last executing test programs: 13.277095754s ago: executing program 0 (id=249): r0 = syz_usb_connect(0x5, 0x36, &(0x7f0000000240)=ANY=[@ANYBLOB="12010000772904202404019957c2010203010902240001000010000904430002317d5500090502020002020000090582020002"], 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f0000000500)={0x1c, &(0x7f0000000380)={0x20, 0x16, 0x4, "54f505ad"}, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) 11.147518095s ago: executing program 0 (id=275): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x8402, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000080)=[@text64={0x40, &(0x7f0000000000)="f4c48189da39c441205cbf0000000066ba4200b8706d272cefc44200f24000c443550e54c60000660fef1866b881000f00d00f01c8c46209960c82", 0x3b}], 0x1, 0x1, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 10.966979473s ago: executing program 0 (id=280): ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000100)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./sys/devices/system/memory/memory15/state\x00', 0x2, 0x0) readv(r0, &(0x7f0000002600)=[{&(0x7f0000000440)=""/238, 0xee}, {&(0x7f0000001580)=""/4096, 0x1000}, {&(0x7f00000025c0)=""/44, 0x2c}], 0x3) sendto$packet(0xffffffffffffffff, &(0x7f0000000180)="0b0312002e0064000200475400f6a13bb1000000086086dd4803", 0x100a6, 0x88a8ffff, &(0x7f0000000140)={0x11, 0x88a8}, 0x14) 10.966776763s ago: executing program 0 (id=281): r0 = fsopen(&(0x7f00000001c0)='ramfs\x00', 0x1) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x0, 0x6) fchdir(r1) r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x101042, 0x15) read$FUSE(r2, &(0x7f0000003ec0)={0x2020}, 0x2020) 10.957128873s ago: executing program 0 (id=282): mkdirat(0xffffffffffffff9c, &(0x7f00000001c0)='./mysys\x00', 0x1ff) mount(0x0, &(0x7f0000000100)='./mysys\x00', &(0x7f0000000200)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./mysys/bus/pci/devices/0000:00:05.0/resource0\x00', 0x2, 0x0) mmap(&(0x7f0000002000/0x4000)=nil, 0x4000, 0x3, 0x11, r0, 0x4000) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) 10.938572745s ago: executing program 0 (id=283): mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0xfffffffffefffff6, 0x20031, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x80001) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000280)={0xaa, 0x541}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000140)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x4}) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) ioctl$UFFDIO_COPY(r0, 0xc028aa03, &(0x7f0000000040)={&(0x7f00006c6000/0x400000)=nil, &(0x7f0000685000/0x4000)=nil, 0x400000, 0x0, 0x18100}) 4.210945231s ago: executing program 1 (id=321): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000440)=[@text64={0x40, 0x0}], 0x1, 0x21, 0x0, 0x0) ioctl$KVM_SET_VAPIC_ADDR(r2, 0x4008ae93, &(0x7f0000000040)=0x1000) 4.055515109s ago: executing program 1 (id=323): r0 = syz_ublk_setup_io_uring(0x1e, &(0x7f0000000180)={0x0, 0x7071, 0x0, 0x2, 0x23e}, &(0x7f0000000100)=0x0, &(0x7f00000000c0)=0x0, &(0x7f0000000140)=0x0) syz_ublk_add_dev(r0, r1, r2, r3, &(0x7f0000000200)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000440)=@new_dev={0x4, 0x3c9, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x40}}}, &(0x7f0000000300)=0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) r6 = dup(r5) syz_usb_control_io$lan78xx(0xffffffffffffffff, 0x0, &(0x7f0000000540)={0x34, 0x0, 0x0, &(0x7f0000000440)={0x0, 0x8, 0x1, 0x6}, 0x0, 0x0, 0x0}) syz_ublk_setup_queues(r6, r4, &(0x7f0000000580)={0x0, 0x5da0, 0x80, 0x2, 0x22d, 0x0, r0}, &(0x7f0000000a80)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0xad67, 0x200, 0x3, 0x8b}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x250f, 0x800, 0x3, 0x251}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xdc2b, 0x10, 0xfffffffc, 0x88}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x1708, 0x1, 0x1, 0x21}}], 0x4, &(0x7f0000002080)={0x2e, 0x10, 0x0, r6, 0xc0107520, 0x0, 0x0, 0x0, 0x0, {0x94}, 0x0, 0x0, '\x00', {0x2, 0x44, 0x0, 0x0}}, 0x0) 3.336928893s ago: executing program 1 (id=333): r0 = userfaultfd(0x80801) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000000c0)) r1 = userfaultfd(0x801) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000000040)={0xaa, 0x4}) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x1}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000080)={{&(0x7f0000000000/0x400000)=nil, 0x400000}, 0x1}) 3.260695986s ago: executing program 1 (id=336): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000001c0)=[@text16={0x10, 0x0}], 0x1, 0x4, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000100)=[@textreal={0x8, &(0x7f00000010c0)="0f01f60faa66b9430b00000f320f01c83e0f017a0b66b8000000000f23c80f21f866350c00f0000f23f80f20c06635000001000f22c00f01ca66b9ad0b000066b8a000000066ba000000000f30b8200c8ee0", 0x52}], 0x1, 0x28, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 3.111934333s ago: executing program 1 (id=339): mkdirat(0xffffffffffffff9c, &(0x7f0000000180)='./dev\x00', 0x1ff) pselect6(0x0, 0x0, &(0x7f0000000080)={0x9, 0x6, 0x4010001, 0x5, 0x11, 0x0, 0x6, 0x1004}, 0x0, 0x0, 0x0) mount(0x0, &(0x7f00000001c0)='./dev\x00', &(0x7f0000000200)='devtmpfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./dev/sda\x00', 0x2, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x9) ioctl$IOC_PR_RESERVE(r0, 0x401070c9, &(0x7f0000000080)={0x3c1842d, 0x605fd495, 0x1}) 2.261377783s ago: executing program 1 (id=356): r0 = syz_usb_connect(0x0, 0x36, &(0x7f0000000540)=ANY=[@ANYBLOB="120141014813442024040075ee69010203010902240001000010000904b8070259d1ca000905060200020d0006090582020002"], 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, &(0x7f0000001140)={0x44, &(0x7f0000000f40)={0x0, 0xb, 0x4, "94a291d5"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, &(0x7f00000003c0)={0x34, &(0x7f0000000140)={0x40, 0x30, 0x4, "e1137020"}, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$uac2(r0, 0x0, &(0x7f0000000480)={0x44, &(0x7f00000001c0)={0x20, 0xf, 0x4b, "34b2e7bd29040d93908024520eec3581a1a3a82b2adbfc4965867308881f6fc9f8cb06a9c69c852f9a4b2214eb89cfd97551cd06a391680ec7ceed030f013f9548fb87884f2aceac3e7822"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 2.033481514s ago: executing program 3 (id=358): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x22700, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000000c0)=[@text64={0x40, 0x0}], 0x1, 0x61, 0x0, 0x0) ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f00000001c0)={0x1, 0x0, [{0x48b, 0x0, 0x2}]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 1.728761499s ago: executing program 3 (id=361): mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x3, 0x200000005c832, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x801) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000040)={0xaa, 0x700}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000100)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x4}) ioctl$UFFDIO_COPY(r0, 0xc028aa03, &(0x7f00000000c0)={&(0x7f0000400000/0xc00000)=nil, &(0x7f0000199000/0x800000)=nil, 0xc00000}) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) 1.651107172s ago: executing program 3 (id=362): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc\x00', 0x142) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f0000000100)='proc\x00', 0x0, 0x0) syz_open_procfs(0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2, 0x10b) write(r0, &(0x7f0000000000)='7', 0x1) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) 1.49242389s ago: executing program 3 (id=363): r0 = landlock_create_ruleset(&(0x7f0000000040)={0x1000, 0x3, 0x1}, 0x18, 0x0) landlock_restrict_self(r0, 0x0) mknod(&(0x7f0000000040)='./file0\x00', 0x8001420, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000640)='.\x00', 0x0, 0x0) renameat2(r1, &(0x7f00000001c0)='./file0\x00', 0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x4) renameat2(0xffffffffffffff9c, &(0x7f0000000480)='./file1\x00', 0xffffffffffffff9c, &(0x7f00000004c0)='./file0\x00', 0x2) 1.223590162s ago: executing program 3 (id=365): lstat(&(0x7f0000000180)='./file0\x00', 0x0) r0 = syz_open_dev$evdev(&(0x7f0000000000), 0x0, 0x0) close(r0) syz_usb_connect$printer(0x4, 0x2d, &(0x7f00000001c0)=ANY=[], 0x0) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) ioctl$EVIOCRMFF(r0, 0xc0085504, &(0x7f0000000180)=0x17) 1.148709966s ago: executing program 2 (id=368): mkdirat(0xffffffffffffff9c, &(0x7f0000004000)='./mnt\x00', 0x1ff) mount(0x0, &(0x7f0000004080)='./mnt\x00', &(0x7f00000040c0)='tracefs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000004200)='./mnt/trace_marker\x00', 0x1, 0x1a) write(r0, &(0x7f0000001800)="2d2519d010bae03d46fdca85c1a1862b9b169eceaaca9ccf1cb8d871123f1c9c5e4ee16a1d71f8876bd9dd39cbd283", 0x2f) r1 = openat(0xffffffffffffff9c, &(0x7f0000009180)='./mnt/trace_pipe\x00', 0x0, 0x0) read(r1, &(0x7f00000091c0)=""/16384, 0x4000) 1.083577369s ago: executing program 2 (id=369): r0 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) mmap$IORING_OFF_SQ_RING(0x0, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) write$UHID_CREATE2(r0, &(0x7f00000007c0)=ANY=[@ANYBLOB="0b00000073797a31000000dfff000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a30000037b35f0a000089b4c45a10000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a3100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001"], 0x119) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$hidraw(&(0x7f0000000000), 0x0, 0x81) ioctl$HIDIOCSFEATURE(r1, 0xc0404806, 0x0) 731.448305ms ago: executing program 3 (id=370): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb, 0x4008032, 0xffffffffffffffff, 0xcd0b3000) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x15) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000001000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r0, &(0x7f0000001580)={0x0, 