last executing test programs: 11.471986225s ago: executing program 1 (id=10): r0 = socket$inet6(0xa, 0x5, 0x0) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000000)={0x1, &(0x7f0000000040)=[{0x6}]}, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000002c0), r1) sendmsg$IEEE802154_START_REQ(r1, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x34, r2, 0x62b, 0x70bd2d, 0x25dfdbff, {}, [@IEEE802154_ATTR_CHANNEL={0x5, 0x7, 0x2}, @IEEE802154_ATTR_BCN_ORD={0x5, 0x17, 0xfb}, @IEEE802154_ATTR_COORD_SHORT_ADDR={0x6, 0x8, 0xffff}, @IEEE802154_ATTR_COORD_PAN_ID={0x6, 0xa, 0x2}]}, 0x34}, 0x1, 0x0, 0x0, 0x880}, 0x4014) sendmsg$IEEE802154_LLSEC_SETPARAMS(r1, 0x0, 0x24001004) 11.328357881s ago: executing program 1 (id=13): mkdirat(0xffffffffffffff9c, &(0x7f0000000300)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000380)='./proc\x00', &(0x7f00000003c0)='proc\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./proc/sys/net/ipv6/conf/all/ioam6_enabled\x00', 0x2, 0xd3) r1 = syz_open_dev$loop(&(0x7f0000000100), 0x4, 0x2001) ioctl$LOOP_CONFIGURE(r1, 0x4c0a, &(0x7f00000002c0)={r0, 0x0, {0x2a00, 0x80010000, 0x0, 0x2, 0x0, 0x0, 0x0, 0x13, 0x1c, "fee8a2ab78fc979fd1e00d96072000001ea89de2b7fb0000e60080b8785d960001000000000000000000007efff100004000", "2827e8dbe108598948224ad54afac11d875397bdb22d0000b420a1a93c527d3d458dd4992861ac008000000000000200", "f4bd000000801900", [0xc, 0xffffffff9673e359]}}) epoll_create1(0x80000) 11.291101914s ago: executing program 1 (id=14): sendmsg$TIPC_NL_MON_SET(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20004010}, 0x801) madvise(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x19) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) r0 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r0) ptrace$poke(0x4, r0, &(0x7f00000011c0), 0xfffffffffffffffe) 11.183472318s ago: executing program 1 (id=16): syz_open_dev$usbfs(&(0x7f0000000080), 0x75, 0x10b701) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000440)={0xffffffffffffffff}) pipe2$9p(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000000), 0x0, &(0x7f0000000100)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r0}, 0x2c, {[{@version_u}]}}) write$P9_RVERSION(r2, &(0x7f0000000080)=ANY=[@ANYBLOB="150000006bffff"], 0x15) 11.102826343s ago: executing program 1 (id=19): mkdirat(0xffffffffffffff9c, &(0x7f00000001c0)='./mysys\x00', 0x1ff) mount(0x0, &(0x7f0000000100)='./mysys\x00', &(0x7f0000000200)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./mysys/bus/pci/devices/0000:00:05.0/resource0\x00', 0x2, 0x0) mmap(&(0x7f0000002000/0x4000)=nil, 0x4000, 0x3, 0x11, r0, 0x4000) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) 11.066144124s ago: executing program 1 (id=20): r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$VHOST_SET_OWNER(r0, 0xaf01, 0x0) r1 = eventfd2(0x1, 0x80001) ioctl$VHOST_SET_VRING_ERR(r0, 0x4008af22, &(0x7f00000001c0)={0x0, r1}) r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x8, 0x94, 0x7fff0000}]}) close_range(r2, 0xffffffffffffffff, 0x0) 1.868670242s ago: executing program 2 (id=120): r0 = epoll_create1(0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r2, &(0x7f0000000100)={0x20000014}) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000000800)={0xa0000006}) epoll_ctl$EPOLL_CTL_MOD(r0, 0x3, r2, &(0x7f0000000240)) epoll_pwait(r0, &(0x7f00000002c0)=[{}], 0x1, 0xb5, 0x0, 0x0) 1.779749595s ago: executing program 2 (id=123): r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0xa2f01, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00', 0x2}) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup(r1) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', @multicast}) write$tun(r0, &(0x7f00000003c0)={@val={0x0, 0xf5}, @void, @eth={@multicast, @broadcast, @val={@val={0x88a8, 0x0, 0x0, 0x2}}, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x2, 0x7, 0x30, 0x68, 0x4000, 0xa, 0x1, 0x0, @empty=0x1c, @local}, @parameter_prob={0xc, 0x0, 0x0, 0x8e, 0x6, 0x0, {0x5, 0x4, 0x3, 0x3, 0x8, 0x67, 0xed, 0x9, 0x1, 0x1, @initdev={0xac, 0x1e, 0x1, 0x0}, @local}}}}}}}, 0x4a) 1.360699296s ago: executing program 2 (id=127): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x83, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000040)=[@text32={0x20, &(0x7f0000000180)="b805000000090200e1660f3a1429af320f01d9660ff7e31bf7c4c1672aaf65cd000066b81d018ec805000000b90000c0fe0f41d90100b9800000c00f3209083667dbd20f300f0826f30fc7b205000000660fc775022e0ffa600c980f320f3566b85700", 0x63}], 0x1, 0x57, 0x0, 0x0) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000fe6000/0x18000)=nil, &(0x7f0000000140)=[@text16={0x10, 0x0}], 0x1, 0x6bb6c4a5b2d35090, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 1.312295758s ago: executing program 3 (id=129): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000440), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1000003, 0x13, r2, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000000c0)={[0x1, 0x1100000000000000, 0x6, 0x109e93, 0xffffbfffffffffff, 0x3, 0xd, 0xc, 0x0, 0x7fffffdfffffffff, 0x5, 0x401, 0x6, 0x7, 0x20000000, 0xfffffffffffffffc], 0x80a0000, 0x1354}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 1.180665244s ago: executing program 0 (id=131): mknodat$loop(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x10, 0x1) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) close(r0) eventfd2(0x50, 0x0) open(&(0x7f00009e1000)='./file0\x00', 0x60840, 0x1) 1.123133237s ago: executing program 0 (id=132): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) ioprio_set$uid(0x3, 0x0, 0x0) r0 = socket$packet(0x11, 0x3, 0x300) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r0, 0x0, r1, 0x0, 0xf3a, 0x0) 1.095974468s ago: executing program 3 (id=133): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) r1 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f00000000c0)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000100)={0x4, 0x0, &(0x7f00000002c0)=[@register_looper], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x50, 0x0, &(0x7f00000003c0)="16c9e39b91abcb0d5016cf04256c69ec3aa9ea1d746cc24e416dfc3c3d10b165e97b8bfb0156363ed6f08355c9c104db03ed0c00a739f44de463d535a727619a4c12fcd07d2cec05196da0b47a1c1204"}) 1.06261846s ago: executing program 0 (id=134): r0 = socket(0x2, 0x2, 0x1) bind$unix(r0, &(0x7f0000000000)=@abs, 0x6e) r1 = socket(0x2, 0x2, 0x1) chown(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) bind$unix(r1, &(0x7f0000000000)=@abs, 0x6e) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000080)='net/icmp\x00') preadv(r2, &(0x7f0000000700)=[{&(0x7f0000000200)=""/152, 0x9d}], 0x1, 0xdd, 0x9) 1.03847753s ago: executing program 3 (id=135): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup(r1) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}) write$tun(r0, &(0x7f0000000140)={@val={0x3, 0x800}, @val={0x0, 