last executing test programs: 9.978959619s ago: executing program 4 (id=1039): r0 = socket$inet_udp(0x2, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8c}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000480)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) socket$nl_route(0x10, 0x3, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) r4 = dup(0xffffffffffffffff) r5 = fanotify_init(0x1, 0x101000) fanotify_mark(r5, 0x1, 0x800003b, r4, 0x0) preadv(r0, 0x0, 0x0, 0x100, 0x6) 9.285700585s ago: executing program 2 (id=1043): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) keyctl$clear(0x3, 0xfffffffffffffffd) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0) r3 = syz_open_dev$usbfs(&(0x7f0000000100), 0x76, 0x101b01) r4 = syz_open_dev$usbfs(&(0x7f0000000080), 0x206, 0x20182) ioctl$USBDEVFS_ALLOW_SUSPEND(r4, 0x5522) r5 = socket(0x10, 0x803, 0x0) write(r5, &(0x7f0000000340)="2600000022004701050007108980e8ff06006d20002b1ffec0e90101c7bb0000b00000000000", 0x26) setsockopt$sock_int(r5, 0x1, 0x8, &(0x7f0000d9bffc), 0x4) sendto(r5, &(0x7f0000000380)="120000001200e7ef007b00000000000000a1", 0x12, 0x20000090, 0x0, 0x0) recvmmsg(r5, &(0x7f0000000a80), 0x0, 0x10120, 0x0) ioctl$USBDEVFS_DISCONNECT_CLAIM(r3, 0x8108551b, &(0x7f0000000140)={0x0, 0x2, "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"}) ioctl$USBDEVFS_ALLOW_SUSPEND(r3, 0x5522) ioctl$USBDEVFS_SETINTERFACE(r3, 0x80045510, &(0x7f0000000040)={0x0, 0x200000}) ioctl$NILFS_IOCTL_GET_BDESCS(r2, 0xc0186e87, &(0x7f0000000640)={&(0x7f0000000540)=[{0x4, 0x8000000000000001, 0x4, 0x91, 0x1}, {0x3, 0x9, 0x0, 0x0, 0x4}, {0x800, 0xfffffffffffffff8, 0x4, 0x800, 0x2}, {0xc, 0x5, 0xffffffffffffffff, 0x3, 0x1}, {0x89e, 0x4, 0x0, 0x7fffffffffffffff, 0x5}, {0x5, 0x3, 0x8, 0x5, 0x2}], 0x6, 0x28, 0x5, 0x3}) syz_open_dev$vcsn(0x0, 0xd0f, 0x103000) getpgid(r0) syz_clone3(&(0x7f0000000340)={0xc6107700, &(0x7f00000000c0), 0x0, 0x0, {0x19}, 0x0, 0x0, 0x0, 0x0}, 0x58) 7.676783458s ago: executing program 0 (id=1045): r0 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r0) wait4(r0, 0x0, 0x8, 0x0) ptrace$getregset(0x4204, r0, 0x202, &(0x7f0000000140)={0x0}) 7.676551872s ago: executing program 4 (id=1046): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) keyctl$clear(0x3, 0xfffffffffffffffd) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0) r3 = syz_open_dev$usbfs(&(0x7f0000000100), 0x76, 0x101b01) r4 = syz_open_dev$usbfs(&(0x7f0000000080), 0x206, 0x20182) ioctl$USBDEVFS_ALLOW_SUSPEND(r4, 0x5522) r5 = socket(0x10, 0x803, 0x0) write(r5, &(0x7f0000000340)="2600000022004701050007108980e8ff06006d20002b1ffec0e90101c7bb0000b00000000000", 0x26) setsockopt$sock_int(r5, 0x1, 0x8, &(0x7f0000d9bffc), 0x4) sendto(r5, &(0x7f0000000380)="120000001200e7ef007b00000000000000a1", 0x12, 0x20000090, 0x0, 0x0) recvmmsg(r5, &(0x7f0000000a80), 0x0, 0x10120, 0x0) ioctl$USBDEVFS_DISCONNECT_CLAIM(r3, 0x8108551b, &(0x7f0000000140)={0x0, 0x2, "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"}) ioctl$USBDEVFS_ALLOW_SUSPEND(r3, 0x5522) ioctl$USBDEVFS_SETINTERFACE(r3, 0x80045510, &(0x7f0000000040)={0x0, 0x200000}) ioctl$NILFS_IOCTL_GET_BDESCS(r2, 0xc0186e87, &(0x7f0000000640)={&(0x7f0000000540)=[{0x4, 0x8000000000000001, 0x4, 0x91, 0x1}, {0x3, 0x9, 0x0, 0x0, 0x4}, {0x800, 0xfffffffffffffff8, 0x4, 0x800, 0x2}, {0xc, 0x5, 0xffffffffffffffff, 0x3, 0x1}, {0x89e, 0x4, 0x0, 0x7fffffffffffffff, 0x5}, {0x5, 0x3, 0x8, 0x5, 0x2}], 0x6, 0x28, 0x5, 0x3}) syz_open_dev$vcsn(0x0, 0xd0f, 0x103000) bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0xe, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0xb, '\x00', 0x0, @sk_skb}, 0x94) syz_clone3(&(0x7f0000000340)={0xc6107700, &(0x7f00000000c0), 0x0, 0x0, {0x19}, 0x0, 0x0, 0x0, 0x0}, 0x58) 6.496928082s ago: executing program 0 (id=1049): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeeb, 0x8031, 0xffffffffffffffff, 0xbf5ce000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) socket$inet6(0xa, 0x1, 0x0) r3 = fsopen(&(0x7f0000000080)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r3, 0x6, 0x0, 0x0, 0x0) r4 = openat$cgroup(0xffffffffffffffff, &(0x7f00000000c0)='syz0\x00', 0x200002, 0x0) r5 = openat$cgroup_ro(r4, &(0x7f0000000240)='cpu.stat\x00', 0x0, 0x0) read$FUSE(r5, &(0x7f0000004000)={0x2020}, 0x2020) 5.914503735s ago: executing program 3 (id=1051): sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0xfffffffffffffea6, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[], 0x60}}, 0x0) r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000580), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) r1 = eventfd(0xfffffff9) ioctl$VHOST_SET_LOG_FD(r0, 0x4004af07, &(0x7f0000000240)=r1) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f0000000040)={0x1, r1}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000140)={0x0, 0x0, 0x0, &(0x7f0000000500)=""/67, 0x0}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, 0x0, &(0x7f00000000c0)=""/87, &(0x7f0000000480)=""/70, 0x100000}) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000680)) ioctl$VHOST_SET_VRING_ERR(r0, 0x4008af22, &(0x7f00000002c0)={0x1, r1}) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f0000000000)=0x1) socket(0x10, 0x803, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e22}, 0x5) r4 = socket$vsock_stream(0x28, 0x1, 0x0) getsockopt(r4, 0x28, 0xfffffffe, &(0x7f0000001680)=""/56, &(0x7f0000000280)=0x38) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) 5.911014717s ago: executing program 4 (id=1052): ioctl$AUTOFS_IOC_PROTOSUBVER(0xffffffffffffffff, 0x80049367, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_UNLOCK(0xffffffffffffffff, 0xc4c85513, &(0x7f0000000040)={0x1, 0x2000000, 0x1, 0xe20, 'syz0\x00', 0xfffffffc}) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10158, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) accept4$bt_l2cap(r3, 0x0, 0x0, 0x800) 5.279135441s ago: executing program 0 (id=1053): r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_REQ_SET_REG(r1, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000001980)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYBLOB="05002dbd7000fcdbdf251b000000060021"], 0x24}, 0x1, 0x0, 0x0, 0x810}, 0x20000080) sendmsg$NL80211_CMD_DEL_STATION(r0, 0x0, 0x40004) syz_usb_connect(0x2, 0x4e, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000200000040cd06350100010000000109023c0001010080320904000006ff000000070581024000000705010240000007058402400000070502024000000705880240000007050602400000"], &(0x7f0000000800)={0x0, 0x0, 0x0, 0x0}) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./dev\x00', 0x1ff) mount(&(0x7f0000000200)=@filename='\x00', &(0x7f0000000300)='./dev\x00', &(0x7f0000000400)='devtmpfs\x00', 0x0, 0x0) nanosleep(&(0x7f0000000500)={0x1}, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000600)='./dev/ttyUSB0\x00', 0x2, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) bind$netlink(r2, &(0x7f0000000140)={0x10, 0x0, 0x25dfdbfc, 0x2}, 0xc) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000100)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_REGISTER_FRAME(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000002c0)={0x1c, r3, 0x1, 0x0, 0xfffffffe, {{}, {@val={0x8, 0x3, r4}, @void}}}, 0x1c}}, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), 0xffffffffffffffff) 5.081129758s ago: executing program 2 (id=1054): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x80102, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = eventfd2(0xe5c, 0x1) ioctl$KVM_IRQFD(r1, 0x4020ae76, &(0x7f0000000240)={0xffffffffffffffff, 0x7, 0x2, r2}) ioctl$KVM_IRQ_LINE(r1, 0x4008ae61, &(0x7f0000000000)={0x7, 0x6}) 4.838029063s ago: executing program 2 (id=1057): r0 = syz_usb_connect(0x0, 0x36, &(0x7f0000000280)=ANY=[@ANYBLOB="12010000772904202404019957c2010203010902240001000010000904430002317d5500090502020002220000090582020002"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$sierra_net(r0, 0x0, &(0x7f0000001280)={0x1c, &(0x7f0000000580)={0x40, 0x16, 0x4, "906a6007"}, 0x0, &(0x7f0000001240)}) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$lan78xx(r0, 0x0, &(0x7f0000001940)={0x34, &(0x7f0000001740)={0x20, 0xe, 0x15, "08c3c3c8745098bbf2c41622201493868a5a20ce6e"}, &(0x7f0000001800)={0x0, 0xa, 0x1, 0x1}, &(0x7f0000001840)={0x0, 0x8, 0x1, 0x9}, &(0x7f0000001880)={0xc0, 0xa1, 0x4, 0xffff}, &(0x7f00000018c0)={0x40, 0xa0, 0x4, 0x108}, &(0x7f0000001900)={0xc0, 0xa2, 0x2f, "295a65907e2c9f881c3956188e02a0c244f7ac6917c3b2d0823c2c0d159b34e863a745cff95a6ce8ab261f419448a1"}}) 4.83776867s ago: executing program 4 (id=1058): syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000297ff8208582005109bc10102030109021200010100800009048f0000bf575a00"], 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./mysys\x00', 0x1ff) mount(&(0x7f0000000040)=@filename='none\x00', &(0x7f0000000080)='./mysys\x00', &(0x7f00000000c0)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./mysys/bus/platform/drivers/dummy_hcd/unbind\x00', 0x1, 0x0) write(r0, &(0x7f0000000200)='dummy_hcd.0\x00', 0xb) close(r0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./mysys/bus/platform/drivers/dummy_hcd/bind\x00', 0x1, 0x0) write(r1, &(0x7f0000000400)='dummy_hcd.0\x00', 0xb) 4.68227224s ago: executing program 3 (id=1059): openat$userfaultfd(0xffffffffffffff9c, 0x0, 0x80001, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) keyctl$set_reqkey_keyring(0xe, 0x3) ioctl$TCSETS(0xffffffffffffffff, 0x40045431, 0x0) r3 = syz_open_dev$tty1(0xc, 0x4, 0x1) r4 = dup(r3) write$UHID_INPUT(r4, &(0x7f0000002100)={0x18, {"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", 0x1000}}, 0x1006) 3.871054607s ago: executing program 1 (id=1060): syz_usb_connect$uac1(0x2, 0x0, 0x0, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0}) r0 = syz_open_dev$sndpcmp(&(0x7f0000000100), 0x1, 0x2) r1 = syz_open_dev$sndpcmc(&(0x7f0000000120), 0x1, 0x2) r2 = syz_open_dev$sndpcmp(&(0x7f0000000140), 0x2, 0x2) r3 = syz_open_dev$sndpcmc(&(0x7f0000000160), 0x2, 0x2) r4 = syz_open_dev$sndpcmp(&(0x7f0000000180), 0x0, 0x2) r5 = syz_open_dev$sndpcmc(&(0x7f00000001a0), 0x0, 0x2) ioctl$SNDRV_PCM_IOCTL_HW_PARAMS(r0, 0xc2604111, &(0x7f0000000200)={0x0, [[0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff], [0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff], [0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff]], '\x00', [{0x10, 0x10, 0x0, 0x0, 0x1}, {0x20, 0x20, 0x0, 0x0, 0x1}, {0x2, 0x2, 0x0, 0x0, 0x1}, {0xac44, 0xac44, 0x0, 0x0, 0x1}, {0x1388, 0x186a0, 0x0, 0x0, 0x1}, {0x100, 0x400, 0x0, 0x0, 0x1}, {0x400, 0x1000, 0x0, 0x0, 0x1}, {0x2, 0x8, 0x0, 0x0, 0x1}, {0x2710, 0xf4240, 0x0, 0x0, 0x1}, {0x400, 0x1000, 0x0, 0x0, 0x1}, {0x1000, 0x4000, 0x0, 0x0, 0x1}, {0x0, 0xf4240, 0x0, 0x0, 0x1}]}) ioctl$SNDRV_PCM_IOCTL_HW_PARAMS(r1, 0xc2604111, &(0x7f0000000400)={0x0, [[0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff], [0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff], [0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff]], '\x00', [{0x10, 0x10, 0x0, 0x0, 0x1}, {0x20, 0x20, 0x0, 0x0, 0x1}, {0x2, 0x2, 0x0, 0x0, 0x1}, {0xac44, 0xac44, 0x0, 0x0, 0x1}, {0x1388, 0x186a0, 0x0, 0x0, 0x1}, {0x100, 0x400, 0x0, 0x0, 0x1}, {0x400, 0x1000, 0x0, 0x0, 0x1}, {0x2, 0x8, 0x0, 0x0, 0x1}, {0x2710, 0xf4240, 0x0, 0x0, 0x1}, {0x400, 0x1000, 0x0, 0x0, 0x1}, {0x1000, 0x4000, 0x0, 0x0, 0x1}, {0x0, 0xf4240, 0x0, 0x0, 0x1}]}) ioctl$SNDRV_PCM_IOCTL_HW_PARAMS(r2, 0xc2604111, &(0x7f0000000600)={0x0, [[0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff], [0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff], [0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff]], '\x00', [{0x10, 0x10, 0x0, 0x0, 0x1}, {0x20, 0x20, 0x0, 0x0, 0x1}, {0x2, 0x2, 0x0, 0x0, 0x1}, {0xac44, 0xac44, 0x0, 0x0, 0x1}, {0x1388, 0x186a0, 0x0, 0x0, 0x1}, {0x100, 0x400, 0x0, 0x0, 0x1}, {0x400, 0x1000, 0x0, 0x0, 0x1}, {0x2, 0x8, 0x0, 0x0, 0x1}, {0x2710, 0xf4240, 0x0, 0x0, 0x1}, {0x400, 0x1000, 0x0, 0x0, 0x1}, {0x1000, 0x4000, 0x0, 0x0, 0x1}, {0x0, 0xf4240, 0x0, 0x0, 0x1}]}) ioctl$SNDRV_PCM_IOCTL_HW_PARAMS(r3, 0xc2604111, &(0x7f0000000800)={0x0, [[0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff], [0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff], [0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff]], '\x00', [{0x10, 0x10, 0x0, 0x0, 0x1}, {0x20, 0x20, 0x0, 0x0, 0x1}, {0x2, 0x2, 0x0, 0x0, 0x1}, {0xac44, 0xac44, 0x0, 0x0, 0x1}, {0x1388, 0x186a0, 0x0, 0x0, 0x1}, {0x100, 0x400, 0x0, 0x0, 0x1}, {0x400, 0x1000, 0x0, 0x0, 0x1}, {0x2, 0x8, 0x0, 0x0, 0x1}, {0x2710, 0xf4240, 0x0, 0x0, 0x1}, {0x400, 0x1000, 0x0, 0x0, 0x1}, {0x1000, 0x4000, 0x0, 0x0, 0x1}, {0x0, 0xf4240, 0x0, 0x0, 0x1}]}) ioctl$SNDRV_PCM_IOCTL_HW_PARAMS(r4, 0xc2604111, &(0x7f0000000a00)={0x0, [[0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff], [0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff], [0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff]], '\x00', [{0x10, 0x10, 0x0, 0x0, 0x1}, {0x20, 0x20, 0x0, 0x0, 0x1}, {0x2, 0x2, 0x0, 0x0, 0x1}, {0xac44, 0xac44, 0x0, 0x0, 0x1}, {0x1388, 0x186a0, 0x0, 0x0, 0x1}, {0x100, 0x400, 0x0, 0x0, 0x1}, {0x400, 0x1000, 0x0, 0x0, 0x1}, {0x2, 0x8, 0x0, 0x0, 0x1}, {0x2710, 0xf4240, 0x0, 0x0, 0x1}, {0x400, 0x1000, 0x0, 0x0, 0x1}, {0x1000, 0x4000, 0x0, 0x0, 0x1}, {0x0, 0xf4240, 0x0, 0x0, 0x1}]}) ioctl$SNDRV_PCM_IOCTL_HW_PARAMS(r5, 0xc2604111, &(0x7f0000000c00)={0x0, [[0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff], [0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff], [0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff]], '\x00', [{0x10, 0x10, 0x0, 0x0, 0x1}, {0x20, 0x20, 0x0, 0x0, 0x1}, {0x2, 0x2, 0x0, 0x0, 0x1}, {0xac44, 0xac44, 0x0, 0x0, 0x1}, {0x1388, 0x186a0, 0x0, 0x0, 0x1}, {0x100, 0x400, 0x0, 0x0, 0x1}, {0x400, 0x1000, 0x0, 0x0, 0x1}, {0x2, 0x8, 0x0, 0x0, 0x1}, {0x2710, 0xf4240, 0x0, 0x0, 0x1}, {0x400, 0x1000, 0x0, 0x0, 0x1}, {0x1000, 0x4000, 0x0, 0x0, 0x1}, {0x0, 0xf4240, 0x0, 0x0, 0x1}]}) ioctl$SNDRV_PCM_IOCTL_PREPARE(r0, 0x4140, 0x0) ioctl$SNDRV_PCM_IOCTL_PREPARE(r1, 0x4140, 0x0) ioctl$SNDRV_PCM_IOCTL_PREPARE(r2, 0x4140, 0x0) ioctl$SNDRV_PCM_IOCTL_PREPARE(r3, 0x4140, 0x0) ioctl$SNDRV_PCM_IOCTL_PREPARE(r4, 0x4140, 0x0) ioctl$SNDRV_PCM_IOCTL_PREPARE(r5, 0x4140, 0x0) ioctl$SNDRV_PCM_IOCTL_START(r0, 0x4142, 0x0) ioctl$SNDRV_PCM_IOCTL_START(r1, 0x4142, 0x0) ioctl$SNDRV_PCM_IOCTL_START(r3, 0x4142, 0x0) ioctl$SNDRV_PCM_IOCTL_START(r4, 0x4142, 0x0) ioctl$SNDRV_PCM_IOCTL_START(r5, 0x4142, 0x0) write$snddsp(r0, &(0x7f0000000e00)='\x00'/3071, 0xbff) read$snddsp(r1, &(0x7f0000001e00)=""/4096, 0x1000) write$snddsp(r2, &(0x7f0000002e00)='\x00'/4096, 0x1000) read$snddsp(r3, &(0x7f0000003e00)=""/4096, 0x1000) write$snddsp(r4, &(0x7f0000004e00)='\x00'/3840, 0xf00) read$snddsp(r5, &(0x7f0000005e00)=""/4096, 0x1000) 3.221055324s ago: executing program 1 (id=1061): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file0/usb_gadget\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0/usb_gadget/g1\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0/usb_gadget/g1/configs\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./file0/usb_gadget/g1/configs/c.1\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000180)='./file0/usb_gadget/g1/functions\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0/usb_gadget/g1/functions/obex.0\x00', 0x1ff) symlinkat(&(0x7f00000001c0)='./file0/usb_gadget/g1/functions/obex.0\x00', 0xffffffffffffff9c, &(0x7f0000000200)='./file0/usb_gadget/g1/configs/c.1/obex.0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0/usb_gadget/g1/UDC\x00', 0x2, 0x0) write(r0, &(0x7f0000000280)='dummy_udc.0', 0xb) write(r0, &(0x7f00000002c0)='\n', 0x1) 3.220778336s ago: executing program 3 (id=1062): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) keyctl$clear(0x3, 0xfffffffffffffffd) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0) r3 = syz_open_dev$usbfs(&(0x7f0000000100), 0x76, 0x101b01) r4 = syz_open_dev$usbfs(&(0x7f0000000080), 0x206, 0x20182) ioctl$USBDEVFS_ALLOW_SUSPEND(r4, 0x5522) r5 = socket(0x10, 0x803, 0x0) write(r5, &(0x7f0000000340)="2600000022004701050007108980e8ff06006d20002b1ffec0e90101c7bb0000b00000000000", 0x26) setsockopt$sock_int(r5, 0x1, 0x8, &(0x7f0000d9bffc), 0x4) sendto(r5, &(0x7f0000000380)="120000001200e7ef007b00000000000000a1", 0x12, 0x20000090, 0x0, 0x0) recvmmsg(r5, &(0x7f0000000a80), 0x0, 0x10120, 0x0) ioctl$USBDEVFS_DISCONNECT_CLAIM(r3, 0x8108551b, &(0x7f0000000140)={0x0, 0x2, "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"}) ioctl$USBDEVFS_ALLOW_SUSPEND(r3, 0x5522) ioctl$USBDEVFS_SETINTERFACE(r3, 0x80045510, &(0x7f0000000040)={0x0, 0x200000}) ioctl$NILFS_IOCTL_GET_BDESCS(r2, 0xc0186e87, &(0x7f0000000640)={&(0x7f0000000540)=[{0x4, 0x8000000000000001, 0x4, 0x91, 0x1}, {0x3, 0x9, 0x0, 0x0, 0x4}, {0x800, 0xfffffffffffffff8, 0x4, 0x800, 0x2}, {0xc, 0x5, 0xffffffffffffffff, 0x3, 0x1}, {0x89e, 0x4, 0x0, 0x7fffffffffffffff, 0x5}, {0x5, 0x3, 0x8, 0x5, 0x2}], 0x6, 0x28, 0x5, 0x3}) syz_open_dev$vcsn(0x0, 0xd0f, 0x103000) syz_clone3(&(0x7f0000000340)={0xc6107700, &(0x7f00000000c0), 0x0, 0x0, {0x19}, 0x0, 0x0, 0x0, 0x0}, 0x58) 3.070911443s ago: executing program 1 (id=1063): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r1 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x11, 0x800000000004, @tid=r1}, &(0x7f0000bbdffc)) fcntl$lock(0xffffffffffffffff, 0x26, &(0x7f0000000040)={0x0, 0x0, 0x60d3, 0x1}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{0x77359400}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000540), 0x82, 0x0) ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) 2.449753496s ago: executing program 1 (id=1064): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeeb, 0x8031, 0xffffffffffffffff, 0xbf5ce000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) socket$inet6(0xa, 0x1, 0x0) r3 = fsopen(&(0x7f0000000080)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r3, 0x6, 0x0, 0x0, 0x0) r4 = openat$cgroup(0xffffffffffffffff, &(0x7f00000000c0)='syz0\x00', 0x200002, 0x0) r5 = openat$cgroup_ro(r4, &(0x7f0000000240)='cpu.stat\x00', 0x0, 0x0) read$FUSE(r5, &(0x7f0000004000)={0x2020}, 0x2020) 2.312636455s ago: executing program 3 (id=1065): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) keyctl$clear(0x3, 0xfffffffffffffffd) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0) r3 = syz_open_dev$usbfs(&(0x7f0000000100), 0x76, 0x101b01) r4 = syz_open_dev$usbfs(&(0x7f0000000080), 0x206, 0x20182) ioctl$USBDEVFS_ALLOW_SUSPEND(r4, 0x5522) r5 = socket(0x10, 0x803, 0x0) write(r5, &(0x7f0000000340)="2600000022004701050007108980e8ff06006d20002b1ffec0e90101c7bb0000b00000000000", 0x26) setsockopt$sock_int(r5, 0x1, 0x8, &(0x7f0000d9bffc), 0x4) sendto(r5, &(0x7f0000000380)="120000001200e7ef007b00000000000000a1", 0x12, 0x20000090, 0x0, 0x0) recvmmsg(r5, &(0x7f0000000a80), 0x0, 0x10120, 0x0) ioctl$USBDEVFS_DISCONNECT_CLAIM(r3, 0x8108551b, &(0x7f0000000140)={0x0, 0x2, "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"}) ioctl$USBDEVFS_ALLOW_SUSPEND(r3, 0x5522) ioctl$USBDEVFS_SETINTERFACE(r3, 0x80045510, &(0x7f0000000040)={0x0, 0x200000}) ioctl$NILFS_IOCTL_GET_BDESCS(r2, 