last executing test programs: 35.196018839s ago: executing program 0 (id=751): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280), 0x8001, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_TSC_KHZ_vm(r1, 0xaea2, 0x10001) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f00000002c0)={0x2, 0x0, [{0x10, 0x0, 0xa00087}, {0x10, 0x0, 0x80140f}]}) 35.058135312s ago: executing program 0 (id=753): chdir(&(0x7f0000000000)='./file0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0\x00') mprotect(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x1) r0 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) capset(&(0x7f0000010000)={0x20071026}, &(0x7f0000000140)={0x0, 0x20200000, 0x8001, 0x3, 0xfffffff9, 0x200801}) setsockopt$WPAN_SECURITY_LEVEL(r0, 0x0, 0x2, &(0x7f0000001040)=0x1000007, 0x4) 35.003385634s ago: executing program 0 (id=754): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000180)={'#! ', './file0'}, 0xb) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x0, 0x10012, r0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x7) 34.960978005s ago: executing program 0 (id=756): mkdirat(0xffffffffffffff9c, &(0x7f00000021c0)='./file0\x00', 0x181) r0 = open_tree(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x80001) move_mount(r0, &(0x7f0000000100)='.\x00', 0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x0) mount$bind(&(0x7f00000001c0)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x145091, 0x0) umount2(&(0x7f0000002580)='./file0\x00', 0x9) 34.874195417s ago: executing program 0 (id=758): mkdir(&(0x7f0000000080)='./mysys\x00', 0x1ff) mount(0x0, &(0x7f00000000c0)='./mysys\x00', &(0x7f0000000100)='sysfs\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000140)='./mysys/bus/pci/devices/0000:00:01.0/enable\x00', 0x1, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000200)='fd/3\x00') read$FUSE(r0, &(0x7f0000000f40)={0x2020}, 0x2020) 34.874140347s ago: executing program 0 (id=759): remap_file_pages(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x20) mkdirat(0xffffffffffffff9c, &(0x7f00000000a0)='./dev\x00', 0x147) mount(0x0, &(0x7f00000000a0)='./dev\x00', &(0x7f00000000f0)='devtmpfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./dev/console\x00', 0x1, 0x0) ioctl$sock_inet6_tcp_SIOCINQ(r0, 0x542e, &(0x7f00000000c0)) 34.77123545s ago: executing program 32 (id=759): remap_file_pages(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x20) mkdirat(0xffffffffffffff9c, &(0x7f00000000a0)='./dev\x00', 0x147) mount(0x0, &(0x7f00000000a0)='./dev\x00', &(0x7f00000000f0)='devtmpfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./dev/console\x00', 0x1, 0x0) ioctl$sock_inet6_tcp_SIOCINQ(r0, 0x542e, &(0x7f00000000c0)) 3.558277097s ago: executing program 2 (id=1357): r0 = creat(&(0x7f00000000c0)='./file0\x00', 0xdafbe5d6891b6e4) r1 = inotify_init() inotify_add_watch(r1, &(0x7f00000001c0)='./file0\x00', 0x400017e) unlink(&(0x7f0000005cc0)='./file0\x00') write$binfmt_format(r0, &(0x7f0000000080)='1\x00', 0x2) 3.536464778s ago: executing program 2 (id=1359): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0x5001}) r1 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r1, 0x8914, &(0x7f0000000200)={'syzkaller1\x00', 0x1}) write$tun(r0, &(0x7f0000002240)={@void, @val={0x1, 0x3, 0x1c, 0x5, 0x14, 0x5}, @ipv4=@igmp={{0x5, 0x4, 0x3, 0x8, 0x1c, 0x64, 0x0, 0x2, 0x2, 0x0, @remote, @empty}, {0x11, 0x8, 0x0, @multicast1}}}, 0x26) 3.43416089s ago: executing program 2 (id=1361): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000002c0)=ANY=[@ANYBLOB="12010000090024206d041cc340000000000109022400010000a00009040000010301010009210008000122010009058103"], 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000340)={0x24, &(0x7f0000000380)=ANY=[@ANYBLOB="00000c000000070001"], 0x0, 0x0, 0x0}, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x0, 0x31, 0xffffffffffffffff, 0x0) syz_usb_control_io$uac2(r0, 0x0, &(0x7f00000004c0)={0x44, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) 2.820558076s ago: executing program 1 (id=1378): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'vlan1\x00', 0x0}) sendmsg$ETHTOOL_MSG_COALESCE_SET(r0, &(0x7f0000001480)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000003c0)={0x20, r2, 0x1, 0x70bd27, 0x2, {}, [@ETHTOOL_A_COALESCE_HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}]}]}, 0x20}, 0x1, 0x0, 0x0, 0x8000}, 0xc080) 2.730327279s ago: executing program 1 (id=1380): mkdirat(0xffffffffffffff9c, &(0x7f0000001780)='./proc\x00', 0x1ff) mount(0x0, &(0x7f00000017c0)='./proc\x00', &(0x7f0000001800)='proc\x00', 0x18800, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000001840)='./proc/sys/net/ipv6/conf/all/ioam6_enabled\x00', 0x2, 0x0) read$FUSE(r0, &(0x7f0000001880)={0x2020}, 0x2020) write$UHID_CREATE2(r0, &(0x7f0000003a00)={0xb, {'syz1\x00', 'syz0\x00', 'syz0\x00', 0x0, 0xb, 0x5, 0x8, 0x7f, 0x6}}, 0x118) 2.718110089s ago: executing program 1 (id=1381): r0 = syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000480)=ANY=[@ANYBLOB="12010000020000402505a1a440000102030109025c0002010000000904000001020d0000052406000105240000000d240f0100000000000000000006241a0000000905810a00020000000904010000020d00000904010102020d0000090582020002000000090503020002"], 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000340)={0x44, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x20, 0x80, 0x1c, {0x10, 0x10, 0x10, 0x10, 0x10, 0x10, 0x10, 0x10, 0x10, 0x10, 0x10, 0x10}}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) 1.096741082s ago: executing program 4 (id=1421): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$devlink(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_DEL(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000280)={0x14, r1, 0x1, 0x70bd2b, 0x25dfdbfd, {0x54}}, 0x14}, 0x1, 0x0, 0x0, 0x8030}, 0x50) r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000340)={0x1, &(0x7f0000000000)=[{0x6, 0xf, 0x0, 0x7fff8000}]}) close_range(r2, 0xffffffffffffffff, 0x0) 1.052089463s ago: executing program 4 (id=1423): r0 = fsopen(&(0x7f00000000c0)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x0, 0x88) r2 = openat$cgroup_int(r1, &(0x7f0000000140)='cgroup.max.depth\x00', 0x2, 0x0) sendfile(r2, r2, 0x0, 0xa004) 939.368866ms ago: executing program 4 (id=1425): r0 = fsopen(&(0x7f00000000c0)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x1, 0x84) r2 = openat$cgroup_ro(r1, &(0x7f0000000100)='cpu.stat\x00', 0x5000000, 0x0) pread64(r2, &(0x7f0000000180)=""/226, 0xe2, 0x0) 939.024946ms ago: executing program 4 (id=1426): mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000440)=@new_dev={0x4, 0x3c9, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x40}}}, &(0x7f0000000300)=0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup(r1) syz_ublk_setup_queues(r2, r0, &(0x7f0000000180)={0x0, 0xfffffffe, 0x18, 0xfffffffe, 0x2f6}, 0x0, 0x1, 0x0, 0x0) 792.76419ms ago: executing program 4 (id=1430): r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000003c0), 0x48241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000400)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r1 = socket$unix(0x1, 0x3, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r1, 0x8914, &(0x7f0000000480)={'syzkaller1\x00', 0x1}) write$tun(r0, &(0x7f00000004c0)=ANY=[@ANYBLOB="70000000ffffffffffffc52f3254eaef080045000078000060"], 0x8a) 644.322923ms ago: executing program 4 (id=1431): r0 = syz_usb_connect$cdc_ncm(0x0, 0x7a, &(0x7f00000001c0)=ANY=[@ANYBLOB="12010000020000402505a1a44000010203010902680002010040000904000001020e0000052406000105240000000d370f0100000000000000000006241a0000000c241b4800f3ff00050080050905810300020000000904010000020d00000904010102020d0000090582020004000000090503"], 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000000)={0x44, 0x0, 0x0, 0x0, &(0x7f00000009c0)={0x20, 0x80, 0x1c, {0x1, 0x24, 0x79bc, 0x5, 0x1, 0xfffd, 0x5, 0x0, 0x800, 0x75c2, 0x0, 0x6}}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) 516.585747ms ago: executing program 1 (id=1433): r0 = fsopen(&(0x7f00000001c0)='bpf\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x1, 0x0) fchdir(r1) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000340)='./cgroup.cpu/syz0\x00', 0x1ff) 464.836378ms ago: executing program 1 (id=1434): openat(0xffffffffffffff9c, &(0x7f0000000680)='./file0\x00', 0x42, 0x0) mkdir(&(0x7f00000006c0)='./bus\x00', 0x0) mount$incfs(&(0x7f0000000700)='.\x00', &(0x7f0000000740)='./bus\x00', &(0x7f0000000780), 0xc002, 0x0) chdir(&(0x7f00000007c0)='./bus\x00') listxattr(&(0x7f0000000300)='./file0\x00', 0x0, 0x0) 438.551249ms ago: executing program 1 (id=1435): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x5001}) r1 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r1, 0x8914, &(0x7f0000000100)={'syzkaller1\x00', 0x1}) write$tun(r0, &(0x7f0000000140)=ANY=[@ANYBLOB="03031b003000320006006300000000443aff00000000000000000000ffffac141419ff02000000000000000000000000000191"], 0x76) 139.836356ms ago: executing program 2 (id=1436): sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, 0x0, 0x20084884) r0 = socket$can_bcm(0x1d, 0x2, 0x2) syz_ublk_setup_queues(0xffffffffffffffff, 0x0, &(0x7f0000000040)={0x0, 0xc1, 0x1, 0xfffffffd, 0x1f7}, 0x0, 0x1, 0x0, 0x0) connect$can_bcm(r0, &(0x7f0000000180), 0x10) sendmsg$can_bcm(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="05"], 0x20000078}}, 0x0) 139.632836ms ago: executing program 3 (id=1437): r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)=ANY=[@ANYBLOB="1400000042000501"], 0x14}, 0x1, 0x0, 0x0, 0x68840}, 0x4) recvmmsg(r0, &(0x7f0000003ac0)=[{{0x0, 0x0, &(0x7f0000000140)=[{&(0x7f00000004c0)=""/4091, 0xffb}], 0x1}}], 0x1, 0x2, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000580)=ANY=[@ANYBLOB="3400000013000100000100dffddbdf25070000f61600000008000000", @ANYRES32, @ANYBLOB="14000c80"], 0x34}], 0x1, 0x0, 0x0, 0x4000}, 0x0) 104.498138ms ago: executing program 2 (id=1438): r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000040), 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000440)={{0x1, 0x0, 0x8, 0x3}}) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r0, 0x40505412, &(0x7f0000000480)={0x6, 0x20000006, 0x0, 0x0, 0xd}) ioctl$SNDRV_TIMER_IOCTL_START(r0, 0x54a0) close_range(r0, 0xffffffffffffffff, 0x400000000000000) 104.244038ms ago: executing program 3 (id=1439): r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000002c0)={'dummy0\x00', 0x0}) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000280), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_TSINFO_GET(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000900)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r3, @ANYBLOB="01002dbd7000faffffff220000000c00018008000100", @ANYRES32=r1], 0x20}, 0x1, 0x0, 0x0, 0x1}, 0x24040) 75.374648ms ago: executing program 2 (id=1440): r0 = openat$fault_inject(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/fail_page_alloc/interval\x00', 0x1, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x20702, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000140)={'syzkaller0\x00', 0xca58c30f81b6079f}) ioctl$TUNSETQUEUE(r1, 0x400454d9, &(0x7f0000000180)={'pim6reg0\x00', 0x400}) close_range(r0, 0xffffffffffffffff, 0x0) 75.056278ms ago: executing program 3 (id=1441): setuid(0xee01) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc(&(0x7f0000000000), r0) sendmsg$TIPC_CMD_SET_LINK_PRI(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)={0x68, r1, 0x1, 0xfffffffb, 0x0, {{}, {0x0, 0x400b}, {0x4c, 0x14, {0xfffffff0, @link='broadcast-link\x00'}}}}, 0x68}, 0x1, 0x0, 0x0, 0x8000}, 0x40) keyctl$session_to_parent(0x12) 45.746829ms ago: executing program 3 (id=1442): r0 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) setsockopt$SO_TIMESTAMP(r0, 0x1, 0x3e, &(0x7f00000000c0)=0x8, 0x4) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='cpuacct.stat\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r1, 0x0) write(r0, &(0x7f0000000100)="f9a9f6", 0x3) 17.87166ms ago: executing program 3 (id=1443): r0 = userfaultfd(0x801) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000000c0)) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x1}) ioctl$UFFDIO_CONTINUE(r0, 0xc020aa08, &(0x7f0000000080)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}}) madvise(&(0x7f0000e3a000/0x2000)=nil, 0x2000, 0x17) 0s ago: executing program 3 (id=1444): r0 = socket$inet(0x2, 0x3, 0x6) ioctl$sock_inet_SIOCSARP(r0, 0x8955, &(0x7f0000000000)={{0x2, 0x0, @multicast1}, {0x1, @local}, 0x4a, {0x2, 0x4e23, @dev}}) ioctl$sock_inet_SIOCSARP(0xffffffffffffffff, 0x8955, &(0x7f0000000a80)={{0x2, 0x0, @multicast1}, {0x0, @broadcast}, 0xe, {0x2, 0x4e20, @remote}, 'ip6tnl0\x00'}) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000000c0)='net/arp\x00') preadv(r1, &(0x7f0000000080)=[{&(0x7f0000000b40)=""/119, 0x77}], 0x1, 0x4000ffe, 0x0) kernel console output (not intermixed with test programs): 07f0673a25fa0 R15: 00007ffc08512798 [ 54.990968][ T2474] [ 55.176439][ T363] zydacron 0003:13EC:0006.0006: unknown main item tag 0x3 [ 55.184039][ T363] zydacron 0003:13EC:0006.0006: No inputs registered, leaving [ 55.192781][ T363] zydacron 0003:13EC:0006.0006: hidraw0: USB HID v0.00 Joystick [HID 13ec:0006] on usb-dummy_hcd.2-1/input0 [ 55.364560][ T2509] rust_binder: 2507:2509 transaction async to 2507:0 failed ENOSPC, code 0 size 0-24 line process.rs:1093 [ 55.398434][ T66] rust_binder: 2507: undelivered TRANSACTION_ERROR: 29201 [ 55.414711][ T1937] usb 3-1: USB disconnect, device number 6 [ 55.500831][ T2534] FAULT_INJECTION: forcing a failure. [ 55.500831][ T2534] name failslab, interval 1, probability 0, space 0, times 0 [ 55.524710][ T2534] CPU: 0 UID: 0 PID: 2534 Comm: syz.3.538 Not tainted syzkaller #0 ae7936ebab52aae609823c9494ba9ebab2c98923 [ 55.524767][ T2534] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 55.524785][ T2534] Call Trace: [ 55.524792][ T2534] [ 55.524802][ T2534] __dump_stack+0x21/0x30 [ 55.524845][ T2534] dump_stack_lvl+0x140/0x1c0 [ 55.524883][ T2534] ? __cfi_dump_stack_lvl+0x10/0x10 [ 55.524922][ T2534] dump_stack+0x19/0x20 [ 55.524955][ T2534] should_fail_ex+0x3c2/0x510 [ 55.524979][ T2534] ? security_sk_alloc+0x65/0x260 [ 55.525008][ T2534] should_failslab+0xac/0x100 [ 55.525034][ T2534] __kmalloc_noprof+0x69/0x510 [ 55.525067][ T2534] ? kasan_save_alloc_info+0x3a/0x50 [ 55.525099][ T2534] ? security_sk_alloc+0x65/0x260 [ 55.525127][ T2534] ? __kasan_kmalloc+0x96/0xb0 [ 55.525160][ T2534] security_sk_alloc+0x65/0x260 [ 55.525189][ T2534] sk_prot_alloc+0x123/0x3a0 [ 55.525219][ T2534] ? bpf_lsm_capable+0xd/0x20 [ 55.525249][ T2534] sk_alloc+0x40/0x590 [ 55.525276][ T2534] ? ns_capable+0x90/0xf0 [ 55.525300][ T2534] pfkey_create+0x12e/0x650 [ 55.525327][ T2534] __sock_create+0x3a2/0x810 [ 55.525356][ T2534] __sys_socket+0xe1/0x1c0 [ 55.525382][ T2534] __x64_sys_socket+0x7e/0x90 [ 55.525409][ T2534] x64_sys_call+0x2608/0x2ee0 [ 55.525434][ T2534] do_syscall_64+0x57/0xf0 [ 55.525458][ T2534] ? clear_bhb_loop+0x50/0xa0 [ 55.525494][ T2534] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 55.525528][ T2534] RIP: 0033:0x7fea67d9f559 [ 55.525549][ T2534] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 55.525572][ T2534] RSP: 002b:00007fea68b8c028 EFLAGS: 00000246 ORIG_RAX: 0000000000000029 [ 55.525599][ T2534] RAX: ffffffffffffffda RBX: 00007fea68025fa0 RCX: 00007fea67d9f559 [ 55.525617][ T2534] RDX: 0000000000000002 RSI: 0000000000000003 RDI: 000000000000000f [ 55.525632][ T2534] RBP: 00007fea67e36b20 R08: 0000000000000000 R09: 0000000000000000 [ 55.525648][ T2534] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 55.525664][ T2534] R13: 00007fea68026038 R14: 00007fea68025fa0 R15: 00007ffe84155c08 [ 55.525685][ T2534] [ 56.156878][ T2611] rust_binder: 2610:2611 transaction call to 2610:0 failed EFAULT, code 0 size 72-0 line thread.rs:1276 [ 56.172564][ T45] rust_binder: 2610: undelivered TRANSACTION_ERROR: 29201 [ 56.204848][ T2616] FAULT_INJECTION: forcing a failure. [ 56.204848][ T2616] name failslab, interval 1, probability 0, space 0, times 0 [ 56.221968][ T2616] CPU: 0 UID: 0 PID: 2616 Comm: syz.3.557 Not tainted syzkaller #0 ae7936ebab52aae609823c9494ba9ebab2c98923 [ 56.222006][ T2616] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 56.222022][ T2616] Call Trace: [ 56.222029][ T2616] [ 56.222039][ T2616] __dump_stack+0x21/0x30 [ 56.222081][ T2616] dump_stack_lvl+0x140/0x1c0 [ 56.222115][ T2616] ? __cfi_dump_stack_lvl+0x10/0x10 [ 56.222151][ T2616] dump_stack+0x19/0x20 [ 56.222183][ T2616] should_fail_ex+0x3c2/0x510 [ 56.222207][ T2616] should_failslab+0xac/0x100 [ 56.222231][ T2616] kmem_cache_alloc_noprof+0x42/0x410 [ 56.222264][ T2616] ? security_inode_alloc+0x51/0x230 [ 56.222286][ T2616] ? __cfi_make_kgid+0x10/0x10 [ 56.222318][ T2616] security_inode_alloc+0x51/0x230 [ 56.222340][ T2616] inode_init_always_gfp+0x756/0x9e0 [ 56.222362][ T2616] ? __cfi_shmem_alloc_inode+0x10/0x10 [ 56.222387][ T2616] alloc_inode+0xc5/0x270 [ 56.222410][ T2616] ? __cfi__raw_spin_lock+0x10/0x10 [ 56.222434][ T2616] new_inode+0x25/0x1e0 [ 56.222456][ T2616] shmem_get_inode+0x352/0xc10 [ 56.222481][ T2616] shmem_mknod+0x63/0x200 [ 56.222508][ T2616] vfs_mknod+0x608/0x6d0 [ 56.222534][ T2616] do_mknodat+0x38e/0x4f0 [ 56.222568][ T2616] ? do_o_path+0x220/0x220 [ 56.222612][ T2616] ? __kasan_check_write+0x18/0x20 [ 56.222645][ T2616] __x64_sys_mknodat+0xab/0xc0 [ 56.222672][ T2616] x64_sys_call+0x21b9/0x2ee0 [ 56.222696][ T2616] do_syscall_64+0x57/0xf0 [ 56.222718][ T2616] ? clear_bhb_loop+0x50/0xa0 [ 56.222748][ T2616] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 56.222777][ T2616] RIP: 0033:0x7fea67d9f559 [ 56.222795][ T2616] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 56.222815][ T2616] RSP: 002b:00007fea68b8c028 EFLAGS: 00000246 ORIG_RAX: 0000000000000103 [ 56.222839][ T2616] RAX: ffffffffffffffda RBX: 00007fea68025fa0 RCX: 00007fea67d9f559 [ 56.222857][ T2616] RDX: 0000000000006000 RSI: 0000200000000040 RDI: ffffffffffffff9c [ 56.222874][ T2616] RBP: 00007fea67e36b20 R08: 0000000000000000 R09: 0000000000000000 [ 56.222890][ T2616] R10: 0000000000000707 R11: 0000000000000246 R12: 0000000000000000 [ 56.222904][ T2616] R13: 00007fea68026038 R14: 00007fea68025fa0 R15: 00007ffe84155c08 [ 56.222925][ T2616] [ 56.246479][ T1937] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 56.515981][ T358] usb 1-1: new full-speed USB device number 8 using dummy_hcd [ 56.613000][ T1937] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 56.622779][ T1937] usb 3-1: config 1 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 56.634166][ T1937] usb 3-1: New USB device found, idVendor=0711, idProduct=0900, bcdDevice= 1.00 [ 56.643422][ T1937] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 56.651578][ T1937] usb 3-1: Product: syz [ 56.655781][ T1937] usb 3-1: Manufacturer: syz [ 56.660537][ T1937] usb 3-1: SerialNumber: syz [ 56.688575][ T358] usb 1-1: unable to read config index 0 descriptor/start: -71 [ 56.696224][ T358] usb 1-1: can't read configurations, error -71 [ 56.725946][ T66] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 56.875351][ T1937] usblp 3-1:1.0: usblp0: USB Bidirectional printer dev 7 if 0 alt 0 proto 2 vid 0x0711 pid 0x0900 [ 56.897046][ T66] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 56.908221][ T66] usb 4-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 1024 [ 56.923698][ T66] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 56.934929][ T66] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 56.943154][ T66] usb 4-1: Product: syz [ 56.953304][ T66] usb 4-1: Manufacturer: syz [ 56.958070][ T66] usb 4-1: SerialNumber: syz [ 56.964485][ T66] cdc_mbim 4-1:1.0: skipping garbage [ 57.165941][ T2634] raw-gadget.2 gadget.3: fail, usb_ep_enable returned -22 [ 57.288329][ T1937] usb 3-1: USB disconnect, device number 7 [ 57.304650][ T1937] usblp0: removed [ 57.774415][ T2634] raw-gadget.2 gadget.3: fail, usb_ep_enable returned -22 [ 57.782317][ T66] cdc_mbim 4-1:1.0: setting rx_max = 16384 [ 57.905953][ T358] usb 1-1: new high-speed USB device number 10 using dummy_hcd [ 57.991714][ T66] cdc_mbim 4-1:1.0: cdc-wdm0: USB WDM device [ 57.999057][ T66] wwan wwan0: port wwan0mbim0 attached [ 58.006969][ T66] cdc_mbim 4-1:1.0 wwan0: register 'cdc_mbim' at usb-dummy_hcd.3-1, CDC MBIM, fe:b1:3a:0b:3e:3d [ 58.024968][ T66] usb 4-1: USB disconnect, device number 7 [ 58.031492][ T66] cdc_mbim 4-1:1.0 wwan0: unregister 'cdc_mbim' usb-dummy_hcd.3-1, CDC MBIM [ 58.065940][ T358] usb 1-1: Using ep0 maxpacket: 16 [ 58.072499][ T358] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 58.086156][ T358] usb 1-1: config 1 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 96 [ 58.101095][ T66] wwan wwan0: port wwan0mbim0 disconnected [ 58.107239][ T358] usb 1-1: config 1 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 8 [ 58.129021][ T358] usb 1-1: config 1 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 18 [ 58.145110][ T358] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 58.154464][ T358] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 58.162739][ T358] usb 1-1: SerialNumber: syz [ 58.171987][ T2759] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 58.179541][ T2759] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 58.187488][ T358] hub 1-1:1.0: bad descriptor, ignoring hub [ 58.194976][ T358] hub 1-1:1.0: probe with driver hub failed with error -5 [ 58.397279][ T2759] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 58.404623][ T2759] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 58.415952][ T2055] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 58.741039][ T36] kauditd_printk_skb: 33 callbacks suppressed [ 58.741058][ T36] audit: type=1400 audit(1792715429.690:385): avc: denied { execmem } for pid=2874 comm="syz.3.581" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 58.784167][ T36] audit: type=1400 audit(1792715429.690:386): avc: denied { ioctl } for pid=2849 comm="syz.1.577" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 58.817037][ T9] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 58.836066][ T358] cdc_ether 1-1:1.0 usb0: register 'cdc_ether' at usb-dummy_hcd.0-1, CDC Ethernet Device, 42:42:42:42:42:42 [ 58.995392][ T36] audit: type=1400 audit(1792715429.940:387): avc: denied { name_bind } for pid=2902 comm="syz.2.585" src=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:reserved_port_t tclass=tcp_socket permissive=1 [ 59.029546][ T9] usb 2-1: Using ep0 maxpacket: 32 [ 59.039495][ T9] usb 2-1: config 0 has an invalid interface number: 188 but max is 0 [ 59.050037][ T9] usb 2-1: config 0 has no interface number 0 [ 59.056313][ T9] usb 2-1: config 0 interface 188 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 32 [ 59.067950][ T9] usb 2-1: New USB device found, idVendor=17ef, idProduct=7203, bcdDevice=2e.36 [ 59.083900][ T9] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 59.096700][ T9] usb 2-1: Product: syz [ 59.107540][ T9] usb 2-1: Manufacturer: syz [ 59.112390][ T9] usb 2-1: SerialNumber: syz [ 59.122087][ T9] usb 2-1: config 0 descriptor?? [ 59.127620][ T2850] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 59.149486][ T36] audit: type=1400 audit(1792715430.100:388): avc: denied { read } for pid=2919 comm="syz.2.590" name="ashmem" dev="devtmpfs" ino=201 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 59.187026][ T36] audit: type=1400 audit(1792715430.100:389): avc: denied { open } for pid=2919 comm="syz.2.590" path="/dev/ashmem" dev="devtmpfs" ino=201 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 59.214438][ T36] audit: type=1400 audit(1792715430.130:390): avc: denied { map } for pid=2919 comm="syz.2.590" path="/dev/ashmem" dev="devtmpfs" ino=201 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 59.316524][ C0] cdc_ether 1-1:1.0 usb0: CDC: unexpected notification 68! [ 59.344465][ T2850] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 59.536182][ T358] usb 1-1: USB disconnect, device number 10 [ 59.543490][ T358] cdc_ether 1-1:1.0 usb0: unregister 'cdc_ether' usb-dummy_hcd.0-1, CDC Ethernet Device [ 59.981217][ T36] audit: type=1400 audit(1792715430.930:391): avc: denied { getopt } for pid=2997 comm="syz.3.593" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 60.075289][ T3007] FAULT_INJECTION: forcing a failure. [ 60.075289][ T3007] name failslab, interval 1, probability 0, space 0, times 0 [ 60.093790][ T3007] CPU: 0 UID: 0 PID: 3007 Comm: syz.0.595 Not tainted syzkaller #0 ae7936ebab52aae609823c9494ba9ebab2c98923 [ 60.093842][ T3007] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 60.093859][ T3007] Call Trace: [ 60.093866][ T3007] [ 60.093875][ T3007] __dump_stack+0x21/0x30 [ 60.093918][ T3007] dump_stack_lvl+0x140/0x1c0 [ 60.093952][ T3007] ? __cfi_dump_stack_lvl+0x10/0x10 [ 60.093985][ T3007] ? d_add+0x49/0x70 [ 60.094017][ T3007] ? simple_lookup+0xc7/0x100 [ 60.094039][ T3007] dump_stack+0x19/0x20 [ 60.094073][ T3007] should_fail_ex+0x3c2/0x510 [ 60.094097][ T3007] should_failslab+0xac/0x100 [ 60.094120][ T3007] kmem_cache_alloc_lru_noprof+0x44/0x410 [ 60.094153][ T3007] ? alloc_inode+0xa9/0x270 [ 60.094175][ T3007] ? lookup_one_len+0x1a1/0x300 [ 60.094197][ T3007] alloc_inode+0xa9/0x270 [ 60.094220][ T3007] ? __cfi_down_write+0x10/0x10 [ 60.094251][ T3007] new_inode+0x25/0x1e0 [ 60.094274][ T3007] rust_binderfs_create_file+0xa8/0x360 [ 60.094306][ T3007] rust_binderfs_create_proc_file+0x12a/0x1a0 [ 60.094334][ T3007] ? __cfi_rust_binderfs_create_proc_file+0x10/0x10 [ 60.094362][ T3007] ? mutex_unlock+0x90/0x240 [ 60.094392][ T3007] ? _RNvMs0_NtNtCsbuTvttuFvbr_6kernel5alloc4kvecINtB5_3VecINtNtNtB9_4sync3arc3ArcNtNtCswPamI0U300_11rust_binder7context7ContextENtNtB7_9allocator8KVmallocE7reserveB1g_+0x130/0x3f0 [ 60.094455][ T3007] _RNvCswPamI0U300_11rust_binder16rust_binder_open+0x12ae/0x1d00 [ 60.094515][ T3007] ? __cfi__RNvCswPamI0U300_11rust_binder16rust_binder_open+0x10/0x10 [ 60.094556][ T3007] ? bpf_lsm_file_open+0xd/0x20 [ 60.094581][ T3007] ? __cfi__RNvCswPamI0U300_11rust_binder16rust_binder_open+0x10/0x10 [ 60.094622][ T3007] do_dentry_open+0x97c/0x1510 [ 60.094651][ T3007] vfs_open+0x86/0x240 [ 60.094677][ T3007] ? __cfi_vfs_open+0x10/0x10 [ 60.094712][ T3007] ? may_open+0x352/0x430 [ 60.094738][ T3007] path_openat+0x2c49/0x35a0 [ 60.094768][ T3007] ? kasan_save_alloc_info+0x3a/0x50 [ 60.094799][ T3007] ? getname+0x1b/0x30 [ 60.094847][ T3007] ? x64_sys_call+0xe69/0x2ee0 [ 60.094873][ T3007] ? do_syscall_64+0x57/0xf0 [ 60.094900][ T3007] ? do_filp_open+0x440/0x440 [ 60.094928][ T3007] do_filp_open+0x1f2/0x440 [ 60.094954][ T3007] ? __cfi_do_filp_open+0x10/0x10 [ 60.094984][ T3007] ? alloc_fd+0x4c1/0x570 [ 60.095022][ T3007] do_sys_openat2+0x134/0x1d0 [ 60.095050][ T3007] ? fput+0x1a4/0x230 [ 60.095076][ T3007] ? do_sys_open+0x100/0x100 [ 60.095106][ T3007] __x64_sys_openat+0x13a/0x170 [ 60.095136][ T3007] x64_sys_call+0xe69/0x2ee0 [ 60.095160][ T3007] do_syscall_64+0x57/0xf0 [ 60.095184][ T3007] ? clear_bhb_loop+0x50/0xa0 [ 60.095217][ T3007] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 60.095250][ T3007] RIP: 0033:0x7f067379f559 [ 60.095270][ T3007] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 60.095292][ T3007] RSP: 002b:00007f0674730028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 60.095318][ T3007] RAX: ffffffffffffffda RBX: 00007f0673a25fa0 RCX: 00007f067379f559 [ 60.095337][ T3007] RDX: 0000000000000000 RSI: 0000200000004700 RDI: ffffffffffffff9c [ 60.095355][ T3007] RBP: 00007f0673836b20 R08: 0000000000000000 R09: 0000000000000000 [ 60.095371][ T3007] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 60.095387][ T3007] R13: 00007f0673a26038 R14: 00007f0673a25fa0 R15: 00007ffc08512798 [ 60.095407][ T3007] [ 60.433238][ T9] asix 2-1:0.188 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71 [ 60.443425][ T9] asix 2-1:0.188 (unnamed net_device) (uninitialized): Error reading PHY_ID register: ffffffb9 [ 60.453864][ T9] asix 2-1:0.188: probe with driver asix failed with error -71 [ 60.465565][ T9] usb 2-1: USB disconnect, device number 6 [ 60.510122][ T36] audit: type=1400 audit(1792715431.460:392): avc: denied { create } for pid=3027 comm="syz.0.600" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 60.540719][ T36] audit: type=1400 audit(1792715431.480:393): avc: denied { bind } for pid=3027 comm="syz.0.600" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 60.566783][ T36] audit: type=1400 audit(1792715431.520:394): avc: denied { write } for pid=3030 comm="syz.3.602" name="udmabuf" dev="devtmpfs" ino=83 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 60.895983][ T45] usb 1-1: new high-speed USB device number 11 using dummy_hcd [ 61.068910][ T45] usb 1-1: Using ep0 maxpacket: 8 [ 61.081481][ T45] usb 1-1: config 0 has an invalid interface number: 186 but max is 0 [ 61.095337][ T45] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 61.108812][ T45] usb 1-1: config 0 has no interface number 0 [ 61.117609][ T45] usb 1-1: config 0 interface 186 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 61.130535][ T45] usb 1-1: config 0 interface 186 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 61.140667][ T45] usb 1-1: config 0 interface 186 altsetting 0 endpoint 0xC has invalid wMaxPacketSize 0 [ 61.152297][ T45] usb 1-1: New USB device found, idVendor=07c0, idProduct=1505, bcdDevice=b8.c5 [ 61.162395][ T45] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 61.173613][ T45] usb 1-1: Product: syz [ 61.178139][ T45] usb 1-1: Manufacturer: syz [ 61.182863][ T45] usb 1-1: SerialNumber: syz [ 61.188533][ T45] usb 1-1: config 0 descriptor?? [ 61.428484][ T358] usb 1-1: USB disconnect, device number 11 [ 61.617481][ T3164] FAULT_INJECTION: forcing a failure. [ 61.617481][ T3164] name failslab, interval 1, probability 0, space 0, times 0 [ 61.635337][ T3164] CPU: 1 UID: 0 PID: 3164 Comm: syz.1.625 Not tainted syzkaller #0 ae7936ebab52aae609823c9494ba9ebab2c98923 [ 61.635394][ T3164] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 61.635410][ T3164] Call Trace: [ 61.635418][ T3164] [ 61.635426][ T3164] __dump_stack+0x21/0x30 [ 61.635465][ T3164] dump_stack_lvl+0x140/0x1c0 [ 61.635498][ T3164] ? __cfi_dump_stack_lvl+0x10/0x10 [ 61.635532][ T3164] dump_stack+0x19/0x20 [ 61.635562][ T3164] should_fail_ex+0x3c2/0x510 [ 61.635584][ T3164] should_failslab+0xac/0x100 [ 61.635605][ T3164] __kmalloc_cache_noprof+0x41/0x470 [ 61.635634][ T3164] ? __kasan_kmalloc+0x96/0xb0 [ 61.635653][ T3164] ? fuse_init_fs_context+0x62/0x2a0 [ 61.635683][ T3164] fuse_init_fs_context+0x62/0x2a0 [ 61.635708][ T3164] ? __cfi_fuse_init_fs_context+0x10/0x10 [ 61.635733][ T3164] alloc_fs_context+0x5c7/0x800 [ 61.635757][ T3164] fs_context_for_mount+0x26/0x40 [ 61.635779][ T3164] __se_sys_fsopen+0xab/0x390 [ 61.635804][ T3164] __x64_sys_fsopen+0x5f/0x80 [ 61.635828][ T3164] x64_sys_call+0x2d40/0x2ee0 [ 61.635848][ T3164] do_syscall_64+0x57/0xf0 [ 61.635876][ T3164] ? clear_bhb_loop+0x50/0xa0 [ 61.635908][ T3164] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 61.635946][ T3164] RIP: 0033:0x7f3ff3d9f559 [ 61.635964][ T3164] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 61.635984][ T3164] RSP: 002b:00007f3ff4c62028 EFLAGS: 00000246 ORIG_RAX: 00000000000001ae [ 61.636007][ T3164] RAX: ffffffffffffffda RBX: 00007f3ff4025fa0 RCX: 00007f3ff3d9f559 [ 61.636023][ T3164] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000200000000180 [ 61.636037][ T3164] RBP: 00007f3ff3e36b20 R08: 0000000000000000 R09: 0000000000000000 [ 61.636051][ T3164] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 61.636064][ T3164] R13: 00007f3ff4026038 R14: 00007f3ff4025fa0 R15: 00007ffdff99f7e8 [ 61.636082][ T3164] [ 62.192380][ T3229] netlink: 104 bytes leftover after parsing attributes in process `syz.0.640'. [ 62.266507][ T3247] overlayfs: failed to create directory ./bus/work (errno: 13); mounting read-only [ 62.291517][ T3247] overlayfs: failed to get uuid (173/file1, err=-13); falling back to uuid=null. [ 62.555972][ T1937] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 62.601400][ T3291] 9pnet: p9_errstr2errno: server reported unknown error 0x000 [ 62.735938][ T1937] usb 2-1: Using ep0 maxpacket: 16 [ 62.747516][ T1937] usb 2-1: New USB device found, idVendor=0d8c, idProduct=0102, bcdDevice= 0.40 [ 62.765132][ T1937] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 62.773322][ T1937] usb 2-1: Product: syz [ 62.782766][ T1937] usb 2-1: Manufacturer: syz [ 62.787637][ T1937] usb 2-1: SerialNumber: syz [ 62.885965][ T361] usb 1-1: new full-speed USB device number 12 using dummy_hcd [ 63.057157][ T361] usb 1-1: too many endpoints for config 0 interface 0 altsetting 0: 247, using maximum allowed: 30 [ 63.078357][ T361] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 247 [ 63.096240][ T361] usb 1-1: New USB device found, idVendor=056a, idProduct=037a, bcdDevice= 0.00 [ 63.107781][ T361] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 63.117643][ T361] usb 1-1: config 0 descriptor?? [ 63.530718][ T361] wacom 0003:056A:037A.0007: unknown main item tag 0x3 [ 63.558368][ T361] wacom 0003:056A:037A.0007: Unknown device_type for 'HID 056a:037a'. Assuming pen. [ 63.586004][ T361] wacom 0003:056A:037A.0007: hidraw0: USB HID vf.ff Device [HID 056a:037a] on usb-dummy_hcd.0-1/input0 [ 63.617715][ T361] input: Wacom One by Wacom S Pen as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/0003:056A:037A.0007/input/input13 [ 63.751817][ T31] usb 1-1: USB disconnect, device number 12 [ 63.808294][ T1937] snd-usb-audio 2-1:1.0: probe with driver snd-usb-audio failed with error -71 [ 63.826632][ T1937] usb 2-1: USB disconnect, device number 7 [ 63.880385][ T3430] input: syz1 as /devices/virtual/input/input16 [ 64.095934][ T45] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 64.243330][ T3482] FAULT_INJECTION: forcing a failure. [ 64.243330][ T3482] name failslab, interval 1, probability 0, space 0, times 0 [ 64.260935][ T3482] CPU: 1 UID: 0 PID: 3482 Comm: syz.2.690 Not tainted syzkaller #0 ae7936ebab52aae609823c9494ba9ebab2c98923 [ 64.260977][ T3482] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 64.261002][ T3482] Call Trace: [ 64.261010][ T3482] [ 64.261019][ T3482] __dump_stack+0x21/0x30 [ 64.261063][ T3482] dump_stack_lvl+0x140/0x1c0 [ 64.261101][ T3482] ? __cfi_dump_stack_lvl+0x10/0x10 [ 64.261150][ T3482] dump_stack+0x19/0x20 [ 64.261184][ T3482] should_fail_ex+0x3c2/0x510 [ 64.261208][ T3482] should_failslab+0xac/0x100 [ 64.261231][ T3482] __kmalloc_cache_noprof+0x41/0x470 [ 64.261265][ T3482] ? __kasan_kmalloc+0x96/0xb0 [ 64.261287][ T3482] ? virtio_fs_init_fs_context+0xa6/0x1c0 [ 64.261325][ T3482] virtio_fs_init_fs_context+0xa6/0x1c0 [ 64.261378][ T3482] ? __cfi_virtio_fs_init_fs_context+0x10/0x10 [ 64.261416][ T3482] alloc_fs_context+0x5c7/0x800 [ 64.261443][ T3482] fs_context_for_mount+0x26/0x40 [ 64.261469][ T3482] __se_sys_fsopen+0xab/0x390 [ 64.261499][ T3482] __x64_sys_fsopen+0x5f/0x80 [ 64.261529][ T3482] x64_sys_call+0x2d40/0x2ee0 [ 64.261555][ T3482] do_syscall_64+0x57/0xf0 [ 64.261579][ T3482] ? clear_bhb_loop+0x50/0xa0 [ 64.261611][ T3482] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 64.261643][ T3482] RIP: 0033:0x7f291499f559 [ 64.261663][ T3482] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 64.261685][ T3482] RSP: 002b:00007f2915862028 EFLAGS: 00000246 ORIG_RAX: 00000000000001ae [ 64.261713][ T3482] RAX: ffffffffffffffda RBX: 00007f2914c25fa0 RCX: 00007f291499f559 [ 64.261733][ T3482] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000200000000640 [ 64.261749][ T3482] RBP: 00007f2914a36b20 R08: 0000000000000000 R09: 0000000000000000 [ 64.261764][ T3482] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 64.261780][ T3482] R13: 00007f2914c26038 R14: 00007f2914c25fa0 R15: 00007ffdae2898b8 [ 64.261802][ T3482] [ 64.523313][ T45] usb 4-1: config 0 interface 0 altsetting 5 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 64.534278][ T45] usb 4-1: config 0 interface 0 altsetting 5 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 64.547103][ T45] usb 4-1: config 0 interface 0 has no altsetting 0 [ 64.553741][ T45] usb 4-1: New USB device found, idVendor=06a3, idProduct=0cd0, bcdDevice= 0.00 [ 64.562932][ T45] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 64.581172][ T45] usb 4-1: config 0 descriptor?? [ 64.758456][ T3533] netlink: 28 bytes leftover after parsing attributes in process `syz.1.705'. [ 64.835922][ T9] usb 1-1: new full-speed USB device number 13 using dummy_hcd [ 64.997137][ T9] usb 1-1: config 0 interface 0 altsetting 13 endpoint 0x81 has invalid maxpacket 1023, setting to 64 [ 65.015459][ T9] usb 1-1: config 0 interface 0 altsetting 13 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 65.019910][ T45] input: HID 06a3:0cd0 as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/0003:06A3:0CD0.0008/input/input17 [ 65.040701][ T9] usb 1-1: config 0 interface 0 has no altsetting 0 [ 65.074478][ T9] usb 1-1: New USB device found, idVendor=045e, idProduct=00f9, bcdDevice= 0.00 [ 65.085280][ T45] saitek 0003:06A3:0CD0.0008: input,hiddev96,hidraw0: USB HID v0.00 Device [HID 06a3:0cd0] on usb-dummy_hcd.3-1/input0 [ 65.113958][ T9] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 65.122172][ T36] kauditd_printk_skb: 133 callbacks suppressed [ 65.122191][ T36] audit: type=1326 audit(1792715436.060:528): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3550 comm="syz.2.709" exe="/root/ci2-android-6-12-rust/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f291499f559 code=0x7ffc0000 [ 65.167942][ T9] usb 1-1: config 0 descriptor?? [ 65.179067][ T3508] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 65.188160][ T36] audit: type=1326 audit(1792715436.060:529): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3550 comm="syz.2.709" exe="/root/ci2-android-6-12-rust/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f291499f559 code=0x7ffc0000 [ 65.237006][ T45] usb 4-1: USB disconnect, device number 8 [ 65.245814][ T36] audit: type=1326 audit(1792715436.080:530): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3550 comm="syz.2.709" exe="/root/ci2-android-6-12-rust/syz-executor" sig=0 arch=c000003e syscall=291 compat=0 ip=0x7f291499f559 code=0x7ffc0000 [ 65.275923][ T36] audit: type=1326 audit(1792715436.080:531): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3550 comm="syz.2.709" exe="/root/ci2-android-6-12-rust/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f291499f559 code=0x7ffc0000 [ 65.305508][ T36] audit: type=1326 audit(1792715436.080:532): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3550 comm="syz.2.709" exe="/root/ci2-android-6-12-rust/syz-executor" sig=0 arch=c000003e syscall=232 compat=0 ip=0x7f291499f559 code=0x7ffc0000 [ 65.337166][ T36] audit: type=1326 audit(1792715436.080:533): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3550 comm="syz.2.709" exe="/root/ci2-android-6-12-rust/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f291499f559 code=0x7ffc0000 [ 65.631823][ T9] microsoft 0003:045E:00F9.0009: item fetching failed at offset 0/2 [ 65.642582][ T9] microsoft 0003:045E:00F9.0009: parse failed [ 65.649039][ T9] microsoft 0003:045E:00F9.0009: probe with driver microsoft failed with error -22 [ 65.682160][ T3643] WARNING! power/level is deprecated; use power/control instead [ 65.848387][ T3665] tipc: Started in network mode [ 65.856597][ T3665] tipc: Node identity ac14142f, cluster identity 4711 [ 65.863581][ T3665] tipc: New replicast peer: 172.20.20.170 [ 65.870012][ T3665] tipc: Enabled bearer , priority 10 [ 65.887215][ T3665] netlink: 52 bytes leftover after parsing attributes in process `syz.1.731'. [ 66.186376][ T36] audit: type=1400 audit(1792715437.130:534): avc: denied { mount } for pid=3698 comm="syz.2.739" name="/" dev="ramfs" ino=15831 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ramfs_t tclass=filesystem permissive=1 [ 66.277792][ T363] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 66.361072][ T9] usb 1-1: USB disconnect, device number 13 [ 66.459908][ T363] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x2 has an invalid bInterval 0, changing to 7 [ 66.496090][ T363] usb 2-1: New USB device found, idVendor=046d, idProduct=c222, bcdDevice= 0.00 [ 66.505196][ T363] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 66.671990][ T3747] kvm: user requested TSC rate below hardware speed [ 66.702324][ T3749] sit: non-ECT from 172.30.0.4 with TOS=0xcd [ 66.765835][ T36] audit: type=1400 audit(1792715437.710:535): avc: denied { setopt } for pid=3753 comm="syz.0.753" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 66.834768][ T3761] rust_binder: 3760:3761 error while translating object: ENOENT [ 66.852684][ T3761] rust_binder: 3760:3761 transaction call to 3760:0 failed ENOENT, code 0 size 72-24 line thread.rs:878 [ 66.872999][ T9] rust_binder: 3760: undelivered TRANSACTION_ERROR: 29201 [ 66.908862][ T46] bridge_slave_1: left allmulticast mode [ 66.914696][ T46] bridge_slave_1: left promiscuous mode [ 66.924944][ T46] bridge0: port 2(bridge_slave_1) entered disabled state [ 66.947809][ T363] lg-g15 0003:046D:C222.000A: hidraw0: USB HID v1.11 Device [HID 046d:c222] on usb-dummy_hcd.1-1/input0 [ 66.959120][ T46] bridge_slave_0: left allmulticast mode [ 66.965459][ T46] bridge_slave_0: left promiscuous mode [ 66.971500][ T46] bridge0: port 1(bridge_slave_0) entered disabled state [ 67.068907][ T36] audit: type=1400 audit(1792715438.020:536): avc: denied { mounton } for pid=3780 comm="syz.3.762" path="/221/file0" dev="sysfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=dir permissive=1 [ 67.113853][ T9] tipc: Node number set to 2886997039 [ 67.151370][ T46] veth1_macvtap: left promiscuous mode [ 67.157853][ T363] input: Logitech Gaming Keyboard Gaming Keys as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/0003:046D:C222.000A/input/input18 [ 67.171752][ T46] veth0_vlan: left promiscuous mode [ 67.202562][ T36] audit: type=1400 audit(1792715438.150:537): avc: denied { read write } for pid=3785 comm="syz.3.764" name="max_speed" dev="configfs" ino=15919 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=file permissive=1 [ 67.360993][ T363] lg-g15 0003:046D:C222.000A: Error getting LED brightness: -71 [ 67.370917][ T363] lg-g15 0003:046D:C222.000A: Error getting LED brightness: -71 [ 67.382436][ T363] lg-g15 0003:046D:C222.000A: Error getting LED brightness: -71 [ 67.392585][ T363] lg-g15 0003:046D:C222.000A: Error getting LED brightness: -71 [ 67.403294][ T363] lg-g15 0003:046D:C222.000A: Error getting LED brightness: -71 [ 67.412042][ T363] lg-g15 0003:046D:C222.000A: Error getting LED brightness: -71 [ 67.424060][ T3792] bridge0: port 1(bridge_slave_0) entered blocking state [ 67.430445][ T363] usb 2-1: USB disconnect, device number 8 [ 67.443869][ T3792] bridge0: port 1(bridge_slave_0) entered disabled state [ 67.465985][ T3792] bridge_slave_0: entered allmulticast mode [ 67.476851][ T3792] bridge_slave_0: entered promiscuous mode [ 67.483848][ T3792] bridge0: port 2(bridge_slave_1) entered blocking state [ 67.491187][ T3792] bridge0: port 2(bridge_slave_1) entered disabled state [ 67.496140][ T358] usb 4-1: new high-speed USB device number 9 using dummy_hcd [ 67.499335][ T3792] bridge_slave_1: entered allmulticast mode [ 67.515670][ T3792] bridge_slave_1: entered promiscuous mode [ 67.583037][ T3792] bridge0: port 2(bridge_slave_1) entered blocking state [ 67.590167][ T3792] bridge0: port 2(bridge_slave_1) entered forwarding state [ 67.597512][ T3792] bridge0: port 1(bridge_slave_0) entered blocking state [ 67.604562][ T3792] bridge0: port 1(bridge_slave_0) entered forwarding state [ 67.612013][ T9] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 67.647975][ T311] bridge0: port 1(bridge_slave_0) entered disabled state [ 67.655627][ T311] bridge0: port 2(bridge_slave_1) entered disabled state [ 67.668865][ T50] bridge0: port 1(bridge_slave_0) entered blocking state [ 67.676509][ T50] bridge0: port 1(bridge_slave_0) entered forwarding state [ 67.685279][ T311] bridge0: port 2(bridge_slave_1) entered blocking state [ 67.692374][ T311] bridge0: port 2(bridge_slave_1) entered forwarding state [ 67.708684][ T358] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 67.728639][ T358] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 67.742226][ T358] usb 4-1: New USB device found, idVendor=27b8, idProduct=01ed, bcdDevice= 0.00 [ 67.757540][ T3792] veth0_vlan: entered promiscuous mode [ 67.757584][ T358] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 67.778301][ T3792] veth1_macvtap: entered promiscuous mode [ 67.787114][ T358] usb 4-1: config 0 descriptor?? [ 67.792296][ T9] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 255, changing to 11 [ 67.804702][ T9] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 59391, setting to 1024 [ 67.822022][ T9] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 67.835916][ T9] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 67.849839][ T9] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 67.866848][ T9] usb 3-1: config 0 descriptor?? [ 67.872158][ T3799] raw-gadget.2 gadget.2: fail, usb_ep_enable returned -22 [ 67.909479][ T361] wacom 0003:056A:003F.000B: hidraw0: USB HID v0.00 Gamepad [syz0] on syz0 [ 68.285601][ T9] plantronics 0003:047F:FFFF.000D: No inputs registered, leaving [ 68.308422][ T9] plantronics 0003:047F:FFFF.000D: hiddev96,hidraw1: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.2-1/input0 [ 68.608257][ T358] hid-led 0003:27B8:01ED.000C: hidraw2: USB HID v0.00 Device [HID 27b8:01ed] on usb-dummy_hcd.3-1/input0 [ 68.644594][ T358] hid-led 0003:27B8:01ED.000C: ThingM blink(1) initialized [ 68.824087][ T358] usb 4-1: USB disconnect, device number 9 [ 69.136704][ T66] usb 2-1: new high-speed USB device number 9 using dummy_hcd [ 69.166009][ T9] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 69.297122][ T66] usb 2-1: Using ep0 maxpacket: 16 [ 69.305435][ T66] usb 2-1: config 0 has an invalid interface number: 1 but max is 0 [ 69.313860][ T66] usb 2-1: config 0 has no interface number 0 [ 69.320029][ T9] usb 5-1: Using ep0 maxpacket: 16 [ 69.325481][ T66] usb 2-1: config 0 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 69.345783][ T9] usb 5-1: config index 0 descriptor too short (expected 51443, got 18) [ 69.360960][ T66] usb 2-1: config 0 interface 1 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 69.371357][ T66] usb 2-1: New USB device found, idVendor=28bd, idProduct=0071, bcdDevice= 0.00 [ 69.380732][ T66] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 69.389600][ T9] usb 5-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 69.403359][ T66] usb 2-1: config 0 descriptor?? [ 69.417911][ T9] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 69.427145][ T9] usb 5-1: Product: syz [ 69.431459][ T9] usb 5-1: Manufacturer: syz [ 69.439045][ T9] usb 5-1: SerialNumber: syz [ 69.449733][ T9] r8152-cfgselector 5-1: Unknown version 0x0000 [ 69.456687][ T9] r8152-cfgselector 5-1: config 0 descriptor?? [ 69.753035][ T363] rust_binder: 4041: undelivered TRANSACTION_COMPLETE [ 69.766745][ T363] rust_binder: 4041: undelivered transaction 10, process died [ 69.870690][ T363] r8152-cfgselector 5-1: USB disconnect, device number 2 [ 70.045935][ T66] uclogic 0003:28BD:0071.000E: pen parameters not found [ 70.052969][ T66] uclogic 0003:28BD:0071.000E: interface is invalid, ignoring [ 70.193137][ T4093] loop7: detected capacity change from 0 to 7 [ 70.258306][ T363] usb 2-1: USB disconnect, device number 9 [ 70.395495][ T45] usb 3-1: USB disconnect, device number 8 [ 70.420343][ T36] kauditd_printk_skb: 13 callbacks suppressed [ 70.420361][ T36] audit: type=1400 audit(1792715441.370:551): avc: denied { create } for pid=4114 comm="syz.4.810" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_nflog_socket permissive=1 [ 70.759045][ T4155] FAULT_INJECTION: forcing a failure. [ 70.759045][ T4155] name failslab, interval 1, probability 0, space 0, times 0 [ 70.799327][ T4155] CPU: 1 UID: 0 PID: 4155 Comm: syz.2.820 Not tainted syzkaller #0 ae7936ebab52aae609823c9494ba9ebab2c98923 [ 70.799366][ T4155] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 70.799382][ T4155] Call Trace: [ 70.799390][ T4155] [ 70.799399][ T4155] __dump_stack+0x21/0x30 [ 70.799441][ T4155] dump_stack_lvl+0x140/0x1c0 [ 70.799476][ T4155] ? __cfi_dump_stack_lvl+0x10/0x10 [ 70.799511][ T4155] ? vfs_write+0xbcf/0xfd0 [ 70.799545][ T4155] dump_stack+0x19/0x20 [ 70.799578][ T4155] should_fail_ex+0x3c2/0x510 [ 70.799602][ T4155] should_failslab+0xac/0x100 [ 70.799624][ T4155] kmem_cache_alloc_noprof+0x42/0x410 [ 70.799657][ T4155] ? prepare_creds+0x47/0x6b0 [ 70.799685][ T4155] ? __cfi_make_kuid+0x10/0x10 [ 70.799719][ T4155] ? fput+0x1a4/0x230 [ 70.799743][ T4155] prepare_creds+0x47/0x6b0 [ 70.799771][ T4155] ? xfd_validate_state+0x68/0x140 [ 70.799806][ T4155] __sys_setreuid+0x108/0xaf0 [ 70.799836][ T4155] ? __kasan_check_write+0x18/0x20 [ 70.799867][ T4155] ? fpregs_restore_userregs+0x11c/0x260 [ 70.799899][ T4155] __x64_sys_setreuid+0x5e/0x70 [ 70.799930][ T4155] x64_sys_call+0x1132/0x2ee0 [ 70.799965][ T4155] do_syscall_64+0x57/0xf0 [ 70.799990][ T4155] ? clear_bhb_loop+0x50/0xa0 [ 70.800022][ T4155] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 70.800053][ T4155] RIP: 0033:0x7f291499f559 [ 70.800071][ T4155] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 70.800091][ T4155] RSP: 002b:00007f2915862028 EFLAGS: 00000246 ORIG_RAX: 0000000000000071 [ 70.800117][ T4155] RAX: ffffffffffffffda RBX: 00007f2914c25fa0 RCX: 00007f291499f559 [ 70.800135][ T4155] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 000000000000ee01 [ 70.800149][ T4155] RBP: 00007f2914a36b20 R08: 0000000000000000 R09: 0000000000000000 [ 70.800165][ T4155] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 70.800179][ T4155] R13: 00007f2914c26038 R14: 00007f2914c25fa0 R15: 00007ffdae2898b8 [ 