0xffffffffffffff3c, &(0x7f0000000300)=[{&(0x7f0000000080)="3bfdd75fa5717852d59a9367444a2130e72cd4dabc8854532cca0c32a5b9f844a4610c7525650ce3d3b76b15026d93e6dee896115e9364066aa3d14e33ef732b4681335c576902153114bdb9c74b538a71115fb1d1a63d1b04129661b29aab89d0be999a6b7c9bea755adedbf305a79f70b71d3d4c98577b49db4963ce89b0def5e840f459659cb6f86d56b069a5de11d601d348ff88ca6e5e2cfe40176880b33e9e8dbc32ba2e6a99b1b50276dc4f06166000d7069a3cc76f", 0xb9}, {&(0x7f0000000180)="892950e2405ee8629d9384a91c16d1706a3e61f305119f95cac0f1927f4c205b971eb41147cb1f86883d6910e68ac3996551800b3ec64b77f8444b18345a2c8b178eeeba0cde7319a5a46bfe7f5770e019efd9d52069edcced33a758c4e657f3a792dc193a1911040000000000000003c851a8", 0x73}, {&(0x7f0000000200)="a68cde0d56b170df7710b54f17d9a39c4f98f3547190", 0x20000216}, {&(0x7f0000000240)="45e04400f2b383517a08c397dd0a76e67ecfc8e74573c24dedd3a48fb62458c1412fdcd15e888cb0f5d02e77bfecefda6b064c0bb2b66a9a522e63873dde02330510255eec7dfa1af708cdab59fb71eca786a359a2c3b0cbad35144ec5b069c53f90e43339845dc7fd140c55b0149ab38eb27c140f374bcc2c95b0b121d1a9302f3a01b888243b3fc0d46f0de0", 0x8d}, {&(0x7f00000025c0)="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", 0xcb3}, {&(0x7f00000006c0)="97b13f5cf9f584c87e0e637d2ff483a311bb412cb3b03c3d9e97e435f2fceb58ff0402ed7b96244b43386c222917662028d7a01206a1990722ccef1d8f39f7c8ae242e58359217b1c6161ea741445cf16b0c48eb18a6c72174dfb7cd1bd0f409dad5a432bed4afb470da3656dd30d70769e229dc91037321d618e1eff4a176ea46d5cd4d5da97f80356e46d9e8166bf2d97210b631654ece218a2a204a1786ab5a60a881a7a294cd2f92438350e6e3ec4439ebe06133ff65b1e32b809ba0482783b563ec8e5778285da5211e5821135433053a7921319c544d5e797f"}, {&(0x7f00000007c0)="75c37714a0bada8343bceb64ccb6d95a2a37b020e0bf1f6a1de4584223a2f285aaca30a9554cd5cdc1659cb9fec462cc5c2220a7cd891ec3bad99fe3c06e15a109ec0fdb6aeeee5ef8e4bfc28e17984a3860b907d549492d47a447782b7357ea72f4b2c26512a6a33c0247b730a6182ea5a99aee25fcee07f9cb0a80595cd5f744fa6898fdffda5b34b19474b8e853467329e4aea36cfd0e00735d37beb0f895c5688259a8935194eefd3a96d55707133a08f03e14da563160a545396b93341f41c161c93687e28a"}, {&(0x7f0000000b00)="1b080b7a30aec939ce8e26e0cbbe37fc064ceef965fd5e3b6739c966492dbdf71c04423d8a403e56dfd224e4e55918a5e31e683fec5cc9460882a0d1628d02d51a8da997073f856e2cd00586c6e8c89c71cf8be6121b0b3a85d597a1afb0cc311f30cc26183c8e594ce5ff62661c9e32cbc9dd9a72985e9857f3bddb52382b6c27ca85d5774cf17b92e2d2097f12a8687e70f90d46381a47706a9124a2cf61b84f26aae22fd4da84ae35b93f7be9fdfdfbf33c59f5c657e9f7e81b81b786082f88af4de07808ff3c954bae"}], 0x5, &(0x7f0000001480)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @private, @multicast1}}}], 0x20}, 0x0) recvmsg$unix(r1, &(0x7f0000001140)={0x0, 0x2, &(0x7f0000001040)=[{&(0x7f00000015c0)=""/4096, 0x7ffff000}], 0x1}, 0x40000100) syz_clone(0x2a801400, 0x0, 0x0, 0x0, 0x0, 0x0) 172.148522ms ago: executing program 2 (id=371): close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x80102, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = eventfd2(0xe5c, 0x80000) ioctl$KVM_IRQFD(r1, 0x4020ae76, &(0x7f0000000240)={r2, 0x1, 0x2, r2}) 43.558418ms ago: executing program 2 (id=372): fsopen(&(0x7f0000000040)='cgroup2\x00', 0x0) ioctl$sock_SIOCSIFVLAN_DEL_VLAN_CMD(0xffffffffffffffff, 0x8983, &(0x7f0000000000)={0x1, 'vlan1\x00', {}, 0x7ff}) r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r0) ptrace$setregs(0xd, r0, 0x0, &(0x7f00000003c0)="18607651149d7b10b4024fbbdc08899b8f589df2dbb5d7a8d1b36cfab675cb3976ee8100e2878c9cfa178cac130eb046eda93df39ed4b41924dc225ad4028dd63defb87d698be5c749450b350a789dcfc6b2d6a696b5026d1e52f19274566d1da0f353dd65e330ebf71c5e823f2753c5fd76724828ef31b353e71805205c3dceb44cc4c7b3664e29fb") ptrace$getregset(0x4205, r0, 0x1, &(0x7f0000000080)={&(0x7f0000000000)=""/120, 0x78}) 43.282878ms ago: executing program 2 (id=373): r0 = syz_open_dev$loop(&(0x7f0000000080), 0xffffffffffffffff, 0xa080) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000400)='cpuset.effective_cpus\x00', 0x275a, 0x0) ioctl$LOOP_CONFIGURE(r0, 0x4c0a, &(0x7f00000005c0)={r1, 0x800, {0x2a00, 0x80010000, 0x0, 0x5, 0x0, 0x0, 0x0, 0x1c, 0x1c, "fee8a2ab78fc179fd1f8a0e9a1af1ea09dc2b7fb0a010000000000000000030000000000000000000000000000000000000000000000001b00", "28095397bab22d0000b42076c1ce8ef05f819e01177d3d458dac0000000000000000000800000000003788cf8f00", "90be8b1c5512406c7f00", [0x4, 0xa]}}) r2 = syz_open_dev$loop(&(0x7f0000000300), 0x8f, 0x40240) ioctl$LOOP_CONFIGURE(r2, 0x4c0a, &(0x7f0000001280)={r1, 0x0, {0x2a12, 0x80010000, 0x0, 0xffff, 0x4, 0x0, 0x0, 0xe, 0x4, "fee8a2ab78fc179fd1f809000000aca7ca64c6a4b4e00d9683dda1af01000000def71200100000000000000000000000000800", "2809e8dbe1b22d0000b420a1a93c7540f476779e0117613dd4070000ebff08000000000000000100020000000800000000faffffff00", "e7460000102000000000e44400000020e40000008bd02800", [0xde, 0x8000000000000001]}}) ioctl$LOOP_CHANGE_FD(r2, 0x4c06, r0) 0s ago: executing program 2 (id=374): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./config\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./config\x00', &(0x7f00000000c0)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./config/usb_gadget/g1\x00', 0x1ff) open$dir(&(0x7f00000003c0)='./config/usb_gadget/g1\x00', 0x10000, 0x18) rmdir(&(0x7f00000002c0)='./config/usb_gadget/g1\x00') syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.1.152' (ED25519) to the list of known hosts. [ 21.912675][ T36] audit: type=1400 audit(1789542001.659:64): avc: denied { mounton } for pid=287 comm="syz-executor" path="/syzcgroup/unified" dev="sda1" ino=2023 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1 [ 21.913767][ T287] cgroup: Unknown subsys name 'net' [ 21.935306][ T36] audit: type=1400 audit(1789542001.659:65): avc: denied { mount } for pid=287 comm="syz-executor" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 21.962553][ T36] audit: type=1400 audit(1789542001.699:66): avc: denied { unmount } for pid=287 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 21.962691][ T287] cgroup: Unknown subsys name 'devices' [ 22.089410][ T287] cgroup: Unknown subsys name 'hugetlb' [ 22.094999][ T287] cgroup: Unknown subsys name 'rlimit' [ 22.187001][ T36] audit: type=1400 audit(1789542001.929:67): avc: denied { setattr } for pid=287 comm="syz-executor" name="raw-gadget" dev="devtmpfs" ino=190 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 22.210144][ T36] audit: type=1400 audit(1789542001.929:68): avc: denied { mounton } for pid=287 comm="syz-executor" path="/proc/sys/fs/binfmt_misc" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=dir permissive=1 [ 22.234800][ T36] audit: type=1400 audit(1789542001.929:69): avc: denied { mount } for pid=287 comm="syz-executor" name="/" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=filesystem permissive=1 [ 22.247306][ T289] SELinux: Context root:object_r:swapfile_t is not valid (left unmapped). Setting up swapspace version 1, size = 127995904 bytes [ 22.266631][ T36] audit: type=1400 audit(1789542002.019:70): avc: denied { relabelto } for pid=289 comm="mkswap" name="swap-file" dev="sda1" ino=2026 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 22.292043][ T36] audit: type=1400 audit(1789542002.019:71): avc: denied { write } for pid=289 comm="mkswap" path="/root/swap-file" dev="sda1" ino=2026 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 22.325021][ T36] audit: type=1400 audit(1789542002.069:72): avc: denied { read } for pid=287 comm="syz-executor" name="swap-file" dev="sda1" ino=2026 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 22.350533][ T36] audit: type=1400 audit(1789542002.069:73): avc: denied { open } for pid=287 comm="syz-executor" path="/root/swap-file" dev="sda1" ino=2026 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 22.350829][ T287] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 23.114894][ T294] bridge0: port 1(bridge_slave_0) entered blocking state [ 23.122022][ T294] bridge0: port 1(bridge_slave_0) entered disabled state [ 23.129092][ T294] bridge_slave_0: entered allmulticast mode [ 23.135268][ T294] bridge_slave_0: entered promiscuous mode [ 23.144378][ T294] bridge0: port 2(bridge_slave_1) entered blocking state [ 23.151416][ T294] bridge0: port 2(bridge_slave_1) entered disabled state [ 23.158464][ T294] bridge_slave_1: entered allmulticast mode [ 23.164725][ T294] bridge_slave_1: entered promiscuous mode [ 23.226394][ T297] bridge0: port 1(bridge_slave_0) entered blocking state [ 23.233441][ T297] bridge0: port 1(bridge_slave_0) entered disabled state [ 23.240646][ T297] bridge_slave_0: entered allmulticast mode [ 23.246752][ T297] bridge_slave_0: entered promiscuous mode [ 23.263725][ T297] bridge0: port 2(bridge_slave_1) entered blocking state [ 23.270779][ T297] bridge0: port 2(bridge_slave_1) entered disabled state [ 23.277834][ T297] bridge_slave_1: entered allmulticast mode [ 23.284091][ T297] bridge_slave_1: entered promiscuous mode [ 23.298404][ T296] bridge0: port 1(bridge_slave_0) entered blocking state [ 23.305429][ T296] bridge0: port 1(bridge_slave_0) entered disabled state [ 23.312574][ T296] bridge_slave_0: entered allmulticast mode [ 23.318815][ T296] bridge_slave_0: entered promiscuous mode [ 23.327570][ T296] bridge0: port 2(bridge_slave_1) entered blocking state [ 23.334742][ T296] bridge0: port 2(bridge_slave_1) entered disabled state [ 23.341816][ T296] bridge_slave_1: entered allmulticast mode [ 23.348008][ T296] bridge_slave_1: entered promiscuous mode [ 23.353969][ T295] bridge0: port 1(bridge_slave_0) entered blocking state [ 23.361080][ T295] bridge0: port 1(bridge_slave_0) entered disabled state [ 23.368128][ T295] bridge_slave_0: entered allmulticast mode [ 23.374228][ T295] bridge_slave_0: entered promiscuous