0x0, 0x0, 0xe2, 0x14}, @ipv4=@icmp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x1400, 0x0, 0x0, 0x1, 0x0, @private=0xa0100fd, @local}, @echo={0x8, 0x0, 0x0, 0xad, 0x8}}}, 0x2a) 992.150623ms ago: executing program 0 (id=136): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000240)={0x1, &(0x7f0000000200)=[{0x6, 0xff, 0x7, 0x7fc00002}]}) membarrier(0x10, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r0, 0xc0502100, &(0x7f0000000300)={0x0}) r2 = socket$nl_audit(0x10, 0x3, 0x9) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r0, 0xc0502100, &(0x7f0000000440)) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r0, 0x40182103, &(0x7f0000000080)={r1, 0x3, r2, 0x3, 0x80000}) 950.677105ms ago: executing program 3 (id=137): r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0xa2f01, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup(r1) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000100)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}) write$tun(r0, &(0x7f0000000200)={@val={0x0, 0x22f0}, @void, @eth={@broadcast, @multicast, @val={@void}, {@ipv4={0x800, @udp={{0x5, 0x4, 0x2, 0x7, 0x2c, 0x64, 0x0, 0x8, 0x11, 0x0, @empty, @multicast1}, {0x4e22, 0x4e23, 0x18, 0x0, @wg=@data={0x4, 0x10001, 0x1}}}}}}}, 0x42) 870.567009ms ago: executing program 2 (id=138): mknodat$null(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0, 0x103) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000140), 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000020000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r0, &(0x7f0000000200)={0x2020, 0x0, 0x0}, 0x2092) write$FUSE_INIT(r0, &(0x7f00000022c0)={0x50, 0x0, r1, {0x7, 0x9, 0x0, 0x2321810, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x100}}, 0x50) getxattr(&(0x7f0000005140)='./file0\x00', &(0x7f0000005180)=@known='system.posix_acl_access\x00', 0x0, 0x0) 826.659371ms ago: executing program 3 (id=139): r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0xa2f01, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00', 0x2}) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup(r1) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', @multicast}) write$tun(r0, &(0x7f00000003c0)={@val={0x0, 0x8906}, @void, @eth={@multicast, @broadcast, @val={@val={0x88a8, 0x0, 0x0, 0x2}, {0x8100, 0x0, 0x0, 0x8}}, {@arp={0x806, @generic={0x30b, 0x6000, 0x6, 0x0, 0x9, @remote, "", @remote}}}}}, 0x2e) 806.773722ms ago: executing program 0 (id=140): r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r0, &(0x7f0000000740)=@pppol2tpv3={0x18, 0x1, {0x3, r1, {0x2, 0x4e23, @broadcast}, 0x2, 0x0, 0x4}}, 0x2e) r2 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r2, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @broadcast}, 0x2, 0x10000002}}, 0x2e) getsockopt(r2, 0x111, 0x1, 0x0, &(0x7f0000000080)) 779.794123ms ago: executing program 0 (id=141): add_key(0x0, 0x0, 0x0, 0x0, 0x0) r0 = socket$inet(0x2, 0x3, 0x1) connect$inet(r0, &(0x7f0000000040)={0x2, 0x0, @multicast1}, 0x10) r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000000000402609333340000000000109022400010000000009040000010301000009210000000122010009058103"], 0x0) syz_usb_disconnect(r1) r2 = syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="120110010000004058040350"], 0x0) syz_usb_control_io$hid(r2, 0x0, 0x0) 739.240945ms ago: executing program 3 (id=142): r0 = syz_usb_connect$hid(0x2, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x110, 0x0, 0x0, 0x0, 0x40, 0x458, 0x5005, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0xf0, 0x7e, "", [{{0x9, 0x4, 0x0, 0x0, 0x2, 0x3, 0x0, 0x2, 0x0, {0x9, 0x21, 0x7ffd, 0x0, 0x1, {0x22, 0xeb}}, {{{0x9, 0x5, 0x81, 0x3, 0x10, 0xfc}}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000040)={0x24, 0x0, 0x0, 0x0, &(0x7f00000001c0)={0x0, 0x22, 0x371, {0x9}}}, &(0x7f0000000080)={0xffffffffffffffeb, 0x0, 0x0, 0x0, 0x0, 0x0}) r1 = syz_open_dev$evdev(&(0x7f00000000c0), 0x40, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYRESDEC=r1], 0x40}, 0x1, 0x0, 0x0, 0x4001}, 0x4000801) ioctl$EVIOCGKEYCODE_V2(r1, 0x80284504, &(0x7f0000000040)=""/95) 17.17351ms ago: executing program 2 (id=143): r0 = socket$inet_tcp(0x2, 0x1, 0x0) shutdown(r0, 0x1) setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000140)=0x2, 0x4) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x24004, 0x0, 0x0) 0s ago: executing program 2 (id=144): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./config\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./config\x00', &(0x7f00000000c0)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./config/usb_gadget/g1\x00', 0x1ff) open$dir(&(0x7f00000003c0)='./config/usb_gadget/g1\x00', 0x10000, 0x18) rmdir(&(0x7f00000002c0)='./config/usb_gadget/g1\x00') syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') kernel console output (not intermixed with test programs): cess permissive=1 [ 20.667549][ T36] audit: type=1400 audit(1789176556.180:63): avc: denied { siginh } for pid=274 comm="sh" scontext=system_u:system_r:sshd_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 Warning: Permanently added '10.128.0.176' (ED25519) to the list of known hosts. [ 27.671342][ T36] audit: type=1400 audit(1789176563.200:64): avc: denied { mounton } for pid=286 comm="syz-executor" path="/syzcgroup/unified" dev="sda1" ino=2023 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1 [ 27.672369][ T286] cgroup: Unknown subsys name 'net' [ 27.694285][ T36] audit: type=1400 audit(1789176563.200:65): avc: denied { mount } for pid=286 comm="syz-executor" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 27.721850][ T36] audit: type=1400 audit(1789176563.240:66): avc: denied { unmount } for pid=286 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 27.722034][ T286] cgroup: Unknown subsys name 'devices' [ 27.849123][ T286] cgroup: Unknown subsys name 'hugetlb' [ 27.854819][ T286] cgroup: Unknown subsys name 'rlimit' [ 27.967346][ T36] audit: type=1400 audit(1789176563.500:67): avc: denied { setattr } for pid=286 comm="syz-executor" name="raw-gadget" dev="devtmpfs" ino=190 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 27.990803][ T36] audit: type=1400 audit(1789176563.500:68): avc: denied { mounton } for pid=286 comm="syz-executor" path="/proc/sys/fs/binfmt_misc" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=dir permissive=1 [ 27.999618][ T288] SELinux: Context root:object_r:swapfile_t is not valid (left unmapped). [ 28.015892][ T36] audit: type=1400 audit(1789176563.500:69): avc: denied { mount } for pid=286 comm="syz-executor" name="/" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=filesystem permissive=1 Setting up swapspace version 1, size = 127995904 bytes [ 28.047990][ T36] audit: type=1400 audit(1789176563.560:70): avc: denied { relabelto } for pid=288 comm="mkswap" name="swap-file" dev="sda1" ino=2026 