last executing test programs: 4.478056509s ago: executing program 0 (id=416): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x1c1) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x80, &(0x7f00000002c0)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}}) read$FUSE(r0, &(0x7f00000021c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r0, &(0x7f0000000080)={0x50, 0x0, r1, {0x7, 0x29, 0x9, 0xffffffff90adedc4, 0x0, 0x3, 0x0, 0x4, 0x0, 0x0, 0x10}}, 0x50) chmod(&(0x7f0000000000)='./file0\x00', 0x260) 3.61324213s ago: executing program 0 (id=428): r0 = syz_ublk_setup_io_uring(0x1d, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x2a8}, &(0x7f0000000100)=0x0, &(0x7f0000000280)=0x0, &(0x7f0000000140)=0x0) syz_ublk_add_dev(r0, r1, r2, r3, &(0x7f00000004c0)={0x2e, 0x64, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000440)=@new_dev={0x4, 0x3c9, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x40}}}, &(0x7f0000000300)=0x0) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) r7 = dup(r6) syz_ublk_setup_queues(r7, r5, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x3, 0x255}, &(0x7f0000000800)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x7ffffe, 0x2, 0x1000000, 0x10000002, 0x0, r0}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xfffffffc, 0x0, 0x0, 0x146, 0x0, r7}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x1f70, 0x40, 0x1, 0x35c, 0x0, r0}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x0, 0x1000, 0x3, 0xffffffff}}], 0x1, &(0x7f0000000340)={0x2e, 0x44, 0x0, r7, 0xc0107520, 0x0, 0x0, 0x0, 0x0, {}, 0x0, r4, '\x00', {0x1, 0x5, 0x0, 0x0}}, 0x0) setsockopt$inet_group_source_req(r7, 0x0, 0x2c, &(0x7f0000000340)={0x1, {{0x2, 0x4e22, @local}}, {{0x2, 0x4e32, @rand_addr=0x74010102}}}, 0x1b) 3.300885815s ago: executing program 0 (id=429): mkdirat(0xffffffffffffff9c, &(0x7f0000004000)='./mnt\x00', 0x1ff) mount(0x0, &(0x7f0000004080)='./mnt\x00', &(0x7f00000040c0)='tracefs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000004200)='./mnt/trace_marker\x00', 0x1, 0x1a) write(r0, &(0x7f0000000000)="0d9ccf1cb8d871123f1c06000000000000009a42ffffff7f0000000057a02c6bb4a8afdd55b057d1b81536fbdd13d4c4fc4e6e3223649035442a47fccedbea15ad2fcd7e0cb1215da7e6012a7c9db853055d64", 0x53) r1 = openat(0xffffffffffffff9c, &(0x7f0000009180)='./mnt/trace_pipe\x00', 0x0, 0x0) read(r1, &(0x7f00000091c0)=""/16384, 0x4000) 3.244304657s ago: executing program 0 (id=431): mknodat$loop(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x1000, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x20842, 0x0) fcntl$setstatus(r0, 0x4, 0x42000) r1 = openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x20842, 0x4) fcntl$setstatus(r1, 0x4, 0x42000) read$FUSE(r0, &(0x7f00000000c0)={0x2020}, 0x2020) 3.121892323s ago: executing program 1 (id=436): mkdirat(0xffffffffffffff9c, &(0x7f0000000180)='./dev\x00', 0x1ff) sendto(0xffffffffffffffff, &(0x7f0000000080)="120000001200e76f00341658a5", 0xd, 0x20000010, 0x0, 0x0) mount(0x0, &(0x7f00000001c0)='./dev\x00', &(0x7f0000000200)='devtmpfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./dev/sda\x00', 0x2, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x9) ioctl$IOC_PR_RESERVE(r0, 0x401070c9, &(0x7f0000000080)={0x3c1842d, 0x605fd495, 0x1}) 3.086469505s ago: executing program 1 (id=437): r0 = open(&(0x7f0000000440)='./file0\x00', 0x1, 0x40) sendmsg$TCPDIAG_GETSOCK(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="f0cf"], 0x4c}}, 0x4000015) r1 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r1) ptrace$setregs(0xd, r1, 0x20000000002, &(0x7f0000000040)) ptrace$cont(0x21, r1, 0x80000001, 0x4) 2.996432469s ago: executing program 1 (id=439): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000001000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x44, 0x0, 0x0) ioctl$KVM_SET_CPUID2(r2, 0x4008ae90, &(0x7f0000000200)={0x2, 0x0, [{0x1, 0x0, 0x0, 0x1, 0xffffffff, 0x20, 0xfffffffc}, {0x40000001, 0x0, 0x0, 0x31237648, 0x97d}]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 2.77003999s ago: executing program 1 (id=440): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2002, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x7c, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SET_SREGS(r2, 0x4138ae84, &(0x7f00000001c0)={{0x8000000, 0x3000, 0x8, 0x9, 0xfb, 0x8, 0x3e, 0x17, 0x0, 0xc8, 0x19}, {0xb000, 0x50000, 0xa, 0x0, 0x22, 0x5, 0x79, 0x6, 0x5, 0xb4, 0x3}, {0x0, 0xa000, 0x0, 0x5, 0x3, 0x3, 0x2, 0x19, 0x3, 0x5, 0x5, 0x81}, {0x3000, 0x1, 0x44e41e77284b2876, 0x1, 0x0, 0x42, 0xf, 0x0, 0x6, 0x7, 0xc}, {0x11f6593269eab9dc, 0x126000, 0xb, 0x3, 0x15, 0x19, 0xab, 0x7f, 0x7, 0x83, 0x8, 0x83}, {0x50000, 0x0, 0xc, 0x4, 0xad, 0x8, 0x1, 0xf7, 0x8, 0x5, 0xff}, {0x3000, 0x2000, 0xc, 0x7, 0x8, 0x5, 0x9, 0xc, 0x5, 0x81, 0xff, 0x6d}, {0x100000, 0x1, 0xe, 0x5, 0xb, 0x7, 0x4, 0x34, 0x2, 0xb, 0x3, 0x9}, {0xa000, 0x30}, {0x100000, 0x7}, 0x10, 0x0, 0xeeef0000, 0x1200d, 0x3, 0x8000, 0x54000, [0x6800000000000000, 0x4, 0x61, 0xf]}) 2.503248652s ago: executing program 1 (id=446): r0 = openat$pidfd(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) fchdir(r0) syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/cgroup\x00') mount(&(0x7f0000000000), &(0x7f00000000c0)='./cgroup\x00', 0x0, 0x1001, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000040)='mountinfo\x00') lseek(r1, 0x10001, 0x0) 2.429290146s ago: executing program 1 (id=447): r0 = syz_usb_connect(0x3, 0x32, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000200000040e60405000001010203010902200001010080320904000002080650000705810200020007050202"], 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000040)={0x84, &(0x7f0000000240)={0x40, 0x7, 0x2, "a38f"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, &(0x7f0000000900)={0x84, &(0x7f0000000500)={0x20, 0x6, 0x2, '\"4'}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$sierra_net(r0, 0x0, 0x0) sendmsg$ETHTOOL_MSG_STRSET_GET(0xffffffffffffffff, 0x0, 0x0) 2.384080467s ago: executing program 0 (id=448): r0 = openat$udambuf(0xffffffffffffff9c, &(0x7f0000000040), 0x2) r1 = memfd_create(&(0x7f0000000140)='y\x105\xfb\xf7u\x83%:r\xc2\xb9x\xa4q\xc1\xea_\x8cZ7\xcda\x9b\x11X\x0e\xa1\xcf\x1a\x98S7\xc9\x00'/47, 0x2) ftruncate(r1, 0xffff) fcntl$addseals(r1, 0x409, 0x7) r2 = ioctl$UDMABUF_CREATE(r0, 0x40187542, &(0x7f0000000000)={r1, 0x0, 0x4000, 0x8000}) ioctl$DMA_BUF_IOCTL_SYNC(r2, 0x40086200, &(0x7f0000000380)=0x2) 2.33214848s ago: executing program 0 (id=449): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12013f00000000407f04ffff000000000001090224000100000000090400001503000000092140000001220f00090581d7"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000180)={0x24, 0x0, 0x0, &(0x7f00000001c0)={0x0, 0x22, 0xf, {[@main=@item_012={0x0, 0x0, 0xb}, @main=@item_4={0x3, 0x0, 0x8, "62966124"}, @global=@item_012={0x1, 0x1, 0x8, "f5"}, @global=@item_012={0x1, 0x1, 0x7, "86"}, @main=@item_4={0x3, 0x0, 0xb, "4070f43f"}]}}, 0x0}, 0x0) syz_open_dev$hiddev(&(0x7f0000000540), 0x0, 0x0) openat$uhid(0xffffffffffffff9c, 0x0, 0x2, 0x0) pselect6(0x40, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x4000800, 0x0, 0x100000}, 0x0, &(0x7f0000000240)={0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6a9}, &(0x7f0000000280)={0x0, 0x3938700}, 0x0) 1.924675169s ago: executing program 3 (id=455): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000480), 0x22401, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, &(0x7f0000000180)="f77900660f38804e0ef4460f22c7d466ba420000b8e20066ef0f29902cbb0000c4e2b1ba8c88d90000006666f6440f386b410f784228530f0707010000000f01d9640f01f8", 0x45}], 0x1, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(r1, r1, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, 0x0}], 0x1, 0x21, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 1.772123847s ago: executing program 3 (id=456): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000030c0)=ANY=[], 0xe8}, 0x1, 0x0, 0x0, 0x80}, 0x40) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x1fd) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f0000000100)='proc\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) write(r0, &(0x7f0000000000)='3', 0x4e) unshare(0x42040400) 1.28306967s ago: executing program 3 (id=457): setns(0xc9, 0x0) r0 = socket$inet6(0xa, 0x800000000000002, 0x0) setsockopt$sock_linger(r0, 0x1, 0x3c, &(0x7f0000000180)={0x200000000000001}, 0x8) sendto$inet6(r0, 0x0, 0x0, 0x4c881, &(0x7f0000000540)={0xa, 0x4e24, 0x10, @mcast2}, 0x1c) sendmmsg$inet6(r0, &(0x7f00000066c0)=[{{0x0, 0x0, &(0x7f0000000380)=[{&(0x7f0000000000)="f1", 0x1}], 0x1}}], 0x1, 0x2401c4c5) sendmmsg$inet6(r0, &(0x7f0000003740)=[{{0x0, 0x0, 0x0}}], 0x1, 0x84) 1.219298172s ago: executing program 3 (id=458): r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0xa2f01, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00', 0x2}) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup(r1) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', @multicast}) write$tun(r0, &(0x7f00000003c0)={@val={0x0, 0xf5}, @void, @eth={@multicast, @broadcast, @val={@val={0x88a8, 0x0, 0x0, 0x2}}, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x2, 0x7, 0x5c, 0x68, 0x4000, 0xa, 0x1, 0x0, @empty=0x1c, @local}, @parameter_prob={0xc, 0x0, 0x0, 0x8e, 0x6, 0x0, {0x10, 0x4, 0x3, 0x3, 0x8, 0x67, 0xed, 0x9, 0x1, 0x1, @initdev={0xac, 0x1e, 0x1, 0x0}, @local, {[@rr={0x7, 0xb, 0x69, [@broadcast, @empty]}, @rr={0x7, 0x7, 0xea, [@private=0xa010102]}, @ssrr={0x89, 0x17, 0xb6, [@rand_addr=0x64010101, @initdev={0xac, 0x1e, 0x0, 0x0}, @remote, @broadcast, @private=0xa010101]}]}}}}}}}}, 0x76) 1.084152788s ago: executing program 3 (id=459): close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x200, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x3ed4, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x9) ioctl$KVM_IOEVENTFD(r1, 0x4040ae79, &(0x7f0000000040)={0x27800000000, 0x0, 0x1, 0xffffffffffffffff, 0x5}) 1.083981928s ago: executing program 3 (id=460): openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x40042, 0x1) r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = syz_usb_connect$uac1(0x0, 0xb1, &(0x7f00000005c0)=ANY=[@ANYBLOB="12010000000000106b1d0101890f0000030109029f0003010000000904000000010100000a24010000000201020d24060000030800000031ce21c798329740594c137d0000000c24020201010608000010000c24020000000300000000000924060006010000000924030000000005000b2406050001", @ANYRES64=r0], 0x0) syz_usb_control_io(r1, 0x0, &(0x7f00000009c0)={0x84, &(0x7f0000000640)=ANY=[@ANYBLOB="2001fe"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$uac1(r1, 0x0, &(0x7f00000008c0)={0x44, 0x0, 0x0, 0x0, 0x0, &(0x7f00000007c0)={0x20, 0x82, 0x1, "f8"}, 0x0, 0x0, 0x0}) syz_usb_control_io$uac1(r1, 0x0, &(0x7f00000004c0)={0x44, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="208401030000c8"], 0x0}) 262.314987ms ago: executing program 2 (id=461): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x7101}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x20702, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000140)={'syzkaller0\x00', 0xca58c30f81b6079f}) ioctl$TUNSETQUEUE(r1, 0x400454d9, &(0x7f0000000780)={'pim6reg0\x00', 0x400}) close(r0) 198.76503ms ago: executing program 2 (id=462): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x80102, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = eventfd2(0x2, 0x80000) ioctl$KVM_IRQFD(r1, 0x4020ae76, &(0x7f0000000040)={r2, 0x8, 0x0, r2}) ioctl$KVM_IRQFD(r1, 0x4020ae76, &(0x7f0000000080)={r2, 0xb, 0x2, r2}) 140.264103ms ago: executing program 2 (id=463): r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(r0, 0x0, 0x2a, &(0x7f0000000000)={0x3, {{0x2, 0x0, @multicast2}}}, 0x88) mount$tmpfs(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x84022, 0x0) r1 = syz_open_procfs$userns(0x0, 0x0) ioctl$AUTOFS_IOC_ASKUMOUNT(r1, 0x80049370, 0x0) getsockopt$inet_buf(r0, 0x0, 0x30, &(0x7f0000000000)=""/4091, &(0x7f0000001000)=0xffb) 117.729234ms ago: executing program 2 (id=464): timer_create(0xfffffffc, 0x0, &(0x7f0000000040)=0x0) timer_create(0xfffffffc, 0x0, &(0x7f0000000040)=0x0) timer_settime(r1, 0x1, &(0x7f000006b000)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) timer_settime(r0, 0x0, &(0x7f000006b000)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) unshare(0x64000600) 170.23µs ago: executing program 2 (id=465): r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002000), 0x2, 0x0) syz_fuse_handle_req(r0, 0x0, 0x0, &(0x7f0000004180)={&(0x7f0000004240)={0x50}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 0s ago: executing program 2 (id=466): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000040)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./sys/bus/pci/devices/0000:00:03.0/remove\x00', 0x1, 0x0) write(r0, &(0x7f0000000140)='1\x00', 0x2) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) ppoll(&(0x7f0000000180)=[{r0, 0x4c0}, {0xffffffffffffffff, 0x1058}, {0xffffffffffffffff, 0x8024}, {r0, 0x123}, {0xffffffffffffffff, 0x208}, {r0, 0xa380}, {r1}, {0xffffffffffffffff, 0x310}, {r0, 0x2080}], 0x9, &(0x7f0000000200)={0x77359400}, 0x0, 0x0) kernel console output (not intermixed with test programs): syzkaller syzkaller login: [ 21.533346][ T36] kauditd_printk_skb: 31 callbacks suppressed [ 21.533368][ T36] audit: type=1400 audit(1789590076.620:59): avc: denied { transition } for pid=275 comm="sshd-session" path="/bin/sh" dev="sda1" ino=90 scontext=system_u:system_r:sshd_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 21.538322][ T36] audit: type=1400 audit(1789590076.620:60): avc: denied { noatsecure } for pid=275 comm="sshd-session" scontext=system_u:system_r:sshd_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 21.543039][ T36] audit: type=1400 audit(1789590076.630:61): avc: denied { write } for pid=275 comm="sh" path="pipe:[1921]" dev="pipefs" ino=1921 scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:sshd_t tclass=fifo_file permissive=1 [ 21.546953][ T36] audit: type=1400 audit(1789590076.630:62): avc: denied { rlimitinh } for pid=275 comm="sh" scontext=system_u:system_r:sshd_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 21.550214][ T36] audit: type=1400 audit(1789590076.630:63): avc: denied { siginh } for pid=275 comm="sh" scontext=system_u:system_r:sshd_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 Warning: Permanently added '10.128.0.237' (ED25519) to the list of known hosts. [ 29.839206][ T36] audit: type=1400 audit(1789590084.930:64): avc: denied { mounton } for pid=287 comm="syz-executor" path="/syzcgroup/unified" dev="sda1" ino=2023 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1 [ 29.842799][ T287] cgroup: Unknown subsys name 'net' [ 29.862015][ T36] audit: type=1400 audit(1789590084.930:65): avc: denied { mount } for pid=287 comm="syz-executor" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 29.889515][ T36] audit: type=1400 audit(1789590084.970:66): avc: denied { unmount } for pid=287 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 29.890059][ T287] cgroup: Unknown subsys name 'devices' [ 29.998840][ T287] cgroup: Unknown subsys name 'hugetlb' [ 30.004484][ T287] cgroup: Unknown subsys name 'rlimit' [ 30.099755][ T36] audit: type=1400 audit(1789590085.190:67): avc: denied { setattr } for pid=287 comm="syz-executor" name="raw-gadget" dev="devtmpfs" ino=190 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 30.122978][ T36] audit: type=1400 audit(1789590085.190:68): avc: denied { mounton } for pid=287 comm="syz-executor" path="/proc/sys/fs/binfmt_misc" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=dir permissive=1 [ 30.148150][ T36] audit: type=1400 audit(1789590085.190:69): avc: denied { mount } for pid=287 comm="syz-executor" name="/" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=filesystem permissive=1 [ 30.173047][ T289] SELinux: Context root:object_r:swapfile_t is not valid (left unmapped). Setting up swapspace version 1, size = 127995904 bytes [ 30.181913][ T36] audit: type=1400 audit(1789590085.280:70): avc: denied { relabelto } for pid=289 comm="mkswap" name="swap-file" dev="sda1" ino=2026 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 30.207479][ T36] audit: type=1400 audit(1789590085.280:71): avc: denied { write } for pid=289 comm="mkswap" path="/root/swap-file" dev="sda1" ino=2026 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 30.233822][ T36] audit: type=1400 audit(1789590085.330:72): avc: denied { read } for pid=287 comm="syz-executor" name="swap-file" dev="sda1" ino=2026 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 30.259655][ T36] audit: type=1400 audit(1789590085.330:73): avc: denied { open } for pid=287 comm="syz-executor" path="/root/swap-file" dev="sda1" ino=2026 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 30.260459][ T287] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 31.137772][ T296] bridge0: port 1(bridge_slave_0) entered blocking state [ 31.144890][ T296] bridge0: port 1(bridge_slave_0) entered disabled state [ 31.152183][ T296] bridge_slave_0: entered allmulticast mode [ 31.158679][ T296] bridge_slave_0: entered promiscuous mode [ 31.167169][ T297] bridge0: port 1(bridge_slave_0) entered blocking state [ 31.174325][ T297] bridge0: port 1(bridge_slave_0) entered disabled state [ 31.181725][ T297] bridge_slave_0: entered allmulticast mode [ 31.188101][ T297] bridge_slave_0: entered promiscuous mode [ 31.194401][ T296] bridge0: port 2(bridge_slave_1) entered blocking state [ 31.201567][ T296] bridge0: port 2(bridge_slave_1) entered disabled state [ 31.208703][ T296] bridge_slave_1: entered allmulticast mode [ 31.214964][ T296] bridge_slave_1: entered promiscuous mode [ 31.234966][ T294] bridge0: port 1(bridge_slave_0) entered blocking state [ 31.242107][ T294] bridge0: port 1(bridge_slave_0) entered disabled state [ 31.249333][ T294] bridge_slave_0: entered allmulticast mode [ 31.255665][ T294] bridge_slave_0: entered promiscuous mode [ 31.262412][ T297] bridge0: port 2(bridge_slave_1) entered blocking state [ 31.269565][ T297] bridge0: port 2(bridge_slave_1) entered disabled state [ 31.276691][ T297] bridge_slave_1: entered allmulticast mode [ 31.282980][ T297] bridge_slave_1: entered promiscuous mode [ 31.297280][ T294] bridge0: port 2(bridge_slave_1) entered blocking state [ 31.304363][ T294] bridge0: port 2(bridge_slave_1) entered disabled state [ 31.311558][ T294] bridge_slave_1: entered allmulticast mode [ 31.317888][ T294] bridge_slave_1: entered promiscuous mode [ 31.381701][ T295] bridge0: port 1(bridge_slave_0) entered blocking state [ 31.388836][ T295] bridge0: port 1(bridge_slave_0) entered disabled state [ 31.396022][ T295] bridge_slave_0: entered allmulticast mode [ 31.402291][ T295] bridge_slave_0: entered promiscuous mode [ 31.408985][ T295] bridge0: port 2(bridge_slave_1) entered blocking state [ 31.416076][ T295] bridge0: port 2(bridge_slave_1) entered disabled state [ 31.423224][ T295] bridge_slave_1: entered allmulticast mode [ 31.429637][ T295] bridge_slave_1: entered promiscuous mode [ 31.543171][ T294] bridge0: port 2(bridge_slave_1) entered blocking state [ 31.550765][ T294] bridge0: port 2(bridge_slave_1) entered forwarding state [ 31.558107][ T294] bridge0: port 1(bridge_slave_0) entered blocking state [ 31.565159][ T294] bridge0: port 1(bridge_slave_0) entered forwarding state [ 31.581675][ T296] bridge0: port 2(bridge_slave_1) entered blocking state [ 31.588839][ T296] bridge0: port 2(bridge_slave_1) entered forwarding state [ 31.596257][ T296] bridge0: port 1(bridge_slave_0) entered blocking state [ 31.603345][ T296] bridge0: port 1(bridge_slave_0) entered forwarding state [ 31.627194][ T297] bridge0: port 2(bridge_slave_1) entered blocking state [ 31.634304][ T297] bridge0: port 2(bridge_slave_1) entered forwarding state [ 31.641649][ T297] bridge0: port 1(bridge_slave_0) entered blocking state [ 31.648824][ T297] bridge0: port 1(bridge_slave_0) entered forwarding state [ 31.687205][ T295] bridge0: port 2(bridge_slave_1) entered blocking state [ 31.694314][ T295] bridge0: port 2(bridge_slave_1) entered forwarding state [ 31.701699][ T295] bridge0: port 1(bridge_slave_0) entered blocking state [ 31.708778][ T295] bridge0: port 1(bridge_slave_0) entered forwarding state [ 31.731889][ T46] bridge0: port 1(bridge_slave_0) entered disabled state [ 31.739278][ T46] bridge0: port 1(bridge_slave_0) entered disabled state [ 31.747088][ T46] bridge0: port 2(bridge_slave_1) entered disabled state [ 31.754307][ T46] bridge0: port 2(bridge_slave_1) entered disabled state [ 31.761679][ T46] bridge0: port 1(bridge_slave_0) entered disabled state [ 31.769240][ T46] bridge0: port 2(bridge_slave_1) entered disabled state [ 31.776609][ T46] bridge0: port 1(bridge_slave_0) entered disabled state [ 31.784314][ T46] bridge0: port 2(bridge_slave_1) entered disabled state [ 31.799156][ T46] bridge0: port 1(bridge_slave_0) entered blocking state [ 31.806312][ T46] bridge0: port 1(bridge_slave_0) entered forwarding state [ 31.827208][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 31.834395][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 31.843036][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 31.850121][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 31.865816][ T46] bridge0: port 2(bridge_slave_1) entered blocking state [ 31.872917][ T46] bridge0: port 2(bridge_slave_1) entered forwarding state [ 31.880693][ T46] bridge0: port 2(bridge_slave_1) entered blocking state [ 31.887799][ T46] bridge0: port 2(bridge_slave_1) entered forwarding state [ 31.901559][ T46] bridge0: port 1(bridge_slave_0) entered blocking state [ 31.908747][ T46] bridge0: port 1(bridge_slave_0) entered forwarding state [ 31.916614][ T46] bridge0: port 2(bridge_slave_1) entered blocking state [ 31.923687][ T46] bridge0: port 2(bridge_slave_1) entered forwarding state [ 31.944861][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 31.951987][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 32.000448][ T296] veth0_vlan: entered promiscuous mode [ 32.012955][ T297] veth0_vlan: entered promiscuous mode [ 32.027630][ T296] veth1_macvtap: entered promiscuous mode [ 32.047614][ T297] veth1_macvtap: entered promiscuous mode [ 32.061000][ T295] veth0_vlan: entered promiscuous mode [ 32.082038][ T294] veth0_vlan: entered promiscuous mode [ 32.103933][ T296] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 32.124132][ T294] veth1_macvtap: entered promiscuous mode [ 32.140921][ T295] veth1_macvtap: entered promiscuous mode [ 32.238110][ T319] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 32.388024][ T341] netlink: 104 bytes leftover after parsing attributes in process `syz.2.13'. [ 32.423297][ T347] overlayfs: "xino" feature enabled using 2 upper inode bits. [ 32.502209][ T357] process 'syz.0.20' launched './file0' with NULL argv: empty string added [ 32.863550][ T405] netlink: 44 bytes leftover after parsing attributes in process `syz.1.43'. [ 32.872498][ T405] netlink: 43 bytes leftover after parsing attributes in process `syz.1.43'. [ 32.882326][ T405] netlink: 'syz.1.43': attribute type 6 has an invalid length. [ 32.890003][ T405] netlink: 'syz.1.43': attribute type 5 has an invalid length. [ 32.898926][ T405] netlink: 43 bytes leftover after parsing attributes in process `syz.1.43'. [ 32.954918][ T410] netlink: 12 bytes leftover after parsing attributes in process `syz.3.45'. [ 33.012104][ T420] rust_binder: 419:420 error while translating object: EPERM [ 33.033305][ T420] rust_binder: Failure in copy_transaction_data: EPERM [ 33.033617][ T420] rust_binder: 419:420 transaction call to 419:0 failed EPERM, code 0 size 88-24 [ 33.056141][ T312] rust_binder: 419: undelivered TRANSACTION_ERROR: 29201 [ 33.165133][ T437] IPv6: syztnl0: Disabled Multicast RS [ 33.285130][ T312] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 33.308152][ T312] hid-generic 0000:0000:0000.0001: hidraw0: HID v0.00 Device [syz1] on syz0 [ 33.322493][ T445] device-mapper: ioctl: Invalid new mapped device name or uuid string supplied. [ 33.553405][ T443] hid-generic 0000:0000:0000.0001: pid 443 passed too short report [ 33.939485][ T511] netlink: 8 bytes leftover after parsing attributes in process `syz.0.92'. [ 34.052170][ T517] SELinux: failed to load policy [ 34.146205][ T532] base or size exceeds the MTRR width [ 34.602309][ T312] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 34.635316][ T312] hid-generic 0000:0000:0000.0002: hidraw0: HID v0.00 Device [syz1] on syz0 [ 34.742709][ T570] netlink: 4 bytes leftover after parsing attributes in process `syz.3.120'. [ 34.910133][ T576] FAULT_INJECTION: forcing a failure. [ 34.910133][ T576] name failslab, interval 1, probability 0, space 0, times 1 [ 34.945748][ T576] CPU: 0 UID: 0 PID: 576 Comm: syz.3.122 Not tainted syzkaller #0 52749abf125da3aebe1f5771d25291006b6a1b72 [ 34.945785][ T576] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 34.945814][ T576] Call Trace: [ 34.945823][ T576] [ 34.945833][ T576] __dump_stack+0x21/0x30 [ 34.945883][ T576] dump_stack_lvl+0x140/0x1c0 [ 34.945916][ T576] ? __cfi_dump_stack_lvl+0x10/0x10 [ 34.945954][ T576] ? __cfi_avc_has_perm+0x10/0x10 [ 34.945983][ T576] ? unwind_get_return_address+0x51/0x90 [ 34.946015][ T576] ? arch_stack_walk+0x10a/0x170 [ 34.946038][ T576] dump_stack+0x19/0x20 [ 34.946069][ T576] should_fail_ex+0x3c2/0x510 [ 34.946098][ T576] should_failslab+0xac/0x100 [ 34.946127][ T576] __kmalloc_cache_noprof+0x41/0x470 [ 34.946153][ T576] ? proc_thread_self_get_link+0x11a/0x290 [ 34.946189][ T576] proc_thread_self_get_link+0x11a/0x290 [ 34.946223][ T576] ? bpf_lsm_inode_follow_link+0xd/0x20 [ 34.946251][ T576] ? __cfi_proc_thread_self_get_link+0x10/0x10 [ 34.946286][ T576] pick_link+0x6d4/0xe80 [ 34.946311][ T576] step_into+0xc33/0xf10 [ 34.946335][ T576] ? set_root+0x420/0x420 [ 34.946357][ T576] ? lookup_fast+0x15f/0x540 [ 34.946380][ T576] ? inode_permission+0xf3/0x4c0 [ 34.946408][ T576] link_path_walk+0x746/0xeb0 [ 34.946434][ T576] path_lookupat+0x8d/0x440 [ 34.946462][ T576] do_o_path+0xa0/0x220 [ 34.946492][ T576] ? percpu_counter_add_batch+0x105/0x1a0 [ 34.946521][ T576] ? do_tmpfile+0x280/0x280 [ 34.946548][ T576] ? alloc_empty_file+0x120/0x270 [ 34.946581][ T576] path_openat+0x2e91/0x35a0 [ 34.946614][ T576] ? stack_depot_save_flags+0x38/0x800 [ 34.946644][ T576] ? schedule+0xc5/0x240 [ 34.946668][ T576] ? kasan_save_track+0x4f/0x80 [ 34.946694][ T576] ? kasan_save_track+0x3e/0x80 [ 34.946720][ T576] ? kasan_save_alloc_info+0x3a/0x50 [ 34.946740][ T576] ? __kasan_slab_alloc+0x73/0x90 [ 34.946770][ T576] ? getname+0x1b/0x30 [ 34.946795][ T576] ? do_sys_openat2+0xda/0x1d0 [ 34.946828][ T576] ? __x64_sys_open+0x120/0x150 [ 34.946861][ T576] ? x64_sys_call+0x131a/0x2ee0 [ 34.946881][ T576] ? do_syscall_64+0x57/0xf0 [ 34.946905][ T576] ? do_filp_open+0x440/0x440 [ 34.946937][ T576] do_filp_open+0x1f2/0x440 [ 34.946969][ T576] ? __cfi_do_filp_open+0x10/0x10 [ 34.947005][ T576] ? alloc_fd+0x4c1/0x570 [ 34.947034][ T576] do_sys_openat2+0x134/0x1d0 [ 34.947066][ T576] ? fput+0x1a4/0x230 [ 34.947095][ T576] ? do_sys_open+0x100/0x100 [ 34.947130][ T576] ? __kasan_check_write+0x18/0x20 [ 34.947154][ T576] __x64_sys_open+0x120/0x150 [ 34.947188][ T576] x64_sys_call+0x131a/0x2ee0 [ 34.947208][ T576] do_syscall_64+0x57/0xf0 [ 34.947229][ T576] ? clear_bhb_loop+0x50/0xa0 [ 34.947257][ T576] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 34.947284][ T576] RIP: 0033:0x7f200699e159 [ 34.947312][ T576] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 34.947331][ T576] RSP: 002b:00007f20078b5028 EFLAGS: 00000246 ORIG_RAX: 0000000000000002 [ 34.947365][ T576] RAX: ffffffffffffffda RBX: 00007f2006c25fa0 RCX: 00007f200699e159 [ 34.947383][ T576] RDX: 0000000000000040 RSI: 0000000000381040 RDI: 00002000000001c0 [ 34.947399][ T576] RBP: 00007f2006a3506b R08: 0000000000000000 R09: 0000000000000000 [ 34.947414][ T576] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 34.947429][ T576] R13: 00007f2006c26038 R14: 00007f2006c25fa0 R15: 00007ffc4f95c668 [ 34.947449][ T576] [ 35.313779][ T36] kauditd_printk_skb: 311 callbacks suppressed [ 35.313800][ T36] audit: type=1400 audit(1789590090.400:385): avc: denied { write } for pid=579 comm="syz.2.124" name="/" dev="incremental-fs" ino=152 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 35.358625][ T36] audit: type=1400 audit(1789590090.400:386): avc: denied { add_name } for pid=579 comm="syz.2.124" name="file1" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 35.379371][ T36] audit: type=1400 audit(1789590090.400:387): avc: denied { create } for pid=579 comm="syz.2.124" name="file1" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=dir permissive=1 [ 35.400017][ T36] audit: type=1400 audit(1789590090.400:388): avc: denied { associate } for pid=579 comm="syz.2.124" name="file1" scontext=root:object_r:unlabeled_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 35.463648][ T36] audit: type=1400 audit(1789590090.550:389): avc: denied { mount } for pid=584 comm="syz.3.126" name="/" dev="devpts" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:devpts_t tclass=filesystem permissive=1 [ 35.503878][ T36] audit: type=1400 audit(1789590090.590:390): avc: denied { unmount } for pid=297 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:devpts_t tclass=filesystem permissive=1 [ 35.555092][ T36] audit: type=1400 audit(1789590090.640:391): avc: denied { write } for pid=591 comm="syz.3.129" name="raw-gadget" dev="devtmpfs" ino=190 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 35.611684][ T595] kvm: apic: phys broadcast and lowest prio [ 35.786068][ T312] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 35.818549][ T36] audit: type=1400 audit(1789590090.910:392): avc: denied { append } for pid=599 comm="syz.1.133" name="kvm" dev="devtmpfs" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 35.859701][ T36] audit: type=1400 audit(1789590090.910:393): avc: denied { read } for pid=606 comm="syz.0.136" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 35.923385][ T36] audit: type=1400 audit(1789590091.010:394): avc: denied { create } for pid=611 comm="syz.0.138" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 35.977184][ T312] usb 4-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 35.991580][ T312] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 36.001307][ T312] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 36.009556][ T312] usb 4-1: SerialNumber: syz [ 36.275347][ T66] smpboot: CPU 1 is now offline [ 36.283317][ T647] smpboot: Booting Node 0 Processor 1 APIC 0x1 [ 36.326067][ T311] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 36.486552][ T311] usb 1-1: Using ep0 maxpacket: 8 [ 36.492987][ T311] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 36.503463][ T311] usb 1-1: New USB device found, idVendor=0e8d, idProduct=2000, bcdDevice=21.c6 [ 36.512642][ T311] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 36.527489][ T311] usb 1-1: config 0 descriptor?? [ 36.631313][ T312] cdc_ether 4-1:1.0 usb0: register 'cdc_ether' at usb-dummy_hcd.3-1, CDC Ethernet Device, 42:42:42:42:42:42 [ 36.685991][ T66] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 36.749161][ T10] usb 1-1: USB disconnect, device number 2 [ 36.867375][ T66] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 36.878635][ T66] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 36.888923][ T66] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 36.903458][ T66] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 36.914652][ T66] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 36.931459][ T66] usb 2-1: config 0 descriptor?? [ 37.034507][ T10] usb 4-1: USB disconnect, device number 2 [ 37.044070][ T10] cdc_ether 4-1:1.0 usb0: unregister 'cdc_ether' usb-dummy_hcd.3-1, CDC Ethernet Device [ 37.309306][ T718] SELinux: failed to load policy [ 37.343000][ T66] plantronics 0003:047F:FFFF.0003: unknown main item tag 0xd [ 37.355797][ T66] plantronics 0003:047F:FFFF.0003: No inputs registered, leaving [ 37.366489][ T66] plantronics 0003:047F:FFFF.0003: hiddev96,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.1-1/input0 [ 37.417026][ T726] netlink: 44 bytes leftover after parsing attributes in process `syz.0.171'. [ 37.426140][ T726] netlink: 43 bytes leftover after parsing attributes in process `syz.0.171'. [ 37.435037][ T726] netlink: 'syz.0.171': attribute type 6 has an invalid length. [ 37.443701][ T726] netlink: 'syz.0.171': attribute type 5 has an invalid length. [ 37.451483][ T726] netlink: 43 bytes leftover after parsing attributes in process `syz.0.171'. [ 37.592253][ T732] FAULT_INJECTION: forcing a failure. [ 37.592253][ T732] name failslab, interval 1, probability 0, space 0, times 0 [ 37.605870][ T732] CPU: 0 UID: 0 PID: 732 Comm: syz.3.174 Not tainted syzkaller #0 52749abf125da3aebe1f5771d25291006b6a1b72 [ 37.605896][ T732] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 37.605906][ T732] Call Trace: [ 37.605912][ T732] [ 37.605918][ T732] __dump_stack+0x21/0x30 [ 37.605972][ T732] dump_stack_lvl+0x140/0x1c0 [ 37.606017][ T732] ? __cfi_dump_stack_lvl+0x10/0x10 [ 37.606044][ T732] dump_stack+0x19/0x20 [ 37.606067][ T732] should_fail_ex+0x3c2/0x510 [ 37.606088][ T732] should_failslab+0xac/0x100 [ 37.606109][ T732] __kmalloc_node_noprof+0x69/0x500 [ 37.606127][ T732] ? __kvmalloc_node_noprof+0x128/0x300 [ 37.606143][ T732] ? __kasan_kmalloc+0x96/0xb0 [ 37.606164][ T732] __kvmalloc_node_noprof+0x128/0x300 [ 37.606180][ T732] ? __cfi___kvmalloc_node_noprof+0x10/0x10 [ 37.606196][ T732] ? percpu_ref_init+0x1d0/0x4d0 [ 37.606216][ T732] ? __cfi_io_ring_ctx_ref_free+0x10/0x10 [ 37.606233][ T732] io_ring_ctx_alloc+0x28c/0x1dc0 [ 37.606250][ T732] ? do_futex+0x37d/0x510 [ 37.606272][ T732] io_uring_create+0x2e0/0x13f0 [ 37.606288][ T732] ? __kasan_check_write+0x18/0x20 [ 37.606305][ T732] __se_sys_io_uring_setup+0x2a4/0x2b0 [ 37.606330][ T732] ? __se_sys_futex+0x13c/0x320 [ 37.606352][ T732] ? __x64_sys_io_uring_setup+0x80/0x80 [ 37.606378][ T732] ? __kasan_check_write+0x18/0x20 [ 37.606396][ T732] __x64_sys_io_uring_setup+0x5f/0x80 [ 37.606420][ T732] x64_sys_call+0x22c0/0x2ee0 [ 37.606435][ T732] do_syscall_64+0x57/0xf0 [ 37.606451][ T732] ? clear_bhb_loop+0x50/0xa0 [ 37.606471][ T732] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 37.606491][ T732] RIP: 0033:0x7f200699e159 [ 37.606505][ T732] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 37.606519][ T732] RSP: 002b:00007f20078b4fb8 EFLAGS: 00000206 ORIG_RAX: 00000000000001a9 [ 37.606536][ T732] RAX: ffffffffffffffda RBX: 0000200000000180 RCX: 00007f200699e159 [ 37.606549][ T732] RDX: 0000200000000240 RSI: 0000200000000180 RDI: 00000000000046cc [ 37.606560][ T732] RBP: 00007f2006a3506b R08: 0000000000000000 R09: 0000000000000000 [ 37.606570][ T732] R10: 0000200000000280 R11: 0000000000000206 R12: 0000200000000240 [ 37.606581][ T732] R13: 0000200000000280 R14: 0000200000000200 R15: 00007ffc4f95c668 [ 37.606595][ T732] [ 37.843450][ T66] usb 2-1: USB disconnect, device number 2 [ 37.896029][ T10] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 38.067321][ T10] usb 1-1: unable to get BOS descriptor or descriptor too short [ 38.075717][ T10] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 38.096032][ T10] usb 1-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 38.127553][ T10] usb 1-1: too many endpoints for config 1 interface 1 altsetting 76: 188, using maximum allowed: 30 [ 38.160574][ T10] usb 1-1: config 1 interface 1 altsetting 76 has 0 endpoint descriptors, different from the interface descriptor's value: 188 [ 38.204407][ T10] usb 1-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 0, changing to 7 [ 38.235554][ T10] usb 1-1: config 1 interface 1 has no altsetting 0 [ 38.264948][ T10] usb 1-1: string descriptor 0 read error: -22 [ 38.271330][ T10] usb 1-1: New USB device found, idVendor=21b4, idProduct=0081, bcdDevice= 0.40 [ 38.300620][ T10] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 38.464558][ T760] FAULT_INJECTION: forcing a failure. [ 38.464558][ T760] name failslab, interval 1, probability 0, space 0, times 0 [ 38.482317][ T760] CPU: 0 UID: 0 PID: 760 Comm: syz.1.187 Not tainted syzkaller #0 52749abf125da3aebe1f5771d25291006b6a1b72 [ 38.482345][ T760] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 38.482356][ T760] Call Trace: [ 38.482361][ T760] [ 38.482367][ T760] __dump_stack+0x21/0x30 [ 38.482395][ T760] dump_stack_lvl+0x140/0x1c0 [ 38.482418][ T760] ? __cfi_dump_stack_lvl+0x10/0x10 [ 38.482446][ T760] ? mutex_unlock+0x90/0x240 [ 38.482465][ T760] ? pcpu_alloc_noprof+0x1440/0x1440 [ 38.482486][ T760] dump_stack+0x19/0x20 [ 38.482508][ T760] should_fail_ex+0x3c2/0x510 [ 38.482529][ T760] should_failslab+0xac/0x100 [ 38.482550][ T760] __kmalloc_cache_noprof+0x41/0x470 [ 38.482568][ T760] ? percpu_ref_init+0xe3/0x4d0 [ 38.482589][ T760] percpu_ref_init+0xe3/0x4d0 [ 38.482609][ T760] ? __cfi_free_ioctx_reqs+0x10/0x10 [ 38.482632][ T760] ioctx_alloc+0x25e/0x840 [ 38.482653][ T760] __se_sys_io_setup+0x6f/0x230 [ 38.482672][ T760] __x64_sys_io_setup+0x5f/0x80 [ 38.482691][ T760] x64_sys_call+0x26a4/0x2ee0 [ 38.482706][ T760] do_syscall_64+0x57/0xf0 [ 38.482721][ T760] ? clear_bhb_loop+0x50/0xa0 [ 38.482741][ T760] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 38.482763][ T760] RIP: 0033:0x7f9724b9e159 [ 38.482777][ T760] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 38.482790][ T760] RSP: 002b:00007f97235f7028 EFLAGS: 00000246 ORIG_RAX: 00000000000000ce [ 38.482807][ T760] RAX: ffffffffffffffda RBX: 00007f9724e25fa0 RCX: 00007f9724b9e159 [ 38.482819][ T760] RDX: 0000000000000000 RSI: 0000200000000040 RDI: 0000000000008001 [ 38.482830][ T760] RBP: 00007f9724c3506b R08: 0000000000000000 R09: 0000000000000000 [ 38.482840][ T760] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 38.482850][ T760] R13: 00007f9724e26038 R14: 00007f9724e25fa0 R15: 00007fff595083c8 [ 38.482864][ T760] [ 39.284921][ T10] usb 1-1: 2:0: failed to get current value for ch 1 (-71) [ 39.306559][ T10] usb 1-1: USB disconnect, device number 3 [ 40.053402][ T311] wiimote 0005:057E:0306.0004: hidraw0: BLUETOOTH HID v0.03 Gamepad [syz0] on syz0 [ 40.063977][ T311] wiimote 0005:057E:0306.0004: New device registered [ 40.103849][ T840] tipc: Started in network mode [ 40.108952][ T840] tipc: Node identity 0010000000000000002, cluster identity 1 [ 40.117361][ T840] Zero length message leads to an empty skb [ 40.135536][ T842] netlink: 'syz.0.223': attribute type 9 has an invalid length. [ 40.168878][ T845] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 40.280771][ T10] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 40.306054][ T66] usb 4-1: new full-speed USB device number 3 using dummy_hcd [ 40.359442][ T860] capability: warning: `syz.0.232' uses deprecated v2 capabilities in a way that may be insecure [ 40.401761][ T36] kauditd_printk_skb: 46 callbacks suppressed [ 40.401782][ T36] audit: type=1400 audit(1789590095.490:441): avc: denied { search } for pid=862 comm="syz.2.234" name="/" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=dir permissive=1 [ 40.438913][ T36] audit: type=1400 audit(1789590095.530:442): avc: denied { watch watch_reads } for pid=865 comm="syz.0.235" path="/60/file0" dev="tmpfs" ino=340 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 40.448087][ T10] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 40.484021][ T833] wiimote 0005:057E:0306.0004: Remote error 116 on req 118 [ 40.504551][ T832] wiimote 0005:057E:0306.0004: Device removed [ 40.515993][ T66] usb 4-1: unable to get BOS descriptor or descriptor too short [ 40.532808][ T66] usb 4-1: unable to