0xc0186e87, &(0x7f0000000640)={&(0x7f0000000540)=[{0x4, 0x8000000000000001, 0x4, 0x91, 0x1}, {0x3, 0x9, 0x0, 0x0, 0x4}, {0x800, 0xfffffffffffffff8, 0x4, 0x800, 0x2}, {0xc, 0x5, 0xffffffffffffffff, 0x3, 0x1}, {0x89e, 0x4, 0x0, 0x7fffffffffffffff, 0x5}, {0x5, 0x3, 0x8, 0x5, 0x2}], 0x6, 0x28, 0x5, 0x3}) getpgid(r0) syz_clone3(&(0x7f0000000340)={0xc6107700, &(0x7f00000000c0), 0x0, 0x0, {0x19}, 0x0, 0x0, 0x0, 0x0}, 0x58) 1.328610276s ago: executing program 1 (id=1066): openat$kvm(0x0, &(0x7f0000000040), 0x80000, 0x0) r0 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) ioctl$KVM_SET_CPUID2(r0, 0x4008ae90, &(0x7f0000040000)={0x2, 0x0, [{0x1, 0xfffffffc, 0x0, 0x9, 0x0, 0xffffffff, 0xffffffff}, {0x7, 0x0, 0x4, 0x0, 0xffffffff, 0x9, 0xffffffff}]}) 1.325676393s ago: executing program 3 (id=1068): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x80102, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = eventfd2(0xe5c, 0x1) ioctl$KVM_IRQFD(r1, 0x4020ae76, &(0x7f0000000240)={0xffffffffffffffff, 0x7, 0x2, r2}) ioctl$KVM_IRQ_LINE(r1, 0x4008ae61, &(0x7f0000000000)={0x7, 0x6}) 1.260081805s ago: executing program 4 (id=1069): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0xe0480, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000dd6000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x40, 0x0, 0x0) ioctl$KVM_UNREGISTER_COALESCED_MMIO(r1, 0x4010ae68, &(0x7f0000000040)={0x200000, 0x14000}) 1.259807515s ago: executing program 2 (id=1070): mkdir(&(0x7f0000000000)='dir0\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='dir0\x00', &(0x7f0000000100)='tracefs\x00', 0x0, 0x0) sched_setaffinity(0x0, 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000a00)='dir0/per_cpu/cpu0/trace\x00', 0x0, 0x0) close(r0) 1.256884321s ago: executing program 0 (id=1079): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) keyctl$clear(0x3, 0xfffffffffffffffd) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0) r3 = syz_open_dev$usbfs(&(0x7f0000000100), 0x76, 0x101b01) r4 = syz_open_dev$usbfs(&(0x7f0000000080), 0x206, 0x20182) ioctl$USBDEVFS_ALLOW_SUSPEND(r4, 0x5522) r5 = socket(0x10, 0x803, 0x0) write(r5, &(0x7f0000000340)="2600000022004701050007108980e8ff06006d20002b1ffec0e90101c7bb0000b00000000000", 0x26) setsockopt$sock_int(r5, 0x1, 0x8, &(0x7f0000d9bffc), 0x4) sendto(r5, &(0x7f0000000380)="120000001200e7ef007b00000000000000a1", 0x12, 0x20000090, 0x0, 0x0) recvmmsg(r5, &(0x7f0000000a80), 0x0, 0x10120, 0x0) ioctl$USBDEVFS_DISCONNECT_CLAIM(r3, 0x8108551b, &(0x7f0000000140)={0x0, 0x2, "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"}) ioctl$USBDEVFS_ALLOW_SUSPEND(r3, 0x5522) ioctl$USBDEVFS_SETINTERFACE(r3, 0x80045510, &(0x7f0000000040)={0x0, 0x200000}) getpgid(r0) syz_clone3(&(0x7f0000000340)={0xc6107700, &(0x7f00000000c0), 0x0, 0x0, {0x19}, 0x0, 0x0, 0x0, 0x0}, 0x58) 1.188262163s ago: executing program 2 (id=1071): ioctl$AUTOFS_IOC_PROTOSUBVER(0xffffffffffffffff, 0x80049367, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_UNLOCK(0xffffffffffffffff, 0xc4c85513, &(0x7f0000000040)={0x1, 0x2000000, 0x1, 0xe20, 'syz0\x00', 0xfffffffc}) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10158, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) accept4$bt_l2cap(r3, 0x0, 0x0, 0x800) 1.128856354s ago: executing program 1 (id=1072): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = syz_kvm_setup_syzos_vm$x86(r1, &(0x7f0000001000/0x1000)=nil) r3 = syz_kvm_add_vcpu$x86(r2, &(0x7f0000002000)={0x0, &(0x7f0000003000)=[@code={0xa, 0x3c, {"fab91b0000000f320d000400000f30b90f080000b8ff01000031d20f30b9210800000f32a90100000074f2"}}], 0x3c}) ioctl$KVM_RUN(r3, 0xae80, 0x0) (async) nanosleep(&(0x7f0000000000)={0x0, 0x1dcd6500}, 0x0) ioctl$KVM_SIGNAL_MSI(r1, 0x4020aea5, &(0x7f0000000100)={0xfee00000, 0x0, 0x20}) ioctl$KVM_GET_LAPIC(r3, 0x8400ae8e, &(0x7f0000000400)) 167.043098ms ago: executing program 0 (id=1073): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000480), 0x2, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = eventfd(0x0) ioctl$KVM_IRQFD(r1, 0x4020ae76, &(0x7f0000000000)={r2, 0x9, 0x2, r1}) 166.908713ms ago: executing program 2 (id=1074): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000000018105e04da0700000000000109022400010000000009040000090300000009210000000122220009058103"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f00000000c0)={0x24, 0x0, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="00222200000096231b26e53f6b839787662a900681749e82"], 0x0}, 0x0) 58.240297ms ago: executing program 4 (id=1075): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file0/usb_gadget\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0/usb_gadget/g1\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0/usb_gadget/g1/configs\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./file0/usb_gadget/g1/configs/c.1\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000180)='./file0/usb_gadget/g1/functions\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0/usb_gadget/g1/functions/obex.0\x00', 0x1ff) symlinkat(&(0x7f00000001c0)='./file0/usb_gadget/g1/functions/obex.0\x00', 0xffffffffffffff9c, &(0x7f0000000200)='./file0/usb_gadget/g1/configs/c.1/obex.0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0/usb_gadget/g1/UDC\x00', 0x2, 0x0) write(r0, &(0x7f0000000280)='dummy_udc.0', 0xb) write(r0, &(0x7f00000002c0)='\n', 0x1) 57.397286ms ago: executing program 3 (id=1086): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeeb, 0x8031, 0xffffffffffffffff, 0xbf5ce000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) socket$inet6(0xa, 0x1, 0x0) fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) r3 = fsmount(0xffffffffffffffff, 0x0, 0x8) r4 = openat$cgroup(r3, &(0x7f00000000c0)='syz0\x00', 0x200002, 0x0) r5 = openat$cgroup_ro(r4, &(0x7f0000000240)='cpu.stat\x00', 0x0, 0x0) read$FUSE(r5, &(0x7f0000004000)={0x2020}, 0x2020) 0s ago: executing program 0 (id=1076): r0 = socket$inet_udp(0x2, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8c}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000480)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) socket$nl_route(0x10, 0x3, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) r4 = dup(0xffffffffffffffff) r5 = fanotify_init(0x1, 0x101000) fanotify_mark(r5, 0x1, 0x800003b, r4, 0x0) preadv(r0, 0x0, 0x0, 0x100, 0x6) kernel console output (not intermixed with test programs): k_switch.isra.0+0x2c5/0x10c0 [ 131.900999][ T6682] ? lockdep_hardirqs_on+0x78/0x100 [ 131.901018][ T6682] ? finish_task_switch.isra.0+0x2c5/0x10c0 [ 131.901046][ T6682] ? rcu_is_watching+0x12/0xc0 [ 131.901072][ T6682] ? trace_sched_exit_tp+0x120/0x160 [ 131.901101][ T6682] ? __schedule+0x126e/0x6730 [ 131.901117][ T6682] ? tomoyo_path_number_perm+0x188/0x580 [ 131.901155][ T6682] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 131.901176][ T6682] ? do_vfs_ioctl+0x226/0x13e0 [ 131.901202][ T6682] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 131.901230][ T6682] ? irqentry_exit+0x24d/0xa00 [ 131.901248][ T6682] ? lockdep_hardirqs_on+0x78/0x100 [ 131.901265][ T6682] ? irqentry_exit+0x24d/0xa00 [ 131.901295][ T6682] ? security_file_ioctl+0x47/0x230 [ 131.901322][ T6682] ? __sanitizer_cov_trace_pc+0xb/0x70 [ 131.901344][ T6682] ? __pfx_kvm_vm_ioctl+0x10/0x10 [ 131.901371][ T6682] __x64_sys_ioctl+0x18e/0x210 [ 131.901400][ T6682] do_syscall_64+0x115/0x870 [ 131.901419][ T6682] ? clear_bhb_loop+0x40/0x90 [ 131.901442][ T6682] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 131.901460][ T6682] RIP: 0033:0x7f163d99de99 [ 131.901476][ T6682] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 131.901493][ T6682] RSP: 002b:00007f163e809028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 131.901512][ T6682] RAX: ffffffffffffffda RBX: 00007f163dc25fa0 RCX: 00007f163d99de99 [ 131.901524][ T6682] RDX: 0000000000000000 RSI: 000000000000ae41 RDI: 0000000000000004 [ 131.901534][ T6682] RBP: 00007f163da33eaf R08: 0000000000000000 R09: 0000000000000000 [ 131.901545][ T6682] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 131.901556][ T6682] R13: 00007f163dc26038 R14: 00007f163dc25fa0 R15: 00007ffe336f83f8 [ 131.901580][ T6682] [ 131.903041][ T10] usb 1-1: Using ep0 maxpacket: 8 [ 131.966051][ T6682] syz.1.246: vmalloc error: size 1048576, vm_struct allocation failed, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null) [ 132.012028][ T5599] CPU: 0 UID: 0 PID: 5599 Comm: udevd Not tainted syzkaller #0 PREEMPT(full) [ 132.012053][ T5599] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 132.012062][ T5599] Call Trace: [ 132.012068][ T5599] [ 132.012073][ T5599] dump_stack_lvl+0x100/0x190 [ 132.012099][ T5599] should_fail_ex.cold+0x5/0xa [ 132.012116][ T5599] ? prepare_alloc_pages+0x16d/0x5f0 [ 132.012140][ T5599] should_fail_alloc_page+0xeb/0x140 [ 132.012162][ T5599] prepare_alloc_pages+0x1f0/0x5f0 [ 132.012186][ T5599] __alloc_frozen_pages_noprof+0x1af/0x2dc0 [ 132.012208][ T5599] ? __lock_acquire+0x49f/0x1a40 [ 132.012227][ T5599] ? do_raw_spin_unlock+0x145/0x1e0 [ 132.012252][ T5599] ? __pfx___schedule+0x10/0x10 [ 132.012276][ T5599] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 132.012296][ T5599] ? irqentry_exit+0x24d/0xa00 [ 132.012313][ T5599] ? lockdep_hardirqs_on+0x78/0x100 [ 132.012329][ T5599] ? irqentry_exit+0x24d/0xa00 [ 132.012358][ T5599] ? __sanitizer_cov_trace_switch+0x16/0x90 [ 132.012377][ T5599] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 132.012397][ T5599] ? policy_nodemask+0xed/0x4f0 [ 132.012420][ T5599] alloc_pages_mpol+0x1fb/0x540 [ 132.012442][ T5599] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 132.012470][ T5599] folio_alloc_mpol_noprof+0x36/0x260 [ 132.012495][ T5599] shmem_alloc_folio+0x135/0x160 [ 132.012520][ T5599] shmem_alloc_and_add_folio+0x371/0xd40 [ 132.012542][ T5599] ? __pfx_shmem_alloc_and_add_folio+0x10/0x10 [ 132.012560][ T5599] ? shmem_allowable_huge_orders+0x2bd/0x400 [ 132.012581][ T5599] shmem_get_folio_gfp+0x6ad/0x1910 [ 132.012602][ T5599] ? __pfx_shmem_get_folio_gfp+0x10/0x10 [ 132.012625][ T5599] shmem_write_begin+0x1a4/0x420 [ 132.012643][ T5599] ? __pfx_shmem_write_begin+0x10/0x10 [ 132.012661][ T5599] ? balance_dirty_pages_ratelimited_flags+0x91/0x1170 [ 132.012680][ T5599] ? __mark_inode_dirty+0xf6b/0x16e0 [ 132.012707][ T5599] generic_perform_write+0x292/0xa40 [ 132.012736][ T5599] ? __pfx_generic_perform_write+0x10/0x10 [ 132.012757][ T5599] ? __mark_inode_dirty+0x55c/0x16e0 [ 132.012782][ T5599] ? mnt_put_write_access_file+0x4e/0x100 [ 132.012799][ T5599] ? file_update_time_flags+0x373/0x500 [ 132.012822][ T5599] shmem_file_write_iter+0x10e/0x140 [ 132.012843][ T5599] vfs_write+0x6ac/0x1050 [ 132.012867][ T5599] ? __pfx_shmem_file_write_iter+0x10/0x10 [ 132.012888][ T5599] ? __pfx_vfs_write+0x10/0x10 [ 132.012919][ T5599] ? fdget_pos+0x87/0x380 [ 132.012936][ T5599] ? fdget_pos+0x96/0x380 [ 132.012952][ T5599] ? fdget_pos+0xaf/0x380 [ 132.012972][ T5599] ksys_write+0x12a/0x250 [ 132.012995][ T5599] ? __pfx_ksys_write+0x10/0x10 [ 132.013025][ T5599] do_syscall_64+0x115/0x870 [ 132.013042][ T5599] ? clear_bhb_loop+0x40/0x90 [ 132.013061][ T5599] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 132.013077][ T5599] RIP: 0033:0x7ff4cf4a7407 [ 132.013092][ T5599] Code: 48 89 fa 4c 89 df e8 38 aa 00 00 8b 93 08 03 00 00 59 5e 48 83 f8 fc 74 1a 5b c3 0f 1f 84 00 00 00 00 00 48 8b 44 24 10 0f 05 <5b> c3 0f 1f 80 00 00 00 00 83 e2 39 83 fa 08 75 de e8 23 ff ff ff [ 132.013106][ T5599] RSP: 002b:00007ffe3e44aea0 EFLAGS: 00000202 ORIG_RAX: 0000000000000001 [ 132.013122][ T5599] RAX: ffffffffffffffda RBX: 00007ff4cfb64880 RCX: 00007ff4cf4a7407 [ 132.013132][ T5599] RDX: 0000000000000118 RSI: 0000564b37552a00 RDI: 0000000000000008 [ 132.013141][ T5599] RBP: 0000564b37552a00 R08: 0000000000000000 R09: 0000000000000000 [ 132.013149][ T5599] R10: 0000000000000000 R11: 0000000000000202 R12: 0000000000000118 [ 132.013159][ T5599] R13: 0000564b375255c0 R14: 00007ff4cf5efea0 R15: 0000564b37527e90 [ 132.013180][ T5599] [ 132.014865][ T10] usb 1-1: unable to get BOS descriptor or descriptor too short [ 132.023177][ T6682] ,cpuset= [ 132.054333][ T10] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 132.058870][ T6682] / [ 132.071231][ T5599] udevd[5599]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 132.077333][ T6682] ,mems_allowed=0-1 [ 132.091326][ T10] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 132.096882][ T6682] [ 132.147647][ T10] usb 1-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 132.151393][ T29] audit: type=1400 audit(1785194764.760:531): avc: denied { write } for pid=6684 comm="syz.3.247" name="functions" dev="configfs" ino=13572 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 132.230475][ T6682] CPU: 0 UID: 0 PID: 6682 Comm: syz.1.246 Not tainted syzkaller #0 PREEMPT(full) [ 132.230498][ T6682] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 132.230507][ T6682] Call Trace: [ 132.230512][ T6682] [ 132.230518][ T6682] dump_stack_lvl+0x100/0x190 [ 132.230545][ T6682] warn_alloc.cold+0x94/0xa8 [ 132.230562][ T6682] ? __pfx_warn_alloc+0x10/0x10 [ 132.230578][ T6682] ? lockdep_hardirqs_on+0x78/0x100 [ 132.230599][ T6682] ? __get_vm_area_node+0x2cd/0x330 [ 132.230626][ T6682] ? __get_vm_area_node+0x208/0x330 [ 132.230651][ T6682] __vmalloc_node_range_noprof+0xccd/0x1630 [ 132.230678][ T6682] ? irqentry_exit+0x24d/0xa00 [ 132.230694][ T6682] ? lockdep_hardirqs_on+0x78/0x100 [ 132.230712][ T6682] ? kvm_dirty_ring_alloc+0x25/0x1a0 [ 132.230736][ T6682] ? vmx_vcpu_pi_put+0x20a/0x2c0 [ 132.230760][ T6682] ? vmx_vcpu_put+0xbf/0x860 [ 132.230776][ T6682] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 132.230799][ T6682] ? kvm_calc_cpu_role.isra.0+0x5e/0x330 [ 132.230823][ T6682] ? kvm_calc_cpu_role.isra.0+0x31b/0x330 [ 132.230845][ T6682] ? kvm_calc_cpu_role.isra.0+0x26c/0x330 [ 132.230870][ T6682] ? kvm_dirty_ring_alloc+0x25/0x1a0 [ 132.230890][ T6682] __vmalloc_node_noprof+0xad/0xf0 [ 132.230912][ T6682] ? kvm_dirty_ring_alloc+0x25/0x1a0 [ 132.230935][ T6682] kvm_dirty_ring_alloc+0x25/0x1a0 [ 132.230957][ T6682] kvm_vm_ioctl+0x7d3/0x4180 [ 132.230984][ T6682] ? __lock_acquire+0x49f/0x1a40 [ 132.231005][ T6682] ? do_raw_spin_unlock+0x145/0x1e0 [ 132.231028][ T6682] ? __pfx_kvm_vm_ioctl+0x10/0x10 [ 132.231052][ T6682] ? rcu_is_watching+0x12/0xc0 [ 132.231075][ T6682] ? trace_hrtimer_start+0x77/0x220 [ 132.231099][ T6682] ? hrtimer_start_range_ns_common+0x78e/0x18b0 [ 132.231128][ T6682] ? find_held_lock+0x2b/0x80 [ 132.231152][ T6682] ? finish_task_switch.isra.0+0x2c0/0x10c0 [ 132.231173][ T6682] ? finish_task_switch.isra.0+0x2c0/0x10c0 [ 132.231196][ T6682] ? rcu_is_watching+0x12/0xc0 [ 132.231219][ T6682] ? finish_task_switch.isra.0+0x2c5/0x10c0 [ 132.231241][ T6682] ? lockdep_hardirqs_on+0x78/0x100 [ 132.231258][ T6682] ? finish_task_switch.isra.0+0x2c5/0x10c0 [ 132.231286][ T6682] ? rcu_is_watching+0x12/0xc0 [ 132.231309][ T6682] ? trace_sched_exit_tp+0x120/0x160 [ 132.231333][ T6682] ? __schedule+0x126e/0x6730 [ 132.231347][ T6682] ? tomoyo_path_number_perm+0x188/0x580 [ 132.231381][ T6682] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 132.231401][ T6682] ? do_vfs_ioctl+0x226/0x13e0 [ 132.231424][ T6682] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 132.231448][ T6682] ? irqentry_exit+0x24d/0xa00 [ 132.231465][ T6682] ? lockdep_hardirqs_on+0x78/0x100 [ 132.231482][ T6682] ? irqentry_exit+0x24d/0xa00 [ 132.231509][ T6682] ? security_file_ioctl+0x47/0x230 [ 132.231533][ T6682] ? __sanitizer_cov_trace_pc+0xb/0x70 [ 132.231551][ T6682] ? __pfx_kvm_vm_ioctl+0x10/0x10 [ 132.231575][ T6682] __x64_sys_ioctl+0x18e/0x210 [ 132.231600][ T6682] do_syscall_64+0x115/0x870 [ 132.231616][ T6682] ? clear_bhb_loop+0x40/0x90 [ 132.231636][ T6682] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 132.231652][ T6682] RIP: 0033:0x7f163d99de99 [ 132.231666][ T6682] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 132.231681][ T6682] RSP: 002b:00007f163e809028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 132.231697][ T6682] RAX: ffffffffffffffda RBX: 00007f163dc25fa0 RCX: 00007f163d99de99 [ 132.231707][ T6682] RDX: 0000000000000000 RSI: 000000000000ae41 RDI: 0000000000000004 [ 132.231717][ T6682] RBP: 00007f163da33eaf R08: 0000000000000000 R09: 0000000000000000 [ 132.231726][ T6682] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 132.231735][ T6682] R13: 00007f163dc26038 R14: 00007f163dc25fa0 R15: 00007ffe336f83f8 [ 132.231756][ T6682] [ 132.237432][ T6682] Mem-Info: [ 132.535268][ T29] audit: type=1400 audit(1785194765.160:532): avc: denied { mount } for pid=6694 comm="syz.2.254" name="/" dev="sockfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 132.594215][ T6682] active_anon:9697 inactive_anon:0 isolated_anon:0 [ 132.594215][ T6682] active_file:0 inactive_file:55908 isolated_file:0 [ 132.594215][ T6682] unevictable:768 dirty:330 writeback:0 [ 132.594215][ T6682] slab_reclaimable:12353 slab_unreclaimable:95491 [ 132.594215][ T6682] mapped:30482 shmem:1286 pagetables:1467 [ 132.594215][ T6682] sec_pagetables:0 bounce:0 [ 132.594215][ T6682] kernel_misc_reclaimable:0 [ 132.594215][ T6682] free:1304699 free_pcp:12132 free_cma:0 [ 132.891322][ T5709] usb 3-1: new high-speed USB device number 10 using dummy_hcd [ 132.896078][ T6682] Node 0 active_anon:38888kB inactive_anon:0kB active_file:0kB inactive_file:223420kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:121928kB dirty:1320kB writeback:0kB shmem:3608kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:13104kB pagetables:6028kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 133.053815][ T5709] usb 3-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 133.061710][ T10] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice=33.40 [ 133.065658][ T5709] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 133.070991][ T10] usb 1-1: New USB device strings: Mfr=235, Product=123, SerialNumber=127 [ 133.081200][ T6682] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:212kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:64kB pagetables:140kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 133.081317][ T6682] Node 0 DMA free:15360kB boost:0kB min:208kB low:260kB high:312kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 133.081367][ T6682] lowmem_reserve[]: 0 2472 2473 2473 2473 [ 133.081402][ T6682] Node 0 DMA32 free:1262100kB boost:0kB min:34012kB low:42512kB high:51012kB reserved_highatomic:0KB free_highatomic:0KB active_anon:38888kB inactive_anon:0kB active_file:0kB inactive_file:223420kB unevictable:1536kB writepending:1320kB zspages:0kB present:3129332kB managed:2532172kB mlocked:0kB bounce:0kB free_pcp:49620kB local_pcp:22432kB free_cma:0kB [ 133.081454][ T6682] lowmem_reserve[]: 0 0 0 0 0 [ 133.081486][ T6682] Node 0 Normal free:0kB boost:0kB min:4kB low:4kB high:4kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:1048580kB managed:376kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 133.081535][ T6682] lowmem_reserve[]: 0 0 0 0 0 [ 133.081568][ T6682] Node 1 Normal free:3941136kB boost:0kB