last executing test programs: 3.356119629s ago: executing program 2 (id=301): r0 = memfd_create(&(0x7f0000000ec0)='\x103q}2[\xe0\x9a\xee\xaf\x03\x97\x9et\v\"|Ma\x86\xe7\xc0\x14\x9f\xb9h\xb1\x96\xe7=I\x860S6\xb5\xa8\xc2\x95Je%\xfeG\'e\xe5\x8f\xf8\xd2\x1c\xc0\xfb\x1c\xa6\xab\bi\xe4^\xd5\xfd\xa9\r\xac7A\x94k\xcd\t\x00\x90k\xd6\x05\xb6\x03\x00\x00\x00A\xc5\x9c_\xd4\x18,\f\xd4s\xb2\x99/\xc0\x9a\xf2Oc\xc0c\x03gB!\xb0\xb8n\x01\x9bT\x95\x10\x86\xe8$\x7f\r[\xf9\x0e1v\xb1\n\x88\v\x95uy\xb5:`\x8b\nC\x18A;\xaa%\xaf\xc7\xa3\xac\xa2D\xb5\xe2\xe1\xdc(\xfd\x05\x9fB\x84O\xfe@\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x1a\xa0\x17\xe3\xac\xe9\xc9\xa7\x8a\x1b\x03\"&\xac\xcap>\xccZ\x01\xbc\x18\xc1\xb9\xe9\v\x8b\x9c\xb4Q\xd4\x96EV<>\x99\xca\xb3\xe0\xc4tL\xed\xf5W\xbd#\xcf\x8a\x84\xed\x9f/\xd4\xbb\xea;-Dp\xf8\xd0F\x90\xf8\x92Ip6\xf4\x16\xe8\x14\xe0\x92!\x92-F\xe2\x14D\x91\xa8b\x04\xdd\x1d\a\xdc\xe0\x18\x85{\x80Q\xf6k\x96\xfaQ\x9fW\vO\xf0\xe4O\\\xceS\xf0\xde\x049d\x06#\x88\xc3\xdf\x85O\x1c\xc3\xad?r\xd7\x0e\x00\xd7\x83\xb0\x88\x9c\xf6Y-F\x98\xdd\x9c~\xfd\x95\xc3\xb6lC\xaa\"Y\xa2K\xecz\x84:*\xf5Y\xd1\x9b1\x91\x9b\x15\xd4\xec\x02o\x01&\xaa\x90w\xc4\xc7yn\xb5\x1ag\xab&?\xbe\xcb\xe8v\xa8\xe0\xa4\x81sW\xacf\x149\xd2}\xefCGa\x9a$4\x8c\xa5!p\x83\x05\x96%\x02%\xabj\n\x05\x00\x00\x00\x91}&y\xd3\xe1\xeep\'\xc5\xab\x19GsX5\x8c\n\x9fh\xee;4\xb1%V\xe0\xa9\x8e\xf30:\xd8\x18N~G\x139\xcas\xf4D\xd4\xd0s\r3\xcb\x9a&\xdf+(\xc9S\x9eL5\x84\xb1\x90pN\xe7/\r\b\x9a\xf13Q\xf9\xdf\x7fX\xa0\xafK\xefh\xbfOv\x9bh\xb3\xc0\xf5\x80\xba\"@\'\x02\xafi\xeaE\xa6a6F\xde\xd4\xfa\x84\xe4+A\xb7\xa2\x8f\xc9\xee|xxn\xefw\x93]%\xd0\x19\x132\x86\xabn\xfe\x91\xb6Cl\xcf\x04\x1cq\xc1\x1d~\x8d\x01\x83\x93_\x83\x8a`v\xb0K,|S\xe4\xba\xb1\f\xc8`\xa6s\xad\x11\xd4wG\x80u\x87u\xff\x87\xee', 0x2) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000040)={0x0, 0x1, 0x71f2, 0x1000007}) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.cpu/memory.limit_in_bytes\x00', 0x2, 0x0) write(r1, &(0x7f0000000080)='4', 0x1) fcntl$addseals(r0, 0x409, 0xb) 2.966728897s ago: executing program 2 (id=307): r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000100)=0x207, 0x4) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'gre0\x00', 0x0}) sendto$packet(r0, &(0x7f0000000180)="1f0000000000000008000000d331f98810332800", 0x14, 0x4, &(0x7f0000000140)={0x11, 0x86dd, r2, 0x1, 0x0, 0x6, @multicast}, 0x14) 2.927500829s ago: executing program 2 (id=308): r0 = socket$inet6_udplite(0xa, 0x2, 0x88) connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e21, 0x659, @empty, 0xff}, 0x1c) r1 = fcntl$dupfd(r0, 0x0, r0) write$cgroup_pid(r1, 0x0, 0x0) ppoll(&(0x7f0000000140)=[{r1, 0x9880}], 0x1, 0x0, 0x0, 0x0) 2.913047559s ago: executing program 2 (id=309): r0 = openat$udambuf(0xffffffffffffff9c, &(0x7f0000000100), 0x2) r1 = memfd_create(&(0x7f0000000340)='y\x105\xfb\xf7u\x83%:r\xc2\xb9x\xa4q\xc1\xea_\x8cZ7\xe7a\xdenJ\xeb\x87\x9b\x11x\x0e\xa1\xcf\x1a\x98S7\xc9\x00\x00\x00\x00\x00\x00\a\x00\x00\x00\x00\x00\x00\x04\x879\xa24\xa9am\xde\xb2\xd3\xcbZJoa\xc4\x1acB\xaa\xc1\xfb Q\xd4\xf4\x01\xa52\xe2DG\xd4\xbd{\x9f\xa9\x97\x9b@\xdb\x00b\xe1br\xb6\x008\xe3\x10\xff\xc2\x9d\r2\x9e\x8e\x04sW\x1b\xb7\xb3\xa2\xc9&@\xca\xda\xdc\xe2/\x97X\xac\b\xb0\xc2<\x80E\x1a\xbc\xc7W\xda9VsA\xaf\xc6\xcf\xe1\xa1\xb5M\xa2\x85\xa6y\xc4J\xf1\xf7\xfcD\x95\xe3\xeb\xc7\xbc\x91\xb0\xa8\x9eo\xebF(\x9dL\x01vRk\xaacB\x14OD\\\xe8R\xe4\xcd\xec\xcc\xd1\x0fre\xe86\xcd\xeb\xc4$\x98\x06J\xd6dD\x8d_U`ji{\xab\x97\xaf;l\x1f\xaf\xb38\x14\xcb\xfa\xb3j\x92\f\xe0\x81\xa0\xa2-g\b\x99\x0e\x8d\x8d\x16\xd9w\\\xf0\xce\xb0j\x9d\'\x93\xef\x1d\xa0H\xd9\xbd\xd9\xaf\x12\x00\x00\x00\x00\x00\x00\x00\x00\x00', 0x2) ftruncate(r1, 0xffff) fcntl$addseals(r1, 0x409, 0x7) ioctl$UDMABUF_CREATE(r0, 0x40187542, &(0x7f0000000140)={r1, 0x0, 0x0, 0x4000}) 2.899458539s ago: executing program 2 (id=310): mkdir(&(0x7f0000000000)='my_sys\x00', 0x1ff) mount(0x0, &(0x7f0000000200)='my_sys\x00', &(0x7f0000000300)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000500)='my_sys/bus/pci/devices/0000:00:03.0/resource1\x00', 0x2, 0x0) mmap$IORING_OFF_SQ_RING(0x0, 0x4, 0x1000002, 0x12, r0, 0x0) syz_clone(0x1022000, 0x0, 0xfffffffffffffc76, 0x0, 0x0, 0x0) 2.87854689s ago: executing program 2 (id=311): mkdir(&(0x7f00000002c0)='./file0\x00', 0x8) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0) setresgid(0x0, 0x0, 0xee01) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB='fd=', @ANYRESOCT=r0, @ANYBLOB=',rootmode=0000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) rename(&(0x7f0000000100)='./file0/../file0/file0\x00', 0x0) 755.219325ms ago: executing program 3 (id=338): r0 = socket(0x11, 0x3, 0x0) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000340)=0x59f8, 0x4) sendmmsg(r0, &(0x7f0000000bc0)=[{{&(0x7f0000000400)=@qipcrtr={0x2a, 0x4, 0x4001}, 0x80, &(0x7f0000000140)=[{&(0x7f0000000040)="d479183d7d98d181a4b5f3e38100", 0xe}], 0x1}}], 0x1, 0x24044015) recvmmsg(r0, &(0x7f0000000680)=[{{0x0, 0x0, 0x0}, 0x2}], 0x1, 0x2002, 0x0) recvmmsg(r0, 0x0, 0x0, 0x100e0, 0x0) 684.361116ms ago: executing program 3 (id=339): r0 = userfaultfd(0x801) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000000c0)) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x1}) ioctl$UFFDIO_CONTINUE(r0, 0xc020aa08, &(0x7f0000000080)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}}) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x8) 684.270126ms ago: executing program 3 (id=340): r0 = openat$pidfd(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) fchdir(r0) syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/pid\x00') mount(&(0x7f0000000000), &(0x7f00000000c0)='./cgroup\x00', 0x0, 0x1001, 0x0) unshare(0x62020600) 601.784678ms ago: executing program 3 (id=341): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x181403, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x6) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000200)=[@text64={0x40, &(0x7f0000000380)="0f78f5c744240000680000c7442402a6d40000c7442406000000000f011424c48235dc98b6420000f34d0f38f622b8010000000f01d9f30f4c84646d9ae7464399f3470f0966ba2100b003eef30f1ee1", 0x50}], 0x1, 0x40, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 434.920101ms ago: executing program 3 (id=343): mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0) mount$incfs(&(0x7f0000000080)='./file0\x00', &(0x7f0000000040)='./file0\x00', &(0x7f0000000140), 0x0, 0x0) r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x80, 0x143) linkat(r0, &(0x7f00000021c0)='./file0/file0\x00', r0, 0x0, 0x400) getdents64(r0, &(0x7f0000000580)=""/174, 0xff56) 381.722853ms ago: executing program 3 (id=346): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000240)={0x1, &(0x7f0000000200)=[{0x6, 0x1, 0x7, 0x7fc00002}]}) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000000)={'bridge0\x00', &(0x7f0000000080)=@ethtool_per_queue_op={0x4b, 0xf, [0x10010001, 0x4, 0x4, 0x7ff, 0x7, 0x9, 0x57e, 0x7fffffff, 0x2, 0x28e8, 0x7, 0x5, 0xff, 0x7ffc, 0x805, 0x74a, 0x3ff, 0x7, 0x0, 0x800, 0xfffffffc, 0x2, 0x1, 0xffff8000, 0x91, 0xffffffff, 0x1, 0x400, 0x2, 0x100003, 0x8, 0x8, 0xa2, 0x3, 0x7, 0xfff, 0x4, 0xffffffff, 0x4e6, 0xb13, 0xff, 0x1a5a, 0x10, 0x0, 0x4, 0x4, 0x8b, 0xffffff00, 0x8, 0x224, 0xa, 0x6, 0x9, 0x98f, 0x3d, 