last executing test programs: 1m16.061317258s ago: executing program 1 (id=746): r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000002c0)=ANY=[], 0xf0}}, 0x804) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000002c0)=ANY=[@ANYBLOB="44000000140001b66fb1b313ba36db000a0000000400000014000100fd010000000000000000000000000001150006"], 0x44}, 0x1, 0x0, 0x0, 0x4018}, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) writev(r0, &(0x7f0000000040)=[{0x0}], 0x1) 1m16.048990189s ago: executing program 1 (id=747): close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f00000002c0)={{0x0, 0x5, 0x0, 0x25}, 'syz0\x00', 0x53}) 1m16.03723089s ago: executing program 1 (id=748): r0 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$inet6_udp_int(r0, 0x11, 0x67, &(0x7f0000000000)=0x91, 0x4) setsockopt$sock_linger(r0, 0x1, 0x3c, &(0x7f0000000040)={0x200000000000001}, 0x8) connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e25, 0x1, @mcast2, 0x5}, 0x1c) sendmmsg$inet6(r0, &(0x7f0000000100)=[{{0x0, 0x0, &(0x7f0000000140)=[{&(0x7f00000001c0)="d3f04bb4604aed32226e529c8812223fc4797c733f8176720c3ad91b943b1ad6f8027b3cc582e5502433b313659a57fa991300b16a4529482443b67e8a41483837b5f9f422cb9d69b64f69b4bb9d3fdc2907e8201322498ed0448ce67f43a68a92938a420012241f6712e9dc52e38a6aed925779287435d8441c3f33760552e488dc42bcadd66a5e1643c45095a0aaae13af", 0x92}], 0x1}, 0x7101}], 0x1, 0x4001c00) 1m16.023607702s ago: executing program 1 (id=749): mkdirat(0xffffffffffffff9c, &(0x7f0000000400)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000440)='./sys\x00', &(0x7f0000000480)='sysfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mount$bind(&(0x7f0000000140)='.\x00', &(0x7f00000001c0)='./file0/../file0\x00', 0x0, 0x2a05404, 0x0) umount2(&(0x7f0000000280)='./file0\x00', 0xc) 1m16.011379843s ago: executing program 1 (id=750): unshare(0x44040200) setsockopt$ARPT_SO_SET_ADD_COUNTERS(0xffffffffffffffff, 0x0, 0x60, &(0x7f0000000080)={'filter\x00', 0x4, [{0x11}, {0x0, 0x100000000000000}]}, 0x68) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$IP6T_SO_GET_ENTRIES(r0, 0x29, 0x41, &(0x7f0000000080)=ANY=[], &(0x7f0000000180)=0x2c) getsockopt$IP6T_SO_GET_INFO(r0, 0x29, 0x40, &(0x7f0000000000)={'raw\x00', 0x0, [0xc7f, 0x0, 0xe, 0x8, 0x1]}, &(0x7f0000000200)=0x54) 1m15.902787534s ago: executing program 1 (id=755): mkdirat(0xffffffffffffff9c, &(0x7f00000002c0)='./tracing\x00', 0x1ff) mount(0x0, &(0x7f0000000300)='./tracing\x00', &(0x7f0000000340)='tracefs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000380)='./tracing/events/sched/filter\x00', 0x1, 0x15d) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x0, 0x31, 0xffffffffffffffff, 0xffffe000) write(r0, &(0x7f00000003c0)='\f0', 0x2) 1m15.884320746s ago: executing program 32 (id=755): mkdirat(0xffffffffffffff9c, &(0x7f00000002c0)='./tracing\x00', 0x1ff) mount(0x0, &(0x7f0000000300)='./tracing\x00', &(0x7f0000000340)='tracefs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000380)='./tracing/events/sched/filter\x00', 0x1, 0x15d) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x0, 0x31, 0xffffffffffffffff, 0xffffe000) write(r0, &(0x7f00000003c0)='\f0', 0x2) 1m11.650415652s ago: executing program 2 (id=815): r0 = socket$unix(0x1, 0x1, 0x0) bind$unix(r0, &(0x7f0000000080)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) listen(r0, 0x2) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) accept(r0, 0x0, 0x0) 1m11.473743319s ago: executing program 2 (id=816): r0 = socket$inet(0x2, 0x1, 0x0) setsockopt$inet_mreqn(r0, 0x0, 0x27, &(0x7f0000000000)={@multicast1, @dev={0xac, 0x14, 0x14, 0x32}}, 0xc) setsockopt$inet_mreqn(r0, 0x0, 0x27, &(0x7f0000000100)={@multicast2, @local}, 0xc) getpid() r1 = syz_open_procfs(0x0, &(0x7f0000002180)='net/mcfilter\x00') preadv(r1, &(0x7f0000003200)=[{&(0x7f0000001a40)=""/75, 0x4b}, {&(0x7f0000000140)=""/187, 0xbb}], 0x2, 0x3, 0x0) 1m11.451335712s ago: executing program 2 (id=817): r0 = inotify_init() inotify_add_watch(r0, &(0x7f00000001c0)='.\x00', 0x5db) symlinkat(&(0x7f0000000200)='.\x00', 0xffffffffffffff9c, &(0x7f0000000240)='./file1\x00') r1 = inotify_init() inotify_add_watch(r1, &(0x7f0000000280)='.\x00', 0x1400037e) inotify_add_watch(r0, &(0x7f00000002c0)='./file1\x00', 0xa0000006) 1m11.439736113s ago: executing program 2 (id=818): mkdirat(0xffffffffffffff9c, &(0x7f00000010c0)='./file0\x00', 0x0) mount$bind(&(0x7f0000001100)='.\x00', &(0x7f0000001140)='./file0/../file0\x00', 0x0, 0x2a05404, 0x0) mount$bind(0x0, &(0x7f0000001180)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000001200)='./file0/../file0\x00', &(0x7f0000001240)='./file0\x00', 0x0, 0x2a5b091, 0x0) mount$bind(&(0x7f0000001280)='.\x00', &(0x7f00000012c0)='./file0\x00', 0x0, 0x2125099, 0x0) umount2(&(0x7f0000001300)='./file0/file0\x00', 0x0) 1m11.422688045s ago: executing program 2 (id=819): r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002000), 0x2, 0x0) getuid() getgid() syz_fuse_handle_req(r0, &(0x7f0000002180), 0x2000, &(0x7f0000004180)={&(0x7f0000004240)={0x50}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_fuse_handle_req(r0, &(0x7f00000042c0), 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000006380)={0x20}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 1m11.306764397s ago: executing program 2 (id=820): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000480), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000004c0)={'syzkaller1\x00', 0xc201}) r1 = socket$unix(0x1, 0x3, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r1, 0x8914, &(0x7f0000000c40)={'syzkaller1\x00', 0x1}) write$tun(r0, &(0x7f0000000c80)={@val={0x8, 0x800}, @val={0x0, 0x0, 0x2, 0xe7b6, 0x14, 0x2}, @ipv4=@tcp={{0x6, 0x4, 0x0, 0x8, 0x2c, 0x68, 0x0, 0x3, 0x6, 0x0, @private=0xa010100, @multicast1, {[@ra={0x94, 0x4}]}}, {{0x4e20, 0x4e28, 0x41424344, 0x41424344, 0x1, 0x0, 0xa, 0x10, 0x7, 0x0, 0x8, {[@md5sig={0x13, 0x12, "570ae7f0b905a456f064db0300ffe61e"}]}}, {"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"}}}}, 0xfce) 1m11.182449049s ago: executing program 33 (id=820): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000480), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000004c0)={'syzkaller1\x00', 0xc201}) r1 = socket$unix(0x1, 0x3, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r1, 0x8914, &(0x7f0000000c40)={'syzkaller1\x00', 0x1}) write$tun(r0, &(0x7f0000000c80)={@val={0x8, 0x800}, @val={0x0, 0x0, 0x2, 0xe7b6, 0x14, 0x2}, @ipv4=@tcp={{0x6, 0x4, 0x0, 0x8, 0x2c, 0x68, 0x0, 0x3, 0x6, 0x0, @private=0xa010100, @multicast1, {[@ra={0x94, 0x4}]}}, {{0x4e20, 0x4e28, 0x41424344, 0x41424344, 0x1, 0x0, 0xa, 0x10, 0x7, 0x0, 0x8, {[@md5sig={0x13, 0x12, "570ae7f0b905a456f064db0300ffe61e"}]}}, {"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"}}}}, 0xfce) 1.53852543s ago: executing program 4 (id=2782): r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_int(r0, 0x29, 0xb, &(0x7f0000000100)=0x9, 0x4) bind$inet6(r0, &(0x7f0000000140)={0xa, 0x4e20, 0x0, @empty}, 0x1c) recvmmsg(r0, &(0x7f0000000180)=[{{0x0, 0x0, 0x0}, 0x6}], 0x1, 0x0, 0x0) setsockopt$inet6_int(r0, 0x29, 0x46, 0x0, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x0, &(0x7f00000001c0)={0xa, 0x4e20, 0x0, @mcast2}, 0x1c) 967.09261ms ago: executing program 5 (id=2803): socket$inet6(0xa, 0x2, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cpuacct.usage_percpu\x00', 0x275a, 0x0) r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x802}, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=ANY=[@ANYBLOB="20000000520001000000000000000000020000000c00", @ANYRES16=r0], 0x20}}, 0x0) 951.597831ms ago: executing program 5 (id=2805): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000140)={'rose0\x00', 0x112}) ioctl$TUNSETQUEUE(r0, 0x400454d9, &(0x7f0000000180)={'geneve1\x00', 0x400}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) ioctl$TUNATTACHFILTER(r0, 0x401054d5, &(0x7f0000000200)={0x0, 0x0}) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000002c0)={'rose0\x00', 0x102}) 860.456661ms ago: executing program 5 (id=2806): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000a40), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000a80)={'syzkaller0\x00', 0xca02}) r1 = socket$netlink(0x10, 0x3, 0x0) preadv(r0, &(0x7f0000000ac0)=[{&(0x7f0000000b00)=""/4, 0x4}], 0x3bc, 0x0, 0x0) close(0x3) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000b40)={'syzkaller0\x00', @link_local}) 726.970684ms ago: executing program 5 (id=2807): r0 = socket$inet6(0x10, 0x3, 0x0) sendto$inet6(r0, &(0x7f0000000140)="1ba0000016001d0d89fdc5cbdd045798707bed4dca141a780f0f8e", 0xff3b, 0x0, 0x0, 0x0) recvfrom$inet6(r0, &(0x7f0000000000)=""/27, 0x1b, 0x0, 0x0, 0x0) writev(0xffffffffffffffff, &(0x7f00000002c0)=[{&(0x7f0000000000)="48050000150019", 0x7}], 0x1) r1 = socket$inet6(0x10, 0x3, 0x0) sendto$inet6(r1, &(0x7f0000000000)='s', 0x10a73, 0x800, 0x0, 0x4b6ae4f95a5de35b) 589.927089ms ago: executing program 0 (id=2809): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000140)={'syzkaller1\x00', 0x5001}) r1 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', 0x1}) write$tun(r0, &(0x7f0000000200)=ANY=[@ANYBLOB="03031b0030003200060063000000004400000000000000ffffac141419b699ae62ed489b9bff02007f00000000000000000000000104b2ee83866feb94e07712d21cef3261f5913c09"], 0x76) syz_pidfd_open(0x0, 0x0) 589.821969ms ago: executing program 4 (id=2810): socket(0x10, 0x803, 0x2) r0 = socket$inet6(0xa, 0x2, 0x3a) connect$inet6(r0, &(0x7f0000000ac0)={0xa, 0x4e24, 0xb, @mcast2, 0x9}, 0x1c) sendto$inet6(r0, &(0x7f0000000b00)="800037bbfa9ba1ce", 0xffe9, 0x0, 0x0, 0x0) mmap(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x2000009, 0x32, 0xffffffffffffffff, 0x0) recvfrom$inet6(r0, &(0x7f0000000b40)=""/245, 0xfffffffffffffe4e, 0x30c64a8c5dc2dff0, 0x0, 0x0) 589.739279ms ago: executing program 5 (id=2811): r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0xa2f01, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000100)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup(r1) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}) write$tun(r0, &(0x7f0000000300)={@void, @void, @eth={@random="71ea53d8ebfc", @remote, @val={@void}, {@ipv4={0x800, @udp={{0x5, 0x4, 0x2, 0x15, 0x78, 0x65, 0x0, 0x82, 0x11, 0x0, @empty, @multicast1}, {0x4e22, 0x4e23, 0x64, 0x0, @wg=@response={0x2, 0x2, 0x0, "8a3f2bf00065d4e25eb34aff1c69b04bc400", "935ed726ee6eef5ceea912e786e397e0", {"e6e95b4915a7000000040000000296e4", "1fb47110a379a39d5d8a010000000ac0"}}}}}}}}, 0x8a) 589.676879ms ago: executing program 3 (id=2812): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) r0 = userfaultfd(0x80801) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000003c0)) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000a40)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x2}) ioctl$UFFDIO_UNREGISTER(r0, 0x8010aa01, &(0x7f0000000ac0)={&(0x7f000040b000/0x4000)=nil, 0x4000}) 522.309676ms ago: executing program 4 (id=2813): socket$inet6(0xa, 0x2, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cpuacct.usage_percpu\x00', 0x275a, 0x0) r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x802}, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=ANY=[@ANYBLOB="20000000520001000000000000000000020000000c00", @ANYRES16=r0], 0x20}}, 0x0) 491.443899ms ago: executing program 4 (id=2814): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup(r1) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f00000000c0)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}) ioctl$TUNSETLINK(r0, 0x400454cd, 0x1b) 446.738364ms ago: executing program 0 (id=2815): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000a40), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000a80)={'syzkaller0\x00', 0xca02}) r1 = socket$netlink(0x10, 0x3, 0x0) preadv(r0, &(0x7f0000000ac0)=[{&(0x7f0000000b00)=""/4, 0x4}], 0x3bc, 0x0, 0x0) close(0x3) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000b40)={'syzkaller0\x00', @link_local}) 446.640774ms ago: executing program 3 (id=2816): openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.events\x00', 0x26e1, 0x0) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) splice(r0, 0x0, r2, 0x0, 0x88000cc, 0x0) fcntl$setpipe(r1, 0x407, 0x4100004) write$eventfd(r1, &(0x7f0000001100)=0xffffffffffffffff, 0x8) 361.612283ms ago: executing program 5 (id=2817): r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_int(r0, 0x29, 0xb, &(0x7f0000000100)=0x9, 0x4) bind$inet6(r0, &(0x7f0000000140)={0xa, 0x4e20, 0x0, @empty}, 0x1c) recvmmsg(r0, &(0x7f0000000180)=[{{0x0, 0x0, 0x0}, 0x6}], 0x1, 0x0, 0x0) setsockopt$inet6_int(r0, 0x29, 0x46, 0x0, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x0, &(0x7f00000001c0)={0xa, 0x4e20, 0x0, @mcast2}, 0x1c) 299.775589ms ago: executing program 4 (id=2818): r0 = socket$inet6(0x10, 0x3, 0x0) sendto$inet6(r0, &(0x7f0000000140)="1ba0000016001d0d89fdc5cbdd045798707bed4dca141a780f0f8e", 0xff3b, 0x0, 0x0, 0x0) recvfrom$inet6(r0, &(0x7f0000000000)=""/27, 0x1b, 0x0, 0x0, 0x0) writev(0xffffffffffffffff, &(0x7f00000002c0)=[{&(0x7f0000000000)="48050000150019", 0x7}], 0x1) r1 = socket$inet6(0x10, 0x3, 0x0) sendto$inet6(r1, &(0x7f0000000000)='s', 0x10a73, 0x800, 0x0, 0x4b6ae4f95a5de35b) 272.572902ms ago: executing program 4 (id=2819): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000180)={0x2, 0x4e20, @multicast2}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f00000001c0)='reno', 0x4) setsockopt$inet_tcp_int(r0, 0x6, 0x2, &(0x7f0000000200)=0xce, 0x4) connect$inet(r0, &(0x7f0000000240)={0x2, 0x4e20, @loopback}, 0x10) sendmsg$inet(r0, &(0x7f00000002c0)={0x0, 0x14, &(0x7f0000000300)=[{&(0x7f0000000340)=' ', 0x100120}], 0x1}, 0x0) 272.412182ms ago: executing program 3 (id=2820): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000640)=ANY=[@ANYBLOB="c4000000190001000000000000004000e00000020000000000000000000000000000000020000000000000000000000000000000000000000a00000087000000", @ANYRES32=r0, @ANYRES32, @ANYBLOB="000000000000000000000000000000000000000000000000000000000000000000000000000000000053260e130000000000000000000000fbfffffffff5ffff00000000001b00000000000000000000000000000000000200000000000000b912"], 0xc4}, 0x1, 0x0, 0x0, 0x40100}, 0x2c000010) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB="b8000000190001000000000000000000e000000200000000000000000000000000000000000000fefffffeffac1414bb00000000000000000a00000087"], 0xb8}}, 0x2c000010) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000004c0)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x0, {{@in=@multicast1=0xe0000002, @in, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x87}, {0x0, 0x0, 0x0, 0xaf, 0x0, 0x0, 0x5, 0xfffffffffffffffb}, {0x0, 0x40000000000000, 0x200000000000000}, 0x2}}, 0xb8}, 0x1, 0x0, 0x0, 0x4000015}, 0x2c000010) 252.855384ms ago: executing program 3 (id=2821): r0 = socket(0x80000000000000a, 0x2, 0x0) setsockopt$inet6_group_source_req(r0, 0x29, 0x2e, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}, 0x2}}, {{0xa, 0x0, 0xffffffff, @remote}}}, 0x108) r1 = socket(0x80000000000000a, 0x2, 0x0) setsockopt$inet6_group_source_req(r1, 0x29, 0x2e, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x6, @mcast1={0xff, 0x7}, 0x20000}}, {{0xa, 0x0, 0x3, @local}}}, 0x108) r2 = socket$pppl2tp(0x18, 0x1, 0x1) ioctl$SIOCSIFMTU(r2, 0x8922, &(0x7f0000000340)={'syz_tun\x00', 0x101}) 251.615154ms ago: executing program 0 (id=2822): socket$inet6(0xa, 0x2, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cpuacct.usage_percpu\x00', 0x275a, 0x0) r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x802}, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=ANY=[@ANYBLOB="20000000520001000000000000000000020000000c00", @ANYRES16=r0], 0x20}}, 0x0) 232.644756ms ago: executing program 3 (id=2823): mkdirat(0xffffffffffffff9c, &(0x7f0000000700)='./proc\x00', 0x4) mount(0x0, &(0x7f0000000740)='./proc\x00', &(0x7f0000000780)='proc\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f00000007c0)='./proc/thread-self/fail-nth\x00', 0x2, 0x10b) write(r0, &(0x7f0000000800)='7', 0x1) timer_create(0x6, &(0x7f0000001a00)={0x0, 0x3a, 0x4, @thr={0x0, 0x0}}, 0x0) timer_settime(0x0, 0x1, &(0x7f0000001a80)={{0x0, 0x989680}, {0x77359400}}, 0x0) 232.339556ms ago: executing program 0 (id=2824): mkdirat(0xffffffffffffff9c, &(0x7f0000002000)='./file0\x00', 0x0) r0 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0) r1 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0) mkdirat(r1, &(0x7f0000000200)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0) renameat2(r1, &(0x7f0000000100)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', r0, &(0x7f0000000180)='./file1\x00', 0x4) renameat2(r0, &(0x7f0000000300)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', r0, &(0x7f00000002c0)='./file0\x00', 0x2) 182.747631ms ago: executing program 0 (id=2825): r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0xa2f01, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000100)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup(r1) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}) write$tun(r0, &(0x7f0000000300)={@void, @void, @eth={@random="71ea53d8ebfc", @remote, @val={@void}, {@ipv4={0x800, @udp={{0x5, 0x4, 0x2, 0x15, 0x78, 0x65, 0x0, 0x82, 0x11, 0x0, @empty, @multicast1}, {0x4e22, 0x4e23, 0x64, 0x0, @wg=@response={0x2, 0x2, 0x0, "8a3f2bf00065d4e25eb34aff1c69b04bc400", "935ed726ee6eef5ceea912e786e397e0", {"e6e95b4915a7000000040000000296e4", "1fb47110a379a39d5d8a010000000ac0"}}}}}}}}, 0x8a) 182.208241ms ago: executing program 3 (id=2833): mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) dup(0xffffffffffffffff) r0 = socket$inet(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x10000000013, &(0x7f0000000380)=0x1, 