min:55880kB low:69848kB high:83816kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:212kB unevictable:1536kB writepending:0kB zspages:0kB present:4194300kB managed:4111100kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 133.081619][ T6682] lowmem_reserve[]: 0 0 0 0 0 [ 133.081652][ T6682] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 133.081766][ T6682] Node 0 DMA32: 533*4kB (UME) 531*8kB (UE) 271*16kB (UM) 154*32kB (UM) 307*64kB (UME) 208*128kB (UM) 126*256kB (UM) 61*512kB (M) 32*1024kB (M) 13*2048kB (UME) 263*4096kB (UM) = 1262044kB [ 133.081911][ T6682] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 133.082006][ T6682] Node 1 Normal: 0*4kB 6*8kB (UM) 6*16kB (UM) 12*32kB (UM) 14*64kB (UM) 1*128kB (M) 3*256kB (UM) 3*512kB (UM) 3*1024kB (UM) 1*2048kB (U) 960*4096kB (M) = 3941136kB [ 133.082152][ T6682] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 133.082167][ T6682] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 133.082181][ T6682] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 133.082195][ T6682] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 133.082210][ T6682] 57190 total pagecache pages [ 133.082217][ T6682] 0 pages in swap cache [ 133.082224][ T6682] Free swap = 124996kB [ 133.082231][ T6682] Total swap = 124996kB [ 133.082238][ T6682] 2097051 pages RAM [ 133.082245][ T6682] 0 pages HighMem/MovableOnly [ 133.089050][ T10] usb 1-1: Product: syz [ 133.096420][ T5709] usb 3-1: config 0 descriptor?? [ 133.099490][ T10] usb 1-1: Manufacturer: syz [ 133.110536][ T6682] 432299 pages reserved [ 133.119870][ T10] usb 1-1: SerialNumber: syz [ 133.124738][ T6682] 0 pages cma reserved [ 133.395811][ T10] cdc_ncm 1-1:1.0: skipping garbage [ 133.418492][ T5709] cp210x 3-1:0.0: cp210x converter detected [ 133.452699][ T10] cdc_ncm 1-1:1.0: skipping garbage [ 133.771156][ T10] cdc_ncm 1-1:1.0: CDC Union missing and no IAD found [ 133.778095][ T10] cdc_ncm 1-1:1.0: bind() failure [ 133.798822][ T29] audit: type=1400 audit(1785194766.420:533): avc: denied { unmount } for pid=5606 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=filesystem permissive=1 [ 133.808245][ T10] usb 1-1: USB disconnect, device number 15 [ 133.820442][ T5709] cp210x 3-1:0.0: failed to get vendor val 0x000e size 3: -71 [ 133.840442][ T5709] cp210x 3-1:0.0: failed to get vendor val 0x370c size 73: -71 [ 133.858211][ T5709] cp210x 3-1:0.0: GPIO initialisation failed: -71 [ 133.936037][ T5709] usb 3-1: cp210x converter now attached to ttyUSB0 [ 133.960886][ T5709] usb 3-1: USB disconnect, device number 10 [ 133.984279][ T5709] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 134.023463][ T5709] cp210x 3-1:0.0: device disconnected [ 134.494149][ T6738] netlink: 272 bytes leftover after parsing attributes in process `syz.0.267'. [ 134.755550][ T5623] Bluetooth: hci2: unexpected event 0x03 length: 1 < 11 [ 134.901389][ T9] usb 3-1: new high-speed USB device number 11 using dummy_hcd [ 135.062517][ T9] usb 3-1: Using ep0 maxpacket: 8 [ 135.077859][ T9] usb 3-1: unable to get BOS descriptor or descriptor too short [ 135.096387][ T9] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 135.125056][ T9] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 135.146160][ T29] kauditd_printk_skb: 8 callbacks suppressed [ 135.146175][ T29] audit: type=1400 audit(1785194767.770:542): avc: denied { write } for pid=6761 comm="syz.4.278" name="kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 135.165070][ T9] usb 3-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 135.188789][ T10] usb 2-1: new high-speed USB device number 10 using dummy_hcd [ 135.211583][ T9] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice=33.40 [ 135.223638][ T9] usb 3-1: New USB device strings: Mfr=235, Product=123, SerialNumber=127 [ 135.246991][ T9] usb 3-1: Product: syz [ 135.251206][ T9] usb 3-1: Manufacturer: syz [ 135.255879][ T9] usb 3-1: SerialNumber: syz [ 135.354554][ T10] usb 2-1: Using ep0 maxpacket: 8 [ 135.362066][ T10] usb 2-1: config 179 has an invalid interface number: 65 but max is 0 [ 135.383303][ T10] usb 2-1: config 179 has no interface number 0 [ 135.396297][ T10] usb 2-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 135.409235][ T10] usb 2-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024 [ 135.421037][ T10] usb 2-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 135.435732][ T10] usb 2-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 41728, setting to 1024 [ 135.468496][ T29] audit: type=1400 audit(1785194768.090:543): avc: denied { mount } for pid=6776 comm="syz.4.284" name="/" dev="sysfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=filesystem permissive=1 [ 135.496672][ T5709] usb 1-1: new full-speed USB device number 16 using dummy_hcd [ 135.569247][ T10] usb 2-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 135.584178][ T10] usb 2-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 135.600381][ T9] cdc_ncm 3-1:1.0: skipping garbage [ 135.620787][ T10] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 135.632241][ T9] cdc_ncm 3-1:1.0: skipping garbage [ 135.647391][ T9] cdc_ncm 3-1:1.0: CDC Union missing and no IAD found [ 135.660119][ T9] cdc_ncm 3-1:1.0: bind() failure [ 135.670812][ T6757] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 135.689537][ T6777] smpboot: CPU 1 is now offline [ 135.701185][ T5709] usb 1-1: not running at top speed; connect to a high speed hub [ 135.710140][ T9] usb 3-1: USB disconnect, device number 11 [ 135.759518][ T5709] usb 1-1: New USB device found, idVendor=06cd, idProduct=0135, bcdDevice= 1.00 [ 135.800343][ T5709] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 135.842898][ T5709] keyspan 1-1:1.0: Keyspan 2 port adapter converter detected [ 135.856579][ T6779] smpboot: Booting Node 0 Processor 1 APIC 0x1 [ 135.885818][ T5709] usb 1-1: Keyspan 2 port adapter converter now attached to ttyUSB0 [ 135.915793][ T5709] usb 1-1: Keyspan 2 port adapter converter now attached to ttyUSB1 [ 136.026238][ T9] input: Generic X-Box pad as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:179.65/input/input7 [ 136.036972][ T29] audit: type=1400 audit(1785194768.660:544): avc: denied { append } for pid=6781 comm="syz.3.285" name="kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 136.078716][ T29] audit: type=1400 audit(1785194768.660:545): avc: denied { unmount } for pid=5607 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=filesystem permissive=1 [ 136.169433][ T29] audit: type=1400 audit(1785194768.790:546): avc: denied { bind } for pid=6770 comm="syz.0.281" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 136.253642][ T5702] usb 2-1: USB disconnect, device number 10 [ 136.259632][ C0] xpad 2-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19 [ 136.259702][ C0] xpad 2-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 136.504368][ T29] audit: type=1400 audit(1785194769.130:547): avc: denied { write } for pid=6796 comm="syz.4.292" name="binder0" dev="binder" ino=10 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 136.904636][ T6809] capability: warning: `syz.1.296' uses 32-bit capabilities (legacy support in use) [ 136.950604][ T6811] netlink: 92 bytes leftover after parsing attributes in process `syz.3.297'. [ 136.986180][ T6811] netlink: 8 bytes leftover after parsing attributes in process `syz.3.297'. [ 136.998029][ T6807] pic_ioport_write: 2 callbacks suppressed [ 136.998047][ T6807] kvm: pic: level sensitive irq not supported [ 137.022897][ T6807] pic_ioport_write: 1 callbacks suppressed [ 137.022919][ T6807] kvm: pic: single mode not supported [ 137.037062][ T6807] kvm: pic: level sensitive irq not supported [ 137.044830][ T6807] kvm: pic: level sensitive irq not supported [ 137.055652][ T6807] kvm: pic: single mode not supported [ 137.062237][ T6807] kvm: pic: single mode not supported [ 137.068301][ T6807] kvm: pic: non byte read [ 137.223670][ T5800] usb 1-1: USB disconnect, device number 16 [ 137.642535][ T5800] keyspan_2 ttyUSB0: Keyspan 2 port adapter converter now disconnected from ttyUSB0 [ 137.749406][ T5800] keyspan_2 ttyUSB1: Keyspan 2 port adapter converter now disconnected from ttyUSB1 [ 137.763596][ T5800] keyspan 1-1:1.0: device disconnected [ 137.987051][ T29] audit: type=1400 audit(1785194770.610:548): avc: denied { mount } for pid=6823 comm="syz.3.302" name="/" dev="ramfs" ino=16265 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ramfs_t tclass=filesystem permissive=1 [ 138.029032][ T6824] process 'syz.3.302' launched './file0' with NULL argv: empty string added [ 138.039875][ T29] audit: type=1400 audit(1785194770.650:549): avc: denied { execute } for pid=6823 comm="syz.3.302" name="file0" dev="ramfs" ino=16268 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:ramfs_t tclass=file permissive=1 [ 138.070907][ T29] audit: type=1400 audit(1785194770.670:550): avc: denied { execute_no_trans } for pid=6823 comm="syz.3.302" path="/file0" dev="ramfs" ino=16268 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:ramfs_t tclass=file permissive=1 [ 138.221423][ T5709] usb 5-1: new high-speed USB device number 9 using dummy_hcd [ 138.383113][ T5709] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 138.393457][ T5709] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 138.409419][ T6841] PM: suspend entry (deep) [ 138.417151][ T5709] usb 5-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 138.448240][ T5709] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 138.486012][ T5709] usb 5-1: SerialNumber: syz [ 138.685245][ T6213] Filesystems sync: 0.252 seconds [ 138.736527][ T5709] usb 5-1: 0:2 : does not exist [ 138.754027][ T5709] usb 5-1: unit 5: unexpected type 0x09 [ 138.775960][ T29] audit: type=1400 audit(1785194771.400:551): avc: denied { write } for pid=6860 comm="syz.2.318" name="urandom" dev="devtmpfs" ino=9 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:urandom_device_t tclass=chr_file permissive=1 [ 138.885786][ T5709] usb 5-1: USB disconnect, device number 9 [ 139.419181][ T10] usb 1-1: new high-speed USB device number 17 using dummy_hcd [ 139.440606][ T6841] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 139.447913][ T6841] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 139.468298][ T6841] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 139.476334][ T6841] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 139.483159][ T6841] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 139.492457][ T6841] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 139.502274][ T6841] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 139.508785][ T6841] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 139.518889][ T6841] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 139.527448][ T6841] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 139.533475][ T6841] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 139.541108][ T6841] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 139.549264][ T6841] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 139.556158][ T6841] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 139.563196][ T6841] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 139.572785][ T6841] Freezing user space processes [ 139.583174][ T6841] Freezing user space processes completed (elapsed 0.004 seconds) [ 139.591102][ T6841] OOM killer disabled. [ 139.595617][ T6841] Freezing remaining freezable tasks [ 140.911333][ T5623] Bluetooth: hci1: command 0x0c1a tx timeout [ 141.551394][ T5624] Bluetooth: hci4: command 0x0c1a tx timeout [ 141.551498][ T5611] Bluetooth: hci0: command 0x0c1a tx timeout [ 141.557791][ T5623] Bluetooth: hci2: command 0x0c1a tx timeout [ 141.563453][ T5620] Bluetooth: hci3: command 0x0c1a tx timeout [ 142.991515][ T5620] Bluetooth: hci1: command 0x0c1a tx timeout [ 143.631447][ T5624] Bluetooth: hci4: command 0x0c1a tx timeout [ 143.637486][ T5623] Bluetooth: hci2: command 0x0c1a tx timeout [ 143.643519][ T5620] Bluetooth: hci3: command 0x0c1a tx timeout [ 143.644608][ T5611] Bluetooth: hci0: command 0x0c1a tx timeout [ 144.671960][ T10] usb 1-1: device descriptor read/all, error -110 [ 144.811403][ T10] usb 1-1: new high-speed USB device number 18 using dummy_hcd [ 144.941479][ T10] usb 1-1: device descriptor read/64, error -32 [ 145.052719][ T10] usb usb1-port1: attempt power cycle [ 145.071343][ T5611] Bluetooth: hci1: command 0x0c1a tx timeout [ 145.391569][ T10] usb 1-1: new high-speed USB device number 19 using dummy_hcd [ 145.411561][ T10] usb 1-1: device descriptor read/8, error -32 [ 145.651429][ T10] usb 1-1: new high-speed USB device number 20 using dummy_hcd [ 145.672218][ T10] usb 1-1: device descriptor read/8, error -32 [ 145.711391][ T5611] Bluetooth: hci2: command 0x0c1a tx timeout [ 145.711795][ T5624] Bluetooth: hci0: command 0x0c1a tx timeout [ 145.718450][ T5620] Bluetooth: hci3: command 0x0c1a tx timeout [ 145.723430][ T5623] Bluetooth: hci4: command 0x0c1a tx timeout [ 145.782481][ T10] usb usb1-port1: unable to enumerate USB device [ 145.797689][ T6841] Freezing remaining freezable tasks completed (elapsed 6.196 seconds) [ 145.806499][ T6841] printk: Suspending console(s) (use no_console_suspend to debug) [ 145.923754][ T6841] vhci_hcd vhci_hcd.14: suspend vhci_hcd [ 145.923800][ T6841] vhci_hcd vhci_hcd.13: suspend vhci_hcd [ 145.923838][ T6841] vhci_hcd vhci_hcd.12: suspend vhci_hcd [ 145.923876][ T6841] vhci_hcd vhci_hcd.11: suspend vhci_hcd [ 145.923913][ T6841] vhci_hcd vhci_hcd.10: suspend vhci_hcd [ 145.923950][ T6841] vhci_hcd vhci_hcd.9: suspend vhci_hcd [ 145.923988][ T6841] vhci_hcd vhci_hcd.8: suspend vhci_hcd [ 145.924025][ T6841] vhci_hcd vhci_hcd.7: suspend vhci_hcd [ 145.924068][ T6841] vhci_hcd vhci_hcd.6: suspend vhci_hcd [ 145.924120][ T6841] vhci_hcd vhci_hcd.5: suspend vhci_hcd [ 145.924157][ T6841] vhci_hcd vhci_hcd.4: suspend vhci_hcd [ 145.924194][ T6841] vhci_hcd vhci_hcd.3: suspend vhci_hcd [ 145.924242][ T6841] vhci_hcd vhci_hcd.2: suspend vhci_hcd [ 145.924279][ T6841] vhci_hcd vhci_hcd.1: suspend vhci_hcd [ 145.924316][ T6841] vhci_hcd vhci_hcd.0: suspend vhci_hcd [ 145.967793][ T1172] sd 0:0:1:0: [sda] Synchronizing SCSI cache [ 146.229429][ T6841] ACPI: PM: Preparing to enter system sleep state S3 [ 146.229931][ T6841] ACPI: PM: Saving platform NVS memory [ 146.231229][ T6841] Disabling non-boot CPUs ... [ 146.240338][ T6841] smpboot: CPU 1 is now offline [ 146.253081][ T6841] ACPI: PM: Low-level resume complete [ 146.253125][ T6841] ACPI: PM: Restoring platform NVS memory [ 146.270533][ T6841] Enabling non-boot CPUs ... [ 146.271103][ T6841] smpboot: Booting Node 0 Processor 1 APIC 0x1 [ 146.278822][ T6841] CPU1 is up [ 146.280131][ T6841] ACPI: PM: Waking up from system sleep state S3 [ 146.362857][ T6214] virtio_scsi virtio0: 1/0/0 default/read/poll queues [ 146.660241][ T6841] OOM killer enabled. [ 146.660838][ T6841] Restarting tasks: Starting [ 146.697293][ T805] raw-gadget.0 gadget.0: failed to queue reset event [ 146.799095][ T6841] Restarting tasks: Done [ 146.800172][ T6841] random: crng reseeded on system resumption [ 146.802748][ T6841] PM: suspend exit [ 146.818566][ T805] raw-gadget.0 gadget.0: failed to queue resume event [ 146.831988][ T6864] raw-gadget.0 gadget.0: failed to queue suspend event [ 146.839229][ T6864] raw-gadget.0 gadget.0: failed to queue disconnect event [ 146.889004][ T805] usb 1-1: new high-speed USB device number 21 using dummy_hcd [ 146.986883][ T29] audit: type=1400 audit(1785194779.651:552): avc: denied { read } for pid=6935 comm="syz.0.328" name="rtc0" dev="devtmpfs" ino=922 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 146.996000][ T29] audit: type=1400 audit(1785194779.651:553): avc: denied { open } for pid=6935 comm="syz.0.328" path="/dev/rtc0" dev="devtmpfs" ino=922 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 147.016061][ T29] audit: type=1400 audit(1785194779.661:554): avc: denied { ioctl } for pid=6935 comm="syz.0.328" path="/dev/rtc0" dev="devtmpfs" ino=922 ioctlcmd=0x7007 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 147.391776][ T6952] kvm: pic: non byte write [ 147.398308][ T6952] kvm: pic: non byte write [ 147.399352][ T6952] kvm: pic: non byte write [ 147.400251][ T6952] kvm: pic: non byte write [ 147.401087][ T6952] kvm: pic: non byte write [ 147.401918][ T6952] kvm: pic: non byte write [ 147.403005][ T6952] kvm: pic: non byte write [ 147.406131][ T6952] kvm: pic: non byte write [ 147.414263][ T6952] kvm: pic: non byte write [ 147.419970][ T6952] kvm: pic: non byte write [ 147.444392][ T6954] kvm: pic: single mode not supported [ 147.444410][ T6954] kvm: pic: level sensitive irq not supported [ 147.449697][ T6954] kvm: pic: level sensitive irq not supported [ 147.455332][ T6954] kvm: pic: single mode not supported [ 147.459433][ T6954] kvm: pic: single mode not supported [ 147.460268][ T6954] kvm: pic: level sensitive irq not supported [ 147.465910][ T6954] kvm: pic: single mode not supported [ 147.466793][ T6954] kvm: pic: level sensitive irq not supported [ 147.472275][ T6954] kvm: pic: level sensitive irq not supported [ 147.494829][ T6954] kvm: pic: single mode not supported [ 147.496870][ T6954] kvm: pic: level sensitive irq not supported [ 147.520585][ T6954] kvm: pic: level sensitive irq not supported [ 147.555608][ T6954] kvm: pic: level sensitive irq not supported [ 147.556685][ T6954] kvm: pic: single mode not supported [ 148.085144][ T6966] usb usb8: usbfs: process 6966 (syz.4.338) did not claim interface 0 before use [ 148.314555][ T6970] kvm: user requested TSC rate below hardware speed [ 148.407556][ T9] usb 4-1: new high-speed USB device number 9 using dummy_hcd [ 148.557404][ T9] usb 4-1: Using ep0 maxpacket: 8 [ 148.564791][ T9] usb 4-1: config 179 has an invalid interface number: 65 but max is 0 [ 148.567124][ T9] usb 4-1: config 179 has no interface number 0 [ 148.571325][ T9] usb 4-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 148.576009][ T9] usb 4-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024 [ 148.579957][ T9] usb 4-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 148.583750][ T9] usb 4-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 41728, setting to 1024 [ 148.587787][ T9] usb 4-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 148.593089][ T9] usb 4-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 148.596577][ T9] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 148.613710][ T6968] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 149.198218][ T6987] netlink: 64 bytes leftover after parsing attributes in process `syz.2.346'. [ 149.209021][ T6987] netlink: 28 bytes leftover after parsing attributes in process `syz.2.346'. [ 149.232773][ T6987] netlink: 8 bytes leftover after parsing attributes in process `syz.2.346'. [ 149.464653][ T9] input: Generic X-Box pad as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:179.65/input/input8 [ 149.481103][ T29] audit: type=1400 audit(1785194782.151:555): avc: denied { read } for pid=4962 