asix 5-1:0.34 (unnamed net_device) (uninitialized): Failed to write GPIO value 0x00b0: ffffffb9 [ 96.430209][ T311] asix: probe of 5-1:0.34 failed with error -71 [ 96.443924][ T311] usb 5-1: USB disconnect, device number 5 [ 96.711238][ T796] arvo 0003:1E7D:30D4.0004: unknown main item tag 0x0 [ 96.718580][ T796] arvo 0003:1E7D:30D4.0004: unknown main item tag 0x0 [ 96.725689][ T796] arvo 0003:1E7D:30D4.0004: unknown main item tag 0x0 [ 96.739772][ T796] arvo 0003:1E7D:30D4.0004: unknown main item tag 0x0 [ 96.746962][ T796] arvo 0003:1E7D:30D4.0004: unknown main item tag 0x0 [ 96.753973][ T796] arvo 0003:1E7D:30D4.0004: unknown main item tag 0x0 [ 96.762974][ T796] arvo 0003:1E7D:30D4.0004: unknown main item tag 0x0 [ 96.780620][ T796] arvo 0003:1E7D:30D4.0004: hidraw0: USB HID v0.00 Device [HID 1e7d:30d4] on usb-dummy_hcd.0-1/input0 [ 96.930163][ T796] arvo 0003:1E7D:30D4.0004: couldn't init struct arvo_device [ 96.937612][ T796] arvo 0003:1E7D:30D4.0004: couldn't install keyboard [ 96.972474][ T796] arvo: probe of 0003:1E7D:30D4.0004 failed with error -71 [ 96.981155][ T796] usb 1-1: USB disconnect, device number 9 [ 97.006053][ T2050] fido_id[2050]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.0/usb1/report_descriptor': No such file or directory [ 97.240063][ T311] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 97.444970][ T30] audit: type=1400 audit(1793668070.628:334): avc: denied { append } for pid=2059 comm="syz.0.605" name="001" dev="devtmpfs" ino=178 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 97.495775][ T2064] binder: 2063:2064 ioctl c0306201 200000000100 returned -14 [ 97.519231][ T2066] input: syz0 as /devices/virtual/input/input6 [ 97.623505][ T2071] FAULT_INJECTION: forcing a failure. [ 97.623505][ T2071] name failslab, interval 1, probability 0, space 0, times 0 [ 97.636450][ T2071] CPU: 1 PID: 2071 Comm: syz.0.610 Not tainted syzkaller #0 [ 97.643790][ T2071] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/15/2026 [ 97.653872][ T2071] Call Trace: [ 97.657169][ T2071] [ 97.660116][ T2071] __dump_stack+0x21/0x30 [ 97.664476][ T2071] dump_stack_lvl+0x110/0x170 [ 97.669179][ T2071] ? show_regs_print_info+0x20/0x20 [ 97.674430][ T2071] ? do_sys_openat2+0x15e/0x7f0 [ 97.679306][ T2071] ? entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 97.685410][ T2071] dump_stack+0x15/0x20 [ 97.689600][ T2071] should_fail+0x3ab/0x500 [ 97.694045][ T2071] __should_failslab+0xa4/0xe0 [ 97.698877][ T2071] should_failslab+0x9/0x20 [ 97.703425][ T2071] slab_pre_alloc_hook+0x39/0xd0 [ 97.708396][ T2071] kmem_cache_alloc_trace+0x48/0x270 [ 97.713714][ T2071] ? selinux_sk_alloc_security+0x7e/0x1a0 [ 97.719550][ T2071] selinux_sk_alloc_security+0x7e/0x1a0 [ 97.725127][ T2071] security_sk_alloc+0x72/0xa0 [ 97.729918][ T2071] sk_prot_alloc+0x108/0x320 [ 97.734536][ T2071] sk_alloc+0x38/0x430 [ 97.738632][ T2071] tun_chr_open+0x7a/0x540 [ 97.743075][ T2071] ? tun_chr_compat_ioctl+0x30/0x30 [ 97.748325][ T2071] misc_open+0x325/0x3a0 [ 97.752602][ T2071] chrdev_open+0x585/0x5f0 [ 97.757051][ T2071] ? cd_forget+0x170/0x170 [ 97.761505][ T2071] ? fsnotify_perm+0x3e9/0x5b0 [ 97.766308][ T2071] ? cd_forget+0x170/0x170 [ 97.770757][ T2071] do_dentry_open+0x82a/0x1010 [ 97.775563][ T2071] vfs_open+0x73/0x80 [ 97.779570][ T2071] path_openat+0x26e6/0x2f80 [ 97.784188][ T2071] ? __kasan_slab_alloc+0xc9/0xe0 [ 97.789238][ T2071] ? slab_post_alloc_hook+0x4f/0x2b0 [ 97.794557][ T2071] ? __x64_sys_openat+0x136/0x160 [ 97.799702][ T2071] ? x64_sys_call+0x219/0x9a0 [ 97.804411][ T2071] ? do_syscall_64+0x4c/0xa0 [ 97.809029][ T2071] ? do_filp_open+0x400/0x400 [ 97.813742][ T2071] do_filp_open+0x1df/0x400 [ 97.818272][ T2071] ? vfs_tmpfile+0x2d0/0x2d0 [ 