last executing test programs: 6.616622142s ago: executing program 1 (id=151): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) r1 = syz_ublk_setup_io_uring(0x6af9, &(0x7f00000005c0)={0x0, 0x4590, 0x80, 0x0, 0x1e8}, &(0x7f0000000640), &(0x7f0000000680), &(0x7f00000006c0)) syz_io_uring_setup(0xd3b, &(0x7f0000000000)={0x0, 0x990, 0x0, 0x0, 0x400003, 0x0, r1}, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) recvmsg$unix(r2, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x80) ioctl$F2FS_IOC_MOVE_RANGE(r0, 0x541b, &(0x7f0000000100)={0xffffffffffffffff, 0x4000000000008e59, 0x0, 0x5}) close_range(r3, 0xffffffffffffffff, 0x0) r4 = socket(0x80000000000000a, 0x2, 0x0) setsockopt$inet6_group_source_req(r4, 0x29, 0x2e, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}, 0x2}}, {{0xa, 0x0, 0xffffffff, @remote}}}, 0x108) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000700)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x4004000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000780)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r6, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000800)=ANY=[], 0x128}, 0x0) inotify_init1(0x800) recvmsg$unix(r5, &(0x7f0000000840)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000880)=[@cred={{0x1c}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x10}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x10}}, @rights={{0x10}}], 0xb0}, 0x80) mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000940)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000009c0)=@new_dev={0x4, 0x3c9, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x40}}}, &(0x7f0000000a00)=0x0) r9 = socket$inet6_tcp(0xa, 0x1, 0x0) setns(0xc9, 0x0) r10 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r10, &(0x7f0000000a40)={0x2, 0x4, @multicast2}, 0x10) r11 = dup(r9) syz_ublk_setup_queues(r11, r8, 0x0, &(0x7f0000000a80)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0xe704, 0x800, 0x1000002, 0x91}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x5c87, 0x20, 0x3, 0x3aa}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x1f70, 0x2, 0x40040001, 0x334, 0x0, r7}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x4, 0x200, 0x1, 0xffffffff}}], 0x1, 0x0, 0x0) r12 = socket(0x80000000000000a, 0x2, 0x0) mkdir(&(0x7f0000000140)='./sys_mnt\x00', 0x1ff) mount(0x0, &(0x7f0000000180)='./sys_mnt\x00', &(0x7f00000001c0)='sysfs\x00', 0x0, 0x0) r13 = openat(0xffffffffffffff9c, &(0x7f0000000380)='./sys_mnt/class/rtc/rtc0/wakealarm\x00', 0x2, 0x0) read(r13, &(0x7f00000003c0)=""/169, 0xa9) setsockopt$inet6_group_source_req(r12, 0x29, 0x2e, &(0x7f0000000480)={0x8001, {{0xa, 0x1, 0x6, @mcast1={0xff, 0x7}, 0x204}}, {{0xa, 0x0, 0x100003, @remote}}}, 0x108) socket$pppl2tp(0x18, 0x1, 0x1) 5.766132357s ago: executing program 1 (id=159): move_mount(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0xffffffffffffff9c, &(0x7f0000000040)='\x00', 0x175) mkdirat(0xffffffffffffff9c, &(0x7f0000001680)='./dev\x00', 0x1ff) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000003c0), 0x40000, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae03, 0x79) mount(0x0, &(0x7f00000016c0)='./dev\x00', &(0x7f0000001700)='devtmpfs\x00', 0x2, 0x0) r1 = syz_clone(0x100000, 0x0, 0x0, 0x0, 0x0, 0x0) process_vm_writev(r1, &(0x7f0000000440)=[{&(0x7f0000000480)=""/168, 0xa8}], 0x1, &(0x7f0000000540)=[{&(0x7f0000000580)=""/76, 0x4c}], 0x1, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000001740)='./mnt\x00', 0x1ff) mount(&(0x7f0000001780)=@filename='./dev/sda1\x00', &(0x7f00000017c0)='./mnt\x00', &(0x7f0000001800)='ext4\x00', 0x8410, 0x0) chdir(&(0x7f0000001840)='./mnt\x00') openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='.