last executing test programs: 45.609768708s ago: executing program 2 (id=536): ioctl$FS_IOC_ENABLE_VERITY(0xffffffffffffffff, 0x40806685, 0x0) r0 = socket$netlink(0x10, 0x3, 0xc) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r0, 0x10e, 0x4, &(0x7f0000000140)=0x6, 0x4) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000200), 0x4) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)={0x64, 0x0, 0x1, 0x401, 0x0, 0x0, {0x2}, [@CTA_TUPLE_ORIG={0x24, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_REPLY={0x24, 0x2, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8, 0x2, @empty}}}]}, @CTA_TIMEOUT={0x8}]}, 0x64}}, 0x0) sendmsg$IPCTNL_MSG_CT_DELETE(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000640)={0x14, 0x2, 0x1, 0x5, 0x0, 0x0, {0x2, 0x0, 0x8}}, 0x14}, 0x1, 0x0, 0x0, 0x20044804}, 0x40040) 45.51227321s ago: executing program 2 (id=537): mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x1000, 0x3, &(0x7f0000254000/0x1000)=nil) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) syz_clone(0x40000000, 0x0, 0x0, 0x0, 0x0, 0x0) mremap(&(0x7f0000d2a000/0x1000)=nil, 0x1000, 0x3000, 0x3, &(0x7f0000ffa000/0x3000)=nil) 45.49994256s ago: executing program 2 (id=538): prlimit64(0x0, 0xe, &(0x7f0000000600)={0x9, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = timerfd_create(0x0, 0x0) read(r0, &(0x7f0000000240)=""/123, 0x7b) ioctl$TFD_IOC_SET_TICKS(r0, 0x40085400, &(0x7f0000000140)=0x61) 44.643098348s ago: executing program 2 (id=556): mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000080)='./file0/../file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b101a, 0x0) mount$bind(0x0, &(0x7f0000000240)='./file0/file0\x00', 0x0, 0x80000, 0x0) open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) mount$bind(&(0x7f0000000040)='./file0/file0/file0\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x18d883, 0x0) umount2(&(0x7f0000001880)='./file0/../file0\x00', 0x9) 44.608252219s ago: executing program 2 (id=557): r0 = socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup(r1) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}) write$tun(r3, &(0x7f0000000080)=ANY=[@ANYBLOB="083c86dd0001110004600000a60c6eec00be00442cfffe8000000000000000000000000000aaff020000000000000000000000000001", @ANYRES32=r2], 0xfdef) 44.420208923s ago: executing program 2 (id=558): prlimit64(0x0, 0xe, &(0x7f0000000600)={0x9, 0x20000001000}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e22}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(r0, 0x1, &(0x7f0000000000)=0xf) socket$igmp(0x2, 0x3, 0x2) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) connect$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x4e22, 0x0, @dev, 0x5}, 0x1c) connect$inet6(0xffffffffffffffff, 0x0, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f00000012c0)={0x0, 0x0, 0x0}, 0x8000) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000100)='configfs\x00', 0x200, 0x0) mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f00000001c0)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) r3 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x100, 0x0) getdents64(r3, 0x0, 0x22) 44.420054132s ago: executing program 32 (id=558): prlimit64(0x0, 0xe, &(0x7f0000000600)={0x9, 0x20000001000}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e22}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(r0, 0x1, &(0x7f0000000000)=0xf) socket$igmp(0x2, 0x3, 0x2) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) connect$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x4e22, 0x0, @dev, 0x5}, 0x1c) connect$inet6(0xffffffffffffffff, 0x0, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f00000012c0)={0x0, 0x0, 0x0}, 0x8000) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000100)='configfs\x00', 0x200, 0x0) mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f00000001c0)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) r3 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x100, 0x0) getdents64(r3, 0x0, 0x22) 2.226323694s ago: executing program 3 (id=1824): openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x8000, 0x0) r0 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r0, &(0x7f000001b000/0x18000)=nil, &(0x7f0000000140)=[@textreal={0x8, 0x0}], 0x1, 0x24, 0x0, 0x0) ioctl$KVM_RUN(r0, 0xae80, 0x0) ioctl$KVM_SET_NESTED_STATE(r0, 0x4080aebf, &(0x7f0000000640)=@vmx={0x103, 0x0, 0x2080, {0x50000, 0x60000, {}, 0x1, 0x8}, {"d07ee5110000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f500000000000000000000000000000000000000000000000000000000001c0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000057ae000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000080000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000100008000", "000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000e8ffffff000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000007a7f000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000080000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000"}}) 2.214936805s ago: executing program 3 (id=1825): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r1) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)) write$cgroup_subtree(r0, &(0x7f0000000000)=ANY=[@ANYBLOB="7bedcb5d07081196f37538e486dd6372ce2220302b00dbf6e97158cf474fec87891f6d76745b686158bbcfe8875afdef00010000000029"], 0x66) 2.187725645s ago: executing program 3 (id=1826): r0 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, 0x0) 1.853092722s ago: executing program 3 (id=1827): r0 = add_key$fscrypt_v1(&(0x7f0000000200), &(0x7f0000000240)={'fscrypt:', @desc1}, &(0x7f0000000280)={0x0, "fcaf496ff3eedeb4b25c6673b779b033eaf22438dc9bc4e5764eddff3afa26d1c88b8822425a09a9a434aa9c70da8166f466867c6c4ebe095c24e7191ac39036", 0x30}, 0x48, 0xfffffffffffffffb) keyctl$unlink(0x9, r0, 0xfffffffffffffffb) 1.852965812s ago: executing program 3 (id=1828): r0 = syz_usb_connect$midi(0x2, 0x24, &(0x7f0000000000)={{0x12, 0x1, 0x200, 0x0, 0x0, 0x0, 0x10, 0x1430, 0x474b, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x1, 0xf8, 0x0, 0xc, "", {{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x3, 0xee640842aed3cc28, 0x7}}}}}]}}, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$rtl8150(r0, &(0x7f00000002c0)={0x14, 0x0, &(0x7f0000000280)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0xc01}}}, 0x0) syz_usb_control_io$uac2(r0, &(0x7f00000005c0)={0x14, 0x0, &(0x7f0000000580)={0x0, 0x3, 0x2, @string={0x2}}}, 0x0) 1.240309055s ago: executing program 4 (id=1836): sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = mmap$KVM_VCPU(&(0x7f0000ffb000/0x2000)=nil, 0x930, 0x1000002, 0x4018831, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x80001) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f00000000c0)) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000000240)={{&(0x7f0000ffa000/0x3000)=nil, 0x3000}, 0x1}) syz_memcpy_off$KVM_EXIT_HYPERCALL(r0, 0x20, &(0x7f0000000000)="aafc361abad74318502891c4c26423fb18e301de0a534d0136cd3295dd6a6d299206fef236153a6fb9f3ddaf173b35381663ab6d9a0d7eda9ebe3f5459c0c467048e63a19e308071", 0x0, 0x48) ioctl$UFFDIO_ZEROPAGE(r1, 0xc020aa04, &(0x7f0000000140)={{&(0x7f0000ffb000/0x1000)=nil, 0x1000}}) 1.162980936s ago: executing program 4 (id=1839): r0 = syz_clone(0x82020000, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = syz_open_procfs(r0, &(0x7f00000000c0)='stack\x00') pread64(r1, &(0x7f0000000140)=""/18, 0x12, 0x4) 1.069845338s ago: executing program 4 (id=1842): openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0xe0042, 0x1ff) r0 = inotify_init1(0x0) inotify_add_watch(r0, &(0x7f0000000000)='.\x00', 0x2000775) chmod(&(0x7f00000000c0)='./file1\x00', 0x8) 1.069702478s ago: executing program 4 (id=1843): r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r1 = ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r0, r1, &(0x7f000001b000/0x18000)=nil, &(0x7f0000000140)=[@textreal={0x8, 0x0}], 0x1, 0x24, 0x0, 0x0) ioctl$KVM_RUN(r1, 0xae80, 0x0) ioctl$KVM_SET_NESTED_STATE(r1, 0x4080aebf, &(0x7f0000000640)=@vmx={0x103, 0x0, 0x2080, {0x50000, 0x60000, {}, 0x1, 0x8}, {"d07ee5110000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f500000000000000000000000000000000000000000000000000000000001c0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000057ae000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000080000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000100008000", "000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000e8ffffff000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000007a7f000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000080000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000"}}) 859.415283ms ago: executing program 4 (id=1844): close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000600)={0x100}, 0x4) setsockopt$packet_fanout_data(r0, 0x107, 0x16, 0x0, 0x0) 792.037824ms ago: executing program 4 (id=1848): socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000180)=0x80000002) openat$rtc(0xffffff9c, &(0x7f0000000040), 0xc2440, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x16) openat$fuse(0xffffffffffffff9c, &(0x7f0000000280), 0x42, 0x0) faccessat2(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x3, 0x1200) r3 = getpid() r4 = syz_pidfd_open(r3, 0x0) setns(r4, 0x24020000) umount2(&(0x7f0000000040)='.\x00', 0x2) 450.420341ms ago: executing program 0 (id=1854): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r2) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r5 = socket$packet(0x11, 0x3, 0x300) sendto$packet(r5, &(0x7f00000005c0)="bad330", 0x3, 0x24048890, &(0x7f00000001c0)={0x11, 0xcda921e89e1196b2, r4, 0x1, 0xd8, 0x6, @multicast}, 0x14) 383.459902ms ago: executing program 0 (id=1855): setpriority(0x0, 0x0, 0x2a14b58) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=ANY=[@ANYBLOB="3c000000120001000000000000000000e0000002000000000000000000000000000004d50000000014000d00200100e18a8b08a00817590ceee8de36addbe60000"], 0x3c}}, 0x0) 383.323382ms ago: executing program 0 (id=1856): r0 = socket$inet_udp(0x2, 0x2, 0x0) sendmmsg$unix(r0, 0x0, 0x0, 0x24004041) bind$inet(r0, &(0x7f0000000140)={0x2, 0x80, @dev={0xac, 0x14, 0x14, 0x3c}}, 0x10) 382.972612ms ago: executing program 0 (id=1857): r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000002180), 0x0, 0x0) ioctl$ASHMEM_SET_NAME(r0, 0x8008770b, 0x0) 330.947783ms ago: executing program 0 (id=1858): r0 = openat$selinux_policy(0xffffff9c, &(0x7f00000000c0), 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x100000a, 0x12, r0, 0x0) timer_create(0x1, &(0x7f0000000800)={0x0, 0x21, 0x4}, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = socket(0x1, 0x2, 0x0) getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) setresuid(0x0, r4, r4) r5 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_CAP_ENFORCE_PV_FEATURE_CPUID(r5, 0x4068aea3, &(0x7f0000000600)={0xbe, 0x0, 0x1}) syz_kvm_setup_cpu$x86(r2, r5, &(0x7f0000491000/0x18000)=nil, &(0x7f0000000240)=[@text16={0x10, 0x0}], 0x1, 0x34, 0x0, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) 330.565153ms ago: executing program 0 (id=1859): r0 = syz_usb_connect$hid(0x3, 0x36, &(0x7f00000002c0)={{0x12, 0x1, 0x110, 0x0, 0x0, 0x0, 0x10, 0x56a, 0xd4, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0xa0, 0xa2, "", [{{0x9, 0x4, 0x0, 0xfe, 0x3, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x81, 0x3, 0x1, {0x22, 0x28}}, {{{0x9, 0x5, 0x81, 0x3, 0x400, 0xb, 0xc4, 0x1}}}}}]}}]}}, 0x0) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x43, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000040)={0x2c, &(0x7f0000000100)={0x20, 0x9, 0x28, {0x28, 0x0, "826313612b8526792c3cbdeace918d0fb74237cc6e446c4e88e78881ce2a52973661d67a0c55"}}, 0x0, 0x0, 0x0, 0x0}, 0x0) 126.807768ms ago: executing program 3 (id=1870): syz_clone(0x82020000, 0x0, 0x0, 0x0, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000480)='task\x00') fchdir(r0) mount(0x0, &(0x7f0000000080)='.\x00', &(0x7f0000000000)='proc\x00', 0x0, 0x0) syz_usb_connect(0x3, 0x24, &(0x7f0000000080)=ANY=[@ANYBLOB="10010000099473089911216859980000000f0902"], 0x0) sendmsg$nl_netfilter(r0, 0x0, 0x40000) pread64(0xffffffffffffffff, &(0x7f0000000140)=""/18, 0x12, 0x4) 70.741349ms ago: executing program 1 (id=1872): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r5 = socket$packet(0x11, 0x3, 0x300) sendto$packet(r5, &(0x7f00000005c0)="bad330", 0x3, 0x24048890, &(0x7f00000001c0)={0x11, 0xcda921e89e1196b2, r4, 0x1, 0xd8, 0x6, @multicast}, 0x14) 70.663959ms ago: executing program 1 (id=1873): setfsgid(0xee00) r0 = syz_open_procfs(0x0, &(0x7f0000000300)='task\x00') fchdir(r0) r1 = syz_clone(0x0, 0x0, 0x1d, 0x0, 0x0, 0x0) mount(0x0, &(0x7f0000000080)='.\x00', &(0x7f0000000000)='proc\x00', 0x0, 0x0) syz_open_procfs(r1, &(0x7f0000000340)='environ\x00') 65.142809ms ago: executing program 1 (id=1874): r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) ioctl$UI_GET_SYSNAME(r0, 0x8040552c, 0x0) 51.907489ms ago: executing program 1 (id=1875): r0 = socket$inet_udp(0x2, 0x2, 0x0) sendmmsg$unix(r0, &(0x7f000000aa40), 0x0, 0x24004041) bind$inet(r0, &(0x7f0000000140)={0x2, 0x80, @dev={0xac, 0x14, 0x14, 0x3c}}, 0x10) 148.09µs ago: executing program 1 (id=1876): sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f00000000c0)={0x2, 0x0, @ioapic={0x70000, 0x4000b, 0xffff, 0xfffffffd, 0x0, [{0x2, 0x4, 0x87, '\x00', 0x8}, {0x9, 0x8, 0x2, '\x00', 0xb}, {0xff, 0x4, 0xd4, '\x00', 0x67}, {0x6, 0x2, 0xf5, '\x00', 0xf}, {0x81, 0x8, 0xc, '\x00', 0x5}, {0x3, 0x65, 0x54, '\x00', 0xfc}, {0x61, 0xd5, 0xf1, '\x00', 0x7f}, {0x3, 0x4, 0xc, '\x00', 0xff}, {0x71, 0x5, 0xb, '\x00', 0x8}, {0xd7, 0x4d, 0x8, '\x00', 0x6}, {0x0, 0x28, 0x4, '\x00', 0xdc}, {0x40, 0x21, 0x5, '\x00', 0x81}, {0xfe, 0x3, 0x26}, {0xcc, 0x3, 0x1, '\x00', 0x6}, {0xf, 0x6, 0xa, '\x00', 0x63}, {0x39, 0x0, 0x9, '\x00', 0xb}, {0x9, 0x6, 0x2, '\x00', 0x8}, {0x5, 0xc, 0x5, '\x00', 0xc}, {0x7, 0x2, 0x7}, {0x0, 0x7f, 0x1, '\x00', 0x83}, {0x1, 0xc, 0x81, '\x00', 0x7f}, {0x10, 0x6, 0x3, '\x00', 0x10}, {0x1, 0x27, 0xf3}, {0x7, 0x6, 0x4, '\x00', 0x8}]}}) 0s ago: executing program 1 (id=1877): mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mount$incfs(&(0x7f0000000080)='./file0\x00', &(0x7f0000000100)='./file0\x00', &(0x7f00000001c0), 0x10002, &(0x7f0000000000)={[{@rlog_pages={'rlog_pages', 0x3d, 0x7fff}}]}) kernel console output (not intermixed with test programs): er after parsing attributes in process `syz.0.237'. [ 50.602917][ T799] usb 3-1: new high-speed USB device number 16 using dummy_hcd [ 50.711823][ T384] smsc95xx 4-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -71 [ 50.722654][ T384] smsc95xx 4-1:0.67: probe with driver smsc95xx failed with error -71 [ 50.731787][ T384] usb 4-1: USB disconnect, device number 14 [ 50.772962][ T799] usb 3-1: Using ep0 maxpacket: 16 [ 50.779168][ T799] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 50.790125][ T799] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 50.802987][ T799] usb 3-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 50.812033][ T799] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 50.820707][ T799] usb 3-1: config 0 descriptor?? [ 50.942930][ T461] usb 1-1: new high-speed USB device number 17 using dummy_hcd [ 51.102921][ T461] usb 1-1: Using ep0 maxpacket: 32 [ 51.109271][ T461] usb 1-1: config 0 has an invalid interface number: 67 but max is 0 [ 51.117467][ T461] usb 1-1: config 0 has no interface number 0 [ 51.125128][ T461] usb 1-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 51.134348][ T461] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 51.142370][ T461] usb 1-1: Product: syz [ 51.146565][ T461] usb 1-1: Manufacturer: syz [ 51.151166][ T461] usb 1-1: SerialNumber: syz [ 51.156391][ T461] usb 1-1: config 0 descriptor?? [ 51.162108][ T461] smsc95xx v2.0.0 [ 51.229016][ T799] microsoft 0003:045E:07DA.0008: unknown main item tag 0x0 [ 51.236376][ T799] microsoft 0003:045E:07DA.0008: unknown main item tag 0x0 [ 51.243642][ T799] microsoft 0003:045E:07DA.0008: unknown main item tag 0x0 [ 51.250900][ T799] microsoft 0003:045E:07DA.0008: unknown main item tag 0x0 [ 51.258170][ T799] microsoft 0003:045E:07DA.0008: unknown main item tag 0x0 [ 51.265421][ T799] microsoft 0003:045E:07DA.0008: unknown main item tag 0x0 [ 51.272638][ T799] microsoft 0003:045E:07DA.0008: unknown main item tag 0x0 [ 51.279879][ T799] microsoft 0003:045E:07DA.0008: unknown main item tag 0x0 [ 51.287135][ T799] microsoft 0003:045E:07DA.0008: unknown main item tag 0x0 [ 51.294379][ T799] microsoft 0003:045E:07DA.0008: unknown main item tag 0x0 [ 51.306167][ T799] input: HID 045e:07da as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/0003:045E:07DA.0008/input/input9 [ 51.319404][ T799] microsoft 0003:045E:07DA.0008: input,hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.2-1/input0 [ 51.432649][ T799] usb 3-1: USB disconnect, device number 16 [ 51.472948][ T384] usb 4-1: new full-speed USB device number 15 using dummy_hcd [ 51.562686][ T461] smsc95xx 1-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -32 [ 51.573500][ T461] smsc95xx 1-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 51.624241][ T384] usb 4-1: unable to get BOS descriptor or descriptor