last executing test programs: 1m11.740727736s ago: executing program 1 (id=457): setrlimit(0x40000000000008, &(0x7f0000000280)) r0 = openat$ttynull(0xffffffffffffff9c, &(0x7f0000000000), 0x82084, 0x0) r1 = openat$ttyS3(0xffffffffffffff9c, &(0x7f00000000c0), 0x1, 0x0) ioctl$TCSETSF2(r1, 0x402c542d, &(0x7f0000000100)={0x60, 0x4, 0xffffff69, 0x5, 0xb, "4cb7e4adf3e77187f7ee7a5397e4e83ae8ead1", 0xde52, 0x8}) openat$fault_inject(0xffffffffffffff9c, 0x0, 0x1, 0x0) ioctl$TIOCGETD(0xffffffffffffffff, 0x5424, 0x0) ioctl$TCSETSF2(r0, 0x402c542d, &(0x7f0000000040)={0xfffffffe, 0x4, 0xf3, 0x71, 0x7, "ff0700000000000002000000000000000600", 0x4000003, 0x8000400}) ioctl$TIOCSTI(r0, 0x5412, 0x0) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x2) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000180)=[@text64={0x40, 0x0}], 0x1, 0x49627e0e9a2bded4, 0x0, 0x0) syz_kvm_setup_cpu$x86(r3, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f00000001c0)=[@text64={0x40, 0x0}], 0x1, 0x18, 0x0, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x15) syz_open_procfs(0x0, &(0x7f0000000080)='fd/3\x00') r5 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0) read$FUSE(r5, &(0x7f00000002c0)={0x2020}, 0x2020) mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0x1000007, 0x2172, 0xffffffffffffffff, 0x0) 1m11.522886568s ago: executing program 1 (id=458): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000500), 0x0, 0x0) ioctl$TCSBRK(r1, 0x5409, 0xfd) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r3, 0x6, 0x5, &(0x7f0000000340)=0x100000001, 0x4) connect$inet6(r3, &(0x7f0000000380)={0xa, 0x4e22, 0x2, @loopback, 0x5}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r3, 0x6, 0x1f, &(0x7f00000003c0), 0x3c) setsockopt$inet6_tcp_TLS_TX(r3, 0x11a, 0x1, &(0x7f0000000400)=@gcm_256={{0x304}, '\x00', "e8582491a0c4050000000000f6542a9b6800000000000000003967d2daa45b4e", "61241765", "9b1f80001b00"}, 0x38) sendmsg$inet(r3, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000500)=ANY=[], 0x110}, 0x8080) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$tipc(&(0x7f0000002d00), 0xffffffffffffffff) sendmsg$TIPC_CMD_GET_LINKS(r4, &(0x7f0000002dc0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000002d40)={0x24, r5, 0x1, 0x70bd2a, 0x25dfdbfc, {{}, {}, {0x8, 0x11, 0x7fffffff}}}, 0x24}, 0x1, 0x0, 0x0, 0x5005}, 0x4) sendmsg$TIPC_CMD_GET_MEDIA_NAMES(r2, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x1c, r5, 0x200, 0x70bd27, 0x25dfdbfd}, 0x1c}, 0x1, 0x0, 0x0, 0x2404000c}, 0x0) ioctl$sock_inet6_SIOCADDRT(r0, 0x890b, 0x0) r6 = fsopen(&(0x7f0000000100)='bpf\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r6, 0x6, 0x0, 0x0, 0x0) r7 = fsmount(r6, 0x1, 0x75) r8 = openat$udambuf(0xffffffffffffff9c, &(0x7f0000000240), 0x2) r9 = memfd_create(&(0x7f0000000280)='y\x105\xfb\xf7u\x83%:r\xc2\xb9x\xa4q\xc1\xea_\x8cZ7\xcda\x9b\x11X\x0e\xa1\xcf\x1a\x98S7\xc9\x00'/47, 0x2) ftruncate(r9, 0xffff) fcntl$addseals(r9, 0x409, 0x7) r10 = ioctl$UDMABUF_CREATE(r8, 0x40187542, &(0x7f00000002c0)={r9, 0x0, 0x4000, 0x8000}) ioctl$DMA_BUF_IOCTL_SYNC(r10, 0x40086203, &(0x7f0000000300)=0x2) r11 = gettid() r12 = openat$tun(0xffffffffffffff9c, &(0x7f0000000180), 0x48241, 0x0) fcntl$lock(r12, 0x24, &(0x7f0000000200)={0x0, 0x0, 0x10001, 0xffff, r11}) symlinkat(&(0x7f00000004c0)='./file0/../file0/file0\x00', r7, &(0x7f0000000480)='./file0/../file0/file0/file0\x00') unlinkat(r7, &(0x7f00000001c0)='./file0/../file0/file0\x00', 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) 1m10.669173714s ago: executing program 1 (id=464): socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000280)) r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000140)='/sys/power/resume', 0x149a82, 0x0) write$cgroup_int(r0, &(0x7f0000000180)=0x8000000001cb, 0x12) 1m10.652636216s ago: executing program 1 (id=465): mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./dev\x00', 0x1ff) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000480), 0x2, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000500)={'syzkaller1\x00', 0x5001}) (async) r1 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r1, 0x8914, &(0x7f0000000540)={'syzkaller1\x00', 0x1}) (async) write$tun(r0, &(0x7f0000000580)=ANY=[@ANYBLOB="03031b003000320006006300000000443aff00000000000000000000ffffac141419ff02000000000000000000000000000192"], 0xfdef) (async) lsetxattr$security_selinux(&(0x7f0000000240)='./file0\x00', &(0x7f0000000280), &(0x7f00000002c0)='system_u:object_r:setfiles_exec_t:s0\x00', 0x25, 0x1) (async) mount(0x0, &(0x7f00000003c0)='./dev\x00', &(0x7f0000000400)='devtmpfs\x00', 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f00000004c0)='./dev/ram0\x00', 0x101042, 0x15) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2000006, 0x28011, r2, 0x7faec000) mkdirat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x1c0) mount$bpf(0x200000000000, 0x0, 0x0, 0x8b7840, 0x0) (async) mount$bpf(0x0, &(0x7f00000001c0)='./file0\x00', 0x0, 0x84000, 0x0) (async) r3 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_tx_ring(r3, 0x107, 0xd, &(0x7f00000005c0)=@req3={0x10000, 0x100000001, 0x10000, 0x1}, 0x1c) mmap(&(0x7f0000ff0000/0x10000)=nil, 0x10000, 0x7fa962bfffff, 0x13012, r3, 0x0) madvise(&(0x7f0000ff0000/0xe000)=nil, 0xe000, 0x14) (async) socket(0x8, 0x800, 0x81) mkdir(0x0, 0x190) (async) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='freezer.self_freezing\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r4, 0x0) (async) r5 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r5) (async) ptrace$PTRACE_SETSIGMASK(0x420b, r5, 0x8, &(0x7f0000000340)={[0x8]}) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000380), 0xa2f01, 0x0) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f0000000440)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) (async) ioctl$TUNSETOWNER(r6, 0x400454cc, 0xffffffffffffffff) (async) mount$bpf(0x200000000000, &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x2042, 0x0) (async) syz_io_uring_setup(0x100552d, &(0x7f0000000000)={0x0, 0x9f4f, 0x36000, 0x6, 0x359, 0x0, r2}, &(0x7f00000000c0), &(0x7f0000000100), &(0x7f0000000140)) (async) write(r2, &(0x7f0000000740)="aefc", 0x2) 1m10.543435937s ago: executing program 1 (id=466): mkdirat(0xffffffffffffff9c, &(0x7f00000002c0)='./config\x00', 0x1c0) mount(0x0, &(0x7f0000000300)='./config\x00', &(0x7f0000000380)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000003c0)='./config/usb_gadget/g1\x00', 0x1c0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./config/usb_gadget/g1/os_desc/qw_sign\x00', 0x1, 0x0) write(r0, &(0x7f0000000440)="27bd", 0x2) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file0\x00', 0x0) r1 = openat$binfmt_format(0xffffffffffffff9c, &(0x7f0000000200)='/proc/sys/fs/binfmt_misc/syz1\x00', 0x2, 0x0) pwritev(r1, &(0x7f0000000240)=[{&(0x7f0000000280)="2d74115fd9", 0x2}], 0x1, 0x4, 0xa) mount$bind(&(0x7f0000000480)='.\x00', &(0x7f00000004c0)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(0x0, &(0x7f0000000500)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000540)='./file0/../file0\x00', &(0x7f0000001a40)='./file0/file0\x00', 0x0, 0x9a101a, 0x0) mount$bind(0x0, &(0x7f0000001a80)='./file0/file0\x00', 0x0, 0x80000, 0x0) mount$bind(&(0x7f0000000000)='./file0/../file0\x00', &(0x7f0000000080)='./file0/file0\x00', 0x0, 0x28d891, 0x0) mount$bind(&(0x7f0000001d80)='.\x00', &(0x7f0000001dc0)='./file0/file0\x00', 0x0, 0x13850ce, 0x0) umount2(&(0x7f0000001e00)='./file0\x00', 0xb) socketpair(0x25, 0x5, 0x5, &(0x7f0000000040)={0xffffffffffffffff}) recvmsg(r2, &(0x7f0000001580)={&(0x7f00000000c0)=@nfc_llcp, 0x80, &(0x7f00000001c0)=[{&(0x7f0000000140)=""/78, 0x4e}], 0x1, &(0x7f0000000580)=""/4096, 0x1000}, 0x21) 1m10.406196151s ago: executing program 1 (id=468): mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) mount(0x0, 0x0, 0x0, 0x0, 0x0) mount$9p_unix(0x0, 0x0, 0x0, 0x88, &(0x7f0000000100)=ANY=[]) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000140)='clear_refs\x00') write$binfmt_format(r0, &(0x7f0000000180)='1\x00', 0x2) r1 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_int(r1, 0x0, 0x18, 0x0, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000080)={'syztnl2\x00', &(0x7f0000000000)={'syztnl1\x00', 0x0, 0x4, 0x9, 0x39, 0xfffffffb, 0x8, @ipv4={'\x00', '\xff\xff', @multicast2}, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x7800, 0x700, 0x7}}) setsockopt$inet_mreqn(r1, 0x0, 0x24, &(0x7f00000000c0)={@initdev={0xac, 0x1e, 0x0, 0x0}, @private=0xa010101, r2}, 0xc) 1m10.360132316s ago: executing program 32 (id=468): mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) mount(0x0, 0x0, 0x0, 0x0, 0x0) mount$9p_unix(0x0, 0x0, 0x0, 0x88, &(0x7f0000000100)=ANY=[]) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000140)='clear_refs\x00') write$binfmt_format(r0, &(0x7f0000000180)='1\x00', 0x2) r1 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_int(r1, 0x0, 0x18, 0x0, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000080)={'syztnl2\x00', &(0x7f0000000000)={'syztnl1\x00', 0x0, 0x4, 0x9, 0x39, 0xfffffffb, 0x8, @ipv4={'\x00', '\xff\xff', @multicast2}, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x7800, 0x700, 0x7}}) setsockopt$inet_mreqn(r1, 0x0, 0x24, &(0x7f00000000c0)={@initdev={0xac, 0x1e, 0x0, 0x0}, @private=0xa010101, r2}, 0xc) 3.481485897s ago: executing program 0 (id=1441): openat$kvm(0xffffffffffffff9c, &(0x7f0000000680), 0x0, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0xa2f01, 0x0) syz_usb_connect$uac3(0x5, 0xa6, &(0x7f0000000180)=ANY=[@ANYBLOB="120100020000004082052b0040000102030109029400030101e010080b0002010130070904000000010130000a2401013000070000000d24070403050000000c00000006240510066e1324030302030304"], 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'syzkaller1\x00', 0x2}) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup(r1) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f00000000c0)={'syzkaller1\x00', @multicast}) write$tun(r0, &(0x7f0000000100)=ANY=[@ANYBLOB="ffffffffffff007e00300066010145590200006805d6005e000000000000ac40004300"/47], 0x42) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x200, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x21) socket$nl_generic(0x10, 0x3, 0x10) socket$inet(0x2, 0x2, 0x1) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_xfrm(0x10, 0x3, 0x6) socket$inet6_tcp(0xa, 0x1, 0x0) socket$can_bcm(0x1d, 0x2, 0x2) socket(0x10, 0x803, 0x0) mmap$IORING_OFF_SQ_RING(0x0, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x4004000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r6, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000340)=ANY=[], 0x128}, 0x0) recvmsg$unix(r5, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@cred={{0x1c}}, @rights={{0x34, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x10}}, @rights={{0x10}}, @rights={{0x10}}], 0x88}, 0x80) socket$packet(0x11, 0x2, 0x300) pipe2(0x0, 0x0) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000480)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000500)=@any_dev={0x4, 0x3f7, 0x0, 0x0, 0x1000, 0xe, 0x0, 0x0, 0x10}}}, &(0x7f0000000540)=0x0) r10 = socket$inet6_tcp(0xa, 0x1, 0x0) r11 = dup(r10) syz_ublk_setup_queues(r11, r9, &(0x7f0000000580)={0x0, 0xc1, 0x10, 0xfffffffd, 0x7f}, &(0x7f00000006c0)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x3, 0x42, 0x3, 0x91, 0x0, r7}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xc81d, 0x2, 0x1, 0x3aa}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x93ea, 0x2000, 0x4003bfff, 0x2b9, 0x0, r8}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x626d, 0x800, 0x1, 0x26d}}], 0x1, 0x0, 0x0) r12 = dup(r4) setsockopt$packet_int(r12, 0x107, 0xb, 0x0, 0x0) 3.127730204s ago: executing program 4 (id=1448): openat$selinux_attr(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/attr/current\x00', 0x2, 0x0) (async) syz_usb_connect$midi(0x5, 0x24, &(0x7f0000000100)={{0x12, 0x1, 0x110, 0x0, 0x0, 0x0, 0x40, 0x1430, 0x474b, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x1, 0x15, 0x0, 0x0, "", {{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x3, 0x20, 0x4}}}}}]}}, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x2, [{0x4, &(0x7f0000000240)=@lang_id={0x4, 0x3, 0x100c}}, {0xca, &(0x7f0000000280)=@string={0xca, 0x3, "65ba4dcd5d2d682a8a0b0b7e9b338f8f1b611c3499be508b0d0384197589ba37fe51d98622c4f9bd69d03923cedd43834e13b211c2c2f2b548aef2d4953c59867af2459d72c99debd35dd78e59c133f1066469beae6626fe45361b7f5879b744566e36d5920d2c38e1cd70898d6f6823ea044204ec8bee06d7682726dd5af47e402120221417d11c97b119b8e6fcd0e4dc38f147f50116449242bab4b5ffa5c94db74ad0e9e5950c4b12984eb733fae555c786a725353ce706047e3154df09e60b84b5f615eef5dd"}}]}) creat(&(0x7f0000000040)='./file0\x00', 0x17) 2.67171283s ago: executing program 2 (id=1455): r0 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) r1 = fcntl$dupfd(r0, 0x406, r0) sendmsg$NFT_BATCH(r1, &(0x7f00000003c0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000380)={&(0x7f0000000240)=ANY=[@ANYBLOB="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"], 0x128}, 0x1, 0x0, 0x0, 0x44000}, 0x10) r2 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000140)='/sys/power/wake_lock', 0x202, 0xc4) r3 = landlock_create_ruleset(0x0, 0x0, 0x0) r4 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000007c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r4, 0xaf01, 0x0) r5 = eventfd(0x0) ioctl$VHOST_SET_LOG_FD(r4, 0x4004af07, &(0x7f0000000900)=r5) ioctl$VHOST_SET_VRING_KICK(r4, 0x4008af20, &(0x7f0000000940)={0x1, r5}) close(0x3) sendfile(r2, r2, &(0x7f00000001c0)=0xffffffff, 0x5) setsockopt$XDP_TX_RING(r1, 0x11b, 0x3, &(0x7f0000000400)=0x1000, 0x4) clock_gettime(0x1, &(0x7f0000000100)={0x0, 0x0}) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./tracing\x00', 0x1ff) truncate(&(0x7f0000000640)='./file2\x00', 0x80000) r7 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) pselect6(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r7) ptrace$setregs(0xd, r7, 0x0, &(0x7f0000000680)="18607651149d7b10b4024fbbdc08899b8f589df2dbb5d7a8d1b36cfab675cb3976ee8100e2878c9cfa178cac130eb046eda93df39ed4b41924dc225ad4028dd63defb87d698be5c749450b350a789dcfc6b2d6a696b5026d1e52f19274566d1da0f353dd65e330ebf71c5e823f2753c5fd76724828ef31b353e71805205c3dceb44cc4c7b3664e29fb") sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000004c0)=ANY=[@ANYRES64=r4, @ANYRES16=r3, @ANYRESOCT=r6, @ANYBLOB="aa836907ce04831a683e626eb90075a9bed89e2480dc14a0de1a9be7d988086e12d66020d5954b020000000000000000", @ANYRESDEC=r7], 0x28}, 0x1, 0x0, 0x0, 0x800}, 0x4000000) ptrace$getregset(0x4205, r7, 0x2, &(0x7f0000000800)={&(0x7f0000000840)=""/118, 0x76}) ptrace$getregset(0x4204, r7, 0x2, &(0x7f00000008c0)={0x0}) mount(0x0, &(0x7f0000000540)='./tracing\x00', &(0x7f0000000580)='tracefs\x00', 0x0, 0x0) r8 = openat(0xffffffffffffff9c, &(0x7f00000005c0)='./tracing/events/sched/filter\x00', 0x1, 0x0) write(r8, &(0x7f0000000600)='!~', 0x2) r9 = socket$nl_generic(0x10, 0x3, 0x10) keyctl$set_reqkey_keyring(0xe, 0x4) syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), r9) sendmsg$ETHTOOL_MSG_CHANNELS_SET(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000980)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYBLOB="c008c1cf4a5291a51e6055ece2574666b6b941188e30971a8dd5e1907c67dfedcc2f3b35f4a8e4843f88c07fa1a8e3f2cfdff87a5d61458fc7e47e70826669c249a8321db5de0f3ae846edeb981082e2b9c93e121dc861c2e4e9098fbbd97ac31c71a477524c366caa0dc2a7286235ff5b2273c47815bc975a7d65a209f1b47ef2c2e552f06251494e67f0caa698123ed0b891f69df5b482029f9bf94ec5ce52238074a4615d2b59c78a4268e0ca4a51566dce8f51f3ab203421a01ba612d333c4b379c91589be0a82fe38c3de2a8a2b0eb267b71bb4c7bdaa0653f93094d0d3e00818ae6875b3e25a0d7b5477146c2205b7a513a73b", @ANYBLOB="01002bbd707f00000000000800170002000000180001801400020076657468315f8e6972745f776966690082e0d244bcdb49aa41b91dff1384d16c826825b0fa876d3c00344a437fb2e745b7fd9cfeae89c3e05317563b79d37004fe3e63c062cb97710c852d92189769ea739573c0f0a14863b23aa27cec8125c1e1ff06c8527794a87359da584a9dafef58c5cd5053be04f331aa5775bac52cebfa6e7cd82d1c085fd1e00fe093009c730805eb1ab9cf04e137fff9a052000588d706bfec52b61449"], 0x34}, 0x1, 0x0, 0x0, 0x1}, 0x44) 2.661813891s ago: executing program 4 (id=1456): r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000300)=0x1, 0x4) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000400)=0x1, 0x4) connect$inet(r0, &(0x7f0000000480)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x58}}, 0x10) sendto(r0, &(0x7f00000004c0)='A', 0xfffff, 0x40008c1, 0x0, 0x0) recvmmsg(r0, &(0x7f0000000540)=[{{0x0, 0x0, &(0x7f0000000580)=[{&(0x7f00000005c0)=""/4096, 0x11fff}], 0x1}, 0x1}], 0x256, 0x10022, 0x0) (fail_nth: 16) 2.640025933s ago: executing program 4 (id=1457): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc\x00', 0x1fd) mount(0x0, &(0x7f0000000040)='./proc\x00', &(0x7f0000000080)='proc\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./proc/thread-self/fail-nth\x00', 0x2002, 0x0) syz_clone(0x1000000, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x2) ioctl$KVM_SET_MSRS(r3, 0x4008ae89, &(0x7f0000000180)={0x1, 0x0, [{0xc0000100, 0x0, 0xfffffffffffffe00}]}) r4 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$sock_linger(r4, 0x1, 0xd, &(0x7f00000002c0)={0x1, 0x3}, 0x8) setsockopt$inet_tcp_int(r4, 0x6, 0x210000000013, &(0x7f0000000300)=0x100000001, 0x4) connect$inet(r4, &(0x7f0000000340)={0x2, 0x4e1f, @local}, 0x10) setsockopt$inet_tcp_TCP_REPAIR(r4, 0x6, 0x13, &(0x7f0000000380)=0xffffffffffffffff, 0x4) close(r4) syz_clone(0x82020000, 0x0, 0x0, 0x0, 0x0, 0x0) r5 = openat$dm_control(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) ioctl$DM_DEV_CREATE(r5, 0xc138fd03, &(0x7f00000003c0)={0x4, 0x0, 0x0, 0x138, 0x138, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, {'syz', 0x0, '0\x00'}}}) ioctl$DM_TABLE_LOAD(r5, 0xc138fd09, &(0x7f0000000500)={0x4, 0x0, 0x0, 0x178, 0x138, 0x1, 0x0, 0x0, 0x0, 0x0, @by_name={0x0, {'syz', 0x0, '0\x00'}}, [@snap_origin={0x0, 0x1000, 0x0, 0x40, 'snapshot-origin\x00', @ram_num={'1:', 0x0}}]}) ioctl$UI_DEV_SETUP(0xffffffffffffffff, 0x405c5503, 0x0) ioctl$PAGEMAP_SCAN(0xffffffffffffffff, 0xc0606610, 0x0) ioctl$DM_DEV_SUSPEND(r5, 0xc138fd06, &(0x7f0000000680)={0x4, 0x0, 0x0, 0x138, 0x138, 0x0, 0x0, 0x5800, 0x0, 0x0, @by_name={0x0, {'syz', 0x0, '0\x00'}}}) mknodat$dm(0xffffffffffffff9c, &(0x7f00000007c0)='./dm0\x00', 0x6180, r6) r7 = openat$dm_dev(0xffffffffffffff9c, &(0x7f0000000800)='./dm0\x00', 0x2, 0x0) pwrite64(r7, &(0x7f0000000840)="bf0f60f4db87", 0x6, 0x1000) write(r0, &(0x7f0000000100)='6', 0x32) 1.87456339s ago: executing program 2 (id=1462): r0 = open(&(0x7f0000000180)='./file0\x00', 0x48141, 0x0) fcntl$setlease(r0, 0x400, 0x1) open(&(0x7f00000001c0)='./file0\x00', 0x0, 0x55) fcntl$getflags(r0, 0x401) r1 = openat$dm_control(0xffffffffffffff9c, &(0x7f0000000000), 0xa0442, 0x0) ioctl$DM_DEV_CREATE(r1, 0xc138fd03, &(0x7f0000000040)={0x4, 0x0, 0x0, 0x158, 0x138, 0x0, 0x0, 0x10, 0x0, 0x0, {0x0, {'syz', 0x0, '1\x00'}, @uuid={'LVM-syz', 0x0, '2\x00'}}}) ioctl$DM_TABLE_LOAD(r1, 0xc138fd09, &(0x7f0000006dc0)={0x4, 0x0, 0x0, 0x220, 0x138, 0x1, 0x0, 0x400, 0x0, 0x0, @by_dev={r2}, [@crypt={0x0, 0x3000, 0x0, 0xe8, 'crypt\x00', {'aes-xts-plain', 0x20, @fixed='0123456789abcdef0123456789abcdef0123456789abcdef0123456789abcdef0123456789abcdef0123456789abcdef0123456789abcdef0123456789abcdef', 0x20, '8191', 0x20, {@ram_num={'1:', 0x0}, 0x20, '0'}, ' 1 allow_discards'}}]}) 1.798162648s ago: executing program 4 (id=1463): r0 = syz_create_resource$futex(&(0x7f0000000080)) futex(r0, 0x100, 0x0, &(0x7f0000000000)={0x0, 0x989680}, 0x0, 0x0) futex(r0, 0xa, 0x2, 0x0, 0x0, 0x1) 1.727742205s ago: executing program 4 (id=1464): r0 = socket$vsock_stream(0x28, 0x1, 0x0) (async) r1 = socket$inet6(0xa, 0x2, 0x0) getsockopt$inet6_int(r1, 0x29, 0x43, 0x0, &(0x7f0000000000)) setsockopt$SO_VM_SOCKETS_BUFFER_MAX_SIZE(r0, 0x28, 0x2, &(0x7f00000001c0)=0xfffffffffffffffa, 0x8) (async) r2 = socket$nl_route(0x10, 0x3, 0x0) getsockopt$sock_int(r2, 0x1, 0x4b, 0x0, &(0x7f0000000340)) (async) connect$vsock_stream(r0, &(0x7f0000000200)={0x28, 0x0, 0x2710, @my=0x0}, 0x10) (async, rerun: 32) unshare(0x22020600) (async, rerun: 32) r3 = socket$pppl2tp(0x18, 0x1, 0x1) (async, rerun: 32) r4 = socket$inet6_udp(0xa, 0x2, 0x0) (rerun: 32) connect$pppl2tp(r3, &(0x7f0000000180)=@pppol2tpin6={0x18, 0x1, {0x0, r4, 0x6, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @local}}}, 0x32) (async) getsockopt$sock_buf(r3, 0x1, 0x1c, 0x0, &(0x7f0000000300)=0x3d) setsockopt$SO_VM_SOCKETS_BUFFER_MIN_SIZE(r0, 0x28, 0x1, &(0x7f0000000240)=0xffffffffffff7fff, 0x8) (async) r5 = syz_open_procfs$pagemap(0xffffffffffffffff, &(0x7f0000000040)) r6 = socket$inet(0x2, 0x3, 0x8d) setsockopt$inet_msfilter(r6, 0x0, 0x8, &(0x7f0000000380)=ANY=[@ANYRES32], 0x1) (async, rerun: 32) getsockopt$inet_pktinfo(r6, 0x0, 0x8, &(0x7f00000003c0)={0x0, @local, @local}, &(0x7f0000000400)=0xc) (async, rerun: 32) r8 = socket$inet6(0xa, 0x3, 0x3c) ioctl$sock_inet6_SIOCSIFADDR(r8, 0x8916, &(0x7f0000000440)={@ipv4={'\x00', '\xff\xff', @local}, 0x0, r7}) sendto$packet(0xffffffffffffffff, &(0x7f0000000340), 0x0, 0x0, &(0x7f0000000480)={0x11, 0x18, r7, 0x1, 0x6, 0x6, @remote}, 0x14) (async) ioctl$PAGEMAP_SCAN(r5, 0xc0606610, &(0x7f0000000280)={0x60, 0x2, &(0x7f0000ff5000/0xa000)=nil, &(0x7f0000ffb000/0x4000)=nil, 0x3, &(0x7f0000000080)=[{0x9698, 0x2, 0x5}, {0x6, 0x5ba, 0x2}, {0x9, 0xfffffffffffffff7, 0xd}, {0x9, 0x200, 0x2}, {0x57654cf0, 0x401, 0x2}, {0x80000001, 0x0, 0xb5}, {0x10, 0x5, 0xffffffffffffffff}, {0xfd51, 0x401, 0xffffffffffff03e4}, {0x1, 0xfffffffffffffff4, 0x1}, {0x6, 0x8, 0x9}], 0xa, 0x80000000, 0x30, 0x5, 0x20, 0x4}) 1.727454765s ago: executing program 4 (id=1465): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket(0x10, 0x803, 0x2) r2 = socket$inet6(0xa, 0x3, 0x28) connect$inet6(r2, &(0x7f00000001c0)={0xa, 0x4e24, 0xb, @mcast2, 0x9}, 0x1c) sendto$inet6(r2, &(0x7f0000000200)="800037bbfa9ba1ce", 0xffe9, 0x0, 0x0, 0x0) mmap(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x2000009, 0x32, 0xffffffffffffffff, 0x0) recvfrom$inet6(r2, &(0x7f0000000240)=""/245, 0xfffffffffffffe4e, 0x30c64a8c5dc2dff0, 0x0, 0x0) r3 = syz_usb_connect(0x3, 0x36, &(0x7f0000000180)=ANY=[@ANYBLOB="12010000b510f210950b2a7773820102030109022400010000000009042200028953950009050a02ff0300fa000905820250"], 0x0) syz_usb_control_io$printer(r3, 0x0, 0x0) r4 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000380)='mounts\x00') read$FUSE(r4, &(0x7f00000003c0)={0x2020, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x1086) syz_genetlink_get_family_id$ethtool(&(0x7f0000000340), r4) r6 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r6, 0x107, 0x7, &(0x7f0000000080)=0x2, 0x4) setsockopt$packet_rx_ring(r6, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x1000, 0x3a, 0x1000, 0x3a, 0x7ff, 0x3, 0x3}, 0x1c) r7 = socket$inet_tcp(0x2, 0x1, 0x0) close(r7) r8 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r8, &(0x7f0000000100)={0xa, 0x4e22, 0xd, @loopback, 0x6}, 0x1c) connect$inet6(r8, &(0x7f0000000140)={0xa, 0x4e22, 0x9e, @loopback, 0x23}, 0x1c) sendto$inet(r7, &(0x7f0000002500)="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", 0xffffff5d, 0x12, 0x0, 0x0) recvfrom$inet(r7, &(0x7f00000026c0)=""/8, 0xfffffffffffffd0b, 0xc9100120, 0x0, 0xfffffffffffffd25) ioctl$sock_FIOSETOWN(r1, 0x8901, &(0x7f0000002700)=r5) r9 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r9, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000002400)=ANY=[@ANYBLOB="6d2e887f57bf5b73df425128856c31d2f0000000100033060000000000000000ac142e05000000000007000000000000fc00"/69, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000000000000000000000000000000000000000000000fe80000000000000000000000000001afdffffffffefffff05000000000000000000040000000000cd2d0000000000000000000000000000000000000000000000000000000000000001000000000000000000000000000000000000000000000600000000000000000000000000000004000000000000000000010000000000043500000a0000002400000000000000"], 0xf0}}, 0x20004010) close_range(r0, 0xffffffffffffffff, 0x0) 1.031116226s ago: executing program 2 (id=1467): r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000640), 0x1, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IEEE802154_DISASSOCIATE_REQ(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)={0x14, 0x0, 0x30e, 0x70bd2d, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x481}, 0x8000000) syz_genetlink_get_family_id$nfc(&(0x7f00000000c0), r2) r3 = syz_genetlink_get_family_id$netlbl_calipso(&(0x7f0000000100), r2) sendmsg$NLBL_CALIPSO_C_REMOVE(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)={0x14, r3, 0x1, 0x70bd2a, 0x25dfdbff}, 0x14}, 0x1, 0x0, 0x0, 0x40}, 0x880) ioctl$RTC_WKALM_RD(r0, 0x80287010, &(0x7f0000000680)) 979.695091ms ago: executing program 2 (id=1468): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000100)={0x2, &(0x7f0000000040)=[{0x61, 0x0, 0x0, 0x3}, {0x6, 0x4}]}) r1 = openat$binfmt_register(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0) r2 = getpgrp(0xffffffffffffffff) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=@newsa={0x128, 0x10, 0x7, 0x0, 0x0, {{@in6=@private2, @in=@multicast2, 0x4e20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xee00}, {@in6=@mcast1, 0x0, 0x2b}, @in6=@private0, {0x3, 0x1, 0x2, 0x9, 0x10000000, 0x1}, {0x0, 0x2, 0x7}, {0x40000, 0xffffffff, 0xae8}, 0x0, 0x3504, 0xa, 0x2, 0xfe, 0x34}, [@coaddr={0x14, 0xe, @in6=@remote}, @lifetime_val={0x24, 0x9, {0x1ff, 0x2, 0xb4, 0x5}}]}, 0x128}, 0x1, 0x0, 0x0, 0x4000005}, 0x890) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r4, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000540)=@newsa={0x104, 0x1a, 0x7, 0x70bd2a, 0x25dfdbff, {{@in6=@dev={0xfe, 0x80, '\x00', 0x1b}, @in6=@empty, 0x3, 0x0, 0x4e22, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xee00}, {@in6=@mcast1, 0x0, 0x2b}, @in6=@private0, {0x5a, 0x0, 0x2, 0x4, 0x0, 0x60000}, {0x0, 0x200000, 0x7, 0xfffffffffffffffd}, {0x8001, 0x0, 0xae8}, 0x0, 0x0, 0xa, 0x2, 0x0, 0x70}, [@coaddr={0x14, 0xe, @in=@remote}]}, 0x104}}, 0x8000) r5 = syz_pidfd_open(r2, 0x0) pidfd_send_signal(r5, 0x19, &(0x7f0000000140)={0x19, 0x546d0581, 0xc}, 0x0) r6 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x60002, 0x0) ioctl$FIDEDUPERANGE(r1, 0xc0189436, &(0x7f00000002c0)={0x2, 0x9, 0x5, 0x0, 0x0, [{{r5}, 0x1}, {{r6}, 0x4}, {{r0}, 0xfffffffffffffe40}, {{r0}, 0x4}, {{r5}, 0x1447}]}) fcntl$setstatus(r0, 0x4, 0x40400) 978.154321ms ago: executing program 2 (id=1469): r0 = socket$unix(0x1, 0x2, 0x0) connect$unix(r0, &(0x7f0000000040)=@abs={0x0, 0x0, 0x4e22}, 0x6e) openat(0xffffffffffffff9c, &(0x7f0000000640)='.\x00', 0x121000, 0x0) r1 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r1, 0x10e, 0xc, &(0x7f0000000100)={0x802}, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="1c0000004a006b50767fd349b59c00000a"], 0x1c}}, 0x0) syz_usb_connect(0x2, 0xb3, 0x0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0}) mkdirat(0xffffffffffffff9c, &(0x7f0000000880)='./file0\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000008c0)='./file2\x00', 0x22) mount$overlay(0x0, &(0x7f0000000900)='./file0\x00', &(0x7f0000000940), 0x810000, &(0x7f00000000c0)={[{@workdir={'workdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file2'}}], [], 0x2c}) 938.129605ms ago: executing program 3 (id=1470): r0 = openat$ptp0(0xffffffffffffff9c, 0x0, 0x48000, 0x0) ioctl$PTP_EXTTS_REQUEST2(r0, 0x40103d0b, 0x0) r1 = gettid() timer_create(0x0, &(0x7f0000000440)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f0000000480)) timer_create(0x7, &(0x7f0000000580)={0x0, 0x21, 0x4}, &(0x7f00000005c0)=0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r2, 0x1, &(0x7f0000000640)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0x14a1e000) munmap(&(0x7f0000002000/0x2000)=nil, 0x2000) fsopen(&(0x7f0000000680)='proc\x00', 0x0) socket$tipc(0x1e, 0x2, 0x0) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000001880)={0x1, &(0x7f00000018c0)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) close_range(r3, 0xffffffffffffffff, 0x0) 924.829527ms ago: executing program 3 (id=1471): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000019140)={&(0x7f0000019180)=@newsa={0x154, 0x1a, 0x633, 0x70bd25, 0x25dfdbfb, {{@in=@local, @in=@dev={0xac, 0x14, 0x14, 0x31}, 0x0, 0x0, 0x4e23, 0x0, 0x0, 0x0, 0x0, 0x3c}, {@in=@multicast1, 0x0, 0x32}, @in6=@ipv4={'\x00', '\xff\xff', @multicast2}, {0x323, 0x1, 0x7, 0x401, 0xb, 0x400, 0x6}, {0x0, 0x100000000, 0x0, 0xffffffffffffffff}, {0xfffffffb, 0x3, 0xca09}, 0x70bd25, 0x3502, 0x2, 0x4, 0x0, 0x9}, [@algo_crypt={0x48, 0x2, {{'ecb(cipher_null)\x00'}}}, @encap={0x1c, 0x20, {0x0, 0x4e1e, 0x4e23, @in=@empty}}]}, 0x154}, 0x1, 0x0, 0x0, 0x44000840}, 0x804) syz_usb_connect$uac2(0x2, 0x98, &(0x7f00000196c0)=ANY=[@ANYBLOB="1201100700000010351212824000010203010902860003010d5003080b00010108209809040000000101208009240106000626006e0c240303010105030251c70011240202d881771d2f1bcc344952648012d2997c1b4ae8411ce54170fb67ee2cfab588"], &(0x7f0000019740)={0x0, 0x0, 0x0, 0x0}) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) syz_open_dev$usbmon(&(0x7f0000000100), 0x1, 0x2a140) ioctl$BTRFS_IOC_BALANCE_PROGRESS(r1, 0x84009422, 0x0) ioctl$BTRFS_IOC_GET_DEV_STATS(r1, 0xc4089434, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000080)='net/route\x00') pread64(r2, &(0x7f0000000140)=""/102390, 0x18ff6, 0x4) prlimit64(0x0, 0x7, &(0x7f0000019600)={0x0, 0x100}, 0x0) syz_clone(0x40001000, 0x0, 0x0, 0x0, 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) syz_kvm_setup_syzos_vm$x86(r3, &(0x7f0000c00000/0x400000)=nil) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r4, &(0x7f0000019300)={0x0, 0x0, &(0x7f0000019340)={&(0x7f0000019380)=@newsa={0x138, 0x10, 0x5, 0x3, 0x0, {{@in=@loopback, @in=@loopback, 0x0, 0x0, 0x0, 0x0, 0xa}, {@in=@loopback, 0x1234, 0x32}, @in=@loopback, {}, {}, {}, 0x0, 0x0, 0x2, 0x1}, [@algo_crypt={0x48, 0x2, {{'ecb(cipher_null)\x00'}}}]}, 0x138}, 0x1, 0x0, 0x0, 0x20040}, 0x80) r5 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$KVM_CAP_STEAL_TIME(r2, 0x4068aea3, &(0x7f0000019640)) setsockopt$inet_IP_XFRM_POLICY(r5, 0x0, 0x11, &(0x7f00000194c0)={{{@in=@loopback, @in=@loopback, 0x0, 0x0, 0x0, 0x0, 0x2}, {0x0, 0x0, 0x0, 0x800000000000}, {}, 0x0, 0x0, 0x1}, {{@in=@loopback, 0x1234, 0x32}, 0x2, @in=@remote, 0x0, 0x1}}, 0xe8) connect$inet(r5, &(0x7f00000195c0)={0x2, 0x1234, @loopback}, 0x10) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000040)={0xc, 0x0, 0xfec00000}) 366.303893ms ago: executing program 2 (id=1472): openat(0xffffffffffffff9c, &(0x7f0000000640)='.