mode [ 23.380588][ T295] bridge0: port 2(bridge_slave_1) entered blocking state [ 23.387606][ T295] bridge0: port 2(bridge_slave_1) entered disabled state [ 23.394653][ T295] bridge_slave_1: entered allmulticast mode [ 23.400913][ T295] bridge_slave_1: entered promiscuous mode [ 23.441456][ T294] bridge0: port 2(bridge_slave_1) entered blocking state [ 23.448493][ T294] bridge0: port 2(bridge_slave_1) entered forwarding state [ 23.455751][ T294] bridge0: port 1(bridge_slave_0) entered blocking state [ 23.462776][ T294] bridge0: port 1(bridge_slave_0) entered forwarding state [ 23.517213][ T295] bridge0: port 2(bridge_slave_1) entered blocking state [ 23.524252][ T295] bridge0: port 2(bridge_slave_1) entered forwarding state [ 23.531512][ T295] bridge0: port 1(bridge_slave_0) entered blocking state [ 23.538535][ T295] bridge0: port 1(bridge_slave_0) entered forwarding state [ 23.592937][ T60] bridge0: port 1(bridge_slave_0) entered disabled state [ 23.600387][ T60] bridge0: port 2(bridge_slave_1) entered disabled state [ 23.608170][ T60] bridge0: port 1(bridge_slave_0) entered disabled state [ 23.615335][ T60] bridge0: port 2(bridge_slave_1) entered disabled state [ 23.630858][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 23.637902][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 23.645519][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 23.652549][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 23.691245][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 23.698293][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 23.709013][ T60] bridge0: port 2(bridge_slave_1) entered blocking state [ 23.716036][ T60] bridge0: port 2(bridge_slave_1) entered forwarding state [ 23.731999][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 23.739037][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 23.755309][ T128] bridge0: port 2(bridge_slave_1) entered blocking state [ 23.762334][ T128] bridge0: port 2(bridge_slave_1) entered forwarding state [ 23.777280][ T60] bridge0: port 1(bridge_slave_0) entered blocking state [ 23.784312][ T60] bridge0: port 1(bridge_slave_0) entered forwarding state [ 23.806981][ T294] veth0_vlan: entered promiscuous mode [ 23.814190][ T128] bridge0: port 2(bridge_slave_1) entered blocking state [ 23.821229][ T128] bridge0: port 2(bridge_slave_1) entered forwarding state [ 23.836164][ T294] veth1_macvtap: entered promiscuous mode [ 23.853479][ T296] veth0_vlan: entered promiscuous mode [ 23.868844][ T295] veth0_vlan: entered promiscuous mode [ 23.883853][ T296] veth1_macvtap: entered promiscuous mode [ 23.893593][ T295] veth1_macvtap: entered promiscuous mode [ 23.921628][ T297] veth0_vlan: entered promiscuous mode [ 23.937117][ T294] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 23.973734][ T297] veth1_macvtap: entered promiscuous mode [ 23.989317][ T315] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 24.074265][ T330] Bluetooth: ISO socket layer initialized [ 24.079277][ T331] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 24.132850][ T337] netlink: 36 bytes leftover after parsing attributes in process `syz.1.9'. [ 24.149297][ T337] netlink: 240 bytes leftover after parsing attributes in process `syz.1.9'. [ 24.204565][ T350] capability: warning: `syz.0.15' uses deprecated v2 capabilities in a way that may be insecure [ 24.217388][ T350] overlayfs: failed to create directory ./bus/work (errno: 13); mounting read-only [ 24.231062][ T352] FAULT_INJECTION: forcing a failure. [ 24.231062][ T352] name failslab, interval 1, probability 0, space 0, times 1 [ 24.254195][ T352] CPU: 0 UID: 0 PID: 352 Comm: syz.1.18 Not tainted syzkaller #0 59ddfa31286c0993fe0730f15c0a18803f31b842 [ 24.254224][ T352] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 24.254243][ T352] Call Trace: [ 24.254250][ T352] [ 24.254258][ T352] __dump_stack+0x21/0x30 [ 24.254298][ T352] dump_stack_lvl+0x140/0x1c0 [ 24.254323][ T352] ? __cfi_dump_stack_lvl+0x10/0x10 [ 24.254347][ T352] dump_stack+0x19/0x20 [ 24.254368][ T352] should_fail_ex+0x3c2/0x510 [ 24.254390][ T352] ? sk_prot_alloc+0x104/0x3a0 [ 24.254412][ T352] should_failslab+0xac/0x100 [ 24.254436][ T352] __kmalloc_noprof+0x69/0x510 [ 24.254456][ T352] ? sk_prot_alloc+0x104/0x3a0 [ 24.254476][ T352] ? avc_has_perm_noaudit+0x289/0x360 [ 24.254498][ T352] sk_prot_alloc+0x104/0x3a0 [ 24.254517][ T352] sk_alloc+0x40/0x590 [ 24.254539][ T352] tun_chr_open+0x80/0x7f0 [ 24.254557][ T352] ? __cfi_kobject_get_unless_zero+0x10/0x10 [ 24.254576][ T352] ? __cfi_tun_chr_open+0x10/0x10 [ 24.254594][ T352] misc_open+0x2ec/0x370 [ 24.254612][ T352] chrdev_open+0x4eb/0x610 [ 24.254632][ T352] ? __cfi_chrdev_open+0x10/0x10 [ 24.254651][ T352] ? bpf_lsm_file_open+0xd/0x20 [ 24.254675][ T352] ? __cfi_chrdev_open+0x10/0x10 [ 24.254693][ T352] do_dentry_open+0x97c/0x1510 [ 24.254720][ T352] vfs_open+0x86/0x240 [ 24.254741][ T352] ? __cfi_vfs_open+0x10/0x10 [ 24.254761][ T352] ? may_open+0x352/0x430 [ 24.254780][ T352] path_openat+0x2c49/0x35a0 [ 24.254799][ T352] ? schedule+0xc5/0x240 [ 24.254816][ T352] ? kasan_save_alloc_info+0x3a/0x50 [ 24.254833][ T352] ? getname+0x1b/0x30 [ 24.254850][ T352] ? x64_sys_call+0xe69/0x2ee0 [ 24.254866][ T352] ? do_syscall_64+0x57/0xf0 [ 24.254882][ T352] ? do_filp_open+0x440/0x440 [ 24.254905][ T352] do_filp_open+0x1f2/0x440 [ 24.254929][ T352] ? __cfi_do_filp_open+0x10/0x10 [ 24.254954][ T352] ? alloc_fd+0x4c1/0x570 [ 24.254975][ T352] do_sys_openat2+0x134/0x1d0 [ 24.254999][ T352] ? fput+0x1a4/0x230 [ 24.255020][ T352] ? do_sys_open+0x100/0x100 [ 24.255045][ T352] __x64_sys_openat+0x13a/0x170 [ 24.255070][ T352] x64_sys_call+0xe69/0x2ee0 [ 24.255086][ T352] do_syscall_64+0x57/0xf0 [ 24.255102][ T352] ? clear_bhb_loop+0x50/0xa0 [ 24.255123][ T352] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 24.255152][ T352] RIP: 0033:0x7fc87e79e159 [ 24.255175][ T352] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 24.255191][ T352] RSP: 002b:00007fc87f6a2028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 24.255219][ T352] RAX: ffffffffffffffda RBX: 00007fc87ea25fa0 RCX: 00007fc87e79e159 [ 24.255233][ T352] RDX: 0000000000002241 RSI: 0000200000000000 RDI: ffffffffffffff9c [ 24.255247][ T352] RBP: 00007fc87e83506b R08: 0000000000000000 R09: 0000000000000000 [ 24.255259][ T352] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 24.255271][ T352] R13: 00007fc87ea26038 R14: 00007fc87ea25fa0 R15: 00007ffc33bbab68 [ 24.255287][ T352] [ 24.261143][ T354] pim6reg1: entered promiscuous mode [ 24.565704][ T354] pim6reg1: entered allmulticast mode [ 24.573580][ T356] syz_tun: entered allmulticast mode [ 24.579278][ T357] syz_tun: left allmulticast mode [ 24.617809][ T310] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 24.720146][ T383] input: syz0 as /devices/virtual/input/input4 [ 24.777733][ T310] usb 3-1: Using ep0 maxpacket: 8 [ 24.783865][ T310] usb 3-1: config 0 has an invalid interface number: 31 but max is 0 [ 24.792040][ T310] usb 3-1: config 0 has no interface number 0 [ 24.799396][ T310] usb 3-1: New USB device found, idVendor=046d, idProduct=08c3, bcdDevice=6b.16 [ 24.808518][ T310] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 24.816534][ T310] usb 3-1: Product: syz [ 24.820791][ T310] usb 3-1: Manufacturer: syz [ 24.825435][ T310] usb 3-1: SerialNumber: syz [ 24.832175][ T310] usb 3-1: config 0 descriptor?? [ 24.877748][ T9] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 25.029511][ T9] usb 1-1: Using ep0 maxpacket: 16 [ 25.037470][ T9] usb 1-1: config 0 has an invalid interface number: 251 but max is 0 [ 25.045873][ T9] usb 1-1: config 0 has no interface number 0 [ 25.053986][ T9] usb 1-1: config 0 interface 251 altsetting 0 bulk endpoint 0x4 has invalid maxpacket 16 [ 25.063951][ T9] usb 1-1: config 0 interface 251 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 64 [ 25.075375][ T9] usb 1-1: New USB device found, idVendor=0b95, idProduct=172a, bcdDevice=f7.f4 [ 25.084623][ T9] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 25.092905][ T9] usb 1-1: Product: syz [ 25.097071][ T9] usb 1-1: Manufacturer: syz [ 25.101683][ T9] usb 1-1: SerialNumber: syz [ 25.106906][ T9] usb 1-1: config 0 descriptor?? [ 25.112154][ T365] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 25.119477][ T365] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 25.242952][ T310] usb 3-1: Found UVC 0.04 device syz (046d:08c3) [ 25.249673][ T310] usb 3-1: No valid video chain found. [ 25.328811][ T365] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 25.336020][ T365] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 25.449742][ T64] usb 3-1: USB disconnect, device number 2 [ 25.757797][ T396] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 25.929336][ T396] usb 2-1: unable to get BOS descriptor or descriptor too short [ 25.937818][ T396] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 25.950276][ T9] asix 1-1:0.251 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71 [ 25.972462][ T396] usb 2-1: string descriptor 0 read error: -22 [ 25.980570][ T9] asix 1-1:0.251 (unnamed net_device) (uninitialized): Error reading PHY_ID register: ffffffb9 [ 25.991234][ T396] usb 2-1: New USB device found, idVendor=200c, idProduct=100b, bcdDevice= 0.40 [ 26.000428][ T9] asix 1-1:0.251: probe with driver asix failed with error -71 [ 26.008212][ T396] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 26.018309][ T9] usb 1-1: USB disconnect, device number 2 [ 26.597435][ T439] input: syz1 as /devices/virtual/input/input5 [ 26.629627][ T396] usb 2-1: current rate 48096 is different from the runtime rate 48000 [ 26.665003][ T446] process 'syz.0.60' launched '/dev/fd/3/./file0' with NULL argv: empty string added [ 26.844034][ T45] usb 2-1: USB