0x4) setsockopt$inet_opts(r0, 0x0, 0x4, 0x0, 0x0) connect$inet(r0, &(0x7f0000000540)={0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0xae}}, 0x10) 84.934551ms ago: executing program 0 (id=2826): openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.events\x00', 0x26e1, 0x0) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) splice(r0, 0x0, r2, 0x0, 0x88000cc, 0x0) fcntl$setpipe(r1, 0x407, 0x4100004) write$eventfd(r1, &(0x7f0000001100)=0xffffffffffffffff, 0x8) 0s ago: executing program 34 (id=2826): openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.events\x00', 0x26e1, 0x0) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) splice(r0, 0x0, r2, 0x0, 0x88000cc, 0x0) fcntl$setpipe(r1, 0x407, 0x4100004) write$eventfd(r1, &(0x7f0000001100)=0xffffffffffffffff, 0x8) kernel console output (not intermixed with test programs): ned -22 [ 62.881784][ T2109] FAULT_INJECTION: forcing a failure. [ 62.881784][ T2109] name failslab, interval 1, probability 0, space 0, times 0 [ 62.895017][ T2109] CPU: 1 UID: 0 PID: 2109 Comm: syz.4.787 Not tainted syzkaller #0 6d6f333215c564de92c741644a4b57c848379815 [ 62.895056][ T2109] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 62.895076][ T2109] Call Trace: [ 62.895082][ T2109] [ 62.895090][ T2109] __dump_stack+0x21/0x30 [ 62.895117][ T2109] dump_stack_lvl+0x140/0x1c0 [ 62.895135][ T2109] ? __cfi_dump_stack_lvl+0x10/0x10 [ 62.895154][ T2109] ? __lruvec_stat_mod_folio+0x13f/0x1a0 [ 62.895179][ T2109] dump_stack+0x19/0x20 [ 62.895196][ T2109] should_fail_ex+0x3c2/0x510 [ 62.895226][ T2109] should_failslab+0xac/0x100 [ 62.895247][ T2109] kmem_cache_alloc_noprof+0x42/0x410 [ 62.895278][ T2109] ? __pte_alloc+0x1ae/0x440 [ 62.895304][ T2109] ? __anon_vma_prepare+0xa5/0x590 [ 62.895334][ T2109] __anon_vma_prepare+0xa5/0x590 [ 62.895363][ T2109] do_pte_missing+0x2bbf/0x4440 [ 62.895384][ T2109] ? __kasan_check_write+0x18/0x20 [ 62.895412][ T2109] ? _raw_spin_lock+0x92/0x120 [ 62.895431][ T2109] ? __cfi__raw_spin_lock+0x10/0x10 [ 62.895451][ T2109] ? pte_marker_clear+0x1b0/0x1b0 [ 62.895472][ T2109] ? __pmd_alloc+0x5a6/0x9a0 [ 62.895491][ T2109] ? __vma_start_write+0x110/0x110 [ 62.895510][ T2109] ? __cfi___pmd_alloc+0x10/0x10 [ 62.895529][ T2109] ? vms_complete_munmap_vmas+0x2a6/0x820 [ 62.895549][ T2109] handle_mm_fault+0x1189/0x1ba0 [ 62.895574][ T2109] ? __cfi_handle_mm_fault+0x10/0x10 [ 62.895597][ T2109] ? __cfi_find_vma+0x10/0x10 [ 62.895632][ T2109] ? vma_is_secretmem+0x11/0x50 [ 62.895658][ T2109] ? check_vma_flags+0x36d/0x3a0 [ 62.895682][ T2109] __get_user_pages+0x114b/0x22d0 [ 62.895709][ T2109] ? populate_vma_page_range+0x220/0x220 [ 62.895732][ T2109] ? down_read+0x7f/0xe0 [ 62.895758][ T2109] ? __cfi_down_read+0x10/0x10 [ 62.895784][ T2109] ? __cfi_do_mmap+0x10/0x10 [ 62.895812][ T2109] __mm_populate+0x300/0x440 [ 62.895834][ T2109] vm_mmap_pgoff+0x426/0x4b0 [ 62.895863][ T2109] ? __cfi_vm_mmap_pgoff+0x10/0x10 [ 62.895890][ T2109] ? __x64_sys_futex+0x110/0x110 [ 62.895912][ T2109] ksys_mmap_pgoff+0xfa/0x1e0 [ 62.895939][ T2109] ? __kasan_check_write+0x18/0x20 [ 62.895967][ T2109] __x64_sys_mmap+0x121/0x140 [ 62.895989][ T2109] x64_sys_call+0x13bf/0x2ee0 [ 62.896010][ T2109] do_syscall_64+0x57/0xf0 [ 62.896029][ T2109] ? clear_bhb_loop+0x50/0xa0 [ 62.896056][ T2109] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 62.896081][ T2109] RIP: 0033:0x7f1ecff9fb19 [ 62.896119][ T2109] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 62.896137][ T2109] RSP: 002b:00007f1ed0e5f028 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 62.896158][ T2109] RAX: ffffffffffffffda RBX: 00007f1ed0225fa0 RCX: 00007f1ecff9fb19 [ 62.896175][ T2109] RDX: 0000000000000002 RSI: 0000000000000007 RDI: 00007fffffffb000 [ 62.896188][ T2109] RBP: 00007f1ed0037b70 R08: ffffffffffffffff R09: 0000000008000000 [ 62.896202][ T2109] R10: bd4c341840b03bf2 R11: 0000000000000246 R12: 0000000000000000 [ 62.896216][ T2109] R13: 00007f1ed0226038 R14: 00007f1ed0225fa0 R15: 00007fff76ab38b8 [ 62.896233][ T2109] [ 63.244567][ T1917] Bluetooth: hci0: Frame reassembly failed (-84) [ 63.268043][ T2112] netlink: 48 bytes leftover after parsing attributes in process `syz.4.788'. [ 63.436141][ T36] kauditd_printk_skb: 8 callbacks suppressed [ 63.436161][ T36] audit: type=1400 audit(1700000018.120:360): avc: denied { read write } for pid=2120 comm="syz.4.793" name="usbmon9" dev="devtmpfs" ino=118 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 63.466049][ T36] audit: type=1400 audit(1700000018.120:361): avc: denied { open } for pid=2120 comm="syz.4.793" path="/dev/usbmon9" dev="devtmpfs" ino=118 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 63.489845][ T36] audit: type=1400 audit(1700000018.120:362): avc: denied { ioctl } for pid=2120 comm="syz.4.793" path="/dev/usbmon9" dev="devtmpfs" ino=118 ioctlcmd=0x920a scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 63.770221][ T10] usb 5-1: new full-speed USB device number 2 using dummy_hcd [ 63.921332][ T10] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 63.931515][ T10] usb 5-1: config 0 has no interfaces? [ 63.938559][ T10] usb 5-1: New USB device found, idVendor=084e, idProduct=1001, bcdDevice=33.f9 [ 63.947691][ T10] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 63.955766][ T10] usb 5-1: Product: syz [ 63.959949][ T10] usb 5-1: Manufacturer: syz [ 63.964612][ T10] usb 5-1: SerialNumber: syz [ 63.970119][ T10] usb 5-1: config 0 descriptor?? [ 64.023128][ T311] (unnamed net_device) (uninitialized): Assigned a random MAC address: ba:8c:01:c4:14:6b [ 64.034878][ T311] rtl8150 4-1:1.0: eth1: rtl8150 is detected [ 64.043358][ T311] usb 4-1: USB disconnect, device number 7 [ 64.054560][ T36] audit: type=1400 audit(1700000018.740:363): avc: denied { read } for pid=150 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=1 [ 64.197216][ T10] usb 5-1: USB disconnect, device number 2 [ 64.398105][ T2132] netlink: 'syz.0.797': attribute type 5 has an invalid length. [ 64.406915][ T2132] netlink: 'syz.0.797': attribute type 32 has an invalid length. [ 64.429491][ T2134] FAULT_INJECTION: forcing a failure. [ 64.429491][ T2134] name failslab, interval 1, probability 0, space 0, times 0 [ 64.442190][ T2134] CPU: 1 UID: 0 PID: 2134 Comm: syz.0.798 Not tainted syzkaller #0 6d6f333215c564de92c741644a4b57c848379815 [ 64.442229][ T2134] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 64.442240][ T2134] Call Trace: [ 64.442247][ T2134] [ 64.442253][ T2134] __dump_stack+0x21/0x30 [ 64.442274][ T2134] dump_stack_lvl+0x140/0x1c0 [ 64.442289][ T2134] ? __cfi_dump_stack_lvl+0x10/0x10 [ 64.442306][ T2134] ? __cfi___switch_to+0x10/0x10 [ 64.442324][ T2134] dump_stack+0x19/0x20 [ 64.442338][ T2134] should_fail_ex+0x3c2/0x510 [ 64.442366][ T2134] should_failslab+0xac/0x100 [ 64.442387][ T2134] kmem_cache_alloc_noprof+0x42/0x410 [ 64.442414][ T2134] ? vm_area_dup+0x3f/0x560 [ 64.442437][ T2134] vm_area_dup+0x3f/0x560 [ 64.442457][ T2134] ? __split_vma+0x1b8/0xc10 [ 64.442472][ T2134] __split_vma+0x1ce/0xc10 [ 64.442488][ T2134] ? vms_gather_munmap_vmas+0xd90/0xd90 [ 64.442504][ T2134] ? __cfi___futex_queue+0x10/0x10 [ 64.442522][ T2134] ? can_vma_merge_left+0x184/0x4b0 [ 64.442551][ T2134] vma_modify+0x60c/0x1540 [ 64.442569][ T2134] vma_modify_flags+0x182/0x1c0 [ 64.442586][ T2134] mprotect_fixup+0x432/0x8d0 [ 64.442605][ T2134] ? __cfi_selinux_file_mprotect+0x10/0x10 [ 64.442632][ T2134] ? __cfi_mprotect_fixup+0x10/0x10 [ 64.442651][ T2134] ? bpf_lsm_file_mprotect+0xd/0x20 [ 64.442671][ T2134] do_mprotect_pkey+0xa85/0xe50 [ 64.442693][ T2134] ? prot_none_test+0x30/0x30 [ 64.442712][ T2134] ? mutex_unlock+0x90/0x240 [ 64.442736][ T2134] ? fput+0x1a4/0x230 [ 64.442755][ T2134] ? __cfi_ksys_write+0x10/0x10 [ 64.442770][ T2134] ? __kasan_check_write+0x18/0x20 [ 64.442795][ T2134] ? fpregs_restore_userregs+0x11c/0x260 [ 64.442819][ T2134] __x64_sys_mprotect+0x84/0xa0 [ 64.442838][ T2134] x64_sys_call+0x2590/0x2ee0 [ 64.442856][ T2134] do_syscall_64+0x57/0xf0 [ 64.442873][ T2134] ? clear_bhb_loop+0x50/0xa0 [ 64.442896][ T2134] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 64.442919][ T2134] RIP: 0033:0x7f4408b9fb19 [ 64.442940][ T2134] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 64.442956][ T2134] RSP: 002b:00007f440997f028 EFLAGS: 00000246 ORIG_RAX: 000000000000000a [ 64.442974][ T2134] RAX: ffffffffffffffda RBX: 00007f4408e25fa0 RCX: 00007f4408b9fb19 [ 64.442987][ T2134] RDX: 0000000000000009 RSI: 000000000000f000 RDI: 0000200000000000 [ 64.442998][ T2134] RBP: 00007f4408c37b70 R08: 0000000000000000 R09: 0000000000000000 [ 64.443008][ T2134] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 64.443018][ T2134] R13: 00007f4408e26038 R14: 00007f4408e25fa0 R15: 00007ffc885de8e8 [ 64.443033][ T2134] [ 64.744719][ T2140] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 64.980275][ T31] usb 1-1: new full-speed USB device number 6 using dummy_hcd [ 65.120199][ T10] usb 4-1: new full-speed USB device number 8 using dummy_hcd [ 65.131430][ T31] usb 1-1: config 1 has an invalid interface number: 105 but max is 0 [ 65.139702][ T31] usb 1-1: config 1 has no interface number 0 [ 65.146117][ T31] usb 1-1: config 1 interface 105 has no altsetting 0 [ 65.154418][ T31] usb 1-1: New USB device found, idVendor=20f4, idProduct=e05a, bcdDevice=6c.6d [ 65.163563][ T31] usb 1-1: New USB device strings: Mfr=1, Product=23, SerialNumber=3 [ 65.171707][ T31] usb 1-1: Product: syz [ 65.175893][ T31] usb 1-1: Manufacturer: syz [ 65.180590][ T31] usb 1-1: SerialNumber: syz [ 65.190231][ T1512] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 65.260241][ T595] Bluetooth: hci0: command 0x1003 tx timeout [ 65.260243][ T55] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 65.283147][ T10] usb 4-1: config 0 interface 0 altsetting 5 endpoint 0x81 has invalid maxpacket 1024, setting to 64 [ 65.294174][ T10] usb 4-1: config 0 interface 0 altsetting 5 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 65.307072][ T10] usb 4-1: config 0 interface 0 has no altsetting 0 [ 65.313836][ T10] usb 4-1: New USB device found, idVendor=13ec, idProduct=0006, bcdDevice= 0.00 [ 65.323047][ T10] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 65.333269][ T10] usb 4-1: config 0 descriptor?? [ 65.339858][ T2157] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 65.350339][ T1512] usb 5-1: Using ep0 maxpacket: 32 [ 65.356967][ T1512] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 65.368307][ T1512] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 65.378437][ T1512] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 65.391607][ T1512] usb 5-1: New USB device found, idVendor=0458, idProduct=5011, bcdDevice= 0.00 [ 65.401331][ T1512] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 65.410596][ T1512] usb 5-1: config 0 descriptor?? [ 65.756959][ T10] input: HID 13ec:0006 as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/0003:13EC:0006.0009/input/input12 [ 65.778512][ T10] zydacron 0003:13EC:0006.0009: input,hiddev96,hidraw0: USB HID v0.00 Device [HID 13ec:0006] on usb-dummy_hcd.3-1/input0 [ 65.807769][ T1909] bridge_slave_1: left allmulticast mode [ 65.818662][ T1909] bridge_slave_1: left promiscuous mode [ 65.840264][ T1909] bridge0: port 2(bridge_slave_1) entered disabled state [ 65.852244][ T1909] bridge_slave_0: left allmulticast mode [ 65.858218][ T1909] bridge_slave_0: left promiscuous mode [ 65.866255][ T1909] bridge0: port 1(bridge_slave_0) entered disabled state [ 65.868896][ T1512] input: HID 0458:5011 as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/0003:0458:5011.000A/input/input13 [ 65.899170][ T1512] input: HID 0458:5011 as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/0003:0458:5011.000A/input/input14 [ 65.930440][ T1512] kye 0003:0458:5011.000A: input,hiddev97,hidraw1: USB HID v0.00 Mouse [HID 0458:5011] on usb-dummy_hcd.4-1/input0 [ 66.032979][ T1909] veth1_macvtap: left promiscuous mode [ 66.047332][ T1909] veth0_vlan: left promiscuous mode [ 66.175001][ T2180] bridge0: port 1(bridge_slave_0) entered blocking state [ 66.182128][ T2180] bridge0: port 1(bridge_slave_0) entered disabled state [ 66.189320][ T2180] bridge_slave_0: entered allmulticast mode [ 66.195880][ T2180] bridge_slave_0: entered promiscuous mode [ 66.202819][ T2180] bridge0: port 2(bridge_slave_1) entered blocking state [ 66.209937][ T2180] bridge0: port 2(bridge_slave_1) entered disabled state [ 66.217127][ T2180] bridge_slave_1: entered allmulticast mode [ 66.222180][ T31] aqc111 1-1:1.105 (unnamed net_device) (uninitialized): Failed to read(0x1) reg index 0x0001: -71 [ 66.225897][ T2180] bridge_slave_1: entered promiscuous mode [ 66.241189][ T31] aqc111 1-1:1.105 (unnamed net_device) (uninitialized): Failed to read(0x1) reg index 0x0001: -71 [ 66.258264][ T31] aqc111 1-1:1.105 eth1: register 'aqc111' at usb-dummy_hcd.0-1, USB-C 3.1 to 5GBASE-T Ethernet Adapter, 46:13:ce:2a:f7:90 [ 66.273075][ T31] usb 1-1: USB disconnect, device number 6 [ 66.280597][ T31] aqc111 1-1:1.105 eth1: unregister 'aqc111' usb-dummy_hcd.0-1, USB-C 3.1 to 5GBASE-T Ethernet Adapter [ 66.341074][ T2180] bridge0: port 2(bridge_slave_1) entered blocking state [ 66.348263][ T2180] bridge0: port 2(bridge_slave_1) entered forwarding state [ 66.355626][ T2180] bridge0: port 1(bridge_slave_0) entered blocking state [ 66.362720][ T2180] bridge0: port 1(bridge_slave_0) entered forwarding state [ 66.370600][ T31] aqc111 1-1:1.105 eth1 (unregistered): Failed to write(0x1) reg index 0x0002: -19 [ 66.380376][ T31] aqc111 1-1:1.105 eth1 (unregistered): Failed to write(0x1) reg index 0x0002: -19 [ 66.390406][ T31] aqc111 1-1:1.105 eth1 (unregistered): Failed to write(0x61) reg index 0x0000: -19 [ 66.421112][ T1909] bridge0: port 1(bridge_slave_0) entered disabled state [ 66.428603][ T1909] bridge0: port 2(bridge_slave_1) entered disabled state [ 66.439156][ T1917] bridge0: port 1(bridge_slave_0) entered blocking state [ 66.446277][ T1917] bridge0: port 1(bridge_slave_0) entered forwarding state [ 66.455707][ T1909] bridge0: port 2(bridge_slave_1) entered blocking state [ 66.462814][ T1909] bridge0: port 2(bridge_slave_1) entered forwarding state [ 66.497197][ T2180] veth0_vlan: entered promiscuous mode [ 66.511625][ T2180] veth1_macvtap: entered promiscuous mode [ 66.678515][ T2194] netlink: 24 bytes leftover after parsing attributes in process `syz.5.824'. [ 66.791077][ T2198] bridge0: port 3(syz_tun) entered blocking state [ 66.797723][ T2198] bridge0: port 3(syz_tun) entered disabled state [ 66.801187][ T2157] usb 4-1: string descriptor 0 read error: -71 [ 66.806417][ T2198] syz_tun: entered allmulticast mode [ 66.819864][ T1512] usb 5-1: USB disconnect, device number 3 [ 66.825801][ T36] audit: type=1400 audit(1700000021.500:364): avc: denied { remount } for pid=2199 comm="syz.5.827" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 66.842068][ T2198] syz_tun: entered promiscuous mode [ 66.856129][ T2198] bridge0: port 3(syz_tun) entered blocking state [ 66.862667][ T2198] bridge0: port 3(syz_tun) entered forwarding state [ 66.934460][ T2204] kvm: kvm [2203]: vcpu2, guest rIP: 0x9134 Unhandled WRMSR(0x11e) = 0x0 [ 67.029216][ T2216] FAULT_INJECTION: forcing a failure. [ 67.029216][ T2216] name failslab, interval 1, probability 0, space 0, times 0 [ 67.043123][ T2216] CPU: 0 UID: 0 PID: 2216 Comm: syz.0.834 Not tainted syzkaller #0 6d6f333215c564de92c741644a4b57c848379815 [ 67.043163][ T2216] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 67.043179][ T2216] Call Trace: [ 67.043187][ T2216] [ 67.043196][ T2216] __dump_stack+0x21/0x30 [ 67.043226][ T2216] dump_stack_lvl+0x140/0x1c0 [ 67.043248][ T2216] ? __cfi_dump_stack_lvl+0x10/0x10 [ 67.043271][ T2216] ? kasan_save_alloc_info+0x3a/0x50 [ 67.043305][ T2216] dump_stack+0x19/0x20 [ 67.043328][ T2216] should_fail_ex+0x3c2/0x510 [ 67.043366][ T2216] ? sk_prot_alloc+0x104/0x3a0 [ 67.043398][ T2216] should_failslab+0xac/0x100 [ 67.043424][ T2216] __kmalloc_noprof+0x69/0x510 [ 67.043461][ T2216] ? sk_prot_alloc+0x104/0x3a0 [ 67.043492][ T2216] sk_prot_alloc+0x104/0x3a0 [ 67.043532][ T2216] ? security_socket_post_create+0x48/0x140 [ 67.043565][ T2216] sk_alloc+0x40/0x590 [ 67.043595][ T2216] __netlink_kernel_create+0x173/0x8a0 [ 67.043628][ T2216] ? __cfi___netlink_kernel_create+0x10/0x10 [ 67.043662][ T2216] ? __asan_memcpy+0x5a/0x80 [ 67.043697][ T2216] audit_net_init+0x108/0x240 [ 67.043731][ T2216] ? __cfi_audit_net_init+0x10/0x10 [ 67.043764][ T2216] ? __cfi_audit_receive+0x10/0x10 [ 67.043799][ T2216] ? __cfi_audit_multicast_bind+0x10/0x10 [ 67.043833][ T2216] ? __cfi_audit_multicast_unbind+0x10/0x10 [ 67.043869][ T2216] ? __kmalloc_noprof+0x261/0x510 [ 67.043905][ T2216] ? ops_init+0x81/0x5d0 [ 67.043930][ T2216] ops_init+0x302/0x5d0 [ 67.043953][ T2216] ? __kasan_check_write+0x18/0x20 [ 67.043987][ T2216] ? rwsem_read_trylock+0x275/0x5a0 [ 67.044020][ T2216] setup_net+0x227/0x9b0 [ 67.044056][ T2216] ? copy_net_ns+0xa20/0xa20 [ 67.044092][ T2216] ? down_read_killable+0x7f/0x100 [ 67.044128][ T2216] ? __cfi_down_read_killable+0x10/0x10 [ 67.044165][ T2216] copy_net_ns+0x4fc/0xa20 [ 67.044203][ T2216] create_new_namespaces+0x390/0x6f0 [ 67.044230][ T2216] unshare_nsproxy_namespaces+0x124/0x180 [ 67.044257][ T2216] ksys_unshare+0x4f9/0x920 [ 67.044277][ T2216] ? fput+0x1a4/0x230 [ 67.044306][ T2216] ? __cfi_ksys_unshare+0x10/0x10 [ 67.044329][ T2216] ? __kasan_check_write+0x18/0x20 [ 67.044366][ T2216] __x64_sys_unshare+0x3c/0x50 [ 67.044388][ T2216] x64_sys_call+0x2998/0x2ee0 [ 67.044415][ T2216] do_syscall_64+0x57/0xf0 [ 67.044439][ T2216] ? clear_bhb_loop+0x50/0xa0 [ 67.044474][ T2216] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 