too short [ 51.632269][ T384] usb 4-1: not running at top speed; connect to a high speed hub [ 51.641319][ T384] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 51.651488][ T384] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 51.662426][ T384] usb 4-1: string descriptor 0 read error: -22 [ 51.668669][ T384] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 51.677739][ T384] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 51.689043][ T384] usb 4-1: 0:2 : does not exist [ 51.789775][ T799] usb 2-1: USB disconnect, device number 17 [ 52.124180][ T1007] kvm: vcpu 0: requested 128 ns lapic timer period limited to 200000 ns [ 52.132562][ T1007] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=1812281087 (231971979136 ns) > initial count (200000 ns). Using initial count to start timer. [ 52.202924][ T45] usb 3-1: new high-speed USB device number 17 using dummy_hcd [ 52.291812][ T384] usb 4-1: 5:0: cannot get min/max values for control 2 (id 5) [ 52.301994][ T384] usb 4-1: 5:0: cannot get min/max values for control 3 (id 5) [ 52.312126][ T384] usb 4-1: 5:0: failed to get current value for ch 1 (-22) [ 52.332569][ T384] usb 4-1: USB disconnect, device number 15 [ 52.352925][ T45] usb 3-1: Using ep0 maxpacket: 8 [ 52.410444][ T45] usb 3-1: unable to get BOS descriptor or descriptor too short [ 52.418770][ T45] usb 3-1: unable to read config index 0 descriptor/start: -71 [ 52.426424][ T45] usb 3-1: can't read configurations, error -71 [ 52.785331][ T461] smsc95xx 1-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -71 [ 52.805514][ T461] smsc95xx 1-1:0.67: probe with driver smsc95xx failed with error -71 [ 52.818663][ T461] usb 1-1: USB disconnect, device number 17 [ 53.083018][ T384] usb 4-1: new high-speed USB device number 16 using dummy_hcd [ 53.153524][ T36] audit: type=1400 audit(1783554785.239:232): avc: denied { ioctl } for pid=1025 comm="syz.1.262" path="socket:[8970]" dev="sockfs" ino=8970 ioctlcmd=0x8983 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 53.178185][ T36] audit: type=1400 audit(1783554785.239:233): avc: denied { audit_write } for pid=1025 comm="syz.1.262" capability=29 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 53.252913][ T384] usb 4-1: Using ep0 maxpacket: 32 [ 53.259099][ T384] usb 4-1: config 0 has an invalid interface number: 67 but max is 0 [ 53.268607][ T384] usb 4-1: config 0 has no interface number 0 [ 53.276359][ T384] usb 4-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 53.282954][ T45] usb 3-1: new high-speed USB device number 18 using dummy_hcd [ 53.285788][ T384] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 53.301531][ T384] usb 4-1: Product: syz [ 53.305769][ T384] usb 4-1: Manufacturer: syz [ 53.310558][ T384] usb 4-1: SerialNumber: syz [ 53.316280][ T384] usb 4-1: config 0 descriptor?? [ 53.323410][ T384] smsc95xx v2.0.0 [ 53.365360][ T1034] netlink: 'syz.0.266': attribute type 5 has an invalid length. [ 53.442941][ T45] usb 3-1: Using ep0 maxpacket: 16 [ 53.449222][ T45] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 53.460401][ T45] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 53.473251][ T45] usb 3-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 53.482292][ T45] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 53.491112][ T45] usb 3-1: config 0 descriptor?? [ 53.496140][ T367] usb 2-1: new full-speed USB device number 18 using dummy_hcd [ 53.613009][ T461] usb 1-1: new full-speed USB device number 18 using dummy_hcd [ 53.654239][ T367] usb 2-1: unable to get BOS descriptor or descriptor too short [ 53.662388][ T367] usb 2-1: not running at top speed; connect to a high speed hub [ 53.670827][ T367] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 53.680958][ T367] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 53.691794][ T367] usb 2-1: string descriptor 0 read error: -22 [ 53.698192][ T367] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 53.707309][ T367] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 53.719626][ T367] usb 2-1: 0:2 : does not exist [ 53.724949][ T384] smsc95xx 4-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -32 [ 53.735759][ T384] smsc95xx 4-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 53.763980][ T461] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1023, setting to 64 [ 53.775256][ T461] usb 1-1: New USB device found, idVendor=0c12, idProduct=0030, bcdDevice= 0.00 [ 53.784339][ T461] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 53.793205][ T461] usb 1-1: config 0 descriptor?? [ 53.798446][ T1034] raw-gadget.3 gadget.0: fail, usb_ep_enable returned -22 [ 53.908746][ T45] microsoft 0003:045E:07DA.0009: unknown main item tag 0x0 [ 53.916029][ T45] microsoft 0003:045E:07DA.0009: unknown main item tag 0x0 [ 53.923461][ T45] microsoft 0003:045E:07DA.0009: unknown main item tag 0x0 [ 53.930689][ T45] microsoft 0003:045E:07DA.0009: unknown main item tag 0x0 [ 53.938294][ T45] microsoft 0003:045E:07DA.0009: unknown main item tag 0x0 [ 53.945582][ T45] microsoft 0003:045E:07DA.0009: unknown main item tag 0x0 [ 53.946120][ T384] smsc95xx 4-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -61 [ 53.952818][ T45] microsoft 0003:045E:07DA.0009: unknown main item tag 0x0 [ 53.963953][ T384] smsc95xx 4-1:0.67: probe with driver smsc95xx failed with error -61 [ 53.970844][ T45] microsoft 0003:045E:07DA.0009: unknown main item tag 0x0 [ 53.986240][ T45] microsoft 0003:045E:07DA.0009: unknown main item tag 0x0 [ 53.993599][ T45] microsoft 0003:045E:07DA.0009: unknown main item tag 0x0 [ 54.005320][ T45] input: HID 045e:07da as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/0003:045E:07DA.0009/input/input10 [ 54.017733][ T1034] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 54.018421][ T45] microsoft 0003:045E:07DA.0009: input,hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.2-1/input0 [ 54.035918][ T1034] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 54.125173][ T462] usb 3-1: USB disconnect, device number 18 [ 54.144098][ T1044] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 54.153991][ T1044] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 54.325674][ T367] usb 2-1: 5:0: cannot get min/max values for control 2 (id 5) [ 54.335103][ T367] usb 2-1: 5:0: cannot get min/max values for control 3 (id 5) [ 54.344718][ T367] usb 2-1: 5:0: failed to get current value for ch 1 (-22) [ 54.355720][ T367] usb 2-1: USB disconnect, device number 18 [ 54.368772][ T461] usbhid 1-1:0.0: can't add hid device: -71 [ 54.374797][ T461] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 54.383736][ T461] usb 1-1: USB disconnect, device number 18 [ 54.836688][ T36] audit: type=1400 audit(1783554786.919:234): avc: denied { write } for pid=1047 comm="syz.1.268" name="001" dev="devtmpfs" ino=95 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 54.881650][ T1052] netlink: 'syz.1.270': attribute type 4 has an invalid length. [ 54.889515][ T367] usb 3-1: new high-speed USB device number 19 using dummy_hcd [ 54.894732][ T1052] netlink: 3657 bytes leftover after parsing attributes in process `syz.1.270'. [ 54.940485][ T1060] netlink: 36 bytes leftover after parsing attributes in process `syz.1.274'. [ 55.042936][ T367] usb 3-1: Using ep0 maxpacket: 8 [ 55.053398][ T367] usb 3-1: unable to get BOS descriptor or descriptor too short [ 55.061557][ T367] usb 3-1: unable to read config index 0 descriptor/start: -71 [ 55.069141][ T367] usb 3-1: can't read configurations, error -71 [ 55.172934][ T799] usb 1-1: new high-speed USB device number 19 using dummy_hcd [ 55.232986][ T461] usb 2-1: new high-speed USB device number 19 using dummy_hcd [ 55.322932][ T799] usb 1-1: Using ep0 maxpacket: 32 [ 55.329130][ T799] usb 1-1: config 0 has an invalid interface number: 67 but max is 0 [ 55.337277][ T799] usb 1-1: config 0 has no interface number 0 [ 55.344694][ T799] usb 1-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 55.353803][ T799] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 55.361788][ T799] usb 1-1: Product: syz [ 55.365964][ T799] usb 1-1: Manufacturer: syz [ 55.370556][ T799] usb 1-1: SerialNumber: syz [ 55.375901][ T799] usb 1-1: config 0 descriptor?? [ 55.381532][ T799] smsc95xx v2.0.0 [ 55.392910][ T461] usb 2-1: Using ep0 maxpacket: 16 [ 55.399117][ T461] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 55.410101][ T461] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 55.423006][ T461] usb 2-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 55.432035][ T461] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 55.440711][ T461] usb 2-1: config 0 descriptor?? [ 55.781965][ T799] smsc95xx 1-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -32 [ 55.792760][ T799] smsc95xx 1-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 55.827886][ T45] usb 4-1: USB disconnect, device number 16 [ 55.843003][ T1070] syzkaller1: entered promiscuous mode [ 55.848561][ T1070] syzkaller1: entered allmulticast mode [ 55.851538][ T461] microsoft 0003:045E:07DA.000A: unknown main item tag 0x0 [ 55.861457][ T461] microsoft 0003:045E:07DA.000A: unknown main item tag 0x0 [ 55.868743][ T461] microsoft 0003:045E:07DA.000A: unknown main item tag 0x0 [ 55.876106][ T461] microsoft 0003:045E:07DA.000A: unknown main item tag 0x0 [ 55.883370][ T461] microsoft 0003:045E:07DA.000A: unknown main item tag 0x0 [ 55.890628][ T461] microsoft 0003:045E:07DA.000A: unknown main item tag 0x0 [ 55.897925][ T461] microsoft 0003:045E:07DA.000A: unknown main item tag 0x0 [ 55.905167][ T461] microsoft 0003:045E:07DA.000A: unknown main item tag 0x0 [ 55.912376][ T461] microsoft 0003:045E:07DA.000A: unknown main item tag 0x0 [ 55.919654][ T461] microsoft 0003:045E:07DA.000A: unknown main item tag 0x0 [ 55.931732][ T461] input: HID 045e:07da as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/0003:045E:07DA.000A/input/input11 [ 55.945385][ T461] microsoft 0003:045E:07DA.000A: input,hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.1-1/input0 [ 55.962766][ T1073] netlink: 'syz.3.279': attribute type 27 has an invalid length. [ 55.971182][ T1073] FAULT_INJECTION: forcing a failure. [ 55.971182][ T1073] name failslab, interval 1, probability 0, space 0, times 0 [ 55.983894][ T1073] CPU: 0 UID: 0 PID: 1073 Comm: syz.3.279 Not tainted syzkaller #0 38ce34caa3eafecb4514ac9530ab896457f545a5 [ 55.983922][ T1073] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 55.983939][ T1073] Call Trace: [ 55.983945][ T1073] [ 55.983951][ T1073] __dump_stack+0x21/0x30 [ 55.983990][ T1073] dump_stack_lvl+0x140/0x1c0 [ 55.984010][ T1073] ? __cfi_dump_stack_lvl+0x10/0x10 [ 55.984033][ T1073] dump_stack+0x19/0x20 [ 55.984054][ T1073] should_fail_ex+0x3c2/0x510 [ 55.984074][ T1073] should_failslab+0xac/0x100 [ 55.984095][ T1073] kmem_cache_alloc_noprof+0x42/0x410 [ 55.984113][ T1073] ? fib_insert_alias+0x2a6/0x1200 [ 55.984133][ T1073] fib_insert_alias+0x2a6/0x1200 [ 55.984152][ T1073] ? kmem_cache_alloc_noprof+0x1e2/0x410 [ 55.984170][ T1073] ? fib_table_insert+0x68c/0x1ef0 [ 55.984190][ T1073] fib_table_insert+0x843/0x1ef0 [ 55.984212][ T1073] fib_add_ifaddr+0xa58/0xdc0 [ 55.984228][ T1073] ? entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 55.984252][ T1073] ? __cfi_fib_add_ifaddr+0x10/0x10 [ 55.984273][ T1073] ? igmp_group_added+0x22e/0x860 [ 55.984295][ T1073] ? __kasan_check_write+0x18/0x20 [ 55.984312][ T1073] ? __cfi__raw_spin_lock_bh+0x10/0x10 [ 55.984333][ T1073] ? igmpv3_del_delrec+0x6f0/0x6f0 [ 55.984354][ T1073] ? __kasan_check_write+0x18/0x20 [ 55.984371][ T1073] ? _raw_spin_unlock_bh+0x54/0x60 [ 55.984391][ T1073] ? inetdev_event+0xf21/0x1240 [ 55.984409][ T1073] ? __cfi_inetdev_event+0x10/0x10 [ 55.984426][ T1073] fib_netdev_event+0x4c4/0x5d0 [ 55.984453][ T1073] ? __cfi_fib_netdev_event+0x10/0x10 [ 55.984470][ T1073] notifier_call_chain+0x106/0x2b0 [ 55.984488][ T1073] raw_notifier_call_chain+0x31/0x40 [ 55.984506][ T1073] __dev_notify_flags+0x318/0x5a0 [ 55.984526][ T1073] ? __cfi___dev_notify_flags+0x10/0x10 [ 55.984544][ T1073] ? __dev_change_flags+0x4ec/0x6c0 [ 55.984562][ T1073] ? __cfi___dev_change_flags+0x10/0x10 [ 55.984580][ T1073] ? unwind_get_return_address+0x51/0x90 [ 55.984603][ T1073] ? __cfi_stack_trace_consume_entry+0x10/0x10 [ 55.984625][ T1073] dev_change_flags+0xe7/0x1b0 [ 55.984643][ T1073] do_setlink+0xb7b/0x41e0 [ 55.984665][ T1073] ? __cfi__printk+0x10/0x10 [ 55.984687][ T1073] ? nlmsg_parse_deprecated_strict+0x130/0x130 [ 55.984709][ T1073] ? kasan_save_track+0x4f/0x80 [ 55.984728][ T1073] ? kasan_save_alloc_info+0x3a/0x50 [ 55.984752][ T1073] ? __kasan_kmalloc+0x96/0xb0 [ 55.984771][ T1073] ? __kmalloc_cache_noprof+0x23c/0x470 [ 55.984793][ T1073] ? __nla_validate+0x70/0x70 [ 55.984819][ T1073] ? kasan_save_alloc_info+0x3a/0x50 [ 55.984843][ T1073] ? __kasan_kmalloc+0x96/0xb0 [ 55.984865][ T1073] rtnl_newlink+0x10ec/0x2220 [ 55.984884][ T1073] ? rtnl_newlink+0xa91/0x2220 [ 55.984904][ T1073] ? __cfi_rtnl_newlink+0x10/0x10 [ 55.984923][ T1073] ? cred_has_capability+0x296/0x3a0 [ 55.984948][ T1073] ? __cfi_stack_trace_consume_entry+0x10/0x10 [ 55.984973][ T1073] ? selinux_perf_event_alloc+0x110/0x110 [ 55.984993][ T1073] ? stack_trace_save+0xaa/0x100 [ 55.985015][ T1073] ? __cfi_mutex_lock+0x10/0x10 [ 55.985038][ T1073] ? ns_capable+0x90/0xf0 [ 55.985062][ T1073] ? netlink_net_capable+0x129/0x160 [ 55.985085][ T1073] ? __cfi_rtnl_newlink+0x10/0x10 [ 55.985103][ T1073] rtnetlink_rcv_msg+0x8be/0xa40 [ 55.985123][ T1073] ? __asan_memcpy+0x5a/0x80 [ 55.985140][ T1073] ? __cfi_rtnetlink_rcv_msg+0x10/0x10 [ 55.985161][ T1073] ? avc_has_perm+0x155/0x240 [ 55.985181][ T1073] netlink_rcv_skb+0x24d/0x4e0 [ 55.985206][ T1073] ? __cfi_rtnetlink_rcv_msg+0x10/0x10 [ 55.985227][ T1073] ? __cfi_netlink_rcv_skb+0x10/0x10 [ 55.985251][ T1073] ? selinux_netlink_send+0x7df/0x8b0 [ 55.985275][ T1073] ? netlink_autobind+0x1c0/0x1c0 [ 55.985293][ T1073] ? is_vmalloc_addr+0x11/0x40 [ 55.985315][ T1073] rtnetlink_rcv+0x20/0x30 [ 55.985333][ T1073] netlink_unicast+0x8bf/0xa70 [ 55.985358][ T1073] netlink_sendmsg+0x7d1/0xad0 [ 55.985375][ T1073] ? __cfi_netlink_sendmsg+0x10/0x10 [ 55.985392][ T1073] ? bpf_lsm_socket_sendmsg+0xd/0x20 [ 55.985411][ T1073] ? security_socket_sendmsg+0x3d/0x100 [ 55.985442][ T1073] ____sys_sendmsg+0x99e/0xa00 [ 55.985460][ T1073] ? __import_iovec+0x5b9/0x7d0 [ 55.985484][ T1073] ? __sys_sendmsg_sock+0x50/0x50 [ 55.985502][ T1073] ? import_iovec+0x80/0xb0 [ 55.985526][ T1073] ___sys_sendmsg+0x2a6/0x370 [ 55.985542][ T1073] ? __sys_sendmsg+0x2a0/0x2a0 [ 55.985559][ T1073] ? proc_fail_nth_write+0x184/0x220 [ 55.985583][ T1073] ? __cfi_proc_fail_nth_write+0x10/0x10 [ 55.985610][ T1073] ? __fget_files+0x2bc/0x330 [ 55.985632][ T1073] __x64_sys_sendmsg+0x206/0x2e0 [ 55.985648][ T1073] ? fput+0x1a4/0x230 [ 55.985669][ T1073] ? __cfi___x64_sys_sendmsg+0x10/0x10 [ 55.985686][ T1073] ? ksys_write+0x1f3/0x260 [ 55.985705][ T1073] ? __kasan_check_read+0x15/0x20 [ 55.985723][ T1073] x64_sys_call+0x2a4c/0x2ee0 [ 55.985739][ T1073] do_syscall_64+0x57/0xf0 [ 55.985757][ T1073] ? clear_bhb_loop+0x50/0xa0 [ 55.985778][ T1073] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 55.985798][ T1073] RIP: 0033:0x7f06e379de59 [ 55.985815][ T1073] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 55.985831][ T1073] RSP: 002b:00007f06e469b028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 55.985852][ T1073] RAX: ffffffffffffffda RBX: 00007f06e3a25fa0 RCX: 00007f06e379de59 [ 55.985866][ T1073] RDX: 0000000000000000 RSI: 0000200000000580 RDI: 0000000000000003 [ 55.985879][ T1073] RBP: 00007f06e469b090 R08: 0000000000000000 R09: 0000000000000000 [ 55.985891][ T1073] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 55.985903][ T1073] R13: 00007f06e3a26038 R14: 00007f06e3a25fa0 R15: 00007fff1067ef48 [ 55.985919][ T1073] [ 56.573744][ T1073] veth0_vlan: left promiscuous mode [ 56.579305][ T1073] veth0_vlan: entered promiscuous mode [ 56.586243][ T1073] veth1_macvtap: left promiscuous mode [ 56.592468][ T1073] veth1_macvtap: entered promiscuous mode [ 56.599776][ T501] bridge0: port 1(bridge_slave_0) entered blocking state [ 56.606842][ T501] bridge0: port 1(bridge_slave_0) entered forwarding state [ 56.616272][ T501] bridge0: port 2(bridge_slave_1) entered blocking state [ 56.623443][ T501] bridge0: port 2(bridge_slave_1) entered forwarding state [ 56.636667][ T1076] netlink: 'syz.2.280': attribute type 5 has an invalid length. [ 56.645333][ T462] usb 2-1: USB disconnect, device number 19 [ 56.647304][ T1080] netlink: 'syz.3.281': attribute type 4 has an invalid length. [ 56.659265][ T1080] netlink: 3657 bytes leftover after parsing attributes in process `syz.3.281'. [ 56.882968][ T367] usb 3-1: new full-speed USB device number 21 using dummy_hcd [ 57.000675][ T1090] netlink: 'syz.3.286': attribute type 27 has an invalid length. [ 57.032711][ T1090] bridge0: port 2(bridge_slave_1) entered disabled state [ 57.039933][ T1090] bridge0: port 1(bridge_slave_0) entered disabled state [ 57.080268][ T367] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1023, setting to 64 [ 57.102973][ T367] usb 3-1: New USB device found, idVendor=0c12, idProduct=0030, bcdDevice= 0.00 [ 57.122905][ T367] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 57.135450][ T367] usb 3-1: config 0 descriptor?? [ 57.140475][ T799] smsc95xx 1-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -32 [ 57.152360][ T1078] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 57.152516][ T799] smsc95xx 1-1:0.67: probe with driver smsc95xx failed with error -32 [ 57.171494][ T799] usb 1-1: USB disconnect, device number 19 [ 57.382613][ T1076] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 57.391233][ T1076] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 57.422928][ T805] usb 2-1: new high-speed USB device number 20 using dummy_hcd [ 57.457266][ T1078] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 57.466262][ T1078] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 57.512952][ T462] usb 4-1: new high-speed USB device number 17 using dummy_hcd [ 57.582932][ T805] usb 2-1: Using ep0 maxpacket: 32 [ 57.589052][ T805] usb 2-1: config 0 has an invalid interface number: 67 but max is 0 [ 57.597221][ T805] usb 2-1: config 0 has no interface number 0 [ 57.604646][ T805] usb 2-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 57.613767][ T805] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 57.621771][ T805] usb 2-1: Product: syz [ 57.625964][ T805] usb 2-1: Manufacturer: syz [ 57.630566][ T805] usb 2-1: SerialNumber: syz [ 57.636132][ T805] usb 2-1: config 0 descriptor?? [ 57.642290][ T805] smsc95xx v2.0.0 [ 57.673953][ T462] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 57.684266][ T462] usb 4-1: config 1 interface 0 altsetting 0 bulk endpoint 0xE has invalid maxpacket 1024 [ 57.695783][ T367] usbhid 3-1:0.0: can't add hid device: -71 [ 57.696876][ T462] usb 4-1: New USB device found, idVendor=1235, idProduct=000e, bcdDevice= 0.40 [ 57.703191][ T367] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 57.718649][ T462] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 57.718674][ T462] usb 4-1: Product: syz [ 57.731286][ T367] usb 3-1: USB disconnect, device number 21 [ 57.741192][ T462] usb 4-1: Manufacturer: syz [ 57.745889][ T462] usb 4-1: SerialNumber: syz [ 57.751507][ T1096] raw-gadget.2 gadget.3: fail, usb_ep_enable returned -22 [ 57.766858][ T1107] FAULT_INJECTION: forcing a failure. [ 57.766858][ T1107] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 57.780487][ T1107] CPU: 0 UID: 0 PID: 1107 Comm: syz.0.289 Not tainted syzkaller #0 38ce34caa3eafecb4514ac9530ab896457f545a5 [ 57.780516][ T1107] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 57.780528][ T1107] Call Trace: [ 57.780534][ T1107] [ 57.780542][ T1107] __dump_stack+0x21/0x30 [ 57.780572][ T1107] dump_stack_lvl+0x140/0x1c0 [ 57.780598][ T1107] ? __cfi_dump_stack_lvl+0x10/0x10 [ 57.780621][ T1107] ? check_stack_object+0x138/0x150 [ 57.780639][ T1107] dump_stack+0x19/0x20 [ 57.780660][ T1107] should_fail_ex+0x3c2/0x510 [ 57.780679][ T1107] should_fail+0xf/0x20 [ 57.780696][ T1107] should_fail_usercopy+0x1e/0x30 [ 57.780717][ T1107] _copy_to_user+0x24/0xa0 [ 57.780739][ T1107] simple_read_from_buffer+0xed/0x160 [ 57.780765][ T1107] proc_fail_nth_read+0x1aa/0x220 [ 57.780789][ T1107] ? __cfi_proc_fail_nth_read+0x10/0x10 [ 57.780810][ T1107] ? rwsem_read_trylock+0x275/0x5a0 [ 57.780826][ T1107] ? bpf_lsm_file_permission+0xd/0x20 [ 57.780840][ T1107] ? __cfi_proc_fail_nth_read+0x10/0x10 [ 57.780854][ T1107] vfs_read+0x288/0xc70 [ 57.780866][ T1107] ? __cfi___blk_flush_plug+0x10/0x10 [ 57.780887][ T1107] ? __cfi_vfs_read+0x10/0x10 [ 57.780904][ T1107] ? __kasan_check_write+0x18/0x20 [ 57.780922][ T1107] ? mutex_lock+0x97/0x1d0 [ 57.780944][ T1107] ? __cfi_mutex_lock+0x10/0x10 [ 57.780959][ T1107] ksys_read+0x145/0x260 [ 57.780969][ T1107] ? xfd_validate_state+0x68/0x140 [ 57.780983][ T1107] ? __cfi_ksys_read+0x10/0x10 [ 57.780993][ T1107] ? __kasan_check_write+0x18/0x20 [ 57.781002][ T1107] ? fpregs_restore_userregs+0x11c/0x260 [ 57.781022][ T1107] __x64_sys_read+0x7f/0x90 [ 57.781040][ T1107] x64_sys_call+0x2638/0x2ee0 [ 57.781057][ T1107] do_syscall_64+0x57/0xf0 [ 57.781075][ T1107] ? clear_bhb_loop+0x50/0xa0 [ 57.781093][ T1107] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 57.781106][ T1107] RIP: 0033:0x7f24bb55e68e [ 57.781117][ T1107] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 57.781126][ T1107] RSP: 002b:00007f24b9fd5fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 57.781139][ T1107] RAX: ffffffffffffffda RBX: 00007f24b9fd66c0 RCX: 00007f24bb55e68e [ 57.781148][ T1107] RDX: 000000000000000f RSI: 00007f24b9fd60a0 RDI: 0000000000000005 [ 57.781158][ T1107] RBP: 00007f24b9fd6090 R08: 0000000000000000 R09: 0000000000000000 [ 57.781171][ T1107] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 57.781182][ T1107] R13: 00007f24bb826128 R14: 00007f24bb826090 R15: 00007ffcfd8f05e8 [ 57.781198][ T1107] [ 58.045215][ T805] smsc95xx 2-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -32 [ 58.056119][ T805] smsc95xx 2-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 58.100003][ T1111] netlink: 'syz.0.291': attribute type 4 has an invalid length. [ 58.107789][ T1111] netlink: 3657 bytes leftover after parsing attributes in process `syz.0.291'. [ 58.266117][ T805] smsc95xx 2-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -61 [ 58.276950][ T805] smsc95xx 2-1:0.67: probe with driver smsc95xx failed with error -61 [ 58.372928][ T367] usb 1-1: new full-speed USB device number 20 using dummy_hcd [ 58.534235][ T367] usb 1-1: unable to get BOS descriptor or descriptor too short [ 58.542334][ T367] usb 1-1: not running at top speed; connect to a high speed hub [ 58.550814][ T367] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 58.561001][ T367] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 58.571847][ T367] usb 1-1: string descriptor 0 read error: -22 [ 58.578106][ T367] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 58.587165][ T367] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 58.598950][ T367] usb 1-1: 0:2 : does not exist [ 58.772922][ T312] usb 3-1: new high-speed USB device number 22 using dummy_hcd [ 58.922908][ T312] usb 3-1: Using ep0 maxpacket: 16 [ 58.929122][ T312] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 58.940075][ T312] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 58.952911][ T312] usb 3-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 58.961961][ T312] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 58.970686][ T312] usb 3-1: config 0 descriptor?? [ 58.999601][ T367] usb 1-1: 5:0: cannot get min/max values for control 2 (id 5) [ 59.009092][ T367] usb 1-1: 5:0: cannot get min/max values for control 3 (id 5) [ 59.018613][ T367] usb 1-1: 5:0: failed to get current value for ch 1 (-22) [ 59.029470][ T367] usb 1-1: USB disconnect, device number 20 [ 59.378718][ T312] microsoft 0003:045E:07DA.000B: unknown main item tag 0x0 [ 59.386093][ T312] microsoft 0003:045E:07DA.000B: unknown main item tag 0x0 [ 59.393360][ T312] microsoft 0003:045E:07DA.000B: unknown main item tag 0x0 [ 59.400653][ T312] microsoft 0003:045E:07DA.000B: unknown main item tag 0x0 [ 59.407930][ T312] microsoft 0003:045E:07DA.000B: unknown main item tag 0x0 [ 59.415180][ T312] microsoft 0003:045E:07DA.000B: unknown main item tag 0x0 [ 59.422394][ T312] microsoft 0003:045E:07DA.000B: unknown main item tag 0x0 [ 59.429644][ T312] microsoft 0003:045E:07DA.000B: unknown main item tag 0x0 [ 59.437002][ T312] microsoft 0003:045E:07DA.000B: unknown main item tag 0x0 [ 59.444234][ T312] microsoft 0003:045E:07DA.000B: unknown main item tag 0x0 [ 59.454957][ T312] input: HID 045e:07da as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/0003:045E:07DA.000B/input/input12 [ 59.470386][ T312] microsoft 0003:045E:07DA.000B: input,hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.2-1/input0 [ 59.526143][ T36] audit: type=1400 audit(1783554791.609:235): avc: denied { create } for pid=1123 comm="syz.0.297" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1 [ 59.583957][ T312] usb 3-1: USB disconnect, device number 22 [ 59.852928][ T799] usb 1-1: new high-speed USB device number 21 using dummy_hcd [ 60.013096][ T799] usb 1-1: Using ep0 maxpacket: 32 [ 60.019307][ T799] usb 1-1: config 0 has an invalid interface number: 67 but max is 0 [ 60.027440][ T799] usb 1-1: config 0 has no interface number 0 [ 60.034884][ T799] usb 1-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 60.043999][ T799] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 60.052004][ T799] usb 1-1: Product: syz [ 60.056192][ T799] usb 1-1: Manufacturer: syz [ 60.060799][ T799] usb 1-1: SerialNumber: syz [ 60.066065][ T799] usb 1-1: config 0 descriptor?? [ 60.071798][ T799] smsc95xx v2.0.0 [ 60.148051][ T1133] netlink: 'syz.2.300': attribute type 27 has an invalid length. [ 60.156963][ T1133] FAULT_INJECTION: forcing a failure. [ 60.156963][ T1133] name failslab, interval 1, probability 0, space 0, times 0 [ 60.169904][ T1133] CPU: 1 UID: 0 PID: 1133 Comm: syz.2.300 Not tainted syzkaller #0 38ce34caa3eafecb4514ac9530ab896457f545a5 [ 60.169932][ T1133] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 60.169944][ T1133] Call Trace: [ 60.169950][ T1133] [ 60.169960][ T1133] __dump_stack+0x21/0x30 [ 60.169989][ T1133] dump_stack_lvl+0x140/0x1c0 [ 60.170014][ T1133] ? __cfi_dump_stack_lvl+0x10/0x10 [ 60.170038][ T1133] ? _raw_spin_lock_irqsave+0xc1/0x160 [ 60.170058][ T1133] dump_stack+0x19/0x20 [ 60.170081][ T1133] should_fail_ex+0x3c2/0x510 [ 60.170101][ T1133] should_failslab+0xac/0x100 [ 60.170124][ T1133] kmem_cache_alloc_node_noprof+0x45/0x420 [ 60.170151][ T1133] ? __alloc_skb+0x10c/0x360 [ 60.170174][ T1133] __alloc_skb+0x10c/0x360 [ 60.170196][ T1133] rtmsg_ifinfo_build_skb+0x7a/0x270 [ 60.170217][ T1133] rtmsg_ifinfo+0x91/0x1a0 [ 60.170235][ T1133] netdev_state_change+0x19a/0x240 [ 60.170252][ T1133] ? __cfi_netdev_state_change+0x10/0x10 [ 60.170270][ T1133] ? dev_change_flags+0xe7/0x1b0 [ 60.170290][ T1133] do_setlink+0x1051/0x41e0 [ 60.170312][ T1133] ? __cfi__printk+0x10/0x10 [ 60.170342][ T1133] ? nlmsg_parse_deprecated_strict+0x130/0x130 [ 60.170364][ T1133] ? kasan_save_track+0x4f/0x80 [ 60.170384][ T1133] ? kasan_save_alloc_info+0x3a/0x50 [ 60.170409][ T1133] ? __kasan_kmalloc+0x96/0xb0 [ 60.170429][ T1133] ? __kmalloc_cache_noprof+0x23c/0x470 [ 60.170452][ T1133] ? __nla_validate+0x70/0x70 [ 60.170477][ T1133] ? kasan_save_alloc_info+0x3a/0x50 [ 60.170502][ T1133] ? __kasan_kmalloc+0x96/0xb0 [ 60.170524][ T1133] rtnl_newlink+0x10ec/0x2220 [ 60.170543][ T1133] ? rtnl_newlink+0xa91/0x2220 [ 60.170564][ T1133] ? __cfi_rtnl_newlink+0x10/0x10 [ 60.170581][ T1133] ? cred_has_capability+0x296/0x3a0 [ 60.170599][ T1133] ? __cfi_stack_trace_consume_entry+0x10/0x10 [ 60.170621][ T1133] ? selinux_perf_event_alloc+0x110/0x110 [ 60.170647][ T1133] ? stack_trace_save+0xaa/0x100 [ 60.170669][ T1133] ? __cfi_mutex_lock+0x10/0x10 [ 60.170691][ T1133] ? ns_capable+0x90/0xf0 [ 60.170716][ T1133] ? netlink_net_capable+0x129/0x160 [ 60.170740][ T1133] ? __cfi_rtnl_newlink+0x10/0x10 [ 60.170758][ T1133] rtnetlink_rcv_msg+0x8be/0xa40 [ 60.170779][ T1133] ? __asan_memcpy+0x5a/0x80 [ 60.170797][ T1133] ? __cfi_rtnetlink_rcv_msg+0x10/0x10 [ 60.170818][ T1133] ? avc_has_perm+0x155/0x240 [ 60.170839][ T1133] netlink_rcv_skb+0x24d/0x4e0 [ 60.170863][ T1133] ? __cfi_rtnetlink_rcv_msg+0x10/0x10 [ 60.170884][ T1133] ? __cfi_netlink_rcv_skb+0x10/0x10 [ 60.170908][ T1133] ? selinux_netlink_send+0x7df/0x8b0 [ 60.170933][ T1133] ? netlink_autobind+0x1c0/0x1c0 [ 60.170950][ T1133] ? is_vmalloc_addr+0x11/0x40 [ 60.170973][ T1133] rtnetlink_rcv+0x20/0x30 [ 60.170992][ T1133] netlink_unicast+0x8bf/0xa70 [ 60.171016][ T1133] netlink_sendmsg+0x7d1/0xad0 [ 60.171041][ T1133] ? __cfi_netlink_sendmsg+0x10/0x10 [ 60.171059][ T1133] ? bpf_lsm_socket_sendmsg+0xd/0x20 [ 60.171079][ T1133] ? security_socket_sendmsg+0x3d/0x100 [ 60.171102][ T1133] ____sys_sendmsg+0x99e/0xa00 [ 60.171120][ T1133] ? __import_iovec+0x5b9/0x7d0 [ 60.171151][ T1133] ? __sys_sendmsg_sock+0x50/0x50 [ 60.171169][ T1133] ? import_iovec+0x80/0xb0 [ 60.171193][ T1133] ___sys_sendmsg+0x2a6/0x370 [ 60.171211][ T1133] ? __sys_sendmsg+0x2a0/0x2a0 [ 60.171228][ T1133] ? proc_fail_nth_write+0x184/0x220 [ 60.171253][ T1133] ? __cfi_proc_fail_nth_write+0x10/0x10 [ 60.171281][ T1133] ? __fget_files+0x2bc/0x330 [ 60.171304][ T1133] __x64_sys_sendmsg+0x206/0x2e0 [ 60.171321][ T1133] ? fput+0x1a4/0x230 [ 60.171342][ T1133] ? __cfi___x64_sys_sendmsg+0x10/0x10 [ 60.171359][ T1133] ? ksys_write+0x1f3/0x260 [ 60.171379][ T1133] ? __kasan_check_read+0x15/0x20 [ 60.171397][ T1133] x64_sys_call+0x2a4c/0x2ee0 [ 60.171413][ T1133] do_syscall_64+0x57/0xf0 [ 60.171431][ T1133] ? clear_bhb_loop+0x50/0xa0 [ 60.171453][ T1133] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 60.171475][ T1133] RIP: 0033:0x7fa7f8f9de59 [ 60.171491][ T1133] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 60.171506][ T1133] RSP: 002b:00007fa7f9e51028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 60.171526][ T1133] RAX: ffffffffffffffda RBX: 00007fa7f9225fa0 RCX: 00007fa7f8f9de59 [ 60.171547][ T1133] RDX: 0000000000000000 RSI: 0000200000000580 RDI: 0000000000000003 [ 60.171559][ T1133] RBP: 00007fa7f9e51090 R08: 0000000000000000 R09: 0000000000000000 [ 60.171571][ T1133] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 60.171583][ T1133] R13: 00007fa7f9226038 R14: 00007fa7f9225fa0 R15: 00007ffe5ef923d8 [ 60.171599][ T1133] [ 60.641386][ T799] smsc95xx 1-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -32 [ 60.643034][ T462] usb 4-1: USB disconnect, device number 17 [ 60.652294][ T799] smsc95xx 1-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 60.668939][ T312] usb 2-1: USB disconnect, device number 20 [ 60.675514][ T1138] netlink: 'syz.1.302': attribute type 27 has an invalid length. [ 60.786340][ T1138] bridge0: port 2(bridge_slave_1) entered disabled state [ 60.793573][ T1138] bridge0: port 1(bridge_slave_0) entered disabled state [ 61.072936][ T9] usb 3-1: new full-speed USB device number 23 using dummy_hcd [ 61.132975][ T367] usb 2-1: new high-speed USB device number 21 using dummy_hcd [ 61.224348][ T9] usb 3-1: unable to get BOS descriptor or descriptor too short [ 61.232404][ T9] usb 3-1: not running at top speed; connect to a high speed hub [ 61.240959][ T9] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 61.251080][ T9] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 61.261928][ T9] usb 3-1: string descriptor 0 read error: -22 [ 61.268270][ T9] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 61.277335][ T9] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 61.289954][ T9] usb 3-1: 0:2 : does not exist [ 61.292915][ T367] usb 2-1: Using ep0 maxpacket: 16 [ 61.301086][ T367] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 61.312088][ T367] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 61.324995][ T367] usb 2-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 61.334081][ T367] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 61.342755][ T367] usb 2-1: config 0 descriptor?? [ 61.690271][ T9] usb 3-1: 5:0: cannot get min/max values for control 2 (id 5) [ 61.699737][ T9] usb 3-1: 5:0: cannot get min/max values for control 3 (id 5) [ 61.709228][ T9] usb 3-1: 5:0: failed to get current value for ch 1 (-22) [ 61.728923][ T9] usb 3-1: USB disconnect, device number 23 [ 61.753583][ T367] microsoft 0003:045E:07DA.000C: unknown main item tag 0x0 [ 61.760962][ T367] microsoft 0003:045E:07DA.000C: unknown main item tag 0x0 [ 61.768409][ T367] microsoft 0003:045E:07DA.000C: unknown main item tag 0x0 [ 61.775715][ T367] microsoft 0003:045E:07DA.000C: unknown main item tag 0x0 [ 61.782962][ T367] microsoft 0003:045E:07DA.000C: unknown main item tag 0x0 [ 61.790319][ T367] microsoft 0003:045E:07DA.000C: unknown main item tag 0x0 [ 61.797588][ T367] microsoft 0003:045E:07DA.000C: unknown main item tag 0x0 [ 61.804876][ T367] microsoft 0003:045E:07DA.000C: unknown main item tag 0x0 [ 61.812108][ T367] microsoft 0003:045E:07DA.000C: unknown main item tag 0x0 [ 61.819355][ T367] microsoft 0003:045E:07DA.000C: unknown main item tag 0x0 [ 61.829758][ T367] input: HID 045e:07da as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/0003:045E:07DA.000C/input/input13 [ 61.844975][ T367] microsoft 0003:045E:07DA.000C: input,hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.1-1/input0 [ 61.956132][ T9] usb 2-1: USB disconnect, device number 21 [ 62.002995][ T460] usb 4-1: new high-speed USB device number 18 using dummy_hcd [ 62.152934][ T460] usb 4-1: Using ep0 maxpacket: 32 [ 62.159257][ T460] usb 4-1: config 0 has an invalid interface number: 67 but max is 0 [ 62.167391][ T460] usb 4-1: config 0 has no interface number 0 [ 62.174781][ T460] usb 4-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 62.183854][ T460] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 62.191872][ T460] usb 4-1: Product: syz [ 62.196084][ T460] usb 4-1: Manufacturer: syz [ 62.202895][ T460] usb 4-1: SerialNumber: syz [ 62.213740][ T460] usb 4-1: config 0 descriptor?? [ 62.221895][ T460] smsc95xx v2.0.0 [ 62.288073][ T799] smsc95xx 1-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000038: -71 [ 62.298938][ T799] smsc95xx 1-1:0.67: probe with driver smsc95xx failed with error -71 [ 62.308359][ T799] usb 1-1: USB disconnect, device number 21 [ 62.452928][ T367] usb 3-1: new high-speed USB device number 24 using dummy_hcd [ 62.612958][ T367] usb 3-1: Using ep0 maxpacket: 16 [ 62.621246][ T1167] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 62.629850][ T1167] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 62.630122][ T460] smsc95xx 4-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -32 [ 62.648357][ T460] smsc95xx 4-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 62.688507][ T367] usb 3-1: unable to get BOS descriptor or descriptor too short [ 62.698477][ T367] usb 3-1: unable to read config index 0 descriptor/start: -71 [ 62.700440][ T1176] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=123 sclass=netlink_route_socket pid=1176 comm=syz.2.316 [ 62.706113][ T367] usb 3-1: can't read configurations, error -71 [ 62.725119][ T799] usb 2-1: new high-speed USB device number 22 using dummy_hcd [ 62.768971][ T1184] netlink: 36 bytes leftover after parsing attributes in process `syz.2.320'. [ 62.858177][ T460] smsc95xx 4-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -61 [ 62.868961][ T460] smsc95xx 4-1:0.67: probe with driver smsc95xx failed with error -61 [ 62.883923][ T799] usb 2-1: New USB device found, idVendor=03da, idProduct=2820, bcdDevice=52.3c [ 62.893161][ T799] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 62.901710][ T799] usb 2-1: config 0 descriptor?? [ 62.907435][ T799] usb 2-1: bad CDC descriptors [ 63.109010][ T1171] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 63.117580][ T1171] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 63.126913][ T1171] veth1_macvtap: mtu less than device minimum [ 63.133570][ T460] usb 2-1: USB disconnect, device number 22 [ 63.142954][ T367] usb 3-1: new high-speed USB device number 25 using dummy_hcd [ 63.292926][ T367] usb 3-1: Using ep0 maxpacket: 16 [ 63.299062][ T367] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 63.309994][ T367] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 63.322831][ T367] usb 3-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 63.332152][ T367] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 63.339457][ T1191] netlink: 'syz.0.323': attribute type 5 has an invalid length. [ 63.341811][ T367] usb 3-1: config 0 descriptor?? [ 63.582929][ T460] usb 1-1: new high-speed USB device number 22 using dummy_hcd [ 63.734049][ T460] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 63.743864][ T460] usb 1-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 63.758741][ T460] usb 1-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 63.766642][ T367] microsoft 0003:045E:07DA.000D: unknown main item tag 0x0 [ 63.775067][ T460] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.41 [ 63.779135][ T367] microsoft 0003:045E:07DA.000D: unknown main item tag 0x0 [ 63.794372][ T460] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=11 [ 63.806890][ T367] microsoft 0003:045E:07DA.000D: unknown main item tag 0x0 [ 63.810443][ T460] usb 1-1: Product: syz [ 63.814237][ T367] microsoft 0003:045E:07DA.000D: unknown main item tag 0x0 [ 63.818515][ T460] usb 1-1: Manufacturer: syz [ 63.825783][ T367] microsoft 0003:045E:07DA.000D: unknown main item tag 0x0 [ 63.830344][ T460] usb 1-1: SerialNumber: syz [ 63.837555][ T367] microsoft 0003:045E:07DA.000D: unknown main item tag 0x0 [ 63.849343][ T367] microsoft 0003:045E:07DA.000D: unknown main item tag 0x0 [ 63.856601][ T367] microsoft 0003:045E:07DA.000D: unknown main item tag 0x0 [ 63.863896][ T367] microsoft 0003:045E:07DA.000D: unknown main item tag 0x0 [ 63.871248][ T367] microsoft 0003:045E:07DA.000D: unknown main item tag 0x0 [ 63.882736][ T367] input: HID 045e:07da as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/0003:045E:07DA.000D/input/input14 [ 63.898689][ T367] microsoft 0003:045E:07DA.000D: input,hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.2-1/input0 [ 63.968804][ T367] usb 3-1: USB disconnect, device number 25 [ 64.042927][ T799] usb 2-1: new high-speed USB device number 23 using dummy_hcd [ 64.048052][ T460] usblp 1-1:1.0: usblp0: USB Unidirectional printer dev 22 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 64.192945][ T799] usb 2-1: Using ep0 maxpacket: 8 [ 64.199045][ T799] usb 2-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 130, changing to 7 [ 64.210166][ T799] usb 2-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 255, changing to 7 [ 64.222429][ T799] usb 2-1: New USB device found, idVendor=0763, idProduct=2003, bcdDevice= 0.40 [ 64.231665][ T799] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 64.239688][ T799] usb 2-1: Product: syz [ 64.243859][ T799] usb 2-1: Manufacturer: syz [ 64.248457][ T799] usb 2-1: SerialNumber: syz [ 64.257137][ T36] audit: type=1400 audit(1783554796.339:236): avc: denied { read write } for pid=1190 comm="syz.0.323" name="lp0" dev="devtmpfs" ino=703 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:printer_device_t tclass=chr_file permissive=1 [ 64.280848][ T36] audit: type=1400 audit(1783554796.339:237): avc: denied { open } for pid=1190 comm="syz.0.323" path="/dev/usb/lp0" dev="devtmpfs" ino=703 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:printer_device_t tclass=chr_file permissive=1 [ 64.335724][ T1213] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 64.344292][ T1213] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 64.357707][ T460] usb 1-1: USB disconnect, device number 22 [ 64.364374][ T460] usblp0: removed [ 64.457939][ T1203] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 64.466561][ T1203] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 64.477869][ T799] usb 2-1: 1:1: invalid format type 0x1002 is detected, processed as PCM [ 64.486342][ T799] usb 2-1: 1:1 : invalid UAC_FORMAT_TYPE desc [ 64.492853][ T799] usb 2-1: 2:1 : UAC_AS_GENERAL descriptor not found [ 64.507159][ T799] usb 2-1: USB disconnect, device number 23 [ 64.732957][ T9] usb 3-1: new high-speed USB device number 26 using dummy_hcd [ 64.782998][ T460] usb 4-1: USB disconnect, device number 18 [ 64.793655][ T1217] netlink: 36 bytes leftover after parsing attributes in process `syz.3.331'. [ 64.884459][ T9] usb 3-1: Using ep0 maxpacket: 32 [ 64.896573][ T9] usb 3-1: config 0 has an invalid interface number: 67 but max is 0 [ 64.910942][ T9] usb 3-1: config 0 has no interface number 0 [ 64.918839][ T1224] netlink: 220 bytes leftover after parsing attributes in process `syz.3.334'. [ 64.920893][ T9] usb 3-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 64.941939][ T1228] syz.3.336: vmalloc error: size 8589938688, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=syz3,mems_allowed=0 [ 64.947143][ T9] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 64.957038][ T1228] CPU: 1 UID: 0 PID: 1228 Comm: syz.3.336 Not tainted syzkaller #0 38ce34caa3eafecb4514ac9530ab896457f545a5 [ 64.957066][ T1228] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 64.957077][ T1228] Call Trace: [ 64.957083][ T1228] [ 64.957090][ T1228] __dump_stack+0x21/0x30 [ 64.957120][ T1228] dump_stack_lvl+0x140/0x1c0 [ 64.957145][ T1228] ? __cfi_dump_stack_lvl+0x10/0x10 [ 64.957171][ T1228] ? _raw_spin_unlock_irqrestore+0x4a/0x70 [ 64.957192][ T1228] dump_stack+0x19/0x20 [ 64.957214][ T1228] warn_alloc+0x1e7/0x2c0 [ 64.957237][ T1228] ? stack_depot_save_flags+0x399/0x800 [ 64.957259][ T1228] ? __cfi_warn_alloc+0x10/0x10 [ 64.957283][ T1228] ? kasan_save_track+0x3e/0x80 [ 64.957302][ T1228] ? kasan_save_alloc_info+0x3a/0x50 [ 64.957327][ T1228] ? xsk_init_queue+0xb2/0x120 [ 64.957347][ T1228] ? xsk_setsockopt+0x411/0x760 [ 64.957366][ T1228] ? do_sock_setsockopt+0x27c/0x410 [ 64.957392][ T1228] ? __x64_sys_setsockopt+0x1b7/0x250 [ 64.957417][ T1228] ? x64_sys_call+0x2adc/0x2ee0 [ 64.957433][ T1228] ? do_syscall_64+0x57/0xf0 [ 64.957451][ T1228] ? entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 64.957474][ T1228] __vmalloc_node_range_noprof+0x136/0x1300 [ 64.957504][ T1228] ? __cfi___vmalloc_node_range_noprof+0x10/0x10 [ 64.957531][ T1228] ? kasan_save_alloc_info+0x3a/0x50 [ 64.957556][ T1228] ? __kasan_kmalloc+0x96/0xb0 [ 64.957576][ T1228] ? __kmalloc_cache_noprof+0x23c/0x470 [ 64.957596][ T1228] vmalloc_user_noprof+0x77/0x90 [ 64.957621][ T1228] ? xskq_create+0xdb/0x290 [ 64.957641][ T1228] xskq_create+0xdb/0x290 [ 64.957661][ T1228] xsk_init_queue+0xb2/0x120 [ 64.957697][ T1228] xsk_setsockopt+0x411/0x760 [ 64.957718][ T1228] ? __cfi_xsk_setsockopt+0x10/0x10 [ 64.957738][ T1228] ? do_futex+0x37d/0x510 [ 64.957765][ T1228] ? errseq_sample+0x48/0x70 [ 64.957789][ T1228] ? file_init_path+0x434/0x590 [ 64.957813][ T1228] ? bpf_lsm_socket_setsockopt+0xd/0x20 [ 64.957833][ T1228] ? security_socket_setsockopt+0x3d/0x100 [ 64.957857][ T1228] ? __cfi_xsk_setsockopt+0x10/0x10 [ 64.957877][ T1228] do_sock_setsockopt+0x27c/0x410 [ 64.957903][ T1228] ? __cfi_do_sock_setsockopt+0x10/0x10 [ 64.957928][ T1228] ? __fget_files+0x2bc/0x330 [ 64.957949][ T1228] __x64_sys_setsockopt+0x1b7/0x250 [ 64.957986][ T1228] x64_sys_call+0x2adc/0x2ee0 [ 64.958008][ T1228] do_syscall_64+0x57/0xf0 [ 64.958026][ T1228] ? clear_bhb_loop+0x50/0xa0 [ 64.958049][ T1228] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 64.958071][ T1228] RIP: 0033:0x7f06e379de59 [ 64.958089][ T1228] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 64.958105][ T1228] RSP: 002b:00007f06e469b028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 64.958125][ T1228] RAX: ffffffffffffffda RBX: 00007f06e3a25fa0 RCX: 00007f06e379de59 [ 64.958139][ T1228] RDX: 0000000000000006 RSI: 000000000000011b RDI: 0000000000000006 [ 64.958150][ T1228] RBP: 00007f06e3833e6f R08: 0000000000000004 R09: 0000000000000000 [ 64.958163][ T1228] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000000 [ 64.958177][ T1228] R13: 00007f06e3a26038 R14: 00007f06e3a25fa0 R15: 00007fff1067ef48 [ 64.958194][ T1228] [ 64.958215][ T1228] Mem-Info: [ 64.978403][ T9] usb 3-1: Product: syz [ 65.006362][ T1231] netlink: 'syz.3.336': attribute type 17 has an invalid length. [ 65.032088][ T9] usb 3-1: Manufacturer: syz [ 65.037588][ T1228] active_anon:7126 inactive_anon:0 isolated_anon:0 [ 65.037588][ T1228] active_file:19616 inactive_file:2307 isolated_file:0 [ 65.037588][ T1228] unevictable:1675 dirty:68 writeback:0 [ 65.037588][ T1228] slab_reclaimable:4681 slab_unreclaimable:72115 [ 65.037588][ T1228] mapped:24541 shmem:164 pagetables:985 [ 65.037588][ T1228] sec_pagetables:3 bounce:0 [ 65.037588][ T1228] kernel_misc_reclaimable:0 [ 65.037588][ T1228] free:1521247 free_pcp:2429 free_cma:0 [ 65.050034][ T9] usb 3-1: SerialNumber: syz [ 65.051867][ T1228] Node 0 active_anon:28504kB inactive_anon:0kB active_file:79664kB inactive_file:9228kB unevictable:7800kB isolated(anon):0kB isolated(file):0kB mapped:98164kB dirty:272kB writeback:0kB shmem:656kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:7016kB pagetables:3940kB sec_pagetables:12kB all_unreclaimable? no [ 65.066222][ T1230] netlink: 'syz.1.337': attribute type 27 has an invalid length. [ 65.067537][ T1228] DMA32 free:2958164kB boost:0kB min:19080kB low:23848kB high:28616kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:3145324kB managed:2963396kB mlocked:0kB bounce:0kB free_pcp:5232kB local_pcp:0kB free_cma:0kB [ 65.071972][ T1230] FAULT_INJECTION: forcing a failure. [ 65.071972][ T1230] name failslab, interval 1, probability 0, space 0, times 0 [ 65.077973][ T1228] lowmem_reserve[]: [ 65.083854][ T9] usb 3-1: config 0 descriptor?? [ 65.092945][ T1228] 0 [ 65.103752][ T9] smsc95xx v2.0.0 [ 65.105646][ T1230] CPU: 1 UID: 0 PID: 1230 Comm: syz.1.337 Not tainted syzkaller #0 38ce34caa3eafecb4514ac9530ab896457f545a5 [ 65.105674][ T1230] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 65.105685][ T1230] Call Trace: [ 65.105690][ T1230] [ 65.105697][ T1230] __dump_stack+0x21/0x30 [ 65.105727][ T1230] dump_stack_lvl+0x140/0x1c0 [ 65.105750][ T1230] ? __cfi_dump_stack_lvl+0x10/0x10 [ 65.105774][ T1230] dump_stack+0x19/0x20 [ 65.105795][ T1230] should_fail_ex+0x3c2/0x510 [ 65.105815][ T1230] should_failslab+0xac/0x100 [ 65.105836][ T1230] __kmalloc_cache_noprof+0x41/0x470 [ 65.105855][ T1230] ? __asan_set_shadow_00+0x12/0x20 [ 65.105879][ T1230] ? ipv6_add_addr+0x543/0x1080 [ 65.105906][ T1230] ? blocking_notifier_call_chain+0x7c/0x90 [ 65.105926][ T1230] ipv6_add_addr+0x543/0x1080 [ 65.105950][ T1230] ? ipv6_generate_stable_address+0x6a0/0x6a0 [ 65.105974][ T1230] ? __kasan_check_write+0x18/0x20 [ 65.105992][ T1230] ? mutex_unlock+0x90/0x240 [ 65.106022][ T1230] add_addr+0x8a/0x2b0 [ 65.106041][ T1230] addrconf_init_auto_addrs+0x631/0xbf0 [ 65.106060][ T1230] ? __kasan_check_write+0x18/0x20 [ 65.106077][ T1230] ? addrconf_dad_run+0x5c0/0x5c0 [ 65.106095][ T1230] ? igmpv3_del_delrec+0x6f0/0x6f0 [ 65.106117][ T1230] ? __kasan_check_write+0x18/0x20 [ 65.106134][ T1230] ? _raw_spin_unlock_bh+0x54/0x60 [ 65.106153][ T1230] ? __kasan_check_write+0x18/0x20 [ 65.106170][ T1230] ? mutex_unlock+0x90/0x240 [ 65.106191][ T1230] ? __cfi_mutex_unlock+0x10/0x10 [ 65.106211][ T1230] ? macsec_notify+0x111/0x4f0 [ 65.106233][ T1230] ? addrconf_link_ready+0x131/0x1b0 [ 65.106251][ T1230] addrconf_notify+0x85c/0xeb0 [ 65.106270][ T1230] ? __cfi_addrconf_notify+0x10/0x10 [ 65.106289][ T1230] notifier_call_chain+0x106/0x2b0 [ 65.106306][ T1230] raw_notifier_call_chain+0x31/0x40 [ 65.106323][ T1230] __dev_notify_flags+0x318/0x5a0 [ 65.106343][ T1230] ? __cfi___dev_notify_flags+0x10/0x10 [ 65.106360][ T1230] ? __dev_change_flags+0x4ec/0x6c0 [ 65.106377][ T1230] ? __cfi___dev_change_flags+0x10/0x10 [ 65.106394][ T1230] ? unwind_get_return_address+0x51/0x90 [ 65.106415][ T1230] ? __cfi_stack_trace_consume_entry+0x10/0x10 [ 65.106436][ T1230] dev_change_flags+0xe7/0x1b0 [ 65.106454][ T1230] do_setlink+0xb7b/0x41e0 [ 65.106475][ T1230] ? __cfi__printk+0x10/0x10 [ 65.106496][ T1230] ? nlmsg_parse_deprecated_strict+0x130/0x130 [ 65.106517][ T1230] ? kasan_save_track+0x4f/0x80 [ 65.106535][ T1230] ? kasan_save_alloc_info+0x3a/0x50 [ 65.106559][ T1230] ? __kasan_kmalloc+0x96/0xb0 [ 65.106578][ T1230] ? __kmalloc_cache_noprof+0x23c/0x470 [ 65.106599][ T1230] ? __nla_validate+0x70/0x70 [ 65.106624][ T1230] ? kasan_save_alloc_info+0x3a/0x50 [ 65.106647][ T1230] ? __kasan_kmalloc+0x96/0xb0 [ 65.106669][ T1230] rtnl_newlink+0x10ec/0x2220 [ 65.106691][ T1230] ? rtnl_newlink+0xa91/0x2220 [ 65.106711][ T1230] ? __cfi_rtnl_newlink+0x10/0x10 [ 65.106728][ T1230] ? cred_has_capability+0x296/0x3a0 [ 65.106745][ T1230] ? __cfi_stack_trace_consume_entry+0x10/0x10 [ 65.106765][ T1230] ? selinux_perf_event_alloc+0x110/0x110 [ 65.106785][ T1230] ? __cfi_mutex_lock+0x10/0x10 [ 65.106805][ T1230] ? ns_capable+0x90/0xf0 [ 65.106829][ T1230] ? netlink_net_capable+0x129/0x160 [ 65.106851][ T1230] ? __cfi_rtnl_newlink+0x10/0x10 [ 65.106868][ T1230] rtnetlink_rcv_msg+0x8be/0xa40 [ 65.106888][ T1230] ? __asan_memcpy+0x5a/0x80 [ 65.106905][ T1230] ? __cfi_rtnetlink_rcv_msg+0x10/0x10 [ 65.106926][ T1230] ? avc_has_perm+0x155/0x240 [ 65.106946][ T1230] netlink_rcv_skb+0x24d/0x4e0 [ 65.106970][ T1230] ? __cfi_rtnetlink_rcv_msg+0x10/0x10 [ 65.106990][ T1230] ? __cfi_netlink_rcv_skb+0x10/0x10 [ 65.107018][ T1230] ? selinux_netlink_send+0x7df/0x8b0 [ 65.107041][ T1230] ? netlink_autobind+0x1c0/0x1c0 [ 65.107058][ T1230] ? is_vmalloc_addr+0x11/0x40 [ 65.107079][ T1230] rtnetlink_rcv+0x20/0x30 [ 65.107098][ T1230] netlink_unicast+0x8bf/0xa70 [ 65.107121][ T1230] netlink_sendmsg+0x7d1/0xad0 [ 65.107138][ T1230] ? __cfi_netlink_sendmsg+0x10/0x10 [ 65.107155][ T1230] ? bpf_lsm_socket_sendmsg+0xd/0x20 [ 65.107174][ T1230] ? security_socket_sendmsg+0x3d/0x100 [ 65.107196][ T1230] ____sys_sendmsg+0x99e/0xa00 [ 65.107213][ T1230] ? __import_iovec+0x5b9/0x7d0 [ 65.107235][ T1230] ? __sys_sendmsg_sock+0x50/0x50 [ 65.107253][ T1230] ? import_iovec+0x80/0xb0 [ 65.107276][ T1230] ___sys_sendmsg+0x2a6/0x370 [ 65.107292][ T1230] ? __sys_sendmsg+0x2a0/0x2a0 [ 65.107308][ T1230] ? proc_fail_nth_write+0x184/0x220 [ 65.107331][ T1230] ? __cfi_proc_fail_nth_write+0x10/0x10 [ 65.107358][ T1230] ? __fget_files+0x2bc/0x330 [ 65.107378][ T1230] __x64_sys_sendmsg+0x206/0x2e0 [ 65.107395][ T1230] ? fput+0x1a4/0x230 [ 65.107416][ T1230] ? __cfi___x64_sys_sendmsg+0x10/0x10 [ 65.107432][ T1230] ? ksys_write+0x1f3/0x260 [ 65.107450][ T1230] ? __kasan_check_read+0x15/0x20 [ 65.107468][ T1230] x64_sys_call+0x2a4c/0x2ee0 [ 65.107484][ T1230] do_syscall_64+0x57/0xf0 [ 65.107501][ T1230] ? clear_bhb_loop+0x50/0xa0 [ 65.107521][ T1230] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 65.107541][ T1230] RIP: 0033:0x7fc80af9de59 [ 65.107557][ T1230] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 65.107571][ T1230] RSP: 002b:00007fc80be83028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 65.107590][ T1230] RAX: ffffffffffffffda RBX: 00007fc80b225fa0 RCX: 00007fc80af9de59 [ 65.107604][ T1230] RDX: 0000000000000000 RSI: 0000200000000580 RDI: 0000000000000003 [ 65.107615][ T1230] RBP: 00007fc80be83090 R08: 0000000000000000 R09: 0000000000000000 [ 65.107626][ T1230] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 65.107637][ T1230] R13: 00007fc80b226038 R14: 00007fc80b225fa0 R15: 00007fff62a1edc8 [ 65.107651][ T1230] [ 65.120548][ T1228] 3921 [ 65.422914][ T460] usb 1-1: new high-speed USB device number 23 using dummy_hcd [ 65.430908][ T1228] 3921 [ 65.545336][ T9] smsc95xx 3-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -32 [ 65.547889][ T1228] [ 65.553651][ T9] smsc95xx 3-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 65.558845][ T1228] Normal free:3138092kB boost:0kB min:25972kB low:32464kB high:38956kB reserved_highatomic:0KB free_highatomic:0KB active_anon:28588kB inactive_anon:0kB active_file:71664kB inactive_file:9228kB unevictable:0kB writepending:280kB present:5242880kB managed:4015864kB mlocked:0kB bounce:0kB free_pcp:9436kB local_pcp:96kB free_cma:0kB [ 65.602945][ T460] usb 1-1: Using ep0 maxpacket: 16 [ 65.614771][ T1230] veth0_vlan: left promiscuous mode [ 65.618945][ T1228] lowmem_reserve[]: [ 65.623837][ T1230] veth0_vlan: entered promiscuous mode [ 65.628819][ T1228] 0 [ 65.635499][ T1230] veth1_macvtap: left promiscuous mode [ 65.639401][ T1228] 0 [ 65.645679][ T1230] veth1_macvtap: entered promiscuous mode [ 65.650624][ T460] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 65.656705][ T1228] 0 [ 65.664114][ T509] bridge0: port 1(bridge_slave_0) entered blocking state [ 65.666120][ T1228] [ 65.670370][ T509] bridge0: port 1(bridge_slave_0) entered forwarding state [ 65.670979][ T509] bridge0: port 2(bridge_slave_1) entered blocking state [ 65.676926][ T1228] DMA32: [ 65.681477][ T509] bridge0: port 2(bridge_slave_1) entered forwarding state [ 65.686952][ T1228] 5*4kB [ 65.706549][ T460] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 65.707331][ T1228] (M) [ 65.716280][ T460] usb 1-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 65.716829][ T1228] 4*8kB [ 65.723477][ T460] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 65.726837][ T1228] (M) [ 65.741508][ T460] usb 1-1: config 0 descriptor?? [ 65.743713][ T1228] 4*16kB [ 66.042192][ T1236] capability: warning: `syz.1.339' uses deprecated v2 capabilities in a way that may be insecure [ 66.078122][ T1228] (M) [ 66.104601][ T1236] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=46 sclass=netlink_audit_socket pid=1236 comm=syz.1.339 [ 66.108729][ T1228] 5*32kB [ 66.157036][ T460] microsoft 0003:045E:07DA.000E: unknown main item tag 0x0 [ 66.158498][ T1228] (M) [ 66.171392][ T460] microsoft 0003:045E:07DA.000E: unknown main item tag 0x0 [ 66.174419][ T1228] 3*64kB [ 66.184289][ T460] microsoft 0003:045E:07DA.000E: unknown main item tag 0x0 [ 66.186191][ T1228] (M) [ 66.194228][ T460] microsoft 0003:045E:07DA.000E: unknown main item tag 0x0 [ 66.197064][ T1228] 5*128kB [ 66.201831][ T460] microsoft 0003:045E:07DA.000E: unknown main item tag 0x0 [ 66.205103][ T1228] (M) [ 66.215935][ T460] microsoft 0003:045E:07DA.000E: unknown main item tag 0x0 [ 66.218334][ T1228] 5*256kB [ 66.230565][ T460] microsoft 0003:045E:07DA.000E: unknown main item tag 0x0 [ 66.233788][ T1228] (M) [ 66.241271][ T460] microsoft 0003:045E:07DA.000E: unknown main item tag 0x0 [ 66.243730][ T1228] 5*512kB [ 66.250635][ T460] microsoft 0003:045E:07DA.000E: unknown main item tag 0x0 [ 66.253743][ T1228] (M) [ 66.261288][ T460] microsoft 0003:045E:07DA.000E: unknown main item tag 0x0 [ 66.263779][ T1228] 4*1024kB [ 66.283437][ T460] input: HID 045e:07da as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/0003:045E:07DA.000E/input/input15 [ 66.283859][ T1228] (UM) [ 66.296870][ T460] microsoft 0003:045E:07DA.000E: input,hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.0-1/input0 [ 66.301296][ T1228] 4*2048kB (M) 718*4096kB (M) = 2958164kB [ 66.366120][ T1228] Normal: 631*4kB (UME) 773*8kB (UME) 197*16kB (UE) 200*32kB (UME) 413*64kB (UME) 7*128kB (UME) 12*256kB (UME) 12*512kB (UME) 6*1024kB (UME) 4*2048kB (ME) 748*4096kB (UM) = 3132948kB [ 66.384345][ T1228] 23257 total pagecache pages [ 66.385266][ T467] usb 1-1: USB disconnect, device number 23 [ 66.395901][ T1228] 1 pages in swap cache [ 66.400058][ T1228] Free swap = 124728kB [ 66.404271][ T1228] Total swap = 124996kB [ 66.408501][ T1228] 2097051 pages RAM [ 66.412425][ T1228] 0 pages HighMem/MovableOnly [ 66.417134][ T1228] 352236 pages reserved [ 66.421288][ T1228] 0 pages cma reserved [ 66.427103][ T1228] Memory allocations: [ 66.431083][ T1228] 0 B 0 init/main.c:1477 func:do_initcalls [ 66.438313][ T1228] 0 B 0 init/do_mounts.c:186 func:mount_root_generic [ 66.446431][ T1228] 0 B 0 init/do_mounts.c:158 func:do_mount_root [ 66.454088][ T1228] 0 B 0 init/do_mounts.c:352 func:mount_nodev_root [ 66.462001][ T1228] 0 B 0 init/do_mounts_rd.c:241 func:rd_load_image [ 66.469943][ T1228] 0 B 0 init/do_mounts_rd.c:72 func:identify_ramdisk_image [ 66.478557][ T1228] 0 B 0 init/initramfs.c:507 func:unpack_to_rootfs [ 66.486481][ T1228] 0 B 0 init/initramfs.c:508 func:unpack_to_rootfs [ 66.494407][ T1228] 0 B 0 init/initramfs.c:509 func:unpack_to_rootfs [ 66.502289][ T1228] 0 B 0 init/initramfs.c:101 func:find_link [ 66.612071][ T1243] netlink: 'syz.1.341': attribute type 5 has an invalid length. [ 66.852962][ T467] usb 2-1: new high-speed USB device number 24 using dummy_hcd [ 67.004151][ T467] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 67.014011][ T467] usb 2-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 67.023844][ T467] usb 2-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 67.038181][ T467] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.41 [ 67.047295][ T467] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=11 [ 67.055462][ T467] usb 2-1: Product: syz [ 67.059688][ T467] usb 2-1: Manufacturer: syz [ 67.064315][ T467] usb 2-1: SerialNumber: syz [ 67.132981][ T460] usb 1-1: new full-speed USB device number 24 using dummy_hcd [ 67.197351][ T9] smsc95xx 3-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000038: -71 [ 67.208243][ T9] smsc95xx 3-1:0.67: probe with driver smsc95xx failed with error -71 [ 67.219210][ T9] usb 3-1: USB disconnect, device number 26 [ 67.271887][ T467] usblp 2-1:1.0: usblp0: USB Unidirectional printer dev 24 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 67.283081][ T799] usb 4-1: new high-speed USB device number 19 using dummy_hcd [ 67.304000][ T460] usb 1-1: config 0 interface 0 altsetting 4 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 67.315192][ T460] usb 1-1: config 0 interface 0 has no altsetting 0 [ 67.321820][ T460] usb 1-1: New USB device found, idVendor=041e, idProduct=2801, bcdDevice= 0.00 [ 67.330924][ T460] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 67.339609][ T460] usb 1-1: config 0 descriptor?? [ 67.432935][ T799] usb 4-1: Using ep0 maxpacket: 16 [ 67.439195][ T799] usb 4-1: too many endpoints for config 0 interface 0 altsetting 251: 223, using maximum allowed: 30 [ 67.450246][ T799] usb 4-1: config 0 interface 0 altsetting 251 has 1 endpoint descriptor, different from the interface descriptor's value: 223 [ 67.463414][ T799] usb 4-1: config 0 interface 0 has no altsetting 0 [ 67.470063][ T799] usb 4-1: New USB device found, idVendor=04d9, idProduct=a04a, bcdDevice= 0.00 [ 67.479124][ T799] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 67.490758][ T799] usb 4-1: config 0 descriptor?? [ 67.540920][ T1258] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 67.549516][ T1258] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 67.563318][ T367] usb 2-1: USB disconnect, device number 24 [ 67.569916][ T367] usblp0: removed [ 67.722578][ T36] audit: type=1400 audit(1783554799.799:238): avc: denied { create } for pid=1259 comm="syz.2.345" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 67.745698][ T1260] syzkaller1: entered promiscuous mode [ 67.751246][ T1260] syzkaller1: entered allmulticast mode [ 67.763965][ T460] prodikeys 0003:041E:2801.000F: unknown main item tag 0x0 [ 67.771401][ T36] audit: type=1400 audit(1783554799.829:239): avc: denied { connect } for pid=1259 comm="syz.2.345" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 67.791556][ T36] audit: type=1400 audit(1783554799.829:240): avc: denied { setopt } for pid=1259 comm="syz.2.345" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 67.792317][ T460] prodikeys 0003:041E:2801.000F: unknown main item tag 0x0 [ 67.821725][ T460] prodikeys 0003:041E:2801.000F: unknown main item tag 0x0 [ 67.822735][ T799] usbhid 4-1:0.0: can't add hid device: -71 [ 67.829223][ T460] prodikeys 0003:041E:2801.000F: unknown main item tag 0x0 [ 67.836679][ T799] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 67.842704][ T460] prodikeys 0003:041E:2801.000F: unknown main item tag 0x0 [ 67.853851][ T799] usb 4-1: USB disconnect, device number 19 [ 67.857402][ T460] prodikeys 0003:041E:2801.000F: unknown main item tag 0x0 [ 67.870379][ T460] prodikeys 0003:041E:2801.000F: unknown main item tag 0x0 [ 67.877670][ T460] prodikeys 0003:041E:2801.000F: unknown main item tag 0x0 [ 67.884911][ T460] prodikeys 0003:041E:2801.000F: unknown main item tag 0x0 [ 67.892132][ T460] prodikeys 0003:041E:2801.000F: unknown main item tag 0x0 [ 67.899908][ T460] prodikeys 0003:041E:2801.000F: unknown main item tag 0x0 [ 67.907366][ T460] prodikeys 0003:041E:2801.000F: unknown main item tag 0x0 [ 67.914812][ T460] prodikeys 0003:041E:2801.000F: unknown main item tag 0x0 [ 67.922032][ T36] audit: type=1400 audit(1783554800.009:241): avc: denied { read } for pid=1261 comm="syz.2.346" path="socket:[11772]" dev="sockfs" ino=11772 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 67.945921][ T460] prodikeys 0003:041E:2801.000F: unknown main item tag 0x0 [ 67.947906][ T36] audit: type=1400 audit(1783554800.039:242): avc: denied { write } for pid=1265 comm="syz.2.347" name="rnullb0" dev="devtmpfs" ino=31 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 67.953182][ T460] prodikeys 0003:041E:2801.000F: unknown main item tag 0x0 [ 67.982927][ T460] prodikeys 0003:041E:2801.000F: unknown main item tag 0x0 [ 67.990401][ T460] prodikeys 0003:041E:2801.000F: unknown main item tag 0x0 [ 67.998577][ T1245] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 68.007003][ T460] prodikeys 0003:041E:2801.000F: unknown main item tag 0x0 [ 68.015916][ T1245] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 68.023723][ T460] prodikeys 0003:041E:2801.000F: unknown main item tag 0x0 [ 68.030951][ T460] prodikeys 0003:041E:2801.000F: unknown main item tag 0x0 [ 68.043649][ T460] prodikeys 0003:041E:2801.000F: unknown main item tag 0x0 [ 68.050902][ T460] prodikeys 0003:041E:2801.000F: unknown main item tag 0x0 [ 68.058666][ T460] prodikeys 0003:041E:2801.000F: unknown main item tag 0x0 [ 68.069972][ T460] prodikeys 0003:041E:2801.000F: unknown main item tag 0x0 [ 68.077590][ T460] prodikeys 0003:041E:2801.000F: unknown main item tag 0x0 [ 68.085863][ T460] prodikeys 0003:041E:2801.000F: unknown main item tag 0x0 [ 68.085977][ T36] audit: type=1400 audit(1783554800.179:243): avc: denied { mounton } for pid=1270 comm="syz.0.348" path="/syzcgroup/unified/syz0" dev="cgroup2" ino=57 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=dir permissive=1 [ 68.093268][ T460] prodikeys 0003:041E:2801.000F: unknown main item tag 0x0 [ 68.134852][ T460] prodikeys 0003:041E:2801.000F: unknown main item tag 0x0 [ 68.143164][ T460] prodikeys 0003:041E:2801.000F: unknown main item tag 0x0 [ 68.150616][ T460] prodikeys 0003:041E:2801.000F: unknown main item tag 0x0 [ 68.160359][ T460] prodikeys 0003:041E:2801.000F: unknown main item tag 0x0 [ 68.167846][ T460] prodikeys 0003:041E:2801.000F: unknown main item tag 0x0 [ 68.176072][ T460] prodikeys 0003:041E:2801.000F: unknown main item tag 0x0 [ 68.184739][ T460] prodikeys 0003:041E:2801.000F: unknown main item tag 0x0 [ 68.192139][ T460] prodikeys 0003:041E:2801.000F: unknown main item tag 0x0 [ 68.199830][ T460] prodikeys 0003:041E:2801.000F: unknown main item tag 0x0 [ 68.208460][ T460] prodikeys 0003:041E:2801.000F: unknown main item tag 0x0 [ 68.215811][ T460] prodikeys 0003:041E:2801.000F: unknown main item tag 0x0 [ 68.223107][ T460] prodikeys 0003:041E:2801.000F: unknown main item tag 0x0 [ 68.230428][ T460] prodikeys 0003:041E:2801.000F: unknown main item tag 0x0 [ 68.241883][ T460] prodikeys 0003:041E:2801.000F: hidraw0: USB HID v0.06 Device [HID 041e:2801] on usb-dummy_hcd.0-1/input0 [ 68.256607][ T460] usb 1-1: USB disconnect, device number 24 [ 68.268445][ T1277] fido_id[1277]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.0/usb1/report_descriptor': No such file or directory [ 68.412983][ T9] usb 2-1: new high-speed USB device number 25 using dummy_hcd [ 68.572979][ T9] usb 2-1: Using ep0 maxpacket: 16 [ 68.579196][ T9] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 68.590146][ T9] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 68.602995][ T9] usb 2-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 68.612027][ T9] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 68.620611][ T9] usb 2-1: config 0 descriptor?? [ 68.702929][ T799] usb 1-1: new high-speed USB device number 25 using dummy_hcd [ 68.711771][ T1288] netlink: 132 bytes leftover after parsing attributes in process `syz.2.355'. [ 68.852913][ T799] usb 1-1: Using ep0 maxpacket: 32 [ 68.859133][ T799] usb 1-1: config 0 has an invalid interface number: 67 but max is 0 [ 68.867388][ T799] usb 1-1: config 0 has no interface number 0 [ 68.874949][ T799] usb 1-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 68.887905][ T799] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 68.896172][ T799] usb 1-1: Product: syz [ 68.900357][ T799] usb 1-1: Manufacturer: syz [ 68.905010][ T799] usb 1-1: SerialNumber: syz [ 68.910319][ T799] usb 1-1: config 0 descriptor?? [ 68.920483][ T799] smsc95xx v2.0.0 [ 68.981617][ T1294] netlink: 'syz.2.358': attribute type 4 has an invalid length. [ 69.028825][ T9] microsoft 0003:045E:07DA.0010: unknown main item tag 0x0 [ 69.036133][ T9] microsoft 0003:045E:07DA.0010: unknown main item tag 0x0 [ 69.043385][ T9] microsoft 0003:045E:07DA.0010: unknown main item tag 0x0 [ 69.050623][ T9] microsoft 0003:045E:07DA.0010: unknown main item tag 0x0 [ 69.058492][ T9] microsoft 0003:045E:07DA.0010: unknown main item tag 0x0 [ 69.065758][ T9] microsoft 0003:045E:07DA.0010: unknown main item tag 0x0 [ 69.073172][ T9] microsoft 0003:045E:07DA.0010: unknown main item tag 0x0 [ 69.080395][ T9] microsoft 0003:045E:07DA.0010: unknown main item tag 0x0 [ 69.087745][ T9] microsoft 0003:045E:07DA.0010: unknown main item tag 0x0 [ 69.095111][ T9] microsoft 0003:045E:07DA.0010: unknown main item tag 0x0 [ 69.106713][ T9] input: HID 045e:07da as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/0003:045E:07DA.0010/input/input16 [ 69.123096][ T9] microsoft 0003:045E:07DA.0010: input,hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.1-1/input0 [ 69.233454][ T367] usb 2-1: USB disconnect, device number 25 [ 69.319610][ T799] smsc95xx 1-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -32 [ 69.330596][ T799] smsc95xx 1-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 69.505613][ T36] audit: type=1400 audit(1783554801.589:244): avc: denied { write } for pid=1306 comm="syz.2.363" name="snapshot" dev="devtmpfs" ino=21 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 69.529603][ T36] audit: type=1400 audit(1783554801.619:245): avc: denied { cmd } for pid=1306 comm="syz.2.363" path="/dev/ublk-control" dev="devtmpfs" ino=82 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=io_uring permissive=1 [ 69.745444][ T1319] netlink: 'syz.1.364': attribute type 27 has an invalid length. [ 69.759865][ T1319] bridge0: port 2(bridge_slave_1) entered disabled state [ 69.767186][ T1319] bridge0: port 1(bridge_slave_0) entered disabled state [ 70.072931][ T9] usb 4-1: new high-speed USB device number 20 using dummy_hcd [ 70.171105][ T36] audit: type=1400 audit(1783554802.249:246): avc: denied { write } for pid=1335 comm="syz.2.371" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 70.222912][ T9] usb 4-1: Using ep0 maxpacket: 8 [ 70.228981][ T9] usb 4-1: config 179 has an invalid interface number: 65 but max is 0 [ 70.237321][ T9] usb 4-1: config 179 has no interface number 0 [ 70.243601][ T9] usb 4-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 70.254739][ T9] usb 4-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024 [ 70.266006][ T9] usb 4-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 70.277142][ T9] usb 4-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 41728, setting to 1024 [ 70.288574][ T9] usb 4-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 70.301805][ T9] usb 4-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 70.310854][ T9] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 70.319909][ T1332] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 70.442960][ T467] usb 3-1: new high-speed USB device number 28 using dummy_hcd [ 70.530391][ T805] usb 4-1: USB disconnect, device number 20 [ 70.530456][ C0] xpad 4-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19 [ 70.544932][ C0] dummy_hcd dummy_hcd.3: timer fired with no URBs pending? [ 70.573502][ T367] usb 