0x80000001, 0xfffffff8, 0x2b6395a6, 0x5510, 0x101, 0x9, 0x5, 0x7, 0x7f, 0x5, 0xaf97, 0x0, 0x1, 0x3ff, 0x5, 0x9dc, 0xfffffffe, 0x80b1, 0x80, 0x80000001, 0x9, 0x7, 0x3, 0x4, 0x9, 0x1, 0xd640, 0x7, 0x8, 0x0, 0x1, 0x11, 0x9, 0x401, 0x4, 0x9, 0x5, 0x1, 0xc9, 0x1ff, 0x407, 0x1, 0x4, 0x80007fff, 0x6, 0x80003, 0x7d8b, 0x3, 0x6, 0x2000009, 0xfffffffc, 0x5, 0x140000, 0x9, 0x2, 0xfffffff9, 0x0, 0x350d, 0x4, 0x7fff, 0x80, 0x103, 0x4, 0x7, 0x5, 0x2, 0x9, 0x3, 0x3ff, 0x3, 0x0, 0x3, 0x7]}}) openat$ptmx(0xffffffffffffff9c, 0x0, 0x28100, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) ioctl$SECCOMP_IOCTL_NOTIF_SEND(r0, 0xc0182101, &(0x7f0000000180)={0x0, 0x6, 0xffff37a4}) 268.903875ms ago: executing program 0 (id=352): r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000000240)=0x695d8e8, 0x4) bind$inet6(r0, &(0x7f0000000000)={0xa, 0xe22, 0x0, @empty, 0x80002}, 0x1c) r1 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r1, &(0x7f0000000180)=[{&(0x7f00000001c0)="580000001500add427323b472545b45602117fffffff81000e22d991000005000000a80013007b00090080007f000001e809000000ff0000f03ac7100003ffffffffffffffffffffffe7ee000000deff0000000200000000", 0x58}], 0x1) 265.540455ms ago: executing program 1 (id=353): r0 = socket$netlink(0x10, 0x3, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f00000000c0)='proc\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/kmsg\x00', 0x0, 0xb) close_range(r0, 0xffffffffffffffff, 0x0) 236.442026ms ago: executing program 0 (id=354): r0 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'xfrm0\x00', 0x0}) r2 = socket$packet(0x11, 0x3, 0x300) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000500)}], 0x1}, 0x45) sendto$packet(r2, &(0x7f0000000180)='`', 0x3b2, 0x0, &(0x7f0000000240)={0x2f, 0x0, r1, 0x1, 0x0, 0x6, @local}, 0x14) 215.479546ms ago: executing program 0 (id=355): r0 = syz_create_resource$binfmt(&(0x7f00000003c0)='./file0\x00') openat$binfmt(0xffffffffffffff9c, r0, 0x42, 0x1ff) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002040), 0x2, 0x0) mount$fuse(0x0, &(0x7f0000002080)='./file0\x00', &(0x7f00000020c0), 0x413, &(0x7f0000000340)={{'fd', 0x3d, r1}, 0x2c, {'rootmode', 0x3d, 0x8000}}) write$FUSE_NOTIFY_INVAL_INODE(r1, &(0x7f0000000000)={0x28, 0x2, 0x0, {0x1, 0xffffffffffffaae2, 0x9}}, 0x28) 184.599787ms ago: executing program 1 (id=356): sendmsg$IPVS_CMD_DEL_DAEMON(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="140000d1", @ANYRES16=0x0, @ANYBLOB="04"], 0x14}, 0x1, 0x0, 0x0, 0xc}, 0x0) r0 = socket$packet(0x11, 0x2, 0x300) r1 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f00000001c0)={'vcan0\x00', 0x0}) sendto$packet(r0, &(0x7f0000000080)="18", 0x10, 0x0, &(0x7f00000000c0)={0x11, 0xe, r2, 0x1, 0x0, 0x6, @multicast}, 0x14) 155.218117ms ago: executing program 0 (id=357): r0 = creat(&(0x7f0000000000)='./file0\x00', 0x40) syz_genetlink_get_family_id$nl80211(&(0x7f0000001340), r0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000001380)={'wlan1\x00'}) sendmsg$NL80211_CMD_GET_INTERFACE(r0, &(0x7f0000001440)={&(0x7f0000001300)={0x10, 0x0, 0x0, 0x100}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x801}, 0x8010) mount$overlay(0x0, &(0x7f0000003180)='./file0\x00', &(0x7f00000031c0), 0x800, &(0x7f0000003200)={[{@xino_auto}, {@uuid_null}, {@verity_on}, {@metacopy_off}, {@redirect_dir_follow}, {@default_permissions}, {@userxattr}, {@default_permissions}, {@default_permissions}], [{@seclabel}]}) 154.824237ms ago: executing program 1 (id=358): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) mount$incfs(&(0x7f0000000440)='./file0\x00', &(0x7f0000000140)='./file0\x00', &(0x7f0000000200), 0x98, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0xc2c02e4d8eb3a414, 0x4) r1 = openat$incfs(r0, &(0x7f0000000280)='.pending_reads\x00', 0x1, 0x130) poll(&(0x7f0000000180)=[{r0, 0x8104}, {r1}], 0x2, 0xa142) 111.648158ms ago: executing program 0 (id=359): r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_IPV6_HOPOPTS(r0, 0x29, 0x36, &(0x7f00000002c0)=ANY=[], 0x8) connect$inet6(r0, &(0x7f00000003c0)={0xa, 0xfffe, 0x3000001, @mcast2, 0x6}, 0x1c) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000240)='bridge0\x00', 0x10) write(r0, &(0x7f00000000c0)="8f2a0a65bd8c002b0304000e0580a7b6070d63e286a5cefe", 0x5ac) 87.419689ms ago: executing program 0 (id=360): pipe(&(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x0, &(0x7f0000000000)='.\x00', &(0x7f0000000040), 0x0, &(0x7f0000000540)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r3]) splice(r2, 0x0, r1, 0x0, 0xffffffffffff8000, 0x0) write$P9_RLERRORu(r1, &(0x7f0000000100)=ANY=[], 0xe) 87.336129ms ago: executing program 1 (id=361): socket$inet6(0xa, 0x3, 0x5) r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xa, &(0x7f00000000c0)=0x2, 0x4) setsockopt$packet_tx_ring(r0, 0x107, 0xd, &(0x7f0000000100)=@req3={0x10000, 0x100000001, 0x10000, 0x1}, 0x1c) ppoll(&(0x7f0000000000)=[{r0}], 0x1, &(0x7f0000000040), 0x0, 0x0) 42.4041ms ago: executing program 1 (id=362): r0 = socket$inet6(0xa, 0x80003, 0xff) setsockopt$inet6_int(r0, 0x29, 0x16, &(0x7f0000fcb000), 0x4) r1 = socket$inet6(0xa, 0x3, 0xff) socket$inet6(0xa, 0x80003, 0xff) close(r1) 0s ago: executing program 1 (id=363): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ff) mount(0x0, &(0x7f0000000100)='./config\x00', &(0x7f0000000200)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000300)='./config/usb_gadget/g1\x00', 0x1ff) openat2(0xffffffffffffff9c, &(0x7f0000000040)='./config/usb_gadget/g1\x00', &(0x7f0000000080)={0x0, 0x0, 0x20}, 0x18) rmdir(&(0x7f0000000600)='./config/usb_gadget/g1\x00') kernel console output (not intermixed with test programs): syzkaller syzkaller login: [ 21.707719][ T36] kauditd_printk_skb: 31 callbacks suppressed [ 21.707736][ T36] audit: type=1400 audit(1788260353.880:59): avc: denied { transition } for pid=275 comm="sshd-session" path="/bin/sh" dev="sda1" ino=90 scontext=system_u:system_r:sshd_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 21.712771][ T36] audit: type=1400 audit(1788260353.880:60): avc: denied { noatsecure } for pid=275 comm="sshd-session" scontext=system_u:system_r:sshd_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 21.716730][ T36] audit: type=1400 audit(1788260353.890:61): avc: denied { write } for pid=275 comm="sh" path="pipe:[2798]" dev="pipefs" ino=2798 scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:sshd_t tclass=fifo_file permissive=1 [ 21.720441][ T36] audit: type=1400 audit(1788260353.890:62): avc: denied { rlimitinh } for pid=275 comm="sh" scontext=system_u:system_r:sshd_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 21.723494][ T36] audit: type=1400 audit(1788260353.890:63): avc: denied { siginh } for pid=275 comm="sh" scontext=system_u:system_r:sshd_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 Warning: Permanently added '10.128.0.18' (ED25519) to the list of known hosts. [ 29.945502][ T36] audit: type=1400 audit(1788260362.120:64): avc: denied { mounton } for pid=287 comm="syz-executor" path="/syzcgroup/unified" dev="sda1" ino=2023 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1 [ 29.948635][ T287] cgroup: Unknown subsys name 'net' [ 29.968238][ T36] audit: type=1400 audit(1788260362.120:65): avc: denied { mount } for pid=287 comm="syz-executor" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 29.995568][ T36] audit: type=1400 audit(1788260362.150:66): avc: denied { unmount } for pid=287 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 29.995993][ T287] cgroup: Unknown subsys name 'devices' [ 30.121845][ T287] cgroup: Unknown subsys name 'hugetlb' [ 30.127473][ T287] cgroup: Unknown subsys name 'rlimit' [ 30.222456][ T36] audit: type=1400 audit(1788260362.400:67): avc: denied { setattr } for pid=287 comm="syz-executor" name="raw-gadget" dev="devtmpfs" ino=190 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 30.245651][ T36] audit: type=1400 audit(1788260362.400:68): avc: denied { mounton } for pid=287 comm="syz-executor" path="/proc/sys/fs/binfmt_misc" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=dir permissive=1 [ 30.270479][ T36] audit: type=1400 audit(1788260362.400:69): avc: denied { mount } for pid=287 comm="syz-executor" name="/" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=filesystem permissive=1 [ 30.294880][ T289] SELinux: Context root:object_r:swapfile_t is not valid (left unmapped). Setting up swapspace version 1, size = 127995904 bytes [ 30.303661][ T36] audit: type=1400 audit(1788260362.480:70): avc: denied { relabelto } for pid=289 comm="mkswap" name="swap-file" dev="sda1" ino=2026 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 30.329114][ T36] audit: type=1400 audit(1788260362.480:71): avc: denied { write } for pid=289 comm="mkswap" path="/root/swap-file" dev="sda1" ino=2026 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 30.389109][ T36] audit: type=1400 audit(1788260362.560:72): avc: denied { read } for pid=287 comm="syz-executor" name="swap-file" dev="sda1" ino=2026 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 30.414679][ T36] audit: type=1400 audit(1788260362.560:73): avc: denied { open } for pid=287 comm="syz-executor" path="/root/swap-file" dev="sda1" ino=2026 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 30.415249][ T287] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 31.256787][ T296] bridge0: port 1(bridge_slave_0) entered blocking state [ 31.263939][ T296] bridge0: port 1(bridge_slave_0) entered disabled state [ 31.271482][ T296] bridge_slave_0: entered allmulticast mode [ 31.278090][ T296] bridge_slave_0: entered promiscuous mode [ 31.284969][ T296] bridge0: port 2(bridge_slave_1) entered blocking state [ 31.292048][ T296] bridge0: port 2(bridge_slave_1) entered disabled state [ 31.299125][ T296] bridge_slave_1: entered allmulticast mode [ 31.305561][ T296] bridge_slave_1: entered promiscuous mode [ 31.385977][ T297] bridge0: port 1(bridge_slave_0) entered blocking state [ 31.393129][ T297] bridge0: port 1(bridge_slave_0) entered disabled state [ 31.400292][ T297] bridge_slave_0: entered allmulticast mode [ 31.406539][ T297] bridge_slave_0: entered promiscuous mode [ 31.412921][ T294] bridge0: port 1(bridge_slave_0) entered blocking state [ 31.419997][ T294] bridge0: port 1(bridge_slave_0) entered disabled state [ 31.427066][ T294] bridge_slave_0: entered allmulticast mode [ 31.433424][ T294] bridge_slave_0: entered promiscuous mode [ 31.443312][ T297] bridge0: port 2(bridge_slave_1) entered blocking state [ 31.450393][ T297] bridge0: port 2(bridge_slave_1) entered disabled state [ 31.457472][ T297] bridge_slave_1: entered allmulticast mode [ 31.463819][ T297] bridge_slave_1: entered promiscuous mode [ 31.476017][ T294] bridge0: port 2(bridge_slave_1) entered blocking state [ 31.483135][ T294] bridge0: port 2(bridge_slave_1) entered disabled state [ 31.490279][ T294] bridge_slave_1: entered allmulticast mode [ 31.496496][ T294] bridge_slave_1: entered promiscuous mode [ 31.517673][ T295] bridge0: port 1(bridge_slave_0) entered blocking state [ 31.524768][ T295] bridge0: port 1(bridge_slave_0) entered disabled state [ 31.531921][ T295] bridge_slave_0: entered allmulticast mode [ 31.538181][ T295] bridge_slave_0: entered promiscuous mode [ 31.547402][ T295] bridge0: port 2(bridge_slave_1) entered blocking state [ 31.554518][ T295] bridge0: port 2(bridge_slave_1) entered disabled state [ 31.561647][ T295] bridge_slave_1: entered allmulticast mode [ 31.567867][ T295] bridge_slave_1: entered promiscuous mode [ 31.697303][ T296] bridge0: port 2(bridge_slave_1) entered blocking state [ 31.704403][ T296] bridge0: port 2(bridge_slave_1) entered forwarding state [ 31.711731][ T296] bridge0: port 1(bridge_slave_0) entered blocking state [ 31.718775][ T296] bridge0: port 1(bridge_slave_0) entered forwarding state [ 31.740408][ T297] bridge0: port 2(bridge_slave_1) entered blocking state [ 31.747484][ T297] bridge0: port 2(bridge_slave_1) entered forwarding state [ 31.754792][ T297] bridge0: port 1(bridge_slave_0) entered blocking state [ 31.761848][ T297] bridge0: port 1(bridge_slave_0) entered forwarding state [ 31.775823][ T295] bridge0: port 2(bridge_slave_1) entered blocking state [ 31.782889][ T295] bridge0: port 2(bridge_slave_1) entered forwarding state [ 31.790221][ T295] bridge0: port 1(bridge_slave_0) entered blocking state [ 31.797260][ T295] bridge0: port 1(bridge_slave_0) entered forwarding state [ 31.817815][ T294] bridge0: port 2(bridge_slave_1) entered blocking state [ 31.824897][ T294] bridge0: port 2(bridge_slave_1) entered forwarding state [ 31.832224][ T294] bridge0: port 1(bridge_slave_0) entered blocking state [ 31.839265][ T294] bridge0: port 1(bridge_slave_0) entered forwarding state [ 31.876486][ T13] bridge0: port 1(bridge_slave_0) entered disabled state [ 31.883825][ T13] bridge0: port 2(bridge_slave_1) entered disabled state [ 31.891282][ T13] bridge0: port 1(bridge_slave_0) entered disabled state [ 31.898544][ T13] bridge0: port 1(bridge_slave_0) entered disabled state [ 31.906042][ T13] bridge0: port 2(bridge_slave_1) entered disabled state [ 31.913254][ T13] bridge0: port 2(bridge_slave_1) entered disabled state [ 31.920625][ T13] bridge0: port 1(bridge_slave_0) entered disabled state [ 31.927892][ T13] bridge0: port 2(bridge_slave_1) entered disabled state [ 31.940708][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 31.947768][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 31.956529][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 31.963600][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 31.993111][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 32.000224][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 32.007846][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 32.014927][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 32.023198][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 32.030303][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 32.063614][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 32.070736][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 32.078268][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 32.085377][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 32.093716][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 32.100791][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 32.113714][ T296] veth0_vlan: entered promiscuous mode [ 32.137927][ T297] veth0_vlan: entered