\x00', 0x121000, 0x0) syz_usb_connect(0x2, 0xb3, 0x0, &(0x7f0000000740)={0x0, 0x0, 0x0, 0x0}) mkdirat(0xffffffffffffff9c, &(0x7f0000000880)='./file0\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000008c0)='./file2\x00', 0x0) mount$overlay(0x0, &(0x7f0000000900)='./file0\x00', &(0x7f0000000940), 0x810000, &(0x7f0000000980)={[{@workdir={'workdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file2'}}], [], 0x2c}) (fail_nth: 2) 365.647053ms ago: executing program 3 (id=1473): r0 = gettid() timer_create(0x0, &(0x7f0000000840)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000000880)) timer_settime(0x0, 0x0, &(0x7f00000008c0)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000900), 0x41, 0x0) write$binfmt_aout(r1, &(0x7f0000000940)=ANY=[], 0xff2e) ioctl$TCSETS(r1, 0x40045431, &(0x7f0000000980)={0x0, 0x0, 0x3, 0x4, 0x16, "b0bf2ebb48c849ac0000000003000018bfff40"}) r2 = syz_open_pts(r1, 0x200) dup3(r2, r1, 0x0) mknodat(0xffffffffffffff9c, &(0x7f0000000700)='./file0\x00', 0x200, 0x0) r3 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./bus\x00', 0x180) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x180) mknodat(0xffffffffffffff9c, &(0x7f00000001c0)='./file1\x00', 0x8, 0x80000003) mount$overlay(0x0, &(0x7f0000000440)='./bus\x00', &(0x7f0000000480), 0x8, &(0x7f00000004c0)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}, {@index_on}]}) linkat(0xffffffffffffff9c, &(0x7f0000000500)='./file1\x00', 0xffffffffffffff9c, &(0x7f0000000540)='./file0/file0\x00', 0x400) chdir(&(0x7f0000000580)='./bus\x00') lsetxattr$trusted_overlay_nlink(&(0x7f0000000680)='./file1\x00', &(0x7f00000006c0), 0x0, 0x0, 0x2) r4 = openat(0xffffffffffffff9c, 0x0, 0x4, 0x80) lseek(r4, 0x4, 0x1) open$dir(0x0, 0x200200, 0x0) openat$dir(0xffffffffffffff9c, &(0x7f0000000740)='./file0\x00', 0x4000, 0x0) mount$fuse(0x0, &(0x7f0000000180)='./file0/file0\x00', &(0x7f0000000140), 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="669dfe52d4e2e8e03d94656473", @ANYRESHEX=r3, @ANYRES8, @ANYRESDEC=0x0, @ANYRESDEC=r3, @ANYRES16=r3, @ANYRESHEX, @ANYBLOB="a17813870c890ff072e0acd2d6f2021938669d98a083f7af38bcc9329a0f036f7d6acc074a33f53a5bb5179d08ce01b053e8ab6f80be4235ba43ce9b3f15d699c51fc9b821b393b0e9e84527b67f0b6d36d2562b5c27702049a87b82d6f92a4eafb6d5b0a9161e8215218a1e25d8b42249c01fcad9bff1950f409e02236ed1f1e1a049d0e045e9f2d4363c4369761970b29c8bb14d3fd87c6932c83fc7065f1380e9b7ea4fd8f3406602da0c3e8e87b05bcc3342905f13"]) read$FUSE(r3, &(0x7f0000005c80)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(0xffffffffffffffff, &(0x7f0000007cc0)={0x50, 0x0, r5, {0x7, 0x9, 0x8, 0x60202040, 0x10, 0x2, 0x0, 0x0, 0x0, 0x0, 0x20, 0x100}}, 0x50) r6 = openat$fuse(0xffffffffffffff9c, &(0x7f00000005c0), 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000600)='./file0\x00', &(0x7f0000000640), 0x1000000, &(0x7f0000000240)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r6, @ANYBLOB=',rootmode=00000000000000000060000,user_id=', @ANYRESDEC=0x0, @ANYBLOB="2c677235636f75705f699e4b36e41d0083abce23215afa41ac76407d061e29b2775c3478f0786b970acc31c9cebc7d6fa15c83b4804f1dde7d7d8315967b", @ANYRESDEC=0x0, @ANYBLOB=',\x00']) r7 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$KVM_SET_CLOCK(r4, 0x4030ae7b, &(0x7f0000000800)={0x5, 0xe, 0x4, 0x8, 0x7fffffff}) ioctl$sock_inet_SIOCSIFDSTADDR(r7, 0x891b, &(0x7f0000000200)={'erspan0\x00', {0x2, 0x4e24, @private=0xac141416}}) syz_fuse_handle_req(r6, &(0x7f00000019c0)="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", 0x2000, &(0x7f00000039c0)={&(0x7f0000003a80)={0x50, 0x0, 0x1ff, {0x7, 0x29, 0x1, 0x24ff871999e0d5f7, 0x1dcf, 0x401d, 0xb, 0x800, 0x0, 0x0, 0x2, 0x3}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 336.262956ms ago: executing program 3 (id=1474): r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x40042, 0x1) r1 = socket$unix(0x1, 0x5, 0x0) bind$unix(r1, &(0x7f0000000040)=@abs={0x1, 0x0, 0x4e20}, 0x12) ioctl$VHOST_SET_VRING_BASE(r0, 0x4008af12, &(0x7f00000000c0)={0x1, 0xffff}) listen(r1, 0x787) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeeb, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000a91000/0x3000)=nil, 0x3000, 0x2) mremap(&(0x7f0000064000/0x3000)=nil, 0x3000, 0x600000, 0x3, &(0x7f0000a00000/0x600000)=nil) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff}, 0x800) mkdirat(0xffffffffffffff9c, &(0x7f0000000180)='./proc_mnt\x00', 0x1cc) mount(0x0, &(0x7f0000000280)='./proc_mnt\x00', &(0x7f00000002c0)='proc\x00', 0x0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./proc_mnt/irq/1/smp_affinity\x00', 0x1, 0x0) mount$fuse(0x0, 0x0, 0x0, 0x0, &(0x7f0000000340)=ANY=[@ANYBLOB='fd']) write$P9_RLERRORu(r3, &(0x7f0000000380)=ANY=[], 0xd) mount$9p_fd(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000200), 0x800014, &(0x7f0000000100)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r2, @ANYBLOB="000000008d3976149425c5b7d95aee", @ANYRESHEX=r1, @ANYBLOB=',\x00']) 261.748184ms ago: executing program 3 (id=1475): openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000380)={0x0, 0x0, 0x0}, &(0x7f00000003c0)=0xc) setfsgid(r0) setfsgid(r0) socket$inet6(0x10, 0x3, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000000000/0x9000)=nil, 0x600002, 0x600002, 0x7, &(0x7f0000a00000/0x600000)=nil) prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000c13000/0x2000)=nil, 0x2000, &(0x7f0000000280)='\x00') r1 = socket$inet(0x2, 0x3, 0x4) setsockopt$inet_opts(r1, 0x0, 0x4, &(0x7f0000000400)="8907040400", 0x5) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000440)='xfrm0\x00', 0x10) sendmsg$netlink(0xffffffffffffffff, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000500)=[{0x0, 0x2c}], 0x1, 0x0, 0x0, 0x4000002}, 0x0) sendmmsg$inet(r1, &(0x7f0000000540)=[{{&(0x7f0000000580)={0x2, 0x0, @broadcast}, 0x10, 0x0}}], 0x68000, 0x0) 233.215287ms ago: executing program 0 (id=1476): r0 = openat$kvm(0x0, &(0x7f0000000180), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = socket(0xa, 0x3, 0x3e) setsockopt$MRT6_ADD_MIF(r2, 0x3a, 0xca, 0x0, 0x0) r3 = syz_kvm_setup_syzos_vm$x86(r1, &(0x7f0000c00000/0x400000)=nil) r4 = syz_kvm_add_vcpu$x86(r3, &(0x7f00000001c0)={0x0, &(0x7f0000000200)=[@cpuid={0x64, 0x18, {0x2, 0xc615}}, @set_irq_handler={0xc8, 0x20, {0x24, 0x2}}, @out_dx={0x6a, 0x28, {0xe1ae, 0x2, 0xebf}}, @cpuid={0x64, 0x18, {0x1, 0x596}}, @nested_vmlaunch={0x12f, 0x18, 0x2}, @nested_amd_inject_event={0x180, 0x38, {0x3, 0xef, 0x4, 0x7}}, @wr_drn={0x68, 0x20, {0x3, 0xed}}, @nested_amd_clgi={0x17f, 0x10}, @nested_intel_msr_list_add={0x155, 0x30, {0x3, 0x0, 0xb66, 0x6}}, @nested_amd_vmcb_write_mask={0x17c, 0x38, {0x3, @save_area=0x41c, 0x9, 0x8b8, 0x80000000}}, @nested_load_syzos={0x136, 0x1b9, {0x0, 0x1, [@cpuid={0x64, 0x18, {0x3, 0x4}}, @nested_amd_invlpga={0x17d, 0x20, {0x2, 0x4aed}}, @nested_load_code={0x12e, 0x81, {0x1, "66b8af008ec048b800700000000000000f23d00f21f835100000010f23f866baa100b80a000000ef420f1f981a48000066baf80cb81622a189ef66bafc0c66ed420fab2c38b938020000b8a49d7032ba000000000f300f20e035000001000f22e0450fbae600653ef4"}}, @nested_amd_inject_event={0x180, 0x38, {0x0, 0xf, 0x0, 0x200}}, @nested_vmlaunch={0x12f, 0x18, 0x3}, @nested_amd_inject_event={0x180, 0x38, {0x2, 0xe2, 0x2, 0x4}}, @enable_nested={0x12c, 0x18}, @wr_crn={0x67, 0x20, {0x3, 0x806}}, @nested_amd_invlpga={0x17d, 0x20, {0x58000, 0xa904}}]}}, @wr_drn={0x68, 0x20, {0x4, 0x937}}, @nested_amd_invlpga={0x17d, 0x20, {0xffc, 0xc67f}}, @nested_amd_invlpga={0x17d, 0x20, {0x8000000, 0x68df}}, @nested_amd_clgi={0x17f, 0x10}, @uexit={0x0, 0x18, 0x7fff}, @nested_amd_invlpga={0x17d, 0x20, {0x58000, 0x6b8c}}], 0x3c1}) ioctl$KVM_RUN(r4, 0xae80, 0x0) 232.824477ms ago: executing program 3 (id=1477): r0 = socket(0x1e, 0x4, 0x0) r1 = socket(0x1e, 0x2, 0x0) setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000200)=@req={0x3fc, 0x0, 0x0, 0x72a}, 0x10) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000240)=@req={0x3fc, 0x0, 0x2}, 0x10) syz_usb_control_io(0xffffffffffffffff, &(0x7f0000000000)={0x2c, 0x0, 0x0, 0x0, &(0x7f0000000040)={0x20, 0x29, 0xf, {0xf, 0x29, 0xe, 0x1, 0x7, 0x8, "0400f942", "ad0024f7"}}, 0x0}, 0x0) r2 = syz_usb_connect$uac3(0x3, 0x97, &(0x7f0000000080)={{0x12, 0x1, 0x300, 0x0, 0x0, 0x0, 0x10, 0x103d, 0x100, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x85, 0x3, 0x1, 0xd8, 0x10, 0xc, {0x8, 0xb, 0x1, 0x2, 0x1, 0x1, 0x30, 0x2}, {{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x30, 0x0, {{0xa, 0x24, 0x1, 0x10, 0xa, 0x7}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x30, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x20, 0xe, 0x0, 0x3, {0xa, 0x25, 0x25, 0x7fffffff, 0xc, 0x180}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x30, 0x0, {[@as_header={0x17, 0x24, 0x1, 0x6, 0x8000, 0x7, 0x2, 0x6, 0x4a, 0x9, 0x10}]}, {{0x9, 0x5, 0x82, 0x9, 0x20, 0x7f, 0x4, 0x0, {0xa, 0x25, 0x25, 0x400, 0x8f, 0x2}}}}}}}}]}}, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$uac3(r2, &(0x7f0000000180)={0x14, 0x0, &(0x7f00000001c0)={0x0, 0x3, 0x2, @string={0x2}}}, 0x0) syz_usb_control_io(0xffffffffffffffff, &(0x7f0000000280)={0x2c, &(0x7f00000002c0)={0x40, 0xe, 0x2, {0x2, 0x8}}, 0x0, 0x0, 0x0, 0x0}, 0x0) syz_usb_connect$uac1(0x4, 0x0, 0x0, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x4, &(0x7f0000000340)=@lang_id={0x4, 0x3, 0xc07}}]}) ioctl$EVIOCGLED(0xffffffffffffffff, 0x80404519, 0x0) syz_usb_control_io$uac3(r2, &(0x7f0000000380)={0x14, &(0x7f00000003c0)={0x0, 0xe, 0x6, {0x6, 0xa, "c39aed3c"}}, 0x0}, 0x0) syz_usb_control_io$uac3(r2, &(0x7f0000000400)={0x14, &(0x7f0000000440)=ANY=[], 0x0}, 0x0) setresuid(0xee00, 0x0, 0x0) ioprio_set$pid(0x2, 0x0, 0x0) dup3(r1, r0, 0x0) 232.437497ms ago: executing program 0 (id=1478): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = openat$binderfs_feature(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/features/oneway_spam_detection\x00', 0x0, 0x0) r2 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r2, 0x11b, 0x4, &(0x7f0000000c80)={&(0x7f0000000cc0)=""/5, 0x214000, 0x800}, 0x20) setsockopt$XDP_TX_RING(r2, 0x11b, 0x3, &(0x7f0000000d00)=0x800, 0x4) r3 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$XDP_UMEM_COMPLETION_RING(r2, 0x11b, 0x6, &(0x7f0000000d40)=0x20000, 0x4) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000d80)={'pimreg\x00', 0x0}) setsockopt$XDP_UMEM_FILL_RING(r2, 0x11b, 0x5, &(0x7f0000000dc0)=0x4000, 0x4) bind$xdp(r2, &(0x7f0000000e00)={0x2c, 0x0, r4}, 0x10) setsockopt$XDP_UMEM_REG(r2, 0x11b, 0x4, &(0x7f0000000e40)={0x0, 0x8000, 0x0, 0x1000, 0x2}, 0x20) ioctl$KVM_SET_LAPIC(r1, 0x4400ae8f, &(0x7f00000000c0)={"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"}) ioctl$sock_proto_private(r0, 0x89a2, 0x0) r5 = socket$netlink(0x10, 0x3, 0x8000000004) r6 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$inet_udp_int(r6, 0x11, 0xb, &(0x7f0000000780)=0xffff8001, 0x4) writev(r5, &(0x7f0000000040)=[{&(0x7f0000000900)="5800000014001923fc834b80040d8c560a067f020000000000000000000058000b4824ca945f64009400ff0325010ebc000000000000008000f0fffeffe809005300fff5dd001a0010000100080c10000000000000000000", 0x58}], 0x1) r7 = syz_init_net_socket$bt_rfcomm(0x1f, 0x3, 0x3) getpeername(r7, 0x0, 0x0) r8 = syz_create_resource$futex(&(0x7f0000000080)) futex(r8, 0x8, 0x2, 0x0, r8, 0x6) ioctl$KVM_CAP_HYPERV_SYNIC2(r1, 0x4068aea3, &(0x7f00000004c0)) mkdirat(0xffffffffffffff9c, &(0x7f0000000540)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000580)='./proc\x00', &(0x7f0000000980)='proc\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f00000009c0)='./proc/thread-self/fail-nth\x00', 0x2, 0x10b) write(0xffffffffffffffff, &(0x7f0000000a00)='w', 0x1) setsockopt$SO_TIMESTAMPING(r1, 0x1, 0x25, &(0x7f00000005c0)=0x1220, 0x4) r9 = add_key$keyring(&(0x7f0000000bc0), &(0x7f0000000c00)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffe) keyctl$chown(0x4, r9, 0x0, 0x0) syz_open_dev$usbfs(&(0x7f0000000a40), 0xb, 0x2) 232.130357ms ago: executing program 0 (id=1479): openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x2042, 0x19d) r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0) r1 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r1, 0x10e, 0xc, &(0x7f0000000200)={0x4000, 0x2, 0x0, 0x4}, 0x10) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f00000005c0), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x2) syz_kvm_setup_cpu$x86(r3, r4, &(0x7f0000fe6000/0x18000)=nil, &(0x7f0000000600)=[@textreal={0x8, 0x0}], 0x1, 0x22, 0x0, 0x0) ioctl$KVM_SET_GUEST_DEBUG_x86(r4, 0x4048ae9b, &(0x7f0000000640)={0x70003, 0x0, {[0xffffffffffffffff, 0x1f8, 0x2, 0xffffffffefffff15, 0x3, 0x4, 0x1, 0x4]}}) ioctl$KVM_RUN(r4, 0xae80, 0x0) recvfrom$unix(r1, 0x0, 0x0, 0x40012000, &(0x7f0000000340)=@file={0x0, './file0\x00'}, 0x6e) sendmsg$nl_generic(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000440)=ANY=[@ANYBLOB="200000001600010a"], 0x20}, 0x1, 0x0, 0x0, 0xc8001}, 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_buf(r5, 0x29, 0x20, &(0x7f00000000c0)="0bbb268dd6ffa80800000002000000000000210d0000aaa8fa017242ba9380d440fe0000000000002900000003000000", 0xfe60) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r6, 0x407, 0x8) write$binfmt_aout(r7, 0x0, 0x6a) vmsplice(r7, &(0x7f0000000140)=[{&(0x7f0000000180)="d1e15a", 0x3}], 0x1, 0x1) lsetxattr$trusted_overlay_redirect(&(0x7f0000000480)='./file1\x00', &(0x7f0000000500), &(0x7f0000000540)='./file1\x00', 0x8, 0x3) readv(r6, &(0x7f00000001c0)=[{&(0x7f0000000280)=""/167, 0xa7}], 0x1) renameat2(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', r0, &(0x7f00000004c0)='./file1\x00', 0x5) openat$cgroup_ro(r6, &(0x7f0000000580)='cgroup.events\x00', 0x0, 0x0) creat(&(0x7f0000000080)='./file0\x00', 0x6a) 67.603443ms ago: executing program 0 (id=1480): socket$inet6_tcp(0xa, 0x1, 0x0) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000580)={'syz1\x00', {0xfff9, 0x0, 0x248, 0x9b99}, 0x37, [0xfffffff8, 0x8, 0x5, 0x9, 0x80000000, 0x155f, 0x6, 0x4, 0x25cd, 0x1, 0xb4, 0xa, 0xa2b9, 0x6, 0x7, 0xe4, 0x6, 0x6, 0x3, 0xbbf, 0x7ff, 0x1, 0x8, 0xd, 0x0, 0x12a3, 0x6, 0x1, 0x2, 0x6, 0x7, 0x81, 0x8a, 0x79, 0x2, 0x10000, 0xffffffff, 0x91, 0x4, 0x10, 0x16, 0x10, 0x5, 0x401, 0xffff0e3e, 0x405, 0xa, 0x81, 0x9, 0x7ff, 0x80000001, 0xff, 0x1, 0x2, 0x2, 0x2, 0x7, 0x1, 0x7ff, 0x4, 0x4007f, 0xffffffff, 0x9, 0x4], [0x7, 0x3, 0x9, 0x9, 0x4, 0x1, 0xa8a9, 0x20000073, 0x8e, 0xd50, 0x7, 0x5, 0x2, 0x809, 0x2, 0xa7, 0x1000, 0x0, 0x200b398, 0x400080, 0x1, 0x4, 0x1c, 0x7, 0x1, 0x2, 0x3, 0x4, 0xffffff7f, 0x400, 0x6, 0x4c2336d3, 0x4, 0x9, 0xfffffff8, 0x401, 0x46, 0xf1, 0xd, 0xab00060, 0x5, 0x6, 0x2, 0xfffffffd, 0x80000001, 0x1ff, 0x1, 0x7fff, 0x1, 0x1cb, 0x1, 0x80000004, 0x6, 0x438, 0x2, 0x1, 0xb1, 0x7fffffff, 0x4, 0xfffffff9, 0x1, 0x1000, 0xfffff801, 0x5], [0xfffffffe, 0xfffffffe, 0xffff, 0xc, 0x2, 0x2e6bf783, 0x80000001, 0x5, 0x40, 0x491, 0x8d3, 0x200006, 0x8, 0x400, 0x2, 0x400, 0x3d, 0x6, 0xee4b, 0x2000004, 0x1, 0x8000003, 0x4e, 0x9, 0x3, 0x3, 0x9, 0x3, 0xc7, 0xffe, 0x0, 0x2, 0x400, 0x3e55, 0x5, 0xd3, 0x8, 0x97f7, 0x3, 0xd, 0x9e9, 0x601, 0x101, 0xdd80, 0x60a0, 0x5, 0x7f, 0x10000, 0x1, 0x2, 0x2, 0x0, 0x8000, 0xf47, 0x3, 0xd500, 0x8, 0x77, 0x9, 0x8000006, 0x10000, 0xfffffffd, 0x9b9, 0x1], [0x7ff, 0x0, 0x6, 0x1afa, 0xbfc, 0x8, 0x5, 0x7f, 0x55, 0x40, 0xff, 0x1005, 0x1, 0x7, 0x1e, 0x9, 0x81, 0x100010, 0x9d82, 0xd, 0xfffffff7, 0x8, 0x140f2, 0x5396, 0x3, 0x6, 0x80008001, 0x777b, 0x3, 0x4, 0x400100, 0xd8ce, 0x7fffffff, 0x100009, 0xe, 0xfffffffd, 0x3, 0x1ff, 0x2000c03, 0x2, 0x10000, 0x2, 0x8004, 0x7fff, 0x3, 0x8000006, 0xf, 0xe, 0x1, 0x26d, 0x6, 0x0, 0x4, 0xfffffff9, 0x1009, 0x4, 0x463f, 0x4, 0xdab, 0x6, 0x8, 0x14000, 0x1, 0x9]}, 0x45c) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000a00), 0x0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000a40), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x32) ioctl$KVM_GET_STATS_FD_vm(r2, 0xaece) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x2000b, 0x1000005, 0x401d031, 0xffffffffffffffff, 0x0) r3 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000a80)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$BINDER_CTL_ADD(0xffffffffffffffff, 0xc1086201, &(0x7f0000000ac0)={'binder0\x00'}) ioctl$KVM_SET_REGS(r4, 0x4090ae82, &(0x7f0000000c00)={[0x35, 0xfff, 0xfffffffffffffffe, 0x40000000000180, 0x2, 0x6, 0xf2, 0xd, 0x7fffffffffffe, 0x7, 0x5, 0x7, 0x4, 0x5, 0x4, 0x8], 0x25000, 0x304}) openat$kvm(0xffffffffffffff9c, &(0x7f0000000cc0), 0x0, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) r5 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r6 = dup(r5) ioctl$KVM_SET_USER_MEMORY_REGION(r5, 0x4020ae46, &(0x7f0000000d00)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r7, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000d40)=[@text32={0x20, &(0x7f0000000d80)="c20000361e0f01c3660fd2eff30f10f1b961020000b80e000000ba000000000f30b98d0200000f320b99f3530000660f6af7c4e2f91d20", 0x37}], 0x1, 0x11, 0x0, 0x0) syz_kvm_setup_cpu$x86(r5, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000dc0)=[@text32={0x20, 0x0}], 0x1, 0x50, 0x0, 0x0) ioctl$KVM_RUN(r7, 0xae80, 0x0) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000500)='cpuset.effective_cpus\x00', 0x275a, 0x0) r9 = socket$netlink(0x10, 0x3, 0x6) writev(r9, &(0x7f0000000000)=[{&(0x7f0000000040)="390000001300034700bb5be1c3e4feff0600000005000000450000002500000019000d000400ad000d00000000000006040000000000f93132", 0x39}], 0x1) fcntl$lock(r8, 0x7, &(0x7f0000000540)={0x1, 0x2, 0x7fff}) r10 = openat$tun(0xffffffffffffff9c, &(0x7f0000000180), 0x40e41, 0x0) ioctl$TUNSETIFF(r10, 0x400454ca, &(0x7f00000001c0)={'syzkaller1\x00', 0xc201}) r11 = socket$inet6_tcp(0xa, 0x1, 0x0) r12 = dup(r11) ioctl$SIOCSIFHWADDR(r12, 0x8914, &(0x7f0000000200)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}}) 52.785855ms ago: executing program 0 (id=1481): r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000300)=0x1, 0x4) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000400)=0x1, 0x4) connect$inet(r0, &(0x7f0000000480)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x58}}, 0x10) sendto(r0, &(0x7f00000004c0)='A', 0xfffff, 0x40008c1, 0x0, 0x0) recvmmsg(r0, &(0x7f0000000540)=[{{0x0, 0x0, &(0x7f0000000580)=[{&(0x7f00000005c0)=""/4096, 0x11fff}], 0x1, 0x0, 0x0, 0x2000000}, 0x1}], 0x256, 0x10022, 0x0) 0s ago: executing program 33 (id=1481): r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000300)=0x1, 0x4) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000400)=0x1, 0x4) connect$inet(r0, &(0x7f0000000480)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x58}}, 0x10) sendto(r0, &(0x7f00000004c0)='A', 0xfffff, 0x40008c1, 0x0, 0x0) recvmmsg(r0, &(0x7f0000000540)=[{{0x0, 0x0, &(0x7f0000000580)=[{&(0x7f00000005c0)=""/4096, 0x11fff}], 0x1, 0x0, 0x0, 0x2000000}, 0x1}], 0x256, 0x10022, 0x0) kernel console output (not intermixed with test programs): : Using ep0 maxpacket: 8 [ 61.309032][ T311] usb 2-1: config 168 descriptor has 1 excess byte, ignoring [ 61.316460][ T311] usb 2-1: too many endpoints for config 168 interface 0 altsetting 188: 100, using maximum allowed: 30 [ 61.338535][ T311] usb 2-1: config 168 interface 0 altsetting 188 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 61.359330][ T311] usb 2-1: config 168 interface 0 altsetting 188 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 61.378474][ T311] usb 2-1: config 168 interface 0 altsetting 188 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 61.408514][ T311] usb 2-1: config 168 interface 0 altsetting 188 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 61.428510][ T311] usb 2-1: config 168 interface 0 altsetting 188 has 2 endpoint descriptors, different from the interface descriptor's value: 100 [ 61.452216][ T311] usb 2-1: config 168 interface 0 has no altsetting 0 [ 61.469290][ T311] usb 2-1: config 168 descriptor has 1 excess byte, ignoring [ 61.478723][ T311] usb 2-1: too many endpoints for config 168 interface 0 altsetting 188: 100, using maximum allowed: 30 [ 61.490571][ T311] usb 2-1: config 168 interface 0 altsetting 188 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 61.498500][ T487] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 61.502444][ T311] usb 2-1: config 168 interface 0 altsetting 188 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 61.521707][ T311] usb 2-1: config 168 interface 0 altsetting 188 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 61.543241][ T311] usb 2-1: config 168 interface 0 altsetting 188 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 61.558489][ T311] usb 2-1: config 168 interface 0 altsetting 188 has 2 endpoint descriptors, different from the interface descriptor's value: 100 [ 61.588466][ T311] usb 2-1: config 168 interface 0 has no altsetting 0 [ 61.606709][ T311] usb 2-1: config 168 descriptor has 1 excess byte, ignoring [ 61.615350][ T311] usb 2-1: too many endpoints for config 168 interface 0 altsetting 188: 100, using maximum allowed: 30 [ 61.637122][ T311] usb 2-1: config 168 interface 0 altsetting 188 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 61.649759][ T311] usb 2-1: config 168 interface 0 altsetting 188 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 61.676036][ T311] usb 2-1: config 168 interface 0 altsetting 188 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 61.688698][ T487] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 61.688703][ T311] usb 2-1: config 168 interface 0 altsetting 188 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 61.688733][ T311] usb 2-1: config 168 interface 0 altsetting 188 has 2 endpoint descriptors, different from the interface descriptor's value: 100 [ 61.708544][ T487] usb 1-1: config 0 has no interfaces? [ 61.711370][ T311] usb 2-1: config 168 interface 0 has no altsetting 0 [ 61.739092][ T311] usb 2-1: string descriptor 0 read error: -22 [ 61.745388][ T311] usb 2-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 61.755733][ T311] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 61.764311][ T487] usb 1-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 61.774336][ T487] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 61.785366][ T487] usb 1-1: SerialNumber: syz [ 61.795568][ T487] usb 1-1: config 0 descriptor?? [ 61.978496][ T613] usb 3-1: new high-speed USB device number 10 using dummy_hcd [ 61.997599][ T487] usb 2-1: USB disconnect, device number 12 [ 62.017017][ T9] usb 1-1: USB disconnect, device number 8 [ 62.140374][ T613] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 62.150264][ T613] usb 3-1: config 1 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 0 [ 62.164429][ T613] usb 3-1: New USB device found, idVendor=18d1, idProduct=1eaf, bcdDevice= 0.00 [ 62.173683][ T613] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 62.182634][ T613] usb 3-1: Product: syz [ 62.186849][ T613] usb 3-1: Manufacturer: syz [ 62.191503][ T613] usb 3-1: SerialNumber: syz [ 62.408591][ T311] usb 4-1: new high-speed USB device number 10 using dummy_hcd [ 62.558515][ T311] usb 4-1: Using ep0 maxpacket: 32 [ 62.575991][ T311] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 62.597968][ T311] usb 4-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 62.607841][ T311] usb 4-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 62.619188][ T311] usb 4-1: Product: syz [ 62.624154][ T311] usb 4-1: Manufacturer: syz [ 62.629689][ T311] usb 4-1: SerialNumber: syz [ 62.635471][ T311] usb 4-1: config 0 descriptor?? [ 62.641185][ T956] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 62.650073][ T311] hub 4-1:0.0: bad descriptor, ignoring hub [ 62.659082][ T311] hub 4-1:0.0: probe with driver hub failed with error -5 [ 63.443789][ T981] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=3070988179 (3070988179 ns) > initial count (1876204212 ns). Using initial count to start timer. [ 63.578761][ T311] usb 4-1: USB disconnect, device number 10 [ 63.600720][ T984] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=3070988179 (3070988179 ns) > initial count (1876204212 ns). Using initial count to start timer. [ 63.908539][ T311] usb 4-1: new full-speed USB device number 11 using dummy_hcd [ 63.938559][ T613] usb 2-1: new high-speed USB device number 13 using dummy_hcd [ 64.060025][ T311] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x85 has invalid maxpacket 1024, setting to 64 [ 64.073428][ T311] usb 4-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 64.082912][ T311] usb 4-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 64.091317][ T311] usb 4-1: Product: syz [ 64.095486][ T311] usb 4-1: Manufacturer: syz [ 64.100133][ T311] usb 4-1: SerialNumber: syz [ 64.105443][ T311] usb 4-1: config 0 descriptor?? [ 64.110179][ T613] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 64.110950][ T956] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 64.122090][ T613] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 64.129574][ T311] hub 4-1:0.0: bad descriptor, ignoring hub [ 64.139103][ T613] usb 2-1: New USB device found, idVendor=28de, idProduct=1142, bcdDevice= 0.00 [ 64.144308][ T311] hub 4-1:0.0: probe with driver hub failed with error -5 [ 64.154132][ T613] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 64.169816][ T613] usb 2-1: config 0 descriptor?? [ 64.342478][ T956] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 64.351413][ T956] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 64.360418][ T956] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 64.369242][ T956] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 64.488732][ T311] usb 4-1: USB disconnect, device number 11 [ 64.582237][ T613] hid-steam 0003:28DE:1142.000D: unknown main item tag 0x0 [ 64.590041][ T613] hid-steam 0003:28DE:1142.000D: : USB HID v0.00 Device [HID 28de:1142] on usb-dummy_hcd.1-1/input0 [ 64.658535][ T613] hid-steam 0003:28DE:1142.000D: Steam wireless receiver connected [ 64.667824][ T613] hid-steam 0003:28DE:1142.000E: unknown main item tag 0x0 [ 64.676018][ T613] hid-steam 0003:28DE:1142.000E: hidraw0: USB HID v0.00 Device [HID 28de:1142] on usb-dummy_hcd.1-1/input0 [ 64.745716][ T311] usb 3-1: USB disconnect, device number 10 [ 64.780398][ T36] audit: type=1400 audit(1794088691.619:225): avc: denied { connect } for pid=997 comm="syz.2.224" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 64.812885][ T36] audit: type=1400 audit(1794088691.649:226): avc: denied { append } for pid=988 comm="syz.1.220" name="hidraw0" dev="devtmpfs" ino=562 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 64.839142][ T310] usb 2-1: USB disconnect, device number 13 [ 64.849141][ T310] hid-steam 0003:28DE:1142.000D: Steam wireless receiver disconnected [ 64.934152][ T36] audit: type=1400 audit(1794088691.769:227): avc: denied { ioctl } for pid=1000 comm="syz.3.225" path="socket:[6398]" dev="sockfs" ino=6398 ioctlcmd=0x8983 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 65.046419][ T36] audit: type=1400 audit(1794088691.879:228): avc: denied { write } for pid=1004 comm="syz.3.227" name="kvm" dev="devtmpfs" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 65.171970][ T1009] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=3070988179 (3070988179 ns) > initial count (1876204212 ns). Using initial count to start timer. [ 65.189577][ T311] usb 3-1: new high-speed USB device number 11 using dummy_hcd [ 65.349975][ T311] usb 3-1: config 2 has an invalid descriptor of length 0, skipping remainder of the config [ 65.360295][ T311] usb 3-1: config 2 interface 0 altsetting 0 has 4 endpoint descriptors, different from the interface descriptor's value: 5 [ 65.374541][ T311] usb 3-1: config 2 has an invalid descriptor of length 0, skipping remainder of the config [ 65.384978][ T311] usb 3-1: config 2 interface 0 altsetting 0 has 4 endpoint descriptors, different from the interface descriptor's value: 5 [ 65.391288][ T36] audit: type=1400 audit(1794088692.219:229): avc: denied { read } for pid=1021 comm="syz.1.234" name="loop-control" dev="devtmpfs" ino=48 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 65.400295][ T311] usb 3-1: New USB device found, idVendor=0451, idProduct=505f, bcdDevice= 1.00 [ 65.422807][ T36] audit: type=1400 audit(1794088692.219:230): avc: denied { open } for pid=1021 comm="syz.1.234" path="/dev/loop-control" dev="devtmpfs" ino=48 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 65.433534][ T311] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 65.456934][ T36] audit: type=1400 audit(1794088692.219:231): avc: denied { ioctl } for pid=1021 comm="syz.1.234" path="/dev/loop-control" dev="devtmpfs" ino=48 ioctlcmd=0x4c80 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 65.465087][ T311] usb 3-1: Product: syz [ 65.497027][ T311] usb 3-1: Manufacturer: syz [ 65.502640][ T311] usb 3-1: SerialNumber: syz [ 65.558551][ T310] usb 4-1: new high-speed USB device number 12 using dummy_hcd [ 65.570178][ T1028] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=3070988179 (3070988179 ns) > initial count (1876204212 ns). Using initial count to start timer. [ 65.671558][ T36] audit: type=1400 audit(1794088692.509:232): avc: denied { block_suspend } for pid=1038 comm="syz.1.242" capability=36 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 65.709869][ T310] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 65.720298][ T310] usb 4-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 65.729654][ T310] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 65.738972][ T310] usb 4-1: config 0 descriptor?? [ 65.784249][ T46] tipc: Subscription rejected, illegal request [ 65.805232][ T310] usb 3-1: USB disconnect, device number 11 [ 65.938603][ T613] usb 2-1: new high-speed USB device number 14 using dummy_hcd [ 66.089884][ T613] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 66.100854][ T613] usb 2-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 66.109942][ T613] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 66.118904][ T613] usb 2-1: config 0 descriptor?? [ 66.346627][ T36] audit: type=1400 audit(1794088693.179:233): avc: denied { mount } for pid=1045 comm="syz.2.245" name="/" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=filesystem permissive=1 [ 66.368989][ T36] audit: type=1400 audit(1794088693.179:234): avc: denied { write } for pid=1045 comm="syz.2.245" name="trace_marker" dev="tracefs" ino=1066 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=file permissive=1 [ 66.392327][ T36] audit: type=1400 audit(1794088693.179:235): avc: denied { open } for pid=1045 comm="syz.2.245" path="/62/mnt/trace_marker" dev="tracefs" ino=1066 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=file permissive=1 [ 66.416095][ T36] audit: type=1400 audit(1794088693.209:236): avc: denied { unmount } for pid=295 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=filesystem permissive=1 [ 66.440892][ T1048] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=3070988179 (3070988179 ns) > initial count (1876204212 ns). Using initial count to start timer. [ 66.527901][ T613] keytouch 0003:0926:3333.000F: fixing up Keytouch IEC report descriptor [ 66.549032][ T613] input: HID 0926:3333 as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/0003:0926:3333.000F/input/input10 [ 66.645259][ T613] keytouch 0003:0926:3333.000F: input,hidraw0: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.1-1/input0 [ 66.728710][ T36] audit: type=1400 audit(1794088693.569:237): avc: denied { ioctl } for pid=1061 comm="syz.2.251" path="anon_inode:[userfaultfd]" dev="anon_inodefs" ino=5951 ioctlcmd=0xaa3f scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 66.891516][ T1069] sd 0:0:1:0: device reset [ 67.033313][ T613] usb 2-1: USB disconnect, device number 14 [ 67.781579][ T1095] usb usb1: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 68.632378][ T310] usb 4-1: USB disconnect, device number 12 [ 68.873069][ T36] audit: type=1400 audit(1794088695.709:238): avc: denied { watch watch_reads } for pid=1125 comm="syz.0.272" path="/66" dev="tmpfs" ino=359 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 68.941673][ T36] audit: type=1400 audit(1794088695.779:239): avc: denied { mount } for pid=1131 comm="syz.1.282" name="/" dev="ramfs" ino=6828 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ramfs_t tclass=filesystem permissive=1 [ 69.024297][ T36] audit: type=1400 audit(1794088695.859:240): avc: denied { read } for pid=1138 comm="syz.1.276" name="dynamic_events" dev="tracefs" ino=1053 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=file permissive=1 [ 69.488595][ T310] usb 2-1: new high-speed USB device number 15 using dummy_hcd [ 69.688539][ T310] usb 2-1: Using ep0 maxpacket: 8 [ 69.695317][ T310] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 69.706522][ T310] usb 2-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 69.717149][ T310] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 69.731588][ T310] usb 2-1: config 0 descriptor?? [ 69.916391][ T36] audit: type=1400 audit(1794088696.749:241): avc: denied { read } for pid=1154 comm="syz.0.284" name="usbmon0" dev="devtmpfs" ino=90 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 70.869456][ T36] audit: type=1400 audit(1794088696.749:242): avc: denied { open } for pid=1154 comm="syz.0.284" path="/dev/usbmon0" dev="devtmpfs" ino=90 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 71.551299][ T1168] netlink: 'syz.3.289': attribute type 4 has an invalid length. [ 71.918525][ T31] usb 1-1: new high-speed USB device number 9 using dummy_hcd [ 72.084159][ T31] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 72.097244][ T31] usb 1-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 72.110949][ T31] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 72.128708][ T31] usb 1-1: config 0 descriptor?? [ 72.334004][ T311] usb 2-1: USB disconnect, device number 15 [ 72.409815][ T31] usbhid 1-1:0.0: can't add hid device: -71 [ 72.423242][ T31] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 72.438920][ T31] usb 1-1: USB disconnect, device number 9 [ 73.306381][ T36] audit: type=1400 audit(1794088700.139:243): avc: denied { setopt } for pid=1187 comm="syz.2.296" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 73.398518][ T31] usb 1-1: new high-speed USB device number 10 using dummy_hcd [ 73.563487][ T31] usb 1-1: too many endpoints for config 1 interface 0 altsetting 13: 33, using maximum allowed: 30 [ 73.598866][ T31] usb 1-1: config 1 interface 0 altsetting 13 has 1 endpoint descriptor, different from the interface descriptor's value: 33 [ 73.633835][ T31] usb 1-1: config 1 interface 0 has no altsetting 0 [ 73.658050][ T31] usb 1-1: string descriptor 0 read error: -22 [ 73.675305][ T31] usb 1-1: New USB device found, idVendor=0458, idProduct=5013, bcdDevice= 0.40 [ 73.699780][ T31] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 74.238534][ T36] audit: type=1400 audit(1794088701.039:244): avc: denied { map } for pid=1202 comm="syz.3.301" path="/64/dev/sda" dev="devtmpfs" ino=89 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 74.698927][ T31] input: HID 0458:5013 as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/0003:0458:5013.0010/input/input11 [ 74.712042][ T31] input: HID 0458:5013 as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/0003:0458:5013.0010/input/input12 [ 74.774993][ T31] kye 0003:0458:5013.0010: input,hiddev96,hidraw0: USB HID v0.04 Device [HID 0458:5013] on usb-dummy_hcd.0-1/input0 [ 74.823160][ T31] usb 1-1: USB disconnect, device number 10 [ 75.269028][ T1210] fido_id[1210]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.0/usb1/report_descriptor': No such file or directory [ 76.147338][ T36] audit: type=1400 audit(1794088702.979:245): avc: denied { mount } for pid=1223 comm="syz.2.307" name="/" dev="sda1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 76.360918][ T1224] syz.2.307 (pid 1224) is setting deprecated v1 encryption policy; recommend upgrading to v2. [ 76.458659][ T9] usb 2-1: new high-speed USB device number 16 using dummy_hcd [ 76.639886][ T9] usb 2-1: config 2 has an invalid descriptor of length 0, skipping remainder of the config [ 76.664389][ T9] usb 2-1: config 2 interface 0 altsetting 0 has 4 endpoint descriptors, different from the interface descriptor's value: 5 [ 76.692600][ T9] usb 2-1: config 2 has an invalid descriptor of length 0, skipping remainder of the config [ 76.704464][ T9] usb 2-1: config 2 interface 0 altsetting 0 has 4 endpoint descriptors, different from the interface descriptor's value: 5 [ 76.708542][ T31] usb 1-1: new high-speed USB device number 11 using dummy_hcd [ 76.941524][ T31] usb 1-1: New USB device found, idVendor=0cf2, idProduct=6250, bcdDevice= 0.00 [ 77.065047][ T31] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 77.131085][ T31] usb 1-1: Product: syz [ 77.158019][ T31] usb 1-1: Manufacturer: syz [ 77.200820][ T31] usb 1-1: SerialNumber: syz [ 77.302768][ T31] usb-storage 1-1:1.0: USB Mass Storage device detected [ 77.515542][ T31] scsi host1: usb-storage 1-1:1.0 [ 77.562467][ T9] usb 2-1: New USB device found, idVendor=0451, idProduct=505f, bcdDevice= 1.00 [ 77.588463][ T9] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 77.596594][ T9] usb 2-1: Product: syz [ 77.600905][ T9] usb 2-1: Manufacturer: syz [ 77.605522][ T9] usb 2-1: SerialNumber: syz [ 77.856649][ T31] usb 3-1: new high-speed USB device number 12 using dummy_hcd [ 77.859786][ T1251] sd 0:0:1:0: device reset [ 77.895109][ T46] tipc: Subscription rejected, illegal request [ 77.958836][ T9] usb 2-1: USB disconnect, device number 16 [ 78.319874][ T31] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 78.331061][ T31] usb 3-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 78.340170][ T31] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 78.349144][ T31] usb 3-1: config 0 descriptor?? [ 78.516159][ T36] audit: type=1400 audit(1794088705.349:246): avc: denied { read write } for pid=1258 comm="syz.1.319" name="control" dev="devtmpfs" ino=198 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:lvm_control_t tclass=chr_file permissive=1 [ 78.518819][ T1259] device-mapper: table: 252:0: raid: unknown target type [ 78.540123][ T36] audit: type=1400 audit(1794088705.349:247): avc: denied { open } for pid=1258 comm="syz.1.319" path="/dev/mapper/control" dev="devtmpfs" ino=198 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:lvm_control_t tclass=chr_file permissive=1 [ 78.547328][ T1259] device-mapper: ioctl: error adding target to table [ 78.580249][ T31] usbhid 3-1:0.0: can't add hid device: -71 [ 78.593841][ T36] audit: type=1400 audit(1794088705.349:248): avc: denied { ioctl } for pid=1258 comm="syz.1.319" path="/dev/mapper/control" dev="devtmpfs" ino=198 ioctlcmd=0xfd03 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:lvm_control_t tclass=chr_file permissive=1 [ 78.627425][ T31] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 78.643102][ T31] usb 3-1: USB disconnect, device number 12 [ 78.749147][ T36] audit: type=1400 audit(1794088705.589:249): avc: denied { map } for pid=1269 comm="syz.1.323" path="socket:[7474]" dev="sockfs" ino=7474 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=udp_socket permissive=1 [ 78.844960][ T36] audit: type=1400 audit(1794088705.679:250): avc: denied { read write } for pid=1272 comm="syz.1.324" name="vhost-vsock" dev="devtmpfs" ino=200 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 78.869540][ T36] audit: type=1400 audit(1794088705.679:251): avc: denied { open } for pid=1272 comm="syz.1.324" path="/dev/vhost-vsock" dev="devtmpfs" ino=200 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 78.893787][ T36] audit: type=1400 audit(1794088705.679:252): avc: denied { ioctl } for pid=1272 comm="syz.1.324" path="/dev/vhost-vsock" dev="devtmpfs" ino=200 ioctlcmd=0xaf01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 78.942903][ T1280] netlink: 80 bytes leftover after parsing attributes in process `syz.1.326'. [ 79.098867][ T31] usb 3-1: new high-speed USB device number 13 using dummy_hcd [ 79.261645][ T31] usb 3-1: too many endpoints for config 1 interface 0 altsetting 13: 33, using maximum allowed: 30 [ 79.273106][ T31] usb 3-1: config 1 interface 0 altsetting 13 has 1 endpoint descriptor, different from the interface descriptor's value: 33 [ 79.286388][ T31] usb 3-1: config 1 interface 0 has no altsetting 0 [ 79.297719][ T31] usb 3-1: string descriptor 0 read error: -22 [ 79.304251][ T31] usb 3-1: New USB device found, idVendor=0458, idProduct=5013, bcdDevice= 0.40 [ 79.313911][ T31] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 79.672302][ T1292] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=3070988179 (3070988179 ns) > initial count (1876204212 ns). Using initial count to start timer. [ 79.908478][ T31] input: HID 0458:5013 as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/0003:0458:5013.0011/input/input13 [ 79.943005][ T31] input: HID 0458:5013 as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/0003:0458:5013.0011/input/input14 [ 80.006050][ T31] kye 0003:0458:5013.0011: input,hiddev96,hidraw0: USB HID v0.04 Device [HID 0458:5013] on usb-dummy_hcd.2-1/input0 [ 80.312687][ T66] usb 3-1: USB disconnect, device number 13 [ 80.598551][ T31] usb 2-1: new high-speed USB device number 17 using dummy_hcd [ 80.739256][ T486] usb 1-1: USB disconnect, device number 11 [ 80.748798][ T31] usb 2-1: Using ep0 maxpacket: 16 [ 80.755661][ T31] usb 2-1: unable to get BOS descriptor or descriptor too short [ 80.764321][ T31] usb 2-1: config 0 has an invalid interface number: 223 but max is 0 [ 80.772604][ T31] usb 2-1: config 0 has no interface number 0 [ 80.778785][ T31] usb 2-1: config 0 interface 223 has no altsetting 0 [ 80.788232][ T31] usb 2-1: New USB device found, idVendor=13d8, idProduct=0021, bcdDevice=c4.49 [ 80.797501][ T31] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 80.805548][ T31] usb 2-1: Product: syz [ 80.809894][ T31] usb 2-1: Manufacturer: syz [ 80.814494][ T31] usb 2-1: SerialNumber: syz [ 80.819834][ T31] usb 2-1: config 0 descriptor?? [ 81.045080][ T31] usb 2-1: USB disconnect, device number 17 [ 82.546732][ T9] usb 3-1: new high-speed USB device number 14 using dummy_hcd [ 82.650357][ T36] audit: type=1400 audit(1794088709.489:253): avc: denied { create } for pid=1351 comm="syz.0.355" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 82.671822][ T36] audit: type=1400 audit(1794088709.489:254): avc: denied { write } for pid=1351 comm="syz.0.355" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 82.708615][ T9] usb 3-1: Using ep0 maxpacket: 32 [ 82.715812][ T9] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x82 has invalid wMaxPacketSize 0 [ 82.726359][ T9] usb 3-1: config 0 interface 0 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 0 [ 82.736770][ T9] usb 3-1: config 0 interface 0 has no altsetting 0 [ 82.746028][ T9] usb 3-1: New USB device found, idVendor=16d0, idProduct=10b8, bcdDevice=de.8e [ 82.755778][ T9] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 82.765082][ T9] usb 3-1: Product: syz [ 82.769885][ T9] usb 3-1: Manufacturer: syz [ 82.774652][ T9] usb 3-1: SerialNumber: syz [ 82.792296][ T9] usb 3-1: config 0 descriptor?? [ 82.978615][ T31] usb 4-1: new high-speed USB device number 13 using dummy_hcd [ 83.128610][ T31] usb 4-1: Using ep0 maxpacket: 32 [ 83.135486][ T31] usb 4-1: unable to get BOS descriptor or descriptor too short [ 83.145225][ T31] usb 4-1: config 14 has an invalid interface number: 103 but max is 0 [ 83.153770][ T31] usb 4-1: config 14 has no interface number 0 [ 83.160174][ T31] usb 4-1: config 14 interface 103 has no altsetting 0 [ 83.168994][ T31] usb 4-1: New USB device found, idVendor=1f4d, idProduct=d220, bcdDevice=cc.9b [ 83.178146][ T31] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 83.186855][ T31] usb 4-1: Product: syz [ 83.192483][ T31] usb 4-1: Manufacturer: syz [ 83.197952][ T31] usb 4-1: SerialNumber: syz [ 83.429522][ T31] usb 4-1: USB disconnect, device number 13 [ 83.456410][ T1367] ======================================================= [ 83.456410][ T1367] WARNING: The mand mount option has been deprecated and [ 83.456410][ T1367] and is ignored by this kernel. Remove the mand [ 83.456410][ T1367] option from the mount to silence this warning. [ 83.456410][ T1367] ======================================================= [ 83.525924][ T36] audit: type=1400 audit(1794088710.359:255): avc: denied { unmount } for pid=294 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 84.040112][ T31] usb 2-1: new high-speed USB device number 18 using dummy_hcd [ 84.224700][ T31] usb 2-1: config 2 has an invalid descriptor of length 0, skipping remainder of the config [ 84.238403][ T31] usb 2-1: config 2 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 5 [ 84.258029][ T1385] FAULT_INJECTION: forcing a failure. [ 84.258029][ T1385] name failslab, interval 1, probability 0, space 0, times 0 [ 84.271740][ T1385] CPU: 1 UID: 0 PID: 1385 Comm: syz.3.367 Not tainted syzkaller #0 ff996278633adec6fd25d1632b496761701c4fe9 [ 84.271778][ T1385] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/15/2026 [ 84.271803][ T1385] Call Trace: [ 84.271811][ T1385] [ 84.271821][ T1385] __dump_stack+0x21/0x30 [ 84.271859][ T1385] dump_stack_lvl+0x140/0x1c0 [ 84.271880][ T1385] ? __cfi_dump_stack_lvl+0x10/0x10 [ 84.271902][ T1385] ? __kasan_check_read+0x15/0x20 [ 84.271931][ T1385] ? ring_buffer_unlock_commit+0x473/0x5e0 [ 84.271961][ T1385] dump_stack+0x19/0x20 [ 84.271980][ T1385] should_fail_ex+0x3c2/0x510 [ 84.272001][ T1385] ? __register_sysctl_table+0x7c/0x1440 [ 84.272028][ T1385] should_failslab+0xac/0x100 [ 84.272050][ T1385] __kmalloc_noprof+0x69/0x510 [ 84.272076][ T1385] ? __register_sysctl_table+0x7c/0x1440 [ 84.272102][ T1385] ? xfrm_sysctl_init+0xd9/0x300 [ 84.272126][ T1385] __register_sysctl_table+0x7c/0x1440 [ 84.272153][ T1385] register_net_sysctl_sz+0x245/0x260 [ 84.272182][ T1385] xfrm_sysctl_init+0x19d/0x300 [ 84.272206][ T1385] ? xfrm_hash_alloc+0x46/0x150 [ 84.272227][ T1385] xfrm_net_init+0x968/0xf80 [ 84.272254][ T1385] ? __cfi_xfrm_net_init+0x10/0x10 [ 84.272279][ T1385] ? proc_create_seq_private+0x16a/0x1c0 [ 84.272300][ T1385] ops_init+0x302/0x5d0 [ 84.272321][ T1385] ? __kasan_check_write+0x18/0x20 [ 84.272347][ T1385] ? rwsem_read_trylock+0x275/0x5a0 [ 84.272373][ T1385] setup_net+0x227/0x9b0 [ 84.272401][ T1385] ? copy_net_ns+0xa20/0xa20 [ 84.272428][ T1385] ? down_read_killable+0x7f/0x100 [ 84.272456][ T1385] ? __cfi_down_read_killable+0x10/0x10 [ 84.272483][ T1385] copy_net_ns+0x4fc/0xa20 [ 84.272511][ T1385] create_new_namespaces+0x390/0x6f0 [ 84.272533][ T1385] unshare_nsproxy_namespaces+0x124/0x180 [ 84.272556][ T1385] ksys_unshare+0x4f9/0x920 [ 84.272577][ T1385] ? __cfi_ksys_unshare+0x10/0x10 [ 84.272597][ T1385] ? trace_event_raw_event_sys_enter+0xf5/0x130 [ 84.272624][ T1385] __x64_sys_unshare+0x3c/0x50 [ 84.272643][ T1385] x64_sys_call+0x2998/0x2ee0 [ 84.272666][ T1385] do_syscall_64+0x57/0xf0 [ 84.272687][ T1385] ? clear_bhb_loop+0x50/0xa0 [ 84.272714][ T1385] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 84.272740][ T1385] RIP: 0033:0x7f764139fb19 [ 84.272765][ T1385] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 84.272783][ T1385] RSP: 002b:00007f7642212028 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 84.272821][ T1385] RAX: ffffffffffffffda RBX: 00007f7641625fa0 RCX: 00007f764139fb19 [ 84.272838][ T1385] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000040000000 [ 84.272854][ T1385] RBP: 00007f7641437b70 R08: 0000000000000000 R09: 0000000000000000 [ 84.272869][ T1385] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 84.272884][ T1385] R13: 00007f7641626038 R14: 00007f7641625fa0 R15: 00007ffe1074ae98 [ 84.272903][ T1385] [ 84.273030][ T31] usb 2-1: config 2 has an invalid descriptor of length 0, skipping remainder of the config [ 84.587560][ T31] usb 2-1: config 2 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 5 [ 84.615691][ T31] usb 2-1: New USB device found, idVendor=0451, idProduct=505f, bcdDevice= 1.00 [ 84.625956][ T31] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 84.634147][ T31] usb 2-1: Product: syz [ 84.638620][ T31] usb 2-1: Manufacturer: syz [ 84.643233][ T31] usb 2-1: SerialNumber: syz [ 84.958523][ T445] tipc: Subscription rejected, illegal request [ 84.987186][ T31] usb 2-1: USB disconnect, device number 18 [ 85.234214][ T66] usb 3-1: USB disconnect, device number 14 [ 85.282525][ T36] audit: type=1400 audit(1794088712.119:256): avc: denied { wake_alarm } for pid=1396 comm="syz.2.371" capability=35 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 87.101243][ T66] usb 3-1: new high-speed USB device number 15 using dummy_hcd [ 87.148246][ T36] audit: type=1400 audit(1794088713.459:257): avc: denied { write } for pid=1411 comm="syz.3.376" name="kmsg" dev="devtmpfs" ino=9 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kmsg_device_t tclass=chr_file permissive=1 [ 87.581686][ T66] usb 3-1: Using ep0 maxpacket: 32 [ 87.603332][ T66] usb 3-1: config 0 has an invalid interface number: 184 but max is 0 [ 88.588482][ T66] usb 3-1: config 0 has no interface number 0 [ 88.594628][ T66] usb 3-1: config 0 interface 184 has no altsetting 0 [ 89.302513][ T66] usb 3-1: string descriptor 0 read error: -71 [ 89.315912][ T66] usb 3-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 89.325761][ T66] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 89.424929][ T66] usb 3-1: config 0 descriptor?? [ 89.430845][ T66] usb 3-1: can't set config #0, error -71 [ 89.648506][ T487] usb 2-1: new high-speed USB device number 19 using dummy_hcd [ 89.752559][ T66] usb 3-1: USB disconnect, device number 15 [ 89.809908][ T487] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 89.821478][ T487] usb 2-1: New USB device found, idVendor=056a, idProduct=033b, bcdDevice= 0.00 [ 89.830700][ T487] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 90.829308][ T66] usb 4-1: new high-speed USB device number 14 using dummy_hcd [ 90.837483][ C1] raw-gadget.1 gadget.3: ignoring, device is not running [ 91.906030][ T487] wacom 0003:056A:033B.0012: Unknown device_type for 'HID 056a:033b'. Assuming pen. [ 91.927585][ T487] wacom 0003:056A:033B.0012: hidraw0: USB HID v1.11 Device [HID 056a:033b] on usb-dummy_hcd.1-1/input0 [ 91.954717][ T487] input: Wacom Intuos S 2 Pen as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/0003:056A:033B.0012/input/input15 [ 92.878487][ T66] usb 4-1: Using ep0 maxpacket: 32 [ 92.898320][ T66] usb 4-1: config 0 has an invalid interface number: 67 but max is 0 [ 92.920353][ T66] usb 4-1: config 0 has no interface number 0 [ 92.936618][ T66] usb 4-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 92.962084][ T66] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 92.971381][ T487] usb 2-1: USB disconnect, device number 19 [ 92.998082][ T66] usb 4-1: Product: syz [ 93.008665][ T66] usb 4-1: Manufacturer: syz [ 93.013924][ T66] usb 4-1: SerialNumber: syz [ 93.028488][ T66] usb 4-1: config 0 descriptor?? [ 93.043597][ T66] smsc95xx v2.0.0 [ 93.449078][ T66] smsc95xx 4-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -32 [ 93.461081][ T66] smsc95xx 4-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 93.539429][ T1493] block device autoloading is deprecated and will be removed. [ 93.550755][ T36] audit: type=1400 audit(1794088720.389:258): avc: denied { create } for pid=1492 comm="syz.2.406" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 93.571776][ T36] audit: type=1400 audit(1794088720.389:259): avc: denied { getopt } for pid=1492 comm="syz.2.406" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 93.713344][ T66] smsc95xx 4-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -61 [ 93.726915][ T66] smsc95xx 4-1:0.67: probe with driver smsc95xx failed with error -61 [ 93.826965][ T1505] netlink: 60 bytes leftover after parsing attributes in process `syz.2.411'. [ 93.838386][ T36] audit: type=1400 audit(1794088720.669:260): avc: denied { create } for pid=1503 comm="syz.2.411" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_dnrt_socket permissive=1 [ 93.858807][ T36] audit: type=1400 audit(1794088720.679:261): avc: denied { create } for pid=1503 comm="syz.2.411" name="file1" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 93.880593][ T36] audit: type=1400 audit(1794088720.679:262): avc: denied { create } for pid=1503 comm="syz.2.411" name="file5" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 93.902988][ T36] audit: type=1400 audit(1794088720.679:263): avc: denied { read } for pid=1503 comm="syz.2.411" name="file1" dev="tmpfs" ino=589 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 95.002883][ T36] audit: type=1400 audit(1794088721.839:264): avc: denied { unlink } for pid=295 comm="syz-executor" name="file5" dev="tmpfs" ino=593 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 95.067968][ T487] usb 4-1: USB disconnect, device number 14 [ 95.097108][ T36] audit: type=1400 audit(1794088721.839:265): avc: denied { unlink } for pid=295 comm="syz-executor" name="file1" dev="tmpfs" ino=589 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 95.122027][ T36] audit: type=1400 audit(1794088721.889:266): avc: denied { mounton } for pid=1514 comm="syz.2.414" path="/syzcgroup/unified/syz2" dev="cgroup2" ino=113 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=dir permissive=1 [ 95.416976][ T36] audit: type=1400 audit(1794088722.249:267): avc: denied { create } for pid=1541 comm="syz.1.426" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 95.628571][ T487] usb 1-1: new full-speed USB device number 12 using dummy_hcd [ 95.648595][ T66] usb 3-1: new high-speed USB device number 16 using dummy_hcd [ 95.779506][ T487] usb 1-1: not running at top speed; connect to a high speed hub [ 95.788241][ T487] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 95.799939][ T487] usb 1-1: New USB device found, idVendor=225a, idProduct=e1d4, bcdDevice=a7.ad [ 95.808509][ T66] usb 3-1: Using ep0 maxpacket: 16 [ 95.809262][ T487] usb 1-1: New USB device strings: Mfr=245, Product=210, SerialNumber=0 [ 95.815952][ T66] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 95.823002][ T487] usb 1-1: Product: syz [ 95.833045][ T66] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 95.837586][ T487] usb 1-1: Manufacturer: syz [ 95.849077][ T66] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 95.854006][ T487] usb 1-1: Found UVC 1.00 device syz (225a:e1d4) [ 95.867738][ T66] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 95.867802][ T487] usb 1-1: No streaming interface found for terminal 2. [ 95.877519][ T66] usb 3-1: Product: syz [ 95.889473][ T66] usb 3-1: Manufacturer: syz [ 95.894182][ T66] usb 3-1: SerialNumber: syz [ 96.098816][ T1532] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 96.106237][ T66] usb 3-1: 0:2 : does not exist [ 96.113457][ T1532] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 96.117085][ T66] usb 3-1: 5:0: failed to get current value for ch 0 (-22) [ 96.137589][ T66] usb 3-1: USB disconnect, device number 16 [ 96.150239][ T424] udevd[424]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 96.150584][ T487] usb 1-1: USB disconnect, device number 12 [ 96.374051][ T1562] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 96.390105][ T1563] rust_binder: 1561:1563 transaction async to 0:0 failed EINVAL, code 2 size 96-0 line process.rs:950 [ 96.398957][ T1566] rust_binder: 1561:1566 transaction async to 0:0 failed EINVAL, code 2 size 96-0 line process.rs:950 [ 96.413462][ T1562] rust_binder: 1561:1562 BC_CLEAR_FREEZE_NOTIFICATION freeze notification cookie mismatch [ 96.426468][ T1562] rust_binder: Write failure EINVAL in pid:245 [ 96.988625][ T487] usb 1-1: new high-speed USB device number 13 using dummy_hcd [ 97.138562][ T487] usb 1-1: Using ep0 maxpacket: 32 [ 97.145324][ T487] usb 1-1: config 0 has an invalid interface number: 20 but max is 0 [ 97.153918][ T487] usb 1-1: config 0 has no interface number 0 [ 97.160694][ T487] usb 1-1: config 0 interface 20 altsetting 0 bulk endpoint 0x6 has invalid maxpacket 1023 [ 97.171261][ T487] usb 1-1: config 0 interface 20 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 97.181897][ T487] usb 1-1: config 0 interface 20 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0 [ 97.193845][ T487] usb 1-1: New USB device found, idVendor=04e6, idProduct=000b, bcdDevice= 1.00 [ 97.203037][ T487] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 97.211092][ T487] usb 1-1: Product: syz [ 97.215447][ T487] usb 1-1: Manufacturer: syz [ 97.220204][ T487] usb 1-1: SerialNumber: syz [ 97.225569][ T487] usb 1-1: config 0 descriptor?? [ 97.231074][ T1579] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 97.441045][ T1579] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 97.449887][ T1579] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 97.461285][ T487] usb-storage 1-1:0.20: USB Mass Storage device detected [ 97.469958][ T487] usb-storage 1-1:0.20: Quirks match for vid 04e6 pid 000b: 4 [ 97.478013][ T487] scsi host1: usb-storage 1-1:0.20 [ 97.486813][ T487] usb 1-1: USB disconnect, device number 13 [ 97.508691][ T66] usb 2-1: new high-speed USB device number 20 using dummy_hcd [ 97.538554][ T613] usb 4-1: new full-speed USB device number 15 using dummy_hcd [ 97.659939][ T66] usb 2-1: config 0 has an invalid interface number: 18 but max is 0 [ 97.668854][ T66] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 97.679604][ T66] usb 2-1: config 0 has no interface number 0 [ 97.686155][ T66] usb 2-1: New USB device found, idVendor=050d, idProduct=011b, bcdDevice=6f.a4 [ 97.695863][ T66] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 97.701518][ T613] usb 4-1: New USB device found, idVendor=0d8c, idProduct=0103, bcdDevice= 0.40 [ 97.705515][ T66] usb 2-1: config 0 descriptor?? [ 97.717238][ T613] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 97.720715][ T66] usb 2-1: bad CDC descriptors [ 97.728995][ T613] usb 4-1: Product: syz [ 97.737587][ T613] usb 4-1: Manufacturer: syz [ 97.742502][ T613] usb 4-1: SerialNumber: syz [ 97.818569][ T9] usb 3-1: new high-speed USB device number 17 using dummy_hcd [ 97.923657][ T487] usb 2-1: USB disconnect, device number 20 [ 97.952327][ T613] usb 4-1: Can't get UAC3 power state for id 10 [ 97.960838][ T613] usb 4-1: 2:0: failed to get current value for ch 0 (-71) [ 97.970089][ T9] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 97.981390][ T9] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 97.992728][ T9] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 98.006602][ T613] usb 4-1: 2:0: cannot get min/max values for control 2 (id 2) [ 98.015658][ T9] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 98.025512][ T9] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 98.037238][ T613] usb 4-1: USB disconnect, device number 15 [ 98.053550][ T9] usb 3-1: config 0 descriptor?? [ 98.061800][ T454] udevd[454]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 98.228593][ T66] usb 1-1: new high-speed USB device number 14 using dummy_hcd [ 98.378547][ T66] usb 1-1: Using ep0 maxpacket: 32 [ 98.385878][ T66] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 98.399508][ T66] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 98.409861][ T66] usb 1-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 98.419142][ T66] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 98.429607][ T66] usb 1-1: config 0 descriptor?? [ 98.443182][ T66] hub 1-1:0.0: USB hub found [ 98.642379][ T1611] 9pnet_fd: Insufficient options for proto=fd [ 98.647513][ T36] kauditd_printk_skb: 11 callbacks suppressed [ 98.647533][ T36] audit: type=1400 audit(1794088725.479:279): avc: denied { accept } for pid=1596 comm="syz.0.448" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_route_socket permissive=1 [ 98.683353][ T36] audit: type=1400 audit(1794088725.519:280): avc: denied { lock } for pid=1612 comm="syz.1.455" path="socket:[8644]" dev="sockfs" ino=8644 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=udp_socket permissive=1 [ 98.721783][ T9] usbhid 3-1:0.0: can't add hid device: -71 [ 98.730669][ T66] hub 1-1:0.0: 1 port detected [ 98.734607][ T9] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 98.749553][ T9] usb 3-1: USB disconnect, device number 17 [ 99.117723][ T36] audit: type=1400 audit(1794088725.949:281): avc: denied { mount } for pid=1623 comm="syz.1.458" name="/" dev="bpf" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bpf_t tclass=filesystem permissive=1 [ 99.434791][ T1636] FAULT_INJECTION: forcing a failure. [ 99.434791][ T1636] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 99.448648][ T1636] CPU: 1 UID: 0 PID: 1636 Comm: syz.3.462 Not tainted syzkaller #0 ff996278633adec6fd25d1632b496761701c4fe9 [ 99.448682][ T1636] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/15/2026 [ 99.448696][ T1636] Call Trace: [ 99.448705][ T1636] [ 99.448715][ T1636] __dump_stack+0x21/0x30 [ 99.448739][ T1636] dump_stack_lvl+0x140/0x1c0 [ 99.448761][ T1636] ? __cfi_dump_stack_lvl+0x10/0x10 [ 99.448782][ T1636] ? check_stack_object+0x138/0x150 [ 99.448810][ T1636] dump_stack+0x19/0x20 [ 99.448828][ T1636] should_fail_ex+0x3c2/0x510 [ 99.448847][ T1636] should_fail+0xf/0x20 [ 99.448865][ T1636] should_fail_usercopy+0x1e/0x30 [ 99.448884][ T1636] _copy_to_user+0x24/0xa0 [ 99.448907][ T1636] simple_read_from_buffer+0xed/0x160 [ 99.448932][ T1636] proc_fail_nth_read+0x1aa/0x220 [ 99.448957][ T1636] ? __cfi_proc_fail_nth_read+0x10/0x10 [ 99.448982][ T1636] ? bpf_lsm_file_permission+0xd/0x20 [ 99.449004][ T1636] ? __cfi_proc_fail_nth_read+0x10/0x10 [ 99.449027][ T1636] vfs_read+0x28b/0xc70 [ 99.449052][ T1636] ? rb_commit+0x753/0x7b0 [ 99.449079][ T1636] ? __cfi_vfs_read+0x10/0x10 [ 99.449113][ T1636] ? __kasan_check_write+0x18/0x20 [ 99.449140][ T1636] ? mutex_lock+0x97/0x1d0 [ 99.449164][ T1636] ? __cfi_mutex_lock+0x10/0x10 [ 99.449190][ T1636] ksys_read+0x145/0x260 [ 99.449216][ T1636] ? __cfi_ksys_read+0x10/0x10 [ 99.449243][ T1636] ? trace_event_raw_event_sys_enter+0xf5/0x130 [ 99.449269][ T1636] __x64_sys_read+0x7f/0x90 [ 99.449287][ T1636] x64_sys_call+0x2638/0x2ee0 [ 99.449309][ T1636] do_syscall_64+0x57/0xf0 [ 99.449329][ T1636] ? clear_bhb_loop+0x50/0xa0 [ 99.449364][ T1636] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 99.449389][ T1636] RIP: 0033:0x7f764136034e [ 99.449406][ T1636] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 99.449423][ T1636] RSP: 002b:00007f7642211fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 99.449448][ T1636] RAX: ffffffffffffffda RBX: 00007f76422126c0 RCX: 00007f764136034e [ 99.449465][ T1636] RDX: 000000000000000f RSI: 00007f76422120a0 RDI: 0000000000000003 [ 99.449480][ T1636] RBP: 00007f7642212090 R08: 0000000000000000 R09: 0000000000000000 [ 99.449494][ T1636] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 99.449509][ T1636] R13: 00007f7641626038 R14: 00007f7641625fa0 R15: 00007ffe1074ae98 [ 99.449527][ T1636] [ 99.877187][ T36] audit: type=1400 audit(1794088726.709:282): avc: denied { execute } for pid=1642 comm="syz.1.465" path="/130/dev/ram0" dev="devtmpfs" ino=32 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 99.904580][ T36] audit: type=1400 audit(1794088726.739:283): avc: denied { map } for pid=1642 comm="syz.1.465" path="socket:[9541]" dev="sockfs" ino=9541 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 99.929485][ T36] audit: type=1400 audit(1794088726.739:284): avc: denied { read accept } for pid=1642 comm="syz.1.465" path="socket:[9541]" dev="sockfs" ino=9541 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 99.954318][ T36] audit: type=1400 audit(1794088726.739:285): avc: denied { create } for pid=1642 comm="syz.1.465" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=atmpvc_socket permissive=1 [ 99.960550][ T66] hub 1-1:0.0: hub_hub_status failed (err = -32) [ 99.976702][ T36] audit: type=1400 audit(1794088726.759:286): avc: denied { unlink } for pid=294 comm="syz-executor" name="media0" dev="devtmpfs" ino=636 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 99.980476][ T66] hub 1-1:0.0: config failed, can't get hub status (err -32) [ 100.012642][ T66] usbhid 1-1:0.0: can't add hid device: -32 [ 100.018993][ T66] usbhid 1-1:0.0: probe with driver usbhid failed with error -32 [ 100.258004][ T36] audit: type=1400 audit(1794088727.089:287): avc: denied { mounton } for pid=1655 comm="syz-executor" path="/" dev="sda1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:root_t tclass=dir permissive=1 [ 100.309596][ T36] audit: type=1400 audit(1794088727.119:288): avc: denied { create } for pid=1655 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 100.373961][ T1655] bridge0: port 1(bridge_slave_0) entered blocking state [ 100.381114][ T1655] bridge0: port 1(bridge_slave_0) entered disabled state [ 100.388587][ T1655] bridge_slave_0: entered allmulticast mode [ 100.395206][ T1655] bridge_slave_0: entered promiscuous mode [ 100.402488][ T1655] bridge0: port 2(bridge_slave_1) entered blocking state [ 100.409654][ T1655] bridge0: port 2(bridge_slave_1) entered disabled state [ 100.417066][ T1655] bridge_slave_1: entered allmulticast mode [ 100.423878][ T1655] bridge_slave_1: entered promiscuous mode [ 100.457029][ T1656] kvm: emulating exchange as write [ 100.507780][ T1655] bridge0: port 2(bridge_slave_1) entered blocking state [ 100.514930][ T1655] bridge0: port 2(bridge_slave_1) entered forwarding state [ 100.522405][ T1655] bridge0: port 1(bridge_slave_0) entered blocking state [ 100.529589][ T1655] bridge0: port 1(bridge_slave_0) entered forwarding state [ 100.567409][ T309] bridge0: port 1(bridge_slave_0) entered disabled state [ 100.584981][ T309] bridge0: port 2(bridge_slave_1) entered disabled state [ 100.605988][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 100.613274][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 100.631574][ T309] bridge0: port 2(bridge_slave_1) entered blocking state [ 100.638925][ T309] bridge0: port 2(bridge_slave_1) entered forwarding state [ 100.696142][ T1655] veth0_vlan: entered promiscuous mode [ 100.715209][ T1655] veth1_macvtap: entered promiscuous mode [ 100.829185][ T1665] mmap: syz.4.469 (1665) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 100.858683][ T66] usb 4-1: new high-speed USB device number 16 using dummy_hcd [ 100.899139][ T31] usb 1-1: USB disconnect, device number 14 [ 101.040360][ T66] usb 4-1: unable to get BOS descriptor or descriptor too short [ 101.053233][ T66] usb 4-1: New USB device found, idVendor=0763, idProduct=0150, bcdDevice= 0.40 [ 101.063667][ T66] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 101.074656][ T66] usb 4-1: Product: syz [ 101.079687][ T66] usb 4-1: Manufacturer: syz [ 101.084904][ T66] usb 4-1: SerialNumber: syz [ 101.332598][ T66] usb 4-1: MIDIStreaming interface descriptor not found [ 101.368713][ T66] usb 4-1: USB disconnect, device number 16 [ 101.736960][ T1693] FAULT_INJECTION: forcing a failure. [ 101.736960][ T1693] name failslab, interval 1, probability 0, space 0, times 0 [ 101.751595][ T1693] CPU: 0 UID: 0 PID: 1693 Comm: syz.2.480 Not tainted syzkaller #0 ff996278633adec6fd25d1632b496761701c4fe9 [ 101.751630][ T1693] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/15/2026 [ 101.751645][ T1693] Call Trace: [ 101.751653][ T1693] [ 101.751662][ T1693] __dump_stack+0x21/0x30 [ 101.751687][ T1693] dump_stack_lvl+0x140/0x1c0 [ 101.751705][ T1693] ? __cfi_dump_stack_lvl+0x10/0x10 [ 101.751726][ T1693] dump_stack+0x19/0x20 [ 101.751744][ T1693] should_fail_ex+0x3c2/0x510 [ 101.751763][ T1693] should_failslab+0xac/0x100 [ 101.751783][ T1693] __kmalloc_cache_noprof+0x41/0x470 [ 101.751809][ T1693] ? alloc_fs_context+0x6f/0x800 [ 101.751831][ T1693] ? __asan_memcpy+0x5a/0x80 [ 101.751856][ T1693] alloc_fs_context+0x6f/0x800 [ 101.751876][ T1693] ? __kasan_check_write+0x18/0x20 [ 101.751901][ T1693] fs_context_for_mount+0x26/0x40 [ 101.751922][ T1693] do_new_mount+0x116/0xb40 [ 101.751947][ T1693] ? security_capable+0x44/0x130 [ 101.751968][ T1693] path_mount+0x66a/0xff0 [ 101.751987][ T1693] ? putname+0x113/0x150 [ 101.752005][ T1693] __se_sys_mount+0x2bf/0x480 [ 101.752021][ T1693] ? __x64_sys_mount+0xf0/0xf0 [ 101.752037][ T1693] ? trace_event_raw_event_sys_enter+0xf5/0x130 [ 101.752060][ T1693] __x64_sys_mount+0xc3/0xf0 [ 101.752078][ T1693] x64_sys_call+0x2021/0x2ee0 [ 101.752097][ T1693] do_syscall_64+0x57/0xf0 [ 101.752118][ T1693] ? clear_bhb_loop+0x50/0xa0 [ 101.752146][ T1693] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 101.752171][ T1693] RIP: 0033:0x7f6210d9fb19 [ 101.752191][ T1693] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 101.752216][ T1693] RSP: 002b:00007f6211b88028 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 101.752246][ T1693] RAX: ffffffffffffffda RBX: 00007f6211025fa0 RCX: 00007f6210d9fb19 [ 101.752262][ T1693] RDX: 0000200000000400 RSI: 00002000000003c0 RDI: 0000000000000000 [ 101.752278][ T1693] RBP: 00007f6211b88090 R08: 0000200000000580 R09: 0000000000000000 [ 101.752292][ T1693] R10: 0000000000008008 R11: 0000000000000246 R12: 0000000000000001 [ 101.752307][ T1693] R13: 00007f6211026038 R14: 00007f6211025fa0 R15: 00007ffe57211ae8 [ 101.752330][ T1693] [ 101.754835][ T66] usb 4-1: new high-speed USB device number 17 using dummy_hcd [ 102.118643][ T66] usb 4-1: device descriptor read/64, error -71 [ 102.360327][ T66] usb 4-1: device descriptor read/64, error -71 [ 102.458652][ T487] usb 3-1: new high-speed USB device number 18 using dummy_hcd [ 102.608583][ T66] usb 4-1: new high-speed USB device number 18 using dummy_hcd [ 102.620169][ T487] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 102.630127][ T487] usb 3-1: config 1 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 102.643090][ T487] usb 3-1: New USB device found, idVendor=04e6, idProduct=0005, bcdDevice= 1.00 [ 102.652817][ T487] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 102.661530][ T487] usb 3-1: Product: syz [ 102.665791][ T487] usb 3-1: Manufacturer: syz [ 102.670477][ T487] usb 3-1: SerialNumber: syz [ 102.677833][ T487] ums-sddr09 3-1:1.0: USB Mass Storage device detected [ 102.686162][ T487] ums-sddr09 3-1:1.0: This device (04e6,0005,0100 S 06 P 50) has an unneeded SubClass entry in unusual_devs.h (kernel syzkaller) [ 102.686162][ T487] Please send a copy of this message to and [ 102.738578][ T66] usb 4-1: device descriptor read/64, error -71 [ 102.978618][ T66] usb 4-1: device descriptor read/64, error -71 [ 103.053117][ T1752] FAULT_INJECTION: forcing a failure. [ 103.053117][ T1752] name failslab, interval 1, probability 0, space 0, times 0 [ 103.067117][ T1752] CPU: 1 UID: 0 PID: 1752 Comm: syz.0.498 Not tainted syzkaller #0 ff996278633adec6fd25d1632b496761701c4fe9 [ 103.067150][ T1752] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/15/2026 [ 103.067164][ T1752] Call Trace: [ 103.067175][ T1752] [ 103.067185][ T1752] __dump_stack+0x21/0x30 [ 103.067211][ T1752] dump_stack_lvl+0x140/0x1c0 [ 103.067230][ T1752] ? __cfi_dump_stack_lvl+0x10/0x10 [ 103.067251][ T1752] dump_stack+0x19/0x20 [ 103.067268][ T1752] should_fail_ex+0x3c2/0x510 [ 103.067287][ T1752] should_failslab+0xac/0x100 [ 103.067302][ T1752] __kmalloc_cache_noprof+0x41/0x470 [ 103.067318][ T1752] ? selinux_perf_event_alloc+0x110/0x110 [ 103.067335][ T1752] ? v9fs_mount+0xc1/0x9d0 [ 103.067353][ T1752] v9fs_mount+0xc1/0x9d0 [ 103.067372][ T1752] ? __cfi_v9fs_mount+0x10/0x10 [ 103.067392][ T1752] ? selinux_capable+0x38/0x50 [ 103.067415][ T1752] legacy_get_tree+0x106/0x1b0 [ 103.067437][ T1752] ? __cfi_v9fs_mount+0x10/0x10 [ 103.067455][ T1752] vfs_get_tree+0x9e/0x290 [ 103.067471][ T1752] do_new_mount+0x251/0xb40 [ 103.067487][ T1752] ? security_capable+0x44/0x130 [ 103.067500][ T1752] path_mount+0x66a/0xff0 [ 103.067525][ T1752] ? putname+0x113/0x150 [ 103.067545][ T1752] __se_sys_mount+0x2bf/0x480 [ 103.067564][ T1752] ? __x64_sys_mount+0xf0/0xf0 [ 103.067582][ T1752] ? trace_event_raw_event_sys_enter+0xf5/0x130 [ 103.067604][ T1752] __x64_sys_mount+0xc3/0xf0 [ 103.067615][ T1752] x64_sys_call+0x2021/0x2ee0 [ 103.067626][ T1752] do_syscall_64+0x57/0xf0 [ 103.067639][ T1752] ? clear_bhb_loop+0x50/0xa0 [ 103.067653][ T1752] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 103.067677][ T1752] RIP: 0033:0x7fb29999fb19 [ 103.067696][ T1752] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 103.067713][ T1752] RSP: 002b:00007fb2983f7028 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 103.067736][ T1752] RAX: ffffffffffffffda RBX: 00007fb299c25fa0 RCX: 00007fb29999fb19 [ 103.067752][ T1752] RDX: 0000200000000400 RSI: 00002000000003c0 RDI: 0000000000000000 [ 103.067767][ T1752] RBP: 00007fb2983f7090 R08: 0000200000000580 R09: 0000000000000000 [ 103.067782][ T1752] R10: 0000000000008008 R11: 0000000000000246 R12: 0000000000000001 [ 103.067795][ T1752] R13: 00007fb299c26038 R14: 00007fb299c25fa0 R15: 00007ffecade7198 [ 103.067811][ T1752] [ 103.309295][ T66] usb usb4-port1: attempt power cycle [ 103.340424][ T487] ums-sddr09 3-1:1.0: probe with driver ums-sddr09 failed with error -5 [ 103.648935][ T66] usb 4-1: new high-speed USB device number 19 using dummy_hcd [ 103.705353][ T36] kauditd_printk_skb: 20 callbacks suppressed [ 103.705374][ T36] audit: type=1400 audit(1794088730.539:309): avc: denied { connect } for pid=1763 comm="syz.3.500" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 104.088543][ T66] usb 4-1: device not accepting address 19, error -71 [ 104.108610][ T487] usb 1-1: new full-speed USB device number 15 using dummy_hcd [ 104.223466][ T36] audit: type=1400 audit(1794088731.059:310): avc: denied { mounton } for pid=1724 comm="syz.2.490" path="/syzcgroup/unified/syz2" dev="proc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=dir permissive=1 [ 104.265901][ T1781] fuseblk: Bad value for 'group_id' [ 104.269385][ T487] usb 1-1: not running at top speed; connect to a high speed hub [ 104.271184][ T1781] fuseblk: Bad value for 'group_id' [ 104.280341][ T487] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 104.297596][ T487] usb 1-1: New USB device found, idVendor=225a, idProduct=e1d4, bcdDevice=a7.ad [ 104.307355][ T487] usb 1-1: New USB device strings: Mfr=245, Product=210, SerialNumber=0 [ 104.316634][ T487] usb 1-1: Product: syz [ 104.321711][ T487] usb 1-1: Manufacturer: syz [ 104.331163][ T487] usb 1-1: Found UVC 1.00 device syz (225a:e1d4) [ 104.422897][ T36] audit: type=1400 audit(1794088731.259:311): avc: denied { ioctl } for pid=1791 comm="syz.3.511" path="socket:[9126]" dev="sockfs" ino=9126 ioctlcmd=0x6f03 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 104.447694][ T36] audit: type=1400 audit(1794088731.269:312): avc: denied { setattr } for pid=1791 comm="syz.3.511" name="TIPC" dev="sockfs" ino=9127 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 104.534209][ T487] usb 1-1: UVC non compliance - GET_DEF(PROBE) not supported. Enabling workaround. [ 104.544087][ T487] uvcvideo 1-1:1.1: Failed to query (129) UVC probe control : -71 (exp. 26). [ 104.553128][ T487] uvcvideo 1-1:1.1: Failed to initialize the device (-71). [ 104.565962][ T487] usb 1-1: USB disconnect, device number 15 [ 104.591322][ T36] audit: type=1400 audit(1794088731.429:313): avc: denied { setopt } for pid=1804 comm="syz.3.515" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 104.601183][ T1805] 9p: Unknown access argument 00000000000000000000Æ: -22 [ 104.612276][ T36] audit: type=1400 audit(1794088731.439:314): avc: denied { bind } for pid=1804 comm="syz.3.515" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 104.667413][ T1806] kvm: pic: level sensitive irq not supported [ 104.667686][ T1806] kvm: pic: single mode not supported [ 104.675268][ T1806] kvm: pic: non byte write [ 104.689654][ T1806] kvm: pic: non byte write [ 104.694694][ T1806] kvm: pic: level sensitive irq not supported [ 104.694788][ T1806] kvm: pic: level sensitive irq not supported [ 104.702567][ T1806] kvm: pic: non byte write [ 104.714350][ T1806] kvm: pic: non byte write [ 104.719157][ T1806] kvm: pic: single mode not supported [ 104.719308][ T1806] kvm: pic: non byte write [ 104.729474][ T1806] kvm: pic: non byte write [ 104.734230][ T1806] kvm: pic: single mode not supported [ 104.734247][ T1806] kvm: pic: level sensitive irq not supported [ 104.740746][ T1806] kvm: pic: non byte write [ 104.751642][ T1806] kvm: pic: non byte write [ 104.757174][ T1806] kvm: pic: non byte write [ 104.762219][ T1806] kvm: pic: non byte write [ 105.730955][ T1833] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=3070988179 (3070988179 ns) > initial count (1876204212 ns). Using initial count to start timer. [ 105.799464][ T487] usb 3-1: USB disconnect, device number 18 [ 105.836558][ T36] audit: type=1400 audit(1794088732.669:315): avc: denied { listen } for pid=1841 comm="syz.3.529" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 105.840853][ T1842] EXT4-fs (sda1): shut down requested (0) [ 105.859859][ T36] audit: type=1400 audit(1794088732.699:316): avc: denied { read } for pid=92 comm="syslogd" name="log" dev="sda1" ino=2010 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:var_t tclass=lnk_file permissive=1 [ 105.884586][ T36] audit: type=1400 audit(1794088732.699:317): avc: denied { search } for pid=92 comm="syslogd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 105.906370][ T36] audit: type=1400 audit(1794088732.699:318): avc: denied { write } for pid=92 comm="syslogd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 106.348518][ T66] usb 1-1: new full-speed USB device number 16 using dummy_hcd [ 106.484319][ T1878] rust_binder: 1877:1878 got reply transaction with no transaction stack [ 106.493659][ T1878] rust_binder: 1877:1878 transaction reply to 0:0 failed EINVAL, code 0 size 0-0 line thread.rs:1556 [ 106.510232][ T66] usb 1-1: unable to get BOS descriptor or descriptor too short [ 106.518194][ T487] rust_binder: 1877: undelivered TRANSACTION_ERROR: 29201 [ 106.518541][ T66] usb 1-1: not running at top speed; connect to a high speed hub [ 106.546681][ T66] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 106.557571][ T66] usb 1-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 106.567323][ T66] usb 1-1: config 1 interface 1 altsetting 1 endpoint 0x4 has invalid wMaxPacketSize 0 [ 106.586306][ T66] usb 1-1: New USB device found, idVendor=2b53, idProduct=0024, bcdDevice= 0.40 [ 106.595975][ T66] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 106.608479][ T66] usb 1-1: Product: syz [ 106.612793][ T66] usb 1-1: Manufacturer: syz [ 106.617636][ T66] usb 1-1: SerialNumber: syz [ 106.722227][ T1891] netlink: 252 bytes leftover after parsing attributes in process `syz.3.550'. [ 106.732143][ T1891] IPv6: NLM_F_CREATE should be specified when creating new route [ 106.853207][ T66] usb 1-1: USB disconnect, device number 16 [ 106.874945][ T488] udevd[488]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 107.168547][ T1903] netlink: 'syz.4.556': attribute type 58 has an invalid length. [ 107.215477][ T1906] FAULT_INJECTION: forcing a failure. [ 107.215477][ T1906] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 107.251004][ T1906] CPU: 1 UID: 0 PID: 1906 Comm: syz.4.557 Not tainted syzkaller #0 ff996278633adec6fd25d1632b496761701c4fe9 [ 107.251039][ T1906] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/15/2026 [ 107.251054][ T1906] Call Trace: [ 107.251062][ T1906] [ 107.251071][ T1906] __dump_stack+0x21/0x30 [ 107.251096][ T1906] dump_stack_lvl+0x140/0x1c0 [ 107.251115][ T1906] ? __cfi_dump_stack_lvl+0x10/0x10 [ 107.251135][ T1906] ? check_stack_object+0x138/0x150 [ 107.251163][ T1906] dump_stack+0x19/0x20 [ 107.251180][ T1906] should_fail_ex+0x3c2/0x510 [ 107.251199][ T1906] should_fail+0xf/0x20 [ 107.251215][ T1906] should_fail_usercopy+0x1e/0x30 [ 107.251234][ T1906] _copy_to_user+0x24/0xa0 [ 107.251257][ T1906] simple_read_from_buffer+0xed/0x160 [ 107.251290][ T1906] proc_fail_nth_read+0x1aa/0x220 [ 107.251315][ T1906] ? __cfi_proc_fail_nth_read+0x10/0x10 [ 107.251339][ T1906] ? bpf_lsm_file_permission+0xd/0x20 [ 107.251360][ T1906] ? __cfi_proc_fail_nth_read+0x10/0x10 [ 107.251383][ T1906] vfs_read+0x28b/0xc70 [ 107.251409][ T1906] ? rb_commit+0x753/0x7b0 [ 107.251434][ T1906] ? __cfi_vfs_read+0x10/0x10 [ 107.251459][ T1906] ? __kasan_check_write+0x18/0x20 [ 107.251485][ T1906] ? mutex_lock+0x97/0x1d0 [ 107.251509][ T1906] ? __cfi_mutex_lock+0x10/0x10 [ 107.251535][ T1906] ksys_read+0x145/0x260 [ 107.251559][ T1906] ? __cfi_ksys_read+0x10/0x10 [ 107.251584][ T1906] ? trace_event_raw_event_sys_enter+0xf5/0x130 [ 107.251609][ T1906] __x64_sys_read+0x7f/0x90 [ 107.251627][ T1906] x64_sys_call+0x2638/0x2ee0 [ 107.251648][ T1906] do_syscall_64+0x57/0xf0 [ 107.251668][ T1906] ? clear_bhb_loop+0x50/0xa0 [ 107.251693][ T1906] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 107.251715][ T1906] RIP: 0033:0x7f9da4f6034e [ 107.251739][ T1906] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 107.251754][ T1906] RSP: 002b:00007f9da5e0efe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 107.251778][ T1906] RAX: ffffffffffffffda RBX: 00007f9da5e0f6c0 RCX: 00007f9da4f6034e [ 107.251793][ T1906] RDX: 000000000000000f RSI: 00007f9da5e0f0a0 RDI: 0000000000000003 [ 107.251807][ T1906] RBP: 00007f9da5e0f090 R08: 0000000000000000 R09: 0000000000000000 [ 107.251822][ T1906] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 107.251835][ T1906] R13: 00007f9da5226038 R14: 00007f9da5225fa0 R15: 00007ffcf26eccb8 [ 107.251853][ T1906] [ 107.710709][ T1917] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=3070988179 (3070988179 ns) > initial count (1876204212 ns). Using initial count to start timer. [ 107.768501][ T9] usb 1-1: new full-speed USB device number 17 using dummy_hcd [ 107.929396][ T9] usb 1-1: not running at top speed; connect to a high speed hub [ 107.948917][ T9] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 107.974190][ T9] usb 1-1: New USB device found, idVendor=225a, idProduct=e1d4, bcdDevice=a7.ad [ 107.984884][ T9] usb 1-1: New USB device strings: Mfr=245, Product=210, SerialNumber=0 [ 108.005880][ T9] usb 1-1: Product: syz [ 108.016075][ T9] usb 1-1: Manufacturer: syz [ 108.033577][ T9] usb 1-1: Found UVC 1.00 device syz (225a:e1d4) [ 108.059216][ T1931] FAULT_INJECTION: forcing a failure. [ 108.059216][ T1931] name failslab, interval 1, probability 0, space 0, times 0 [ 108.088478][ T1931] CPU: 1 UID: 0 PID: 1931 Comm: syz.4.567 Not tainted syzkaller #0 ff996278633adec6fd25d1632b496761701c4fe9 [ 108.088517][ T1931] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/15/2026 [ 108.088534][ T1931] Call Trace: [ 108.088543][ T1931] [ 108.088553][ T1931] __dump_stack+0x21/0x30 [ 108.088581][ T1931] dump_stack_lvl+0x140/0x1c0 [ 108.088610][ T1931] ? __cfi_dump_stack_lvl+0x10/0x10 [ 108.088632][ T1931] dump_stack+0x19/0x20 [ 108.088651][ T1931] should_fail_ex+0x3c2/0x510 [ 108.088673][ T1931] ? kernfs_fop_write_iter+0x15e/0x510 [ 108.088699][ T1931] should_failslab+0xac/0x100 [ 108.088724][ T1931] __kmalloc_noprof+0x69/0x510 [ 108.088751][ T1931] ? kernfs_fop_write_iter+0x15e/0x510 [ 108.088775][ T1931] kernfs_fop_write_iter+0x15e/0x510 [ 108.088798][ T1931] vfs_write+0x765/0xfd0 [ 108.088825][ T1931] ? __cfi_vfs_write+0x10/0x10 [ 108.088865][ T1931] ? __cfi_mutex_lock+0x10/0x10 [ 108.088891][ T1931] ksys_write+0x145/0x260 [ 108.088910][ T1931] ? __cfi_ksys_write+0x10/0x10 [ 108.088928][ T1931] ? trace_event_raw_event_sys_enter+0xf5/0x130 [ 108.088957][ T1931] __x64_sys_write+0x7f/0x90 [ 108.088976][ T1931] x64_sys_call+0x271c/0x2ee0 [ 108.089000][ T1931] do_syscall_64+0x57/0xf0 [ 108.089021][ T1931] ? clear_bhb_loop+0x50/0xa0 [ 108.089049][ T1931] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 108.089074][ T1931] RIP: 0033:0x7f9da4f9fb19 [ 108.089092][ T1931] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 108.089113][ T1931] RSP: 002b:00007f9da5e0f028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 108.089138][ T1931] RAX: ffffffffffffffda RBX: 00007f9da5225fa0 RCX: 00007f9da4f9fb19 [ 108.089156][ T1931] RDX: 0000000000000012 RSI: 0000200000000180 RDI: 0000000000000003 [ 108.089171][ T1931] RBP: 00007f9da5e0f090 R08: 0000000000000000 R09: 0000000000000000 [ 108.089185][ T1931] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 108.089199][ T1931] R13: 00007f9da5226038 R14: 00007f9da5225fa0 R15: 00007ffcf26eccb8 [ 108.089218][ T1931] [ 108.233782][ T1908] overlayfs: failed to resolve './file2': -2 [ 108.362348][ T9] usb 1-1: UVC non compliance - GET_DEF(PROBE) not supported. Enabling workaround. [ 108.384526][ T1940] rust_binder: 1939:1940 no such ref 0 [ 108.386247][ T9] uvcvideo 1-1:1.1: Failed to query (129) UVC probe control : -71 (exp. 26). [ 108.392641][ T1940] rust_binder: 1939:1940 got transaction to invalid handle 1 [ 108.406613][ T1940] rust_binder: 1939:1940 transaction call to 0:0 failed ENOENT, code 1 size 0-0 line process.rs:958 [ 108.410751][ T9] uvcvideo 1-1:1.1: Failed to initialize the device (-71). [ 108.445980][ T9] usb 1-1: USB disconnect, device number 17 [ 108.503942][ T1940] kvm: kvm [1939]: vcpu2, guest rIP: 0xfff0 Unhandled RDMSR(0x4000001f) [ 108.633412][ T1947] rust_binder: 1946:1947 failed to claim space for a BINDER_TYPE_PTR (offset: 96, limit: 96, size: 1) [ 108.647340][ T1947] rust_binder: 1946:1947 error while translating object: EINVAL [ 108.658007][ T1947] rust_binder: 1946:1947 transaction call to 1946:0 failed EINVAL, code 0 size 72-24 line thread.rs:926 [ 108.670243][ T1947] netlink: 12 bytes leftover after parsing attributes in process `syz.2.575'. [ 108.690245][ T1958] Zero length message leads to an empty skb [ 108.740268][ T1966] netlink: 252 bytes leftover after parsing attributes in process `syz.3.580'. [ 108.753149][ T9] rust_binder: 1946: undelivered TRANSACTION_ERROR: 29201 [ 108.993357][ T1984] option changes via remount are deprecated (pid=1983 comm=syz.0.589) [ 109.001904][ T36] kauditd_printk_skb: 15 callbacks suppressed [ 109.001925][ T36] audit: type=1400 audit(1794088735.829:334): avc: denied { remount } for pid=1983 comm="syz.0.589" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 109.014322][ T1984] cgroup: option or name mismatch, new: 0x10 "", old: 0x0 "" [ 109.157507][ T36] audit: type=1400 audit(1794088735.989:335): avc: denied { read } for pid=2008 comm="syz.2.601" name="ptp0" dev="devtmpfs" ino=196 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 109.212180][ T36] audit: type=1400 audit(1794088736.039:336): avc: granted { setsecparam } for pid=2008 comm="syz.2.601" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security [ 109.498605][ T9] usb 1-1: new full-speed USB device number 18 using dummy_hcd [ 109.650328][ T9] usb 1-1: unable to get BOS descriptor or descriptor too short [ 109.660181][ T9] usb 1-1: not running at top speed; connect to a high speed hub [ 109.674930][ T9] usb 1-1: config 0 has an invalid interface number: 88 but max is 0 [ 109.683310][ T9] usb 1-1: config 0 has no interface number 0 [ 109.689955][ T9] usb 1-1: config 0 interface 88 altsetting 8 endpoint 0x86 has invalid maxpacket 46935, setting to 64 [ 109.702055][ T9] usb 1-1: config 0 interface 88 has no altsetting 0 [ 109.711339][ T9] usb 1-1: language id specifier not provided by device, defaulting to English [ 109.723918][ T9] usb 1-1: New USB device found, idVendor=0460, idProduct=0004, bcdDevice=96.31 [ 109.733331][ T9] usb 1-1: New USB device strings: Mfr=1, Product=84, SerialNumber=3 [ 109.741843][ T9] usb 1-1: Product: syz [ 109.746128][ T9] usb 1-1: SerialNumber: syz [ 109.751969][ T9] usb 1-1: config 0 descriptor?? [ 109.757520][ T2024] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 109.975632][ T36] audit: type=1400 audit(1794088736.809:337): avc: denied { ioctl } for pid=2023 comm="syz.0.607" path="/dev/usbmon0" dev="devtmpfs" ino=90 ioctlcmd=0x9207 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 110.067223][ T36] audit: type=1400 audit(1794088736.899:338): avc: denied { write } for pid=2037 comm="syz.3.613" name="event2" dev="devtmpfs" ino=209 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 110.091610][ T36] audit: type=1400 audit(1794088736.899:339): avc: denied { lock } for pid=2037 comm="syz.3.613" path="/dev/input/event2" dev="devtmpfs" ino=209 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 110.115879][ T36] audit: type=1400 audit(1794088736.899:340): avc: denied { bind } for pid=2037 comm="syz.3.613" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 110.256874][ T2054] 9pnet_fd: Insufficient options for proto=fd [ 110.281491][ T36] audit: type=1400 audit(1794088737.119:341): avc: denied { append } for pid=2046 comm="syz.3.617" name="uprobe_events" dev="tracefs" ino=1054 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=file permissive=1 [ 111.060722][ T36] audit: type=1400 audit(1794088737.899:342): avc: denied { unmount } for pid=295 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=filesystem permissive=1 [ 111.086075][ T2064] tipc: Started in network mode [ 111.098946][ T2064] tipc: Node identity ac14140f, cluster identity 4711 [ 111.106619][ T2064] tipc: New replicast peer: 255.255.255.255 [ 111.116984][ T2064] tipc: Enabled bearer , priority 10 [ 111.245152][ T2071] FAULT_INJECTION: forcing a failure. [ 111.245152][ T2071] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 111.258846][ T2071] CPU: 1 UID: 0 PID: 2071 Comm: syz.3.627 Not tainted syzkaller #0 ff996278633adec6fd25d1632b496761701c4fe9 [ 111.258879][ T2071] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/15/2026 [ 111.258893][ T2071] Call Trace: [ 111.258902][ T2071] [ 111.258912][ T2071] __dump_stack+0x21/0x30 [ 111.258936][ T2071] dump_stack_lvl+0x140/0x1c0 [ 111.258955][ T2071] ? __cfi_dump_stack_lvl+0x10/0x10 [ 111.258975][ T2071] ? __kasan_check_read+0x15/0x20 [ 111.259000][ T2071] ? rb_commit+0x753/0x7b0 [ 111.259027][ T2071] dump_stack+0x19/0x20 [ 111.259040][ T2071] should_fail_ex+0x3c2/0x510 [ 111.259052][ T2071] should_fail+0xf/0x20 [ 111.259061][ T2071] should_fail_usercopy+0x1e/0x30 [ 111.259072][ T2071] _copy_from_user+0x20/0xa0 [ 111.259092][ T2071] __se_sys_io_uring_setup+0x170/0x2b0 [ 111.259118][ T2071] ? __x64_sys_io_uring_setup+0x80/0x80 [ 111.259142][ T2071] ? trace_event_buffer_commit+0x256/0x8f0 [ 111.259169][ T2071] ? trace_event_raw_event_sys_enter+0xf5/0x130 [ 111.259190][ T2071] __x64_sys_io_uring_setup+0x5f/0x80 [ 111.259204][ T2071] x64_sys_call+0x22c0/0x2ee0 [ 111.259216][ T2071] do_syscall_64+0x57/0xf0 [ 111.259228][ T2071] ? clear_bhb_loop+0x50/0xa0 [ 111.259248][ T2071] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 111.259273][ T2071] RIP: 0033:0x7f764139fb19 [ 111.259291][ T2071] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 111.259308][ T2071] RSP: 002b:00007f7642211fb8 EFLAGS: 00000206 ORIG_RAX: 00000000000001a9 [ 111.259332][ T2071] RAX: ffffffffffffffda RBX: 0000200000000400 RCX: 00007f764139fb19 [ 111.259344][ T2071] RDX: 0000000000000000 RSI: 0000200000000400 RDI: 0000000000001727 [ 111.259352][ T2071] RBP: 00007f7642212090 R08: 0000000000000000 R09: 0000000000000101 [ 111.259361][ T2071] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 111.259368][ T2071] R13: 0000000000000000 R14: 0000000000000000 R15: 00007ffe1074ae98 [ 111.259376][ T2071] [ 111.493638][ T2074] 9pnet_fd: Insufficient options for proto=fd [ 111.609353][ T2092] FAULT_INJECTION: forcing a failure. [ 111.609353][ T2092] name failslab, interval 1, probability 0, space 0, times 0 [ 111.622330][ T2092] CPU: 0 UID: 0 PID: 2092 Comm: syz.2.636 Not tainted syzkaller #0 ff996278633adec6fd25d1632b496761701c4fe9 [ 111.622364][ T2092] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/15/2026 [ 111.622378][ T2092] Call Trace: [ 111.622386][ T2092] [ 111.622397][ T2092] __dump_stack+0x21/0x30 [ 111.622432][ T2092] dump_stack_lvl+0x140/0x1c0 [ 111.622451][ T2092] ? __cfi_dump_stack_lvl+0x10/0x10 [ 111.622470][ T2092] ? avc_has_perm_noaudit+0x289/0x360 [ 111.622493][ T2092] dump_stack+0x19/0x20 [ 111.622511][ T2092] should_fail_ex+0x3c2/0x510 [ 111.622531][ T2092] should_failslab+0xac/0x100 [ 111.622552][ T2092] kmem_cache_alloc_lru_noprof+0x44/0x410 [ 111.622580][ T2092] ? sock_alloc_inode+0x48/0x150 [ 111.622602][ T2092] ? ring_buffer_unlock_commit+0x473/0x5e0 [ 111.622630][ T2092] sock_alloc_inode+0x48/0x150 [ 111.622650][ T2092] ? __cfi_sock_alloc_inode+0x10/0x10 [ 111.622669][ T2092] alloc_inode+0x7a/0x270 [ 111.622690][ T2092] ? bpf_lsm_socket_create+0xd/0x20 [ 111.622717][ T2092] new_inode_pseudo+0x19/0x40 [ 111.622739][ T2092] __sock_create+0x130/0x810 [ 111.622762][ T2092] __sys_socket+0xe1/0x1c0 [ 111.622782][ T2092] __x64_sys_socket+0x7e/0x90 [ 111.622803][ T2092] x64_sys_call+0x2608/0x2ee0 [ 111.622830][ T2092] do_syscall_64+0x57/0xf0 [ 111.622851][ T2092] ? clear_bhb_loop+0x50/0xa0 [ 111.622877][ T2092] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 111.622901][ T2092] RIP: 0033:0x7f6210d9fb19 [ 111.622919][ T2092] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 111.622936][ T2092] RSP: 002b:00007f6211b88028 EFLAGS: 00000246 ORIG_RAX: 0000000000000029 [ 111.622960][ T2092] RAX: ffffffffffffffda RBX: 00007f6211025fa0 RCX: 00007f6210d9fb19 [ 111.622976][ T2092] RDX: 0000000000000000 RSI: 0000000000000002 RDI: 000000000000001e [ 111.622990][ T2092] RBP: 00007f6211b88090 R08: 0000000000000000 R09: 0000000000000000 [ 111.623004][ T2092] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 111.623018][ T2092] R13: 00007f6211026038 R14: 00007f6211025fa0 R15: 00007ffe57211ae8 [ 111.623035][ T2092] [ 111.623095][ T2092] socket: no more sockets [ 112.228567][ T487] tipc: Node number set to 2886997007 [ 112.280984][ T9] input: syz as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.88/input/input18 [ 112.314410][ T9] usb 1-1: USB disconnect, device number 18 [ 112.364779][ T2105] 9pnet_fd: Insufficient options for proto=fd [ 112.429063][ T2107] FAULT_INJECTION: forcing a failure. [ 112.429063][ T2107] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 112.462224][ T2107] CPU: 1 UID: 0 PID: 2107 Comm: syz.0.639 Not tainted syzkaller #0 ff996278633adec6fd25d1632b496761701c4fe9 [ 112.462259][ T2107] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/15/2026 [ 112.462281][ T2107] Call Trace: [ 112.462290][ T2107] [ 112.462299][ T2107] __dump_stack+0x21/0x30 [ 112.462325][ T2107] dump_stack_lvl+0x140/0x1c0 [ 112.462352][ T2107] ? __cfi_dump_stack_lvl+0x10/0x10 [ 112.462376][ T2107] ? check_stack_object+0x138/0x150 [ 112.462405][ T2107] dump_stack+0x19/0x20 [ 112.462428][ T2107] should_fail_ex+0x3c2/0x510 [ 112.462448][ T2107] should_fail+0xf/0x20 [ 112.462465][ T2107] should_fail_usercopy+0x1e/0x30 [ 112.462486][ T2107] _copy_to_user+0x24/0xa0 [ 112.462508][ T2107] simple_read_from_buffer+0xed/0x160 [ 112.462539][ T2107] proc_fail_nth_read+0x1aa/0x220 [ 112.462564][ T2107] ? __cfi_proc_fail_nth_read+0x10/0x10 [ 112.462588][ T2107] ? bpf_lsm_file_permission+0xd/0x20 [ 112.462614][ T2107] ? __cfi_proc_fail_nth_read+0x10/0x10 [ 112.462638][ T2107] vfs_read+0x28b/0xc70 [ 112.462663][ T2107] ? rb_commit+0x753/0x7b0 [ 112.462694][ T2107] ? __cfi_vfs_read+0x10/0x10 [ 112.462718][ T2107] ? __kasan_check_write+0x18/0x20 [ 112.462744][ T2107] ? mutex_lock+0x97/0x1d0 [ 112.462769][ T2107] ? __cfi_mutex_lock+0x10/0x10 [ 112.462793][ T2107] ksys_read+0x145/0x260 [ 112.462819][ T2107] ? __cfi_ksys_read+0x10/0x10 [ 112.462845][ T2107] ? trace_event_raw_event_sys_enter+0xf5/0x130 [ 112.462870][ T2107] __x64_sys_read+0x7f/0x90 [ 112.462888][ T2107] x64_sys_call+0x2638/0x2ee0 [ 112.462909][ T2107] do_syscall_64+0x57/0xf0 [ 112.462929][ T2107] ? clear_bhb_loop+0x50/0xa0 [ 112.462954][ T2107] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 112.462979][ T2107] RIP: 0033:0x7fb29996034e [ 112.462997][ T2107] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 112.463015][ T2107] RSP: 002b:00007fb2983f6fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 112.463039][ T2107] RAX: ffffffffffffffda RBX: 00007fb2983f76c0 RCX: 00007fb29996034e [ 112.463055][ T2107] RDX: 000000000000000f RSI: 00007fb2983f70a0 RDI: 0000000000000003 [ 112.463071][ T2107] RBP: 00007fb2983f7090 R08: 0000000000000000 R09: 0000000000000000 [ 112.463085][ T2107] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 112.463098][ T2107] R13: 00007fb299c26038 R14: 00007fb299c25fa0 R15: 00007ffecade7198 [ 112.463116][ T2107] [ 112.796039][ T2119] FAULT_INJECTION: forcing a failure. [ 112.796039][ T2119] name failslab, interval 1, probability 0, space 0, times 0 [ 112.813648][ T2119] CPU: 1 UID: 0 PID: 2119 Comm: syz.4.644 Not tainted syzkaller #0 ff996278633adec6fd25d1632b496761701c4fe9 [ 112.813682][ T2119] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/15/2026 [ 112.813694][ T2119] Call Trace: [ 112.813702][ T2119] [ 112.813711][ T2119] __dump_stack+0x21/0x30 [ 112.813737][ T2119] dump_stack_lvl+0x140/0x1c0 [ 112.813755][ T2119] ? __cfi_dump_stack_lvl+0x10/0x10 [ 112.813775][ T2119] ? __kvmalloc_node_noprof+0x128/0x300 [ 112.813800][ T2119] ? trace_event_raw_event_kmalloc+0xac/0xf0 [ 112.813825][ T2119] dump_stack+0x19/0x20 [ 112.813842][ T2119] should_fail_ex+0x3c2/0x510 [ 112.813861][ T2119] should_failslab+0xac/0x100 [ 112.813882][ T2119] __kmalloc_cache_noprof+0x41/0x470 [ 112.813914][ T2119] ? vmstat_start+0x84/0x5f0 [ 112.813935][ T2119] ? __kvmalloc_node_noprof+0x173/0x300 [ 112.813959][ T2119] ? __kasan_check_write+0x18/0x20 [ 112.813984][ T2119] vmstat_start+0x84/0x5f0 [ 112.814004][ T2119] ? selinux_file_permission+0x318/0xb60 [ 112.814031][ T2119] seq_read_iter+0x3ea/0xf30 [ 112.814054][ T2119] proc_reg_read_iter+0x1ea/0x2c0 [ 112.814084][ T2119] vfs_read+0x611/0xc70 [ 112.814107][ T2119] ? rb_commit+0x753/0x7b0 [ 112.814133][ T2119] ? __cfi_vfs_read+0x10/0x10 [ 112.814157][ T2119] ? __cfi_mutex_lock+0x10/0x10 [ 112.814181][ T2119] ksys_read+0x145/0x260 [ 112.814205][ T2119] ? __cfi_ksys_read+0x10/0x10 [ 112.814229][ T2119] ? trace_event_raw_event_sys_enter+0xf5/0x130 [ 112.814254][ T2119] __x64_sys_read+0x7f/0x90 [ 112.814271][ T2119] x64_sys_call+0x2638/0x2ee0 [ 112.814292][ T2119] do_syscall_64+0x57/0xf0 [ 112.814312][ T2119] ? clear_bhb_loop+0x50/0xa0 [ 112.814337][ T2119] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 112.814369][ T2119] RIP: 0033:0x7f9da4f9fb19 [ 112.814386][ T2119] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 112.814401][ T2119] RSP: 002b:00007f9da5e0f028 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 112.814424][ T2119] RAX: ffffffffffffffda RBX: 00007f9da5225fa0 RCX: 00007f9da4f9fb19 [ 112.814439][ T2119] RDX: 00000000000000a3 RSI: 00002000000000c0 RDI: 0000000000000003 [ 112.814452][ T2119] RBP: 00007f9da5e0f090 R08: 0000000000000000 R09: 0000000000000000 [ 112.814465][ T2119] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 112.814479][ T2119] R13: 00007f9da5226038 R14: 00007f9da5225fa0 R15: 00007ffcf26eccb8 [ 112.814495][ T2119] [ 113.632889][ T2156] FAULT_INJECTION: forcing a failure. [ 113.632889][ T2156] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 113.668835][ T2156] CPU: 1 UID: 0 PID: 2156 Comm: syz.0.659 Not tainted syzkaller #0 ff996278633adec6fd25d1632b496761701c4fe9 [ 113.668870][ T2156] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/15/2026 [ 113.668881][ T2156] Call Trace: [ 113.668890][ T2156] [ 113.668898][ T2156] __dump_stack+0x21/0x30 [ 113.668927][ T2156] dump_stack_lvl+0x140/0x1c0 [ 113.668946][ T2156] ? __cfi_dump_stack_lvl+0x10/0x10 [ 113.668967][ T2156] ? check_stack_object+0x138/0x150 [ 113.668995][ T2156] dump_stack+0x19/0x20 [ 113.669012][ T2156] should_fail_ex+0x3c2/0x510 [ 113.669031][ T2156] should_fail+0xf/0x20 [ 113.669047][ T2156] should_fail_usercopy+0x1e/0x30 [ 113.669066][ T2156] _copy_to_user+0x24/0xa0 [ 113.669087][ T2156] simple_read_from_buffer+0xed/0x160 [ 113.669110][ T2156] proc_fail_nth_read+0x1aa/0x220 [ 113.669134][ T2156] ? __cfi_proc_fail_nth_read+0x10/0x10 [ 113.669155][ T2156] ? bpf_lsm_file_permission+0xd/0x20 [ 113.669176][ T2156] ? __cfi_proc_fail_nth_read+0x10/0x10 [ 113.669199][ T2156] vfs_read+0x28b/0xc70 [ 113.669223][ T2156] ? rb_commit+0x753/0x7b0 [ 113.669257][ T2156] ? __cfi_vfs_read+0x10/0x10 [ 113.669282][ T2156] ? __kasan_check_write+0x18/0x20 [ 113.669308][ T2156] ? mutex_lock+0x97/0x1d0 [ 113.669332][ T2156] ? __cfi_mutex_lock+0x10/0x10 [ 113.669355][ T2156] ksys_read+0x145/0x260 [ 113.669380][ T2156] ? __cfi_ksys_read+0x10/0x10 [ 113.669405][ T2156] ? trace_event_raw_event_sys_enter+0xf5/0x130 [ 113.669429][ T2156] __x64_sys_read+0x7f/0x90 [ 113.669446][ T2156] x64_sys_call+0x2638/0x2ee0 [ 113.669464][ T2156] do_syscall_64+0x57/0xf0 [ 113.669485][ T2156] ? clear_bhb_loop+0x50/0xa0 [ 113.669509][ T2156] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 113.669534][ T2156] RIP: 0033:0x7fb29996034e [ 113.669553][ T2156] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 113.669571][ T2156] RSP: 002b:00007fb2983f6fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 113.669595][ T2156] RAX: ffffffffffffffda RBX: 00007fb2983f76c0 RCX: 00007fb29996034e [ 113.669612][ T2156] RDX: 000000000000000f RSI: 00007fb2983f70a0 RDI: 0000000000000004 [ 113.669627][ T2156] RBP: 00007fb2983f7090 R08: 0000000000000000 R09: 0000000000000000 [ 113.669641][ T2156] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 113.669655][ T2156] R13: 00007fb299c26038 R14: 00007fb299c25fa0 R15: 00007ffecade7198 [ 113.669677][ T2156] [ 114.423619][ T2169] netlink: 'syz.0.664': attribute type 4 has an invalid length. [ 114.450940][ T2169] netlink: 17 bytes leftover after parsing attributes in process `syz.0.664'. [ 114.505666][ T2169] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 114.709999][ T2208] capability: warning: `syz.2.679' uses deprecated v2 capabilities in a way that may be insecure [ 114.968490][ T9] usb 3-1: new high-speed USB device number 19 using dummy_hcd [ 115.119724][ T36] audit: type=1400 audit(1794088741.959:343): avc: denied { checkpoint_restore } for pid=2229 comm="syz.4.690" capability=40 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 115.168763][ T9] usb 3-1: Using ep0 maxpacket: 8 [ 115.174922][ T9] usb 3-1: config index 0 descriptor too short (expected 1307, got 27) [ 115.183230][ T9] usb 3-1: config 0 has an invalid interface number: 0 but max is -1 [ 115.191379][ T9] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 0 [ 115.200300][ T9] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x84 has an invalid bInterval 255, changing to 11 [ 115.211479][ T9] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid maxpacket 59391, setting to 1024 [ 115.223974][ T9] usb 3-1: New USB device found, idVendor=0460, idProduct=0008, bcdDevice=c3.de [ 115.233094][ T9] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 115.241449][ T9] usb 3-1: Product: syz [ 115.245646][ T9] usb 3-1: Manufacturer: syz [ 115.250281][ T9] usb 3-1: SerialNumber: syz [ 115.255429][ T9] usb 3-1: config 0 descriptor?? [ 115.260789][ T2208] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 115.269116][ T9] hub 3-1:0.0: bad descriptor, ignoring hub [ 115.275369][ T9] hub 3-1:0.0: probe with driver hub failed with error -5 [ 115.278452][ T31] usb 1-1: new full-speed USB device number 19 using dummy_hcd [ 115.291015][ T9] input: syz syz as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/input/input19 [ 115.300470][ T613] usb 4-1: new high-speed USB device number 21 using dummy_hcd [ 115.449188][ T31] usb 1-1: not running at top speed; connect to a high speed hub [ 115.460378][ T31] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 115.472043][ T31] usb 1-1: New USB device found, idVendor=225a, idProduct=e1d4, bcdDevice=a7.ad [ 115.481593][ T31] usb 1-1: New USB device strings: Mfr=245, Product=210, SerialNumber=0 [ 115.490179][ T31] usb 1-1: Product: syz [ 115.494491][ T31] usb 1-1: Manufacturer: syz [ 115.503588][ T31] usb 1-1: Found UVC 1.00 device syz (225a:e1d4) [ 115.568440][ T613] usb 4-1: Using ep0 maxpacket: 32 [ 115.588818][ T613] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 115.602497][ T613] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 115.620904][ T613] usb 4-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 115.639694][ T613] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 115.656937][ T613] usb 4-1: config 0 descriptor?? [ 115.668194][ T613] hub 4-1:0.0: USB hub found [ 115.688204][ T487] usb 3-1: USB disconnect, device number 19 [ 115.704342][ T31] usb 1-1: UVC non compliance - GET_DEF(PROBE) not supported. Enabling workaround. [ 115.713986][ T31] uvcvideo 1-1:1.1: Failed to query (129) UVC probe control : -71 (exp. 26). [ 115.722933][ T31] uvcvideo 1-1:1.1: Failed to initialize the device (-71). [ 115.731798][ T31] usb 1-1: USB disconnect, device number 19 [ 116.309393][ T2259] rust_binder: 2258:2259 got transaction to invalid handle 1 [ 116.316932][ T2259] rust_binder: 2258:2259 transaction call to 0:0 failed ENOENT, code 1 size 0-0 line process.rs:958 [ 117.318696][ T9] usb 3-1: new full-speed USB device number 20 using dummy_hcd [ 117.700237][ T9] usb 3-1: config 1 interface 0 altsetting 3 endpoint 0x82 has invalid maxpacket 512, setting to 64 [ 117.717052][ T9] usb 3-1: config 1 interface 0 has no altsetting 0 [ 117.728949][ T9] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 117.748341][ T9] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 117.756514][ T9] usb 3-1: Product: syz [ 117.761066][ T9] usb 3-1: Manufacturer: syz [ 117.765701][ T9] usb 3-1: SerialNumber: syz [ 117.778954][ T2288] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 117.879369][ T613] hub 4-1:0.0: config failed, can't read hub descriptor (err -22) [ 117.888733][ T613] usbhid 4-1:0.0: can't add hid device: -71 [ 117.894693][ T613] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 117.918901][ T613] usb 4-1: USB disconnect, device number 21 [ 117.990171][ T9] usblp 3-1:1.0: usblp0: USB Bidirectional printer dev 20 if 0 alt 3 proto 3 vid 0x0525 pid 0xA4A8 [ 118.002346][ T9] usb 3-1: USB disconnect, device number 20 [ 118.009525][ T9] usblp0: removed [ 118.119474][ T2318] FAULT_INJECTION: forcing a failure. [ 118.119474][ T2318] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 118.133235][ T2318] CPU: 0 UID: 0 PID: 2318 Comm: syz.0.722 Not tainted syzkaller #0 ff996278633adec6fd25d1632b496761701c4fe9 [ 118.133256][ T2318] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/15/2026 [ 118.133265][ T2318] Call Trace: [ 118.133268][ T2318] [ 118.133273][ T2318] __dump_stack+0x21/0x30 [ 118.133288][ T2318] dump_stack_lvl+0x140/0x1c0 [ 118.133298][ T2318] ? __cfi_dump_stack_lvl+0x10/0x10 [ 118.133312][ T2318] ? __kasan_check_write+0x18/0x20 [ 118.133333][ T2318] ? mutex_unlock+0x90/0x240 [ 118.133346][ T2318] ? __cfi_mutex_unlock+0x10/0x10 [ 118.133358][ T2318] dump_stack+0x19/0x20 [ 118.133367][ T2318] should_fail_ex+0x3c2/0x510 [ 118.133377][ T2318] should_fail+0xf/0x20 [ 118.133385][ T2318] should_fail_usercopy+0x1e/0x30 [ 118.133396][ T2318] _copy_from_user+0x20/0xa0 [ 118.133412][ T2318] __x64_sys_epoll_ctl+0x129/0x1b0 [ 118.133425][ T2318] ? __cfi___x64_sys_epoll_ctl+0x10/0x10 [ 118.133436][ T2318] ? __kasan_check_read+0x15/0x20 [ 118.133450][ T2318] x64_sys_call+0x2c44/0x2ee0 [ 118.133461][ T2318] do_syscall_64+0x57/0xf0 [ 118.133474][ T2318] ? clear_bhb_loop+0x50/0xa0 [ 118.133488][ T2318] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 118.133502][ T2318] RIP: 0033:0x7fb29999fb19 [ 118.133513][ T2318] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 118.133522][ T2318] RSP: 002b:00007fb2983f7028 EFLAGS: 00000246 ORIG_RAX: 00000000000000e9 [ 118.133534][ T2318] RAX: ffffffffffffffda RBX: 00007fb299c25fa0 RCX: 00007fb29999fb19 [ 118.133542][ T2318] RDX: 0000000000000003 RSI: 0000000000000001 RDI: 0000000000000004 [ 118.133549][ T2318] RBP: 00007fb2983f7090 R08: 0000000000000000 R09: 0000000000000000 [ 118.133556][ T2318] R10: 00002000000000c0 R11: 0000000000000246 R12: 0000000000000001 [ 118.133563][ T2318] R13: 00007fb299c26038 R14: 00007fb299c25fa0 R15: 00007ffecade7198 [ 118.133571][ T2318] [ 118.421639][ T2337] FAULT_INJECTION: forcing a failure. [ 118.421639][ T2337] name failslab, interval 1, probability 0, space 0, times 0 [ 118.434701][ T2337] CPU: 0 UID: 0 PID: 2337 Comm: syz.0.732 Not tainted syzkaller #0 ff996278633adec6fd25d1632b496761701c4fe9 [ 118.434730][ T2337] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/15/2026 [ 118.434741][ T2337] Call Trace: [ 118.434747][ T2337] [ 118.434753][ T2337] __dump_stack+0x21/0x30 [ 118.434775][ T2337] dump_stack_lvl+0x140/0x1c0 [ 118.434790][ T2337] ? __cfi_dump_stack_lvl+0x10/0x10 [ 118.434869][ T2337] dump_stack+0x19/0x20 [ 118.434883][ T2337] should_fail_ex+0x3c2/0x510 [ 118.434896][ T2337] should_failslab+0xac/0x100 [ 118.434912][ T2337] __kmalloc_node_track_caller_noprof+0x65/0x4f0 [ 118.434937][ T2337] ? __kasan_check_write+0x18/0x20 [ 118.434965][ T2337] ? _raw_spin_lock+0x92/0x120 [ 118.434980][ T2337] ? _RNvMs4_NtCswPamI0U300_11rust_binder7processNtB5_7Process18get_current_thread+0x499/0x1ac0 [ 118.435001][ T2337] ? __cfi__raw_spin_lock+0x10/0x10 [ 118.435017][ T2337] krealloc_noprof+0x8d/0x130 [ 118.435033][ T2337] _RNvMs4_NtCswPamI0U300_11rust_binder7processNtB5_7Process18get_current_thread+0x499/0x1ac0 [ 118.435054][ T2337] ? __cfi_selinux_file_open+0x10/0x10 [ 118.435071][ T2337] ? __cfi__RNvMs4_NtCswPamI0U300_11rust_binder7processNtB5_7Process18get_current_thread+0x10/0x10 [ 118.435095][ T2337] ? avc_has_extended_perms+0x7fb/0xe60 [ 118.435114][ T2337] ? __asan_memcpy+0x5a/0x80 [ 118.435136][ T2337] _RNvCswPamI0U300_11rust_binder17rust_binder_ioctl+0x3a9/0x4200 [ 118.435165][ T2337] ? __asan_set_shadow_00+0x12/0x20 [ 118.435184][ T2337] ? do_vfs_ioctl+0x1824/0x2010 [ 118.435202][ T2337] ? arch_stack_walk+0x10a/0x170 [ 118.435223][ T2337] ? __ia32_compat_sys_ioctl+0x980/0x980 [ 118.435241][ T2337] ? __cfi__RNvCswPamI0U300_11rust_binder17rust_binder_ioctl+0x10/0x10 [ 118.435267][ T2337] ? _parse_integer+0x2e/0x40 [ 118.435292][ T2337] ? ioctl_has_perm+0x39a/0x500 [ 118.435318][ T2337] ? has_cap_mac_admin+0xd0/0xd0 [ 118.435342][ T2337] ? proc_fail_nth_write+0x184/0x220 [ 118.435364][ T2337] ? __cfi_proc_fail_nth_write+0x10/0x10 [ 118.435385][ T2337] ? selinux_file_ioctl+0x732/0x1480 [ 118.435410][ T2337] ? vfs_write+0xbd2/0xfd0 [ 118.435467][ T2337] ? __cfi_selinux_file_ioctl+0x10/0x10 [ 118.435492][ T2337] ? hook_file_ioctl+0x1ef/0x590 [ 118.435515][ T2337] ? __cfi_vfs_write+0x10/0x10 [ 118.435539][ T2337] ? __cfi_hook_file_ioctl+0x10/0x10 [ 118.435562][ T2337] ? __kasan_check_write+0x18/0x20 [ 118.435586][ T2337] ? mutex_unlock+0x90/0x240 [ 118.435609][ T2337] ? __cfi_mutex_unlock+0x10/0x10 [ 118.435633][ T2337] ? __fget_files+0x2bc/0x330 [ 118.435653][ T2337] ? bpf_lsm_file_ioctl+0xd/0x20 [ 118.435675][ T2337] ? security_file_ioctl+0x3e/0x110 [ 118.435700][ T2337] ? __cfi__RNvCswPamI0U300_11rust_binder17rust_binder_ioctl+0x10/0x10 [ 118.435730][ T2337] __se_sys_ioctl+0x123/0x1b0 [ 118.435751][ T2337] __x64_sys_ioctl+0x7f/0xa0 [ 118.435770][ T2337] x64_sys_call+0x1878/0x2ee0 [ 118.435789][ T2337] do_syscall_64+0x57/0xf0 [ 118.435808][ T2337] ? clear_bhb_loop+0x50/0xa0 [ 118.435831][ T2337] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 118.435855][ T2337] RIP: 0033:0x7fb29999fb19 [ 118.435871][ T2337] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 118.435888][ T2337] RSP: 002b:00007fb2983f7028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 118.435909][ T2337] RAX: ffffffffffffffda RBX: 00007fb299c25fa0 RCX: 00007fb29999fb19 [ 118.435923][ T2337] RDX: 0000000000000000 RSI: 0000000040046207 RDI: 0000000000000003 [ 118.435935][ T2337] RBP: 00007fb2983f7090 R08: 0000000000000000 R09: 0000000000000000 [ 118.435946][ T2337] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 118.435958][ T2337] R13: 00007fb299c26038 R14: 00007fb299c25fa0 R15: 00007ffecade7198 [ 118.435973][ T2337] [ 118.496857][ T2341] syz.4.730 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 118.859101][ T36] audit: type=1400 audit(1794088745.689:344): avc: denied { getopt } for pid=2348 comm="syz.0.735" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 118.903995][ T9] usb 3-1: new high-speed USB device number 21 using dummy_hcd [ 119.080917][ T9] usb 3-1: Using ep0 maxpacket: 32 [ 119.091984][ T9] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 119.108648][ T9] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 119.126229][ T9] usb 3-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 119.145815][ T9] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 119.159345][ T9] usb 3-1: config 0 descriptor?? [ 119.165632][ T9] hub 3-1:0.0: USB hub found [ 119.208490][ T487] usb 4-1: new full-speed USB device number 22 using dummy_hcd [ 119.260148][ T2377] FAULT_INJECTION: forcing a failure. [ 119.260148][ T2377] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 119.294837][ T2377] CPU: 0 UID: 0 PID: 2377 Comm: syz.4.747 Not tainted syzkaller #0 ff996278633adec6fd25d1632b496761701c4fe9 [ 119.294869][ T2377] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/15/2026 [ 119.294881][ T2377] Call Trace: [ 119.294887][ T2377] [ 119.294894][ T2377] __dump_stack+0x21/0x30 [ 119.294918][ T2377] dump_stack_lvl+0x140/0x1c0 [ 119.294935][ T2377] ? __cfi_dump_stack_lvl+0x10/0x10 [ 119.294952][ T2377] ? rtc_tm_to_time64+0xd0/0x200 [ 119.294976][ T2377] ? rtc_read_alarm+0x23d/0x3c0 [ 119.294993][ T2377] dump_stack+0x19/0x20 [ 119.295008][ T2377] should_fail_ex+0x3c2/0x510 [ 119.295026][ T2377] should_fail+0xf/0x20 [ 119.295041][ T2377] should_fail_usercopy+0x1e/0x30 [ 119.295059][ T2377] _copy_to_user+0x24/0xa0 [ 119.295078][ T2377] rtc_dev_ioctl+0x6f0/0xed0 [ 119.295099][ T2377] ? __cfi_rtc_dev_ioctl+0x10/0x10 [ 119.295119][ T2377] ? __cfi_mutex_unlock+0x10/0x10 [ 119.295143][ T2377] ? __fget_files+0x2bc/0x330 [ 119.295162][ T2377] ? bpf_lsm_file_ioctl+0xd/0x20 [ 119.295182][ T2377] ? security_file_ioctl+0x3e/0x110 [ 119.295207][ T2377] ? __cfi_rtc_dev_ioctl+0x10/0x10 [ 119.295226][ T2377] __se_sys_ioctl+0x123/0x1b0 [ 119.295245][ T2377] __x64_sys_ioctl+0x7f/0xa0 [ 119.295263][ T2377] x64_sys_call+0x1878/0x2ee0 [ 119.295282][ T2377] do_syscall_64+0x57/0xf0 [ 119.295299][ T2377] ? clear_bhb_loop+0x50/0xa0 [ 119.295323][ T2377] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 119.295345][ T2377] RIP: 0033:0x7f9da4f9fb19 [ 119.295378][ T2377] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 119.295393][ T2377] RSP: 002b:00007f9da5e0f028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 119.295414][ T2377] RAX: ffffffffffffffda RBX: 00007f9da5225fa0 RCX: 00007f9da4f9fb19 [ 119.295428][ T2377] RDX: 0000200000000680 RSI: 0000000080287010 RDI: 0000000000000003 [ 119.295441][ T2377] RBP: 00007f9da5e0f090 R08: 0000000000000000 R09: 0000000000000000 [ 119.295452][ T2377] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 119.295464][ T2377] R13: 00007f9da5226038 R14: 00007f9da5225fa0 R15: 00007ffcf26eccb8 [ 119.295479][ T2377] [ 119.479948][ T2382] SELinux: Context system_u:object_r:usbmon_device_t:s0 is not valid (left unmapped). [ 119.529157][ T36] audit: type=1400 audit(1794088746.369:345): avc: denied { relabelto } for pid=2381 comm="syz.4.749" name="86" dev="tmpfs" ino=501 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon="system_u:object_r:usbmon_device_t:s0" [ 119.529980][ T487] usb 4-1: config 0 interface 0 altsetting 5 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 119.563611][ T36] audit: type=1400 audit(1794088746.369:346): avc: denied { associate } for pid=2381 comm="syz.4.749" name="86" dev="tmpfs" ino=501 scontext=system_u:object_r:unlabeled_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 srawcon="system_u:object_r:usbmon_device_t:s0" [ 119.567745][ T487] usb 4-1: config 0 interface 0 altsetting 5 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 119.609100][ T487] usb 4-1: config 0 interface 0 has no altsetting 0 [ 119.616148][ T36] audit: type=1400 audit(1794088746.399:347): avc: denied { write } for pid=1655 comm="syz-executor" name="86" dev="tmpfs" ino=501 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon="system_u:object_r:usbmon_device_t:s0" [ 119.616182][ T36] audit: type=1400 audit(1794088746.399:348): avc: denied { remove_name } for pid=1655 comm="syz-executor" name="binderfs" dev="tmpfs" ino=505 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon="system_u:object_r:usbmon_device_t:s0" [ 119.616203][ T36] audit: type=1400 audit(1794088746.399:349): avc: denied { rmdir } for pid=1655 comm="syz-executor" name="86" dev="tmpfs" ino=501 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon="system_u:object_r:usbmon_device_t:s0" [ 119.635403][ T2386] FAULT_INJECTION: forcing a failure. [ 119.635403][ T2386] name failslab, interval 1, probability 0, space 0, times 0 [ 119.644377][ T487] usb 4-1: New USB device found, idVendor=0b05, idProduct=1807, bcdDevice= 0.00 [ 119.672933][ T2386] CPU: 1 UID: 0 PID: 2386 Comm: syz.4.750 Not tainted syzkaller #0 ff996278633adec6fd25d1632b496761701c4fe9 [ 119.672964][ T2386] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/15/2026 [ 119.672976][ T2386] Call Trace: [ 119.672982][ T2386] [ 119.672989][ T2386] __dump_stack+0x21/0x30 [ 119.673011][ T2386] dump_stack_lvl+0x140/0x1c0 [ 119.673027][ T2386] ? __cfi_dump_stack_lvl+0x10/0x10 [ 119.673043][ T2386] ? unwind_get_return_address+0x51/0x90 [ 119.673068][ T2386] ? kasan_save_track+0x4f/0x80 [ 119.673086][ T2386] ? kasan_save_alloc_info+0x3a/0x50 [ 119.673108][ T2386] dump_stack+0x19/0x20 [ 119.673122][ T2386] should_fail_ex+0x3c2/0x510 [ 119.673139][ T2386] should_failslab+0xac/0x100 [ 119.673157][ T2386] kmem_cache_alloc_noprof+0x42/0x410 [ 119.673181][ T2386] ? mas_wr_store_type+0x13f3/0x1b40 [ 119.673204][ T2386] ? mas_alloc_nodes+0x254/0x9d0 [ 119.673226][ T2386] mas_alloc_nodes+0x254/0x9d0 [ 119.673249][ T2386] mas_preallocate+0x79b/0xc90 [ 119.673279][ T2386] ? __cfi_mas_preallocate+0x10/0x10 [ 119.673302][ T2386] ? __kasan_check_read+0x15/0x20 [ 119.673324][ T2386] ? anon_vma_name+0x51/0xa0 [ 119.673344][ T2386] ? vm_area_dup+0x415/0x560 [ 119.673366][ T2386] __split_vma+0x449/0xc10 [ 119.673383][ T2386] ? vms_gather_munmap_vmas+0xd90/0xd90 [ 119.673402][ T2386] vms_gather_munmap_vmas+0x2a2/0xd90 [ 119.673418][ T2386] ? mas_walk+0x45f/0x720 [ 119.673439][ T2386] mmap_region+0x621/0x1d10 [ 119.673464][ T2386] ? __cfi_mmap_region+0x10/0x10 [ 119.673490][ T2386] ? __kasan_check_read+0x15/0x20 [ 119.673514][ T2386] ? security_capable+0x44/0x130 [ 119.673531][ T2386] ? shmem_mapping+0x11/0x50 [ 119.673554][ T2386] do_mmap+0xa47/0x1370 [ 119.673577][ T2386] ? __cfi_do_mmap+0x10/0x10 [ 119.673598][ T2386] ? __cfi_down_read_killable+0x10/0x10 [ 119.673621][ T2386] __se_sys_remap_file_pages+0x78c/0x880 [ 119.673639][ T2386] ? __x64_sys_remap_file_pages+0xf0/0xf0 [ 119.673656][ T2386] ? ksys_write+0x1f3/0x260 [ 119.673675][ T2386] ? __cfi_ksys_write+0x10/0x10 [ 119.673691][ T2386] __x64_sys_remap_file_pages+0xc3/0xf0 [ 119.673708][ T2386] x64_sys_call+0x1d19/0x2ee0 [ 119.673725][ T2386] do_syscall_64+0x57/0xf0 [ 119.673742][ T2386] ? clear_bhb_loop+0x50/0xa0 [ 119.673765][ T2386] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 119.673786][ T2386] RIP: 0033:0x7f9da4f9fb19 [ 119.673802][ T2386] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 119.673816][ T2386] RSP: 002b:00007f9da5e0f028 EFLAGS: 00000246 ORIG_RAX: 00000000000000d8 [ 119.673835][ T2386] RAX: ffffffffffffffda RBX: 00007f9da5225fa0 RCX: 00007f9da4f9fb19 [ 119.673849][ T2386] RDX: 0000000000000000 RSI: 0000000000003000 RDI: 0000200000603000 [ 119.673861][ T2386] RBP: 00007f9da5e0f090 R08: 0000000000000001 R09: 0000000000000000 [ 119.673873][ T2386] R10: 0000000000000004 R11: 0000000000000246 R12: 0000000000000001 [ 119.673885][ T2386] R13: 00007f9da5226038 R14: 00007f9da5225fa0 R15: 00007ffcf26eccb8 [ 119.673900][ T2386] [ 120.027851][ T487] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 120.038146][ T487] usb 4-1: config 0 descriptor?? [ 120.103174][ T2405] FAULT_INJECTION: forcing a failure. [ 120.103174][ T2405] name failslab, interval 1, probability 0, space 0, times 0 [ 120.116100][ T2405] CPU: 1 UID: 0 PID: 2405 Comm: syz.0.759 Not tainted syzkaller #0 ff996278633adec6fd25d1632b496761701c4fe9 [ 120.116137][ T2405] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/15/2026 [ 120.116148][ T2405] Call Trace: [ 120.116155][ T2405] [ 120.116163][ T2405] __dump_stack+0x21/0x30 [ 120.116184][ T2405] dump_stack_lvl+0x140/0x1c0 [ 120.116197][ T2405] ? __cfi_dump_stack_lvl+0x10/0x10 [ 120.116214][ T2405] ? stack_depot_save_flags+0x38/0x800 [ 120.116232][ T2405] dump_stack+0x19/0x20 [ 120.116247][ T2405] should_fail_ex+0x3c2/0x510 [ 120.116263][ T2405] should_failslab+0xac/0x100 [ 120.116282][ T2405] kmem_cache_alloc_lru_noprof+0x44/0x410 [ 120.116307][ T2405] ? __d_alloc+0x42/0x8c0 [ 120.116340][ T2405] ? find_inode_fast+0x1c9/0x240 [ 120.116360][ T2405] __d_alloc+0x42/0x8c0 [ 120.116381][ T2405] ? ilookup+0x346/0x3c0 [ 120.116400][ T2405] d_alloc_pseudo+0x23/0xc0 [ 120.116422][ T2405] alloc_file_pseudo_noaccount+0xe0/0x330 [ 120.116444][ T2405] ? __kasan_check_write+0x18/0x20 [ 120.116468][ T2405] ? __cfi_alloc_file_pseudo_noaccount+0x10/0x10 [ 120.116489][ T2405] ? iput+0x2c1/0x910 [ 120.116508][ T2405] bdev_file_open_by_dev+0x17f/0x240 [ 120.116529][ T2405] swsusp_check+0x59/0x490 [ 120.116550][ T2405] software_resume+0x46/0x310 [ 120.116570][ T2405] resume_store+0x32f/0x4a0 [ 120.116589][ T2405] ? __cfi_resume_store+0x10/0x10 [ 120.116608][ T2405] ? _copy_from_iter+0x215/0x1520 [ 120.116628][ T2405] ? __kasan_check_write+0x18/0x20 [ 120.116651][ T2405] ? __cfi_resume_store+0x10/0x10 [ 120.116669][ T2405] kobj_attr_store+0x73/0xa0 [ 120.116689][ T2405] ? __cfi_kobj_attr_store+0x10/0x10 [ 120.116707][ T2405] sysfs_kf_write+0x13e/0x160 [ 120.116732][ T2405] ? __cfi_sysfs_kf_write+0x10/0x10 [ 120.116755][ T2405] kernfs_fop_write_iter+0x319/0x510 [ 120.116777][ T2405] vfs_write+0x765/0xfd0 [ 120.116802][ T2405] ? __cfi_vfs_write+0x10/0x10 [ 120.116824][ T2405] ? __cfi_mutex_lock+0x10/0x10 [ 120.116847][ T2405] ksys_write+0x145/0x260 [ 120.116862][ T2405] ? __cfi_ksys_write+0x10/0x10 [ 120.116878][ T2405] ? __kasan_check_read+0x15/0x20 [ 120.116901][ T2405] __x64_sys_write+0x7f/0x90 [ 120.116917][ T2405] x64_sys_call+0x271c/0x2ee0 [ 120.116935][ T2405] do_syscall_64+0x57/0xf0 [ 120.116953][ T2405] ? clear_bhb_loop+0x50/0xa0 [ 120.116976][ T2405] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 120.116997][ T2405] RIP: 0033:0x7fb29999fb19 [ 120.117011][ T2405] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 120.117025][ T2405] RSP: 002b:00007fb2983f7028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 120.117045][ T2405] RAX: ffffffffffffffda RBX: 00007fb299c25fa0 RCX: 00007fb29999fb19 [ 120.117059][ T2405] RDX: 0000000000000012 RSI: 0000200000000180 RDI: 0000000000000003 [ 120.117071][ T2405] RBP: 00007fb2983f7090 R08: 0000000000000000 R09: 0000000000000000 [ 120.117084][ T2405] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 120.117095][ T2405] R13: 00007fb299c26038 R14: 00007fb299c25fa0 R15: 00007ffecade7198 [ 120.117110][ T2405] [ 120.445126][ T2407] FAULT_INJECTION: forcing a failure. [ 120.445126][ T2407] name failslab, interval 1, probability 0, space 0, times 0 [ 120.458294][ T2407] CPU: 1 UID: 0 PID: 2407 Comm: syz.0.760 Not tainted syzkaller #0 ff996278633adec6fd25d1632b496761701c4fe9 [ 120.458324][ T2407] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/15/2026 [ 120.458335][ T2407] Call Trace: [ 120.458341][ T2407] [ 120.458349][ T2407] __dump_stack+0x21/0x30 [ 120.458371][ T2407] dump_stack_lvl+0x140/0x1c0 [ 120.458388][ T2407] ? __cfi_dump_stack_lvl+0x10/0x10 [ 120.458408][ T2407] dump_stack+0x19/0x20 [ 120.458423][ T2407] should_fail_ex+0x3c2/0x510 [ 120.458440][ T2407] ? security_sk_alloc+0x65/0x260 [ 120.458463][ T2407] should_failslab+0xac/0x100 [ 120.458483][ T2407] __kmalloc_noprof+0x69/0x510 [ 120.458507][ T2407] ? kasan_save_alloc_info+0x3a/0x50 [ 120.458527][ T2407] ? security_sk_alloc+0x65/0x260 [ 120.458547][ T2407] ? __kasan_slab_alloc+0x73/0x90 [ 120.458565][ T2407] security_sk_alloc+0x65/0x260 [ 120.458587][ T2407] sk_prot_alloc+0x123/0x3a0 [ 120.458608][ T2407] sk_alloc+0x40/0x590 [ 120.458628][ T2407] tipc_sk_create+0x165/0x2150 [ 120.458647][ T2407] ? kasan_save_alloc_info+0x3a/0x50 [ 120.458669][ T2407] ? __kasan_slab_alloc+0x73/0x90 [ 120.458687][ T2407] ? kmem_cache_alloc_noprof+0x1e2/0x410 [ 120.458710][ T2407] ? security_inode_alloc+0x51/0x230 [ 120.458731][ T2407] ? security_inode_alloc+0xc2/0x230 [ 120.458751][ T2407] ? inode_init_always_gfp+0x76e/0x9e0 [ 120.458770][ T2407] ? __cfi_tipc_sk_create+0x10/0x10 [ 120.458789][ T2407] ? __cfi_sock_alloc_inode+0x10/0x10 [ 120.458805][ T2407] ? alloc_inode+0xdb/0x270 [ 120.458822][ T2407] __sock_create+0x3a5/0x810 [ 120.458881][ T2407] __sys_socket+0xe1/0x1c0 [ 120.458896][ T2407] __x64_sys_socket+0x7e/0x90 [ 120.458914][ T2407] x64_sys_call+0x2608/0x2ee0 [ 120.458931][ T2407] do_syscall_64+0x57/0xf0 [ 120.458949][ T2407] ? clear_bhb_loop+0x50/0xa0 [ 120.458972][ T2407] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 120.458994][ T2407] RIP: 0033:0x7fb29999fb19 [ 120.459011][ T2407] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 120.459021][ T2407] RSP: 002b:00007fb2983f7028 EFLAGS: 00000246 ORIG_RAX: 0000000000000029 [ 120.459034][ T2407] RAX: ffffffffffffffda RBX: 00007fb299c25fa0 RCX: 00007fb29999fb19 [ 120.459042][ T2407] RDX: 0000000000000000 RSI: 0000000000000002 RDI: 000000000000001e [ 120.459050][ T2407] RBP: 00007fb2983f7090 R08: 0000000000000000 R09: 0000000000000000 [ 120.459061][ T2407] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 120.459073][ T2407] R13: 00007fb299c26038 R14: 00007fb299c25fa0 R15: 00007ffecade7198 [ 120.459089][ T2407] [ 120.640441][ T487] hid-generic 0003:0B05:1807.0013: unknown main item tag 0x0 [ 120.726360][ T487] hid-generic 0003:0B05:1807.0013: ignoring exceeding usage max [ 120.736241][ T487] hid-generic 0003:0B05:1807.0013: hidraw0: USB HID v0.00 Device [HID 0b05:1807] on usb-dummy_hcd.3-1/input0 [ 120.743136][ T2411] udevd[2411]: failed to execute '/lib/udev/fido_id' 'fido_id': Input/output error [ 120.998499][ T31] usb 1-1: new high-speed USB device number 20 using dummy_hcd [ 121.149541][ T31] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 121.159266][ T31] usb 1-1: config 1 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 121.170339][ T31] usb 1-1: New USB device found, idVendor=04e6, idProduct=0005, bcdDevice= 1.00 [ 121.179430][ T31] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 121.187602][ T31] usb 1-1: Product: syz [ 121.191796][ T31] usb 1-1: Manufacturer: syz [ 121.196573][ T31] usb 1-1: SerialNumber: syz [ 121.205231][ T31] ums-sddr09 1-1:1.0: USB Mass Storage device detected [ 121.212888][ T31] ums-sddr09 1-1:1.0: This device (04e6,0005,0100 S 06 P 50) has an unneeded SubClass entry in unusual_devs.h (kernel syzkaller) [ 121.212888][ T31] Please send a copy of this message to and [ 121.570661][ T9] hub 3-1:0.0: config failed, can't read hub descriptor (err -22) [ 121.579864][ T9] usbhid 3-1:0.0: can't add hid device: -71 [ 121.585824][ T9] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 121.608920][ T9] usb 3-1: USB disconnect, device number 21 [ 121.639188][ T31] ums-sddr09 1-1:1.0: probe with driver ums-sddr09 failed with error -5 [ 122.111152][ T2425] FAULT_INJECTION: forcing a failure. [ 122.111152][ T2425] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 122.124285][ T2425] CPU: 0 UID: 0 PID: 2425 Comm: syz.2.767 Not tainted syzkaller #0 ff996278633adec6fd25d1632b496761701c4fe9 [ 122.124312][ T2425] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/15/2026 [ 122.124324][ T2425] Call Trace: [ 122.124331][ T2425] [ 122.124338][ T2425] __dump_stack+0x21/0x30 [ 122.124356][ T2425] dump_stack_lvl+0x140/0x1c0 [ 122.124366][ T2425] ? __cfi_dump_stack_lvl+0x10/0x10 [ 122.124376][ T2425] ? check_stack_object+0x138/0x150 [ 122.124392][ T2425] dump_stack+0x19/0x20 [ 122.124401][ T2425] should_fail_ex+0x3c2/0x510 [ 122.124411][ T2425] should_fail+0xf/0x20 [ 122.124420][ T2425] should_fail_usercopy+0x1e/0x30 [ 122.124430][ T2425] _copy_to_user+0x24/0xa0 [ 122.124442][ T2425] simple_read_from_buffer+0xed/0x160 [ 122.124455][ T2425] proc_fail_nth_read+0x1aa/0x220 [ 122.124469][ T2425] ? __cfi_proc_fail_nth_read+0x10/0x10 [ 122.124481][ T2425] ? bpf_lsm_file_permission+0xd/0x20 [ 122.124494][ T2425] ? __cfi_proc_fail_nth_read+0x10/0x10 [ 122.124505][ T2425] vfs_read+0x28b/0xc70 [ 122.124520][ T2425] ? __cfi_vfs_read+0x10/0x10 [ 122.124533][ T2425] ? __kasan_check_write+0x18/0x20 [ 122.124554][ T2425] ? mutex_lock+0x97/0x1d0 [ 122.124567][ T2425] ? __cfi_mutex_lock+0x10/0x10 [ 122.124580][ T2425] ksys_read+0x145/0x260 [ 122.124594][ T2425] ? __cfi_ksys_read+0x10/0x10 [ 122.124608][ T2425] ? __kasan_check_read+0x15/0x20 [ 122.124622][ T2425] __x64_sys_read+0x7f/0x90 [ 122.124631][ T2425] x64_sys_call+0x2638/0x2ee0 [ 122.124642][ T2425] do_syscall_64+0x57/0xf0 [ 122.124652][ T2425] ? clear_bhb_loop+0x50/0xa0 [ 122.124666][ T2425] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 122.124680][ T2425] RIP: 0033:0x7f6210d6034e [ 122.124690][ T2425] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 122.124698][ T2425] RSP: 002b:00007f6211b87fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 122.124711][ T2425] RAX: ffffffffffffffda RBX: 00007f6211b886c0 RCX: 00007f6210d6034e [ 122.124719][ T2425] RDX: 000000000000000f RSI: 00007f6211b880a0 RDI: 0000000000000004 [ 122.124726][ T2425] RBP: 00007f6211b88090 R08: 0000000000000000 R09: 0000000000000000 [ 122.124733][ T2425] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 122.124739][ T2425] R13: 00007f6211026038 R14: 00007f6211025fa0 R15: 00007ffe57211ae8 [ 122.124748][ T2425] [ 122.371724][ T31] usb 4-1: USB disconnect, device number 22 [ 122.546586][ T2444] rust_binder: 2443:2444 no such ref 0 [ 122.552695][ T2444] rust_binder: 2443:2444 got transaction to invalid handle 1 [ 122.560134][ T2444] rust_binder: 2443:2444 transaction call to 0:0 failed ENOENT, code 1 size 0-0 line process.rs:958 [ 122.591288][ T2450] FAULT_INJECTION: forcing a failure. [ 122.591288][ T2450] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 122.603732][ T2452] incfs: Error accessing: ./file0. [ 122.604661][ T2450] CPU: 0 UID: 0 PID: 2450 Comm: syz.2.777 Not tainted syzkaller #0 ff996278633adec6fd25d1632b496761701c4fe9 [ 122.604688][ T2450] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/15/2026 [ 122.604700][ T2450] Call Trace: [ 122.604706][ T2450] [ 122.604713][ T2450] __dump_stack+0x21/0x30 [ 122.604735][ T2450] dump_stack_lvl+0x140/0x1c0 [ 122.604751][ T2450] ? __cfi_dump_stack_lvl+0x10/0x10 [ 122.604769][ T2450] ? check_stack_object+0x138/0x150 [ 122.604794][ T2450] dump_stack+0x19/0x20 [ 122.604809][ T2450] should_fail_ex+0x3c2/0x510 [ 122.604825][ T2450] should_fail+0xf/0x20 [ 122.604840][ T2450] should_fail_usercopy+0x1e/0x30 [ 122.604857][ T2450] _copy_to_user+0x24/0xa0 [ 122.604877][ T2450] simple_read_from_buffer+0xed/0x160 [ 122.604899][ T2450] proc_fail_nth_read+0x1aa/0x220 [ 122.604921][ T2450] ? __cfi_proc_fail_nth_read+0x10/0x10 [ 122.604942][ T2450] ? bpf_lsm_file_permission+0xd/0x20 [ 122.604961][ T2450] ? __cfi_proc_fail_nth_read+0x10/0x10 [ 122.604982][ T2450] vfs_read+0x28b/0xc70 [ 122.605004][ T2450] ? _copy_to_user+0x7d/0xa0 [ 122.605022][ T2450] ? __cfi_vfs_read+0x10/0x10 [ 122.605044][ T2450] ? __kasan_check_write+0x18/0x20 [ 122.605067][ T2450] ? mutex_lock+0x97/0x1d0 [ 122.605089][ T2450] ? __cfi_mutex_lock+0x10/0x10 [ 122.605110][ T2450] ksys_read+0x145/0x260 [ 122.605132][ T2450] ? __cfi_ksys_read+0x10/0x10 [ 122.605154][ T2450] ? __kasan_check_write+0x18/0x20 [ 122.605176][ T2450] ? fput+0x1a4/0x230 [ 122.605194][ T2450] ? __kasan_check_read+0x15/0x20 [ 122.605215][ T2450] __x64_sys_read+0x7f/0x90 [ 122.605231][ T2450] x64_sys_call+0x2638/0x2ee0 [ 122.605249][ T2450] do_syscall_64+0x57/0xf0 [ 122.605266][ T2450] ? clear_bhb_loop+0x50/0xa0 [ 122.605289][ T2450] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 122.605310][ T2450] RIP: 0033:0x7f6210d6034e [ 122.605326][ T2450] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 122.605340][ T2450] RSP: 002b:00007f6211b87fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 122.605360][ T2450] RAX: ffffffffffffffda RBX: 00007f6211b886c0 RCX: 00007f6210d6034e [ 122.605373][ T2450] RDX: 000000000000000f RSI: 00007f6211b880a0 RDI: 0000000000000004 [ 122.605384][ T2450] RBP: 00007f6211b88090 R08: 0000000000000000 R09: 0000000000000000 [ 122.605396][ T2450] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 122.605407][ T2450] R13: 00007f6211026038 R14: 00007f6211025fa0 R15: 00007ffe57211ae8 [ 122.605421][ T2450] [ 122.859020][ T2452] incfs: mount failed -2 [ 122.888127][ T2462] FAULT_INJECTION: forcing a failure. [ 122.888127][ T2462] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 122.901274][ T2462] CPU: 0 UID: 0 PID: 2462 Comm: syz.2.783 Not tainted syzkaller #0 ff996278633adec6fd25d1632b496761701c4fe9 [ 122.901296][ T2462] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/15/2026 [ 122.901304][ T2462] Call Trace: [ 122.901308][ T2462] [ 122.901313][ T2462] __dump_stack+0x21/0x30 [ 122.901334][ T2462] dump_stack_lvl+0x140/0x1c0 [ 122.901344][ T2462] ? __cfi_dump_stack_lvl+0x10/0x10 [ 122.901354][ T2462] dump_stack+0x19/0x20 [ 122.901363][ T2462] should_fail_ex+0x3c2/0x510 [ 122.901373][ T2462] should_fail+0xf/0x20 [ 122.901381][ T2462] should_fail_usercopy+0x1e/0x30 [ 122.901392][ T2462] _copy_from_user+0x20/0xa0 [ 122.901405][ T2462] __se_sys_mount+0x182/0x480 [ 122.901415][ T2462] ? ksys_write+0x1f3/0x260 [ 122.901424][ T2462] ? __x64_sys_mount+0xf0/0xf0 [ 122.901434][ T2462] __x64_sys_mount+0xc3/0xf0 [ 122.901443][ T2462] x64_sys_call+0x2021/0x2ee0 [ 122.901454][ T2462] do_syscall_64+0x57/0xf0 [ 122.901465][ T2462] ? clear_bhb_loop+0x50/0xa0 [ 122.901479][ T2462] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 122.901492][ T2462] RIP: 0033:0x7f6210d9fb19 [ 122.901503][ T2462] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 122.901511][ T2462] RSP: 002b:00007f6211b88028 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 122.901524][ T2462] RAX: ffffffffffffffda RBX: 00007f6211025fa0 RCX: 00007f6210d9fb19 [ 122.901532][ T2462] RDX: 0000200000000400 RSI: 00002000000003c0 RDI: 0000000000000000 [ 122.901539][ T2462] RBP: 00007f6211b88090 R08: 0000200000000580 R09: 0000000000000000 [ 122.901546][ T2462] R10: 0000000000008008 R11: 0000000000000246 R12: 0000000000000001 [ 122.901553][ T2462] R13: 00007f6211026038 R14: 00007f6211025fa0 R15: 00007ffe57211ae8 [ 122.901568][ T2462] [ 122.901844][ T487] usb 4-1: new high-speed USB device number 23 using dummy_hcd [ 123.107323][ T2467] rust_binder: 2466:2467 no such ref 0 [ 123.117513][ T2467] rust_binder: 2466:2467 got transaction to invalid handle 1 [ 123.125071][ T2467] rust_binder: 2466:2467 transaction call to 0:0 failed ENOENT, code 1 size 0-0 line process.rs:958 [ 123.145399][ T36] audit: type=1400 audit(1794088749.979:350): avc: denied { mounton } for pid=2470 comm="syz.2.787" path="/193/file0" dev="sysfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=dir permissive=1 [ 123.239759][ T487] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 123.250215][ T487] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 123.260831][ T487] usb 4-1: New USB device found, idVendor=041e, idProduct=4068, bcdDevice= 0.40 [ 123.270377][ T487] usb 4-1: New USB device strings: Mfr=1, Product=34, SerialNumber=3 [ 123.278511][ T487] usb 4-1: Product: syz [ 123.282900][ T487] usb 4-1: Manufacturer: syz [ 123.287483][ T487] usb 4-1: SerialNumber: syz [ 123.551468][ T487] usb 4-1: 0:1 : does not exist [ 123.556386][ T487] usb 4-1: 0:2 : does not exist [ 123.563815][ T487] usb 4-1: 4:0: cannot get min/max values for control 2 (id 4) [ 123.575093][ T487] usb 4-1: 4:0: failed to get current value for ch 1 (-22) [ 123.587334][ T487] usb 4-1: USB disconnect, device number 23 [ 123.828373][ T36] audit: type=1400 audit(1794088750.659:351): avc: denied { setattr } for pid=2490 comm="syz.2.794" name="enable" dev="tracefs" ino=19680823 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=file permissive=1 [ 123.851285][ T36] audit: type=1400 audit(1794088750.669:352): avc: denied { getopt } for pid=2490 comm="syz.2.794" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 123.871081][ T36] audit: type=1400 audit(1794088750.669:353): avc: denied { write } for pid=2490 comm="syz.2.794" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 123.878183][ T2493] FAULT_INJECTION: forcing a failure. [ 123.878183][ T2493] name failslab, interval 1, probability 0, space 0, times 0 [ 123.890759][ T36] audit: type=1400 audit(1794088750.669:354): avc: denied { read } for pid=2490 comm="syz.2.794" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 123.903631][ T2493] CPU: 0 UID: 0 PID: 2493 Comm: syz.2.795 Not tainted syzkaller #0 ff996278633adec6fd25d1632b496761701c4fe9 [ 123.903661][ T2493] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/15/2026 [ 123.903674][ T2493] Call Trace: [ 123.903680][ T2493] [ 123.903687][ T2493] __dump_stack+0x21/0x30 [ 123.903711][ T2493] dump_stack_lvl+0x140/0x1c0 [ 123.903729][ T2493] ? __cfi_dump_stack_lvl+0x10/0x10 [ 123.903747][ T2493] ? futex_wait+0x2b8/0x7c0 [ 123.903771][ T2493] ? __cfi_futex_wait+0x10/0x10 [ 123.903793][ T2493] dump_stack+0x19/0x20 [ 123.903808][ T2493] should_fail_ex+0x3c2/0x510 [ 123.903826][ T2493] should_failslab+0xac/0x100 [ 123.903845][ T2493] kmem_cache_alloc_noprof+0x42/0x410 [ 123.903870][ T2493] ? do_futex+0x32a/0x510 [ 123.903887][ T2493] ? getname_flags+0xcc/0x6b0 [ 123.903905][ T2493] getname_flags+0xcc/0x6b0 [ 123.903922][ T2493] getname+0x1b/0x30 [ 123.903938][ T2493] do_sys_openat2+0xda/0x1d0 [ 123.903959][ T2493] ? fput+0x1a4/0x230 [ 123.903978][ T2493] ? do_sys_open+0x100/0x100 [ 123.903998][ T2493] ? __kasan_check_write+0x18/0x20 [ 123.904023][ T2493] __x64_sys_open+0x120/0x150 [ 123.904046][ T2493] x64_sys_call+0x131a/0x2ee0 [ 123.904064][ T2493] do_syscall_64+0x57/0xf0 [ 123.904082][ T2493] ? clear_bhb_loop+0x50/0xa0 [ 123.904105][ T2493] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 123.904127][ T2493] RIP: 0033:0x7f6210d9fb19 [ 123.904143][ T2493] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 123.904159][ T2493] RSP: 002b:00007f6211b88028 EFLAGS: 00000246 ORIG_RAX: 0000000000000002 [ 123.904179][ T2493] RAX: ffffffffffffffda RBX: 00007f6211025fa0 RCX: 00007f6210d9fb19 [ 123.904192][ T2493] RDX: 0000000000000000 RSI: 0000000000121342 RDI: 0000200000001600 [ 123.904204][ T2493] RBP: 00007f6210e37b70 R08: 0000000000000000 R09: 0000000000000000 [ 123.904216][ T2493] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 123.904227][ T2493] R13: 00007f6211026038 R14: 00007f6211025fa0 R15: 00007ffe57211ae8 [ 123.904243][ T2493] [ 124.078867][ T2495] rust_binder: 2494:2495 got transaction to invalid handle 1 [ 124.082322][ T36] audit: type=1400 audit(1794088750.669:355): avc: denied { setopt } for pid=2490 comm="syz.2.794" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 124.100929][ T613] usb 1-1: USB disconnect, device number 20 [ 124.105557][ T2495] rust_binder: 2494:2495 transaction call to 0:0 failed ENOENT, code 1 size 0-0 line process.rs:958 [ 124.121302][ T2497] FAULT_INJECTION: forcing a failure. [ 124.121302][ T2497] name failslab, interval 1, probability 0, space 0, times 0 [ 124.200433][ T2497] CPU: 0 UID: 0 PID: 2497 Comm: syz.2.796 Not tainted syzkaller #0 ff996278633adec6fd25d1632b496761701c4fe9 [ 124.200467][ T2497] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/15/2026 [ 124.200479][ T2497] Call Trace: [ 124.200486][ T2497] [ 124.200501][ T2497] __dump_stack+0x21/0x30 [ 124.200524][ T2497] dump_stack_lvl+0x140/0x1c0 [ 124.200542][ T2497] ? __cfi_dump_stack_lvl+0x10/0x10 [ 124.200558][ T2497] ? pcpu_memcg_post_alloc_hook+0x202/0x2e0 [ 124.200579][ T2497] ? mutex_unlock+0x90/0x240 [ 124.200601][ T2497] ? pcpu_alloc_noprof+0x1440/0x1440 [ 124.200619][ T2497] dump_stack+0x19/0x20 [ 124.200635][ T2497] should_fail_ex+0x3c2/0x510 [ 124.200653][ T2497] should_failslab+0xac/0x100 [ 124.200672][ T2497] __kmalloc_cache_noprof+0x41/0x470 [ 124.200697][ T2497] ? percpu_ref_init+0xe3/0x4d0 [ 124.200715][ T2497] percpu_ref_init+0xe3/0x4d0 [ 124.200732][ T2497] ? __cfi_io_ring_ctx_ref_free+0x10/0x10 [ 124.200755][ T2497] io_ring_ctx_alloc+0x141/0x1dc0 [ 124.200776][ T2497] io_uring_create+0x2e0/0x13f0 [ 124.200796][ T2497] ? __kasan_check_write+0x18/0x20 [ 124.200821][ T2497] __se_sys_io_uring_setup+0x2a4/0x2b0 [ 124.200845][ T2497] ? __kasan_check_write+0x18/0x20 [ 124.200868][ T2497] ? __x64_sys_io_uring_setup+0x80/0x80 [ 124.200893][ T2497] ? __kasan_check_read+0x15/0x20 [ 124.200915][ T2497] __x64_sys_io_uring_setup+0x5f/0x80 [ 124.200938][ T2497] x64_sys_call+0x22c0/0x2ee0 [ 124.200957][ T2497] do_syscall_64+0x57/0xf0 [ 124.200975][ T2497] ? clear_bhb_loop+0x50/0xa0 [ 124.200997][ T2497] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 124.201020][ T2497] RIP: 0033:0x7f6210d9fb19 [ 124.201035][ T2497] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 124.201051][ T2497] RSP: 002b:00007f6211b87fb8 EFLAGS: 00000206 ORIG_RAX: 00000000000001a9 [ 124.201071][ T2497] RAX: ffffffffffffffda RBX: 0000200000000400 RCX: 00007f6210d9fb19 [ 124.201086][ T2497] RDX: 0000000000000000 RSI: 0000200000000400 RDI: 0000000000001727 [ 124.201118][ T2497] RBP: 00007f6211b88090 R08: 0000000000000000 R09: 0000000000000101 [ 124.201130][ T2497] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 124.201142][ T2497] R13: 0000000000000000 R14: 0000000000000000 R15: 00007ffe57211ae8 [ 124.201157][ T2497] [ 124.476647][ T2507] ./dev/sda1: Can't lookup blockdev [ 124.505824][ T2515] rust_binder: 2514:2515 got transaction to invalid handle 1 [ 124.513262][ T2515] rust_binder: 2514:2515 transaction call to 0:0 failed ENOENT, code 1 size 0-0 line process.rs:958 [ 124.848519][ T613] usb 1-1: new high-speed USB device number 21 using dummy_hcd [ 125.008701][ T613] usb 1-1: Using ep0 maxpacket: 32 [ 125.015040][ T613] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 125.026068][ T613] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 125.035898][ T613] usb 1-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 125.045100][ T613] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 125.053719][ T613] usb 1-1: config 0 descriptor?? [ 125.059626][ T613] hub 1-1:0.0: USB hub found [ 125.314906][ T613] hub 1-1:0.0: 1 port detected [ 125.395120][ T36] audit: type=1400 audit(1794088752.229:356): avc: denied { unmount } for pid=296 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 125.558515][ T9] usb 3-1: new high-speed USB device number 23 using dummy_hcd [ 125.708460][ T9] usb 3-1: Using ep0 maxpacket: 16 [ 125.714672][ T9] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 125.725861][ T9] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 125.735650][ T9] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 125.748561][ T9] usb 3-1: New USB device found, idVendor=054c, idProduct=03d5, bcdDevice= 0.00 [ 125.757824][ T9] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 125.766675][ T9] usb 3-1: config 0 descriptor?? [ 125.974357][ T2529] Bluetooth: received HCILL_WAKE_UP_ACK in state 2 [ 125.981462][ T445] Bluetooth: hci0: Frame reassembly failed (-84) [ 126.186144][ T9] input: HID 054c:03d5 as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/0003:054C:03D5.0014/input/input20 [ 126.199270][ T9] sony 0003:054C:03D5.0014: input,hidraw0: USB HID v0.00 Joystick [HID 054c:03d5] on usb-dummy_hcd.2-1/input0 [ 126.211272][ T2536] udevd[2536]: failed to execute '/lib/udev/fido_id' 'fido_id': Input/output error [ 126.265938][ T36] audit: type=1400 audit(1794088753.099:357): avc: denied { read write } for pid=2537 comm="syz.3.814" name="mtrr" dev="proc" ino=4026532004 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:mtrr_device_t tclass=file permissive=1 [ 126.289777][ T36] audit: type=1400 audit(1794088753.099:358): avc: denied { open } for pid=2537 comm="syz.3.814" path="/185/proc/mtrr" dev="proc" ino=4026532004 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:mtrr_device_t tclass=file permissive=1 [ 126.327678][ T36] audit: type=1400 audit(1794088753.109:359): avc: denied { ioctl } for pid=2537 comm="syz.3.814" path="/185/proc/mtrr" dev="proc" ino=4026532004 ioctlcmd=0x4d00 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:mtrr_device_t tclass=file permissive=1 [ 126.331812][ T2544] rust_binder: 2543:2544 got transaction to invalid handle 1 [ 126.359375][ T613] hub 1-1:0.0: hub_hub_status failed (err = -32) [ 126.361772][ T2544] rust_binder: 2543:2544 transaction call to 0:0 failed ENOENT, code 1 size 0-0 line process.rs:958 [ 126.368239][ T613] hub 1-1:0.0: config failed, can't get hub status (err -32) [ 126.391390][ T613] usbhid 1-1:0.0: can't add hid device: -32 [ 126.397673][ T613] usbhid 1-1:0.0: probe with driver usbhid failed with error -32 [ 127.316729][ T2563] rust_binder: 2562:2563 got transaction to invalid handle 1 [ 127.324245][ T2563] rust_binder: 2562:2563 transaction call to 0:0 failed ENOENT, code 1 size 0-0 line process.rs:958 [ 127.350113][ T2565] 9p: Unknown access argument 00000000000000000000Æ: -22 [ 127.448578][ T486] usb 1-1: USB disconnect, device number 21 [ 127.498538][ T613] usb 4-1: new full-speed USB device number 24 using dummy_hcd [ 127.649381][ T613] usb 4-1: not running at top speed; connect to a high speed hub [ 127.663359][ T613] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 127.674570][ T613] usb 4-1: New USB device found, idVendor=225a, idProduct=e1d4, bcdDevice=a7.ad [ 127.683694][ T613] usb 4-1: New USB device strings: Mfr=245, Product=210, SerialNumber=0 [ 127.692411][ T613] usb 4-1: Product: syz [ 127.696659][ T613] usb 4-1: Manufacturer: syz [ 127.703492][ T613] usb 4-1: Found UVC 1.00 device syz (225a:e1d4) [ 127.905671][ T613] usb 4-1: UVC non compliance - GET_DEF(PROBE) not supported. Enabling workaround. [ 127.915514][ T613] uvcvideo 4-1:1.1: Failed to query (129) UVC probe control : -71 (exp. 26). [ 127.924520][ T613] uvcvideo 4-1:1.1: Failed to initialize the device (-71). [ 127.933751][ T613] usb 4-1: USB disconnect, device number 24 [ 127.987612][ T2579] 9p: Unknown access argument 00000000000000000000Æ: -22 [ 128.047700][ T2583] rust_binder: 2582:2583 got transaction to invalid handle 1 [ 128.048446][ T2534] Bluetooth: hci0: command 0x1003 tx timeout [ 128.055149][ T2583] rust_binder: 2582:2583 transaction call to 0:0 failed ENOENT, code 1 size 0-0 line process.rs:958 [ 128.061164][ T54] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 128.080758][ T10] usb 3-1: USB disconnect, device number 23 [ 128.537655][ T2600] 9p: Unknown access argument 00000000000000000000Æ: -22 [ 128.578528][ T10] usb 3-1: new high-speed USB device number 24 using dummy_hcd [ 128.728453][ T10] usb 3-1: Using ep0 maxpacket: 32 [ 128.735101][ T10] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 128.746995][ T10] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 128.757876][ T10] usb 3-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 128.768393][ T10] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 128.778237][ T10] usb 3-1: config 0 descriptor?? [ 128.787069][ T10] hub 3-1:0.0: USB hub found [ 128.808539][ T486] usb 4-1: new high-speed USB device number 25 using dummy_hcd [ 128.969723][ T486] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 128.982352][ T486] usb 4-1: config 1 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 128.994931][ T486] usb 4-1: New USB device found, idVendor=04e6, idProduct=0005, bcdDevice= 1.00 [ 129.004077][ T486] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 129.012666][ T486] usb 4-1: Product: syz [ 129.017321][ T486] usb 4-1: Manufacturer: syz [ 129.022293][ T486] usb 4-1: SerialNumber: syz [ 129.030010][ T486] ums-sddr09 4-1:1.0: USB Mass Storage device detected [ 129.040554][ T10] hub 3-1:0.0: 1 port detected [ 129.040654][ T486] ums-sddr09 4-1:1.0: This device (04e6,0005,0100 S 06 P 50) has an unneeded SubClass entry in unusual_devs.h (kernel syzkaller) [ 129.040654][ T486] Please send a copy of this message to and [ 129.260308][ T2622] 9p: Unknown access argument Æ: -22 [ 129.469033][ T486] ums-sddr09 4-1:1.0: probe with driver ums-sddr09 failed with error -5 [ 129.529664][ T2639] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=4085755150 (65372082400 ns) > initial count (13488772352 ns). Using initial count to start timer. [ 129.548592][ T36] audit: type=1400 audit(1794088756.389:360): avc: denied { create } for pid=2638 comm="syz.0.860" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_fib_lookup_socket permissive=1 [ 130.119672][ T10] hub 3-1:0.0: hub_hub_status failed (err = -32) [ 130.126147][ T10] hub 3-1:0.0: config failed, can't get hub status (err -32) [ 130.134722][ T10] usbhid 3-1:0.0: can't add hid device: -32 [ 130.140939][ T10] usbhid 3-1:0.0: probe with driver usbhid failed with error -32 [ 130.352099][ T2661] netlink: 12 bytes leftover after parsing attributes in process `syz.0.869'. [ 130.376032][ T2661] SELinux: Context .† is not valid (left unmapped). [ 130.383313][ T36] audit: type=1400 audit(1794088757.219:361): avc: denied { relabelto } for pid=2660 comm="syz.0.869" name="blkio.bfq.io_serviced" dev="tmpfs" ino=1262 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon=2E869D [ 130.408780][ T36] audit: type=1400 audit(1794088757.219:362): avc: denied { associate } for pid=2660 comm="syz.0.869" name="blkio.bfq.io_serviced" dev="tmpfs" ino=1262 scontext=system_u:object_r:unlabeled_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 srawcon=2E869D [ 130.434873][ T36] audit: type=1400 audit(1794088757.229:363): avc: denied { unlink } for pid=293 comm="syz-executor" name="blkio.bfq.io_serviced" dev="tmpfs" ino=1262 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon=2E869D ^D [ 130.511060][ T36] audit: type=1400 audit(1794088757.349:364): avc: denied { getopt } for pid=2670 comm="syz.0.873" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 130.530426][ T36] audit: type=1400 audit(1794088757.359:365): avc: denied { setattr } for pid=2670 comm="syz.0.873" name="RAWv6" dev="sockfs" ino=18180 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 130.559980][ T2677] input: syz1 as /devices/virtual/input/input21 [ 130.566304][ T2677] input: failed to attach handler leds to device input21, error: -6 [ 130.854561][ T2686] rust_binder: 2685:2686 no such ref 0 [ 130.865528][ T2686] rust_binder: 2685:2686 got transaction to invalid handle 1 [ 130.873109][ T2686] rust_binder: 2685:2686 transaction call to 0:0 failed ENOENT, code 1 size 0-0 line process.rs:958 [ 131.118788][ T10] usb 3-1: USB disconnect, device number 24 [ 131.410761][ T2699] FAULT_INJECTION: forcing a failure. [ 131.410761][ T2699] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 131.424059][ T2699] CPU: 0 UID: 0 PID: 2699 Comm: syz.0.885 Not tainted syzkaller #0 ff996278633adec6fd25d1632b496761701c4fe9 [ 131.424091][ T2699] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/15/2026 [ 131.424103][ T2699] Call Trace: [ 131.424110][ T2699] [ 131.424118][ T2699] __dump_stack+0x21/0x30 [ 131.424141][ T2699] dump_stack_lvl+0x140/0x1c0 [ 131.424157][ T2699] ? __cfi_dump_stack_lvl+0x10/0x10 [ 131.424175][ T2699] dump_stack+0x19/0x20 [ 131.424192][ T2699] should_fail_ex+0x3c2/0x510 [ 131.424210][ T2699] should_fail+0xf/0x20 [ 131.424231][ T2699] should_fail_usercopy+0x1e/0x30 [ 131.424250][ T2699] strncpy_from_user+0x29/0x280 [ 131.424267][ T2699] ? asm_exc_page_fault+0x2b/0x30 [ 131.424292][ T2699] getname_flags+0x106/0x6b0 [ 131.424311][ T2699] user_path_at+0x2b/0x60 [ 131.424331][ T2699] __se_sys_mount+0x28a/0x480 [ 131.424349][ T2699] ? ksys_write+0x1f3/0x260 [ 131.424374][ T2699] ? __x64_sys_mount+0xf0/0xf0 [ 131.424392][ T2699] __x64_sys_mount+0xc3/0xf0 [ 131.424409][ T2699] x64_sys_call+0x2021/0x2ee0 [ 131.424428][ T2699] do_syscall_64+0x57/0xf0 [ 131.424446][ T2699] ? clear_bhb_loop+0x50/0xa0 [ 131.424469][ T2699] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 131.424490][ T2699] RIP: 0033:0x7fb29999fb19 [ 131.424504][ T2699] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 131.424518][ T2699] RSP: 002b:00007fb2983f7028 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 131.424538][ T2699] RAX: ffffffffffffffda RBX: 00007fb299c25fa0 RCX: 00007fb29999fb19 [ 131.424551][ T2699] RDX: 0000200000000400 RSI: 00002000000003c0 RDI: 0000000000000000 [ 131.424563][ T2699] RBP: 00007fb2983f7090 R08: 0000200000000580 R09: 0000000000000000 [ 131.424574][ T2699] R10: 0000000000008008 R11: 0000000000000246 R12: 0000000000000001 [ 131.424585][ T2699] R13: 00007fb299c26038 R14: 00007fb299c25fa0 R15: 00007ffecade7198 [ 131.424599][ T2699] can't run '/sbi[ 131.684297][ T2714] 9p: Unknown access argument Æ: -22 [ 131.788944][ T486] usb 4-1: USB disconnect, device number 25 [ 131.893434][ T2736] FAULT_INJECTION: forcing a failure. [ 131.893434][ T2736] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 131.908031][ T2736] CPU: 0 UID: 0 PID: 2736 Comm: syz.2.902 Not tainted syzkaller #0 ff996278633adec6fd25d1632b496761701c4fe9 [ 131.908063][ T2736] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/15/2026 [ 131.908075][ T2736] Call Trace: [ 131.908081][ T2736] [ 131.908089][ T2736] __dump_stack+0x21/0x30 [ 131.908112][ T2736] dump_stack_lvl+0x140/0x1c0 [ 131.908137][ T2736] ? __cfi_dump_stack_lvl+0x10/0x10 [ 131.908157][ T2736] dump_stack+0x19/0x20 [ 131.908172][ T2736] should_fail_ex+0x3c2/0x510 [ 131.908195][ T2736] should_fail+0xf/0x20 [ 131.908211][ T2736] should_fail_usercopy+0x1e/0x30 [ 131.908230][ T2736] _copy_from_user+0x20/0xa0 [ 131.908250][ T2736] udmabuf_ioctl+0xfb/0x310 [ 131.908273][ T2736] ? __cfi_mutex_unlock+0x10/0x10 [ 131.908295][ T2736] ? __cfi_udmabuf_ioctl+0x10/0x10 [ 131.908318][ T2736] ? __fget_files+0x2bc/0x330 [ 131.908337][ T2736] ? bpf_lsm_file_ioctl+0xd/0x20 [ 131.908356][ T2736] ? security_file_ioctl+0x3e/0x110 [ 131.908379][ T2736] ? __cfi_udmabuf_ioctl+0x10/0x10 [ 131.908403][ T2736] __se_sys_ioctl+0x123/0x1b0 [ 131.908421][ T2736] __x64_sys_ioctl+0x7f/0xa0 [ 131.908438][ T2736] x64_sys_call+0x1878/0x2ee0 [ 131.908457][ T2736] do_syscall_64+0x57/0xf0 [ 131.908475][ T2736] ? clear_bhb_loop+0x50/0xa0 [ 131.908499][ T2736] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 131.908520][ T2736] RIP: 0033:0x7f6210d9fb19 [ 131.908536][ T2736] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 131.908551][ T2736] RSP: 002b:00007f6211b88028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 131.908568][ T2736] RAX: ffffffffffffffda RBX: 00007f6211025fa0 RCX: 00007f6210d9fb19 [ 131.908581][ T2736] RDX: 00002000000002c0 RSI: 0000000040187542 RDI: 0000000000000003 [ 131.908592][ T2736] RBP: 00007f6211b88090 R08: 0000000000000000 R09: 0000000000000000 [ 131.908603][ T2736] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 131.908613][ T2736] R13: 00007f6211026038 R14: 00007f6211025fa0 R15: 00007ffe57211ae8 [ 131.908628][ T2736] [ 132.149056][ T45] usb 1-1: new high-speed USB device number 22 using dummy_hcd [ 132.298462][ T45] usb 1-1: Using ep0 maxpacket: 32 [ 132.304810][ T45] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 132.316055][ T45] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 132.325941][ T45] usb 1-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 132.335020][ T45] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 132.344165][ T45] usb 1-1: config 0 descriptor?? [ 132.350117][ T45] hub 1-1:0.0: USB hub found [ 132.448469][ T10] usb 3-1: new high-speed USB device number 25 using dummy_hcd [ 132.599570][ T10] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 132.609654][ T10] usb 3-1: config 1 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 132.621465][ T10] usb 3-1: New USB device found, idVendor=04e6, idProduct=0005, bcdDevice= 1.00 [ 132.630707][ T10] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 132.639184][ T10] usb 3-1: Product: syz [ 132.643793][ T10] usb 3-1: Manufacturer: syz [ 132.648549][ T10] usb 3-1: SerialNumber: syz can't run '/sbi[ 132.656901][ T10] ums-sddr09 3-1:1.0: USB Mass Storage device detected [ 132.669081][ T10] ums-sddr09 3-1:1.0: This device (04e6,0005,0100 S 06 P 50) has an unneeded SubClass entry in unusual_devs.h (kernel syzkaller) [ 132.669081][ T10] Please send a copy of this message to and [ 132.893478][ T36] audit: type=1400 audit(1794088759.729:366): avc: denied { mount } for pid=2760 comm="syz.4.911" name="/" dev="tmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 132.920741][ T2765] rust_binder: 2764:2765 no such ref 0 [ 132.926847][ T2765] rust_binder: 2764:2765 got transaction to invalid handle 1 [ 132.934299][ T2765] rust_binder: 2764:2765 transaction call to 0:0 failed ENOENT, code 1 size 0-0 line process.rs:958 [ 133.040914][ T2770] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=3070988179 (3070988179 ns) > initial count (1876204212 ns). Using initial count to start timer. [ 133.119456][ T10] ums-sddr09 3-1:1.0: probe with driver ums-sddr09 failed with error -5 [ 133.269127][ T613] usb 4-1: new high-speed USB device number 26 using dummy_hcd [ 133.419590][ T613] usb 4-1: config 1 interface 0 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 64 [ 133.429539][ T613] usb 4-1: config 1 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 64 [ 133.439330][ T613] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 133.450281][ T613] usb 4-1: New USB device found, idVendor=067b, idProduct=2303, bcdDevice= 1.00 [ 133.459474][ T613] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 133.468853][ T2772] raw-gadget.2 gadget.3: fail, usb_ep_enable returned -22 [ 133.476048][ T2772] raw-gadget.2 gadget.3: fail, usb_ep_enable returned -22 [ 133.483969][ T613] pl2303 4-1:1.0: pl2303 converter detected [ 133.491419][ T613] usb 4-1: pl2303 converter now attached to ttyUSB0 can't run '/sbi[ 133.719175][ T36] audit: type=1400 audit(1794088760.559:367): avc: denied { ioctl } for pid=2771 comm="syz.3.916" path="/dev/snapshot" dev="devtmpfs" ino=21 ioctlcmd=0x330f scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 133.771700][ T2772] pl2303 4-1:1.0: pl2303_vendor_write - failed to write [0007]: -71 [ 133.771780][ T613] usb 4-1: USB disconnect, device number 26 [ 133.780005][ T2772] pl2303 ttyUSB0: pl2303_get_line_request - failed: -19 [ 133.792910][ T2772] pl2303 ttyUSB0: pl2303_set_line_request - failed: -19 [ 133.800134][ T2772] pl2303 4-1:1.0: pl2303_vendor_read - failed to read [000a]: -19 [ 133.808248][ T2772] pl2303 ttyUSB0: failed to submit interrupt urb: -19 [ 133.816054][ T613] pl2303 ttyUSB0: pl2303 converter now disconnected from ttyUSB0 [ 133.824272][ T613] pl2303 4-1:1.0: device disconnected [ 134.105916][ T36] audit: type=1400 audit(1794088760.939:368): avc: denied { ioctl } for pid=2791 comm="syz.4.921" path="/dev/fuse" dev="devtmpfs" ino=23 ioctlcmd=0x662a scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fuse_device_t tclass=chr_file permissive=1 [ 134.130900][ T36] audit: type=1400 audit(1794088760.949:369): avc: denied { create } for pid=2791 comm="syz.4.921" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:hugetlbfs_t tclass=key permissive=1 [ 134.140740][ T2794] rust_binder: 2793:2794 no such ref 0 [ 134.159295][ T2794] rust_binder: 2793:2794 got transaction to invalid handle 1 [ 134.166775][ T2794] rust_binder: 2793:2794 transaction call to 0:0 failed ENOENT, code 1 size 0-0 line process.rs:958 [ 134.601527][ T45] hub 1-1:0.0: config failed, can't read hub descriptor (err -22) [ 134.611686][ T45] usbhid 1-1:0.0: can't add hid device: -71 [ 134.618053][ T45] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 134.648947][ T45] usb 1-1: USB disconnect, device number 22 can't run '/sbi[ 135.121350][ T36] audit: type=1400 audit(1794088761.959:370): avc: denied { mounton } for pid=2809 comm="syz.0.928" path="/246/proc/615/task/617/fail-nth" dev="proc" ino=19864 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=file permissive=1 [ 135.121459][ T2811] FAULT_INJECTION: forcing a failure. [ 135.121459][ T2811] name failslab, interval 1, probability 0, space 0, times 0 [ 135.158358][ T2811] CPU: 0 UID: 0 PID: 2811 Comm: syz.0.928 Not tainted syzkaller #0 ff996278633adec6fd25d1632b496761701c4fe9 [ 135.158379][ T2811] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/15/2026 [ 135.158387][ T2811] Call Trace: [ 135.158392][ T2811] [ 135.158401][ T2811] __dump_stack+0x21/0x30 [ 135.158422][ T2811] dump_stack_lvl+0x140/0x1c0 [ 135.158438][ T2811] ? __cfi_dump_stack_lvl+0x10/0x10 [ 135.158454][ T2811] dump_stack+0x19/0x20 [ 135.158468][ T2811] should_fail_ex+0x3c2/0x510 [ 135.158486][ T2811] should_failslab+0xac/0x100 [ 135.158504][ T2811] kmem_cache_alloc_noprof+0x42/0x410 [ 135.158526][ T2811] ? __inet_hash_connect+0x7b9/0x17f0 [ 135.158538][ T2811] ? inet_sk_get_local_port_range+0xa2/0x1d0 [ 135.158551][ T2811] __inet_hash_connect+0x7b9/0x17f0 [ 135.158563][ T2811] ? __cfi___inet_check_established+0x10/0x10 [ 135.158576][ T2811] ? __cfi___inet_hash_connect+0x10/0x10 [ 135.158587][ T2811] ? secure_ipv4_port_ephemeral+0xd1/0x170 [ 135.158599][ T2811] ? __cfi_secure_ipv4_port_ephemeral+0x10/0x10 [ 135.158610][ T2811] ? _raw_spin_lock_irqsave+0xc1/0x160 [ 135.158622][ T2811] inet_hash_connect+0xbe/0x160 [ 135.158636][ T2811] tcp_v4_connect+0xbcd/0x18f0 [ 135.158648][ T2811] ? __cfi_tcp_v4_connect+0x10/0x10 [ 135.158660][ T2811] ? __kasan_check_write+0x18/0x20 [ 135.158674][ T2811] ? _raw_spin_lock_bh+0x96/0x130 [ 135.158685][ T2811] __inet_stream_connect+0x272/0xf10 [ 135.158696][ T2811] ? selinux_socket_post_create+0x2d7/0x490 [ 135.158709][ T2811] ? _raw_spin_unlock_bh+0x54/0x60 [ 135.158720][ T2811] ? lock_sock_nested+0x216/0x2a0 [ 135.158730][ T2811] ? tcp_init_sock+0x5a0/0x8d0 [ 135.158743][ T2811] ? __cfi___inet_stream_connect+0x10/0x10 [ 135.158754][ T2811] ? tcp_v4_init_sock+0x19/0x60 [ 135.158766][ T2811] ? bpf_lsm_socket_post_create+0xd/0x20 [ 135.158781][ T2811] ? security_socket_post_create+0x48/0x140 [ 135.158795][ T2811] inet_stream_connect+0x66/0xa0 [ 135.158806][ T2811] p9_fd_create_tcp+0x497/0x630 [ 135.158817][ T2811] ? __cfi_p9_fd_create_tcp+0x10/0x10 [ 135.158832][ T2811] ? __kasan_slab_free+0x6a/0x80 [ 135.158849][ T2811] ? kfree+0x158/0x440 [ 135.158869][ T2811] ? p9_client_create+0x7ee/0x12d0 [ 135.158889][ T2811] p9_client_create+0x89a/0x12d0 [ 135.158903][ T2811] ? __cfi_p9_client_create+0x10/0x10 [ 135.158917][ T2811] ? __kasan_kmalloc+0x96/0xb0 [ 135.158927][ T2811] ? __kmalloc_cache_noprof+0x23c/0x470 [ 135.158942][ T2811] ? v9fs_mount+0xc1/0x9d0 [ 135.158953][ T2811] ? kasan_save_alloc_info+0x3a/0x50 [ 135.158966][ T2811] ? __kasan_kmalloc+0x96/0xb0 [ 135.158977][ T2811] ? kstrdup+0x7b/0x130 [ 135.158990][ T2811] ? __asan_memset+0x39/0x50 [ 135.159004][ T2811] v9fs_session_init+0x1c4/0x18a0 [ 135.159019][ T2811] ? __cfi_v9fs_session_init+0x10/0x10 [ 135.159033][ T2811] ? kasan_save_alloc_info+0x3a/0x50 [ 135.159046][ T2811] ? __kasan_kmalloc+0x96/0xb0 [ 135.159057][ T2811] ? __kmalloc_cache_noprof+0x23c/0x470 [ 135.159071][ T2811] ? v9fs_mount+0xc1/0x9d0 [ 135.159082][ T2811] v9fs_mount+0xdb/0x9d0 [ 135.159092][ T2811] ? __cfi_v9fs_mount+0x10/0x10 [ 135.159102][ T2811] ? selinux_capable+0x38/0x50 [ 135.159115][ T2811] legacy_get_tree+0x106/0x1b0 [ 135.159133][ T2811] ? __cfi_v9fs_mount+0x10/0x10 [ 135.159144][ T2811] vfs_get_tree+0x9e/0x290 [ 135.159158][ T2811] do_new_mount+0x251/0xb40 [ 135.159172][ T2811] ? security_capable+0x44/0x130 [ 135.159184][ T2811] path_mount+0x66a/0xff0 [ 135.159197][ T2811] ? putname+0x113/0x150 [ 135.159207][ T2811] __se_sys_mount+0x2bf/0x480 [ 135.159217][ T2811] ? __x64_sys_mount+0xf0/0xf0 [ 135.159227][ T2811] ? __kasan_check_write+0x18/0x20 [ 135.159240][ T2811] ? fpregs_restore_userregs+0x11c/0x260 [ 135.159255][ T2811] __x64_sys_mount+0xc3/0xf0 [ 135.159264][ T2811] x64_sys_call+0x2021/0x2ee0 [ 135.159275][ T2811] do_syscall_64+0x57/0xf0 [ 135.159286][ T2811] ? clear_bhb_loop+0x50/0xa0 [ 135.159299][ T2811] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 135.159312][ T2811] RIP: 0033:0x7fb29999fb19 [ 135.159323][ T2811] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 135.159332][ T2811] RSP: 002b:00007fb2983d6028 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 135.159344][ T2811] RAX: ffffffffffffffda RBX: 00007fb299c26090 RCX: 00007fb29999fb19 [ 135.159352][ T2811] RDX: 0000200000000640 RSI: 0000200000000600 RDI: 00002000000005c0 [ 135.159360][ T2811] RBP: 00007fb299a37b70 R08: 0000200000000ac0 R09: 0000000000000000 [ 135.159368][ T2811] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 135.159375][ T2811] R13: 00007fb299c26128 R14: 00007fb299c26090 R15: 00007ffecade7198 [ 135.159384][ T2811] [ 135.610174][ T2811] 9pnet_fd: p9_fd_create_tcp (2811): problem connecting socket to 127.0.0.1 [ 135.620420][ T10] usb 3-1: USB disconnect, device number 25 can't run '/sbi[ 135.695355][ T36] audit: type=1400 audit(1794088762.529:371): avc: denied { write } for pid=2815 comm="syz.2.930" name="usbmon9" dev="devtmpfs" ino=118 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 135.748754][ T2818] rust_binder: 2817:2818 no such ref 0 [ 135.754703][ T2818] rust_binder: 2817:2818 got transaction to invalid handle 1 [ 135.762263][ T2818] rust_binder: 2817:2818 transaction call to 0:0 failed ENOENT, code 1 size 0-0 line process.rs:958 [ 135.791568][ T2822] FAULT_INJECTION: forcing a failure. [ 135.791568][ T2822] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 135.804986][ T2822] CPU: 0 UID: 0 PID: 2822 Comm: syz.2.933 Not tainted syzkaller #0 ff996278633adec6fd25d1632b496761701c4fe9 [ 135.805017][ T2822] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/15/2026 [ 135.805029][ T2822] Call Trace: [ 135.805035][ T2822] [ 135.805044][ T2822] __dump_stack+0x21/0x30 [ 135.805067][ T2822] dump_stack_lvl+0x140/0x1c0 [ 135.805083][ T2822] ? __cfi_dump_stack_lvl+0x10/0x10 [ 135.805101][ T2822] ? do_vfs_ioctl+0x1824/0x2010 [ 135.805119][ T2822] ? check_stack_object+0x10f/0x150 [ 135.805145][ T2822] dump_stack+0x19/0x20 [ 135.805162][ T2822] should_fail_ex+0x3c2/0x510 [ 135.805180][ T2822] should_fail+0xf/0x20 [ 135.805195][ T2822] should_fail_usercopy+0x1e/0x30 [ 135.805214][ T2822] _copy_from_user+0x20/0xa0 [ 135.805235][ T2822] kvm_vm_ioctl+0x657/0xc40 [ 135.805252][ T2822] ? __cfi_kvm_vm_ioctl+0x10/0x10 [ 135.805266][ T2822] ? ioctl_has_perm+0x1bc/0x500 [ 135.805292][ T2822] ? __asan_memcpy+0x5a/0x80 [ 135.805315][ T2822] ? ioctl_has_perm+0x408/0x500 [ 135.805340][ T2822] ? __cfi_proc_fail_nth_write+0x10/0x10 [ 135.805364][ T2822] ? selinux_file_ioctl+0x732/0x1480 [ 135.805388][ T2822] ? vfs_write+0xbd2/0xfd0 [ 135.805412][ T2822] ? __cfi_selinux_file_ioctl+0x10/0x10 [ 135.805436][ T2822] ? hook_file_ioctl+0x1ef/0x590 [ 135.805459][ T2822] ? __cfi_vfs_write+0x10/0x10 [ 135.805488][ T2822] ? __cfi_hook_file_ioctl+0x10/0x10 [ 135.805510][ T2822] ? __kasan_check_write+0x18/0x20 [ 135.805532][ T2822] ? mutex_unlock+0x90/0x240 [ 135.805558][ T2822] ? __cfi_mutex_unlock+0x10/0x10 [ 135.805689][ T2822] ? __fget_files+0x2bc/0x330 [ 135.805709][ T2822] ? bpf_lsm_file_ioctl+0xd/0x20 [ 135.805726][ T2822] ? security_file_ioctl+0x3e/0x110 [ 135.805750][ T2822] ? __cfi_kvm_vm_ioctl+0x10/0x10 [ 135.805766][ T2822] __se_sys_ioctl+0x123/0x1b0 [ 135.805783][ T2822] __x64_sys_ioctl+0x7f/0xa0 [ 135.805800][ T2822] x64_sys_call+0x1878/0x2ee0 [ 135.805818][ T2822] do_syscall_64+0x57/0xf0 [ 135.805836][ T2822] ? clear_bhb_loop+0x50/0xa0 [ 135.805860][ T2822] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 135.805882][ T2822] RIP: 0033:0x7f6210d9fb19 [ 135.805900][ T2822] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 135.805916][ T2822] RSP: 002b:00007f6211b88028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 135.805936][ T2822] RAX: ffffffffffffffda RBX: 00007f6211025fa0 RCX: 00007f6210d9fb19 [ 135.805950][ T2822] RDX: 0000200000000040 RSI: 000000004020ae46 RDI: 0000000000000005 [ 135.805962][ T2822] RBP: 00007f6211b88090 R08: 0000000000000000 R09: 0000000000000000 [ 135.805974][ T2822] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 135.805985][ T2822] R13: 00007f6211026038 R14: 00007f6211025fa0 R15: 00007ffe57211ae8 [ 135.806001][ T2822] [ 136.318962][ T2836] rust_binder: got new transaction with bad transaction stack [ 136.326560][ T2836] rust_binder: 2835:2836 transaction call to 2835:0 failed EINVAL, code 0 size 0-0 line thread.rs:1516 [ 136.339889][ T36] audit: type=1400 audit(1794088763.179:372): avc: denied { write } for pid=2835 comm="syz.2.940" name="instances" dev="tracefs" ino=1120 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=dir permissive=1 [ 136.341361][ T2836] FAULT_INJECTION: forcing a failure. [ 136.341361][ T2836] name fail_page_alloc, interval 1, probability 0, space 0, times 1 [ 136.363375][ T36] audit: type=1400 audit(1794088763.179:373): avc: denied { add_name } for pid=2835 comm="syz.2.940" name="foo" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=dir permissive=1 [ 136.377336][ T10] usb 4-1: new high-speed USB device number 27 using dummy_hcd [ 136.398360][ T36] audit: type=1400 audit(1794088763.179:374): avc: denied { create } for pid=2835 comm="syz.2.940" name="foo" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:tracefs_t tclass=dir permissive=1 [ 136.405636][ T2836] CPU: 0 UID: 0 PID: 2836 Comm: syz.2.940 Not tainted syzkaller #0 ff996278633adec6fd25d1632b496761701c4fe9 [ 136.405666][ T2836] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/15/2026 [ 136.405679][ T2836] Call Trace: [ 136.405687][ T2836] [ 136.405697][ T2836] __dump_stack+0x21/0x30 [ 136.405722][ T2836] dump_stack_lvl+0x140/0x1c0 [ 136.405740][ T2836] ? __cfi_dump_stack_lvl+0x10/0x10 [ 136.405759][ T2836] dump_stack+0x19/0x20 [ 136.405775][ T2836] should_fail_ex+0x3c2/0x510 [ 136.405794][ T2836] should_fail_alloc_page+0xec/0x110 [ 136.405815][ T2836] __alloc_pages_noprof+0x1c0/0x7e0 [ 136.405844][ T2836] ? __cfi___alloc_pages_noprof+0x10/0x10 [ 136.405868][ T2836] ? __kmalloc_node_noprof+0x252/0x500 [ 136.405894][ T2836] __rb_allocate_pages+0x6c6/0x1270 [ 136.405922][ T2836] ? rb_allocate_cpu_buffer+0x34f/0x3120 [ 136.405944][ T2836] rb_allocate_cpu_buffer+0x10e8/0x3120 [ 136.405966][ T2836] ? kasan_save_alloc_info+0x3a/0x50 [ 136.405989][ T2836] ? __kasan_kmalloc+0x96/0xb0 [ 136.406008][ T2836] ? trace_rb_cpu_prepare+0x2f0/0x2f0 [ 136.406029][ T2836] ? __kmalloc_noprof+0x261/0x510 [ 136.406052][ T2836] ? alloc_buffer+0x31b/0x1cb0 [ 136.406080][ T2836] alloc_buffer+0x1570/0x1cb0 [ 136.406107][ T2836] __ring_buffer_alloc+0x61/0x120 [ 136.406131][ T2836] ? allocate_trace_buffers+0x2ac/0xb40 [ 136.406154][ T2836] allocate_trace_buffers+0x2cc/0xb40 [ 136.406174][ T2836] ? __kmalloc_node_track_caller_noprof+0x24e/0x4f0 [ 136.406202][ T2836] ? tracing_release_options+0x110/0x110 [ 136.406224][ T2836] ? __asan_memcpy+0x5a/0x80 [ 136.406248][ T2836] ? kstrdup+0x7b/0x130 [ 136.406271][ T2836] trace_array_create_systems+0x385/0xe80 [ 136.406293][ T2836] instance_mkdir+0xda/0x140 [ 136.406310][ T2836] tracefs_syscall_mkdir+0xa7/0xe0 [ 136.406329][ T2836] vfs_mkdir+0x58e/0x810 [ 136.406353][ T2836] do_mkdirat+0x240/0x530 [ 136.406375][ T2836] ? __cfi_do_mkdirat+0x10/0x10 [ 136.406397][ T2836] ? __kasan_check_write+0x18/0x20 [ 136.406421][ T2836] ? getname_flags+0x203/0x6b0 [ 136.406438][ T2836] ? __kasan_check_write+0x18/0x20 [ 136.406464][ T2836] __x64_sys_mkdirat+0x8b/0xa0 [ 136.406485][ T2836] x64_sys_call+0x2ba8/0x2ee0 [ 136.406505][ T2836] do_syscall_64+0x57/0xf0 [ 136.406524][ T2836] ? clear_bhb_loop+0x50/0xa0 [ 136.406641][ T2836] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 136.406665][ T2836] RIP: 0033:0x7f6210d9fb19 [ 136.406685][ T2836] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 136.406701][ T2836] RSP: 002b:00007f6211b88028 EFLAGS: 00000246 ORIG_RAX: 0000000000000102 [ 136.406722][ T2836] RAX: ffffffffffffffda RBX: 00007f6211025fa0 RCX: 00007f6210d9fb19 [ 136.406736][ T2836] RDX: 00000000000001ff RSI: 0000200000000180 RDI: ffffffffffffff9c [ 136.406750][ T2836] RBP: 00007f6210e37b70 R08: 0000000000000000 R09: 0000000000000000 [ 136.406763][ T2836] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 136.406775][ T2836] R13: 00007f6211026038 R14: 00007f6211025fa0 R15: 00007ffe57211ae8 [ 136.406791][ T2836] [ 136.413944][ T613] rust_binder: 2835: undelivered TRANSACTION_COMPLETE [ 136.458477][ T45] usb 1-1: new high-speed USB device number 23 using dummy_hcd [ 136.468632][ T613] rust_binder: 2835: undelivered TRANSACTION_ERROR: 29201 [ 136.629583][ T45] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 136.769484][ T45] usb 1-1: config 1 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 136.780751][ T45] usb 1-1: New USB device found, idVendor=04e6, idProduct=0005, bcdDevice= 1.00 [ 136.788452][ T10] usb 4-1: Using ep0 maxpacket: 32 [ 136.790005][ T45] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 136.796151][ T10] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 136.803054][ T45] usb 1-1: Product: syz [ 136.814295][ T10] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 136.819002][ T45] usb 1-1: Manufacturer: syz [ 136.828214][ T10] usb 4-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 136.832454][ T45] usb 1-1: SerialNumber: syz [ 136.849475][ T45] ums-sddr09 1-1:1.0: USB Mass Storage device detected [ 136.852973][ T10] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 136.857776][ T45] ums-sddr09 1-1:1.0: This device (04e6,0005,0100 S 06 P 50) has an unneeded SubClass entry in unusual_devs.h (kernel syzkaller) [ 136.857776][ T45] Please send a copy of this message to and [ 136.897118][ T10] usb 4-1: config 0 descriptor?? [ 136.903119][ T10] hub 4-1:0.0: USB hub found [ 137.010672][ T36] audit: type=1400 audit(1794088763.849:375): avc: denied { ioctl } for pid=2848 comm="syz.2.945" path="socket:[20321]" dev="sockfs" ino=20321 ioctlcmd=0x582d scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 137.043839][ T2853] EXT4-fs warning (device sda1): verify_group_input:162: Bad blocks count 4294705151 [ 137.094482][ T2856] FAULT_INJECTION: forcing a failure. [ 137.094482][ T2856] name failslab, interval 1, probability 0, space 0, times 0 [ 137.107261][ T2856] CPU: 0 UID: 0 PID: 2856 Comm: syz.2.948 Not tainted syzkaller #0 ff996278633adec6fd25d1632b496761701c4fe9 [ 137.107298][ T2856] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/15/2026 [ 137.107310][ T2856] Call Trace: [ 137.107317][ T2856] [ 137.107326][ T2856] __dump_stack+0x21/0x30 [ 137.107350][ T2856] dump_stack_lvl+0x140/0x1c0 [ 137.107368][ T2856] ? __cfi_dump_stack_lvl+0x10/0x10 [ 137.107386][ T2856] ? selinux_kernfs_init_security+0x14b/0x4b0 [ 137.107414][ T2856] dump_stack+0x19/0x20 [ 137.107431][ T2856] should_fail_ex+0x3c2/0x510 [ 137.107450][ T2856] should_failslab+0xac/0x100 [ 137.107471][ T2856] kmem_cache_alloc_noprof+0x42/0x410 [ 137.107496][ T2856] ? __kernfs_new_node+0xf1/0x740 [ 137.107517][ T2856] ? bpf_lsm_kernfs_init_security+0xd/0x20 [ 137.107538][ T2856] __kernfs_new_node+0xf1/0x740 [ 137.107557][ T2856] ? __kasan_check_write+0x18/0x20 [ 137.107649][ T2856] ? kernfs_new_node+0x280/0x280 [ 137.107670][ T2856] ? down_write+0xee/0x2b0 [ 137.107695][ T2856] ? __cfi_down_write+0x10/0x10 [ 137.107719][ T2856] ? __kasan_check_write+0x18/0x20 [ 137.107742][ T2856] ? up_write+0x66/0x280 [ 137.107763][ T2856] ? kernfs_activate+0x1ee/0x200 [ 137.107783][ T2856] kernfs_new_node+0x154/0x280 [ 137.107804][ T2856] __kernfs_create_file+0x52/0x280 [ 137.107827][ T2856] sysfs_add_file_mode_ns+0x1d2/0x280 [ 137.107852][ T2856] internal_create_group+0x66c/0xe70 [ 137.107871][ T2856] ? __kasan_check_write+0x18/0x20 [ 137.107897][ T2856] ? sysfs_create_group+0x40/0x40 [ 137.107915][ T2856] ? kernfs_activate+0x1ee/0x200 [ 137.107937][ T2856] sysfs_create_groups+0x5c/0x130 [ 137.107955][ T2856] device_add_attrs+0xdf/0x850 [ 137.107977][ T2856] ? device_add_class_symlinks+0x260/0x260 [ 137.107999][ T2856] ? __kasan_check_write+0x18/0x20 [ 137.108023][ T2856] ? kobject_put+0x1cc/0x2a0 [ 137.108043][ T2856] ? device_add_class_symlinks+0x22e/0x260 [ 137.108065][ T2856] device_add+0x4db/0xbf0 [ 137.108085][ T2856] netdev_register_kobject+0x196/0x330 [ 137.108113][ T2856] register_netdevice+0x1042/0x1a80 [ 137.108131][ T2856] ? kasan_save_alloc_info+0x3a/0x50 [ 137.108155][ T2856] ? __cfi_register_netdevice+0x10/0x10 [ 137.108173][ T2856] ipip6_tunnel_create+0x160/0x2e0 [ 137.108197][ T2856] ipip6_tunnel_locate+0x51c/0x7a0 [ 137.108219][ T2856] ? raw_irqentry_exit_cond_resched+0x32/0x40 [ 137.108243][ T2856] ? skb_clone_writable+0x1e0/0x1e0 [ 137.108265][ T2856] ? ns_capable+0x90/0xf0 [ 137.108285][ T2856] ipip6_tunnel_ctl+0xc68/0x15b0 [ 137.108305][ T2856] ip_tunnel_siocdevprivate+0x131/0x1e0 [ 137.108323][ T2856] ? __cfi_ip_tunnel_siocdevprivate+0x10/0x10 [ 137.108343][ T2856] ipip6_tunnel_siocdevprivate+0x24f/0xe20 [ 137.108366][ T2856] ? irqentry_exit+0x4a/0x60 [ 137.108389][ T2856] ? __cfi_ipip6_tunnel_siocdevprivate+0x10/0x10 [ 137.108410][ T2856] ? __cfi_ipip6_tunnel_siocdevprivate+0x10/0x10 [ 137.108431][ T2856] dev_ifsioc+0x94e/0xc10 [ 137.108449][ T2856] dev_ioctl+0xa62/0x1000 [ 137.108468][ T2856] sock_ioctl+0x74e/0x7e0 [ 137.108485][ T2856] ? __cfi_sock_ioctl+0x10/0x10 [ 137.108501][ T2856] ? __fget_files+0x2bc/0x330 [ 137.108520][ T2856] ? bpf_lsm_file_ioctl+0xd/0x20 [ 137.108539][ T2856] ? security_file_ioctl+0x3e/0x110 [ 137.108563][ T2856] ? __cfi_sock_ioctl+0x10/0x10 [ 137.108578][ T2856] __se_sys_ioctl+0x123/0x1b0 [ 137.108635][ T2856] __x64_sys_ioctl+0x7f/0xa0 [ 137.108655][ T2856] x64_sys_call+0x1878/0x2ee0 [ 137.108676][ T2856] do_syscall_64+0x57/0xf0 [ 137.108695][ T2856] ? clear_bhb_loop+0x50/0xa0 [ 137.108729][ T2856] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 137.108754][ T2856] RIP: 0033:0x7f6210d9fb19 [ 137.108773][ T2856] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 137.108789][ T2856] RSP: 002b:00007f6211b88028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 