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 28.073645][ T36] audit: type=1400 audit(1789176563.560:71): avc: denied { write } for pid=288 comm="mkswap" path="/root/swap-file" dev="sda1" ino=2026 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 28.107422][ T36] audit: type=1400 audit(1789176563.640:72): avc: denied { read } for pid=286 comm="syz-executor" name="swap-file" dev="sda1" ino=2026 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 28.133289][ T36] audit: type=1400 audit(1789176563.640:73): avc: denied { open } for pid=286 comm="syz-executor" path="/root/swap-file" dev="sda1" ino=2026 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 28.133554][ T286] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 29.030938][ T293] bridge0: port 1(bridge_slave_0) entered blocking state [ 29.038068][ T293] bridge0: port 1(bridge_slave_0) entered disabled state [ 29.045159][ T293] bridge_slave_0: entered allmulticast mode [ 29.051696][ T293] bridge_slave_0: entered promiscuous mode [ 29.067817][ T293] bridge0: port 2(bridge_slave_1) entered blocking state [ 29.074872][ T293] bridge0: port 2(bridge_slave_1) entered disabled state [ 29.081995][ T293] bridge_slave_1: entered allmulticast mode [ 29.088268][ T293] bridge_slave_1: entered promiscuous mode [ 29.103424][ T294] bridge0: port 1(bridge_slave_0) entered blocking state [ 29.110527][ T294] bridge0: port 1(bridge_slave_0) entered disabled state [ 29.117615][ T294] bridge_slave_0: entered allmulticast mode [ 29.123903][ T294] bridge_slave_0: entered promiscuous mode [ 29.132402][ T294] bridge0: port 2(bridge_slave_1) entered blocking state [ 29.139495][ T294] bridge0: port 2(bridge_slave_1) entered disabled state [ 29.146564][ T294] bridge_slave_1: entered allmulticast mode [ 29.152919][ T294] bridge_slave_1: entered promiscuous mode [ 29.181439][ T295] bridge0: port 1(bridge_slave_0) entered blocking state [ 29.188557][ T295] bridge0: port 1(bridge_slave_0) entered disabled state [ 29.195638][ T295] bridge_slave_0: entered allmulticast mode [ 29.202168][ T295] bridge_slave_0: entered promiscuous mode [ 29.210488][ T295] bridge0: port 2(bridge_slave_1) entered blocking state [ 29.217603][ T295] bridge0: port 2(bridge_slave_1) entered disabled state [ 29.224680][ T295] bridge_slave_1: entered allmulticast mode [ 29.231057][ T295] bridge_slave_1: entered promiscuous mode [ 29.271374][ T296] bridge0: port 1(bridge_slave_0) entered blocking state [ 29.278532][ T296] bridge0: port 1(bridge_slave_0) entered disabled state [ 29.285736][ T296] bridge_slave_0: entered allmulticast mode [ 29.295124][ T296] bridge_slave_0: entered promiscuous mode [ 29.304598][ T296] bridge0: port 2(bridge_slave_1) entered blocking state [ 29.311833][ T296] bridge0: port 2(bridge_slave_1) entered disabled state [ 29.319173][ T296] bridge_slave_1: entered allmulticast mode [ 29.325385][ T296] bridge_slave_1: entered promiscuous mode [ 29.470717][ T293] bridge0: port 2(bridge_slave_1) entered blocking state [ 29.477835][ T293] bridge0: port 2(bridge_slave_1) entered forwarding state [ 29.485201][ T293] bridge0: port 1(bridge_slave_0) entered blocking state [ 29.492373][ T293] bridge0: port 1(bridge_slave_0) entered forwarding state [ 29.501886][ T296] bridge0: port 2(bridge_slave_1) entered blocking state [ 29.508984][ T296] bridge0: port 2(bridge_slave_1) entered forwarding state [ 29.516348][ T296] bridge0: port 1(bridge_slave_0) entered blocking state [ 29.523403][ T296] bridge0: port 1(bridge_slave_0) entered forwarding state [ 29.544550][ T295] bridge0: port 2(bridge_slave_1) entered blocking state [ 29.551722][ T295] bridge0: port 2(bridge_slave_1) entered forwarding state [ 29.559108][ T295] bridge0: port 1(bridge_slave_0) entered blocking state [ 29.566154][ T295] bridge0: port 1(bridge_slave_0) entered forwarding state [ 29.581285][ T294] bridge0: port 2(bridge_slave_1) entered blocking state [ 29.588378][ T294] bridge0: port 2(bridge_slave_1) entered forwarding state [ 29.595652][ T294] bridge0: port 1(bridge_slave_0) entered blocking state [ 29.602765][ T294] bridge0: port 1(bridge_slave_0) entered forwarding state [ 29.644563][ T13] bridge0: port 1(bridge_slave_0) entered disabled state [ 29.652472][ T13] bridge0: port 2(bridge_slave_1) entered disabled state [ 29.659778][ T13] bridge0: port 1(bridge_slave_0) entered disabled state [ 29.667793][ T13] bridge0: port 2(bridge_slave_1) entered disabled state [ 29.675073][ T13] bridge0: port 1(bridge_slave_0) entered disabled state [ 29.682508][ T13] bridge0: port 2(bridge_slave_1) entered disabled state [ 29.689829][ T13] bridge0: port 1(bridge_slave_0) entered disabled state [ 29.697091][ T13] bridge0: port 2(bridge_slave_1) entered disabled state [ 29.719039][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 29.726213][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 29.734119][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 29.741187][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 29.760828][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 29.767920][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 29.775543][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 29.782607][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 29.790455][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 29.797549][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 29.805508][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 29.812677][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 29.820569][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 29.827656][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 29.835363][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 29.842637][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 29.902292][ T295] veth0_vlan: entered promiscuous mode [ 29.911695][ T293] veth0_vlan: entered promiscuous mode [ 29.926553][ T296] veth0_vlan: entered promiscuous mode [ 29.945181][ T294] veth0_vlan: entered promiscuous mode [ 29.955508][ T296] veth1_macvtap: entered promiscuous mode [ 29.966811][ T295] veth1_macvtap: entered promiscuous mode [ 29.982648][ T293] veth1_macvtap: entered promiscuous mode [ 30.003631][ T294] veth1_macvtap: entered promiscuous mode [ 30.052017][ T293] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 30.119411][ T324] capability: warning: `syz.1.5' uses deprecated v2 capabilities in a way that may be insecure [ 30.246341][ T336] FAULT_INJECTION: forcing a failure. [ 30.246341][ T336] name failslab, interval 1, probability 0, space 0, times 1 [ 30.278763][ T336] CPU: 0 UID: 0 PID: 336 Comm: syz.1.8 Not tainted syzkaller #0 238002c42480d657f84ffff3a67e0b81dcf43858 [ 30.278803][ T336] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 30.278815][ T336] Call Trace: [ 30.278822][ T336] [ 30.278830][ T336] __dump_stack+0x21/0x30 [ 30.278864][ T336] dump_stack_lvl+0x140/0x1c0 [ 30.278892][ T336] ? __cfi_dump_stack_lvl+0x10/0x10 [ 30.278923][ T336] dump_stack+0x19/0x20 [ 30.278951][ T336] should_fail_ex+0x3c2/0x510 [ 30.278976][ T336] should_failslab+0xac/0x100 [ 30.279000][ T336] kmem_cache_alloc_noprof+0x42/0x410 [ 30.279019][ T336] ? fcntl_setlk+0xb4/0x10a0 [ 30.279039][ T336] ? __cfi_futex_wake_mark+0x10/0x10 [ 30.279058][ T336] fcntl_setlk+0xb4/0x10a0 [ 30.279078][ T336] ? avc_has_perm_noaudit+0x26b/0x360 [ 30.279101][ T336] ? __asan_memcpy+0x5a/0x80 [ 30.279120][ T336] ? avc_has_perm_noaudit+0x289/0x360 [ 30.279146][ T336] ? avc_has_perm+0x155/0x240 [ 30.279167][ T336] ? __cfi_fcntl_setlk+0x10/0x10 [ 30.279188][ T336] ? __cfi_avc_has_perm+0x10/0x10 [ 30.279211][ T336] ? __kasan_check_write+0x18/0x20 [ 30.279226][ T336] do_fcntl+0x8c2/0x1580 [ 30.279245][ T336] ? __cfi_selinux_file_fcntl+0x10/0x10 [ 30.279262][ T336] ? check_fcntl_cmd+0xb0/0xb0 [ 30.279281][ T336] ? bpf_lsm_file_fcntl+0xd/0x20 [ 30.279301][ T336] ? security_file_fcntl+0x3e/0x110 [ 30.279317][ T336] __se_sys_fcntl+0xe4/0x180 [ 30.279334][ T336] __x64_sys_fcntl+0x7f/0xa0 [ 30.279362][ T336] x64_sys_call+0x1cb3/0x2ee0 [ 30.279376][ T336] do_syscall_64+0x57/0xf0 [ 30.279391][ T336] ? clear_bhb_loop+0x50/0xa0 [ 30.279412][ T336] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 30.279430][ T336] RIP: 0033:0x7f6772f9e159 [ 30.279446][ T336] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 30.279459][ T336] RSP: 002b:00007f6773da0028 EFLAGS: 00000246 ORIG_RAX: 0000000000000048 [ 30.279478][ T336] RAX: ffffffffffffffda RBX: 00007f6773225fa0 RCX: 00007f6772f9e159 [ 30.279491][ T336] RDX: 0000200000004240 RSI: 0000000000000006 RDI: 0000000000000003 [ 30.279502][ T336] RBP: 00007f677303503b R08: 0000000000000000 R09: 0000000000000000 [ 30.279513][ T336] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 30.279523][ T336] R13: 00007f6773226038 R14: 00007f6773225fa0 R15: 00007ffca7907c28 [ 30.279536][ T336] [ 30.377015][ T31] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 30.433327][ T343] netlink: 'syz.0.12': attribute type 3 has an invalid length. [ 30.435694][ T45] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 30.440373][ T343] netlink: 8 bytes leftover after parsing attributes in process `syz.0.12'. [ 30.601516][ T45] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 30.615774][ T352] netlink: 32 bytes leftover after parsing attributes in process `syz.0.15'. [ 30.624926][ T31] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 30.638760][ T45] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 30.649463][ T31] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 30.659984][ T45] usb 3-1: New USB device found, idVendor=28de, idProduct=1142, bcdDevice= 0.00 [ 30.671149][ T31] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 30.684737][ T45] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 30.697026][ T361] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 30.714682][ T31] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 30.724705][ T45] usb 3-1: config 0 descriptor?? [ 30.730539][ T31] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 30.751265][ T31] usb 4-1: config 0 descriptor?? [ 31.148786][ T45] hid-steam 0003:28DE:1142.0001: unknown main item tag 0x0 [ 31.159547][ T45] hid-steam 0003:28DE:1142.0001: : USB HID v0.00 Device [HID 28de:1142] on usb-dummy_hcd.2-1/input0 [ 31.181606][ T31] plantronics 0003:047F:FFFF.0002: No inputs registered, leaving [ 31.208057][ T31] plantronics 0003:047F:FFFF.0002: hiddev96,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.3-1/input0 [ 31.248801][ T45] hid-steam 0003:28DE:1142.0001: Steam wireless receiver connected [ 31.256768][ T45] hid-steam 0003:28DE:1142.0001: No HID_FEATURE_REPORT submitted - nothing to read [ 31.275034][ T45] hid-steam 0003:28DE:1142.0003: unknown main item tag 0x0 [ 31.283553][ T45] hid-steam 0003:28DE:1142.0003: hidraw1: USB HID v0.00 Device [HID 28de:1142] on usb-dummy_hcd.2-1/input0 [ 31.396995][ T65] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 31.551802][ T65] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 31.563032][ T65] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 31.573446][ T65] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 31.586789][ T65] usb 1-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 31.596586][ T65] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 31.607287][ T65] usb 1-1: config 0 descriptor?? [ 32.017330][ T65] plantronics 0003:047F:FFFF.0004: unknown main item tag 0x0 [ 32.025178][ T65] plantronics 0003:047F:FFFF.0004: unknown main item tag 0x0 [ 32.033030][ T65] plantronics 0003:047F:FFFF.0004: unknown main item tag 0x0 [ 32.041073][ T65] plantronics 0003:047F:FFFF.0004: unknown main item tag 0x0 [ 32.048822][ T65] plantronics 0003:047F:FFFF.0004: unknown main item tag 0x0 [ 32.056502][ T65] plantronics 0003:047F:FFFF.0004: unknown main item tag 0x0 [ 32.064230][ T65] plantronics 0003:047F:FFFF.0004: unknown main item tag 0x0 [ 32.072258][ T65] plantronics 0003:047F:FFFF.0004: unknown main item tag 0x0 [ 32.080276][ T65] plantronics 0003:047F:FFFF.0004: unknown main item tag 0x0 [ 32.088098][ T65] plantronics 0003:047F:FFFF.0004: unknown main item tag 0x0 [ 32.095712][ T65] plantronics 0003:047F:FFFF.0004: unknown main item tag 0x0 [ 32.103530][ T65] plantronics 0003:047F:FFFF.0004: unknown main item tag 0x0 [ 32.111518][ T65] plantronics 0003:047F:FFFF.0004: unknown main item tag 0x0 [ 32.119260][ T65] plantronics 0003:047F:FFFF.0004: unknown main item tag 0x0 [ 32.126774][ T65] plantronics 0003:047F:FFFF.0004: unknown main item tag 0x0 [ 32.135093][ T65] plantronics 0003:047F:FFFF.0004: No inputs registered, leaving [ 32.416999][ T45] usb 3-1: reset high-speed USB device number 2 using dummy_hcd [ 32.507181][ C1] plantronics 0003:047F:FFFF.0002: usb_submit_urb(ctrl) failed: -1 [ 32.518144][ T65] plantronics 0003:047F:FFFF.0004: hiddev97,hidraw2: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.0-1/input0 [ 32.543988][ T65] usb 1-1: USB disconnect, device number 2 [ 32.562543][ T379] fido_id[379]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.0/usb1/report_descriptor': No such file or directory [ 33.037516][ T36] kauditd_printk_skb: 50 callbacks suppressed [ 33.037536][ T36] audit: type=1400 audit(1789176568.570:124): avc: denied { create } for pid=381 comm="syz.2.23" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 33.117294][ T36] audit: type=1400 audit(1789176568.570:125): avc: denied { setopt } for pid=381 comm="syz.2.23" lport=58 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 33.159902][ T36] audit: type=1400 audit(1789176568.570:126): avc: denied { connect } for pid=381 comm="syz.2.23" lport=58 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 33.186425][ T36] audit: type=1400 audit(1789176568.570:127): avc: denied { write } for pid=381 comm="syz.2.23" laddr=fe80::18c3:e4ff:fe5d:9896 lport=58 faddr=ff02::1 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 33.210844][ T36] audit: type=1400 audit(1789176568.620:128): avc: denied { read write } for pid=385 comm="syz.2.26" name="ppp" dev="devtmpfs" ino=86 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 33.237166][ T36] audit: type=1400 audit(1789176568.620:129): avc: denied { open } for pid=385 comm="syz.2.26" path="/dev/ppp" dev="devtmpfs" ino=86 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 33.260696][ T36] audit: type=1400 audit(1789176568.620:130): avc: denied { ioctl } for pid=385 comm="syz.2.26" path="/dev/ppp" dev="devtmpfs" ino=86 ioctlcmd=0x743e scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 33.287677][ T311] usb 3-1: USB disconnect, device number 2 [ 33.293130][ T36] audit: type=1400 audit(1789176568.630:131): avc: denied { name_bind } for pid=387 comm="syz.0.25" src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=udp_socket permissive=1 [ 33.327588][ T311] hid-steam 0003:28DE:1142.0001: Steam wireless receiver disconnected [ 33.336479][ T36] audit: type=1400 audit(1789176568.770:132): avc: denied { create } for pid=394 comm="syz.2.29" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 33.396890][ T36] audit: type=1400 audit(1789176568.800:133): avc: denied { bind } for pid=394 comm="syz.2.29" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 33.417782][ T9] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 33.447378][ T9] hid-generic 0000:0000:0000.0005: hidraw1: HID v0.00 Device [syz1] on syz0 [ 33.557113][ T31] usb 4-1: reset high-speed USB device number 2 using dummy_hcd [ 33.987083][ T377] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 34.136995][ T377] usb 1-1: Using ep0 maxpacket: 16 [ 34.144061][ T31] usbhid 4-1:0.0: can't add hid device: -71 [ 34.164072][ T31] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 34.171987][ T377] usb 1-1: unable to get BOS descriptor or descriptor too short [ 34.204454][ T31] usb 4-1: USB disconnect, device number 2 [ 34.210534][ T377] usb 1-1: unable to read config index 0 descriptor/start: -71 [ 34.218446][ T377] usb 1-1: can't read configurations, error -71 [ 34.423109][ T432] kvm: MWAIT instruction emulated as NOP! [ 34.735576][ T445] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 34.788083][ T449] ======================================================= [ 34.788083][ T449] WARNING: The mand mount option has been deprecated and [ 34.788083][ T449] and is ignored by this kernel. Remove the mand [ 34.788083][ T449] option from the mount to silence this warning. [ 34.788083][ T449] ======================================================= [ 34.839600][ T452] overlayfs: "xino=on" is useless with all layers on same fs, ignore. [ 34.854162][ T452] overlayfs: overlapping lowerdir path [ 34.881473][ T452] overlayfs: overlapping lowerdir path [ 34.935969][ T458] netlink: 36 bytes leftover after parsing attributes in process `syz.0.55'. [ 35.183643][ T477] SELinux: failed to load policy [ 35.259421][ T485] overlay: Unknown parameter '/' [ 35.527007][ T10] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 35.687345][ T10] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 35.699975][ T10] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 35.710266][ T10] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 35.723416][ T10] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 35.732689][ T10] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 35.745475][ T10] usb 4-1: config 0 descriptor?? [ 35.980593][ T498] FAULT_INJECTION: forcing a failure. [ 35.980593][ T498] name fail_page_alloc, interval 1, probability 0, space 0, times 1 [ 35.994062][ T498] CPU: 1 UID: 0 PID: 498 Comm: syz.0.73 Not tainted syzkaller #0 238002c42480d657f84ffff3a67e0b81dcf43858 [ 35.994097][ T498] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 35.994111][ T498] Call Trace: [ 35.994118][ T498] [ 35.994126][ T498] __dump_stack+0x21/0x30 [ 35.994174][ T498] dump_stack_lvl+0x140/0x1c0 [ 35.994203][ T498] ? __cfi_dump_stack_lvl+0x10/0x10 [ 35.994231][ T498] ? __mod_memcg_lruvec_state+0x186/0x460 [ 35.994260][ T498] dump_stack+0x19/0x20 [ 35.994322][ T498] should_fail_ex+0x3c2/0x510 [ 35.994348][ T498] should_fail_alloc_page+0xec/0x110 [ 35.994374][ T498] __alloc_pages_noprof+0x1c0/0x7e0 [ 35.994406][ T498] ? __cfi___alloc_pages_noprof+0x10/0x10 [ 35.994437][ T498] ? filemap_get_entry+0x41b/0x490 [ 35.994464][ T498] __folio_alloc_noprof+0x14/0x80 [ 35.994492][ T498] __filemap_get_folio+0x798/0xe80 [ 35.994518][ T498] ? __kasan_check_write+0x18/0x20 [ 35.994538][ T498] ? __cfi___filemap_get_folio+0x10/0x10 [ 35.994563][ T498] ? __cfi_folio_end_read+0x10/0x10 [ 35.994586][ T498] ? aio_setup_ring+0x2f4/0xc60 [ 35.994613][ T498] aio_setup_ring+0x38e/0xc60 [ 35.994637][ T498] ? free_ioctx_reqs+0x170/0x170 [ 35.994664][ T498] ioctx_alloc+0x337/0x840 [ 35.994689][ T498] __se_sys_io_setup+0x6f/0x230 [ 35.994714][ T498] __x64_sys_io_setup+0x5f/0x80 [ 35.994737][ T498] x64_sys_call+0x26a4/0x2ee0 [ 35.994755][ T498] do_syscall_64+0x57/0xf0 [ 35.994773][ T498] ? clear_bhb_loop+0x50/0xa0 [ 35.994796][ T498] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 35.994821][ T498] RIP: 0033:0x7f5269b9e159 [ 35.994839][ T498] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 35.994857][ T498] RSP: 002b:00007f526a9f5028 EFLAGS: 00000246 ORIG_RAX: 00000000000000ce [ 35.994881][ T498] RAX: ffffffffffffffda RBX: 00007f5269e25fa0 RCX: 00007f5269b9e159 [ 35.994898][ T498] RDX: 0000000000000000 RSI: 0000200000000200 RDI: 0000000000007fff [ 35.994912][ T498] RBP: 00007f5269c3503b R08: 0000000000000000 R09: 0000000000000000 [ 35.994925][ T498] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 35.994938][ T498] R13: 00007f5269e26038 R14: 00007f5269e25fa0 R15: 00007ffdeade36b8 [ 35.994955][ T498] [ 36.231299][ T10] plantronics 0003:047F:FFFF.0006: No inputs registered, leaving [ 36.251023][ T10] plantronics 0003:047F:FFFF.0006: hiddev96,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.3-1/input0 [ 36.347008][ T377] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 36.416597][ T503] overlayfs: statfs failed on './file0' [ 36.508375][ T377] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 36.520255][ T377] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 36.530593][ T377] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 36.543956][ T377] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 36.555376][ T377] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 36.572415][ T377] usb 3-1: config 0 descriptor?? [ 36.592814][ T509] syzkaller1: entered promiscuous mode [ 36.598614][ T509] syzkaller1: entered allmulticast mode [ 36.992452][ T377] plantronics 