2-1: new high-speed USB device number 26 using dummy_hcd [ 70.592927][ T467] usb 3-1: Using ep0 maxpacket: 32 [ 70.605084][ T467] usb 3-1: too many endpoints for config 0 interface 0 altsetting 236: 223, using maximum allowed: 30 [ 70.616215][ T467] usb 3-1: config 0 interface 0 altsetting 236 has 1 endpoint descriptor, different from the interface descriptor's value: 223 [ 70.629411][ T467] usb 3-1: config 0 interface 0 has no altsetting 0 [ 70.636143][ T467] usb 3-1: New USB device found, idVendor=17ef, idProduct=6047, bcdDevice= 0.00 [ 70.645198][ T467] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 70.653836][ T467] usb 3-1: config 0 descriptor?? [ 70.722938][ T367] usb 2-1: Using ep0 maxpacket: 16 [ 70.729243][ T367] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 70.740569][ T367] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 70.753427][ T367] usb 2-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 70.762660][ T367] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 70.771475][ T367] usb 2-1: config 0 descriptor?? [ 70.971251][ T799] smsc95xx 1-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000038: -71 [ 70.982088][ T799] smsc95xx 1-1:0.67: probe with driver smsc95xx failed with error -71 [ 70.991783][ T799] usb 1-1: USB disconnect, device number 25 [ 71.060597][ T467] lenovo 0003:17EF:6047.0011: unknown main item tag 0x0 [ 71.067693][ T467] lenovo 0003:17EF:6047.0011: unknown main item tag 0x0 [ 71.074738][ T467] lenovo 0003:17EF:6047.0011: unknown main item tag 0x0 [ 71.081713][ T467] lenovo 0003:17EF:6047.0011: unknown main item tag 0x0 [ 71.088733][ T467] lenovo 0003:17EF:6047.0011: unknown main item tag 0x0 [ 71.095734][ T467] lenovo 0003:17EF:6047.0011: unknown main item tag 0x0 [ 71.102711][ T467] lenovo 0003:17EF:6047.0011: unknown main item tag 0x0 [ 71.109714][ T467] lenovo 0003:17EF:6047.0011: unknown main item tag 0x0 [ 71.116712][ T467] lenovo 0003:17EF:6047.0011: unknown main item tag 0x0 [ 71.123711][ T467] lenovo 0003:17EF:6047.0011: unknown main item tag 0x0 [ 71.130674][ T467] lenovo 0003:17EF:6047.0011: unknown main item tag 0x0 [ 71.138501][ T467] lenovo 0003:17EF:6047.0011: unknown main item tag 0x0 [ 71.145525][ T467] lenovo 0003:17EF:6047.0011: unknown main item tag 0x0 [ 71.152481][ T467] lenovo 0003:17EF:6047.0011: unknown main item tag 0x0 [ 71.159495][ T467] lenovo 0003:17EF:6047.0011: unknown main item tag 0x0 [ 71.166501][ T467] lenovo 0003:17EF:6047.0011: unknown main item tag 0x0 [ 71.173483][ T467] lenovo 0003:17EF:6047.0011: unknown main item tag 0x0 [ 71.180453][ T467] lenovo 0003:17EF:6047.0011: unknown main item tag 0x0 [ 71.187666][ T467] lenovo 0003:17EF:6047.0011: unknown main item tag 0x0 [ 71.194683][ T467] lenovo 0003:17EF:6047.0011: unknown main item tag 0x0 [ 71.197909][ T367] microsoft 0003:045E:07DA.0012: unknown main item tag 0x0 [ 71.201642][ T467] lenovo 0003:17EF:6047.0011: unknown main item tag 0x0 [ 71.201672][ T467] lenovo 0003:17EF:6047.0011: unknown main item tag 0x0 [ 71.209630][ T367] microsoft 0003:045E:07DA.0012: unknown main item tag 0x0 [ 71.216531][ T467] lenovo 0003:17EF:6047.0011: unknown main item tag 0x0 [ 71.224288][ T367] microsoft 0003:045E:07DA.0012: unknown main item tag 0x0 [ 71.230225][ T467] lenovo 0003:17EF:6047.0011: unknown main item tag 0x0 [ 71.237447][ T367] microsoft 0003:045E:07DA.0012: unknown main item tag 0x0 [ 71.244564][ T467] lenovo 0003:17EF:6047.0011: unknown main item tag 0x0 [ 71.251628][ T367] microsoft 0003:045E:07DA.0012: unknown main item tag 0x0 [ 71.258707][ T467] lenovo 0003:17EF:6047.0011: unknown main item tag 0x0 [ 71.265738][ T367] microsoft 0003:045E:07DA.0012: unknown main item tag 0x0 [ 71.273390][ T467] lenovo 0003:17EF:6047.0011: unknown main item tag 0x0 [ 71.282347][ T367] microsoft 0003:045E:07DA.0012: unknown main item tag 0x0 [ 71.287093][ T467] lenovo 0003:17EF:6047.0011: unknown main item tag 0x0 [ 71.294079][ T367] microsoft 0003:045E:07DA.0012: unknown main item tag 0x0 [ 71.302610][ T467] lenovo 0003:17EF:6047.0011: unknown main item tag 0x0 [ 71.310419][ T367] microsoft 0003:045E:07DA.0012: unknown main item tag 0x0 [ 71.329407][ T467] lenovo 0003:17EF:6047.0011: unknown main item tag 0x0 [ 71.329572][ T367] microsoft 0003:045E:07DA.0012: unknown main item tag 0x0 [ 71.343602][ T467] lenovo 0003:17EF:6047.0011: unknown main item tag 0x0 [ 71.343633][ T467] lenovo 0003:17EF:6047.0011: unknown main item tag 0x0 [ 71.343658][ T467] lenovo 0003:17EF:6047.0011: unknown main item tag 0x0 [ 71.350780][ T805] usb 4-1: new high-speed USB device number 21 using dummy_hcd [ 71.364498][ T467] lenovo 0003:17EF:6047.0011: unknown main item tag 0x0 [ 71.364531][ T467] lenovo 0003:17EF:6047.0011: unknown main item tag 0x0 [ 71.384296][ T367] input: HID 045e:07da as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/0003:045E:07DA.0012/input/input17 [ 71.386187][ T467] lenovo 0003:17EF:6047.0011: unknown main item tag 0x0 [ 71.405017][ T467] lenovo 0003:17EF:6047.0011: unknown main item tag 0x0 [ 71.408009][ T367] microsoft 0003:045E:07DA.0012: input,hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.1-1/input0 [ 71.413103][ T467] lenovo 0003:17EF:6047.0011: unknown main item tag 0x0 [ 71.432640][ T467] lenovo 0003:17EF:6047.0011: unknown main item tag 0x0 [ 71.439797][ T467] lenovo 0003:17EF:6047.0011: unknown main item tag 0x0 [ 71.443819][ T367] usb 2-1: USB disconnect, device number 26 [ 71.448209][ T467] lenovo 0003:17EF:6047.0011: hidraw1: USB HID v0.03 Device [HID 17ef:6047] on usb-dummy_hcd.2-1/input0 [ 71.468804][ T1344] fido_id[1344]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.1/usb2/2-1/report_descriptor': No such file or directory [ 71.482612][ T467] usb 3-1: USB disconnect, device number 28 [ 71.512969][ T805] usb 4-1: Using ep0 maxpacket: 8 [ 71.538157][ T805] usb 4-1: unable to get BOS descriptor or descriptor too short [ 71.550016][ T805] usb 4-1: unable to read config index 0 descriptor/start: -71 [ 71.557793][ T805] usb 4-1: can't read configurations, error -71 [ 71.902948][ T799] usb 1-1: new high-speed USB device number 26 using dummy_hcd [ 72.044719][ T36] audit: type=1400 audit(1783554804.129:247): avc: denied { name_bind } for pid=1362 comm="syz.1.381" src=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:reserved_port_t tclass=tcp_socket permissive=1 [ 72.068232][ T799] usb 1-1: Using ep0 maxpacket: 16 [ 72.078908][ T799] usb 1-1: too many endpoints for config 0 interface 0 altsetting 251: 223, using maximum allowed: 30 [ 72.090277][ T799] usb 1-1: config 0 interface 0 altsetting 251 has 1 endpoint descriptor, different from the interface descriptor's value: 223 [ 72.108507][ T799] usb 1-1: config 0 interface 0 has no altsetting 0 [ 72.116691][ T799] usb 1-1: New USB device found, idVendor=04d9, idProduct=a04a, bcdDevice= 0.00 [ 72.127251][ T799] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 72.136824][ T799] usb 1-1: config 0 descriptor?? [ 72.243096][ T367] usb 3-1: new high-speed USB device number 29 using dummy_hcd [ 72.373076][ T367] usb 3-1: device descriptor read/64, error -71 [ 72.452797][ T1401] tap0: tun_chr_ioctl cmd 35111 [ 72.461573][ T1401] option changes via remount are deprecated (pid=1400 comm=syz.3.397) [ 72.471198][ T1401] cgroup: option or name mismatch, new: 0x4 "", old: 0x0 "" [ 72.623854][ T367] usb 3-1: device descriptor read/64, error -71 [ 72.710699][ T799] usbhid 1-1:0.0: can't add hid device: -71 [ 72.716979][ T799] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 72.728577][ T799] usb 1-1: USB disconnect, device number 26 [ 73.122233][ T1411] tap0: tun_chr_ioctl cmd 2148553947 [ 73.143453][ T367] usb 3-1: new high-speed USB device number 30 using dummy_hcd [ 73.254039][ T36] kauditd_printk_skb: 4 callbacks suppressed [ 73.254053][ T36] audit: type=1400 audit(1783554805.339:252): avc: denied { mounton } for pid=1419 comm="syz.1.405" path="/proc/247/task" dev="proc" ino=12246 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dir permissive=1 [ 73.287385][ T367] usb 3-1: device descriptor read/64, error -71 [ 73.296643][ T36] audit: type=1400 audit(1783554805.339:253): avc: denied { create } for pid=1419 comm="syz.1.405" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=user_namespace permissive=1 [ 73.318233][ T36] audit: type=1400 audit(1783554805.339:254): avc: denied { sys_admin } for pid=1419 comm="syz.1.405" capability=21 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=cap_userns permissive=1 [ 73.532913][ T367] usb 3-1: device descriptor read/64, error -71 [ 73.643055][ T367] usb usb3-port1: attempt power cycle [ 73.763084][ T36] audit: type=1400 audit(1783554805.849:255): avc: denied { mount } for pid=1467 comm="syz.1.426" name="/" dev="ramfs" ino=13344 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ramfs_t tclass=filesystem permissive=1 [ 73.831721][ T296] cgroup: fork rejected by pids controller in /syz3 [ 73.896002][ T504] bridge_slave_1: left allmulticast mode [ 73.901776][ T504] bridge_slave_1: left promiscuous mode [ 73.907666][ T504] bridge0: port 2(bridge_slave_1) entered disabled state [ 73.917001][ T504] bridge_slave_0: left allmulticast mode [ 73.922739][ T504] bridge_slave_0: left promiscuous mode [ 73.932986][ T504] bridge0: port 1(bridge_slave_0) entered disabled state [ 73.994834][ T367] usb 3-1: new high-speed USB device number 31 using dummy_hcd [ 74.024496][ T367] usb 3-1: device descriptor read/8, error -71 [ 74.047931][ T36] audit: type=1400 audit(1783554807.134:256): avc: denied { mounton } for pid=1496 comm="syz-executor" path="/" dev="sda1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:root_t tclass=dir permissive=1 [ 74.103483][ T1496] bridge0: port 1(bridge_slave_0) entered blocking state [ 74.110546][ T1496] bridge0: port 1(bridge_slave_0) entered disabled state [ 74.117811][ T1496] bridge_slave_0: entered allmulticast mode [ 74.124565][ T1496] bridge_slave_0: entered promiscuous mode [ 74.131345][ T1496] bridge0: port 2(bridge_slave_1) entered blocking state [ 74.138498][ T1496] bridge0: port 2(bridge_slave_1) entered disabled state [ 74.145739][ T1496] bridge_slave_1: entered allmulticast mode [ 74.151959][ T1496] bridge_slave_1: entered promiscuous mode [ 74.183984][ T367] usb 3-1: device descriptor read/8, error -71 [ 74.197671][ T1496] bridge0: port 2(bridge_slave_1) entered blocking state [ 74.204781][ T1496] bridge0: port 2(bridge_slave_1) entered forwarding state [ 74.212070][ T1496] bridge0: port 1(bridge_slave_0) entered blocking state [ 74.219137][ T1496] bridge0: port 1(bridge_slave_0) entered forwarding state [ 74.244371][ T519] bridge0: port 1(bridge_slave_0) entered disabled state [ 74.251716][ T519] bridge0: port 2(bridge_slave_1) entered disabled state [ 74.261640][ T342] bridge0: port 1(bridge_slave_0) entered blocking state [ 74.268743][ T342] bridge0: port 1(bridge_slave_0) entered forwarding state [ 74.278836][ T519] bridge0: port 2(bridge_slave_1) entered blocking state [ 74.285939][ T519] bridge0: port 2(bridge_slave_1) entered forwarding state [ 74.318091][ T1496] veth0_vlan: entered promiscuous mode [ 74.330708][ T1496] veth1_macvtap: entered promiscuous mode [ 74.362019][ T36] audit: type=1400 audit(1783554807.444:257): avc: denied { mounton } for pid=1496 comm="syz-executor" path="/root/syzkaller.WBhG7p/syz-tmp/newroot/sys/kernel/debug" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=dir permissive=1 [ 74.422470][ T36] audit: type=1400 audit(1783554807.504:258): avc: denied { create } for pid=1506 comm="syz.0.440" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:ramfs_t tclass=chr_file permissive=1 [ 74.443009][ T367] usb 3-1: new high-speed USB device number 32 using dummy_hcd [ 74.464001][ T367] usb 3-1: device descriptor read/8, error -71 [ 74.481560][ T36] audit: type=1400 audit(1783554807.564:259): avc: denied { unmount } for pid=293 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ramfs_t tclass=filesystem permissive=1 [ 74.594012][ T367] usb 3-1: device descriptor read/8, error -71 [ 74.700367][ T36] audit: type=1400 audit(1783554807.784:260): avc: denied { write } for pid=1533 comm="syz.0.452" name="nf_conntrack" dev="proc" ino=4026532334 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_net_t tclass=file permissive=1 [ 74.725254][ T367] usb usb3-port1: unable to enumerate USB device [ 74.788539][ T36] audit: type=1326 audit(1783554807.874:261): auid=4294967295 uid=255 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1539 comm="syz.0.455" exe="/root/ci2-android-6-12-rust/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f24bb59de59 code=0x0 [ 75.929177][ T1612] mmap: syz.3.483 (1612) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 78.269224][ T1677] tap0: tun_chr_ioctl cmd 1074025677 [ 78.279320][ T1677] tap0: linktype set to 768 [ 78.285133][ T1677] tap0: tun_chr_ioctl cmd 35108 [ 78.507617][ T1710] netlink: 68 bytes leftover after parsing attributes in process `syz.3.523'. [ 79.120260][ T36] kauditd_printk_skb: 7 callbacks suppressed [ 79.120277][ T36] audit: type=1400 audit(1783554812.204:269): avc: denied { bind } for pid=1732 comm="syz.2.536" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 79.169063][ T36] audit: type=1400 audit(1783554812.234:270): avc: denied { setopt } for pid=1732 comm="syz.2.536" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 79.392353][ T36] audit: type=1400 audit(1783554812.474:271): avc: denied { read } for pid=1748 comm="syz.3.543" path="socket:[12937]" dev="sockfs" ino=12937 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 80.083600][ T36] audit: type=1400 audit(1783554813.174:272): avc: denied { unmount } for pid=1777 comm="syz.2.556" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 80.164466][ T342] bridge_slave_1: left allmulticast mode [ 80.170231][ T342] bridge_slave_1: left promiscuous mode [ 80.176893][ T342] bridge0: port 2(bridge_slave_1) entered disabled state [ 80.184587][ T342] bridge_slave_0: left allmulticast mode [ 80.190305][ T342] bridge_slave_0: left promiscuous mode [ 80.196431][ T342] bridge0: port 1(bridge_slave_0) entered disabled state [ 80.291918][ T342] veth1_macvtap: left promiscuous mode [ 80.297510][ T342] veth0_vlan: left promiscuous mode [ 80.389237][ T1780] bridge0: port 1(bridge_slave_0) entered blocking state [ 80.396311][ T1780] bridge0: port 1(bridge_slave_0) entered disabled state [ 80.403546][ T1780] bridge_slave_0: entered allmulticast mode [ 80.409709][ T1780] bridge_slave_0: entered promiscuous mode [ 80.418317][ T1780] bridge0: port 2(bridge_slave_1) entered blocking state [ 80.425398][ T1780] bridge0: port 2(bridge_slave_1) entered disabled state [ 80.432461][ T1780] bridge_slave_1: entered allmulticast mode [ 80.438741][ T1780] bridge_slave_1: entered promiscuous mode [ 80.474885][ T1780] bridge0: port 2(bridge_slave_1) entered blocking state [ 80.481966][ T1780] bridge0: port 2(bridge_slave_1) entered forwarding state [ 80.489270][ T1780] bridge0: port 1(bridge_slave_0) entered blocking state [ 80.496327][ T1780] bridge0: port 1(bridge_slave_0) entered forwarding state [ 80.504568][ T519] bridge0: port 1(bridge_slave_0) entered disabled state [ 80.511969][ T519] bridge0: port 2(bridge_slave_1) entered disabled state [ 80.545136][ T504] bridge0: port 1(bridge_slave_0) entered blocking state [ 80.552304][ T504] bridge0: port 1(bridge_slave_0) entered forwarding state [ 80.561523][ T519] bridge0: port 2(bridge_slave_1) entered blocking state [ 80.568613][ T519] bridge0: port 2(bridge_slave_1) entered forwarding state [ 80.575821][ T1787] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=1787 comm=syz.1.561 [ 80.597595][ T1780] veth0_vlan: entered promiscuous mode [ 80.611299][ T1780] veth1_macvtap: entered promiscuous mode [ 80.628550][ T36] audit: type=1400 audit(1783554813.714:273): avc: denied { mount } for pid=1780 comm="syz-executor" name="/" dev="tmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 80.725945][ T36] audit: type=1400 audit(1783554813.814:274): avc: denied { append } for pid=1803 comm="syz.4.567" name="loop5" dev="devtmpfs" ino=54 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 81.633088][ T36] audit: type=1400 audit(1783554814.714:275): avc: denied { write } for pid=1817 comm="syz.4.572" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 82.231563][ T1843] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 82.240378][ T36] audit: type=1400 audit(1783554815.314:276): avc: denied { mount } for pid=1841 comm="syz.1.580" name="/" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=filesystem permissive=1 [ 82.251084][ T1843] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 82.263300][ T36] audit: type=1400 audit(1783554815.314:277): avc: denied { mounton } for pid=1841 comm="syz.1.580" path="/154/file0" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=dir permissive=1 [ 82.291498][ T1848] tap0: tun_chr_ioctl cmd 2148045848 [ 82.298477][ T1848] tap0: tun_chr_ioctl cmd 1074025680 [ 82.305838][ T36] audit: type=1400 audit(1783554815.394:278): avc: denied { unmount } for pid=294 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=filesystem permissive=1 [ 83.190727][ T1899] erofs: (device erofs): erofs_read_superblock: cannot read erofs superblock [ 83.326459][ T1917] syzkaller0: entered promiscuous mode [ 83.332011][ T1917] syzkaller0: entered allmulticast mode [ 83.339112][ T1917] syz.4.610 uses obsolete (PF_INET,SOCK_PACKET) [ 85.341760][ T36] kauditd_printk_skb: 5 callbacks suppressed [ 85.341777][ T36] audit: type=1400 audit(1783554818.424:284): avc: denied { read } for pid=1992 comm="syz.3.639" name="file0" dev="fuse" ino=64 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=blk_file permissive=1 [ 85.370222][ T36] audit: type=1400 audit(1783554818.424:285): avc: denied { open } for pid=1992 comm="syz.3.639" path="/63/file0/file0" dev="fuse" ino=64 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=blk_file permissive=1 [ 85.874668][ T36] audit: type=1400 audit(1783554818.964:286): avc: denied { create } for pid=2068 comm="syz.1.671" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_iscsi_socket permissive=1 [ 85.953462][ T36] audit: type=1400 audit(1783554819.044:287): avc: denied { name_bind } for pid=2070 comm="syz.1.673" src=8 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:reserved_port_t tclass=udp_socket permissive=1 [ 86.022330][ T36] audit: type=1400 audit(1783554819.104:288): avc: denied { create } for pid=2082 comm="syz.0.677" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 86.058812][ T36] audit: type=1400 audit(1783554819.114:289): avc: denied { ioctl } for pid=2082 comm="syz.0.677" path="socket:[14765]" dev="sockfs" ino=14765 ioctlcmd=0x8916 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 86.086930][ T2090] netlink: 300 bytes leftover after parsing attributes in process `syz.3.680'. [ 86.141874][ T2103] netlink: 'syz.1.685': attribute type 4 has an invalid length. [ 86.149651][ T2103] netlink: 3657 bytes leftover after parsing attributes in process `syz.1.685'. [ 86.248429][ T36] audit: type=1400 audit(1783554819.334:290): avc: denied { write } for pid=2125 comm="syz.1.697" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 86.292073][ T2130] netlink: 4 bytes leftover after parsing attributes in process `syz.3.699'. [ 86.303030][ T2130] netlink: 4 bytes leftover after parsing attributes in process `syz.3.699'. [ 86.483503][ T36] audit: type=1400 audit(1783554819.574:291): avc: denied { getopt } for pid=2159 comm="syz.4.713" lport=255 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 86.522382][ T36] audit: type=1400 audit(1783554819.584:292): avc: denied { block_suspend } for pid=2161 comm="syz.4.714" capability=36 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 86.572723][ T2169] kvm: kvm [2168]: vcpu2, guest rIP: 0x9135 Unhandled WRMSR(0x11e) = 0x0 [ 86.866682][ T36] audit: type=1326 audit(1783554819.954:293): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2197 comm="syz.4.729" exe="/root/ci2-android-6-12-rust/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7ffac4f9de59 code=0x0 [ 87.443840][ T2235] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=546 sclass=netlink_route_socket pid=2235 comm=syz.4.745 [ 88.348322][ T2280] kvm: kvm [2279]: vcpu2, guest rIP: 0x9135 Unhandled WRMSR(0x11e) = 0x0 [ 88.686368][ T2302] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 88.805601][ T2310] kvm: kvm [2309]: vcpu0, guest rIP: 0x9114 Unhandled WRMSR(0xc2) = 0x9d00 [ 88.814591][ T2310] kvm: kvm [2309]: vcpu0, guest rIP: 0x9114 Unhandled WRMSR(0xc1) = 0x9d00 [ 88.999090][ T2323] kvm: emulating exchange as write [ 89.175653][ T2334] kvm: kvm [2333]: vcpu0, guest rIP: 0x9114 Unhandled WRMSR(0xc2) = 0x9d00 [ 89.184636][ T2334] kvm: kvm [2333]: vcpu0, guest rIP: 0x9114 Unhandled WRMSR(0xc1) = 0x9d00 [ 89.214798][ T2338] netlink: 8 bytes leftover after parsing attributes in process `syz.3.782'. [ 89.644269][ T2375] kvm: requested 1676 ns i8254 timer period limited to 200000 ns [ 89.653928][ T2375] kvm: requested 838 ns i8254 timer period limited to 200000 ns [ 89.662151][ T2375] kvm: requested 13409 ns i8254 timer period limited to 200000 ns [ 89.670123][ T2375] kvm: requested 53638 ns i8254 timer period limited to 200000 ns [ 89.678165][ T2375] kvm: requested 41904 ns i8254 timer period limited to 200000 ns [ 89.686181][ T2375] kvm: requested 838 ns i8254 timer period limited to 200000 ns [ 89.694071][ T2375] kvm: requested 2514 ns i8254 timer period limited to 200000 ns [ 89.701925][ T2375] kvm: requested 3352 ns i8254 timer period limited to 200000 ns [ 89.710205][ T2375] kvm: requested 100571 ns i8254 timer period limited to 200000 ns [ 89.990319][ T2389] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=46 sclass=netlink_audit_socket pid=2389 comm=syz.3.800 [ 90.034961][ T2402] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 90.104276][ T2407] kvm: requested 1676 ns i8254 timer period limited to 200000 ns [ 90.952544][ T2471] netlink: 'syz.3.836': attribute type 4 has an invalid length. [ 91.835969][ T2505] : renamed from team_slave_1 [ 91.940834][ T36] kauditd_printk_skb: 19 callbacks suppressed [ 91.940859][ T36] audit: type=1400 audit(1783554825.024:313): avc: denied { setopt } for pid=2515 comm="syz.4.853" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 92.010268][ T2523] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=3070988179 (3070988179 ns) > initial count (1876204212 ns). Using initial count to start timer. [ 92.594962][ T2533] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=3070988179 (3070988179 ns) > initial count (1876204212 ns). Using initial count to start timer. [ 92.779376][ T36] audit: type=1400 audit(1783554825.864:314): avc: denied { bind } for pid=2564 comm="syz.1.875" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 92.799268][ T36] audit: type=1400 audit(1783554825.864:315): avc: denied { name_bind } for pid=2564 comm="syz.1.875" src=20001 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=rawip_socket permissive=1 [ 92.820542][ T36] audit: type=1400 audit(1783554825.864:316): avc: denied { node_bind } for pid=2564 comm="syz.1.875" saddr=::ffff:0.0.0.0 src=20001 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=rawip_socket permissive=1 [ 92.895629][ T1780] cgroup: fork rejected by pids controller in /syz4 [ 93.010475][ T535] bridge_slave_1: left allmulticast mode [ 93.016574][ T535] bridge_slave_1: left promiscuous mode [ 93.022715][ T535] bridge0: port 2(bridge_slave_1) entered disabled state [ 93.033058][ T535] bridge_slave_0: left allmulticast mode [ 93.038810][ T535] bridge_slave_0: left promiscuous mode [ 93.044993][ T535] bridge0: port 1(bridge_slave_0) entered disabled state [ 93.220138][ T535] veth1_macvtap: left promiscuous mode [ 93.226088][ T535] veth0_vlan: left promiscuous mode [ 93.604210][ T2576] bridge0: port 1(bridge_slave_0) entered blocking state [ 93.611410][ T2576] bridge0: port 1(bridge_slave_0) entered disabled state [ 93.620724][ T2576] bridge_slave_0: entered allmulticast mode [ 93.630951][ T2576] bridge_slave_0: entered promiscuous mode [ 93.639857][ T2576] bridge0: port 2(bridge_slave_1) entered blocking state [ 93.643668][ T36] audit: type=1400 audit(1783554826.734:317): avc: denied { lock } for pid=2580 comm="syz.1.881" path="socket:[19732]" dev="sockfs" ino=19732 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 93.671376][ T2576] bridge0: port 2(bridge_slave_1) entered disabled state [ 93.746499][ T2576] bridge_slave_1: entered allmulticast mode [ 93.753071][ T2576] bridge_slave_1: entered promiscuous mode [ 93.814867][ T2576] bridge0: port 2(bridge_slave_1) entered blocking state [ 93.821946][ T2576] bridge0: port 2(bridge_slave_1) entered forwarding state [ 93.829275][ T2576] bridge0: port 1(bridge_slave_0) entered blocking state [ 93.836330][ T2576] bridge0: port 1(bridge_slave_0) entered forwarding state [ 93.865645][ T535] bridge0: port 1(bridge_slave_0) entered disabled state [ 93.875079][ T535] bridge0: port 2(bridge_slave_1) entered disabled state [ 93.889259][ T534] bridge0: port 1(bridge_slave_0) entered blocking state [ 93.896351][ T534] bridge0: port 1(bridge_slave_0) entered forwarding state [ 93.909015][ T535] bridge0: port 2(bridge_slave_1) entered blocking state [ 93.912682][ T36] audit: type=1400 audit(1783554826.994:318): avc: denied { write } for pid=2597 comm="syz.3.889" name="rtc0" dev="devtmpfs" ino=195 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 93.916107][ T535] bridge0: port 2(bridge_slave_1) entered forwarding state [ 93.959711][ T2576] veth0_vlan: entered promiscuous mode [ 93.969768][ T2576] veth1_macvtap: entered promiscuous mode [ 94.051405][ T36] audit: type=1326 audit(1783554827.134:319): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2610 comm="syz.3.893" exe="/root/ci2-android-6-12-rust/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7feee599de59 code=0x7ffc0000 [ 94.100218][ T36] audit: type=1326 audit(1783554827.134:320): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2610 comm="syz.3.893" exe="/root/ci2-android-6-12-rust/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7feee599de59 code=0x7ffc0000 [ 94.110942][ T2620] binfmt_misc: register: failed to install interpreter file ./file0 [ 94.150113][ T36] audit: type=1326 audit(1783554827.134:321): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2610 comm="syz.3.893" exe="/root/ci2-android-6-12-rust/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7feee599de59 code=0x7ffc0000 [ 94.186454][ T36] audit: type=1326 audit(1783554827.134:322): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2610 comm="syz.3.893" exe="/root/ci2-android-6-12-rust/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7feee599de59 code=0x7ffc0000 [ 94.334658][ T2647] netlink: 'syz.3.910': attribute type 12 has an invalid length. [ 95.544262][ T2744] dvmrp1: tun_chr_ioctl cmd 2147767507 [ 95.549998][ T2744] dvmrp1: tun_chr_ioctl cmd 1074812117 [ 96.511979][ T2785] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 98.912837][ T2935] ªªªªªª: renamed from vlan0 (while UP) [ 100.222485][ T3046] overlayfs: conflicting options: metacopy=off,verity=require [ 100.544570][ T3079] veth0_vlan: entered allmulticast mode [ 100.639054][ T36] kauditd_printk_skb: 55 callbacks suppressed [ 100.639071][ T36] audit: type=1326 audit(1783555089.721:378): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3099 comm="syz.3.1103" exe="/root/ci2-android-6-12-rust/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7feee599de59 code=0x7ffc0000 [ 100.671694][ T36] audit: type=1326 audit(1783555089.721:379): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3099 comm="syz.3.1103" exe="/root/ci2-android-6-12-rust/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7feee599de59 code=0x7ffc0000 [ 100.712814][ T36] audit: type=1326 audit(1783555089.721:380): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3099 comm="syz.3.1103" exe="/root/ci2-android-6-12-rust/syz-executor" sig=0 arch=c000003e syscall=22 compat=0 ip=0x7feee599de59 code=0x7ffc0000 [ 100.739347][ T36] audit: type=1326 audit(1783555089.721:381): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3099 comm="syz.3.1103" exe="/root/ci2-android-6-12-rust/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7feee599de59 code=0x7ffc0000 [ 100.777238][ T36] audit: type=1326 audit(1783555089.721:382): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3099 comm="syz.3.1103" exe="/root/ci2-android-6-12-rust/syz-executor" sig=0 arch=c000003e syscall=278 compat=0 ip=0x7feee599de59 code=0x7ffc0000 [ 100.802889][ T36] audit: type=1326 audit(1783555089.721:383): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3099 comm="syz.3.1103" exe="/root/ci2-android-6-12-rust/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7feee599de59 code=0x7ffc0000 [ 101.276715][ T36] audit: type=1326 audit(1783555090.361:384): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3150 comm="syz.0.1125" exe="/root/ci2-android-6-12-rust/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f24bb59de59 code=0x7ffc0000 [ 101.363022][ T36] audit: type=1326 audit(1783555090.361:385): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3150 comm="syz.0.1125" exe="/root/ci2-android-6-12-rust/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f24bb59de59 code=0x7ffc0000 [ 101.431932][ T36] audit: type=1326 audit(1783555090.361:386): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3150 comm="syz.0.1125" exe="/root/ci2-android-6-12-rust/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f24bb59de59 code=0x7ffc0000 [ 101.490220][ T36] audit: type=1326 audit(1783555090.361:387): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3150 comm="syz.0.1125" exe="/root/ci2-android-6-12-rust/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f24bb59de59 code=0x7ffc0000 [ 102.356181][ T3185] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=3659427032 (29275416256 ns) > initial count (9353363104 ns). Using initial count to start timer. [ 102.451986][ T3193] kvm: kvm [3192]: vcpu0, guest rIP: 0x9114 Unhandled WRMSR(0xc2) = 0x9d00 [ 102.460952][ T3193] kvm: kvm [3192]: vcpu0, guest rIP: 0x9114 Unhandled WRMSR(0xc1) = 0x9d00 [ 102.604085][ T3211] kvm: MWAIT instruction emulated as NOP! [ 102.605675][ T3213] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=198462431 (396924862 ns) > initial count (148514 ns). Using initial count to start timer. [ 103.083353][ T3302] syz.1.1185 (3302): /proc/3300/oom_adj is deprecated, please use /proc/3300/oom_score_adj instead. [ 104.558579][ T3448] syzkaller0: entered promiscuous mode [ 104.564197][ T3448] syzkaller0: entered allmulticast mode [ 104.682714][ T3458] tap0: tun_chr_ioctl cmd 2147767511 [ 104.939253][ T3496] overlayfs: workdir is in-use as upperdir/workdir of another mount, accessing files from both mounts will result in undefined behavior. [ 104.953624][ T3496] overlayfs: failed to create directory ./bus/work (errno: 17); mounting read-only [ 106.137740][ T3592] overlayfs: workdir is in-use as upperdir/workdir of another mount, accessing files from both mounts will result in undefined behavior. [ 106.155221][ T3592] overlayfs: failed to create directory ./bus/work (errno: 17); mounting read-only [ 106.284395][ T3608] proc: Bad value for 'gid' [ 106.288967][ T36] kauditd_printk_skb: 110 callbacks suppressed [ 106.288982][ T36] audit: type=1400 audit(1783555095.371:498): avc: denied { remount } for pid=3607 comm="syz.4.1319" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 106.324689][ T36] audit: type=1400 audit(1783555095.411:499): avc: denied { unmount } for pid=2576 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 107.601960][ T3701] pimreg1: tun_chr_ioctl cmd 1074025677 [ 107.607634][ T36] audit: type=1400 audit(1783555096.691:500): avc: denied { create } for pid=3702 comm="syz.4.1357" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 107.608582][ T3701] pimreg1: linktype set to 804 [ 107.628845][ T36] audit: type=1400 audit(1783555096.691:501): avc: denied { mounton } for pid=3702 comm="syz.4.1357" path="/81/file0" dev="tmpfs" ino=442 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 107.666186][ T36] audit: type=1400 audit(1783555096.751:502): avc: denied { unlink } for pid=2576 comm="syz-executor" name="file0" dev="tmpfs" ino=442 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 107.690845][ T36] audit: type=1400 audit(1783555096.771:503): avc: denied { lock } for pid=3705 comm="syz.4.1359" path="socket:[29081]" dev="sockfs" ino=29081 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 107.777674][ T3720] overlayfs: workdir and upperdir must be separate subtrees [ 107.969064][ T36] audit: type=1400 audit(1783555097.051:504): avc: denied { create } for pid=3750 comm="syz.1.1379" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 108.013277][ T36] audit: type=1326 audit(1783555097.101:505): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3758 comm="syz.1.1383" exe="/root/ci2-android-6-12-rust/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fc80af9de59 code=0x0 [ 108.241692][ T3786] kvm: kvm [3785]: vcpu1, guest rIP: 0x9114 Unhandled WRMSR(0x187) = 0x66a6 [ 108.250775][ T3786] kvm: kvm [3785]: vcpu1, guest rIP: 0x9114 Unhandled WRMSR(0x186) = 0x7acd [ 108.261119][ T3786] kvm: kvm [3785]: vcpu1, guest rIP: 0x9114 Unhandled WRMSR(0x11e) = 0x31ae [ 109.033487][ T36] audit: type=1400 audit(1783555098.121:506): avc: denied { ioctl } for pid=3868 comm="syz.1.1429" path="/dev/fuse" dev="devtmpfs" ino=23 ioctlcmd=0xe500 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fuse_device_t tclass=chr_file permissive=1 [ 110.761211][ T36] audit: type=1400 audit(1783555099.841:507): avc: denied { name_bind } for pid=3936 comm="syz.0.1457" src=65530 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=rawip_socket permissive=1 [ 111.076505][ T3957] overlayfs: metacopy with no lower data found - abort lookup (/file1) [ 111.114471][ T3961] pimreg1: tun_chr_ioctl cmd 1074025678 [ 111.120206][ T3961] pimreg1: group set to 0 [ 111.125595][ T3961] pimreg1: tun_chr_ioctl cmd 1074025678 [ 111.131281][ T3961] pimreg1: group set to 60928 [ 112.065569][ T36] kauditd_printk_skb: 70 callbacks suppressed [ 112.065588][ T36] audit: type=1400 audit(1783555101.151:578): avc: denied { shutdown } for