last executing test programs: 1m41.421506736s ago: executing program 0 (id=71): mkdirat(0xffffffffffffff9c, &(0x7f00000003c0)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000000400)='./dev\x00', &(0x7f0000000440)='devtmpfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000480)='./mnt\x00', 0x1ff) prctl$PR_SET_TAGGED_ADDR_CTRL(0x37, 0x1) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$binfmt_aout(r0, &(0x7f00000000c0)=ANY=[], 0xff2e) io_setup(0x4, &(0x7f0000000100)=0x0) io_submit(r1, 0x1, &(0x7f0000000140)=[&(0x7f0000000180)={0x0, 0x0, 0x0, 0x8, 0x0, r0, 0x0, 0x0, 0x8}]) ioctl$TIOCVHANGUP(r0, 0x5437, 0x0) r2 = socket$inet6(0xa, 0x80003, 0xff) setsockopt$inet6_int(r2, 0x29, 0x1e, &(0x7f0000000080)=0x4, 0x4) setsockopt$inet6_int(r2, 0x29, 0x16, &(0x7f0000000040)=0xfffffffe, 0x4) mount(&(0x7f0000000f40)=@filename='./dev/sda1\x00', &(0x7f00000011c0)='./mnt\x00', &(0x7f0000001200)='ext4\x00', 0x8410, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000001440)='./mnt\x00', 0x519001, 0x10) ioctl$FS_IOC_SETFLAGS(r3, 0x40086602, &(0x7f0000001680)=0x2000) 1m41.404122868s ago: executing program 0 (id=72): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x2501, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_SREGS(r2, 0x4138ae84, &(0x7f00000004c0)={{0x4000, 0xe000, 0xd, 0x79, 0xc, 0x3, 0xca, 0x2, 0x0, 0x6, 0x6, 0xe}, {0x2, 0xffff1000, 0x8, 0xee, 0x2, 0x0, 0x0, 0xff, 0x7, 0x0, 0x3}, {0xeeee0000, 0x1000, 0x3, 0x0, 0x6, 0xc4, 0x2, 0x9, 0x27, 0x3, 0x4, 0xfc}, {0x1, 0x0, 0x9, 0x9, 0x81, 0x0, 0x9, 0x0, 0x3, 0x0, 0x9}, {0xeeee8000, 0xffff1000, 0x3, 0x0, 0x2, 0x3, 0x4, 0x6, 0x2, 0x34}, {0xffffffff, 0x1, 0x0, 0x78, 0x8, 0x0, 0x2, 0x1c, 0x3, 0xed, 0x5}, {0xeeee8000, 0xfec00000, 0xa, 0x3, 0x0, 0x0, 0xc, 0x20, 0x0, 0x0, 0x2}, {0x0, 0x8080000, 0x0, 0x0, 0xa4, 0x7, 0x3, 0x40, 0x26, 0x0, 0x0, 0xfe}, {0x80a0000, 0x3}, {0x9000, 0xfffe}, 0xddf8ffdb, 0x0, 0x0, 0x60, 0x8, 0xf801, 0x3000, [0x80000001, 0xe, 0x1, 0xfffffffffffffffe]}) (async) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_GET_SREGS2(r2, 0x8140aecc, &(0x7f0000000600)) (async) r3 = openat2$dir(0xffffffffffffff9c, &(0x7f0000000400)='./file2\x00', &(0x7f0000000440)={0x200001, 0x80}, 0x18) mkdirat(r3, &(0x7f0000000480)='./file0\x00', 0x9) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x1ff) (async) mount(0x0, &(0x7f00000000c0)='./proc\x00', &(0x7f00000002c0)='proc\x00', 0x4000, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) write(r4, &(0x7f0000000340)='100', 0x3) (async) r5 = openat(0xffffffffffffff9c, &(0x7f0000000380)='./file1\x00', 0x42, 0x0) pwrite64(r5, &(0x7f00000003c0)='a', 0x200000c1, 0x9000) (async) ioctl$SIOCGIFMTU(0xffffffffffffffff, 0x8913, &(0x7f0000000040)={'veth0\x00'}) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r7, 0x4020ae46, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) (async) r8 = ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r8, &(0x7f0000016000/0x18000)=nil, &(0x7f0000000180)=[@text64={0x40, 0x0}], 0x1, 0x0, &(0x7f00000001c0)=[@cr4={0x1, 0x40002}], 0x1) (async) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r8, &(0x7f0000008000/0x18000)=nil, &(0x7f0000000200)=[@textreal={0x8, &(0x7f0000000240)="0f0d51f40f01d10fc75800f30fc73600102ed5c01dc0000000008ec0640f017400aa66b9e408000066b81f6269e766ba000000000f309c0c0cb8d09bbc8966efbafc0cedba4300ba210066ed3626f00fc70d", 0x52}], 0x1, 0x41, 0x0, 0x0) ioctl$KVM_RUN(r8, 0xae80, 0x0) 1m40.986053891s ago: executing program 0 (id=76): mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000000140)='./file0\x00', 0x60) mount$incfs(&(0x7f0000000180)='./file0\x00', &(0x7f00000001c0)='./file0\x00', &(0x7f0000000280), 0x80, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file0\x00', 0x0, 0x8c) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) close(r1) r2 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x20000, 0x0) ioctl$TUNSETOFFLOAD(r2, 0xc004743e, 0x110e22fff6) ioctl$TUNGETVNETLE(r1, 0x40047440, &(0x7f0000000080)) r3 = openat$incfs(r0, &(0x7f0000000340)='.pending_reads\x00', 0x22000, 0x1b4) ioctl$TIOCL_GETKMSGREDIRECT(r3, 0x40106726, 0x0) 1m40.833660677s ago: executing program 0 (id=78): r0 = socket$xdp(0x2c, 0x3, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./dev\x00', 0x1df) mount(0x0, &(0x7f00000005c0)='./dev\x00', &(0x7f0000000600)='devtmpfs\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000640)='./dev/sda\x00', 0x2, 0x0) ioctl$IOC_PR_RELEASE(r1, 0x401070ca, &(0x7f0000000680)={0x4, 0x4}) setsockopt$XDP_UMEM_REG(r0, 0x11b, 0x4, &(0x7f0000000180)={&(0x7f0000000000)=""/66, 0x328000, 0x1000, 0x0, 0x1}, 0x20) r2 = syz_create_resource$binfmt(&(0x7f0000000080)='./file1\x00') openat$binfmt(0xffffffffffffff9c, r2, 0x42, 0x1ff) r3 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='.\x00', 0x0, 0x0) execveat$binfmt(r3, r2, 0x0, 0x0, 0x0) sendmsg$SOCK_DIAG_BY_FAMILY(r3, &(0x7f0000000580)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000540)={&(0x7f00000001c0)={0x368, 0x14, 0x200, 0x70bd26, 0x25dfdbfb, {0x28, 0x8}, [@INET_DIAG_REQ_BYTECODE={0x7a, 0x1, "b4636625bee2701a58e0182ca91d481df8b7f12d0cfcbf4b70a82fce6552e9bb5aa98a9f0ec866c6046d8b75b6d8ae7bb4313fb1b734acced038d2bc4c89b7a8ac4c9fc62d5d9855e36328e7aaae2dee4d37e7fcdd17d537301b61f27067f517a737e112829cfcb112d4d88787530a1e3bb70bbb71ba"}, @INET_DIAG_REQ_BYTECODE={0x7e, 0x1, "8d59821f4e16b2f35aa5f6984c24b30a1bad34edb77086349396a9aa7126d111c186007c6e9b36788b73c0a56e25588ef4dc5f2dcb6a2cced6a16d46c44de6435a4e134b40c796abdb5a4d1b12f5d3c2dda2b92996b48e56d84b490d8d70ad26add693d478e5939a5f6f01aa9f6faa4648a512ded365e05ab7df"}, @INET_DIAG_REQ_BYTECODE={0xe, 0x1, "23c28631ac7945e1beeb"}, @INET_DIAG_REQ_BYTECODE={0xc4, 0x1, "180ab02a4237f2215cb9fcbad0dee5de395551f011c1d4f9f22d134a2f0b074b0279349f5ea1fa669ffc240104d4f04121fa9fad684c73f2fb16575643cc0db2478aaa70d4f03b0f70596cb731c8822dbac906f955bca705f28e4d67d6b890ebaa0e64a0652aa03feb843b9a24baa32f5096e14af5a8455bb38b48245cca7720cf27bbc14fa5f4e41a690412eedf7760709943e13db609dc69710497eb6dde99236d808ab1b4099ef07f62590acff4cdfbb21a008c19b94be88da20ef8df89d0"}, @INET_DIAG_REQ_BYTECODE={0xa3, 0x1, "a4f00366c257a6f8f965ef1c96b49fba9ac0e951bebe60074b366fe638e9c88fdb9535b60e3f7f5bd00953a1adc42a0326e92fdc26faff83e2bde28f9fb5234e79fc15a99bd66f3ce654b221e6527fb1ac3e9e97663f560d94e756b9a170be9860684677588c3791c680bf595981252fea4ff8d8ad5ab39971c3f7e6c7487559662b73c1de2f641c8c1d1ed1015ed33b15f9f1e073c59749f52c4b02e7feb1"}, @INET_DIAG_REQ_BYTECODE={0xde, 0x1, "bd100587f53e93c9bf49efc9af08514a3f07af2f5908ff12967c345afd8f605a185c2f87c4aa86d0670eef6c2242b3bfe77517c7220f9e87901825b3e6f33ea935b34c5f4e00198528c292c68b3bed31752de3577c2005d056b898d52b052d60c4759c5a16290137b3d41792ff96fafe0f7c59031512230a4d2426ef2e5693fb2fe432190cbd6f63a785fe076709f65b7d64d8eac4e6b2cf782e56d2fd8a9c23ea47e5c73c0bf6dbe07db9fa545762c4adcc43ffc4f66b4b7d060d078589e7a4f3af043442bdea8d1a565132bfd84822f7fbe2d80e25d2372de6"}]}, 0x368}}, 0x4000) syz_clone3(&(0x7f0000000980)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) syz_io_uring_setup(0x27f7, &(0x7f00000006c0)={0x0, 0x5af, 0x8, 0x2, 0xd6, 0x0, r1}, &(0x7f0000000740), &(0x7f0000000780), &(0x7f00000007c0)) 1m40.737746407s ago: executing program 0 (id=80): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000140)='./sys\x00', &(0x7f0000000180)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./sys/bus/pci/devices/0000:00:00.0/rescan\x00', 0x1, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000540), 0x161200, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000600)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000640)=[@text16={0x10, &(0x7f0000000680)="64670feea1096f00003e660f38054c880f323e26640fb9a9c94f660fc7b27f1a360f09366764f4660fdd40e69a3a00e300baa000b0e5ee", 0x37}], 0x1, 0x6, 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) r4 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r4, 0xaf01, 0x0) r5 = eventfd(0x0) ioctl$VHOST_SET_LOG_FD(r4, 0x4004af07, &(0x7f0000000040)=r5) ioctl$VHOST_SET_VRING_KICK(r4, 0x4008af20, &(0x7f0000000080)={0x1, r5}) ioctl$VHOST_SET_VRING_ADDR(r4, 0x4028af11, &(0x7f00000000c0)={0x0, 0x0, 0x0, &(0x7f0000000240)=""/75, 0x0}) ioctl$VHOST_SET_VRING_ADDR(r4, 0x4028af11, &(0x7f00000002c0)={0x1, 0x1, 0x0, &(0x7f0000000300)=""/87, &(0x7f0000000380)=""/91}) ioctl$VHOST_SET_MEM_TABLE(r4, 0x4008af03, &(0x7f0000000580)={0x2, 0x0, [{0x30000, 0xa6, &(0x7f0000000480)=""/166}, {0xeeef0000, 0x8, &(0x7f0000000400)=""/8}]}) ioctl$VHOST_VSOCK_SET_RUNNING(r4, 0x4004af61, &(0x7f0000000440)=0x1) write$cgroup_pid(r0, &(0x7f0000000200), 0x12) fcntl$setlease(r0, 0x400, 0x1) 1m40.591510692s ago: executing program 0 (id=81): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./trace\x00', 0x1fd) r0 = syz_create_resource$futex(&(0x7f00000007c0)=0x1) futex(r0, 0x0, 0x1, 0x0, 0x0, 0x1) mount(0x0, &(0x7f0000000080)='./trace\x00', &(0x7f0000000140)='tracefs\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./trace/uprobe_events\x00', 0x0, 0x1fb) r2 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./trace/uprobe_events\x00', 0x2, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r3, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000003c0), 0x200, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x38) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000540), 0x101000, 0x0) r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r7, 0xae60) ioctl$KVM_CREATE_PIT2(r7, 0x4040ae77, &(0x7f0000000580)={0x101}) r8 = ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x0) ioctl$KVM_SET_IRQCHIP(r7, 0x8208ae63, &(0x7f0000000800)={0x0, 0x0, @pic={0x3, 0x7, 0xe1, 0x81, 0x9, 0xf9, 0x3e, 0x42, 0xfb, 0x0, 0xc, 0x0, 0x7f, 0x4, 0x0, 0x38}}) ioctl$KVM_SET_REGS(r8, 0x4090ae82, &(0x7f0000000a40)={[0x6e, 0x0, 0x100000000005, 0x20, 0x3, 0x2, 0x80000000106c, 0x101, 0x8000000000000, 0x80000004000080, 0x1c00000, 0x8, 0x0, 0x0, 0x0, 0x8000], 0x1, 0x3c4210}) ioctl$KVM_RUN(r8, 0xae80, 0x0) r9 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) ioctl$KVM_GET_MSRS_cpu(r9, 0xc008ae88, &(0x7f0000000500)={0x1, 0x0, [{0x400000ff, 0x0, 0x3}]}) ioctl$TIOCSETD(r4, 0x5423, &(0x7f0000000400)=0xf) ioctl$TCFLSH(r4, 0x400455c8, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r1, 0x400448e7, 0x0) getsockopt$inet6_tcp_int(r2, 0x6, 0x1, 0x0, &(0x7f0000000480)=0xc) write(r2, &(0x7f0000000200)='p:m_group/_yevent ./dummy:0x2', 0x1d) mount$9p_rdma(&(0x7f0000000180), &(0x7f0000000240)='./trace\x00', &(0x7f0000000280), 0x20000, &(0x7f00000002c0)=ANY=[@ANYBLOB="7472616e733d72646d612c706f72743d3078303030303030303030303030346532332c73713d3078303030303030303030303030303030342c746903006f75743d3078303030303030303030303030303030322c73713d3078303030303030303030303030303030302c72713d3078303030303030303030303030303030312c74696d656f75743d3078303030303030303038303030303030312c74696d656f75743d3078303030303030303030303030323139372c73713d3078303030303030303030303030303030312c74696d656f75743d3078303030303030303030303030303030362c6d6561737572652c00"]) syz_open_dev$usbfs(&(0x7f0000000440), 0x76, 0x101b01) 1m40.588975582s ago: executing program 32 (id=81): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./trace\x00', 0x1fd) r0 = syz_create_resource$futex(&(0x7f00000007c0)=0x1) futex(r0, 0x0, 0x1, 0x0, 0x0, 0x1) mount(0x0, &(0x7f0000000080)='./trace\x00', &(0x7f0000000140)='tracefs\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./trace/uprobe_events\x00', 0x0, 0x1fb) r2 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./trace/uprobe_events\x00', 0x2, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r3, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000003c0), 0x200, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x38) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000540), 0x101000, 0x0) r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r7, 0xae60) ioctl$KVM_CREATE_PIT2(r7, 0x4040ae77, &(0x7f0000000580)={0x101}) r8 = ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x0) ioctl$KVM_SET_IRQCHIP(r7, 0x8208ae63, &(0x7f0000000800)={0x0, 0x0, @pic={0x3, 0x7, 0xe1, 0x81, 0x9, 0xf9, 0x3e, 0x42, 0xfb, 0x0, 0xc, 0x0, 0x7f, 0x4, 0x0, 0x38}}) ioctl$KVM_SET_REGS(r8, 0x4090ae82, &(0x7f0000000a40)={[0x6e, 0x0, 0x100000000005, 0x20, 0x3, 0x2, 0x80000000106c, 0x101, 0x8000000000000, 0x80000004000080, 0x1c00000, 0x8, 0x0, 0x0, 0x0, 0x8000], 0x1, 0x3c4210}) ioctl$KVM_RUN(r8, 0xae80, 0x0) r9 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) ioctl$KVM_GET_MSRS_cpu(r9, 0xc008ae88, &(0x7f0000000500)={0x1, 0x0, [{0x400000ff, 0x0, 0x3}]}) ioctl$TIOCSETD(r4, 0x5423, &(0x7f0000000400)=0xf) ioctl$TCFLSH(r4, 0x400455c8, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r1, 0x400448e7, 0x0) getsockopt$inet6_tcp_int(r2, 0x6, 0x1, 0x0, &(0x7f0000000480)=0xc) write(r2, &(0x7f0000000200)='p:m_group/_yevent ./dummy:0x2', 0x1d) mount$9p_rdma(&(0x7f0000000180), &(0x7f0000000240)='./trace\x00', &(0x7f0000000280), 0x20000, &(0x7f00000002c0)=ANY=[@ANYBLOB="7472616e733d72646d612c706f72743d3078303030303030303030303030346532332c73713d3078303030303030303030303030303030342c746903006f75743d3078303030303030303030303030303030322c73713d3078303030303030303030303030303030302c72713d3078303030303030303030303030303030312c74696d656f75743d3078303030303030303038303030303030312c74696d656f75743d3078303030303030303030303030323139372c73713d3078303030303030303030303030303030312c74696d656f75743d3078303030303030303030303030303030362c6d6561737572652c00"]) syz_open_dev$usbfs(&(0x7f0000000440), 0x76, 0x101b01) 33.863318339s ago: executing program 3 (id=442): r0 = socket$xdp(0x2c, 0x3, 0x0) recvmmsg(r0, &(0x7f0000000000)=[{{0x0, 0x0, 0x0}}], 0x1, 0x1, 0x0) (async, rerun: 64) mkdirat(0xffffffffffffff9c, &(0x7f0000000700)='sys_mnt\x00', 0xb0) (async, rerun: 64) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0xd54895b78f604514) (async) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000100), 0x80, &(0x7f0000000140)={{'fd', 0x3d, r1}, 0x2c, {'rootmode', 0x3d, 0x4000}}) read$FUSE(r1, &(0x7f0000000c40)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r1, &(0x7f0000002c80)={0x50, 0x0, r2, {0x7, 0x29, 0x9, 0xffffffff90adedc4, 0x0, 0x3, 0x0, 0x4, 0x0, 0x0, 0x10}}, 0x50) r5 = openat$dir(0xffffffffffffff9c, &(0x7f0000002d00)='./file0\x00', 0x0, 0x18) syz_fuse_handle_req(r1, &(0x7f0000002d40)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001e000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000100", 0x2000, &(0x7f0000004d40)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000004e00)={0x20, 0x0, 0x0, {0x0, 0x1c}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_fuse_handle_req(r1, &(0x7f0000004e40)="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", 0x2000, &(0x7f0000006e40)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000006f00)={0xb0, 0x0, 0x100, [{{0x4, 0x1, 0x8, 0x3, 0x809, 0x10805, {0x6, 0x9, 0x4, 0xa, 0x6, 0xfffffffffffffffe, 0x2, 0x1, 0x6, 0xa000, 0xde, r3, r4, 0x8002, 0x80000000}}, {0x400000000000001, 0x1, 0x1, 0x32540194, '\x00'}}]}, 0x0, 0x0, 0x0}) (async) getdents64(r5, 0x0, 0x2e) (async) mount(0x0, &(0x7f0000000740)='sys_mnt\x00', &(0x7f0000000b80)='sysfs\x00', 0x0, 0x0) (async) r6 = openat(0xffffffffffffff9c, &(0x7f0000000bc0)='sys_mnt/block/zram0/algorithm_params\x00', 0x1, 0x0) write(r6, &(0x7f0000000c00)='a=go=zstd dict=d', 0x10) 33.75679009s ago: executing program 3 (id=443): mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x1a8) mount(0x0, &(0x7f00000000c0)='./proc\x00', &(0x7f0000000100)='proc\x00', 0x0, 0x0) mmap$IORING_OFF_SQ_RING(0x0, 0x8000, 0x2, 0x2172, 0xffffffffffffffff, 0x0) r0 = open(&(0x7f0000000000)='./cgroup.cpu/cpuset.cpus\x00', 0x121342, 0x0) write$tcp_mem(r0, &(0x7f00000001c0)={0x8008080, 0x2d, 0x9, 0x3a, 0x100000000000006, 0x2c}, 0x48) r1 = openat(r0, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2002, 0x0) write(r1, &(0x7f0000000180)='7', 0x1) futex(0x0, 0x8, 0x0, 0x0, 0x0, 0x0) 33.75638833s ago: executing program 3 (id=444): r0 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000000), 0x802, 0x0) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) mremap(&(0x7f00005ab000/0x1000)=nil, 0x1000, 0x1000, 0x7, &(0x7f0000ffe000/0x1000)=nil) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x8) (async) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x8) write$UHID_CREATE2(r0, &(0x7f0000000380)=ANY=[@ANYBLOB="0b00000073797a31000000dfff000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a30000037b35f0a000089b4c45a10000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a3100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001"], 0x119) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xf, 0x8031, r0, 0x4000) write$UHID_INPUT2(r0, &(0x7f00000004c0), 0x6) pipe2(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r4 = syz_ublk_setup_io_uring(0x20, &(0x7f0000000140)={0x0, 0x0, 0x1, 0x0, 0x3dc}, &(0x7f00000001c0)=0x0, &(0x7f0000000200)=0x0, &(0x7f0000000240)=0x0) syz_ublk_add_dev(r4, r5, r6, r7, &(0x7f0000000280)={0x2e, 0xa, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000300)=@new_dev={0x1, 0x9e6, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x80}}}, 0x0) (async) syz_ublk_add_dev(r4, r5, r6, r7, &(0x7f0000000280)={0x2e, 0xa, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000300)=@new_dev={0x1, 0x9e6, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x80}}}, 0x0) tee(r1, r3, 0x4e, 0x5) (async) tee(r1, r3, 0x4e, 0x5) epoll_create(0x0) (async) epoll_create(0x0) write$eventfd(r2, &(0x7f0000000340)=0x2, 0x8) (async) write$eventfd(r2, &(0x7f0000000340)=0x2, 0x8) 33.486439648s ago: executing program 3 (id=447): write$tcp_mem(0xffffffffffffffff, &(0x7f0000000040)={0xffffffffffffffff, 0x20, 0x0, 0x20, 0x2}, 0x48) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000280)=ANY=[@ANYBLOB="480100001000010000000000fddadf257f0000010000000000000600000000000000000000000000000000000000000040000000000300030000000000000200", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="ac1414aa0000000000000000000000000000000033000000ff020000000000000000000000000001000000000000000000000000000000000000000000000000010400000000000000000000000000000000000000000000040000000000000080ffffffffffffff0000000000000000000000000000000000000000000000000000000000000000000010000000000000000000feffffff000000000a00010000000000000000000800230001000000480001"], 0x148}}, 0x4000040) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r2 = syz_open_dev$ublk_chdev(&(0x7f00000001c0), 0x0, 0x4040) r3 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./file0\x00', 0x40, 0x1) r4 = openat(0xffffffffffffff9c, &(0x7f0000000440)='./file0\x00', 0x101001, 0x1c1) writev(r4, &(0x7f0000000480)=[{&(0x7f00000004c0)="99df", 0x2}], 0x1) syz_usb_connect(0x2, 0x2d, &(0x7f000001ab00)=ANY=[@ANYBLOB="1201500285d5c2086004040031960154030109021b000100031003090458080119662194090586d7"], &(0x7f000001ab40)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x0, 0x0}]}) ioctl$XFS_IOC_ATTRLIST_BY_HANDLE(r4, 0x4058587a, &(0x7f0000000500)={{r3, 0x0, 0x40840, 0x0, 0x7, 0x0, 0x0}, {[0x1, 0xe199, 0x7, 0x50]}, 0x7, 0x30, &(0x7f0000000580)=""/48}) r5 = syz_open_procfs(0x0, &(0x7f00000005c0)='net/ip6_tables_matches\x00') r6 = getpid() r7 = syz_pidfd_open(r6, 0x0) fremovexattr(r7, &(0x7f000001aa40)=@random={'osx.', '\\%j-&\xde:\\\'$\x00\x1f\x14\xf6\x15\x15\xcf\a\x99\'\x05\x97\xbb&!\x95>c\x05\xbb\x88\xe6\xf0P\xca+\xc3|\x84Z\xf0\xb1|\xcd8\x94\x98\xfb%\xf1\xdb\xb3\"}\x9bmZ\x00\b\x91os3\xb1\x85E\xb9\xb6\xc9q\xfb\x85AY8\x9d\x0f!\x9cld\xfa\x88\xce\xa0&\xf3\xe2\x9f<\xa0?