0003:047F:FFFF.0007: No inputs registered, leaving [ 37.016217][ T377] plantronics 0003:047F:FFFF.0007: hiddev97,hidraw1: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.2-1/input0 [ 37.547176][ C1] plantronics 0003:047F:FFFF.0006: usb_submit_urb(ctrl) failed: -1 [ 37.947012][ T10] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 38.097001][ T10] usb 1-1: Using ep0 maxpacket: 16 [ 38.103347][ T10] usb 1-1: config 1 has an invalid interface number: 105 but max is 0 [ 38.111783][ T10] usb 1-1: config 1 has no interface number 0 [ 38.117943][ T10] usb 1-1: config 1 interface 105 altsetting 2 bulk endpoint 0x4 has invalid maxpacket 16 [ 38.128124][ T10] usb 1-1: config 1 interface 105 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 64 [ 38.138458][ T10] usb 1-1: config 1 interface 105 has no altsetting 0 [ 38.146806][ T10] usb 1-1: New USB device found, idVendor=20f4, idProduct=e05a, bcdDevice=6c.6d [ 38.156055][ T10] usb 1-1: New USB device strings: Mfr=1, Product=23, SerialNumber=3 [ 38.164300][ T10] usb 1-1: Product: syz [ 38.168739][ T10] usb 1-1: Manufacturer: syz [ 38.173434][ T10] usb 1-1: SerialNumber: syz [ 38.183885][ T553] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 38.201920][ T553] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 38.317435][ T377] usb 4-1: USB disconnect, device number 3 [ 38.394186][ T36] kauditd_printk_skb: 56 callbacks suppressed [ 38.394222][ T36] audit: type=1400 audit(1789176573.920:190): avc: denied { name_bind } for pid=565 comm="syz.3.100" src=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=tcp_socket permissive=1 [ 38.447933][ T36] audit: type=1400 audit(1789176573.920:191): avc: denied { node_bind } for pid=565 comm="syz.3.100" src=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=tcp_socket permissive=1 [ 38.470704][ T36] audit: type=1400 audit(1789176573.970:192): avc: denied { unlink } for pid=569 comm="syz.3.102" name="#1" dev="tmpfs" ino=133 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 38.495415][ T36] audit: type=1400 audit(1789176573.970:193): avc: denied { mount } for pid=569 comm="syz.3.102" name="/" dev="overlay" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 38.519137][ T36] audit: type=1400 audit(1789176573.970:194): avc: denied { create } for pid=569 comm="syz.3.102" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 38.544047][ T36] audit: type=1400 audit(1789176573.970:195): avc: denied { setattr } for pid=569 comm="syz.3.102" name="file0" dev="overlay" ino=134 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 38.567158][ T36] audit: type=1400 audit(1789176573.980:196): avc: denied { unmount } for pid=293 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 38.635153][ T553] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 38.647974][ T553] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 38.839460][ T36] audit: type=1400 audit(1789176574.370:197): avc: denied { read } for pid=579 comm="syz.3.106" dev="nsfs" ino=4026532303 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 38.879801][ T36] audit: type=1400 audit(1789176574.370:198): avc: denied { open } for pid=579 comm="syz.3.106" path="net:[4026532303]" dev="nsfs" ino=4026532303 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 38.905688][ T36] audit: type=1400 audit(1789176574.370:199): avc: denied { create } for pid=579 comm="syz.3.106" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 38.970890][ T65] usb 3-1: USB disconnect, device number 3 [ 39.069269][ T10] aqc111 1-1:1.105 (unnamed net_device) (uninitialized): Failed to read(0x1) reg index 0x0001: -32 [ 39.088264][ T592] KVM: debugfs: duplicate directory 592-4 [ 39.301412][ T10] aqc111 1-1:1.105 (unnamed net_device) (uninitialized): Failed to read(0x1) reg index 0x0001: -71 [ 39.333185][ T10] aqc111 1-1:1.105 eth1: register 'aqc111' at usb-dummy_hcd.0-1, USB-C 3.1 to 5GBASE-T Ethernet Adapter, 22:7c:65:a1:50:23 [ 39.369379][ T10] usb 1-1: USB disconnect, device number 5 [ 39.390992][ T10] aqc111 1-1:1.105 eth1: unregister 'aqc111' usb-dummy_hcd.0-1, USB-C 3.1 to 5GBASE-T Ethernet Adapter [ 39.484086][ T10] aqc111 1-1:1.105 eth1 (unregistered): Failed to write(0x1) reg index 0x0002: -19 [ 39.519693][ T10] aqc111 1-1:1.105 eth1 (unregistered): Failed to write(0x1) reg index 0x0002: -19 [ 39.554973][ T10] aqc111 1-1:1.105 eth1 (unregistered): Failed to write(0x61) reg index 0x0000: -19 [ 39.931487][ T636] 9pnet: p9_errstr2errno: server reported unknown error 0x0 [ 40.052977][ T647] syzkaller1: entered promiscuous mode [ 40.059103][ T647] syzkaller1: entered allmulticast mode [ 40.067905][ T649] FAULT_INJECTION: forcing a failure. [ 40.067905][ T649] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 40.083058][ T649] CPU: 1 UID: 0 PID: 649 Comm: syz.0.124 Not tainted syzkaller #0 238002c42480d657f84ffff3a67e0b81dcf43858 [ 40.083102][ T649] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 40.083116][ T649] Call Trace: [ 40.083123][ T649] [ 40.083131][ T649] __dump_stack+0x21/0x30 [ 40.083168][ T649] dump_stack_lvl+0x140/0x1c0 [ 40.083197][ T649] ? __cfi_dump_stack_lvl+0x10/0x10 [ 40.083224][ T649] ? stack_trace_save+0xaa/0x100 [ 40.083250][ T649] ? stack_depot_save_flags+0x38/0x800 [ 40.083279][ T649] dump_stack+0x19/0x20 [ 40.083306][ T649] should_fail_ex+0x3c2/0x510 [ 40.083333][ T649] should_fail_alloc_page+0xec/0x110 [ 40.083360][ T649] __alloc_pages_noprof+0x1c0/0x7e0 [ 40.083390][ T649] ? __cfi___alloc_pages_noprof+0x10/0x10 [ 40.083423][ T649] ? io_alloc_hash_table+0x52/0x160 [ 40.083445][ T649] ___kmalloc_large_node+0x81/0x220 [ 40.083468][ T649] ? io_alloc_hash_table+0x52/0x160 [ 40.083489][ T649] __kmalloc_large_node_noprof+0x1e/0xd0 [ 40.083511][ T649] ? io_alloc_hash_table+0x52/0x160 [ 40.083532][ T649] __kmalloc_noprof+0x326/0x510 [ 40.083551][ T649] ? __kasan_kmalloc+0x96/0xb0 [ 40.083572][ T649] io_alloc_hash_table+0x52/0x160 [ 40.083590][ T649] io_ring_ctx_alloc+0xd1/0x1dc0 [ 40.083608][ T649] ? do_futex+0x32a/0x510 [ 40.083631][ T649] io_uring_create+0x2e0/0x13f0 [ 40.083647][ T649] ? __kasan_check_write+0x18/0x20 [ 40.083663][ T649] __se_sys_io_uring_setup+0x2a4/0x2b0 [ 40.083688][ T649] ? __se_sys_futex+0x13c/0x320 [ 40.083708][ T649] ? __x64_sys_io_uring_setup+0x80/0x80 [ 40.083733][ T649] ? __kasan_check_write+0x18/0x20 [ 40.083750][ T649] __x64_sys_io_uring_setup+0x5f/0x80 [ 40.083772][ T649] x64_sys_call+0x22c0/0x2ee0 [ 40.083788][ T649] do_syscall_64+0x57/0xf0 [ 40.083803][ T649] ? clear_bhb_loop+0x50/0xa0 [ 40.083825][ T649] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 40.083846][ T649] RIP: 0033:0x7f5269b9e159 [ 40.083863][ T649] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 40.083879][ T649] RSP: 002b:00007f526a9f4fb8 EFLAGS: 00000206 ORIG_RAX: 00000000000001a9 [ 40.083905][ T649] RAX: ffffffffffffffda RBX: 0000200000000500 RCX: 