disconnect, device number 2 [ 27.017744][ T310] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 27.170310][ T310] usb 4-1: New USB device found, idVendor=0bda, idProduct=8150, bcdDevice= 0.00 [ 27.179403][ T310] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 27.187367][ T310] usb 4-1: Product: syz [ 27.191520][ T310] usb 4-1: Manufacturer: syz [ 27.196102][ T310] usb 4-1: SerialNumber: syz [ 27.273716][ T36] kauditd_printk_skb: 102 callbacks suppressed [ 27.273731][ T36] audit: type=1400 audit(1789542007.019:176): avc: denied { read write } for pid=448 comm="syz.0.70" name="vhost-vsock" dev="devtmpfs" ino=200 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 27.290833][ T452] device-mapper: ioctl: Invalid new mapped device name or uuid string supplied. [ 27.303887][ T36] audit: type=1400 audit(1789542007.019:177): avc: denied { open } for pid=448 comm="syz.0.70" path="/dev/vhost-vsock" dev="devtmpfs" ino=200 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 27.340776][ T36] audit: type=1400 audit(1789542007.019:178): avc: denied { ioctl } for pid=448 comm="syz.0.70" path="/dev/vhost-vsock" dev="devtmpfs" ino=200 ioctlcmd=0xaf01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 27.374248][ T36] audit: type=1400 audit(1789542007.039:179): avc: denied { mount } for pid=449 comm="syz.2.61" name="/" dev="devtmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=filesystem permissive=1 [ 27.407966][ T36] audit: type=1400 audit(1789542007.039:180): avc: denied { read } for pid=449 comm="syz.2.61" name="control" dev="devtmpfs" ino=198 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:lvm_control_t tclass=chr_file permissive=1 [ 27.432880][ T36] audit: type=1400 audit(1789542007.039:181): avc: denied { open } for pid=449 comm="syz.2.61" path="/6/dev/mapper/control" dev="devtmpfs" ino=198 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:lvm_control_t tclass=chr_file permissive=1 [ 27.440128][ T310] rtl8150 4-1:1.0: couldn't reset the device [ 27.460664][ T36] audit: type=1400 audit(1789542007.039:182): avc: denied { ioctl } for pid=449 comm="syz.2.61" path="/6/dev/mapper/control" dev="devtmpfs" ino=198 ioctlcmd=0xfd05 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:lvm_control_t tclass=chr_file permissive=1 [ 27.476132][ T310] rtl8150 4-1:1.0: probe with driver rtl8150 failed with error -5 [ 27.491574][ T36] audit: type=1400 audit(1789542007.099:183): avc: denied { unmount } for pid=294 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=filesystem permissive=1 [ 27.506407][ T310] usb 4-1: USB disconnect, device number 2 [ 27.584794][ T36] audit: type=1400 audit(1789542007.139:184): avc: denied { write } for pid=456 comm="syz.2.65" name="control" dev="devtmpfs" ino=198 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:lvm_control_t tclass=chr_file permissive=1 [ 27.617759][ T36] audit: type=1400 audit(1789542007.149:185): avc: denied { read } for pid=457 comm="syz.0.63" name="binder0" dev="binder" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 27.646999][ T481] netlink: 'syz.2.78': attribute type 27 has an invalid length. [ 28.351607][ T585] input: syz1 as /devices/virtual/input/input6 [ 28.670734][ T643] rust_binder: 642:643 error while translating object: EINVAL [ 28.696064][ T643] rust_binder: Failure in copy_transaction_data: EINVAL [ 28.696097][ T643] rust_binder: 642:643 transaction call to 642:0 failed EINVAL, code 0 size 88-24 [ 28.714038][ T310] rust_binder: 642: undelivered TRANSACTION_ERROR: 29201 [ 29.324787][ T681] netlink: 20 bytes leftover after parsing attributes in process `syz.3.174'. [ 29.425957][ T695] rust_binder: 694:695 error while translating object: EPERM [ 29.443533][ T695] rust_binder: Failure in copy_transaction_data: EPERM [ 29.443556][ T695] rust_binder: 694:695 transaction call to 694:0 failed EPERM, code 0 size 88-24 [ 29.473723][ T700] serio: Serial port ptm0 [ 29.478988][ T396] rust_binder: 694: undelivered TRANSACTION_ERROR: 29201 [ 29.549863][ T707] __vm_enough_memory: pid: 707, comm: syz.3.185, bytes: 11727186333696 not enough memory for the allocation [ 29.562857][ T707] __vm_enough_memory: pid: 707, comm: syz.3.185, bytes: 11727186333696 not enough memory for the allocation [ 29.579970][ T709] input: syz1 as /devices/virtual/input/input7 [ 29.745409][ T738] netlink: 'syz.3.199': attribute type 298 has an invalid length. [ 29.815142][ T749] FAULT_INJECTION: forcing a failure. [ 29.815142][ T749] name failslab, interval 1, probability 0, space 0, times 0 [ 29.828159][ T749] CPU: 1 UID: 0 PID: 749 Comm: syz.0.204 Not tainted syzkaller #0 59ddfa31286c0993fe0730f15c0a18803f31b842 [ 29.828188][ T749] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 29.828200][ T749] Call Trace: [ 29.828206][ T749] [ 29.828214][ T749] __dump_stack+0x21/0x30 [ 29.828244][ T749] dump_stack_lvl+0x140/0x1c0 [ 29.828269][ T749] ? __cfi_dump_stack_lvl+0x10/0x10 [ 29.828295][ T749] ? futex_wait+0x2b8/0x7c0 [ 29.828313][ T749] ? __cfi_futex_wait+0x10/0x10 [ 29.828330][ T749] dump_stack+0x19/0x20 [ 29.828352][ T749] should_fail_ex+0x3c2/0x510 [ 29.828373][ T749] should_failslab+0xac/0x100 [ 29.828396][ T749] kmem_cache_alloc_noprof+0x42/0x410 [ 29.828416][ T749] ? dup_fd+0x63/0x9c0 [ 29.828435][ T749] dup_fd+0x63/0x9c0 [ 29.828454][ T749] __close_range+0x1ca/0x4e0 [ 29.828473][ T749] ? __cfi___close_range+0x10/0x10 [ 29.828493][ T749] ? __kasan_check_write+0x18/0x20 [ 29.828510][ T749] ? fpregs_restore_userregs+0x11c/0x260 [ 29.828530][ T749] __x64_sys_close_range+0x7e/0x90 [ 29.828545][ T749] x64_sys_call+0x1686/0x2ee0 [ 29.828562][ T749] do_syscall_64+0x57/0xf0 [ 29.828578][ T749] ? clear_bhb_loop+0x50/0xa0 [ 29.828610][ T749] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 29.828629][ T749] RIP: 0033:0x7f20b599e159 [ 29.828645][ T749] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 29.828660][ T749] RSP: 002b:00007f20b690c028 EFLAGS: 00000246 ORIG_RAX: 00000000000001b4 [ 29.828680][ T749] RAX: ffffffffffffffda RBX: 00007f20b5c25fa0 RCX: 00007f20b599e159 [ 29.828695][ T749] RDX: 0000000000000002 RSI: ffffffffffffffff RDI: ffffffffffffffff [ 29.828707][ T749] RBP: 00007f20b5a3506b R08: 0000000000000000 R09: 0000000000000000 [ 29.828717][ T749] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 29.828727][ T749] R13: 00007f20b5c26038 R14: 00007f20b5c25fa0 R15: 00007ffe32f50028 [ 29.828741][ T749] [ 29.835404][ T751] pim6reg1: entered promiscuous mode [ 30.038982][ T751] pim6reg1: entered allmulticast mode [ 30.053141][ T756] netlink: 182 bytes leftover after parsing attributes in process `syz.0.207'. [ 30.222382][ T778] FAULT_INJECTION: forcing a failure. [ 30.222382][ T778] name failslab, interval 1, probability 0, space 0, times 0 [ 30.235256][ T778] CPU: 0 UID: 0 PID: 778 Comm: syz.3.216 Not tainted syzkaller #0 59ddfa31286c0993fe0730f15c0a18803f31b842 [ 30.235284][ T778] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 30.235295][ T778] Call Trace: [ 30.235301][ T778] [ 30.235307][ T778] __dump_stack+0x21/0x30 [ 30.235336][ T778] dump_stack_lvl+0x140/0x1c0 [ 30.235359][ T778] ? __cfi_dump_stack_lvl+0x10/0x10 [ 30.235383][ T778] dump_stack+0x19/0x20 [ 30.235404][ T778] should_fail_ex+0x3c2/0x510 [ 30.235426][ T778] should_failslab+0xac/0x100 [ 30.235448][ T778] kmem_cache_alloc_noprof+0x42/0x410 [ 30.235465][ T778] ? __kasan_check_write+0x18/0x20 [ 30.235482][ T778] ? skb_clone+0x21d/0x470 [ 30.235504][ T778] ? __cfi__raw_read_lock_irqsave+0x10/0x10 [ 30.235522][ T778] skb_clone+0x21d/0x470 [ 30.235543][ T778] netlink_broadcast_filtered+0x691/0x11d0 [ 30.235568][ T778] netlink_broadcast+0x3e/0x60 [ 30.235589][ T778] kobject_uevent_net_broadcast+0x3de/0x5e0 [ 30.235608][ T778] kobject_uevent_env+0x551/0x7e0 [ 30.235626][ T778] kobject_uevent+0x21/0x40 [ 30.235643][ T778] gadget_bind_driver+0x5e2/0x9c0 [ 30.235664][ T778] ? __cfi_gadget_bind_driver+0x10/0x10 [ 30.235684][ T778] really_probe+0x2e1/0x8b0 [ 30.235701][ T778] __driver_probe_device+0x193/0x280 [ 30.235716][ T778] driver_probe_device+0x54/0x3f0 [ 30.235733][ T778] __driver_attach+0x422/0x5e0 [ 30.235748][ T778] bus_for_each_dev+0x249/0x2d0 [ 30.235768][ T778] ? __cfi___driver_attach+0x10/0x10 [ 30.235783][ T778] ? __cfi_bus_for_each_dev+0x10/0x10 [ 30.235802][ T778] ? __kasan_kmalloc+0x96/0xb0 [ 30.235822][ T778] ? _raw_spin_unlock+0x45/0x60 [ 30.235838][ T778] ? klist_add_tail+0x1dd/0x220 [ 30.235860][ T778] driver_attach+0x46/0x50 [ 30.235874][ T778] bus_add_driver+0x393/0x730 [ 30.235895][ T778] driver_register+0x2b7/0x3c0 [ 30.235911][ T778] usb_gadget_register_driver_owner+0xfc/0x270 [ 30.235931][ T778] raw_ioctl+0x144c/0x37a0 [ 30.235947][ T778] ? __cfi_raw_ioctl+0x10/0x10 [ 30.235961][ T778] ? selinux_file_ioctl+0x732/0x1480 [ 30.235980][ T778] ? __cfi_selinux_file_ioctl+0x10/0x10 [ 30.236001][ T778] ? __fget_files+0x2bc/0x330 [ 30.236021][ T778] ? bpf_lsm_file_ioctl+0xd/0x20 [ 30.236042][ T778] ? security_file_ioctl+0x3e/0x110 [ 30.236072][ T778] ? __cfi_raw_ioctl+0x10/0x10 [ 30.236086][ T778] __se_sys_ioctl+0x126/0x1b0 [ 30.236108][ T778] __x64_sys_ioctl+0x7f/0xa0 [ 30.236127][ T778] x64_sys_call+0x1878/0x2ee0 [ 30.236143][ T778] do_syscall_64+0x57/0xf0 [ 30.236158][ T778] ? clear_bhb_loop+0x50/0xa0 [ 30.236179][ T778] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 30.236199][ T778] RIP: 0033:0x7fd79939ddeb [ 30.236213][ T778] Code: 00 48 89 44 24 18 31 c0 48 8d 44 24 60 c7 04 24 10 00 00 00 48 89 44 24 08 48 8d 44 24 20 48 89 44 24 10 b8 10 00 00 00 0f 05 <89> c2 3d 00 f0 ff ff 77 1c 48 8b 44 24 18 64 48 2b 04 25 28 00 00 [ 30.236227][ T778] RSP: 002b:00007fd79a285f00 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 30.236246][ T778] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 00007fd79939ddeb [ 30.236258][ T778] RDX: 0000000000000000 