67.044515][ T2216] RIP: 0033:0x7f4408b9fb19 [ 67.044537][ T2216] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 67.044559][ T2216] RSP: 002b:00007f440997f028 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 67.044586][ T2216] RAX: ffffffffffffffda RBX: 00007f4408e25fa0 RCX: 00007f4408b9fb19 [ 67.044605][ T2216] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000060000600 [ 67.044622][ T2216] RBP: 00007f4408c37b70 R08: 0000000000000000 R09: 0000000000000000 [ 67.044638][ T2216] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 67.044654][ T2216] R13: 00007f4408e26038 R14: 00007f4408e25fa0 R15: 00007ffc885de8e8 [ 67.044676][ T2216] [ 67.044709][ T2216] audit: cannot initialize netlink socket in namespace [ 67.528903][ T2244] bridge0: port 3(gretap0) entered blocking state [ 67.535529][ T2244] bridge0: port 3(gretap0) entered disabled state [ 67.542089][ T2244] gretap0: entered allmulticast mode [ 67.547542][ T2244] FAULT_INJECTION: forcing a failure. [ 67.547542][ T2244] name failslab, interval 1, probability 0, space 0, times 0 [ 67.567605][ T2244] CPU: 0 UID: 0 PID: 2244 Comm: syz.4.846 Not tainted syzkaller #0 6d6f333215c564de92c741644a4b57c848379815 [ 67.567647][ T2244] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 67.567664][ T2244] Call Trace: [ 67.567672][ T2244] [ 67.567681][ T2244] __dump_stack+0x21/0x30 [ 67.567712][ T2244] dump_stack_lvl+0x140/0x1c0 [ 67.567736][ T2244] ? __cfi_dump_stack_lvl+0x10/0x10 [ 67.567761][ T2244] ? selinux_kernfs_init_security+0x14b/0x4b0 [ 67.567802][ T2244] dump_stack+0x19/0x20 [ 67.567823][ T2244] should_fail_ex+0x3c2/0x510 [ 67.567862][ T2244] should_failslab+0xac/0x100 [ 67.567888][ T2244] kmem_cache_alloc_noprof+0x42/0x410 [ 67.567926][ T2244] ? __kernfs_new_node+0xf1/0x740 [ 67.567954][ T2244] ? bpf_lsm_kernfs_init_security+0xd/0x20 [ 67.567993][ T2244] __kernfs_new_node+0xf1/0x740 [ 67.568020][ T2244] ? __kasan_check_write+0x18/0x20 [ 67.568058][ T2244] ? kernfs_new_node+0x280/0x280 [ 67.568084][ T2244] ? down_write+0xee/0x2b0 [ 67.568119][ T2244] ? __cfi_down_write+0x10/0x10 [ 67.568154][ T2244] ? make_kgid+0x1d0/0x690 [ 67.568177][ T2244] ? up_write+0x66/0x280 [ 67.568206][ T2244] ? __cfi_make_kgid+0x10/0x10 [ 67.568229][ T2244] kernfs_new_node+0x154/0x280 [ 67.568256][ T2244] __kernfs_create_file+0x52/0x280 [ 67.568289][ T2244] sysfs_add_file_mode_ns+0x1d2/0x280 [ 67.568325][ T2244] sysfs_create_file_ns+0x12c/0x1b0 [ 67.568358][ T2244] ? __kasan_check_write+0x18/0x20 [ 67.568393][ T2244] ? __cfi_sysfs_create_file_ns+0x10/0x10 [ 67.568425][ T2244] ? sysfs_do_create_link_sd+0xe9/0x120 [ 67.568446][ T2244] br_sysfs_addif+0xcf/0x250 [ 67.568483][ T2244] br_add_if+0x39e/0xe70 [ 67.568504][ T2244] ? bpf_lsm_capable+0xd/0x20 [ 67.568536][ T2244] br_dev_siocdevprivate+0xe46/0x1500 [ 67.568567][ T2244] ? __cfi_br_dev_siocdevprivate+0x10/0x10 [ 67.568588][ T2244] ? has_cap_mac_admin+0xd0/0xd0 [ 67.568615][ T2244] ? futex_wait+0x2b8/0x7c0 [ 67.568637][ T2244] ? __cfi_futex_wait+0x10/0x10 [ 67.568661][ T2244] ? full_name_hash+0xa1/0xf0 [ 67.568678][ T2244] dev_ifsioc+0x94e/0xc10 [ 67.568700][ T2244] dev_ioctl+0xa62/0x1000 [ 67.568720][ T2244] sock_ioctl+0x74e/0x7e0 [ 67.568735][ T2244] ? __cfi_sock_ioctl+0x10/0x10 [ 67.568750][ T2244] ? __fget_files+0x2bc/0x330 [ 67.568768][ T2244] ? bpf_lsm_file_ioctl+0xd/0x20 [ 67.568786][ T2244] ? security_file_ioctl+0x3e/0x110 [ 67.568812][ T2244] ? __cfi_sock_ioctl+0x10/0x10 [ 67.568826][ T2244] __se_sys_ioctl+0x123/0x1b0 [ 67.568845][ T2244] __x64_sys_ioctl+0x7f/0xa0 [ 67.568862][ T2244] x64_sys_call+0x1878/0x2ee0 [ 67.568880][ T2244] do_syscall_64+0x57/0xf0 [ 67.568897][ T2244] ? clear_bhb_loop+0x50/0xa0 [ 67.568921][ T2244] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 67.568944][ T2244] RIP: 0033:0x7f1ecff9fb19 [ 67.568959][ T2244] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 67.568973][ T2244] RSP: 002b:00007f1ed0e5f028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 67.568997][ T2244] RAX: ffffffffffffffda RBX: 00007f1ed0225fa0 RCX: 00007f1ecff9fb19 [ 67.569010][ T2244] RDX: 0000200000000200 RSI: 00000000000089f0 RDI: 0000000000000004 [ 67.569021][ T2244] RBP: 00007f1ed0037b70 R08: 0000000000000000 R09: 0000000000000000 [ 67.569032][ T2244] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 67.569043][ T2244] R13: 00007f1ed0226038 R14: 00007f1ed0225fa0 R15: 00007fff76ab38b8 [ 67.569058][ T2244] [ 67.569130][ T2244] gretap0: left allmulticast mode [ 67.916280][ T10] usb 4-1: USB disconnect, device number 8 [ 67.981591][ T36] audit: type=1400 audit(1700000022.670:365): avc: denied { shutdown } for pid=2257 comm="syz.4.851" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 68.073177][ T2273] rust_binder: Write failure EFAULT in pid:459 [ 68.088779][ T2272] FAULT_INJECTION: forcing a failure. [ 68.088779][ T2272] name failslab, interval 1, probability 0, space 0, times 0 [ 68.096842][ T2276] FAULT_INJECTION: forcing a failure. [ 68.096842][ T2276] name failslab, interval 1, probability 0, space 0, times 0 [ 68.115205][ T2276] CPU: 1 UID: 0 PID: 2276 Comm: syz.0.859 Not tainted syzkaller #0 6d6f333215c564de92c741644a4b57c848379815 [ 68.115244][ T2276] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 68.115652][ T2276] Call Trace: [ 68.115660][ T2276] [ 68.115668][ T2276] __dump_stack+0x21/0x30 [ 68.115697][ T2276] dump_stack_lvl+0x140/0x1c0 [ 68.115719][ T2276] ? __cfi_dump_stack_lvl+0x10/0x10 [ 68.115742][ T2276] dump_stack+0x19/0x20 [ 68.115762][ T2276] should_fail_ex+0x3c2/0x510 [ 68.115798][ T2276] should_failslab+0xac/0x100 [ 68.115823][ T2276] __kmalloc_cache_noprof+0x41/0x470 [ 68.115858][ T2276] ? init_pseudo+0x68/0x1f0 [ 68.115882][ T2276] ? __kasan_kmalloc+0x96/0xb0 [ 68.115906][ T2276] init_pseudo+0x68/0x1f0 [ 68.115931][ T2276] pipefs_init_fs_context+0x20/0x90 [ 68.115953][ T2276] alloc_fs_context+0x5c4/0x800 [ 68.115980][ T2276] fs_context_for_mount+0x26/0x40 [ 68.116006][ T2276] __se_sys_fsopen+0xab/0x390 [ 68.116046][ T2276] __x64_sys_fsopen+0x5f/0x80 [ 68.116076][ T2276] x64_sys_call+0x2d40/0x2ee0 [ 68.116102][ T2276] do_syscall_64+0x57/0xf0 [ 68.116126][ T2276] ? clear_bhb_loop+0x50/0xa0 [ 68.116158][ T2276] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 68.116189][ T2276] RIP: 0033:0x7f4408b9fb19 [ 68.116209][ T2276] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 68.116230][ T2276] RSP: 002b:00007f440997f028 EFLAGS: 00000246 ORIG_RAX: 00000000000001ae [ 68.116255][ T2276] RAX: ffffffffffffffda RBX: 00007f4408e25fa0 RCX: 00007f4408b9fb19 [ 68.116273][ T2276] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000200000000240 [ 68.116287][ T2276] RBP: 00007f4408c37b70 R08: 0000000000000000 R09: 0000000000000000 [ 68.116302][ T2276] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 68.116704][ T2276] R13: 00007f4408e26038 R14: 00007f4408e25fa0 R15: 00007ffc885de8e8 [ 68.116723][ T2276] [ 68.141540][ T2272] CPU: 0 UID: 0 PID: 2272 Comm: syz.5.858 Not tainted syzkaller #0 6d6f333215c564de92c741644a4b57c848379815 [ 68.141656][ T2272] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 68.141698][ T2272] Call Trace: [ 68.141720][ T2272] [ 68.141742][ T2272] __dump_stack+0x21/0x30 [ 68.141814][ T2272] dump_stack_lvl+0x140/0x1c0 [ 68.141877][ T2272] ? __cfi_dump_stack_lvl+0x10/0x10 [ 68.141940][ T2272] ? dequeue_task_fair+0x248/0x640 [ 68.142020][ T2272] ? kvm_sched_clock_read+0x15/0x30 [ 68.142104][ T2272] dump_stack+0x19/0x20 [ 68.142166][ T2272] should_fail_ex+0x3c2/0x510 [ 68.142252][ T2272] should_failslab+0xac/0x100 [ 68.142351][ T2272] kmem_cache_alloc_noprof+0x42/0x410 [ 68.142452][ T2272] ? __anon_vma_prepare+0xa5/0x590 [ 68.142548][ T2272] __anon_vma_prepare+0xa5/0x590 [ 68.142641][ T2272] madvise_vma_behavior+0x2a81/0x2e70 [ 68.142728][ T2272] ? __cfi_madvise_vma_behavior+0x10/0x10 [ 68.142826][ T2272] ? __sched_text_start+0x10/0x10 [ 68.142899][ T2272] ? __futex_queue+0x19f/0x350 [ 68.142963][ T2272] ? __cfi___futex_queue+0x10/0x10 [ 68.143033][ T2272] ? mtree_range_walk+0x573/0x730 [ 68.143125][ T2272] ? mas_prev_slot+0xb6b/0xc20 [ 68.143213][ T2272] ? mas_prev+0x5f/0xa0 [ 68.143290][ T2272] ? find_vma_prev+0x12a/0x1b0 [ 68.143376][ T2272] ? __cfi_find_vma_prev+0x10/0x10 [ 68.143470][ T2272] ? __kasan_check_write+0x18/0x20 [ 68.143566][ T2272] ? rwsem_read_trylock+0x275/0x5a0 [ 68.143648][ T2272] ? downgrade_write+0x470/0x470 [ 68.143753][ T2272] madvise_walk_vmas+0x3f1/0x700 [ 68.143863][ T2272] ? __cfi_madvise_vma_behavior+0x10/0x10 [ 68.143954][ T2272] ? down_read+0x7f/0xe0 [ 68.144033][ T2272] ? madvise_set_anon_name+0x650/0x650 [ 68.144119][ T2272] ? __asan_memset+0x39/0x50 [ 68.144204][ T2272] ? blk_start_plug+0x71/0x1c0 [ 68.144277][ T2272] do_madvise+0x5e8/0xbb0 [ 68.144355][ T2272] ? __cfi_do_madvise+0x10/0x10 [ 68.144441][ T2272] ? __cfi_ksys_write+0x10/0x10 [ 68.144502][ T2272] ? __kasan_check_write+0x18/0x20 [ 68.144596][ T2272] ? fpregs_restore_userregs+0x11c/0x260 [ 68.144683][ T2272] __x64_sys_madvise+0xad/0xc0 [ 68.144765][ T2272] x64_sys_call+0x20c3/0x2ee0 [ 68.144836][ T2272] do_syscall_64+0x57/0xf0 [ 68.144892][ T2272] ? clear_bhb_loop+0x50/0xa0 [ 68.144975][ T2272] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 68.145075][ T2272] RIP: 0033:0x7f7facf9fb19 [ 68.145130][ T2272] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 68.145184][ T2272] RSP: 002b:00007f7fadf43028 EFLAGS: 00000246 ORIG_RAX: 000000000000001c [ 68.145249][ T2272] RAX: ffffffffffffffda RBX: 00007f7fad225fa0 RCX: 00007f7facf9fb19 [ 68.145300][ T2272] RDX: 0000000000000066 RSI: 000000000080fd00 RDI: 000020000042f000 [ 68.145344][ T2272] RBP: 00007f7fad037b70 R08: 0000000000000000 R09: 0000000000000000 [ 68.145385][ T2272] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 68.145426][ T2272] R13: 00007f7fad226038 R14: 00007f7fad225fa0 R15: 00007ffd63226b28 [ 68.145481][ T2272] [ 68.912157][ T36] audit: type=1400 audit(1700000023.600:366): avc: denied { wake_alarm } for pid=2315 comm="syz.3.876" capability=35 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 68.963380][ T2313] raw_sendmsg: syz.0.875 forgot to set AF_INET. Fix it! [ 69.173080][ T10] hid-generic 0000:0000:0000.000B: unknown main item tag 0x0 [ 69.191209][ T10] hid-generic 0000:0000:0000.000B: hidraw0: HID v0.00 Device [syz1] on syz0 [ 69.227601][ T2334] fido_id[2334]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 69.292761][ T2339] FAULT_INJECTION: forcing a failure. [ 69.292761][ T2339] name fail_futex, interval 1, probability 0, space 0, times 1 [ 69.305956][ T2339] CPU: 1 UID: 0 PID: 2339 Comm: syz.0.886 Not tainted syzkaller #0 6d6f333215c564de92c741644a4b57c848379815 [ 69.305996][ T2339] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 69.306030][ T2339] Call Trace: [ 69.306038][ T2339] [ 69.306047][ T2339] __dump_stack+0x21/0x30 [ 69.306077][ T2339] dump_stack_lvl+0x140/0x1c0 [ 69.306101][ T2339] ? __cfi_dump_stack_lvl+0x10/0x10 [ 69.306126][ T2339] ? kasan_save_track+0x4f/0x80 [ 69.306149][ T2339] ? kasan_save_track+0x3e/0x80 [ 69.306172][ T2339] ? kasan_save_free_info+0x44/0x50 [ 69.306205][ T2339] ? kfree+0x158/0x440 [ 69.306239][ T2339] dump_stack+0x19/0x20 [ 69.306261][ T2339] should_fail_ex+0x3c2/0x510 [ 69.306308][ T2339] should_fail+0xf/0x20 [ 69.306329][ T2339] get_futex_key+0x178/0x940 [ 69.306356][ T2339] ? __cfi_get_futex_key+0x10/0x10 [ 69.306382][ T2339] futex_wake+0x150/0x950 [ 69.306414][ T2339] ? __cfi_futex_wake+0x10/0x10 [ 69.306445][ T2339] ? __kasan_slab_free+0x6a/0x80 [ 69.306470][ T2339] ? kfree+0x158/0x440 [ 69.306503][ T2339] ? __kasan_check_write+0x18/0x20 [ 69.306539][ T2339] ? __se_sys_fgetxattr+0x300/0x3a0 [ 69.306577][ T2339] do_futex+0x37d/0x510 [ 69.306604][ T2339] ? __cfi_do_futex+0x10/0x10 [ 69.306632][ T2339] __se_sys_futex+0x13c/0x320 [ 69.306661][ T2339] ? __x64_sys_futex+0x110/0x110 [ 69.306690][ T2339] __x64_sys_futex+0xe9/0x110 [ 69.306717][ T2339] x64_sys_call+0x227f/0x2ee0 [ 69.306744][ T2339] do_syscall_64+0x57/0xf0 [ 69.306773][ T2339] ? clear_bhb_loop+0x50/0xa0 [ 69.306808][ T2339] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 69.306842][ T2339] RIP: 0033:0x7f4408b9fb19 [ 69.306863][ T2339] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 69.306885][ T2339] RSP: 002b:00007f440997f0e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 69.306911][ T2339] RAX: ffffffffffffffda RBX: 00007f4408e25fa8 RCX: 00007f4408b9fb19 [ 69.306930][ T2339] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007f4408e25fac [ 69.306947][ T2339] RBP: 00007f4408e25fa0 R08: 4000000000000000 R09: 0000000000000000 [ 69.306964][ T2339] R10: ffffffffffffffff R11: 0000000000000246 R12: 0000000000000000 [ 69.306981][ T2339] R13: 00007f4408e26038 R14: 00007ffc885de800 R15: 00007ffc885de8e8 [ 69.307002][ T2339] [ 69.617094][ T10] usb 4-1: new high-speed USB device number 9 using dummy_hcd [ 69.705915][ T36] audit: type=1400 audit(1700000024.390:367): avc: denied { attach_queue } for pid=2352 comm="syz.5.892" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tun_socket permissive=1 [ 69.771288][ T10] usb 4-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 69.786855][ T10] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 69.801939][ T2360] kvm: user requested TSC rate below hardware speed [ 69.812535][ T10] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 69.822408][ T10] usb 4-1: SerialNumber: syz [ 69.973656][ T2372] 9pnet: p9_errstr2errno: server reported unknown error tun [ 70.282637][ T2410] FAULT_INJECTION: forcing a failure. [ 70.282637][ T2410] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 70.296005][ T2410] CPU: 0 UID: 0 PID: 2410 Comm: syz.5.912 Not tainted syzkaller #0 6d6f333215c564de92c741644a4b57c848379815 [ 70.296047][ T2410] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 70.296062][ T2410] Call Trace: [ 70.296069][ T2410] [ 70.296078][ T2410] __dump_stack+0x21/0x30 [ 70.296105][ T2410] dump_stack_lvl+0x140/0x1c0 [ 70.296127][ T2410] ? __cfi_dump_stack_lvl+0x10/0x10 [ 70.296149][ T2410] dump_stack+0x19/0x20 [ 70.296169][ T2410] should_fail_ex+0x3c2/0x510 [ 70.296206][ T2410] should_fail_alloc_page+0xec/0x110 [ 70.296234][ T2410] __alloc_pages_noprof+0x1c0/0x7e0 [ 70.296265][ T2410] ? __cfi___alloc_pages_noprof+0x10/0x10 [ 70.296300][ T2410] ? __futex_queue+0x19f/0x350 [ 70.296325][ T2410] __pmd_alloc+0xb0/0x9a0 [ 70.296349][ T2410] ? __cfi___pmd_alloc+0x10/0x10 [ 70.296374][ T2410] ? __cfi___thp_vma_allowable_orders+0x10/0x10 [ 70.296405][ T2410] handle_mm_fault+0xd23/0x1ba0 [ 70.296438][ T2410] ? __cfi_handle_mm_fault+0x10/0x10 [ 70.296454][ T2410] ? __kasan_check_write+0x18/0x20 [ 70.296482][ T2410] ? vfs_write+0xbd2/0xfd0 [ 70.296512][ T2410] ? lock_mm_and_find_vma+0xb8/0x390 [ 70.296529][ T2410] do_user_addr_fault+0x4ee/0x1230 [ 70.296550][ T2410] exc_page_fault+0x58/0xc0 [ 70.296573][ T2410] asm_exc_page_fault+0x2b/0x30 [ 70.296596][ T2410] RIP: 0010:__put_user_8+0x11/0x30 [ 70.296614][ T2410] Code: 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 48 89 cb 48 c1 fb 3f 48 09 d9 0f 01 cb <48> 89 01 31 c9 0f 01 ca e9 42 a5 02 00 90 90 90 90 90 90 90 90 90 [ 70.296629][ T2410] RSP: 0018:ffffc900014b7ee8 EFLAGS: 00050246 [ 70.296644][ T2410] RAX: 0000000000000018 RBX: 0000000000000000 RCX: 0000000000000000 [ 70.296662][ T2410] RDX: ffffc9000fb0a000 RSI: 0000000000000007 RDI: 0000000000000008 [ 70.296673][ T2410] RBP: ffffc900014b7f10 R08: ffff888112e1002b R09: 1ffff110225c2005 [ 70.296685][ T2410] R10: dffffc0000000000 R11: ffffed10225c2006 R12: dffffc0000000000 [ 70.296698][ T2410] R13: 0000000000000000 R14: 0000000000000000 R15: 00007f7fadf439a0 [ 70.296711][ T2410] ? __x64_sys_get_robust_list+0x9d/0xf0 [ 70.296732][ T2410] x64_sys_call+0x2e84/0x2ee0 [ 70.296750][ T2410] do_syscall_64+0x57/0xf0 [ 70.296767][ T2410] ? clear_bhb_loop+0x50/0xa0 [ 70.296790][ T2410] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 70.296812][ T2410] RIP: 0033:0x7f7facf9fb19 [ 70.296826][ T2410] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 70.296839][ T2410] RSP: 002b:00007f7fadf43028 EFLAGS: 00000246 ORIG_RAX: 0000000000000112 [ 70.296855][ T2410] RAX: ffffffffffffffda RBX: 00007f7fad225fa0 RCX: 00007f7facf9fb19 [ 70.296867][ T2410] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 70.296877][ T2410] RBP: 00007f7fad037b70 R08: 0000000000000000 R09: 0000000000000000 [ 70.296887][ T2410] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 70.296897][ T2410] R13: 00007f7fad226038 R14: 00007f7fad225fa0 R15: 00007ffd63226b28 [ 70.296911][ T2410] [ 70.601071][ T10] cdc_ether 4-1:1.0 usb0: register 'cdc_ether' at usb-dummy_hcd.3-1, CDC Ethernet Device, 42:42:42:42:42:42 [ 70.645074][ T36] audit: type=1400 audit(1700000025.310:368): avc: denied { search } for pid=150 comm="dhcpcd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 70.666719][ T36] audit: type=1400 audit(1700000025.310:369): avc: denied { read } for pid=150 comm="dhcpcd" name="n17" dev="tmpfs" ino=1180 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 70.710177][ T36] audit: type=1400 audit(1700000025.310:370): avc: denied { open } for pid=150 comm="dhcpcd" path="/run/udev/data/n17" dev="tmpfs" ino=1180 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 70.745923][ T311] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 70.770052][ T36] audit: type=1400 audit(1700000025.310:371): avc: denied { getattr } for pid=150 comm="dhcpcd" path="/run/udev/data/n17" dev="tmpfs" ino=1180 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 70.831776][ T36] audit: type=1400 audit(1700000025.380:372): avc: denied { read } for pid=2417 comm="dhcpcd-run-hook" name="resolv.conf" dev="tmpfs" ino=426 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 