00007f5269b9e159 [ 40.083921][ T649] RDX: 0000000000000000 RSI: 0000200000000500 RDI: 000000000000126b [ 40.083937][ T649] RBP: 00007f5269c3503b R08: 0000000000000000 R09: 0000000000000000 [ 40.083951][ T649] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 40.083965][ T649] R13: 0000000000000000 R14: 0000000000000000 R15: 00007ffdeade36b8 [ 40.083982][ T649] [ 40.364802][ T652] syzkaller1: entered promiscuous mode [ 40.370507][ T652] syzkaller1: entered allmulticast mode [ 40.511079][ T656] kvm: kvm [655]: vcpu0, guest rIP: 0x9143 Unhandled WRMSR(0x11e) = 0xbe702111 [ 40.576584][ T661] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 40.989720][ T683] syzkaller1: entered promiscuous mode [ 41.001902][ T683] syzkaller1: entered allmulticast mode [ 41.277736][ T554] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 41.297004][ T377] usb 4-1: new full-speed USB device number 4 using dummy_hcd [ 41.467586][ T554] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 41.468000][ T377] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 41.478651][ T554] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 41.504913][ T554] usb 1-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 41.514337][ T554] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 41.517925][ T377] usb 4-1: New USB device found, idVendor=0458, idProduct=5005, bcdDevice= 0.00 [ 41.523392][ T554] usb 1-1: config 0 descriptor?? [ 41.546965][ T377] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 41.556102][ T377] usb 4-1: config 0 descriptor?? [ 41.747411][ T554] usbhid 1-1:0.0: can't add hid device: -71 [ 41.754030][ T554] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 41.768618][ T554] usb 1-1: USB disconnect, device number 6 [ 41.816167][ T694] BUG: scheduling while atomic: syz.2.144/694/0x00000002 [ 41.823496][ T694] Modules linked in: [ 41.827492][ T694] CPU: 1 UID: 0 PID: 694 Comm: syz.2.144 Not tainted syzkaller #0 238002c42480d657f84ffff3a67e0b81dcf43858 [ 41.827525][ T694] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 41.827538][ T694] Call Trace: [ 41.827544][ T694] [ 41.827552][ T694] __dump_stack+0x21/0x30 [ 41.827588][ T694] dump_stack_lvl+0x140/0x1c0 [ 41.827623][ T694] ? __cfi_dump_stack_lvl+0x10/0x10 [ 41.827654][ T694] dump_stack+0x19/0x20 [ 41.827682][ T694] __schedule_bug+0x12b/0x200 [ 41.827704][ T694] ? find_proxy_task+0x2460/0x2460 [ 41.827725][ T694] ? kernel_text_address+0xa9/0xe0 [ 41.827753][ T694] ? __kernel_text_address+0x11/0x40 [ 41.827780][ T694] ? unwind_get_return_address+0x51/0x90 [ 41.827805][ T694] ? __cfi_stack_trace_consume_entry+0x10/0x10 [ 41.827830][ T694] __schedule+0xb85/0x20b0 [ 41.827852][ T694] ? stack_trace_save+0xaa/0x100 [ 41.827877][ T694] ? __sched_text_start+0x10/0x10 [ 41.827897][ T694] ? __kasan_check_read+0x15/0x20 [ 41.827918][ T694] ? rwsem_spin_on_owner+0xa4/0x3b0 [ 41.827947][ T694] ? sysvec_apic_timer_interrupt+0x50/0x90 [ 41.827973][ T694] ? asm_sysvec_apic_timer_interrupt+0x1f/0x30 [ 41.827999][ T694] schedule+0xc5/0x240 [ 41.828019][ T694] schedule_preempt_disabled+0x14/0x30 [ 41.828040][ T694] rwsem_down_write_slowpath+0x5c9/0x1b60 [ 41.828070][ T694] ? rwsem_down_read_slowpath+0x14c0/0x14c0 [ 41.828098][ T694] ? try_to_wake_up+0x111a/0x1fd0 [ 41.828123][ T694] ? __kasan_check_write+0x18/0x20 [ 41.828143][ T694] ? wake_q_add_safe+0x29/0x100 [ 41.828162][ T694] ? __cfi_try_to_wake_up+0x10/0x10 [ 41.828184][ T694] ? rwsem_mark_wake+0x507/0x770 [ 41.828222][ T694] ? rwsem_read_trylock+0x275/0x5a0 [ 41.828251][ T694] ? wake_up_q+0x10a/0x1c0 [ 41.828269][ T694] ? downgrade_write+0x470/0x470 [ 41.828299][ T694] down_write+0x163/0x2b0 [ 41.828324][ T694] ? __cfi_down_write+0x10/0x10 [ 41.828349][ T694] ? down_read+0x7f/0xe0 [ 41.828373][ T694] ? __cfi_down_read+0x10/0x10 [ 41.828397][ T694] ? __kasan_check_write+0x18/0x20 [ 41.828418][ T694] kernfs_remove+0x87/0xc0 [ 41.828444][ T694] sysfs_remove_group+0x22d/0x250 [ 41.828469][ T694] dpm_sysfs_remove+0x99/0xd0 [ 41.828497][ T694] device_del+0x241/0xcf0 [ 41.828516][ T694] ? __cfi_class_find_device+0x10/0x10 [ 41.828539][ T694] ? __cfi_device_del+0x10/0x10 [ 41.828557][ T694] ? __kasan_check_write+0x18/0x20 [ 41.828578][ T694] ? kobject_put+0x1cc/0x2a0 [ 41.828597][ T694] device_destroy+0xb0/0x100 [ 41.828616][ T694] ? __cfi_device_destroy+0x10/0x10 [ 41.828635][ T694] ? __kasan_check_write+0x18/0x20 [ 41.828656][ T694] android_device_destroy+0x118/0x180 [ 41.828687][ T694] gadgets_drop+0x1d/0x30 [ 41.828707][ T694] ? __cfi_gadgets_drop+0x10/0x10 [ 41.828727][ T694] configfs_rmdir+0x8b7/0x9b0 [ 41.828755][ T694] vfs_rmdir+0x3de/0x560 [ 41.828783][ T694] do_rmdir+0x29a/0x590 [ 41.828811][ T694] ? __cfi_do_rmdir+0x10/0x10 [ 41.828839][ T694] ? __kasan_check_write+0x18/0x20 [ 41.828861][ T694] __x64_sys_rmdir+0x4b/0x60 [ 41.828890][ T694] x64_sys_call+0xaf7/0x2ee0 [ 41.828909][ T694] do_syscall_64+0x57/0xf0 [ 41.828926][ T694] ? clear_bhb_loop+0x50/0xa0 [ 41.828951][ T694] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 41.828975][ T694] RIP: 0033:0x7f4fe3f9e159 [ 41.828994][ T694] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 41.829011][ T694] RSP: 002b:00007f4fe4e3e028 EFLAGS: 00000246 ORIG_RAX: 0000000000000054 [ 41.829035][ T694] RAX: ffffffffffffffda RBX: 00007f4fe4225fa0 RCX: 00007f4fe3f9e159 [ 41.829050][ T694] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 00002000000002c0 [ 41.829064][ T694] RBP: 00007f4fe403503b R08: 0000000000000000 R09: 0000000000000000 [ 41.829078][ T694] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 41.829091][ T694] R13: 00007f4fe4226038 R14: 00007f4fe4225fa0 R15: 00007ffd48ba40b8 [ 41.829109][ T694] [ 41.947968][ T694] ------------[ cut here ]------------ [ 42.023191][ T377] input: HID 0458:5005 as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/0003:0458:5005.0008/input/input4 [ 42.057011][ T694] WARNING: CPU: 0 PID: 694 at lib/stackdepot.c:635 stack_depot_save_flags+0x266/0x800 [ 42.071199][ T377] input: HID 0458:5005 as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/0003:0458:5005.0008/input/input5 [ 42.072828][ T694] Modules linked in: [ 42.072848][ T694] CPU: 0 UID: 0 PID: 694 Comm: syz.2.144 Tainted: G W syzkaller #0 238002c42480d657f84ffff3a67e0b81dcf43858 [ 42.098728][ T377] kye 0003:0458:5005.0008: input,hiddev96,hidraw0: USB HID v7f.fd Device [HID 0458:5005] on usb-dummy_hcd.3-1/input0 [ 42.102762][ T694] Tainted: [W]=WARN [ 42.102773][ T694] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 42.102785][ T694] RIP: 0010:stack_depot_save_flags+0x266/0x800 [ 42.320408][ T694] Code: 48 83 3d f4 00 dc 05 00 0f 84 00 04 00 00 48 c7 45 c0 00 00 00 00 48 89 d3 65 8b 05 0c 42 1e 7d 4d 89 d7 a9 00 00 f0 00 74 2d <0f> 0b 48 c7 45 c8 00 00 00 00 9c 8f 45 c8 4c 8b 6d c8 fa 48 c7 c7 [ 42.340172][ T694] RSP: 0018:ffffc9000f4c7980 EFLAGS: 00010206 [ 