last executing test programs: 2.082389284s ago: executing program 2 (id=419): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), r0) r2 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000004c0)={'syz_tun\x00', 0x0}) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000480)={0x3c, r1, 0x1, 0x70bd25, 0x25dfdbfd, {}, [@ETHTOOL_A_LINKMODES_HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}]}, @ETHTOOL_A_LINKMODES_OURS={0x14, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_VALUE={0x4}, @ETHTOOL_A_BITSET_MASK={0x4}, @ETHTOOL_A_BITSET_SIZE={0x8}]}, @ETHTOOL_A_LINKMODES_SPEED={0x8, 0x5, 0x82710}]}, 0x3c}, 0x1, 0x0, 0x0, 0x20004000}, 0x4044094) 2.082224874s ago: executing program 3 (id=420): r0 = syz_usb_connect$uac1(0x0, 0xac, &(0x7f0000000240)=ANY=[@ANYBLOB="12010000000000106b1d010140000102030109029a0003010000000904000000010100000a24010000000201020c24020000000000000800000524050000082407000000009e0c240700000000a3e82f07070d240701060000fd80000000e80924030000000001"], 0x0) syz_usb_control_io(r0, &(0x7f0000000140)={0x2c, 0x0, &(0x7f0000000600)={0x0, 0x3, 0x2, @string={0x2}}, 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io$uac1(r0, &(0x7f0000001840)={0x14, 0x0, &(0x7f0000000180)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x3009}}}, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000c40)={0x84, &(0x7f0000000800)={0x40, 0x3, 0x2, "4be7"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$uac1(r0, 0x0, &(0x7f00000004c0)={0x44, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)={0x20, 0x82, 0x2, "00dc"}, 0x0, 0x0, 0x0}) 2.081951584s ago: executing program 2 (id=421): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f00000004c0)=ANY=[@ANYBLOB="fc000000190001000000000000000000e0000002000000000000000000000000ac1414aa00000000000000000000000000000000000000000a0000000000c000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0000000000000000a900000000000000000000000000000000000000000000000000000000000000ffffffffffffffff000000000000000000000000000000000000000000000000000a000000000000000000000080400002000000000000080000000000000000000100000000000044000500ac1414aa000000000000000000000000000000003c00000000000000ffffffff0000000000000000000000000200000004"], 0xfc}}, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil) sendmsg$nl_xfrm(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000001100)=@migrate={0xa0, 0x21, 0x1, 0x0, 0x0, {{@in6=@private2, @in=@rand_addr=0x64010102, 0x0, 0x0, 0x0, 0x0, 0xa}, 0x4}, [@migrate={0x50, 0x11, [{@in=@local, @in=@broadcast, @in=@multicast2, @in6=@local, 0x3c, 0x4, 0x0, 0x2, 0xa, 0x2}]}]}, 0xa0}, 0x1, 0x0, 0x0, 0x40000}, 0x0) 2.081671464s ago: executing program 2 (id=422): r0 = syz_usb_connect(0x0, 0x36, &(0x7f0000000080)={{0x12, 0x1, 0x141, 0x48, 0x13, 0x44, 0x20, 0x424, 0x7500, 0x69ee, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x10, 0x0, [{{0x9, 0x4, 0xb8, 0x7, 0x2, 0x96, 0xd1, 0xca, 0x0, [], [{{0x9, 0x5, 0x6, 0x2, 0x200, 0xd, 0x0, 0x6}}, {{0x9, 0x5, 0x82, 0x2, 0x200, 0x0, 0x1, 0x10}}]}}]}}]}}, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000900)={0x84, &(0x7f00000003c0)={0x0, 0x5, 0x4, "9ee763a8"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f00000002c0)={0x1c, &(0x7f0000000440)=ANY=[@ANYBLOB="440004000000dbc9fb21f7f7698dff3604a915b2c9db57c77c26a5264f885c5182e727b51ca2affa3f1e99c6d3ec30ff551fb0198b10a2968fc963d2c6"], 0x0, 0x0}) 1.446865225s ago: executing program 1 (id=428): mkdirat(0xffffffffffffff9c, &(0x7f00000003c0)='./file0\x00', 0x1c0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0) mount$fuse(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000002100), 0x280449c, &(0x7f0000002140)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}}) setresuid(0xffffffffffffffff, 0x0, 0xee01) chmod(&(0x7f0000000180)='./file0\x00', 0x23f) 1.386646269s ago: executing program 1 (id=429): r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000240), 0xc0802, 0x0) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f00000000c0)) ioctl$PPPIOCSMAXCID(r0, 0x40047451, &(0x7f0000000080)=0x4) ioctl$PPPIOCSFLAGS1(r0, 0x40047459, &(0x7f0000000100)=0x2000004) pwritev(r0, &(0x7f0000000180)=[{&(0x7f0000000500)="00214717a70700000002030600710a5eebc4f4712000", 0x16}], 0x1, 0xf2, 0x1) 1.368408111s ago: executing program 1 (id=432): r0 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$inet6_udp_int(r0, 0x11, 0x67, &(0x7f0000000040)=0x91, 0x4) setsockopt$sock_linger(r0, 0x1, 0x3c, &(0x7f0000000180)={0x200000000000001}, 0x8) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e27, 0xffffffff, @mcast2, 0x5}, 0x1c) sendmmsg$inet6(r0, &(0x7f00000015c0)=[{{0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000001740)="1fe314f7bc0a6a6fcd057e92f98f51ef291b015636f66fe2a42db9c06a390d07e152c86193da40038f52dccbeccd2d1f745ab9c2d74acafdf9fd362f2fadddcdcee8c539af02a4bd5f1414b3e67f8b2aad97f7eae10070626554130e52df04b1131f44c0da4aefa9f27b10668337f772885179ee15dda016e719bed86af3d41bdcb0d421f248b918f04c819f18e8320c029f", 0x92}], 0x1}}], 0x1, 0x4001c00) 1.354190472s ago: executing program 1 (id=433): r0 = fsopen(&(0x7f00000001c0)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x0, 0x0) fchdir(r1) umount2(&(0x7f0000000080)='.\x00', 0x0) 1.294728156s ago: executing program 1 (id=434): mkdir(&(0x7f0000000040)='./file0\x00', 0x0) mount$incfs(&(0x7f0000000580)='./file0\x00', &(0x7f0000000140)='./file0\x00', &(0x7f00000005c0), 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0, 0x8c) r1 = openat$incfs(r0, &(0x7f00000001c0)='.pending_reads\x00', 0x0, 0x130) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r1, 0x80106725, 0x0) 1.294342697s ago: executing program 1 (id=435): syz_open_dev$evdev(0x0, 0x9468, 0x0) r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000000000207d1e512d000000000001090224000100000000090400000103000200092100000001220500090581030014"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f00000003c0)={0x2c, &(0x7f0000000c40)=ANY=[@ANYBLOB='\x00\x00W'], 0x0, 0x0, 0x0, 0x0}, 0x0) syz_open_dev$hidraw(&(0x7f0000002300), 0x0, 0x44200) 674.631736ms ago: executing program 0 (id=436): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) fstat(r0, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0}) setreuid(0x0, r1) r2 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_SIOCETHTOOL(r2, 0x89f0, &(0x7f0000000080)={'bridge0\x00', &(0x7f0000000000)=@ethtool_ringparam={0x9, 0x0, 0x8a, 0x5, 0x0, 0x2000000}}) 661.575107ms ago: executing program 0 (id=437): r0 = openat$selinux_load(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) r1 = openat$selinux_policy(0xffffff9c, &(0x7f0000001040), 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x100000a, 0x12, r1, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe5000/0x18000)=nil, 0x0, 0x0, 0x6d, 0x0, 0x0) write$selinux_load(r0, &(0x7f0000000000)=ANY=[], 0x2046) 563.760165ms ago: executing program 0 (id=438): r0 = inotify_init() inotify_add_watch(r0, &(0x7f0000000000)='.\x00', 0x400017e) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x68cd42, 0x4) openat$cgroup_ro(r1, &(0x7f0000000900)='net_prio.prioidx\x00', 0x275a, 0xb) read$FUSE(r0, &(0x7f0000001fc0)={0x2020}, 0x2020) 563.477165ms ago: executing program 0 (id=439): openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1802, 0x0) syz_open_procfs(0xffffffffffffffff, 0x0) mknodat$loop(0xffffffffffffff9c, &(0x7f0000000180)='./file2\x00', 0x6000, 0x0) r0 = open(&(0x7f00000003c0)='./file2\x00', 0x81, 0x0) ioctl$BTRFS_IOC_DEFRAG(r0, 0x4c00, 0x3) 562.338115ms ago: executing program 0 (id=440): r0 = fsopen(&(0x7f0000000100)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x0, 0x0) symlinkat(&(0x7f0000000000)='.