70.854804][ T36] audit: type=1400 audit(1700000025.380:373): avc: denied { open } for pid=2417 comm="dhcpcd-run-hook" path="/run/dhcpcd/hook-state/resolv.conf" dev="tmpfs" ino=426 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 70.879788][ T36] audit: type=1400 audit(1700000025.380:374): avc: denied { getattr } for pid=2417 comm="dhcpcd-run-hook" path="/run/dhcpcd/hook-state/resolv.conf" dev="tmpfs" ino=426 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 70.904984][ T36] audit: type=1400 audit(1700000025.390:375): avc: denied { cmd } for pid=2415 comm="iou-wrk-2418" path="socket:[17146]" dev="sockfs" ino=17146 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 70.922181][ T311] usb 5-1: unable to get BOS descriptor or descriptor too short [ 70.945483][ T311] usb 5-1: config 1 has an invalid descriptor of length 48, skipping remainder of the config [ 70.958484][ T311] usb 5-1: too many endpoints for config 1 interface 0 altsetting 1: 48, using maximum allowed: 30 [ 70.990448][ T311] usb 5-1: config 1 interface 0 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 48 [ 71.019007][ T311] usb 5-1: New USB device found, idVendor=2b53, idProduct=0031, bcdDevice= 0.40 [ 71.029126][ T2185] usb 4-1: USB disconnect, device number 9 [ 71.049714][ T2185] cdc_ether 4-1:1.0 usb0: unregister 'cdc_ether' usb-dummy_hcd.3-1, CDC Ethernet Device [ 71.066267][ T311] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 71.076134][ T311] usb 5-1: Product: syz [ 71.090182][ T311] usb 5-1: Manufacturer: syz [ 71.096123][ T311] usb 5-1: SerialNumber: syz [ 71.162669][ T2449] sit: non-ECT from 172.30.0.1 with TOS=0xcd [ 71.241934][ T2463] input: syz0 as /devices/virtual/input/input15 [ 71.310243][ T311] snd-usb-audio 5-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 71.320642][ T311] snd-usb-audio 5-1:1.1: probe with driver snd-usb-audio failed with error -22 [ 71.336627][ T311] snd-usb-audio 5-1:1.2: probe with driver snd-usb-audio failed with error -22 [ 71.346821][ T311] usb 5-1: USB disconnect, device number 4 [ 71.362155][ T704] udevd[704]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.2/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 71.530202][ T10] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 71.686593][ T10] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 71.702548][ T10] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 71.717799][ T10] usb 1-1: New USB device found, idVendor=09e8, idProduct=0062, bcdDevice= 0.40 [ 71.727712][ T10] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 71.736116][ T10] usb 1-1: Product: syz [ 71.740614][ T10] usb 1-1: Manufacturer: syz [ 71.746986][ T10] usb 1-1: SerialNumber: syz [ 71.965232][ T10] snd-usb-audio 1-1:1.0: probe with driver snd-usb-audio failed with error -2 [ 71.975329][ T10] usb 1-1: USB disconnect, device number 7 [ 71.986581][ T380] udevd[380]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 72.080240][ T66] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 72.198172][ T2525] pim6reg1: entered promiscuous mode [ 72.203631][ T2525] pim6reg1: entered allmulticast mode [ 72.241430][ T66] usb 5-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 72.256210][ T66] usb 5-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 1023 [ 72.268005][ T66] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 72.280206][ T66] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 72.288252][ T66] usb 5-1: Product: syz [ 72.292658][ T66] usb 5-1: Manufacturer: syz [ 72.296642][ T2527] FAULT_INJECTION: forcing a failure. [ 72.296642][ T2527] name failslab, interval 1, probability 0, space 0, times 0 [ 72.297285][ T66] usb 5-1: SerialNumber: syz [ 72.304613][ T66] cdc_ncm 5-1:1.0: skipping garbage [ 72.310986][ T2527] CPU: 1 UID: 0 PID: 2527 Comm: syz.5.950 Not tainted syzkaller #0 6d6f333215c564de92c741644a4b57c848379815 [ 72.311095][ T2527] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 72.311137][ T2527] Call Trace: [ 72.311157][ T2527] [ 72.311181][ T2527] __dump_stack+0x21/0x30 [ 72.311256][ T2527] dump_stack_lvl+0x140/0x1c0 [ 72.311319][ T2527] ? __cfi_dump_stack_lvl+0x10/0x10 [ 72.311409][ T2527] dump_stack+0x19/0x20 [ 72.311483][ T2527] should_fail_ex+0x3c2/0x510 [ 72.311579][ T2527] should_failslab+0xac/0x100 [ 72.311643][ T2527] __kmalloc_cache_noprof+0x41/0x470 [ 72.311739][ T2527] ? ipv6_flowlabel_opt+0x1914/0x25e0 [ 72.311835][ T2527] ? ipv6_flowlabel_opt+0x150e/0x25e0 [ 72.311924][ T2527] ipv6_flowlabel_opt+0x1914/0x25e0 [ 72.312006][ T2527] ? __cfi_ipv6_flowlabel_opt+0x10/0x10 [ 72.312100][ T2527] ? __kasan_check_write+0x18/0x20 [ 72.312197][ T2527] ? _raw_spin_lock_bh+0x96/0x130 [ 72.312262][ T2527] ? __cfi__raw_spin_lock_bh+0x10/0x10 [ 72.312319][ T2527] ? _raw_spin_unlock+0x45/0x60 [ 72.312382][ T2527] ? _raw_spin_unlock_bh+0x54/0x60 [ 72.312447][ T2527] ? lock_sock_nested+0x216/0x2a0 [ 72.312509][ T2527] ? __cfi_lock_sock_nested+0x10/0x10 [ 72.312560][ T2527] do_ipv6_setsockopt+0xea0/0x3350 [ 72.312655][ T2527] ? __cfi_do_ipv6_setsockopt+0x10/0x10 [ 72.312742][ T2527] ? schedule+0xc1/0x170 [ 72.312823][ T2527] ? futex_unqueue+0x136/0x160 [ 72.312911][ T2527] ? avc_has_perm_noaudit+0x26b/0x360 [ 72.312978][ T2527] ? __asan_memcpy+0x5a/0x80 [ 72.313074][ T2527] ? avc_has_perm_noaudit+0x289/0x360 [ 72.313148][ T2527] ? avc_has_perm+0x155/0x240 [ 72.313212][ T2527] ? __cfi_avc_has_perm+0x10/0x10 [ 72.313276][ T2527] ? futex_wake+0x666/0x950 [ 72.313363][ T2527] ? selinux_socket_setsockopt+0x324/0x3d0 [ 72.313469][ T2527] ipv6_setsockopt+0x5d/0x170 [ 72.313549][ T2527] rawv6_setsockopt+0x276/0x5d0 [ 72.313623][ T2527] ? __cfi_rawv6_setsockopt+0x10/0x10 [ 72.313706][ T2527] ? do_futex+0x32a/0x510 [ 72.313764][ T2527] sock_common_setsockopt+0xb8/0xd0 [ 72.313829][ T2527] ? __cfi_sock_common_setsockopt+0x10/0x10 [ 72.313892][ T2527] do_sock_setsockopt+0x27c/0x410 [ 72.313975][ T2527] ? __cfi_do_sock_setsockopt+0x10/0x10 [ 72.314057][ T2527] ? __fget_files+0x2bc/0x330 [ 72.314123][ T2527] __x64_sys_setsockopt+0x18c/0x220 [ 72.314215][ T2527] x64_sys_call+0x2adc/0x2ee0 [ 72.314280][ T2527] do_syscall_64+0x57/0xf0 [ 72.314343][ T2527] ? clear_bhb_loop+0x50/0xa0 [ 72.314428][ T2527] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 72.314517][ T2527] RIP: 0033:0x7f7facf9fb19 [ 72.314536][ T2527] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 72.314556][ T2527] RSP: 002b:00007f7fadf43028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 72.314581][ T2527] RAX: ffffffffffffffda RBX: 00007f7fad225fa0 RCX: 00007f7facf9fb19 [ 72.314640][ T2527] RDX: 0000000000000020 RSI: 0000000000000029 RDI: 0000000000000003 [ 72.314696][ T2527] RBP: 00007f7fad037b70 R08: 0000000000000020 R09: 0000000000000000 [ 72.314757][ T2527] R10: 0000200000000180 R11: 0000000000000246 R12: 0000000000000000 [ 72.314806][ T2527] R13: 00007f7fad226038 R14: 00007f7fad225fa0 R15: 00007ffd63226b28 [ 72.314852][ T2527] [ 72.644292][ T2498] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 72.735863][ T2535] FAULT_INJECTION: forcing a failure. [ 72.735863][ T2535] name fail_futex, interval 1, probability 0, space 0, times 0 [ 72.748984][ T2535] CPU: 0 UID: 0 PID: 2535 Comm: syz.5.954 Not tainted syzkaller #0 6d6f333215c564de92c741644a4b57c848379815 [ 72.749040][ T2535] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 72.749057][ T2535] Call Trace: [ 72.749067][ T2535] [ 72.749077][ T2535] __dump_stack+0x21/0x30 [ 72.749112][ T2535] dump_stack_lvl+0x140/0x1c0 [ 72.749138][ T2535] ? __cfi_dump_stack_lvl+0x10/0x10 [ 72.749154][ T2535] ? gup_fast_fallback+0x671/0x740 [ 72.749176][ T2535] dump_stack+0x19/0x20 [ 72.749191][ T2535] should_fail_ex+0x3c2/0x510 [ 72.749218][ T2535] should_fail+0xf/0x20 [ 72.749232][ T2535] should_fail_futex+0x3c/0x50 [ 72.749249][ T2535] futex_lock_pi_atomic+0x11b/0xcb0 [ 72.749270][ T2535] ? __cfi_futex_lock_pi_atomic+0x10/0x10 [ 72.749291][ T2535] ? __cfi_futex_setup_timer+0x10/0x10 [ 72.749308][ T2535] ? __cfi_get_futex_key+0x10/0x10 [ 72.749326][ T2535] futex_lock_pi+0x2a7/0xa70 [ 72.749346][ T2535] ? futex_unqueue+0x136/0x160 [ 72.749364][ T2535] ? __cfi_futex_lock_pi+0x10/0x10 [ 72.749385][ T2535] ? __cfi_futex_wake_mark+0x10/0x10 [ 72.749409][ T2535] ? __cfi_futex_wake_mark+0x10/0x10 [ 72.749431][ T2535] ? vfs_write+0xbd2/0xfd0 [ 72.749457][ T2535] do_futex+0x2fc/0x510 [ 72.749475][ T2535] ? __cfi_do_futex+0x10/0x10 [ 72.749493][ T2535] ? mutex_unlock+0x90/0x240 [ 72.749516][ T2535] __se_sys_futex+0x13c/0x320 [ 72.749536][ T2535] ? fput+0x1a4/0x230 [ 72.749556][ T2535] ? __x64_sys_futex+0x110/0x110 [ 72.749574][ T2535] ? __cfi_ksys_write+0x10/0x10 [ 72.749589][ T2535] ? __kasan_check_write+0x18/0x20 [ 72.749615][ T2535] __x64_sys_futex+0xe9/0x110 [ 72.749633][ T2535] x64_sys_call+0x227f/0x2ee0 [ 72.749651][ T2535] do_syscall_64+0x57/0xf0 [ 72.749668][ T2535] ? clear_bhb_loop+0x50/0xa0 [ 72.749692][ T2535] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 72.749714][ T2535] RIP: 0033:0x7f7facf9fb19 [ 72.749729][ T2535] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 72.749744][ T2535] RSP: 002b:00007f7fadf43028 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 72.749762][ T2535] RAX: ffffffffffffffda RBX: 00007f7fad225fa0 RCX: 00007f7facf9fb19 [ 72.749775][ T2535] RDX: 0000000000000000 RSI: 0000000000000008 RDI: 0000000000000000 [ 72.749785][ T2535] RBP: 00007f7fad037b70 R08: 0000000000000000 R09: 0000000000000000 [ 72.749796][ T2535] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 72.749806][ T2535] R13: 00007f7fad226038 R14: 00007f7fad225fa0 R15: 00007ffd63226b28 [ 72.749821][ T2535] [ 73.317990][ T2571] FAULT_INJECTION: forcing a failure. [ 73.317990][ T2571] name failslab, interval 1, probability 0, space 0, times 0 [ 73.330860][ T2571] CPU: 1 UID: 0 PID: 2571 Comm: syz.3.968 Not tainted syzkaller #0 6d6f333215c564de92c741644a4b57c848379815 [ 73.330899][ T2571] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 73.330922][ T2571] Call Trace: [ 73.330937][ T2571] [ 73.330964][ T2571] __dump_stack+0x21/0x30 [ 73.330995][ T2571] dump_stack_lvl+0x140/0x1c0 [ 73.331019][ T2571] ? __cfi_dump_stack_lvl+0x10/0x10 [ 73.331043][ T2571] dump_stack+0x19/0x20 [ 73.331068][ T2571] should_fail_ex+0x3c2/0x510 [ 73.331096][ T2571] should_failslab+0xac/0x100 [ 73.331137][ T2571] __kmalloc_cache_noprof+0x41/0x470 [ 73.331171][ T2571] ? __asan_memcpy+0x5a/0x80 [ 73.331207][ T2571] ? ip6addrlbl_add+0x14d/0xad0 [ 73.331227][ T2571] ip6addrlbl_add+0x14d/0xad0 [ 73.331248][ T2571] ip6addrlbl_net_init+0x173/0x410 [ 73.331290][ T2571] ops_init+0x302/0x5d0 [ 73.331312][ T2571] ? __kasan_check_write+0x18/0x20 [ 73.331350][ T2571] ? rwsem_read_trylock+0x275/0x5a0 [ 73.331372][ T2571] setup_net+0x227/0x9b0 [ 73.331398][ T2571] ? copy_net_ns+0xa20/0xa20 [ 73.331448][ T2571] ? down_read_killable+0x7f/0x100 [ 73.331482][ T2571] ? __cfi_down_read_killable+0x10/0x10 [ 73.331516][ T2571] copy_net_ns+0x4fc/0xa20 [ 73.331542][ T2571] create_new_namespaces+0x390/0x6f0 [ 73.331578][ T2571] unshare_nsproxy_namespaces+0x124/0x180 [ 73.331604][ T2571] ksys_unshare+0x4f9/0x920 [ 73.331626][ T2571] ? __cfi_ksys_unshare+0x10/0x10 [ 73.331652][ T2571] ? __kasan_check_write+0x18/0x20 [ 73.331677][ T2571] __x64_sys_unshare+0x3c/0x50 [ 73.331692][ T2571] x64_sys_call+0x2998/0x2ee0 [ 73.331725][ T2571] do_syscall_64+0x57/0xf0 [ 73.331751][ T2571] ? clear_bhb_loop+0x50/0xa0 [ 73.331784][ T2571] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 73.331820][ T2571] RIP: 0033:0x7f743839fb19 [ 73.331834][ T2571] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 73.331848][ T2571] RSP: 002b:00007f7439217028 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 73.331883][ T2571] RAX: ffffffffffffffda RBX: 00007f7438625fa0 RCX: 00007f743839fb19 [ 73.331903][ T2571] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000040000000 [ 73.331925][ T2571] RBP: 00007f7438437b70 R08: 0000000000000000 R09: 0000000000000000 [ 73.331941][ T2571] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 73.331955][ T2571] R13: 00007f7438626038 R14: 00007f7438625fa0 R15: 00007fff75ef51c8 [ 73.331980][ T2571] [ 73.585097][ T2498] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 73.800665][ T66] cdc_ncm 5-1:1.0: bind() failure [ 73.806947][ T66] cdc_ncm 5-1:1.1: probe with driver cdc_ncm failed with error -71 [ 73.815545][ T66] cdc_mbim 5-1:1.1: probe with driver cdc_mbim failed with error -71 [ 73.827126][ T66] usb 5-1: USB disconnect, device number 5 [ 73.940252][ T1512] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 73.951583][ T2587] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input16 [ 74.090217][ T1512] usb 1-1: Using ep0 maxpacket: 8 [ 74.096798][ T1512] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 74.107140][ T1512] usb 1-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 74.116372][ T1512] usb 1-1: config 1 interface 1 altsetting 1 endpoint 0x1 has invalid wMaxPacketSize 0 [ 74.131354][ T1512] usb 1-1: New USB device found, idVendor=0582, idProduct=0025, bcdDevice= 0.40 [ 74.150035][ T1512] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 74.160199][ T1512] usb 1-1: Product: syz [ 74.164421][ T1512] usb 1-1: Manufacturer: syz [ 74.170563][ T1512] usb 1-1: SerialNumber: syz [ 74.410229][ T311] usb 4-1: new full-speed USB device number 10 using dummy_hcd [ 74.561000][ T311] usb 4-1: not running at top speed; connect to a high speed hub [ 74.569615][ T311] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 74.581060][ T311] usb 4-1: New USB device found, idVendor=225a, idProduct=e1d4, bcdDevice=a7.ad [ 74.590258][ T311] usb 4-1: New USB device strings: Mfr=245, Product=210, SerialNumber=0 [ 74.598659][ T311] usb 4-1: Product: syz [ 74.602906][ T311] usb 4-1: Manufacturer: syz [ 74.611167][ T311] usb 4-1: Found UVC 1.00 device syz (225a:e1d4) [ 74.617629][ T311] usb 4-1: No streaming interface found for terminal 2. [ 74.636099][ T36] kauditd_printk_skb: 17 callbacks suppressed [ 74.636121][ T36] audit: type=1400 audit(1700000029.320:393): avc: denied { execmem } for pid=2620 comm="syz.4.990" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 74.792432][ T1512] usb 1-1: uac_clock_source_is_valid(): cannot get clock validity for id 0 [ 74.801092][ T1512] usb 1-1: clock source 0 is not valid, cannot use [ 74.807974][ T1512] usb 1-1: 1:1: cannot get freq (v2/v3): err -32 [ 74.821611][ T311] usb 4-1: USB disconnect, device number 10 [ 74.849796][ T2630] FAULT_INJECTION: forcing a failure. [ 74.849796][ T2630] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 74.863245][ T2630] CPU: 0 UID: 0 PID: 2630 Comm: syz.4.994 Not tainted syzkaller #0 6d6f333215c564de92c741644a4b57c848379815 [ 74.863283][ T2630] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 74.863299][ T2630] Call Trace: [ 74.863306][ T2630] [ 74.863316][ T2630] __dump_stack+0x21/0x30 [ 74.863345][ T2630] dump_stack_lvl+0x140/0x1c0 [ 74.863368][ T2630] ? __cfi_dump_stack_lvl+0x10/0x10 [ 74.863392][ T2630] ? __kasan_check_write+0x18/0x20 [ 74.863428][ T2630] dump_stack+0x19/0x20 [ 74.863450][ T2630] should_fail_ex+0x3c2/0x510 [ 74.863488][ T2630] should_fail_alloc_page+0xec/0x110 [ 74.863514][ T2630] __alloc_pages_noprof+0x1c0/0x7e0 [ 74.863544][ T2630] ? __cfi___alloc_pages_noprof+0x10/0x10 [ 74.863576][ T2630] ? folio_add_lru+0x116/0x400 [ 74.863600][ T2630] ? __cfi_folio_add_lru+0x10/0x10 [ 74.863627][ T2630] __folio_alloc_noprof+0x14/0x80 [ 74.863661][ T2630] shmem_alloc_and_add_folio+0x45f/0x10b0 [ 74.863682][ T2630] ? shmem_replace_folio+0x9b0/0x9b0 [ 74.863699][ T2630] ? shmem_huge_global_enabled+0x2da/0x360 [ 74.863725][ T2630] ? shmem_allowable_huge_orders+0x1f7/0x430 [ 74.863753][ T2630] shmem_get_folio_gfp+0x5cd/0x12e0 [ 74.863771][ T2630] ? shmem_get_folio+0xc0/0xc0 [ 74.863786][ T2630] ? __cfi_folio_unlock+0x10/0x10 [ 74.863802][ T2630] ? __kasan_check_write+0x18/0x20 [ 74.863826][ T2630] ? noop_dirty_folio+0x81/0xa0 [ 74.863848][ T2630] shmem_fallocate+0x8df/0xcb0 [ 74.863871][ T2630] ? __cfi_shmem_fallocate+0x10/0x10 [ 74.863892][ T2630] ? __se_sys_futex+0x13c/0x320 [ 74.863911][ T2630] ? fput+0x1a4/0x230 [ 74.863931][ T2630] vfs_fallocate+0x533/0x620 [ 74.863948][ T2630] __x64_sys_fallocate+0xc3/0x110 [ 74.863965][ T2630] x64_sys_call+0x2e48/0x2ee0 [ 74.863983][ T2630] do_syscall_64+0x57/0xf0 [ 74.864000][ T2630] ? clear_bhb_loop+0x50/0xa0 [ 74.864024][ T2630] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 74.864046][ T2630] RIP: 0033:0x7f1ecff9fb19 [ 74.864061][ T2630] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 74.864075][ T2630] RSP: 002b:00007f1ed0e5f028 EFLAGS: 00000246 ORIG_RAX: 000000000000011d [ 74.864092][ T2630] RAX: ffffffffffffffda RBX: 00007f1ed0225fa0 RCX: 00007f1ecff9fb19 [ 74.864105][ T2630] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000003 [ 74.864115][ T2630] RBP: 00007f1ed0037b70 R08: 0000000000000000 R09: 0000000000000000 [ 74.864125][ T2630] R10: 000000000008ffff R11: 0000000000000246 R12: 0000000000000000 [ 74.864136][ T2630] R13: 00007f1ed0226038 R14: 00007f1ed0225fa0 R15: 00007fff76ab38b8 [ 74.864150][ T2630] [ 75.039614][ T311] usb 1-1: USB disconnect, device number 8 [ 75.182912][ T36] audit: type=1400 audit(1700000029.870:394): avc: denied { execute } for pid=2640 comm="syz.4.999" path="/45/file1" dev="tmpfs" ino=266 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 75.288457][ T45] rust_binder: 2648: undelivered TRANSACTION_COMPLETE [ 75.793634][ T36] audit: type=1400 audit(1700000030.480:395): avc: denied { mounton } for pid=2675 comm="syz.0.1013" path="/193/file0/file0" dev="ramfs" ino=18288 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:ramfs_t tclass=dir permissive=1 [ 75.793947][ T2676] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 75.825678][ T2676] overlayfs: failed to set xattr on upper [ 75.831588][ T2676] overlayfs: ...falling back to redirect_dir=nofollow. [ 75.838566][ T2676] overlayfs: ...falling back to index=off. [ 75.845807][ T2676] overlayfs: ...falling back to uuid=null. [ 75.851826][ T2676] overlayfs: NFS export requires "index=on", falling back to nfs_export=off. [ 75.893163][ T36] audit: type=1400 audit(1700000030.580:396): avc: denied { unmount } for pid=298 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ramfs_t tclass=filesystem permissive=1 [ 76.017334][ T36] audit: type=1400 audit(1700000030.700:397): avc: denied { read write } for pid=2691 comm="syz.3.1021" name="raw-gadget" dev="devtmpfs" ino=190 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 76.043918][ T36] audit: type=1400 audit(1700000030.700:398): avc: denied { open } for pid=2691 comm="syz.3.1021" path="/dev/raw-gadget" dev="devtmpfs" ino=190 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 76.067722][ T36] audit: type=1400 audit(1700000030.700:399): avc: denied { ioctl } for pid=2691 comm="syz.3.1021" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5500 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 76.218708][ T2705] FAULT_INJECTION: forcing a failure. [ 76.218708][ T2705] name failslab, interval 1, probability 0, space 0, times 0 [ 76.231849][ T2705] CPU: 0 UID: 0 PID: 2705 Comm: syz.5.1027 Not tainted syzkaller #0 6d6f333215c564de92c741644a4b57c848379815 [ 76.231890][ T2705] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 76.231905][ T2705] Call Trace: [ 76.231913][ T2705] [ 76.231922][ T2705] __dump_stack+0x21/0x30 [ 76.231950][ T2705] dump_stack_lvl+0x140/0x1c0 [ 76.231973][ T2705] ? __cfi_dump_stack_lvl+0x10/0x10 [ 76.231998][ T2705] dump_stack+0x19/0x20 [ 76.232019][ T2705] should_fail_ex+0x3c2/0x510 [ 76.232058][ T2705] ? __d_alloc+0xe4/0x8c0 [ 76.232092][ T2705] should_failslab+0xac/0x100 [ 76.232118][ T2705] __kmalloc_noprof+0x69/0x510 [ 76.232152][ T2705] ? __d_alloc+0xe4/0x8c0 [ 76.232187][ T2705] __d_alloc+0xe4/0x8c0 [ 76.232220][ T2705] d_alloc_pseudo+0x23/0xc0 [ 76.232261][ T2705] alloc_file_pseudo+0xde/0x1f0 [ 76.232296][ T2705] ? __cfi_alloc_file_pseudo+0x10/0x10 [ 76.232322][ T2705] ? shmem_get_inode+0x81c/0xc10 [ 76.232349][ T2705] ? __kasan_check_write+0x18/0x20 [ 76.232383][ T2705] ? clear_nlink+0x8e/0xf0 [ 76.232407][ T2705] __shmem_file_setup+0x242/0x2c0 [ 76.232430][ T2705] shmem_file_setup+0x33/0x40 [ 76.232453][ T2705] __se_sys_memfd_create+0x3bb/0x8f0 [ 76.232490][ T2705] ? __x64_sys_memfd_create+0x80/0x80 [ 76.232525][ T2705] ? __kasan_check_write+0x18/0x20 [ 76.232558][ T2705] __x64_sys_memfd_create+0x5f/0x80 [ 76.232593][ T2705] x64_sys_call+0x29f8/0x2ee0 [ 76.232619][ T2705] do_syscall_64+0x57/0xf0 [ 76.232643][ T2705] ? clear_bhb_loop+0x50/0xa0 [ 76.232687][ T2705] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 76.232720][ T2705] RIP: 0033:0x7f7facf9fb19 [ 76.232740][ T2705] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 76.232760][ T2705] RSP: 002b:00007f7fadf43028 EFLAGS: 00000246 ORIG_RAX: 000000000000013f [ 76.232785][ T2705] RAX: ffffffffffffffda RBX: 00007f7fad225fa0 RCX: 00007f7facf9fb19 [ 76.232802][ T2705] RDX: 0000000000000000 RSI: 0000000000000003 RDI: 0000200000000000 [ 76.232817][ T2705] RBP: 00007f7fad037b70 R08: 0000000000000000 R09: 0000000000000000 [ 76.232832][ T2705] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 76.232846][ T2705] R13: 00007f7fad226038 R14: 00007f7fad225fa0 R15: 00007ffd63226b28 [ 76.232866][ T2705] [ 76.470240][ T1714] usb 4-1: new high-speed USB device number 11 using dummy_hcd [ 76.497666][ T36] audit: type=1400 audit(1700000031.180:400): avc: denied { append } for pid=2710 comm="syz.5.1030" name="ppp" dev="devtmpfs" ino=86 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 76.550335][ T2715] FAULT_INJECTION: forcing a failure. [ 76.550335][ T2715] name failslab, interval 1, probability 0, space 0, times 0 [ 76.563401][ T2715] CPU: 1 UID: 0 PID: 2715 Comm: syz.4.1032 Not tainted syzkaller #0 6d6f333215c564de92c741644a4b57c848379815 [ 76.563444][ T2715] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 76.563460][ T2715] Call Trace: [ 76.563468][ T2715] [ 76.563478][ T2715] __dump_stack+0x21/0x30 [ 76.563507][ T2715] dump_stack_lvl+0x140/0x1c0 [ 76.563530][ T2715] ? __cfi_dump_stack_lvl+0x10/0x10 [ 76.563554][ T2715] ? futex_wake+0x627/0x950 [ 76.563586][ T2715] dump_stack+0x19/0x20 [ 76.563607][ T2715] should_fail_ex+0x3c2/0x510 [ 76.563645][ T2715] should_failslab+0xac/0x100 [ 76.563671][ T2715] kmem_cache_alloc_noprof+0x42/0x410 [ 76.563707][ T2715] ? prepare_creds+0x47/0x6b0 [ 76.563737][ T2715] prepare_creds+0x47/0x6b0 [ 76.563780][ T2715] cap_task_prctl+0x39d/0x9c0 [ 76.563817][ T2715] security_task_prctl+0x96/0x2e0 [ 76.563844][ T2715] __se_sys_prctl+0xd4/0x1480 [ 76.563872][ T2715] ? __x64_sys_prctl+0xf0/0xf0 [ 76.563899][ T2715] ? __kasan_check_write+0x18/0x20 [ 76.563932][ T2715] ? fpregs_restore_userregs+0x11c/0x260 [ 76.563966][ T2715] __x64_sys_prctl+0xc3/0xf0 [ 76.563990][ T2715] x64_sys_call+0x2614/0x2ee0 [ 76.564024][ T2715] do_syscall_64+0x57/0xf0 [ 76.564049][ T2715] ? clear_bhb_loop+0x50/0xa0 [ 76.564081][ T2715] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 76.564110][ T2715] RIP: 0033:0x7f1ecff9fb19 [ 76.564129][ T2715] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 76.564149][ T2715] RSP: 002b:00007f1ed0e5f028 EFLAGS: 00000246 ORIG_RAX: 000000000000009d [ 76.564174][ T2715] RAX: ffffffffffffffda RBX: 00007f1ed0225fa0 RCX: 00007f1ecff9fb19 [ 76.564193][ T2715] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 0000000000000008 [ 76.564208][ T2715] RBP: 00007f1ed0037b70 R08: 0000000000000000 R09: 0000000000000000 [ 76.564225][ T2715] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 76.564240][ T2715] R13: 00007f1ed0226038 R14: 00007f1ed0225fa0 R15: 00007fff76ab38b8 [ 76.564262][ T2715] [ 76.568910][ T45] kernel read not supported for file /swaps (pid: 45 comm: kworker/1:1) [ 76.622140][ T1714] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 76.793930][ T1714] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 76.803826][ T1714] usb 4-1: New USB device found, idVendor=056a, idProduct=033b, bcdDevice= 0.00 [ 76.812968][ T1714] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 76.923191][ T2728] netlink: 176 bytes leftover after parsing attributes in process `syz.0.1037'. [ 77.090957][ T2737] KVM: debugfs: duplicate directory 2737-4 [ 77.200229][ T45] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 77.228905][ T1714] wacom 0003:056A:033B.000C: Unknown device_type for 'HID 056a:033b'. Assuming pen. [ 77.245658][ T1714] wacom 0003:056A:033B.000C: hidraw0: USB HID v1.11 Device [HID 056a:033b] on usb-dummy_hcd.3-1/input0 [ 77.257782][ T1714] input: Wacom Intuos S 2 Pen as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/0003:056A:033B.000C/input/input17 [ 77.361292][ T45] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 77.372484][ T45] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 77.382317][ T45] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x2 has an invalid bInterval 0, changing to 7 [ 77.393233][ T45] usb 6-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 77.402613][ T45] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 77.411826][ T45] usb 6-1: config 0 descriptor?? [ 77.471420][ T2185] usb 4-1: USB disconnect, device number 11 [ 77.599495][ T2754] FAULT_INJECTION: forcing a failure. [ 77.599495][ T2754] name failslab, interval 1, probability 0, space 0, times 0 [ 77.612264][ T2754] CPU: 0 UID: 0 PID: 2754 Comm: syz.4.1050 Not tainted syzkaller #0 6d6f333215c564de92c741644a4b57c848379815 [ 77.612301][ T2754] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 77.612317][ T2754] Call Trace: [ 77.612324][ T2754] [ 77.612335][ T2754] __dump_stack+0x21/0x30 [ 77.612366][ T2754] dump_stack_lvl+0x140/0x1c0 [ 77.612388][ T2754] ? __cfi_dump_stack_lvl+0x10/0x10 [ 77.612412][ T2754] ? inet_addr_type_table+0x2c8/0x510 [ 77.612451][ T2754] dump_stack+0x19/0x20 [ 77.612465][ T2754] should_fail_ex+0x3c2/0x510 [ 77.612514][ T2754] should_failslab+0xac/0x100 [ 77.612541][ T2754] __kmalloc_cache_noprof+0x41/0x470 [ 77.612577][ T2754] ? ip_rt_ioctl+0x9c3/0x10c0 [ 77.612611][ T2754] ip_rt_ioctl+0x9c3/0x10c0 [ 77.612636][ T2754] ? __cfi_ip_rt_ioctl+0x10/0x10 [ 77.612680][ T2754] ? irqentry_exit+0x4a/0x60 [ 77.612717][ T2754] ? rep_movs_alternative+0x4a/0xa0 [ 77.612752][ T2754] inet_ioctl+0x4ab/0x570 [ 77.612770][ T2754] ? __cfi_inet_ioctl+0x10/0x10 [ 77.612789][ T2754] ? __cfi_futex_wait+0x10/0x10 [ 77.612834][ T2754] sock_do_ioctl+0x118/0x330 [ 77.612858][ T2754] ? sock_show_fdinfo+0xd0/0xd0 [ 77.612879][ T2754] ? hook_file_ioctl+0x1ef/0x590 [ 77.612916][ T2754] ? hook_file_truncate+0x260/0x2b0 [ 77.612939][ T2754] ? __cfi_do_futex+0x10/0x10 [ 77.612974][ T2754] ? mutex_unlock+0x90/0x240 [ 77.613005][ T2754] sock_ioctl+0x568/0x7e0 [ 77.613026][ T2754] ? __cfi_sock_ioctl+0x10/0x10 [ 77.613050][ T2754] ? __fget_files+0x2bc/0x330 [ 77.613069][ T2754] ? bpf_lsm_file_ioctl+0xd/0x20 [ 77.613088][ T2754] ? security_file_ioctl+0x3e/0x110 [ 77.613133][ T2754] ? __cfi_sock_ioctl+0x10/0x10 [ 77.613153][ T2754] __se_sys_ioctl+0x123/0x1b0 [ 77.613179][ T2754] __x64_sys_ioctl+0x7f/0xa0 [ 77.613206][ T2754] x64_sys_call+0x1878/0x2ee0 [ 77.613227][ T2754] do_syscall_64+0x57/0xf0 [ 77.613244][ T2754] ? clear_bhb_loop+0x50/0xa0 [ 77.613291][ T2754] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 77.613323][ T2754] RIP: 0033:0x7f1ecff9fb19 [ 77.613346][ T2754] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 77.613362][ T2754] RSP: 002b:00007f1ed0e5f028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 77.613380][ T2754] RAX: ffffffffffffffda RBX: 00007f1ed0225fa0 RCX: 00007f1ecff9fb19 [ 77.613393][ T2754] RDX: 0000200000000a40 RSI: 000000000000890b RDI: 0000000000000003 [ 77.613425][ T2754] RBP: 00007f1ed0037b70 R08: 0000000000000000 R09: 0000000000000000 [ 77.613442][ T2754] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 77.613456][ T2754] R13: 00007f1ed0226038 R14: 00007f1ed0225fa0 R15: 00007fff76ab38b8 [ 77.613477][ T2754] [ 77.834223][ T45] plantronics 0003:047F:FFFF.000D: No inputs registered, leaving [ 77.836203][ T36] audit: type=1400 audit(1700000032.450:401): avc: denied { view } for pid=2755 comm="syz.0.1051" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=key permissive=1 [ 77.884491][ T45] plantronics 0003:047F:FFFF.000D: hiddev96,hidraw0: USB HID v0.00 Device [HID 047f:ffff] on usb-dummy_hcd.5-1/input0 [ 77.956425][ T2763] syzkaller1: entered promiscuous mode [ 77.962091][ T2763] syzkaller1: entered allmulticast mode [ 78.072151][ T36] audit: type=1400 audit(1700000032.760:402): avc: denied { setopt } for pid=2780 comm="syz.0.1063" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 78.080466][ T2781] random: crng reseeded on system resumption [ 78.101286][ T1714] usb 6-1: USB disconnect, device number 2 [ 78.237741][ T2793] device-mapper: ioctl: populate_table: target parameters not NUL-terminated [ 78.338717][ T2185] rust_binder: 2804: undelivered TRANSACTION_COMPLETE [ 78.353085][ T2185] rust_binder: 2804: undelivered transaction 20, process died [ 78.369927][ T2185] hid-generic 0000:0000:0000.000E: unknown main item tag 0x0 [ 78.388305][ T2185] hid-generic 0000:0000:0000.000E: hidraw0: HID v0.00 Device [syz1] on syz0 [ 78.432048][ T2813] fido_id[2813]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 78.526404][ T2822] kvm: kvm [2821]: vcpu2, guest rIP: 0x9114 Unhandled WRMSR(0xc2) = 0x7 [ 78.535648][ T2822] kvm: kvm [2821]: vcpu2, guest rIP: 0x9114 Unhandled WRMSR(0xc1) = 0x7 [ 78.552498][ T2827] FAULT_INJECTION: forcing a failure. [ 78.552498][ T2827] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 78.565926][ T2827] CPU: 1 UID: 0 PID: 2827 Comm: syz.3.1083 Not tainted syzkaller #0 6d6f333215c564de92c741644a4b57c848379815 [ 78.565977][ T2827] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 78.566000][ T2827] Call Trace: [ 78.566020][ T2827] [ 78.566035][ T2827] __dump_stack+0x21/0x30 [ 78.566074][ T2827] dump_stack_lvl+0x140/0x1c0 [ 78.566106][ T2827] ? __cfi_dump_stack_lvl+0x10/0x10 [ 78.566141][ T2827] ? __cfi_cgroup_rstat_updated+0x10/0x10 [ 78.566191][ T2827] dump_stack+0x19/0x20 [ 78.566222][ T2827] should_fail_ex+0x3c2/0x510 [ 78.566274][ T2827] should_fail_alloc_page+0xec/0x110 [ 78.566312][ T2827] __alloc_pages_noprof+0x1c0/0x7e0 [ 78.566357][ T2827] ? __cfi___alloc_pages_noprof+0x10/0x10 [ 78.566400][ T2827] ? folio_add_lru+0x116/0x400 [ 78.566438][ T2827] ? __cfi_folio_add_lru+0x10/0x10 [ 78.566474][ T2827] __folio_alloc_noprof+0x14/0x80 [ 78.566515][ T2827] folio_prealloc+0x46/0x220 [ 78.566548][ T2827] do_pte_missing+0x16af/0x4440 [ 78.566588][ T2827] ? pte_marker_clear+0x1b0/0x1b0 [ 78.566625][ T2827] ? cgroup_rstat_updated+0x144/0x800 [ 78.566672][ T2827] ? kmem_cache_free+0x4b1/0x4f0 [ 78.566718][ T2827] ? vm_area_free+0xee/0x140 [ 78.566762][ T2827] ? pte_offset_map_rw_nolock+0x236/0x2c0 [ 78.566811][ T2827] handle_mm_fault+0x1189/0x1ba0 [ 78.566844][ T2827] ? __kasan_check_write+0x18/0x20 [ 78.566895][ T2827] ? __cfi_handle_mm_fault+0x10/0x10 [ 78.566934][ T2827] ? follow_page_pte+0x4b2/0xba0 [ 78.566973][ T2827] ? gup_must_unshare+0x1e0/0x1e0 [ 78.567023][ T2827] ? vma_is_secretmem+0x11/0x50 [ 78.567063][ T2827] ? check_vma_flags+0x36d/0x3a0 [ 78.567104][ T2827] __get_user_pages+0x114b/0x22d0 [ 78.567148][ T2827] ? populate_vma_page_range+0x220/0x220 [ 78.567187][ T2827] ? down_read+0x7f/0xe0 [ 78.567230][ T2827] ? __cfi_down_read+0x10/0x10 [ 78.567275][ T2827] ? __cfi_do_mmap+0x10/0x10 [ 78.567319][ T2827] __mm_populate+0x300/0x440 [ 78.567363][ T2827] vm_mmap_pgoff+0x426/0x4b0 [ 78.567410][ T2827] ? __cfi_vm_mmap_pgoff+0x10/0x10 [ 78.567456][ T2827] ? __x64_sys_futex+0x110/0x110 [ 78.567492][ T2827] ksys_mmap_pgoff+0xfa/0x1e0 [ 78.567535][ T2827] ? __kasan_check_write+0x18/0x20 [ 78.567582][ T2827] __x64_sys_mmap+0x121/0x140 [ 78.567619][ T2827] x64_sys_call+0x13bf/0x2ee0 [ 78.567654][ T2827] do_syscall_64+0x57/0xf0 [ 78.567688][ T2827] ? clear_bhb_loop+0x50/0xa0 [ 78.567733][ T2827] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 78.567775][ T2827] RIP: 0033:0x7f743839fb19 [ 78.567803][ T2827] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 78.567833][ T2827] RSP: 002b:00007f7439217028 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 78.567869][ T2827] RAX: ffffffffffffffda RBX: 00007f7438625fa0 RCX: 00007f743839fb19 [ 78.567894][ T2827] RDX: 000000000000000b RSI: 0000000000b36000 RDI: 0000200000000000 [ 78.567916][ T2827] RBP: 00007f7438437b70 R08: ffffffffffffffff R09: 00000000cd0b3000 [ 78.567942][ T2827] R10: 0000000004008032 R11: 0000000000000246 R12: 0000000000000000 [ 78.567965][ T2827] R13: 00007f7438626038 R14: 00007f7438625fa0 R15: 00007fff75ef51c8 [ 78.567995][ T2827] [ 79.047669][ T2850] EXT4-fs (sda1): resizing filesystem from 262144 to 262144 blocks [ 79.130240][ T10] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 79.168936][ T2850] EXT4-fs (sda1): Invalid checksum for backup superblock 32768 [ 79.184144][ T2859] syzkaller1: entered promiscuous mode [ 79.190192][ T2859] syzkaller1: entered allmulticast mode [ 79.237014][ T2863] FAULT_INJECTION: forcing a failure. [ 79.237014][ T2863] name failslab, interval 1, probability 0, space 0, times 0 [ 79.250107][ T2863] CPU: 0 UID: 0 PID: 2863 Comm: syz.3.1099 Not tainted syzkaller #0 6d6f333215c564de92c741644a4b57c848379815 [ 79.250154][ T2863] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 79.250170][ T2863] Call Trace: [ 79.250177][ T2863] [ 79.250186][ T2863] __dump_stack+0x21/0x30 [ 79.250214][ T2863] dump_stack_lvl+0x140/0x1c0 [ 79.250238][ T2863] ? __cfi_dump_stack_lvl+0x10/0x10 [ 79.250263][ T2863] dump_stack+0x19/0x20 [ 79.250283][ T2863] should_fail_ex+0x3c2/0x510 [ 79.250320][ T2863] should_failslab+0xac/0x100 [ 79.250347][ T2863] __kmalloc_cache_noprof+0x41/0x470 [ 79.250384][ T2863] ? assoc_array_insert+0x3d3/0x3660 [ 79.250420][ T2863] assoc_array_insert+0x3d3/0x3660 [ 79.250443][ T2863] ? __cfi__raw_spin_lock+0x10/0x10 [ 79.250470][ T2863] ? bpf_lsm_key_alloc+0xd/0x20 [ 79.250497][ T2863] ? __kasan_check_write+0x18/0x20 [ 79.250534][ T2863] ? __kasan_check_write+0x18/0x20 [ 79.250572][ T2863] __key_link_begin+0xe5/0x220 [ 79.250611][ T2863] request_key_and_link+0x75b/0x1230 [ 79.250641][ T2863] ? key_task_permission+0x3be/0x500 [ 79.250671][ T2863] ? __cfi_request_key_and_link+0x10/0x10 [ 79.250701][ T2863] ? downgrade_write+0x470/0x470 [ 79.250733][ T2863] ? __cfi_key_default_cmp+0x10/0x10 [ 79.250769][ T2863] ? __cfi_keyring_search_iterator+0x10/0x10 [ 79.250809][ T2863] __se_sys_request_key+0x29c/0x350 [ 79.250835][ T2863] ? __x64_sys_request_key+0xc0/0xc0 [ 79.250860][ T2863] ? __kasan_check_write+0x18/0x20 [ 79.250896][ T2863] ? fpregs_restore_userregs+0x11c/0x260 [ 79.250931][ T2863] __x64_sys_request_key+0x9f/0xc0 [ 79.250956][ T2863] x64_sys_call+0x2b60/0x2ee0 [ 79.250983][ T2863] do_syscall_64+0x57/0xf0 [ 79.251008][ T2863] ? clear_bhb_loop+0x50/0xa0 [ 79.251043][ T2863] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 79.251076][ T2863] RIP: 0033:0x7f743839fb19 [ 79.251097][ T2863] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 79.251120][ T2863] RSP: 002b:00007f7439217028 EFLAGS: 00000246 ORIG_RAX: 00000000000000f9 [ 79.251148][ T2863] RAX: ffffffffffffffda RBX: 00007f7438625fa0 RCX: 00007f743839fb19 [ 79.251167][ T2863] RDX: 0000200000000280 RSI: 0000200000000140 RDI: 0000200000000100 [ 79.251184][ T2863] RBP: 00007f7438437b70 