pid=4032 comm="syz.1.1498" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 112.157656][ T4067] 9pnet_fd: Insufficient options for proto=fd [ 112.162367][ T36] audit: type=1400 audit(1783555101.241:579): avc: denied { listen } for pid=4068 comm="syz.4.1513" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 112.184576][ T36] audit: type=1400 audit(1783555101.261:580): avc: denied { accept } for pid=4068 comm="syz.4.1513" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 112.205966][ T36] audit: type=1400 audit(1783555101.261:581): avc: denied { read } for pid=4068 comm="syz.4.1513" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 112.257122][ T4082] fuse: Bad value for 'fd' [ 112.821738][ T4095] fuse: Bad value for 'fd' [ 112.905148][ T4120] overlayfs: failed to clone upperpath [ 113.073334][ T36] audit: type=1400 audit(1783555102.161:582): avc: denied { watch watch_reads } for pid=4146 comm="syz.4.1550" path="/118/file0" dev="tmpfs" ino=640 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=fifo_file permissive=1 [ 113.255225][ T4178] fuse: Bad value for 'fd' [ 113.490119][ T4219] fuse: Bad value for 'fd' [ 113.526127][ T4225] overlayfs: failed to resolve './cgroup': -2 [ 113.644013][ T36] audit: type=1326 audit(1783555102.731:583): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4235 comm="syz.4.1592" exe="/root/ci2-android-6-12-rust/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fea7bd9de59 code=0x0 [ 113.695074][ T4242] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 113.861198][ T4254] tmpfs: Unknown parameter 'usrquota' [ 114.286401][ T36] audit: type=1400 audit(1783555103.371:584): avc: denied { setopt } for pid=4287 comm="syz.1.1615" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 114.287320][ T4288] tipc: Enabling of bearer rejected, failed to enable media [ 114.345900][ T36] audit: type=1400 audit(1783555103.431:585): avc: denied { nlmsg_read } for pid=4295 comm="syz.3.1619" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 114.542431][ T36] audit: type=1400 audit(1783555103.621:586): avc: denied { associate } for pid=4323 comm="syz.4.1630" name="core" scontext=root:object_r:etc_runtime_t tcontext=system_u:object_r:root_t tclass=filesystem permissive=1 [ 114.602961][ T799] usb 4-1: new high-speed USB device number 23 using dummy_hcd [ 114.993983][ T799] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 115.004367][ T799] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x9 has invalid wMaxPacketSize 0 [ 115.014404][ T799] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 115.029350][ T799] usb 4-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 115.038717][ T799] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 115.047058][ T799] usb 4-1: Product: syz [ 115.051320][ T799] usb 4-1: Manufacturer: syz [ 115.056281][ T799] usb 4-1: SerialNumber: syz [ 115.062296][ T799] usb 4-1: config 0 descriptor?? [ 115.162939][ T467] usb 1-1: new full-speed USB device number 27 using dummy_hcd [ 115.333637][ T467] usb 1-1: not running at top speed; connect to a high speed hub [ 115.343816][ T467] usb 1-1: New USB device found, idVendor=1430, idProduct=474b, bcdDevice= 0.40 [ 115.353170][ T467] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 115.361481][ T467] usb 1-1: Product: syz [ 115.366334][ T467] usb 1-1: Manufacturer: syz [ 115.371004][ T467] usb 1-1: SerialNumber: syz [ 115.414989][ T36] audit: type=1400 audit(1783555104.501:587): avc: denied { listen } for pid=4352 comm="syz.1.1645" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 115.469148][ T4361] overlayfs: conflicting options: nfs_export=on,index=off [ 115.978468][ T799] usb 4-1: USB disconnect, device number 23 [ 116.185391][ T467] usb 1-1: MIDIStreaming interface descriptor not found [ 116.194547][ T467] usb 1-1: USB disconnect, device number 27 [ 116.207264][ T387] udevd[387]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card1/controlC1/../uevent} for writing: No such file or directory [ 117.122920][ T799] usb 4-1: new high-speed USB device number 24 using dummy_hcd [ 117.226113][ T4423] fuse: Bad value for 'fd' [ 117.247369][ T4425] 9pnet_fd: Insufficient options for proto=fd [ 117.273958][ T799] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 117.286368][ T4429] netlink: 44 bytes leftover after parsing attributes in process `syz.4.1680'. [ 117.299459][ T799] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 117.320501][ T799] usb 4-1: New USB device found, idVendor=27b8, idProduct=01ed, bcdDevice= 0.00 [ 117.331238][ T799] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 117.342108][ T799] usb 4-1: config 0 descriptor?? [ 117.468380][ T36] audit: type=1400 audit(1783555106.551:588): avc: denied { getopt } for pid=4448 comm="syz.1.1690" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 117.530380][ T36] audit: type=1400 audit(1783555106.611:589): avc: denied { getopt } for pid=4456 comm="syz.1.1694" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 117.723231][ T4461] syzkaller0: entered promiscuous mode [ 117.728823][ T4461] syzkaller0: entered allmulticast mode [ 117.753783][ T799] hid-led 0003:27B8:01ED.0013: unknown main item tag 0x0 [ 117.760976][ T799] hid-led 0003:27B8:01ED.0013: unknown main item tag 0x0 [ 117.768081][ T799] hid-led 0003:27B8:01ED.0013: unknown main item tag 0x0 [ 117.776536][ T799] hid-led 0003:27B8:01ED.0013: unknown main item tag 0x0 [ 117.783785][ T799] hid-led 0003:27B8:01ED.0013: unknown main item tag 0x0 [ 117.914129][ T4477] usb usb8: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 117.931167][ T4479] netlink: 100 bytes leftover after parsing attributes in process `syz.0.1704'. [ 117.953529][ T799] hid-led 0003:27B8:01ED.0013: probe with driver hid-led failed with error -71 [ 117.964092][ T799] usb 4-1: USB disconnect, device number 24 [ 118.502230][ T36] audit: type=1400 audit(1783555107.581:590): avc: denied { watch_reads } for pid=4499 comm="syz.3.1713" path="/360/file1" dev="tmpfs" ino=1909 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 118.530225][ T4502] netlink: 72 bytes leftover after parsing attributes in process `syz.3.1714'. [ 118.563226][ T36] audit: type=1326 audit(1783555107.651:591): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4505 comm="syz.1.1716" exe="/root/ci2-android-6-12-rust/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fc80af9de59 code=0x0 [ 119.342931][ T467] usb 1-1: new high-speed USB device number 28 using dummy_hcd [ 119.414748][ T36] audit: type=1400 audit(1783555108.501:592): avc: denied { getopt } for pid=4562 comm="syz.1.1739" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 119.502947][ T467] usb 1-1: Using ep0 maxpacket: 8 [ 119.509175][ T467] usb 1-1: too many configurations: 15, using maximum allowed: 8 [ 119.523482][ T467] usb 1-1: config 0 has no interfaces? [ 119.529862][ T467] usb 1-1: config 0 has no interfaces? [ 119.536529][ T467] usb 1-1: config 0 has no interfaces? [ 119.543163][ T467] usb 1-1: config 0 has no interfaces? [ 119.549635][ T467] usb 1-1: config 0 has no interfaces? [ 119.556216][ T467] usb 1-1: config 0 has no interfaces? [ 119.562556][ T467] usb 1-1: config 0 has no interfaces? [ 119.569304][ T467] usb 1-1: config 0 has no interfaces? [ 119.575161][ T467] usb 1-1: New USB device found, idVendor=1199, idProduct=6821, bcdDevice=98.59 [ 119.592707][ T467] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 119.602007][ T467] usb 1-1: config 0 descriptor?? [ 119.826943][ T799] usb 1-1: USB disconnect, device number 28 [ 120.505951][ T4601] overlayfs: failed to clone upperpath [ 120.672999][ T367] usb 4-1: new full-speed USB device number 25 using dummy_hcd [ 120.824034][ T367] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 120.835069][ T367] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 120.844846][ T367] usb 4-1: New USB device found, idVendor=04f3, idProduct=0755, bcdDevice= 0.00 [ 120.853914][ T367] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 120.862798][ T367] usb 4-1: config 0 descriptor?? [ 121.270853][ T367] hid-generic 0003:04F3:0755.0014: unknown main item tag 0x0 [ 121.278635][ T367] hid-generic 0003:04F3:0755.0014: failed to start in urb: -90 [ 121.286746][ T367] hid-generic 0003:04F3:0755.0014: hidraw0: USB HID v1.01 Device [HID 04f3:0755] on usb-dummy_hcd.3-1/input0 [ 121.387728][ T36] audit: type=1400 audit(1783555110.471:593): avc: denied { create } for pid=4651 comm="syz.1.1781" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_nflog_socket permissive=1 [ 121.410604][ T36] audit: type=1400 audit(1783555110.471:594): avc: denied { setopt } for pid=4651 comm="syz.1.1781" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_nflog_socket permissive=1 [ 121.474662][ T9] usb 4-1: USB disconnect, device number 25 [ 122.532667][ T36] audit: type=1400 audit(1783555111.611:595): avc: denied { ioctl } for pid=4752 comm="syz.3.1826" path="socket:[36729]" dev="sockfs" ino=36729 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 123.013129][ T799] usb 4-1: new full-speed USB device number 26 using dummy_hcd [ 123.234296][ T799] usb 4-1: not running at top speed; connect to a high speed hub [ 123.350540][ T799] usb 4-1: New USB device found, idVendor=1430, idProduct=474b, bcdDevice= 0.40 [ 123.375253][ T799] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 123.403607][ T799] usb 4-1: Product: syz [ 123.408829][ T799] usb 4-1: Manufacturer: syz [ 123.415563][ T799] usb 4-1: SerialNumber: syz [ 123.430352][ T36] audit: type=1400 audit(1783555112.451:596): avc: denied { mount } for pid=4767 comm="syz.1.1832" name="/" dev="configfs" ino=1008 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=filesystem permissive=1 [ 123.453151][ T36] audit: type=1400 audit(1783555112.451:597): avc: denied { search } for pid=4767 comm="syz.1.1832" name="/" dev="configfs" ino=1008 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 123.479149][ T36] audit: type=1400 audit(1783555112.451:598): avc: denied { read } for pid=4767 comm="syz.1.1832" name="/" dev="configfs" ino=1008 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 123.501189][ T36] audit: type=1400 audit(1783555112.451:599): avc: denied { open } for pid=4767 comm="syz.1.1832" path="/" dev="configfs" ino=1008 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 123.572989][ T36] audit: type=1400 audit(1783555112.651:600): avc: denied { watch_reads } for pid=4789 comm="syz.4.1842" path="/185" dev="tmpfs" ino=994 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 124.047993][ T799] usb 4-1: MIDIStreaming interface descriptor not found [ 124.075355][ T799] usb 4-1: USB disconnect, device number 26 [ 124.196826][ T562] udevd[562]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 124.562999][ T36] audit: type=1400 audit(1783555369.649:601): avc: denied { create } for pid=4853 comm="syz.1.1868" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1 [ 124.642947][ T467] usb 1-1: new high-speed USB device number 29 using dummy_hcd [ 124.682132][ T4874] ------------[ cut here ]------------ [ 124.687664][ T4874] WARNING: CPU: 1 PID: 4874 at mm/page_alloc.c:5285 __alloc_pages_noprof+0x109/0x7e0 [ 124.697189][ T4874] Modules linked in: [ 124.701084][ T4874] CPU: 1 UID: 0 PID: 4874 Comm: syz.1.1877 Not tainted syzkaller #0 38ce34caa3eafecb4514ac9530ab896457f545a5 [ 124.712673][ T4874] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 124.722758][ T4874] RIP: 0010:__alloc_pages_noprof+0x109/0x7e0 [ 124.728794][ T4874] Code: 00 0f 1f 44 00 00 83 fb 0b 72 28 b8 00 20 00 00 23 44 24 40 75 1d 80 3d 43 db 0b 06 00 0f 85 c2 00 00 00 c6 05 36 db 0b 06 01 <0f> 0b 31 c0 e9 b4 00 00 00 83 fb 0a 0f 87 a9 00 00 00 44 8b 64 24 [ 124.748501][ T4874] RSP: 0018:ffffc9000a98f880 EFLAGS: 00010246 [ 124.754598][ T4874] RAX: 0000000000000000 RBX: 000000000000000e RCX: 0000000000000000 [ 124.762586][ T4874] RDX: 0000000000000000 RSI: 0000000000000000 RDI: ffffc9000a98f938 [ 124.770580][ T4874] RBP: ffffc9000a98f9a8 R08: ffffc9000a98f937 R09: 0000000000000000 [ 124.778600][ T4874] R10: ffffc9000a98f920 R11: fffff52001531f27 R12: ffffc9000a98f8c0 [ 124.786619][ T4874] R13: dffffc0000000000 R14: 1ffff92001531f14 R15: 0000000000000000 [ 124.794714][ T4874] FS: 00007fc80be836c0(0000) GS:ffff8881f6f00000(0000) knlGS:0000000000000000 [ 124.802986][ T467] usb 1-1: Using ep0 maxpacket: 16 [ 124.803698][ T4874] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 124.810278][ T467] usb 1-1: config 0 interface 0 altsetting 254 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 124.815401][ T4874] CR2: 00007fc80be82ff8 CR3: 0000000128f08000 CR4: 00000000003526b0 [ 124.815432][ T4874] Call Trace: [ 124.828770][ T467] usb 1-1: config 0 interface 0 has no altsetting 0 [ 124.836372][ T4874] [ 124.836388][ T4874] ? entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 124.840066][ T467] usb 1-1: New USB device found, idVendor=056a, idProduct=00d4, bcdDevice= 0.00 [ 124.846272][ T4874] ? __cfi___alloc_pages_noprof+0x10/0x10 [ 124.849433][ T467] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 124.855293][ T4874] ? incfs_realloc_mount_info+0xa7/0x4c0 [ 124.855327][ T4874] ___kmalloc_large_node+0x81/0x220 [ 124.866924][ T467] usb 1-1: config 0 descriptor?? [ 124.870150][ T4874] ? incfs_realloc_mount_info+0xa7/0x4c0 [ 124.899625][ T4874] __kmalloc_large_node_noprof+0x1e/0xd0 [ 124.905299][ T4874] ? incfs_realloc_mount_info+0xa7/0x4c0 [ 124.910952][ T4874] __kmalloc_noprof+0x326/0x510 [ 124.915843][ T4874] ? __cfi_lockref_get+0x10/0x10 [ 124.920795][ T4874] incfs_realloc_mount_info+0xa7/0x4c0 [ 124.926335][ T4874] ? incfs_add_sysfs_node+0x118/0x230 [ 124.931714][ T4874] ? __kasan_check_write+0x18/0x20 [ 124.936862][ T4874] incfs_alloc_mount_info+0x478/0x5f0 [ 124.942255][ T4874] incfs_mount_fs+0x3ca/0x970 [ 124.946966][ T4874] ? __cfi_incfs_mount_fs+0x10/0x10 [ 124.952265][ T4874] ? selinux_capable+0x38/0x50 [ 124.957232][ T4874] legacy_get_tree+0x106/0x1b0 [ 124.962014][ T4874] ? __cfi_incfs_mount_fs+0x10/0x10 [ 124.967238][ T4874] vfs_get_tree+0xa1/0x290 [ 124.971664][ T4874] do_new_mount+0x251/0xb40 [ 124.976424][ T4874] ? security_capable+0x44/0x130 [ 124.981380][ T4874] path_mount+0x66a/0xff0 [ 124.985862][ T4874] ? putname+0x113/0x150 [ 124.990124][ T4874] __se_sys_mount+0x2bf/0x480 [ 124.994862][ T4874] ? __x64_sys_mount+0xf0/0xf0 [ 124.999637][ T4874] ? __kasan_check_write+0x18/0x20 [ 125.004785][ T4874] ? fpregs_restore_userregs+0x11c/0x260 [ 125.010435][ T4874] __x64_sys_mount+0xc3/0xf0 [ 125.015062][ T4874] x64_sys_call+0x2021/0x2ee0 [ 125.019750][ T4874] do_syscall_64+0x57/0xf0 [ 125.024211][ T4874] ? clear_bhb_loop+0x50/0xa0 [ 125.028922][ T4874] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 125.034852][ T4874] RIP: 0033:0x7fc80af9de59 [ 125.039275][ T4874] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 125.058945][ T4874] RSP: 002b:00007fc80be83028 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 125.067394][ T4874] RAX: ffffffffffffffda RBX: 00007fc80b225fa0 RCX: 00007fc80af9de59 [ 125.075419][ T4874] RDX: 00002000000001c0 RSI: 0000200000000100 RDI: 0000200000000080 [ 125.083428][ T4874] RBP: 00007fc80b033e6f R08: 0000200000000000 R09: 0000000000000000 [ 125.091420][ T4874] R10: 0000000000010002 R11: 0000000000000246 R12: 0000000000000000 [ 125.099417][ T4874] R13: 00007fc80b226038 R14: 00007fc80b225fa0 R15: 00007fff62a1edc8 [ 125.107434][ T4874] [ 125.110460][ T4874] ---[ end trace 0000000000000000 ]--- [ 125.116479][ T4874] incfs: Error allocating mount info. -12 [ 125.122335][ T4874] incfs: mount failed -12 [ 125.242927][ T367] usb 4-1: new high-speed USB device number 27 using dummy_hcd [ 125.284649][ T467] wacom 0003:056A:00D4.0015: unknown main item tag 0x0 [ 125.291781][ T467] wacom 0003:056A:00D4.0015: unknown main item tag 0x6 [ 125.298779][ T467] wacom 0003:056A:00D4.0015: ignoring exceeding usage max [ 125.306742][ T467] wacom 0003:056A:00D4.0015: Unknown device_type for 'HID 056a:00d4'. Assuming pen. [ 125.316829][ T467] wacom 0003:056A:00D4.0015: hidraw0: USB HID v0.81 Device [HID 056a:00d4] on usb-dummy_hcd.0-1/input0 [ 125.328633][ T467] input: Wacom Bamboo Pen Pen as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/0003:056A:00D4.0015/input/input18 [ 125.392919][ T367] usb 4-1: Using ep0 maxpacket: 8 [ 125.398482][ T367] usb 4-1: too many configurations: 15, using maximum allowed: 8 [ 125.407336][ T367] usb 4-1: config 0 has no interfaces? [ 125.413647][ T367] usb 4-1: config 0 has no interfaces? [ 125.419740][ T367] usb 4-1: config 0 has no interfaces? [ 125.425880][ T367] usb 4-1: config 0 has no interfaces? [ 125.432012][ T367] usb 4-1: config 0 has no interfaces? [ 125.438170][ T367] usb 4-1: config 0 has no interfaces? [ 125.444404][ T367] usb 4-1: config 0 has no interfaces? [ 125.450515][ T367] usb 4-1: config 0 has no interfaces? [ 125.456097][ T367] usb 4-1: New USB device found, idVendor=1199, idProduct=6821, bcdDevice=98.59 [ 125.465255][ T367] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 125.474044][ T367] usb 4-1: config 0 descriptor?? [ 125.506953][ T367] usb 1-1: USB disconnect, device number 29 [ 125.681089][ T367] usb 4-1: USB disconnect, device number 27