\x00', 0x0, 0x0) fsetxattr$system_posix_acl(r2, &(0x7f0000000200)='system.posix_acl_default\x00', &(0x7f0000000240)={{}, {0x1, 0x1}, [], {0x4, 0x5}, [], {0x10, 0x6}, {0x20, 0x1}}, 0x24, 0x3) mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x181) mkdirat(0xffffffffffffff9c, &(0x7f00000002c0)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f0000000300)='./bus\x00', &(0x7f0000000340), 0x8, &(0x7f0000000380)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './cgroup'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]}) r3 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r3, 0x0) r4 = openat(r3, 0x0, 0x40002, 0x21) r5 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=ANY=[@ANYBLOB="3c0000004800010000000000000000000a00806e080000000000", @ANYRES32], 0x3c}}, 0x0) ioctl$MON_IOCQ_URB_LEN(r2, 0x9201) ioctl$FS_IOC_SET_ENCRYPTION_POLICY(r4, 0x800c6613, &(0x7f00000018c0)=@v1={0x0, @aes256, 0x2, @desc1}) 5.723123338s ago: executing program 1 (id=160): pipe2(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x800) mount$9p_fd(0x2000000000000000, &(0x7f0000000180)='.\x00', &(0x7f00000001c0), 0x2204c83, &(0x7f0000000200)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@cache_fscache}]}}) 5.619108812s ago: executing program 1 (id=161): r0 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_mreqn(r0, 0x0, 0x23, &(0x7f0000000040)={@multicast2, @loopback}, 0x40) r1 = socket$netlink(0x10, 0x3, 0x0) writev(r1, &(0x7f00000000c0)=[{&(0x7f0000000100)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000068190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) setsockopt$inet_mreqsrc(r0, 0x0, 0x24, &(0x7f00000002c0)={@multicast2, @loopback, @empty}, 0xc) 5.618402772s ago: executing program 1 (id=162): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./mysys\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./mysys\x00', &(0x7f0000000080)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./mysys/bus/pci/devices/0000:00:05.0/resource0\x00', 0x2, 0x0) mmap(&(0x7f0000002000/0x4000)=nil, 0x4000, 0x3, 0x11, r0, 0x4000) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x9) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000000100), 0x42, 0x0) mmap(&(0x7f0000dab000/0x1000)=nil, 0x1000, 0x1000002, 0x11, r1, 0xffffb000) syz_clone(0x1100, 0x0, 0xff9e, 0x0, 0x0, 0x0) 5.607534693s ago: executing program 1 (id=164): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000680)=ANY=[@ANYBLOB="b8000000140001000000000000080000e0000002000000000000f5000000000000000000000000000000030000000000000008008206bf8c0a", @ANYBLOB], 0xb8}, 0x1, 0x0, 0x0, 0x404c830}, 0x0) 3.570850073s ago: executing program 2 (id=185): r0 = syz_create_resource$futex(&(0x7f0000000080)=0x1) r1 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_mreqn(r1, 0x0, 0x23, &(0x7f0000000040)={@multicast2, @loopback}, 0xc) setsockopt$inet_msfilter(r1, 0x0, 0x29, &(0x7f0000000100)=ANY=[@ANYBLOB="e00000027fa80a010100000004"], 0x57) r2 = socket$netlink(0x10, 0x3, 0x0) writev(r2, &(0x7f0000000140)=[{&(0x7f0000000180)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000489422302fd17e5ffff0800040400b2e3e1000000", 0x39}], 0x1) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000001c0)={0x1, &(0x7f0000000200)=[{0x6, 0x72, 0x0, 0x7fff0000}]}) close_range(r3, 0xffffffffffffffff, 0x0) r4 = syz_create_resource$futex(&(0x7f00000000c0)=0xffffffff) r5 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x8000, 0x0) r6 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000240)='/proc/meminfo\x00', 0x0, 0x0) lseek(r6, 0x7fa2, 0x0) read$eventfd(r6, &(0x7f0000000280), 0x8) pread64(r5, 0x0, 0x0, 0xfe) futex(r0, 0xb, 0x1, 0x0, r4, 0x1) getrandom(&(0x7f00000002c0)=""/286, 0xffffff9a, 0x0) r7 = syz_open_dev$evdev(&(0x7f0000000400), 0x0, 0x0) syz_usb_disconnect(r7) syz_usb_connect$rtl8150(0x4, 0x3f, &(0x7f0000000440)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xbda, 0x8150, 0x0, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d}}]}}, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) ioctl$EVIOCRMFF(r7, 0xc0085508, &(0x7f0000000480)=0x1b) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000004c0)='memory.numa_stat\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r8, 0x0) mount$bind(&(0x7f0000000500)='./file0\x00', 0x0, 0x0, 0x100e002, 0x0) futex(r0, 0xc, 0x1, 0x0, r4, 0x1) 3.537412414s ago: executing program 2 (id=186): mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./trace\x00', 0x1bf) mount(0x0, &(0x7f0000000380)='./trace\x00', &(0x7f00000003c0)='tracefs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000001700)='./trace/events/sched/sched_switch/trigger\x00', 0x121002, 0x0) write(r0, &(0x7f0000001740)='hist:keys=common_timestamp', 