R08: 0000000000000000 R09: 0000000000000000 [ 79.251199][ T2863] R10: fffffffffffffffe R11: 0000000000000246 R12: 0000000000000000 [ 79.251216][ T2863] R13: 00007f7438626038 R14: 00007f7438625fa0 R15: 00007fff75ef51c8 [ 79.251237][ T2863] [ 79.520242][ T10] usb 6-1: Using ep0 maxpacket: 32 [ 79.526671][ T10] usb 6-1: config 0 has an invalid interface number: 188 but max is 0 [ 79.534948][ T10] usb 6-1: config 0 has no interface number 0 [ 79.541462][ T10] usb 6-1: config 0 interface 188 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 32 [ 79.566876][ T10] usb 6-1: New USB device found, idVendor=17ef, idProduct=7203, bcdDevice=2e.36 [ 79.576132][ T10] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 79.584628][ T10] usb 6-1: Product: syz [ 79.588831][ T10] usb 6-1: Manufacturer: syz [ 79.593522][ T10] usb 6-1: SerialNumber: syz [ 79.598986][ T10] usb 6-1: config 0 descriptor?? [ 79.605875][ T2829] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 79.622187][ T2874] serio: Serial port ptm0 [ 79.823243][ T2829] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 80.147601][ T36] kauditd_printk_skb: 10 callbacks suppressed [ 80.147620][ T36] audit: type=1400 audit(1700000034.830:413): avc: denied { create } for pid=2914 comm="syz.4.1122" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 80.157082][ T2915] netlink: 104 bytes leftover after parsing attributes in process `syz.4.1122'. [ 80.175594][ T36] audit: type=1400 audit(1700000034.840:414): avc: denied { write } for pid=2914 comm="syz.4.1122" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 80.204293][ T36] audit: type=1400 audit(1700000034.840:415): avc: denied { nlmsg_write } for pid=2914 comm="syz.4.1122" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 80.260196][ T2185] usb 4-1: new high-speed USB device number 12 using dummy_hcd [ 80.299803][ T36] audit: type=1400 audit(1700000034.980:416): avc: denied { create } for pid=2920 comm="syz.4.1124" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=user_namespace permissive=1 [ 80.320835][ T36] audit: type=1400 audit(1700000035.010:417): avc: denied { sys_admin } for pid=2920 comm="syz.4.1124" capability=21 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=cap_userns permissive=1 [ 80.408064][ T45] rust_binder: 2923: undelivered TRANSACTION_COMPLETE [ 80.431367][ T2185] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 80.441569][ T2185] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 80.441843][ T10] asix 6-1:0.188 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71 [ 80.451527][ T10] asix 6-1:0.188: probe with driver asix failed with error -71 [ 80.465720][ T2185] usb 4-1: New USB device found, idVendor=2466, idProduct=8010, bcdDevice= 1.00 [ 80.476391][ T10] usb 6-1: USB disconnect, device number 3 [ 80.478094][ T2185] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 80.664337][ T36] audit: type=1400 audit(1700000035.350:418): avc: denied { accept } for pid=2935 comm="syz.4.1130" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 80.684608][ T36] audit: type=1400 audit(1700000035.370:419): avc: denied { ioctl } for pid=2935 comm="syz.4.1130" path="socket:[20138]" dev="sockfs" ino=20138 ioctlcmd=0x8983 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 80.712228][ T2185] usb 4-1: cannot find UAC_HEADER [ 80.720660][ T2185] snd-usb-audio 4-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 80.733272][ T380] udevd[380]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 80.917827][ T1714] usb 4-1: USB disconnect, device number 12 [ 80.990752][ T10] usb 5-1: new full-speed USB device number 6 using dummy_hcd [ 81.001573][ T36] audit: type=1400 audit(1700000035.690:420): avc: denied { write } for pid=2946 comm="syz.0.1135" path="socket:[21236]" dev="sockfs" ino=21236 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_fib_lookup_socket permissive=1 [ 81.140963][ T10] usb 5-1: not running at top speed; connect to a high speed hub [ 81.153608][ T10] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 81.164407][ T10] usb 5-1: New USB device found, idVendor=046d, idProduct=0825, bcdDevice= 1.00 [ 81.173772][ T10] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 81.185762][ T10] usb 5-1: Found UVC 1.00 device (046d:0825) [ 81.193081][ T10] usb 5-1: No streaming interface found for terminal 2. [ 81.389956][ T2185] usb 5-1: USB disconnect, device number 6 [ 81.480239][ T10] usb 6-1: new high-speed USB device number 4 using dummy_hcd [ 81.630214][ T10] usb 6-1: Using ep0 maxpacket: 32 [ 81.636653][ T10] usb 6-1: config 0 has an invalid interface number: 67 but max is 0 [ 81.644821][ T10] usb 6-1: config 0 has no interface number 0 [ 81.652328][ T10] usb 6-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 81.661874][ T10] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 81.669882][ T10] usb 6-1: Product: syz [ 81.674100][ T10] usb 6-1: Manufacturer: syz [ 81.678733][ T10] usb 6-1: SerialNumber: syz [ 81.684186][ T10] usb 6-1: config 0 descriptor?? [ 81.690032][ T10] smsc95xx v2.0.0 [ 82.025770][ T2991] bridge0: port 3(veth0_vlan) entered blocking state [ 82.032594][ T2991] bridge0: port 3(veth0_vlan) entered disabled state [ 82.039432][ T2991] veth0_vlan: entered allmulticast mode [ 82.045608][ T2991] bridge0: port 3(veth0_vlan) entered blocking state [ 82.052338][ T2991] bridge0: port 3(veth0_vlan) entered forwarding state [ 82.094872][ T10] smsc95xx 6-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -32 [ 82.105836][ T10] smsc95xx 6-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 82.136106][ T3003] kernel profiling enabled (shift: 4) [ 82.189907][ T36] audit: type=1400 audit(1700000036.870:421): avc: denied { execute_no_trans } for pid=3002 comm="syz.3.1159" path="/293/file0" dev="tmpfs" ino=1602 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 82.308808][ T36] audit: type=1400 audit(1700000036.990:422): avc: denied { mounton } for pid=3022 comm="syz.0.1168" path="/proc/533/task" dev="proc" ino=20333 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dir permissive=1 [ 82.470248][ T2185] usb 4-1: new high-speed USB device number 13 using dummy_hcd [ 82.532322][ T10] smsc95xx 6-1:0.67 (unnamed net_device) (uninitialized): Failed to write reg index 0x00000108: -71 [ 82.545331][ T10] smsc95xx 6-1:0.67: probe with driver smsc95xx failed with error -71 [ 82.555273][ T10] usb 6-1: USB disconnect, device number 4 [ 82.630398][ T2185] usb 4-1: Using ep0 maxpacket: 32 [ 82.641006][ T2185] usb 4-1: config 0 has an invalid interface number: 184 but max is 0 [ 82.649236][ T2185] usb 4-1: config 0 has no interface number 0 [ 82.655462][ T2185] usb 4-1: config 0 interface 184 has no altsetting 0 [ 82.663771][ T2185] usb 4-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 82.672962][ T2185] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 82.684064][ T2185] usb 4-1: Product: syz [ 82.688299][ T2185] usb 4-1: Manufacturer: syz [ 82.693158][ T2185] usb 4-1: SerialNumber: syz [ 82.699045][ T2185] usb 4-1: config 0 descriptor?? [ 82.705620][ T2185] smsc75xx v1.0.0 [ 82.760216][ T31] usb 1-1: new high-speed USB device number 9 using dummy_hcd [ 82.931396][ T31] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 193, changing to 11 [ 82.942872][ T31] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 50960, setting to 1024 [ 82.955916][ T31] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 1.00 [ 82.965725][ T31] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 82.974046][ T31] usb 1-1: Product: syz [ 82.978456][ T31] usb 1-1: Manufacturer: syz [ 82.983348][ T31] usb 1-1: SerialNumber: syz [ 82.993919][ T3045] raw-gadget.2 gadget.0: fail, usb_ep_enable returned -22 [ 83.003402][ T31] cdc_wdm 1-1:1.0: cdc-wdm0: USB WDM device [ 83.009397][ T31] cdc_wdm 1-1:1.0: Unknown control protocol [ 83.203968][ T31] usb 1-1: USB disconnect, device number 9 [ 83.298090][ T3058] FAULT_INJECTION: forcing a failure. [ 83.298090][ T3058] name failslab, interval 1, probability 0, space 0, times 0 [ 83.310928][ T2185] smsc75xx 4-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000040: -32 [ 83.310964][ T3058] CPU: 0 UID: 0 PID: 3058 Comm: syz.5.1184 Not tainted syzkaller #0 6d6f333215c564de92c741644a4b57c848379815 [ 83.311066][ T3058] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 83.311110][ T3058] Call Trace: [ 83.311139][ T3058] [ 83.311169][ T3058] __dump_stack+0x21/0x30 [ 83.311246][ T3058] dump_stack_lvl+0x140/0x1c0 [ 83.311310][ T3058] ? __cfi_dump_stack_lvl+0x10/0x10 [ 83.311367][ T3058] ? futex_wake+0x666/0x950 [ 83.311460][ T3058] dump_stack+0x19/0x20 [ 83.311517][ T3058] should_fail_ex+0x3c2/0x510 [ 83.311608][ T3058] ? __se_sys_futex_waitv+0x20d/0x720 [ 83.311684][ T3058] should_failslab+0xac/0x100 [ 83.311750][ T3058] __kmalloc_noprof+0x69/0x510 [ 83.311850][ T3058] ? __se_sys_futex_waitv+0x20d/0x720 [ 83.311938][ T3058] __se_sys_futex_waitv+0x20d/0x720 [ 83.312015][ T3058] ? mutex_unlock+0x90/0x240 [ 83.312092][ T3058] ? __x64_sys_futex_waitv+0xf0/0xf0 [ 83.312172][ T3058] ? __se_sys_futex+0x13c/0x320 [ 83.312238][ T3058] ? fput+0x1a4/0x230 [ 83.312308][ T3058] ? __cfi_ksys_write+0x10/0x10 [ 83.312357][ T3058] ? __kasan_check_write+0x18/0x20 [ 83.312466][ T3058] ? fpregs_restore_userregs+0x11c/0x260 [ 83.312578][ T3058] __x64_sys_futex_waitv+0xc3/0xf0 [ 83.312655][ T3058] x64_sys_call+0x2dc4/0x2ee0 [ 83.312722][ T3058] do_syscall_64+0x57/0xf0 [ 83.312790][ T3058] ? clear_bhb_loop+0x50/0xa0 [ 83.312878][ T3058] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 83.312968][ T3058] RIP: 0033:0x7f7facf9fb19 [ 83.313015][ T3058] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 83.313080][ T3058] RSP: 002b:00007f7fadf43028 EFLAGS: 00000246 ORIG_RAX: 00000000000001c1 [ 83.313147][ T3058] RAX: ffffffffffffffda RBX: 00007f7fad225fa0 RCX: 00007f7facf9fb19 [ 83.313194][ T3058] RDX: 0000000000000000 RSI: 000000000000000c RDI: 0000200000002040 [ 83.313263][ T3058] RBP: 00007f7fad037b70 R08: 0000000000000001 R09: 0000000000000000 [ 83.313299][ T3058] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 83.313340][ T3058] R13: 00007f7fad226038 R14: 00007f7fad225fa0 R15: 00007ffd63226b28 [ 83.313400][ T3058] [ 83.541095][ T2185] smsc75xx 4-1:0.184 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 83.859101][ T2185] smsc75xx 4-1:0.184 (unnamed net_device) (uninitialized): Failed to write reg index 0x00000010: -71 [ 83.871538][ T2185] smsc75xx 4-1:0.184 (unnamed net_device) (uninitialized): Failed to write HW_CFG: -71 [ 83.881332][ T2185] smsc75xx 4-1:0.184 (unnamed net_device) (uninitialized): smsc75xx_reset error -71 [ 83.890961][ T2185] smsc75xx 4-1:0.184: probe with driver smsc75xx failed with error -71 [ 83.901396][ T2185] usb 4-1: USB disconnect, device number 13 [ 84.579340][ T3122] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1211'. [ 84.830287][ T2185] usb 6-1: new high-speed USB device number 5 using dummy_hcd [ 84.995962][ T3167] FAULT_INJECTION: forcing a failure. [ 84.995962][ T3167] name failslab, interval 1, probability 0, space 0, times 0 [ 85.008784][ T3167] CPU: 0 UID: 0 PID: 3167 Comm: syz.0.1238 Not tainted syzkaller #0 6d6f333215c564de92c741644a4b57c848379815 [ 85.008818][ T3167] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 85.008832][ T3167] Call Trace: [ 85.008839][ T3167] [ 85.008847][ T3167] __dump_stack+0x21/0x30 [ 85.008874][ T3167] dump_stack_lvl+0x140/0x1c0 [ 85.008895][ T3167] ? __cfi_dump_stack_lvl+0x10/0x10 [ 85.008917][ T3167] ? __cfi_do_futex+0x10/0x10 [ 85.008941][ T3167] ? mutex_unlock+0x90/0x240 [ 85.008972][ T3167] dump_stack+0x19/0x20 [ 85.008992][ T3167] should_fail_ex+0x3c2/0x510 [ 85.009030][ T3167] should_failslab+0xac/0x100 [ 85.009057][ T3167] kmem_cache_alloc_noprof+0x42/0x410 [ 85.009092][ T3167] ? new_userfaultfd+0x96/0x410 [ 85.009115][ T3167] new_userfaultfd+0x96/0x410 [ 85.009137][ T3167] __x64_sys_userfaultfd+0x89/0xb0 [ 85.009159][ T3167] x64_sys_call+0x2950/0x2ee0 [ 85.009183][ T3167] do_syscall_64+0x57/0xf0 [ 85.009207][ T3167] ? clear_bhb_loop+0x50/0xa0 [ 85.009240][ T3167] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 85.009273][ T3167] RIP: 0033:0x7f4408b9fb19 [ 85.009293][ T3167] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 85.009314][ T3167] RSP: 002b:00007f440997f028 EFLAGS: 00000246 ORIG_RAX: 0000000000000143 [ 85.009338][ T3167] RAX: ffffffffffffffda RBX: 00007f4408e25fa0 RCX: 00007f4408b9fb19 [ 85.009356][ T3167] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000080801 [ 85.009371][ T3167] RBP: 00007f4408c37b70 R08: 0000000000000000 R09: 0000000000000000 [ 85.009389][ T3167] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 85.009405][ T3167] R13: 00007f4408e26038 R14: 00007f4408e25fa0 R15: 00007ffc885de8e8 [ 85.009427][ T3167] [ 85.014628][ T2185] usb 6-1: Using ep0 maxpacket: 32 [ 85.197584][ T2185] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 85.208595][ T2185] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 85.218449][ T2185] usb 6-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 85.227696][ T2185] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 85.236956][ T2185] usb 6-1: config 0 descriptor?? [ 85.248880][ T2185] hub 6-1:0.0: USB hub found [ 85.379521][ T3181] netlink: 'syz.0.1244': attribute type 4 has an invalid length. [ 85.387441][ T3181] netlink: 17 bytes leftover after parsing attributes in process `syz.0.1244'. [ 85.417733][ T3184] sd 0:0:1:0: PR command failed: 1026 [ 85.423460][ T3184] sd 0:0:1:0: Sense Key : 0x5 [current] [ 85.429201][ T3184] sd 0:0:1:0: ASC=0x20 ASCQ=0x0 [ 85.447403][ T2185] hub 6-1:0.0: 1 port detected [ 85.507609][ T3192] input: syz0 as /devices/virtual/input/input21 [ 85.527453][ T36] kauditd_printk_skb: 3 callbacks suppressed [ 85.527474][ T36] audit: type=1400 audit(1700000040.210:426): avc: denied { append } for pid=3190 comm="syz.4.1240" name="event3" dev="devtmpfs" ino=618 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 86.057138][ T2185] hub 6-1:0.0: activate --> -90 [ 86.185664][ T3242] netlink: 'syz.3.1264': attribute type 7 has an invalid length. [ 86.193563][ T3242] netlink: 'syz.3.1264': attribute type 6 has an invalid length. [ 86.245044][ T31] rust_binder: 3247: undelivered death notification, 0000000000000000 [ 86.463032][ T10] usb 6-1: USB disconnect, device number 5 [ 87.015771][ T3279] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1280'. [ 87.026851][ T3279] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1280'. [ 87.073514][ T3286] netlink: 28 bytes leftover after parsing attributes in process `syz.5.1282'. [ 87.092547][ T36] audit: type=1404 audit(1700000041.780:427): enforcing=1 old_enforcing=0 auid=4294967295 ses=4294967295 enabled=1 old-enabled=1 lsm=selinux res=1 [ 87.133545][ T36] audit: type=1400 audit(1700000041.780:428): avc: denied { read } for pid=2180 comm="syz-executor" name="loop5" dev="devtmpfs" ino=54 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 87.160093][ T36] audit: type=1400 audit(1700000041.790:429): avc: denied { write } for pid=3288 comm="syz.3.1285" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=0 [ 87.180648][ T36] audit: type=1400 audit(1700000041.790:430): avc: denied { mounton } for pid=3288 comm="syz.3.1285" path="/syzcgroup/unified/syz3" dev="cgroup2" ino=85 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=dir permissive=0 [ 87.204532][ T36] audit: type=1400 audit(1700000041.800:431): avc: denied { read } for pid=300 comm="syz-executor" name="loop3" dev="devtmpfs" ino=52 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 87.230182][ T36] audit: type=1400 audit(1700000041.810:432): avc: denied { read } for pid=298 comm="syz-executor" name="loop0" dev="devtmpfs" ino=49 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 87.254320][ T36] audit: type=1400 audit(1700000041.810:433): avc: denied { write } for pid=3290 comm="syz.5.1288" name="fib_triestat" dev="proc" ino=4026532316 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_net_t tclass=file permissive=0 [ 87.279152][ T36] audit: type=1400 audit(1700000041.820:434): avc: denied { read } for pid=3293 comm="syz.0.1290" name="kvm" dev="devtmpfs" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=0 [ 87.308781][ T36] audit: type=1400 audit(1700000041.840:435): avc: denied { read } for pid=298 comm="syz-executor" name="loop0" dev="devtmpfs" ino=49 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 90.544981][ T36] kauditd_printk_skb: 310 callbacks suppressed [ 90.545000][ T36] audit: type=1400 audit(1700000045.230:746): avc: denied { read write } for pid=3619 comm="syz.5.1442" name="control" dev="devtmpfs" ino=198 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:lvm_control_t tclass=chr_file permissive=0 [ 90.578004][ T36] audit: type=1400 audit(1700000045.260:747): avc: denied { read } for pid=2180 comm="syz-executor" name="loop5" dev="devtmpfs" ino=54 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 90.602799][ T36] audit: type=1400 audit(1700000045.290:748): avc: denied { read } for pid=3622 comm="syz.5.1446" name="kvm" dev="devtmpfs" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=0 [ 90.636237][ T36] audit: type=1400 audit(1700000045.320:749): avc: denied { read } for pid=2180 comm="syz-executor" name="loop5" dev="devtmpfs" ino=54 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 90.663822][ T36] audit: type=1400 audit(1700000045.320:750): avc: denied { read } for pid=300 comm="syz-executor" name="loop3" dev="devtmpfs" ino=52 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 90.687537][ T36] audit: type=1400 audit(1700000045.350:751): avc: denied { read write } for pid=3626 