70.800199][ T4155] [ 71.122852][ T4183] program syz.3.830 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 71.296042][ T45] usb 3-1: new high-speed USB device number 9 using dummy_hcd [ 71.384686][ T36] audit: type=1400 audit(1792715442.330:552): avc: denied { setopt } for pid=4236 comm="syz.3.843" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 71.457035][ T45] usb 3-1: config 17 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 71.468845][ T45] usb 3-1: config 17 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 71.489236][ T45] usb 3-1: config 17 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 71.513193][ T45] usb 3-1: New USB device found, idVendor=0458, idProduct=5003, bcdDevice= 0.00 [ 71.526786][ T45] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 72.179698][ T36] audit: type=1400 audit(1792715443.130:553): avc: denied { write } for pid=4325 comm="syz.1.858" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 72.210355][ T31] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 72.346192][ T45] aiptek 3-1:17.0: Aiptek using 400 ms programming speed [ 72.356128][ T45] input: Aiptek as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:17.0/input/input22 [ 72.390559][ T31] usb 5-1: Using ep0 maxpacket: 32 [ 72.401770][ T31] usb 5-1: too many configurations: 34, using maximum allowed: 8 [ 72.409947][ T45] usb 3-1: USB disconnect, device number 9 [ 72.418196][ T31] usb 5-1: config 0 has an invalid interface number: 16 but max is 8 [ 72.427557][ T31] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 72.436829][ T31] usb 5-1: config 0 has no interface number 0 [ 72.453329][ T31] usb 5-1: config 0 interface 16 has no altsetting 0 [ 72.461112][ T31] usb 5-1: config 0 has an invalid interface number: 16 but max is 8 [ 72.469959][ T9] usb 2-1: new high-speed USB device number 10 using dummy_hcd [ 72.476016][ T31] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 72.486905][ T31] usb 5-1: config 0 has no interface number 0 [ 72.495919][ T31] usb 5-1: config 0 interface 16 has no altsetting 0 [ 72.505558][ T31] usb 5-1: config 0 has an invalid interface number: 16 but max is 8 [ 72.514246][ T31] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 72.524472][ T31] usb 5-1: config 0 has no interface number 0 [ 72.532927][ T31] usb 5-1: config 0 interface 16 has no altsetting 0 [ 72.541442][ T31] usb 5-1: config 0 has an invalid interface number: 16 but max is 8 [ 72.549728][ T31] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 72.558920][ T31] usb 5-1: config 0 has no interface number 0 [ 72.565054][ T31] usb 5-1: config 0 interface 16 has no altsetting 0 [ 72.572962][ T31] usb 5-1: config 0 has an invalid interface number: 16 but max is 8 [ 72.581272][ T31] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 72.590434][ T31] usb 5-1: config 0 has no interface number 0 [ 72.596723][ T31] usb 5-1: config 0 interface 16 has no altsetting 0 [ 72.604452][ T31] usb 5-1: config 0 has an invalid interface number: 16 but max is 8 [ 72.613045][ T31] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 72.622223][ T31] usb 5-1: config 0 has no interface number 0 [ 72.628758][ T31] usb 5-1: config 0 interface 16 has no altsetting 0 [ 72.636524][ T31] usb 5-1: config 0 has an invalid interface number: 16 but max is 8 [ 72.644639][ T31] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 72.647521][ T9] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 72.654657][ T31] usb 5-1: config 0 has no interface number 0 [ 72.675622][ T9] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 72.683525][ T31] usb 5-1: config 0 interface 16 has no altsetting 0 [ 72.692199][ T9] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 72.707316][ T31] usb 5-1: config 0 has an invalid interface number: 16 but max is 8 [ 72.719603][ T9] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 72.719637][ T31] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 72.739588][ T31] usb 5-1: config 0 has no interface number 0 [ 72.745730][ T31] usb 5-1: config 0 interface 16 has no altsetting 0 [ 72.746207][ T9] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 72.753645][ T31] usb 5-1: New USB device found, idVendor=046d, idProduct=c24f, bcdDevice= 0.00 [ 72.769745][ T363] usb 4-1: new high-speed USB device number 10 using dummy_hcd [ 72.777613][ T36] audit: type=1400 audit(1792715443.720:554): avc: denied { read } for pid=4370 comm="syz.2.866" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 72.786744][ T9] usb 2-1: config 0 descriptor?? [ 72.797535][ T31] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 72.811691][ T31] usb 5-1: config 0 descriptor?? [ 72.846379][ T4379] device-mapper: ioctl: dm_ctl_ioctl: unknown command 0xc138fd12 [ 72.967101][ T363] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 72.985913][ T363] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 73.009945][ T363] usb 4-1: config 1 interface 0 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 0 [ 73.020679][ T363] usb 4-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 73.038842][ T363] usb 4-1: New USB device found, idVendor=05f9, idProduct=ffff, bcdDevice= 1.00 [ 73.061818][ T363] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 73.070343][ T363] usb 4-1: Product: syz [ 73.074636][ T363] usb 4-1: Manufacturer: syz [ 73.085898][ T363] usb 4-1: SerialNumber: syz [ 73.098651][ T363] usbserial_generic 4-1:1.0: The "generic" usb-serial driver is only for testing and one-off prototypes. [ 73.116696][ T363] usbserial_generic 4-1:1.0: Tell linux-usb@vger.kernel.org to add your device to a proper driver. [ 73.128068][ T363] usbserial_generic 4-1:1.0: generic converter detected [ 73.136838][ T363] usb 4-1: generic converter now attached to ttyUSB0 [ 73.238285][ T9] plantronics 0003:047F:FFFF.0010: unknown main item tag 0x0 [ 73.246381][ T9] plantronics 0003:047F:FFFF.0010: unknown main item tag 0x0 [ 73.266258][ T9] plantronics 0003:047F:FFFF.0010: No inputs registered, leaving [ 73.284804][ T9] plantronics 0003:047F:FFFF.0010: hiddev96,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.1-1/input0 [ 73.300538][ T45] usb 4-1: USB disconnect, device number 10 [ 73.309037][ T45] generic ttyUSB0: generic converter now disconnected from ttyUSB0 [ 73.328762][ T45] usbserial_generic 4-1:1.0: device disconnected [ 73.424273][ T31] usb 5-1: USB disconnect, device number 3 [ 73.456611][ T4442] overlayfs: upperdir is in-use as upperdir/workdir of another mount, accessing files from both mounts will result in undefined behavior. [ 73.470872][ T4442] overlayfs: workdir and upperdir must be separate subtrees [ 73.501896][ T311] Bluetooth: hci0: Frame reassembly failed (-84) [ 73.507419][ T45] usb 2-1: USB disconnect, device number 10 [ 73.831773][ T4489] netlink: 8 bytes leftover after parsing attributes in process `syz.3.881'. [ 73.840824][ T4489] erspan0: entered promiscuous mode [ 73.847382][ T4489] netlink: 8 bytes leftover after parsing attributes in process `syz.3.881'. [ 73.942080][ T36] audit: type=1400 audit(1792715444.890:555): avc: denied { setopt } for pid=4504 comm="syz.3.886" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 74.169237][ T4539] loop6: detected capacity change from 0 to 7 [ 74.243182][ T45] hid-generic 0000:0000:0000.0011: unknown main item tag 0x0 [ 74.274633][ T45] hid-generic 0000:0000:0000.0011: hidraw0: HID v0.00 Device [syz1] on syz0 [ 74.529143][ T36] audit: type=1400 audit(1792715445.480:556): avc: denied { setattr } for pid=4576 comm="syz.1.903" name="/" dev="sda1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon="system_u:object_r:inetd_exec_t:s0" [ 74.576762][ T4587] tipc: Started in network mode [ 74.584992][ T4587] tipc: Node identity 0010000000000000002, cluster identity 1 [ 74.625958][ T9] usb 4-1: new high-speed USB device number 11 using dummy_hcd [ 74.654944][ T36] audit: type=1400 audit(1792715445.600:557): avc: denied { listen } for pid=4595 comm="syz.4.908" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 74.712462][ T4602] FAULT_INJECTION: forcing a failure. [ 74.712462][ T4602] name failslab, interval 1, probability 0, space 0, times 0 [ 74.726810][ T4602] CPU: 0 UID: 0 PID: 4602 Comm: syz.4.910 Not tainted syzkaller #0 ae7936ebab52aae609823c9494ba9ebab2c98923 [ 74.726860][ T4602] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 74.726877][ T4602] Call Trace: [ 74.726885][ T4602] [ 74.726895][ T4602] __dump_stack+0x21/0x30 [ 74.726938][ T4602] dump_stack_lvl+0x140/0x1c0 [ 74.726976][ T4602] ? __cfi_dump_stack_lvl+0x10/0x10 [ 74.727016][ T4602] dump_stack+0x19/0x20 [ 74.727051][ T4602] should_fail_ex+0x3c2/0x510 [ 74.727075][ T4602] ? __register_sysctl_table+0x7c/0x1440 [ 74.727107][ T4602] should_failslab+0xac/0x100 [ 74.727131][ T4602] __kmalloc_noprof+0x69/0x510 [ 74.727166][ T4602] ? __register_sysctl_table+0x7c/0x1440 [ 74.727209][ T4602] __register_sysctl_table+0x7c/0x1440 [ 74.727237][ T4602] ? kasan_save_alloc_info+0x3a/0x50 [ 74.727270][ T4602] register_net_sysctl_sz+0x245/0x260 [ 74.727305][ T4602] xfrm4_net_init+0xea/0x210 [ 74.727343][ T4602] ops_init+0x302/0x5d0 [ 74.727364][ T4602] ? __kasan_check_write+0x18/0x20 [ 74.727396][ T4602] ? rwsem_read_trylock+0x275/0x5a0 [ 74.727425][ T4602] setup_net+0x227/0x9b0 [ 74.727459][ T4602] ? copy_net_ns+0xa20/0xa20 [ 74.727493][ T4602] ? down_read_killable+0x7f/0x100 [ 74.727527][ T4602] ? __cfi_down_read_killable+0x10/0x10 [ 74.727562][ T4602] copy_net_ns+0x4fc/0xa20 [ 74.727597][ T4602] create_new_namespaces+0x390/0x6f0 [ 74.727622][ T4602] unshare_nsproxy_namespaces+0x124/0x180 [ 74.727646][ T4602] ksys_unshare+0x4f9/0x920 [ 74.727680][ T4602] ? fput+0x1a4/0x230 [ 74.727706][ T4602] ? __cfi_ksys_unshare+0x10/0x10 [ 74.727741][ T4602] ? __kasan_check_write+0x18/0x20 [ 74.727793][ T4602] __x64_sys_unshare+0x3c/0x50 [ 74.727836][ T4602] x64_sys_call+0x2998/0x2ee0 [ 74.727861][ T4602] do_syscall_64+0x57/0xf0 [ 74.727886][ T4602] ? clear_bhb_loop+0x50/0xa0 [ 74.727922][ T4602] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 74.727954][ T4602] RIP: 0033:0x7efe1d59f559 [ 74.727974][ T4602] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 74.727997][ T4602] RSP: 002b:00007efe1e489028 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 74.728024][ T4602] RAX: ffffffffffffffda RBX: 00007efe1d825fa0 RCX: 00007efe1d59f559 [ 74.728044][ T4602] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000040000000 [ 74.728060][ T4602] RBP: 00007efe1d636b20 R08: 0000000000000000 R09: 0000000000000000 [ 74.728076][ T4602] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 74.728091][ T4602] R13: 00007efe1d826038 R14: 00007efe1d825fa0 R15: 00007fff3d2f1b68 [ 74.728112][ T4602] [ 75.018090][ T9] usb 4-1: config 1 interface 0 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 64 [ 75.028015][ T9] usb 4-1: config 1 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 64 [ 75.037811][ T9] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 75.048832][ T9] usb 4-1: New USB device found, idVendor=067b, idProduct=2303, bcdDevice= 1.00 [ 75.058041][ T9] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 75.070927][ T4560] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 75.078187][ T4560] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 75.086745][ T9] pl2303 4-1:1.0: pl2303 converter detected [ 75.093831][ T9] usb 4-1: pl2303 converter now attached to ttyUSB0 [ 75.169815][ T4624] Mass Storage Function, version: 2009/09/11 [ 75.176045][ T4624] LUN: removable file: (no medium) [ 75.182334][ T36] audit: type=1400 audit(1792715446.130:558): avc: denied { remove_name } for pid=4623 comm="syz.4.914" name="mass_storage.usb0" dev="configfs" ino=18696 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 75.215079][ T36] audit: type=1400 audit(1792715446.130:559): avc: denied { rmdir } for pid=4623 comm="syz.4.914" name="mass_storage.usb0" dev="configfs" ino=18696 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 75.466147][ T4560] pl2303 ttyUSB0: pl2303_get_line_request - failed: -110 [ 75.483059][ T4560] pl2303 ttyUSB0: pl2303_set_line_request - failed: -32 [ 75.491832][ T4560] pl2303 4-1:1.0: pl2303_vendor_read - failed to read [000a]: -32 [ 75.509153][ T4560] pl2303 ttyUSB0: pl2303_set_control_lines - failed: -32 [ 75.545976][ T2055] Bluetooth: hci0: command 0x1003 tx timeout [ 75.552144][ T2056] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 75.572992][ T4679] rust_binder: 4678:4679 error while translating object: EINVAL [ 75.580967][ T4679] rust_binder: 4678:4679 transaction call to 4678:0 failed EINVAL, code 0 size 112-24 line thread.rs:1007 [ 75.586070][ T36] audit: type=1400 audit(1792715446.520:560): avc: denied { write } for pid=4678 comm="syz.4.928" name="binder0" dev="binder" ino=10 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 75.592532][ T31] usb 2-1: new high-speed USB device number 11 using dummy_hcd [ 75.630350][ T45] rust_binder: 4678: undelivered TRANSACTION_ERROR: 29201 [ 75.657920][ T4684] netlink: 44 bytes leftover after parsing attributes in process `syz.4.930'. [ 75.667052][ T4684] netlink: 43 bytes leftover after parsing attributes in process `syz.4.930'. [ 75.678572][ T4684] netlink: 'syz.4.930': attribute type 6 has an invalid length. [ 75.686493][ T4684] netlink: 'syz.4.930': attribute type 5 has an invalid length. [ 75.694336][ T4684] netlink: 43 bytes leftover after parsing attributes in process `syz.4.930'. [ 75.777964][ T36] audit: type=1326 audit(1792715446.730:561): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4690 comm="syz.2.932" exe="/root/ci2-android-6-12-rust/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f291499f559 code=0x7ffc0000 [ 75.804898][ T36] audit: type=1326 audit(1792715446.730:562): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4690 comm="syz.2.932" exe="/root/ci2-android-6-12-rust/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f291499f559 code=0x7ffc0000 [ 75.830207][ T4559] pl2303 ttyUSB0: pl2303_set_control_lines - failed: -32 [ 75.839278][ T4559] pl2303 ttyUSB0: error sending break = -32 [ 75.845903][ T31] usb 2-1: Using ep0 maxpacket: 32 [ 75.846259][ T9] usb 4-1: USB disconnect, device number 11 [ 75.863840][ T31] usb 2-1: config 0 has an invalid interface number: 196 but max is 0 [ 75.882390][ T36] audit: type=1326 audit(1792715446.730:563): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4690 comm="syz.2.932" exe="/root/ci2-android-6-12-rust/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f291499f559 code=0x7ffc0000 [ 75.886267][ T31] usb 2-1: config 0 has no interface number 0 [ 75.910612][ T36] audit: type=1326 audit(1792715446.730:564): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4690 comm="syz.2.932" exe="/root/ci2-android-6-12-rust/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f291499f559 code=0x7ffc0000 [ 75.939310][ T9] pl2303 ttyUSB0: pl2303 converter now disconnected from ttyUSB0 [ 75.949406][ T9] pl2303 4-1:1.0: device disconnected [ 75.954589][ T31] usb 2-1: config 0 interface 196 altsetting 1 bulk endpoint 0x2 has invalid maxpacket 528 [ 75.965810][ T36] audit: type=1326 audit(1792715446.730:565): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4690 comm="syz.2.932" exe="/root/ci2-android-6-12-rust/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f291499f559 code=0x7ffc0000 [ 75.985568][ T31] usb 2-1: config 0 interface 196 has no altsetting 0 [ 75.999102][ T36] audit: type=1326 audit(1792715446.760:566): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4690 comm="syz.2.932" exe="/root/ci2-android-6-12-rust/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f291499f559 code=0x7ffc0000 [ 76.022196][ T31] usb 2-1: New USB device found, idVendor=05ac, idProduct=7700, bcdDevice=eb.3a [ 76.031728][ T36] audit: type=1326 audit(1792715446.760:567): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4690 comm="syz.2.932" exe="/root/ci2-android-6-12-rust/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f291499f559 code=0x7ffc0000 [ 76.055984][ T31] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 76.066308][ T36] audit: type=1326 audit(1792715446.760:568): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4690 comm="syz.2.932" exe="/root/ci2-android-6-12-rust/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f291499f559 code=0x7ffc0000 [ 76.091773][ T36] audit: type=1326 audit(1792715446.770:569): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4690 comm="syz.2.932" exe="/root/ci2-android-6-12-rust/syz-executor" sig=0 arch=c000003e syscall=42 compat=0 ip=0x7f291499f559 code=0x7ffc0000 [ 76.095555][ T31] usb 2-1: Product: syz [ 76.143705][ T31] usb 2-1: Manufacturer: syz [ 76.150101][ T31] usb 2-1: SerialNumber: syz [ 76.158614][ T31] usb 2-1: config 0 descriptor?? [ 76.165537][ T4652] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 76.738272][ T4764] capability: warning: `syz.3.946' uses 32-bit capabilities (legacy support in use) [ 76.781344][ T31] ipheth 2-1:0.196: ipheth_enable_ncm: usb_control_msg: 0 [ 76.793660][ T31] ipheth 2-1:0.196: Apple iPhone USB Ethernet device attached [ 76.878534][ T4781] batadv_slave_1: entered promiscuous mode [ 76.885237][ T4780] batadv_slave_1: left promiscuous mode [ 77.033306][ C0] ipheth 2-1:0.196: ipheth_rcvbulk_callback: callback retval: -22 [ 77.086234][ T66] usb 4-1: new high-speed USB device number 12 using dummy_hcd [ 77.233954][ T9] usb 2-1: USB disconnect, device number 11 [ 77.254269][ T66] usb 4-1: config 3 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 77.269136][ T66] usb 4-1: config 3 interface 1 altsetting 0 endpoint 0x82 has invalid maxpacket 16896, setting to 1024 [ 77.282557][ T66] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a7, bcdDevice= 1.00 [ 77.294774][ T9] ipheth 2-1:0.196: Apple iPhone USB Ethernet now disconnected [ 77.304727][ T66] usb 4-1: New USB device strings: Mfr=128, Product=0, SerialNumber=0 [ 77.316110][ T66] usb 4-1: Manufacturer: syz [ 77.326196][ T66] cdc_acm 4-1:3.0: skipping garbage [ 77.535455][ T66] cdc_acm 4-1:3.0: ttyACM0: USB ACM device [ 77.743541][ T4777] cdc_acm 4-1:3.1: urb 0 failed submission with -22 [ 77.769669][ T66] usb 4-1: USB disconnect, device number 12 [ 77.813210][ T9] logitech-hidpp-device 0005:046D:B012.0012: hidraw0: BLUETOOTH HID v0.00 Device [syz0] on syz1 [ 77.867049][ T4894] fido_id[4894]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 77.912627][ T4909] overlayfs: invalid origin (0000) [ 78.421616][ T4984] size and base must be multiples of 4 kiB [ 78.427599][ T4984] CPU: 0 UID: 0 PID: 4984 Comm: syz.3.994 Not tainted syzkaller #0 ae7936ebab52aae609823c9494ba9ebab2c98923 [ 78.427637][ T4984] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 78.427655][ T4984] Call Trace: [ 78.427663][ T4984] [ 78.427672][ T4984] __dump_stack+0x21/0x30 [ 78.427716][ T4984] dump_stack_lvl+0x140/0x1c0 [ 78.427753][ T4984] ? __cfi_dump_stack_lvl+0x10/0x10 [ 78.427790][ T4984] ? __cfi_futex_wait+0x10/0x10 [ 78.427822][ T4984] dump_stack+0x19/0x20 [ 78.427857][ T4984] mtrr_del+0xcd/0xf0 [ 78.427887][ T4984] mtrr_ioctl+0xbf8/0x1170 [ 78.427917][ T4984] ? do_futex+0x32a/0x510 [ 78.427940][ T4984] ? __cfi_mtrr_ioctl+0x10/0x10 [ 78.427973][ T4984] ? __fget_files+0x2bc/0x330 [ 78.427996][ T4984] ? __cfi_mtrr_ioctl+0x10/0x10 [ 78.428027][ T4984] proc_reg_unlocked_ioctl+0x1f6/0x2f0 [ 78.428064][ T4984] ? __cfi_proc_reg_unlocked_ioctl+0x10/0x10 [ 78.428100][ T4984] __se_sys_ioctl+0x126/0x1b0 [ 78.428125][ T4984] __x64_sys_ioctl+0x7f/0xa0 [ 78.428149][ T4984] x64_sys_call+0x1878/0x2ee0 [ 78.428174][ T4984] do_syscall_64+0x57/0xf0 [ 78.428198][ T4984] ? clear_bhb_loop+0x50/0xa0 [ 78.428232][ T4984] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 78.428265][ T4984] RIP: 0033:0x7fea67d9f559 [ 78.428285][ T4984] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 78.428307][ T4984] RSP: 002b:00007fea68b8c028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 78.428335][ T4984] RAX: ffffffffffffffda RBX: 00007fea68025fa0 RCX: 00007fea67d9f559 [ 78.428354][ T4984] RDX: 0000200000000240 RSI: 00000000400c4d04 RDI: 0000000000000003 [ 78.428371][ T4984] RBP: 00007fea67e36b20 R08: 0000000000000000 R09: 0000000000000000 [ 78.428387][ T4984] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 78.428402][ T4984] R13: 00007fea68026038 R14: 00007fea68025fa0 R15: 00007ffe84155c08 [ 78.428423][ T4984] [ 78.470778][ T4958] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input23 [ 78.680609][ T4996] netlink: 24 bytes leftover after parsing attributes in process `syz.4.997'. [ 78.693077][ T4996] netlink: 24 bytes leftover after parsing attributes in process `syz.4.997'. [ 79.049119][ T5061] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 79.072432][ T66] rust_binder: 5059: undelivered TRANSACTION_ERROR: 29189 [ 79.080477][ T5061] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 79.111996][ T5061] overlayfs: inode number too big (/, ino=4611686018427387905, xinobits=3) [ 79.373339][ T5103] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1026'. [ 79.476814][ T5121] rust_binder: Write failure EFAULT in pid:528 [ 79.485906][ T66] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 79.547706][ T5135] rust_binder: 5134:5135 FDA parent offset not aligned correctly [ 79.555509][ T5135] rust_binder: 5134:5135 error while translating object: EINVAL [ 79.566035][ T5135] rust_binder: 5134:5135 transaction call to 5134:0 failed EINVAL, code 0 size 96-24 line thread.rs:1004 [ 79.610320][ T5143] Invalid argument reading file caps for ./file0 [ 79.663218][ T66] usb 5-1: Using ep0 maxpacket: 16 [ 79.671717][ T66] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 79.685961][ T66] usb 5-1: config 1 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 96 [ 79.707056][ T66] usb 5-1: config 1 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 8 [ 79.718869][ T66] usb 5-1: config 1 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 18 [ 79.735961][ T45] usb 4-1: new high-speed USB device number 13 using dummy_hcd [ 79.744025][ T66] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 79.758252][ T66] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 79.774875][ T66] usb 5-1: SerialNumber: syz [ 79.786225][ T5089] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 79.793441][ T5089] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 79.802503][ T66] hub 5-1:1.0: bad descriptor, ignoring hub [ 79.808480][ T66] hub 5-1:1.0: probe with driver hub failed with error -5 [ 79.884863][ T5172] Invalid argument reading file caps for ./file0 [ 79.895909][ T45] usb 4-1: Using ep0 maxpacket: 16 [ 79.906802][ T45] usb 4-1: config 0 interface 0 altsetting 1 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 79.924123][ T45] usb 4-1: config 0 interface 0 altsetting 1 endpoint 0x81 has invalid wMaxPacketSize 0 [ 79.934289][ T45] usb 4-1: config 0 interface 0 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 79.969632][ T45] usb 4-1: config 0 interface 0 has no altsetting 0 [ 79.989653][ T45] usb 4-1: New USB device found, idVendor=046d, idProduct=c215, bcdDevice= 0.00 [ 80.004676][ T5089] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 80.005944][ T45] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 80.020380][ T5089] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 80.028324][ T45] usb 4-1: config 0 descriptor?? [ 80.442112][ T66] cdc_ether 5-1:1.0 usb0: register 'cdc_ether' at usb-dummy_hcd.4-1, CDC Ethernet Device, 42:42:42:42:42:42 [ 80.461482][ T45] input: HID 046d:c215 as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/0003:046D:C215.0013/input/input24 [ 80.506100][ T45] logitech 0003:046D:C215.0013: input,hiddev96,hidraw0: USB HID v0.00 Device [HID 046d:c215] on usb-dummy_hcd.3-1/input0 [ 80.599361][ T66] smpboot: CPU 1 is now offline [ 80.608160][ T5241] smpboot: Booting Node 0 Processor 1 APIC 0x1 [ 80.672772][ T9] usb 4-1: USB disconnect, device number 13 [ 81.025944][ T66] usb 3-1: new high-speed USB device number 10 using dummy_hcd [ 81.175905][ T66] usb 3-1: Using ep0 maxpacket: 32 [ 81.182160][ T66] usb 3-1: config index 0 descriptor too short (expected 164, got 36) [ 81.197010][ T66] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 81.220268][ T66] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 81.239839][ T66] usb 3-1: New USB device found, idVendor=046d, idProduct=c29c, bcdDevice= 0.00 [ 81.254953][ T5275] input: syz1 as /devices/virtual/input/input25 [ 81.261453][ T66] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 81.271972][ T66] usb 3-1: config 0 descriptor?? [ 81.554873][ T5294] FAULT_INJECTION: forcing a failure. [ 81.554873][ T5294] name fail_futex, interval 1, probability 0, space 0, times 1 [ 81.581051][ T5294] CPU: 0 UID: 0 PID: 5294 Comm: syz.1.1072 Not tainted syzkaller #0 ae7936ebab52aae609823c9494ba9ebab2c98923 [ 81.581078][ T5294] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 81.581092][ T5294] Call Trace: [ 81.581097][ T5294] [ 81.581104][ T5294] __dump_stack+0x21/0x30 [ 81.581133][ T5294] dump_stack_lvl+0x140/0x1c0 [ 81.581157][ T5294] ? __cfi_dump_stack_lvl+0x10/0x10 [ 81.581206][ T5294] dump_stack+0x19/0x20 [ 81.581230][ T5294] should_fail_ex+0x3c2/0x510 [ 81.581247][ T5294] should_fail+0xf/0x20 [ 81.581261][ T5294] get_futex_key+0x178/0x940 [ 81.581276][ T5294] ? __cfi___futex_wait+0x10/0x10 [ 81.581296][ T5294] ? __cfi_get_futex_key+0x10/0x10 [ 81.581310][ T5294] ? __cfi_futex_wake_mark+0x10/0x10 [ 81.581330][ T5294] futex_wake+0x150/0x950 [ 81.581350][ T5294] ? futex_wait+0x2b8/0x7c0 [ 81.581369][ T5294] ? __cfi_futex_wake+0x10/0x10 [ 81.581390][ T5294] ? vfs_write+0xbcf/0xfd0 [ 81.581413][ T5294] do_futex+0x37d/0x510 [ 81.581429][ T5294] ? __cfi_do_futex+0x10/0x10 [ 81.581444][ T5294] ? mutex_unlock+0x90/0x240 [ 81.581466][ T5294] __se_sys_futex+0x13c/0x320 [ 81.581481][ T5294] ? fput+0x1a4/0x230 [ 81.581498][ T5294] ? __x64_sys_futex+0x110/0x110 [ 81.581515][ T5294] ? __kasan_check_write+0x18/0x20 [ 81.581538][ T5294] __x64_sys_futex+0xe9/0x110 [ 81.581554][ T5294] x64_sys_call+0x227f/0x2ee0 [ 81.581570][ T5294] do_syscall_64+0x57/0xf0 [ 81.581585][ T5294] ? clear_bhb_loop+0x50/0xa0 [ 81.581608][ T5294] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 81.581628][ T5294] RIP: 0033:0x7f3ff3d9f559 [ 81.581641][ T5294] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 81.581655][ T5294] RSP: 002b:00007f3ff4c62028 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 81.581672][ T5294] RAX: ffffffffffffffda RBX: 00007f3ff4025fa0 RCX: 00007f3ff3d9f559 [ 81.581684][ T5294] RDX: 0000000000400000 RSI: 0000000000000001 RDI: 0000000000000000 [ 81.581694][ T5294] RBP: 00007f3ff3e36b20 R08: 0000000000000000 R09: 00000000ffffffec [ 81.581704][ T5294] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 81.581714][ T5294] R13: 00007f3ff4026038 R14: 00007f3ff4025fa0 R15: 00007ffdff99f7e8 [ 81.581728][ T5294] [ 81.817193][ T5299] input: syz0 as /devices/virtual/input/input26 [ 81.825524][ T36] kauditd_printk_skb: 19 callbacks suppressed [ 81.825542][ T36] audit: type=1400 audit(1792715452.770:589): avc: denied { append } for pid=5298 comm="syz.4.1074" name="event3" dev="devtmpfs" ino=667 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 81.829109][ T66] logitech 0003:046D:C29C.0014: unknown main item tag 0x0 [ 81.861522][ T66] logitech 0003:046D:C29C.0014: unknown main item tag 0x0 [ 81.869335][ T66] logitech 0003:046D:C29C.0014: unknown main item tag 0x0 [ 81.876562][ T66] logitech 0003:046D:C29C.0014: unknown main item tag 0x0 [ 81.883674][ T66] logitech 0003:046D:C29C.0014: unknown main item tag 0x0 [ 81.891705][ T66] logitech 0003:046D:C29C.0014: hidraw0: USB HID v0.00 Device [HID 046d:c29c] on usb-dummy_hcd.2-1/input0 [ 81.950764][ T5307] rust_binder: 5306:5307 error while translating object: EINVAL [ 81.958646][ T5307] rust_binder: 5306:5307 transaction call to 5306:0 failed EINVAL, code 4294967293 size 80-24 line thread.rs:867 [ 81.990803][ T358] rust_binder: 5306: undelivered TRANSACTION_ERROR: 29201 [ 82.241368][ T66] logitech 0003:046D:C29C.0014: no inputs found [ 82.250056][ T66] usb 3-1: USB disconnect, device number 10 [ 82.772301][ T36] audit: type=1400 audit(1792715453.720:590): avc: denied { wake_alarm } for pid=5330 comm="syz.2.1087" capability=35 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 83.101494][ T36] audit: type=1400 audit(1792715454.050:591): avc: denied { map } for pid=5345 comm="syz.2.1093" path="/dev/bus/usb/006/001" dev="devtmpfs" ino=111 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 84.169752][ T361] usb 5-1: USB disconnect, device number 4 [ 84.179657][ T5325] batadv_slave_1: entered promiscuous mode [ 84.187403][ T361] cdc_ether 5-1:1.0 usb0: unregister 'cdc_ether' usb-dummy_hcd.4-1, CDC Ethernet Device [ 84.198310][ T5327] batadv_slave_1: left promiscuous mode [ 84.204167][ T5353] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1096'. [ 84.348795][ T5382] rust_binder: 5377:5382 BC_CLEAR_FREEZE_NOTIFICATION freeze notification not active [ 84.387393][ T5382] rust_binder: Write failure EINVAL in pid:204 [ 84.394252][ T5389] FAULT_INJECTION: forcing a failure. [ 84.394252][ T5389] name failslab, interval 1, probability 0, space 0, times 0 [ 84.442834][ T5389] CPU: 0 UID: 0 PID: 5389 Comm: syz.1.1105 Not tainted syzkaller #0 ae7936ebab52aae609823c9494ba9ebab2c98923 [ 84.442883][ T5389] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 84.442897][ T5389] Call Trace: [ 84.442904][ T5389] [ 84.442912][ T5389] __dump_stack+0x21/0x30 [ 84.442950][ T5389] dump_stack_lvl+0x140/0x1c0 [ 84.442982][ T5389] ? __cfi_dump_stack_lvl+0x10/0x10 [ 84.443015][ T5389] ? __kasan_check_read+0x15/0x20 [ 84.443045][ T5389] ? futex_wake+0x627/0x950 [ 84.443072][ T5389] dump_stack+0x19/0x20 [ 84.443104][ T5389] should_fail_ex+0x3c2/0x510 [ 84.443125][ T5389] should_failslab+0xac/0x100 [ 84.443146][ T5389] kmem_cache_alloc_noprof+0x42/0x410 [ 84.443175][ T5389] ? do_timer_create+0x1a8/0x1260 [ 84.443208][ T5389] ? vfs_write+0xbcf/0xfd0 [ 84.443237][ T5389] do_timer_create+0x1a8/0x1260 [ 84.443269][ T5389] ? do_futex+0x32a/0x510 [ 84.443291][ T5389] ? __cfi_do_futex+0x10/0x10 [ 84.443312][ T5389] ? mutex_unlock+0x90/0x240 [ 84.443340][ T5389] ? __ia32_sys_clock_nanosleep_time32+0xc0/0xc0 [ 84.443374][ T5389] ? __se_sys_futex+0x13c/0x320 [ 84.443396][ T5389] ? fput+0x1a4/0x230 [ 84.443419][ T5389] __x64_sys_timer_create+0x14d/0x1c0 [ 84.443447][ T5389] ? xfd_validate_state+0x68/0x140 [ 84.443480][ T5389] ? __cfi___x64_sys_timer_create+0x10/0x10 [ 84.443518][ T5389] ? __kasan_check_write+0x18/0x20 [ 84.443547][ T5389] ? fpregs_restore_userregs+0x11c/0x260 [ 84.443595][ T5389] ? switch_fpu_return+0x12/0x20 [ 84.443625][ T5389] x64_sys_call+0x2704/0x2ee0 [ 84.443649][ T5389] do_syscall_64+0x57/0xf0 [ 84.443671][ T5389] ? clear_bhb_loop+0x50/0xa0 [ 84.443702][ T5389] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 84.443731][ T5389] RIP: 0033:0x7f3ff3d9f559 [ 84.443749][ T5389] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 84.443770][ T5389] RSP: 002b:00007f3ff4c62028 EFLAGS: 00000246 ORIG_RAX: 00000000000000de [ 84.443795][ T5389] RAX: ffffffffffffffda RBX: 00007f3ff4025fa0 RCX: 00007f3ff3d9f559 [ 84.443812][ T5389] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000002 [ 84.443826][ T5389] RBP: 00007f3ff3e36b20 R08: 0000000000000000 R09: 0000000000000000 [ 84.443841][ T5389] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 84.443855][ T5389] R13: 00007f3ff4026038 R14: 00007f3ff4025fa0 R15: 00007ffdff99f7e8 [ 84.443876][ T5389] [ 84.697850][ T5408] overlayfs: failed to create directory ./bus/work (errno: 13); mounting read-only [ 84.708604][ T5408] incfs: Can't find or create .index dir in ./file0 [ 84.715278][ T5408] incfs: mount failed -30 [ 84.876248][ T5444] input: syz1 as /devices/virtual/input/input27 [ 85.116462][ T5482] FAULT_INJECTION: forcing a failure. [ 85.116462][ T5482] name failslab, interval 1, probability 0, space 0, times 0 [ 85.156706][ T5482] CPU: 0 UID: 0 PID: 5482 Comm: syz.3.1127 Not tainted syzkaller #0 ae7936ebab52aae609823c9494ba9ebab2c98923 [ 85.156745][ T5482] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 85.156761][ T5482] Call Trace: [ 85.156769][ T5482] [ 85.156778][ T5482] __dump_stack+0x21/0x30 [ 85.156818][ T5482] dump_stack_lvl+0x140/0x1c0 [ 85.156852][ T5482] ? __cfi_dump_stack_lvl+0x10/0x10 [ 85.156886][ T5482] ? do_syscall_64+0x57/0xf0 [ 85.156911][ T5482] dump_stack+0x19/0x20 [ 85.156945][ T5482] should_fail_ex+0x3c2/0x510 [ 85.156969][ T5482] should_failslab+0xac/0x100 [ 85.156993][ T5482] kmem_cache_alloc_noprof+0x42/0x410 [ 85.157041][ T5482] ? __proc_create+0x535/0xb40 [ 85.157076][ T5482] __proc_create+0x535/0xb40 [ 85.157107][ T5482] ? proc_symlink+0x2d0/0x2d0 [ 85.157140][ T5482] ? __kasan_check_write+0x18/0x20 [ 85.157172][ T5482] ? _raw_write_lock+0x92/0xf0 [ 85.157198][ T5482] proc_create_reg+0x9a/0x120 [ 85.157233][ T5482] proc_create_net_data+0x99/0x1b0 [ 85.157272][ T5482] ? __cfi_proc_create_net_data+0x10/0x10 [ 85.157307][ T5482] nf_log_net_init+0x69/0x750 [ 85.157342][ T5482] ops_init+0x302/0x5d0 [ 85.157364][ T5482] ? __kasan_check_write+0x18/0x20 [ 85.157403][ T5482] ? rwsem_read_trylock+0x275/0x5a0 [ 85.157435][ T5482] setup_net+0x227/0x9b0 [ 85.157471][ T5482] ? copy_net_ns+0xa20/0xa20 [ 85.157507][ T5482] ? down_read_killable+0x7f/0x100 [ 85.157539][ T5482] ? __cfi_down_read_killable+0x10/0x10 [ 85.157575][ T5482] copy_net_ns+0x4fc/0xa20 [ 85.157610][ T5482] create_new_namespaces+0x390/0x6f0 [ 85.157635][ T5482] unshare_nsproxy_namespaces+0x124/0x180 [ 85.157659][ T5482] ksys_unshare+0x4f9/0x920 [ 85.157693][ T5482] ? fput+0x1a4/0x230 [ 85.157722][ T5482] ? __cfi_ksys_unshare+0x10/0x10 [ 85.157756][ T5482] ? __kasan_check_write+0x18/0x20 [ 85.157788][ T5482] __x64_sys_unshare+0x3c/0x50 [ 85.157821][ T5482] x64_sys_call+0x2998/0x2ee0 [ 85.157845][ T5482] do_syscall_64+0x57/0xf0 [ 85.157880][ T5482] ? clear_bhb_loop+0x50/0xa0 [ 85.157912][ T5482] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 85.157941][ T5482] RIP: 0033:0x7fea67d9f559 [ 85.157960][ T5482] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 85.157980][ T5482] RSP: 002b:00007fea68b8c028 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 85.158005][ T5482] RAX: ffffffffffffffda RBX: 00007fea68025fa0 RCX: 00007fea67d9f559 [ 85.158023][ T5482] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000040000000 [ 85.158037][ T5482] RBP: 00007fea67e36b20 R08: 0000000000000000 R09: 0000000000000000 [ 85.158051][ T5482] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 85.158065][ T5482] R13: 00007fea68026038 R14: 00007fea68025fa0 R15: 00007ffe84155c08 [ 85.158084][ T5482] [ 85.631924][ T5511] MTRR 1 not used [ 85.798299][ T5554] vcan0: entered allmulticast mode [ 85.798388][ T36] audit: type=1400 audit(1792715456.750:592): avc: denied { ioctl } for pid=5550 comm="syz.2.1140" path="socket:[22975]" dev="sockfs" ino=22975 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 85.814961][ T5554] vcan0: left allmulticast mode [ 85.865981][ T5554] bridge0: left allmulticast mode [ 86.025936][ T66] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 86.091997][ T5603] rust_binder: Read failure Err(EFAULT) in pid:608 [ 86.140911][ T5609] serio: Serial port ptm0 [ 86.145693][ T5612] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 86.176018][ T66] usb 5-1: Using ep0 maxpacket: 32 [ 86.182572][ T66] usb 5-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 86.195464][ T66] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 86.206660][ T66] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 86.220002][ T66] usb 5-1: New USB device found, idVendor=0fc5, idProduct=b080, bcdDevice= 0.00 [ 86.229275][ T66] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 86.239842][ T66] usb 5-1: config 0 descriptor?? [ 86.652453][ T66] hid-led 0003:0FC5:B080.0015: unknown main item tag 0x0 [ 86.659795][ T66] hid-led 0003:0FC5:B080.0015: unknown main item tag 0x0 [ 86.667198][ T66] hid-led 0003:0FC5:B080.0015: unknown main item tag 0x0 [ 86.674359][ T66] hid-led 0003:0FC5:B080.0015: unknown main item tag 0x0 [ 86.681813][ T66] hid-led 0003:0FC5:B080.0015: unknown main item tag 0x0 [ 86.690188][ T66] hid-led 0003:0FC5:B080.0015: unknown main item tag 0x0 [ 87.007045][ T36] audit: type=1400 audit(1792715457.960:593): avc: denied { ioctl } for pid=5707 comm="syz.1.1164" path="/285/tracing/per_cpu/cpu0/trace_pipe_raw" dev="tracefs" ino=96 ioctlcmd=0x8982 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=file permissive=1 [ 87.238493][ T5745] device-mapper: ioctl: only supply one of name or uuid, cmd(14) [ 87.258997][ T66] usb 5-1: USB disconnect, device number 5 [ 87.355985][ T358] usb 2-1: new high-speed USB device number 12 using dummy_hcd [ 87.483361][ T36] audit: type=1400 audit(1792715458.430:594): avc: denied { name_bind } for pid=5778 comm="syz.2.1178" src=65504 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=rawip_socket permissive=1 [ 87.517088][ T358] usb 2-1: config 0 interface 0 altsetting 5 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 87.528344][ T358] usb 2-1: config 0 interface 0 altsetting 5 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 87.542392][ T358] usb 2-1: config 0 interface 0 has no altsetting 0 [ 87.549220][ T358] usb 2-1: New USB device found, idVendor=06a3, idProduct=0cd0, bcdDevice= 0.00 [ 87.558911][ T358] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 87.567798][ T358] usb 2-1: config 0 descriptor?? [ 87.735919][ T66] usb 3-1: new high-speed USB device number 11 using dummy_hcd [ 87.794418][ T361] hid-generic 0000:0000:0001.0016: unknown main item tag 0x0 [ 87.803501][ T361] hid-generic 0000:0000:0001.0016: unknown main item tag 0x0 [ 87.811445][ T361] hid-generic 0000:0000:0001.0016: unknown main item tag 0x0 [ 87.821400][ T361] hid-generic 0000:0000:0001.0016: unknown main item tag 0x0 [ 87.829074][ T361] hid-generic 0000:0000:0001.0016: unknown main item tag 0x0 [ 87.836747][ T361] hid-generic 0000:0000:0001.0016: unknown main item tag 0x0 [ 87.844272][ T361] hid-generic 0000:0000:0001.0016: unknown main item tag 0x0 [ 87.852060][ T361] hid-generic 0000:0000:0001.0016: unknown main item tag 0x0 [ 87.863446][ T361] hid-generic 0000:0000:0001.0016: hidraw0: HID v0.10 Device [syz0] on syz1 [ 87.887108][ T66] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 87.897862][ T66] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 87.908289][ T66] usb 3-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 87.920898][ T66] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 87.929512][ T66] usb 3-1: SerialNumber: syz [ 87.987079][ T358] input: HID 06a3:0cd0 as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/0003:06A3:0CD0.0017/input/input28 [ 88.026340][ T358] saitek 0003:06A3:0CD0.0017: input,hiddev96,hidraw0: USB HID v0.00 Device [HID 06a3:0cd0] on usb-dummy_hcd.1-1/input0 [ 88.141162][ T66] usb 3-1: 0:2 : does not exist [ 88.170742][ T66] usb 3-1: USB disconnect, device number 11 [ 88.204004][ T365] udevd[365]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 88.204177][ T358] usb 2-1: USB disconnect, device number 12 [ 88.306404][ T5854] FAULT_INJECTION: forcing a failure. [ 88.306404][ T5854] name failslab, interval 1, probability 0, space 0, times 0 [ 88.319390][ T5854] CPU: 0 UID: 0 PID: 5854 Comm: syz.3.1183 Not tainted syzkaller #0 ae7936ebab52aae609823c9494ba9ebab2c98923 [ 88.319427][ T5854] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 88.319443][ T5854] Call Trace: [ 88.319452][ T5854] [ 88.319461][ T5854] __dump_stack+0x21/0x30 [ 88.319504][ T5854] dump_stack_lvl+0x140/0x1c0 [ 88.319542][ T5854] ? __cfi_dump_stack_lvl+0x10/0x10 [ 88.319582][ T5854] dump_stack+0x19/0x20 [ 88.319615][ T5854] should_fail_ex+0x3c2/0x510 [ 88.319640][ T5854] should_failslab+0xac/0x100 [ 88.319665][ T5854] __kmalloc_cache_noprof+0x41/0x470 [ 88.319701][ T5854] ? cgroup_file_open+0x9b/0x390 [ 88.319728][ T5854] ? mutex_unlock+0x90/0x240 [ 88.319760][ T5854] cgroup_file_open+0x9b/0x390 [ 88.319787][ T5854] kernfs_fop_open+0x96c/0xd50 [ 88.319817][ T5854] ? __cfi_kernfs_fop_open+0x10/0x10 [ 88.319846][ T5854] do_dentry_open+0x97c/0x1510 [ 88.319877][ T5854] vfs_open+0x86/0x240 [ 88.319902][ T5854] ? __cfi_vfs_open+0x10/0x10 [ 88.319929][ T5854] ? may_open+0x352/0x430 [ 88.319954][ T5854] path_openat+0x2c49/0x35a0 [ 88.319983][ T5854] ? kasan_save_alloc_info+0x3a/0x50 [ 88.320011][ T5854] ? getname+0x1b/0x30 [ 88.320045][ T5854] ? x64_sys_call+0xe69/0x2ee0 [ 88.320069][ T5854] ? do_syscall_64+0x57/0xf0 [ 88.320095][ T5854] ? do_filp_open+0x440/0x440 [ 88.320123][ T5854] do_filp_open+0x1f2/0x440 [ 88.320150][ T5854] ? __cfi_do_filp_open+0x10/0x10 [ 88.320190][ T5854] ? alloc_fd+0x4c1/0x570 [ 88.320230][ T5854] do_sys_openat2+0x134/0x1d0 [ 88.320257][ T5854] ? fput+0x1a4/0x230 [ 88.320283][ T5854] ? do_sys_open+0x100/0x100 [ 88.320313][ T5854] __x64_sys_openat+0x13a/0x170 [ 88.320344][ T5854] x64_sys_call+0xe69/0x2ee0 [ 88.320369][ T5854] do_syscall_64+0x57/0xf0 [ 88.320396][ T5854] ? clear_bhb_loop+0x50/0xa0 [ 88.320429][ T5854] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 88.320461][ T5854] RIP: 0033:0x7fea67d9f559 [ 88.320483][ T5854] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 88.320504][ T5854] RSP: 002b:00007fea68b8c028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 88.320531][ T5854] RAX: ffffffffffffffda RBX: 00007fea68025fa0 RCX: 00007fea67d9f559 [ 88.320551][ T5854] RDX: 0000000000000002 RSI: 0000200000000000 RDI: ffffffffffffff9c [ 88.320569][ T5854] RBP: 00007fea67e36b20 R08: 0000000000000000 R09: 0000000000000000 [ 88.320584][ T5854] R10: 0000000000000090 R11: 0000000000000246 R12: 0000000000000000 [ 88.320599][ T5854] R13: 00007fea68026038 R14: 00007fea68025fa0 R15: 00007ffe84155c08 [ 88.320620][ T5854] [ 88.660779][ T46] Bluetooth: hci0: Frame reassembly failed (-84) [ 89.602091][ T36] audit: type=1400 audit(1792715460.550:595): avc: denied { ioctl } for pid=5999 comm="syz.3.1200" path="user:[4026531837]" dev="nsfs" ino=4026531837 ioctlcmd=0xb704 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 89.980244][ T6051] netlink: 140 bytes leftover after parsing attributes in process `syz.3.1207'. [ 90.238302][ T6082] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1207'. [ 90.288897][ T6088] ptp ptp0: new virtual clock ptp1 [ 90.319278][ T6088] ptp ptp0: new virtual clock ptp2 [ 90.340655][ T6088] ptp ptp0: new virtual clock ptp3 [ 90.363762][ T6088] ptp ptp0: new virtual clock ptp4 [ 90.377938][ T6088] ptp ptp0: guarantee physical clock free running [ 90.404857][ T6099] ptp ptp0: delete virtual clock ptp4 [ 90.430532][ T6099] ptp ptp0: delete virtual clock ptp3 [ 90.466741][ T6099] ptp ptp0: delete virtual clock ptp2 [ 90.482448][ T6099] ptp ptp0: guarantee physical clock free running [ 90.536112][ T6117] rust_binder: 6115:6117 BC_FREEZE_NOTIFICATION_DONE 000000007ffffffe not found [ 90.558792][ T6117] rust_binder: Write failure EINVAL in pid:753 [ 90.593317][ T358] rust_binder: 6115: undelivered freeze notification, 0000000000000001 [ 90.735941][ T2056] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 90.842141][ T6163] FAULT_INJECTION: forcing a failure. [ 90.842141][ T6163] name failslab, interval 1, probability 0, space 0, times 0 [ 90.895582][ T6163] CPU: 0 UID: 0 PID: 6163 Comm: syz.4.1221 Not tainted syzkaller #0 ae7936ebab52aae609823c9494ba9ebab2c98923 [ 90.895625][ T6163] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 90.895642][ T6163] Call Trace: [ 90.895650][ T6163] [ 90.895660][ T6163] __dump_stack+0x21/0x30 [ 90.895703][ T6163] dump_stack_lvl+0x140/0x1c0 [ 90.895741][ T6163] ? __cfi_dump_stack_lvl+0x10/0x10 [ 90.895780][ T6163] dump_stack+0x19/0x20 [ 90.895815][ T6163] should_fail_ex+0x3c2/0x510 [ 90.895839][ T6163] ? sk_prot_alloc+0x104/0x3a0 [ 90.895874][ T6163] should_failslab+0xac/0x100 [ 90.895900][ T6163] __kmalloc_noprof+0x69/0x510 [ 90.895935][ T6163] ? sk_prot_alloc+0x104/0x3a0 [ 90.895965][ T6163] ? avc_has_perm_noaudit+0x289/0x360 [ 90.895991][ T6163] sk_prot_alloc+0x104/0x3a0 [ 90.896022][ T6163] sk_alloc+0x40/0x590 [ 90.896050][ T6163] tun_chr_open+0x80/0x7f0 [ 90.896085][ T6163] ? __cfi_kobject_get_unless_zero+0x10/0x10 [ 90.896113][ T6163] ? __cfi_tun_chr_open+0x10/0x10 [ 90.896147][ T6163] misc_open+0x2ec/0x370 [ 90.896182][ T6163] chrdev_open+0x4eb/0x610 [ 90.896229][ T6163] ? __cfi_chrdev_open+0x10/0x10 [ 90.896263][ T6163] ? bpf_lsm_file_open+0xd/0x20 [ 90.896288][ T6163] ? __cfi_chrdev_open+0x10/0x10 [ 90.896321][ T6163] do_dentry_open+0x97c/0x1510 [ 90.896350][ T6163] vfs_open+0x86/0x240 [ 90.896375][ T6163] ? __cfi_vfs_open+0x10/0x10 [ 90.896401][ T6163] ? may_open+0x352/0x430 [ 90.896427][ T6163] path_openat+0x2c49/0x35a0 [ 90.896453][ T6163] ? schedule+0xc5/0x240 [ 90.896478][ T6163] ? kasan_save_alloc_info+0x3a/0x50 [ 90.896521][ T6163] ? getname+0x1b/0x30 [ 90.896555][ T6163] ? x64_sys_call+0xe69/0x2ee0 [ 90.896579][ T6163] ? do_syscall_64+0x57/0xf0 [ 90.896605][ T6163] ? do_filp_open+0x440/0x440 [ 90.896633][ T6163] do_filp_open+0x1f2/0x440 [ 90.896659][ T6163] ? __cfi_do_filp_open+0x10/0x10 [ 90.896689][ T6163] ? alloc_fd+0x4c1/0x570 [ 90.896727][ T6163] do_sys_openat2+0x134/0x1d0 [ 90.896754][ T6163] ? fput+0x1a4/0x230 [ 90.896797][ T6163] ? do_sys_open+0x100/0x100 [ 90.896828][ T6163] __x64_sys_openat+0x13a/0x170 [ 90.896859][ T6163] x64_sys_call+0xe69/0x2ee0 [ 90.896883][ T6163] do_syscall_64+0x57/0xf0 [ 90.896907][ T6163] ? clear_bhb_loop+0x50/0xa0 [ 90.896941][ T6163] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 90.896973][ T6163] RIP: 0033:0x7efe1d59f559 [ 90.896994][ T6163] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 90.897016][ T6163] RSP: 002b:00007efe1e489028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 90.897042][ T6163] RAX: ffffffffffffffda RBX: 00007efe1d825fa0 RCX: 00007efe1d59f559 [ 90.897062][ T6163] RDX: 0000000000000002 RSI: 0000200000000000 RDI: ffffffffffffff9c [ 90.897079][ T6163] RBP: 00007efe1d636b20 R08: 0000000000000000 R09: 0000000000000000 [ 90.897095][ T6163] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 90.897110][ T6163] R13: 00007efe1d826038 R14: 00007efe1d825fa0 R15: 00007fff3d2f1b68 [ 90.897132][ T6163] [ 91.346007][ T358] usb 2-1: new high-speed USB device number 14 using dummy_hcd [ 91.508129][ T358] usb 2-1: Using ep0 maxpacket: 8 [ 91.524512][ T358] usb 2-1: too many endpoints for config 0 interface 0 altsetting 9: 254, using maximum allowed: 30 [ 91.555989][ T358] usb 2-1: config 0 interface 0 altsetting 9 has 1 endpoint descriptor, different from the interface descriptor's value: 254 [ 91.593623][ T358] usb 2-1: config 0 interface 0 has no altsetting 0 [ 91.619352][ T358] usb 2-1: New USB device found, idVendor=057e, idProduct=200e, bcdDevice= 0.00 [ 91.665136][ T358] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 91.699317][ T358] usb 2-1: config 0 descriptor?? [ 92.084256][ T6290] overlayfs: conflicting options: userxattr,verity=on [ 92.173375][ T358] nintendo 0003:057E:200E.0018: ignoring exceeding usage max [ 92.206199][ T358] nintendo 0003:057E:200E.0018: unknown main item tag 0x2 [ 92.233668][ T358] nintendo 0003:057E:200E.0018: unknown main item tag 0x0 [ 92.252760][ T358] nintendo 0003:057E:200E.0018: hidraw0: USB HID v80.01 Device [HID 057e:200e] on usb-dummy_hcd.1-1/input0 [ 92.345958][ T358] nintendo 0003:057E:200E.0018: Failed charging grip handshake [ 92.357682][ T6323] FAULT_INJECTION: forcing a failure. [ 92.357682][ T6323] name failslab, interval 1, probability 0, space 0, times 0 [ 92.370675][ T358] nintendo 0003:057E:200E.0018: Failed to initialize controller; ret=-110 [ 92.386242][ T9] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 92.405445][ T358] nintendo 0003:057E:200E.0018: probe - fail = -110 [ 92.412292][ T6323] CPU: 0 UID: 0 PID: 6323 Comm: syz.2.1247 Not tainted syzkaller #0 ae7936ebab52aae609823c9494ba9ebab2c98923 [ 92.412330][ T6323] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 92.412346][ T6323] Call Trace: [ 92.412354][ T6323] [ 92.412363][ T6323] __dump_stack+0x21/0x30 [ 92.412407][ T6323] dump_stack_lvl+0x140/0x1c0 [ 92.412444][ T6323] ? __cfi_dump_stack_lvl+0x10/0x10 [ 92.412481][ T6323] dump_stack+0x19/0x20 [ 92.412516][ T6323] should_fail_ex+0x3c2/0x510 [ 92.412540][ T6323] should_failslab+0xac/0x100 [ 92.412564][ T6323] kmem_cache_alloc_noprof+0x42/0x410 [ 92.412599][ T6323] ? key_alloc+0x2ee/0x1060 [ 92.412626][ T6323] ? key_user_lookup+0x263/0x4f0 [ 92.412654][ T6323] key_alloc+0x2ee/0x1060 [ 92.412683][ T6323] keyring_alloc+0x4b/0xc0 [ 92.412715][ T6323] lookup_user_key+0x485/0x1230 [ 92.412741][ T6323] ? __kasan_kmalloc+0x96/0xb0 [ 92.412764][ T6323] ? __kmalloc_node_noprof+0x252/0x500 [ 92.412798][ T6323] ? __cfi_lookup_user_key+0x10/0x10 [ 92.412823][ T6323] ? check_stack_object+0x81/0x150 [ 92.412898][ T6323] ? __cfi_lookup_user_key_possessed+0x10/0x10 [ 92.412928][ T6323] ? __kasan_check_write+0x18/0x20 [ 92.412962][ T6323] __se_sys_add_key+0x317/0x4b0 [ 92.412999][ T6323] ? __x64_sys_add_key+0xf0/0xf0 [ 92.413034][ T6323] ? __kasan_check_write+0x18/0x20 [ 92.413066][ T6323] ? fpregs_restore_userregs+0x11c/0x260 [ 92.413117][ T6323] __x64_sys_add_key+0xc3/0xf0 [ 92.413173][ T6323] x64_sys_call+0x195f/0x2ee0 [ 92.413198][ T6323] do_syscall_64+0x57/0xf0 [ 92.413222][ T6323] ? clear_bhb_loop+0x50/0xa0 [ 92.413257][ T6323] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 92.413290][ T6323] RIP: 0033:0x7f291499f559 [ 92.413312][ T6323] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 92.413334][ T6323] RSP: 002b:00007f2915862028 EFLAGS: 00000246 ORIG_RAX: 00000000000000f8 [ 92.413365][ T6323] RAX: ffffffffffffffda RBX: 00007f2914c25fa0 RCX: 00007f291499f559 [ 92.413386][ T6323] RDX: 0000200000000180 RSI: 0000000000000000 RDI: 0000200000000140 [ 92.413404][ T6323] RBP: 00007f2914a36b20 R08: ffffffffffffffff R09: 0000000000000000 [ 92.413421][ T6323] R10: 0000000000000006 R11: 0000000000000246 