\x01\x1c\xe7\xf6\x9b\xdf\x0f9'}) pread64(r5, &(0x7f0000000600)=""/102355, 0x18fd3, 0xc2a) r8 = open(&(0x7f000001aac0)='./bus\x00', 0x14927e, 0x0) unshare(0x22020600) timerfd_gettime(r8, 0x0) syz_ublk_setup_queues(r2, 0x0, &(0x7f0000000380)={0x0, 0xf835, 0x10e28, 0x1, 0x331, 0x0, r0}, &(0x7f0000019600)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0xefbf, 0x2000, 0x0, 0x34e, 0x0, r3}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xf34b, 0x40, 0x3, 0x3d9}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xa6e1, 0x2, 0x1, 0x2f4}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x893f, 0x8, 0x3, 0x180, 0x0, r5}}], 0x4, &(0x7f000001a880)={0x2e, 0x68, 0x0, r1, 0xc0107520, 0x0, 0x0, 0x0, 0x0, {0x6d1}, 0x0, 0x0, '\x00', {0x1, 0x3bb, 0x0, &(0x7f0000019880)=@buf_1k="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"}}, &(0x7f000001a900)) r9 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) syz_ublk_setup_io_uring(0x1d, &(0x7f000001a940)={0x0, 0x30b5, 0x0, 0x3, 0x158}, 0x0, 0x0, 0x0) close(0x3) r10 = syz_create_resource$futex(&(0x7f000001a9c0)=0x1) futex(r10, 0x80, 0x1, &(0x7f000001aa00)={0x77359400}, r10, 0x2) r11 = ioctl$KVM_CREATE_VCPU(r9, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r9, r11, &(0x7f0000fda000/0x18000)=nil, &(0x7f0000000000)=[@text32={0x20, &(0x7f0000000200)="b805000000b9fa0000000f01d9660f78c4020a3ef32e650f09b805000000b90000c0fe0fae41d901000000b87f8b7f26ba000000000f30660fc775022e0fba600c980f320f3566b857000f20c035000000800f22c0", 0x55}], 0xaaaaaaaaaaaaaf6, 0x10, 0x0, 0x0) ioctl$KVM_SET_CPUID2(r11, 0x4008ae90, &(0x7f00000000c0)={0x1, 0x0, [{0x7, 0x6, 0x0, 0x256, 0x3ff, 0x0, 0x7}]}) ioctl$KVM_RUN(r11, 0xae80, 0x0) 30.458885973s ago: executing program 3 (id=455): mmap$IORING_OFF_SQ_RING(0x0, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000040)=0xf) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./sys\x00', &(0x7f00000000c0)='sysfs\x00', 0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000019980), 0x20040, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x81) r3 = ioctl$KVM_GET_STATS_FD_cpu(r2, 0xaece) preadv(r3, &(0x7f00000199c0)=[{&(0x7f0000019a00)=""/13, 0xd}], 0x1, 0x4, 0x0) capset(&(0x7f0000000100)={0x19980330}, &(0x7f0000000140)={0x0, 0x0, 0x3, 0xfffffc01, 0x398, 0x8a}) r4 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./sys/class/net/veth0/queues/tx-0/xps_cpus\x00', 0x2, 0x0) write$cgroup_netprio_ifpriomap(r4, &(0x7f00000001c0)={'dvmrp0', 0x32, 0x34}, 0x9) ioctl$TCFLSH(0xffffffffffffffff, 0x400455c8, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r5 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r5, 0x107, 0xf, &(0x7f0000019700)=0x80000001, 0x4) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000019740)={'bridge0\x00', 0x0}) sendto$packet(r5, &(0x7f0000019780)="280320000a00140000007ef506be00000000000000000000000000143baa111f1f858ce632f47042195eb3cf545a41b6d78839980700e67bee78895e16f37fe8", 0xffa9, 0x400c010, &(0x7f00000197c0)={0x11, 0x3, r6, 0x1, 0xe5, 0x6, @random="76caa646ae4c"}, 0x14) recvmmsg(r5, &(0x7f0000019800)=[{{0x0, 0x0, &(0x7f0000019840)=[{&(0x7f0000019880)=""/77, 0x4d}], 0x1, &(0x7f0000019900)=""/16, 0x10}, 0x8}], 0x1, 0x10042, &(0x7f0000019940)={0x77359400}) r7 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f0000000200), r7) prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x80000000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000280)=0x7) r8 = getpid() sched_setscheduler(r8, 0x2, &(0x7f00000002c0)=0x6) syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) sched_setaffinity(0x0, 0x0, 0x0) r9 = syz_open_dev$MSR(&(0x7f0000000300), 0x0, 0x0) read$msr(r9, &(0x7f0000000340)=""/102392, 0x18ff8) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000019340)={0x0, 0x0, &(0x7f0000019380)={&(0x7f00000193c0)=@newsa={0xf0, 0x10, 0x1, 0xfffffffe, 0x100, {{@in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @in6=@private1, 0x4e24, 0x714, 0x4e23, 0x5, 0x0, 0x20, 0x0, 0x3a}, {@in=@remote, 0x4d4, 0x6c}, @in6=@loopback, {0x0, 0x192, 0x6, 0xffff, 0x8251c, 0x2, 0xfffffffffffffff8}, {0xffffffffffffffff, 0x0, 0xae26}, {0x2, 0xfffffffc}, 0x70bd2a, 0x3505, 0x2, 0x1, 0x0, 0x20}}, 0xf0}, 0x1, 0x0, 0x0, 0x8801}, 0x0) 30.342633725s ago: executing program 3 (id=456): mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000000340)='./dev\x00', &(0x7f0000000380)='devtmpfs\x00', 0x2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000003c0)='./mnt\x00', 0x1ff) mount(&(0x7f0000000400)=@filename='./dev/sda1\x00', &(0x7f0000000440)='./mnt\x00', &(0x7f0000000480)='ext4\x00', 0x8410, 0x0) setxattr$trusted_overlay_upper(&(0x7f00000004c0)='./mnt\x00', &(0x7f0000000500), 0x0, 0x0, 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x60) mount$incfs(&(0x7f0000000300)='./file0/file0\x00', &(0x7f0000000040)='./file0/file0\x00', &(0x7f0000000100), 0x40880, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x0, 0x8c) r1 = openat$incfs(r0, &(0x7f0000000180)='.pending_reads\x00', 0x22000, 0x1b4) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000002c0)=ANY=[@ANYBLOB="440000001400010000000000000000000218000004000000140004000000000600000000000000000000000115000280", @ANYBLOB="e0"], 0x44}, 0x1, 0x0, 0x0, 0x1}, 0x8810) fstat(r1, &(0x7f00000001c0)) r3 = socket$inet_udp(0x2, 0x2, 0x0) getsockopt$inet_opts(r3, 0x88, 0x66, 0x0, &(0x7f0000000080)) 15.330438316s ago: executing program 33 (id=456): mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000000340)='./dev\x00', &(0x7f0000000380)='devtmpfs\x00', 0x2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000003c0)='./mnt\x00', 0x1ff) mount(&(0x7f0000000400)=@filename='./dev/sda1\x00', &(0x7f0000000440)='./mnt\x00', &(0x7f0000000480)='ext4\x00', 0x8410, 0x0) setxattr$trusted_overlay_upper(&(0x7f00000004c0)='./mnt\x00', &(0x7f0000000500), 0x0, 0x0, 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x60) mount$incfs(&(0x7f0000000300)='./file0/file0\x00', &(0x7f0000000040)='./file0/file0\x00', &(0x7f0000000100), 0x40880, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x0, 0x8c) r1 = openat$incfs(r0, &(0x7f0000000180)='.pending_reads\x00', 0x22000, 0x1b4) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000002c0)=ANY=[@ANYBLOB="440000001400010000000000000000000218000004000000140004000000000600000000000000000000000115000280", @ANYBLOB="e0"], 0x44}, 0x1, 0x0, 0x0, 0x1}, 0x8810) fstat(r1, &(0x7f00000001c0)) r3 = socket$inet_udp(0x2, 0x2, 0x0) getsockopt$inet_opts(r3, 0x88, 0x66, 0x0, &(0x7f0000000080)) 2.274687463s ago: executing program 4 (id=895): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000340), 0x82, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000380)={0x1, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f00000003c0)=[@text32={0x20, &(0x7f0000000400)="610f8e0f3566b842000f00d8b805000000b9a0250000000001c13e8a0d0707de460b3cb4670f01c2f2360f217a0f07", 0x2f}], 0x1, 0x11, 0x0, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000440)=[@text64={0x40, 0x0}], 0x1, 0x18, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 1.310507833s ago: executing program 4 (id=921): r0 = syz_open_dev$usbfs(&(0x7f0000000080), 0x74, 0x109301) ioctl$USBDEVFS_SUBMITURB(r0, 0x8038550a, &(0x7f0000000880)=@urb_type_bulk={0x3, {0x1, 0x1}, 0x7fff, 0x41, &(0x7f00000008c0)='$', 0x1, 0x0, 0x9, 0xffffffff, 0x5, 0x6, 0x0}) 1.310287133s ago: executing program 1 (id=923): r0 = gettid() openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000003c0)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000840)='./sys\x00', &(0x7f0000000880)='sysfs\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f00000008c0)='./sys/class/ptp/ptp0/n_vclocks\x00', 0x2, 0x0) write$cgroup_pid(r1, &(0x7f0000000140)=r0, 0x12) 1.294241045s ago: executing program 4 (id=926): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_VCPU_EVENTS(r2, 0x4040aea0, &(0x7f0000000480)=@x86={0xe, 0xa, 0x5, 0x0, 0x2, 0xf0, 0x1, 0x0, 0x80, 0x4, 0x6, 0xc6, 0x0, 0x1, 0x3, 0x5, 0x3, 0x7, 0x8, '\x00', 0x9, 0x4}) ioctl$KVM_SET_GUEST_DEBUG_x86(r2, 0x4048ae9b, &(0x7f0000000280)={0x80002, 0x0, {[0x400000, 0xfffffffffffffff7, 0x2, 0x9, 0xffffffffffffffff, 0xa635, 0x8, 0x2]}}) 1.24671351s ago: executing program 1 (id=927): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x100, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000040)={0x1fe, 0x2, 0x4000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000fe6000/0x18000)=nil, &(0x7f00000022c0)=[@text32={0x20, 0x0}], 0x1, 0x15, &(0x7f0000002300)=[@cr4={0x1, 0x1403d5}], 0x1) ioctl$KVM_RUN(r2, 0xae80, 0x0) 1.162612209s ago: executing program 4 (id=932): r0 = openat$selinux_load(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0) r1 = openat$selinux_policy(0xffffff9c, &(0x7f00000009c0), 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x100000a, 0x12, r1, 0x0) prlimit64(0x0, 0x7, 0x0, 0xffffffffffffffff) write$selinux_load(r0, &(0x7f0000000000)=ANY=[], 0x8ce4) 1.111873054s ago: executing program 4 (id=936): r0 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000300), 0x80042, 0x0) ioctl$PTP_PEROUT_REQUEST2(r0, 0x40383d0c, &(0x7f0000000340)={{0xfffffffffffffefc, 0x2}, {0x0, 0x6}, 0xfffffe2d, 0x6}) 1.073789688s ago: executing program 4 (id=938): r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, 0x0, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x9) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0xe) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) syz_usb_connect(0x0, 0x3f, &(0x7f0000000240)=ANY=[@ANYBLOB="12010000413b88400819151300000000000109022d00010000000009040000026bb22b000904fffffd0000000009", @ANYRES64=r1], 0x0) 942.701372ms ago: executing program 2 (id=945): r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSARP(r0, 0x8955, &(0x7f0000002440)={{0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x308, @broadcast}, 0xfdfdffff, {0x2, 0x0, @empty}}) 942.477912ms ago: executing program 2 (id=946): r0 = creat(&(0x7f0000000040)='./bus\x00', 0xd4) io_setup(0x5, &(0x7f0000000080)=0x0) io_submit(r1, 0x2, &(0x7f00000000c0)=[&(0x7f0000000100)={0x0, 0x0, 0x0, 0x2, 0x10, r0, 0x0}, &(0x7f0000000140)={0x0, 0x0, 0x8, 0x3, 0x0, r0, 0x0}]) 897.794436ms ago: executing program 2 (id=947): r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0xa, &(0x7f0000000000)=0x4, 0x4) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e20, @multicast2}, 0x10) r1 = userfaultfd(0x80001) chdir(0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, 0x0) ioctl$UFFDIO_COPY(r1, 0xc028aa03, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x2, &(0x7f0000000100)=0xce, 0x4) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e20, @loopback}, 0x10) setsockopt$sock_int(r0, 0x1, 0x7, &(0x7f00000001c0)=0x4, 0x4) sendmsg$inet(r0, &(0x7f0000000200)={0x0, 0x14, &(0x7f0000000400)=[{&(0x7f0000000440)=' ', 0x100120}], 0x1}, 0x0) 409.647307ms ago: executing program 1 (id=948): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000680)={0xa, 0x4e22, 0xfffffffc, @loopback, 0x6}, 0x1c) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f00000006c0)=0x40, 0x4) connect$inet6(r0, &(0x7f0000000700)={0xa, 0x4e22, 0x56202325, @empty, 0x4000005}, 0x1c) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000740)=0x20a, 0x4) sendmmsg$inet6(r0, &(0x7f0000000880)=[{{0x0, 0x0, &(0x7f0000000840)=[{&(0x7f0000000a40)="ea012351ddc58332fdb2081dbbbe1e347aaa8ec7d8c9738c1a2ab4412ce01f0daf2fcd367a783443fa96baaa893d0666dd21482a2485ef23bfb8a14c917b4ffb8f694566151da0ae7b401ece8598e6cd7b97a58991c0725cee218df6ea0c73adfc6de77514dc15c7c834daa97759b1e88ef28881bbac8495721a6745117b43feb4", 0x81}], 0x1}}, {{0x0, 0x0, &(0x7f0000000780)=[{&(0x7f0000000200)="5093", 0x2}, {0x0}], 0x2}}], 0x2, 0x4000001) socket$packet(0x11, 0x2, 0x300) r1 = dup(r0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), r1) syz_genetlink_get_family_id$ethtool(&(0x7f0000000cc0), r1) 358.697453ms ago: executing program 1 (id=949): r0 = openat$pidfd(0xffffffffffffff9c, &(0x7f0000000300), 0x8000, 0x0) pidfd_send_signal(r0, 0x19, &(0x7f0000000340)={0x15, 0x56, 0xfffffffd}, 0x0) 358.554942ms ago: executing program 1 (id=950): r0 = socket(0x2, 0x3, 0x5) setsockopt(r0, 0xff, 0x4, 0x0, 0x0) 358.474262ms ago: executing program 1 (id=951): syz_usb_connect(0x0, 0x5b, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000002ffa9400819151300000102030109024900020000000009047f00022513bf000a240100000002010205240400001d0505"], 0x0) 66.140823ms ago: executing program 5 (id=958): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_CMD_ENABLE_BEARER(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000040)=ANY=[@ANYRES64, @ANYRES64=r0], 0x38}}, 0x80) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r1 = openat$urandom(0xffffffffffffff9c, &(0x7f0000000000), 0x80000, 0x0) ioctl$RNDADDENTROPY(r1, 0x40085203, &(0x7f0000000040)=ANY=[]) 63.664153ms ago: executing program 5 (id=959): r0 = socket$packet(0x11, 0x2, 0x300) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000180)={'batadv_slave_0\x00', 0x0}) setsockopt$packet_add_memb(r0, 0x107, 0x1, &(0x7f0000000480)={r1, 0x1, 0x5, @remote}, 0x10) setsockopt$packet_add_memb(r0, 0x107, 0x1, &(0x7f0000000500)={r1, 0x1, 0x6, @random="e1c005000002"}, 0x10) setsockopt$packet_drop_memb(r0, 0x107, 0x2, &(0x7f0000000540)={r1, 0x1, 0x6, @multicast}, 0xfe97) 47.397165ms ago: executing program 2 (id=960): r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000600), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_TID_CONFIG(r1, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000680)={&(0x7f00000006c0)={0x2c, r0, 0x8de13c6b70ae92c3, 0x41003, 0x0, {{}, {@val={0x4}, @void}}, [@NL80211_ATTR_TID_CONFIG={0x10, 0x11d, 0x0, 0x1, [{0xc, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE={0x8, 0xd, 0x0, 0x1, [@NL80211_BAND_6GHZ={0x4}]}]}]}]}, 0x2c}, 0x1, 0x0, 0x0, 0x800}, 0x4050) 793.58µs ago: executing program 5 (id=961): r0 = openat(0xffffffffffffff9c, &(0x7f00000006c0)='./file1\x00', 0x2040, 0x0) fcntl$setlease(r0, 0x400, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000800)='./file2\x00', 0x42, 0x0) rename(&(0x7f0000000880)='./file2\x00', &(0x7f00000008c0)='./file1\x00') 645.06µs ago: executing program 5 (id=962): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$sock_int(r0, 0x1, 0x2f, &(0x7f0000019600), 0x4) bind$inet(r0, &(0x7f0000019680)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r0, 0x0, 0x8b, 0x240467bc, &(0x7f0000019700)={0x2, 0x4e23, @empty}, 0x10) sendto$inet(r0, &(0x7f0000019740)="4a2a55b38b1bd0e10f421c55c595de03a2e1eb5b4bde024863e2c2401a81caa7143ff3fccb2918d5bbd9de54afdded946def5ad284048b03557fc9fe9c0c21f0935578410511bc617e68c2a55a5f14d533dae3d3ac0eb71a835fc08573d0bac4d1797fd2b7702732baf91d796fd2c0be505fdabeef568a3d1b54ab870aa2e42100b0cdbe28891dcf3f2bcc450790c340f3b90c6cf74d2e3b", 0xfe2b, 0x10000485, 0x0, 0xfffffffffffffe91) 534.24µs ago: executing program 2 (id=963): listxattr(&(0x7f0000000800)='./tracefs_dir\x00', 0x0, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000340)={0x0, 0x19, &(0x7f0000000740)={&(0x7f0000000780)=@migrate={0x154, 0x21, 0x1, 0x0, 0x0, {{@in=@multicast1, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}}, [@encap={0x1c, 0x4, {0x0, 0x0, 0x0, @in=@multicast2}}, @migrate={0xe8}]}, 0x154}}, 0x0) 452.27µs ago: executing program 5 (id=964): r0 = socket$inet6(0xa, 0x80001, 0x0) setsockopt$inet6_MCAST_JOIN_GROUP(r0, 0x29, 0x2a, &(0x7f0000001240)={0x100000001, {{0xa, 0x0, 0x0, @mcast1}}}, 0x88) setsockopt$inet6_MCAST_MSFILTER(r0, 0x29, 0x30, &(0x7f0000001500)={0x1, {{0xa, 0x4e20, 0x0, @mcast1}}, 0x1, 0x3, [{{0xa, 0x4e22, 0xa27d, @private0, 0x996}}, {{0xa, 0x4e24, 0xffffffff, @dev={0xfe, 0x80, '\x00', 0x12}, 0x5}}, {{0xa, 0x4e22, 0x2, @ipv4={'\x00', '\xff\xff', @broadcast}, 0x8}}]}, 0x210) 358.27µs ago: executing program 2 (id=965): r0 = socket$inet6(0xa, 0x3, 0x7) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000000)={@mcast1, 0x800, 0x0, 0x1, 0x1, 0x2000, 0xfffe}, 0x20) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000040)={@loopback={0x0, 0x7ffffffff000}, 0x800, 0x0, 0xff}, 0x20) 0s ago: executing program 5 (id=966): mkdir(&(0x7f00000074c0)='./bus\x00', 0x0) mount$incfs(&(0x7f0000007500)='.\x00', &(0x7f0000007540)='./bus\x00', &(0x7f0000007580), 0xc002, 0x0) chdir(&(0x7f00000075c0)='./bus\x00') r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000ac0)='.\x00', 0x0, 0x0) getdents(r0, 0x0, 0x0) getdents(r0, 0x0, 0xbb) kernel console output (not intermixed with test programs): B WDM device [ 42.229843][ T64] wwan wwan0: port wwan0mbim0 attached [ 42.236998][ T64] cdc_mbim 2-1:1.0 wwan0: register 'cdc_mbim' at usb-dummy_hcd.1-1, CDC MBIM, 86:84:ab:bc:72:a2 [ 42.250362][ T64] usb 2-1: USB disconnect, device number 11 [ 42.251327][ T312] usb 3-1: Using ep0 maxpacket: 32 [ 42.257541][ T64] cdc_mbim 2-1:1.0 wwan0: unregister 'cdc_mbim' usb-dummy_hcd.1-1, CDC MBIM [ 42.274585][ T312] usb 3-1: config 0 has an invalid interface number: 184 but max is 0 [ 42.282967][ T312] usb 3-1: config 0 has no interface number 0 [ 42.289150][ T312] usb 3-1: config 0 interface 184 has no altsetting 0 [ 42.297395][ T312] usb 3-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 42.306567][ T312] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 42.314663][ T31] usb 5-1: Using ep0 maxpacket: 32 [ 42.319874][ T312] usb 3-1: Product: syz [ 42.324180][ T312] usb 3-1: Manufacturer: syz [ 42.327494][ T64] wwan wwan0: port wwan0mbim0 disconnected [ 42.328937][ T312] usb 3-1: SerialNumber: syz [ 42.339782][ T31] usb 5-1: config 0 has an invalid interface number: 196 but max is 0 [ 42.348321][ T31] usb 5-1: config 0 has no interface number 0 [ 42.355050][ T312] usb 3-1: config 0 descriptor?? [ 42.360111][ T31] usb 5-1: config 0 interface 196 altsetting 1 bulk endpoint 0x2 has invalid maxpacket 528 [ 42.370194][ T31] usb 5-1: config 0 interface 196 has no altsetting 0 [ 42.377508][ T312] smsc75xx v1.0.0 [ 42.382730][ T31] usb 5-1: New USB device found, idVendor=05ac, idProduct=7700, bcdDevice=eb.3a [ 42.392029][ T31] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 42.400150][ T31] usb 5-1: Product: syz [ 42.404367][ T31] usb 5-1: Manufacturer: syz [ 42.408989][ T31] usb 5-1: SerialNumber: syz [ 42.414264][ T31] usb 5-1: config 0 descriptor?? [ 42.419528][ T817] raw-gadget.3 gadget.4: fail, usb_ep_enable returned -22 [ 42.440752][ T9] usb 4-1: USB disconnect, device number 8 [ 42.497932][ T828] input: syz0 as /devices/virtual/input/input9 [ 42.511257][ T828] fscrypt (sda1, inode 1262): Can't use IV_INO_LBLK_64 policy with contents mode other than AES-256-XTS [ 42.630214][ T31] ipheth 5-1:0.196: ipheth_get_macaddr: usb_control_msg: -71 [ 42.640089][ T31] ipheth 5-1:0.196: probe with driver ipheth failed with error -71 [ 42.649984][ T31] usb 5-1: USB disconnect, device number 7 [ 42.659303][ T847] fuse: Unknown parameter '0x0000000000000003' [ 43.156379][ T855] netlink: 'syz.4.129': attribute type 4 has an invalid length. [ 43.167263][ T855] netlink: 16 bytes leftover after parsing attributes in process `syz.4.129'. [ 43.179113][ T855] veth2: entered allmulticast mode [ 43.191164][ T36] kauditd_printk_skb: 16 callbacks suppressed [ 43.191179][ T36] audit: type=1400 audit(1794132347.559:281): avc: denied { bind } for pid=854 comm="syz.4.129" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 43.266903][ T36] audit: type=1400 audit(1794132347.669:282): avc: denied { connect } for pid=858 comm="syz.4.130" lport=58 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 43.287613][ T9] usb 4-1: new high-speed USB device number 9 using dummy_hcd [ 43.311021][ T36] audit: type=1400 audit(1794132347.689:283): avc: denied { search } for pid=851 comm="syz.1.128" name="/" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=dir permissive=1 [ 43.317216][ T859] kvm_intel: kvm [858]: vcpu0, guest rIP: 0x9114 Unhandled WRMSR(0x1d9) = 0x11b7 [ 43.343567][ T859] kvm: kvm [858]: vcpu0, guest rIP: 0x9114 Unhandled WRMSR(0x187) = 0xa0f9 [ 43.352427][ T859] kvm: kvm [858]: vcpu0, guest rIP: 0x9114 Unhandled WRMSR(0x186) = 0xe791 [ 43.363043][ T859] kvm: kvm [858]: vcpu0, guest rIP: 0x9114 Unhandled WRMSR(0x11e) = 0x1637 [ 43.373354][ T859] kvm: kvm [858]: vcpu0, guest rIP: 0x9114 Unhandled WRMSR(0xc2) = 0xd393 [ 43.382162][ T859] kvm: kvm [858]: vcpu0, guest rIP: 0x9114 Unhandled WRMSR(0xc1) = 0xb52c [ 43.394478][ T859] kvm: MONITOR instruction emulated as NOP! [ 43.472540][ T9] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 43.482441][ T9] usb 4-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 43.495610][ T9] usb 4-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 43.501956][ T36] audit: type=1400 audit(1794132347.909:284): avc: denied { setopt } for pid=863 comm="syz.4.132" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 43.510185][ T9] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 43.531076][ T31] usb 2-1: new high-speed USB device number 12 using dummy_hcd [ 43.545564][ T36] audit: type=1400 audit(1794132347.939:285): avc: denied { read append } for pid=863 comm="syz.4.132" name="rtc0" dev="devtmpfs" ino=195 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 43.547039][ T9] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 43.569381][ T36] audit: type=1400 audit(1794132347.939:286): avc: denied { open } for pid=863 comm="syz.4.132" path="/dev/rtc0" dev="devtmpfs" ino=195 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 43.579544][ T9] usb 4-1: Product: syz [ 43.605310][ T9] usb 4-1: Manufacturer: syz [ 43.609939][ T312] smsc75xx 3-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000044: -71 [ 43.609967][ T312] smsc75xx 3-1:0.184 (unnamed net_device) (uninitialized): Error reading E2P_DATA [ 43.611037][ T312] smsc75xx 3-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -71 [ 43.622641][ T9] usb 4-1: SerialNumber: syz [ 43.636018][ T312] smsc75xx 3-1:0.184 (unnamed net_device) (uninitialized): Failed to read PMT_CTL: -71 [ 43.643941][ T9] hub 4-1:1.0: bad descriptor, ignoring hub [ 43.647608][ T312] smsc75xx 3-1:0.184 (unnamed net_device) (uninitialized): device not ready in smsc75xx_reset [ 43.657868][ T9] hub 4-1:1.0: probe with driver hub failed with error -5 [ 43.672783][ T312] smsc75xx 3-1:0.184 (unnamed net_device) (uninitialized): smsc75xx_reset error -71 [ 43.672876][ T312] smsc75xx 3-1:0.184: probe with driver smsc75xx failed with error -71 [ 43.700945][ T312] usb 3-1: USB disconnect, device number 14 [ 43.751963][ T31] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 43.762180][ T31] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 43.771131][ T31] usb 2-1: New USB device found, idVendor=046d, idProduct=0825, bcdDevice= 1.00 [ 43.780208][ T31] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 43.841002][ T822] usb 5-1: new full-speed USB device number 8 using dummy_hcd [ 43.852210][ T849] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 43.860832][ T849] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 43.869756][ T9] usblp 4-1:1.0: usblp0: USB Unidirectional printer dev 9 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 43.902805][ T9] usb 4-1: USB disconnect, device number 9 [ 43.909328][ T9] usblp0: removed [ 43.998542][ T64] usb 2-1: USB disconnect, device number 12 [ 44.002359][ T822] usb 5-1: unable to get BOS descriptor or descriptor too short [ 44.012595][ T822] usb 5-1: not running at top speed; connect to a high speed hub [ 44.022470][ T822] usb 5-1: New USB device found, idVendor=0ccd, idProduct=00b1, bcdDevice= 0.40 [ 44.031561][ T822] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 44.039850][ T822] usb 5-1: Product: 헝戋౻研惉뻪쵉䝆悢탉ᦻ៨䌍⑑ㅒ뵷⹇鋔쐓킄鯬溺湽╸棣榥绪쿚ⲱⲽ㗩憣翰㐡䔂椘絿㿓ጴ崕䎼싄痔쫫゚剻ꋏ쇛쵉ề쯃 [ 44.059182][ T822] usb 5-1: Manufacturer: 讷㐉쩩꤮ꨙ苷絃ᶏ㉓쥸齷蔭엻捼㵷쑀␨찗轈瀀䧯릒鐺ᖗ鸬糚➃ᎁ䈕㦅䎊㙐鈿啀鹽執鉝敟襆ᴭ璎╰챢麊飚 [ 44.076527][ T822] usb 5-1: SerialNumber: ␊ [ 44.240843][ T36] audit: type=1400 audit(1794132348.639:287): avc: denied { watch } for pid=870 comm="syz.2.134" path="/34" dev="tmpfs" ino=216 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 44.284877][ T822] snd-usb-audio 5-1:1.0: probe with driver snd-usb-audio failed with error -71 [ 44.294873][ T822] usb 5-1: USB disconnect, device number 8 [ 44.310068][ T873] fuse: Unknown parameter '0x0000000000000003' [ 44.369686][ T36] audit: type=1400 audit(1794132348.769:288): avc: denied { create } for pid=883 comm="syz.2.140" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 44.405862][ T886] incfs: Backing dir is not set, filesystem can't be mounted. [ 44.413748][ T886] incfs: mount failed -2 [ 44.419962][ T36] audit: type=1400 audit(1794132348.819:289): avc: denied { read } for pid=885 comm="syz.2.141" name="usbmon3" dev="devtmpfs" ino=100 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 44.445992][ T36] audit: type=1400 audit(1794132348.819:290): avc: denied { open } for pid=885 comm="syz.2.141" path="/dev/usbmon3" dev="devtmpfs" ino=100 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 44.945994][ T922] tipc: Enabling of bearer rejected, failed to enable media [ 45.230957][ T9] usb 5-1: new high-speed USB device number 9 using dummy_hcd [ 45.280971][ T31] usb 4-1: new full-speed USB device number 10 using dummy_hcd [ 45.392008][ T9] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 45.403407][ T9] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 1.00 [ 45.410970][ T31] usb 4-1: device descriptor read/64, error -71 [ 45.412544][ T9] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=0 [ 45.426844][ T9] usb 5-1: Product: syz [ 45.431066][ T9] usb 5-1: Manufacturer: syz [ 45.438686][ T9] usb 5-1: bad CDC descriptors [ 45.650968][ T31] usb 4-1: device descriptor read/64, error -71 [ 45.690981][ T9] usb 3-1: new high-speed USB device number 15 using dummy_hcd [ 45.840933][ T9] usb 3-1: Using ep0 maxpacket: 16 [ 45.847450][ T9] usb 3-1: unable to get BOS descriptor or descriptor too short [ 45.855877][ T9] usb 3-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 127, changing to 7 [ 45.868375][ T9] usb 3-1: New USB device found, idVendor=103d, idProduct=0100, bcdDevice= 0.40 [ 45.877490][ T9] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 45.885509][ T9] usb 3-1: Product: syz [ 45.889716][ T9] usb 3-1: Manufacturer: syz [ 45.894355][ T9] usb 3-1: SerialNumber: syz [ 45.900954][ T31] usb 4-1: new full-speed USB device number 11 using dummy_hcd [ 46.030970][ T31] usb 4-1: device descriptor read/64, error -71 [ 46.101275][ T9] usb 3-1: Audio class v2/v3 interfaces need an interface association [ 46.112909][ T9] snd-usb-audio 3-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 46.135900][ T9] usb 3-1: USB disconnect, device number 15 [ 46.149774][ T329] udevd[329]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.1/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 46.172521][ T971] overlayfs: failed to clone lowerpath [ 46.270941][ T31] usb 4-1: device descriptor read/64, error -71 [ 46.381269][ T31] usb usb4-port1: attempt power cycle [ 46.730951][ T31] usb 4-1: new full-speed USB device number 12 using dummy_hcd [ 46.751911][ T31] usb 4-1: device descriptor read/8, error -71 [ 46.881979][ T31] usb 4-1: device descriptor read/8, error -71 [ 46.974350][ T980] 9p: Unknown uid 00000000004294967295 [ 47.120971][ T31] usb 4-1: new full-speed USB device number 13 using dummy_hcd [ 47.141964][ T31] usb 4-1: device descriptor read/8, error -71 [ 47.271922][ T31] usb 4-1: device descriptor read/8, error -71 [ 47.381043][ T31] usb usb4-port1: unable to enumerate USB device [ 48.000170][ T9] usb 5-1: USB disconnect, device number 9 [ 48.015720][ T990] syz.4.171 (990) used obsolete PPPIOCDETACH ioctl [ 48.154301][ T1001] device-mapper: ioctl: Unable to rename non-existent device, syzd0 to uuid syzd0 [ 48.163832][ T677] usb 2-1: new high-speed USB device number 13 using dummy_hcd [ 48.277180][ T36] kauditd_printk_skb: 16 callbacks suppressed [ 48.277196][ T36] audit: type=1400 audit(1794132352.679:307): avc: denied { mounton } for pid=1006 comm="syz.4.176" path="/dev/binderfs" dev="binder" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 48.310975][ T677] usb 2-1: device descriptor read/64, error -71 [ 48.329044][ T36] audit: type=1400 audit(1794132352.729:308): avc: denied { create } for pid=1016 comm="syz.4.178" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dccp_socket permissive=1 [ 48.349009][ T36] audit: type=1400 audit(1794132352.729:309): avc: denied { ioctl } for pid=1016 comm="syz.4.178" path="socket:[11892]" dev="sockfs" ino=11892 ioctlcmd=0x9411 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 48.356574][ T1024] EXT4-fs: dax option not supported [ 48.540938][ T10] usb 4-1: new high-speed USB device number 14 using dummy_hcd [ 48.551126][ T677] usb 2-1: device descriptor read/64, error -71 [ 48.692003][ T10] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 48.703637][ T10] usb 4-1: New USB device found, idVendor=04b8, idProduct=0202, bcdDevice= 0.40 [ 48.712783][ T10] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 48.720819][ T10] usb 4-1: Product: syz [ 48.725066][ T10] usb 4-1: Manufacturer: syz [ 48.729683][ T10] usb 4-1: SerialNumber: syz [ 48.791227][ T677] usb 2-1: new high-speed USB device number 14 using dummy_hcd [ 48.920945][ T677] usb 2-1: device descriptor read/64, error -71 [ 48.942747][ T10] usb 4-1: USB disconnect, device number 14 [ 49.160985][ T677] usb 2-1: device descriptor read/64, error -71 [ 49.271021][ T677] usb usb2-port1: attempt power cycle [ 49.610946][ T677] usb 2-1: new high-speed USB device number 15 using dummy_hcd [ 49.621046][ T10] usb 5-1: new high-speed USB device number 10 using dummy_hcd [ 49.632018][ T677] usb 2-1: device descriptor read/8, error -71 [ 49.750947][ T10] usb 5-1: device descriptor read/64, error -71 [ 49.762073][ T677] usb 2-1: device descriptor read/8, error -71 [ 49.990968][ T10] usb 5-1: device descriptor read/64, error -71 [ 50.001185][ T677] usb 2-1: new high-speed USB device number 16 using dummy_hcd [ 50.021970][ T677] usb 2-1: device descriptor read/8, error -71 [ 50.152000][ T677] usb 2-1: device descriptor read/8, error -71 [ 50.230971][ T10] usb 5-1: new high-speed USB device number 11 using dummy_hcd [ 50.261026][ T677] usb usb2-port1: unable to enumerate USB device [ 50.350237][ T36] audit: type=1400 audit(1794132354.749:310): avc: denied { execute_no_trans } for pid=1049 comm="syz.3.187" path="/53/file1" dev="tmpfs" ino=324 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 50.360979][ T10] usb 5-1: device descriptor read/64, error -71 [ 50.433845][ T36] audit: type=1400 audit(1794132354.839:311): avc: denied { read } for pid=1052 comm="syz.3.188" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 50.504197][ T1057] fuse: Bad value for 'fd' [ 50.528768][ T36] audit: type=1326 audit(1794132354.929:312): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1060 comm="syz.2.191" exe="/root/ci2-android-6-12-rust/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe16819fb19 code=0x7ff00000 [ 50.554370][ T36] audit: type=1326 audit(1794132354.929:313): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1060 comm="syz.2.191" exe="/root/ci2-android-6-12-rust/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe16819fb19 code=0x7ff00000 [ 50.579915][ T36] audit: type=1326 audit(1794132354.929:314): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1060 comm="syz.2.191" exe="/root/ci2-android-6-12-rust/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe16819fb19 code=0x7ff00000 [ 50.605438][ T36] audit: type=1326 audit(1794132354.929:315): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1060 comm="syz.2.191" exe="/root/ci2-android-6-12-rust/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe16819fb19 code=0x7ff00000 [ 50.630733][ T10] usb 5-1: device descriptor read/64, error -71 [ 50.637420][ T36] audit: type=1326 audit(1794132354.929:316): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1060 comm="syz.2.191" exe="/root/ci2-android-6-12-rust/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe16819fb19 code=0x7ff00000 [ 50.741032][ T10] usb usb5-port1: attempt power cycle [ 50.951982][ T1064] fuse: Unknown parameter '0x0000000000000007' [ 51.100952][ T10] usb 5-1: new high-speed USB device number 12 using dummy_hcd [ 51.131892][ T10] usb 5-1: device descriptor read/8, error -71 [ 51.215080][ T1066] tipc: Enabling of bearer rejected, failed to enable media [ 51.263155][ T10] usb 5-1: device descriptor read/8, error -71 [ 51.305043][ T1069] kvm: kvm [1068]: vcpu0, guest rIP: 0x9135 Unhandled WRMSR(0x11e) = 0x0 [ 51.351215][ T822] usb 2-1: new high-speed USB device number 17 using dummy_hcd [ 51.359972][ T1071] netlink: 'syz.3.194': attribute type 5 has an invalid length. [ 51.368118][ T1071] netlink: 3657 bytes leftover after parsing attributes in process `syz.3.194'. [ 51.388952][ T1077] netlink: 'syz.3.194': attribute type 5 has an invalid length. [ 51.400972][ T1077] netlink: 3657 bytes leftover after parsing attributes in process `syz.3.194'. [ 51.404266][ T1076] kvm: kvm [1068]: vcpu0, guest rIP: 0x9135 Unhandled WRMSR(0x11e) = 0x0 [ 51.500970][ T10] usb 5-1: new high-speed USB device number 13 using dummy_hcd [ 51.520956][ T822] usb 2-1: device descriptor read/64, error -71 [ 51.522026][ T10] usb 5-1: device descriptor read/8, error -71 [ 51.661988][ T10] usb 5-1: device descriptor read/8, error -71 [ 51.760963][ T822] usb 2-1: device descriptor read/64, error -71 [ 51.771041][ T10] usb usb5-port1: unable to enumerate USB device [ 52.001816][ T822] usb 2-1: new high-speed USB device number 18 using dummy_hcd [ 52.140959][ T822] usb 2-1: device descriptor read/64, error -71 [ 52.266016][ T1085] 9pnet_fd: p9_fd_create_tcp (1085): problem connecting socket to 127.0.0.1 [ 52.390946][ T822] usb 2-1: device descriptor read/64, error -71 [ 52.511038][ T822] usb usb2-port1: attempt power cycle [ 52.555883][ T1110] netlink: 12 bytes leftover after parsing attributes in process `syz.4.203'. [ 52.740961][ T677] usb 4-1: new high-speed USB device number 15 using dummy_hcd [ 52.803586][ T1115] mmap: syz.2.204 (1115) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 52.860956][ T822] usb 2-1: new high-speed USB device number 19 using dummy_hcd [ 52.881908][ T822] usb 2-1: device descriptor read/8, error -71 [ 53.011931][ T822] usb 2-1: device descriptor read/8, error -71 [ 53.053468][ T1119] futex_wake_op: syz.3.205 tries to shift op by 144; fix this program [ 53.261722][ T822] usb 2-1: new high-speed USB device number 20 using dummy_hcd [ 53.282016][ T822] usb 2-1: device descriptor read/8, error -71 [ 53.337378][ T36] kauditd_printk_skb: 6740 callbacks suppressed [ 53.337394][ T36] audit: type=1400 audit(1794132357.739:7057): avc: denied { ioctl } for pid=1128 comm="syz.2.208" path="socket:[12261]" dev="sockfs" ino=12261 ioctlcmd=0x940d scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 53.370963][ T31] usb 5-1: new high-speed USB device number 14 using dummy_hcd [ 53.390954][ T1134] netlink: 80 bytes leftover after parsing attributes in process `syz.2.210'. [ 53.411991][ T822] usb 2-1: device descriptor read/8, error -71 [ 53.521505][ T822] usb usb2-port1: unable to enumerate USB device [ 53.531996][ T31] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 53.550921][ T31] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 53.561730][ T31] usb 5-1: New USB device found, idVendor=0dba, idProduct=1000, bcdDevice= 0.40 [ 53.571037][ T31] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 53.579113][ T31] usb 5-1: Product: syz [ 53.583727][ T31] usb 5-1: Manufacturer: syz [ 53.588435][ T31] usb 5-1: SerialNumber: syz [ 53.807137][ T31] usb 5-1: unit 4 not found! [ 53.817273][ T31] usb 5-1: USB disconnect, device number 14 [ 53.987006][ T36] audit: type=1400 audit(1794132614.389:7058): avc: denied { create } for pid=1148 comm="syz.1.214" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 54.016768][ T36] audit: type=1400 audit(1794132614.419:7059): avc: denied { setopt } for pid=1148 comm="syz.1.214" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 54.390971][ T312] usb 2-1: new high-speed USB device number 21 using dummy_hcd [ 54.436587][ T1162] overlayfs: failed to clone upperpath [ 54.572372][ T312] usb 2-1: config 0 interface 0 altsetting 8 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 54.583687][ T312] usb 2-1: config 0 interface 0 has no altsetting 0 [ 54.590496][ T312] usb 2-1: New USB device found, idVendor=046d, idProduct=c287, bcdDevice= 0.00 [ 54.599642][ T312] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 54.609336][ T312] usb 2-1: config 0 descriptor?? [ 54.810972][ T10] usb 5-1: new high-speed USB device number 15 using dummy_hcd [ 54.962117][ T10] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 54.970984][ T822] usb 4-1: new high-speed USB device number 16 using dummy_hcd [ 54.972282][ T10] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 54.988786][ T10] usb 5-1: New USB device found, idVendor=041e, idProduct=3010, bcdDevice= 1.00 [ 54.998015][ T10] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 55.009574][ T10] usb 5-1: 0:1 : does not exist [ 55.024679][ T312] input: HID 046d:c287 as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/0003:046D:C287.0003/input/input10 [ 55.097151][ T36] audit: type=1400 audit(1794132615.499:7060): avc: denied { ioctl } for pid=95 comm="acpid" path="/dev/input/event3" dev="devtmpfs" ino=529 ioctlcmd=0x4520 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 55.102439][ T312] logitech 0003:046D:C287.0003: input,hidraw0: USB HID v0.00 Keyboard [HID 046d:c287] on usb-dummy_hcd.1-1/input0 [ 55.139700][ T312] logitech 0003:046D:C287.0003: not enough values in HID_OUTPUT_REPORT 0 field 0 [ 55.152698][ T822] usb 4-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 64, changing to 7 [ 55.169273][ T822] usb 4-1: New USB device found, idVendor=1235, idProduct=8014, bcdDevice= 0.40 [ 55.178637][ T822] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 55.187172][ T822] usb 4-1: Product: syz [ 55.191980][ T822] usb 4-1: Manufacturer: ࠖ [ 55.196596][ T822] usb 4-1: SerialNumber: syz [ 55.208405][ T1181] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 55.217122][ T1181] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 55.226705][ T10] usb 5-1: USB disconnect, device number 15 [ 55.231948][ T1155] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 55.244344][ T1155] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 55.404198][ T36] audit: type=1400 audit(1794132615.809:7061): avc: denied { getopt } for pid=1178 comm="syz.3.224" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 55.413719][ T822] usb 4-1: found format II with max.bitrate = 128, frame size=4 [ 55.431391][ T822] usb 4-1: 1:1 : invalid UAC_FORMAT_TYPE desc [ 55.437736][ T822] usb 4-1: 2:1 : format type 0 is detected, processed as PCM [ 55.445197][ T822] usb 4-1: 2:1 : invalid UAC_FORMAT_TYPE desc [ 55.455086][ T822] usb 4-1: USB disconnect, device number 16 [ 55.467442][ T329] udevd[329]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card1/controlC1/../uevent} for writing: No such file or directory [ 55.931072][ T36] audit: type=1400 audit(1794132616.339:7062): avc: denied { name_bind } for pid=1203 comm="syz.3.231" src=3618 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=udp_socket permissive=1 [ 56.040964][ T31] usb 5-1: new full-speed USB device number 16 using dummy_hcd [ 56.180976][ T31] usb 5-1: device descriptor read/64, error -71 [ 56.450935][ T31] usb 5-1: device descriptor read/64, error -71 [ 56.498557][ T1217] ./dev/sda1: Can't lookup blockdev [ 56.700945][ T31] usb 5-1: new full-speed USB device number 17 using dummy_hcd [ 56.840981][ T31] usb 5-1: device descriptor read/64, error -71 [ 56.862086][ T1223] FAULT_INJECTION: forcing a failure. [ 56.862086][ T1223] name failslab, interval 1, probability 0, space 0, times 0 [ 56.874833][ T1223] CPU: 0 UID: 0 PID: 1223 Comm: syz.3.236 Not tainted syzkaller #0 ff996278633adec6fd25d1632b496761701c4fe9 [ 56.874866][ T1223] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/15/2026 [ 56.874879][ T1223] Call Trace: [ 56.874887][ T1223] [ 56.874894][ T1223] __dump_stack+0x21/0x30 [ 56.874917][ T1223] dump_stack_lvl+0x140/0x1c0 [ 56.874934][ T1223] ? __cfi_dump_stack_lvl+0x10/0x10 [ 56.874955][ T1223] dump_stack+0x19/0x20 [ 56.874971][ T1223] should_fail_ex+0x3c2/0x510 [ 56.874990][ T1223] should_failslab+0xac/0x100 [ 56.875007][ T1223] kmem_cache_alloc_noprof+0x42/0x410 [ 56.875022][ T1223] ? key_alloc+0x2ee/0x1060 [ 56.875034][ T1223] ? key_user_lookup+0x263/0x4f0 [ 56.875047][ T1223] key_alloc+0x2ee/0x1060 [ 56.875059][ T1223] keyring_alloc+0x4b/0xc0 [ 56.875079][ T1223] lookup_user_key+0x515/0x1230 [ 56.875103][ T1223] ? __cfi_lookup_user_key+0x10/0x10 [ 56.875123][ T1223] ? do_futex+0x32a/0x510 [ 56.875144][ T1223] ? __cfi_lookup_user_key_possessed+0x10/0x10 [ 56.875160][ T1223] ? strncpy_from_user+0x14f/0x280 [ 56.875179][ T1223] __se_sys_add_key+0x317/0x4b0 [ 56.875190][ T1223] ? __x64_sys_add_key+0xf0/0xf0 [ 56.875200][ T1223] ? __kasan_check_write+0x18/0x20 [ 56.875216][ T1223] ? fpregs_restore_userregs+0x11c/0x260 [ 56.875242][ T1223] __x64_sys_add_key+0xc3/0xf0 [ 56.875260][ T1223] x64_sys_call+0x195f/0x2ee0 [ 56.875278][ T1223] do_syscall_64+0x57/0xf0 [ 56.875297][ T1223] ? clear_bhb_loop+0x50/0xa0 [ 56.875313][ T1223] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 56.875327][ T1223] RIP: 0033:0x7fab77f9fb19 [ 56.875338][ T1223] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 56.875347][ T1223] RSP: 002b:00007fab78e61028 EFLAGS: 00000246 ORIG_RAX: 00000000000000f8 [ 56.875359][ T1223] RAX: ffffffffffffffda RBX: 00007fab78225fa0 RCX: 00007fab77f9fb19 [ 56.875370][ T1223] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 00002000000002c0 [ 56.875382][ T1223] RBP: 00007fab78037b70 