RSI: 0000000000005501 RDI: 0000000000000004 [ 30.236269][ T778] RBP: 00007fd79a286fd0 R08: 0000000000000001 R09: 00000000ffffffff [ 30.236280][ T778] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 30.236290][ T778] R13: 0000200000000000 R14: 0000000000000000 R15: 0000000000000000 [ 30.236302][ T778] [ 30.282011][ T780] netlink: 'syz.1.217': attribute type 4 has an invalid length. [ 30.487751][ T406] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 30.667072][ T790] FAULT_INJECTION: forcing a failure. [ 30.667072][ T790] name failslab, interval 1, probability 0, space 0, times 0 [ 30.691864][ T790] CPU: 1 UID: 0 PID: 790 Comm: syz.2.224 Not tainted syzkaller #0 59ddfa31286c0993fe0730f15c0a18803f31b842 [ 30.691895][ T790] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 30.691907][ T790] Call Trace: [ 30.691913][ T790] [ 30.691921][ T790] __dump_stack+0x21/0x30 [ 30.691952][ T790] dump_stack_lvl+0x140/0x1c0 [ 30.691977][ T790] ? __cfi_dump_stack_lvl+0x10/0x10 [ 30.692002][ T790] ? pcpu_memcg_post_alloc_hook+0x202/0x2e0 [ 30.692024][ T790] ? mutex_unlock+0x90/0x240 [ 30.692045][ T790] ? pcpu_alloc_noprof+0x1440/0x1440 [ 30.692067][ T790] dump_stack+0x19/0x20 [ 30.692089][ T790] should_fail_ex+0x3c2/0x510 [ 30.692112][ T790] should_failslab+0xac/0x100 [ 30.692134][ T790] __kmalloc_cache_noprof+0x41/0x470 [ 30.692153][ T790] ? percpu_ref_init+0xe3/0x4d0 [ 30.692175][ T790] percpu_ref_init+0xe3/0x4d0 [ 30.692195][ T790] ? __cfi_io_ring_ctx_ref_free+0x10/0x10 [ 30.692215][ T790] io_ring_ctx_alloc+0x141/0x1dc0 [ 30.692233][ T790] ? do_futex+0x32a/0x510 [ 30.692256][ T790] io_uring_create+0x2e0/0x13f0 [ 30.692274][ T790] ? __kasan_check_write+0x18/0x20 [ 30.692292][ T790] __se_sys_io_uring_setup+0x2a4/0x2b0 [ 30.692318][ T790] ? __se_sys_futex+0x13c/0x320 [ 30.692341][ T790] ? __x64_sys_io_uring_setup+0x80/0x80 [ 30.692367][ T790] ? __kasan_check_write+0x18/0x20 [ 30.692384][ T790] __x64_sys_io_uring_setup+0x5f/0x80 [ 30.692408][ T790] x64_sys_call+0x22c0/0x2ee0 [ 30.692426][ T790] do_syscall_64+0x57/0xf0 [ 30.692442][ T790] ? clear_bhb_loop+0x50/0xa0 [ 30.692463][ T790] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 30.692484][ T790] RIP: 0033:0x7f6844d9e159 [ 30.692506][ T790] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 30.692523][ T790] RSP: 002b:00007f6845d28fb8 EFLAGS: 00000206 ORIG_RAX: 00000000000001a9 [ 30.692545][ T790] RAX: ffffffffffffffda RBX: 0000200000000180 RCX: 00007f6844d9e159 [ 30.692559][ T790] RDX: 0000200000000240 RSI: 0000200000000180 RDI: 00000000000046cc [ 30.692572][ T790] RBP: 00007f6844e3506b R08: 0000000000000000 R09: 0000000000000000 [ 30.692585][ T790] R10: 0000200000000280 R11: 0000000000000206 R12: 0000200000000240 [ 30.692598][ T790] R13: 0000200000000280 R14: 0000200000000200 R15: 00007ffc8a81be58 [ 30.692614][ T790] [ 30.798897][ T406] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 30.967778][ T406] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 30.988377][ T406] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 31.011578][ T406] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 31.026898][ T406] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 31.057896][ T406] usb 4-1: config 0 descriptor?? [ 31.134716][ T823] rust_binder: 822:823 inc_ref_done called when no active inc_refs [ 31.294920][ T406] usbhid 4-1:0.0: can't add hid device: -71 [ 31.304276][ T406] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 31.324291][ T406] usb 4-1: USB disconnect, device number 3 [ 31.737730][ T45] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 31.887739][ T310] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 31.900762][ T45] usb 2-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 31.920782][ T45] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 31.942940][ T45] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 31.962707][ T45] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 31.990991][ T45] usb 2-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40 [ 32.003492][ T45] usb 2-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0 [ 32.020612][ T45] usb 2-1: Manufacturer: syz [ 32.031738][ T45] usb 2-1: config 0 descriptor?? [ 32.057733][ T310] usb 1-1: Using ep0 maxpacket: 32 [ 32.068108][ T310] usb 1-1: config 0 has an invalid interface number: 67 but max is 0 [ 32.076198][ T310] usb 1-1: config 0 has no interface number 0 [ 32.092102][ T310] usb 1-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 32.101363][ T310] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 32.117921][ T310] usb 1-1: Product: syz [ 32.122101][ T310] usb 1-1: Manufacturer: syz [ 32.126704][ T310] usb 1-1: SerialNumber: syz [ 32.132358][ T310] usb 1-1: config 0 descriptor?? [ 32.138891][ T310] smsc95xx v2.0.0 [ 32.364388][ T894] netlink: 4 bytes leftover after parsing attributes in process `syz.3.267'. [ 32.444550][ T45] appleir 0003:05AC:8243.0001: unknown main item tag 0x0 [ 32.452011][ T45] appleir 0003:05AC:8243.0001: No inputs registered, leaving [ 32.472025][ T45] appleir 0003:05AC:8243.0001: hiddev96,hidraw0: USB HID v0.00 Device [syz] on usb-dummy_hcd.1-1/input0 [ 32.537747][ T311] usb 3-1: new full-speed USB device number 3 using dummy_hcd [ 32.550767][ T310] smsc95xx 1-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -32 [ 32.565554][ T310] smsc95xx 1-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 32.576289][ T36] kauditd_printk_skb: 79 callbacks suppressed [ 32.576300][ T36] audit: type=1400 audit(1789542012.319:265): avc: denied { write } for pid=899 comm="syz.3.270" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 32.718779][ T311] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 32.739954][ T311] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 32.767650][ T311] usb 3-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 32.785293][ T906] netlink: 'syz.3.273': attribute type 8 has an invalid length. [ 32.786890][ T311] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 32.793019][ T906] netlink: 'syz.3.273': attribute type 32 has an invalid length. [ 32.817665][ T311] usb 3-1: config 0 descriptor?? [ 33.057733][ T396] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 33.177834][ T310] smsc95xx 1-1:0.67 (unnamed net_device) (uninitialized): Failed to write reg index 0x00000104: -71 [ 33.188742][ T310] smsc95xx 1-1:0.67: probe with driver smsc95xx failed with error -71 [ 33.198145][ T310] usb 1-1: USB disconnect, device number 3 [ 33.248711][ T396] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 33.267895][ T396] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 33.272626][ T45] usb 2-1: USB disconnect, device number 3 [ 33.277072][ T396] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 33.317746][ T396] usb 4-1: Product: syz [ 33.321931][ T396] usb 4-1: Manufacturer: syz [ 33.326514][ T396] usb 4-1: SerialNumber: syz [ 33.425144][ T311] usb 3-1: string descriptor 0 read error: -22 [ 33.627282][ T311] input: HID 256c:006d Pen as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/0003:256C:006D.0002/input/input8 [ 33.640345][ T311] uclogic 0003:256C:006D.0002: input,hidraw0: USB HID v0.00 Device [HID 256c:006d] on usb-dummy_hcd.2-1/input0 [ 33.698037][ T36] audit: type=1400 audit(1789542013.449:266): avc: denied { ioctl } for pid=95 comm="acpid" path="/dev/input/event3" dev="devtmpfs" ino=467 ioctlcmd=0x4520 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 33.844704][ T45] usb 3-1: USB disconnect, device number 3 [ 34.370326][ T396] cdc_ncm 4-1:1.0: MAC-Address: 42:42:42:42:42:42 [ 34.380286][ T396] cdc_ncm 4-1:1.0: dwNtbInMaxSize=16 is too small. Using 2048 [ 34.398482][ T396] cdc_ncm 4-1:1.0: setting rx_max = 2048 [ 34.570578][ T396] cdc_ncm 4-1:1.0: setting tx_max = 88 [ 34.585308][ T396] cdc_ncm 4-1:1.0 usb0: register 'cdc_ncm' at usb-dummy_hcd.3-1, CDC NCM (NO ZLP), 42:42:42:42:42:42 [ 34.612189][ T396] usb 4-1: USB disconnect, device number 4 [ 34.625092][ T396] cdc_ncm 4-1:1.0 usb0: unregister 'cdc_ncm' usb-dummy_hcd.3-1, CDC NCM (NO ZLP) [ 34.830272][ T940] kvm: kvm [939]: vcpu0, guest rIP: 0x9114 Unhandled WRMSR(0xc2) = 0x9d00 [ 34.848175][ T940] kvm: kvm [939]: vcpu0, guest rIP: 0x9114 Unhandled WRMSR(0xc1) = 0x9d00 [ 34.995350][ T36] audit: type=1400 audit(1789542014.739:267): avc: denied { ioctl } for pid=942 comm="syz.1.288" path="socket:[8278]" dev="sockfs" ino=8278 ioctlcmd=0x7436 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 35.267732][ T396] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 35.326953][ T956] netlink: 'syz.2.293': attribute type 2 has an invalid length. [ 35.389666][ T958] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=2142054965 (4284109930 ns) > initial count (2850433972 ns). Using initial count to start timer. [ 35.450058][ T396] usb 2-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 35.462599][ T396] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 35.478812][ T396] usb 2-1: Product: syz [ 35.487327][ T396] usb 2-1: Manufacturer: syz [ 35.496314][ T396] usb 2-1: SerialNumber: syz [ 35.719294][ T310] usb 2-1: USB disconnect, device number 4 [ 36.037757][ T45] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 36.197722][ T45] usb 3-1: Using ep0 maxpacket: 32 [ 36.208833][ T45] usb 3-1: unable to get BOS descriptor or descriptor too short [ 36.217254][ T45] usb 3-1: config 14 has an invalid interface number: 169 but max is 0 [ 36.241568][ T45] usb 3-1: config 14 has no interface number 0 [ 36.253393][ T45] usb 3-1: config 14 interface 169 has no altsetting 0 [ 36.274402][ T45] usb 3-1: New USB device found, idVendor=17cc, idProduct=1010, bcdDevice=24.fc [ 36.283648][ T45] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 36.302048][ T45] usb 3-1: Product: syz [ 36.311790][ T45] usb 