137.108811][ T2856] RAX: ffffffffffffffda RBX: 00007f6211025fa0 RCX: 00007f6210d9fb19 [ 137.108826][ T2856] RDX: 0000200000000280 RSI: 00000000000089f1 RDI: 0000000000000005 [ 137.108841][ T2856] RBP: 00007f6210e37b70 R08: 0000000000000000 R09: 0000000000000000 [ 137.108855][ T2856] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 137.108867][ T2856] R13: 00007f6211026038 R14: 00007f6211025fa0 R15: 00007ffe57211ae8 [ 137.108883][ T2856] [ 137.539855][ T45] ums-sddr09 1-1:1.0: probe with driver ums-sddr09 failed with error -5 can't run '/sbi[ 137.746684][ T36] audit: type=1400 audit(1794088764.579:376): avc: denied { cmd } for pid=2877 comm="syz.4.956" path="/dev/ublk-control" dev="devtmpfs" ino=82 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=io_uring permissive=1 [ 137.783011][ T36] audit: type=1400 audit(1794088764.619:377): avc: denied { map } for pid=2877 comm="syz.4.956" path="/dev/ublkc0" dev="devtmpfs" ino=732 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 137.899588][ T2886] FAULT_INJECTION: forcing a failure. [ 137.899588][ T2886] name failslab, interval 1, probability 0, space 0, times 0 [ 137.912630][ T2886] CPU: 0 UID: 0 PID: 2886 Comm: syz.4.957 Not tainted syzkaller #0 ff996278633adec6fd25d1632b496761701c4fe9 [ 137.912665][ T2886] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/15/2026 [ 137.912677][ T2886] Call Trace: [ 137.912683][ T2886] [ 137.912690][ T2886] __dump_stack+0x21/0x30 [ 137.912713][ T2886] dump_stack_lvl+0x140/0x1c0 [ 137.912729][ T2886] ? __cfi_dump_stack_lvl+0x10/0x10 [ 137.912749][ T2886] dump_stack+0x19/0x20 [ 137.912764][ T2886] should_fail_ex+0x3c2/0x510 [ 137.912783][ T2886] should_failslab+0xac/0x100 [ 137.912802][ T2886] __kmalloc_node_noprof+0x69/0x500 [ 137.912828][ T2886] ? __kvmalloc_node_noprof+0x128/0x300 [ 137.912864][ T2886] __kvmalloc_node_noprof+0x128/0x300 [ 137.912883][ T2886] ? __cfi___kvmalloc_node_noprof+0x10/0x10 [ 137.912906][ T2886] ? percpu_ref_init+0x200/0x4d0 [ 137.912924][ T2886] ? __cfi_io_ring_ctx_ref_free+0x10/0x10 [ 137.912945][ T2886] io_ring_ctx_alloc+0x428/0x1dc0 [ 137.912963][ T2886] io_uring_create+0x2e0/0x13f0 [ 137.912982][ T2886] ? __kasan_check_write+0x18/0x20 [ 137.913005][ T2886] __se_sys_io_uring_setup+0x2a4/0x2b0 [ 137.913026][ T2886] ? __kasan_check_write+0x18/0x20 [ 137.913048][ T2886] ? __x64_sys_io_uring_setup+0x80/0x80 [ 137.913071][ T2886] ? __kasan_check_read+0x15/0x20 [ 137.913093][ T2886] __x64_sys_io_uring_setup+0x5f/0x80 [ 137.913110][ T2886] x64_sys_call+0x22c0/0x2ee0 [ 137.913121][ T2886] do_syscall_64+0x57/0xf0 [ 137.913133][ T2886] ? clear_bhb_loop+0x50/0xa0 [ 137.913147][ T2886] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 137.913161][ T2886] RIP: 0033:0x7f9da4f9fb19 [ 137.913172][ T2886] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 137.913182][ T2886] RSP: 002b:00007f9da5e0efb8 EFLAGS: 00000206 ORIG_RAX: 00000000000001a9 [ 137.913195][ T2886] RAX: ffffffffffffffda RBX: 0000200000000400 RCX: 00007f9da4f9fb19 [ 137.913203][ T2886] RDX: 0000000000000000 RSI: 0000200000000400 RDI: 0000000000001727 [ 137.913211][ T2886] RBP: 00007f9da5e0f090 R08: 0000000000000000 R09: 0000000000000101 [ 137.913219][ T2886] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 137.913226][ T2886] R13: 0000000000000000 R14: 0000000000000000 R15: 00007ffcf26eccb8 [ 137.913234][ T2886] [ 138.199662][ T2888] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 138.208156][ T2888] misc raw-gadget: fail, usb_gadget_register_driver returned -16 can't run '/sbi[ 139.105477][ T10] hub 4-1:0.0: config failed, can't read hub descriptor (err -22) [ 139.113467][ T2914] netlink: 'syz.3.968': attribute type 10 has an invalid length. [ 139.114910][ T10] usbhid 4-1:0.0: can't add hid device: -71 [ 139.121380][ T2914] netlink: 40 bytes leftover after parsing attributes in process `syz.3.968'. [ 139.128968][ T10] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 139.136798][ T2914] veth1: entered promiscuous mode [ 139.170719][ T10] usb 4-1: USB disconnect, device number 27 [ 139.185556][ T2916] x86/PAT: syz.3.969:2916 freeing invalid memtype [mem 0xfe408000-0xfe408fff] [ 139.396217][ T2916] x86/PAT: syz.3.969:2916 freeing invalid memtype [mem 0xfe001000-0xfe407fff] [ 139.406432][ T2916] x86/PAT: syz.3.969:2916 freeing invalid memtype [mem 0xfe000000-0xfe000fff] [ 139.579635][ T45] usb 1-1: USB disconnect, device number 23 [ 139.608066][ T2920] pim6reg1: entered promiscuous mode [ 139.613477][ T2920] pim6reg1: entered allmulticast mode [ 139.718602][ T10] usb 3-1: new high-speed USB device number 26 using dummy_hcd can't run '/sbi[ 139.869747][ T10] usb 3-1: config 0 has an invalid interface descriptor of length 8, skipping [ 139.878721][ T10] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 139.888972][ T10] usb 3-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 139.897962][ T10] usb 3-1: New USB device found, idVendor=04d8, idProduct=f002, bcdDevice= 0.00 [ 139.907081][ T10] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 139.915672][ T10] usb 3-1: config 0 descriptor?? [ 140.018526][ T45] usb 1-1: new high-speed USB device number 24 using dummy_hcd [ 140.168443][ T45] usb 1-1: Using ep0 maxpacket: 32 [ 140.174802][ T45] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 140.186059][ T45] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 140.196110][ T45] usb 1-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 140.206123][ T45] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 140.214770][ T45] usb 1-1: config 0 descriptor?? [ 140.220925][ T45] hub 1-1:0.0: USB hub found [ 140.474531][ T36] audit: type=1400 audit(1794088767.309:378): avc: denied { mounton } for pid=2917 comm="syz.2.970" path="/243/file0" dev="tmpfs" ino=1354 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 can't run '/sbi[ 140.829037][ T2942] veth0_to_batadv: mtu greater than device maximum [ 140.837956][ T36] audit: type=1400 audit(1794088767.669:379): avc: denied { mounton } for pid=2917 comm="syz.2.970" path="/243/file0" dev="fuse" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=file permissive=1 [ 141.068466][ T10] usb 4-1: new high-speed USB device number 28 using dummy_hcd [ 141.181932][ T2945] FAULT_INJECTION: forcing a failure. [ 141.181932][ T2945] name failslab, interval 1, probability 0, space 0, times 0 [ 141.194644][ T2945] CPU: 1 UID: 0 PID: 2945 Comm: syz.4.980 Not tainted syzkaller #0 ff996278633adec6fd25d1632b496761701c4fe9 [ 141.194698][ T2945] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/15/2026 [ 141.194706][ T2945] Call Trace: [ 141.194711][ T2945] [ 141.194718][ T2945] __dump_stack+0x21/0x30 [ 141.194736][ T2945] dump_stack_lvl+0x140/0x1c0 [ 141.194746][ T2945] ? __cfi_dump_stack_lvl+0x10/0x10 [ 141.194757][ T2945] dump_stack+0x19/0x20 [ 141.194766][ T2945] should_fail_ex+0x3c2/0x510 [ 141.194777][ T2945] should_failslab+0xac/0x100 [ 141.194789][ T2945] kmem_cache_alloc_noprof+0x42/0x410 [ 141.194805][ T2945] ? alloc_empty_file+0xbf/0x270 [ 141.194823][ T2945] ? _raw_spin_unlock+0x45/0x60 [ 141.194841][ T2945] alloc_empty_file+0xbf/0x270 [ 141.194885][ T2945] ? _raw_spin_unlock+0x45/0x60 [ 141.194896][ T2945] alloc_file_pseudo+0x142/0x1f0 [ 141.194909][ T2945] ? __cfi_alloc_file_pseudo+0x10/0x10 [ 141.194922][ T2945] sock_alloc_file+0xbe/0x2b0 [ 141.194933][ T2945] __sys_socket+0x14c/0x1c0 [ 141.194945][ T2945] __x64_sys_socket+0x7e/0x90 [ 141.194956][ T2945] x64_sys_call+0x2608/0x2ee0 [ 141.194968][ T2945] do_syscall_64+0x57/0xf0 [ 141.194979][ T2945] ? clear_bhb_loop+0x50/0xa0 [ 141.194998][ T2945] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 141.195012][ T2945] RIP: 0033:0x7f9da4f9fb19 [ 141.195023][ T2945] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 141.195032][ T2945] RSP: 002b:00007f9da5e0f028 EFLAGS: 00000246 ORIG_RAX: 0000000000000029 [ 141.195045][ T2945] RAX: ffffffffffffffda RBX: 00007f9da5225fa0 RCX: 00007f9da4f9fb19 [ 141.195066][ T2945] RDX: 0000000000000000 RSI: 0000000000000004 RDI: 000000000000001e [ 141.195073][ T2945] RBP: 00007f9da5e0f090 R08: 0000000000000000 R09: 0000000000000000 [ 141.195080][ T2945] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 141.195087][ T2945] R13: 00007f9da5226038 R14: 00007f9da5225fa0 R15: 00007ffcf26eccb8 [ 141.195096][ T2945] [ 141.219589][ T10] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 141.239816][ T36] audit: type=1400 audit(1794088768.069:380): avc: denied { ioctl } for pid=2946 comm="syz.4.981" path="/137/mnt/trace_pipe" dev="tracefs" ino=1062 ioctlcmd=0x5760 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=file permissive=1 [ 141.242095][ T10] usb 4-1: config 1 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 141.445813][ T10] usb 4-1: New USB device found, idVendor=04e6, idProduct=0005, bcdDevice= 1.00 [ 141.455014][ T10] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 141.463133][ T10] usb 4-1: Product: syz [ 141.467649][ T10] usb 4-1: Manufacturer: syz [ 141.472537][ T10] usb 4-1: SerialNumber: syz [ 141.479745][ T10] ums-sddr09 4-1:1.0: USB Mass Storage device detected [ 141.488809][ T10] ums-sddr09 4-1:1.0: This device (04e6,0005,0100 S 06 P 50) has an unneeded SubClass entry in unusual_devs.h (kernel syzkaller) [ 141.488809][ T10] Please send a copy of this message to and can't run '/sbi[ 141.921667][ T10] ums-sddr09 4-1:1.0: probe with driver ums-sddr09 failed with error -5 [ 142.352535][ T2960] rust_binder: 2959:2960 got transaction to invalid handle 1 [ 142.360065][ T2960] rust_binder: 2959:2960 transaction call to 0:0 failed ENOENT, code 1 size 0-0 line process.rs:958 [ 142.439555][ T45] hub 1-1:0.0: config failed, can't read hub descriptor (err -22) [ 142.448661][ T45] usbhid 1-1:0.0: can't add hid device: -71 [ 142.454610][ T45] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 142.478977][ T45] usb 1-1: USB disconnect, device number 24 [ 142.491191][ T10] usb 3-1: USB disconnect, device number 26 [ 142.668637][ T2973] FAULT_INJECTION: forcing a failure. [ 142.668637][ T2973] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 142.688271][ T2973] CPU: 0 UID: 0 PID: 2973 Comm: syz.2.989 Not tainted syzkaller #0 ff996278633adec6fd25d1632b496761701c4fe9 [ 142.688301][ T2973] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/15/2026 [ 142.688310][ T2973] Call Trace: [ 142.688314][ T2973] [ 142.688320][ T2973] __dump_stack+0x21/0x30 [ 142.688336][ T2973] dump_stack_lvl+0x140/0x1c0 [ 142.688347][ T2973] ? __cfi_dump_stack_lvl+0x10/0x10 [ 142.688357][ T2973] ? check_stack_object+0x138/0x150 [ 142.688378][ T2973] dump_stack+0x19/0x20 [ 142.688387][ T2973] should_fail_ex+0x3c2/0x510 [ 142.688404][ T2973] should_fail+0xf/0x20 [ 142.688417][ T2973] should_fail_usercopy+0x1e/0x30 [ 142.688433][ T2973] _copy_to_user+0x24/0xa0 [ 142.688452][ T2973] simple_read_from_buffer+0xed/0x160 [ 142.688472][ T2973] proc_fail_nth_read+0x1aa/0x220 [ 142.688488][ T2973] ? __cfi_proc_fail_nth_read+0x10/0x10 [ 142.688501][ T2973] ? bpf_lsm_file_permission+0xd/0x20 [ 142.688515][ T2973] ? __cfi_proc_fail_nth_read+0x10/0x10 [ 142.688533][ T2973] vfs_read+0x28b/0xc70 [ 142.688554][ T2973] ? __cfi_selinux_file_ioctl+0x10/0x10 [ 142.688570][ T2973] ? __cfi_vfs_read+0x10/0x10 [ 142.688584][ T2973] ? __kasan_check_write+0x18/0x20 [ 142.688599][ T2973] ? mutex_lock+0x97/0x1d0 [ 142.688613][ T2973] ? __cfi_mutex_lock+0x10/0x10 [ 142.688626][ T2973] ksys_read+0x145/0x260 [ 142.688640][ T2973] ? xfd_validate_state+0x68/0x140 [ 142.688651][ T2973] ? __cfi_ksys_read+0x10/0x10 [ 142.688665][ T2973] ? __kasan_check_write+0x18/0x20 [ 142.688679][ T2973] ? fpregs_restore_userregs+0x11c/0x260 [ 142.688693][ T2973] __x64_sys_read+0x7f/0x90 [ 142.688710][ T2973] x64_sys_call+0x2638/0x2ee0 [ 142.688722][ T2973] do_syscall_64+0x57/0xf0 [ 142.688733][ T2973] ? clear_bhb_loop+0x50/0xa0 [ 142.688747][ T2973] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 142.688761][ T2973] RIP: 0033:0x7f6210d6034e [ 142.688772][ T2973] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 142.688781][ T2973] RSP: 002b:00007f620f7f6fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 142.688794][ T2973] RAX: ffffffffffffffda RBX: 00007f620f7f76c0 RCX: 00007f6210d6034e [ 142.688803][ T2973] RDX: 000000000000000f RSI: 00007f620f7f70a0 RDI: 0000000000000006 [ 142.688810][ T2973] RBP: 00007f620f7f7090 R08: 0000000000000000 R09: 0000000000000000 [ 142.688818][ T2973] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 142.688824][ T2973] R13: 00007f6211026128 R14: 00007f6211026090 R15: 00007ffe57211ae8 [ 142.688833][ T2973] can't run '/sbi[ 143.558457][ T613] usb 1-1: new high-speed USB device number 25 using dummy_hcd [ 143.718485][ T613] usb 1-1: Using ep0 maxpacket: 32 [ 143.724955][ T613] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 143.746070][ T613] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 143.765614][ T613] usb 1-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 143.784559][ T613] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 143.801702][ T613] usb 1-1: config 0 descriptor?? [ 143.811887][ T613] hub 1-1:0.0: USB hub found can't run '/sbi[ 144.065056][ T613] hub 1-1:0.0: 1 port detected [ 144.198634][ T10] usb 3-1: new high-speed USB device number 27 using dummy_hcd [ 144.343899][ T45] usb 4-1: USB disconnect, device number 28 [ 144.352353][ T10] usb 3-1: Using ep0 maxpacket: 8 [ 144.358478][ T10] usb 3-1: config 7 has an invalid interface number: 87 but max is 0 [ 144.366901][ T10] usb 3-1: config 7 has no interface number 0 [ 144.373884][ T10] usb 3-1: config 7 interface 87 altsetting 9 endpoint 0x6 has invalid maxpacket 1023, setting to 64 [ 144.384898][ T10] usb 3-1: config 7 interface 87 altsetting 9 endpoint 0xE has invalid maxpacket 512, setting to 64 [ 144.395756][ T10] usb 3-1: config 7 interface 87 has no altsetting 0 [ 144.404892][ T10] usb 3-1: New USB device found, idVendor=0403, idProduct=d738, bcdDevice= 1.74 [ 144.414039][ T10] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 144.422402][ T10] usb 3-1: Product: syz [ 144.426850][ T10] usb 3-1: Manufacturer: syz [ 144.432048][ T10] usb 3-1: SerialNumber: syz [ 144.644831][ T10] ftdi_sio 3-1:7.87: FTDI USB Serial Device converter detected [ 144.655289][ T10] usb 3-1: Detected SIO [ 144.660114][ T10] usb 3-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 144.670679][ T10] usb 3-1: USB disconnect, device number 27 [ 144.677839][ T10] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 144.687733][ T10] ftdi_sio 3-1:7.87: device disconnected [ 144.768505][ T45] usb 4-1: new high-speed USB device number 29 using dummy_hcd [ 144.918459][ T45] usb 4-1: Using ep0 maxpacket: 8 [ 144.924682][ T45] usb 4-1: config 1 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 16 [ 144.934610][ T45] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0xF has an invalid bInterval 250, changing to 11 [ 144.947270][ T45] usb 4-1: New USB device found, idVendor=7104, idProduct=2202, bcdDevice= 0.40 [ 144.956476][ T45] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 can't run '/sbi[ 144.964625][ T45] usb 4-1: Product: syz n/getty': Input/[ 144.970356][ T45] usb 4-1: Manufacturer: syz [ 144.976242][ T45] usb 4-1: SerialNumber: syz output error [ 144.982438][ T3008] raw-gadget.3 gadget.3: fail, usb_ep_enable returned -22 [ 145.200773][ T424] udevd[424]: setting mode of /dev/bus/usb/004/029 to 020664 failed: Read-only file system [ 145.210982][ T45] usb 4-1: USB disconnect, device number 29 [ 145.218179][ T3015] incfs: iterate_incfs_dir / -22 [ 145.219739][ T424] udevd[424]: setting owner of /dev/bus/usb/004/029 to uid=0, gid=0 failed: Read-only file system [ 145.237037][ T488] udevd[488]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 145.255097][ T424] udevd[424]: symlink '../bus/usb/004/029' '/dev/char/189:412.tmp-c189:412' failed: Read-only file system [ 145.270439][ T424] udevd[424]: symlink '../bus/usb/004/029' '/dev/char/189:412.tmp-c189:412' failed: Read-only file system [ 145.319108][ T613] hub 1-1:0.0: hub_hub_status failed (err = -32) [ 145.325619][ T613] hub 1-1:0.0: config failed, can't get hub status (err -32) [ 145.334394][ T613] usbhid 1-1:0.0: can't add hid device: -32 [ 145.340426][ T613] usbhid 1-1:0.0: probe with driver usbhid failed with error -32 [ 145.948521][ T45] usb 4-1: new high-speed USB device number 30 using dummy_hcd can't run '/sbi[ 146.065714][ T36] audit: type=1404 audit(1794088772.899:381): enforcing=1 old_enforcing=0 auid=4294967295 ses=4294967295 enabled=1 old-enabled=1 lsm=selinux res=1 [ 146.081469][ T36] audit: type=1400 audit(1794088772.919:382): avc: denied { create } for pid=3027 comm="syz.2.1010" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=0 [ 146.103039][ T36] audit: type=1400 audit(1794088772.919:383): avc: denied { setopt } for pid=3027 comm="syz.2.1010" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=0 [ 146.122846][ T36] audit: type=1400 audit(1794088772.919:384): avc: denied { read } for pid=295 comm="syz-executor" name="loop2" dev="devtmpfs" ino=51 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 146.146983][ T36] audit: type=1400 audit(1794088772.919:385): avc: denied { read } for pid=3029 comm="syz.2.1011" name="kvm" dev="devtmpfs" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=0 [ 146.169901][ T486] usb 1-1: USB disconnect, device number 25 [ 146.182067][ T36] audit: type=1400 audit(1794088772.919:386): avc: denied { read } for pid=3029 comm="syz.2.1011" name="usbmon1" dev="devtmpfs" ino=92 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=0 [ 146.187666][ T454] udevd[454]: Unable to fix SELinux security context of /dev/char/10:232: Read-only file system [ 146.206222][ T45] usb 4-1: device descriptor read/all, error -71 [ 146.222691][ T424] udevd[424]: Unable to fix SELinux security context of /dev/char/189:24: Read-only file system [ 146.238713][ T36] audit: type=1400 audit(1794088772.939:387): avc: denied { read } for pid=295 comm="syz-executor" name="loop2" dev="devtmpfs" ino=51 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 146.264049][ T36] audit: type=1400 audit(1794088772.939:388): avc: denied { read } for pid=3031 comm="syz.2.1012" name="kvm" dev="devtmpfs" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=0 [ 146.287480][ T36] audit: type=1400 audit(1794088772.939:389): avc: denied { read } for pid=295 comm="syz-executor" name="loop2" dev="devtmpfs" ino=51 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 146.312062][ T36] audit: type=1400 audit(1794088772.959:390): avc: denied { read write } for pid=3033 comm="syz.2.1013" name="fuse" dev="devtmpfs" ino=23 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fuse_device_t tclass=chr_file permissive=0 can't run '/sbi[ 147.117566][ T3091] FAULT_INJECTION: forcing a failure. [ 147.117566][ T3091] name failslab, interval 1, probability 0, space 0, times 0 [ 147.130334][ T3091] CPU: 1 UID: 0 PID: 3091 Comm: syz.0.1039 Not tainted syzkaller #0 ff996278633adec6fd25d1632b496761701c4fe9 [ 147.130364][ T3091] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/15/2026 [ 147.130375][ T3091] Call Trace: [ 147.130383][ T3091] [ 147.130420][ T3091] __dump_stack+0x21/0x30 [ 147.130437][ T3091] dump_stack_lvl+0x140/0x1c0 [ 147.130447][ T3091] ? __cfi_dump_stack_lvl+0x10/0x10 [ 147.130458][ T3091] dump_stack+0x19/0x20 [ 147.130467][ T3091] should_fail_ex+0x3c2/0x510 [ 147.130478][ T3091] should_failslab+0xac/0x100 [ 147.130490][ T3091] __kmalloc_node_noprof+0x69/0x500 [ 147.130505][ T3091] ? __kvmalloc_node_noprof+0x128/0x300 [ 147.130520][ T3091] __kvmalloc_node_noprof+0x128/0x300 [ 147.130533][ T3091] ? __cfi___kvmalloc_node_noprof+0x10/0x10 [ 147.130547][ T3091] ? percpu_ref_init+0x200/0x4d0 [ 147.130557][ T3091] ? __cfi_io_ring_ctx_ref_free+0x10/0x10 [ 147.130570][ T3091] io_ring_ctx_alloc+0x5c0/0x1dc0 [ 147.130582][ T3091] io_uring_create+0x2e0/0x13f0 [ 147.130594][ T3091] ? __kasan_check_write+0x18/0x20 [ 147.130609][ T3091] __se_sys_io_uring_setup+0x2a4/0x2b0 [ 147.130624][ T3091] ? __kasan_check_write+0x18/0x20 [ 147.130638][ T3091] ? __x64_sys_io_uring_setup+0x80/0x80 [ 147.130652][ T3091] ? __kasan_check_read+0x15/0x20 [ 147.130666][ T3091] __x64_sys_io_uring_setup+0x5f/0x80 [ 147.130679][ T3091] x64_sys_call+0x22c0/0x2ee0 [ 147.130690][ T3091] do_syscall_64+0x57/0xf0 [ 147.130702][ T3091] ? clear_bhb_loop+0x50/0xa0 [ 147.130716][ T3091] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 147.130729][ T3091] RIP: 0033:0x7fb29999fb19 [ 147.130740][ T3091] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 147.130749][ T3091] RSP: 002b:00007fb2983f6fb8 EFLAGS: 00000206 ORIG_RAX: 00000000000001a9 [ 147.130761][ T3091] RAX: ffffffffffffffda RBX: 0000200000000400 RCX: 00007fb29999fb19 [ 147.130769][ T3091] RDX: 0000000000000000 RSI: 0000200000000400 RDI: 0000000000001727 [ 147.130776][ T3091] RBP: 00007fb2983f7090 R08: 0000000000000000 R09: 0000000000000101 [ 147.130783][ T3091] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 147.130790][ T3091] R13: 0000000000000000 R14: 0000000000000000 R15: 00007ffecade7198 [ 147.130798][ T3091] [ 147.506135][ T3106] netlink: 288 bytes leftover after parsing attributes in process `syz.0.1046'. [ 147.840122][ T3144] netlink: 'syz.0.1059': attribute type 46 has an invalid length. can't run '/sbi[ 148.358486][ T54] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 148.358486][ T2534] Bluetooth: hci0: command 0x1003 tx timeout [ 148.380250][ T3159] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1065'. [ 148.389488][ T3158] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1065'. [ 148.724514][ T3192] syzkaller1: entered promiscuous mode [ 148.730064][ T3192] syzkaller1: entered allmulticast mode [ 148.815599][ T3202] FAULT_INJECTION: forcing a failure. [ 148.815599][ T3202] name failslab, interval 1, probability 0, space 0, times 0 [ 148.828335][ T3202] CPU: 1 UID: 0 PID: 3202 Comm: syz.4.1086 Not tainted syzkaller #0 ff996278633adec6fd25d1632b496761701c4fe9 [ 148.828365][ T3202] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/15/2026 [ 148.828377][ T3202] Call Trace: [ 148.828385][ T3202] [ 148.828392][ T3202] __dump_stack+0x21/0x30 [ 148.828416][ T3202] dump_stack_lvl+0x140/0x1c0 [ 148.828431][ T3202] ? __cfi_dump_stack_lvl+0x10/0x10 [ 148.828449][ T3202] dump_stack+0x19/0x20 [ 148.828465][ T3202] should_fail_ex+0x3c2/0x510 [ 148.828484][ T3202] should_failslab+0xac/0x100 [ 148.828503][ T3202] __kmalloc_node_noprof+0x69/0x500 [ 148.828519][ T3202] ? __kvmalloc_node_noprof+0x128/0x300 [ 148.828533][ T3202] __kvmalloc_node_noprof+0x128/0x300 [ 148.828547][ T3202] ? __cfi___kvmalloc_node_noprof+0x10/0x10 [ 148.828561][ T3202] ? percpu_ref_init+0x200/0x4d0 [ 148.828571][ T3202] ? __cfi_io_ring_ctx_ref_free+0x10/0x10 [ 148.828585][ T3202] io_ring_ctx_alloc+0x5c0/0x1dc0 [ 148.828597][ T3202] io_uring_create+0x2e0/0x13f0 [ 148.828608][ T3202] ? __kasan_check_write+0x18/0x20 [ 148.828623][ T3202] __se_sys_io_uring_setup+0x2a4/0x2b0 [ 148.828638][ T3202] ? __kasan_check_write+0x18/0x20 [ 148.828652][ T3202] ? __x64_sys_io_uring_setup+0x80/0x80 [ 148.828666][ T3202] ? __kasan_check_read+0x15/0x20 [ 148.828682][ T3202] __x64_sys_io_uring_setup+0x5f/0x80 [ 148.828696][ T3202] x64_sys_call+0x22c0/0x2ee0 [ 148.828707][ T3202] do_syscall_64+0x57/0xf0 [ 148.828719][ T3202] ? clear_bhb_loop+0x50/0xa0 [ 148.828734][ T3202] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 148.828747][ T3202] RIP: 0033:0x7f9da4f9fb19 [ 148.828758][ T3202] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 148.828767][ T3202] RSP: 002b:00007f9da5e0efb8 EFLAGS: 00000206 ORIG_RAX: 00000000000001a9 [ 148.828780][ T3202] RAX: ffffffffffffffda RBX: 0000200000000400 RCX: 00007f9da4f9fb19 [ 148.828788][ T3202] RDX: 0000000000000000 RSI: 0000200000000400 RDI: 0000000000001727 [ 148.828796][ T3202] RBP: 00007f9da5e0f090 R08: 0000000000000000 R09: 0000000000000101 [ 148.828803][ T3202] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 148.828810][ T3202] R13: 0000000000000000 R14: 0000000000000000 R15: 00007ffcf26eccb8 [ 148.828818][ T3202] can't run '/sbi[ 149.441789][ T3245] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1104'. [ 149.450934][ T3245] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1104'. [ 149.505437][ T3259] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1108'. [ 149.527376][ T3261] FAULT_INJECTION: forcing a failure. [ 149.527376][ T3261] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 149.540530][ T3261] CPU: 1 UID: 0 PID: 3261 Comm: syz.4.1111 Not tainted syzkaller #0 ff996278633adec6fd25d1632b496761701c4fe9 [ 149.540561][ T3261] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/15/2026 [ 149.540574][ T3261] Call Trace: [ 149.540583][ T3261] [ 149.540592][ T3261] __dump_stack+0x21/0x30 [ 149.540615][ T3261] dump_stack_lvl+0x140/0x1c0 [ 149.540626][ T3261] ? __cfi_dump_stack_lvl+0x10/0x10 [ 149.540637][ T3261] ? __sys_recvmsg_sock+0x60/0x60 [ 149.540714][ T3261] dump_stack+0x19/0x20 [ 149.540723][ T3261] should_fail_ex+0x3c2/0x510 [ 149.540734][ T3261] should_fail+0xf/0x20 [ 149.540743][ T3261] should_fail_usercopy+0x1e/0x30 [ 149.540754][ T3261] _copy_from_user+0x20/0xa0 [ 149.540767][ T3261] ___sys_recvmsg+0x174/0x590 [ 149.540781][ T3261] ? kstrtoull+0x13b/0x1e0 [ 149.540795][ T3261] ? __sys_recvmsg+0x260/0x260 [ 149.540809][ T3261] ? kstrtouint_from_user+0x117/0x170 [ 149.540823][ T3261] ? __x64_sys_openat+0x13a/0x170 [ 149.540839][ T3261] do_recvmmsg+0x328/0x790 [ 149.540854][ T3261] ? __sys_recvmmsg+0x2a0/0x2a0 [ 149.540868][ T3261] ? __cfi_vfs_write+0x10/0x10 [ 149.540884][ T3261] ? fput+0x1a4/0x230 [ 149.540895][ T3261] __x64_sys_recvmmsg+0x199/0x250 [ 149.540910][ T3261] ? __cfi___x64_sys_recvmmsg+0x10/0x10 [ 149.540924][ T3261] ? __kasan_check_read+0x15/0x20 [ 149.540940][ T3261] x64_sys_call+0x292c/0x2ee0 [ 149.540951][ T3261] do_syscall_64+0x57/0xf0 [ 149.540962][ T3261] ? clear_bhb_loop+0x50/0xa0 [ 149.540976][ T3261] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 149.540990][ T3261] RIP: 0033:0x7f9da4f9fb19 [ 149.541001][ T3261] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 149.541010][ T3261] RSP: 002b:00007f9da5e0f028 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 149.541022][ T3261] RAX: ffffffffffffffda RBX: 00007f9da5225fa0 RCX: 00007f9da4f9fb19 [ 149.541030][ T3261] RDX: 0000000000000256 RSI: 0000200000000540 RDI: 0000000000000003 [ 149.541038][ T3261] RBP: 00007f9da5e0f090 R08: 0000000000000000 R09: 0000000000000000 [ 149.541045][ T3261] R10: 0000000000010022 R11: 0000000000000246 R12: 0000000000000001 [ 149.541052][ T3261] R13: 00007f9da5226038 R14: 00007f9da5225fa0 R15: 00007ffcf26eccb8 [ 149.541061][ T3261] can't run '/sbi[ 150.587169][ T3313] FAULT_INJECTION: forcing a failure. [ 150.587169][ T3313] name failslab, interval 1, probability 0, space 0, times 0 [ 150.599879][ T3313] CPU: 1 UID: 0 PID: 3313 Comm: syz.3.1133 Not tainted syzkaller #0 ff996278633adec6fd25d1632b496761701c4fe9 [ 150.599909][ T3313] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/15/2026 [ 150.599918][ T3313] Call Trace: [ 150.599922][ T3313] [ 150.599927][ T3313] __dump_stack+0x21/0x30 [ 150.599943][ T3313] dump_stack_lvl+0x140/0x1c0 [ 150.599953][ T3313] ? __cfi_dump_stack_lvl+0x10/0x10 [ 150.599964][ T3313] dump_stack+0x19/0x20 [ 150.599973][ T3313] should_fail_ex+0x3c2/0x510 [ 150.599984][ T3313] should_failslab+0xac/0x100 [ 150.599998][ T3313] __kmalloc_node_noprof+0x69/0x500 [ 150.600016][ T3313] ? __kvmalloc_node_noprof+0x128/0x300 [ 150.600031][ T3313] ? __kasan_kmalloc+0x96/0xb0 [ 150.600042][ T3313] __kvmalloc_node_noprof+0x128/0x300 [ 150.600056][ T3313] ? __cfi___kvmalloc_node_noprof+0x10/0x10 [ 150.600069][ T3313] ? __kvmalloc_node_noprof+0x173/0x300 [ 150.600082][ T3313] ? __cfi___kvmalloc_node_noprof+0x10/0x10 [ 150.600096][ T3313] io_futex_cache_init+0x4e/0x1a0 [ 150.600108][ T3313] io_ring_ctx_alloc+0x762/0x1dc0 [ 150.600121][ T3313] io_uring_create+0x2e0/0x13f0 [ 150.600133][ T3313] ? __kasan_check_write+0x18/0x20 [ 150.600147][ T3313] __se_sys_io_uring_setup+0x2a4/0x2b0 [ 150.600161][ T3313] ? __kasan_check_write+0x18/0x20 [ 150.600175][ T3313] ? __x64_sys_io_uring_setup+0x80/0x80 [ 150.600189][ T3313] ? __kasan_check_read+0x15/0x20 [ 150.600203][ T3313] __x64_sys_io_uring_setup+0x5f/0x80 [ 150.600216][ T3313] x64_sys_call+0x22c0/0x2ee0 [ 150.600227][ T3313] do_syscall_64+0x57/0xf0 [ 150.600239][ T3313] ? clear_bhb_loop+0x50/0xa0 [ 150.600252][ T3313] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 150.600266][ T3313] RIP: 0033:0x7f764139fb19 [ 150.600277][ T3313] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 150.600286][ T3313] RSP: 002b:00007f7642211fb8 EFLAGS: 00000206 ORIG_RAX: 00000000000001a9 [ 150.600299][ T3313] RAX: ffffffffffffffda RBX: 0000200000000400 RCX: 00007f764139fb19 [ 150.600308][ T3313] RDX: 0000000000000000 RSI: 0000200000000400 RDI: 0000000000001727 [ 150.600315][ T3313] RBP: 00007f7642212090 R08: 0000000000000000 R09: 0000000000000101 [ 150.600323][ T3313] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 150.600330][ T3313] R13: 0000000000000000 R14: 0000000000000000 R15: 00007ffe1074ae98 [ 150.600338][ T3313] [ 150.895540][ T3332] FAULT_INJECTION: forcing a failure. [ 150.895540][ T3332] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 150.908850][ T3332] CPU: 0 UID: 0 PID: 3332 Comm: syz.2.1141 Not tainted syzkaller #0 ff996278633adec6fd25d1632b496761701c4fe9 [ 150.908873][ T3332] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/15/2026 [ 150.908881][ T3332] Call Trace: [ 150.908886][ T3332] [ 150.908892][ T3332] __dump_stack+0x21/0x30 [ 150.908908][ T3332] dump_stack_lvl+0x140/0x1c0 [ 150.908917][ T3332] ? __cfi_dump_stack_lvl+0x10/0x10 [ 150.908928][ T3332] ? __sys_recvmsg_sock+0x60/0x60 [ 150.908943][ T3332] dump_stack+0x19/0x20 [ 150.908952][ T3332] should_fail_ex+0x3c2/0x510 [ 150.908963][ T3332] should_fail+0xf/0x20 [ 150.908971][ T3332] should_fail_usercopy+0x1e/0x30 [ 150.908982][ T3332] _copy_from_user+0x20/0xa0 [ 150.908996][ T3332] ___sys_recvmsg+0x174/0x590 [ 150.909010][ T3332] ? kstrtoull+0x13b/0x1e0 [ 150.909023][ T3332] ? __sys_recvmsg+0x260/0x260 [ 150.909037][ T3332] ? kstrtouint_from_user+0x117/0x170 [ 150.909051][ T3332] ? __x64_sys_openat+0x13a/0x170 [ 150.909067][ T3332] do_recvmmsg+0x328/0x790 [ 150.909081][ T3332] ? __sys_recvmmsg+0x2a0/0x2a0 [ 150.909095][ T3332] ? __cfi_vfs_write+0x10/0x10 [ 150.909140][ T3332] ? fput+0x1a4/0x230 [ 150.909152][ T3332] __x64_sys_recvmmsg+0x199/0x250 [ 150.909166][ T3332] ? __cfi___x64_sys_recvmmsg+0x10/0x10 [ 150.909181][ T3332] ? __kasan_check_read+0x15/0x20 [ 150.909196][ T3332] x64_sys_call+0x292c/0x2ee0 [ 150.909207][ T3332] do_syscall_64+0x57/0xf0 [ 150.909219][ T3332] ? clear_bhb_loop+0x50/0xa0 [ 150.909239][ T3332] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 150.909252][ T3332] RIP: 0033:0x7f6210d9fb19 [ 150.909263][ T3332] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 150.909303][ T3332] RSP: 002b:00007f6211b88028 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 150.909320][ T3332] RAX: ffffffffffffffda RBX: 00007f6211025fa0 RCX: 00007f6210d9fb19 [ 150.909328][ T3332] RDX: 0000000000000256 RSI: 0000200000000540 RDI: 0000000000000003 [ 150.909335][ T3332] RBP: 00007f6211b88090 R08: 0000000000000000 R09: 0000000000000000 [ 150.909343][ T3332] R10: 0000000000010022 R11: 0000000000000246 R12: 0000000000000001 [ 150.909350][ T3332] R13: 00007f6211026038 R14: 00007f6211025fa0 R15: 00007ffe57211ae8 [ 150.909363][ T3332] [ 151.140131][ T36] kauditd_printk_skb: 706 callbacks suppressed [ 151.140146][ T36] audit: type=1400 audit(1794088777.920:1097): avc: denied { write } for pid=3334 comm="syz.3.1143" name="001" dev="devtmpfs" ino=108 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=0 can't run '/sbi[ 151.187911][ T36] audit: type=1400 audit(1794088777.949:1098): avc: denied { read } for pid=295 comm="syz-executor" name="loop2" dev="devtmpfs" ino=51 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 151.212183][ T36] audit: type=1400 audit(1794088777.959:1099): avc: denied { read } for pid=295 comm="syz-executor" name="loop2" dev="devtmpfs" ino=51 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 151.236017][ T36] audit: type=1400 audit(1794088777.968:1100): avc: denied { read } for pid=3342 comm="syz.2.1145" dev="nsfs" ino=4026532451 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=0 [ 151.257978][ T36] audit: type=1400 audit(1794088777.968:1101): avc: denied { execmem } for pid=3342 comm="syz.2.1145" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=0 [ 151.277492][ T36] audit: type=1400 audit(1794088777.968:1102): avc: denied { execmem } for pid=3342 comm="syz.2.1145" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=0 [ 151.296877][ T36] audit: type=1400 audit(1794088777.968:1103): avc: denied { read } for pid=295 comm="syz-executor" name="loop2" dev="devtmpfs" ino=51 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 151.321039][ T36] audit: type=1400 audit(1794088777.988:1104): avc: denied { create } for pid=3344 comm="syz.2.1146" anonclass=[userfaultfd] scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=0 [ 151.342636][ T36] audit: type=1400 audit(1794088777.988:1105): avc: denied { create } for pid=3344 comm="syz.2.1146" anonclass=[userfaultfd] scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=0 [ 151.365013][ T36] audit: type=1400 audit(1794088777.988:1106): avc: denied { read write } for pid=3344 comm="syz.2.1146" name="raw-gadget" dev="devtmpfs" ino=190 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=0 [ 151.726993][ T3375] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1158'. [ 151.758279][ T3381] FAULT_INJECTION: forcing a failure. [ 151.758279][ T3381] name failslab, interval 1, probability 0, space 0, times 0 [ 151.771042][ T3381] CPU: 0 UID: 0 PID: 3381 Comm: syz.2.1161 Not tainted syzkaller #0 ff996278633adec6fd25d1632b496761701c4fe9 [ 151.771074][ T3381] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/15/2026 [ 151.771090][ T3381] Call Trace: [ 151.771097][ T3381] [ 151.771105][ T3381] __dump_stack+0x21/0x30 [ 151.771128][ T3381] dump_stack_lvl+0x140/0x1c0 [ 151.771145][ T3381] ? __cfi_dump_stack_lvl+0x10/0x10 [ 151.771164][ T3381] dump_stack+0x19/0x20 [ 151.771179][ T3381] should_fail_ex+0x3c2/0x510 [ 151.771198][ T3381] should_failslab+0xac/0x100 [ 151.771218][ T3381] __kmalloc_node_noprof+0x69/0x500 [ 151.771244][ T3381] ? __kvmalloc_node_noprof+0x128/0x300 [ 151.771268][ T3381] __kvmalloc_node_noprof+0x128/0x300 [ 151.771290][ T3381] ? selinux_perf_event_alloc+0x110/0x110 [ 151.771313][ T3381] ? __cfi___kvmalloc_node_noprof+0x10/0x10 [ 151.771336][ T3381] ? kvmemdup+0x90/0x110 [ 151.771356][ T3381] ? __kvmalloc_node_noprof+0x173/0x300 [ 151.771378][ T3381] io_pin_pages+0xb3/0x270 [ 