R08: fffffffffffffffe R09: 0000000000000000 [ 56.875395][ T1223] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 56.875407][ T1223] R13: 00007fab78226038 R14: 00007fab78225fa0 R15: 00007ffda48078d8 [ 56.875425][ T1223] [ 57.046435][ T1226] overlayfs: failed to clone upperpath [ 57.111739][ T31] usb 5-1: device descriptor read/64, error -71 [ 57.183137][ T1243] x_tables: duplicate underflow at hook 1 [ 57.191789][ T822] usb 2-1: USB disconnect, device number 21 [ 57.221048][ T31] usb usb5-port1: attempt power cycle [ 57.240202][ T1254] capability: warning: `syz.2.244' uses 32-bit capabilities (legacy support in use) [ 57.251318][ T1254] overlayfs: failed to resolve './cgroup': -2 [ 57.560996][ T31] usb 5-1: new full-speed USB device number 18 using dummy_hcd [ 57.581859][ T31] usb 5-1: device descriptor read/8, error -71 [ 57.711973][ T31] usb 5-1: device descriptor read/8, error -71 [ 57.803993][ T1261] input: syz1 as /devices/virtual/input/input11 [ 57.817783][ T36] audit: type=1400 audit(1794132618.219:7063): avc: denied { ioctl } for pid=1260 comm="syz.3.247" path="socket:[13157]" dev="sockfs" ino=13157 ioctlcmd=0x662c scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 57.877478][ T36] audit: type=1400 audit(1794132618.279:7064): avc: denied { ioctl } for pid=1260 comm="syz.3.247" path="socket:[13229]" dev="sockfs" ino=13229 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 57.954199][ T1264] netlink: 40 bytes leftover after parsing attributes in process `syz.3.248'. [ 57.963199][ T1264] netlink: 40 bytes leftover after parsing attributes in process `syz.3.248'. [ 57.990965][ T31] usb 5-1: new full-speed USB device number 19 using dummy_hcd [ 58.011918][ T31] usb 5-1: device descriptor read/8, error -71 [ 58.141882][ T31] usb 5-1: device descriptor read/8, error -71 [ 58.251166][ T31] usb usb5-port1: unable to enumerate USB device [ 58.270949][ T822] usb 4-1: new full-speed USB device number 17 using dummy_hcd [ 58.319886][ T1274] 9pnet: Could not find request transport: dd [ 58.326112][ T311] usb 2-1: new high-speed USB device number 22 using dummy_hcd [ 58.326815][ T36] audit: type=1400 audit(1794132618.729:7065): avc: denied { setattr } for pid=1273 comm="syz.2.252" name="" dev="pipefs" ino=13654 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=fifo_file permissive=1 [ 58.362548][ T36] audit: type=1400 audit(1794132618.769:7066): avc: denied { mount } for pid=1275 comm="syz.2.253" name="/" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=filesystem permissive=1 [ 58.421878][ T822] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 58.432032][ T822] usb 4-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 58.441164][ T822] usb 4-1: config 1 interface 1 altsetting 1 endpoint 0x1 has invalid wMaxPacketSize 0 [ 58.452196][ T822] usb 4-1: New USB device found, idVendor=200c, idProduct=100b, bcdDevice= 0.40 [ 58.461367][ T822] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 58.469493][ T822] usb 4-1: Product: syz [ 58.473889][ T822] usb 4-1: Manufacturer: syz [ 58.478521][ T822] usb 4-1: SerialNumber: syz [ 58.485085][ T311] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 58.496223][ T311] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 58.506037][ T311] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 58.518962][ T311] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 58.528072][ T311] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 58.536707][ T311] usb 2-1: config 0 descriptor?? [ 58.743234][ T36] audit: type=1400 audit(1794132619.149:7067): avc: denied { create } for pid=1268 comm="syz.1.250" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 58.763393][ T36] audit: type=1400 audit(1794132619.149:7068): avc: denied { bind } for pid=1268 comm="syz.1.250" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 58.786337][ T36] audit: type=1400 audit(1794132619.149:7069): avc: denied { connect } for pid=1268 comm="syz.1.250" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 58.806597][ T36] audit: type=1400 audit(1794132619.149:7070): avc: denied { write } for pid=1268 comm="syz.1.250" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 58.930755][ T36] audit: type=1326 audit(1794132619.329:7071): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1296 comm="syz.2.260" exe="/root/ci2-android-6-12-rust/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe16819fb19 code=0x7ffc0000 [ 58.947583][ T311] plantronics 0003:047F:FFFF.0004: No inputs registered, leaving [ 58.956779][ T36] audit: type=1326 audit(1794132619.329:7072): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1296 comm="syz.2.260" exe="/root/ci2-android-6-12-rust/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe16819fb19 code=0x7ffc0000 [ 58.991851][ T311] plantronics 0003:047F:FFFF.0004: hiddev96,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.1-1/input0 [ 59.004405][ T36] audit: type=1326 audit(1794132619.329:7073): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1296 comm="syz.2.260" exe="/root/ci2-android-6-12-rust/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fe16819fb19 code=0x7ffc0000 [ 59.032575][ T36] audit: type=1326 audit(1794132619.329:7074): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1296 comm="syz.2.260" exe="/root/ci2-android-6-12-rust/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe16819fb19 code=0x7ffc0000 [ 59.058065][ T36] audit: type=1326 audit(1794132619.329:7075): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1296 comm="syz.2.260" exe="/root/ci2-android-6-12-rust/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe16819fb19 code=0x7ffc0000 [ 59.087695][ T1315] netlink: 12 bytes leftover after parsing attributes in process `syz.2.265'. [ 59.940059][ T1335] netlink: 36 bytes leftover after parsing attributes in process `syz.2.271'. [ 60.080959][ T64] usb 5-1: new full-speed USB device number 20 using dummy_hcd [ 60.232291][ T64] usb 5-1: unable to get BOS descriptor or descriptor too short [ 60.240571][ T64] usb 5-1: not running at top speed; connect to a high speed hub [ 60.241122][ C1] plantronics 0003:047F:FFFF.0004: usb_submit_urb(ctrl) failed: -1 [ 60.249267][ T64] usb 5-1: config 8 has an invalid interface number: 43 but max is 1 [ 60.265631][ T64] usb 5-1: config 8 has an invalid interface number: 35 but max is 1 [ 60.273769][ T64] usb 5-1: config 8 has no interface number 0 [ 60.279870][ T64] usb 5-1: config 8 has no interface number 1 [ 60.286003][ T64] usb 5-1: config 8 interface 43 altsetting 17 has an endpoint descriptor with address 0xE5, changing to 0x85 [ 60.297692][ T64] usb 5-1: config 8 interface 43 has no altsetting 0 [ 60.304511][ T64] usb 5-1: config 8 interface 35 has no altsetting 0 [ 60.312620][ T64] usb 5-1: New USB device found, idVendor=0584, idProduct=0008, bcdDevice= 1.02 [ 60.321831][ T64] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 60.329838][ T64] usb 5-1: Product: syz [ 60.334091][ T64] usb 5-1: Manufacturer: syz [ 60.338725][ T64] usb 5-1: SerialNumber: syz [ 60.514071][ T1345] erofs: Unknown parameter '[' [ 60.519918][ T1345] fuse: Bad value for 'fd' [ 60.546868][ T1331] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 60.556277][ T1331] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 60.766329][ T64] ums-alauda 5-1:8.43: USB Mass Storage device detected [ 60.785562][ T64] scsi host1: usb-storage 5-1:8.43 [ 60.786153][ T1349] virtio-fs: tag not found [ 60.799807][ C1] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 60.803137][ T64] hub 5-1:8.35: Invalid hub with more than one config or interface [ 60.809045][ C1] Buffer I/O error on dev loop7, logical block 0, async page read [ 60.824976][ C1] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 60.834154][ C1] Buffer I/O error on dev loop7, logical block 0, async page read [ 60.834324][ T64] hub 5-1:8.35: probe with driver hub failed with error -22 [ 60.842188][ T1349] loop7: unable to read partition table [ 60.857948][ T64] ums-alauda 5-1:8.35: USB Mass Storage device detected [ 60.876764][ C1] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 60.886032][ C1] Buffer I/O error on dev loop7, logical block 0, async page read [ 60.894232][ C1] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 60.903444][ C1] Buffer I/O error on dev loop7, logical block 0, async page read [ 60.911423][ T110] loop7: unable to read partition table [ 60.927295][ C1] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 60.936551][ C1] Buffer I/O error on dev loop7, logical block 0, async page read [ 60.945486][ C1] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 60.950819][ T64] usb 5-1: USB disconnect, device number 20 [ 60.954670][ C1] Buffer I/O error on dev loop7, logical block 0, async page read [ 60.970750][ C0] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 60.979991][ C0] Buffer I/O error on dev loop7, logical block 0, async page read [ 60.989036][ C0] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 60.998262][ C0] Buffer I/O error on dev loop7, logical block 0, async page read [ 61.006875][ C0] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 61.013668][ T822] usb 4-1: USB disconnect, device number 17 [ 61.016088][ C0] Buffer I/O error on dev loop7, logical block 0, async page read [ 61.049856][ T318] udevd[318]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 61.061359][ T45] usb 2-1: USB disconnect, device number 22 [ 61.316629][ T1374] netlink: 'syz.4.283': attribute type 49 has an invalid length. [ 61.362227][ T1374] team_slave_1: entered promiscuous mode [ 61.367972][ T1374] team_slave_1: entered allmulticast mode [ 61.960961][ T45] usb 4-1: new high-speed USB device number 18 using dummy_hcd [ 62.030305][ T1426] file system registered [ 62.112035][ T45] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 62.124430][ T45] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 1.00 [ 62.133570][ T45] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 62.141725][ T45] usb 4-1: Product: syz [ 62.146026][ T45] usb 4-1: Manufacturer: syz [ 62.151170][ T45] usb 4-1: SerialNumber: syz [ 62.158867][ T45] cdc_wdm 4-1:1.0: cdc-wdm0: USB WDM device [ 62.164914][ T45] cdc_wdm 4-1:1.0: Unknown control protocol [ 62.262178][ T1453] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=1453 comm=syz.4.301 [ 62.275362][ T1451] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=0 sclass=netlink_tcpdiag_socket pid=1451 comm=syz.4.301 [ 62.300959][ T677] usb 2-1: new low-speed USB device number 23 using dummy_hcd [ 62.359776][ T64] usb 4-1: USB disconnect, device number 18 [ 62.453697][ T677] usb 2-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 205, changing to 4 [ 62.465063][ T677] usb 2-1: config 1 interface 1 altsetting 1 endpoint 0x1 has invalid maxpacket 32, setting to 0 [ 62.475697][ T677] usb 2-1: config 1 interface 2 altsetting 1 endpoint 0x82 has invalid maxpacket 16, setting to 0 [ 63.260962][ T45] usb 4-1: new full-speed USB device number 19 using dummy_hcd [ 63.357154][ T1493] netlink: 'syz.4.312': attribute type 29 has an invalid length. [ 63.411971][ T45] usb 4-1: config 0 interface 0 altsetting 4 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 63.423111][ T45] usb 4-1: config 0 interface 0 altsetting 4 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 63.435973][ T45] usb 4-1: config 0 interface 0 has no altsetting 0 [ 63.442664][ T45] usb 4-1: New USB device found, idVendor=057e, idProduct=2009, bcdDevice= 0.00 [ 63.451775][ T45] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 63.461623][ T45] usb 4-1: config 0 descriptor?? [ 63.469494][ T36] kauditd_printk_skb: 47 callbacks suppressed [ 63.469510][ T36] audit: type=1400 audit(1794132623.869:7123): avc: denied { create } for pid=1497 comm="syz.4.314" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 63.496409][ T36] audit: type=1400 audit(1794132623.869:7124): avc: denied { read append } for pid=1497 comm="syz.4.314" name="file0" dev="tmpfs" ino=314 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 63.519915][ T36] audit: type=1400 audit(1794132623.869:7125): avc: denied { open } for pid=1497 comm="syz.4.314" path="/53/file0" dev="tmpfs" ino=314 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 63.542714][ T36] audit: type=1400 audit(1794132623.869:7126): avc: denied { ioctl } for pid=1497 comm="syz.4.314" path="/53/file0" dev="tmpfs" ino=314 ioctlcmd=0x70c8 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 63.617056][ T36] audit: type=1400 audit(1794132624.019:7127): avc: denied { unlink } for pid=647 comm="syz-executor" name="file0" dev="tmpfs" ino=314 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 63.641196][ T36] audit: type=1400 audit(1794132624.049:7128): avc: denied { map } for pid=1500 comm="syz.4.315" path="socket:[15363]" dev="sockfs" ino=15363 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 63.880958][ T10] usb 5-1: new low-speed USB device number 21 using dummy_hcd [ 63.890011][ T36] audit: type=1400 audit(1794132624.289:7129): avc: denied { mount } for pid=1474 comm="syz.3.309" name="/" dev="securityfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=filesystem permissive=1 [ 63.901854][ T1475] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 63.921134][ T1475] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 63.934463][ T45] nintendo 0003:057E:2009.0005: item fetching failed at offset 3/24 [ 63.942757][ T45] nintendo 0003:057E:2009.0005: HID parse failed [ 63.949214][ T45] nintendo 0003:057E:2009.0005: probe - fail = -22 [ 63.955829][ T45] nintendo 0003:057E:2009.0005: probe with driver nintendo failed with error -22 [ 64.031980][ T10] usb 5-1: config index 0 descriptor too short (expected 1307, got 27) [ 64.040377][ T10] usb 5-1: config 0 has an invalid interface number: 0 but max is -1 [ 64.048516][ T10] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 0 [ 64.057581][ T10] usb 5-1: too many endpoints for config 0 interface 0 altsetting 0: 246, using maximum allowed: 30 [ 64.068577][ T10] usb 5-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 64.080186][ T10] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 64.091246][ T10] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 64.102307][ T10] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 246 [ 64.117342][ T10] usb 5-1: string descriptor 0 read error: -22 [ 64.123605][ T10] usb 5-1: New USB device found, idVendor=0460, idProduct=0008, bcdDevice=e2.de [ 64.132703][ T10] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 64.143985][ T10] usb 5-1: config 0 descriptor?? [ 64.149299][ T1501] raw-gadget.2 gadget.4: fail, usb_ep_enable returned -22 [ 64.157275][ T64] usb 4-1: USB disconnect, device number 19 [ 64.164705][ T10] hub 5-1:0.0: bad descriptor, ignoring hub [ 64.170649][ T10] hub 5-1:0.0: probe with driver hub failed with error -5 [ 64.180106][ T10] input: USB Acecad 302 Tablet 0460:0008 as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/input/input13 [ 64.669908][ T1504] tipc: Started in network mode [ 64.674852][ T1504] tipc: Node identity ac14140f, cluster identity 4711 [ 64.681745][ T1504] tipc: New replicast peer: 255.255.255.255 [ 64.688116][ T1504] tipc: Enabled bearer , priority 10 [ 64.697629][ T1504] tipc: Enabled bearer , priority 10 [ 64.716750][ T1504] netlink: 28 bytes leftover after parsing attributes in process `syz.3.316'. [ 64.762149][ T1503] tipc: Resetting bearer [ 64.769125][ T1503] tipc: Disabling bearer [ 64.813487][ T1511] netlink: 24 bytes leftover after parsing attributes in process `syz.3.317'. [ 64.875070][ T10] usb 5-1: USB disconnect, device number 21 [ 65.010850][ T1527] 9pnet_fd: Insufficient options for proto=fd [ 65.050720][ T1535] fuse: Bad value for 'fd' [ 65.068235][ T677] usb 2-1: New USB device found, idVendor=041e, idProduct=3000, bcdDevice= 0.40 [ 65.081236][ T677] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 65.090968][ T677] usb 2-1: can't set config #1, error -71 [ 65.101180][ T677] usb 2-1: USB disconnect, device number 23 [ 65.313952][ T10] usb 5-1: new high-speed USB device number 22 using dummy_hcd [ 65.472105][ T10] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 65.483098][ T10] usb 5-1: New USB device found, idVendor=28de, idProduct=1102, bcdDevice= 0.00 [ 65.492170][ T10] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 65.500864][ T10] usb 5-1: config 0 descriptor?? [ 65.707997][ T10] usbhid 5-1:0.0: can't add hid device: -71 [ 65.714554][ T10] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 65.723303][ T10] usb 5-1: USB disconnect, device number 22 [ 65.771247][ T1553] cgroup: Unknown subsys name 'measure' [ 65.800942][ T677] tipc: Node number set to 2886997007 [ 66.020972][ T10] usb 5-1: new high-speed USB device number 23 using dummy_hcd [ 66.071187][ T312] usb 4-1: new high-speed USB device number 20 using dummy_hcd [ 66.172010][ T10] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 66.183023][ T10] usb 5-1: New USB device found, idVendor=28de, idProduct=1102, bcdDevice= 0.00 [ 66.192107][ T10] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 66.200776][ T10] usb 5-1: config 0 descriptor?? [ 66.210952][ T45] usb 2-1: new high-speed USB device number 24 using dummy_hcd [ 66.230935][ T312] usb 4-1: Using ep0 maxpacket: 32 [ 66.237191][ T312] usb 4-1: config 4 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 66.248297][ T312] usb 4-1: config 4 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 66.259125][ T312] usb 4-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 66.268236][ T312] usb 4-1: New USB device strings: Mfr=255, Product=255, SerialNumber=0 [ 66.276624][ T312] usb 4-1: Product: syz [ 66.280862][ T312] usb 4-1: Manufacturer: syz [ 66.287174][ T312] hub 4-1:4.0: USB hub found [ 66.307982][ T1565] ./dev/sda1: Can't lookup blockdev [ 66.325376][ T36] audit: type=1400 audit(1794132626.729:7130): avc: denied { bind } for pid=1566 comm="syz.2.335" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 66.360987][ T45] usb 2-1: Using ep0 maxpacket: 16 [ 66.367245][ T45] usb 2-1: config 0 interface 0 altsetting 16 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 66.378290][ T45] usb 2-1: config 0 interface 0 altsetting 16 endpoint 0x81 has invalid wMaxPacketSize 0 [ 66.388271][ T45] usb 2-1: config 0 interface 0 altsetting 16 has 1 endpoint descriptor, different from the interface descriptor's value: 28 [ 66.401304][ T45] usb 2-1: config 0 interface 0 has no altsetting 0 [ 66.407572][ T1572] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 66.408494][ T45] usb 2-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.00 [ 66.417304][ T1572] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 66.425945][ T45] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 66.441990][ T45] usb 2-1: config 0 descriptor?? [ 66.489553][ T312] hub 4-1:4.0: 3 ports detected [ 66.609212][ T10] usbhid 5-1:0.0: can't add hid device: -71 [ 66.616008][ T10] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 66.624965][ T10] usb 5-1: USB disconnect, device number 23 [ 66.849146][ T1561] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 66.857805][ T1561] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 66.868422][ T45] usbhid 2-1:0.0: can't add hid device: -71 [ 66.874523][ T45] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 66.884706][ T45] usb 2-1: USB disconnect, device number 24 [ 67.102175][ T36] audit: type=1400 audit(1794132627.509:7131): avc: denied { create } for pid=1558 comm="syz.3.332" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 67.132965][ T312] usb 4-1: USB disconnect, device number 20 [ 67.620958][ T312] usb 2-1: new high-speed USB device number 25 using dummy_hcd [ 67.689782][ T36] audit: type=1400 audit(1794132628.089:7132): avc: denied { rename } for pid=1590 comm="syz.3.342" name="file1" dev="tmpfs" ino=464 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 67.792036][ T312] usb 2-1: config 0 has no interfaces? [ 67.798956][ T312] usb 2-1: New USB device found, idVendor=10d6, idProduct=2200, bcdDevice= 0.02 [ 67.808207][ T312] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 67.816326][ T312] usb 2-1: SerialNumber: syz [ 67.821939][ T312] usb 2-1: config 0 descriptor?? [ 68.032983][ T45] usb 2-1: USB disconnect, device number 25 [ 68.187999][ T1639] kvm: Disabled LAPIC found during irq injection [ 68.471662][ T36] audit: type=1400 audit(1794132628.879:7133): avc: denied { watch watch_reads } for pid=1640 comm="syz.4.357" path="/64/file0" dev="tmpfs" ino=374 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 68.502612][ T1644] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 68.511520][ T1644] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 68.519971][ T1647] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 68.528427][ T1644] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 68.528617][ T1647] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 68.536994][ T1644] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 68.554911][ T1644] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 68.564643][ T1644] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 68.647578][ T36] audit: type=1400 audit(1794132629.049:7134): avc: denied { write } for pid=1652 comm="syz.4.361" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 68.677270][ T36] audit: type=1400 audit(1794132629.079:7135): avc: denied { mounton } for pid=1657 comm="syz.4.362" path="/66/file0" dev="tmpfs" ino=387 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 68.712975][ T1660] overlayfs: failed to clone upperpath [ 68.734312][ T45] usb 4-1: new high-speed USB device number 21 using dummy_hcd [ 68.820944][ T312] usb 2-1: new high-speed USB device number 26 using dummy_hcd [ 68.892002][ T45] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 68.904047][ T45] usb 4-1: New USB device found, idVendor=0458, idProduct=5003, bcdDevice= 0.40 [ 68.913196][ T45] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 68.922751][ T45] usb 4-1: config 0 descriptor?? [ 68.971956][ T312] usb 2-1: config 0 has an invalid interface number: 200 but max is 0 [ 68.980258][ T312] usb 2-1: config 0 has no interface number 0 [ 68.986513][ T312] usb 2-1: config 0 interface 200 has no altsetting 0 [ 68.994995][ T312] usb 2-1: New USB device found, idVendor=0403, idProduct=f850, bcdDevice=67.93 [ 69.004385][ T312] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 69.012444][ T312] usb 2-1: Product: syz [ 69.016620][ T312] usb 2-1: Manufacturer: syz [ 69.021305][ T312] usb 2-1: SerialNumber: syz [ 69.026733][ T312] usb 2-1: config 0 descriptor?? [ 69.130373][ T45] aiptek 4-1:0.0: Aiptek using 400 ms programming speed [ 69.137951][ T45] input: Aiptek as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/input/input14 [ 69.150250][ T45] usb 4-1: USB disconnect, device number 21 [ 69.156213][ C1] aiptek 4-1:0.0: aiptek_irq - usb_submit_urb failed with result -19 [ 69.594345][ T1675] ./dev/sda1: Can't lookup blockdev [ 69.594341][ T1676] ./dev/sda1: Can't lookup blockdev [ 69.770950][ T9] usb 5-1: new high-speed USB device number 24 using dummy_hcd [ 69.920971][ T9] usb 5-1: Using ep0 maxpacket: 8 [ 69.927516][ T9] usb 5-1: unable to get BOS descriptor or descriptor too short [ 69.936253][ T9] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 69.946858][ T9] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 69.957246][ T9] usb 5-1: New USB device found, idVendor=2b73, idProduct=0013, bcdDevice= 0.40 [ 69.966410][ T9] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 69.974530][ T9] usb 5-1: Product: syz [ 69.978827][ T9] usb 5-1: Manufacturer: syz [ 69.983488][ T9] usb 5-1: SerialNumber: syz [ 70.570973][ T36] audit: type=1400 audit(1794132630.969:7136): avc: denied { block_suspend } for pid=1690 comm="syz.3.373" capability=36 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 70.592380][ T36] audit: type=1400 audit(1794132630.979:7137): avc: denied { map } for pid=1690 comm="syz.3.373" path="/dev/ashmem" dev="devtmpfs" ino=201 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 70.700795][ T9] usb 5-1: unknown interface protocol 0xc5, assuming v1 [ 70.708127][ T9] usb 5-1: cannot find UAC_HEADER [ 70.715045][ T9] snd-usb-audio 5-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 70.726493][ T9] usb 5-1: USB disconnect, device number 24 [ 70.735680][ T441] udevd[441]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 71.502621][ T1713] ./dev/sda1: Can't lookup blockdev [ 71.517260][ T1713] FAULT_INJECTION: forcing a failure. [ 71.517260][ T1713] name fail_page_alloc, interval 1, probability 0, space 0, times 1 [ 71.531312][ T1713] CPU: 0 UID: 0 PID: 1713 Comm: syz.3.380 Not tainted syzkaller #0 ff996278633adec6fd25d1632b496761701c4fe9 [ 71.531347][ T1713] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/15/2026 [ 71.531360][ T1713] Call Trace: [ 71.531367][ T1713] [ 71.531375][ T1713] __dump_stack+0x21/0x30 [ 71.531399][ T1713] dump_stack_lvl+0x140/0x1c0 [ 71.531418][ T1713] ? __cfi_dump_stack_lvl+0x10/0x10 [ 71.531435][ T1713] ? chacha_block_generic+0x5ea/0xdb0 [ 71.531472][ T1713] dump_stack+0x19/0x20 [ 71.531487][ T1713] should_fail_ex+0x3c2/0x510 [ 71.531505][ T1713] should_fail_alloc_page+0xec/0x110 [ 71.531526][ T1713] __alloc_pages_noprof+0x1c0/0x7e0 [ 71.531547][ T1713] ? crng_fast_key_erasure+0x195/0x260 [ 71.531566][ T1713] ? __cfi___alloc_pages_noprof+0x10/0x10 [ 71.531587][ T1713] ? x64_sys_call+0x2021/0x2ee0 [ 71.531606][ T1713] ? __kasan_check_write+0x18/0x20 [ 71.531626][ T1713] ? lockref_get+0x131/0x1c0 [ 71.531645][ T1713] ? __kasan_check_write+0x18/0x20 [ 71.531668][ T1713] get_free_pages_noprof+0x14/0x40 [ 71.531686][ T1713] selinux_genfs_get_sid+0x63/0x2d0 [ 71.531707][ T1713] inode_doinit_with_dentry+0x8f8/0xde0 [ 71.531726][ T1713] ? sb_finish_set_opts+0xa40/0xa40 [ 71.531746][ T1713] ? __cfi__raw_spin_lock+0x10/0x10 [ 71.531765][ T1713] sb_finish_set_opts+0x70b/0xa40 [ 71.531783][ T1713] ? may_context_mount_inode_relabel+0x150/0x150 [ 71.531803][ T1713] selinux_set_mnt_opts+0x14e7/0x1a20 [ 71.531823][ T1713] security_sb_set_mnt_opts+0x9c/0x290 [ 71.531841][ T1713] vfs_get_tree+0x176/0x290 [ 71.531864][ T1713] do_new_mount+0x251/0xb40 [ 71.531887][ T1713] ? security_capable+0x44/0x130 [ 71.531907][ T1713] path_mount+0x66a/0xff0 [ 71.531930][ T1713] ? putname+0x113/0x150 [ 71.531946][ T1713] __se_sys_mount+0x2bf/0x480 [ 71.531962][ T1713] ? __x64_sys_mount+0xf0/0xf0 [ 71.531979][ T1713] ? __kasan_check_write+0x18/0x20 [ 71.532003][ T1713] ? fpregs_restore_userregs+0x11c/0x260 [ 71.532027][ T1713] __x64_sys_mount+0xc3/0xf0 [ 71.532043][ T1713] x64_sys_call+0x2021/0x2ee0 [ 71.532063][ T1713] do_syscall_64+0x57/0xf0 [ 71.532081][ T1713] ? clear_bhb_loop+0x50/0xa0 [ 71.532106][ T1713] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 71.532128][ T1713] RIP: 0033:0x7fab77f9fb19 [ 71.532144][ T1713] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 71.532161][ T1713] RSP: 002b:00007fab78e61028 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 71.532183][ T1713] RAX: ffffffffffffffda RBX: 00007fab78225fa0 RCX: 00007fab77f9fb19 [ 71.532198][ T1713] RDX: 0000200000000680 RSI: 0000200000000640 RDI: 0000000000000000 [ 71.532211][ T1713] RBP: 00007fab78037b70 R08: 0000000000000000 R09: 0000000000000000 [ 71.532223][ T1713] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 71.532235][ T1713] R13: 00007fab78226038 R14: 00007fab78225fa0 R15: 00007ffda48078d8 [ 71.532251][ T1713] [ 71.533318][ T1717] netlink: 28 bytes leftover after parsing attributes in process `syz.2.381'. [ 71.558350][ T1720] netlink: 8 bytes leftover after parsing attributes in process `syz.4.383'. [ 71.558403][ T1720] netlink: 8 bytes leftover after parsing attributes in process `syz.4.383'. [ 71.558458][ T1720] netlink: 8 bytes leftover after parsing attributes in process `syz.4.383'. [ 71.681029][ T36] audit: type=1400 audit(1794132632.059:7138): avc: denied { sqpoll } for pid=1729 comm="syz.2.384" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 71.885480][ T1750] netlink: 'syz.3.382': attribute type 4 has an invalid length. [ 71.893312][ T1750] netlink: 3657 bytes leftover after parsing attributes in process `syz.3.382'. [ 71.918020][ T1752] netlink: 'syz.3.392': attribute type 16 has an invalid length. [ 71.927444][ T36] audit: type=1400 audit(1794132632.329:7139): avc: denied { call } for pid=1751 comm="syz.3.392" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=binder permissive=1 [ 71.927690][ T1752] rust_binder: 1751:1752 error while translating object: EPERM [ 71.946391][ T36] audit: type=1400 audit(1794132632.329:7140): avc: denied { transfer } for pid=1751 comm="syz.3.392" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=binder permissive=1 [ 71.954277][ T1752] rust_binder: 1751:1752 transaction async to 1751:0 failed EPERM, code 4294967295 size 128-24 line thread.rs:884 [ 71.981624][ T312] ftdi_sio 2-1:0.200: FTDI USB Serial Device converter detected [ 71.994539][ T312] ftdi_sio ttyUSB0: unknown device type: 0x6793 [ 71.999283][ T9] rust_binder: 1751: undelivered TRANSACTION_ERROR: 29201 [ 72.004160][ T312] usb 2-1: USB disconnect, device number 26 [ 72.022239][ T312] ftdi_sio 2-1:0.200: device disconnected [ 72.210989][ T36] audit: type=1400 audit(1794132632.609:7141): avc: denied { map } for pid=1758 comm="syz.4.395" path="socket:[15861]" dev="sockfs" ino=15861 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 72.243642][ T36] audit: type=1400 audit(1794132632.609:7142): avc: denied { read } for pid=1758 comm="syz.4.395" path="socket:[15861]" dev="sockfs" ino=15861 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 72.335365][ T1768] rust_binder: 1761:1768 BC_FREEZE_NOTIFICATION_DONE 0000000000000001 not pending [ 72.344914][ T1768] rust_binder: Write failure EINVAL in pid:255 [ 72.384935][ T1768] kvm_intel: kvm [1761]: vcpu0, guest rIP: 0x9114 Unhandled WRMSR(0x1d9) = 0xcf8b [ 72.396835][ T1768] kvm: kvm [1761]: vcpu0, guest rIP: 0x9114 Unhandled WRMSR(0x187) = 0xc1b9 [ 73.086481][ T312] rust_binder: 1761: undelivered freeze notification, 0000000000000001 [ 73.100962][ T312] rust_binder: 1761: undelivered freeze notification, 0000000000000001 [ 73.109392][ T312] rust_binder: 1761: undelivered freeze notification, 0000000000000001 [ 73.211030][ T677] usb 2-1: new high-speed USB device number 27 using dummy_hcd [ 73.362099][ T677] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 73.372471][ T677] usb 2-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 73.386145][ T677] usb 2-1: New USB device found, idVendor=04e6, idProduct=0005, bcdDevice= 0.09 [ 73.395259][ T677] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 73.403424][ T677] usb 2-1: SerialNumber: syz [ 73.409634][ T677] usb-storage 2-1:1.0: USB Mass Storage device detected [ 73.420952][ T9] usb 4-1: new high-speed USB device number 22 using dummy_hcd [ 73.481842][ T36] kauditd_printk_skb: 251 callbacks suppressed [ 73.481854][ T36] audit: type=1326 audit(1794132633.889:7394): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1808 comm="syz.4.403" exe="/root/ci2-android-6-12-rust/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7fef4276034e code=0x7ffc0000 [ 73.513320][ T36] audit: type=1326 audit(1794132633.889:7395): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1808 comm="syz.4.403" exe="/root/ci2-android-6-12-rust/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7fef4276034e code=0x7ffc0000 [ 73.538562][ T36] audit: type=1326 audit(1794132633.889:7396): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1808 comm="syz.4.403" exe="/root/ci2-android-6-12-rust/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7fef4276034e code=0x7ffc0000 [ 73.563814][ T36] audit: type=1326 audit(1794132633.889:7397): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1808 comm="syz.4.403" exe="/root/ci2-android-6-12-rust/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7fef4276034e code=0x7ffc0000 [ 73.570948][ T9] usb 4-1: Using ep0 maxpacket: 32 [ 73.589335][ T36] audit: type=1326 audit(1794132633.889:7398): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1808 comm="syz.4.403" exe="/root/ci2-android-6-12-rust/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7fef4276034e code=0x7ffc0000 [ 73.596281][ T9] usb 4-1: config 0 has an invalid interface number: 196 but max is 0 [ 73.620454][ T36] audit: type=1326 audit(1794132633.889:7399): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1808 comm="syz.4.403" exe="/root/ci2-android-6-12-rust/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7fef4276034e code=0x7ffc0000 [ 73.628713][ T9] usb 4-1: config 0 has no interface number 0 [ 73.660220][ T9] usb 4-1: config 0 interface 196 altsetting 1 endpoint 0x82 has invalid maxpacket 65280, setting to 1024 [ 73.660811][ T36] audit: type=1326 audit(1794132633.889:7400): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1808 comm="syz.4.403" exe="/root/ci2-android-6-12-rust/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7fef4276034e code=0x7ffc0000 [ 73.672040][ T9] usb 4-1: config 0 interface 196 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 1024 [ 73.697131][ T36] audit: type=1326 audit(1794132633.889:7401): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1808 comm="syz.4.403" exe="/root/ci2-android-6-12-rust/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7fef4276034e code=0x7ffc0000 [ 73.707574][ T9] usb 4-1: config 0 interface 196 has no altsetting 0 [ 73.732567][ T36] audit: type=1326 audit(1794132633.899:7402): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1808 comm="syz.4.403" exe="/root/ci2-android-6-12-rust/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7fef4276034e code=0x7ffc0000 [ 73.741029][ T9] usb 4-1: New USB device found, idVendor=05ac, idProduct=7700, bcdDevice=eb.3a [ 73.765055][ T36] audit: type=1326 audit(1794132633.899:7403): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1808 comm="syz.4.403" exe="/root/ci2-android-6-12-rust/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7fef4276034e code=0x7ffc0000 [ 73.773955][ T9] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 73.807327][ T9] usb 4-1: Product: syz [ 73.811561][ T9] usb 4-1: Manufacturer: syz [ 73.816161][ T9] usb 4-1: SerialNumber: syz [ 73.821735][ T9] usb 4-1: config 0 descriptor?? [ 73.827027][ T1800] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 74.035670][ T1800] device-mapper: ioctl: device name cannot contain '/' [ 74.043828][ T1800] af_packet: tpacket_rcv: packet too big, clamped from 1 to 4294967272. macoff=96 [ 74.166115][ T822] usb 2-1: USB disconnect, device number 27 [ 74.214772][ T9] ipheth 4-1:0.196: Unable to find endpoints [ 74.228445][ T9] usb 4-1: USB disconnect, device number 22 [ 74.370948][ T677] usb 5-1: new high-speed USB device number 25 using dummy_hcd [ 74.500943][ T677] usb 5-1: device descriptor read/64, error -71 [ 74.500943][ T822] usb 2-1: new full-speed USB device number 28 using dummy_hcd [ 74.651994][ T822] usb 2-1: config 0 has an invalid interface number: 41 but max is 0 [ 74.660222][ T822] usb 2-1: config 0 has no interface number 0 [ 74.666392][ T822] usb 2-1: config 0 interface 41 has no altsetting 0 [ 74.674671][ T822] usb 2-1: New USB device found, idVendor=0fe6, idProduct=9800, bcdDevice=d1.9a [ 74.683807][ T822] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 74.691861][ T822] usb 2-1: Product: syz [ 74.696117][ T822] usb 2-1: Manufacturer: syz [ 74.700725][ T822] usb 2-1: SerialNumber: syz [ 74.706550][ T822] usb 2-1: config 0 descriptor?? [ 74.750960][ T677] usb 5-1: device descriptor read/64, error -71 [ 75.000995][ T677] usb 5-1: new high-speed USB device number 26 using dummy_hcd [ 75.130965][ T677] usb 5-1: device descriptor read/64, error -71 [ 75.371006][ T677] usb 5-1: device descriptor read/64, error -71 [ 75.481077][ T677] usb usb5-port1: attempt power cycle [ 75.820987][ T677] usb 5-1: new high-speed USB device number 27 using dummy_hcd [ 75.852013][ T677] usb 5-1: device descriptor read/8, error -71 [ 75.982016][ T677] usb 5-1: device descriptor read/8, error -71 [ 76.230961][ T677] usb 5-1: new high-speed USB device number 28 using dummy_hcd [ 76.251987][ T677] usb 5-1: device descriptor read/8, error -71 [ 76.391994][ T677] usb 5-1: device descriptor read/8, error -71 [ 76.501029][ T677] usb usb5-port1: unable to enumerate USB device [ 77.189761][ T822] CoreChips 2-1:0.41: probe with driver CoreChips failed with error -71 [ 77.213121][ T822] usb 2-1: USB disconnect, device number 28 [ 77.286750][ T1863] syzkaller0: entered promiscuous mode [ 77.292364][ T1863] syzkaller0: entered allmulticast mode [ 77.429493][ T1874] FAULT_INJECTION: forcing a failure. [ 77.429493][ T1874] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 77.442856][ T1874] CPU: 0 UID: 0 PID: 1874 Comm: syz.4.422 Not tainted syzkaller #0 ff996278633adec6fd25d1632b496761701c4fe9 [ 77.442889][ T1874] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/15/2026 [ 77.442900][ T1874] Call Trace: [ 77.442906][ T1874] [ 77.442911][ T1874] __dump_stack+0x21/0x30 [ 77.442932][ T1874] dump_stack_lvl+0x140/0x1c0 [ 77.442950][ T1874] ? __cfi_dump_stack_lvl+0x10/0x10 [ 77.442970][ T1874] dump_stack+0x19/0x20 [ 77.442986][ T1874] should_fail_ex+0x3c2/0x510 [ 77.443004][ T1874] should_fail_alloc_page+0xec/0x110 [ 77.443022][ T1874] __alloc_pages_noprof+0x1c0/0x7e0 [ 77.443038][ T1874] ? __filemap_get_folio+0xd43/0xe80 [ 77.443048][ T1874] ? __cfi___alloc_pages_noprof+0x10/0x10 [ 77.443061][ T1874] ? __kasan_check_write+0x18/0x20 [ 77.443075][ T1874] ? _raw_spin_lock+0x92/0x120 [ 77.443092][ T1874] ? folio_add_lru+0x116/0x400 [ 77.443111][ T1874] ? __cfi_folio_add_lru+0x10/0x10 [ 77.443131][ T1874] ? _raw_spin_unlock+0x45/0x60 [ 77.443149][ T1874] __folio_alloc_noprof+0x14/0x80 [ 77.443171][ T1874] __read_swap_cache_async+0x267/0x860 [ 77.443182][ T1874] ? __cfi___read_swap_cache_async+0x10/0x10 [ 77.443200][ T1874] ? xas_load+0x3a6/0x3d0 [ 77.443213][ T1874] read_swap_cache_async+0x42/0x90 [ 77.443223][ T1874] madvise_vma_behavior+0x9c9/0x2e70 [ 77.443245][ T1874] ? __cfi_madvise_vma_behavior+0x10/0x10 [ 77.443271][ T1874] ? __sched_text_start+0x10/0x10 [ 77.443292][ T1874] ? __futex_queue+0x19f/0x350 [ 77.443312][ T1874] ? __cfi___futex_queue+0x10/0x10 [ 77.443328][ T1874] ? mtree_range_walk+0x573/0x730 [ 77.443342][ T1874] ? mas_prev_slot+0xb6b/0xc20 [ 77.443356][ T1874] ? mas_prev+0x5f/0xa0 [ 77.443368][ T1874] ? find_vma_prev+0x12a/0x1b0 [ 77.443383][ T1874] ? __kasan_check_write+0x18/0x20 [ 77.443407][ T1874] ? rwsem_read_trylock+0x275/0x5a0 [ 77.443430][ T1874] ? downgrade_write+0x470/0x470 [ 77.443451][ T1874] madvise_walk_vmas+0x3ee/0x700 [ 77.443473][ T1874] ? __cfi_madvise_vma_behavior+0x10/0x10 [ 77.443486][ T1874] ? down_read+0x7f/0xe0 [ 77.443499][ T1874] ? madvise_set_anon_name+0x650/0x650 [ 77.443512][ T1874] ? __asan_memset+0x39/0x50 [ 77.443525][ T1874] ? blk_start_plug+0x71/0x1c0 [ 77.443539][ T1874] do_madvise+0x5e8/0xbb0 [ 77.443563][ T1874] ? __cfi_do_madvise+0x10/0x10 [ 77.443587][ T1874] ? __cfi_ksys_write+0x10/0x10 [ 77.443604][ T1874] ? __kasan_check_write+0x18/0x20 [ 77.443624][ T1874] ? fpregs_restore_userregs+0x11c/0x260 [ 77.443638][ T1874] __x64_sys_madvise+0xad/0xc0 [ 77.443651][ T1874] x64_sys_call+0x20c3/0x2ee0 [ 77.443662][ T1874] do_syscall_64+0x57/0xf0 [ 77.443672][ T1874] ? clear_bhb_loop+0x50/0xa0 [ 77.443689][ T1874] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 77.443711][ T1874] RIP: 0033:0x7fef4279fb19 [ 77.443728][ T1874] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 77.443745][ T1874] RSP: 002b:00007fef436ea028 EFLAGS: 00000246 ORIG_RAX: 000000000000001c [ 77.443767][ T1874] RAX: ffffffffffffffda RBX: 00007fef42a25fa0 RCX: 00007fef4279fb19 [ 77.443781][ T1874] RDX: 0000000000000003 RSI: 0000000000600000 RDI: 0000200000000000 [ 77.443795][ T1874] RBP: 00007fef42837b70 R08: 0000000000000000 R09: 0000000000000000 [ 77.443806][ T1874] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 77.443812][ T1874] R13: 00007fef42a26038 R14: 00007fef42a25fa0 R15: 00007ffe4872ac28 [ 77.443822][ T1874] [ 77.758423][ T1876] ./dev/sda1: Can't lookup blockdev [ 77.762033][ T1832] Bluetooth: hci0: Opcode 0x0401 failed: -110 [ 77.792083][ T1876] netlink: 64 bytes leftover after parsing attributes in process `syz.2.423'. [ 77.822635][ T1878] fuse: Unknown parameter 'root5q~000000' [ 77.879332][ T1880] GUP no longer grows the stack in syz.3.425 (1880): 200000004000-20000000a000 (200000002000) [ 77.889658][ T1880] CPU: 0 UID: 0 PID: 1880 Comm: syz.3.425 Not tainted syzkaller #0 ff996278633adec6fd25d1632b496761701c4fe9 [ 77.889690][ T1880] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/15/2026 [ 77.889702][ T1880] Call Trace: [ 77.889709][ T1880] [ 77.889717][ T1880] __dump_stack+0x21/0x30 [ 77.889741][ T1880] dump_stack_lvl+0x140/0x1c0 [ 77.889760][ T1880] ? __cfi_dump_stack_lvl+0x10/0x10 [ 77.889778][ T1880] ? find_vma+0xd3/0x120 [ 77.889803][ T1880] ? vma_is_secretmem+0x11/0x50 [ 77.889815][ T1880] dump_stack+0x19/0x20 [ 77.889824][ T1880] __get_user_pages+0x1e20/0x22d0 [ 77.889839][ T1880] ? populate_vma_page_range+0x220/0x220 [ 77.889861][ T1880] get_user_pages_remote+0x377/0xb80 [ 77.889882][ T1880] ? gfp_to_alloc_flags_cma+0x96/0x1c0 [ 77.889907][ T1880] ? __cfi_get_user_pages_remote+0x10/0x10 [ 77.889928][ T1880] __access_remote_vm+0x1de/0x630 [ 77.889939][ T1880] ? __cfi___alloc_pages_noprof+0x10/0x10 [ 77.889952][ T1880] ? access_remote_vm+0x60/0x60 [ 77.889962][ T1880] ? _raw_spin_lock+0x92/0x120 [ 77.889972][ T1880] ? __cfi__raw_spin_lock+0x10/0x10 [ 77.889983][ T1880] access_remote_vm+0x39/0x60 [ 77.889997][ T1880] proc_pid_cmdline_read+0x4c2/0xbf0 [ 77.890021][ T1880] ? __cfi_proc_pid_cmdline_read+0x10/0x10 [ 77.890043][ T1880] ? bpf_lsm_file_permission+0xd/0x20 [ 77.890064][ T1880] vfs_readv+0x5e7/0xa00 [ 77.890080][ T1880] ? __cfi_proc_pid_cmdline_read+0x10/0x10 [ 77.890092][ T1880] ? do_readv+0x2e0/0x2e0 [ 77.890105][ T1880] __x64_sys_preadv+0x19f/0x2c0 [ 77.890115][ T1880] ? __cfi___x64_sys_preadv+0x10/0x10 [ 77.890125][ T1880] ? switch_fpu_return+0x12/0x20 [ 77.890140][ T1880] x64_sys_call+0x1ee9/0x2ee0 [ 77.890159][ T1880] do_syscall_64+0x57/0xf0 [ 77.890178][ T1880] ? clear_bhb_loop+0x50/0xa0 [ 77.890202][ T1880] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 77.890225][ T1880] RIP: 0033:0x7fab77f9fb19 [ 77.890262][ T1880] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 77.890271][ T1880] RSP: 002b:00007fab78e61028 EFLAGS: 00000246 ORIG_RAX: 0000000000000127 [ 77.890284][ T1880] RAX: ffffffffffffffda RBX: 00007fab78225fa0 RCX: 00007fab77f9fb19 [ 77.890298][ T1880] RDX: 0000000000000001 RSI: 0000200000000580 RDI: 0000000000000007 [ 77.890311][ T1880] RBP: 00007fab78037b70 R08: 00000000fffffff9 R09: 0000000000000000 [ 77.890324][ T1880] R10: 0000000000000016 R11: 0000000000000246 R12: 0000000000000000 [ 77.890337][ T1880] R13: 00007fab78226038 R14: 00007fab78225fa0 R15: 00007ffda48078d8 [ 77.890353][ T1880] [ 78.127476][ T1892] overlayfs: failed to clone lowerpath [ 78.254734][ T1898] capability: warning: `syz.1.430' uses deprecated v2 capabilities in a way that may be insecure [ 78.270934][ T677] usb 5-1: new high-speed USB device number 29 using dummy_hcd [ 78.420935][ T677] usb 5-1: Using ep0 maxpacket: 16 [ 78.431625][ T677] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 78.441912][ T677] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 78.452262][ T677] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 78.461520][ T677] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 78.469521][ T677] usb 5-1: Product: syz [ 78.473949][ T677] usb 5-1: Manufacturer: syz [ 78.478556][ T677] usb 5-1: SerialNumber: syz [ 78.586985][ T1906] x86/PAT: syz.1.433:1906 freeing invalid memtype [mem 0xfe408000-0xfe408fff] [ 78.603626][ T1909] x86/PAT: syz.1.433:1909 freeing invalid memtype [mem 0xfe000000-0xfe407fff] [ 78.613734][ T36] kauditd_printk_skb: 323 callbacks suppressed [ 78.613749][ T36] audit: type=1400 audit(1794132639.019:7727): avc: denied { mounton } for pid=1905 comm="syz.1.433" path="/59/mysys" dev="sysfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=dir permissive=1 [ 78.685563][ T1874] SELinux: Context system_u:object_r:lirc_device_t:s0 is not valid (left unmapped). [ 78.695631][ T36] audit: type=1400 audit(1794132639.099:7728): avc: denied { relabelto } for pid=1873 comm="syz.4.422" name="sda" dev="devtmpfs" ino=90 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=blk_file permissive=1 trawcon="system_u:object_r:lirc_device_t:s0" [ 78.722901][ T36] audit: type=1400 audit(1794132639.099:7729): avc: denied { associate } for pid=1873 comm="syz.4.422" name="sda" dev="devtmpfs" ino=90 scontext=system_u:object_r:unlabeled_t tcontext=system_u:object_r:device_t tclass=filesystem permissive=1 srawcon="system_u:object_r:lirc_device_t:s0" [ 78.783163][ T677] usb 5-1: 0:2 : does not exist [ 78.793624][ T677] usb 5-1: 5:0: failed to get current value for ch 0 (-22) [ 78.806646][ T677] usb 5-1: USB disconnect, device number 29 [ 78.849644][ T36] audit: type=1400 audit(1794132639.249:7730): avc: denied { create } for pid=1913 comm="syz.1.434" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 100.012487][ T1928] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=1928 comm=syz.4.437 [ 100.020297][ T36] audit: type=1400 audit(1794132660.419:7731): avc: denied { read } for pid=1927 comm="syz.1.438" lport=58 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 100.030790][ T1928] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=0 sclass=netlink_tcpdiag_socket pid=1928 comm=syz.4.437 [ 100.086691][ T1937] block device autoloading is deprecated and will be removed. [ 100.188686][ T36] audit: type=1400 audit(1794132660.589:7732): avc: denied { read write } for pid=1949 comm="syz.3.444" name="uhid" dev="devtmpfs" ino=199 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 100.220962][ T36] audit: type=1400 audit(1794132660.589:7733): avc: denied { open } for pid=1949 comm="syz.3.444" path="/dev/uhid" dev="devtmpfs" ino=199 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 100.222966][ T822] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 100.271172][ T822] hid-generic 0000:0000:0000.0006: hidraw0: HID v0.00 Device [syz1] on syz0 [ 100.314935][ T1956] syz.1.446: vmalloc error: size 4096, failed to allocate pages, mode:0x400dc2(GFP_KERNEL_ACCOUNT|__GFP_HIGHMEM|__GFP_ZERO), nodemask=(null),cpuset=syz1,mems_allowed=0 [ 100.331995][ T1956] CPU: 0 UID: 0 PID: 1956 Comm: syz.1.446 Not tainted syzkaller #0 ff996278633adec6fd25d1632b496761701c4fe9 [ 100.332026][ T1956] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/15/2026 [ 100.332040][ T1956] Call Trace: [ 100.332046][ T1956] [ 100.332054][ T1956] __dump_stack+0x21/0x30 [ 100.332078][ T1956] dump_stack_lvl+0x140/0x1c0 [ 100.332097][ T1956] ? __cfi_dump_stack_lvl+0x10/0x10 [ 100.332117][ T1956] ? _raw_spin_unlock_irqrestore+0x4a/0x70 [ 100.332140][ T1956] dump_stack+0x19/0x20 [ 100.332156][ T1956] warn_alloc+0x1e7/0x2c0 [ 100.332179][ T1956] ? __cfi_warn_alloc+0x10/0x10 [ 100.332200][ T1956] ? __kmalloc_node_noprof+0x252/0x500 [ 100.332225][ T1956] ? __vmalloc_node_range_noprof+0x529/0x1300 [ 100.332251][ T1956] __vmalloc_node_range_noprof+0x100b/0x1300 [ 100.332279][ T1956] ? __cfi___vmalloc_node_range_noprof+0x10/0x10 [ 100.332303][ T1956] ? vsnprintf+0x19ef/0x1ad0 [ 100.332322][ T1956] ? kvm_dev_ioctl+0x12a/0x14c0 [ 100.332341][ T1956] __vmalloc_noprof+0x104/0x1d0 [ 100.332364][ T1956] ? kvm_dev_ioctl+0x12a/0x14c0 [ 100.332383][ T1956] ? alloc_fd+0x4c1/0x570 [ 100.332400][ T1956] ? __cfi___vmalloc_noprof+0x10/0x10 [ 100.332425][ T1956] kvm_dev_ioctl+0x12a/0x14c0 [ 100.332445][ T1956] ? __cfi_kvm_dev_ioctl+0x10/0x10 [ 100.332463][ T1956] ? bpf_lsm_file_ioctl+0xd/0x20 [ 100.332484][ T1956] ? security_file_ioctl+0x3e/0x110 [ 100.332510][ T1956] ? __cfi_kvm_dev_ioctl+0x10/0x10 [ 100.332528][ T1956] __se_sys_ioctl+0x123/0x1b0 [ 100.332549][ T1956] __x64_sys_ioctl+0x7f/0xa0 [ 100.332568][ T1956] x64_sys_call+0x1878/0x2ee0 [ 100.332588][ T1956] do_syscall_64+0x57/0xf0 [ 100.332607][ T1956] ? clear_bhb_loop+0x50/0xa0 [ 100.332632][ T1956] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 100.332655][ T1956] RIP: 0033:0x7f3270d9fb19 [ 100.332672][ T1956] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 100.332688][ T1956] RSP: 002b:00007f3271d28028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 100.332719][ T1956] RAX: ffffffffffffffda RBX: 00007f3271025fa0 RCX: 00007f3270d9fb19 [ 100.332735][ T1956] RDX: 0000000000000000 RSI: 000000000000ae01 RDI: 0000000000000006 [ 100.332747][ T1956] RBP: 00007f3270e37b70 R08: 0000000000000000 R09: 0000000000000000 [ 100.332761][ T1956] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 100.332773][ T1956] R13: 00007f3271026038 R14: 00007f3271025fa0 R15: 00007ffe50fcabf8 [ 100.332790][ T1956] [ 100.332832][ T1956] Mem-Info: [ 100.446493][ T1963] netlink: 8 bytes leftover after parsing attributes in process `syz.3.447'. [ 100.448536][ T64] usb 5-1: new high-speed USB device number 30 using dummy_hcd [ 100.453362][ T1956] active_anon:26401 inactive_anon:2 isolated_anon:0 [ 100.453362][ T1956] active_file:17556 inactive_file:2692 isolated_file:0 [ 100.453362][ T1956] unevictable:3 dirty:76 writeback:0 [ 100.453362][ T1956] slab_reclaimable:5628 slab_unreclaimable:71102 [ 100.453362][ T1956] mapped:23907 shmem:20747 pagetables:1151 [ 100.453362][ T1956] sec_pagetables:0 bounce:0 [ 100.453362][ T1956] kernel_misc_reclaimable:0 [ 100.453362][ T1956] free:1497047 free_pcp:7690 free_cma:0 [ 100.645800][ T1956] Node 0 active_anon:105876kB inactive_anon:8kB active_file:70292kB inactive_file:10768kB unevictable:4kB isolated(anon):0kB isolated(file):0kB mapped:95660kB dirty:316kB writeback:0kB shmem:83012kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:5136kB pagetables:4860kB sec_pagetables:0kB all_unreclaimable? no [ 100.682197][ T1956] DMA32 free:2949972kB boost:0kB min:19052kB low:23812kB high:28572kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:3145324kB managed:2954996kB mlocked:0kB bounce:0kB free_pcp:5024kB local_pcp:5024kB free_cma:0kB [ 100.713610][ T1956] lowmem_reserve[]: 0 3920 3920 [ 100.719252][ T1956] Normal free:3043980kB boost:0kB min:26000kB low:32500kB high:39000kB reserved_highatomic:0KB free_highatomic:0KB active_anon:105960kB inactive_anon:8kB active_file:70292kB inactive_file:10768kB unevictable:0kB writepending:316kB present:5242880kB managed:4014840kB mlocked:0kB bounce:0kB free_pcp:20328kB local_pcp:688kB free_cma:0kB [ 100.750673][ T677] usb 4-1: new full-speed USB device number 24 using dummy_hcd [ 100.758862][ T64] usb 5-1: unable to get BOS descriptor or descriptor too short [ 100.761000][ T1956] lowmem_reserve[]: 0 0 0 [ 100.767407][ T64] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 100.771321][ T1956] DMA32: [ 100.781144][ T64] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 100.781389][ T1956] 5*4kB [ 100.785567][ T64] usb 5-1: New USB device found, idVendor=1235, idProduct=0010, bcdDevice= 0.40 [ 100.793388][ T1956] (M) [ 100.796072][ T64] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 100.805474][ T1956] 2*8kB [ 100.807969][ T64] usb 5-1: Product: syz [ 100.816041][ T1956] (M) [ 100.818841][ T64] usb 5-1: Manufacturer: syz [ 100.823293][ T1956] 3*16kB [ 100.825647][ T64] usb 5-1: SerialNumber: syz [ 100.832596][ T64] usb 5-1: selecting invalid altsetting 1 [ 100.833512][ T1956] (M) [ 100.838054][ T64] usb 5-1: unit 6 not found! [ 100.843815][ T1956] 6*32kB (M) 5*64kB (M) 4*128kB (M) 5*256kB (M) 5*512kB (M) 4*1024kB (UM) 4*2048kB (M) 716*4096kB (M) = 2949972kB [ 100.863178][ T1956] Normal: 244*4kB (UME) 23*8kB (UE) 58*16kB (UME) 16*32kB (UME) 126*64kB (UME) 122*128kB (UME) 33*256kB (UME) 36*512kB (UME) 16*1024kB (UME) 12*2048kB (UME) 720*4096kB (UM) = 3043240kB [ 100.881568][ T1956] 40999 total pagecache pages [ 100.886317][ T1956] 4 pages in swap cache [ 100.890499][ T1956] Free swap = 124496kB [ 100.894721][ T1956] Total swap = 124996kB [ 100.898936][ T1956] 2097051 pages RAM [ 100.902785][ T1956] 0 pages HighMem/MovableOnly [ 100.907524][ T1956] 354592 pages reserved [ 100.911765][ T1956] 0 pages cma reserved [ 100.917733][ T1956] Memory allocations: [ 100.921800][ T1956] 0 B 0 init/main.c:1477 func:do_initcalls [ 100.922357][ T677] usb 4-1: unable to get BOS descriptor or descriptor too short [ 100.929138][ T1956] 0 B 0 init/do_mounts.c:186 func:mount_root_generic [ 100.929162][ T1956] 0 B 0 init/do_mounts.c:158 func:do_mount_root [ 100.937584][ T677] usb 4-1: not running at top speed; connect to a high speed hub [ 100.944998][ T1956] 0 B 0 init/do_mounts.c:352 func:mount_nodev_root [ 100.953789][ T677] usb 4-1: config 0 has an invalid interface number: 88 but max is 0 [ 100.960624][ T1956] 0 B 0 init/do_mounts_rd.c:241 func:rd_load_image [ 100.968986][ T677] usb 4-1: config 0 has no interface number 0 [ 100.976975][ T1956] 0 B 0 init/do_mounts_rd.c:72 func:identify_ramdisk_image [ 100.984942][ T677] usb 4-1: config 0 interface 88 altsetting 8 endpoint 0x86 has an invalid bInterval 0, changing to 10 [ 100.991085][ T1956] 0 B 0 init/initramfs.c:507 func:unpack_to_rootfs [ 100.999722][ T677] usb 4-1: config 0 interface 88 altsetting 8 endpoint 0x86 has invalid wMaxPacketSize 0 [ 101.010791][ T1956] 0 B 0 init/initramfs.c:508 func:unpack_to_rootfs [ 101.018571][ T677] usb 4-1: config 0 interface 88 has no altsetting 0 [ 101.028609][ T1956] 0 B 0 init/initramfs.c:509 func:unpack_to_rootfs [ 101.038366][ T677] usb 4-1: string descriptor 0 read error: -22 [ 101.043116][ T1956] 0 B 0 init/initramfs.c:101 func:find_link [ 101.051368][ T677] usb 4-1: New USB device found, idVendor=0460, idProduct=0004, bcdDevice=96.31 [ 101.079687][ T677] usb 4-1: New USB device strings: Mfr=1, Product=84, SerialNumber=3 [ 101.087049][ T1968] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 101.095074][ T1968] IPv6: NLM_F_CREATE should be set when creating new route [ 101.097427][ T677] usb 4-1: config 0 descriptor?? [ 101.102484][ T1968] IPv6: NLM_F_CREATE should be set when creating new route [ 101.115402][ T677] input: USB Acecad Flair Tablet 0460:0004 as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.88/input/input15 [ 101.127359][ T36] audit: type=1326 audit(1794132661.529:7734): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1967 comm="syz.2.450" exe="/root/ci2-android-6-12-rust/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fe16819fb19 code=0x0 [ 101.161499][ T1964] udevd[1964]: Error opening device "/dev/input/event3": Input/output error [ 101.170330][ T1964] udevd[1964]: Unable to EVIOCGABS device "/dev/input/event3" [ 101.177874][ T1964] udevd[1964]: Unable to EVIOCGABS device "/dev/input/event3" [ 101.440555][ T64] usb 5-1: 2:0: failed to get current value for ch 0 (-71) [ 101.451912][ T64] snd-usb-audio 5-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 101.465501][ T64] usb 5-1: USB disconnect, device number 30 [ 101.469314][ T1976] udevd[1976]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 101.978829][ T1978] hub 6-0:1.0: USB hub found [ 101.983863][ T1978] hub 6-0:1.0: 1 port detected [ 102.020808][ T36] audit: type=1400 audit(1794132662.419:7735): avc: denied { read } for pid=1981 comm="syz.4.453" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 102.800940][ T312] usb 5-1: new full-speed USB device number 31 using dummy_hcd [ 102.952104][ T312] usb 5-1: config 1 has an invalid descriptor of length 91, skipping remainder of the config [ 102.962596][ T312] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 102.973403][ T312] usb 5-1: New USB device found, idVendor=1235, idProduct=8214, bcdDevice= 0.40 [ 102.982973][ T312] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 102.991296][ T312] usb 5-1: Product: syz [ 102.995697][ T312] usb 5-1: Manufacturer: syz [ 103.000403][ T312] usb 5-1: SerialNumber: syz [ 103.209390][ T1988] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 103.218709][ T1988] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 103.227874][ T1988] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 103.237311][ T1988] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 103.246614][ T1988] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 103.255806][ T1988] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 103.265300][ T1988] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 103.274490][ T1988] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 103.284132][ T1988] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 103.293349][ T1988] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 103.305349][ T36] audit: type=1400 audit(1794132663.709:7736): avc: denied { getattr } for pid=1986 comm="syz.4.454" name="/" dev="binder" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 103.331396][ T312] usb 5-1: USB disconnect, device number 31 [ 103.488131][ T31] usb 4-1: USB disconnect, device number 24 [ 103.546069][ T36] audit: type=1400 audit(1794132663.949:7737): avc: denied { read } for pid=1989 comm="syz.3.455" name="msr" dev="devtmpfs" ino=16 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 103.591041][ T36] audit: type=1400 audit(1794132663.969:7738): avc: denied { open } for pid=1989 comm="syz.3.455" path="/dev/cpu/0/msr" dev="devtmpfs" ino=16 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 103.852895][ T1993] batadv_slave_0: entered promiscuous mode [ 103.876505][ T1993] batadv_slave_0: left promiscuous mode [ 104.116793][ T1996] overlayfs: failed to clone upperpath [ 104.670952][ T677] usb 5-1: new high-speed USB device number 32 using dummy_hcd [ 104.800956][ T677] usb 5-1: device descriptor read/64, error -71 [ 105.940995][ T677] usb 5-1: device descriptor read/64, error -71 [ 106.155321][ T36] audit: type=1400 audit(1794132666.559:7739): avc: denied { read write } for pid=2028 comm="syz.1.472" name="sda" dev="devtmpfs" ino=90 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=blk_file permissive=1 trawcon="system_u:object_r:lirc_device_t:s0" [ 106.181091][ T677] usb 5-1: new high-speed USB device number 33 using dummy_hcd [ 106.202620][ T36] audit: type=1400 audit(1794132666.559:7740): avc: denied { open } for pid=2028 comm="syz.1.472" path="/71/dev/sda" dev="devtmpfs" ino=90 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=blk_file permissive=1 trawcon="system_u:object_r:lirc_device_t:s0" [ 106.246375][ T36] audit: type=1400 audit(1794132666.589:7741): avc: denied { ioctl } for pid=2028 comm="syz.1.472" path="/71/dev/sda" dev="devtmpfs" ino=90 ioctlcmd=0x1269 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=blk_file permissive=1 trawcon="system_u:object_r:lirc_device_t:s0" [ 106.293764][ T36] audit: type=1400 audit(1794132666.689:7742): avc: denied { ioctl } for pid=2002 comm="syz.4.461" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 106.330983][ T677] usb 5-1: device descriptor read/64, error -71 [ 106.357399][ T36] audit: type=1400 audit(1794132666.759:7743): avc: denied { read write } for pid=2037 comm="syz.1.476" name="raw-gadget" dev="devtmpfs" ino=190 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 106.393140][ T36] audit: type=1400 audit(1794132666.759:7744): avc: denied { open } for pid=2037 comm="syz.1.476" path="/dev/raw-gadget" dev="devtmpfs" ino=190 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 106.570969][ T677] usb 5-1: device descriptor read/64, error -71 [ 106.621002][ T312] usb 2-1: new full-speed USB device number 29 using dummy_hcd [ 106.681061][ T677] usb usb5-port1: attempt power cycle [ 106.734943][ T36] audit: type=1326 audit(1794132667.129:7745): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2018 comm="syz.2.468" exe="/root/ci2-android-6-12-rust/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe16819fb19 code=0x7fc00000 [ 106.764987][ T36] audit: type=1400 audit(1794132667.169:7746): avc: denied { name_bind } for pid=2039 comm="syz.2.477" src=20001 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=icmp_socket permissive=1 [ 106.812071][ T312] usb 2-1: config 1 interface 2 altsetting 1 endpoint 0x82 has invalid maxpacket 1024, setting to 1023 [ 106.832596][ T312] usb 2-1: New USB device found, idVendor=0dba, idProduct=1000, bcdDevice= 0.40 [ 106.842055][ T312] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 106.850201][ T312] usb 2-1: Product: syz [ 106.861242][ T312] usb 2-1: Manufacturer: syz [ 106.865908][ T312] usb 2-1: SerialNumber: syz [ 107.021000][ T677] usb 5-1: new high-speed USB device number 34 using dummy_hcd [ 107.041912][ T677] usb 5-1: device descriptor read/8, error -71 [ 107.082083][ T312] snd-usb-audio 2-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 107.102870][ T312] snd-usb-audio 2-1:1.1: probe with driver snd-usb-audio failed with error -22 [ 107.135336][ T312] snd-usb-audio 2-1:1.2: probe with driver snd-usb-audio failed with error -22 [ 107.153260][ T312] usb 2-1: USB disconnect, device number 29 [ 107.160752][ T1940] udevd[1940]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.2/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 107.181123][ T677] usb 5-1: device descriptor read/8, error -71 [ 107.420974][ T677] usb 5-1: new high-speed USB device number 35 using dummy_hcd [ 107.441901][ T677] usb 5-1: device descriptor read/8, error -71 [ 107.571465][ T677] usb 5-1: device descriptor read/8, error -71 [ 107.629466][ T64] smpboot: CPU 1 is now offline [ 107.637647][ T2070] smpboot: Booting Node 0 Processor 1 APIC 0x1 [ 107.681072][ T677] usb usb5-port1: unable to enumerate USB device [ 107.910954][ T64] usb 2-1: new high-speed USB device number 30 using dummy_hcd [ 107.981386][ T677] usb 5-1: new high-speed USB device number 36 using dummy_hcd [ 108.070929][ T64] usb 2-1: Using ep0 maxpacket: 16 [ 108.082008][ T64] usb 2-1: config 0 interface 0 altsetting 5 endpoint 0x81 has an invalid bInterval 128, changing to 11 [ 108.100221][ T64] usb 2-1: config 0 interface 0 altsetting 5 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 108.127487][ T64] usb 2-1: config 0 interface 0 has no altsetting 0 [ 108.140928][ T677] usb 5-1: Using ep0 maxpacket: 32 [ 108.148311][ T64] usb 2-1: New USB device found, idVendor=1e7d, idProduct=2c24, bcdDevice= 0.00 [ 108.164131][ T677] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 108.178394][ T64] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 108.190981][ T677] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 108.211595][ T64] usb 2-1: config 0 descriptor?? [ 108.218961][ T677] usb 5-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 108.239322][ T677] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 108.259148][ T677] usb 5-1: config 0 descriptor?? [ 108.270534][ T677] hub 5-1:0.0: USB hub found [ 108.472554][ T677] hub 5-1:0.0: 1 port detected [ 108.634355][ T64] input: HID 1e7d:2c24 as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/0003:1E7D:2C24.0007/input/input16 [ 108.659266][ T64] pyra 0003:1E7D:2C24.0007: input,hiddev96,hidraw0: USB HID v0.03 Device [HID 1e7d:2c24] on usb-dummy_hcd.1-1/input0 [ 108.876318][ T2090] netlink: 132 bytes leftover after parsing attributes in process `syz.2.501'. [ 108.887024][ T677] usb 5-1: USB disconnect, device number 36 [ 109.090618][ T36] audit: type=1400 audit(1794132669.489:7747): avc: denied { read } for pid=2105 comm="syz.2.509" lport=6 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 110.256149][ T2123] new mount options do not match the existing superblock, will be ignored [ 110.888112][ T677] usb 2-1: USB disconnect, device number 30 [ 110.987310][ T2138] netlink: 45 bytes leftover after parsing attributes in process `syz.1.523'. [ 111.023392][ T36] audit: type=1400 audit(1794132671.429:7748): avc: denied { append } for pid=2139 comm="syz.1.524" name="control" dev="devtmpfs" ino=198 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:lvm_control_t tclass=chr_file permissive=1 [ 111.047122][ T2140] device-mapper: ioctl: populate_table: next target spec (offset 28) overlaps 'struct dm_ioctl' [ 111.181667][ T2154] tipc: Enabling of bearer rejected, failed to enable media [ 112.331189][ T677] usb 2-1: new high-speed USB device number 31 using dummy_hcd [ 112.390996][ T9] usb 5-1: new full-speed USB device number 37 using dummy_hcd [ 112.491160][ T677] usb 2-1: Using ep0 maxpacket: 16 [ 112.509956][ T677] usb 2-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 112.531044][ T677] usb 2-1: config 1 descriptor has 1 excess byte, ignoring [ 112.553915][ T677] usb 2-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 112.565049][ T9] usb 5-1: not running at top speed; connect to a high speed hub [ 112.582822][ T9] usb 5-1: New USB device found, idVendor=225a, idProduct=e1d4, bcdDevice=a7.ad [ 112.592247][ T9] usb 5-1: New USB device strings: Mfr=245, Product=194, SerialNumber=0 [ 112.611014][ T9] usb 5-1: Product: syz [ 112.615284][ T677] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 112.624496][ T677] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 112.640940][ T9] usb 5-1: Manufacturer: syz [ 112.645672][ T677] usb 2-1: Product: syz [ 112.649831][ T677] usb 2-1: Manufacturer: syz [ 112.661690][ T9] uvcvideo 5-1:1.1: Unknown video format 00000000-0000-0000-0000-000000000000 [ 112.680794][ T677] usb 2-1: SerialNumber: syz [ 112.685595][ T9] usb 5-1: Found UVC 1.00 device syz (225a:e1d4) [ 112.701178][ T9] usb 5-1: Failed to create links for entity 1 [ 112.710983][ T9] usb 5-1: Failed to register entities (-22). [ 112.863304][ T9] usb 5-1: USB disconnect, device number 37 [ 112.895230][ T677] usb 2-1: 2:1 : no or invalid class specific endpoint descriptor [ 112.910978][ T677] usb 2-1: 2:1 : format type 0 is detected, processed as PCM [ 112.928632][ T677] usb 2-1: 2:1 : invalid UAC_FORMAT_TYPE desc [ 112.941848][ T677] usb 2-1: USB disconnect, device number 31 [ 113.081399][ T2223] 9pnet_fd: Insufficient options for proto=fd [ 113.413430][ T10] kernel read not supported for file /ppp (pid: 10 comm: kworker/0:1) [ 113.677186][ T2254] overlayfs: failed to resolve './cgroup': -2 [ 114.961688][ T36] audit: type=1400 audit(1794132675.369:7749): avc: denied { create } for pid=2305 comm="syz.2.595" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 114.982571][ T36] audit: type=1400 audit(1794132675.369:7750): avc: denied { write } for pid=2305 comm="syz.2.595" name="file0" dev="tmpfs" ino=1461 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 115.007085][ T36] audit: type=1400 audit(1794132675.369:7751): avc: denied { open } for pid=2305 comm="syz.2.595" path="/246/file0" dev="tmpfs" ino=1461 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 116.287879][ T36] audit: type=1400 audit(1794132676.689:7752): avc: denied { setopt } for pid=2323 comm="syz.1.603" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 117.010219][ T10] usb 5-1: new high-speed USB device number 38 using dummy_hcd [ 117.161906][ T10] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 117.182984][ T10] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 117.212982][ T10] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 117.255438][ T10] usb 5-1: New USB device found, idVendor=e47f, idProduct=ffff, bcdDevice= 0.00 [ 117.284004][ T10] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 117.312215][ T10] usb 5-1: config 0 descriptor?? [ 117.325970][ T36] audit: type=1400 audit(1794132677.729:7753): avc: denied { getopt } for pid=2343 comm="syz.2.610" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 117.376707][ T2346] netlink: 60 bytes leftover after parsing attributes in process `syz.1.611'. [ 117.669004][ T2363] overlayfs: failed to clone lowerpath [ 117.730600][ T10] hid-generic 0003:E47F:FFFF.0008: unbalanced collection at end of report description [ 117.757908][ T10] hid-generic 0003:E47F:FFFF.0008: probe with driver hid-generic failed with error -22 [ 117.781809][ T36] audit: type=1400 audit(1794132678.189:7754): avc: denied { remount } for pid=2364 comm="syz.2.619" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 117.830943][ T9] usb 2-1: new high-speed USB device number 32 using dummy_hcd [ 117.943773][ T10] usb 5-1: USB disconnect, device number 38 [ 118.020971][ T9] usb 2-1: Using ep0 maxpacket: 16 [ 118.031896][ T9] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 118.051033][ T9] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 118.071395][ T9] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 118.090653][ T9] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 118.108929][ T9] usb 2-1: Product: syz [ 118.117552][ T9] usb 2-1: Manufacturer: syz [ 118.132964][ T9] usb 2-1: SerialNumber: syz [ 118.350648][ T9] usb 2-1: 0:2 : does not exist [ 118.361828][ T9] usb 2-1: 5:0: failed to get current value for ch 0 (-22) [ 118.385125][ T9] usb 2-1: USB disconnect, device number 32 [ 118.712103][ T2412] bridge0: port 1(bridge_slave_0) entered blocking state [ 118.719190][ T2412] bridge0: port 1(bridge_slave_0) entered disabled state [ 118.726585][ T2412] bridge_slave_0: entered allmulticast mode [ 118.733170][ T2412] bridge_slave_0: entered promiscuous mode [ 118.739734][ T2412] bridge0: port 2(bridge_slave_1) entered blocking state [ 118.747088][ T2412] bridge0: port 2(bridge_slave_1) entered disabled state [ 118.754322][ T2412] bridge_slave_1: entered allmulticast mode [ 118.761256][ T2412] bridge_slave_1: entered promiscuous mode [ 118.805820][ T1889] bridge_slave_1: left allmulticast mode [ 118.811523][ T1889] bridge_slave_1: left promiscuous mode [ 118.817206][ T1889] bridge0: port 2(bridge_slave_1) entered disabled state [ 118.825055][ T1889] bridge_slave_0: left allmulticast mode [ 118.830802][ T1889] bridge_slave_0: left promiscuous mode [ 118.836507][ T1889] bridge0: port 1(bridge_slave_0) entered disabled state [ 118.947653][ T2412] bridge0: port 2(bridge_slave_1) entered blocking state [ 118.954746][ T2412] bridge0: port 2(bridge_slave_1) entered forwarding state [ 118.962075][ T2412] bridge0: port 1(bridge_slave_0) entered blocking state [ 118.969139][ T2412] bridge0: port 1(bridge_slave_0) entered forwarding state [ 118.989441][ T1602] bridge0: port 1(bridge_slave_0) entered disabled state [ 118.996833][ T1602] bridge0: port 2(bridge_slave_1) entered disabled state [ 119.007731][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 119.014809][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 119.024614][ T1602] bridge0: port 2(bridge_slave_1) entered blocking state [ 119.031696][ T1602] bridge0: port 2(bridge_slave_1) entered forwarding state [ 119.044614][ T1889] tipc: Disabling bearer [ 119.046990][ T9] usb 5-1: new high-speed USB device number 39 using dummy_hcd [ 119.058075][ T1889] tipc: Left network mode [ 119.067072][ T1889] veth0_vlan: left promiscuous mode [ 119.074491][ T2433] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=1692678547 (1692678547 ns) > initial count (310440980 ns). Using initial count to start timer. [ 119.123397][ T2412] veth0_vlan: entered promiscuous mode [ 119.135148][ T2412] veth1_macvtap: entered promiscuous mode [ 119.232023][ T9] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 119.243132][ T9] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 119.253308][ T9] usb 5-1: New USB device found, idVendor=27b8, idProduct=01ed, bcdDevice= 0.00 [ 119.262460][ T9] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 119.271550][ T9] usb 5-1: config 0 descriptor?? [ 119.509009][ T2473] overlayfs: failed to resolve './cgroup': -2 [ 119.550967][ T822] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 119.578149][ T36] audit: type=1400 audit(1794132679.979:7755): avc: denied { watch_reads } for pid=2485 comm="syz.2.674" path="/284" dev="tmpfs" ino=1658 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 119.702062][ T822] usb 6-1: config 1 contains an unexpected descriptor of type 0x1, skipping [ 119.710774][ T822] usb 6-1: config 1 has an invalid descriptor of length 102, skipping remainder of the config [ 119.721901][ T822] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 119.730792][ T822] usb 6-1: config 1 has no interface number 0 [ 119.737389][ T822] usb 6-1: too many endpoints for config 1 interface 1 altsetting 1: 32, using maximum allowed: 30 [ 119.749174][ T822] usb 6-1: config 1 interface 1 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 32 [ 119.763913][ T822] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 119.773216][ T822] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 119.781465][ T822] usb 6-1: Product: syz [ 119.785706][ T822] usb 6-1: Manufacturer: syz [ 119.790306][ T822] usb 6-1: SerialNumber: syz [ 119.800307][ T822] cdc_ncm 6-1:1.1: CDC Union missing and no IAD found [ 119.808803][ T822] cdc_ncm 6-1:1.1: bind() failure [ 120.010620][ T822] usb 6-1: USB disconnect, device number 2 [ 121.340110][ T9] hid-led 0003:27B8:01ED.0009: hidraw0: USB HID v0.00 Device [HID 27b8:01ed] on usb-dummy_hcd.4-1/input0 [ 121.365204][ T9] hid-led 0003:27B8:01ED.0009: ThingM blink(1) initialized [ 121.540510][ T9] usb 5-1: USB disconnect, device number 39 [ 121.601033][ T10] usb 2-1: new high-speed USB device number 33 using dummy_hcd [ 121.681038][ T822] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 121.760989][ T10] usb 2-1: Using ep0 maxpacket: 8 [ 121.767129][ T10] usb 2-1: config 0 interface 0 has no altsetting 0 [ 121.773829][ T10] usb 2-1: New USB device found, idVendor=11c2, idProduct=2208, bcdDevice= 0.00 [ 121.783106][ T10] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 121.791774][ T10] usb 2-1: config 0 descriptor?? [ 121.830973][ T822] usb 6-1: Using ep0 maxpacket: 8 [ 121.837407][ T822] usb 6-1: unable to get BOS descriptor or descriptor too short [ 121.847224][ T822] usb 6-1: New USB device found, idVendor=200c, idProduct=100b, bcdDevice= 0.40 [ 121.856307][ T822] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 121.864330][ T822] usb 6-1: Product: syz [ 121.868672][ T822] usb 6-1: Manufacturer: syz [ 121.873294][ T822] usb 6-1: SerialNumber: syz [ 122.054716][ T36] audit: type=1400 audit(1794132682.459:7756): avc: denied { name_bind } for pid=2514 comm="syz.4.684" src=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:reserved_port_t tclass=tcp_socket permissive=1 [ 122.082859][ T822] usb 6-1: unit 1 not found! [ 122.090823][ T822] usb 6-1: USB disconnect, device number 3 [ 122.201061][ T10] input: HID 11c2:2208 as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/0003:11C2:2208.000A/input/input18 [ 122.213936][ T10] betop 0003:11C2:2208.000A: input,hidraw0: USB HID v0.0d Joystick [HID 11c2:2208] on usb-dummy_hcd.1-1/input0 [ 122.226787][ T10] betop 0003:11C2:2208.000A: no output reports found [ 122.401034][ T10] usb 2-1: USB disconnect, device number 33 [ 122.831715][ T2558] overlayfs: failed to clone upperpath [ 122.840976][ T10] usb 6-1: new high-speed USB device number 4 using dummy_hcd [ 122.916414][ T2562] rust_binder: Write failure EINVAL in pid:366 [ 123.001945][ T10] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 123.013199][ T10] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 123.023348][ T10] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 123.036388][ T10] usb 6-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 123.045549][ T10] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 123.054372][ T10] usb 6-1: config 0 descriptor?? [ 123.180942][ T9] usb 2-1: new low-speed USB device number 34 using dummy_hcd [ 123.331955][ T9] usb 2-1: config 0 interface 0 has no altsetting 0 [ 123.338613][ T9] usb 2-1: New USB device found, idVendor=1e7d, idProduct=2d51, bcdDevice= 0.00 [ 123.347924][ T9] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 123.356676][ T9] usb 2-1: config 0 descriptor?? [ 123.462329][ T10] plantronics 0003:047F:FFFF.000B: No inputs registered, leaving [ 123.472186][ T10] plantronics 0003:047F:FFFF.000B: hiddev96,hidraw0: USB HID v0.00 Device [HID 047f:ffff] on usb-dummy_hcd.5-1/input0 [ 123.663546][ T10] usb 6-1: USB disconnect, device number 4 [ 123.770883][ T9] koneplus 0003:1E7D:2D51.000C: unknown main item tag 0x0 [ 123.778125][ T9] koneplus 0003:1E7D:2D51.000C: unknown main item tag 0x0 [ 123.785535][ T9] koneplus 0003:1E7D:2D51.000C: collection stack underflow [ 123.792868][ T9] koneplus 0003:1E7D:2D51.000C: item 0 0 0 12 parsing failed [ 123.800532][ T9] koneplus 0003:1E7D:2D51.000C: parse failed [ 123.806587][ T9] koneplus 0003:1E7D:2D51.000C: probe with driver koneplus failed with error -22 [ 123.926916][ T2579] ./dev/sda1: Can't lookup blockdev [ 123.955529][ T2585] netlink: 80 bytes leftover after parsing attributes in process `syz.2.717'. [ 123.988959][ T10] usb 2-1: USB disconnect, device number 34 [ 124.279119][ T2614] X.509: Couldn't decode AuthKeyIdentifier [ 124.382983][ T36] audit: type=1400 audit(1794132684.789:7757): avc: denied { getopt } for pid=2625 comm="syz.5.737" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 124.427359][ T36] audit: type=1400 audit(1794132684.829:7758): avc: denied { accept } for pid=2631 comm="syz.5.740" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 124.449402][ T2632] device-mapper: ioctl: Invalid ioctl structure: name link_socketsocket, dev fc04 [ 124.470070][ T36] audit: type=1400 audit(1794132684.869:7759): avc: denied { accept } for pid=2634 comm="syz.5.741" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 124.817119][ T36] audit: type=1400 audit(1794132685.219:7760): avc: denied { map } for pid=2656 comm="syz.2.750" path="socket:[21295]" dev="sockfs" ino=21295 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=udp_socket permissive=1 [ 125.145847][ T2693] netlink: 4 bytes leftover after parsing attributes in process `syz.4.768'. [ 125.394232][ T36] audit: type=1400 audit(1794132685.799:7761): avc: denied { accept } for pid=2694 comm="syz.4.769" path="socket:[21415]" dev="sockfs" ino=21415 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 125.609512][ T36] audit: type=1400 audit(1794132686.009:7762): avc: denied { load_policy } for pid=2702 comm="syz.1.772" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security permissive=1 [ 125.634606][ T2703] SELinux: failed to load policy [ 125.755056][ T2707] kvm: vcpu 2: requested 148514 ns lapic timer period limited to 200000 ns [ 125.782010][ T2707] kvm: vcpu 2: requested lapic timer restore with starting count register 0x390=198462431 (396924862 ns) > initial count (200000 ns). Using initial count to start timer. [ 125.924745][ T2721] tipc: Enabling of bearer rejected, failed to enable media [ 126.504674][ T10] usb 2-1: new full-speed USB device number 35 using dummy_hcd [ 126.649248][ T2730] kvm: emulating exchange as write [ 126.662028][ T10] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 126.678390][ T10] usb 2-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 126.698839][ T10] usb 2-1: New USB device found, idVendor=041e, idProduct=3000, bcdDevice= 0.40 [ 126.710983][ T10] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 126.728372][ T10] usb 2-1: Product: syz [ 126.738928][ T10] usb 2-1: Manufacturer: syz [ 126.748831][ T10] usb 2-1: SerialNumber: syz [ 126.963220][ T10] usb 2-1: unit 4 not found! [ 126.971114][ T10] usb 2-1: USB disconnect, device number 35 [ 126.986448][ T2505] udevd[2505]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 127.174265][ T9] usb 5-1: new high-speed USB device number 40 using dummy_hcd [ 127.178031][ T2412] cgroup: fork rejected by pids controller in /syz5 [ 127.234372][ T523] bridge_slave_1: left allmulticast mode [ 127.240467][ T523] bridge_slave_1: left promiscuous mode [ 127.246407][ T523] bridge0: port 2(bridge_slave_1) entered disabled state [ 127.254547][ T523] bridge_slave_0: left allmulticast mode [ 127.260345][ T523] bridge_slave_0: left promiscuous mode [ 127.266395][ T523] bridge0: port 1(bridge_slave_0) entered disabled state [ 127.332068][ T9] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 127.342540][ T9] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 127.351529][ T9] usb 5-1: New USB device found, idVendor=046d, idProduct=0825, bcdDevice= 1.00 [ 127.360669][ T9] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 127.371538][ T9] usb 5-1: Found UVC 1.00 device (046d:0825) [ 127.413649][ T2770] bridge0: port 1(bridge_slave_0) entered blocking state [ 127.420825][ T2770] bridge0: port 1(bridge_slave_0) entered disabled state [ 127.428269][ T2770] bridge_slave_0: entered allmulticast mode [ 127.436216][ T2770] bridge_slave_0: entered promiscuous mode [ 127.443464][ T523] veth1_macvtap: left promiscuous mode [ 127.448994][ T523] veth0_vlan: left promiscuous mode [ 127.497875][ T2770] bridge0: port 2(bridge_slave_1) entered blocking state [ 127.505688][ T2770] bridge0: port 2(bridge_slave_1) entered disabled state [ 127.512854][ T2770] bridge_slave_1: entered allmulticast mode [ 127.519298][ T2770] bridge_slave_1: entered promiscuous mode [ 127.569901][ T2770] bridge0: port 2(bridge_slave_1) entered blocking state [ 127.576989][ T2770] bridge0: port 2(bridge_slave_1) entered forwarding state [ 127.584312][ T2770] bridge0: port 1(bridge_slave_0) entered blocking state [ 127.591370][ T2770] bridge0: port 1(bridge_slave_0) entered forwarding state [ 127.642186][ T2770] veth0_vlan: entered promiscuous mode [ 127.652573][ T9] usb 5-1: No streaming interface found for terminal 2. [ 127.655279][ T2770] veth1_macvtap: entered promiscuous