R12: 0000000000000000 [ 92.413438][ T6323] R13: 00007f2914c26038 R14: 00007f2914c25fa0 R15: 00007ffdae2898b8 [ 92.413460][ T6323] [ 92.915239][ T358] nintendo 0003:057E:200E.0018: probe with driver nintendo failed with error -110 [ 92.977101][ T66] usb 4-1: new high-speed USB device number 14 using dummy_hcd [ 93.039855][ T10] usb 2-1: USB disconnect, device number 14 [ 93.165970][ T9] usb 5-1: Using ep0 maxpacket: 16 [ 93.176640][ T9] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 93.188129][ T9] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x2 has an invalid bInterval 0, changing to 7 [ 93.199418][ T66] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 93.210639][ T66] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 93.230835][ T9] usb 5-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 5 [ 93.255316][ T66] usb 4-1: New USB device found, idVendor=8086, idProduct=0000, bcdDevice= 0.00 [ 93.276401][ T9] usb 5-1: New USB device found, idVendor=057e, idProduct=2019, bcdDevice= 0.00 [ 93.285567][ T66] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 93.326429][ T9] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 93.349882][ T9] usb 5-1: config 0 descriptor?? [ 93.723431][ T6456] rust_binder: 6455:6456 BC_REQUEST_DEATH_NOTIFICATION death notification already set [ 93.784344][ T9] nintendo 0003:057E:2019.0019: hidraw0: USB HID v80.05 Device [HID 057e:2019] on usb-dummy_hcd.4-1/input0 [ 93.798508][ T6463] FAULT_INJECTION: forcing a failure. [ 93.798508][ T6463] name failslab, interval 1, probability 0, space 0, times 0 [ 93.840266][ T6463] CPU: 0 UID: 0 PID: 6463 Comm: syz.2.1265 Not tainted syzkaller #0 ae7936ebab52aae609823c9494ba9ebab2c98923 [ 93.840304][ T6463] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 93.840315][ T6463] Call Trace: [ 93.840321][ T6463] [ 93.840327][ T6463] __dump_stack+0x21/0x30 [ 93.840356][ T6463] dump_stack_lvl+0x140/0x1c0 [ 93.840383][ T6463] ? __cfi_dump_stack_lvl+0x10/0x10 [ 93.840409][ T6463] dump_stack+0x19/0x20 [ 93.840433][ T6463] should_fail_ex+0x3c2/0x510 [ 93.840448][ T6463] should_failslab+0xac/0x100 [ 93.840464][ T6463] __kmalloc_cache_noprof+0x41/0x470 [ 93.840487][ T6463] ? erofs_init_fs_context+0x65/0x3c0 [ 93.840509][ T6463] erofs_init_fs_context+0x65/0x3c0 [ 93.840529][ T6463] alloc_fs_context+0x5c7/0x800 [ 93.840548][ T6463] fs_context_for_mount+0x26/0x40 [ 93.840565][ T6463] __se_sys_fsopen+0xab/0x390 [ 93.840585][ T6463] __x64_sys_fsopen+0x5f/0x80 [ 93.840603][ T6463] x64_sys_call+0x2d40/0x2ee0 [ 93.840620][ T6463] do_syscall_64+0x57/0xf0 [ 93.840636][ T6463] ? clear_bhb_loop+0x50/0xa0 [ 93.840658][ T6463] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 93.840678][ T6463] RIP: 0033:0x7f291499f559 [ 93.840691][ T6463] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 93.840705][ T6463] RSP: 002b:00007f2915862028 EFLAGS: 00000246 ORIG_RAX: 00000000000001ae [ 93.840722][ T6463] RAX: ffffffffffffffda RBX: 00007f2914c25fa0 RCX: 00007f291499f559 [ 93.840734][ T6463] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 0000200000000100 [ 93.840745][ T6463] RBP: 00007f2914a36b20 R08: 0000000000000000 R09: 0000000000000000 [ 93.840755][ T6463] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 93.840771][ T6463] R13: 00007f2914c26038 R14: 00007f2914c25fa0 R15: 00007ffdae2898b8 [ 93.840786][ T6463] [ 94.055699][ T6477] FAULT_INJECTION: forcing a failure. [ 94.055699][ T6477] name failslab, interval 1, probability 0, space 0, times 0 [ 94.068466][ T6477] CPU: 0 UID: 0 PID: 6477 Comm: syz.1.1268 Not tainted syzkaller #0 ae7936ebab52aae609823c9494ba9ebab2c98923 [ 94.068502][ T6477] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 94.068519][ T6477] Call Trace: [ 94.068530][ T6477] [ 94.068540][ T6477] __dump_stack+0x21/0x30 [ 94.068580][ T6477] dump_stack_lvl+0x140/0x1c0 [ 94.068615][ T6477] ? __cfi_dump_stack_lvl+0x10/0x10 [ 94.068649][ T6477] ? futex_wake+0x666/0x950 [ 94.068678][ T6477] dump_stack+0x19/0x20 [ 94.068709][ T6477] should_fail_ex+0x3c2/0x510 [ 94.068733][ T6477] ? __se_sys_futex_waitv+0x20d/0x720 [ 94.068759][ T6477] should_failslab+0xac/0x100 [ 94.068783][ T6477] __kmalloc_noprof+0x69/0x510 [ 94.068815][ T6477] ? __se_sys_futex_waitv+0x20d/0x720 [ 94.068841][ T6477] __se_sys_futex_waitv+0x20d/0x720 [ 94.068865][ T6477] ? mutex_unlock+0x90/0x240 [ 94.068896][ T6477] ? __x64_sys_futex_waitv+0xf0/0xf0 [ 94.068922][ T6477] ? __se_sys_futex+0x13c/0x320 [ 94.068945][ T6477] ? fput+0x1a4/0x230 [ 94.068973][ T6477] ? __kasan_check_write+0x18/0x20 [ 94.069004][ T6477] ? fpregs_restore_userregs+0x11c/0x260 [ 94.069036][ T6477] __x64_sys_futex_waitv+0xc3/0xf0 [ 94.069060][ T6477] x64_sys_call+0x2dc4/0x2ee0 [ 94.069084][ T6477] do_syscall_64+0x57/0xf0 [ 94.069108][ T6477] ? clear_bhb_loop+0x50/0xa0 [ 94.069139][ T6477] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 94.069171][ T6477] RIP: 0033:0x7f3ff3d9f559 [ 94.069190][ T6477] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 94.069220][ T6477] RSP: 002b:00007f3ff4c62028 EFLAGS: 00000246 ORIG_RAX: 00000000000001c1 [ 94.069245][ T6477] RAX: ffffffffffffffda RBX: 00007f3ff4025fa0 RCX: 00007f3ff3d9f559 [ 94.069264][ T6477] RDX: 0000000000000000 RSI: 000000000000000c RDI: 0000200000002040 [ 94.069279][ T6477] RBP: 00007f3ff3e36b20 R08: 0000000000000001 R09: 0000000000000000 [ 94.069294][ T6477] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 94.069308][ T6477] R13: 00007f3ff4026038 R14: 00007f3ff4025fa0 R15: 00007ffdff99f7e8 [ 94.069328][ T6477] [ 94.289179][ T66] hid-sensor-hub 0003:8086:0000.001A: hiddev96,hidraw1: USB HID v1.11 Device [HID 8086:0000] on usb-dummy_hcd.3-1/input0 [ 94.302647][ T9] nintendo 0003:057E:2019.0019: Failed to get joycon info; ret=-71 [ 94.310639][ T9] nintendo 0003:057E:2019.0019: Failed to retrieve controller info; ret=-71 [ 94.319415][ T9] nintendo 0003:057E:2019.0019: Failed to initialize controller; ret=-71 [ 94.333866][ T9] nintendo 0003:057E:2019.0019: probe - fail = -71 [ 94.341542][ T9] nintendo 0003:057E:2019.0019: probe with driver nintendo failed with error -71 [ 94.352549][ T9] usb 5-1: USB disconnect, device number 6 [ 94.368688][ T66] usb 4-1: USB disconnect, device number 14 [ 94.381983][ T6481] fido_id[6481]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.3/usb4/4-1/report_descriptor': No such file or directory [ 94.491447][ T361] input: syz0 as /devices/virtual/misc/uhid/0003:1B1C:0101.001B/input/input29 [ 94.501543][ T361] hid-generic 0003:1B1C:0101.001B: input,hidraw0: USB HID v0.00 Device [syz0] on syz0 [ 94.645276][ T6519] rust_binder: 6518:6519 error while translating object: EPERM [ 94.653559][ T6519] rust_binder: 6518:6519 transaction call to 6518:0 failed EPERM, code 0 size 112-24 line thread.rs:995 [ 94.666261][ T66] rust_binder: 6518: undelivered TRANSACTION_ERROR: 29201 [ 94.945359][ T6567] netlink: 36 bytes leftover after parsing attributes in process `syz.4.1286'. [ 94.982973][ T6567] netlink: 36 bytes leftover after parsing attributes in process `syz.4.1286'. [ 95.167754][ T66] usb 4-1: new high-speed USB device number 15 using dummy_hcd [ 95.345897][ T66] usb 4-1: Using ep0 maxpacket: 8 [ 95.366397][ T66] usb 4-1: config 0 interface 0 altsetting 4 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 95.394853][ T66] usb 4-1: config 0 interface 0 altsetting 4 endpoint 0x81 has invalid wMaxPacketSize 0 [ 95.439125][ T66] usb 4-1: config 0 interface 0 altsetting 4 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 95.475685][ T36] audit: type=1400 audit(1792715472.418:596): avc: denied { execstack } for pid=6633 comm="syz.4.1297" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 95.485164][ T66] usb 4-1: config 0 interface 0 has no altsetting 0 [ 95.554401][ T66] usb 4-1: New USB device found, idVendor=046d, idProduct=c623, bcdDevice= 0.00 [ 95.591452][ T66] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 95.620009][ T66] usb 4-1: config 0 descriptor?? [ 95.975955][ T9] usb 2-1: new high-speed USB device number 15 using dummy_hcd [ 96.045123][ T66] input: HID 046d:c623 as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/0003:046D:C623.001C/input/input30 [ 96.074306][ T66] logitech 0003:046D:C623.001C: input,hiddev96,hidraw0: USB HID v0.00 Device [HID 046d:c623] on usb-dummy_hcd.3-1/input0 [ 96.137863][ T9] usb 2-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 96.149484][ T9] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 96.165057][ T9] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 96.177552][ T9] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 96.209123][ T9] usb 2-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40 [ 96.222349][ T9] usb 2-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0 [ 96.238523][ T9] usb 2-1: Manufacturer: syz [ 96.251246][ T9] usb 2-1: config 0 descriptor?? [ 96.280050][ T36] audit: type=1400 audit(1792715473.228:597): avc: denied { watch } for pid=6734 comm="syz.2.1315" path="/339/file0" dev="tmpfs" ino=1860 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 96.499256][ T6765] FAULT_INJECTION: forcing a failure. [ 96.499256][ T6765] name failslab, interval 1, probability 0, space 0, times 0 [ 96.527655][ T6765] CPU: 0 UID: 0 PID: 6765 Comm: syz.4.1321 Not tainted syzkaller #0 ae7936ebab52aae609823c9494ba9ebab2c98923 [ 96.527692][ T6765] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 96.527710][ T6765] Call Trace: [ 96.527717][ T6765] [ 96.527726][ T6765] __dump_stack+0x21/0x30 [ 96.527786][ T6765] dump_stack_lvl+0x140/0x1c0 [ 96.527824][ T6765] ? __cfi_dump_stack_lvl+0x10/0x10 [ 96.527871][ T6765] dump_stack+0x19/0x20 [ 96.527903][ T6765] should_fail_ex+0x3c2/0x510 [ 96.527943][ T6765] should_failslab+0xac/0x100 [ 96.527967][ T6765] __kmalloc_node_noprof+0x69/0x500 [ 96.528002][ T6765] ? __kvmalloc_node_noprof+0x128/0x300 [ 96.528034][ T6765] __kvmalloc_node_noprof+0x128/0x300 [ 96.528075][ T6765] ? kasan_save_alloc_info+0x3a/0x50 [ 96.528107][ T6765] ? __cfi___kvmalloc_node_noprof+0x10/0x10 [ 96.528137][ T6765] ? __kmalloc_cache_noprof+0x160/0x470 [ 96.528170][ T6765] ? alloc_fdtable+0xd2/0x4f0 [ 96.528206][ T6765] alloc_fdtable+0x18d/0x4f0 [ 96.528241][ T6765] dup_fd+0x6af/0x9c0 [ 96.528277][ T6765] __close_range+0x1ca/0x4e0 [ 96.528299][ T6765] ? __cfi___close_range+0x10/0x10 [ 96.528321][ T6765] ? __kasan_check_write+0x18/0x20 [ 96.528353][ T6765] ? fpregs_restore_userregs+0x11c/0x260 [ 96.528386][ T6765] __x64_sys_close_range+0x7e/0x90 [ 96.528416][ T6765] x64_sys_call+0x1686/0x2ee0 [ 96.528440][ T6765] do_syscall_64+0x57/0xf0 [ 96.528465][ T6765] ? clear_bhb_loop+0x50/0xa0 [ 96.528498][ T6765] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 96.528529][ T6765] RIP: 0033:0x7efe1d59f559 [ 96.528549][ T6765] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 96.528568][ T6765] RSP: 002b:00007efe1e489028 EFLAGS: 00000246 ORIG_RAX: 00000000000001b4 [ 96.528595][ T6765] RAX: ffffffffffffffda RBX: 00007efe1d825fa0 RCX: 00007efe1d59f559 [ 96.528614][ T6765] RDX: 0000000000000002 RSI: ffffffffffffffff RDI: ffffffffffffffff [ 96.528631][ T6765] RBP: 00007efe1d636b20 R08: 0000000000000000 R09: 0000000000000000 [ 96.528647][ T6765] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 96.528680][ T6765] R13: 00007efe1d826038 R14: 00007efe1d825fa0 R15: 00007fff3d2f1b68 [ 96.528700][ T6765] [ 96.777144][ T9] appleir 0003:05AC:8243.001D: unknown main item tag 0x0 [ 96.784508][ T9] appleir 0003:05AC:8243.001D: No inputs registered, leaving [ 96.802950][ T36] audit: type=1400 audit(1792715473.748:598): avc: denied { accept } for pid=6785 comm="syz.2.1324" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 96.845230][ T9] appleir 0003:05AC:8243.001D: hiddev97,hidraw1: USB HID v0.00 Device [syz] on usb-dummy_hcd.1-1/input0 [ 96.890419][ T6796] FAULT_INJECTION: forcing a failure. [ 96.890419][ T6796] name failslab, interval 1, probability 0, space 0, times 0 [ 96.904176][ T6796] CPU: 0 UID: 0 PID: 6796 Comm: syz.2.1328 Not tainted syzkaller #0 ae7936ebab52aae609823c9494ba9ebab2c98923 [ 96.904213][ T6796] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 96.904228][ T6796] Call Trace: [ 96.904235][ T6796] [ 96.904244][ T6796] __dump_stack+0x21/0x30 [ 96.904285][ T6796] dump_stack_lvl+0x140/0x1c0 [ 96.904329][ T6796] ? __cfi_dump_stack_lvl+0x10/0x10 [ 96.904367][ T6796] dump_stack+0x19/0x20 [ 96.904400][ T6796] should_fail_ex+0x3c2/0x510 [ 96.904425][ T6796] should_failslab+0xac/0x100 [ 96.904448][ T6796] __kmalloc_cache_noprof+0x41/0x470 [ 96.904481][ T6796] ? ovl_init_fs_context+0xb8/0x790 [ 96.904517][ T6796] ovl_init_fs_context+0xb8/0x790 [ 96.904551][ T6796] alloc_fs_context+0x5c7/0x800 [ 96.904577][ T6796] fs_context_for_mount+0x26/0x40 [ 96.904601][ T6796] __se_sys_fsopen+0xab/0x390 [ 96.904629][ T6796] __x64_sys_fsopen+0x5f/0x80 [ 96.904656][ T6796] x64_sys_call+0x2d40/0x2ee0 [ 96.904679][ T6796] do_syscall_64+0x57/0xf0 [ 96.904703][ T6796] ? clear_bhb_loop+0x50/0xa0 [ 96.904741][ T6796] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 96.904789][ T6796] RIP: 0033:0x7f291499f559 [ 96.904808][ T6796] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 96.904830][ T6796] RSP: 002b:00007f2915862028 EFLAGS: 00000246 ORIG_RAX: 00000000000001ae [ 96.904857][ T6796] RAX: ffffffffffffffda RBX: 00007f2914c25fa0 RCX: 00007f291499f559 [ 96.904875][ T6796] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 0000200000000200 [ 96.904892][ T6796] RBP: 00007f2914a36b20 R08: 0000000000000000 R09: 0000000000000000 [ 96.904909][ T6796] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 96.904924][ T6796] R13: 00007f2914c26038 R14: 00007f2914c25fa0 R15: 00007ffdae2898b8 [ 96.904946][ T6796] [ 97.114469][ T6805] loop5: detected capacity change from 0 to 7 [ 97.138526][ T10] usb 2-1: USB disconnect, device number 15 [ 97.154548][ T6807] FAULT_INJECTION: forcing a failure. [ 97.154548][ T6807] name failslab, interval 1, probability 0, space 0, times 0 [ 97.167914][ T6807] CPU: 0 UID: 0 PID: 6807 Comm: syz.2.1330 Not tainted syzkaller #0 ae7936ebab52aae609823c9494ba9ebab2c98923 [ 97.167951][ T6807] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 97.167966][ T6807] Call Trace: [ 97.167974][ T6807] [ 97.167982][ T6807] __dump_stack+0x21/0x30 [ 97.168024][ T6807] dump_stack_lvl+0x140/0x1c0 [ 97.168059][ T6807] ? __cfi_dump_stack_lvl+0x10/0x10 [ 97.168096][ T6807] dump_stack+0x19/0x20 [ 97.168130][ T6807] should_fail_ex+0x3c2/0x510 [ 97.168155][ T6807] should_failslab+0xac/0x100 [ 97.168178][ T6807] __kmalloc_cache_noprof+0x41/0x470 [ 97.168212][ T6807] ? __percpu_counter_init_many+0x47e/0x570 [ 97.168234][ T6807] ? io_uring_alloc_task_context+0x1a7/0x6b0 [ 97.168264][ T6807] io_uring_alloc_task_context+0x1a7/0x6b0 [ 97.168293][ T6807] ? alloc_file_pseudo+0x191/0x1f0 [ 97.168319][ T6807] ? __cfi_io_uring_alloc_task_context+0x10/0x10 [ 97.168347][ T6807] ? __cfi_anon_inode_make_secure_inode+0x10/0x10 [ 97.168376][ T6807] __io_uring_add_tctx_node+0x324/0x590 [ 97.168399][ T6807] ? __cfi___io_uring_add_tctx_node+0x10/0x10 [ 97.168424][ T6807] ? anon_inode_create_getfile+0x3f/0x50 [ 97.168453][ T6807] io_uring_create+0xc78/0x13f0 [ 97.168481][ T6807] __se_sys_io_uring_setup+0x2a4/0x2b0 [ 97.168522][ T6807] ? __se_sys_futex+0x13c/0x320 [ 97.168549][ T6807] ? __x64_sys_io_uring_setup+0x80/0x80 [ 97.168581][ T6807] ? __kasan_check_write+0x18/0x20 [ 97.168616][ T6807] __x64_sys_io_uring_setup+0x5f/0x80 [ 97.168647][ T6807] x64_sys_call+0x22c0/0x2ee0 [ 97.168672][ T6807] do_syscall_64+0x57/0xf0 [ 97.168696][ T6807] ? clear_bhb_loop+0x50/0xa0 [ 97.168730][ T6807] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 97.168762][ T6807] RIP: 0033:0x7f291499f559 [ 97.168782][ T6807] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 97.168805][ T6807] RSP: 002b:00007f2915861fb8 EFLAGS: 00000206 ORIG_RAX: 00000000000001a9 [ 97.168832][ T6807] RAX: ffffffffffffffda RBX: 0000200000000040 RCX: 00007f291499f559 [ 97.168851][ T6807] RDX: 0000000000000000 RSI: 0000200000000040 RDI: 0000000000003bd4 [ 97.168868][ T6807] RBP: 00007f2914a36b20 R08: 0000000000000000 R09: 0000000000000000 [ 97.168885][ T6807] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 97.168901][ T6807] R13: 0000000000000000 R14: 0000000000000000 R15: 00007ffdae2898b8 [ 97.168920][ T6807] [ 97.547241][ T6808] Invalid logical block size (18350) [ 97.895079][ T10] rust_binder: 6884: undelivered TRANSACTION_COMPLETE [ 97.955918][ T6897] rust_binder: Failure when writing BR_NOOP at beginning of buffer. [ 97.974626][ T9] usb 4-1: USB disconnect, device number 15 [ 97.986441][ T6901] rust_binder: 6899:6901 failed to claim space for a BINDER_TYPE_PTR (offset: 112, limit: 112, size: 8) [ 98.007066][ T6897] rust_binder: Read failure Err(EFAULT) in pid:789 [ 98.027497][ T6901] rust_binder: 6899:6901 error while translating object: EINVAL [ 98.054055][ T6901] rust_binder: 6899:6901 transaction async to 6899:0 failed EINVAL, code 0 size 88-24 line thread.rs:926 [ 98.078286][ T6913] loop7: detected capacity change from 0 to 4 [ 98.095634][ T361] rust_binder: 6899: undelivered TRANSACTION_ERROR: 29201 [ 98.222623][ T36] audit: type=1400 audit(1792715475.168:599): avc: denied { watch_reads } for pid=6933 comm="syz.2.1357" path="/367/file0" dev="tmpfs" ino=2011 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 98.363030][ T6952] synth uevent: /bus/acpi: unknown uevent action string [ 98.487148][ T6972] netlink: 44 bytes leftover after parsing attributes in process `syz.1.1365'. [ 98.509571][ T6972] netlink: 35 bytes leftover after parsing attributes in process `syz.1.1365'. [ 98.527581][ T6972] netlink: 'syz.1.1365': attribute type 6 has an invalid length. [ 98.555913][ T6972] netlink: 'syz.1.1365': attribute type 4 has an invalid length. [ 98.638866][ T9] usb 3-1: new high-speed USB device number 12 using dummy_hcd [ 98.747580][ T7005] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 98.816843][ T9] usb 3-1: Using ep0 maxpacket: 32 [ 98.833584][ T9] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 98.875129][ T9] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 98.905938][ T9] usb 3-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 98.944574][ T9] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 98.975213][ T9] usb 3-1: config 0 descriptor?? [ 98.998497][ T9] hub 3-1:0.0: USB hub found [ 99.036882][ T7042] sd 0:0:1:0: PR command failed: 1026 [ 99.042367][ T7042] sd 0:0:1:0: Sense Key : 0x5 [current] [ 99.068492][ T7042] sd 0:0:1:0: ASC=0x20 ASCQ=0x0 [ 99.199265][ T9] hub 3-1:0.0: 1 port detected [ 99.254703][ T10] rust_binder: 7063: undelivered freeze notification, 0000000000000001 [ 99.346080][ T361] usb 2-1: new high-speed USB device number 16 using dummy_hcd [ 99.394288][ T7084] loop5: detected capacity change from 0 to 7 [ 99.518182][ T361] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 99.534339][ T361] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 99.564435][ T361] usb 2-1: Product: syz [ 99.572907][ T361] usb 2-1: Manufacturer: syz [ 99.581806][ T361] usb 2-1: SerialNumber: syz [ 99.663042][ T7124] VFS: file-max limit 0 reached [ 99.736829][ T7139] netlink: 108 bytes leftover after parsing attributes in process `syz.4.1400'. [ 99.803389][ T7148] FAULT_INJECTION: forcing a failure. [ 99.803389][ T7148] name failslab, interval 1, probability 0, space 0, times 0 [ 99.819482][ T7148] CPU: 0 UID: 0 PID: 7148 Comm: syz.4.1402 Not tainted syzkaller #0 ae7936ebab52aae609823c9494ba9ebab2c98923 [ 99.819525][ T7148] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 99.819541][ T7148] Call Trace: [ 99.819548][ T7148] [ 99.819557][ T7148] __dump_stack+0x21/0x30 [ 99.819600][ T7148] dump_stack_lvl+0x140/0x1c0 [ 99.819635][ T7148] ? __cfi_dump_stack_lvl+0x10/0x10 [ 99.819672][ T7148] ? __cfi_futex_wake_mark+0x10/0x10 [ 99.819703][ T7148] dump_stack+0x19/0x20 [ 99.819738][ T7148] should_fail_ex+0x3c2/0x510 [ 99.819762][ T7148] ? lsm_fill_user_ctx+0xb7/0x320 [ 99.819797][ T7148] should_failslab+0xac/0x100 [ 99.819822][ T7148] __kmalloc_noprof+0x69/0x510 [ 99.819855][ T7148] ? lsm_fill_user_ctx+0xb7/0x320 [ 99.819889][ T7148] ? selinux_lsm_getattr+0x285/0x380 [ 99.819924][ T7148] lsm_fill_user_ctx+0xb7/0x320 [ 99.819959][ T7148] selinux_getselfattr+0xd2/0x140 [ 99.819982][ T7148] ? __cfi_selinux_getselfattr+0x10/0x10 [ 99.820006][ T7148] ? __cfi_do_futex+0x10/0x10 [ 99.820028][ T7148] ? mutex_unlock+0x90/0x240 [ 99.820058][ T7148] security_getselfattr+0x2f5/0xb10 [ 99.820082][ T7148] ? __se_sys_futex+0x13c/0x320 [ 99.820106][ T7148] ? __cfi_security_getselfattr+0x10/0x10 [ 99.820133][ T7148] ? __kasan_check_write+0x18/0x20 [ 99.820164][ T7148] ? fpregs_restore_userregs+0x11c/0x260 [ 99.820198][ T7148] __x64_sys_lsm_get_self_attr+0x9e/0xb0 [ 99.820232][ T7148] x64_sys_call+0x2d4c/0x2ee0 [ 99.820256][ T7148] do_syscall_64+0x57/0xf0 [ 99.820280][ T7148] ? clear_bhb_loop+0x50/0xa0 [ 99.820312][ T7148] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 99.820343][ T7148] RIP: 0033:0x7efe1d59f559 [ 99.820376][ T7148] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 99.820398][ T7148] RSP: 002b:00007efe1e489028 EFLAGS: 00000246 ORIG_RAX: 00000000000001cb [ 99.820425][ T7148] RAX: ffffffffffffffda RBX: 00007efe1d825fa0 RCX: 00007efe1d59f559 [ 99.820444][ T7148] RDX: 0000200000001640 RSI: 0000200000000600 RDI: 0000000000000065 [ 99.820462][ T7148] RBP: 00007efe1d636b20 R08: 0000000000000000 R09: 0000000000000000 [ 99.820477][ T7148] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 99.820492][ T7148] R13: 00007efe1d826038 R14: 00007efe1d825fa0 R15: 00007fff3d2f1b68 [ 99.820512][ T7148] [ 100.111635][ T7165] ptp ptp0: guarantee physical clock free running [ 100.118403][ T7165] ptp ptp0: delete virtual clock ptp1 [ 100.124711][ T7165] ptp ptp0: only physical clock in use now [ 100.148753][ T7170] netlink: 'syz.3.1407': attribute type 4 has an invalid length. [ 100.206575][ T7179] netlink: 182 bytes leftover after parsing attributes in process `syz.4.1409'. [ 100.292782][ T36] audit: type=1400 audit(1792715477.238:600): avc: denied { setattr } for pid=7194 comm="syz.3.1413" name="/" dev="incremental-fs" ino=2105 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 100.323700][ T7198] FAULT_INJECTION: forcing a failure. [ 100.323700][ T7198] name failslab, interval 1, probability 0, space 0, times 0 [ 100.336752][ T7198] CPU: 0 UID: 0 PID: 7198 Comm: syz.3.1414 Not tainted syzkaller #0 ae7936ebab52aae609823c9494ba9ebab2c98923 [ 100.336802][ T7198] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 100.336818][ T7198] Call Trace: [ 100.336826][ T7198] [ 100.336835][ T7198] __dump_stack+0x21/0x30 [ 100.336876][ T7198] dump_stack_lvl+0x140/0x1c0 [ 100.336910][ T7198] ? __cfi_dump_stack_lvl+0x10/0x10 [ 100.336945][ T7198] ? do_futex+0x32a/0x510 [ 100.336969][ T7198] dump_stack+0x19/0x20 [ 100.337001][ T7198] should_fail_ex+0x3c2/0x510 [ 100.337025][ T7198] should_failslab+0xac/0x100 [ 100.337048][ T7198] kmem_cache_alloc_noprof+0x42/0x410 [ 100.337081][ T7198] ? __se_sys_getcwd+0x6c/0x440 [ 100.337125][ T7198] __se_sys_getcwd+0x6c/0x440 [ 100.337158][ T7198] ? __kasan_check_write+0x18/0x20 [ 100.337189][ T7198] ? fpregs_restore_userregs+0x11c/0x260 [ 100.337222][ T7198] __x64_sys_getcwd+0x5f/0x80 [ 100.337254][ T7198] x64_sys_call+0x1c71/0x2ee0 [ 100.337277][ T7198] do_syscall_64+0x57/0xf0 [ 100.337300][ T7198] ? clear_bhb_loop+0x50/0xa0 [ 100.337331][ T7198] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 100.337359][ T7198] RIP: 0033:0x7fea67d9f559 [ 100.337378][ T7198] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 100.337398][ T7198] RSP: 002b:00007fea68b8c028 EFLAGS: 00000246 ORIG_RAX: 000000000000004f [ 100.337423][ T7198] RAX: ffffffffffffffda RBX: 00007fea68025fa0 RCX: 00007fea67d9f559 [ 100.337441][ T7198] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 100.337455][ T7198] RBP: 00007fea67e36b20 R08: 0000000000000000 R09: 0000000000000000 [ 100.337471][ T7198] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 100.337486][ T7198] R13: 00007fea68026038 R14: 00007fea68025fa0 R15: 00007ffe84155c08 [ 100.337507][ T7198] [ 100.337574][ T9] hub 3-1:0.0: hub_hub_status failed (err = -32)                                                                                                                                                                                                                        [ 101.805906][ T36] audit: type=1400 audit(1792715478.728:604): avc: denied { write } for pid=7352 comm="syz.3.1442" path="socket:[27611]" dev="sockfs" ino=27611 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 101.817630][ T9] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 101.842723][ T296] ================================================================== [ 101.850854][ T296] BUG: KASAN: null-ptr-deref in ihold+0x24/0x70 [ 101.855988][ T36] audit: type=1400 audit(1792715478.728:605): avc: denied { search } for pid=7351 comm="getty" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:getty_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 101.857135][ T296] Write of size 4 at addr 0000000000000168 by task syz-executor/296 [ 101.886236][ T296] [ 101.888599][ T296] CPU: 0 UID: 0 PID: 296 Comm: syz-executor Tainted: G W syzkaller #0 ae7936ebab52aae609823c9494ba9ebab2c98923 [ 101.888637][ T296] Tainted: [W]=WARN [ 101.888645][ T296] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 101.888660][ T296] Call Trace: [ 101.888668][ T296] [ 101.888675][ T296] __dump_stack+0x21/0x30 [ 101.888714][ T296] dump_stack_lvl+0x140/0x1c0 [ 101.888747][ T296] ? __cfi_dump_stack_lvl+0x10/0x10 [ 101.888794][ T296] print_report+0x3d/0x70 [ 101.888825][ T296] kasan_report+0x162/0x1a0 [ 101.888847][ T296] ? ihold+0x24/0x70 [ 101.888868][ T296] ? ihold+0x24/0x70 [ 101.888886][ T296] kasan_check_range+0x25a/0x2b0 [ 101.888910][ T296] __kasan_check_write+0x18/0x20 [ 101.888938][ T296] ihold+0x24/0x70 [ 101.888956][ T296] vfs_rmdir+0x25c/0x560 [ 101.888981][ T296] incfs_kill_sb+0x102/0x220 [ 101.889011][ T296] deactivate_locked_super+0xd5/0x270 syzkaller [ 101.889036][ T296] deactivate_super+0xb8/0xe0 [ 101.889061][ T296] cleanup_mnt+0x438/0x4d0 [ 101.889082][ T296] __cleanup_mnt+0x1d/0x40 [ 101.889102][ T296] task_work_run+0x1e8/0x260 [ 101.889131][ T296] ? __cfi_task_work_run+0x10/0x10 syzkaller login:[ 101.889167][ T296] ? __x64_sys_umount+0x12e/0x180 [ 101.889193][ T296] ? __cfi___x64_sys_umount+0x10/0x10 [ 101.889220][ T296] ? __kasan_check_read+0x15/0x20 [ 101.889248][ T296] resume_user_mode_work+0x35/0x50 [ 101.889274][ T296] syscall_exit_to_user_mode+0x63/0xb0 [ 101.889305][ T296] do_syscall_64+0x63/0xf0 [ 101.889326][ T296] ? clear_bhb_loop+0x50/0xa0 [ 101.889355][ T296] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 101.889382][ T296] RIP: 0033:0x7f3ff3da0797 [ 101.889401][ T296] Code: a2 c7 05 5c 9f 25 00 00 00 00 00 eb 96 e8 e1 12 00 00 90 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8 [ 101.889419][ T296] RSP: 002b:00007ffdff99ea58 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6 [ 101.889441][ T296] RAX: 0000000000000000 RBX: 0000000000000000 RCX: 00007f3ff3da0797 [ 101.889456][ T296] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffdff99eb10 [ 101.889469][ T296] RBP: 00007ffdff99eb10 R08: 00007ffdff99fb10 R09: 00000000ffffffff [ 101.889485][ T296] R10: 0000000000000000 R11: 0000000000000246 R12: 00007ffdff99fba0 [ 101.889499][ T296] R13: 00007f3ff3e35f63 R14: 0000000000018bd3 R15: 00007ffdff99fbe0 [ 101.889517][ T296] [ 101.889524][ T296] ================================================================== [ 101.922724][ T36] audit: type=1400 audit(1792715478.728:606): avc: denied { read write } for pid=7351 comm="getty" name="utmp" dev="tmpfs" ino=2 scontext=system_u:system_r:getty_t tcontext=system_u:object_r:init_tmpfs_t tclass=file permissive=1 [ 101.953539][ T9] usb 5-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 1024 [ 102.006597][ T36] audit: type=1400 audit(1792715478.728:607): avc: denied { open } for pid=7351 comm="getty" path="/run/utmp" dev="tmpfs" ino=2 scontext=system_u:system_r:getty_t tcontext=system_u:object_r:init_tmpfs_t tclass=file permissive=1 [ 102.006702][ T36] audit: type=1400 audit(1792715478.728:608): avc: denied { lock } for pid=7351 comm="getty" path="/run/utmp" dev="tmpfs" ino=2 scontext=system_u:system_r:getty_t tcontext=system_u:object_r:init_tmpfs_t tclass=file permissive=1 [ 102.044543][ T9] usb 5-1: config 1 interface 1 altsetting 1 endpoint 0x3 has invalid wMaxPacketSize 0 [ 102.100176][ T36] audit: type=1400 audit(1792715478.728:609): avc: denied { read } for pid=7351 comm="getty" name="log" dev="sda1" ino=2010 scontext=system_u:system_r:getty_t tcontext=system_u:object_r:var_t tclass=lnk_file permissive=1 [ 102.106406][ T296] Disabling lock debugging due to kernel taint [ 102.249026][ T296] BUG: kernel NULL pointer dereference, address: 0000000000000168 [ 102.256923][ T296] #PF: supervisor write access in kernel mode [ 102.263122][ T296] #PF: error_code(0x0002) - not-present page [ 102.269141][ T296] PGD 8000000100167067 P4D 8000000100167067 PUD 0 [ 102.275699][ T296] Oops: Oops: 0002 [#1] PREEMPT SMP KASAN PTI [ 102.281903][ T296] CPU: 0 UID: 0 PID: 296 Comm: syz-executor Tainted: G B W syzkaller #0 ae7936ebab52aae609823c9494ba9ebab2c98923 [ 102.295058][ T296] Tainted: [B]=BAD_PAGE, [W]=WARN [ 102.300119][ T296] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 102.310208][ T296] RIP: 0010:ihold+0x2a/0x70 [ 102.314754][ T296] Code: f3 0f 1e fa 55 48 89 e5 41 56 53 48 89 fb e8 cd 77 94 ff 48 8d bb 68 01 00 00 be 04 00 00 00 e8 bc 02 ee ff 41 be 01 00 00 00 44 0f c1 b3 68 01 00 00 41 ff c6 bf 02 00 00 00 44 89 f6 e8 dd [ 102.334427][ T296] RSP: 0018:ffffc9000121fcc8 EFLAGS: 00010246 [ 102.340540][ T296] RAX: ffff888121a5e200 RBX: 0000000000000000 RCX: ffff888121a5e2c0 [ 102.348554][ T296] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 102.356609][ T296] RBP: ffffc9000121fcd8 R08: ffffffff893cd947 R09: 1ffffffff1279b28 [ 102.364622][ T296] R10: dffffc0000000000 R11: fffffbfff1279b29 R12: 0000000000000000 [ 102.372713][ T296] R13: 0000000000000000 R14: 0000000000000001 R15: dffffc0000000000 [ 102.380722][ T296] FS: 000055558b2cd500(0000) GS:ffff8881f6c00000(0000) knlGS:0000000000000000 [ 102.389687][ T296] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 102.396388][ T296] CR2: 0000000000000168 CR3: 0000000121bdc000 CR4: 00000000003526b0 [ 102.404399][ T296] Call Trace: [ 102.407702][ T296] [ 102.410660][ T296] vfs_rmdir+0x25c/0x560 [ 102.414940][ T296] incfs_kill_sb+0x102/0x220 [ 102.419597][ T296] deactivate_locked_super+0xd5/0x270 [ 102.425021][ T296] deactivate_super+0xb8/0xe0 [ 102.429750][ T296] cleanup_mnt+0x438/0x4d0 [ 102.434203][ T296] __cleanup_mnt+0x1d/0x40 [ 102.438654][ T296] task_work_run+0x1e8/0x260 [ 102.443291][ T296] ? __cfi_task_work_run+0x10/0x10 [ 102.448462][ T296] ? __x64_sys_umount+0x12e/0x180 [ 102.453588][ T296] ? __cfi___x64_sys_umount+0x10/0x10 [ 102.459106][ T296] ? __kasan_check_read+0x15/0x20 [ 102.464182][ T296] resume_user_mode_work+0x35/0x50 [ 102.469336][ T296] syscall_exit_to_user_mode+0x63/0xb0 [ 102.474850][ T296] do_syscall_64+0x63/0xf0 [ 102.479301][ T296] ? clear_bhb_loop+0x50/0xa0 [ 102.484014][ T296] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 102.490019][ T296] RIP: 0033:0x7f3ff3da0797 [ 102.494462][ T296] Code: a2 c7 05 5c 9f 25 00 00 00 00 00 eb 96 e8 e1 12 00 00 90 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8 [ 102.514114][ T296] RSP: 002b:00007ffdff99ea58 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6 [ 102.522567][ T296] RAX: 0000000000000000 RBX: 0000000000000000 RCX: 00007f3ff3da0797 [ 102.530561][ T296] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffdff99eb10 [ 102.538563][ T296] RBP: 00007ffdff99eb10 R08: 00007ffdff99fb10 R09: 00000000ffffffff [ 102.546579][ T296] R10: 0000000000000000 R11: 0000000000000246 R12: 00007ffdff99fba0 [ 102.554674][ T296] R13: 00007f3ff3e35f63 R14: 0000000000018bd3 R15: 00007ffdff99fbe0 [ 102.562684][ T296] [ 102.565733][ T296] Modules linked in: [ 102.569680][ T296] CR2: 0000000000000168 [ 102.573857][ T296] ---[ end trace 0000000000000000 ]--- [ 102.579347][ T296] RIP: 0010:ihold+0x2a/0x70 [ 102.583887][ T296] Code: f3 0f 1e fa 55 48 89 e5 41 56 53 48 89 fb e8 cd 77 94 ff 48 8d bb 68 01 00 00 be 04 00 00 00 e8 bc 02 ee ff 41 be 01 00 00 00 44 0f c1 b3 68 01 00 00 41 ff c6 bf 02 00 00 00 44 89 f6 e8 dd [ 102.603541][ T296] RSP: 0018:ffffc9000121fcc8 EFLAGS: 00010246 [ 102.609642][ T296] RAX: ffff888121a5e200 RBX: 0000000000000000 RCX: ffff888121a5e2c0 [ 102.617658][ T296] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 102.625666][ T296] RBP: ffffc9000121fcd8 R08: ffffffff893cd947 R09: 1ffffffff1279b28 [ 102.633674][ T296] R10: dffffc0000000000 R11: fffffbfff1279b29 R12: 0000000000000000 [ 102.641678][ T296] R13: 0000000000000000 R14: 0000000000000001 R15: dffffc0000000000 [ 102.649680][ T296] FS: 000055558b2cd500(0000) GS:ffff8881f6c00000(0000) knlGS:0000000000000000 [ 102.658716][ T296] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 102.665363][ T296] CR2: 0000000000000168 CR3: 0000000121bdc000 CR4: 00000000003526b0 [ 102.673384][ T296] Kernel panic - not syncing: Fatal exception [ 102.679496][ T296] Kernel Offset: disabled [ 102.683851][ T296] Rebooting in 86400 seconds..