comm="syz.3.1448" name="kvm" dev="devtmpfs" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=0 [ 90.711797][ T36] audit: type=1400 audit(1700000045.400:752): avc: denied { read } for pid=300 comm="syz-executor" name="loop3" dev="devtmpfs" ino=52 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 90.744132][ T36] audit: type=1400 audit(1700000045.420:753): avc: denied { read } for pid=2180 comm="syz-executor" name="loop5" dev="devtmpfs" ino=54 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 90.769025][ T36] audit: type=1400 audit(1700000045.460:754): avc: denied { name_bind } for pid=3630 comm="syz.3.1449" src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=udp_socket permissive=0 [ 90.790933][ T36] audit: type=1400 audit(1700000045.460:755): avc: denied { create } for pid=3628 comm="syz.5.1450" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=0 [ 92.485690][ T3702] netlink: 'syz.4.1494': attribute type 5 has an invalid length. [ 92.493536][ T3702] netlink: 'syz.4.1494': attribute type 32 has an invalid length. [ 94.068776][ T1907] Bluetooth: hci0: Frame reassembly failed (-84) [ 96.140290][ T55] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 96.140291][ T595] Bluetooth: hci0: command 0x1003 tx timeout [ 96.164578][ T36] kauditd_printk_skb: 178 callbacks suppressed [ 96.164617][ T36] audit: type=1400 audit(1700000050.840:934): avc: denied { read } for pid=2039 comm="syz-executor" name="loop4" dev="devtmpfs" ino=53 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 96.200447][ T36] audit: type=1400 audit(1700000050.870:935): avc: denied { read write } for pid=3815 comm="syz.3.1540" name="fuse" dev="devtmpfs" ino=23 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fuse_device_t tclass=chr_file permissive=0 [ 96.224517][ T36] audit: type=1400 audit(1700000050.870:936): avc: denied { mounton } for pid=3815 comm="syz.3.1540" path="/373/file0" dev="tmpfs" ino=2029 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=0 [ 96.247445][ T36] audit: type=1400 audit(1700000050.880:937): avc: denied { create } for pid=3814 comm="syz.4.1538" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=0 [ 96.250376][ T1907] Bluetooth: hci0: Frame reassembly failed (-84) [ 96.267119][ T36] audit: type=1400 audit(1700000050.890:938): avc: denied { read } for pid=300 comm="syz-executor" name="loop3" dev="devtmpfs" ino=52 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 96.297309][ T36] audit: type=1400 audit(1700000050.930:939): avc: denied { read } for pid=3819 comm="syz.0.1547" dev="nsfs" ino=4026532455 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=0 [ 96.312255][ T3822] netlink: 'syz.3.1541': attribute type 5 has an invalid length. [ 96.321111][ T36] audit: type=1400 audit(1700000050.970:940): avc: denied { read } for pid=2039 comm="syz-executor" name="loop4" dev="devtmpfs" ino=53 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 96.328334][ T3822] netlink: 'syz.3.1541': attribute type 32 has an invalid length. [ 96.358104][ T36] audit: type=1400 audit(1700000051.040:941): avc: denied { create } for pid=3824 comm="syz.4.1542" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=0 [ 96.387986][ T36] audit: type=1400 audit(1700000051.060:942): avc: denied { read write } for pid=3824 comm="syz.4.1542" name="usbmon9" dev="devtmpfs" ino=118 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=0 [ 96.415043][ T36] audit: type=1400 audit(1700000051.060:943): avc: denied { execmem } for pid=3824 comm="syz.4.1542" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=0 [ 97.728459][ T3899] bridge0: port 3(syz_tun) entered blocking state [ 97.735042][ T3899] bridge0: port 3(syz_tun) entered disabled state [ 97.741817][ T3899] syz_tun: entered allmulticast mode [ 97.747655][ T3899] syz_tun: entered promiscuous mode [ 97.753308][ T3899] bridge0: port 3(syz_tun) entered blocking state [ 97.759795][ T3899] bridge0: port 3(syz_tun) entered forwarding state [ 97.807687][ T3907] bridge0: port 4(syz_tun) entered blocking state [ 97.814351][ T3907] bridge0: port 4(syz_tun) entered disabled state [ 97.821065][ T3907] syz_tun: entered allmulticast mode [ 97.826931][ T3907] syz_tun: entered promiscuous mode [ 97.832351][ T3907] bridge0: port 4(syz_tun) entered blocking state [ 97.838834][ T3907] bridge0: port 4(syz_tun) entered forwarding state [ 98.300325][ T595] Bluetooth: hci0: command 0x1003 tx timeout [ 98.300327][ T55] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 99.315664][ T4016] bridge0: port 5(gretap0) entered blocking state [ 99.322221][ T4016] bridge0: port 5(gretap0) entered disabled state [ 99.328797][ T4016] gretap0: entered allmulticast mode [ 99.334823][ T4016] gretap0: entered promiscuous mode [ 99.340446][ T4016] bridge0: port 5(gretap0) entered blocking state [ 99.346918][ T4016] bridge0: port 5(gretap0) entered forwarding state [ 100.380244][ T595] Bluetooth: hci0: command 0x1003 tx timeout [ 100.380285][ T55] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 100.975277][ T4077] bridge0: port 3(gretap0) entered blocking state [ 100.995919][ T4077] bridge0: port 3(gretap0) entered disabled state [ 101.002731][ T4077] gretap0: entered allmulticast mode [ 101.008705][ T4077] gretap0: entered promiscuous mode [ 101.014183][ T4077] bridge0: port 3(gretap0) entered blocking state [ 101.020719][ T4077] bridge0: port 3(gretap0) entered forwarding state [ 101.177715][ T36] kauditd_printk_skb: 268 callbacks suppressed [ 101.177745][ T36] audit: type=1400 audit(1700000055.860:1212): avc: denied { read write } for pid=4108 comm="syz.0.1679" name="raw-gadget" dev="devtmpfs" ino=190 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=0 [ 101.244671][ T36] audit: type=1400 audit(1700000055.890:1213): avc: denied { read } for pid=2039 comm="syz-executor" name="loop4" dev="devtmpfs" ino=53 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 101.298796][ T36] audit: type=1400 audit(1700000055.900:1214): avc: denied { read } for pid=4110 comm="syz.5.1681" name="kvm" dev="devtmpfs" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=0 [ 101.350148][ T36] audit: type=1400 audit(1700000055.910:1215): avc: denied { execmem } for pid=4112 comm="syz.4.1680" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=0 [ 101.389751][ T36] audit: type=1400 audit(1700000055.920:1216): avc: denied { read } for pid=2180 comm="syz-executor" name="loop5" dev="devtmpfs" ino=54 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 101.440189][ T36] audit: type=1400 audit(1700000055.970:1217): avc: denied { wake_alarm } for pid=4114 comm="syz.5.1682" capability=35 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=0 [ 101.480281][ T36] audit: type=1400 audit(1700000055.980:1218): avc: denied { read } for pid=2180 comm="syz-executor" name="loop5" dev="devtmpfs" ino=54 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 101.532921][ T36] audit: type=1400 audit(1700000056.030:1219): avc: denied { read } for pid=4116 comm="syz.5.1684" name="kvm" dev="devtmpfs" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=0 [ 101.562116][ T36] audit: type=1400 audit(1700000056.060:1220): avc: denied { read } for pid=2180 comm="syz-executor" name="loop5" dev="devtmpfs" ino=54 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 101.585991][ T36] audit: type=1400 audit(1700000056.100:1221): avc: denied { create } for pid=4118 comm="syz.5.1685" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=0 [ 104.554739][ T4323] sit: non-ECT from 172.30.0.6 with TOS=0xcd [ 105.743927][ T4412] pim6reg1: entered promiscuous mode [ 105.749499][ T4412] pim6reg1: entered allmulticast mode [ 105.963331][ T4437] sit: non-ECT from 172.30.0.5 with TOS=0xcd [ 106.063013][ T4444] pim6reg1: entered promiscuous mode [ 106.068425][ T4444] pim6reg1: entered allmulticast mode [ 106.183984][ T36] kauditd_printk_skb: 310 callbacks suppressed [ 106.184005][ T36] audit: type=1400 audit(1700000060.870:1532): avc: denied { read } for pid=2039 comm="syz-executor" name="loop4" dev="devtmpfs" ino=53 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 106.257233][ T36] audit: type=1400 audit(1700000060.940:1533): avc: denied { read } for pid=2039 comm="syz-executor" name="loop4" dev="devtmpfs" ino=53 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 106.281479][ T36] audit: type=1400 audit(1700000060.940:1534): avc: denied { mounton } for pid=4453 comm="syz.4.1844" path="/258/tracing" dev="tmpfs" ino=1420 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=0 [ 106.304658][ T36] audit: type=1400 audit(1700000060.970:1535): avc: denied { read } for pid=2039 comm="syz-executor" name="loop4" dev="devtmpfs" ino=53 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 106.329087][ T36] audit: type=1400 audit(1700000060.990:1536): avc: denied { read write } for pid=4455 comm="syz.4.1845" name="uinput" dev="devtmpfs" ino=194 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=0 [ 106.353317][ T36] audit: type=1400 audit(1700000060.990:1537): avc: denied { read } for pid=4455 comm="syz.4.1845" name="event2" dev="devtmpfs" ino=565 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=0 [ 106.390021][ T36] audit: type=1400 audit(1700000061.040:1538): avc: denied { read } for pid=2039 comm="syz-executor" name="loop4" dev="devtmpfs" ino=53 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 106.417851][ T36] audit: type=1400 audit(1700000061.060:1539): avc: denied { mounton } for pid=4457 comm="syz.0.1855" path="/418/tracing" dev="tmpfs" ino=2263 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=0 [ 106.461255][ T36] audit: type=1400 audit(1700000061.060:1540): avc: denied { mount } for pid=4459 comm="syz.4.1847" name="/" dev="proc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=0 [ 106.499306][ T36] audit: type=1400 audit(1700000061.070:1541): avc: denied { read } for pid=298 comm="syz-executor" name="loop0" dev="devtmpfs" ino=49 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 111.206766][ T36] kauditd_printk_skb: 361 callbacks suppressed [ 111.206786][ T36] audit: type=1400 audit(1700000065.890:1903): avc: denied { read } for pid=300 comm="syz-executor" name="loop3" dev="devtmpfs" ino=52 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 111.237088][ T36] audit: type=1400 audit(1700000065.900:1904): avc: denied { execmem } for pid=4829 comm="syz.3.2023" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=0 [ 111.261950][ T36] audit: type=1400 audit(1700000065.940:1905): avc: denied { read } for pid=300 comm="syz-executor" name="loop3" dev="devtmpfs" ino=52 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 111.289278][ T36] audit: type=1400 audit(1700000065.950:1906): avc: denied { create } for pid=4832 comm="syz.5.2032" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=0 [ 111.309338][ T36] audit: type=1400 audit(1700000065.950:1907): avc: denied { write } for pid=4832 comm="syz.5.2032" name="ppp" dev="devtmpfs" ino=86 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=0 [ 111.332836][ T36] audit: type=1400 audit(1700000065.970:1908): avc: denied { read } for pid=2180 comm="syz-executor" name="loop5" dev="devtmpfs" ino=54 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 111.356695][ T36] audit: type=1400 audit(1700000065.990:1909): avc: denied { execmem } for pid=4835 comm="syz.3.2024" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=0 [ 111.378139][ T36] audit: type=1400 audit(1700000066.060:1910): avc: denied { read } for pid=300 comm="syz-executor" name="loop3" dev="devtmpfs" ino=52 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 111.405559][ T36] audit: type=1400 audit(1700000066.060:1911): avc: denied { mounton } for pid=4837 comm="syz.3.2025" path="/498/proc" dev="tmpfs" ino=2694 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=0 [ 111.429554][ T36] audit: type=1400 audit(1700000066.060:1912): avc: denied { mounton } for pid=4837 comm="syz.3.2025" path="/498" dev="tmpfs" ino=2688 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=0 [ 111.817904][ T4900] netlink: 176 bytes leftover after parsing attributes in process `syz.5.2057'. [ 112.104573][ T4908] syzkaller1: entered promiscuous mode [ 112.110567][ T4908] syzkaller1: entered allmulticast mode [ 112.364766][ T4943] syzkaller1: entered promiscuous mode [ 112.370598][ T4943] syzkaller1: entered allmulticast mode [ 112.673259][ T4978] netlink: 176 bytes leftover after parsing attributes in process `syz.3.2097'. [ 115.558114][ T5117] bridge0: port 4(syz_tun) entered blocking state [ 115.564688][ T5117] bridge0: port 4(syz_tun) entered disabled state [ 115.571284][ T5117] syz_tun: entered allmulticast mode [ 115.577171][ T5117] syz_tun: entered promiscuous mode [ 115.582948][ T5117] bridge0: port 4(syz_tun) entered blocking state [ 115.589422][ T5117] bridge0: port 4(syz_tun) entered forwarding state [ 115.675277][ T5134] syzkaller1: entered promiscuous mode [ 115.680876][ T5134] syzkaller1: entered allmulticast mode [ 115.887780][ T5153] serio: Serial port ptm0 [ 116.212011][ T36] kauditd_printk_skb: 291 callbacks suppressed [ 116.212032][ T36] audit: type=1400 audit(1700000070.900:2204): avc: denied { read } for pid=5178 comm="syz.0.2180" name="kvm" dev="devtmpfs" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=0 [ 116.253460][ T36] audit: type=1400 audit(1700000070.900:2205): avc: denied { read } for pid=298 comm="syz-executor" name="loop0" dev="devtmpfs" ino=49 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 116.277409][ T36] audit: type=1400 audit(1700000070.930:2206): avc: denied { read } for pid=300 comm="syz-executor" name="loop3" dev="devtmpfs" ino=52 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 116.301792][ T36] audit: type=1400 audit(1700000070.950:2207): avc: denied { read } for pid=2180 comm="syz-executor" name="loop5" dev="devtmpfs" ino=54 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 116.325587][ T36] audit: type=1400 audit(1700000070.980:2208): avc: denied { create } for pid=5183 comm="syz.0.2182" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=0 [ 116.346964][ T36] audit: type=1400 audit(1700000070.980:2209): avc: denied { read } for pid=5183 comm="syz.0.2182" dev="nsfs" ino=4026532455 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=0 [ 116.368489][ T36] audit: type=1400 audit(1700000070.980:2210): avc: denied { read write } for pid=5183 comm="syz.0.2182" name="raw-gadget" dev="devtmpfs" ino=190 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=0 [ 116.392217][ T36] audit: type=1400 audit(1700000071.020:2211): avc: denied { read } for pid=2180 comm="syz-executor" name="loop5" dev="devtmpfs" ino=54 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 116.459529][ T36] audit: type=1400 audit(1700000071.140:2212): avc: denied { read } for pid=2180 comm="syz-executor" name="loop5" dev="devtmpfs" ino=54 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 116.592640][ T36] audit: type=1400 audit(1700000071.280:2213): avc: denied { read } for pid=2180 comm="syz-executor" name="loop5" dev="devtmpfs" ino=54 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 116.612467][ T5195] bridge0: port 5(veth0_vlan) entered blocking state [ 116.623003][ T5195] bridge0: port 5(veth0_vlan) entered disabled state [ 116.629957][ T5195] veth0_vlan: entered allmulticast mode [ 116.636138][ T5195] bridge0: port 5(veth0_vlan) entered blocking state [ 116.642890][ T5195] bridge0: port 5(veth0_vlan) entered forwarding state [ 118.319946][ T5413] netlink: 'syz.5.2293': attribute type 7 has an invalid length. [ 118.327793][ T5413] netlink: 'syz.5.2293': attribute type 6 has an invalid length. [ 119.320390][ T5517] serio: Serial port ptm0 [ 120.422024][ T5573] syzkaller1: entered promiscuous mode [ 120.427678][ T5573] syzkaller1: entered allmulticast mode [ 121.414363][ T36] kauditd_printk_skb: 391 callbacks suppressed [ 121.414382][ T36] audit: type=1400 audit(1700000076.100:2605): avc: denied { read } for pid=2039 comm="syz-executor" name="loop4" dev="devtmpfs" ino=53 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 121.449860][ T36] audit: type=1400 audit(1700000076.110:2606): avc: denied { mounton } for pid=5589 comm="syz.4.2375" path="/378/proc" dev="tmpfs" ino=2073 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=0 [ 121.473673][ T36] audit: type=1400 audit(1700000076.130:2607): avc: denied { read } for pid=2039 comm="syz-executor" name="loop4" dev="devtmpfs" ino=53 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 121.506569][ T36] audit: type=1400 audit(1700000076.160:2608): avc: denied { execmem } for pid=5591 comm="syz.3.2376" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=0 [ 121.526108][ T36] audit: type=1400 audit(1700000076.160:2609): avc: denied { read write } for pid=5592 comm="syz.0.2378" name="raw-gadget" dev="devtmpfs" ino=190 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=0 [ 121.557855][ T36] audit: type=1400 audit(1700000076.190:2610): avc: denied { read } for pid=300 comm="syz-executor" name="loop3" dev="devtmpfs" ino=52 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 121.592425][ T36] audit: type=1400 audit(1700000076.210:2611): avc: denied { read } for pid=2039 comm="syz-executor" name="loop4" dev="devtmpfs" ino=53 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 121.618761][ T36] audit: type=1400 audit(1700000076.240:2612): avc: denied { read write } for pid=5598 comm="syz.3.2381" name="udmabuf" dev="devtmpfs" ino=83 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=0 [ 121.653170][ T36] audit: type=1400 audit(1700000076.270:2613): avc: denied { mounton } for pid=5599 comm="syz.4.2380" path="/380/dev" dev="tmpfs" ino=2084 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=0 [ 121.676222][ T36] audit: type=1400 audit(1700000076.270:2614): avc: denied { mounton } for pid=5599 comm="syz.4.2380" path="/380/mnt" dev="tmpfs" ino=2085 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=0 [ 121.836004][ T5620] bridge0: port 4(veth0_vlan) entered blocking state [ 121.845878][ T5620] bridge0: port 4(veth0_vlan) entered disabled state [ 121.852781][ T5620] veth0_vlan: entered allmulticast mode [ 121.859046][ T5620] bridge0: port 4(veth0_vlan) entered blocking state [ 121.865934][ T5620] bridge0: port 4(veth0_vlan) entered forwarding state [ 122.246309][ T5655] bridge0: port 4(veth0_vlan) entered blocking state [ 122.253519][ T5655] bridge0: port 4(veth0_vlan) entered disabled state [ 122.260341][ T5655] veth0_vlan: entered allmulticast mode [ 122.266604][ T5655] bridge0: port 4(veth0_vlan) entered blocking state [ 122.273380][ T5655] bridge0: port 4(veth0_vlan) entered forwarding state [ 126.431719][ T36] kauditd_printk_skb: 300 callbacks suppressed [ 126.431759][ T36] audit: type=1400 audit(1700000081.110:2915): avc: denied { read } for pid=2039 comm="syz-executor" name="loop4" dev="devtmpfs" ino=53 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 126.489655][ T36] audit: type=1400 audit(1700000081.120:2916): avc: denied { create } for pid=5894 comm="syz.4.2520" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=0 [ 126.510685][ T36] audit: type=1400 audit(1700000081.120:2917): avc: denied { read write } for pid=5894 comm="syz.4.2520" name="fuse" dev="devtmpfs" ino=23 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fuse_device_t tclass=chr_file permissive=0 [ 126.534257][ T36] audit: type=1400 audit(1700000081.140:2918): avc: denied { read } for pid=2039 comm="syz-executor" name="loop4" dev="devtmpfs" ino=53 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 126.566360][ T36] audit: type=1400 audit(1700000081.150:2919): avc: denied { create } for pid=5895 comm="syz.3.2522" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=0 [ 126.588015][ T36] audit: type=1400 audit(1700000081.150:2920): avc: denied { create } for pid=5895 comm="syz.3.2522" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=0 [ 126.608472][ T36] audit: type=1400 audit(1700000081.150:2921): avc: denied { create } for pid=5895 comm="syz.3.2522" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=0 [ 126.630314][ T36] audit: type=1400 audit(1700000081.150:2922): avc: denied { mounton } for pid=5893 comm="syz.5.2521" path="/460/file0" dev="tmpfs" ino=2493 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=0 [ 126.653753][ T36] audit: type=1400 audit(1700000081.150:2923): avc: denied { mounton } for pid=5893 comm="syz.5.2521" path="/460/file0" dev="tmpfs" ino=2493 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=0 [ 126.676488][ T36] audit: type=1400 audit(1700000081.160:2924): avc: denied { read } for pid=2180 comm="syz-executor" name="loop5" dev="devtmpfs" ino=54 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 130.624289][ T6187] netlink: 'syz.0.2671': attribute type 7 has an invalid length. [ 130.632268][ T6187] netlink: 'syz.0.2671': attribute type 6 has an invalid length. [ 130.776596][ T6221] netlink: 'syz.4.2675': attribute type 7 has an invalid length. [ 130.784639][ T6221] netlink: 'syz.4.2675': attribute type 6 has an invalid length. [ 131.502050][ T36] kauditd_printk_skb: 437 callbacks suppressed [ 131.502072][ T36] audit: type=1400 audit(1700000086.190:3362): avc: denied { read } for pid=300 comm="syz-executor" name="loop3" dev="devtmpfs" ino=52 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 131.533506][ T36] audit: type=1400 audit(1700000086.200:3363): avc: denied { write } for pid=6320 comm="syz.3.2725" name="fib_triestat" dev="proc" ino=4026532594 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_net_t tclass=file permissive=0 [ 131.563972][ T36] audit: type=1400 audit(1700000086.250:3364): avc: denied { read write } for pid=6325 comm="syz.0.2738" name="raw-gadget" dev="devtmpfs" ino=190 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=0 [ 131.607731][ T36] audit: type=1400 audit(1700000086.290:3365): avc: denied { read } for pid=300 comm="syz-executor" name="loop3" dev="devtmpfs" ino=52 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 131.631682][ T36] audit: type=1400 audit(1700000086.310:3366): avc: denied { read write } for pid=6328 comm="syz.3.2730" name="udmabuf" dev="devtmpfs" ino=83 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=0 [ 131.655302][ T36] audit: type=1400 audit(1700000086.330:3367): avc: denied { read } for pid=300 comm="syz-executor" name="loop3" dev="devtmpfs" ino=52 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 131.682112][ T36] audit: type=1400 audit(1700000086.370:3368): avc: denied { read } for pid=300 comm="syz-executor" name="loop3" dev="devtmpfs" ino=52 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 131.705930][ T36] audit: type=1400 audit(1700000086.380:3369): avc: denied { name_bind } for pid=6332 comm="syz.3.2734" src=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=tcp_socket permissive=0 [ 131.738188][ T36] audit: type=1400 audit(1700000086.410:3370): avc: denied { read } for pid=300 comm="syz-executor" name="loop3" dev="devtmpfs" ino=52 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 131.761932][ T36] audit: type=1400 audit(1700000086.420:3371): avc: denied { read } for pid=2039 comm="syz-executor" name="loop4" dev="devtmpfs" ino=53 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 135.855557][ T6476] netlink: 1363 bytes leftover after parsing attributes in process `syz.3.2798'. [ 136.428102][ T6498] netlink: 1363 bytes leftover after parsing attributes in process `syz.5.2807'. [ 136.557397][ T36] kauditd_printk_skb: 104 callbacks suppressed [ 136.557430][ T36] audit: type=1400 audit(1700000091.240:3476): avc: denied { read } for pid=298 comm="syz-executor" name="loop0" dev="devtmpfs" ino=49 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 136.593032][ T36] audit: type=1400 audit(1700000091.280:3477): avc: denied { execmem } for pid=6500 comm="syz.3.2812" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=0 [ 136.628333][ T36] audit: type=1400 audit(1700000091.280:3478): avc: denied { create } for pid=6499 comm="syz.4.2810" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=0 [ 136.652082][ T36] audit: type=1400 audit(1700000091.290:3479): avc: denied { create } for pid=6500 comm="syz.3.2812" anonclass=[userfaultfd] scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=0 [ 136.676743][ T36] audit: type=1400 audit(1700000091.310:3480): avc: denied { read } for pid=2039 comm="syz-executor" name="loop4" dev="devtmpfs" ino=53 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 136.700907][ T36] audit: type=1400 audit(1700000091.310:3481): avc: denied { read } for pid=300 comm="syz-executor" name="loop3" dev="devtmpfs" ino=52 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 136.727948][ T36] audit: type=1400 audit(1700000091.340:3482): avc: denied { read } for pid=2039 comm="syz-executor" name="loop4" dev="devtmpfs" ino=53 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 136.751850][ T36] audit: type=1400 audit(1700000091.380:3483): avc: denied { read } for pid=298 comm="syz-executor" name="loop0" dev="devtmpfs" ino=49 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 136.785932][ T36] audit: type=1400 audit(1700000091.470:3484): avc: denied { read } for pid=2180 comm="syz-executor" name="loop5" dev="devtmpfs" ino=54 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 136.810202][ T36] audit: type=1400 audit(1700000091.480:3485): avc: denied { read } for pid=300 comm="syz-executor" name="loop3" dev="devtmpfs" ino=52 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 136.854529][ T6520] netlink: 1363 bytes leftover after parsing attributes in process `syz.4.2818'. [ 136.970816][ T6280] bridge0: port 3(syz_tun) entered disabled state [ 136.978747][ T6280] syz_tun (unregistering): left allmulticast mode [ 136.985316][ T6280] syz_tun (unregistering): left promiscuous mode [ 136.993612][ T6280] bridge0: port 3(syz_tun) entered disabled state [ 137.063716][ T1918] veth0_vlan: left allmulticast mode [ 137.069273][ T1918] bridge0: port 4(veth0_vlan) entered disabled state [ 137.077024][ T1918] bridge_slave_1: left allmulticast mode [ 137.082994][ T1918] bridge_slave_1: left promiscuous mode [ 137.088806][ T1918] bridge0: port 2(bridge_slave_1) entered disabled state [ 137.097102][ T1918] bridge_slave_0: left allmulticast mode [ 137.103145][ T1918] bridge_slave_0: left promiscuous mode [ 137.108929][ T1918] bridge0: port 1(bridge_slave_0) entered disabled state [ 137.213540][ T1918] tipc: Disabling bearer [ 137.219247][ T1918] tipc: Left network mode [ 137.224644][ T1918] veth1_macvtap: left promiscuous mode [ 137.230319][ T1918] veth0_vlan: left promiscuous mode [ 137.411564][ T1918] ------------[ cut here ]------------ [ 137.417072][ T1918] WARNING: CPU: 1 PID: 1918 at net/ipv6/xfrm6_tunnel.c:341 xfrm6_tunnel_net_exit+0xc4/0x140 [ 137.427228][ T1918] Modules linked in: [ 137.431221][ T1918] CPU: 1 UID: 0 PID: 1918 Comm: kworker/u8:36 Not tainted syzkaller #0 6d6f333215c564de92c741644a4b57c848379815 [ 137.443085][ T1918] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 137.453209][ T1918] Workqueue: netns cleanup_net [ 137.458063][ T1918] RIP: 0010:xfrm6_tunnel_net_exit+0xc4/0x140 [ 137.464201][ T1918] Code: e8 b1 fa d2 fc 4b 83 3c 3e 00 75 19 e8 85 49 79 fc 49 81 ff f8 07 00 00 74 1b e8 77 49 79 fc 49 83 c7 08 eb c9 e8 6c 49 79 fc <0f> 0b 49 81 ff f8 07 00 00 75 e5 49 8d 9e 00 08 00 00 45 31 ff 4a [ 137.484357][ T1918] RSP: 0018:ffffc9000113fb90 EFLAGS: 00010293 [ 137.490493][ T1918] RAX: ffffffff85101c94 RBX: ffff8881202a91c0 RCX: ffff888119490000 [ 137.498520][ T1918] RDX: 0000000000000000 RSI: 0000000000400000 RDI: ffff888104b980b8 [ 137.506572][ T1918] RBP: ffffc9000113fbb0 R08: ffffffff885526c7 R09: 1ffffffff10aa4d8 [ 137.514640][ T1918] R10: dffffc0000000000 R11: fffffbfff10aa4d9 R12: dffffc0000000000 [ 137.522691][ T1918] R13: dffffc0000000000 R14: ffff888104b98000 R15: 00000000000000b8 [ 137.530901][ T1918] FS: 0000000000000000(0000) GS:ffff8881f6d00000(0000) knlGS:0000000000000000 [ 137.539860][ T1918] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 137.546509][ T1918] CR2: 00007f2c0bce3ff8 CR3: 00000001158f4000 CR4: 00000000003526b0 [ 137.554561][ T1918] Call Trace: [ 137.557883][ T1918] [ 137.560871][ T1918] cleanup_net+0x6ba/0xc90 [ 137.565321][ T1918] ? __cfi_cleanup_net+0x10/0x10 [ 137.570361][ T1918] ? kick_pool+0xb9/0x540 [ 137.574729][ T1918] process_scheduled_works+0x7f7/0x1060 [ 137.580343][ T1918] worker_thread+0xc99/0x13f0 [ 137.585060][ T1918] ? __cfi_set_cpus_allowed_ptr+0x10/0x10 [ 137.590857][ T1918] ? __kasan_check_read+0x15/0x20 [ 137.595943][ T1918] kthread+0x2c7/0x360 [ 137.600062][ T1918] ? __cfi_worker_thread+0x10/0x10 [ 137.605287][ T1918] ? __cfi_kthread+0x10/0x10 [ 137.609936][ T1918] ret_from_fork+0x64/0xa0 [ 137.614443][ T1918] ? __cfi_kthread+0x10/0x10 [ 137.619084][ T1918] ret_from_fork_asm+0x1a/0x30 [ 137.623940][ T1918] [ 137.626997][ T1918] ---[ end trace 0000000000000000 ]--- [ 137.632837][ T1918] ------------[ cut here ]------------ [ 137.638326][ T1918] WARNING: CPU: 1 PID: 1918 at net/ipv6/xfrm6_tunnel.c:344 xfrm6_tunnel_net_exit+0x119/0x140 [ 137.648595][ T1918] Modules linked in: [ 137.652557][ T1918] CPU: 1 UID: 0 PID: 1918 Comm: kworker/u8:36 Tainted: G W syzkaller #0 6d6f333215c564de92c741644a4b57c848379815 [ 137.665975][ T1918] Tainted: [W]=WARN [ 137.669898][ T1918] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 137.680035][ T1918] Workqueue: netns cleanup_net [ 137.684871][ T1918] RIP: 0010:xfrm6_tunnel_net_exit+0x119/0x140 [ 137.691048][ T1918] Code: fc 4b 83 bc 3e 00 08 00 00 00 75 19 e8 30 49 79 fc 49 81 ff f8 07 00 00 74 1b e8 22 49 79 fc 49 83 c7 08 eb c5 e8 17 49 79 fc <0f> 0b 49 81 ff f8 07 00 00 75 e5 e8 07 49 79 fc 5b 41 5c 41 5e 41 [ 137.710762][ T1918] RSP: 0018:ffffc9000113fb90 EFLAGS: 00010293 [ 137.716963][ T1918] RAX: ffffffff85101ce9 RBX: ffff888104b98800 RCX: ffff888119490000 [ 137.725059][ T1918] RDX: 0000000000000000 RSI: 0000000000400000 RDI: ffff888104b98810 [ 137.733103][ T1918] RBP: ffffc9000113fbb0 R08: ffffffff885526c7 R09: 1ffffffff10aa4d8 [ 137.741313][ T1918] R10: dffffc0000000000 R11: fffffbfff10aa4d9 R12: dffffc0000000000 [ 137.749422][ T1918] R13: dffffc0000000000 R14: ffff888104b98000 R15: 0000000000000010 [ 137.757464][ T1918] FS: 0000000000000000(0000) GS:ffff8881f6d00000(0000) knlGS:0000000000000000 [ 137.766545][ T1918] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 137.773196][ T1918] CR2: 00007f2c0bce3ff8 CR3: 00000001158f4000 CR4: 00000000003526b0 [ 137.781307][ T1918] Call Trace: [ 137.784716][ T1918] [ 137.787682][ T1918] cleanup_net+0x6ba/0xc90 [ 137.792178][ T1918] ? __cfi_cleanup_net+0x10/0x10 [ 137.797281][ T1918] ? kick_pool+0xb9/0x540 [ 137.801691][ T1918] process_scheduled_works+0x7f7/0x1060 [ 137.807292][ T1918] worker_thread+0xc99/0x13f0 [ 137.812070][ T1918] ? __cfi_set_cpus_allowed_ptr+0x10/0x10 [ 137.818021][ T1918] ? __kasan_check_read+0x15/0x20 [ 137.823149][ T1918] kthread+0x2c7/0x360 [ 137.827313][ T1918] ? __cfi_worker_thread+0x10/0x10 [ 137.832599][ T1918] ? __cfi_kthread+0x10/0x10 [ 137.837243][ T1918] ret_from_fork+0x64/0xa0 [ 137.841728][ T1918] ? __cfi_kthread+0x10/0x10 [ 137.846363][ T1918] ret_from_fork_asm+0x1a/0x30 [ 137.851207][ T1918] [ 137.854256][ T1918] ---[ end trace 0000000000000000 ]--- [ 137.920211][ T1918] ------------[ cut here ]------------ [ 137.925729][ T1918] WARNING: CPU: 0 PID: 1918 at net/xfrm/xfrm_state.c:3230 xfrm_state_fini+0x2be/0x310 [ 137.935376][ T1918] Modules linked in: [ 137.939313][ T1918] CPU: 0 UID: 0 PID: 1918 Comm: kworker/u8:36 Tainted: G W syzkaller #0 6d6f333215c564de92c741644a4b57c848379815 [ 137.952675][ T1918] Tainted: [W]=WARN [ 137.956538][ T1918] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 137.966705][ T1918] Workqueue: netns cleanup_net [ 137.971635][ T1918] RIP: 0010:xfrm_state_fini+0x2be/0x310 [ 137.977294][ T1918] Code: 3c 20 00 74 08 48 89 df e8 4f d7 ed fc 48 8b 3b e8 77 c2 d8 fc 5b 41 5c 41 5d 41 5e 41 5f 5d c3 cc cc cc cc cc e8 12 26 94 fc <0f> 0b e9 b0 fd ff ff e8 06 26 94 fc 0f 0b e9 18 fe ff ff e8 fa 25 [ 137.997013][ T1918] RSP: 0018:ffffc9000113fb70 EFLAGS: 00010293 [ 138.003158][ T1918] RAX: ffffffff84f53fee RBX: ffff8881202a91c0 RCX: ffff888119490000 [ 138.011227][ T1918] RDX: 0000000000000000 RSI: 0000000000400000 RDI: ffff888119490000 [ 138.019264][ T1918] RBP: ffffc9000113fb98 R08: ffffffff885526c7 R09: 1ffffffff10aa4d8 [ 138.027351][ T1918] R10: dffffc0000000000 R11: fffffbfff10aa4d9 R12: 1ffffffff10aa22c [ 138.035940][ T1918] R13: dffffc0000000000 R14: ffff8881202a9dc0 R15: dffffc0000000000 [ 138.044008][ T1918] FS: 0000000000000000(0000) GS:ffff8881f6c00000(0000) knlGS:0000000000000000 [ 138.053133][ T1918] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 138.059770][ T1918] CR2: 00007f7439157e20 CR3: 0000000120618000 CR4: 00000000003526b0 [ 138.067828][ T1918] Call Trace: [ 138.071186][ T1918] [ 138.074142][ T1918] xfrm_net_exit+0x31/0x80 [ 138.078604][ T1918] cleanup_net+0x6ba/0xc90 [ 138.083211][ T1918] ? __cfi_cleanup_net+0x10/0x10 [ 138.088195][ T1918] ? kick_pool+0xb9/0x540 [ 138.092630][ T1918] process_scheduled_works+0x7f7/0x1060 [ 138.098562][ T1918] worker_thread+0xc99/0x13f0 [ 138.103793][ T1918] ? __cfi_set_cpus_allowed_ptr+0x10/0x10 [ 138.109601][ T1918] ? __kasan_check_read+0x15/0x20 [ 138.114935][ T1918] kthread+0x2c7/0x360 [ 138.119235][ T1918] ? __cfi_worker_thread+0x10/0x10 [ 138.124471][ T1918] ? __cfi_kthread+0x10/0x10 [ 138.129129][ T1918] ret_from_fork+0x64/0xa0 [ 138.133719][ T1918] ? __cfi_kthread+0x10/0x10 [ 138.138369][ T1918] ret_from_fork_asm+0x1a/0x30 [ 138.143239][ T1918] [ 138.146384][ T1918] ---[ end trace 0000000000000000 ]--- [ 138.241133][ T2997] bridge0: port 4(syz_tun) entered disabled state [ 138.248261][ T2997] syz_tun (unregistering): left allmulticast mode [ 138.254798][ T2997] syz_tun (unregistering): left promiscuous mode [ 138.261252][ T2997] bridge0: port 4(syz_tun) entered disabled state [ 138.269737][ T3309] bridge0: port 3(syz_tun) entered disabled state [ 138.276977][ T3309] syz_tun (unregistering): left allmulticast mode [ 138.283466][ T3309] syz_tun (unregistering): left promiscuous mode [ 138.289796][ T3309] bridge0: port 3(syz_tun) entered disabled state [ 138.299882][ T5409] bridge0: port 4(syz_tun) entered disabled state [ 138.307268][ T5409] syz_tun (unregistering): left allmulticast mode [ 138.313815][ T5409] syz_tun (unregistering): left promiscuous mode [ 138.320441][ T5409] bridge0: port 4(syz_tun) entered disabled state [ 138.329537][ T1918] gretap0: left allmulticast mode [ 138.334673][ T1918] gretap0: left promiscuous mode [ 138.340301][ T1918] bridge0: port 5(gretap0) entered disabled state [ 138.347274][ T1918] veth0_vlan: left allmulticast mode [ 138.353175][ T1918] bridge0: port 3(veth0_vlan) entered disabled state [ 138.360564][ T1918] bridge_slave_1: left allmulticast mode [ 138.366268][ T1918] bridge_slave_1: left promiscuous mode [ 138.380213][ T1918] bridge0: port 2(bridge_slave_1) entered disabled state [ 138.400585][ T1918] bridge_slave_0: left allmulticast mode [ 138.406292][ T1918] bridge_slave_0: left promiscuous mode [ 138.412903][ T1918] bridge0: port 1(bridge_slave_0) entered disabled state [ 138.522847][ T1918] tipc: Disabling bearer [ 138.528253][ T1918] tipc: Left network mode [ 138.533753][ T1918] veth1_macvtap: left promiscuous mode [ 138.539319][ T1918] veth0_vlan: left promiscuous mode