mode [ 127.667662][ T9] usb 5-1: USB disconnect, device number 40 [ 127.750990][ T10] usb 2-1: new high-speed USB device number 36 using dummy_hcd [ 127.921942][ T10] usb 2-1: config 0 interface 0 altsetting 254 has 1 endpoint descriptor, different from the interface descriptor's value: 4 [ 127.935163][ T10] usb 2-1: config 0 interface 0 has no altsetting 0 [ 127.941809][ T10] usb 2-1: New USB device found, idVendor=054c, idProduct=1000, bcdDevice= 0.00 [ 127.951020][ T10] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 127.959866][ T10] usb 2-1: config 0 descriptor?? [ 128.380451][ T10] sony 0003:054C:1000.000D: missing HID_OUTPUT_REPORT 0 [ 128.398371][ T10] sony 0003:054C:1000.000D: hidraw0: USB HID v0.05 Joystick [HID 054c:1000] on usb-dummy_hcd.1-1/input0 [ 128.419839][ T10] sony 0003:054C:1000.000D: failed to claim input [ 128.503546][ T2818] tipc: Enabling of bearer rejected, failed to enable media [ 128.583348][ T9] usb 2-1: USB disconnect, device number 36 [ 128.663314][ T2841] rust_binder: 2840:2841 got reply transaction with no transaction stack [ 128.672380][ T2841] rust_binder: 2840:2841 transaction reply to 0:0 failed EINVAL, code 0 size 0-0 line thread.rs:1556 [ 128.684284][ T2841] rust_binder: Failure when writing BR_NOOP at beginning of buffer. [ 128.692317][ T2841] rust_binder: Read failure Err(EFAULT) in pid:15 [ 128.699444][ T822] rust_binder: 2840: undelivered TRANSACTION_ERROR: 29201 [ 128.712101][ T2849] overlayfs: failed to clone lowerpath [ 128.721025][ T677] usb 5-1: new high-speed USB device number 41 using dummy_hcd [ 128.721475][ T2851] devtmpfs: Unknown parameter 'fsmagic' [ 128.728910][ T36] audit: type=1400 audit(1794132689.129:7763): avc: denied { remount } for pid=2850 comm="syz.5.833" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=filesystem permissive=1 [ 128.911939][ T677] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 128.923163][ T677] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 128.933011][ T677] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 128.946004][ T677] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 128.955303][ T677] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 128.964110][ T677] usb 5-1: config 0 descriptor?? [ 128.990951][ T822] usb 6-1: new high-speed USB device number 5 using dummy_hcd [ 129.140969][ T822] usb 6-1: Using ep0 maxpacket: 16 [ 129.147280][ T822] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 129.157903][ T822] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 129.167714][ T822] usb 6-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.00 [ 129.176988][ T822] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 129.186034][ T822] usb 6-1: SerialNumber: syz [ 129.195411][ T822] usb 6-1: 0:2 : does not exist [ 129.283329][ T36] audit: type=1326 audit(1794132689.689:7764): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2887 comm="syz.2.851" exe="/root/ci2-android-6-12-rust/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe16819fb19 code=0x7ffc0000 [ 129.309045][ T36] audit: type=1326 audit(1794132689.689:7765): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2887 comm="syz.2.851" exe="/root/ci2-android-6-12-rust/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe16819fb19 code=0x7ffc0000 [ 129.335295][ T36] audit: type=1326 audit(1794132689.689:7766): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2887 comm="syz.2.851" exe="/root/ci2-android-6-12-rust/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe16819fb19 code=0x7ffc0000 [ 129.362048][ T36] audit: type=1326 audit(1794132689.689:7767): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2887 comm="syz.2.851" exe="/root/ci2-android-6-12-rust/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe16819fb19 code=0x7ffc0000 [ 129.372194][ T677] plantronics 0003:047F:FFFF.000E: unknown main item tag 0x0 [ 129.389769][ T36] audit: type=1326 audit(1794132689.689:7768): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2887 comm="syz.2.851" exe="/root/ci2-android-6-12-rust/syz-executor" sig=0 arch=c000003e syscall=72 compat=0 ip=0x7fe16819fb19 code=0x7ffc0000 [ 129.439157][ T677] plantronics 0003:047F:FFFF.000E: unknown main item tag 0x0 [ 129.441830][ T36] audit: type=1326 audit(1794132689.689:7769): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2887 comm="syz.2.851" exe="/root/ci2-android-6-12-rust/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe16819fb19 code=0x7ffc0000 [ 129.459142][ T677] plantronics 0003:047F:FFFF.000E: No inputs registered, leaving [ 129.479790][ T36] audit: type=1326 audit(1794132689.689:7770): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2887 comm="syz.2.851" exe="/root/ci2-android-6-12-rust/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe16819fb19 code=0x7ffc0000 [ 129.505282][ T2899] netlink: 8 bytes leftover after parsing attributes in process `syz.2.856'. [ 129.506017][ T36] audit: type=1326 audit(1794132689.689:7771): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2887 comm="syz.2.851" exe="/root/ci2-android-6-12-rust/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe16819fb19 code=0x7ffc0000 [ 129.539950][ T36] audit: type=1326 audit(1794132689.689:7772): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2887 comm="syz.2.851" exe="/root/ci2-android-6-12-rust/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7fe16819fb19 code=0x7ffc0000 [ 129.568382][ T677] plantronics 0003:047F:FFFF.000E: hiddev96,hidraw0: USB HID v0.00 Device [HID 047f:ffff] on usb-dummy_hcd.4-1/input0 [ 129.624073][ T822] usb 6-1: USB disconnect, device number 5 [ 129.650098][ T677] usb 5-1: USB disconnect, device number 41 [ 129.979159][ T2928] syz.2.869 uses obsolete (PF_INET,SOCK_PACKET) [ 130.178384][ T2942] netlink: 36 bytes leftover after parsing attributes in process `syz.5.875'. [ 131.394898][ T2974] kvm: requested 7542 ns i8254 timer period limited to 200000 ns [ 131.435223][ T2984] syzkaller0: entered promiscuous mode [ 131.456227][ T2984] syzkaller0: entered allmulticast mode [ 131.482675][ T2984] tipc: Started in network mode [ 131.498750][ T2984] tipc: Node identity 9e940ff3b356, cluster identity 4711 [ 131.522174][ T2984] tipc: Enabled bearer , priority 0 [ 131.550968][ T2983] tipc: Resetting bearer [ 131.575762][ T2983] tipc: Disabling bearer [ 131.931390][ T3013] device-mapper: table: 252:5: crypt: Error decoding and setting key (-EINVAL) [ 131.957227][ T3013] device-mapper: ioctl: error adding target to table [ 132.624060][ T3061] usb usb6: usbfs: process 3061 (syz.4.921) did not claim interface 0 before use [ 132.650715][ T3065] ptp ptp0: max value is 20 [ 132.794086][ T3085] netlink: 12 bytes leftover after parsing attributes in process `syz.2.933'. [ 132.819052][ T3083] SELinux: failed to load policy [ 132.915945][ T3100] SELinux: ebitmap: map size 74281573 does not match my size 64 (high bit was 218103808) [ 132.926038][ T3100] SELinux: failed to load policy [ 133.131153][ T677] usb 5-1: new high-speed USB device number 42 using dummy_hcd [ 133.292023][ T677] usb 5-1: config 0 has more interface descriptors, than it declares in bNumInterfaces, ignoring interface number: 255 [ 133.314402][ T677] usb 5-1: config 0 has more interface descriptors, than it declares in bNumInterfaces, ignoring interface number: 0 [ 133.339643][ T677] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 133.361865][ T677] usb 5-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 133.388972][ T677] usb 5-1: New USB device found, idVendor=1908, idProduct=1315, bcdDevice= 0.00 [ 133.408271][ T677] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 133.426691][ T677] usb 5-1: config 0 descriptor?? [ 133.439093][ T677] usb-storage 5-1:0.0: USB Mass Storage device detected [ 133.450309][ T677] usb-storage 5-1:0.0: Quirks match for vid 1908 pid 1315: 20000 [ 133.640723][ T9] usb 5-1: USB disconnect, device number 42 [ 133.821037][ T677] usb 2-1: new high-speed USB device number 37 using dummy_hcd [ 133.907399][ T3141] batadv_slave_0: entered promiscuous mode [ 133.913947][ T3140] batadv_slave_0: left promiscuous mode [ 133.931570][ T3144] netlink: 'syz.2.960': attribute type 3 has an invalid length. [ 133.971085][ T3155] incfs: iterate_incfs_dir / -22 [ 133.971982][ T677] usb 2-1: config 0 has an invalid interface number: 127 but max is 1 [ 133.976269][ T3155] incfs: iterate_incfs_dir / -22 [ 133.988728][ T677] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 134.000373][ T2770] ------------[ cut here ]------------ [ 134.005463][ T677] usb 2-1: config 0 has no interface number 1 [ 134.005990][ T2770] WARNING: CPU: 1 PID: 2770 at fs/inode.c:340 drop_nlink+0xce/0x110 [ 134.012071][ T677] usb 2-1: config 0 interface 127 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 134.019980][ T2770] Modules linked in: [ 134.020017][ T2770] CPU: 1 UID: 0 PID: 2770 Comm: syz-executor Not tainted syzkaller #0 ff996278633adec6fd25d1632b496761701c4fe9 [ 134.020041][ T2770] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/15/2026 [ 134.020053][ T2770] RIP: 0010:drop_nlink+0xce/0x110 [ 134.033500][ T677] usb 2-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 29 [ 134.037046][ T2770] Code: 04 00 00 be 08 00 00 00 e8 3f 07 ee ff f0 48 ff 83 b8 04 00 00 5b 41 5c 41 5d 41 5e 41 5f 5d e9 98 14 b8 03 cc e8 42 47 94 ff <0f> 0b eb 81 44 89 f1 80 e1 07 80 c1 03 38 c1 0f 8c 59 ff ff ff 4c [ 134.037065][ T2770] RSP: 0018:ffffc9000fed7c88 EFLAGS: 00010293 [ 134.037083][ T2770] RAX: ffffffff81f5228e RBX: ffff8881165bed10 RCX: ffff8881246b62c0 [ 134.037095][ T2770] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 134.037106][ T2770] RBP: ffffc9000fed7cb0 R08: 0000000000000003 R09: 0000000000000004 [ 134.037116][ T2770] R10: dffffc0000000000 R11: fffff52001fdaf80 R12: dffffc0000000000 [ 134.037128][ T2770] R13: 1ffff11022cb7dab R14: ffff8881165bed58 R15: 0000000000000000 [ 134.037139][ T2770] FS: 000055558e0f0500(0000) GS:ffff8881f6d00000(0000) knlGS:0000000000000000 [ 134.037155][ T2770] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 134.037167][ T2770] CR2: 000055558e113958 CR3: 0000000114458000 CR4: 00000000003526b0 [ 134.037185][ T2770] Call Trace: [ 134.037191][ T2770] [ 134.059345][ T677] usb 2-1: New USB device found, idVendor=1908, idProduct=1315, bcdDevice= 0.00 [ 134.064039][ T2770] shmem_rmdir+0x5f/0x90 [ 134.064071][ T2770] vfs_rmdir+0x3db/0x560 [ 134.077657][ T677] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 134.096646][ T2770] incfs_kill_sb+0x102/0x220 [ 134.096678][ T2770] deactivate_locked_super+0xd5/0x270 [ 134.096698][ T2770] deactivate_super+0xb8/0xe0 [ 134.102866][ T677] usb 2-1: Product: syz [ 134.110734][ T2770] cleanup_mnt+0x438/0x4d0 [ 134.110758][ T2770] __cleanup_mnt+0x1d/0x40 [ 134.118800][ T677] usb 2-1: Manufacturer: syz [ 134.126697][ T2770] task_work_run+0x1e8/0x260 [ 134.134761][ T677] usb 2-1: SerialNumber: syz [ 134.142668][ T2770] ? __cfi_task_work_run+0x10/0x10 [ 134.162150][ T677] usb 2-1: config 0 descriptor?? [ 134.166210][ T2770] ? __x64_sys_umount+0x12e/0x180 [ 134.170501][ T677] usb-storage 2-1:0.127: USB Mass Storage device detected [ 134.172422][ T2770] ? __cfi___x64_sys_umount+0x10/0x10 [ 134.172453][ T2770] ? __kasan_check_read+0x15/0x20 [ 134.184831][ T677] usb-storage 2-1:0.127: Quirks match for vid 1908 pid 1315: 20000 [ 134.185708][ T2770] resume_user_mode_work+0x35/0x50 [ 134.285127][ T2770] syscall_exit_to_user_mode+0x63/0xb0 [ 134.290618][ T2770] do_syscall_64+0x63/0xf0 [ 134.295088][ T2770] ? clear_bhb_loop+0x50/0xa0 [ 134.299812][ T2770] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 134.305791][ T2770] RIP: 0033:0x7f21ad3a0d57 [ 134.310209][ T2770] Code: a2 c7 05 9c a9 25 00 00 00 00 00 eb 96 e8 e1 12 00 00 90 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8 [ 134.329852][ T2770] RSP: 002b:00007ffe37430738 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6 [ 134.338740][ T2770] RAX: 0000000000000000 RBX: 0000000000000000 RCX: 00007f21ad3a0d57 [ 134.346751][ T2770] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffe374307f0 [ 134.354770][ T2770] RBP: 00007ffe374307f0 R08: 00007ffe374317f0 R09: 00000000ffffffff [ 134.362796][ T2770] R10: 0000000000000000 R11: 0000000000000246 R12: 00007ffe37431880 [ 134.370778][ T2770] R13: 00007f21ad436fb3 R14: 0000000000020b51 R15: 00007ffe374318c0 [ 134.378819][ T2770] [ 134.381881][ T2770] ---[ end trace 0000000000000000 ]--- [ 134.387462][ T2770] ================================================================== [ 134.395815][ T2770] BUG: KASAN: null-ptr-deref in ihold+0x24/0x70 [ 134.402052][ T2770] Write of size 4 at addr 0000000000000168 by task syz-executor/2770 [ 134.410184][ T2770] [ 134.412518][ T2770] CPU: 0 UID: 0 PID: 2770 Comm: syz-executor Tainted: G W syzkaller #0 ff996278633adec6fd25d1632b496761701c4fe9 [ 134.412536][ T2770] Tainted: [W]=WARN [ 134.412540][ T2770] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/15/2026 [ 134.412547][ T2770] Call Trace: [ 134.412552][ T2770] [ 134.412558][ T2770] __dump_stack+0x21/0x30 [ 134.412571][ T2770] dump_stack_lvl+0x140/0x1c0 [ 134.412581][ T2770] ? __cfi_dump_stack_lvl+0x10/0x10 [ 134.412592][ T2770] print_report+0x3d/0x70 [ 134.412602][ T2770] kasan_report+0x162/0x1a0 [ 134.412614][ T2770] ? ihold+0x24/0x70 [ 134.412625][ T2770] ? ihold+0x24/0x70 [ 134.412635][ T2770] kasan_check_range+0x25a/0x2b0 [ 134.412646][ T2770] __kasan_check_write+0x18/0x20 [ 134.412659][ T2770] ihold+0x24/0x70 [ 134.412669][ T2770] vfs_rmdir+0x25c/0x560 [ 134.412682][ T2770] incfs_kill_sb+0x102/0x220 [ 134.412692][ T2770] deactivate_locked_super+0xd5/0x270 [ 134.412706][ T2770] deactivate_super+0xb8/0xe0 [ 134.412718][ T2770] cleanup_mnt+0x438/0x4d0 [ 134.412729][ T2770] __cleanup_mnt+0x1d/0x40 [ 134.412739][ T2770] task_work_run+0x1e8/0x260 [ 134.412754][ T2770] ? __cfi_task_work_run+0x10/0x10 [ 134.412767][ T2770] ? __x64_sys_umount+0x12e/0x180 [ 134.412781][ T2770] ? __cfi___x64_sys_umount+0x10/0x10 [ 134.412795][ T2770] ? __kasan_check_read+0x15/0x20 [ 134.412808][ T2770] resume_user_mode_work+0x35/0x50 [ 134.412821][ T2770] syscall_exit_to_user_mode+0x63/0xb0 [ 134.412836][ T2770] do_syscall_64+0x63/0xf0 [ 134.412846][ T2770] ? clear_bhb_loop+0x50/0xa0 [ 134.412860][ T2770] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 134.412873][ T2770] RIP: 0033:0x7f21ad3a0d57 [ 134.412884][ T2770] Code: a2 c7 05 9c a9 25 00 00 00 00 00 eb 96 e8 e1 12 00 00 90 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8 [ 134.412893][ T2770] RSP: 002b:00007ffe37430738 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6 [ 134.412905][ T2770] RAX: 0000000000000000 RBX: 0000000000000000 RCX: 00007f21ad3a0d57 [ 134.412912][ T2770] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffe374307f0 [ 134.412931][ T2770] RBP: 00007ffe374307f0 R08: 00007ffe374317f0 R09: 00000000ffffffff [ 134.412939][ T2770] R10: 0000000000000000 R11: 0000000000000246 R12: 00007ffe37431880 [ 134.412947][ T2770] R13: 00007f21ad436fb3 R14: 0000000000020b51 R15: 00007ffe374318c0 [ 134.412955][ T2770] [ 134.412959][ T2770] ================================================================== [ 134.653903][ T2770] Disabling lock debugging due to kernel taint [ 134.657909][ T677] usb-storage 2-1:0.0: USB Mass Storage device detected [ 134.661861][ T2770] BUG: kernel NULL pointer dereference, address: 0000000000000168 [ 134.670642][ T677] usb-storage 2-1:0.0: Quirks match for vid 1908 pid 1315: 20000 [ 134.674780][ T2770] #PF: supervisor write access in kernel mode [ 134.674792][ T2770] #PF: error_code(0x0002) - not-present page [ 134.674802][ T2770] PGD 800000013dd56067 P4D 800000013dd56067 PUD 0 [ 134.674826][ T2770] Oops: Oops: 0002 [#1] PREEMPT SMP KASAN PTI [ 134.674844][ T2770] CPU: 1 UID: 0 PID: 2770 Comm: syz-executor Tainted: G B W syzkaller #0 ff996278633adec6fd25d1632b496761701c4fe9 [ 134.720343][ T2770] Tainted: [B]=BAD_PAGE, [W]=WARN [ 134.725349][ T2770] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/15/2026 [ 134.735389][ T2770] RIP: 0010:ihold+0x2a/0x70 [ 134.739886][ T2770] Code: f3 0f 1e fa 55 48 89 e5 41 56 53 48 89 fb e8 2d 3e 94 ff 48 8d bb 68 01 00 00 be 04 00 00 00 e8 fc fd ed ff 41 be 01 00 00 00 44 0f c1 b3 68 01 00 00 41 ff c6 bf 02 00 00 00 44 89 f6 e8 3d [ 134.759514][ T2770] RSP: 0018:ffffc9000fed7cc8 EFLAGS: 00010246 [ 134.765572][ T2770] RAX: ffff8881246b6200 RBX: 0000000000000000 RCX: ffff8881246b62c0 [ 134.773533][ T2770] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 134.781494][ T2770] RBP: ffffc9000fed7cd8 R08: ffffffff893d8967 R09: 1ffffffff127b12c [ 134.789461][ T2770] R10: dffffc0000000000 R11: fffffbfff127b12d R12: 0000000000000000 [ 134.797447][ T2770] R13: 0000000000000000 R14: 0000000000000001 R15: dffffc0000000000 [ 134.805411][ T2770] FS: 000055558e0f0500(0000) GS:ffff8881f6d00000(0000) knlGS:0000000000000000 [ 134.814328][ T2770] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 134.820902][ T2770] CR2: 0000000000000168 CR3: 0000000114458000 CR4: 00000000003526b0 [ 134.828868][ T2770] Call Trace: [ 134.832136][ T2770] [ 134.835085][ T2770] vfs_rmdir+0x25c/0x560 [ 134.839322][ T2770] incfs_kill_sb+0x102/0x220 [ 134.844846][ T2770] deactivate_locked_super+0xd5/0x270 [ 134.850350][ T2770] deactivate_super+0xb8/0xe0 [ 134.855128][ T2770] cleanup_mnt+0x438/0x4d0 [ 134.859697][ T2770] __cleanup_mnt+0x1d/0x40 [ 134.864273][ T2770] task_work_run+0x1e8/0x260 [ 134.868902][ T2770] ? __cfi_task_work_run+0x10/0x10 [ 134.874050][ T2770] ? __x64_sys_umount+0x12e/0x180 [ 134.879094][ T2770] ? __cfi___x64_sys_umount+0x10/0x10 [ 134.884473][ T2770] ? __kasan_check_read+0x15/0x20 [ 134.889530][ T2770] resume_user_mode_work+0x35/0x50 [ 134.894667][ T2770] syscall_exit_to_user_mode+0x63/0xb0 [ 134.900131][ T2770] do_syscall_64+0x63/0xf0 [ 134.904576][ T2770] ? clear_bhb_loop+0x50/0xa0 [ 134.909272][ T2770] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 134.915160][ T2770] RIP: 0033:0x7f21ad3a0d57 [ 134.919683][ T2770] Code: a2 c7 05 9c a9 25 00 00 00 00 00 eb 96 e8 e1 12 00 00 90 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8 [ 134.939314][ T2770] RSP: 002b:00007ffe37430738 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6 [ 134.947768][ T2770] RAX: 0000000000000000 RBX: 0000000000000000 RCX: 00007f21ad3a0d57 [ 134.955765][ T2770] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffe374307f0 [ 134.963828][ T2770] RBP: 00007ffe374307f0 R08: 00007ffe374317f0 R09: 00000000ffffffff [ 134.971826][ T2770] R10: 0000000000000000 R11: 0000000000000246 R12: 00007ffe37431880 [ 134.979830][ T2770] R13: 00007f21ad436fb3 R14: 0000000000020b51 R15: 00007ffe374318c0 [ 134.987891][ T2770] [ 134.990907][ T2770] Modules linked in: [ 134.994808][ T2770] CR2: 0000000000000168 [ 134.998975][ T2770] ---[ end trace 0000000000000000 ]--- [ 135.004614][ T2770] RIP: 0010:ihold+0x2a/0x70 [ 135.009163][ T2770] Code: f3 0f 1e fa 55 48 89 e5 41 56 53 48 89 fb e8 2d 3e 94 ff 48 8d bb 68 01 00 00 be 04 00 00 00 e8 fc fd ed ff 41 be 01 00 00 00 44 0f c1 b3 68 01 00 00 41 ff c6 bf 02 00 00 00 44 89 f6 e8 3d [ 135.014419][ T36] kauditd_printk_skb: 4 callbacks suppressed [ 135.014432][ T36] audit: type=1400 audit(1794132695.419:7777): avc: denied { read } for pid=92 comm="syslogd" name="log" dev="sda1" ino=2010 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:var_t tclass=lnk_file permissive=1 [ 135.028856][ T2770] RSP: 0018:ffffc9000fed7cc8 EFLAGS: 00010246 [ 135.028877][ T2770] RAX: ffff8881246b6200 RBX: 0000000000000000 RCX: ffff8881246b62c0 [ 135.028890][ T2770] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 135.028900][ T2770] RBP: ffffc9000fed7cd8 R08: ffffffff893d8967 R09: 1ffffffff127b12c [ 135.028913][ T2770] R10: dffffc0000000000 R11: fffffbfff127b12d R12: 0000000000000000 [ 135.028925][ T2770] R13: 0000000000000000 R14: 0000000000000001 R15: dffffc0000000000 [ 135.028935][ T2770] FS: 000055558e0f0500(0000) GS:ffff8881f6d00000(0000) knlGS:0000000000000000 [ 135.028950][ T2770] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 135.028963][ T2770] CR2: 0000000000000168 CR3: 0000000114458000 CR4: 00000000003526b0 [ 135.045700][ T36] audit: type=1400 audit(1794132695.419:7778): avc: denied { search } for pid=92 comm="syslogd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 135.056779][ T2770] Kernel panic - not syncing: Fatal exception [ 135.056935][ T2770] Kernel Offset: disabled