comm="acpid" name="js0" dev="devtmpfs" ino=2987 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 149.554507][ T29] audit: type=1400 audit(1785194782.151:556): avc: denied { open } for pid=4962 comm="acpid" path="/dev/input/js0" dev="devtmpfs" ino=2987 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 149.570606][ T29] audit: type=1400 audit(1785194782.151:557): avc: denied { ioctl } for pid=4962 comm="acpid" path="/dev/input/js0" dev="devtmpfs" ino=2987 ioctlcmd=0x4520 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 149.602573][ T5717] usb 4-1: USB disconnect, device number 9 [ 149.602640][ C0] xpad 4-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19 [ 149.604621][ C0] xpad 4-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 149.751551][ T805] playstation 0003:054C:05C4.000D: hidraw0: USB HID v0.01 Gamepad [syz0] on syz0 [ 149.754861][ T805] playstation 0003:054C:05C4.000D: Failed to retrieve feature with reportID 18: -5 [ 149.758703][ T805] playstation 0003:054C:05C4.000D: Failed to retrieve DualShock4 pairing info: -5 [ 149.759987][ T805] playstation 0003:054C:05C4.000D: Failed to get MAC address from DualShock4 [ 149.767500][ T805] playstation 0003:054C:05C4.000D: Failed to create dualshock4. [ 149.775585][ T805] playstation 0003:054C:05C4.000D: probe with driver playstation failed with error -5 [ 149.839889][ T6997] fido_id[6997]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 150.453444][ T7010] netlink: 8 bytes leftover after parsing attributes in process `syz.1.353'. [ 150.597023][ T7018] netlink: 16 bytes leftover after parsing attributes in process `syz.4.359'. [ 150.617164][ T7020] binder: 7019:7020 ioctl 4018620d 0 returned -22 [ 150.755470][ T7028] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 150.889388][ T7037] semctl(GETNCNT/GETZCNT) is since 3.16 Single Unix Specification compliant. [ 150.889388][ T7037] The task syz.0.363 (7037) triggered the difference, watch for misbehavior. [ 150.907158][ T7035] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 150.966171][ T7035] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 151.021258][ T7041] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 151.536571][ T29] audit: type=1326 audit(1785194784.201:558): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7060 comm="syz.1.374" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f163d99de99 code=0x0 [ 151.585504][ T7063] udc dummy_udc.0: soft-connect without a gadget driver [ 151.830292][ T7083] SELinux: security_context_str_to_sid (root) failed with errno=-22 [ 151.832346][ T29] audit: type=1400 audit(1785194784.501:559): avc: denied { remount } for pid=7080 comm="syz.2.382" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=filesystem permissive=1 [ 151.945617][ T7087] syzkaller0: create flow: hash 2625607371 index 1 [ 152.021614][ T7085] syzkaller0: delete flow: hash 2625607371 index 1 [ 152.029691][ T5710] usb 1-1: new high-speed USB device number 22 using dummy_hcd [ 152.189936][ T5710] usb 1-1: unable to get BOS descriptor or descriptor too short [ 152.191922][ T5710] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 152.193818][ T5710] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 152.196955][ T5710] usb 1-1: New USB device found, idVendor=1235, idProduct=0010, bcdDevice= 0.40 [ 152.198704][ T5710] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 152.200198][ T5710] usb 1-1: Product: syz [ 152.200794][ T5710] usb 1-1: Manufacturer: syz [ 152.201448][ T5710] usb 1-1: SerialNumber: syz [ 152.234760][ T5710] usb 1-1: selecting invalid altsetting 1 [ 152.236176][ T5710] usb 1-1: unit 6 not found! [ 152.457011][ T29] audit: type=1400 audit(1785194785.121:560): avc: denied { bind } for pid=7107 comm="syz.1.391" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 152.780419][ T24] usb 2-1: new high-speed USB device number 11 using dummy_hcd [ 152.930190][ T24] usb 2-1: Using ep0 maxpacket: 16 [ 152.941205][ T24] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 152.942720][ T24] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 152.944056][ T24] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 152.945795][ T24] usb 2-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 152.947138][ T24] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 152.962632][ T24] usb 2-1: config 0 descriptor?? [ 153.361506][ T5710] snd-usb-audio 1-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 153.372065][ T5710] usb 1-1: USB disconnect, device number 22 [ 153.375106][ T24] microsoft 0003:045E:07DA.000E: ignoring exceeding usage max [ 153.381376][ T24] hid_parser_main: 5 callbacks suppressed [ 153.381395][ T24] microsoft 0003:045E:07DA.000E: unknown main item tag 0x0 [ 153.388381][ T5599] udevd[5599]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 153.391836][ T24] microsoft 0003:045E:07DA.000E: unknown main item tag 0x0 [ 153.392826][ T24] microsoft 0003:045E:07DA.000E: unknown main item tag 0x0 [ 153.399190][ T24] microsoft 0003:045E:07DA.000E: unknown main item tag 0x0 [ 153.400239][ T24] microsoft 0003:045E:07DA.000E: unknown main item tag 0x0 [ 153.401253][ T24] microsoft 0003:045E:07DA.000E: unbalanced collection at end of report description [ 153.403211][ T24] microsoft 0003:045E:07DA.000E: parse failed [ 153.404133][ T24] microsoft 0003:045E:07DA.000E: probe with driver microsoft failed with error -22 [ 153.577623][ T10] usb 2-1: USB disconnect, device number 11 [ 153.678149][ T29] audit: type=1400 audit(1785194786.351:561): avc: denied { ioctl } for pid=7123 comm="syz.3.396" path="/84/dir0/per_cpu/cpu0/trace_pipe" dev="tracefs" ino=1955 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=file permissive=1 [ 153.686702][ T29] audit: type=1800 audit(1785194786.351:562): pid=7124 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.3.396" name="trace_pipe" dev="tracefs" ino=1955 res=0 errno=0 [ 153.910727][ T7136] bridge_slave_0: left allmulticast mode [ 153.913882][ T7136] bridge0: port 1(bridge_slave_0) entered disabled state [ 156.124472][ T29] audit: type=1400 audit(1785194788.791:563): avc: denied { read } for pid=7175 comm="syz.4.416" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 156.482545][ T7192] udc dummy_udc.0: soft-connect without a gadget driver [ 156.484056][ T7192] udc dummy_udc.0: soft-connect without a gadget driver [ 157.423822][ T7205] netlink: 4 bytes leftover after parsing attributes in process `syz.3.426'. [ 157.675343][ T7211] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 157.708451][ T7213] netlink: 12 bytes leftover after parsing attributes in process `syz.4.430'. [ 158.186483][ T29] audit: type=1400 audit(1785194790.851:564): avc: denied { connect } for pid=7230 comm="syz.1.437" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 158.229670][ T29] audit: type=1400 audit(1785194790.901:565): avc: denied { compute_member } for pid=7236 comm="syz.0.440" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security permissive=1 [ 158.382754][ T29] audit: type=1400 audit(1785194790.971:566): avc: denied { getopt } for pid=7240 comm="syz.2.442" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 159.207385][ T24] usb 2-1: new high-speed USB device number 12 using dummy_hcd [ 159.387491][ T24] usb 2-1: Using ep0 maxpacket: 32 [ 159.414270][ T24] usb 2-1: config 0 has an invalid interface number: 67 but max is 0 [ 159.428280][ T24] usb 2-1: config 0 has no interface number 0 [ 159.453028][ T24] usb 2-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 159.462754][ T24] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 159.470561][ T24] usb 2-1: Product: syz [ 159.475795][ T24] usb 2-1: Manufacturer: syz [ 159.479911][ T24] usb 2-1: SerialNumber: syz [ 159.564068][ T24] usb 2-1: config 0 descriptor?? [ 159.972644][ T29] audit: type=1400 audit(1785194792.641:567): avc: denied { read write } for pid=7289 comm="syz.0.461" name="vhost-vsock" dev="devtmpfs" ino=1274 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 159.981096][ T29] audit: type=1400 audit(1785194792.641:568): avc: denied { open } for pid=7289 comm="syz.0.461" path="/dev/vhost-vsock" dev="devtmpfs" ino=1274 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 159.988938][ T29] audit: type=1400 audit(1785194792.651:569): avc: denied { ioctl } for pid=7289 comm="syz.0.461" path="/dev/vhost-vsock" dev="devtmpfs" ino=1274 ioctlcmd=0xaf01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 160.271384][ T7309] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 160.371229][ T7315] binder: 7314:7315 ioctl c0306201 200000000080 returned -14 [ 160.384962][ T29] audit: type=1400 audit(1785194793.051:570): avc: denied { map } for pid=7314 comm="syz.0.474" path="/dev/binderfs/binder0" dev="binder" ino=7 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 160.388578][ T7315] binder: 7314:7315 ioctl c0306201 2000000003c0 returned -14 [ 160.392170][ T29] audit: type=1400 audit(1785194793.061:571): avc: denied { call } for pid=7314 comm="syz.0.474" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=binder permissive=1 [ 160.693611][ T24] smsc95xx 2-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -71 [ 160.701115][ T24] smsc95xx 2-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 160.705944][ T29] audit: type=1400 audit(1785194793.371:572): avc: denied { unmount } for pid=5609 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 160.708952][ T24] smsc95xx 2-1:0.67 (unnamed net_device) (uninitialized): Failed to write reg index 0x00000014: -71 [ 160.711474][ T24] smsc95xx 2-1:0.67: probe with driver smsc95xx failed with error -71 [ 160.716931][ T24] usb 2-1: USB disconnect, device number 12 [ 161.427199][ T7349] netlink: 140 bytes leftover after parsing attributes in process `syz.4.486'. [ 162.071382][ T7383] netlink: 184 bytes leftover after parsing attributes in process `syz.0.500'. [ 162.237755][ T29] audit: type=1400 audit(1785194794.901:573): avc: denied { audit_write } for pid=7386 comm="syz.2.502" capability=29 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 162.769751][ T7408] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=3765145859 (60242333744 ns) > initial count (29576955120 ns). Using initial count to start timer. [ 164.397412][ T9] usb 3-1: new high-speed USB device number 12 using dummy_hcd [ 164.577427][ T9] usb 3-1: Using ep0 maxpacket: 16 [ 164.668104][ T9] usb 3-1: config 0 has an invalid interface number: 34 but max is 0 [ 164.694431][ T9] usb 3-1: config 0 has no interface number 0 [ 165.579336][ T9] usb 3-1: config 0 interface 34 altsetting 0 bulk endpoint 0xA has invalid maxpacket 1023 [ 165.591158][ T9] usb 3-1: config 0 interface 34 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 80 [ 165.609856][ T9] usb 3-1: New USB device found, idVendor=0b95, idProduct=772a, bcdDevice=82.73 [ 165.619020][ T9] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 165.627039][ T9] usb 3-1: Product: syz [ 165.673679][ T9] usb 3-1: Manufacturer: syz [ 165.699444][ T9] usb 3-1: SerialNumber: syz [ 165.758793][ T29] audit: type=1400 audit(1785194798.431:574): avc: denied { write } for pid=7459 comm="syz.3.525" name="usb_gadget" dev="configfs" ino=3220 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 165.774975][ T9] usb 3-1: config 0 descriptor?? [ 165.786697][ T7458] netlink: 64 bytes leftover after parsing attributes in process `syz.4.522'. [ 165.812867][ T7458] netlink: 16 bytes leftover after parsing attributes in process `syz.4.522'. [ 165.849950][ T7458] netlink: 16 bytes leftover after parsing attributes in process `syz.4.522'. [ 165.864324][ T29] audit: type=1400 audit(1785194798.471:575): avc: denied { write } for pid=7459 comm="syz.3.525" name="configs" dev="configfs" ino=22440 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 165.895626][ T29] audit: type=1400 audit(1785194798.471:576): avc: denied { write } for pid=7459 comm="syz.3.525" name="functions" dev="configfs" ino=22439 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 165.950833][ T7435] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 165.961682][ T29] audit: type=1400 audit(1785194798.471:577): avc: denied { write } for pid=7459 comm="syz.3.525" name="c.1" dev="configfs" ino=22444 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 165.986483][ T5717] usb 2-1: new high-speed USB device number 13 using dummy_hcd [ 166.026915][ T29] audit: type=1400 audit(1785194798.471:578): avc: denied { write } for pid=7459 comm="syz.3.525" name="c.1" dev="configfs" ino=22444 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 166.069149][ T7435] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 166.071323][ T7467] kvm: pic: level sensitive irq not supported [ 166.147451][ T5717] usb 2-1: Using ep0 maxpacket: 8 [ 166.179088][ T5717] usb 2-1: config 1 has an invalid interface number: 143 but max is 0 [ 166.200504][ T5717] usb 2-1: config 1 has no interface number 0 [ 166.218352][ T5717] usb 2-1: New USB device found, idVendor=2058, idProduct=1005, bcdDevice=c1.9b [ 166.241591][ T5717] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 166.251407][ T5717] usb 2-1: Product: syz [ 166.263029][ T5717] usb 2-1: Manufacturer: syz [ 166.287404][ T5717] usb 2-1: SerialNumber: syz [ 166.321570][ T7435] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 166.337662][ T7435] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 166.360083][ T29] audit: type=1400 audit(1785194799.031:579): avc: denied { getopt } for pid=7473 comm="syz.4.530" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 166.417848][ T5717] viperboard 2-1:1.143: version 0.00 found at bus 002 address 013 [ 166.477494][ T5717] viperboard-i2c viperboard-i2c.2.auto: error -EIO: failure setting i2c_bus_freq to 100 [ 166.492568][ T24] usb 1-1: new high-speed USB device number 23 using dummy_hcd [ 166.521299][ T5717] viperboard-i2c viperboard-i2c.2.auto: probe with driver viperboard-i2c failed with error -5 [ 166.555848][ T7456] dummy_hcd dummy_hcd.0: remove, state 1 [ 166.578317][ T7456] usb usb1: USB disconnect, device number 1 [ 166.586352][ T24] usb usb1-port1: attempt power cycle [ 166.635723][ T9] asix 3-1:0.34 (unnamed net_device) (uninitialized): invalid hw address, using random [ 166.757603][ T29] audit: type=1400 audit(1785194799.421:580): avc: denied { write } for pid=7478 comm="syz.3.531" name="configs" dev="configfs" ino=13573 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 166.783444][ T29] audit: type=1400 audit(1785194799.431:581): avc: denied { write } for pid=7478 comm="syz.3.531" name="functions" dev="configfs" ino=13572 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 166.851358][ T7480] UDC core: g1: couldn't find an available UDC or it's busy [ 166.867427][ T7456] dummy_hcd dummy_hcd.0: stopped [ 166.880893][ T9] asix 3-1:0.34 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -32 [ 166.883026][ T7456] dummy_hcd dummy_hcd.0: USB bus 1 deregistered [ 166.930659][ T9] asix 3-1:0.34 (unnamed net_device) (uninitialized): Error reading PHY_ID register: ffffffe0 [ 166.946211][ T29] audit: type=1400 audit(1785194799.491:582): avc: denied { write } for pid=7478 comm="syz.3.531" name="c.1" dev="configfs" ino=22963 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 166.989946][ T9] asix 3-1:0.34: probe with driver asix failed with error -32 [ 167.027162][ T9] usb 3-1: USB disconnect, device number 12 [ 167.039355][ T29] audit: type=1400 audit(1785194799.501:583): avc: denied { read } for pid=7478 comm="syz.3.531" name="UDC" dev="configfs" ino=23581 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=file permissive=1 [ 167.203141][ T7477] dummy_hcd dummy_hcd.0: USB Host+Gadget Emulator, driver 02 May 2005 [ 167.235397][ T7477] dummy_hcd dummy_hcd.0: Dummy host controller [ 167.317511][ T7477] dummy_hcd dummy_hcd.0: new USB bus registered, assigned bus number 1 [ 167.353390][ T7477] usb usb1: New USB device found, idVendor=1d6b, idProduct=0002, bcdDevice= 7.02 [ 167.391750][ T7477] usb usb1: New USB device strings: Mfr=3, Product=2, SerialNumber=1 [ 167.429843][ T7477] usb usb1: Product: Dummy host controller [ 167.454549][ T7477] usb usb1: Manufacturer: Linux syzkaller dummy_hcd [ 167.500580][ T7477] usb usb1: SerialNumber: dummy_hcd.0 [ 168.118172][ T7477] hub 1-0:1.0: USB hub found [ 168.132912][ T7477] hub 1-0:1.0: 1 port detected [ 168.207669][ T10] usb 5-1: new high-speed USB device number 10 using dummy_hcd [ 168.230082][ T5717] usb 2-1: USB disconnect, device number 13 [ 168.379120][ T10] usb 5-1: config index 0 descriptor too short (expected 45, got 36) [ 168.389379][ T10] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 168.401513][ T10] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 168.411573][ T10] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 168.431064][ T10] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 168.440376][ T9] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 168.448969][ T10] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 168.462696][ T10] usb 5-1: config 0 descriptor?? [ 168.543565][ T7495] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 168.612322][ T9] usb 1-1: Using ep0 maxpacket: 16 [ 168.626315][ T9] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 168.639382][ T9] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 168.658526][ T9] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 168.672494][ T9] usb 1-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 168.684806][ T9] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 168.700614][ T9] usb 1-1: config 0 descriptor?? [ 168.906696][ T10] plantronics 0003:047F:FFFF.000F: reserved main item tag 0xd [ 168.933912][ T10] plantronics 0003:047F:FFFF.000F: unknown main item tag 0x0 [ 168.951522][ T10] plantronics 0003:047F:FFFF.000F: unknown main item tag 0x0 [ 168.980700][ T10] plantronics 0003:047F:FFFF.000F: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.4-1/input0 [ 169.155153][ T9] microsoft 0003:045E:07DA.0010: unknown main item tag 0x0 [ 169.161220][ T5717] usb 2-1: new high-speed USB device number 14 using dummy_hcd [ 169.165838][ T9] microsoft 0003:045E:07DA.0010: unknown main item tag 0x0 [ 169.182287][ T9] microsoft 0003:045E:07DA.0010: unknown main item tag 0x0 [ 169.189492][ T5709] usb 5-1: USB disconnect, device number 10 [ 169.190583][ T9] microsoft 0003:045E:07DA.0010: unknown main item tag 0x0 [ 169.206860][ T9] microsoft 0003:045E:07DA.0010: unknown main item tag 0x0 [ 169.245584][ T9] microsoft 0003:045E:07DA.0010: unknown main item tag 0x0 [ 169.270338][ T9] microsoft 0003:045E:07DA.0010: unknown main item tag 0x0 [ 169.282645][ T9] microsoft 0003:045E:07DA.0010: unknown main item tag 0x0 [ 169.299293][ T9] microsoft 0003:045E:07DA.0010: hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.0-1/input0 [ 169.328132][ T9] microsoft 0003:045E:07DA.0010: no inputs found [ 169.339125][ T5717] usb 2-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 169.342782][ T9] microsoft 0003:045E:07DA.0010: could not initialize ff, continuing anyway [ 169.382931][ T5717] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 169.408889][ T9] usb 1-1: USB disconnect, device number 2 [ 169.412379][ T5717] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 169.431677][ T5717] usb 2-1: SerialNumber: syz [ 169.727428][ T10] usb 4-1: new high-speed USB device number 10 using dummy_hcd [ 169.877561][ T10] usb 4-1: Using ep0 maxpacket: 32 [ 169.885698][ T10] usb 4-1: config 4 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 169.897707][ T10] usb 4-1: config 4 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 169.899500][ T5717] cdc_ether 2-1:1.0: probe with driver cdc_ether failed with error -71 [ 169.919988][ T5717] usb 2-1: USB disconnect, device number 14 [ 169.929437][ T10] usb 4-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 169.938751][ T10] usb 4-1: New USB device strings: Mfr=255, Product=255, SerialNumber=0 [ 169.947170][ T10] usb 4-1: Product: syz [ 169.952171][ T10] usb 4-1: Manufacturer: syz [ 169.971394][ T10] hub 4-1:4.0: USB hub found [ 170.172761][ T10] hub 4-1:4.0: 2 ports detected [ 170.997403][ T5702] usb 2-1: new high-speed USB device number 15 using dummy_hcd [ 171.037652][ T5717] usb 3-1: new high-speed USB device number 13 using dummy_hcd [ 171.230107][ T5717] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 171.236432][ T5702] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 1.01 [ 171.296495][ T5717] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 171.317583][ T5717] usb 3-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 171.338144][ T29] kauditd_printk_skb: 5 callbacks suppressed [ 171.338158][ T29] audit: type=1400 audit(1785194803.991:589): avc: denied { append } for pid=7554 comm="syz.4.560" name="ptp0" dev="devtmpfs" ino=1266 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 171.373775][ T5702] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 171.377794][ T5717] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 171.403771][ T5717] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 171.417399][ T5717] usb 3-1: Product: syz [ 171.432066][ T9] hub 4-1:4.0: activate --> -90 [ 171.462054][ T5702] usb 2-1: Product: syz [ 171.466400][ T5717] usb 3-1: Manufacturer: syz [ 171.502891][ T5702] usb 2-1: Manufacturer: syz [ 171.516664][ T5702] usb 2-1: SerialNumber: syz [ 171.517852][ T5717] usb 3-1: SerialNumber: syz [ 171.567282][ T5717] cdc_ncm 3-1:1.0: CDC Union missing and no IAD found [ 171.575699][ T5717] cdc_ncm 3-1:1.0: bind() failure [ 171.763290][ T5717] usb 2-1: USB disconnect, device number 15 [ 171.792011][ T5709] usb 3-1: USB disconnect, device number 13 [ 171.807285][ T9] usb 4-1-port1: cannot disable (err = -71) [ 171.809308][ T24] usb 4-1: USB disconnect, device number 10 [ 172.995212][ T5717] usb 4-1: new high-speed USB device number 11 using dummy_hcd [ 173.588278][ T5717] usb 4-1: Using ep0 maxpacket: 16 [ 173.602687][ T5717] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 173.616427][ T5717] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1090, setting to 1024 [ 173.634915][ T5717] usb 4-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.40 [ 173.647032][ T5717] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 173.675057][ T5717] usb 4-1: config 0 descriptor?? [ 173.704705][ T7574] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 173.794397][ T5717] uvcvideo 4-1:0.0: Found UVC 0.00 device (10c4:ea90) [ 173.812588][ T5717] uvcvideo 4-1:0.0: No valid video chain found. [ 173.981021][ T7603] batadv_slave_1: entered promiscuous mode [ 174.028671][ T7603] batadv_slave_1: left promiscuous mode [ 174.043203][ T9] usb 4-1: USB disconnect, device number 11 [ 174.617267][ T29] audit: type=1400 audit(1785194807.281:590): avc: denied { read write } for pid=7620 comm="syz.2.587" name="nvram" dev="devtmpfs" ino=623 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nvram_device_t tclass=chr_file permissive=1 [ 174.655842][ T29] audit: type=1400 audit(1785194807.281:591): avc: denied { open } for pid=7620 comm="syz.2.587" path="/dev/nvram" dev="devtmpfs" ino=623 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nvram_device_t tclass=chr_file permissive=1 [ 175.004119][ T7634] netlink: 176 bytes leftover after parsing attributes in process `syz.0.591'. [ 176.251553][ T29] audit: type=1400 audit(1785194808.911:592): avc: denied { bind } for pid=7661 comm="syz.1.603" lport=58 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 176.304441][ T29] audit: type=1400 audit(1785194808.921:593): avc: denied { name_bind } for pid=7661 comm="syz.1.603" src=20002 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=rawip_socket permissive=1 [ 176.327130][ T29] audit: type=1400 audit(1785194808.921:594): avc: denied { node_bind } for pid=7661 comm="syz.1.603" saddr=2001::2 src=20002 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=rawip_socket permissive=1 [ 176.586261][ T29] audit: type=1400 audit(1785194809.251:595): avc: denied { watch watch_reads } for pid=7675 comm="syz.2.611" path="/proc/360/task/361" dev="proc" ino=24822 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dir permissive=1 [ 178.293862][ T7709] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 178.355110][ T29] audit: type=1400 audit(1785194811.021:596): avc: denied { module_load } for pid=7711 comm="syz.0.621" path=2F6D656D66643A2D42D54E49C56A9A707070F00884A26D202864656C6574656429 dev="tmpfs" ino=43 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=system permissive=1 [ 178.502374][ T29] audit: type=1400 audit(1785194811.151:597): avc: denied { associate } for pid=7716 comm="syz.1.624" name="298" scontext=root:object_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 179.953422][ T7757] SELinux: failed to load policy [ 180.268724][ T5611] Bluetooth: hci2: command 0x0c1a tx timeout [ 181.372864][ T7786] netlink: 12 bytes leftover after parsing attributes in process `syz.4.649'. [ 181.862669][ T29] audit: type=1400 audit(1785194814.531:598): avc: denied { setattr } for pid=7795 comm="syz.1.652" path="/dev/snd/timer" dev="devtmpfs" ino=1283 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sound_device_t tclass=chr_file permissive=1 [ 182.003863][ T7804] binder: 7802:7804 ioctl c0306201 0 returned -14 [ 182.005597][ T29] audit: type=1400 audit(1785194814.671:599): avc: denied { transfer } for pid=7802 comm="syz.0.654" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=binder permissive=1 [ 182.216621][ T7812] kvm: pic: level sensitive irq not supported [ 183.028389][ T7859] netlink: 28 bytes leftover after parsing attributes in process `syz.1.679'. [ 183.622015][ T7888] Mass Storage Function, version: 2009/09/11 [ 183.628697][ T29] audit: type=1400 audit(1785194816.291:600): avc: denied { write } for pid=7887 comm="syz.3.691" name="functions" dev="configfs" ino=13572 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 183.653894][ T7888] LUN: removable file: (no medium) [ 183.672536][ T29] audit: type=1400 audit(1785194816.331:601): avc: denied { write } for pid=7887 comm="syz.3.691" name="c.1" dev="configfs" ino=22963 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 183.703014][ T29] audit: type=1400 audit(1785194816.331:602): avc: denied { write } for pid=7887 comm="syz.3.691" name="c.1" dev="configfs" ino=22963 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 183.757010][ T29] audit: type=1400 audit(1785194816.421:603): avc: denied { setattr } for pid=7890 comm="syz.1.692" name="tty4" dev="devtmpfs" ino=23 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tty_device_t tclass=chr_file permissive=1 [ 184.973472][ T7923] netlink: 8 bytes leftover after parsing attributes in process `syz.1.701'. [ 185.402600][ T7929] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 185.881551][ T7948] netlink: 8 bytes leftover after parsing attributes in process `syz.1.713'. [ 186.598679][ T29] audit: type=1326 audit(1785195075.265:604): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7980 comm="syz.1.729" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f163d99de99 code=0x0 [ 186.634615][ T7985] kvm: pic: level sensitive irq not supported [ 186.634684][ T7985] kvm: pic: single mode not supported [ 186.640864][ T7985] kvm: pic: level sensitive irq not supported [ 187.240468][ T29] audit: type=1400 audit(1785195075.875:605): avc: denied { watch watch_reads } for pid=8009 comm="syz.3.741" path=2F6D656D66643A2D42D54E49C56A9A70707DF00984A26D202864656C6574656429 dev="tmpfs" ino=1102 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 188.309291][ T29] audit: type=1400 audit(1785195076.965:606): avc: denied { write } for pid=8030 comm="syz.3.749" name="c.1" dev="configfs" ino=22963 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 188.338792][ T29] audit: type=1400 audit(1785195076.995:607): avc: denied { write } for pid=8030 comm="syz.3.749" name="c.1" dev="configfs" ino=22963 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 188.364819][ T8031] configfs-gadget.g1 gadget.32: uvc: uvc_function_bind() [ 188.553697][ T8040] netlink: 'syz.1.755': attribute type 1 has an invalid length. [ 188.774173][ T1314] ieee802154 phy0 wpan0: encryption failed: -22 [ 188.783120][ T1314] ieee802154 phy1 wpan1: encryption failed: -22 [ 188.913654][ T29] audit: type=1400 audit(1785195077.505:608): avc: denied { map } for pid=8041 comm="syz.0.752" path="/dev/bus/usb/006/001" dev="devtmpfs" ino=737 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 189.179167][ T8054] input: syz0 as /devices/virtual/input/input10 [ 189.223172][ T8052] kvm: pic: level sensitive irq not supported [ 190.708170][ T29] audit: type=1400 audit(1785195079.365:609): avc: denied { write } for pid=8090 comm="syz.1.769" name="functions" dev="configfs" ino=13572 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 190.737480][ T29] audit: type=1400 audit(1785195079.375:610): avc: denied { write } for pid=8090 comm="syz.1.769" name="c.1" dev="configfs" ino=22963 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 190.797952][ T29] audit: type=1400 audit(1785195079.375:611): avc: denied { write } for pid=8090 comm="syz.1.769" name="c.1" dev="configfs" ino=22963 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 190.820480][ T29] audit: type=1400 audit(1785195079.375:612): avc: denied { write } for pid=8090 comm="syz.1.769" name="os_desc" dev="configfs" ino=13575 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 190.861619][ T29] audit: type=1400 audit(1785195079.375:613): avc: denied { write } for pid=8090 comm="syz.1.769" name="os_desc" dev="configfs" ino=13575 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 191.175009][ T29] audit: type=1400 audit(1785195079.835:614): avc: denied { write } for pid=8096 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 191.720586][ T8126] syzkaller0: entered promiscuous mode [ 191.736383][ T8126] syzkaller0: entered allmulticast mode [ 192.612146][ T29] kauditd_printk_skb: 2 callbacks suppressed [ 192.612183][ T29] audit: type=1400 audit(1785195081.275:617): avc: denied { write } for pid=8146 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 193.556398][ T8174] input: syz0 as /devices/virtual/input/input11 [ 193.692847][ T8178] kvm: pic: level sensitive irq not supported [ 193.985875][ T8191] netlink: 8 bytes leftover after parsing attributes in process `syz.0.790'. [ 194.381557][ T29] audit: type=1400 audit(1785195339.047:618): avc: denied { write } for pid=8166 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 194.732140][ T29] audit: type=1400 audit(1785195339.397:619): avc: denied { write } for pid=8201 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 194.865102][ T8209] FAULT_INJECTION: forcing a failure. [ 194.865102][ T8209] name fail_page_alloc, interval 15, probability 100, space 0, times 1 [ 194.865743][ T8211] FAULT_INJECTION: forcing a failure. [ 194.865743][ T8211] name fail_page_alloc, interval 15, probability 100, space 0, times 1 [ 194.893086][ T8211] CPU: 1 UID: 0 PID: 8211 Comm: syz.0.797 Not tainted syzkaller #0 PREEMPT(full) [ 194.893113][ T8211] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 194.893124][ T8211] Call Trace: [ 194.893130][ T8211] [ 194.893137][ T8211] dump_stack_lvl+0x100/0x190 [ 194.893165][ T8211] should_fail_ex.cold+0x5/0xa [ 194.893185][ T8211] ? prepare_alloc_pages+0x16d/0x5f0 [ 194.893214][ T8211] should_fail_alloc_page+0xeb/0x140 [ 194.893239][ T8211] prepare_alloc_pages+0x1f0/0x5f0 [ 194.893267][ T8211] __alloc_frozen_pages_noprof+0x1af/0x2dc0 [ 194.893292][ T8211] ? rcu_is_watching+0x12/0xc0 [ 194.893319][ T8211] ? trace_mm_page_alloc+0x164/0x1c0 [ 194.893344][ T8211] ? __alloc_frozen_pages_noprof+0x2d1/0x2dc0 [ 194.893375][ T8211] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 194.893398][ T8211] ? stack_trace_save+0x8e/0xc0 [ 194.893417][ T8211] ? __pfx_stack_trace_save+0x10/0x10 [ 194.893436][ T8211] ? stack_depot_save_flags+0x27/0x9d0 [ 194.893462][ T8211] ? is_bpf_text_address+0x94/0x1a0 [ 194.893486][ T8211] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 194.893509][ T8211] ? __kasan_slab_alloc+0x89/0x90 [ 194.893531][ T8211] ? kmem_cache_alloc_node_noprof+0x27d/0x6b0 [ 194.893550][ T8211] ? alloc_vmap_area+0x640/0x2bb0 [ 194.893570][ T8211] ? __get_vm_area_node+0x1ca/0x330 [ 194.893592][ T8211] ? __vmalloc_node_range_noprof+0x228/0x1630 [ 194.893618][ T8211] ? __vmalloc_node_noprof+0xad/0xf0 [ 194.893641][ T8211] ? kvm_dirty_ring_alloc+0x25/0x1a0 [ 194.893661][ T8211] ? kvm_vm_ioctl+0x7d3/0x4180 [ 194.893684][ T8211] ? __x64_sys_ioctl+0x18e/0x210 [ 194.893708][ T8211] ? do_syscall_64+0x115/0x870 [ 194.893727][ T8211] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 194.893755][ T8211] alloc_pages_bulk_noprof+0x5de/0x13c0 [ 194.893779][ T8211] ? policy_nodemask+0xed/0x4f0 [ 194.893805][ T8211] ? __pfx_alloc_pages_bulk_noprof+0x10/0x10 [ 194.893837][ T8211] __kasan_populate_vmalloc+0xf0/0x210 [ 194.893861][ T8211] alloc_vmap_area+0x95d/0x2bb0 [ 194.893890][ T8211] ? kasan_save_track+0x14/0x30 [ 194.893911][ T8211] ? __kasan_kmalloc+0xaa/0xb0 [ 194.893931][ T8211] ? __pfx_alloc_vmap_area+0x10/0x10 [ 194.893954][ T8211] ? kvm_find_cpuid_entry2+0x1c7/0x290 [ 194.893974][ T8211] ? __get_vm_area_node+0x101/0x330 [ 194.894000][ T8211] __get_vm_area_node+0x1ca/0x330 [ 194.894028][ T8211] __vmalloc_node_range_noprof+0x228/0x1630 [ 194.894053][ T8211] ? kvm_dirty_ring_alloc+0x25/0x1a0 [ 194.894079][ T8211] ? kvm_vcpu_reset+0x6d3/0x1b00 [ 194.894103][ T8211] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 194.894128][ T8211] ? kvm_dirty_ring_alloc+0x25/0x1a0 [ 194.894154][ T8211] ? vmx_update_fb_clear_dis+0xb1/0x1b0 [ 194.894175][ T8211] ? vmx_vcpu_pi_put+0x20a/0x2c0 [ 194.894202][ T8211] ? vmx_vcpu_put+0xbf/0x860 [ 194.894221][ T8211] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 194.894247][ T8211] ? kvm_find_user_return_msr+0xb5/0xf0 [ 194.894269][ T8211] ? vmx_setup_uret_msrs+0x591/0x8b0 [ 194.894298][ T8211] ? vmx_update_exception_bitmap+0x230/0x5c0 [ 194.894313][ T8211] ? kvm_calc_cpu_role.isra.0+0x26c/0x330 [ 194.894339][ T8211] ? kvm_dirty_ring_alloc+0x25/0x1a0 [ 194.894367][ T8211] __vmalloc_node_noprof+0xad/0xf0 [ 194.894395][ T8211] ? kvm_dirty_ring_alloc+0x25/0x1a0 [ 194.894419][ T8211] kvm_dirty_ring_alloc+0x25/0x1a0 [ 194.894442][ T8211] kvm_vm_ioctl+0x7d3/0x4180 [ 194.894466][ T8211] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 194.894493][ T8211] ? __pfx_kvm_vm_ioctl+0x10/0x10 [ 194.894535][ T8211] ? kasan_quarantine_put+0x104/0x240 [ 194.894555][ T8211] ? lockdep_hardirqs_on+0x78/0x100 [ 194.894575][ T8211] ? find_held_lock+0x2b/0x80 [ 194.894602][ T8211] ? tomoyo_path_number_perm+0x28f/0x580 [ 194.894628][ T8211] ? tomoyo_path_number_perm+0x28f/0x580 [ 194.894655][ T8211] ? tomoyo_path_number_perm+0x188/0x580 [ 194.894680][ T8211] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 194.894705][ T8211] ? __pfx_futex_wait+0x10/0x10 [ 194.894729][ T8211] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 194.894751][ T8211] ? do_vfs_ioctl+0x226/0x13e0 [ 194.894778][ T8211] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 194.894804][ T8211] ? __pfx_ioctl_has_perm.constprop.0.isra.0+0x10/0x10 [ 194.894842][ T8211] ? __fget_files+0x215/0x3d0 [ 194.894859][ T8211] ? hook_file_ioctl_common+0x140/0x440 [ 194.894886][ T8211] ? selinux_file_ioctl+0x13b/0x290 [ 194.894914][ T8211] ? selinux_file_ioctl+0xb6/0x290 [ 194.894943][ T8211] ? __pfx_kvm_vm_ioctl+0x10/0x10 [ 194.894970][ T8211] __x64_sys_ioctl+0x18e/0x210 [ 194.894998][ T8211] do_syscall_64+0x115/0x870 [ 194.895018][ T8211] ? clear_bhb_loop+0x40/0x90 [ 194.895039][ T8211] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 194.895057][ T8211] RIP: 0033:0x7f598e39de99 [ 194.895074][ T8211] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 194.895092][ T8211] RSP: 002b:00007f598f20a028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 194.895110][ T8211] RAX: ffffffffffffffda RBX: 00007f598e625fa0 RCX: 00007f598e39de99 [ 194.895122][ T8211] RDX: 0000000000000000 RSI: 000000000000ae41 RDI: 0000000000000004 [ 194.895132][ T8211] RBP: 00007f598e433eaf R08: 0000000000000000 R09: 0000000000000000 [ 194.895142][ T8211] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 194.895152][ T8211] R13: 00007f598e626038 R14: 00007f598e625fa0 R15: 00007fff79c53408 [ 194.895175][ T8211] [ 194.895477][ T8211] syz.0.797: vmalloc error: size 1048576, vm_struct allocation failed, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null) [ 194.904798][ T8209] CPU: 0 UID: 0 PID: 8209 Comm: rm Not tainted syzkaller #0 PREEMPT(full) [ 194.904824][ T8209] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 194.904835][ T8209] Call Trace: [ 194.904840][ T8209] [ 194.904846][ T8209] dump_stack_lvl+0x100/0x190 [ 194.904876][ T8209] should_fail_ex.cold+0x5/0xa [ 194.904893][ T8209] ? prepare_alloc_pages+0x16d/0x5f0 [ 194.904917][ T8209] should_fail_alloc_page+0xeb/0x140 [ 194.904939][ T8209] prepare_alloc_pages+0x1f0/0x5f0 [ 194.904964][ T8209] __alloc_frozen_pages_noprof+0x1af/0x2dc0 [ 194.904984][ T8209] ? stack_trace_save+0x8e/0xc0 [ 194.905001][ T8209] ? __pfx_stack_trace_save+0x10/0x10 [ 194.905017][ T8209] ? stack_depot_save_flags+0x27/0x9d0 [ 194.905043][ T8209] ? kasan_save_stack+0x3f/0x50 [ 194.905062][ T8209] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 194.905078][ T8209] ? kmem_cache_alloc_noprof+0x26b/0x6a0 [ 194.905095][ T8209] ? __vmf_anon_prepare+0x11f/0x250 [ 194.905116][ T8209] ? __handle_mm_fault+0x187d/0x2a00 [ 194.905138][ T8209] ? handle_mm_fault+0x37b/0xa30 [ 194.905160][ T8209] ? do_user_addr_fault+0x5a3/0x12f0 [ 194.905182][ T8209] ? exc_page_fault+0x6f/0xd0 [ 194.905198][ T8209] ? asm_exc_page_fault+0x26/0x30 [ 194.905214][ T8209] ? look_up_lock_class+0x55/0x120 [ 194.905231][ T8209] ? register_lock_class+0x40/0x560 [ 194.905257][ T8209] ? __lock_acquire+0x49f/0x1a40 [ 194.905278][ T8209] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 194.905300][ T8209] ? policy_nodemask+0xed/0x4f0 [ 194.905322][ T8209] alloc_pages_mpol+0x1fb/0x540 [ 194.905344][ T8209] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 194.905364][ T8209] ? find_held_lock+0x2b/0x80 [ 194.905387][ T8209] ? __anon_vma_prepare+0x2db/0x5e0 [ 194.905410][ T8209] ? __anon_vma_prepare+0x2db/0x5e0 [ 194.905436][ T8209] folio_alloc_mpol_noprof+0x36/0x260 [ 194.905461][ T8209] vma_alloc_folio_noprof+0xed/0x1d0 [ 194.905484][ T8209] ? __pfx_vma_alloc_folio_noprof+0x10/0x10 [ 194.905514][ T8209] ? __pfx_filemap_map_pages+0x10/0x10 [ 194.905537][ T8209] do_fault+0x1e6/0x1750 [ 194.905561][ T8209] __handle_mm_fault+0x187d/0x2a00 [ 194.905590][ T8209] ? reacquire_held_locks+0xce/0x1e0 [ 194.905609][ T8209] ? __pfx___handle_mm_fault+0x10/0x10 [ 194.905636][ T8209] ? lock_vma_under_rcu+0x17c/0x590 [ 194.905673][ T8209] handle_mm_fault+0x37b/0xa30 [ 194.905701][ T8209] do_user_addr_fault+0x5a3/0x12f0 [ 194.905733][ T8209] exc_page_fault+0x6f/0xd0 [ 194.905750][ T8209] asm_exc_page_fault+0x26/0x30 [ 194.905766][ T8209] RIP: 0033:0x7fd417defff2 [ 194.905780][ T8209] Code: 0f 60 c0 66 0f 61 c0 66 0f 70 c0 00 48 83 fa 10 72 76 48 83 fa 20 77 12 0f 11 44 17 f0 0f 11 07 c3 0f 11 47 e0 0f 11 47 f0 c3 <0f> 11 07 0f 11 47 10 48 01 d7 48 83 fa 40 76 e7 0f 11 40 20 0f 11 [ 194.905794][ T8209] RSP: 002b:00007ffca5843d68 EFLAGS: 00010202 [ 194.905808][ T8209] RAX: 00007fd417ac4048 RBX: 0000000000000004 RCX: 00007fd417ac5088 [ 194.905818][ T8209] RDX: 0000000000000fb8 RSI: 0000000000000000 RDI: 00007fd417ac4048 [ 194.905827][ T8209] RBP: 00007ffca58440f0 R08: 00007fd417ac4048 R09: 0000000000000003 [ 194.905836][ T8209] R10: 0000000000000812 R11: 00007ffca58441d8 R12: 00007ffca5843e18 [ 194.905846][ T8209] R13: 00007fd417ac60c0 R14: 00007ffca5844190 R15: 00007fd417ac5000 [ 194.905873][ T8209] [ 194.907133][ T8209] Huh VM_FAULT_OOM leaked out to the #PF handler. Retrying PF [ 194.951100][ T8211] ,cpuset= [ 195.377383][ T29] audit: type=1400 audit(1785195339.857:620): avc: denied { write } for pid=8216 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 195.388827][ T8211] / [ 195.396917][ T29] audit: type=1400 audit(1785195339.927:621): avc: denied { write } for pid=8227 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 195.404748][ T8211] ,mems_allowed=0-1 [ 195.546413][ T29] audit: type=1400 audit(1785195340.207:622): avc: denied { write } for pid=8229 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 195.733963][ T8211] CPU: 1 UID: 0 PID: 8211 Comm: syz.0.797 Not tainted syzkaller #0 PREEMPT(full) [ 195.733989][ T8211] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 195.733998][ T8211] Call Trace: [ 195.734003][ T8211] [ 195.734009][ T8211] dump_stack_lvl+0x100/0x190 [ 195.734035][ T8211] warn_alloc.cold+0x94/0xa8 [ 195.734052][ T8211] ? __pfx_warn_alloc+0x10/0x10 [ 195.734069][ T8211] ? lockdep_hardirqs_on+0x78/0x100 [ 195.734088][ T8211] ? __get_vm_area_node+0x2cd/0x330 [ 195.734115][ T8211] ? __get_vm_area_node+0x208/0x330 [ 195.734139][ T8211] __vmalloc_node_range_noprof+0xccd/0x1630 [ 195.734165][ T8211] ? kvm_vcpu_reset+0x6d3/0x1b00 [ 195.734186][ T8211] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 195.734209][ T8211] ? kvm_dirty_ring_alloc+0x25/0x1a0 [ 195.734232][ T8211] ? vmx_update_fb_clear_dis+0xb1/0x1b0 [ 195.734251][ T8211] ? vmx_vcpu_pi_put+0x20a/0x2c0 [ 195.734275][ T8211] ? vmx_vcpu_put+0xbf/0x860 [ 195.734290][ T8211] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 195.734318][ T8211] ? kvm_find_user_return_msr+0xb5/0xf0 [ 195.734340][ T8211] ? vmx_setup_uret_msrs+0x591/0x8b0 [ 195.734364][ T8211] ? vmx_update_exception_bitmap+0x230/0x5c0 [ 195.734379][ T8211] ? kvm_calc_cpu_role.isra.0+0x26c/0x330 [ 195.734405][ T8211] ? kvm_dirty_ring_alloc+0x25/0x1a0 [ 195.734424][ T8211] __vmalloc_node_noprof+0xad/0xf0 [ 195.734446][ T8211] ? kvm_dirty_ring_alloc+0x25/0x1a0 [ 195.734469][ T8211] kvm_dirty_ring_alloc+0x25/0x1a0 [ 195.734490][ T8211] kvm_vm_ioctl+0x7d3/0x4180 [ 195.734513][ T8211] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 195.734539][ T8211] ? __pfx_kvm_vm_ioctl+0x10/0x10 [ 195.734576][ T8211] ? kasan_quarantine_put+0x104/0x240 [ 195.734594][ T8211] ? lockdep_hardirqs_on+0x78/0x100 [ 195.734614][ T8211] ? find_held_lock+0x2b/0x80 [ 195.734638][ T8211] ? tomoyo_path_number_perm+0x28f/0x580 [ 195.734661][ T8211] ? tomoyo_path_number_perm+0x28f/0x580 [ 195.734687][ T8211] ? tomoyo_path_number_perm+0x188/0x580 [ 195.734710][ T8211] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 195.734733][ T8211] ? __pfx_futex_wait+0x10/0x10 [ 195.734755][ T8211] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 195.734774][ T8211] ? do_vfs_ioctl+0x226/0x13e0 [ 195.734797][ T8211] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 195.734820][ T8211] ? __pfx_ioctl_has_perm.constprop.0.isra.0+0x10/0x10 [ 195.734852][ T8211] ? __fget_files+0x215/0x3d0 [ 195.734868][ T8211] ? hook_file_ioctl_common+0x140/0x440 [ 195.734891][ T8211] ? selinux_file_ioctl+0x13b/0x290 [ 195.734914][ T8211] ? selinux_file_ioctl+0xb6/0x290 [ 195.734939][ T8211] ? __pfx_kvm_vm_ioctl+0x10/0x10 [ 195.734962][ T8211] __x64_sys_ioctl+0x18e/0x210 [ 195.734987][ T8211] do_syscall_64+0x115/0x870 [ 195.735004][ T8211] ? clear_bhb_loop+0x40/0x90 [ 195.735023][ T8211] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 195.735039][ T8211] RIP: 0033:0x7f598e39de99 [ 195.735053][ T8211] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 195.735068][ T8211] RSP: 002b:00007f598f20a028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 195.735085][ T8211] RAX: ffffffffffffffda RBX: 00007f598e625fa0 RCX: 00007f598e39de99 [ 195.735095][ T8211] RDX: 0000000000000000 RSI: 000000000000ae41 RDI: 0000000000000004 [ 195.735105][ T8211] RBP: 00007f598e433eaf R08: 0000000000000000 R09: 0000000000000000 [ 195.735114][ T8211] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 195.735123][ T8211] R13: 00007f598e626038 R14: 00007f598e625fa0 R15: 00007fff79c53408 [ 195.735145][ T8211] [ 195.735178][ T8211] Mem-Info: [ 195.777738][ T29] audit: type=1400 audit(1785195340.347:623): avc: denied { write } for pid=8240 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 196.023456][ T8211] active_anon:15843 inactive_anon:5 isolated_anon:0 [ 196.023456][ T8211] active_file:16 inactive_file:59819 isolated_file:0 [ 196.023456][ T8211] unevictable:768 dirty:483 writeback:0 [ 196.023456][ T8211] slab_reclaimable:12202 slab_unreclaimable:97537 [ 196.023456][ T8211] mapped:33349 shmem:7003 pagetables:1633 [ 196.023456][ T8211] sec_pagetables:0 bounce:0 [ 196.023456][ T8211] kernel_misc_reclaimable:0 [ 196.023456][ T8211] free:1292422 free_pcp:12208 free_cma:0 [ 196.413068][ T8211] Node 0 active_anon:75372kB inactive_anon:20kB active_file:64kB inactive_file:239064kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:144996kB dirty:1932kB writeback:0kB shmem:37876kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:15040kB pagetables:5992kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 196.907217][ T8211] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:212kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:64kB pagetables:140kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 196.940341][ T8211] Node 0 DMA free:15360kB boost:0kB min:208kB low:260kB high:312kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 196.971449][ T8211] lowmem_reserve[]: 0 2472 2473 2473 2473 [ 197.070354][ T8211] Node 0 DMA32 free:1218780kB boost:0kB min:34012kB low:42512kB high:51012kB reserved_highatomic:0KB free_highatomic:0KB active_anon:64144kB inactive_anon:20kB active_file:64kB inactive_file:239064kB unevictable:1536kB writepending:1932kB zspages:0kB present:3129332kB managed:2532172kB mlocked:0kB bounce:0kB free_pcp:42020kB local_pcp:15008kB free_cma:0kB [ 197.107849][ T8211] lowmem_reserve[]: 0 0 0 0 0 [ 197.112618][ T8211] Node 0 Normal free:0kB boost:0kB min:4kB low:4kB high:4kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:1048580kB managed:376kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 197.183137][ T8211] lowmem_reserve[]: 0 0 0 0 0 [ 197.197423][ T8211] Node 1 Normal free:3943528kB boost:0kB min:55880kB low:69848kB high:83816kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:212kB unevictable:1536kB writepending:0kB zspages:0kB present:4194300kB managed:4111100kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 197.253837][ T8211] lowmem_reserve[]: 0 0 0 0 0 [ 197.259740][ T8211] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 197.275917][ T8211] Node 0 DMA32: 261*4kB (M) 369*8kB (M) 174*16kB (UME) 203*32kB (UME) 113*64kB (UME) 214*128kB (UM) 74*256kB (UME) 34*512kB (UM) 34*1024kB (UM) 9*2048kB (UME) 264*4096kB (UM) = 1218844kB [ 197.322666][ T29] audit: type=1400 audit(1785195341.987:624): avc: denied { write } for pid=8245 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 197.370238][ T8211] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 197.538394][ T8211] Node 1 Normal: 2*4kB (U) 6*8kB (UM) 9*16kB (UM) 17*32kB (UM) 18*64kB (UM) 4*128kB (UM) 5*256kB (UM) 5*512kB (UM) 3*1024kB (UM) 1*2048kB (U) 960*4096kB (M) = 3943528kB [ 197.567433][ T29] audit: type=1400 audit(1785195342.017:625): avc: denied { ioctl } for pid=8272 comm="syz.2.807" path="/dev/fuse" dev="devtmpfs" ino=99 ioctlcmd=0xe500 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fuse_device_t tclass=chr_file permissive=1 [ 197.597365][ T8211] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 197.617399][ T8211] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 197.640024][ T8211] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 197.705127][ T8285] netlink: 8 bytes leftover after parsing attributes in process `syz.3.808'. [ 198.054158][ T8211] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 198.063589][ T8211] 69766 total pagecache pages [ 198.068341][ T8211] 0 pages in swap cache [ 198.072501][ T8211] Free swap = 124996kB [ 198.076678][ T8211] Total swap = 124996kB [ 198.081082][ T8211] 2097051 pages RAM [ 198.085105][ T8211] 0 pages HighMem/MovableOnly [ 198.090626][ T8211] 432299 pages reserved [ 198.113979][ T29] audit: type=1400 audit(1785195598.776:626): avc: denied { write } for pid=8284 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 198.141132][ T8211] 0 pages cma reserved [ 198.599634][ T8303] input: syz0 as /devices/virtual/input/input13 [ 199.709047][ T8324] FAULT_INJECTION: forcing a failure. [ 199.709047][ T8324] name fail_page_alloc, interval 15, probability 100, space 0, times 1 [ 199.709626][ T8325] FAULT_INJECTION: forcing a failure. [ 199.709626][ T8325] name fail_page_alloc, interval 15, probability 100, space 0, times 1 [ 199.722817][ T8324] CPU: 1 UID: 0 PID: 8324 Comm: syz.2.826 Not tainted syzkaller #0 PREEMPT(full) [ 199.722841][ T8324] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 199.722852][ T8324] Call Trace: [ 199.722859][ T8324] [ 199.722866][ T8324] dump_stack_lvl+0x100/0x190 [ 199.722894][ T8324] should_fail_ex.cold+0x5/0xa [ 199.722911][ T8324] ? prepare_alloc_pages+0x16d/0x5f0 [ 199.722937][ T8324] should_fail_alloc_page+0xeb/0x140 [ 199.722961][ T8324] prepare_alloc_pages+0x1f0/0x5f0 [ 199.722986][ T8324] __alloc_frozen_pages_noprof+0x1af/0x2dc0 [ 199.723007][ T8324] ? stack_trace_save+0x8e/0xc0 [ 199.723025][ T8324] ? __pfx_stack_trace_save+0x10/0x10 [ 199.723042][ T8324] ? stack_depot_save_flags+0x27/0x9d0 [ 199.723071][ T8324] ? __lock_acquire+0x49f/0x1a40 [ 199.723090][ T8324] ? __css_rstat_updated+0x1ce/0x5a0 [ 199.723112][ T8324] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 199.723130][ T8324] ? __lock_acquire+0x49f/0x1a40 [ 199.723153][ T8324] ? rcu_is_watching+0x12/0xc0 [ 199.723187][ T8324] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 199.723209][ T8324] ? policy_nodemask+0xed/0x4f0 [ 199.723231][ T8324] alloc_pages_mpol+0x1fb/0x540 [ 199.723253][ T8324] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 199.723275][ T8324] ? kmem_cache_alloc_noprof+0x2d7/0x6a0 [ 199.723293][ T8324] ? __lock_acquire+0x49f/0x1a40 [ 199.723314][ T8324] alloc_pages_noprof+0x1a/0x160 [ 199.723338][ T8324] kvm_vm_ioctl+0x3a9/0x4180 [ 199.723362][ T8324] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 199.723389][ T8324] ? __pfx_kvm_vm_ioctl+0x10/0x10 [ 199.723426][ T8324] ? kasan_quarantine_put+0x104/0x240 [ 199.723444][ T8324] ? lockdep_hardirqs_on+0x78/0x100 [ 199.723463][ T8324] ? find_held_lock+0x2b/0x80 [ 199.723486][ T8324] ? tomoyo_path_number_perm+0x28f/0x580 [ 199.723508][ T8324] ? tomoyo_path_number_perm+0x28f/0x580 [ 199.723533][ T8324] ? tomoyo_path_number_perm+0x188/0x580 [ 199.723556][ T8324] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 199.723586][ T8324] ? __pfx_futex_wait+0x10/0x10 [ 199.723608][ T8324] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 199.723628][ T8324] ? do_vfs_ioctl+0x226/0x13e0 [ 199.723652][ T8324] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 199.723676][ T8324] ? __pfx_ioctl_has_perm.constprop.0.isra.0+0x10/0x10 [ 199.723709][ T8324] ? __fget_files+0x215/0x3d0 [ 199.723726][ T8324] ? hook_file_ioctl_common+0x140/0x440 [ 199.723751][ T8324] ? selinux_file_ioctl+0x13b/0x290 [ 199.723775][ T8324] ? selinux_file_ioctl+0xb6/0x290 [ 199.723803][ T8324] ? __pfx_kvm_vm_ioctl+0x10/0x10 [ 199.723840][ T8324] __x64_sys_ioctl+0x18e/0x210 [ 199.723864][ T8324] do_syscall_64+0x115/0x870 [ 199.723882][ T8324] ? clear_bhb_loop+0x40/0x90 [ 199.723903][ T8324] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 199.723921][ T8324] RIP: 0033:0x7efeac39de99 [ 199.723938][ T8324] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 199.723953][ T8324] RSP: 002b:00007efead181028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 199.723970][ T8324] RAX: ffffffffffffffda RBX: 00007efeac625fa0 RCX: 00007efeac39de99 [ 199.723980][ T8324] RDX: 0000000000000000 RSI: 000000000000ae41 RDI: 0000000000000004 [ 199.723989][ T8324] RBP: 00007efeac433eaf R08: 0000000000000000 R09: 0000000000000000 [ 199.723999][ T8324] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 199.724009][ T8324] R13: 00007efeac626038 R14: 00007efeac625fa0 R15: 00007ffc28ed05c8 [ 199.724033][ T8324] [ 200.017505][ T29] audit: type=1400 audit(1785195600.676:627): avc: denied { listen } for pid=8329 comm="syz.3.828" path="/167/file0" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=unix_dgram_socket permissive=1 [ 200.025782][ T8325] CPU: 0 UID: 0 PID: 8325 Comm: syz.1.827 Not tainted syzkaller #0 PREEMPT(full) [ 200.025803][ T8325] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 200.025813][ T8325] Call Trace: [ 200.025819][ T8325] [ 200.025825][ T8325] dump_stack_lvl+0x100/0x190 [ 200.025856][ T8325] should_fail_ex.cold+0x5/0xa [ 200.025873][ T8325] ? prepare_alloc_pages+0x16d/0x5f0 [ 200.025898][ T8325] should_fail_alloc_page+0xeb/0x140 [ 200.025921][ T8325] prepare_alloc_pages+0x1f0/0x5f0 [ 200.025945][ T8325] __alloc_frozen_pages_noprof+0x1af/0x2dc0 [ 200.025968][ T8325] ? rcu_is_watching+0x12/0xc0 [ 200.025995][ T8325] ? trace_kmem_cache_alloc+0xdd/0x100 [ 200.026018][ T8325] ? __lock_acquire+0x49f/0x1a40 [ 200.026040][ T8325] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 200.026058][ T8325] ? __css_rstat_updated+0x1ce/0x5a0 [ 200.026083][ T8325] ? do_raw_spin_lock+0x128/0x260 [ 200.026105][ T8325] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 200.026127][ T8325] ? find_held_lock+0x2b/0x80 [ 200.026157][ T8325] ? __lock_acquire+0x49f/0x1a40 [ 200.026176][ T8325] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 200.026196][ T8325] ? policy_nodemask+0xed/0x4f0 [ 200.026219][ T8325] alloc_pages_mpol+0x1fb/0x540 [ 200.026242][ T8325] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 200.026268][ T8325] ? __folio_batch_add_and_move+0x5e5/0xc60 [ 200.026297][ T8325] folio_alloc_mpol_noprof+0x36/0x260 [ 200.026322][ T8325] shmem_alloc_folio+0x135/0x160 [ 200.026346][ T8325] shmem_alloc_and_add_folio+0x371/0xd40 [ 200.026367][ T8325] ? __pfx_shmem_alloc_and_add_folio+0x10/0x10 [ 200.026386][ T8325] ? shmem_allowable_huge_orders+0x2bd/0x400 [ 200.026407][ T8325] shmem_get_folio_gfp+0x6ad/0x1910 [ 200.026427][ T8325] ? filemap_map_pages+0x112d/0x1fe0 [ 200.026452][ T8325] ? __pfx_shmem_get_folio_gfp+0x10/0x10 [ 200.026470][ T8325] ? filemap_map_pages+0x1137/0x1fe0 [ 200.026497][ T8325] shmem_fault+0x1f9/0xa20 [ 200.026514][ T8325] ? __pfx_shmem_fault+0x10/0x10 [ 200.026533][ T8325] ? __pfx_filemap_map_pages+0x10/0x10 [ 200.026560][ T8325] ? find_held_lock+0x2b/0x80 [ 200.026585][ T8325] __do_fault+0x10b/0x440 [ 200.026606][ T8325] do_fault+0xa99/0x1750 [ 200.026630][ T8325] __handle_mm_fault+0x187d/0x2a00 [ 200.026658][ T8325] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 200.026682][ T8325] ? __pfx___handle_mm_fault+0x10/0x10 [ 200.026708][ T8325] ? pte_offset_map_lock+0x174/0x320 [ 200.026728][ T8325] ? find_held_lock+0x2b/0x80 [ 200.026759][ T8325] ? follow_page_pte+0x4d0/0x13f0 [ 200.026788][ T8325] handle_mm_fault+0x37b/0xa30 [ 200.026821][ T8325] __get_user_pages+0x1178/0x32a0 [ 200.026850][ T8325] ? __pfx___get_user_pages+0x10/0x10 [ 200.026877][ T8325] populate_vma_page_range+0x267/0x3f0 [ 200.026900][ T8325] ? __pfx_populate_vma_page_range+0x10/0x10 [ 200.026921][ T8325] ? __pfx_find_vma_intersection+0x10/0x10 [ 200.026942][ T8325] ? do_mmap+0x93f/0x12f0 [ 200.026965][ T8325] __mm_populate+0x107/0x3a0 [ 200.026988][ T8325] ? __pfx___mm_populate+0x10/0x10 [ 200.027011][ T8325] ? up_write+0x2e5/0x5c0 [ 200.027034][ T8325] vm_mmap_pgoff+0x37f/0x470 [ 200.027057][ T8325] ? __pfx_vm_mmap_pgoff+0x10/0x10 [ 200.027081][ T8325] ? __pfx_do_futex+0x10/0x10 [ 200.027112][ T8325] ksys_mmap_pgoff+0xe4/0x610 [ 200.027133][ T8325] ? __x64_sys_futex+0x358/0x4d0 [ 200.027156][ T8325] ? __pfx_ksys_mmap_pgoff+0x10/0x10 [ 200.027177][ T8325] ? __pfx___x64_sys_futex+0x10/0x10 [ 200.027204][ T8325] __x64_sys_mmap+0x125/0x190 [ 200.027229][ T8325] do_syscall_64+0x115/0x870 [ 200.027247][ T8325] ? clear_bhb_loop+0x40/0x90 [ 200.027266][ T8325] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 200.027283][ T8325] RIP: 0033:0x7f163d99de99 [ 200.027302][ T8325] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 200.027317][ T8325] RSP: 002b:00007f163e809028 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 200.027334][ T8325] RAX: ffffffffffffffda RBX: 00007f163dc25fa0 RCX: 00007f163d99de99 [ 200.027344][ T8325] RDX: b635773f06ebbeea RSI: 0000000000b36000 RDI: 0000200000000000 [ 200.027354][ T8325] RBP: 00007f163da33eaf R08: ffffffffffffffff R09: 0000000000000000 [ 200.027363][ T8325] R10: 0000000000008031 R11: 0000000000000246 R12: 0000000000000000 [ 200.027372][ T8325] R13: 00007f163dc26038 R14: 00007f163dc25fa0 R15: 00007ffe336f83f8 [ 200.027394][ T8325] [ 200.946905][ T29] audit: type=1400 audit(1785195857.594:628): avc: denied { bind } for pid=8346 comm="syz.0.835" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 201.084632][ T29] audit: type=1400 audit(1785195857.744:629): avc: denied { read } for pid=8353 comm="syz.1.838" name="trace_pipe" dev="tracefs" ino=1955 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=file permissive=1 [ 201.109281][ T29] audit: type=1400 audit(1785195857.744:630): avc: denied { open } for pid=8353 comm="syz.1.838" path="/154/dir0/per_cpu/cpu0/trace_pipe" dev="tracefs" ino=1955 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=file permissive=1 [ 201.195988][ T8356] input: syz0 as /devices/virtual/input/input14 [ 201.590202][ T8362] smpboot: CPU 1 is now offline [ 201.621118][ T8363] smpboot: Booting Node 0 Processor 1 APIC 0x1 [ 202.502497][ T8377] FAULT_INJECTION: forcing a failure. [ 202.502497][ T8377] name fail_page_alloc, interval 15, probability 100, space 0, times 1 [ 202.517149][ T8377] CPU: 0 UID: 0 PID: 8377 Comm: syz.4.845 Not tainted syzkaller #0 PREEMPT(full) [ 202.517177][ T8377] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 202.517189][ T8377] Call Trace: [ 202.517195][ T8377] [ 202.517203][ T8377] dump_stack_lvl+0x100/0x190 [ 202.517236][ T8377] should_fail_ex.cold+0x5/0xa [ 202.517256][ T8377] ? prepare_alloc_pages+0x16d/0x5f0 [ 202.517285][ T8377] should_fail_alloc_page+0xeb/0x140 [ 202.517309][ T8377] prepare_alloc_pages+0x1f0/0x5f0 [ 202.517336][ T8377] __alloc_frozen_pages_noprof+0x1af/0x2dc0 [ 202.517361][ T8377] ? rcu_is_watching+0x12/0xc0 [ 202.517389][ T8377] ? trace_mm_page_alloc+0x164/0x1c0 [ 202.517415][ T8377] ? __alloc_frozen_pages_noprof+0x2d1/0x2dc0 [ 202.517436][ T8377] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 202.517460][ T8377] ? stack_trace_save+0x8e/0xc0 [ 202.517480][ T8377] ? __pfx_stack_trace_save+0x10/0x10 [ 202.517500][ T8377] ? stack_depot_save_flags+0x27/0x9d0 [ 202.517526][ T8377] ? is_bpf_text_address+0x94/0x1a0 [ 202.517551][ T8377] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 202.517574][ T8377] ? __kasan_slab_alloc+0x89/0x90 [ 202.517596][ T8377] ? kmem_cache_alloc_node_noprof+0x27d/0x6b0 [ 202.517638][ T8377] ? alloc_vmap_area+0x640/0x2bb0 [ 202.517661][ T8377] ? __get_vm_area_node+0x1ca/0x330 [ 202.517686][ T8377] ? __vmalloc_node_range_noprof+0x228/0x1630 [ 202.517713][ T8377] ? __vmalloc_node_noprof+0xad/0xf0 [ 202.517738][ T8377] ? kvm_dirty_ring_alloc+0x25/0x1a0 [ 202.517761][ T8377] ? kvm_vm_ioctl+0x7d3/0x4180 [ 202.517786][ T8377] ? __x64_sys_ioctl+0x18e/0x210 [ 202.517812][ T8377] ? do_syscall_64+0x115/0x870 [ 202.517833][ T8377] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 202.517861][ T8377] alloc_pages_bulk_noprof+0x5de/0x13c0 [ 202.517887][ T8377] ? policy_nodemask+0xed/0x4f0 [ 202.517914][ T8377] ? __pfx_alloc_pages_bulk_noprof+0x10/0x10 [ 202.517949][ T8377] __kasan_populate_vmalloc+0xf0/0x210 [ 202.517976][ T8377] alloc_vmap_area+0x95d/0x2bb0 [ 202.518006][ T8377] ? kasan_save_track+0x14/0x30 [ 202.518027][ T8377] ? __kasan_kmalloc+0xaa/0xb0 [ 202.518046][ T8377] ? __pfx_alloc_vmap_area+0x10/0x10 [ 202.518075][ T8377] ? __pfx___schedule+0x10/0x10 [ 202.518093][ T8377] ? __get_vm_area_node+0x101/0x330 [ 202.518121][ T8377] __get_vm_area_node+0x1ca/0x330 [ 202.518149][ T8377] __vmalloc_node_range_noprof+0x228/0x1630 [ 202.518175][ T8377] ? kvm_dirty_ring_alloc+0x25/0x1a0 [ 202.518196][ T8377] ? irqentry_exit+0x24d/0xa00 [ 202.518221][ T8377] ? kvm_dirty_ring_alloc+0x25/0x1a0 [ 202.518246][ T8377] ? vmx_vcpu_pi_put+0x20a/0x2c0 [ 202.518274][ T8377] ? vmx_vcpu_put+0xbf/0x860 [ 202.518292][ T8377] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 202.518313][ T8377] ? kvm_find_user_return_msr+0xb5/0xf0 [ 202.518336][ T8377] ? vmx_setup_uret_msrs+0x591/0x8b0 [ 202.518361][ T8377] ? vmx_update_exception_bitmap+0x230/0x5c0 [ 202.518378][ T8377] ? kvm_calc_cpu_role.isra.0+0x26c/0x330 [ 202.518403][ T8377] ? kvm_dirty_ring_alloc+0x25/0x1a0 [ 202.518424][ T8377] __vmalloc_node_noprof+0xad/0xf0 [ 202.518447][ T8377] ? kvm_dirty_ring_alloc+0x25/0x1a0 [ 202.518473][ T8377] kvm_dirty_ring_alloc+0x25/0x1a0 [ 202.518495][ T8377] kvm_vm_ioctl+0x7d3/0x4180 [ 202.518519][ T8377] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 202.518547][ T8377] ? __pfx_kvm_vm_ioctl+0x10/0x10 [ 202.518588][ T8377] ? kasan_quarantine_put+0x104/0x240 [ 202.518606][ T8377] ? lockdep_hardirqs_on+0x78/0x100 [ 202.518626][ T8377] ? find_held_lock+0x2b/0x80 [ 202.518650][ T8377] ? tomoyo_path_number_perm+0x28f/0x580 [ 202.518674][ T8377] ? tomoyo_path_number_perm+0x28f/0x580 [ 202.518702][ T8377] ? tomoyo_path_number_perm+0x188/0x580 [ 202.518728][ T8377] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 202.518754][ T8377] ? __pfx_futex_wait+0x10/0x10 [ 202.518778][ T8377] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 202.518799][ T8377] ? do_vfs_ioctl+0x226/0x13e0 [ 202.518825][ T8377] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 202.518850][ T8377] ? __pfx_ioctl_has_perm.constprop.0.isra.0+0x10/0x10 [ 202.518885][ T8377] ? __fget_files+0x215/0x3d0 [ 202.518902][ T8377] ? hook_file_ioctl_common+0x140/0x440 [ 202.518926][ T8377] ? selinux_file_ioctl+0x13b/0x290 [ 202.518952][ T8377] ? selinux_file_ioctl+0xb6/0x290 [ 202.518980][ T8377] ? __pfx_kvm_vm_ioctl+0x10/0x10 [ 202.519009][ T8377] __x64_sys_ioctl+0x18e/0x210 [ 202.519047][ T8377] do_syscall_64+0x115/0x870 [ 202.519074][ T8377] ? clear_bhb_loop+0x40/0x90 [ 202.519096][ T8377] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 202.519114][ T8377] RIP: 0033:0x7fbbf619de99 [ 202.519133][ T8377] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 202.519151][ T8377] RSP: 002b:00007fbbf6faa028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 202.519171][ T8377] RAX: ffffffffffffffda RBX: 00007fbbf6425fa0 RCX: 00007fbbf619de99 [ 202.519182][ T8377] RDX: 0000000000000000 RSI: 000000000000ae41 RDI: 0000000000000004 [ 202.519193][ T8377] RBP: 00007fbbf6233eaf R08: 0000000000000000 R09: 0000000000000000 [ 202.519204][ T8377] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 202.519214][ T8377] R13: 00007fbbf6426038 R14: 00007fbbf6425fa0 R15: 00007ffc4703eea8 [ 202.519235][ T8377] [ 202.524798][ T5606] FAULT_INJECTION: forcing a failure. [ 202.524798][ T5606] name fail_page_alloc, interval 15, probability 100, space 0, times 1 [ 203.040511][ T5606] CPU: 0 UID: 0 PID: 5606 Comm: syz-executor Not tainted syzkaller #0 PREEMPT(full) [ 203.040536][ T5606] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 203.040546][ T5606] Call Trace: [ 203.040552][ T5606] [ 203.040559][ T5606] dump_stack_lvl+0x100/0x190 [ 203.040584][ T5606] should_fail_ex.cold+0x5/0xa [ 203.040602][ T5606] ? prepare_alloc_pages+0x16d/0x5f0 [ 203.040627][ T5606] should_fail_alloc_page+0xeb/0x140 [ 203.040651][ T5606] prepare_alloc_pages+0x1f0/0x5f0 [ 203.040682][ T5606] __alloc_frozen_pages_noprof+0x1af/0x2dc0 [ 203.040705][ T5606] ? find_held_lock+0x2b/0x80 [ 203.040731][ T5606] ? is_bpf_text_address+0x8a/0x1a0 [ 203.040752][ T5606] ? is_bpf_text_address+0x8a/0x1a0 [ 203.040774][ T5606] ? bpf_ksym_find+0x128/0x1c0 [ 203.040798][ T5606] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 203.040817][ T5606] ? is_bpf_text_address+0x94/0x1a0 [ 203.040838][ T5606] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 203.040855][ T5606] ? bpf_ksym_find+0x128/0x1c0 [ 203.040878][ T5606] ? __kernel_text_address+0xd/0x30 [ 203.040897][ T5606] ? unwind_get_return_address+0x59/0xa0 [ 203.040923][ T5606] ? arch_stack_walk+0xa6/0xf0 [ 203.040959][ T5606] ? __pfx_stack_trace_save+0x10/0x10 [ 203.040976][ T5606] ? stack_depot_save_flags+0x27/0x9d0 [ 203.041003][ T5606] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 203.041024][ T5606] ? policy_nodemask+0xed/0x4f0 [ 203.041048][ T5606] alloc_pages_mpol+0x1fb/0x540 [ 203.041071][ T5606] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 203.041099][ T5606] alloc_pages_noprof+0x1a/0x160 [ 203.041126][ T5606] get_free_pages_noprof+0x10/0xb0 [ 203.041145][ T5606] __kasan_populate_vmalloc+0xa0/0x210 [ 203.041168][ T5606] alloc_vmap_area+0x95d/0x2bb0 [ 203.041197][ T5606] ? kasan_save_track+0x14/0x30 [ 203.041216][ T5606] ? __kasan_kmalloc+0xaa/0xb0 [ 203.041234][ T5606] ? __pfx_alloc_vmap_area+0x10/0x10 [ 203.041262][ T5606] ? __get_vm_area_node+0x101/0x330 [ 203.041289][ T5606] __get_vm_area_node+0x1ca/0x330 [ 203.041316][ T5606] __vmalloc_node_range_noprof+0x228/0x1630 [ 203.041341][ T5606] ? do_ipt_get_ctl+0x7e0/0xbf0 [ 203.041362][ T5606] ? trace_contention_end+0x126/0x160 [ 203.041384][ T5606] ? __mutex_lock+0x26d/0x1bd0 [ 203.041405][ T5606] ? __lock_acquire+0x49f/0x1a40 [ 203.041426][ T5606] ? do_ipt_get_ctl+0x7e0/0xbf0 [ 203.041446][ T5606] ? __pfx___mutex_lock+0x10/0x10 [ 203.041469][ T5606] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 203.041496][ T5606] ? net_generic+0xea/0x2a0 [ 203.041514][ T5606] ? net_generic+0xea/0x2a0 [ 203.041538][ T5606] ? do_ipt_get_ctl+0x7e0/0xbf0 [ 203.041556][ T5606] __vmalloc_node_noprof+0xad/0xf0 [ 203.041580][ T5606] ? do_ipt_get_ctl+0x7e0/0xbf0 [ 203.041602][ T5606] do_ipt_get_ctl+0x7e0/0xbf0 [ 203.041623][ T5606] ? __mutex_unlock_slowpath+0x35d/0x930 [ 203.041644][ T5606] ? __pfx_do_ipt_get_ctl+0x10/0x10 [ 203.041668][ T5606] ? __lock_acquire+0x49f/0x1a40 [ 203.041687][ T5606] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 203.041716][ T5606] ? nf_sockopt_find.isra.0+0x222/0x290 [ 203.041739][ T5606] nf_getsockopt+0x7c/0xe0 [ 203.041759][ T5606] ip_getsockopt+0x192/0x1e0 [ 203.041782][ T5606] ? __pfx_ip_getsockopt+0x10/0x10 [ 203.041807][ T5606] ? _copy_from_user+0x59/0xd0 [ 203.041831][ T5606] ? copy_from_sockptr_offset.constprop.0+0xe2/0x150 [ 203.041861][ T5606] tcp_getsockopt+0xa1/0x110 [ 203.041886][ T5606] ? __pfx_sock_common_getsockopt+0x10/0x10 [ 203.041913][ T5606] do_sock_getsockopt+0x50a/0x6e0 [ 203.041937][ T5606] ? trace_kmem_cache_alloc+0xdd/0x100 [ 203.041963][ T5606] ? __pfx_do_sock_getsockopt+0x10/0x10 [ 203.041988][ T5606] ? errseq_sample+0x51/0x70 [ 203.042030][ T5606] __sys_getsockopt+0x148/0x260 [ 203.042050][ T5606] ? xfd_validate_state+0x129/0x190 [ 203.042078][ T5606] ? __x64_sys_getsockopt+0xbd/0x160 [ 203.042096][ T5606] __x64_sys_getsockopt+0xbd/0x160 [ 203.042115][ T5606] ? do_syscall_64+0x90/0x870 [ 203.042133][ T5606] ? lockdep_hardirqs_on+0x78/0x100 [ 203.042151][ T5606] do_syscall_64+0x115/0x870 [ 203.042167][ T5606] ? clear_bhb_loop+0x40/0x90 [ 203.042187][ T5606] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 203.042205][ T5606] RIP: 0033:0x7f163d99f66a [ 203.042220][ T5606] Code: 48 83 ec 10 89 d2 48 63 ff 45 31 c9 6a 2a 45 31 c0 31 c9 e8 d8 99 fb ff 48 83 c4 18 c3 0f 1f 00 49 89 ca b8 37 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 06 c3 0f 1f 44 00 00 48 c7 c2 e8 ff ff ff f7 [ 203.042236][ T5606] RSP: 002b:00007ffe336f8068 EFLAGS: 00000202 ORIG_RAX: 0000000000000037 [ 203.042252][ T5606] RAX: ffffffffffffffda RBX: 00007ffe336f80f0 RCX: 00007f163d99f66a [ 203.042263][ T5606] RDX: 0000000000000041 RSI: 0000000000000000 RDI: 0000000000000003 [ 203.042272][ T5606] RBP: 0000000000000003 R08: 00007ffe336f808c R09: 0000000000000000 [ 203.042282][ T5606] R10: 00007ffe336f80f0 R11: 0000000000000202 R12: 00007f163dbef400 [ 203.042292][ T5606] R13: 00007ffe336f808c R14: 0000000000000000 R15: 00007f163dbf0180 [ 203.042315][ T5606] [ 203.873131][ T6883] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 204.173811][ T6883] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 204.239529][ T5611] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 204.253704][ T5611] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 204.263365][ T5611] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 204.276629][ T5611] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 204.285587][ T5611] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 204.400486][ T6883] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 204.616759][ T6883] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 205.073842][ T8420] A link change request failed with some changes committed already. Interface wlan0 may have been left with an inconsistent configuration, please check. [ 205.355848][ T29] audit: type=1400 audit(1785196374.028:631): avc: denied { read } for pid=5272 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=1 [ 205.442816][ T29] audit: type=1400 audit(1785196374.108:632): avc: denied { read write } for pid=8431 comm="syz.0.863" name="loop-control" dev="devtmpfs" ino=646 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 205.524469][ T29] audit: type=1400 audit(1785196374.108:633): avc: denied { open } for pid=8431 comm="syz.0.863" path="/dev/loop-control" dev="devtmpfs" ino=646 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 205.613009][ T29] audit: type=1400 audit(1785196374.158:634): avc: denied { ioctl } for pid=8431 comm="syz.0.863" path="/dev/loop-control" dev="devtmpfs" ino=646 ioctlcmd=0x943c scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 205.667198][ T8438] netlink: 12 bytes leftover after parsing attributes in process `syz.0.866'. [ 205.695518][ T6883] bridge_slave_1: left allmulticast mode [ 205.717417][ T6883] bridge_slave_1: left promiscuous mode [ 205.747767][ T6883] bridge0: port 2(bridge_slave_1) entered disabled state [ 205.802570][ T6883] bridge_slave_0: left allmulticast mode [ 205.825388][ T6883] bridge_slave_0: left promiscuous mode [ 205.849901][ T6883] bridge0: port 1(bridge_slave_0) entered disabled state [ 205.986069][ T8453] netlink: 20 bytes leftover after parsing attributes in process `syz.4.870'. [ 206.104750][ T29] audit: type=1400 audit(1785196374.768:635): avc: denied { write } for pid=8436 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 206.288377][ T8464] picdev_write: 7 callbacks suppressed [ 206.288395][ T8464] kvm: pic: non byte write [ 206.307374][ T29] audit: type=1400 audit(1785196374.968:636): avc: denied { write } for pid=8465 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 206.335498][ T8464] kvm: pic: non byte write [ 206.353760][ T8464] kvm: pic: non byte write [ 206.358720][ T8464] kvm: pic: non byte write [ 206.369090][ T5620] Bluetooth: hci0: command tx timeout [ 206.375132][ T8464] kvm: pic: non byte write [ 206.391950][ T8464] kvm: pic: non byte write [ 206.408651][ T8464] kvm: pic: non byte write [ 206.420774][ T8464] kvm: pic: non byte write [ 206.428832][ T8464] kvm: pic: non byte write [ 206.433825][ T8464] kvm: pic: non byte write [ 206.434967][ T8470] Bluetooth: MGMT ver 1.23 [ 206.534920][ T6883] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 206.560851][ T6883] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 206.582672][ T6883] bond0 (unregistering): Released all slaves [ 206.641717][ T5272] 8021q: adding VLAN 0 to HW filter on device eth1 [ 207.812691][ T29] audit: type=1400 audit(1785196632.477:637): avc: denied { write } for pid=8478 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 208.354749][ T29] audit: type=1400 audit(1785196633.017:638): avc: denied { write } for pid=8506 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 208.447613][ T5620] Bluetooth: hci0: command tx timeout [ 208.605066][ T5272] 8021q: adding VLAN 0 to HW filter on device eth2 [ 208.640863][ T8404] bridge0: port 1(bridge_slave_0) entered blocking state [ 208.653360][ T8404] bridge0: port 1(bridge_slave_0) entered disabled state [ 208.668135][ T8404] bridge_slave_0: entered allmulticast mode [ 208.676258][ T8404] bridge_slave_0: entered promiscuous mode [ 208.710185][ T6883] hsr_slave_0: left promiscuous mode [ 208.716324][ T6883] hsr_slave_1: left promiscuous mode [ 208.723275][ T6883] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 208.730747][ T6883] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 208.739787][ T6883] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 208.747238][ T6883] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 208.792190][ T6883] veth1_macvtap: left promiscuous mode [ 208.799737][ T6883] veth0_macvtap: left promiscuous mode [ 208.805662][ T6883] veth1_vlan: left promiscuous mode [ 208.811318][ T6883] veth0_vlan: left promiscuous mode [ 210.527461][ T5620] Bluetooth: hci0: command tx timeout [ 210.594194][ T6883] team0 (unregistering): Port device team_slave_1 removed [ 210.613601][ T6883] team0 (unregistering): Port device team_slave_0 removed [ 211.158488][ T8404] bridge0: port 2(bridge_slave_1) entered blocking state [ 211.165907][ T8404] bridge0: port 2(bridge_slave_1) entered disabled state [ 211.183977][ T8404] bridge_slave_1: entered allmulticast mode [ 211.193016][ T8404] bridge_slave_1: entered promiscuous mode [ 211.290085][ T8404] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 211.344331][ T8404] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 211.450290][ T8404] team0: Port device team_slave_0 added [ 211.459166][ T8404] team0: Port device team_slave_1 added [ 211.529984][ T8404] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 211.689208][ T8404] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 211.726379][ T8404] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 211.754149][ T8404] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 211.783313][ T8404] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 212.151201][ T8404] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 212.275147][ T8404] hsr_slave_0: entered promiscuous mode [ 212.307182][ T8404] hsr_slave_1: entered promiscuous mode [ 212.325338][ T8404] debugfs: 'hsr0' already exists in 'hsr' [ 212.346506][ T8404] Cannot create hsr debugfs directory [ 212.564060][ T29] audit: type=1400 audit(1785196637.227:639): avc: denied { write } for pid=8554 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 212.609969][ T5620] Bluetooth: hci0: command tx timeout [ 213.197715][ T29] audit: type=1400 audit(1785196637.867:640): avc: denied { write } for pid=8586 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 213.374493][ T5272] 8021q: adding VLAN 0 to HW filter on device eth3 [ 213.574049][ T8598] input: syz0 as /devices/virtual/input/input15 [ 214.435066][ T29] audit: type=1400 audit(1785196639.097:641): avc: denied { write } for pid=8606 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 214.489295][ T8629] binder: 8627:8629 ioctl 4018620d 0 returned -22 [ 214.532106][ T29] audit: type=1400 audit(1785196639.197:642): avc: denied { write } for pid=8632 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 215.501675][ T29] audit: type=1400 audit(1785196640.157:643): avc: denied { append } for pid=8652 comm="syz.3.913" name="ifname" dev="configfs" ino=33021 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=file permissive=1 [ 215.589544][ T29] audit: type=1800 audit(1785196640.217:644): pid=8655 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.3.913" name="ifname" dev="configfs" ino=33021 res=0 errno=0 [ 215.848242][ T8404] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 215.888181][ T8404] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 215.910202][ T29] audit: type=1400 audit(1785196640.497:645): avc: denied { write } for pid=8642 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 215.921534][ T8404] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 215.978939][ T8404] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 216.478212][ T8404] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 216.520131][ T8404] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 216.529457][ T8404] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 216.544195][ T8404] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 216.566050][ T29] audit: type=1400 audit(1785196897.230:646): avc: denied { write } for pid=8672 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 216.835542][ T8404] 8021q: adding VLAN 0 to HW filter on device bond0 [ 216.914508][ T8404] 8021q: adding VLAN 0 to HW filter on device team0 [ 216.932442][ T6221] bridge0: port 1(bridge_slave_0) entered blocking state [ 216.939628][ T6221] bridge0: port 1(bridge_slave_0) entered forwarding state [ 217.103901][ T6221] bridge0: port 2(bridge_slave_1) entered blocking state [ 217.111147][ T6221] bridge0: port 2(bridge_slave_1) entered forwarding state [ 217.276959][ T8705] input: syz0 as /devices/virtual/input/input16 [ 217.913688][ T29] audit: type=1400 audit(1785196898.580:647): avc: denied { write } for pid=8681 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 218.029207][ T29] audit: type=1400 audit(1785196898.700:648): avc: denied { write } for pid=8723 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 218.839856][ T29] audit: type=1400 audit(1785196899.510:649): avc: denied { write } for pid=8729 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 219.350192][ T29] audit: type=1400 audit(1785196900.020:650): avc: denied { write } for pid=8756 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 219.472418][ T8404] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 219.538572][ T8404] veth0_vlan: entered promiscuous mode [ 219.553017][ T8404] veth1_vlan: entered promiscuous mode [ 220.177069][ T8404] veth0_macvtap: entered promiscuous mode [ 220.200723][ T8404] veth1_macvtap: entered promiscuous mode [ 220.227266][ T8404] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 220.262968][ T8404] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 220.350975][ T6221] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 220.806365][ T6221] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 220.817257][ T6221] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 220.833056][ T6221] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 221.112122][ T6221] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 221.144381][ T6221] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 221.166601][ T29] audit: type=1400 audit(1785197157.829:651): avc: denied { write } for pid=8764 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 221.202739][ T8791] bridge_slave_0: left allmulticast mode [ 221.226480][ T8791] bridge0: port 1(bridge_slave_0) entered disabled state [ 221.304812][ T6221] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 221.323895][ T29] audit: type=1400 audit(1785197157.989:652): avc: denied { write } for pid=8793 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 221.326919][ T6221] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 221.600577][ T29] audit: type=1400 audit(1785197158.269:653): avc: denied { mounton } for pid=8404 comm="syz-executor" path="/root/syzkaller.IjOXK4/syz-tmp" dev="sda1" ino=2048 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_home_t tclass=dir permissive=1 [ 221.687829][ T29] audit: type=1400 audit(1785197158.319:654): avc: denied { mounton } for pid=8404 comm="syz-executor" path="/root/syzkaller.IjOXK4/syz-tmp/newroot/sys/kernel/debug" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=dir permissive=1 [ 221.792731][ T29] audit: type=1400 audit(1785197158.319:655): avc: denied { mounton } for pid=8404 comm="syz-executor" path="/root/syzkaller.IjOXK4/syz-tmp/newroot/proc/sys/fs/binfmt_misc" dev="proc" ino=33929 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysctl_fs_t tclass=dir permissive=1 [ 221.887160][ T29] audit: type=1400 audit(1785197158.329:656): avc: denied { unmount } for pid=8404 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 223.736214][ T29] kauditd_printk_skb: 1 callbacks suppressed [ 223.736230][ T29] audit: type=1400 audit(1785197160.399:658): avc: denied { write } for pid=8803 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 224.544222][ T29] audit: type=1400 audit(1785197161.209:659): avc: denied { write } for pid=8845 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 225.164275][ T8863] netlink: 12 bytes leftover after parsing attributes in process `syz.0.952'. [ 225.168371][ T8864] ecryptfs_validate_options: You must supply at least one valid auth tok signature as a mount parameter; see the eCryptfs README [ 225.187251][ T8864] Error validating options; rc = [-22] [ 225.747591][ T29] audit: type=1400 audit(1785197417.865:660): avc: denied { getopt } for pid=8862 comm="syz.1.953" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 226.826657][ T29] audit: type=1400 audit(1785197419.445:661): avc: denied { write } for pid=8897 comm="syz.2.963" name="inject" dev="tracefs" ino=19680823 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=file permissive=1 [ 227.655312][ T8920] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 233.380376][ T9014] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 235.406054][ T9045] binder: 9044:9045 ioctl c0306201 200000000080 returned -14 [ 235.554180][ T9045] binder: 9044:9045 ioctl c0306201 2000000003c0 returned -14 [ 243.342294][ T9160] ecryptfs_validate_options: You must supply at least one valid auth tok signature as a mount parameter; see the eCryptfs README [ 243.357260][ T9160] Error validating options; rc = [-22] [ 244.408377][ T29] audit: type=1400 audit(1785198205.070:662): avc: denied { write } for pid=9169 comm="syz.1.1044" name="header" dev="configfs" ino=13585 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 244.431504][ T29] audit: type=1400 audit(1785198205.070:663): avc: denied { write } for pid=9169 comm="syz.1.1044" name="ss" dev="configfs" ino=13597 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 245.049447][ T29] audit: type=1400 audit(1785198205.070:664): avc: denied { write } for pid=9169 comm="syz.1.1044" name="ss" dev="configfs" ino=13597 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 245.074273][ T29] audit: type=1400 audit(1785198205.080:665): avc: denied { write } for pid=9169 comm="syz.1.1044" name="h" dev="configfs" ino=12893 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 249.496741][ T29] audit: type=1400 audit(1785198210.160:666): avc: denied { write } for pid=9229 comm="syz.1.1061" name="c.1" dev="configfs" ino=22963 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 249.510368][ T9231] configfs-gadget.g1 gadget.32: uvc: uvc_function_unbind() [ 249.526554][ T29] audit: type=1400 audit(1785198210.170:667): avc: denied { write } for pid=9229 comm="syz.1.1061" name="c.1" dev="configfs" ino=22963 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 249.526594][ T29] audit: type=1800 audit(1785198210.170:668): pid=9231 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.1.1061" name="UDC" dev="configfs" ino=37001 res=0 errno=0 [ 250.208493][ T1314] ieee802154 phy0 wpan0: encryption failed: -22 [ 250.215602][ T1314] ieee802154 phy1 wpan1: encryption failed: -22 [ 252.839789][ T9279] configfs-gadget.g1 gadget.0: uvc: uvc_function_bind() [ 252.847069][ T9279] configfs-gadget.g1 gadget.0: uvc: Unable to allocate streaming EP [ 252.855907][ T9279] ================================================================== [ 252.863974][ T9279] BUG: KASAN: slab-out-of-bounds in dummy_free_request+0x8a/0x90 [ 252.869716][ T29] audit: type=1400 audit(1785198213.500:669): avc: denied { write } for pid=9278 comm="syz.4.1075" name="c.1" dev="configfs" ino=22963 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 252.871703][ T9279] Read of size 8 at addr ffff888029a4dbf0 by task syz.4.1075/9279 [ 252.871722][ T9279] [ 252.871733][ T9279] CPU: 0 UID: 0 PID: 9279 Comm: syz.4.1075 Not tainted syzkaller #0 PREEMPT(full) [ 252.871753][ T9279] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 252.871763][ T9279] Call Trace: [ 252.871769][ T9279] [ 252.871776][ T9279] dump_stack_lvl+0x100/0x190 [ 252.871799][ T9279] print_report+0x13d/0x4b0 [ 252.871821][ T9279] ? __virt_addr_valid+0x239/0x430 [ 252.871845][ T9279] ? dummy_free_request+0x8a/0x90 [ 252.871867][ T9279] kasan_report+0xdf/0x1c0 [ 252.871888][ T9279] ? dummy_free_request+0x8a/0x90 [ 252.871911][ T9279] dummy_free_request+0x8a/0x90 [ 252.871933][ T9279] uvc_function_bind+0x181a/0x1939 [ 252.871953][ T9279] ? __pfx_uvc_function_bind+0x10/0x10 [ 252.871972][ T9279] usb_add_function+0x219/0x890 [ 252.871994][ T9279] configfs_composite_bind+0xd83/0x1960 [ 252.872017][ T9279] ? kernfs_create_link+0x1bd/0x240 [ 252.872040][ T9279] gadget_bind_driver+0x28c/0xbf0 [ 252.872064][ T9279] ? __pfx_dummy_udc_set_speed+0x10/0x10 [ 252.872085][ T9279] ? __pfx_gadget_bind_driver+0x10/0x10 [ 252.872109][ T9279] really_probe+0x241/0xa60 [ 252.872129][ T9279] __driver_probe_device+0x20e/0x450 [ 252.872149][ T9279] driver_probe_device+0x4a/0x140 [ 252.872168][ T9279] __driver_attach+0x21f/0x5b0 [ 252.872187][ T9279] ? __pfx___driver_attach+0x10/0x10 [ 252.872210][ T9279] bus_for_each_dev+0x13e/0x1d0 [ 252.872225][ T9279] ? __pfx_bus_for_each_dev+0x10/0x10 [ 252.872248][ T9279] ? bus_add_driver+0x2b5/0x5b0 [ 252.872267][ T9279] bus_add_driver+0x305/0x5b0 [ 252.872283][ T9279] driver_register+0x1e2/0x360 [ 252.872304][ T9279] usb_gadget_register_driver_owner+0x132/0x210 [ 252.872330][ T9279] gadget_dev_desc_UDC_store+0x1b0/0x2e0 [ 252.872352][ T9279] configfs_write_iter+0x302/0x4e0 [ 252.872371][ T9279] vfs_write+0x6ac/0x1050 [ 252.872395][ T9279] ? __pfx_configfs_write_iter+0x10/0x10 [ 252.872413][ T9279] ? __pfx_vfs_write+0x10/0x10 [ 252.872441][ T9279] ksys_write+0x12a/0x250 [ 252.872463][ T9279] ? __pfx_ksys_write+0x10/0x10 [ 252.872488][ T9279] do_syscall_64+0x115/0x870 [ 252.872507][ T9279] ? clear_bhb_loop+0x40/0x90 [ 252.872524][ T9279] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 252.872541][ T9279] RIP: 0033:0x7fbbf619de99 [ 252.872556][ T9279] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 252.872571][ T9279] RSP: 002b:00007fbbf6faa028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 252.872587][ T9279] RAX: ffffffffffffffda RBX: 00007fbbf6425fa0 RCX: 00007fbbf619de99 [ 252.872598][ T9279] RDX: 000000000000000b RSI: 0000200000000280 RDI: 0000000000000003 [ 252.872608][ T9279] RBP: 00007fbbf6233eaf R08: 0000000000000000 R09: 0000000000000000 [ 252.872617][ T9279] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 252.872627][ T9279] R13: 00007fbbf6426038 R14: 00007fbbf6425fa0 R15: 00007ffc4703eea8 [ 252.872642][ T9279] [ 252.872648][ T9279] [ 252.895367][ T29] audit: type=1400 audit(1785198213.500:670): avc: denied { write } for pid=9278 comm="syz.4.1075" name="c.1" dev="configfs" ino=22963 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 252.901719][ T9279] Allocated by task 8404: [ 252.901732][ T9279] kasan_save_stack+0x30/0x50 [ 252.901756][ T9279] kasan_save_track+0x14/0x30 [ 252.901774][ T9279] __kasan_kmalloc+0xaa/0xb0 [ 252.904145][ T29] audit: type=1800 audit(1785198213.500:671): pid=9279 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.4.1075" name="UDC" dev="configfs" ino=37181 res=0 errno=0 [ 252.913505][ T9279] __kmalloc_cache_noprof+0x2e5/0x6c0 [ 252.913533][ T9279] __hw_addr_create+0x57/0x220 [ 253.258693][ T9279] __hw_addr_add_ex+0x32b/0x650 [ 253.263539][ T9279] dev_mc_add+0xb6/0x110 [ 253.267759][ T9279] igmp_group_added+0x83a/0x9a0 [ 253.272601][ T9279] ____ip_mc_inc_group+0x7e3/0x10d0 [ 253.277780][ T9279] ip_mc_up+0x154/0x390 [ 253.281907][ T9279] inetdev_event+0x6c3/0x17f0 [ 253.286559][ T9279] notifier_call_chain+0x99/0x3f0 [ 253.291562][ T9279] call_netdevice_notifiers_info+0xbe/0x110 [ 253.297433][ T9279] netif_open+0x142/0x160 [ 253.301748][ T9279] dev_open+0xb2/0x260 [ 253.305799][ T9279] team_add_slave+0x5f7/0x1ea0 [ 253.310535][ T9279] do_set_master+0x40f/0x730 [ 253.315100][ T9279] do_setlink.isra.0+0xb2b/0x3e60 [ 253.320107][ T9279] rtnl_newlink+0x11c2/0x2380 [ 253.324759][ T9279] rtnetlink_rcv_msg+0x95e/0xe90 [ 253.329684][ T9279] netlink_rcv_skb+0x159/0x420 [ 253.334429][ T9279] netlink_unicast+0x585/0x850 [ 253.339173][ T9279] netlink_sendmsg+0x8b0/0xda0 [ 253.343907][ T9279] __sys_sendto+0x48b/0x4e0 [ 253.348383][ T9279] __x64_sys_sendto+0xe0/0x1c0 [ 253.353129][ T9279] do_syscall_64+0x115/0x870 [ 253.357692][ T9279] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 253.363561][ T9279] [ 253.365869][ T9279] The buggy address belongs to the object at ffff888029a4db00 [ 253.365869][ T9279] which belongs to the cache kmalloc-128 of size 128 [ 253.379896][ T9279] The buggy address is located 136 bytes to the right of [ 253.379896][ T9279] allocated 104-byte region [ffff888029a4db00, ffff888029a4db68) [ 253.394544][ T9279] [ 253.396856][ T9279] The buggy address belongs to the physical page: [ 253.403237][ T9279] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x29a4d [ 253.411977][ T9279] flags: 0xfff00000000000(node=0|zone=1|lastcpupid=0x7ff) [ 253.419059][ T9279] page_type: f5(slab) [ 253.423029][ T9279] raw: 00fff00000000000 ffff88813fe23a00 dead000000000100 dead000000000122 [ 253.431590][ T9279] raw: 0000000000000000 0000000800100010 00000000f5000000 0000000000000000 [ 253.440150][ T9279] page dumped because: kasan: bad access detected [ 253.446540][ T9279] page_owner tracks the page as allocated [ 253.452223][ T9279] page last allocated via order 0, migratetype Unmovable, gfp_mask 0xd2cc0(GFP_KERNEL|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 2, tgid 2 (kthreadd), ts 5130224656, free_ts 5130146545 [ 253.471910][ T9279] post_alloc_hook+0xfd/0x120 [ 253.476572][ T9279] get_page_from_freelist+0xf48/0x3530 [ 253.482011][ T9279] __alloc_frozen_pages_noprof+0x299/0x2dc0 [ 253.487888][ T9279] new_slab+0xa2/0x640 [ 253.491965][ T9279] refill_objects+0xe3/0x410 [ 253.496534][ T9279] __pcs_replace_empty_main+0x376/0x680 [ 253.502069][ T9279] __kmalloc_noprof+0x66d/0x820 [ 253.507169][ T9279] lsm_blob_alloc+0x68/0x90 [ 253.511669][ T9279] security_task_alloc+0x2a/0x260 [ 253.516668][ T9279] copy_process+0x2b94/0x8030 [ 253.521325][ T9279] kernel_clone+0x176/0x9d0 [ 253.525804][ T9279] kernel_thread+0xdb/0x120 [ 253.530293][ T9279] kthreadd+0x498/0x7a0 [ 253.534419][ T9279] ret_from_fork+0x72b/0xd50 [ 253.538997][ T9279] ret_from_fork_asm+0x1a/0x30 [ 253.543744][ T9279] page last free pid 2 tgid 2 stack trace: [ 253.549518][ T9279] __free_frozen_pages+0x79f/0x1090 [ 253.554694][ T9279] __kasan_populate_vmalloc+0x1ea/0x210 [ 253.560209][ T9279] alloc_vmap_area+0x95d/0x2bb0 [ 253.565035][ T9279] __get_vm_area_node+0x1ca/0x330 [ 253.570037][ T9279] __vmalloc_node_range_noprof+0x228/0x1630 [ 253.575922][ T9279] __vmalloc_node_noprof+0xad/0xf0 [ 253.581025][ T9279] copy_process+0x7fb/0x8030 [ 253.585615][ T9279] kernel_clone+0x176/0x9d0 [ 253.590105][ T9279] kernel_thread+0xdb/0x120 [ 253.594608][ T9279] kthreadd+0x498/0x7a0 [ 253.598761][ T9279] ret_from_fork+0x72b/0xd50 [ 253.603331][ T9279] ret_from_fork_asm+0x1a/0x30 [ 253.608092][ T9279] [ 253.610400][ T9279] Memory state around the buggy address: [ 253.615999][ T9279] ffff888029a4da80: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 253.624041][ T9279] ffff888029a4db00: 00 00 00 00 00 00 00 00 00 00 00 00 00 fc fc fc [ 253.632091][ T9279] >ffff888029a4db80: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 253.640129][ T9279] ^ [ 253.647822][ T9279] ffff888029a4dc00: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 253.655870][ T9279] ffff888029a4dc80: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 253.663925][ T9279] ================================================================== [ 253.714432][ T9279] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 253.721671][ T9279] CPU: 0 UID: 0 PID: 9279 Comm: syz.4.1075 Not tainted syzkaller #0 PREEMPT(full) [ 253.730953][ T9279] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 253.741000][ T9279] Call Trace: [ 253.744272][ T9279] [ 253.747194][ T9279] dump_stack_lvl+0x100/0x190 [ 253.751868][ T9279] vpanic+0x552/0x970 [ 253.755847][ T9279] ? __pfx_vpanic+0x10/0x10 [ 253.760343][ T9279] ? mark_held_locks+0x40/0x70 [ 253.765108][ T9279] ? dummy_free_request+0x8a/0x90 [ 253.770134][ T9279] panic+0xd1/0xe0 [ 253.773869][ T9279] ? __pfx_panic+0x10/0x10 [ 253.778278][ T9279] ? dummy_free_request+0x8a/0x90 [ 253.783298][ T9279] ? preempt_schedule_common+0x42/0xc0 [ 253.788753][ T9279] check_panic_on_warn.cold+0x19/0x34 [ 253.794119][ T9279] end_report.part.0+0x3a/0x90 [ 253.798881][ T9279] kasan_report.cold+0xe/0x18 [ 253.803562][ T9279] ? dummy_free_request+0x8a/0x90 [ 253.808586][ T9279] dummy_free_request+0x8a/0x90 [ 253.813432][ T9279] uvc_function_bind+0x181a/0x1939 [ 253.818537][ T9279] ? __pfx_uvc_function_bind+0x10/0x10 [ 253.823987][ T9279] usb_add_function+0x219/0x890 [ 253.828836][ T9279] configfs_composite_bind+0xd83/0x1960 [ 253.834378][ T9279] ? kernfs_create_link+0x1bd/0x240 [ 253.839577][ T9279] gadget_bind_driver+0x28c/0xbf0 [ 253.844614][ T9279] ? __pfx_dummy_udc_set_speed+0x10/0x10 [ 253.850244][ T9279] ? __pfx_gadget_bind_driver+0x10/0x10 [ 253.855802][ T9279] really_probe+0x241/0xa60 [ 253.860303][ T9279] __driver_probe_device+0x20e/0x450 [ 253.865593][ T9279] driver_probe_device+0x4a/0x140 [ 253.870618][ T9279] __driver_attach+0x21f/0x5b0 [ 253.875375][ T9279] ? __pfx___driver_attach+0x10/0x10 [ 253.880650][ T9279] bus_for_each_dev+0x13e/0x1d0 [ 253.885493][ T9279] ? __pfx_bus_for_each_dev+0x10/0x10 [ 253.890870][ T9279] ? bus_add_driver+0x2b5/0x5b0 [ 253.895714][ T9279] bus_add_driver+0x305/0x5b0 [ 253.900375][ T9279] driver_register+0x1e2/0x360 [ 253.905210][ T9279] usb_gadget_register_driver_owner+0x132/0x210 [ 253.911440][ T9279] gadget_dev_desc_UDC_store+0x1b0/0x2e0 [ 253.917055][ T9279] configfs_write_iter+0x302/0x4e0 [ 253.922149][ T9279] vfs_write+0x6ac/0x1050 [ 253.926466][ T9279] ? __pfx_configfs_write_iter+0x10/0x10 [ 253.932081][ T9279] ? __pfx_vfs_write+0x10/0x10 [ 253.936847][ T9279] ksys_write+0x12a/0x250 [ 253.941170][ T9279] ? __pfx_ksys_write+0x10/0x10 [ 253.946009][ T9279] do_syscall_64+0x115/0x870 [ 253.950580][ T9279] ? clear_bhb_loop+0x40/0x90 [ 253.955237][ T9279] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 253.961110][ T9279] RIP: 0033:0x7fbbf619de99 [ 253.965503][ T9279] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 253.985097][ T9279] RSP: 002b:00007fbbf6faa028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 253.993499][ T9279] RAX: ffffffffffffffda RBX: 00007fbbf6425fa0 RCX: 00007fbbf619de99 [ 254.001450][ T9279] RDX: 000000000000000b RSI: 0000200000000280 RDI: 0000000000000003 [ 254.009403][ T9279] RBP: 00007fbbf6233eaf R08: 0000000000000000 R09: 0000000000000000 [ 254.017354][ T9279] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 254.025316][ T9279] R13: 00007fbbf6426038 R14: 00007fbbf6425fa0 R15: 00007ffc4703eea8 [ 254.033286][ T9279] [ 254.036534][ T9279] Kernel Offset: disabled [ 254.040845][ T9279] Rebooting in 86400 seconds..