\x00', r1, &(0x7f0000000140)='./file0\x00') readlinkat(r1, &(0x7f0000000040)='./file0/../file0\x00', &(0x7f0000000240)=""/65, 0x41) 540.821097ms ago: executing program 0 (id=441): r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r0) prctl$PR_SET_SECCOMP(0x16, 0x1, 0x0) ptrace(0x10, r0) ptrace$peeksig(0x4209, r0, &(0x7f0000000140)={0x0, 0x0, 0x1}, &(0x7f00000002c0)=[{}]) 183.308846ms ago: executing program 2 (id=442): sched_setscheduler(0x0, 0x1, 0x0) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz0\x00', {0xa, 0x4, 0x6, 0xfffa}, 0x20, [0x0, 0xc95a, 0xfffffff3, 0x9, 0x80, 0x2, 0x3, 0x8, 0x6, 0x4d, 0x8, 0x5c, 0x9, 0x3, 0x2, 0x0, 0x8, 0x3, 0x20000000, 0x2ab, 0x4, 0x7, 0x4, 0x3c5b, 0x1, 0x1ff, 0x9, 0x1, 0x1f461e2c, 0x7, 0xe661, 0x7fff, 0x401, 0x3, 0x7fff, 0x4c74, 0x80000000, 0x800242, 0xffffffff, 0xa, 0x0, 0x71, 0x2, 0x6, 0x3, 0x2, 0x2, 0x3e, 0x8f, 0x6, 0x6, 0x1, 0x80092a3, 0x4, 0xcbee, 0x20000000, 0x400082, 0x2, 0x7, 0x7, 0x8, 0x4, 0x1, 0x40], [0x9, 0xffff, 0x12f, 0x6, 0x10, 0xfffffff3, 0x129432e6, 0xb6, 0xf9, 0xd, 0x2bf, 0x5, 0x7, 0xfffffffc, 0x0, 0x0, 0x7, 0x73775975, 0x2f, 0xe, 0x312, 0x10000, 0x0, 0xfffffffe, 0x6, 0x4, 0x8000, 0x9, 0x3fe, 0x401, 0xfff, 0x4, 0xfb, 0x5, 0x8000, 0x5f31, 0x4, 0x1, 0x2, 0x2, 0x20009, 0x4, 0x6, 0x8, 0x9, 0x6, 0x80000001, 0x8, 0x1, 0x40009, 0x2, 0x8, 0x7f, 0x8, 0x1, 0x3, 0x9, 0xffffffff, 0x7, 0x400003, 0x9, 0x48c93690, 0x42, 0x400004], [0x6, 0x6, 0x81000001, 0x2, 0xff, 0x40000100, 0x8d2, 0x9, 0x5, 0x7fff, 0x0, 0x1, 0xb, 0x4, 0x5, 0x1005, 0x0, 0x1f0, 0xfffffffd, 0x2, 0x86, 0x1, 0x9, 0x3e7, 0x9, 0x5, 0x2, 0x2, 0x800, 0x8, 0x5, 0x8001, 0x7, 0x38, 0x800203, 0x1fe, 0x80, 0x2, 0x0, 0x950bfaf, 0x1000, 0xa2, 0x7, 0x53ce697f, 0xbd2d, 0x6, 0xac8, 0xbf, 0x10002, 0x403, 0x7ff, 0xb, 0x0, 0x1, 0xffff, 0x0, 0x6, 0x1e, 0x120002, 0x3, 0x6, 0xaaed, 0x800004, 0x103], [0x10, 0xbb31, 0x3, 0xb, 0x5, 0x10001, 0x6, 0x5, 0x0, 0x3, 0x80ce7, 0x1ff, 0x3, 0x7, 0x5, 0x1003, 0x101, 0x10000, 0x6, 0x7fff, 0xffff, 0xe620, 0x1, 0x2, 0x4001, 0x2, 0x14c, 0x60a7, 0x6, 0x4, 0xfffffffd, 0x6, 0x6, 0xb, 0xc8, 0xee1, 0x0, 0xffff, 0x3, 0x80, 0x100, 0x9602, 0x4, 0x2, 0x100ffff, 0x6, 0x1, 0x10080, 0x6, 0x900000, 0x30b1d693, 0x5a2d, 0x20000000, 0x7, 0x1, 0x10, 0x0, 0xd499, 0x4, 0xb17, 0x1, 0x1fe, 0xffff3441, 0xfff]}, 0x45c) r0 = syz_open_dev$evdev(&(0x7f00000000c0), 0x2, 0x822b01) ioctl$EVIOCSMASK(r0, 0x40104593, &(0x7f00000001c0)={0x0, 0x0, 0x0}) write$char_usb(r0, &(0x7f0000000040)="e2", 0x12d8) 126.63446ms ago: executing program 2 (id=443): io_setup(0x2278, &(0x7f0000000180)=0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_timeval(r1, 0x1, 0x14, &(0x7f0000000000)={0x0, 0xea60}, 0x10) io_submit(r0, 0x1, &(0x7f0000000380)=[&(0x7f00000001c0)={0x0, 0x4, 0x0, 0x0, 0x0, r1, &(0x7f0000000240)="a9", 0x1, 0x0, 0x0, 0x2}]) io_destroy(r0) 96.378462ms ago: executing program 3 (id=444): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000040), 0x60a00, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2000006, 0x12, r0, 0x57788000) socket$inet_udp(0x2, 0x2, 0x0) r1 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r1, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/74, 0x328000, 0x1000}, 0x1c) 63.009725ms ago: executing program 3 (id=445): openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x60a00, 0x0) r0 = socket(0x10, 0x803, 0x0) sendto(r0, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) recvmmsg(r0, &(0x7f0000009080)=[{{0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000001580)=""/4096, 0x1000}, {&(0x7f0000000180)=""/190, 0xbe}, {&(0x7f0000000000)=""/77, 0x4d}, {&(0x7f0000000600)=""/92, 0x5c}, {&(0x7f0000003580)=""/4083, 0xff3}, {&(0x7f0000002580)=""/232, 0xe8}, {&(0x7f0000000140)=""/61, 0x3d}], 0x7}, 0xc98}], 0x1, 0x2, 0x0) recvmsg$unix(r0, &(0x7f00000008c0)={0x0, 0x0, 0x0}, 0x40000100) 10.61947ms ago: executing program 3 (id=446): r0 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000100)={'vcan0\x00', 0x0}) connect$can_bcm(r0, &(0x7f00000000c0)={0x1d, r1}, 0x10) sendmsg$can_bcm(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000200)=ANY=[@ANYBLOB="01000000000000000010000000000000", @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x77359400, @ANYRES64=0x0, @ANYBLOB="0000008001"], 0x48}, 0x1, 0x0, 0x0, 0x8040}, 0x0) sendmsg$can_bcm(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)={0x2, 0x922, 0x0, {0x0, 0x2710}, {0x0, 0x2710}, {}, 0x1, @canfd={{}, 0x0, 0x0, 0x0, 0x0, "5c91440132bb112240fcbcc3fa9d0431575f8614d3538ce09c50eecd6ac579e8e83b944b666113f3afed71231e6653a13532f17b33515bdd7e1be14f53b9fc9b"}}, 0x80}}, 0x0) 10.287029ms ago: executing program 2 (id=447): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x81, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x1) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x400) 10.108189ms ago: executing program 3 (id=448): mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$incfs(&(0x7f0000000280)='./file0/../file0\x00', &(0x7f0000000140)='./file0\x00', &(0x7f0000000240), 0x0, 0x0) chdir(&(0x7f00000001c0)='./file0\x00') openat$binderfs(0xffffffffffffff9c, &(0x7f0000000300)='./binderfs/binder0\x00', 0x2, 0x0) 0s ago: executing program 3 (id=449): socket$nl_xfrm(0x10, 0x3, 0x6) creat(&(0x7f0000000040)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) mount$fuse(0x0, &(0x7f0000002080)='./file0\x00', &(0x7f00000020c0), 0x0, &(0x7f0000000240)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x6000}}) write$FUSE_DIRENTPLUS(r0, &(0x7f00000001c0)=ANY=[@ANYBLOB="10000000", @ANYRES64=r0], 0x10) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.1.175' (ED25519) to the list of known hosts. [ 23.916971][ T36] audit: type=1400 audit(1756325443.910:64): avc: denied { mounton } for pid=282 comm="syz-executor" path="/syzcgroup/unified" dev="sda1" ino=2022 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1 [ 23.918038][ T282] cgroup: Unknown subsys name 'net' [ 23.939726][ T36] audit: type=1400 audit(1756325443.910:65): avc: denied { mount } for pid=282 comm="syz-executor" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 23.967552][ T36] audit: type=1400 audit(1756325443.950:66): avc: denied { unmount } for pid=282 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 23.967742][ T282] cgroup: Unknown subsys name 'devices' [ 24.175263][ T282] cgroup: Unknown subsys name 'hugetlb' [ 24.180887][ T282] cgroup: Unknown subsys name 'rlimit' [ 24.314298][ T36] audit: type=1400 audit(1756325444.310:67): avc: denied { setattr } for pid=282 comm="syz-executor" name="raw-gadget" dev="devtmpfs" ino=190 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 24.337682][ T36] audit: type=1400 audit(1756325444.310:68): avc: denied { mounton } for pid=282 comm="syz-executor" path="/proc/sys/fs/binfmt_misc" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=dir permissive=1 [ 24.362569][ T36] audit: type=1400 audit(1756325444.310:69): avc: denied { mount } for pid=282 comm="syz-executor" name="/" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=filesystem permissive=1 [ 24.371237][ T284] SELinux: Context root:object_r:swapfile_t is not valid (left unmapped). Setting up swapspace version 1, size = 127995904 bytes [ 24.394568][ T36] audit: type=1400 audit(1756325444.390:70): avc: denied { relabelto } for pid=284 comm="mkswap" name="swap-file" dev="sda1" ino=2025 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 24.420967][ T36] audit: type=1400 audit(1756325444.390:71): avc: denied { write } for pid=284 comm="mkswap" path="/root/swap-file" dev="sda1" ino=2025 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 24.459366][ T36] audit: type=1400 audit(1756325444.450:72): avc: denied { read } for pid=282 comm="syz-executor" name="swap-file" dev="sda1" ino=2025 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 24.484965][ T36] audit: type=1400 audit(1756325444.450:73): avc: denied { open } for pid=282 comm="syz-executor" path="/root/swap-file" dev="sda1" ino=2025 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 24.485001][ T282] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 25.839040][ T289] bridge0: port 1(bridge_slave_0) entered blocking state [ 25.850747][ T289] bridge0: port 1(bridge_slave_0) entered disabled state [ 25.858112][ T289] bridge_slave_0: entered allmulticast mode [ 25.864557][ T289] bridge_slave_0: entered promiscuous mode [ 25.870984][ T289] bridge0: port 2(bridge_slave_1) entered blocking state [ 25.878151][ T289] bridge0: port 2(bridge_slave_1) entered disabled state [ 25.885324][ T289] bridge_slave_1: entered allmulticast mode [ 25.891741][ T289] bridge_slave_1: entered promiscuous mode [ 25.994804][ T289] bridge0: port 2(bridge_slave_1) entered blocking state [ 26.001868][ T289] bridge0: port 2(bridge_slave_1) entered forwarding state [ 26.009300][ T289] bridge0: port 1(bridge_slave_0) entered blocking state [ 26.016346][ T289] bridge0: port 1(bridge_slave_0) entered forwarding state [ 26.048557][ T294] bridge0: port 1(bridge_slave_0) entered blocking state [ 26.056145][ T294] bridge0: port 1(bridge_slave_0) entered disabled state [ 26.063311][ T294] bridge_slave_0: entered allmulticast mode [ 26.069470][ T294] bridge_slave_0: entered promiscuous mode [ 26.075987][ T294] bridge0: port 2(bridge_slave_1) entered blocking state [ 26.083023][ T294] bridge0: port 2(bridge_slave_1) entered disabled state [ 26.090316][ T294] bridge_slave_1: entered allmulticast mode [ 26.096742][ T294] bridge_slave_1: entered promiscuous mode [ 26.157525][ T293] bridge0: port 1(bridge_slave_0) entered blocking state [ 26.164609][ T293] bridge0: port 1(bridge_slave_0) entered disabled state [ 26.171828][ T293] bridge_slave_0: entered allmulticast mode [ 26.178359][ T293] bridge_slave_0: entered promiscuous mode [ 26.193506][ T293] bridge0: port 2(bridge_slave_1) entered blocking state [ 26.200569][ T293] bridge0: port 2(bridge_slave_1) entered disabled state [ 26.207799][ T293] bridge_slave_1: entered allmulticast mode [ 26.214088][ T293] bridge_slave_1: entered promiscuous mode [ 26.248695][ T295] bridge0: port 1(bridge_slave_0) entered blocking state [ 26.255845][ T295] bridge0: port 1(bridge_slave_0) entered disabled state [ 26.263134][ T295] bridge_slave_0: entered allmulticast mode [ 26.269311][ T295] bridge_slave_0: entered promiscuous mode [ 26.277147][ T295] bridge0: port 2(bridge_slave_1) entered blocking state [ 26.284216][ T295] bridge0: port 2(bridge_slave_1) entered disabled state [ 26.291320][ T295] bridge_slave_1: entered allmulticast mode [ 26.297679][ T295] bridge_slave_1: entered promiscuous mode [ 26.341311][ T13] bridge0: port 1(bridge_slave_0) entered disabled state [ 26.348907][ T13] bridge0: port 2(bridge_slave_1) entered disabled state [ 26.364193][ T46] bridge0: port 1(bridge_slave_0) entered blocking state [ 26.371337][ T46] bridge0: port 1(bridge_slave_0) entered forwarding state [ 26.379077][ T46] bridge0: port 2(bridge_slave_1) entered blocking state [ 26.386132][ T46] bridge0: port 2(bridge_slave_1) entered forwarding state [ 26.466112][ T289] veth0_vlan: entered promiscuous mode [ 26.512489][ T289] veth1_macvtap: entered promiscuous mode [ 26.532388][ T46] bridge0: port 1(bridge_slave_0) entered blocking state [ 26.539563][ T46] bridge0: port 1(bridge_slave_0) entered forwarding state [ 26.547894][ T46] bridge0: port 2(bridge_slave_1) entered blocking state [ 26.554965][ T46] bridge0: port 2(bridge_slave_1) entered forwarding state [ 26.562791][ T46] bridge0: port 1(bridge_slave_0) entered blocking state [ 26.569971][ T46] bridge0: port 1(bridge_slave_0) entered forwarding state [ 26.597292][ T46] bridge0: port 2(bridge_slave_1) entered blocking state [ 26.604374][ T46] bridge0: port 2(bridge_slave_1) entered forwarding state [ 26.612878][ T46] bridge0: port 1(bridge_slave_0) entered blocking state [ 26.619944][ T46] bridge0: port 1(bridge_slave_0) entered forwarding state [ 26.628340][ T46] bridge0: port 2(bridge_slave_1) entered blocking state [ 26.635411][ T46] bridge0: port 2(bridge_slave_1) entered forwarding state [ 26.659529][ T289] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 26.666455][ T294] veth0_vlan: entered promiscuous mode [ 26.689640][ T294] veth1_macvtap: entered promiscuous mode [ 26.711381][ T293] veth0_vlan: entered promiscuous mode [ 26.747524][ T295] veth0_vlan: entered promiscuous mode [ 26.755924][ T293] veth1_macvtap: entered promiscuous mode [ 26.784685][ T295] veth1_macvtap: entered promiscuous mode [ 26.871492][ T348] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 27.193179][ T331] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 27.343516][ T65] usb 3-1: new full-speed USB device number 2 using dummy_hcd [ 27.354265][ T331] usb 1-1: New USB device found, idVendor=14ea, idProduct=ab11, bcdDevice=cf.a5 [ 27.363551][ T331] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 27.372902][ T331] usb 1-1: config 0 descriptor?? [ 27.504525][ T65] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 27.515775][ T65] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 27.525605][ T65] usb 3-1: New USB device found, idVendor=256c, idProduct=006e, bcdDevice= 0.00 [ 27.534728][ T65] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 27.545745][ T65] usb 3-1: config 0 descriptor?? [ 27.757296][ T65] usbhid 3-1:0.0: can't add hid device: -71 [ 27.769102][ T65] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 27.788256][ T65] usb 3-1: USB disconnect, device number 2 [ 27.987806][ T331] asix 1-1:0.0 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71 [ 27.997976][ T331] asix 1-1:0.0 (unnamed net_device) (uninitialized): Failed to send software reset: ffffffb9 [ 28.163381][ T331] asix 1-1:0.0 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71 [ 28.173727][ T331] asix 1-1:0.0 (unnamed net_device) (uninitialized): Failed to send software reset: ffffffb9 [ 28.347309][ T331] asix 1-1:0.0 eth1: register 'asix' at usb-dummy_hcd.0-1, ASIX AX88178 USB 2.0 Ethernet, aa:aa:aa:aa:aa:bb [ 28.360233][ T331] usb 1-1: USB disconnect, device number 2 [ 28.366958][ T331] asix 1-1:0.0 eth1: unregister 'asix' usb-dummy_hcd.0-1, ASIX AX88178 USB 2.0 Ethernet [ 28.753208][ T9] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 28.903211][ T9] usb 4-1: Using ep0 maxpacket: 16 [ 28.909967][ T9] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 28.920884][ T9] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 28.931496][ T9] usb 4-1: New USB device found, idVendor=1189, idProduct=0893, bcdDevice= 0.00 [ 28.940632][ T9] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 28.949318][ T9] usb 4-1: Product: syz [ 28.957061][ T9] usb 4-1: Manufacturer: syz [ 28.961689][ T9] usb 4-1: SerialNumber: syz [ 28.967273][ T9] usb 4-1: config 0 descriptor?? [ 28.972855][ T36] kauditd_printk_skb: 96 callbacks suppressed [ 28.972872][ T36] audit: type=1400 audit(1756325448.970:170): avc: denied { create } for pid=464 comm="syz.1.60" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 28.998705][ T36] audit: type=1400 audit(1756325448.970:171): avc: denied { bind } for pid=464 comm="syz.1.60" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 29.018292][ T36] audit: type=1400 audit(1756325448.970:172): avc: denied { listen } for pid=464 comm="syz.1.60" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 29.038113][ T36] audit: type=1400 audit(1756325449.020:173): avc: denied { accept } for pid=464 comm="syz.1.60" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 29.123214][ T65] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 29.273206][ T65] usb 1-1: Using ep0 maxpacket: 16 [ 29.279510][ T65] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 255, changing to 11 [ 29.290934][ T65] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 29.304366][ T65] usb 1-1: New USB device found, idVendor=054c, idProduct=0df2, bcdDevice= 0.00 [ 29.313489][ T65] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 29.322254][ T65] usb 1-1: config 0 descriptor?? [ 29.574431][ T9] asix 4-1:0.0 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71 [ 29.588945][ T36] audit: type=1400 audit(1756325449.580:174): avc: denied { unmount } for pid=294 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 29.589960][ T9] asix 4-1:0.0: probe with driver asix failed with error -71 [ 29.618420][ T9] usb 4-1: USB disconnect, device number 2 [ 29.634827][ T13] Bluetooth: hci0: Frame reassembly failed (-84) [ 29.634846][ T36] audit: type=1400 audit(1756325449.630:175): avc: denied { read } for pid=469 comm="syz.2.62" dev="nsfs" ino=4026532412 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 29.662210][ T36] audit: type=1400 audit(1756325449.630:176): avc: denied { open } for pid=469 comm="syz.2.62" path="net:[4026532412]" dev="nsfs" ino=4026532412 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 29.685310][ T36] audit: type=1400 audit(1756325449.640:177): avc: denied { ioctl } for pid=469 comm="syz.2.62" path="socket:[4721]" dev="sockfs" ino=4721 ioctlcmd=0x48e2 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 29.731793][ T65] playstation 0003:054C:0DF2.0001: unknown main item tag 0x0 [ 29.739262][ T65] playstation 0003:054C:0DF2.0001: unknown main item tag 0x0 [ 29.746797][ T65] playstation 0003:054C:0DF2.0001: unknown main item tag 0x0 [ 29.754261][ T65] playstation 0003:054C:0DF2.0001: unknown main item tag 0x0 [ 29.761643][ T65] playstation 0003:054C:0DF2.0001: item fetching failed at offset 4/5 [ 29.769996][ T65] playstation 0003:054C:0DF2.0001: Parse failed [ 29.776286][ T65] playstation 0003:054C:0DF2.0001: probe with driver playstation failed with error -22 [ 29.941884][ T65] usb 1-1: USB disconnect, device number 3 [ 29.976485][ T36] audit: type=1400 audit(1756325449.970:178): avc: denied { ioctl } for pid=481 comm="syz.1.67" path="/dev/fuse" dev="devtmpfs" ino=23 ioctlcmd=0xe502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fuse_device_t tclass=chr_file permissive=1 [ 30.002057][ T36] audit: type=1400 audit(1756325449.990:179): avc: denied { unmount } for pid=289 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=filesystem permissive=1 [ 30.306615][ T498] kvm: MWAIT instruction emulated as NOP! [ 30.653214][ T9] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 30.803158][ T9] usb 4-1: Using ep0 maxpacket: 32 [ 30.809481][ T9] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 30.820535][ T9] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 30.830331][ T9] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 30.843230][ T9] usb 4-1: New USB device found, idVendor=0458, idProduct=5013, bcdDevice= 0.00 [ 30.852283][ T9] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 30.861197][ T9] usb 4-1: config 0 descriptor?? [ 31.123154][ T62] usb 2-1: new full-speed USB device number 2 using dummy_hcd [ 31.274571][ T62] usb 2-1: unable to get BOS descriptor or descriptor too short [ 31.283728][ T9] input: HID 0458:5013 as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/0003:0458:5013.0002/input/input4 [ 31.295136][ T62] usb 2-1: not running at top speed; connect to a high speed hub [ 31.304647][ T62] usb 2-1: config 14 has an invalid interface number: 16 but max is 0 [ 31.313971][ T9] input: HID 0458:5013 as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/0003:0458:5013.0002/input/input5 [ 31.325651][ T62] usb 2-1: config 14 has an invalid descriptor of length 0, skipping remainder of the config [ 31.337194][ T62] usb 2-1: config 14 has no interface number 0 [ 31.344207][ T9] kye 0003:0458:5013.0002: input,hiddev96,hidraw0: USB HID v0.00 Device [HID 0458:5013] on usb-dummy_hcd.3-1/input0 [ 31.360291][ T62] usb 2-1: config 14 interface 16 altsetting 4 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 31.375433][ T62] usb 2-1: config 14 interface 16 has no altsetting 0 [ 31.383875][ T62] usb 2-1: New USB device found, idVendor=041e, idProduct=3f19, bcdDevice=51.5b [ 31.392971][ T62] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 31.401132][ T62] usb 2-1: Product: syz [ 31.405700][ T62] usb 2-1: Manufacturer: syz [ 31.410357][ T62] usb 2-1: SerialNumber: syz [ 31.488019][ T9] usb 4-1: USB disconnect, device number 3 [ 31.620067][ T62] usb 2-1: unknown interface protocol 0x18, assuming v1 [ 31.627263][ T62] usb 2-1: 16:2 : does not exist [ 31.634275][ T62] usb 2-1: USB disconnect, device number 2 [ 31.642693][ T368] udevd[368]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:14.16/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 31.703191][ T472] Bluetooth: hci0: command 0x1003 tx timeout [ 31.703604][ T53] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 31.731043][ T521] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 31.731078][ T521] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:45 [ 31.783707][ T508] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 31.944746][ T508] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 31.954884][ T508] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 31.964495][ T508] usb 1-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 31.973565][ T508] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 31.981540][ T508] usb 1-1: SerialNumber: syz [ 31.993200][ T9] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 32.108183][ T532] netlink: 188 bytes leftover after parsing attributes in process `syz.3.89'. [ 32.117284][ T532] af_packet: tpacket_rcv: packet too big, clamped from 72 to 4294967272. macoff=96 [ 32.143150][ T9] usb 3-1: Using ep0 maxpacket: 16 [ 32.158362][ T9] usb 3-1: config 1 interface 0 altsetting 93 endpoint 0x81 has an invalid bInterval 60, changing to 9 [ 32.198470][ T508] usb 1-1: 0:2 : does not exist [ 32.203454][ T9] usb 3-1: config 1 interface 0 altsetting 93 bulk endpoint 0x82 has invalid maxpacket 96 [ 32.225017][ T508] usb 1-1: USB disconnect, device number 4 [ 32.230902][ T9] usb 3-1: config 1 interface 0 altsetting 93 bulk endpoint 0x3 has invalid maxpacket 1023 [ 32.241292][ T9] usb 3-1: config 1 interface 0 altsetting 93 has 3 endpoint descriptors, different from the interface descriptor's value: 18 [ 32.255707][ T9] usb 3-1: config 1 interface 0 has no altsetting 0 [ 32.264557][ T9] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 32.273916][ T9] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 32.281916][ T9] usb 3-1: SerialNumber: syz [ 32.287983][ T525] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 32.295304][ T525] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 32.506345][ T525] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 32.514043][ T525] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 32.613189][ T31] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 32.742410][ T565] capability: warning: `syz.0.102' uses deprecated v2 capabilities in a way that may be insecure [ 32.774410][ T31] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 32.785737][ T31] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 32.795901][ T31] usb 2-1: New USB device found, idVendor=28de, idProduct=1142, bcdDevice= 0.00 [ 32.805172][ T31] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 32.814197][ T31] usb 2-1: config 0 descriptor?? [ 32.925056][ T574] batadv_slave_1: entered promiscuous mode [ 32.931909][ T573] batadv_slave_1: left promiscuous mode [ 33.066839][ T582] fuse: Bad value for 'group_id' [ 33.071834][ T582] fuse: Bad value for 'group_id' [ 33.125825][ T9] cdc_ether 3-1:1.0 usb0: register 'cdc_ether' at usb-dummy_hcd.2-1, CDC Ethernet Device, 42:42:42:42:42:42 [ 33.228097][ T31] hid-steam 0003:28DE:1142.0003: : USB HID v0.00 Device [HID 28de:1142] on usb-dummy_hcd.1-1/input0 [ 33.293285][ T31] hid-steam 0003:28DE:1142.0003: Steam wireless receiver connected [ 33.313069][ T31] hid-steam 0003:28DE:1142.0004: hidraw0: USB HID v0.00 Device [HID 28de:1142] on usb-dummy_hcd.1-1/input0 [ 33.357275][ T65] usb 3-1: USB disconnect, device number 3 [ 33.364887][ T65] cdc_ether 3-1:1.0 usb0: unregister 'cdc_ether' usb-dummy_hcd.2-1, CDC Ethernet Device [ 34.217348][ T36] kauditd_printk_skb: 45 callbacks suppressed [ 34.217368][ T36] audit: type=1400 audit(1756325454.210:225): avc: denied { append } for pid=632 comm="syz.3.121" name="001" dev="devtmpfs" ino=114 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 34.290586][ T36] audit: type=1400 audit(1756325454.280:226): avc: denied { wake_alarm } for pid=634 comm="syz.3.122" capability=35 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 34.640270][ T36] audit: type=1400 audit(1756325454.630:227): avc: denied { bind } for pid=644 comm="syz.2.126" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 34.673193][ T36] audit: type=1400 audit(1756325454.660:228): avc: denied { write } for pid=644 comm="syz.2.126" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 34.760950][ T36] audit: type=1400 audit(1756325454.750:229): avc: denied { name_bind } for pid=650 comm="syz.0.129" src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=udp_socket permissive=1 [ 34.806538][ T36] audit: type=1400 audit(1756325454.800:230): avc: denied { mount } for pid=656 comm="syz.3.132" name="/" dev="devtmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=filesystem permissive=1 [ 34.829116][ T36] audit: type=1400 audit(1756325454.800:231): avc: denied { unlink } for pid=656 comm="syz.3.132" name="#3" dev="tmpfs" ino=264 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 34.861378][ T36] audit: type=1400 audit(1756325454.800:232): avc: denied { mount } for pid=656 comm="syz.3.132" name="/" dev="overlay" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 34.891855][ T36] audit: type=1400 audit(1756325454.830:233): avc: denied { unmount } for pid=295 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 34.918825][ T36] audit: type=1400 audit(1756325454.850:234): avc: denied { unmount } for pid=295 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=filesystem permissive=1 [ 34.941075][ T670] batadv_slave_1: entered promiscuous mode [ 34.954980][ T669] batadv_slave_1: left promiscuous mode [ 35.013189][ T65] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 35.123554][ T9] usb 2-1: USB disconnect, device number 3 [ 35.132604][ T9] hid-steam 0003:28DE:1142.0003: Steam wireless receiver disconnected [ 35.173194][ T65] usb 3-1: Using ep0 maxpacket: 16 [ 35.184765][ T65] usb 3-1: config 0 has an invalid interface number: 8 but max is 0 [ 35.190032][ T701] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=44 sclass=netlink_tcpdiag_socket pid=701 comm=syz.1.151 [ 35.203145][ T65] usb 3-1: config 0 has no interface number 0 [ 35.223178][ T65] usb 3-1: config 0 interface 8 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 35.250791][ T65] usb 3-1: config 0 interface 8 altsetting 0 endpoint 0x8F has invalid maxpacket 25296, setting to 1024 [ 35.276664][ T65] usb 3-1: New USB device found, idVendor=0d8c, idProduct=000e, bcdDevice=8e.8f [ 35.290080][ T65] usb 3-1: New USB device strings: Mfr=0, Product=24, SerialNumber=3 [ 35.314074][ T65] usb 3-1: Product: syz [ 35.335351][ T65] usb 3-1: SerialNumber: syz [ 35.347058][ T65] usb 3-1: config 0 descriptor?? [ 35.378642][ T726] netlink: 'syz.1.162': attribute type 4 has