151.771396][ T3381] __io_uaddr_map+0xaa/0x200 [ 151.771412][ T3381] ? selinux_capable+0x38/0x50 [ 151.771434][ T3381] io_allocate_scq_urings+0x183/0x645 [ 151.771463][ T3381] io_uring_create+0x781/0x13f0 [ 151.771484][ T3381] __se_sys_io_uring_setup+0x2a4/0x2b0 [ 151.771507][ T3381] ? __kasan_check_write+0x18/0x20 [ 151.771531][ T3381] ? __x64_sys_io_uring_setup+0x80/0x80 [ 151.771555][ T3381] ? __kasan_check_read+0x15/0x20 [ 151.771578][ T3381] __x64_sys_io_uring_setup+0x5f/0x80 [ 151.771597][ T3381] x64_sys_call+0x22c0/0x2ee0 [ 151.771615][ T3381] do_syscall_64+0x57/0xf0 [ 151.771634][ T3381] ? clear_bhb_loop+0x50/0xa0 [ 151.771657][ T3381] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 151.771680][ T3381] RIP: 0033:0x7f6210d9fb19 [ 151.771696][ T3381] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 151.771711][ T3381] RSP: 002b:00007f6211b87fb8 EFLAGS: 00000206 ORIG_RAX: 00000000000001a9 [ 151.771732][ T3381] RAX: ffffffffffffffda RBX: 0000200000000400 RCX: 00007f6210d9fb19 [ 151.771745][ T3381] RDX: 0000000000000000 RSI: 0000200000000400 RDI: 0000000000001727 [ 151.771759][ T3381] RBP: 00007f6211b88090 R08: 0000000000000000 R09: 0000000000000101 [ 151.771772][ T3381] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 151.771784][ T3381] R13: 0000000000000000 R14: 0000000000000000 R15: 00007ffe57211ae8 [ 151.771798][ T3381] can't run '/sbi[ 152.255032][ T3397] sock: sock_timestamping_bind_phc: sock not bind to device [ 152.407267][ T3409] netlink: 'syz.3.1173': attribute type 4 has an invalid length. [ 152.415338][ T3409] netlink: 'syz.3.1173': attribute type 4 has an invalid length. [ 152.868390][ T3437] FAULT_INJECTION: forcing a failure. [ 152.868390][ T3437] name failslab, interval 1, probability 0, space 0, times 0 [ 152.881011][ T3437] CPU: 1 UID: 0 PID: 3437 Comm: syz.4.1185 Not tainted syzkaller #0 ff996278633adec6fd25d1632b496761701c4fe9 [ 152.881033][ T3437] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/15/2026 [ 152.881042][ T3437] Call Trace: [ 152.881048][ T3437] [ 152.881054][ T3437] __dump_stack+0x21/0x30 [ 152.881070][ T3437] dump_stack_lvl+0x140/0x1c0 [ 152.881080][ T3437] ? __cfi_dump_stack_lvl+0x10/0x10 [ 152.881091][ T3437] ? try_to_wake_up+0xfc4/0x1d10 [ 152.881106][ T3437] dump_stack+0x19/0x20 [ 152.881116][ T3437] should_fail_ex+0x3c2/0x510 [ 152.881126][ T3437] should_failslab+0xac/0x100 [ 152.881138][ T3437] kmem_cache_alloc_noprof+0x42/0x410 [ 152.881154][ T3437] ? inc_rlimit_get_ucounts+0x3fb/0x470 [ 152.881166][ T3437] ? __sigqueue_alloc+0x15e/0x2b0 [ 152.881182][ T3437] __sigqueue_alloc+0x15e/0x2b0 [ 152.881197][ T3437] __send_signal_locked+0x19d/0xbc0 [ 152.881211][ T3437] ? __cfi__raw_spin_lock_irqsave+0x10/0x10 [ 152.881223][ T3437] send_signal_locked+0x41a/0x590 [ 152.881237][ T3437] force_sig_info_to_task+0x2f5/0x4c0 [ 152.881251][ T3437] force_sig_fault+0xf1/0x150 [ 152.881266][ T3437] ? __cfi_force_sig_fault+0x10/0x10 [ 152.881280][ T3437] ? fixup_vdso_exception+0x21d/0x330 [ 152.881295][ T3437] ? find_vma+0xd3/0x120 [ 152.881317][ T3437] __bad_area_nosemaphore+0x2fb/0x680 [ 152.881337][ T3437] ? __kasan_check_write+0x18/0x20 [ 152.881361][ T3437] bad_area_nosemaphore+0x2d/0x50 [ 152.881373][ T3437] do_user_addr_fault+0xdec/0x1230 [ 152.881385][ T3437] ? fpregs_assert_state_consistent+0xb6/0xe0 [ 152.881402][ T3437] exc_page_fault+0x58/0xc0 [ 152.881416][ T3437] asm_exc_page_fault+0x2b/0x30 [ 152.881430][ T3437] RIP: 0033:0x7f9da4e53eff [ 152.881440][ T3437] Code: 24 10 4c 89 44 24 08 48 8b 74 24 28 48 8b 5c 24 20 4c 8b 74 24 18 4c 8b 64 24 10 4c 8b 6c 24 08 48 89 da e8 03 bc 14 00 8b 13 <49> 89 1e b9 01 80 00 00 48 89 c5 8b 43 40 41 89 e8 8d 14 90 8b 43 [ 152.881450][ T3437] RSP: 002b:00007f9da5e0efc0 EFLAGS: 00010286 [ 152.881461][ T3437] RAX: ffffffffffffffff RBX: 0000200000000400 RCX: ffffffffffffffe8 [ 152.881470][ T3437] RDX: 0000000000000000 RSI: 0000200000000400 RDI: 0000000000001727 [ 152.881477][ T3437] RBP: 00007f9da5e0f090 R08: 0000000000000000 R09: 0000000000000101 [ 152.881485][ T3437] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 152.881492][ T3437] R13: 0000000000000000 R14: 0000000000000000 R15: 00007ffcf26eccb8 [ 152.881500][ T3437] can't run '/sbi[ 153.689649][ T3455] netlink: 'syz.0.1193': attribute type 10 has an invalid length. [ 153.699665][ T3455] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1193'. [ 153.762207][ T3468] FAULT_INJECTION: forcing a failure. [ 153.762207][ T3468] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 153.775444][ T3468] CPU: 0 UID: 0 PID: 3468 Comm: syz.3.1199 Not tainted syzkaller #0 ff996278633adec6fd25d1632b496761701c4fe9 [ 153.775474][ T3468] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/15/2026 [ 153.775485][ T3468] Call Trace: [ 153.775492][ T3468] [ 153.775499][ T3468] __dump_stack+0x21/0x30 [ 153.775522][ T3468] dump_stack_lvl+0x140/0x1c0 [ 153.775538][ T3468] ? __cfi_dump_stack_lvl+0x10/0x10 [ 153.775561][ T3468] ? __sys_recvmsg_sock+0x60/0x60 [ 153.775583][ T3468] dump_stack+0x19/0x20 [ 153.775597][ T3468] should_fail_ex+0x3c2/0x510 [ 153.775617][ T3468] should_fail+0xf/0x20 [ 153.775630][ T3468] should_fail_usercopy+0x1e/0x30 [ 153.775645][ T3468] _copy_from_user+0x20/0xa0 [ 153.775664][ T3468] ___sys_recvmsg+0x174/0x590 [ 153.775689][ T3468] ? kstrtoull+0x13b/0x1e0 [ 153.775710][ T3468] ? __sys_recvmsg+0x260/0x260 [ 153.775731][ T3468] ? kstrtouint_from_user+0x117/0x170 [ 153.775751][ T3468] ? __x64_sys_openat+0x13a/0x170 [ 153.775774][ T3468] do_recvmmsg+0x328/0x790 [ 153.775795][ T3468] ? __sys_recvmmsg+0x2a0/0x2a0 [ 153.775816][ T3468] ? __cfi_vfs_write+0x10/0x10 [ 153.775840][ T3468] ? fput+0x1a4/0x230 [ 153.775859][ T3468] __x64_sys_recvmmsg+0x199/0x250 [ 153.775881][ T3468] ? __cfi___x64_sys_recvmmsg+0x10/0x10 [ 153.775903][ T3468] ? __kasan_check_read+0x15/0x20 [ 153.775932][ T3468] x64_sys_call+0x292c/0x2ee0 [ 153.775951][ T3468] do_syscall_64+0x57/0xf0 [ 153.775976][ T3468] ? clear_bhb_loop+0x50/0xa0 [ 153.776001][ T3468] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 153.776023][ T3468] RIP: 0033:0x7f764139fb19 [ 153.776039][ T3468] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 153.776056][ T3468] RSP: 002b:00007f7642212028 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 153.776076][ T3468] RAX: ffffffffffffffda RBX: 00007f7641625fa0 RCX: 00007f764139fb19 [ 153.776091][ T3468] RDX: 0000000000000256 RSI: 0000200000000540 RDI: 0000000000000003 [ 153.776103][ T3468] RBP: 00007f7642212090 R08: 0000000000000000 R09: 0000000000000000 [ 153.776115][ T3468] R10: 0000000000010022 R11: 0000000000000246 R12: 0000000000000001 [ 153.776125][ T3468] R13: 00007f7641626038 R14: 00007f7641625fa0 R15: 00007ffe1074ae98 [ 153.776143][ T3468] can't run '/sbi[ 154.891774][ T3497] FAULT_INJECTION: forcing a failure. [ 154.891774][ T3497] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 154.905002][ T3497] CPU: 1 UID: 0 PID: 3497 Comm: syz.3.1209 Not tainted syzkaller #0 ff996278633adec6fd25d1632b496761701c4fe9 [ 154.905034][ T3497] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/15/2026 [ 154.905046][ T3497] Call Trace: [ 154.905054][ T3497] [ 154.905062][ T3497] __dump_stack+0x21/0x30 [ 154.905083][ T3497] dump_stack_lvl+0x140/0x1c0 [ 154.905099][ T3497] ? __cfi_dump_stack_lvl+0x10/0x10 [ 154.905114][ T3497] ? kernel_text_address+0xa9/0xe0 [ 154.905137][ T3497] ? unwind_get_return_address+0x51/0x90 [ 154.905159][ T3497] dump_stack+0x19/0x20 [ 154.905173][ T3497] should_fail_ex+0x3c2/0x510 [ 154.905191][ T3497] should_fail+0xf/0x20 [ 154.905204][ T3497] should_fail_usercopy+0x1e/0x30 [ 154.905215][ T3497] copy_fpstate_to_sigframe+0x906/0xbb0 [ 154.905232][ T3497] ? copy_fpstate_to_sigframe+0x177/0xbb0 [ 154.905247][ T3497] ? __cfi_copy_fpstate_to_sigframe+0x10/0x10 [ 154.905262][ T3497] ? get_signal+0xa2a/0x1490 [ 154.905271][ T3497] ? arch_do_signal_or_restart+0xbc/0x700 [ 154.905290][ T3497] ? irqentry_exit_to_user_mode+0x4d/0xb0 [ 154.905306][ T3497] ? irqentry_exit+0x16/0x60 [ 154.905319][ T3497] ? exc_page_fault+0x65/0xc0 [ 154.905332][ T3497] ? asm_exc_page_fault+0x2b/0x30 [ 154.905347][ T3497] ? fpu__alloc_mathframe+0xb7/0x150 [ 154.905361][ T3497] get_sigframe+0x604/0x830 [ 154.905372][ T3497] ? __cfi_get_sigframe+0x10/0x10 [ 154.905384][ T3497] x64_setup_rt_frame+0x162/0xc20 [ 154.905395][ T3497] ? __kasan_slab_free+0x6a/0x80 [ 154.905407][ T3497] ? __asan_memcpy+0x5a/0x80 [ 154.905421][ T3497] ? _raw_spin_unlock_irq+0x45/0x70 [ 154.905433][ T3497] ? get_signal+0x120a/0x1490 [ 154.905443][ T3497] ? __cfi_x64_setup_rt_frame+0x10/0x10 [ 154.905455][ T3497] arch_do_signal_or_restart+0x328/0x700 [ 154.905466][ T3497] ? __cfi_arch_do_signal_or_restart+0x10/0x10 [ 154.905479][ T3497] irqentry_exit_to_user_mode+0x4d/0xb0 [ 154.905493][ T3497] irqentry_exit+0x16/0x60 [ 154.905507][ T3497] exc_page_fault+0x65/0xc0 [ 154.905520][ T3497] asm_exc_page_fault+0x2b/0x30 [ 154.905532][ T3497] RIP: 0033:0x7f7641253eff [ 154.905544][ T3497] Code: 24 10 4c 89 44 24 08 48 8b 74 24 28 48 8b 5c 24 20 4c 8b 74 24 18 4c 8b 64 24 10 4c 8b 6c 24 08 48 89 da e8 03 bc 14 00 8b 13 <49> 89 1e b9 01 80 00 00 48 89 c5 8b 43 40 41 89 e8 8d 14 90 8b 43 [ 154.905552][ T3497] RSP: 002b:00007f7642211fc0 EFLAGS: 00010286 [ 154.905563][ T3497] RAX: ffffffffffffffff RBX: 0000200000000400 RCX: ffffffffffffffe8 [ 154.905572][ T3497] RDX: 0000000000000000 RSI: 0000200000000400 RDI: 0000000000001727 [ 154.905579][ T3497] RBP: 00007f7642212090 R08: 0000000000000000 R09: 0000000000000101 [ 154.905586][ T3497] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 154.905593][ T3497] R13: 0000000000000000 R14: 0000000000000000 R15: 00007ffe1074ae98 [ 154.905601][ T3497] can't run '/sbi[ 155.331548][ T3516] netlink: 'syz.2.1213': attribute type 46 has an invalid length. [ 155.584983][ T3535] FAULT_INJECTION: forcing a failure. [ 155.584983][ T3535] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 155.598279][ T3535] CPU: 1 UID: 0 PID: 3535 Comm: syz.3.1223 Not tainted syzkaller #0 ff996278633adec6fd25d1632b496761701c4fe9 [ 155.598313][ T3535] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/15/2026 [ 155.598325][ T3535] Call Trace: [ 155.598340][ T3535] [ 155.598348][ T3535] __dump_stack+0x21/0x30 [ 155.598365][ T3535] dump_stack_lvl+0x140/0x1c0 [ 155.598375][ T3535] ? __cfi_dump_stack_lvl+0x10/0x10 [ 155.598386][ T3535] ? __sys_recvmsg_sock+0x60/0x60 [ 155.598402][ T3535] dump_stack+0x19/0x20 [ 155.598411][ T3535] should_fail_ex+0x3c2/0x510 [ 155.598422][ T3535] should_fail+0xf/0x20 [ 155.598431][ T3535] should_fail_usercopy+0x1e/0x30 [ 155.598442][ T3535] _copy_from_user+0x20/0xa0 [ 155.598454][ T3535] ___sys_recvmsg+0x174/0x590 [ 155.598469][ T3535] ? kstrtoull+0x13b/0x1e0 [ 155.598482][ T3535] ? __sys_recvmsg+0x260/0x260 [ 155.598496][ T3535] ? kstrtouint_from_user+0x117/0x170 [ 155.598510][ T3535] ? __x64_sys_openat+0x13a/0x170 [ 155.598526][ T3535] do_recvmmsg+0x328/0x790 [ 155.598540][ T3535] ? __sys_recvmmsg+0x2a0/0x2a0 [ 155.598553][ T3535] ? __cfi_vfs_write+0x10/0x10 [ 155.598574][ T3535] ? fput+0x1a4/0x230 [ 155.598600][ T3535] __x64_sys_recvmmsg+0x199/0x250 [ 155.598622][ T3535] ? __cfi___x64_sys_recvmmsg+0x10/0x10 [ 155.598639][ T3535] ? __kasan_check_read+0x15/0x20 [ 155.598654][ T3535] x64_sys_call+0x292c/0x2ee0 [ 155.598665][ T3535] do_syscall_64+0x57/0xf0 [ 155.598676][ T3535] ? clear_bhb_loop+0x50/0xa0 [ 155.598691][ T3535] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 155.598704][ T3535] RIP: 0033:0x7f764139fb19 [ 155.598714][ T3535] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 155.598723][ T3535] RSP: 002b:00007f7642212028 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 155.598736][ T3535] RAX: ffffffffffffffda RBX: 00007f7641625fa0 RCX: 00007f764139fb19 [ 155.598744][ T3535] RDX: 0000000000000256 RSI: 0000200000000540 RDI: 0000000000000003 [ 155.598752][ T3535] RBP: 00007f7642212090 R08: 0000000000000000 R09: 0000000000000000 [ 155.598759][ T3535] R10: 0000000000010022 R11: 0000000000000246 R12: 0000000000000001 [ 155.598766][ T3535] R13: 00007f7641626038 R14: 00007f7641625fa0 R15: 00007ffe1074ae98 [ 155.598774][ T3535] [ 155.977767][ T3552] syzkaller0: entered promiscuous mode [ 155.983254][ T3552] syzkaller0: entered allmulticast mode [ 156.001576][ T3557] netlink: 'syz.0.1231': attribute type 28 has an invalid length. [ 156.041908][ T46] Bluetooth: hci0: Frame reassembly failed (-84) can't run '/sbi[ 156.662003][ T36] kauditd_printk_skb: 406 callbacks suppressed [ 156.662021][ T36] audit: type=1400 audit(1794088783.307:1513): avc: denied { read } for pid=1655 comm="syz-executor" name="loop4" dev="devtmpfs" ino=53 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 156.691861][ T36] audit: type=1400 audit(1794088783.307:1514): avc: denied { create } for pid=3589 comm="syz.4.1243" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=0 [ 156.712477][ T36] audit: type=1400 audit(1794088783.307:1515): avc: denied { mmap_zero } for pid=3589 comm="syz.4.1243" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=memprotect permissive=0 [ 156.732220][ T36] audit: type=1400 audit(1794088783.307:1516): avc: denied { create } for pid=3589 comm="syz.4.1243" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=0 [ 156.752766][ T36] audit: type=1400 audit(1794088783.307:1517): avc: denied { read write } for pid=3589 comm="syz.4.1243" name="fuse" dev="devtmpfs" ino=23 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fuse_device_t tclass=chr_file permissive=0 [ 156.776189][ T36] audit: type=1400 audit(1794088783.307:1518): avc: denied { execmem } for pid=3589 comm="syz.4.1243" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=0 [ 156.796359][ T36] audit: type=1400 audit(1794088783.307:1519): avc: denied { read } for pid=1655 comm="syz-executor" name="loop4" dev="devtmpfs" ino=53 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 156.819989][ T36] audit: type=1400 audit(1794088783.307:1520): avc: denied { read } for pid=3591 comm="syz.4.1244" name="kvm" dev="devtmpfs" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=0 [ 156.842775][ T36] audit: type=1400 audit(1794088783.375:1521): avc: denied { sys_module } for pid=3591 comm="syz.4.1244" capability=16 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=0 [ 156.863996][ T36] audit: type=1400 audit(1794088783.375:1522): avc: denied { read write } for pid=3591 comm="syz.4.1244" name="raw-gadget" dev="devtmpfs" ino=190 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=0 [ 156.925145][ T3607] FAULT_INJECTION: forcing a failure. [ 156.925145][ T3607] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 156.938658][ T3607] CPU: 0 UID: 0 PID: 3607 Comm: syz.3.1250 Not tainted syzkaller #0 ff996278633adec6fd25d1632b496761701c4fe9 [ 156.938689][ T3607] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/15/2026 [ 156.938702][ T3607] Call Trace: [ 156.938709][ T3607] [ 156.938737][ T3607] __dump_stack+0x21/0x30 [ 156.938760][ T3607] dump_stack_lvl+0x140/0x1c0 [ 156.938782][ T3607] ? __cfi_dump_stack_lvl+0x10/0x10 [ 156.938800][ T3607] ? __sys_recvmsg_sock+0x60/0x60 [ 156.938841][ T3607] dump_stack+0x19/0x20 [ 156.938858][ T3607] should_fail_ex+0x3c2/0x510 [ 156.938876][ T3607] should_fail+0xf/0x20 [ 156.938891][ T3607] should_fail_usercopy+0x1e/0x30 [ 156.938922][ T3607] _copy_from_user+0x20/0xa0 [ 156.938943][ T3607] ___sys_recvmsg+0x174/0x590 [ 156.938964][ T3607] ? kstrtoull+0x13b/0x1e0 [ 156.938986][ T3607] ? __sys_recvmsg+0x260/0x260 [ 156.939006][ T3607] ? kstrtouint_from_user+0x117/0x170 [ 156.939031][ T3607] ? __x64_sys_openat+0x13a/0x170 [ 156.939058][ T3607] do_recvmmsg+0x328/0x790 [ 156.939083][ T3607] ? __sys_recvmmsg+0x2a0/0x2a0 [ 156.939106][ T3607] ? __cfi_vfs_write+0x10/0x10 [ 156.939132][ T3607] ? fput+0x1a4/0x230 [ 156.939154][ T3607] __x64_sys_recvmmsg+0x199/0x250 [ 156.939178][ T3607] ? __cfi___x64_sys_recvmmsg+0x10/0x10 [ 156.939202][ T3607] ? __kasan_check_read+0x15/0x20 [ 156.939228][ T3607] x64_sys_call+0x292c/0x2ee0 [ 156.939248][ T3607] do_syscall_64+0x57/0xf0 [ 156.939267][ T3607] ? clear_bhb_loop+0x50/0xa0 [ 156.939291][ T3607] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 156.939311][ T3607] RIP: 0033:0x7f764139fb19 [ 156.939327][ T3607] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 156.939343][ T3607] RSP: 002b:00007f7642212028 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 156.939364][ T3607] RAX: ffffffffffffffda RBX: 00007f7641625fa0 RCX: 00007f764139fb19 [ 156.939379][ T3607] RDX: 0000000000000256 RSI: 0000200000000540 RDI: 0000000000000003 [ 156.939392][ T3607] RBP: 00007f7642212090 R08: 0000000000000000 R09: 0000000000000000 [ 156.939405][ T3607] R10: 0000000000010022 R11: 0000000000000246 R12: 0000000000000002 [ 156.939417][ T3607] R13: 00007f7641626038 R14: 00007f7641625fa0 R15: 00007ffe1074ae98 [ 156.939434][ T3607] [ 157.240022][ T3622] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1793 sclass=netlink_route_socket pid=3622 comm=syz.0.1257 can't run '/sbi[ 158.042087][ T3637] bridge0: entered promiscuous mode [ 158.047342][ T3637] bridge0: entered allmulticast mode [ 158.098954][ T54] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 158.098974][ T2535] Bluetooth: hci0: command 0x1003 tx timeout [ 158.262037][ T2534] Bluetooth: hci1: Opcode 0x1003 failed: -110 [ 158.262033][ T54] Bluetooth: hci1: command 0x1003 tx timeout can't run '/sbican't run '/sbi[ 159.748232][ T3690] FAULT_INJECTION: forcing a failure. [ 159.748232][ T3690] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 159.761405][ T3690] CPU: 1 UID: 0 PID: 3690 Comm: syz.4.1285 Not tainted syzkaller #0 ff996278633adec6fd25d1632b496761701c4fe9 [ 159.761436][ T3690] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/15/2026 [ 159.761450][ T3690] Call Trace: [ 159.761456][ T3690] [ 159.761464][ T3690] __dump_stack+0x21/0x30 [ 159.761487][ T3690] dump_stack_lvl+0x140/0x1c0 [ 159.761504][ T3690] ? __cfi_dump_stack_lvl+0x10/0x10 [ 159.761523][ T3690] ? __sys_recvmsg_sock+0x60/0x60 [ 159.761550][ T3690] dump_stack+0x19/0x20 [ 159.761566][ T3690] should_fail_ex+0x3c2/0x510 [ 159.761585][ T3690] should_fail+0xf/0x20 [ 159.761602][ T3690] should_fail_usercopy+0x1e/0x30 [ 159.761621][ T3690] _copy_from_user+0x20/0xa0 [ 159.761643][ T3690] ___sys_recvmsg+0x174/0x590 [ 159.761666][ T3690] ? kstrtoull+0x13b/0x1e0 [ 159.761689][ T3690] ? __sys_recvmsg+0x260/0x260 [ 159.761714][ T3690] ? kstrtouint_from_user+0x117/0x170 [ 159.761738][ T3690] ? __x64_sys_openat+0x13a/0x170 [ 159.761766][ T3690] do_recvmmsg+0x328/0x790 [ 159.761792][ T3690] ? __sys_recvmmsg+0x2a0/0x2a0 [ 159.761824][ T3690] ? __cfi_vfs_write+0x10/0x10 [ 159.761851][ T3690] ? fput+0x1a4/0x230 [ 159.761872][ T3690] __x64_sys_recvmmsg+0x199/0x250 [ 159.761897][ T3690] ? __cfi___x64_sys_recvmmsg+0x10/0x10 [ 159.761922][ T3690] ? __kasan_check_read+0x15/0x20 [ 159.761947][ T3690] x64_sys_call+0x292c/0x2ee0 [ 159.761966][ T3690] do_syscall_64+0x57/0xf0 [ 159.761985][ T3690] ? clear_bhb_loop+0x50/0xa0 [ 159.762008][ T3690] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 159.762032][ T3690] RIP: 0033:0x7f9da4f9fb19 [ 159.762048][ T3690] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 159.762064][ T3690] RSP: 002b:00007f9da5e0f028 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 159.762085][ T3690] RAX: ffffffffffffffda RBX: 00007f9da5225fa0 RCX: 00007f9da4f9fb19 [ 159.762100][ T3690] RDX: 0000000000000256 RSI: 0000200000000540 RDI: 0000000000000003 [ 159.762113][ T3690] RBP: 00007f9da5e0f090 R08: 0000000000000000 R09: 0000000000000000 [ 159.762126][ T3690] R10: 0000000000010022 R11: 0000000000000246 R12: 0000000000000002 [ 159.762139][ T3690] R13: 00007f9da5226038 R14: 00007f9da5225fa0 R15: 00007ffcf26eccb8 [ 159.762156][ T3690] can't run '/sbi[ 161.241132][ T3760] FAULT_INJECTION: forcing a failure. [ 161.241132][ T3760] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 161.254294][ T3760] CPU: 0 UID: 0 PID: 3760 Comm: syz.4.1316 Not tainted syzkaller #0 ff996278633adec6fd25d1632b496761701c4fe9 [ 161.254323][ T3760] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/15/2026 [ 161.254332][ T3760] Call Trace: [ 161.254337][ T3760] [ 161.254342][ T3760] __dump_stack+0x21/0x30 [ 161.254358][ T3760] dump_stack_lvl+0x140/0x1c0 [ 161.254368][ T3760] ? __cfi_dump_stack_lvl+0x10/0x10 [ 161.254379][ T3760] ? check_stack_object+0x138/0x150 [ 161.254395][ T3760] dump_stack+0x19/0x20 [ 161.254405][ T3760] should_fail_ex+0x3c2/0x510 [ 161.254416][ T3760] should_fail+0xf/0x20 [ 161.254424][ T3760] should_fail_usercopy+0x1e/0x30 [ 161.254435][ T3760] _copy_to_user+0x24/0xa0 [ 161.254448][ T3760] simple_read_from_buffer+0xed/0x160 [ 161.254461][ T3760] proc_fail_nth_read+0x1aa/0x220 [ 161.254476][ T3760] ? __cfi_proc_fail_nth_read+0x10/0x10 [ 161.254489][ T3760] ? rwsem_read_trylock+0x275/0x5a0 [ 161.254502][ T3760] ? bpf_lsm_file_permission+0xd/0x20 [ 161.254515][ T3760] ? __cfi_proc_fail_nth_read+0x10/0x10 [ 161.254528][ T3760] vfs_read+0x28b/0xc70 [ 161.254542][ T3760] ? __cfi___blk_flush_plug+0x10/0x10 [ 161.254555][ T3760] ? __cfi_vfs_read+0x10/0x10 [ 161.254569][ T3760] ? __kasan_check_write+0x18/0x20 [ 161.254585][ T3760] ? mutex_lock+0x97/0x1d0 [ 161.254599][ T3760] ? __cfi_mutex_lock+0x10/0x10 [ 161.254613][ T3760] ksys_read+0x145/0x260 [ 161.254627][ T3760] ? __cfi_ksys_read+0x10/0x10 [ 161.254642][ T3760] ? __kasan_check_read+0x15/0x20 [ 161.254656][ T3760] __x64_sys_read+0x7f/0x90 [ 161.254665][ T3760] x64_sys_call+0x2638/0x2ee0 [ 161.254716][ T3760] do_syscall_64+0x57/0xf0 [ 161.254728][ T3760] ? clear_bhb_loop+0x50/0xa0 [ 161.254742][ T3760] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 161.254756][ T3760] RIP: 0033:0x7f9da4f6034e [ 161.254767][ T3760] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 161.254776][ T3760] RSP: 002b:00007f9da5e0efe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 161.254789][ T3760] RAX: ffffffffffffffda RBX: 00007f9da5e0f6c0 RCX: 00007f9da4f6034e [ 161.254797][ T3760] RDX: 000000000000000f RSI: 00007f9da5e0f0a0 RDI: 0000000000000004 [ 161.254805][ T3760] RBP: 00007f9da5e0f090 R08: 0000000000000000 R09: 0000000000000000 [ 161.254812][ T3760] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 161.254818][ T3760] R13: 00007f9da5226038 R14: 00007f9da5225fa0 R15: 00007ffcf26eccb8 [ 161.254827][ T3760] can't run '/sbi[ 161.520830][ T3766] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1319'. [ 161.764204][ T36] kauditd_printk_skb: 298 callbacks suppressed [ 161.764221][ T36] audit: type=1400 audit(1794089044.312:1821): avc: denied { read } for pid=296 comm="syz-executor" name="loop3" dev="devtmpfs" ino=52 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 161.794268][ T36] audit: type=1400 audit(1794089044.322:1822): avc: denied { setcheckreqprot } for pid=3799 comm="syz.3.1332" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security permissive=0 [ 161.815141][ T36] audit: type=1400 audit(1794089044.322:1823): avc: denied { read } for pid=3799 comm="syz.3.1332" dev="nsfs" ino=4026532549 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=0 [ 161.891137][ T36] audit: type=1326 audit(1794089044.442:1824): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3799 comm="syz.3.1332" exe="/root/ci2-android-6-12-rust/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f764139fb19 code=0x7fc00000 [ 161.917217][ T36] audit: type=1326 audit(1794089044.442:1825): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3799 comm="syz.3.1332" exe="/root/ci2-android-6-12-rust/syz-executor" sig=0 arch=c000003e syscall=248 compat=0 ip=0x7f764139fb19 code=0x7fc00000 [ 161.942632][ T36] audit: type=1326 audit(1794089044.442:1826): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3799 comm="syz.3.1332" exe="/root/ci2-android-6-12-rust/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f764139fb19 code=0x7fc00000 [ 161.968352][ T36] audit: type=1326 audit(1794089044.442:1827): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3799 comm="syz.3.1332" exe="/root/ci2-android-6-12-rust/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f764139fb19 code=0x7fc00000 [ 161.993818][ T36] audit: type=1326 audit(1794089044.442:1828): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3799 comm="syz.3.1332" exe="/root/ci2-android-6-12-rust/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f764139fb19 code=0x7fc00000 [ 162.019366][ T36] audit: type=1326 audit(1794089044.442:1829): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3799 comm="syz.3.1332" exe="/root/ci2-android-6-12-rust/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f764139fb19 code=0x7fc00000 [ 162.044723][ T36] audit: type=1326 audit(1794089044.442:1830): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3799 comm="syz.3.1332" exe="/root/ci2-android-6-12-rust/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f764139fb19 code=0x7fc00000 can't run '/sbi[ 163.432137][ T3911] netlink: 'syz.0.1378': attribute type 16 has an invalid length. [ 163.440055][ T3911] netlink: 64138 bytes leftover after parsing attributes in process `syz.0.1378'. can't run '/sbi[ 163.979919][ T426] Bluetooth: hci0: Frame reassembly failed (-84) can't run '/sbi[ 164.975945][ T3967] netlink: 136 bytes leftover after parsing attributes in process `syz.4.1401'. [ 164.992586][ T3972] netlink: 'syz.2.1403': attribute type 4 has an invalid length. [ 165.001183][ T3972] netlink: 3657 bytes leftover after parsing attributes in process `syz.2.1403'. can't run '/sbi[ 165.536421][ T3982] netlink: 'syz.3.1407': attribute type 27 has an invalid length. [ 165.997208][ T54] Bluetooth: hci0: command 0x1003 tx timeout [ 165.997208][ T2534] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 166.092624][ T4027] syz.3.1427 (4027): /proc/4026/oom_adj is deprecated, please use /proc/4026/oom_score_adj instead. [ 166.131841][ T4030] netlink: 96 bytes leftover after parsing attributes in process `syz.4.1418'. can't run '/sbi[ 166.758182][ T4049] capability: warning: `syz.4.1436' uses 32-bit capabilities (legacy support in use) [ 166.768386][ T36] kauditd_printk_skb: 769 callbacks suppressed [ 166.768401][ T36] audit: type=1400 audit(1794089049.322:2600): avc: denied { read } for pid=4048 comm="syz.4.1436" name="event2" dev="devtmpfs" ino=209 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=0 [ 166.799480][ T36] audit: type=1400 audit(1794089049.362:2601): avc: denied { read } for pid=1655 comm="syz-executor" name="loop4" dev="devtmpfs" ino=53 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 166.823130][ T36] audit: type=1400 audit(1794089049.362:2602): avc: denied { read } for pid=1655 comm="syz-executor" name="loop4" dev="devtmpfs" ino=53 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 166.846903][ T36] audit: type=1400 audit(1794089049.372:2603): avc: denied { read write } for pid=4052 comm="syz.4.1438" name="raw-gadget" dev="devtmpfs" ino=190 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=0 [ 166.870599][ T36] audit: type=1400 audit(1794089049.372:2604): avc: denied { read write } for pid=4052 comm="syz.4.1438" name="raw-gadget" dev="devtmpfs" ino=190 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=0 [ 166.898040][ T4055] netlink: 80 bytes leftover after parsing attributes in process `syz.0.1439'. [ 166.958483][ T36] audit: type=1400 audit(1794089049.512:2605): avc: denied { read } for pid=296 comm="syz-executor" name="loop3" dev="devtmpfs" ino=52 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 166.963385][ T4057] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=4057 comm=syz.0.1439 [ 166.982077][ T36] audit: type=1400 audit(1794089049.512:2606): avc: denied { execmem } for pid=4054 comm="syz.0.1439" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=0 [ 167.014139][ T36] audit: type=1400 audit(1794089049.512:2607): avc: denied { create } for pid=4054 comm="syz.0.1439" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=0 [ 167.034991][ T36] audit: type=1400 audit(1794089049.512:2608): avc: denied { create } for pid=4054 comm="syz.0.1439" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=0 [ 167.040811][ T4061] syzkaller1: entered promiscuous mode [ 167.057384][ T36] audit: type=1400 audit(1794089049.562:2609): avc: denied { create } for pid=4056 comm="syz.3.1440" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=0 [ 167.061351][ T4061] syzkaller1: entered allmulticast mode can't run '/sbi[ 167.855864][ T4095] FAULT_INJECTION: forcing a failure. [ 167.855864][ T4095] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 167.869005][ T4095] CPU: 1 UID: 0 PID: 4095 Comm: syz.4.1456 Not tainted syzkaller #0 ff996278633adec6fd25d1632b496761701c4fe9 [ 167.869037][ T4095] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/15/2026 [ 167.869047][ T4095] Call Trace: [ 167.869052][ T4095] [ 167.869057][ T4095] __dump_stack+0x21/0x30 [ 167.869073][ T4095] dump_stack_lvl+0x140/0x1c0 [ 167.869084][ T4095] ? __cfi_dump_stack_lvl+0x10/0x10 [ 167.869094][ T4095] ? __sys_recvmsg_sock+0x60/0x60 [ 167.869110][ T4095] dump_stack+0x19/0x20 [ 167.869119][ T4095] should_fail_ex+0x3c2/0x510 [ 167.869131][ T4095] should_fail+0xf/0x20 [ 167.869139][ T4095] should_fail_usercopy+0x1e/0x30 [ 167.869151][ T4095] _copy_from_user+0x20/0xa0 [ 167.869163][ T4095] ___sys_recvmsg+0x174/0x590 [ 167.869178][ T4095] ? kstrtoull+0x13b/0x1e0 [ 167.869192][ T4095] ? __sys_recvmsg+0x260/0x260 [ 167.869206][ T4095] ? kstrtouint_from_user+0x117/0x170 [ 167.869220][ T4095] ? __x64_sys_openat+0x13a/0x170 [ 167.869236][ T4095] do_recvmmsg+0x328/0x790 [ 167.869253][ T4095] ? __sys_recvmmsg+0x2a0/0x2a0 [ 167.869267][ T4095] ? __cfi_vfs_write+0x10/0x10 [ 167.869283][ T4095] ? fput+0x1a4/0x230 [ 167.869295][ T4095] __x64_sys_recvmmsg+0x199/0x250 [ 167.869309][ T4095] ? __cfi___x64_sys_recvmmsg+0x10/0x10 [ 167.869324][ T4095] ? __kasan_check_read+0x15/0x20 [ 167.869343][ T4095] x64_sys_call+0x292c/0x2ee0 [ 167.869362][ T4095] do_syscall_64+0x57/0xf0 [ 167.869381][ T4095] ? clear_bhb_loop+0x50/0xa0 [ 167.869399][ T4095] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 167.869412][ T4095] RIP: 0033:0x7f9da4f9fb19 [ 167.869423][ T4095] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 167.869432][ T4095] RSP: 002b:00007f9da5e0f028 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 167.869445][ T4095] RAX: ffffffffffffffda RBX: 00007f9da5225fa0 RCX: 00007f9da4f9fb19 [ 167.869453][ T4095] RDX: 0000000000000256 RSI: 0000200000000540 RDI: 0000000000000003 [ 167.869461][ T4095] RBP: 00007f9da5e0f090 R08: 0000000000000000 R09: 0000000000000000 [ 167.869468][ T4095] R10: 0000000000010022 R11: 0000000000000246 R12: 0000000000000002 [ 167.869475][ T4095] R13: 00007f9da5226038 R14: 00007f9da5225fa0 R15: 00007ffcf26eccb8 [ 167.869484][ T4095] can't run '/sbican't run '/sbi[ 170.010383][ T4143] FAULT_INJECTION: forcing a failure. [ 170.010383][ T4143] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 170.023519][ T4143] CPU: 0 UID: 0 PID: 4143 Comm: syz.2.1472 Not tainted syzkaller #0 ff996278633adec6fd25d1632b496761701c4fe9 [ 170.023542][ T4143] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/15/2026 [ 170.023550][ T4143] Call Trace: [ 170.023556][ T4143] [ 170.023561][ T4143] __dump_stack+0x21/0x30 [ 170.023577][ T4143] dump_stack_lvl+0x140/0x1c0 [ 170.023587][ T4143] ? __cfi_dump_stack_lvl+0x10/0x10 [ 170.023600][ T4143] ? check_stack_object+0x81/0x150 [ 170.023617][ T4143] dump_stack+0x19/0x20 [ 170.023626][ T4143] should_fail_ex+0x3c2/0x510 [ 170.023636][ T4143] should_fail+0xf/0x20 [ 170.023645][ T4143] should_fail_usercopy+0x1e/0x30 [ 170.023656][ T4143] _copy_from_user+0x20/0xa0 [ 170.023669][ T4143] memdup_user+0x81/0x170 [ 170.023682][ T4143] ? strndup_user+0x40/0xd0 [ 170.023703][ T4143] strndup_user+0x6c/0xd0 [ 170.023716][ T4143] __se_sys_mount+0x9f/0x480 [ 170.023726][ T4143] ? ksys_write+0x1f3/0x260 [ 170.023735][ T4143] ? __x64_sys_mount+0xf0/0xf0 [ 170.023745][ T4143] __x64_sys_mount+0xc3/0xf0 [ 170.023755][ T4143] x64_sys_call+0x2021/0x2ee0 [ 170.023766][ T4143] do_syscall_64+0x57/0xf0 [ 170.023778][ T4143] ? clear_bhb_loop+0x50/0xa0 [ 170.023792][ T4143] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 170.023805][ T4143] RIP: 0033:0x7f6210d9fb19 [ 170.023817][ T4143] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 170.023832][ T4143] RSP: 002b:00007f6211b88028 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 170.023851][ T4143] RAX: ffffffffffffffda RBX: 00007f6211025fa0 RCX: 00007f6210d9fb19 [ 170.023864][ T4143] RDX: 0000200000000940 RSI: 0000200000000900 RDI: 0000000000000000 [ 170.023877][ T4143] RBP: 00007f6211b88090 R08: 0000200000000980 R09: 0000000000000000 [ 170.023887][ T4143] R10: 0000000000810000 R11: 0000000000000246 R12: 0000000000000001 [ 170.023894][ T4143] R13: 00007f6211026038 R14: 00007f6211025fa0 R15: 00007ffe57211ae8 [ 170.023903][ T4143] [ 170.336536][ T4159] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1479'. [ 170.460889][ T426] bridge_slave_1: left allmulticast mode [ 170.467114][ T426] bridge_slave_1: left promiscuous mode [ 170.472877][ T426] bridge0: port 2(bridge_slave_1) entered disabled state [ 170.481157][ T426] bridge_slave_0: left allmulticast mode [ 170.486829][ T426] bridge_slave_0: left promiscuous mode [ 170.492834][ T426] bridge0: port 1(bridge_slave_0) entered disabled state can't run '/sbi[ 170.638529][ T426] veth1_macvtap: left promiscuous mode [ 170.644165][ T426] veth0_vlan: left promiscuous mode [ 170.989002][ T426] bridge_slave_1: left allmulticast mode [ 170.994764][ T426] bridge_slave_1: left promiscuous mode [ 171.000705][ T426] bridge0: port 2(bridge_slave_1) entered disabled state [ 171.008137][ T426] bridge_slave_0: left allmulticast mode [ 171.013771][ T426] bridge_slave_0: left promiscuous mode [ 171.019593][ T426] bridge0: port 1(bridge_slave_0) entered disabled state [ 171.027596][ T426] bridge_slave_1: left allmulticast mode [ 171.033234][ T426] bridge_slave_1: left promiscuous mode [ 171.039029][ T426] bridge0: port 2(bridge_slave_1) entered disabled state [ 171.046393][ T426] bridge_slave_0: left allmulticast mode [ 171.052189][ T426] bridge_slave_0: left promiscuous mode [ 171.057925][ T426] bridge0: port 1(bridge_slave_0) entered disabled state [ 171.219190][ T426] tipc: Disabling bearer [ 171.224509][ T426] tipc: Left network mode [ 171.230705][ T426] veth1_macvtap: left promiscuous mode [ 171.236222][ T426] veth0_vlan: left promiscuous mode [ 171.241809][ T426] veth1_macvtap: left promiscuous mode [ 171.247746][ T426] veth0_vlan: left promiscuous mode can't run '/sbican't run '/sbican't run '/sbican't run '/sbican't run '/sbican't run '/sbican't run '/sbican't run '/sbican't run '/sbican't run '/sbican't run '/sbican't run '/sbican't run '/sbican't run '/sbican't run '/sbican't run '/sbican't run '/sbican't run '/sbican't run '/sbi