97.822901][ T2071] do_sys_openat2+0x15e/0x7f0 [ 97.827600][ T2071] ? __se_sys_futex+0x135/0x330 [ 97.832478][ T2071] ? do_sys_open+0xe0/0xe0 [ 97.836918][ T2071] ? __x64_sys_futex+0x100/0x100 [ 97.840362][ T311] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 97.841871][ T2071] ? ksys_write+0x1fa/0x260 [ 97.856452][ T2071] __x64_sys_openat+0x136/0x160 [ 97.860025][ T311] usb 5-1: config 0 has no interfaces? [ 97.861348][ T2071] x64_sys_call+0x219/0x9a0 [ 97.871314][ T2071] do_syscall_64+0x4c/0xa0 [ 97.875769][ T2071] ? clear_bhb_loop+0x50/0xa0 [ 97.880486][ T2071] ? clear_bhb_loop+0x50/0xa0 [ 97.885189][ T2071] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 97.891112][ T2071] RIP: 0033:0x7f00408f3b19 [ 97.895552][ T2071] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 97.915193][ T2071] RSP: 002b:00007f003f34b028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 97.923646][ T2071] RAX: ffffffffffffffda RBX: 00007f0040b79fa0 RCX: 00007f00408f3b19 [ 97.931642][ T2071] RDX: 0000000000000000 RSI: 0000200000000580 RDI: ffffffffffffff9c [ 97.939648][ T2071] RBP: 00007f004098baf8 R08: 0000000000000000 R09: 0000000000000000 [ 97.947642][ T2071] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 97.955648][ T2071] R13: 00007f0040b7a038 R14: 00007f0040b79fa0 R15: 00007fff29124418 [ 97.963651][ T2071] [ 98.070550][ T311] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 1.00 [ 98.079743][ T311] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 98.100687][ T311] usb 5-1: Product: syz [ 98.109250][ T311] usb 5-1: Manufacturer: syz [ 98.119425][ T311] usb 5-1: SerialNumber: syz [ 98.129804][ T311] usb 5-1: config 0 descriptor?? [ 98.239223][ T311] usb 2-1: USB disconnect, device number 8 [ 98.267403][ T30] audit: type=1400 audit(1793668071.448:335): avc: denied { mounton } for pid=2085 comm="syz-executor" path="/" dev="sda1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:root_t tclass=dir permissive=1 [ 98.310613][ T30] audit: type=1400 audit(1793668071.458:336): avc: denied { create } for pid=2085 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 98.357263][ T2085] bridge0: port 1(bridge_slave_0) entered blocking state [ 98.364728][ T2085] bridge0: port 1(bridge_slave_0) entered disabled state [ 98.372444][ T2085] device bridge_slave_0 entered promiscuous mode [ 98.379595][ T2085] bridge0: port 2(bridge_slave_1) entered blocking state [ 98.387010][ T2085] bridge0: port 2(bridge_slave_1) entered disabled state [ 98.394641][ T2085] device bridge_slave_1 entered promiscuous mode [ 98.394779][ T654] usb 5-1: USB disconnect, device number 6 [ 98.486117][ T2085] bridge0: port 2(bridge_slave_1) entered blocking state [ 98.493231][ T2085] bridge0: port 2(bridge_slave_1) entered forwarding state [ 98.500571][ T2085] bridge0: port 1(bridge_slave_0) entered blocking state [ 98.507633][ T2085] bridge0: port 1(bridge_slave_0) entered forwarding state [ 98.534909][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 98.543600][ T45] bridge0: port 1(bridge_slave_0) entered disabled state [ 98.552285][ T45] bridge0: port 2(bridge_slave_1) entered disabled state [ 98.571141][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 98.579430][ T45] bridge0: port 1(bridge_slave_0) entered blocking state [ 98.586509][ T45] bridge0: port 1(bridge_slave_0) entered forwarding state [ 98.594793][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 98.603793][ T45] bridge0: port 2(bridge_slave_1) entered blocking state [ 98.610870][ T45] bridge0: port 2(bridge_slave_1) entered forwarding state [ 98.618507][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 98.634157][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 98.649410][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 