an invalid length. [ 35.559778][ T65] usb 3-1: USB disconnect, device number 4 [ 35.625551][ T743] wireguard: wg2: Could not create IPv4 socket [ 35.740842][ T331] rust_binder: 750: removing orphan mapping 0:8 [ 35.993255][ T331] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 36.104760][ T46] Bluetooth: hci0: Frame reassembly failed (-84) [ 36.143242][ T331] usb 1-1: Using ep0 maxpacket: 32 [ 36.155715][ T331] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 36.168980][ T331] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 36.179127][ T331] usb 1-1: New USB device found, idVendor=27b8, idProduct=01ed, bcdDevice= 0.00 [ 36.189975][ T331] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 36.199050][ T331] usb 1-1: config 0 descriptor?? [ 36.403166][ T65] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 36.568478][ T65] usb 4-1: config 6 has an invalid interface number: 132 but max is 0 [ 36.576866][ T65] usb 4-1: config 6 has no interface number 0 [ 36.586008][ T65] usb 4-1: config 6 interface 132 has no altsetting 0 [ 36.594380][ T65] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a2, bcdDevice=d1.6e [ 36.604405][ T65] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 36.610580][ T331] hid-led 0003:27B8:01ED.0005: unknown main item tag 0x7 [ 36.612421][ T65] usb 4-1: Product: syz [ 36.623785][ T65] usb 4-1: Manufacturer: syz [ 36.628380][ T65] usb 4-1: SerialNumber: syz [ 36.840181][ T65] cdc_subset 4-1:6.132: probe with driver cdc_subset failed with error -22 [ 36.852887][ T65] usb 4-1: USB disconnect, device number 4 [ 37.023978][ T331] hid-led 0003:27B8:01ED.0005: hidraw0: USB HID v0.00 Device [HID 27b8:01ed] on usb-dummy_hcd.0-1/input0 [ 37.055930][ T331] hid-led 0003:27B8:01ED.0005: ThingM blink(1) initialized [ 37.231571][ T508] usb 1-1: USB disconnect, device number 5 [ 37.611335][ T879] rust_binder: Error while translating object. [ 37.611386][ T879] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 37.617695][ T879] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:147 [ 37.883188][ T508] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 38.047111][ T508] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 255, changing to 11 [ 38.061160][ T508] usb 4-1: New USB device found, idVendor=046d, idProduct=c295, bcdDevice= 0.00 [ 38.070307][ T508] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 38.086883][ T508] usb 4-1: config 0 descriptor?? [ 38.183321][ T472] Bluetooth: hci0: command 0x1003 tx timeout [ 38.183495][ T53] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 38.219335][ T917] bridge0: port 3(veth1_macvtap) entered blocking state [ 38.226415][ T917] bridge0: port 3(veth1_macvtap) entered disabled state [ 38.233234][ T65] usb 1-1: new full-speed USB device number 6 using dummy_hcd [ 38.233864][ T917] veth1_macvtap: entered allmulticast mode [ 38.247146][ T917] veth1_macvtap: left allmulticast mode [ 38.275651][ T331] rust_binder: 914: removing orphan mapping 0:24 [ 38.384362][ T65] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 38.395470][ T65] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 512, setting to 64 [ 38.406473][ T65] usb 1-1: config 1 interface 1 altsetting 1 endpoint 0x82 has invalid maxpacket 1024, setting to 64 [ 38.407072][ T937] rust_binder: Failed to allocate buffer. len:24, is_oneway:false [ 38.417728][ T65] usb 1-1: config 1 interface 1 altsetting 1 endpoint 0x3 has invalid maxpacket 512, setting to 64 [ 38.437710][ T65] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 38.446958][ T65] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 38.454993][ T65] usb 1-1: Product: syz [ 38.459163][ T65] usb 1-1: Manufacturer: syz [ 38.463894][ T65] usb 1-1: SerialNumber: syz [ 38.470254][ T892] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 38.478091][ T65] cdc_mbim 1-1:1.0: skipping garbage [ 38.499528][ T508] logitech 0003:046D:C295.0006: unbalanced delimiter at end of report description [ 38.509080][ T508] logitech 0003:046D:C295.0006: parse failed [ 38.515163][ T508] logitech 0003:046D:C295.0006: probe with driver logitech failed with error -22 [ 38.680086][ T892] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 38.687428][ T892] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 38.706537][ T508] usb 4-1: USB disconnect, device number 5 [ 39.296454][ T892] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 39.303888][ T892] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 39.311371][ T65] cdc_mbim 1-1:1.0: dwNtbInMaxSize=7 is too small. Using 2048 [ 39.319004][ T65] cdc_mbim 1-1:1.0: setting rx_max = 2048 [ 39.513211][ T863] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 39.520837][ T65] cdc_mbim 1-1:1.0: setting tx_max = 16384 [ 39.527713][ T65] cdc_mbim 1-1:1.0: cdc-wdm0: USB WDM device [ 39.534825][ T65] wwan wwan0: port wwan0mbim0 attached [ 39.541897][ T65] cdc_mbim 1-1:1.0 wwan0: register 'cdc_mbim' at usb-dummy_hcd.0-1, CDC MBIM, fe:3f:3f:f2:35:ac [ 39.554406][ T65] usb 1-1: USB disconnect, device number 6 [ 39.563507][ T65] cdc_mbim 1-1:1.0 wwan0: unregister 'cdc_mbim' usb-dummy_hcd.0-1, CDC MBIM [ 39.594166][ T45] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 39.602273][ T65] wwan wwan0: port wwan0mbim0 disconnected [ 39.673355][ T863] usb 3-1: Using ep0 maxpacket: 8 [ 39.679609][ T863] usb 3-1: config 179 has an invalid interface number: 65 but max is 0 [ 39.688112][ T863] usb 3-1: config 179 has no interface number 0 [ 39.694524][ T863] usb 3-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 39.705597][ T863] usb 3-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024 [ 39.716849][ T863] usb 3-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 39.728323][ T863] usb 3-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 41728, setting to 1024 [ 39.740022][ T863] usb 3-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 39.753424][ T863] usb 3-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 39.762523][ T863] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 39.771354][ T45] usb 4-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 39.782998][ T45] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 39.783609][ T948] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 39.794052][ T45] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 39.812969][ T45] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 39.826868][ T45] usb 4-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40 [ 39.836003][ T45] usb 4-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0 [ 39.844146][ T45] usb 4-1: Manufacturer: syz [ 39.850078][ T45] usb 4-1: config 0 descriptor?? [ 40.018586][ T863] input: Generic X-Box pad as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:179.65/input/input7 [ 40.218477][ T948] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 40.227366][ T948] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 40.259181][ T45] appleir 0003:05AC:8243.0007: unknown main item tag 0x0 [ 40.267794][ T45] appleir 0003:05AC:8243.0007: No inputs registered, leaving [ 40.275034][ T36] kauditd_printk_skb: 32 callbacks suppressed [ 40.275051][ T36] audit: type=1400 audit(1756325460.260:267): avc: denied { write } for pid=957 comm="syz.1.269" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 40.277157][ T45] appleir 0003:05AC:8243.0007: hiddev96,hidraw0: USB HID v0.00 Device [syz] on usb-dummy_hcd.3-1/input0 [ 40.290558][ T508] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 40.437169][ T331] usb 3-1: USB disconnect, device number 5 [ 40.437169][ C1] xpad 3-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19 [ 40.451512][ C1] dummy_hcd dummy_hcd.2: timer fired with no URBs pending? [ 40.451521][ T331] xpad 3-1:179.65: xpad_try_sending_next_out_packet - usb_submit_urb failed with result -19 [ 40.483208][ T508] usb 1-1: Using ep0 maxpacket: 16 [ 40.489613][ T508] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 40.500617][ T508] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 40.514818][ T508] usb 1-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 40.524245][ T508] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 40.532999][ T508] usb 1-1: config 0 descriptor?? [ 40.543636][ T9] usb 4-1: USB disconnect, device number 6 [ 40.952074][ T508] input: HID 045e:07da as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/0003:045E:07DA.0008/input/input8 [ 40.973565][ T508] microsoft 0003:045E:07DA.0008: input,hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.0-1/input0 [ 41.094683][ T36] audit: type=1400 audit(1756325461.090:268): avc: denied { ioctl } for pid=970 comm="syz.3.274" path="pid:[4026532398]" dev="nsfs" ino=4026532398 