42.346538][ T694] RAX: 000000007fffffff RBX: ffff8881f609d840 RCX: 0000000000e9d840 [ 42.354692][ T694] RDX: ffff8881f609d840 RSI: 0000000000000001 RDI: 000000009e25b93d [ 42.362762][ T694] RBP: ffffc9000f4c79e0 R08: 000000004ba51b70 R09: 000000002966dff3 [ 42.370808][ T694] R10: 000000000000000d R11: ffffffff8175a740 R12: 00000000b1be9d84 [ 42.378996][ T694] R13: 0000000000000000 R14: ffffc9000f4c79f0 R15: 000000000000000d [ 42.387024][ T694] FS: 00007f4fe4e3e6c0(0000) GS:ffff8881f6e00000(0000) knlGS:0000000000000000 [ 42.396501][ T694] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 42.403236][ T694] CR2: 00007fdcb61fe0ec CR3: 0000000114514000 CR4: 00000000003526b0 [ 42.411265][ T694] DR0: 0000000000008800 DR1: 0000000000000000 DR2: 0000000000000000 [ 42.419990][ T694] DR3: 0000000000000000 DR6: 00000000ffff0ff0 DR7: 0000000000000400 [ 42.428103][ T694] Call Trace: [ 42.431849][ T694] [ 42.434846][ T694] ? do_syscall_64+0x57/0xf0 [ 42.439521][ T694] ? entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 42.445725][ T694] kasan_save_track+0x4f/0x80 [ 42.450569][ T694] ? kasan_save_track+0x3e/0x80 [ 42.455627][ T694] ? kasan_save_free_info+0x44/0x50 [ 42.460977][ T694] ? __kasan_slab_free+0x5f/0x80 [ 42.465943][ T694] ? kfree+0x158/0x440 [ 42.470090][ T694] ? gadget_info_attr_release+0xcb/0x130 [ 42.475758][ T694] ? config_item_put+0x178/0x240 [ 42.480755][ T694] ? configfs_rmdir+0x8e8/0x9b0 [ 42.485813][ T694] ? vfs_rmdir+0x3de/0x560 [ 42.490432][ T694] ? do_rmdir+0x29a/0x590 [ 42.494895][ T694] ? __x64_sys_rmdir+0x4b/0x60 [ 42.499733][ T694] ? x64_sys_call+0xaf7/0x2ee0 [ 42.504523][ T694] ? do_syscall_64+0x57/0xf0 [ 42.509169][ T694] ? entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 42.515292][ T694] kasan_save_free_info+0x44/0x50 [ 42.520474][ T694] __kasan_slab_free+0x5f/0x80 [ 42.525357][ T694] kfree+0x158/0x440 [ 42.529405][ T694] ? gadget_info_attr_release+0xcb/0x130 [ 42.535175][ T694] ? __cfi_gadget_info_attr_release+0x10/0x10 [ 42.541314][ T694] gadget_info_attr_release+0xcb/0x130 [ 42.547009][ T694] config_item_put+0x178/0x240 [ 42.551815][ T694] ? __cfi_gadgets_drop+0x10/0x10 [ 42.556869][ T694] configfs_rmdir+0x8e8/0x9b0 [ 42.562259][ T694] vfs_rmdir+0x3de/0x560 [ 42.566552][ T694] do_rmdir+0x29a/0x590 [ 42.570968][ T694] ? __cfi_do_rmdir+0x10/0x10 [ 42.575710][ T694] ? __kasan_check_write+0x18/0x20 [ 42.581067][ T694] __x64_sys_rmdir+0x4b/0x60 [ 42.585878][ T694] x64_sys_call+0xaf7/0x2ee0 [ 42.590529][ T694] do_syscall_64+0x57/0xf0 [ 42.594968][ T694] ? clear_bhb_loop+0x50/0xa0 [ 42.599715][ T694] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 42.605720][ T694] RIP: 0033:0x7f4fe3f9e159 [ 42.610204][ T694] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 42.630055][ T694] RSP: 002b:00007f4fe4e3e028 EFLAGS: 00000246 ORIG_RAX: 0000000000000054 [ 42.638554][ T694] RAX: ffffffffffffffda RBX: 00007f4fe4225fa0 RCX: 00007f4fe3f9e159 [ 42.646563][ T694] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 00002000000002c0 [ 42.654691][ T694] RBP: 00007f4fe403503b R08: 0000000000000000 R09: 0000000000000000 [ 42.662741][ T694] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 42.670810][ T694] R13: 00007f4fe4226038 R14: 00007f4fe4225fa0 R15: 00007ffd48ba40b8 [ 42.679108][ T694] [ 42.682172][ T694] ---[ end trace 0000000000000000 ]--- [ 42.694087][ T694] BUG: scheduling while atomic: syz.2.144/694/0x00000000 [ 42.701298][ T694] Modules linked in: [ 42.701961][ T31] usb 4-1: USB disconnect, device number 4 [ 42.705343][ T694] CPU: 0 UID: 0 PID: 694 Comm: syz.2.144 Tainted: G W syzkaller #0 238002c42480d657f84ffff3a67e0b81dcf43858 [ 42.705377][ T694] Tainted: [W]=WARN [ 42.705383][ T694] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 42.705394][ T694] Call Trace: [ 42.705400][ T694] [ 42.705407][ T694] __dump_stack+0x21/0x30 [ 42.705438][ T694] dump_stack_lvl+0x140/0x1c0 [ 42.705462][ T694] ? __cfi_dump_stack_lvl+0x10/0x10 [ 42.705487][ T694] ? reweight_entity+0x895/0xac0 [ 42.705508][ T694] dump_stack+0x19/0x20 [ 42.705531][ T694] __schedule_bug+0x12b/0x200 [ 42.705551][ T694] ? find_proxy_task+0x2460/0x2460 [ 42.705571][ T694] ? update_load_avg+0x4f3/0x1980 [ 42.705594][ T694] __schedule+0xb85/0x20b0 [ 42.705613][ T694] ? __kasan_check_read+0x15/0x20 [ 42.705634][ T694] ? plist_check_list+0x2a1/0x2c0 [ 42.705652][ T694] ? __sched_text_start+0x10/0x10 [ 42.705670][ T694] ? plist_add+0x4d4/0x570 [ 42.705687][ T694] ? __futex_queue+0x19f/0x350 [ 42.705710][ T694] ? __cfi___futex_queue+0x10/0x10 [ 42.705734][ T694] schedule+0xc5/0x240 [ 42.705752][ T694] futex_wait_queue+0xfc/0x240 [ 42.705770][ T694] __futex_wait+0x15b/0x3d0 [ 42.705787][ T694] ? __cfi___futex_wait+0x10/0x10 [ 42.705805][ T694] ? __cfi_futex_wake_mark+0x10/0x10 [ 42.705823][ T694] ? __kasan_check_read+0x15/0x20 [ 42.705841][ T694] ? futex_wake+0x627/0x950 [ 42.705858][ T694] futex_wait+0x128/0x7c0 [ 42.705876][ T694] ? __cfi_futex_wait+0x10/0x10 [ 42.705896][ T694] do_futex+0x32a/0x510 [ 42.705920][ T694] ? __cfi_do_futex+0x10/0x10 [ 42.705942][ T694] ? __kasan_slab_free+0x6a/0x80 [ 42.705963][ T694] ? kmem_cache_free+0x1bd/0x4f0 [ 42.705984][ T694] __se_sys_futex+0x13c/0x320 [ 42.706007][ T694] ? putname+0x113/0x150 [ 42.706028][ T694] ? __x64_sys_futex+0x110/0x110 [ 42.706053][ T694] __x64_sys_futex+0xe9/0x110 [ 42.706077][ T694] x64_sys_call+0x227f/0x2ee0 [ 42.706094][ T694] do_syscall_64+0x57/0xf0 [ 42.706111][ T694] ? clear_bhb_loop+0x50/0xa0 [ 42.706133][ T694] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 42.706154][ T694] RIP: 0033:0x7f4fe3f9e159 [ 42.706178][ T694] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 42.706193][ T694] RSP: 002b:00007f4fe4e3e0e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 42.706215][ T694] RAX: ffffffffffffffda RBX: 00007f4fe4225fa8 RCX: 00007f4fe3f9e159 [ 42.706230][ T694] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007f4fe4225fa8 [ 42.706242][ T694] RBP: 00007f4fe4225fa0 R08: 0000000000000000 R09: 0000000000000000 [ 42.706255][ T694] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 42.706267][ T694] R13: 00007f4fe4226038 R14: 00007ffd48ba3fd0 R15: 00007ffd48ba40b8 [ 42.706283][ T694] [ 42.946975][ T554] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 43.178413][ T554] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 43.189455][ T554] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 43.208100][ T554] usb 1-1: New USB device found, idVendor=0458, idProduct=5003, bcdDevice= 0.40 [ 43.226055][ T554] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 43.237253][ T554] usb 1-1: config 0 descriptor?? [ 43.645341][ T554] aiptek 1-1:0.0: Aiptek using 400 ms programming speed [ 43.657235][ T554] input: Aiptek as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/input/input6 [ 43.682882][ T554] usb 1-1: USB disconnect, device number 7