promiscuous mode [ 32.151228][ T296] veth1_macvtap: entered promiscuous mode [ 32.165607][ T297] veth1_macvtap: entered promiscuous mode [ 32.185873][ T295] veth0_vlan: entered promiscuous mode [ 32.195326][ T294] veth0_vlan: entered promiscuous mode [ 32.214471][ T295] veth1_macvtap: entered promiscuous mode [ 32.243468][ T294] veth1_macvtap: entered promiscuous mode [ 32.251833][ T296] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 32.334484][ T320] capability: warning: `syz.0.1' uses deprecated v2 capabilities in a way that may be insecure [ 32.381774][ T326] ======================================================= [ 32.381774][ T326] WARNING: The mand mount option has been deprecated and [ 32.381774][ T326] and is ignored by this kernel. Remove the mand [ 32.381774][ T326] option from the mount to silence this warning. [ 32.381774][ T326] ======================================================= [ 32.504656][ T341] FAULT_INJECTION: forcing a failure. [ 32.504656][ T341] name failslab, interval 1, probability 0, space 0, times 1 [ 32.518323][ T341] CPU: 1 UID: 0 PID: 341 Comm: syz.2.14 Not tainted syzkaller #0 998a4fffdb5e6e31f7f8340a226dd9d0893c7622 [ 32.518357][ T341] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 32.518379][ T341] Call Trace: [ 32.518385][ T341] [ 32.518393][ T341] __dump_stack+0x21/0x30 [ 32.518434][ T341] dump_stack_lvl+0x140/0x1c0 [ 32.518463][ T341] ? __cfi_dump_stack_lvl+0x10/0x10 [ 32.518492][ T341] ? _raw_spin_lock+0x92/0x120 [ 32.518523][ T341] ? __cfi__raw_spin_lock+0x10/0x10 [ 32.518552][ T341] ? __asan_memset+0x39/0x50 [ 32.518575][ T341] dump_stack+0x19/0x20 [ 32.518610][ T341] should_fail_ex+0x3c2/0x510 [ 32.518635][ T341] should_failslab+0xac/0x100 [ 32.518663][ T341] kmem_cache_alloc_noprof+0x42/0x410 [ 32.518685][ T341] ? alloc_empty_file+0xbf/0x270 [ 32.518713][ T341] ? mntput_no_expire+0x104/0x6c0 [ 32.518744][ T341] alloc_empty_file+0xbf/0x270 [ 32.518772][ T341] dentry_open+0x4b/0xb0 [ 32.518800][ T341] __se_sys_open_tree+0x798/0x900 [ 32.518820][ T341] ? fput+0x1a4/0x230 [ 32.518848][ T341] ? __x64_sys_open_tree+0xa0/0xa0 [ 32.518868][ T341] ? __kasan_check_write+0x18/0x20 [ 32.518889][ T341] ? fpregs_restore_userregs+0x11c/0x260 [ 32.518916][ T341] __x64_sys_open_tree+0x7f/0xa0 [ 32.518937][ T341] x64_sys_call+0x2d58/0x2ee0 [ 32.518955][ T341] do_syscall_64+0x57/0xf0 [ 32.518985][ T341] ? clear_bhb_loop+0x50/0xa0 [ 32.519010][ T341] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 32.519032][ T341] RIP: 0033:0x7feaf299e159 [ 32.519053][ T341] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 32.519070][ T341] RSP: 002b:00007feaf37a6028 EFLAGS: 00000246 ORIG_RAX: 00000000000001ac [ 32.519100][ T341] RAX: ffffffffffffffda RBX: 00007feaf2c25fa0 RCX: 00007feaf299e159 [ 32.519116][ T341] RDX: 0000000000089901 RSI: 0000200000000180 RDI: 0000000000000003 [ 32.519130][ T341] RBP: 00007feaf2a35024 R08: 0000000000000000 R09: 0000000000000000 [ 32.519143][ T341] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 32.519155][ T341] R13: 00007feaf2c26038 R14: 00007feaf2c25fa0 R15: 00007ffdb248f408 [ 32.519172][ T341] [ 32.732136][ T347] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 32.807672][ T66] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 32.860940][ T354] udc dummy_udc.0: soft-connect without a gadget driver [ 32.961398][ T66] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 32.971332][ T66] usb 2-1: config 1 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 32.982706][ T66] usb 2-1: New USB device found, idVendor=04e6, idProduct=0005, bcdDevice= 1.00 [ 32.992030][ T66] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 33.000330][ T66] usb 2-1: Product: syz [ 33.004698][ T66] usb 2-1: Manufacturer: syz [ 33.009771][ T66] usb 2-1: SerialNumber: syz [ 33.018298][ T66] ums-sddr09 2-1:1.0: USB Mass Storage device detected [ 33.027123][ T66] ums-sddr09 2-1:1.0: This device (04e6,0005,0100 S 06 P 50) has an unneeded SubClass entry in unusual_devs.h (kernel syzkaller) [ 33.027123][ T66] Please send a copy of this message to and [ 33.458875][ T66] ums-sddr09 2-1:1.0: probe with driver ums-sddr09 failed with error -32 [ 33.468773][ T66] usb 2-1: USB disconnect, device number 2 [ 33.809613][ T45] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 34.063601][ T45] usb 1-1: too many endpoints for config 0 interface 0 altsetting 0: 248, using maximum allowed: 30 [ 34.089743][ T45] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 248 [ 34.114691][ T45] usb 1-1: New USB device found, idVendor=056a, idProduct=003f, bcdDevice= 0.00 [ 34.123847][ T45] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 34.152255][ T45] usb 1-1: config 0 descriptor?? [ 34.308764][ T428] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 34.537868][ T452] netlink: 'syz.3.63': attribute type 27 has an invalid length. [ 34.548158][ T452] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 34.569113][ T45] wacom 0003:056A:003F.0001: ignoring exceeding usage max [ 34.579222][ T455] process 'syz.1.64' launched './file1' with NULL argv: empty string added [ 34.591514][ T45] wacom 0003:056A:003F.0001: hidraw0: USB HID v1.00 Device [HID 056a:003f] on usb-dummy_hcd.0-1/input0 [ 34.615616][ T456] udevd[456]: failed to execute '/lib/udev/fido_id' 'fido_id': Exec format error [ 34.809987][ T367] usb 1-1: USB disconnect, device number 2 [ 35.019895][ T36] kauditd_printk_skb: 109 callbacks suppressed [ 35.019914][ T36] audit: type=1400 audit(1788260367.200:183): avc: denied { lock } for pid=488 comm="syz.1.80" path="socket:[4570]" dev="sockfs" ino=4570 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_route_socket permissive=1 [ 35.082984][ T36] audit: type=1400 audit(1788260367.250:184): avc: denied { ioctl } for pid=493 comm="syz.3.82" path="anon_inode:[userfaultfd]" dev="anon_inodefs" ino=4583 ioctlcmd=0xaa3f scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 35.133193][ T36] audit: type=1400 audit(1788260367.310:185): avc: denied { write } for pid=499 comm="syz.3.84" name="001" dev="devtmpfs" ino=114 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 35.200328][ T36] audit: type=1400 audit(1788260367.370:186): avc: denied { read write } for pid=504 comm="syz.1.86" name="vga_arbiter" dev="devtmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1 [ 35.229565][ T36] audit: type=1400 audit(1788260367.370:187): avc: denied { open } for pid=504 comm="syz.1.86" path="/dev/vga_arbiter" dev="devtmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1 [ 35.284761][ T509] program syz.1.88 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 35.341057][ T36] audit: type=1400 audit(1788260367.520:188): avc: denied { create } for pid=514 comm="syz.1.90" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 35.398110][ T36] audit: type=1400 audit(1788260367.540:189): avc: denied { read write } for pid=514 comm="syz.1.90" name="fuse" dev="devtmpfs" ino=23 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fuse_device_t tclass=chr_file permissive=1 [ 35.424141][ T521] netlink: 'syz.1.94': attribute type 15 has an invalid length. [ 35.437196][ T521] netlink: 'syz.1.94': attribute type 15 has an invalid length. [ 35.445163][ T36] audit: type=1400 audit(1788260367.540:190): avc: denied { open } for pid=514 comm="syz.1.90" path="/dev/fuse" dev="devtmpfs" ino=23 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fuse_device_t tclass=chr_file permissive=1 [ 35.478446][ T36] audit: type=1400 audit(1788260367.540:191): avc: denied { mounton } for pid=514 comm="syz.1.90" path="/29/file0" dev="tmpfs" ino=172 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 35.525517][ T527] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 35.539922][ T36] audit: type=1400 audit(1788260367.570:192): avc: denied { unmount } for pid=295 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=filesystem permissive=1 [ 35.699981][ T539] netlink: 104 bytes leftover after parsing attributes in process `syz.3.104'. [ 35.934627][ T567] netlink: 'syz.1.117': attribute type 1 has an invalid length. [ 36.150566][ T45] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 36.209796][ T435] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 36.300647][ T45] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 36.310676][ T45] usb 1-1: config 1 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 36.321553][ T586] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input7 [ 36.331056][ T45] usb 1-1: New USB device found, idVendor=04e6, idProduct=0005, bcdDevice= 1.00 [ 36.331090][ T45] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 36.331113][ T45] usb 1-1: Product: syz [ 36.331127][ T45] usb 1-1: Manufacturer: syz [ 36.331144][ T45] usb 1-1: SerialNumber: syz [ 36.361346][ T435] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 36.376571][ T435] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 36.376775][ T45] ums-sddr09 1-1:1.0: USB Mass Storage device detected [ 36.392723][ T435] usb 4-1: config 1 has no interface number 0 [ 36.398846][ T435] usb 4-1: config 1 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 36.410744][ T45] ums-sddr09 1-1:1.0: This device (04e6,0005,0100 S 06 P 50) has an unneeded SubClass entry in unusual_devs.h (kernel syzkaller) [ 36.410744][ T45] Please send a copy of this message to and [ 36.436329][ T435] usb 4-1: Duplicate descriptor for config 1 interface 1 altsetting 0, skipping [ 36.447045][ T435] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 36.456618][ T435] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 36.464782][ T435] usb 4-1: Product: syz [ 36.468999][ T435] usb 4-1: Manufacturer: syz [ 36.473699][ T435] usb 4-1: SerialNumber: syz [ 36.507742][ T601] ./dev/sda1: Can't open blockdev [ 36.819585][ T10] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 36.970762][ T10] usb 2-1: New USB device found, idVendor=9710, idProduct=7730, bcdDevice=96.33 [ 36.979941][ T10] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 36.990241][ T10] usb 2-1: config 0 descriptor?? [ 37.000679][ T45] ums-sddr09 1-1:1.0: probe with driver ums-sddr09 failed with error -32 [ 37.010382][ T45] usb 1-1: USB disconnect, device number 3 [ 37.017814][ T317] udevd[317]: setting owner of /dev/bus/usb/001/003 to uid=0, gid=0 failed: No such file or directory [ 37.051989][ T611] overlayfs: failed to create directory ./file0/work (errno: 13); mounting read-only [ 37.061719][ T611] overlayfs: failed to get uuid (29/file2, err=-13); falling back to uuid=null. [ 37.289105][ T435] cdc_ncm 4-1:1.1: failed GET_NTB_PARAMETERS [ 37.299559][ T435] cdc_ncm 4-1:1.1: bind() failure [ 37.308680][ T435] usb 4-1: USB disconnect, device number 2 [ 37.605438][ T642] rust_binder: 641:642 got transaction to invalid handle 3 [ 37.612879][ T642] rust_binder: 641:642 transaction call to 0:0 failed ENOENT, code 0 size 0-0 [ 37.622749][ T642] rust_binder: 641: undelivered TRANSACTION_ERROR: 29201 [ 37.800700][ T10] usb 2-1: Cannot set autoneg [ 37.805473][ T10] MOSCHIP usb-ethernet driver 2-1:0.0: probe with driver MOSCHIP usb-ethernet driver failed with error -71 [ 37.823447][ T10] usb 2-1: USB disconnect, device number 3 [ 37.999907][ T9] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 38.160680][ T9] usb 1-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 38.174575][ T9] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 38.183778][ T9] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 38.191853][ T9] usb 1-1: SerialNumber: syz [ 38.394497][ T685] FAULT_INJECTION: forcing a failure. [ 38.394497][ T685] name failslab, interval 1, probability 0, space 0, times 0 [ 38.407321][ T685] CPU: 1 UID: 0 PID: 685 Comm: syz.1.171 Not tainted syzkaller #0 998a4fffdb5e6e31f7f8340a226dd9d0893c7622 [ 38.407357][ T685] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 38.407372][ T685] Call Trace: [ 38.407379][ T685] [ 38.407388][ T685] __dump_stack+0x21/0x30 [ 38.407428][ T685] dump_stack_lvl+0x140/0x1c0 [ 38.407462][ T685] ? __cfi_dump_stack_lvl+0x10/0x10 [ 38.407497][ T685] dump_stack+0x19/0x20 [ 38.407529][ T685] should_fail_ex+0x3c2/0x510 [ 38.407558][ T685] should_failslab+0xac/0x100 [ 38.407588][ T685] __kmalloc_node_track_caller_noprof+0x65/0x4f0 [ 38.407616][ T685] ? key_alloc+0x338/0x1060 [ 38.407647][ T685] ? kmem_cache_alloc_noprof+0x1e2/0x410 [ 38.407674][ T685] kmemdup_noprof+0x31/0x80 [ 38.407696][ T685] key_alloc+0x338/0x1060 [ 38.407730][ T685] keyring_alloc+0x4b/0xc0 [ 38.407752][ T685] lookup_user_key+0x485/0x1230 [ 38.407784][ T685] ? __cfi_lookup_user_key+0x10/0x10 [ 38.407815][ T685] ? do_futex+0x32a/0x510 [ 38.407848][ T685] ? __cfi_lookup_user_key_possessed+0x10/0x10 [ 38.407881][ T685] ? strncpy_from_user+0x14f/0x280 [ 38.407908][ T685] __se_sys_add_key+0x317/0x4b0 [ 38.407934][ T685] ? __x64_sys_add_key+0xf0/0xf0 [ 38.407973][ T685] ? __kasan_check_write+0x18/0x20 [ 38.407998][ T685] ? fpregs_restore_userregs+0x11c/0x260 [ 38.408028][ T685] __x64_sys_add_key+0xc3/0xf0 [ 38.408055][ T685] x64_sys_call+0x195f/0x2ee0 [ 38.408070][ T685] do_syscall_64+0x57/0xf0 [ 38.408095][ T685] ? clear_bhb_loop+0x50/0xa0 [ 38.408116][ T685] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 38.408160][ T685] RIP: 0033:0x7fc3c199e159 [ 38.408179][ T685] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 38.408202][ T685] RSP: 002b:00007fc3c28af028 EFLAGS: 00000246 ORIG_RAX: 00000000000000f8 [ 38.408221][ T685] RAX: ffffffffffffffda RBX: 00007fc3c1c25fa0 RCX: 00007fc3c199e159 [ 38.408233][ T685] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000200000000680 [ 38.408244][ T685] RBP: 00007fc3c1a35024 R08: ffffffffffffffff R09: 0000000000000000 [ 38.408255][ T685] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 38.408276][ T685] R13: 00007fc3c1c26038 R14: 00007fc3c1c25fa0 R15: 00007ffd87dc4a08 [ 38.408298][ T685] [ 38.718276][ T697] tipc: Started in network mode [ 38.723347][ T697] tipc: Node identity 0010000000000000002, cluster identity 1 [ 38.731590][ T697] Zero length message leads to an empty skb [ 38.811212][ T9] cdc_ether 1-1:1.0 usb0: register 'cdc_ether' at usb-dummy_hcd.0-1, CDC Ethernet Device, 42:42:42:42:42:42 [ 39.137531][ T739] netlink: 4 bytes leftover after parsing attributes in process `syz.3.190'. [ 39.225411][ T10] usb 1-1: USB disconnect, device number 4 [ 39.231987][ T10] cdc_ether 1-1:1.0 usb0: unregister 'cdc_ether' usb-dummy_hcd.0-1, CDC Ethernet Device [ 39.310148][ T352] Bluetooth: hci0: Frame reassembly failed (-84) [ 39.317062][ T53] Bluetooth: hci0: Frame reassembly failed (-84) [ 39.339728][ T9] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 39.499606][ T9] usb 2-1: Using ep0 maxpacket: 32 [ 39.505913][ T9] usb 2-1: config 0 has no interfaces? [ 39.512794][ T9] usb 2-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 39.521925][ T9] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 39.529954][ T9] usb 2-1: Product: syz [ 39.534297][ T9] usb 2-1: Manufacturer: syz [ 39.538958][ T9] usb 2-1: SerialNumber: syz [ 39.544758][ T9] usb 2-1: config 0 descriptor?? [ 39.742718][ T789] input: syz0 as /devices/virtual/input/input8 [ 39.770213][ T9] usb 2-1: USB disconnect, device number 4 [ 40.108742][ T36] kauditd_printk_skb: 69 callbacks suppressed [ 40.108761][ T36] audit: type=1400 audit(1788260372.280:262): avc: denied { write } for pid=841 comm="syz.2.225" name=".pending_reads" dev="incremental-fs" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 40.146437][ T36] audit: type=1400 audit(1788260372.320:263): avc: denied { connect } for pid=845 comm="syz.0.227" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 40.166030][ T36] audit: type=1400 audit(1788260372.320:264): avc: denied { write } for pid=845 comm="syz.0.227" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 40.213074][ T36] audit: type=1400 audit(1788260372.390:265): avc: denied { watch watch_reads } for pid=851 comm="syz.0.230" path="/42/file0" dev="tmpfs" ino=236 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=fifo_file permissive=1 [ 40.386851][ T872] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 40.394497][ T36] audit: type=1400 audit(1788260372.560:266): avc: denied { mounton } for pid=871 comm="syz.1.240" path="/58/file0" dev="incremental-fs" ino=325 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 40.428238][ T36] audit: type=1400 audit(1788260372.560:267): avc: denied { getattr } for pid=871 comm="syz.1.240" name="/" dev="incremental-fs" ino=325 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 40.479900][ T874] veth0: entered allmulticast mode [ 40.525839][ T36] audit: type=1400 audit(1788260372.700:268): avc: denied { append } for pid=879 comm="syz.1.245" name="uprobe_events" dev="tracefs" ino=1057 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=file permissive=1 [ 40.575316][ T36] audit: type=1400 audit(1788260372.730:269): avc: denied { nosuid_transition } for pid=877 comm="syz.0.243" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:hugetlbfs_t tclass=process2 permissive=1 [ 40.607082][ T36] audit: type=1400 audit(1788260372.730:270): avc: denied { transition } for pid=877 comm="syz.0.243" path=2F6D656D66643A5B0BDB58AE5B1AA9FDFAADD16D64C8854858A9250C1A65E0202864656C6574656429 dev="tmpfs" ino=9 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:hugetlbfs_t tclass=process permissive=1 [ 40.650461][ T889] sd 0:0:1:0: PR command failed: 1026 [ 40.655969][ T889] sd 0:0:1:0: Sense Key : 0x5 [current] [ 40.673383][ T889] sd 0:0:1:0: ASC=0x20 ASCQ=0x0 [ 40.677407][ T36] audit: type=1400 audit(1788260372.730:271): avc: denied { entrypoint } for pid=877 comm="syz.0.243" path=2F6D656D66643A5B0BDB58AE5B1AA9FDFAADD16D64C8854858A9250C1A65E0202864656C6574656429 dev="tmpfs" ino=9 scontext=system_u:object_r:hugetlbfs_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 40.761583][ T899] rust_binder: 898:899 error while translating object: EBADF [ 40.769043][ T899] rust_binder: Failure in copy_transaction_data: EBADF [ 40.769075][ T899] rust_binder: 898:899 transaction call to 898:0 failed EBADF, code 0 size 88-24 [ 40.810202][ T45] rust_binder: 898: undelivered TRANSACTION_ERROR: 29201 [ 41.299573][ T9] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 41.329778][ T762] Bluetooth: hci0: command 0x1003 tx timeout [ 41.329774][ T55] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 41.350579][ T946] bridge0: entered allmulticast mode [ 41.364527][ T946] bridge0: left allmulticast mode [ 41.460690][ T9] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 41.471809][ T9] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 41.502804][ T9] usb 2-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 41.513617][ T9] usb 2-1: New USB device strings: Mfr=2, Product=0, SerialNumber=0 [ 41.521881][ T9] usb 2-1: Manufacturer: syz [ 41.527472][ T9] usb 2-1: config 0 descriptor?? [ 41.631040][ T968] netlink: 24 bytes leftover after parsing attributes in process `syz.0.283'. [ 41.925053][ T998] rust_binder: 997:998 error while translating object: EPERM [ 41.932887][ T998] rust_binder: Failure in copy_transaction_data: EPERM [ 41.932917][ T998] rust_binder: 997:998 transaction call to 997:0 failed EPERM, code 0 size 80-24 [ 41.949467][ T45] rust_binder: 997: undelivered TRANSACTION_ERROR: 29201 [ 42.237019][ T45] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 42.255571][ T45] hid-generic 0000:0000:0000.0003: hidraw0: HID v0.00 Device [syz1] on syz0 [ 42.281187][ T1066] udevd[1066]: failed to execute '/lib/udev/fido_id' 'fido_id': Exec format error [ 42.341757][ T9] uclogic 0003:256C:006D.0002: failed retrieving string descriptor #200: -71 [ 42.353741][ T9] uclogic 0003:256C:006D.0002: failed retrieving pen parameters: -71 [ 42.362262][ T9] uclogic 0003:256C:006D.0002: failed probing pen v2 parameters: -71 [ 42.370840][ T9] uclogic 0003:256C:006D.0002: failed probing parameters: -71 [ 42.378477][ T9] uclogic 0003:256C:006D.0002: probe with driver uclogic failed with error -71 [ 42.389937][ T9] usb 2-1: USB disconnect, device number 5 [ 43.109576][ T9] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 43.282249][ T9] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 43.300029][ T9] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 43.323197][ T9] usb 2-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 1024 [ 43.349627][ T9] usb 2-1: config 1 interface 1 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 43.352152][ T1095] input: syz0 as /devices/virtual/input/input10 [ 43.381860][ T9] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 43.400353][ T9] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 43.414976][ T9] usb 2-1: Product: syz [ 43.419368][ T9] usb 2-1: Manufacturer: syz [ 43.426324][ T9] usb 2-1: SerialNumber: syz [ 43.444135][ T9] cdc_mbim 2-1:1.0: skipping garbage [ 43.651319][ T1078] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 43.674521][ T1118] EXT4-fs warning (device sda1): ext4_dirblock_csum_verify:406: inode #274: comm syz.0.330: No space for directory leaf checksum. Please run e2fsck -D. [ 43.690117][ T1118] EXT4-fs error (device sda1): __ext4_find_entry:1658: inode #274: comm syz.0.330: checksumming directory block 0 [ 43.702701][ T1118] platform regulatory.0: loading /lib/firmware/updates/syzkaller/regulatory.db failed with error -74 [ 43.714730][ T1118] EXT4-fs warning (device sda1): ext4_dirblock_csum_verify:406: inode #274: comm syz.0.330: No space for directory leaf checksum. Please run e2fsck -D. [ 43.733761][ T1118] EXT4-fs error (device sda1): __ext4_find_entry:1658: inode #274: comm syz.0.330: checksumming directory block 0 [ 43.746289][ T1118] platform regulatory.0: loading /lib/firmware/updates/regulatory.db failed with error -74 [ 43.756803][ T1118] EXT4-fs warning (device sda1): ext4_dirblock_csum_verify:406: inode #274: comm syz.0.330: No space for directory leaf checksum. Please run e2fsck -D. [ 43.772596][ T1118] EXT4-fs error (device sda1): __ext4_find_entry:1658: inode #274: comm syz.0.330: checksumming directory block 0 [ 43.785146][ T1118] platform regulatory.0: loading /lib/firmware/syzkaller/regulatory.db failed with error -74 [ 43.796384][ T1118] EXT4-fs warning (device sda1): ext4_dirblock_csum_verify:406: inode #274: comm syz.0.330: No space for directory leaf checksum. Please run e2fsck -D. [ 43.818640][ T1118] EXT4-fs error (device sda1): __ext4_find_entry:1658: inode #274: comm syz.0.330: checksumming directory block 0 [ 43.831454][ T1118] platform regulatory.0: loading /lib/firmware/regulatory.db failed with error -74 [ 43.841081][ T1118] platform regulatory.0: Direct firmware load for regulatory.db failed with error -74 [ 43.964311][ T1128] netlink: 108 bytes leftover after parsing attributes in process `syz.0.334'. [ 44.270474][ T1078] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 44.478629][ T9] cdc_mbim 2-1:1.0: bind() failure [ 44.489705][ T9] cdc_ncm 2-1:1.1: probe with driver cdc_ncm failed with error -71 [ 44.509863][ T9] cdc_mbim 2-1:1.1: probe with driver cdc_mbim failed with error -71 [ 44.540770][ T9] usb 2-1: USB disconnect, device number 6 [ 45.160180][ T36] kauditd_printk_skb: 24 callbacks suppressed [ 45.160200][ T36] audit: type=1400 audit(1788260377.340:296): avc: denied { read } for pid=1170 comm="syz.1.353" name="kmsg" dev="proc" ino=4026532040 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_kmsg_t tclass=file permissive=1 [ 45.239587][ T1179] overlayfs: conflicting options: metacopy=off,verity=on [ 45.362437][ T36] audit: type=1400 audit(1788260377.540:297): avc: denied { mount } for pid=1190 comm="syz.1.363" name="/" dev="configfs" ino=2496 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=filesystem permissive=1 [ 45.385927][ T36] audit: type=1400 audit(1788260377.560:298): avc: denied { search } for pid=1190 comm="syz.1.363" name="/" dev="configfs" ino=2496 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 45.409267][ T36] audit: type=1400 audit(1788260377.560:299): avc: denied { search } for pid=1190 comm="syz.1.363" name="usb_gadget" dev="configfs" ino=2497 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 45.411579][ T1191] BUG: scheduling while atomic: syz.1.363/1191/0x00000002 [ 45.432953][ T36] audit: type=1400 audit(1788260377.560:300): avc: denied { write } for pid=1190 comm="syz.1.363" name="usb_gadget" dev="configfs" ino=2497 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 45.439388][ T1191] Modules linked in: [ 45.463094][ T36] audit: type=1400 audit(1788260377.560:301): avc: denied { add_name } for pid=1190 comm="syz.1.363" name="g1" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 45.466274][ T1191] CPU: 0 UID: 0 PID: 1191 Comm: syz.1.363 Not tainted syzkaller #0 998a4fffdb5e6e31f7f8340a226dd9d0893c7622 [ 45.466361][ T1191] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 45.466401][ T1191] Call Trace: [ 45.466421][ T1191] [ 45.466446][ T1191] __dump_stack+0x21/0x30 [ 45.466545][ T1191] dump_stack_lvl+0x140/0x1c0 [ 45.466630][ T1191] ? __cfi_dump_stack_lvl+0x10/0x10 [ 45.466730][ T1191] dump_stack+0x19/0x20 [ 45.466807][ T1191] __schedule_bug+0x12b/0x200 [ 45.466873][ T1191] ? find_proxy_task+0x2460/0x2460 [ 45.466945][ T1191] __schedule+0xb85/0x20b0 [ 45.467006][ T1191] ? kernel_text_address+0xa9/0xe0 [ 45.467090][ T1191] ? __kernel_text_address+0x11/0x40 [ 45.467166][ T1191] ? unwind_get_return_address+0x51/0x90 [ 45.467236][ T1191] ? __cfi_stack_trace_consume_entry+0x10/0x10 [ 45.467311][ T1191] ? arch_stack_walk+0x10a/0x170 [ 45.467373][ T1191] ? __sched_text_start+0x10/0x10 [ 45.467428][ T1191] ? __kasan_check_read+0x15/0x20 [ 45.467499][ T1191] ? rwsem_spin_on_owner+0xa4/0x3b0 [ 45.467622][ T1191] ? __kasan_check_write+0x18/0x20 [ 45.467685][ T1191] ? _raw_spin_lock_irq+0x93/0x120 [ 45.467781][ T1191] ? __cfi__raw_spin_lock_irq+0x10/0x10 [ 45.467875][ T1191] schedule+0xc5/0x240 [ 45.467929][ T1191] schedule_preempt_disabled+0x14/0x30 [ 45.467991][ T1191] rwsem_down_write_slowpath+0x5c9/0x1b60 [ 45.468073][ T1191] ? arch_stack_walk+0x10a/0x170 [ 45.468138][ T1191] ? rwsem_down_read_slowpath+0x14c0/0x14c0 [ 45.468209][ T1191] ? is_bpf_text_address+0x17b/0x1a0 [ 45.468290][ T1191] ? kernel_text_address+0xa9/0xe0 [ 45.468374][ T1191] ? search_exception_tables+0x41/0x60 [ 45.468458][ T1191] ? rwsem_read_trylock+0x275/0x5a0 [ 45.468545][ T1191] ? __kasan_check_write+0x18/0x20 [ 45.468609][ T1191] down_write+0x163/0x2b0 [ 45.468681][ T1191] ? __cfi_down_write+0x10/0x10 [ 45.468782][ T1191] ? __kasan_check_write+0x18/0x20 [ 45.468845][ T1191] ? down_write+0xee/0x2b0 [ 45.468942][ T1191] __kernfs_remove+0xcd/0x940 [ 45.469057][ T1191] kernfs_remove_by_name_ns+0x100/0x180 [ 45.469143][ T1191] sysfs_unmerge_group+0xd7/0x130 [ 45.469212][ T1191] dpm_sysfs_remove+0x7b/0xd0 [ 45.469290][ T1191] device_del+0x241/0xcf0 [ 45.469381][ T1191] ? __cfi_class_find_device+0x10/0x10 [ 45.469453][ T1191] ? __cfi_device_del+0x10/0x10 [ 45.469542][ T1191] ? __kasan_check_write+0x18/0x20 [ 45.469607][ T1191] ? kobject_put+0x1cc/0x2a0 [ 45.469691][ T1191] device_destroy+0xb0/0x100 [ 45.469758][ T1191] ? __cfi_device_destroy+0x10/0x10 [ 45.469830][ T1191] ? __kasan_check_write+0x18/0x20 [ 45.469893][ T1191] android_device_destroy+0x118/0x180 [ 45.469978][ T1191] gadgets_drop+0x1d/0x30 [ 45.470031][ T1191] ? __cfi_gadgets_drop+0x10/0x10 [ 45.470095][ T1191] configfs_rmdir+0x8b7/0x9b0 [ 45.470180][ T1191] vfs_rmdir+0x3db/0x560 [ 45.470276][ T1191] do_rmdir+0x29a/0x590 [ 45.470387][ T1191] ? __cfi_do_rmdir+0x10/0x10 [ 45.470477][ T1191] ? __kasan_check_write+0x18/0x20 [ 45.470548][ T1191] __x64_sys_rmdir+0x4b/0x60 [ 45.470633][ T1191] x64_sys_call+0xaf7/0x2ee0 [ 45.470687][ T1191] do_syscall_64+0x57/0xf0 [ 45.470788][ T1191] ? clear_bhb_loop+0x50/0xa0 [ 45.470853][ T1191] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 45.470922][ T1191] RIP: 0033:0x7fc3c199e159 [ 45.470975][ T1191] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 45.471022][ T1191] RSP: 002b:00007fc3c28af028 EFLAGS: 00000246 ORIG_RAX: 0000000000000054 [ 45.471093][ T1191] RAX: ffffffffffffffda RBX: 00007fc3c1c25fa0 RCX: 00007fc3c199e159 [ 45.471136][ T1191] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000200000000600 [ 45.471177][ T1191] RBP: 00007fc3c1a35024 R08: 0000000000000000 R09: 0000000000000000 [ 45.471222][ T1191] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 45.471255][ T1191] R13: 00007fc3c1c26038 R14: 00007fc3c1c25fa0 R15: 00007ffd87dc4a08 [ 45.471308][ T1191] [ 45.496688][ T1191] ------------[ cut here ]------------ [ 45.535852][ T36] audit: type=1400 audit(1788260377.560:302): avc: denied { create } for pid=1190 comm="syz.1.363" name="g1" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:configfs_t tclass=dir permissive=1 [ 45.554154][ T1191] WARNING: CPU: 0 PID: 1191 at lib/stackdepot.c:635 stack_depot_save_flags+0x266/0x800 [ 45.563686][ T36] audit: type=1400 