ioctlcmd=0xb708 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 41.119630][ T36] audit: type=1400 audit(1756325461.100:269): avc: denied { create } for pid=970 comm="syz.3.274" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 41.139272][ T36] audit: type=1326 audit(1756325461.120:270): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=972 comm="syz.3.275" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4af7f8ebe9 code=0x7ffc0000 [ 41.152971][ T45] usb 1-1: USB disconnect, device number 7 [ 41.164200][ T36] audit: type=1326 audit(1756325461.120:271): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=972 comm="syz.3.275" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4af7f8ebe9 code=0x7ffc0000 [ 41.178864][ T975] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 41.191936][ T36] audit: type=1326 audit(1756325461.120:272): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=972 comm="syz.3.275" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4af7f8ebe9 code=0x7ffc0000 [ 41.203521][ T463] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 41.231813][ T36] audit: type=1326 audit(1756325461.120:273): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=972 comm="syz.3.275" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f4af7f8ebe9 code=0x7ffc0000 [ 41.257538][ T36] audit: type=1326 audit(1756325461.120:274): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=972 comm="syz.3.275" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4af7f8ebe9 code=0x7ffc0000 [ 41.282356][ T36] audit: type=1326 audit(1756325461.120:275): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=972 comm="syz.3.275" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4af7f8ebe9 code=0x7ffc0000 [ 41.305933][ T36] audit: type=1326 audit(1756325461.120:276): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=972 comm="syz.3.275" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4af7f8ebe9 code=0x7ffc0000 [ 41.383253][ T463] usb 3-1: Using ep0 maxpacket: 32 [ 41.389790][ T463] usb 3-1: config 0 has an invalid interface number: 67 but max is 0 [ 41.393951][ T994] x_tables: duplicate underflow at hook 4 [ 41.398403][ T463] usb 3-1: config 0 has no interface number 0 [ 41.411624][ T463] usb 3-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 41.420911][ T463] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 41.430069][ T463] usb 3-1: Product: syz [ 41.434968][ T463] usb 3-1: Manufacturer: syz [ 41.439651][ T463] usb 3-1: SerialNumber: syz [ 41.445385][ T463] usb 3-1: config 0 descriptor?? [ 41.451564][ T463] smsc95xx v2.0.0 [ 41.694618][ T1012] netlink: 'syz.1.293': attribute type 4 has an invalid length. [ 42.053858][ T463] smsc95xx 3-1:0.67 (unnamed net_device) (uninitialized): Failed to write reg index 0x00000030: -71 [ 42.064833][ T463] smsc95xx 3-1:0.67 (unnamed net_device) (uninitialized): Error writing E2P_CMD [ 42.074980][ T463] smsc95xx 3-1:0.67 (unnamed net_device) (uninitialized): Failed to write reg index 0x00000014: -71 [ 42.086137][ T463] smsc95xx 3-1:0.67: probe with driver smsc95xx failed with error -71 [ 42.097085][ T463] usb 3-1: USB disconnect, device number 6 [ 42.851202][ T1065] kvm_intel: kvm [1064]: vcpu0, guest rIP: 0xfff0 Unhandled WRMSR(0x1d9) = 0x1 [ 42.947318][ T1069] usb usb9: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 43.010411][ T1076] capability: warning: `syz.0.322' uses 32-bit capabilities (legacy support in use) [ 43.463221][ T1118] input: syz1 as /devices/virtual/input/input9 [ 43.479188][ T1118] input: failed to attach handler leds to device input9, error: -6 [ 43.699444][ T1137] mmap: syz.3.347 (1137) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 43.918764][ T1173] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 43.923675][ T1174] netlink: 277 bytes leftover after parsing attributes in process `syz.3.364'. [ 44.123169][ T9] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 44.283196][ T45] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 44.283206][ T9] usb 3-1: Using ep0 maxpacket: 16 [ 44.297013][ T9] usb 3-1: config 0 has an invalid interface number: 1 but max is 0 [ 44.305220][ T9] usb 3-1: config 0 has no interface number 0 [ 44.311315][ T9] usb 3-1: config 0 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 44.322207][ T9] usb 3-1: config 0 interface 1 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 44.332002][ T9] usb 3-1: New USB device found, idVendor=28bd, idProduct=0071, bcdDevice= 0.00 [ 44.341138][ T9] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 44.349829][ T9] usb 3-1: config 0 descriptor?? [ 44.373215][ T463] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 44.433177][ T45] usb 2-1: Using ep0 maxpacket: 32 [ 44.439585][ T45] usb 2-1: config 4 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 44.450753][ T45] usb 2-1: config 4 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 44.461690][ T45] usb 2-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 44.470825][ T45] usb 2-1: New USB device strings: Mfr=255, Product=255, SerialNumber=0 [ 44.479290][ T45] usb 2-1: Product: syz [ 44.483488][ T45] usb 2-1: Manufacturer: syz [ 44.490975][ T45] hub 2-1:4.0: USB hub found [ 44.524387][ T463] usb 1-1: config index 0 descriptor too short (expected 45, got 36) [ 44.532640][ T463] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 255, changing to 11 [ 44.545075][ T463] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 59391, setting to 1024 [ 44.556330][ T463] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 44.569286][ T463] usb 1-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 44.578361][ T463] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 44.587182][ T463] usb 1-1: config 0 descriptor?? [ 44.592483][ T1199] raw-gadget.2 gadget.0: fail, usb_ep_enable returned -22 [ 44.690705][ T45] hub 2-1:4.0: 2 ports detected [ 44.893144][ T10] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 44.960031][ T9] input: HID 28bd:0071 as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.1/0003:28BD:0071.0009/input/input10 [ 44.973366][ T9] input: HID 28bd:0071 as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.1/0003:28BD:0071.0009/input/input11 [ 44.986234][ T9] uclogic 0003:28BD:0071.0009: input,hidraw0: USB HID v0.02 Keypad [HID 28bd:0071] on usb-dummy_hcd.2-1/input1 [ 45.003282][ T463] plantronics 0003:047F:FFFF.000A: unknown main item tag 0xd [ 45.014547][ T463] plantronics 0003:047F:FFFF.000A: No inputs registered, leaving [ 45.025267][ T463] plantronics 0003:047F:FFFF.000A: hiddev96,hidraw1: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.0-1/input0 [ 45.044326][ T10] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 45.055385][ T10] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 45.065408][ T10] usb 4-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.00 [ 45.074485][ T10] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 45.083342][ T10] usb 4-1: config 0 descriptor?? [ 45.091423][ T45] hub 2-1:4.0: set hub depth failed [ 45.102786][ T45] usb 2-1: USB disconnect, device number 4 [ 45.160670][ T9] usb 3-1: USB disconnect, device number 7 [ 45.264178][ T331] usb 1-1: USB disconnect, device number 8 [ 45.490781][ T10] cp2112 0003:10C4:EA90.000B: unknown main item tag 0x0 [ 45.498556][ T10] cp2112 0003:10C4:EA90.000B: hidraw0: USB HID v0.00 Device [HID 10c4:ea90] on usb-dummy_hcd.3-1/input0 [ 45.690488][ T10] cp2112 0003:10C4:EA90.000B: Part Number: 0x82 Device Version: 0xFE [ 45.714292][ T317] Bluetooth: hci0: Frame reassembly failed (-84) [ 45.843156][ T45] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 46.005979][ T45] usb 2-1: Using ep0 maxpacket: 16 [ 46.012332][ T45] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 46.023690][ T45] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 46.033918][ T45] usb 2-1: New USB device found, idVendor=04f3, idProduct=0755, bcdDevice= 0.00 [ 46.043584][ T45] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 46.050780][ T36] kauditd_printk_skb: 29 callbacks suppressed [ 46.050796][ T36] audit: type=1400 audit(1756325466.040:306): avc: denied { getopt } for pid=1229 comm="syz.0.389" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 46.052698][ T45] usb 2-1: config 0 descriptor?? [ 46.091280][ T10] cp2112 0003:10C4:EA90.000B: error setting SMBus config [ 46.099712][ T10] cp2112 0003:10C4:EA90.000B: probe with driver cp2112 failed with error -71 [ 46.110158][ T10] usb 4-1: USB disconnect, device number 7 [ 46.190367][ T36] audit: type=1400 audit(1756325466.180:307): avc: denied { read } for pid=1233 comm="syz.0.391" name="usbmon7" dev="devtmpfs" ino=112 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 