read config index 0 descriptor/start: -71 [ 40.545023][ T36] audit: type=1400 audit(1789590095.640:443): avc: denied { unlink } for pid=872 comm="syz.2.238" name="#5" dev="tmpfs" ino=395 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 40.550271][ T10] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 40.576991][ T66] usb 4-1: can't read configurations, error -71 [ 40.587110][ T871] kvm: kvm [870]: vcpu0, guest rIP: 0xfff0 Unhandled WRMSR(0xc0010002) = 0x80ffffff [ 40.618732][ T876] tipc: Started in network mode [ 40.623634][ T876] tipc: Node identity 2007ff, cluster identity 4711 [ 40.630439][ T10] usb 2-1: New USB device found, idVendor=054c, idProduct=0df2, bcdDevice=d6.af [ 40.639702][ T876] tipc: Node number set to 2099199 [ 40.659406][ T10] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 40.685674][ T10] usb 2-1: config 0 descriptor?? [ 40.888098][ T898] Invalid argument reading file caps for ./file0 [ 40.924608][ T36] audit: type=1400 audit(1789590096.010:444): avc: denied { create } for pid=902 comm="syz.0.251" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 40.945126][ T36] audit: type=1400 audit(1789590096.020:445): avc: denied { read write } for pid=902 comm="syz.0.251" name="file0" dev="tmpfs" ino=396 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 40.968211][ T36] audit: type=1400 audit(1789590096.020:446): avc: denied { open } for pid=902 comm="syz.0.251" path="/69/file0" dev="tmpfs" ino=396 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 40.991301][ T36] audit: type=1400 audit(1789590096.020:447): avc: denied { ioctl } for pid=902 comm="syz.0.251" path="/69/file0" dev="tmpfs" ino=396 ioctlcmd=0x1500 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 41.027882][ T36] audit: type=1400 audit(1789590096.120:448): avc: denied { connect } for pid=906 comm="syz.0.253" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 41.047554][ T36] audit: type=1400 audit(1789590096.120:449): avc: denied { write } for pid=906 comm="syz.0.253" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 41.102783][ T10] playstation 0003:054C:0DF2.0005: unknown main item tag 0x0 [ 41.112841][ T10] playstation 0003:054C:0DF2.0005: unknown main item tag 0x0 [ 41.120976][ T835] wiimote 0005:057E:0306.0004: detected device: Nintendo Wii Remote (Gen 1) [ 41.138221][ T10] playstation 0003:054C:0DF2.0005: unknown main item tag 0x0 [ 41.150521][ T835] input: Nintendo Wii Remote Accelerometer as /devices/virtual/misc/uhid/0005:057E:0306.0004/input/input6 [ 41.172235][ T10] playstation 0003:054C:0DF2.0005: unknown main item tag 0x0 [ 41.182167][ T10] playstation 0003:054C:0DF2.0005: unknown main item tag 0x0 [ 41.190508][ T36] audit: type=1400 audit(1789590096.290:450): avc: denied { read } for pid=96 comm="acpid" name="event3" dev="devtmpfs" ino=469 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 41.198373][ T835] input: Nintendo Wii Remote IR as /devices/virtual/misc/uhid/0005:057E:0306.0004/input/input7 [ 41.246034][ T10] playstation 0003:054C:0DF2.0005: hidraw1: USB HID v1.01 Device [HID 054c:0df2] on usb-dummy_hcd.1-1/input0 [ 41.263665][ T835] input: Nintendo Wii Remote as /devices/virtual/misc/uhid/0005:057E:0306.0004/input/input5 [ 41.338680][ T913] netlink: 'syz.0.255': attribute type 4 has an invalid length. [ 41.381115][ T311] smpboot: CPU 1 is now offline [ 41.718008][ T10] playstation 0003:054C:0DF2.0005: Failed to retrieve feature with reportID 5: -71 [ 41.728888][ T10] playstation 0003:054C:0DF2.0005: Failed to retrieve DualSense calibration info: -71 [ 41.749239][ T10] playstation 0003:054C:0DF2.0005: Failed to get calibration data from DualSense [ 41.768219][ T10] playstation 0003:054C:0DF2.0005: Failed to create dualsense. [ 41.786599][ T10] playstation 0003:054C:0DF2.0005: probe with driver playstation failed with error -71 [ 41.810832][ T10] usb 2-1: USB disconnect, device number 3 [ 42.175988][ T66] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 42.336990][ T66] usb 1-1: New USB device found, idVendor=0525, idProduct=1080, bcdDevice= 1.00 [ 42.355985][ T66] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 42.496295][ T10] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 42.538245][ T968] netlink: 'syz.2.280': attribute type 150 has an invalid length. [ 42.546818][ T968] netlink: 4 bytes leftover after parsing attributes in process `syz.2.280'. [ 42.584350][ T66] net1080 1-1:1.0 usb0: register 'net1080' at usb-dummy_hcd.0-1, NetChip TurboCONNECT, 9e:4d:f9:92:01:17 [ 42.656069][ T10] usb 2-1: Using ep0 maxpacket: 32 [ 42.667953][ T10] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 42.685715][ T10] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 42.704181][ T10] usb 2-1: New USB device found, idVendor=1e7d, idProduct=2d5a, bcdDevice= 0.00 [ 42.726424][ T10] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 42.749089][ T10] usb 2-1: config 0 descriptor?? [ 42.835349][ T66] usb 1-1: USB disconnect, device number 4 [ 42.842594][ T66] net1080 1-1:1.0 usb0: unregister 'net1080' usb-dummy_hcd.0-1, NetChip TurboCONNECT [ 43.166936][ T10] savu 0003:1E7D:2D5A.0006: hiddev96,hidraw1: USB HID v0.00 Device [HID 1e7d:2d5a] on usb-dummy_hcd.1-1/input0 [ 43.447419][ T10] usb 2-1: USB disconnect, device number 4 [ 43.664507][ T1021] serio: Serial port ptm0 [ 43.731458][ T1025] input: syz1 as /devices/virtual/input/input8 [ 43.899282][ T1034] FAULT_INJECTION: forcing a failure. [ 43.899282][ T1034] name failslab, interval 1, probability 0, space 0, times 0 [ 43.925973][ T1034] CPU: 0 UID: 0 PID: 1034 Comm: syz.2.297 Not tainted syzkaller #0 52749abf125da3aebe1f5771d25291006b6a1b72 [ 43.926001][ T1034] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 43.926012][ T1034] Call Trace: [ 43.926017][ T1034] [ 43.926023][ T1034] __dump_stack+0x21/0x30 [ 43.926052][ T1034] dump_stack_lvl+0x140/0x1c0 [ 43.926076][ T1034] ? __cfi_dump_stack_lvl+0x10/0x10 [ 43.926100][ T1034] ? futex_wait+0x2b8/0x7c0 [ 43.926116][ T1034] ? __cfi_futex_wait+0x10/0x10 [ 43.926131][ T1034] dump_stack+0x19/0x20 [ 43.926153][ T1034] should_fail_ex+0x3c2/0x510 [ 43.926173][ T1034] should_failslab+0xac/0x100 [ 43.926194][ T1034] kmem_cache_alloc_noprof+0x42/0x410 [ 43.926216][ T1034] ? dup_fd+0x63/0x9c0 [ 43.926234][ T1034] dup_fd+0x63/0x9c0 [ 43.926260][ T1034] __close_range+0x1ca/0x4e0 [ 43.926281][ T1034] ? __cfi___close_range+0x10/0x10 [ 43.926301][ T1034] ? __kasan_check_write+0x18/0x20 [ 43.926317][ T1034] ? fpregs_restore_userregs+0x11c/0x260 [ 43.926339][ T1034] __x64_sys_close_range+0x7e/0x90 [ 43.926355][ T1034] x64_sys_call+0x1686/0x2ee0 [ 43.926370][ T1034] do_syscall_64+0x57/0xf0 [ 43.926386][ T1034] ? clear_bhb_loop+0x50/0xa0 [ 43.926406][ T1034] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 43.926426][ T1034] RIP: 0033:0x7fefb6b9e159 [ 43.926440][ T1034] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 43.926453][ T1034] RSP: 002b:00007fefb7a30028 EFLAGS: 00000246 ORIG_RAX: 00000000000001b4 [ 43.926471][ T1034] RAX: ffffffffffffffda RBX: 00007fefb6e25fa0 RCX: 00007fefb6b9e159 [ 43.926483][ T1034] RDX: 0000000000000002 RSI: ffffffffffffffff RDI: ffffffffffffffff [ 43.926495][ T1034] RBP: 00007fefb6c3506b R08: 0000000000000000 R09: 0000000000000000 [ 43.926505][ T1034] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 43.926515][ T1034] R13: 00007fefb6e26038 R14: 00007fefb6e25fa0 R15: 00007ffc6bf978f8 [ 43.926529][ T1034] [ 44.159191][ T1038] device-mapper: ioctl: Invalid ioctl structure: name m, dev fc00 [ 44.267143][ T66] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 44.275526][ T66] hid-generic 0000:0000:0000.0007: hidraw1: HID v0.00 Device [syz1] on syz0 [ 44.361878][ T1048] fido_id[1048]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 44.971062][ T1093] netlink: 'syz.2.324': attribute type 1 has an invalid length. [ 44.997247][ T1095] input: syz1 as /devices/virtual/input/input9 [ 45.049632][ T1099] device-mapper: ioctl: only supply one of name or uuid, cmd(17) [ 45.289680][ T1120] FAULT_INJECTION: forcing a failure. [ 45.289680][ T1120] name fail_page_alloc, interval 1, probability 0, space 0, times 1 [ 45.318683][ T1120] CPU: 0 UID: 0 PID: 1120 Comm: syz.2.337 Not tainted syzkaller #0 52749abf125da3aebe1f5771d25291006b6a1b72 [ 45.318711][ T1120] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 45.318722][ T1120] Call Trace: [ 45.318728][ T1120] [ 45.318734][ T1120] __dump_stack+0x21/0x30 [ 45.318762][ T1120] dump_stack_lvl+0x140/0x1c0 [ 45.318785][ T1120] ? __cfi_dump_stack_lvl+0x10/0x10 [ 45.318809][ T1120] ? next_uptodate_folio+0xaca/0xb70 [ 45.318832][ T1120] ? __cfi_folio_unlock+0x10/0x10 [ 45.318850][ T1120] ? set_pte_range+0x42a/0x640 [ 45.318870][ T1120] dump_stack+0x19/0x20 [ 45.318892][ T1120] should_fail_ex+0x3c2/0x510 [ 45.318913][ T1120] should_fail_alloc_page+0xec/0x110 [ 45.318935][ T1120] __alloc_pages_noprof+0x1c0/0x7e0 [ 45.318959][ T1120] ? __cfi___alloc_pages_noprof+0x10/0x10 [ 45.318985][ T1120] ? __cfi_filemap_map_pages+0x10/0x10 [ 45.319008][ T1120] __folio_alloc_noprof+0x14/0x80 [ 45.319032][ T1120] folio_prealloc+0x46/0x220 [ 45.319053][ T1120] do_pte_missing+0x16af/0x4440 [ 45.319074][ T1120] ? schedule+0xc5/0x240 [ 45.319092][ T1120] ? __futex_wait+0x330/0x3d0 [ 45.319109][ T1120] ? pte_marker_clear+0x1b0/0x1b0 [ 45.319130][ T1120] ? cgroup_rstat_updated+0x144/0x800 [ 45.319149][ T1120] ? __kasan_check_read+0x15/0x20 [ 45.319166][ T1120] ? futex_wake+0x627/0x950 [ 45.319180][ T1120] ? pte_offset_map_rw_nolock+0x236/0x2c0 [ 45.319205][ T1120] handle_mm_fault+0x1189/0x1ba0 [ 45.319228][ T1120] ? __cfi_handle_mm_fault+0x10/0x10 [ 45.319246][ T1120] ? lock_vma_under_rcu+0x4cf/0x590 [ 45.319270][ T1120] ? __se_sys_futex+0x13c/0x320 [ 45.319294][ T1120] do_user_addr_fault+0x951/0x1230 [ 45.319314][ T1120] ? __kasan_check_read+0x15/0x20 [ 45.319332][ T1120] exc_page_fault+0x58/0xc0 [ 45.319352][ T1120] asm_exc_page_fault+0x2b/0x30 [ 45.319371][ T1120] RIP: 0033:0x7fefb6a5f6cb [ 45.319385][ T1120] Code: 00 00 00 48 8d 3d 5d b1 1a 00 48 89 c1 31 c0 e8 0b 2e ff ff eb d2 66 0f 1f 84 00 00 00 00 00 55 31 c0 53 48 81 ec 68 10 00 00 <48> 89 7c 24 08 48 8d 3d 91 b1 1a 00 48 89 34 24 48 8b 14 24 48 8b [ 45.319398][ T1120] RSP: 002b:00007fefb7a2efa0 EFLAGS: 00010206 [ 45.319413][ T1120] RAX: 0000000000000000 RBX: 00007fefb6e25fa0 RCX: 0000000000000000 [ 45.319424][ T1120] RDX: 0000000000000000 RSI: ffffffffffffffff RDI: 0000200000000180 [ 45.319435][ T1120] RBP: 00007fefb6c3506b R08: 0000000000000000 R09: 0000000000000000 [ 45.319445][ T1120] R10: 0000200000000180 R11: 0000000000000000 R12: 0000000000000000 [ 45.319455][ T1120] R13: 00007fefb6e26038 R14: 00007fefb6e25fa0 R15: 00007ffc6bf978f8 [ 45.319469][ T1120] [ 45.321663][ T1120] Huh VM_FAULT_OOM leaked out to the #PF handler. Retrying PF [ 45.598475][ T36] kauditd_printk_skb: 27 callbacks suppressed [ 45.598488][ T36] audit: type=1400 audit(1789590100.680:478): avc: denied { ioctl } for pid=1121 comm="syz.1.338" path="/dev/ptp0" dev="devtmpfs" ino=196 ioctlcmd=0x3d0f scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 45.800187][ T36] audit: type=1400 audit(1789590100.890:479): avc: denied { setopt } for pid=1138 comm="syz.2.346" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 45.895985][ T66] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 46.007224][ T46] Bluetooth: hci0: Frame reassembly failed (-84) [ 46.013757][ T46] Bluetooth: hci0: Frame reassembly failed (-84) [ 46.046060][ T66] usb 2-1: Using ep0 maxpacket: 32 [ 46.052460][ T66] usb 2-1: config 0 has an invalid interface number: 67 but max is 0 [ 46.060863][ T66] usb 2-1: config 0 has no interface number 0 [ 46.068561][ T66] usb 2-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 46.077894][ T66] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 46.086100][ T66] usb 2-1: Product: syz [ 46.090379][ T66] usb 2-1: Manufacturer: syz [ 46.095009][ T66] usb 2-1: SerialNumber: syz [ 46.104003][ T66] usb 2-1: config 0 descriptor?? [ 46.110657][ T66] smsc95xx v2.0.0 [ 46.511680][ T66] smsc95xx 2-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -32 [ 46.522566][ T66] smsc95xx 2-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 46.768496][ T36] audit: type=1326 audit(1789590101.860:480): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1152 comm="syz.2.352" exe="/root/ci2-android-6-12-rust/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fefb6b9e159 code=0x7fc00000 [ 46.933629][ T66] smsc95xx 2-1:0.67 (unnamed net_device) (uninitialized): Failed to write reg index 0x00000108: -71 [ 46.946085][ T66] smsc95xx 2-1:0.67: probe with driver smsc95xx failed with error -71 [ 46.957538][ T66] usb 2-1: USB disconnect, device number 5 [ 47.086101][ T311] usb 3-1: new full-speed USB device number 2 using dummy_hcd [ 47.237047][ T311] usb 3-1: config 0 interface 0 altsetting 4 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 47.249966][ T311] usb 3-1: config 0 interface 0 has no altsetting 0 [ 47.256836][ T311] usb 3-1: New USB device found, idVendor=04f2, idProduct=0418, bcdDevice= 0.00 [ 47.266076][ T311] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 47.276237][ T311] usb 3-1: config 0 descriptor?? [ 47.474485][ T36] audit: type=1400 audit(1789590102.560:481): avc: denied { write } for pid=1165 comm="syz.1.357" name="kmsg" dev="devtmpfs" ino=9 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kmsg_device_t tclass=chr_file permissive=1 [ 47.548408][ T1167] 0 [ 47.701485][ T311] chicony 0003:04F2:0418.0008: unknown main item tag 0x0 [ 47.711387][ T311] chicony 0003:04F2:0418.0008: unknown main item tag 0x0 [ 47.718860][ T311] chicony 0003:04F2:0418.0008: unknown main item tag 0x0 [ 47.726143][ T311] chicony 0003:04F2:0418.0008: unknown main item tag 0x0 [ 47.733272][ T311] chicony 0003:04F2:0418.0008: unknown main item tag 0x0 [ 47.740603][ T311] chicony 0003:04F2:0418.0008: unknown main item tag 0x0 [ 47.747824][ T311] chicony 0003:04F2:0418.0008: unknown main item tag 0x0 [ 47.762266][ T311] chicony 0003:04F2:0418.0008: hidraw1: USB HID vf.ff Device [HID 04f2:0418] on usb-dummy_hcd.2-1/input0 [ 47.906312][ T311] usb 3-1: USB disconnect, device number 2 [ 48.076082][ T669] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 48.252338][ T1181] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 48.277859][ T36] audit: type=1400 audit(1789590103.370:482): avc: denied { mount } for pid=1182 comm="syz.0.364" name="/" dev="configfs" ino=1011 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=filesystem permissive=1 [ 48.337358][ T1187] FAULT_INJECTION: forcing a failure. [ 48.337358][ T1187] name fail_futex, interval 1, probability 0, space 0, times 1 [ 48.350264][ T1187] CPU: 0 UID: 0 PID: 1187 Comm: syz.1.366 Not tainted syzkaller #0 52749abf125da3aebe1f5771d25291006b6a1b72 [ 48.350288][ T1187] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 48.350298][ T1187] Call Trace: [ 48.350303][ T1187] [ 48.350317][ T1187] __dump_stack+0x21/0x30 [ 48.350345][ T1187] dump_stack_lvl+0x140/0x1c0 [ 48.350368][ T1187] ? __cfi_dump_stack_lvl+0x10/0x10 [ 48.350393][ T1187] ? gup_fast_fallback+0x671/0x740 [ 48.350417][ T1187] dump_stack+0x19/0x20 [ 48.350439][ T1187] should_fail_ex+0x3c2/0x510 [ 48.350459][ T1187] should_fail+0xf/0x20 [ 48.350478][ T1187] should_fail_futex+0x3c/0x50 [ 48.350499][ T1187] futex_lock_pi_atomic+0x11b/0xcb0 [ 48.350526][ T1187] ? __cfi_futex_lock_pi_atomic+0x10/0x10 [ 48.350551][ T1187] ? __cfi_futex_setup_timer+0x10/0x10 [ 48.350571][ T1187] ? __cfi_get_futex_key+0x10/0x10 [ 48.350593][ T1187] futex_lock_pi+0x2a7/0xa70 [ 48.350617][ T1187] ? futex_unqueue+0x136/0x160 [ 48.350639][ T1187] ? __cfi_futex_lock_pi+0x10/0x10 [ 48.350664][ T1187] ? __cfi_futex_wake_mark+0x10/0x10 [ 48.350681][ T1187] ? __cfi_futex_wake_mark+0x10/0x10 [ 48.350698][ T1187] ? vfs_write+0xbcf/0xfd0 [ 48.350716][ T1187] do_futex+0x2fc/0x510 [ 48.350738][ T1187] ? __cfi_do_futex+0x10/0x10 [ 48.350759][ T1187] ? mutex_unlock+0x90/0x240 [ 48.350780][ T1187] __se_sys_futex+0x13c/0x320 [ 48.350802][ T1187] ? fput+0x1a4/0x230 [ 48.350823][ T1187] ? __x64_sys_futex+0x110/0x110 [ 48.350846][ T1187] ? __kasan_check_write+0x18/0x20 [ 48.350863][ T1187] __x64_sys_futex+0xe9/0x110 [ 48.350885][ T1187] x64_sys_call+0x227f/0x2ee0 [ 48.350900][ T1187] do_syscall_64+0x57/0xf0 [ 48.350915][ T1187] ? clear_bhb_loop+0x50/0xa0 [ 48.350936][ T1187] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 48.350964][ T1187] RIP: 0033:0x7f9724b9e159 [ 48.350978][ T1187] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 48.350992][ T1187] RSP: 002b:00007f97235f7028 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 48.351009][ T1187] RAX: ffffffffffffffda RBX: 00007f9724e25fa0 RCX: 00007f9724b9e159 [ 48.351022][ T1187] RDX: 0000000000000000 RSI: 0000000000000008 RDI: 0000200000000200 [ 48.351032][ T1187] RBP: 00007f9724c3506b R08: 0000000000000000 R09: 0000000034fffffd [ 48.351043][ T1187] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 48.351053][ T1187] R13: 00007f9724e26038 R14: 00007f9724e25fa0 R15: 00007fff595083c8 [ 48.351067][ T1187] [ 48.610604][ T36] audit: type=1400 audit(1789590103.400:483): avc: denied { search } for pid=1182 comm="syz.0.364" name="/" dev="configfs" ino=1011 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 48.632676][ T36] audit: type=1400 audit(1789590103.400:484): avc: denied { unmount } for pid=294 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=filesystem permissive=1 [ 48.915606][ T1207] netlink: 'syz.1.373': attribute type 27 has an invalid length. [ 48.937855][ T1209] kvm: user requested TSC rate below hardware speed [ 48.988709][ T1209] kvm: kvm [1208]: vcpu3, guest rIP: 0x913b Unhandled WRMSR(0x11e) = 0x0 [ 49.002880][ T1212] netlink: 'syz.2.376': attribute type 32 has an invalid length. [ 49.185718][ T36] audit: type=1400 audit(1789590104.270:485): avc: denied { write } for pid=1221 comm="syz.2.380" name="ptp0" dev="devtmpfs" ino=196 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 49.266327][ T36] audit: type=1400 audit(1789590104.350:486): avc: denied { ioctl } for pid=1227 comm="syz.1.384" path="/" dev="configfs" ino=1011 ioctlcmd=0x5820 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 49.576216][ T836] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 49.699923][ T36] audit: type=1400 audit(1789590104.790:487): avc: denied { setopt } for pid=1270 comm="syz.3.402" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 49.756230][ T836] usb 3-1: Using ep0 maxpacket: 8 [ 49.769130][ T836] usb 3-1: config 179 has an invalid interface number: 65 but max is 0 [ 49.790934][ T836] usb 3-1: config 179 has no interface number 0 [ 49.803102][ T836] usb 3-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 49.826807][ T836] usb 3-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024 [ 49.850898][ T836] usb 3-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 49.874732][ T836] usb 3-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 41728, setting to 1024 [ 49.898373][ T836] usb 3-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 49.926609][ T836] usb 3-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 49.945603][ T836] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 49.969706][ T1237] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 49.985967][ T66] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 50.035990][ T835] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 50.071516][ T1261] syz.0.397 (1261): drop_caches: 3 [ 50.146129][ T66] usb 4-1: Using ep0 maxpacket: 16 [ 50.152385][ T66] usb 4-1: config 0 interface 0 altsetting 5 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 50.173545][ T66] usb 4-1: config 0 interface 0 altsetting 5 endpoint 0x81 has invalid wMaxPacketSize 0 [ 50.195996][ T835] usb 2-1: Using ep0 maxpacket: 16 [ 50.208102][ T835] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 50.226282][ T66] usb 4-1: config 0 interface 0 altsetting 5 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 50.250394][ T835] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 50.270309][ T66] usb 4-1: config 0 interface 0 has no altsetting 0 [ 50.281483][ T835] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 50.297149][ T66] usb 4-1: New USB device found, idVendor=041e, idProduct=2801, bcdDevice= 0.00 [ 50.318009][ T66] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 50.326109][ T835] usb 2-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 50.346005][ T66] usb 4-1: config 0 descriptor?? [ 50.358962][ T835] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 50.385330][ T835] usb 2-1: config 0 descriptor?? [ 50.419242][ T1294] Invalid argument reading file caps for ./file0 [ 50.448995][ T836] usb 3-1: USB disconnect, device number 3 [ 50.449024][ C0] xpad 3-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19 [ 50.463449][ C0] xpad 3-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 50.787107][ T66] prodikeys 0003:041E:2801.0009: collection stack underflow [ 50.796843][ T66] prodikeys 0003:041E:2801.0009: item 0 2 0 12 parsing failed [ 50.809377][ T66] prodikeys 0003:041E:2801.0009: hid parse failed [ 50.823826][ T835] input: HID 045e:07da as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/0003:045E:07DA.000A/input/input10 [ 50.835479][ T66] prodikeys 0003:041E:2801.0009: probe with driver prodikeys failed with error -22 [ 50.852647][ T835] microsoft 0003:045E:07DA.000A: input,hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.1-1/input0 [ 51.014389][ T835] usb 4-1: USB disconnect, device number 5 [ 51.044648][ T66] usb 2-1: USB disconnect, device number 6 [ 51.057579][ T36] kauditd_printk_skb: 3 callbacks suppressed [ 51.057592][ T36] audit: type=1400 audit(1789590106.150:491): avc: denied { unmount } for pid=295 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 51.181540][ T1301] fido_id[1301]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.1/usb2/report_descriptor': No such file or directory [ 51.545527][ T36] audit: type=1400 audit(1789590106.630:492): avc: denied { cmd } for pid=1310 comm="iou-wrk-1311" path="socket:[10075]" dev="sockfs" ino=10075 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 51.649769][ T36] audit: type=1400 audit(1789590106.710:493): avc: denied { mount } for pid=1317 comm="syz.1.421" name="/" dev="tmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 51.713856][ T1324] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 51.845789][ T36] audit: type=1400 audit(1789590106.930:494): avc: denied { bind } for pid=1330 comm="syz.1.427" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 51.951999][ T36] audit: type=1400 audit(1789590107.040:495): avc: denied { write } for pid=1340 comm="syz.3.432" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=key permissive=1 [ 52.078971][ T1353] sd 0:0:1:0: PR command failed: 1026 [ 52.103241][ T1353] sd 0:0:1:0: Sense Key : 0x5 [current] [ 52.128952][ T1353] sd 0:0:1:0: ASC=0x20 ASCQ=0x0 [ 52.436330][ T36] audit: type=1400 audit(1789590107.520:496): avc: denied { ioctl } for pid=1364 comm="syz.2.441" path="socket:[10545]" dev="sockfs" ino=10545 ioctlcmd=0x8946 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 52.655358][ T36] audit: type=1400 audit(1789590107.740:497): avc: denied { mounton } for pid=1376 comm="syz.1.446" path="/proc/207/cgroup" dev="proc" ino=10585 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=file permissive=1 [ 52.865990][ T835] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 52.946422][ T66] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 52.979797][ T36] audit: type=1400 audit(1789590108.070:498): avc: denied { read write } for pid=1389 comm="syz.3.452" name="cpu_dma_latency" dev="devtmpfs" ino=209 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:pmqos_device_t tclass=chr_file permissive=1 [ 53.024681][ T311] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 53.056468][ T835] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 53.094826][ T835] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 53.114814][ T835] usb 3-1: New USB device found, idVendor=28de, idProduct=1142, bcdDevice= 0.00 [ 53.134158][ T835] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 53.154409][ T835] usb 3-1: config 0 descriptor?? [ 53.182781][ T66] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 53.206973][ T311] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 53.218275][ T66] usb 2-1: config 1 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 53.240502][ T311] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 53.277926][ T311] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 53.304091][ T66] usb 2-1: New USB device found, idVendor=04e6, idProduct=0005, bcdDevice= 1.00 [ 53.335159][ T66] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 53.343253][ T311] usb 1-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 53.357686][ T1400] FAULT_INJECTION: forcing a failure. [ 53.357686][ T1400] name failslab, interval 1, probability 0, space 0, times 0 [ 53.376448][ T66] usb 2-1: Product: syz [ 53.385990][ T311] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 53.394268][ T66] usb 2-1: Manufacturer: syz [ 53.404264][ T1400] CPU: 0 UID: 0 PID: 1400 Comm: syz.3.456 Not tainted syzkaller #0 52749abf125da3aebe1f5771d25291006b6a1b72 [ 53.404288][ T1400] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 53.404298][ T1400] Call Trace: [ 53.404303][ T1400] [ 53.404309][ T1400] __dump_stack+0x21/0x30 [ 53.404339][ T1400] dump_stack_lvl+0x140/0x1c0 [ 53.404362][ T1400] ? __cfi_dump_stack_lvl+0x10/0x10 [ 53.404386][ T1400] ? kasan_save_alloc_info+0x3a/0x50 [ 53.404402][ T1400] dump_stack+0x19/0x20 [ 53.404424][ T1400] should_fail_ex+0x3c2/0x510 [ 53.404444][ T1400] ? sk_prot_alloc+0x104/0x3a0 [ 53.404465][ T1400] should_failslab+0xac/0x100 [ 53.404486][ T1400] __kmalloc_noprof+0x69/0x510 [ 53.404503][ T1400] ? sk_prot_alloc+0x104/0x3a0 [ 53.404524][ T1400] sk_prot_alloc+0x104/0x3a0 [ 53.404549][ T1400] ? security_socket_post_create+0x48/0x140 [ 53.404574][ T1400] sk_alloc+0x40/0x590 [ 53.404594][ T1400] __netlink_kernel_create+0x173/0x8a0 [ 53.404617][ T1400] ? __netlink_kernel_create+0x6ff/0x8a0 [ 53.404639][ T1400] ? __cfi___netlink_kernel_create+0x10/0x10 [ 53.404662][ T1400] ? __asan_memcpy+0x5a/0x80 [ 53.404679][ T1400] genl_pernet_init+0xb8/0x170 [ 53.404694][ T1400] ? __cfi_genl_pernet_init+0x10/0x10 [ 53.404709][ T1400] ? rtnetlink_net_init+0xbf/0x140 [ 53.404726][ T1400] ? __cfi_genl_rcv+0x10/0x10 [ 53.404741][ T1400] ? __cfi_genl_bind+0x10/0x10 [ 53.404755][ T1400] ? __cfi_genl_unbind+0x10/0x10 [ 53.404770][ T1400] ? __cfi_genl_release+0x10/0x10 [ 53.404785][ T1400] ? __cfi_rtnetlink_rcv+0x10/0x10 [ 53.404801][ T1400] ? __cfi_rtnetlink_bind+0x10/0x10 [ 53.404818][ T1400] ? __kasan_check_write+0x18/0x20 [ 53.404834][ T1400] ? __mutex_init+0xa6/0x1a0 [ 53.404859][ T1400] ops_init+0x2ff/0x5d0 [ 53.404874][ T1400] ? __kasan_check_write+0x18/0x20 [ 53.404890][ T1400] ? rwsem_read_trylock+0x275/0x5a0 [ 53.404915][ T1400] setup_net+0x227/0x9b0 [ 53.404929][ T1400] ? copy_net_ns+0xa20/0xa20 [ 53.404944][ T1400] ? down_read_killable+0x7f/0x100 [ 53.404965][ T1400] ? __cfi_down_read_killable+0x10/0x10 [ 53.404988][ T1400] copy_net_ns+0x4fc/0xa20 [ 53.405003][ T1400] create_new_namespaces+0x390/0x6f0 [ 53.405029][ T1400] unshare_nsproxy_namespaces+0x124/0x180 [ 53.405054][ T1400] ksys_unshare+0x4f9/0x920 [ 53.405076][ T1400] ? fput+0x1a4/0x230 [ 53.405098][ T1400] ? __cfi_ksys_unshare+0x10/0x10 [ 53.405121][ T1400] ? __kasan_check_write+0x18/0x20 [ 53.405138][ T1400] __x64_sys_unshare+0x3c/0x50 [ 53.405160][ T1400] x64_sys_call+0x2998/0x2ee0 [ 53.405175][ T1400] do_syscall_64+0x57/0xf0 [ 53.405190][ T1400] ? clear_bhb_loop+0x50/0xa0 [ 53.405210][ T1400] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 53.405229][ T1400] RIP: 0033:0x7f200699e159 [ 53.405243][ T1400] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 53.405256][ T1400] RSP: 002b:00007f20078b5028 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 53.405274][ T1400] RAX: ffffffffffffffda RBX: 00007f2006c25fa0 RCX: 00007f200699e159 [ 53.405286][ T1400] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000042040400 [ 53.405296][ T1400] RBP: 00007f2006a3506b R08: 0000000000000000 R09: 0000000000000000 [ 53.405306][ T1400] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 53.405316][ T1400] R13: 00007f2006c26038 R14: 00007f2006c25fa0 R15: 00007ffc4f95c668 [ 53.405330][ T1400] [ 53.405442][ T66] usb 2-1: SerialNumber: syz [ 53.787213][ T835] hid-steam 0003:28DE:1142.000B: unknown main item tag 0x0 [ 53.794687][ T835] hid-steam 0003:28DE:1142.000B: : USB HID v0.00 Device [HID 28de:1142] on usb-dummy_hcd.2-1/input0 [ 53.854189][ T311] usb 1-1: config 0 descriptor?? [ 53.914176][ T835] hid-steam 0003:28DE:1142.000B: Steam wireless receiver connected [ 53.923699][ T835] hid-steam 0003:28DE:1142.000B: No HID_FEATURE_REPORT submitted - nothing to read [ 53.934763][ T835] hid-steam 0003:28DE:1142.000C: unknown main item tag 0x0 [ 53.949874][ T1404] syzkaller1: entered promiscuous mode [ 53.955406][ T1404] syzkaller1: entered allmulticast mode [ 53.968773][ T835] hid-steam 0003:28DE:1142.000C: hidraw0: USB HID v0.00 Device [HID 28de:1142] on usb-dummy_hcd.2-1/input0 [ 54.043131][ T66] ums-sddr09 2-1:1.0: USB Mass Storage device detected [ 54.069320][ T66] ums-sddr09 2-1:1.0: This device (04e6,0005,0100 S 06 P 50) has an unneeded SubClass entry in unusual_devs.h (kernel syzkaller) [ 54.069320][ T66] Please send a copy of this message to and [ 54.295994][ T836] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 54.325329][ T311] plantronics 0003:047F:FFFF.000D: No inputs registered, leaving [ 54.339694][ T311] plantronics 0003:047F:FFFF.000D: hiddev96,hidraw1: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.0-1/input0 [ 54.379082][ T835] usb 3-1: USB disconnect, device number 4 [ 54.396716][ T835] hid-steam 0003:28DE:1142.000B: Steam wireless receiver disconnected [ 54.455968][ T836] usb 4-1: Using ep0 maxpacket: 16 [ 54.462410][ T836] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 54.472874][ T836] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 54.482772][ T836] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= f.89 [ 54.494064][ T836] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 54.502294][ T836] usb 4-1: SerialNumber: syz [ 54.513219][ T836] usb 4-1: 0:2 : does not exist [ 54.708004][ T835] usb 1-1: USB disconnect, device number 5 [ 54.893340][ T36] audit: type=1400 audit(1789590109.980:499): avc: denied { relabelfrom } for pid=1414 comm="syz.2.461" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tun_socket permissive=1 [ 54.915863][ T36] audit: type=1400 audit(1789590110.010:500): avc: denied { relabelto } for pid=1414 comm="syz.2.461" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tun_socket permissive=1 [ 55.046764][ T66] scsi host1: usb-storage 2-1:1.0 [ 55.066785][ T66] usb 2-1: USB disconnect, device number 7 [ 55.154222][ T65] device offline error, dev sda, sector 1350 op 0x0:(READ) flags 0x3000 phys_seg 1 prio class 2 [ 55.165006][ T1135] EXT4-fs error (device sda1): ext4_wait_block_bitmap:584: comm kworker/u8:4: Cannot read block bitmap - block_group = 1, block_bitmap = 130 [ 55.179892][ T1135] EXT4-fs (sda1): Delayed block allocation failed for inode 2021 at logical offset 0 with max blocks 1144 with error 5 [ 55.192596][ T1135] EXT4-fs (sda1): This should not happen!! Data will be lost [ 55.192596][ T1135] [ 55.212297][ T65] device offline error, dev sda, sector 1374 op 0x0:(READ) flags 0x3000 phys_seg 1 prio class 2 [ 55.279567][ T1135] EXT4-fs error (device sda1): ext4_wait_block_bitmap:584: comm kworker/u8:4: Cannot read block bitmap - block_group = 4, block_bitmap = 133 [ 55.306772][ T13] bridge_slave_1: left allmulticast mode [ 55.331420][ T13] bridge_slave_1: left promiscuous mode [ 55.361388][ T13] bridge0: port 2(bridge_slave_1) entered disabled state [ 55.368788][ T1135] EXT4-fs (sda1): Delayed block allocation failed for inode 2022 at logical offset 0 with max blocks 1 with error 5 [ 55.389086][ T836] usb 4-1: 5:0: failed to get current value for ch 0 (-22) [ 55.416495][ T13] bridge_slave_0: left allmulticast mode [ 55.422189][ T13] bridge_slave_0: left promiscuous mode [ 55.431099][ T1135] EXT4-fs (sda1): This should not happen!! Data will be lost SYZFAIL: SIGSEGV pc-offset:0xfffffffffffe9b28 pc:0x7f1b90269a08 addr:0x1 code=1 (errno 11: Resource temporarily unavailable) [ 55.431099][ T1135] [ 55.450328][ T836] usb 4-1: USB disconnect, device number 6 [ 55.469188][ T13] bridge0: port 1(bridge_slave_0) entered disabled state [ 55.497943][ T65] device offline error, dev sda, sector 1382 op 0x0:(READ) flags 0x3000 phys_seg 1 prio class 2 [ 55.508659][ T65] device offline error, dev sda, sector 1040694 op 0x1:(WRITE) flags 0x0 phys_seg 2 prio class 2 [ 55.519295][ T65] EXT4-fs warning (device sda1): ext4_end_bio:357: I/O error 16 writing to inode 2027 starting block 130086) [ 55.531060][ T53] EXT4-fs (sda1): failed to convert unwritten extents to written extents -- potential data loss! (inode 2027, error -5) [ 55.544140][ T93] device offline error, dev sda, sector 270030 op 0x0:(READ) flags 0x3000 phys_seg 1 prio class 2 [ 55.559171][ T1135] EXT4-fs error (device sda1): ext4_wait_block_bitmap:584: comm kworker/u8:4: Cannot read block bitmap - block_group = 5, block_bitmap = 134 [ 55.574077][ T53] Buffer I/O error on device sda1, logical block 130048 [ 55.586543][ T93] EXT4-fs error (device sda1): __ext4_find_entry:1647: inode #2001: comm syslogd: reading directory lblock 0 [ 55.604984][ T53] Buffer I/O error on device sda1, logical block 130049 [ 55.636165][ T1] device offline error, dev sda, sector 270030 op 0x0:(READ) flags 0x3000 phys_seg 1 prio class 2 [ 55.646925][ T1135] EXT4-fs (sda1): Delayed block allocation failed for inode 2028 at logical offset 0 with max blocks 1 with error 5 [ 55.665775][ T53] Buffer I/O error on device sda1, logical block 130050 Sep 16 20:21:50 syzkaller kern.emerg kernel: [ 55.531060][ T53] EXT4-fs (sda1): failed to convert unwritten extents to writt[ 55.687393][ T53] Buffer I/O error on device sda1, logical block 130051 en extents -- po[ 55.694605][ T53] Buffer I/O error on device sda1, logical block 130052 tential data los[ 55.703062][ T1] EXT4-fs error (device sda1): __ext4_find_entry:1647: inode #2001: comm init: reading directory lblock 0 s! (inode 2027, error -5) [ 55.719178][ T1135] EXT4-fs (sda1): This should not happen!! Data will be lost [ 55.719178][ T1135] [ 55.749477][ T1135] device offline error, dev sda, sector 1044790 op 0x1:(WRITE) flags 0x0 phys_seg 4 prio class 2 [ 55.761783][ T1] device offline error, dev sda, sector 270030 op 0x0:(READ) flags 0x3000 phys_seg 1 prio class 2 [ 55.772627][ T1135] EXT4-fs warning (device sda1): ext4_end_bio:357: I/O error 16 writing to inode 2031 starting block 130598) [ 55.784353][ T1135] device offline error, dev sda, sector 1573174 op 0x1:(WRITE) flags 0x0 phys_seg 1 prio class 2 [ 55.794904][ T1135] EXT4-fs warning (device sda1): ext4_end_bio:357: I/O error 16 writing to inode 2032 starting block 196646) [ 55.806486][ T1135] device offline error, dev sda, sector 1581358 op 0x1:(WRITE) flags 0x0 phys_seg 1 prio class 2 [ 55.817060][ T1135] EXT4-fs warning (device sda1): ext4_end_bio:357: I/O error 16 writing to inode 2032 starting block 197669) [ 55.829192][ T1135] EXT4-fs warning (device sda1): ext4_end_bio:357: I/O error 16 writing to inode 2032 starting block 198165) [ 55.842011][ T13] veth1_macvtap: left promiscuous mode [ 55.848650][ T53] EXT4-fs (sda1): failed to convert unwritten extents to written extents -- potential data loss! (inode 2031, error -5) [ 55.862597][ T93] EXT4-fs error (device sda1): __ext4_find_entry:1647: inode #2001: comm syslogd: reading directory lblock 0 [ 55.877197][ T13] veth0_vlan: left promiscuous mode [ 55.882635][ T1] EXT4-fs error (device sda1): __ext4_find_entry:1647: inode #2001: comm init: reading directory lblock 0 Sep 16 20:21:50 [ 55.896721][ T53] Buffer I/O error on device sda1, logical block 130560 syzkaller kern.e[ 55.904933][ T53] Buffer I/O error on device sda1, logical block 130561 merg kernel: [ 55.848650][ T53] EXT4-fs (sda1): failed to convert unwritten extents to written extents -- potential data loss! (inode 2031, error -5) [ 55.926485][ T1] EXT4-fs error (device sda1): __ext4_find_entry:1647: inode #2001: comm init: reading directory lblock 0 [ 55.946489][ T53] Buffer I/O error on device sda1, logical block 130562 [ 55.953473][ T53] Buffer I/O error on device sda1, logical block 130563 [ 55.967557][ T1] EXT4-fs error (device sda1): __ext4_find_entry:1647: inode #2001: comm init: reading directory lblock 0 [ 55.996441][ T53] Buffer I/O error on device sda1, logical block 130564 [ 56.003586][ T53] EXT4-fs (sda1): failed to convert unwritten extents to written extents -- potential data loss! (inode 2032, error -5) [ 56.017928][ T1] EXT4-fs error (device sda1): __ext4_find_entry:1647: inode #2001: comm init: reading directory lblock 0 Sep 16 20:21:51 [ 56.032298][ T74] Aborting journal on device sda1-8. syzkaller kern.e[ 56.038749][ T835] Buffer I/O error on dev sda1, logical block 0, lost sync page write merg kernel: [ 56.003586][ T53] EXT4-fs (sda[ 56.051526][ T835] EXT4-fs (sda1): I/O error while writing superblock 1): failed to convert unwritten [ 56.060892][ T74] Buffer I/O error on dev sda1, logical block 131072, lost sync page write extents to written extents -- potential data los[ 56.074627][ T835] Buffer I/O error on dev sda1, logical block 0, lost sync page write s! (inode 2032,[ 56.083428][ T1426] Buffer I/O error on dev sda1, logical block 145, lost async page write error -5) [ 56.092938][ T74] JBD2: I/O error when updating journal superblock for sda1-8. [ 56.103695][ T65] Buffer I/O error on dev sda1, logical block 0, lost sync page write [ 56.127703][ T13] bridge_slave_1: left allmulticast mode [ 56.133439][ T13] bridge_slave_1: left promiscuous mode [ 56.145385][ T1426] sd 0:0:1:0: [sda] Synchronizing SCSI cache [ 56.151909][ T13] bridge0: port 2(bridge_slave_1) entered disabled state [ 56.167931][ T13] bridge_slave_0: left allmulticast mode [ 56.173648][ T13] bridge_slave_0: left promiscuous mode [ 56.196031][ T13] bridge0: port 1(bridge_slave_0) entered disabled state [ 56.203795][ T13] bridge_slave_1: left allmulticast mode [ 56.216413][ T13] bridge_slave_1: left promiscuous mode [ 56.222065][ T13] bridge0: port 2(bridge_slave_1) entered disabled state [ 56.253948][ T13] bridge_slave_0: left allmulticast mode [ 56.259664][ T13] bridge_slave_0: left promiscuous mode [ 56.265279][ T13] bridge0: port 1(bridge_slave_0) entered disabled state [ 56.408567][ T13] tipc: Left network mode [ 56.417311][ T13] veth1_macvtap: left promiscuous mode [ 56.422947][ T13] veth0_vlan: left promiscuous mode [ 56.437048][ T13] veth1_macvtap: left promiscuous mode [ 56.442580][ T13] veth0_vlan: left promiscuous mode [ 56.667083][ T13] bridge_slave_1: left allmulticast mode [ 56.672767][ T13] bridge_slave_1: left promiscuous mode [ 56.678663][ T13] bridge0: port 2(bridge_slave_1) entered disabled state [ 56.686295][ T13] bridge_slave_0: left allmulticast mode [ 56.691946][ T13] bridge_slave_0: left promiscuous mode [ 56.697735][ T13] bridge0: port 1(bridge_slave_0) entered disabled state [ 56.757582][ T13] tipc: Left network mode [ 56.762658][ T13] veth1_macvtap: left promiscuous mode [ 56.768419][ T13] veth0_vlan: left promiscuous mode [ 65.308815][ T195] EXT4-fs warning (device sda1): htree_dirblock_to_tree:1083: inode #121: lblock 0: comm crond: error -5 reading directory block