audit(1788260377.580:303): avc: denied { read } for pid=1190 comm="syz.1.363" name="g1" dev="configfs" ino=7841 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 45.569328][ T1191] Modules linked in: [ 45.569350][ T1191] CPU: 0 UID: 0 PID: 1191 Comm: syz.1.363 Tainted: G W syzkaller #0 998a4fffdb5e6e31f7f8340a226dd9d0893c7622 [ 45.575073][ T36] audit: type=1400 audit(1788260377.580:304): avc: denied { open } for pid=1190 comm="syz.1.363" path="/79/config/usb_gadget/g1" dev="configfs" ino=7841 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 45.579366][ T1191] Tainted: [W]=WARN [ 45.579377][ T1191] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 45.585107][ T36] audit: type=1400 audit(1788260377.580:305): avc: denied { remove_name } for pid=1190 comm="syz.1.363" name="g1" dev="configfs" ino=7841 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 45.589740][ T1191] RIP: 0010:stack_depot_save_flags+0x266/0x800 [ 46.016151][ T1191] Code: 48 83 3d b4 ea db 05 00 0f 84 00 04 00 00 48 c7 45 c0 00 00 00 00 48 89 d3 65 8b 05 cc 4b 1e 7d 4d 89 d7 a9 00 00 f0 00 74 2d <0f> 0b 48 c7 45 c8 00 00 00 00 9c 8f 45 c8 4c 8b 6d c8 fa 48 c7 c7 [ 46.035901][ T1191] RSP: 0018:ffffc9000fe77980 EFLAGS: 00010206 [ 46.042059][ T1191] RAX: 000000007fffffff RBX: ffff8881f5961350 RCX: 0000000000761350 [ 46.050138][ T1191] RDX: ffff8881f5961350 RSI: 0000000000000001 RDI: 00000000baa09bd1 [ 46.058161][ T1191] RBP: ffffc9000fe779e0 R08: 00000000e3cd25f9 R09: 000000001a3b4544 [ 46.066220][ T1191] R10: 000000000000000d R11: ffffffff8175a5c0 R12: 00000000d1d76135 [ 46.074271][ T1191] R13: 0000000000000000 R14: ffffc9000fe779f0 R15: 000000000000000d [ 46.082323][ T1191] FS: 00007fc3c28af6c0(0000) GS:ffff8881f6e00000(0000) knlGS:0000000000000000 [ 46.091312][ T1191] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 46.097945][ T1191] CR2: 00007f69babeb840 CR3: 000000011a3c0000 CR4: 00000000003526b0 [ 46.106014][ T1191] Call Trace: [ 46.109327][ T1191] [ 46.112340][ T1191] ? do_syscall_64+0x57/0xf0 [ 46.116993][ T1191] ? entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 46.123182][ T1191] kasan_save_track+0x4f/0x80 [ 46.127990][ T1191] ? kasan_save_track+0x3e/0x80 [ 46.132954][ T1191] ? kasan_save_free_info+0x44/0x50 [ 46.138192][ T1191] ? __kasan_slab_free+0x5f/0x80 [ 46.143219][ T1191] ? kfree+0x158/0x440 [ 46.147594][ T1191] ? gadget_info_attr_release+0xcb/0x130 [ 46.153305][ T1191] ? config_item_put+0x178/0x240 [ 46.158284][ T1191] ? configfs_rmdir+0x8e8/0x9b0 [ 46.163228][ T1191] ? vfs_rmdir+0x3db/0x560 [ 46.167715][ T1191] ? do_rmdir+0x29a/0x590 [ 46.172128][ T1191] ? __x64_sys_rmdir+0x4b/0x60 [ 46.176943][ T1191] ? x64_sys_call+0xaf7/0x2ee0 [ 46.181781][ T1191] ? do_syscall_64+0x57/0xf0 [ 46.186446][ T1191] ? entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 46.192617][ T1191] kasan_save_free_info+0x44/0x50 [ 46.197715][ T1191] __kasan_slab_free+0x5f/0x80 [ 46.202563][ T1191] kfree+0x158/0x440 [ 46.206510][ T1191] ? gadget_info_attr_release+0xcb/0x130 [ 46.212247][ T1191] ? __cfi_gadget_info_attr_release+0x10/0x10 [ 46.218373][ T1191] gadget_info_attr_release+0xcb/0x130 [ 46.223913][ T1191] config_item_put+0x178/0x240 [ 46.228716][ T1191] ? __cfi_gadgets_drop+0x10/0x10 [ 46.233820][ T1191] configfs_rmdir+0x8e8/0x9b0 [ 46.238545][ T1191] vfs_rmdir+0x3db/0x560 [ 46.242874][ T1191] do_rmdir+0x29a/0x590 [ 46.247082][ T1191] ? __cfi_do_rmdir+0x10/0x10 [ 46.251858][ T1191] ? __kasan_check_write+0x18/0x20 [ 46.257010][ T1191] __x64_sys_rmdir+0x4b/0x60 [ 46.261776][ T1191] x64_sys_call+0xaf7/0x2ee0 [ 46.266410][ T1191] do_syscall_64+0x57/0xf0 [ 46.270912][ T1191] ? clear_bhb_loop+0x50/0xa0 [ 46.275638][ T1191] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 46.281624][ T1191] RIP: 0033:0x7fc3c199e159 [ 46.286081][ T1191] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 46.306115][ T1191] RSP: 002b:00007fc3c28af028 EFLAGS: 00000246 ORIG_RAX: 0000000000000054 [ 46.314894][ T1191] RAX: ffffffffffffffda RBX: 00007fc3c1c25fa0 RCX: 00007fc3c199e159 [ 46.322953][ T1191] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000200000000600 [ 46.330997][ T1191] RBP: 00007fc3c1a35024 R08: 0000000000000000 R09: 0000000000000000 [ 46.339016][ T1191] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 46.347076][ T1191] R13: 00007fc3c1c26038 R14: 00007fc3c1c25fa0 R15: 00007ffd87dc4a08 [ 46.355114][ T1191] [ 46.358164][ T1191] ---[ end trace 0000000000000000 ]--- [ 46.365501][ T1191] BUG: scheduling while atomic: syz.1.363/1191/0x00000000 [ 46.375132][ T1191] Modules linked in: [ 46.379093][ T1191] CPU: 0 UID: 0 PID: 1191 Comm: syz.1.363 Tainted: G W syzkaller #0 998a4fffdb5e6e31f7f8340a226dd9d0893c7622 [ 46.379134][ T1191] Tainted: [W]=WARN [ 46.379143][ T1191] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 46.379158][ T1191] Call Trace: [ 46.379166][ T1191] [ 46.379175][ T1191] __dump_stack+0x21/0x30 [ 46.379223][ T1191] dump_stack_lvl+0x140/0x1c0 [ 46.379258][ T1191] ? __cfi_dump_stack_lvl+0x10/0x10 [ 46.379293][ T1191] ? place_entity+0x60d/0x7a0 [ 46.379320][ T1191] dump_stack+0x19/0x20 [ 46.379352][ T1191] __schedule_bug+0x12b/0x200 [ 46.379379][ T1191] ? find_proxy_task+0x2460/0x2460 [ 46.379408][ T1191] __schedule+0xb85/0x20b0 [ 46.379432][ T1191] ? __kasan_check_read+0x15/0x20 [ 46.379458][ T1191] ? plist_check_list+0x2a1/0x2c0 [ 46.379494][ T1191] ? __sched_text_start+0x10/0x10 [ 46.379520][ T1191] ? plist_add+0x4d4/0x570 [ 46.379554][ T1191] ? __futex_queue+0x19f/0x350 [ 46.379587][ T1191] ? __cfi___futex_queue+0x10/0x10 [ 46.379620][ T1191] schedule+0xc5/0x240 [ 46.379642][ T1191] futex_wait_queue+0xfc/0x240 [ 46.379666][ T1191] __futex_wait+0x15b/0x3d0 [ 46.379689][ T1191] ? __cfi___futex_wait+0x10/0x10 [ 46.379713][ T1191] ? __cfi_futex_wake_mark+0x10/0x10 [ 46.379736][ T1191] ? __kasan_check_read+0x15/0x20 [ 46.379760][ T1191] ? futex_wake+0x627/0x950 [ 46.379783][ T1191] futex_wait+0x128/0x7c0 [ 46.379806][ T1191] ? __cfi_futex_wait+0x10/0x10 [ 46.379832][ T1191] do_futex+0x32a/0x510 [ 46.379863][ T1191] ? __cfi_do_futex+0x10/0x10 [ 46.379895][ T1191] ? __kasan_slab_free+0x6a/0x80 [ 46.379925][ T1191] ? kmem_cache_free+0x1bd/0x4f0 [ 46.379953][ T1191] __se_sys_futex+0x13c/0x320 [ 46.379986][ T1191] ? putname+0x113/0x150 [ 46.380014][ T1191] ? __x64_sys_futex+0x110/0x110 [ 46.380050][ T1191] __x64_sys_futex+0xe9/0x110 [ 46.380083][ T1191] x64_sys_call+0x227f/0x2ee0 [ 46.380106][ T1191] do_syscall_64+0x57/0xf0 [ 46.380141][ T1191] ? clear_bhb_loop+0x50/0xa0 [ 46.380170][ T1191] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 46.380205][ T1191] RIP: 0033:0x7fc3c199e159 [ 46.380227][ T1191] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 46.380247][ T1191] RSP: 002b:00007fc3c28af0e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 46.380274][ T1191] RAX: ffffffffffffffda RBX: 00007fc3c1c25fa8 RCX: 00007fc3c199e159 [ 46.380293][ T1191] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007fc3c1c25fa8 [ 46.380309][ T1191] RBP: 00007fc3c1c25fa0 R08: 0000000000000000 R09: 0000000000000000 [ 46.380325][ T1191] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 46.380340][ T1191] R13: 00007fc3c1c26038 R14: 00007ffd87dc4920 R15: 00007ffd87dc4a08 [ 46.380361][ T1191]