3-1: Manufacturer: syz [ 36.318485][ T977] ======================================================= [ 36.318485][ T977] WARNING: The mand mount option has been deprecated and [ 36.318485][ T977] and is ignored by this kernel. Remove the mand [ 36.318485][ T977] option from the mount to silence this warning. [ 36.318485][ T977] ======================================================= [ 36.327779][ T36] audit: type=1400 audit(1789542016.069:268): avc: denied { remount } for pid=976 comm="syz.1.303" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=filesystem permissive=1 [ 36.357725][ T45] usb 3-1: SerialNumber: syz [ 36.517741][ T396] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 36.647740][ T310] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 36.668709][ T396] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 36.678930][ T396] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 36.698420][ T396] usb 4-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 36.707532][ T396] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 36.727739][ T396] usb 4-1: SerialNumber: syz [ 36.808768][ T310] usb 2-1: config 1 has an invalid interface number: 3 but max is 0 [ 36.817718][ T310] usb 2-1: config 1 has no interface number 0 [ 36.838379][ T310] usb 2-1: New USB device found, idVendor=0644, idProduct=8047, bcdDevice= 1.00 [ 36.847549][ T310] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 36.867672][ T310] usb 2-1: Product: syz [ 36.871877][ T310] usb 2-1: Manufacturer: syz [ 36.876480][ T310] usb 2-1: SerialNumber: syz [ 37.115485][ T310] usb 2-1: cannot find UAC_HEADER [ 37.157784][ T45] usb 3-1: reset high-speed USB device number 4 using dummy_hcd [ 37.168482][ T310] snd-usb-audio 2-1:1.3: probe with driver snd-usb-audio failed with error -22 [ 37.168628][ T396] usb 4-1: 0:2 : does not exist [ 37.188341][ T310] usb 2-1: USB disconnect, device number 5 [ 37.197774][ T396] usb 4-1: unit 254 not found! [ 37.229138][ T396] usb 4-1: USB disconnect, device number 5 [ 37.467763][ T981] FAULT_INJECTION: forcing a failure. [ 37.467763][ T981] name failslab, interval 1, probability 0, space 0, times 0 [ 37.507718][ T981] CPU: 1 UID: 0 PID: 981 Comm: syz.3.305 Not tainted syzkaller #0 59ddfa31286c0993fe0730f15c0a18803f31b842 [ 37.507751][ T981] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 37.507764][ T981] Call Trace: [ 37.507770][ T981] [ 37.507778][ T981] __dump_stack+0x21/0x30 [ 37.507811][ T981] dump_stack_lvl+0x140/0x1c0 [ 37.507843][ T981] ? __cfi_dump_stack_lvl+0x10/0x10 [ 37.507866][ T981] ? xas_find_marked+0xc97/0xda0 [ 37.507888][ T981] ? xas_nomem+0x71/0x2c0 [ 37.507905][ T981] dump_stack+0x19/0x20 [ 37.507933][ T981] should_fail_ex+0x3c2/0x510 [ 37.507957][ T981] should_failslab+0xac/0x100 [ 37.507980][ T981] __kmalloc_node_track_caller_noprof+0x65/0x4f0 [ 37.508002][ T981] ? kstrdup_const+0x45/0x60 [ 37.508020][ T981] kstrdup+0x4d/0x130 [ 37.508043][ T981] ? kstrdup_const+0x3a/0x60 [ 37.508058][ T981] kstrdup_const+0x45/0x60 [ 37.508073][ T981] alloc_vfsmnt+0xed/0x610 [ 37.508097][ T981] clone_mnt+0x6e/0xbe0 [ 37.508122][ T981] copy_tree+0xe2/0xcb0 [ 37.508139][ T981] ? __cfi_down_write+0x10/0x10 [ 37.508161][ T981] __do_loopback+0x1da/0x3c0 [ 37.508183][ T981] __se_sys_open_tree+0x35b/0x900 [ 37.508201][ T981] ? fput+0x1a4/0x230 [ 37.508223][ T981] ? xfd_validate_state+0x68/0x140 [ 37.508247][ T981] ? __x64_sys_open_tree+0xa0/0xa0 [ 37.508265][ T981] ? __kasan_check_write+0x18/0x20 [ 37.508282][ T981] ? fpregs_restore_userregs+0x11c/0x260 [ 37.508304][ T981] __x64_sys_open_tree+0x7f/0xa0 [ 37.508323][ T981] x64_sys_call+0x2d58/0x2ee0 [ 37.508339][ T981] do_syscall_64+0x57/0xf0 [ 37.508355][ T981] ? clear_bhb_loop+0x50/0xa0 [ 37.508376][ T981] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 37.508396][ T981] RIP: 0033:0x7fd79939e159 [ 37.508411][ T981] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 37.508424][ T981] RSP: 002b:00007fd79a288028 EFLAGS: 00000246 ORIG_RAX: 00000000000001ac [ 37.508444][ T981] RAX: ffffffffffffffda RBX: 00007fd799625fa0 RCX: 00007fd79939e159 [ 37.508457][ T981] RDX: 0000000000089901 RSI: 0000200000000640 RDI: ffffffffffffff9c [ 37.508470][ T981] RBP: 00007fd79943506b R08: 0000000000000000 R09: 0000000000000000 [ 37.508482][ T981] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 37.508493][ T981] R13: 00007fd799626038 R14: 00007fd799625fa0 R15: 00007ffcc6c15118 [ 37.508508][ T981] [ 37.792255][ T983] input: syz0 as /devices/virtual/input/input9 [ 38.028025][ T45] snd-usb-audio 3-1:14.169: probe with driver snd-usb-audio failed with error -11 [ 38.047337][ T45] usb 3-1: USB disconnect, device number 4 [ 38.067750][ T310] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 38.167756][ T311] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 38.177734][ T45] usb 3-1: new full-speed USB device number 5 using dummy_hcd [ 38.228726][ T310] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 38.247715][ T310] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 38.267937][ T310] usb 2-1: New USB device found, idVendor=28de, idProduct=1142, bcdDevice= 0.00 [ 38.287728][ T310] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 38.306156][ T310] usb 2-1: config 0 descriptor?? [ 38.327785][ T311] usb 4-1: Using ep0 maxpacket: 32 [ 38.334017][ T311] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 38.347758][ T311] usb 4-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 38.366934][ T311] usb 4-1: too many endpoints for config 1 interface 1 altsetting 239: 255, using maximum allowed: 30 [ 38.397718][ T45] usb 3-1: unable to get BOS descriptor or descriptor too short [ 38.405427][ T311] usb 4-1: config 1 interface 1 altsetting 239 has 0 endpoint descriptors, different from the interface descriptor's value: 255 [ 38.419033][ T311] usb 4-1: config 1 interface 1 altsetting 1 endpoint 0x1 has invalid wMaxPacketSize 0 [ 38.428988][ T311] usb 4-1: config 1 interface 1 has no altsetting 0 [ 38.435866][ T45] usb 3-1: unable to read config index 0 descriptor/start: -71 [ 38.443793][ T45] usb 3-1: can't read configurations, error -71 [ 38.450961][ T311] usb 4-1: New USB device found, idVendor=0582, idProduct=0025, bcdDevice= 0.40 [ 38.460182][ T311] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 38.468305][ T311] usb 4-1: Product: syz [ 38.472513][ T311] usb 4-1: Manufacturer: syz [ 38.477111][ T311] usb 4-1: SerialNumber: syz [ 38.692132][ T311] usb 4-1: selecting invalid altsetting 0 [ 38.719466][ T310] hid-steam 0003:28DE:1142.0003: unknown main item tag 0x0 [ 38.737182][ T310] hid-steam 0003:28DE:1142.0003: : USB HID v0.00 Device [HID 28de:1142] on usb-dummy_hcd.1-1/input0 [ 38.817749][ T310] hid-steam 0003:28DE:1142.0003: Steam wireless receiver connected [ 38.835855][ T310] hid-steam 0003:28DE:1142.0003: No HID_FEATURE_REPORT submitted - nothing to read [ 38.859138][ T310] hid-steam 0003:28DE:1142.0004: unknown main item tag 0x0 [ 38.877887][ T310] hid-steam 0003:28DE:1142.0004: hidraw0: USB HID v0.00 Device [HID 28de:1142] on usb-dummy_hcd.1-1/input0 [ 38.897739][ T311] usb 4-1: 1:1: cannot get freq (v2/v3): err -32 [ 38.928229][ T36] audit: type=1400 audit(1789542018.679:269): avc: denied { read } for pid=993 comm="syz.2.311" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 39.272315][ T396] usb 2-1: USB disconnect, device number 6 [ 39.285833][ T396] hid-steam 0003:28DE:1142.0003: Steam wireless receiver disconnected [ 39.297747][ T45] usb 3-1: new full-speed USB device number 6 using dummy_hcd [ 39.307854][ T9] usb 4-1: USB disconnect, device number 6 [ 39.448379][ T45] usb 3-1: not running at top speed; connect to a high speed hub [ 39.468080][ T45] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 39.478211][ T45] usb 3-1: New USB device found, idVendor=046d, idProduct=0825, bcdDevice= 1.00 [ 39.487240][ T45] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 39.519460][ T45] usb 3-1: Found UVC 1.00 device (046d:0825) [ 39.820669][ T36] audit: type=1400 audit(1789542019.569:270): avc: denied { write } for pid=1000 comm="syz.3.314" name="001" dev="devtmpfs" ino=117 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 39.899753][ T36] audit: type=1400 audit(1789542019.649:271): avc: denied { search } for pid=1003 comm="syz.3.315" name="/" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=dir permissive=1 [ 40.121924][ T45] uvcvideo 3-1:1.1: Failed to set UVC probe control : -71 (exp. 26). [ 40.131387][ T45] uvcvideo 3-1:1.1: Failed to query (129) UVC probe control : -71 (exp. 26). [ 40.153907][ T45] uvcvideo 3-1:1.1: Failed to initialize the device (-71). [ 40.171163][ T45] usb 3-1: USB disconnect, device number 6 [ 40.672650][ T1016] netlink: 1272 bytes leftover after parsing attributes in process `syz.1.320'. [ 41.298974][ T1050] netlink: 'syz.2.331': attribute type 4 has an invalid length. [ 41.319368][ T1050] netlink: 'syz.2.331': attribute type 17 has an invalid length. [ 41.628280][ T36] audit: type=1326 audit(1789542021.379:272): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1075 comm="syz.2.334" exe="/root/ci2-android-6-12-rust/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f6844d9e159 code=0x0 [ 41.781218][ T36] audit: type=1400 audit(1789542021.529:273): avc: denied { audit_read } for pid=1090 comm="syz.3.338" capability=37 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 41.866564][ T1098] sd 0:0:1:0: PR command failed: 1026 [ 41.887759][ T1098] sd 0:0:1:0: Sense Key : 0x5 [current] [ 41.893474][ T1098] sd 0:0:1:0: ASC=0x20 ASCQ=0x0 [ 42.151277][ T1106] kvm: apic: phys broadcast and lowest prio [ 42.565862][ T36] audit: type=1400 audit(1789542022.309:274): avc: denied { mounton } for pid=1121 comm="syz.2.352" path="/file0" dev="ramfs" ino=9637 