98.658359][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 98.667703][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 98.675716][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 98.684524][ T2085] device veth0_vlan entered promiscuous mode [ 98.696983][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 98.706786][ T2085] device veth1_macvtap entered promiscuous mode [ 98.719512][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 98.733061][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 98.746550][ T30] audit: type=1400 audit(1793668071.928:337): avc: denied { mount } for pid=2085 comm="syz-executor" name="/" dev="tmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 98.779928][ T30] audit: type=1400 audit(1793668071.958:338): avc: denied { mounton } for pid=2085 comm="syz-executor" path="/root/syzkaller.dUM2r8/syz-tmp/newroot/sys/kernel/debug" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=dir permissive=1 [ 98.830651][ T311] usb 2-1: new high-speed USB device number 9 using dummy_hcd [ 98.993573][ T2121] kvm: pic: level sensitive irq not supported [ 99.059991][ T540] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 99.229910][ T311] usb 2-1: config 0 interface 0 altsetting 8 endpoint 0x81 has invalid wMaxPacketSize 0 [ 99.239672][ T311] usb 2-1: config 0 interface 0 altsetting 8 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 99.253750][ T311] usb 2-1: config 0 interface 0 has no altsetting 0 [ 99.260869][ T311] usb 2-1: New USB device found, idVendor=1b1c, idProduct=0a55, bcdDevice= 0.00 [ 99.270114][ T311] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 99.281974][ T311] usb 2-1: config 0 descriptor?? [ 99.449854][ T540] usb 6-1: config 1 interface 0 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 64 [ 99.459871][ T540] usb 6-1: config 1 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 64 [ 99.469667][ T540] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 99.487597][ T540] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x83 has invalid wMaxPacketSize 0 [ 99.498739][ T540] usb 6-1: New USB device found, idVendor=067b, idProduct=2303, bcdDevice= 1.00 [ 99.508073][ T540] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 99.540005][ T2100] raw-gadget.1 gadget: fail, usb_ep_enable returned -22 [ 99.547174][ T2100] raw-gadget.1 gadget: fail, usb_ep_enable returned -22 [ 99.560586][ T540] pl2303 6-1:1.0: pl2303 converter detected [ 99.567949][ T540] usb 6-1: pl2303 converter now attached to ttyUSB0 [ 99.771279][ T311] hid-generic 0003:1B1C:0A55.0005: collection stack underflow [ 99.782429][ T311] hid-generic 0003:1B1C:0A55.0005: item 0 1 0 12 parsing failed [ 99.790644][ T311] hid-generic: probe of 0003:1B1C:0A55.0005 failed with error -22 [ 99.944675][ T30] audit: type=1400 audit(1793668073.128:339): avc: denied { sys_admin } for pid=2144 comm="syz.4.643" capability=21 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=cap_userns permissive=1 [ 99.999603][ T540] usb 2-1: USB disconnect, device number 9 [ 100.026812][ T2153] capability: warning: `syz.3.647' uses 32-bit capabilities (legacy support in use) [ 100.329891][ T2161] pl2303 ttyUSB0: pl2303_set_line_request - failed: -110 [ 100.349744][ T2161] pl2303 6-1:1.0: pl2303_vendor_read - failed to read [000a]: -32 [ 100.369718][ T2161] pl2303 ttyUSB0: failed to submit interrupt urb: -90 [ 100.411456][ T540] usb 6-1: USB disconnect, device number 2 [ 100.420427][ T540] pl2303 ttyUSB0: pl2303 converter now disconnected from ttyUSB0 [ 100.427366][ T2186] binder: 2185:2186 ioctl 4018620d 0 returned -22 [ 100.430507][ T540] pl2303 6-1:1.0: device disconnected [ 100.447803][ T2186] binder: 2185:2186 ioctl c0306201 