46.214900][ T36] audit: type=1400 audit(1756325466.180:308): avc: denied { open } for pid=1233 comm="syz.0.391" path="/dev/usbmon7" dev="devtmpfs" ino=112 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 46.262708][ T1240] ======================================================= [ 46.262708][ T1240] WARNING: The mand mount option has been deprecated and [ 46.262708][ T1240] and is ignored by this kernel. Remove the mand [ 46.262708][ T1240] option from the mount to silence this warning. [ 46.262708][ T1240] ======================================================= [ 46.298522][ T36] audit: type=1400 audit(1756325466.290:309): avc: denied { mount } for pid=1239 comm="syz.0.394" name="/" dev="sysfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=filesystem permissive=1 [ 46.320529][ T36] audit: type=1400 audit(1756325466.290:310): avc: denied { mounton } for pid=1239 comm="syz.0.394" path="/87/file0" dev="sysfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=dir permissive=1 [ 46.343021][ T36] audit: type=1400 audit(1756325466.340:311): avc: denied { unmount } for pid=293 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=filesystem permissive=1 [ 46.370175][ T36] audit: type=1400 audit(1756325466.340:312): avc: denied { bind } for pid=1243 comm="syz.0.396" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 46.521034][ T1206] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 46.530306][ T1206] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 46.539984][ T45] hid-generic 0003:04F3:0755.000C: failed to start in urb: -90 [ 46.548266][ T45] hid-generic 0003:04F3:0755.000C: hidraw0: USB HID v0.00 Device [HID 04f3:0755] on usb-dummy_hcd.1-1/input0 [ 46.741132][ T9] usb 2-1: USB disconnect, device number 5 [ 46.747148][ T10] usb 1-1: new high-speed USB device number 9 using dummy_hcd [ 46.903189][ T10] usb 1-1: Using ep0 maxpacket: 32 [ 46.909468][ T10] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 255, changing to 11 [ 46.920846][ T10] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 59391, setting to 1024 [ 46.932198][ T10] usb 1-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 46.941340][ T10] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 46.949945][ T10] usb 1-1: config 0 descriptor?? [ 46.955333][ T1260] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 46.963290][ T10] hub 1-1:0.0: USB hub found [ 47.164079][ T10] hub 1-1:0.0: 1 port detected [ 47.740344][ T36] audit: type=1400 audit(1756325467.730:313): avc: denied { getopt } for pid=1286 comm="syz.3.415" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 47.764647][ T1289] overlayfs: fs on './file0' does not support file handles, falling back to xino=off. [ 47.783177][ T53] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 47.789397][ T472] Bluetooth: hci0: command 0x1003 tx timeout [ 47.977642][ T10] hub 1-1:0.0: hub_ext_port_status failed (err = -71) [ 47.977786][ T863] usb 1-1: USB disconnect, device number 9 [ 48.073239][ T45] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 48.093195][ T9] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 48.223210][ T45] usb 4-1: Using ep0 maxpacket: 16 [ 48.229565][ T45] usb 4-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 48.238899][ T45] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 48.253154][ T9] usb 3-1: Using ep0 maxpacket: 32 [ 48.254774][ T45] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 48.268917][ T45] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 48.278121][ T45] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 48.278248][ T9] usb 3-1: config 0 has an invalid interface number: 184 but max is 0 [ 48.286245][ T45] usb 4-1: Product: syz [ 48.300870][ T45] usb 4-1: Manufacturer: syz [ 48.305611][ T45] usb 4-1: SerialNumber: syz [ 48.310692][ T9] usb 3-1: config 0 has no interface number 0 [ 48.321850][ T9] usb 3-1: config 0 interface 184 has no altsetting 0 [ 48.337716][ T9] usb 3-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 48.347311][ T9] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 48.356387][ T9] usb 3-1: Product: syz [ 48.360560][ T9] usb 3-1: Manufacturer: syz [ 48.365281][ T9] usb 3-1: SerialNumber: syz [ 48.367124][ T1305] process 'syz.1.424' launched '/dev/fd/3/./file1' with NULL argv: empty string added [ 48.370592][ T9] usb 3-1: config 0 descriptor?? [ 48.386054][ T9] smsc75xx v1.0.0 [ 48.718948][ T45] usb 4-1: 0:2 : does not exist [ 48.853332][ T463] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 48.987970][ T9] smsc75xx 3-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000040: -32 [ 48.999189][ T9] smsc75xx 3-1:0.184 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 49.013182][ T463] usb 2-1: Using ep0 maxpacket: 32 [ 49.019499][ T463] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 49.030538][ T463] usb 2-1: New USB device found, idVendor=1e7d, idProduct=2d51, bcdDevice= 0.00 [ 49.039785][ T463] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 49.048707][ T463] usb 2-1: config 0 descriptor?? [ 49.209089][ T9] smsc75xx 3-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000010: -71 [ 49.220038][ T9] smsc75xx 3-1:0.184 (unnamed net_device) (uninitialized): Failed to read HW_CFG: -71 [ 49.229792][ T9] smsc75xx 3-1:0.184 (unnamed net_device) (uninitialized): smsc75xx_reset error -71 [ 49.239643][ T9] smsc75xx 3-1:0.184: probe with driver smsc75xx failed with error -71 [ 49.249721][ T9] usb 3-1: USB disconnect, device number 8 [ 49.281546][ T36] audit: type=1400 audit(1756325469.270:314): avc: denied { load_policy } for pid=1331 comm="syz.0.437" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security permissive=1 [ 49.286384][ T1332] SELinux: failed to load policy [ 49.337029][ T36] audit: type=1400 audit(1756325469.330:315): avc: denied { write } for pid=1335 comm="syz.0.439" name="file2" dev="tmpfs" ino=554 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 49.337092][ T45] usb 4-1: 1:0: failed to get current value for ch 0 (-22) [ 49.383373][ T45] usb 4-1: USB disconnect, device number 8 [ 49.458864][ T463] koneplus 0003:1E7D:2D51.000D: unknown main item tag 0x0 [ 49.466453][ T463] koneplus 0003:1E7D:2D51.000D: unknown main item tag 0x0 [ 49.473728][ T463] koneplus 0003:1E7D:2D51.000D: unknown main item tag 0x0 [ 49.481058][ T463] koneplus 0003:1E7D:2D51.000D: unknown main item tag 0x0 [ 49.488246][ T463] koneplus 0003:1E7D:2D51.000D: unknown main item tag 0x0 [ 49.496014][ T463] koneplus 0003:1E7D:2D51.000D: hidraw0: USB HID v0.00 Device [HID 1e7d:2d51] on usb-dummy_hcd.1-1/input0 [ 49.714986][ T463] koneplus 0003:1E7D:2D51.000D: couldn't init struct koneplus_device [ 49.723257][ T463] koneplus 0003:1E7D:2D51.000D: couldn't install mouse [ 49.730595][ T463] koneplus 0003:1E7D:2D51.000D: probe with driver koneplus failed with error -71 [ 49.741270][ T463] usb 2-1: USB disconnect, device number 6 [ 49.921895][ T1358] incfs: Unexpected inode type [ 49.930809][ T295] ------------[ cut here ]------------ [ 49.936341][ T295] WARNING: CPU: 1 PID: 295 at fs/inode.c:340 drop_nlink+0xce/0x110 [ 49.944687][ T295] Modules linked in: [ 49.948622][ T295] CPU: 1 UID: 0 PID: 295 Comm: syz-executor Not tainted syzkaller #0 530b3ddaa03db34d09c0fae50fba32de8d319ece [ 49.960305][ T295] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/14/2025 [ 49.970418][ T295] RIP: 0010:drop_nlink+0xce/0x110 [ 49.975644][ T295] Code: 04 00 00 be 08 00 00 00 e8 6f 48 ee ff f0 48 ff 83 b8 04 00 00 5b 41 5c 41 5d 41 5e 41 5f 5d c3 cc cc cc cc cc e8 d2 1c 98 ff <0f> 0b eb 81 44 89 f1 80 e1 07 80 c1 03 38 c1 0f 8c 59 ff ff ff 4c [ 49.995426][ T295] RSP: 0018:ffffc9000b70fc60 EFLAGS: 00010293 [ 50.001538][ T295] RAX: ffffffff81edc76e RBX: ffff88810a7fad10 RCX: ffff888103711300 [ 50.009565][ T295] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 50.017602][ T295] RBP: ffffc9000b70fc88 R08: 0000000000000003 R09: 0000000000000004 [ 50.025688][ T295] R10: dffffc0000000000 R11: fffff520016e1f7c R12: dffffc0000000000 [ 50.033707][ T295] R13: 1ffff110214ff5ab R14: ffff88810a7fad58 R15: 0000000000000000 [ 50.041690][ T295] FS: 00005555694dc500(0000) GS:ffff8881f6f00000(0000) knlGS:0000000000000000 [ 50.050656][ T295] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 50.057295][ T295] CR2: 00005555694ff4e8 CR3: 0000000129f84000 CR4: 00000000003526b0 [ 50.065296][ T295] Call Trace: [ 50.068674][ T295] [ 50.071598][ T295] shmem_rmdir+0x5f/0x90 [ 50.075887][ T295] vfs_rmdir+0x3e0/0x560 [ 50.080149][ T295] incfs_kill_sb+0x109/0x230 [ 50.084761][ T295] deactivate_locked_super+0xd5/0x2a0 [ 50.090150][ T295] deactivate_super+0xb8/0xe0 [ 50.094891][ T295] cleanup_mnt+0x3f1/0x480 [ 50.099326][ T295] __cleanup_mnt+0x1d/0x40 [ 50.103846][ T295] task_work_run+0x1e3/0x250 [ 50.108458][ T295] ? __cfi_task_work_run+0x10/0x10 [ 50.113612][ T295] ? __x64_sys_umount+0x126/0x170 [ 50.118745][ T295] ? __cfi___x64_sys_umount+0x10/0x10 [ 50.124142][ T295] ? __kasan_check_read+0x15/0x20 [ 50.129186][ T295] resume_user_mode_work+0x36/0x50 [ 50.134331][ T295] syscall_exit_to_user_mode+0x64/0xb0 [ 50.139981][ T295] do_syscall_64+0x64/0xf0 [ 50.144447][ T295] ? clear_bhb_loop+0x50/0xa0 [ 50.149133][ T295] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 50.155050][ T295] RIP: 0033:0x7f4af7f8ff17 [ 50.159474][ T295] Code: a8 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 0f 1f 44 00 00 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 a8 ff ff ff f7 d8 64 89 02 b8 [ 50.179108][ T295] RSP: 002b:00007ffede548e28 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6 [ 50.187733][ T295] RAX: 0000000000000000 RBX: 0000000000000000 RCX: 00007f4af7f8ff17 [ 50.195744][ T295] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffede548ee0 [ 50.203766][ T295] RBP: 00007ffede548ee0 R08: 0000000000000000 R09: 0000000000000000 [ 50.211840][ T295] R10: 00000000ffffffff R11: 0000000000000246 R12: 00007ffede549f70 [ 50.219847][ T295] R13: 00007f4af8011c05 R14: 000000000000c2f0 R15: 00007ffede549fb0 [ 50.227886][ T295] [ 50.230937][ T295] ---[ end trace 0000000000000000 ]--- [ 50.238224][ T295] ================================================================== [ 50.246517][ T295] BUG: KASAN: null-ptr-deref in ihold+0x24/0x70 [ 50.253386][ T295] Write of size 4 at addr 0000000000000168 by task syz-executor/295 [ 50.261570][ T295] [ 50.263907][ T295] CPU: 0 UID: 0 PID: 295 Comm: syz-executor Tainted: G W syzkaller #0 530b3ddaa03db34d09c0fae50fba32de8d319ece [ 50.263929][ T295] Tainted: [W]=WARN [ 50.263933][ T295] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/14/2025 [ 50.263941][ T295] Call Trace: [ 50.263946][ T295] [ 50.263952][ T295] __dump_stack+0x21/0x30 [ 50.263973][ T295] dump_stack_lvl+0x10c/0x190 [ 50.263987][ T295] ? __cfi_dump_stack_lvl+0x10/0x10 [ 50.264003][ T295] print_report+0x3d/0x70 [ 50.264015][ T295] kasan_report+0x163/0x1a0 [ 50.264029][ T295] ? ihold+0x24/0x70 [ 50.264041][ T295] ? _raw_spin_unlock+0x45/0x60 [ 50.264056][ T295] ? ihold+0x24/0x70 [ 50.264067][ T295] kasan_check_range+0x299/0x2a0 [ 50.264080][ T295] __kasan_check_write+0x18/0x20 [ 50.264096][ T295] ihold+0x24/0x70 [ 50.264108][ T295] vfs_rmdir+0x26a/0x560 [ 50.264122][ T295] incfs_kill_sb+0x109/0x230 [ 50.264138][ T295] deactivate_locked_super+0xd5/0x2a0 [ 50.264154][ T295] deactivate_super+0xb8/0xe0 [ 50.264168][ T295] cleanup_mnt+0x3f1/0x480 [ 50.264181][ T295] __cleanup_mnt+0x1d/0x40 [ 50.264192][ T295] task_work_run+0x1e3/0x250 [ 50.264206][ T295] ? __cfi_task_work_run+0x10/0x10 [ 50.264219][ T295] ? __x64_sys_umount+0x126/0x170 [ 50.264237][ T295] ? __cfi___x64_sys_umount+0x10/0x10 [ 50.264252][ T295] ? __kasan_check_read+0x15/0x20 [ 50.264267][ T295] resume_user_mode_work+0x36/0x50 [ 50.264282][ T295] syscall_exit_to_user_mode+0x64/0xb0 [ 50.264294][ T295] do_syscall_64+0x64/0xf0 [ 50.264308][ T295] ? clear_bhb_loop+0x50/0xa0 [ 50.264320][ T295] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 50.264337][ T295] RIP: 0033:0x7f4af7f8ff17 [ 50.264349][ T295] Code: a8 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 0f 1f 44 00 00 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 a8 ff ff ff f7 d8 64 89 02 b8 [ 50.264359][ T295] RSP: 002b:00007ffede548e28 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6 [ 50.264374][ T295] RAX: 0000000000000000 RBX: 0000000000000000 RCX: 00007f4af7f8ff17 [ 50.264382][ T295] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffede548ee0 [ 50.264390][ T295] RBP: 00007ffede548ee0 R08: 0000000000000000 R09: 0000000000000000 [ 50.264398][ T295] R10: 00000000ffffffff R11: 0000000000000246 R12: 00007ffede549f70 [ 50.264406][ T295] R13: 00007f4af8011c05 R14: 000000000000c2f0 R15: 00007ffede549fb0 [ 50.264416][ T295] [ 50.264421][ T295] ================================================================== [ 50.510608][ T295] Disabling lock debugging due to kernel taint [ 50.519454][ T295] BUG: kernel NULL pointer dereference, address: 0000000000000168 [ 50.527382][ T295] #PF: supervisor write access in kernel mode [ 50.533456][ T295] #PF: error_code(0x0002) - not-present page [ 50.539439][ T295] PGD 800000010d356067 P4D 800000010d356067 PUD 0 [ 50.545971][ T295] Oops: Oops: 0002 [#1] PREEMPT SMP KASAN PTI [ 50.552054][ T295] CPU: 0 UID: 0 PID: 295 Comm: syz-executor Tainted: G B W syzkaller #0 530b3ddaa03db34d09c0fae50fba32de8d319ece [ 50.565354][ T295] Tainted: [B]=BAD_PAGE, [W]=WARN [ 50.570391][ T295] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/14/2025 [ 50.580458][ T295] RIP: 0010:ihold+0x2a/0x70 [ 50.584979][ T295] Code: f3 0f 1e fa 55 48 89 e5 41 56 53 48 89 fb e8 bd 13 98 ff 48 8d bb 68 01 00 00 be 04 00 00 00 e8 2c 3f ee ff 41 be 01 00 00 00 44 0f c1 b3 68 01 00 00 41 ff c6 bf 02 00 00 00 44 89 f6 e8 cd [ 50.604687][ T295] RSP: 0018:ffffc9000b70fca0 EFLAGS: 00010246 [ 50.610755][ T295] RAX: ffff888103711300 RBX: 0000000000000000 RCX: ffff888103711300 [ 50.618812][ T295] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 50.626782][ T295] RBP: ffffc9000b70fcb0 R08: ffffffff8896a947 R09: 1ffffffff112d528 [ 50.634840][ T295] R10: dffffc0000000000 R11: fffffbfff112d529 R12: ffff88810a7fad1c [ 50.642811][ T295] R13: 0000000000000000 R14: 0000000000000001 R15: 0000000000000000 [ 50.650788][ T295] FS: 00005555694dc500(0000) GS:ffff8881f6e00000(0000) knlGS:0000000000000000 [ 50.659716][ T295] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 50.666298][ T295] CR2: 0000000000000168 CR3: 0000000129f84000 CR4: 00000000003526b0 [ 50.674311][ T295] Call Trace: [ 50.677606][ T295] [ 50.680554][ T295] vfs_rmdir+0x26a/0x560 [ 50.684832][ T295] incfs_kill_sb+0x109/0x230 [ 50.689454][ T295] deactivate_locked_super+0xd5/0x2a0 [ 50.694917][ T295] deactivate_super+0xb8/0xe0 [ 50.699598][ T295] cleanup_mnt+0x3f1/0x480 [ 50.704042][ T295] __cleanup_mnt+0x1d/0x40 [ 50.708548][ T295] task_work_run+0x1e3/0x250 [ 50.713319][ T295] ? __cfi_task_work_run+0x10/0x10 [ 50.718456][ T295] ? __x64_sys_umount+0x126/0x170 [ 50.723750][ T295] ? __cfi___x64_sys_umount+0x10/0x10 [ 50.729252][ T295] ? __kasan_check_read+0x15/0x20 [ 50.734395][ T295] resume_user_mode_work+0x36/0x50 [ 50.739532][ T295] syscall_exit_to_user_mode+0x64/0xb0 [ 50.745009][ T295] do_syscall_64+0x64/0xf0 [ 50.749435][ T295] ? clear_bhb_loop+0x50/0xa0 [ 50.755162][ T295] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 50.761145][ T295] RIP: 0033:0x7f4af7f8ff17 [ 50.765567][ T295] Code: a8 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 0f 1f 44 00 00 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 a8 ff ff ff f7 d8 64 89 02 b8 [ 50.785260][ T295] RSP: 002b:00007ffede548e28 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6 [ 50.793685][ T295] RAX: 0000000000000000 RBX: 0000000000000000 RCX: 00007f4af7f8ff17 [ 50.801659][ T295] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffede548ee0 [ 50.809626][ T295] RBP: 00007ffede548ee0 R08: 0000000000000000 R09: 0000000000000000 [ 50.817601][ T295] R10: 00000000ffffffff R11: 0000000000000246 R12: 00007ffede549f70 [ 50.825664][ T295] R13: 00007f4af8011c05 R14: 000000000000c2f0 R15: 00007ffede549fb0 [ 50.833667][ T295] [ 50.836682][ T295] Modules linked in: [ 50.840569][ T295] CR2: 0000000000000168 [ 50.844714][ T295] ---[ end trace 0000000000000000 ]--- [ 50.850169][ T295] RIP: 0010:ihold+0x2a/0x70 [ 50.854690][ T295] Code: f3 0f 1e fa 55 48 89 e5 41 56 53 48 89 fb e8 bd 13 98 ff 48 8d bb 68 01 00 00 be 04 00 00 00 e8 2c 3f ee ff 41 be 01 00 00 00 44 0f c1 b3 68 01 00 00 41 ff c6 bf 02 00 00 00 44 89 f6 e8 cd [ 50.874315][ T295] RSP: 0018:ffffc9000b70fca0 EFLAGS: 00010246 [ 50.880395][ T295] RAX: ffff888103711300 RBX: 0000000000000000 RCX: ffff888103711300 [ 50.888377][ T295] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 50.896348][ T295] RBP: ffffc9000b70fcb0 R08: ffffffff8896a947 R09: 1ffffffff112d528 [ 50.904315][ T295] R10: dffffc0000000000 R11: fffffbfff112d529 R12: ffff88810a7fad1c [ 50.912292][ T295] R13: 0000000000000000 R14: 0000000000000001 R15: 0000000000000000 [ 50.920370][ T295] FS: 00005555694dc500(0000) GS:ffff8881f6e00000(0000) knlGS:0000000000000000 [ 50.929322][ T295] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 50.935909][ T295] CR2: 0000000000000168 CR3: 0000000129f84000 CR4: 00000000003526b0 [ 50.943977][ T295] Kernel panic - not syncing: Fatal exception [ 50.950315][ T295] Kernel Offset: disabled [ 50.954638][ T295] Rebooting in 86400 seconds..