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:ramfs_t tclass=dir permissive=1 [ 42.867878][ T1138] FAULT_INJECTION: forcing a failure. [ 42.867878][ T1138] name failslab, interval 1, probability 0, space 0, times 0 [ 42.897749][ T9] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 42.905347][ T1138] CPU: 0 UID: 0 PID: 1138 Comm: syz.2.359 Not tainted syzkaller #0 59ddfa31286c0993fe0730f15c0a18803f31b842 [ 42.905376][ T1138] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 42.905388][ T1138] Call Trace: [ 42.905395][ T1138] [ 42.905402][ T1138] __dump_stack+0x21/0x30 [ 42.905433][ T1138] dump_stack_lvl+0x140/0x1c0 [ 42.905458][ T1138] ? __cfi_dump_stack_lvl+0x10/0x10 [ 42.905482][ T1138] ? kasan_save_alloc_info+0x3a/0x50 [ 42.905500][ T1138] ? __kasan_slab_alloc+0x73/0x90 [ 42.905522][ T1138] dump_stack+0x19/0x20 [ 42.905545][ T1138] should_fail_ex+0x3c2/0x510 [ 42.905568][ T1138] should_failslab+0xac/0x100 [ 42.905590][ T1138] __kmalloc_cache_noprof+0x41/0x470 [ 42.905610][ T1138] ? alloc_pipe_info+0xfb/0x5f0 [ 42.905628][ T1138] alloc_pipe_info+0xfb/0x5f0 [ 42.905646][ T1138] create_pipe_files+0x8f/0x6c0 [ 42.905664][ T1138] __do_pipe_flags+0x50/0x2f0 [ 42.905683][ T1138] do_pipe2+0xab/0x190 [ 42.905701][ T1138] ? xfd_validate_state+0x68/0x140 [ 42.905725][ T1138] ? pipe_fcntl+0x520/0x520 [ 42.905746][ T1138] __x64_sys_pipe+0x3e/0x50 [ 42.905764][ T1138] x64_sys_call+0xd3/0x2ee0 [ 42.905780][ T1138] do_syscall_64+0x57/0xf0 [ 42.905805][ T1138] ? clear_bhb_loop+0x50/0xa0 [ 42.905829][ T1138] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 42.905851][ T1138] RIP: 0033:0x7f6844d9e159 [ 42.905867][ T1138] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 42.905881][ T1138] RSP: 002b:00007f6845d29028 EFLAGS: 00000246 ORIG_RAX: 0000000000000016 [ 42.905901][ T1138] RAX: ffffffffffffffda RBX: 00007f6845025fa0 RCX: 00007f6844d9e159 [ 42.905916][ T1138] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 42.905925][ T1138] RBP: 00007f6844e3506b R08: 0000000000000000 R09: 0000000000000000 [ 42.905936][ T1138] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 42.905947][ T1138] R13: 00007f6845026038 R14: 00007f6845025fa0 R15: 00007ffc8a81be58 [ 42.905963][ T1138] [ 43.228197][ T1147] FAULT_INJECTION: forcing a failure. [ 43.228197][ T1147] name failslab, interval 1, probability 0, space 0, times 0 [ 43.257726][ T9] usb 2-1: Using ep0 maxpacket: 32 [ 43.258686][ T311] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 43.264178][ T9] usb 2-1: config 0 has an invalid interface number: 184 but max is 0 [ 43.278401][ T9] usb 2-1: config 0 has no interface number 0 [ 43.284480][ T9] usb 2-1: config 0 interface 184 has no altsetting 0 [ 43.287753][ T1147] CPU: 1 UID: 0 PID: 1147 Comm: syz.3.362 Not tainted syzkaller #0 59ddfa31286c0993fe0730f15c0a18803f31b842 [ 43.287778][ T1147] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 43.287789][ T1147] Call Trace: [ 43.287796][ T1147] [ 43.287802][ T1147] __dump_stack+0x21/0x30 [ 43.287836][ T1147] dump_stack_lvl+0x140/0x1c0 [ 43.287860][ T1147] ? __cfi_dump_stack_lvl+0x10/0x10 [ 43.287883][ T1147] ? vms_clear_ptes+0x4eb/0x610 [ 43.287904][ T1147] dump_stack+0x19/0x20 [ 43.287924][ T1147] should_fail_ex+0x3c2/0x510 [ 43.287945][ T1147] should_failslab+0xac/0x100 [ 43.287966][ T1147] kmem_cache_alloc_noprof+0x42/0x410 [ 43.287985][ T1147] ? vma_merge_new_range+0x71e/0x900 [ 43.288002][ T1147] ? vm_area_alloc+0x3f/0x190 [ 43.288022][ T1147] vm_area_alloc+0x3f/0x190 [ 43.288040][ T1147] mmap_region+0xce2/0x1d10 [ 43.288059][ T1147] ? __cfi_mmap_region+0x10/0x10 [ 43.288077][ T1147] ? __cfi_arch_get_unmapped_area_topdown+0x10/0x10 [ 43.288099][ T1147] ? __kasan_check_read+0x15/0x20 [ 43.288118][ T1147] ? __get_unmapped_area+0x406/0x470 [ 43.288134][ T1147] ? futex_wait+0x2b8/0x7c0 [ 43.288151][ T1147] do_mmap+0xb61/0x13b0 [ 43.288169][ T1147] ? __cfi_do_mmap+0x10/0x10 [ 43.288184][ T1147] ? down_write_killable+0xee/0x2d0 [ 43.288206][ T1147] ? __cfi_down_write_killable+0x10/0x10 [ 43.288227][ T1147] ? do_futex+0x32a/0x510 [ 43.288249][ T1147] vm_mmap_pgoff+0x367/0x4b0 [ 43.288274][ T1147] ? __cfi_vm_mmap_pgoff+0x10/0x10 [ 43.288291][ T1147] ? xfd_validate_state+0x68/0x140 [ 43.288317][ T1147] ksys_mmap_pgoff+0xfa/0x1e0 [ 43.288335][ T1147] ? __kasan_check_write+0x18/0x20 [ 43.288353][ T1147] __x64_sys_mmap+0x121/0x140 [ 43.288370][ T1147] x64_sys_call+0x13bf/0x2ee0 [ 43.288386][ T1147] do_syscall_64+0x57/0xf0 [ 43.288403][ T1147] ? clear_bhb_loop+0x50/0xa0 [ 43.288423][ T1147] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 43.288442][ T1147] RIP: 0033:0x7fd79939e159 [ 43.288457][ T1147] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 43.288470][ T1147] RSP: 002b:00007fd79a288028 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 43.288489][ T1147] RAX: ffffffffffffffda RBX: 00007fd799625fa0 RCX: 00007fd79939e159 [ 43.288503][ T1147] RDX: 0000000000000003 RSI: 0000000000b36000 RDI: 0000200000000000 [ 43.288514][ T1147] RBP: 00007fd79943506b R08: ffffffffffffffff R09: 0000000000000000 [ 43.288526][ T1147] R10: 0000000000008031 R11: 0000000000000246 R12: 0000000000000000 [ 43.288537][ T1147] R13: 00007fd799626038 R14: 00007fd799625fa0 R15: 00007ffcc6c15118 [ 43.288552][ T1147] [ 43.300942][ T311] hid-generic 0000:0000:0000.0005: hidraw0: HID v0.00 Device [syz1] on syz0 [ 43.409160][ T9] usb 2-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 43.569351][ T9] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 43.577340][ T9] usb 2-1: Product: syz [ 43.583096][ T9] usb 2-1: Manufacturer: syz [ 43.587743][ T9] usb 2-1: SerialNumber: syz [ 43.593751][ T9] usb 2-1: config 0 descriptor?? [ 43.607392][ T9] smsc75xx v1.0.0 [ 43.611165][ T36] audit: type=1400 audit(1789542023.359:275): avc: denied { rename } for pid=1149 comm="syz.3.363" name="file0" dev="tmpfs" ino=594 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 43.814071][ T45] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 43.831401][ T45] hid-generic 0000:0000:0000.0006: hidraw0: HID v0.00 Device [syz1] on syz0 [ 44.209057][ T9] smsc75xx 2-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000040: -32 [ 44.237746][ T9] smsc75xx 2-1:0.184 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 44.661142][ T9] smsc75xx 2-1:0.184 (unnamed net_device) (uninitialized): Failed to write reg index 0x00000010: -71 [ 44.707734][ T9] smsc75xx 2-1:0.184 (unnamed net_device) (uninitialized): Failed to write HW_CFG: -71 [ 44.717400][ T9] smsc75xx 2-1:0.184 (unnamed net_device) (uninitialized): smsc75xx_reset error -71 [ 44.756045][ T9] smsc75xx 2-1:0.184: probe with driver smsc75xx failed with error -71 [ 44.799024][ T9] usb 2-1: USB disconnect, device number 7 [ 44.930355][ T36] audit: type=1400 audit(1789542024.679:276): avc: denied { mount } for pid=1175 comm="syz.2.374" name="/" dev="configfs" ino=2635 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=filesystem permissive=1 [ 44.968649][ T1176] BUG: scheduling while atomic: syz.2.374/1176/0x00000002 [ 44.975786][ T1176] Modules linked in: [ 44.979718][ T1176] CPU: 0 UID: 0 PID: 1176 Comm: syz.2.374 Not tainted syzkaller #0 59ddfa31286c0993fe0730f15c0a18803f31b842 [ 44.979744][ T1176] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 44.979756][ T1176] Call Trace: [ 44.979762][ T1176] [ 44.979769][ T1176] __dump_stack+0x21/0x30 [ 44.979800][ T1176] dump_stack_lvl+0x140/0x1c0 [ 44.979825][ T1176] ? __cfi_dump_stack_lvl+0x10/0x10 [ 44.979851][ T1176] dump_stack+0x19/0x20 [ 44.979873][ T1176] __schedule_bug+0x12b/0x200 [ 44.979894][ T1176] ? find_proxy_task+0x2460/0x2460 [ 44.979913][ T1176] ? kernel_text_address+0xa9/0xe0 [ 44.979935][ T1176] ? __kernel_text_address+0x11/0x40 [ 44.979959][ T1176] __schedule+0xb85/0x20b0 [ 44.979977][ T1176] ? __cfi__raw_spin_lock_irqsave+0x10/0x10 [ 44.979995][ T1176] ? stack_trace_save+0xaa/0x100 [ 44.980015][ T1176] ? _raw_spin_unlock_irqrestore+0x4a/0x70 [ 44.980034][ T1176] ? __sched_text_start+0x10/0x10 [ 44.980052][ T1176] ? __kasan_check_read+0x15/0x20 [ 44.980070][ T1176] ? rwsem_spin_on_owner+0xa4/0x3b0 [ 44.980106][ T1176] ? __kasan_check_write+0x18/0x20 [ 44.980125][ T1176] ? _raw_spin_lock_irq+0x93/0x120 [ 44.980142][ T1176] ? __cfi__raw_spin_lock_irq+0x10/0x10 [ 44.980160][ T1176] schedule+0xc5/0x240 [ 44.980178][ T1176] schedule_preempt_disabled+0x14/0x30 [ 44.980198][ T1176] rwsem_down_write_slowpath+0x5c9/0x1b60 [ 44.980224][ T1176] ? rwsem_down_read_slowpath+0x14c0/0x14c0 [ 44.980247][ T1176] ? try_to_wake_up+0x111a/0x1fd0 [ 44.980268][ T1176] ? __kasan_check_write+0x18/0x20 [ 44.980286][ T1176] ? wake_q_add_safe+0x29/0x100 [ 44.980302][ T1176] ? __cfi_try_to_wake_up+0x10/0x10 [ 44.980322][ T1176] ? rwsem_mark_wake+0x507/0x770 [ 44.980348][ T1176] ? rwsem_read_trylock+0x275/0x5a0 [ 44.980373][ T1176] ? wake_up_q+0x10a/0x1c0 [ 44.980389][ T1176] ? downgrade_write+0x470/0x470 [ 44.980414][ T1176] down_write+0x163/0x2b0 [ 44.980435][ T1176] ? __cfi_down_write+0x10/0x10 [ 44.980456][ T1176] ? down_read+0x7f/0xe0 [ 44.980476][ T1176] ? __cfi_down_read+0x10/0x10 [ 44.980498][ T1176] kernfs_remove_by_name_ns+0x8c/0x180 [ 44.980523][ T1176] sysfs_unmerge_group+0xd7/0x130 [ 44.980544][ T1176] dpm_sysfs_remove+0x7b/0xd0 [ 44.980568][ T1176] device_del+0x241/0xcf0 [ 44.980584][ T1176] ? __cfi_class_find_device+0x10/0x10 [ 44.980602][ T1176] ? __cfi_device_del+0x10/0x10 [ 44.980617][ T1176] ? __kasan_check_write+0x18/0x20 [ 44.980635][ T1176] ? kobject_put+0x1cc/0x2a0 [ 44.980660][ T1176] device_destroy+0xb0/0x100 [ 44.980678][ T1176] ? __cfi_device_destroy+0x10/0x10 [ 44.980695][ T1176] ? __kasan_check_write+0x18/0x20 [ 44.980714][ T1176] android_device_destroy+0x118/0x180 [ 44.980740][ T1176] gadgets_drop+0x1d/0x30 [ 44.980758][ T1176] ? __cfi_gadgets_drop+0x10/0x10 [ 