200000000100 returned -14 [ 100.611929][ T2200] set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 100.629414][ T30] audit: type=1400 audit(1793668073.808:340): avc: denied { mounton } for pid=2204 comm="syz.3.670" path="/file0" dev="ramfs" ino=23211 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:ramfs_t tclass=file permissive=1 [ 100.652074][ T2205] ./file0: Can't open blockdev [ 100.799706][ T307] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 101.049611][ T307] usb 5-1: Using ep0 maxpacket: 32 [ 101.179614][ T307] usb 5-1: config 0 has an invalid interface number: 188 but max is 0 [ 101.187941][ T307] usb 5-1: config 0 has no interface number 0 [ 101.195078][ T307] usb 5-1: config 0 interface 188 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 32 [ 101.305976][ T2245] FAULT_INJECTION: forcing a failure. [ 101.305976][ T2245] name failslab, interval 1, probability 0, space 0, times 0 [ 101.320581][ T2245] CPU: 1 PID: 2245 Comm: syz.5.686 Not tainted syzkaller #0 [ 101.327908][ T2245] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/15/2026 [ 101.337987][ T2245] Call Trace: [ 101.341292][ T2245] [ 101.344240][ T2245] __dump_stack+0x21/0x30 [ 101.348603][ T2245] dump_stack_lvl+0x110/0x170 [ 101.353305][ T2245] ? show_regs_print_info+0x20/0x20 [ 101.358539][ T2245] dump_stack+0x15/0x20 [ 101.362745][ T2245] should_fail+0x3ab/0x500 [ 101.367192][ T2245] __should_failslab+0xa4/0xe0 [ 101.371984][ T2245] should_failslab+0x9/0x20 [ 101.376523][ T2245] slab_pre_alloc_hook+0x39/0xd0 [ 101.381499][ T2245] kmem_cache_alloc_trace+0x48/0x270 [ 101.386828][ T2245] ? selinux_sk_alloc_security+0x7e/0x1a0 [ 101.392585][ T2245] selinux_sk_alloc_security+0x7e/0x1a0 [ 101.398183][ T2245] security_sk_alloc+0x72/0xa0 [ 101.402983][ T2245] sk_prot_alloc+0x108/0x320 [ 101.407603][ T2245] sk_alloc+0x38/0x430 [ 101.411709][ T2245] unix_create1+0xb4/0x610 [ 101.416156][ T2245] unix_create+0x149/0x200 [ 101.420603][ T2245] __sock_create+0x38d/0x7a0 [ 101.425249][ T2245] __sys_socketpair+0x218/0x590 [ 101.430157][ T2245] __x64_sys_socketpair+0x9b/0xb0 [ 101.435234][ T2245] x64_sys_call+0x36/0x9a0 [ 101.439684][ T2245] do_syscall_64+0x4c/0xa0 [ 101.444141][ T2245] ? clear_bhb_loop+0x50/0xa0 [ 101.448885][ T2245] ? clear_bhb_loop+0x50/0xa0 [ 101.453600][ T2245] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 101.459529][ T2245] RIP: 0033:0x7f8833911b19 [ 101.463967][ T2245] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 101.483621][ T2245] RSP: 002b:00007f8832369028 EFLAGS: 00000246 ORIG_RAX: 0000000000000035 [ 101.492099][ T2245] RAX: ffffffffffffffda RBX: 00007f8833b97fa0 RCX: 00007f8833911b19 [ 101.500101][ T2245] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 0000000000000001 [ 101.508108][ T2245] RBP: 00007f88339a9af8 R08: 0000000000000000 R09: 0000000000000000 [ 101.516128][ T2245] R10: 0000200000000240 R11: 0000000000000246 R12: 0000000000000000 [ 101.524136][ T2245] R13: 00007f8833b98038 R14: 00007f8833b97fa0 R15: 00007ffd7dca0938 [ 101.532140][ T2245] [ 101.552142][ T307] usb 5-1: New USB device found, idVendor=17ef, idProduct=7203, bcdDevice=2e.36 [ 101.569036][ T2255] incfs_lookup_dentry err:-40 [ 101.573931][ T307] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 101.598971][ T307] usb 5-1: Product: syz [ 101.608106][ T307] usb 5-1: Manufacturer: syz [ 101.615343][ T307] usb 5-1: SerialNumber: syz [ 101.650213][ T307] usb 5-1: config 0 descriptor?? [ 101.679661][ T2191] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 101.709284][ T2276] netlink: 8 bytes leftover after parsing attributes in process `syz.3.700'. [ 101.721191][ T2276] netlink: 8 bytes leftover after parsing attributes in process `syz.3.700'. [ 101.730485][ T2276] netlink: 4 bytes leftover after parsing attributes in process `syz.3.700'. [ 101.746679][ T2276] netlink: 8 bytes leftover after parsing attributes in process `syz.3.700'. [ 101.901779][ T2191] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 101.939584][ T540] usb 2-1: new high-speed USB device number 10 using dummy_hcd [ 101.961597][ T30] audit: type=1400 audit(1793668331.151:341): avc: denied { bind } for pid=2306 comm="syz.5.715" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 101.980962][ T30] audit: type=1400 audit(1793668331.151:342): avc: denied { write } for pid=2306 comm="syz.5.715" name="ppp" dev="devtmpfs" ino=154 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 102.004145][ T30] audit: type=1400 audit(1793668331.151:343): avc: denied { open } for pid=2306 comm="syz.5.715" path="/dev/ppp" dev="devtmpfs" ino=154 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 102.027239][ T30] audit: type=1400 audit(1793668331.151:344): avc: denied { ioctl } for pid=2306 comm="syz.5.715" path="/dev/ppp" dev="devtmpfs" ino=154 ioctlcmd=0x7438 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 102.129675][ T307] asix 5-1:0.188 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71 [ 102.145881][ T307] asix: probe of 5-1:0.188 failed with error -71 [ 102.169405][ T307] usb 5-1: USB disconnect, device number 7 [ 102.179637][ T540] usb 2-1: Using ep0 maxpacket: 32 [ 102.299756][ T540] usb 2-1: too many endpoints for config 0 interface 0 altsetting 5: 146, using maximum allowed: 30 [ 102.310761][ T540] usb 2-1: config 0 interface 0 altsetting 5 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 102.321744][ T540] usb 2-1: config 0 interface 0 altsetting 5 has 1 endpoint descriptor, different from the interface descriptor's value: 146 [ 102.334900][ T540] usb 2-1: config 0 interface 0 has no altsetting 0 [ 102.341566][ T540] usb 2-1: New USB device found, idVendor=046d, idProduct=c087, bcdDevice= 0.00 [ 102.350711][ T540] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 102.363023][ T540] usb 2-1: config 0 descriptor?? [ 102.519607][ T311] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 102.642465][ T2318] device-mapper: table: 253:2: crypt: Invalid number of feature args [ 102.651466][ T2318] device-mapper: ioctl: error adding target to table [ 102.810033][ T2327] kvm [2326]: vcpu0, guest rIP: 0x1db disabled perfctr wrmsr: 0xc2 data 0xb00061000000ed [ 102.842890][ T540] input: HID 046d:c087 as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/0003:046D:C087.0006/input/input7 [ 102.948352][ T2327] kvm [2326]: vcpu0, guest rIP: 0x1db disabled perfctr wrmsr: 0xc2 data 0xb00061000095f4 [ 102.950031][ T311] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 102.972915][ T540] logitech-hidpp-device 0003:046D:C087.0006: input,hiddev96,hidraw0: USB HID v0.00 Device [HID 046d:c087] on usb-dummy_hcd.1-1/input0 [ 103.009598][ T311] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 103.019384][ T311] usb 6-1: New USB device found, idVendor=1e7d, idProduct=2d5a, bcdDevice= 0.00 [ 103.040861][ T311] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 103.045465][ T307] usb 2-1: USB disconnect, device number 10 [ 103.060292][ T2327] kvm [2326]: vcpu0, guest rIP: 0x1db disabled perfctr wrmsr: 0xc1 data 0xb000610000cadd [ 103.080391][ T311] usb 6-1: config 0 descriptor?? [ 103.087014][ T2333] fido_id[2333]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.1/usb2/report_descriptor': No such file or directory [ 103.105833][ T2327] kvm [2326]: vcpu0, guest rIP: 0x1db disabled perfctr wrmsr: 0xc1 data 0xb00061000000f9 [ 103.143461][ T2327] kvm [2326]: vcpu0, guest rIP: 0x1db disabled perfctr wrmsr: 0xc2 data 0xb00061000000d9 [ 103.394880][ T2351] kvm [2350]: vcpu0, guest rIP: 0x1db disabled perfctr wrmsr: 0xc2 data 0xb0006100002653 [ 103.572534][ T311] savu 0003:1E7D:2D5A.0007: hidraw0: USB HID v0.00 Device [HID 1e7d:2d5a] on usb-dummy_hcd.5-1/input0 [ 103.572937][ T2357] binder: 2356:2357 ioctl c0306201 0 returned -14 [ 103.709633][ T307] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 103.761210][ T30] audit: type=1400 audit(1793668332.951:345): avc: denied { read } for pid=2376 comm="syz.1.744" name="snapshot" dev="devtmpfs" ino=90 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 103.804992][ T30] audit: type=1400 audit(1793668332.951:346): avc: denied { open } for pid=2376 comm="syz.1.744" path="/dev/snapshot" dev="devtmpfs" ino=90 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 103.842551][ T2383] binder: 2382:2383 ioctl c0306201 0 returned -14 [ 103.862615][ T2385] /dev/loop0: Can't open blockdev [ 103.880942][ T796] usb 6-1: USB disconnect, device number 3 [ 103.892336][ T796] ================================================================== [ 103.900553][ T796] BUG: KASAN: use-after-free in roccat_disconnect+0x22d/0x240 [ 103.908051][ T796] Read of size 4 at addr ffff88810dfa2c08 by task kworker/1:6/796 [ 103.915965][ T796] [ 103.918314][ T796] CPU: 1 PID: 796 Comm: kworker/1:6 Not tainted syzkaller #0 [ 103.925708][ T796] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/15/2026 [ 103.935781][ T796] Workqueue: usb_hub_wq hub_event [ 103.940842][ T796] Call Trace: [ 103.944159][ T796] [ 103.947110][ T796] __dump_stack+0x21/0x30 [ 103.951467][ T796] dump_stack_lvl+0x110/0x170 [ 103.956202][ T796] ? show_regs_print_info+0x20/0x20 [ 103.961480][ T796] ? load_image+0x3f0/0x3f0 [ 103.966008][ T796] ? waiting_for_supplier_show+0xa0/0xa0 [ 103.971667][ T796] print_address_description+0x7f/0x2c0 [ 103.977240][ T796] ? roccat_disconnect+0x22d/0x240 [ 103.982431][ T796] kasan_report+0x10f/0x150 [ 103.986994][ T796] ? roccat_disconnect+0x22d/0x240 [ 103.992134][ T796] __asan_report_load4_noabort+0x14/0x20 [ 103.997804][ T796] roccat_disconnect+0x22d/0x240 [ 104.002771][ T796] ? savu_probe+0x360/0x360 [ 104.007313][ T796] savu_remove+0xec/0x170 [ 104.011692][ T796] hid_device_remove+0xba/0x170 [ 104.016591][ T796] ? hid_device_probe+0x390/0x390 [ 104.021663][ T796] device_release_driver_internal+0x4e8/0x7c0 [ 104.027761][ T796] device_release_driver+0x19/0x20 [ 104.032915][ T796] bus_remove_device+0x2df/0x340 [ 104.037888][ T796] device_del+0x62e/0xe20 [ 104.042256][ T796] ? kill_device+0xd0/0xd0 [ 104.046707][ T796] ? __kasan_check_write+0x14/0x20 [ 104.051859][ T796] ? _raw_spin_lock_irq+0x95/0xf0 [ 104.056916][ T796] ? _raw_spin_lock_irqsave+0x130/0x130 [ 104.062492][ T796] hid_destroy_device+0x6a/0x110 [ 104.067509][ T796] usbhid_disconnect+0x9f/0xc0 [ 104.072302][ T796] usb_unbind_interface+0x212/0x8a0 [ 104.077538][ T796] ? kernfs_remove_by_name_ns+0x120/0x160 [ 104.083296][ T796] ? usb_driver_release_interface+0x1b0/0x1b0 [ 104.089394][ T796] device_release_driver_internal+0x536/0x7c0 [ 104.095503][ T796] device_release_driver+0x19/0x20 [ 104.100644][ T796] bus_remove_device+0x2df/0x340 [ 104.105616][ T796] device_del+0x62e/0xe20 [ 104.109979][ T796] ? kill_device+0xd0/0xd0 [ 104.114452][ T796] ? device_unregister+0x27/0x40 [ 104.119419][ T796] usb_disable_device+0x3a8/0x750 [ 104.124508][ T796] usb_disconnect+0x32d/0x870 [ 104.129220][ T796] hub_event+0x19b0/0x43f0 [ 104.133671][ T796] ? insert_work+0x232/0x310 [ 104.138304][ T796] ? hub_post_resume+0x120/0x120 [ 104.143443][ T796] ? __kasan_check_write+0x14/0x20 [ 104.148745][ T796] ? _raw_spin_lock_irq+0x95/0xf0 [ 104.153801][ T796] ? _raw_spin_lock_irqsave+0x130/0x130 [ 104.159475][ T796] ? kernfs_notify+0x184/0x1c0 [ 104.164274][ T796] process_one_work+0x6c8/0xbb0 [ 104.169171][ T796] worker_thread+0xaa0/0x1250 [ 104.173883][ T796] kthread+0x3f5/0x4f0 [ 104.177978][ T796] ? worker_clr_flags+0x190/0x190 [ 104.183041][ T796] ? kthread_blkcg+0xd0/0xd0 [ 104.187661][ T796] ret_from_fork+0x1f/0x30 [ 104.192112][ T796] [ 104.195148][ T796] [ 104.197489][ T796] Allocated by task 311: [ 104.201756][ T796] __kasan_kmalloc+0xd4/0x100 [ 104.206456][ T796] kmem_cache_alloc_trace+0x119/0x270 [ 104.211874][ T796] roccat_connect+0x5c/0x4b0 [ 104.216484][ T796] savu_probe+0x1ba/0x360 [ 104.220844][ T796] hid_device_probe+0x28d/0x390 [ 104.225723][ T796] really_probe+0x27d/0x970 [ 104.230251][ T796] __driver_probe_device+0x193/0x270 [ 104.235569][ T796] driver_probe_device+0x54/0x3e0 [ 104.240630][ T796] __device_attach_driver+0x2a6/0x460 [ 104.246031][ T796] bus_for_each_drv+0x184/0x210 [ 104.250910][ T796] __device_attach+0x2b0/0x420 [ 104.255698][ T796] device_initial_probe+0x1a/0x20 [ 104.260744][ T796] bus_probe_device+0xc0/0x1e0 [ 104.265532][ T796] device_add+0xaef/0xe90 [ 104.269887][ T796] hid_add_device+0x349/0x4b0 [ 104.274597][ T796] usbhid_probe+0xb93/0xf30 [ 104.279127][ T796] usb_probe_interface+0x60f/0xb20 [ 104.284271][ T796] really_probe+0x27d/0x970 [ 104.288808][ T796] __driver_probe_device+0x193/0x270 [ 104.294140][ T796] driver_probe_device+0x54/0x3e0 [ 104.299191][ T796] __device_attach_driver+0x2a6/0x460 [ 104.304595][ T796] bus_for_each_drv+0x184/0x210 [ 104.309469][ T796] __device_attach+0x2b0/0x420 [ 104.314264][ T796] device_initial_probe+0x1a/0x20 [ 104.319320][ T796] bus_probe_device+0xc0/0x1e0 [ 104.324131][ T796] device_add+0xaef/0xe90 [ 104.328494][ T796] usb_set_configuration+0x1a01/0x1f70 [ 104.333975][ T796] usb_generic_driver_probe+0x91/0x150 [ 104.339461][ T796] usb_probe_device+0x143/0x250 [ 104.344437][ T796] really_probe+0x27d/0x970 [ 104.348996][ T796] __driver_probe_device+0x193/0x270 [ 104.354315][ T796] driver_probe_device+0x54/0x3e0 [ 104.359379][ T796] __device_attach_driver+0x2a6/0x460 [ 104.364781][ T796] bus_for_each_drv+0x184/0x210 [ 104.369661][ T796] __device_attach+0x2b0/0x420 [ 104.374457][ T796] device_initial_probe+0x1a/0x20 [ 104.379511][ T796] bus_probe_device+0xc0/0x1e0 [ 104.384305][ T796] device_add+0xaef/0xe90 [ 104.388662][ T796] usb_new_device+0xa1f/0x1720 [ 104.393462][ T796] hub_event+0x291b/0x43f0 [ 104.397935][ T796] process_one_work+0x6c8/0xbb0 [ 104.402817][ T796] worker_thread+0xaa0/0x1250 [ 104.407525][ T796] kthread+0x3f5/0x4f0 [ 104.411624][ T796] ret_from_fork+0x1f/0x30 [ 104.416090][ T796] [ 104.418456][ T796] Freed by task 2313: [ 104.422600][ T796] kasan_set_track+0x4a/0x70 [ 104.427238][ T796] kasan_set_free_info+0x23/0x40 [ 104.432204][ T796] ____kasan_slab_free+0x125/0x160 [ 104.437340][ T796] __kasan_slab_free+0x11/0x20 [ 104.442148][ T796] slab_free_freelist_hook+0xc2/0x190 [ 104.447559][ T796] kfree+0xc4/0x270 [ 104.451397][ T796] roccat_free_device+0x27b/0x280 [ 104.456453][ T796] roccat_release+0x2ae/0x370 [ 104.461158][ T796] __fput+0x22b/0x900 [ 104.465168][ T796] ____fput+0x15/0x20 [ 104.469182][ T796] task_work_run+0x127/0x190 [ 104.473798][ T796] exit_to_user_mode_loop+0xd0/0xe0 [ 104.479029][ T796] exit_to_user_mode_prepare+0x87/0xd0 [ 104.484614][ T796] syscall_exit_to_user_mode+0x1a/0x30 [ 104.490104][ T796] do_syscall_64+0x58/0xa0 [ 104.494549][ T796] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 104.500465][ T796] [ 104.502807][ T796] The buggy address belongs to the object at ffff88810dfa2c00 [ 104.502807][ T796] which belongs to the cache kmalloc-512 of size 512 [ 104.516862][ T796] The buggy address is located 8 bytes inside of [ 104.516862][ T796] 512-byte region [ffff88810dfa2c00, ffff88810dfa2e00) [ 104.529975][ T796] The buggy address belongs to the page: [ 104.535632][ T796] page:ffffea000437e800 refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x10dfa0 [ 104.545879][ T796] head:ffffea000437e800 order:2 compound_mapcount:0 compound_pincount:0 [ 104.554213][ T796] flags: 0x4000000000010200(slab|head|zone=1) [ 104.560315][ T796] raw: 4000000000010200 ffffea00042bcf00 0000000200000002 ffff888100042f00 [ 104.568907][ T796] raw: 0000000000000000 0000000000100010 00000001ffffffff 0000000000000000 [ 104.577578][ T796] page dumped because: kasan: bad access detected [ 104.583994][ T796] page_owner tracks the page as allocated [ 104.589718][ T796] page last allocated via order 2, migratetype Unmovable, gfp_mask 0xd20c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 90, ts 4964577441, free_ts 0 [ 104.607943][ T796] post_alloc_hook+0x192/0x1b0 [ 104.612815][ T796] prep_new_page+0x1c/0x110 [ 104.617333][ T796] get_page_from_freelist+0x2d42/0x2dd0 [ 104.622930][ T796] __alloc_pages+0x1a2/0x460 [ 104.627552][ T796] new_slab+0xa0/0x4d0 [ 104.631666][ T796] ___slab_alloc+0x3ac/0x840 [ 104.636290][ T796] __slab_alloc+0x49/0x90 [ 104.640635][ T796] __kmalloc_track_caller+0x169/0x2c0 [ 104.646032][ T796] __alloc_skb+0x210/0x730 [ 104.650478][ T796] alloc_skb_with_frags+0xa8/0x620 [ 104.655621][ T796] sock_alloc_send_pskb+0x87f/0x9a0 [ 104.660848][ T796] unix_dgram_sendmsg+0x6f3/0x19b0 [ 104.666101][ T796] __sys_sendto+0x46d/0x620 [ 104.670629][ T796] __x64_sys_sendto+0xe5/0x100 [ 104.675411][ T796] x64_sys_call+0x178/0x9a0 [ 104.679934][ T796] do_syscall_64+0x4c/0xa0 [ 104.684396][ T796] page_owner free stack trace missing [ 104.689774][ T796] [ 104.692110][ T796] Memory state around the buggy address: [ 104.697748][ T796] ffff88810dfa2b00: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 104.705815][ T796] ffff88810dfa2b80: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 104.713882][ T796] >ffff88810dfa2c00: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 104.721945][ T796] ^ [ 104.726280][ T796] ffff88810dfa2c80: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 104.734350][ T796] ffff88810dfa2d00: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 104.742412][ T796] ================================================================== [ 104.750471][ T796] Disabling lock debugging due to kernel taint [ 104.764553][ T30] audit: type=1400 audit(1793668333.951:347): avc: denied { read } for pid=83 comm="syslogd" name="log" dev="sda1" ino=2010 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:var_t tclass=lnk_file permissive=1 [ 104.798417][ T30] audit: type=1400 audit(1793668333.981:348): avc: denied { search } for pid=83 comm="syslogd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 104.819991][ T30] audit: type=1400 audit(1793668333.981:349): avc: denied { write } for pid=83 comm="syslogd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 104.939644][ T307] usb 5-1: config 0 interface 0 altsetting 8 endpoint 0x81 has invalid wMaxPacketSize 0 [ 104.949673][ T307] usb 5-1: config 0 interface 0 altsetting 8 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 104.963613][ T307] usb 5-1: config 0 interface 0 has no altsetting 0 [ 104.970481][ T307] usb 5-1: New USB device found, idVendor=1b1c, idProduct=0a55, bcdDevice= 0.00 [ 104.979749][ T307] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 105.003949][ T307] usb 5-1: config 0 descriptor?? [ 105.486519][ T307] hid-generic 0003:1B1C:0A55.0008: ignoring exceeding usage max [ 105.513941][ T307] hid-generic 0003:1B1C:0A55.0008: hidraw0: USB HID v0.00 Device [HID 1b1c:0a55] on usb-dummy_hcd.4-1/input0 [ 105.704400][ T311] usb 5-1: USB disconnect, device number 8