44.980776][ T1176] configfs_rmdir+0x8b7/0x9b0 [ 44.980801][ T1176] vfs_rmdir+0x3de/0x560 [ 44.980825][ T1176] do_rmdir+0x29a/0x590 [ 44.980849][ T1176] ? __cfi_do_rmdir+0x10/0x10 [ 44.980873][ T1176] ? __kasan_check_write+0x18/0x20 [ 44.980890][ T1176] __x64_sys_rmdir+0x4b/0x60 [ 44.980914][ T1176] x64_sys_call+0xaf7/0x2ee0 [ 44.980931][ T1176] do_syscall_64+0x57/0xf0 [ 44.980947][ T1176] ? clear_bhb_loop+0x50/0xa0 [ 44.980968][ T1176] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 44.980989][ T1176] RIP: 0033:0x7f6844d9e159 [ 44.981004][ T1176] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 44.981019][ T1176] RSP: 002b:00007f6845d29028 EFLAGS: 00000246 ORIG_RAX: 0000000000000054 [ 44.981039][ T1176] RAX: ffffffffffffffda RBX: 00007f6845025fa0 RCX: 00007f6844d9e159 [ 44.981053][ T1176] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 00002000000002c0 [ 44.981065][ T1176] RBP: 00007f6844e3506b R08: 0000000000000000 R09: 0000000000000000 [ 44.981076][ T1176] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 44.981096][ T1176] R13: 00007f6845026038 R14: 00007f6845025fa0 R15: 00007ffc8a81be58 [ 44.981113][ T1176] [ 45.048478][ T1176] ------------[ cut here ]------------ [ 45.053843][ T36] audit: type=1400 audit(1789542024.709:277): avc: denied { search } for pid=1175 comm="syz.2.374" name="/" dev="configfs" ino=2635 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 45.067724][ T1176] WARNING: CPU: 1 PID: 1176 at lib/stackdepot.c:635 stack_depot_save_flags+0x266/0x800 [ 45.069052][ T36] audit: type=1400 audit(1789542024.709:278): avc: denied { write } for pid=1175 comm="syz.2.374" name="usb_gadget" dev="configfs" ino=2636 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 45.074811][ T1176] Modules linked in: [ 45.079829][ T36] audit: type=1400 audit(1789542024.709:279): avc: denied { add_name } for pid=1175 comm="syz.2.374" name="g1" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 45.079854][ T36] audit: type=1400 audit(1789542024.709:280): avc: denied { create } for pid=1175 comm="syz.2.374" name="g1" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:configfs_t tclass=dir permissive=1 [ 45.084854][ T1176] [ 45.084866][ T1176] CPU: 1 UID: 0 PID: 1176 Comm: syz.2.374 Tainted: G W syzkaller #0 59ddfa31286c0993fe0730f15c0a18803f31b842 [ 45.090050][ T36] audit: type=1400 audit(1789542024.719:281): avc: denied { read } for pid=1175 comm="syz.2.374" name="g1" dev="configfs" ino=9752 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 45.095139][ T1176] Tainted: [W]=WARN [ 45.100236][ T36] audit: type=1400 audit(1789542024.719:282): avc: denied { open } for pid=1175 comm="syz.2.374" path="/86/config/usb_gadget/g1" dev="configfs" ino=9752 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 45.105747][ T1176] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 45.109869][ T36] audit: type=1400 audit(1789542024.719:283): avc: denied { remove_name } for pid=1175 comm="syz.2.374" name="g1" dev="configfs" ino=9752 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 45.115239][ T1176] RIP: 0010:stack_depot_save_flags+0x266/0x800 [ 45.120953][ T36] audit: type=1400 audit(1789542024.719:284): avc: denied { rmdir } for pid=1175 comm="syz.2.374" name="g1" dev="configfs" ino=9752 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 45.126811][ T1176] Code: 48 83 3d b4 ee db 05 00 0f 84 00 04 00 00 48 c7 45 c0 00 00 00 00 48 89 d3 65 8b 05 cc 2f 1e 7d 4d 89 d7 a9 00 00 f0 00 74 2d <0f> 0b 48 c7 45 c8 00 00 00 00 9c 8f 45 c8 4c 8b 6d c8 fa 48 c7 c7 [ 45.623980][ T1176] RSP: 0018:ffffc9000feef980 EFLAGS: 00010206 [ 45.630095][ T1176] RAX: 000000007fffffff RBX: ffff8881f5c1f2c0 RCX: 0000000000a1f2c0 [ 45.638081][ T1176] RDX: ffff8881f5c1f2c0 RSI: 0000000000000001 RDI: 00000000a32e60ed [ 45.646058][ T1176] RBP: ffffc9000feef9e0 R08: 0000000026deaa2a R09: 0000000071c2a2ae [ 45.654065][ T1176] R10: 000000000000000d R11: ffffffff8175a740 R12: 00000000af5a1f2c [ 45.662054][ T1176] R13: 0000000000000000 R14: ffffc9000feef9f0 R15: 000000000000000d [ 45.670061][ T1176] FS: 00007f6845d296c0(0000) GS:ffff8881f6f00000(0000) knlGS:0000000000000000 [ 45.679007][ T1176] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 45.685605][ T1176] CR2: 00007fd79a246990 CR3: 00000001317c4000 CR4: 00000000003526b0 [ 45.693621][ T1176] Call Trace: [ 45.696907][ T1176] [ 45.699866][ T1176] ? do_syscall_64+0x57/0xf0 [ 45.704463][ T1176] ? entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 45.710571][ T1176] kasan_save_track+0x4f/0x80 [ 45.715255][ T1176] ? kasan_save_track+0x3e/0x80 [ 45.720141][ T1176] ? kasan_save_free_info+0x44/0x50 [ 45.725343][ T1176] ? __kasan_slab_free+0x5f/0x80 [ 45.730456][ T1176] ? kfree+0x158/0x440 [ 45.734541][ T1176] ? gadget_info_attr_release+0xcb/0x130 [ 45.740199][ T1176] ? config_item_put+0x178/0x240 [ 45.745142][ T1176] ? configfs_rmdir+0x8e8/0x9b0 [ 45.750033][ T1176] ? vfs_rmdir+0x3de/0x560 [ 45.754458][ T1176] ? do_rmdir+0x29a/0x590 [ 45.758824][ T1176] ? __x64_sys_rmdir+0x4b/0x60 [ 45.763595][ T1176] ? x64_sys_call+0xaf7/0x2ee0 [ 45.768385][ T1176] ? do_syscall_64+0x57/0xf0 [ 45.772979][ T1176] ? entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 45.779078][ T1176] kasan_save_free_info+0x44/0x50 [ 45.784109][ T1176] __kasan_slab_free+0x5f/0x80 [ 45.788903][ T1176] kfree+0x158/0x440 [ 45.792800][ T1176] ? gadget_info_attr_release+0xcb/0x130 [ 45.798461][ T1176] ? __cfi_gadget_info_attr_release+0x10/0x10 [ 45.804540][ T1176] gadget_info_attr_release+0xcb/0x130 [ 45.810072][ T1176] config_item_put+0x178/0x240 [ 45.814840][ T1176] ? __cfi_gadgets_drop+0x10/0x10 [ 45.819888][ T1176] configfs_rmdir+0x8e8/0x9b0 [ 45.824583][ T1176] vfs_rmdir+0x3de/0x560 [ 45.828861][ T1176] do_rmdir+0x29a/0x590 [ 45.833027][ T1176] ? __cfi_do_rmdir+0x10/0x10 [ 45.837737][ T1176] ? __kasan_check_write+0x18/0x20 [ 45.842855][ T1176] __x64_sys_rmdir+0x4b/0x60 [ 45.847456][ T1176] x64_sys_call+0xaf7/0x2ee0 [ 45.852075][ T1176] do_syscall_64+0x57/0xf0 [ 45.856495][ T1176] ? clear_bhb_loop+0x50/0xa0 [ 45.861210][ T1176] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 45.867108][ T1176] RIP: 0033:0x7f6844d9e159 [ 45.871553][ T1176] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 45.891176][ T1176] RSP: 002b:00007f6845d29028 EFLAGS: 00000246 ORIG_RAX: 0000000000000054 [ 45.899623][ T1176] RAX: ffffffffffffffda RBX: 00007f6845025fa0 RCX: 00007f6844d9e159 [ 45.907594][ T1176] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 00002000000002c0 [ 45.915593][ T1176] RBP: 00007f6844e3506b R08: 0000000000000000 R09: 0000000000000000 [ 45.923585][ T1176] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 45.931592][ T1176] R13: 00007f6845026038 R14: 00007f6845025fa0 R15: 00007ffc8a81be58 [ 45.939588][ T1176] [ 45.942607][ T1176] ---[ end trace 0000000000000000 ]--- [ 45.954593][ T1176] BUG: scheduling while atomic: syz.2.374/1176/0x00000000 [ 45.961729][ T1176] Modules linked in: [ 45.965630][ T1176] CPU: 1 UID: 0 PID: 1176 Comm: syz.2.374 Tainted: G W syzkaller #0 59ddfa31286c0993fe0730f15c0a18803f31b842 [ 45.965659][ T1176] Tainted: [W]=WARN [ 45.965666][ T1176] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 45.965678][ T1176] Call Trace: [ 45.965684][ T1176] [ 45.965691][ T1176] __dump_stack+0x21/0x30 [ 45.965721][ T1176] dump_stack_lvl+0x140/0x1c0 [ 45.965745][ T1176] ? __cfi_dump_stack_lvl+0x10/0x10 [ 45.965768][ T1176] ? place_entity+0x60d/0x7a0 [ 45.965789][ T1176] dump_stack+0x19/0x20 [ 45.965812][ T1176] __schedule_bug+0x12b/0x200 [ 45.965831][ T1176] ? find_proxy_task+0x2460/0x2460 [ 45.965853][ T1176] __schedule+0xb85/0x20b0 [ 45.965872][ T1176] ? __kasan_check_read+0x15/0x20 [ 45.965892][ T1176] ? plist_check_list+0x2a1/0x2c0 [ 45.965910][ T1176] ? __sched_text_start+0x10/0x10 [ 45.965928][ T1176] ? plist_add+0x4d4/0x570 [ 45.965954][ T1176] ? __futex_queue+0x19f/0x350 [ 45.965978][ T1176] ? __cfi___futex_queue+0x10/0x10 [ 45.965999][ T1176] schedule+0xc5/0x240 [ 45.966018][ T1176] futex_wait_queue+0xfc/0x240 [ 45.966035][ T1176] __futex_wait+0x15b/0x3d0 [ 45.966053][ T1176] ? __cfi___futex_wait+0x10/0x10 [ 45.966071][ T1176] ? __cfi_futex_wake_mark+0x10/0x10 [ 45.966089][ T1176] ? __kasan_check_read+0x15/0x20 [ 45.966107][ T1176] ? futex_wake+0x627/0x950 [ 45.966124][ T1176] futex_wait+0x128/0x7c0 [ 45.966141][ T1176] ? __cfi_futex_wait+0x10/0x10 [ 45.966160][ T1176] do_futex+0x32a/0x510 [ 45.966183][ T1176] ? __cfi_do_futex+0x10/0x10 [ 45.966205][ T1176] ? __kasan_slab_free+0x6a/0x80 [ 45.966227][ T1176] ? kmem_cache_free+0x1bd/0x4f0 [ 45.966247][ T1176] __se_sys_futex+0x13c/0x320 [ 45.966270][ T1176] ? putname+0x113/0x150 [ 45.966291][ T1176] ? __x64_sys_futex+0x110/0x110 [ 45.966316][ T1176] __x64_sys_futex+0xe9/0x110 [ 45.966340][ T1176] x64_sys_call+0x227f/0x2ee0 [ 45.966357][ T1176] do_syscall_64+0x57/0xf0 [ 45.966373][ T1176] ? clear_bhb_loop+0x50/0xa0 [ 45.966393][ T1176] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 45.966413][ T1176] RIP: 0033:0x7f6844d9e159 [ 45.966429][ T1176] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 45.966444][ T1176] RSP: 002b:00007f6845d290e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 45.966463][ T1176] RAX: ffffffffffffffda RBX: 00007f6845025fa8 RCX: 00007f6844d9e159 [ 45.966478][ T1176] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007f6845025fa8 [ 45.966498][ T1176] RBP: 00007f6845025fa0 R08: 0000000000000000 R09: 0000000000000000 [ 45.966510][ T1176] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 45.966521][ T1176] R13: 00007f6845026038 R14: 00007ffc8a81bd70 R15: 00007ffc8a81be58 [ 45.966537][ T1176] [ 46.251203][ T36] audit: type=1400 audit(1789542025.999:285): avc: denied { unmount } for pid=294 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=filesystem permissive=1