0x1a) (fail_nth: 28) 3.133286406s ago: executing program 2 (id=188): r0 = openat$pidfd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) pidfd_send_signal(r0, 0x0, 0x0, 0x2) r1 = syz_usb_connect$hid(0x0, 0x3f, &(0x7f0000000140)=ANY=[], 0x0) syz_usb_control_io$hid(r1, 0x0, 0x0) syz_usb_control_io(r1, &(0x7f0000000040)={0x2c, &(0x7f0000000080)={0x0, 0x9, 0x23, {0x23, 0x22, "7e862fd86aa9fb7a10f1ae78350290e55065c430ef4a1c88eef23e3281c16a486b"}}, 0x0, 0x0, 0x0, 0x0}, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) msync(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x7) r2 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x2) ioctl$KVM_RUN(r2, 0xae80, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.events\x00', 0x275a, 0x0) fgetxattr(r3, &(0x7f0000000100)=@random={'security.', '\x00'}, &(0x7f0000000140)=""/113, 0x71) ioctl$BLKTRACETEARDOWN(r3, 0x1276, 0x0) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) 1.799949956s ago: executing program 3 (id=199): sendmsg$NL80211_CMD_SET_MPATH(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000840)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="01002dbd7000fedbdf251600000008000300", @ANYRES32=0x0, @ANYBLOB="f0b08a540a53d0630da7e44a37f9d2a5c7432e0537c685a0fcd58f617c2e4f5a5e4bc6c4aa744ef17159dd5230c7356f457f24687d1ac7a877a5f7fc66bcc3ef9739d618f234a950041d0d75d69bac2783beacde"], 0x28}, 0x1, 0x0, 0x0, 0x4044091}, 0x40) r0 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$inet6_opts(r0, 0x29, 0x40, &(0x7f00000007c0)=ANY=[@ANYBLOB="000a000000000fd60730000000000a0000000000000000000000000000000000000000000000000000000d00000000000000001000ef60fc4bd8ecc4e3200000000006004dee00000000000032acaace3269d47147"], 0xd0060) 1.738659438s ago: executing program 3 (id=200): syz_init_net_socket$nfc_llcp(0x27, 0x0, 0x1) r0 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x2) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000380)=@newsa={0xf0, 0x1a, 0x633, 0x0, 0x25dfdbfd, {{@in=@dev={0xac, 0x14, 0x14, 0x42}, @in6=@mcast1, 0x0, 0x4000, 0x4e23, 0x8001, 0x0, 0x20}, {@in=@local, 0x200, 0x32}, @in=@empty, {0x323, 0x0, 0x0, 0xfffffffffffffffd, 0x8, 0x92be}, {0x0, 0x40000, 0x0, 0x3}, {0xfffffffb, 0xfffffbff, 0xca09}, 0x70bd29, 0x3502, 0x2, 0x1, 0x0, 0x10}}, 0xf0}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r1, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000500)={0x28, 0x1e, 0x21, 0x0, 0x0, {0x7}, [@typed={0x5, 0x0, 0x0, 0x0, @str='\x00'}, @typed={0xa, 0x2, 0x0, 0x0, @str='w\xa9\xe2\x00\x00\x00'}]}, 0x28}, 0x1, 0x0, 0x0, 0x20040000}, 0x0) r2 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r2, &(0x7f0000000080)={0x2, 0x4e21, @multicast1}, 0x10) setsockopt$sock_int(r2, 0x1, 0x7, &(0x7f00000000c0)=0x1, 0x4) connect$inet(r2, &(0x7f0000000100)={0x2, 0x4e21, @local}, 0x10) sendto$inet(r2, &(0x7f0000000140)="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", 0xfffffffffffffea8, 0x4008807, 0x0, 0x0) getrandom(0x0, 0x0, 0x0) shutdown(r2, 0x1) ioctl$KVM_SET_GUEST_DEBUG_x86(r0, 0x4048ae9b, &(0x7f0000000000)={0x1d0002, 0x0, {[0x800, 0x5, 0x1911, 0x7, 0x17, 0x3, 0x1, 0x4e5c]}}) 1.738380718s ago: executing program 3 (id=201): r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=ANY=[@ANYBLOB="3c0000004900010000000000000000000a1c00000000000000000000140001800d2a79075827af5aa534d6815c2e93f10c0002"], 0x3c}}, 0x0) 1.722379549s ago: executing program 3 (id=202): mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./trace\x00', 0x1bf) mount(0x0, &(0x7f0000000380)='./trace\x00', &(0x7f00000003c0)='tracefs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000001700)='./trace/events/sched/sched_switch/trigger\x00', 0x121002, 0x0) write(r0, &(0x7f0000001740)='hist:keys=common_timestamp', 0x1a) (fail_nth: 29) 1.580101783s ago: executing program 3 (id=203): syz_usb_connect$uac3(0x5, 0xc1, &(0x7f00000000c0)={{0x12, 0x1, 0x110, 0x0, 0x0, 0x0, 0x8, 0x41e, 0x3000, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xaf, 0x3, 0x1, 0x9, 0x20, 0xc, {0x8, 0xb, 0x0, 0x1, 0x1, 0x0, 0x30, 0xf7}, {{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x30, 0x0, {{0xa, 0x24, 0x1, 0x1, 0x2e, 0x101003}, [@output_terminal={0x13, 0x24, 0x3, 0x3, 0x0, 0x0, 0x6, 0x0, 0x4, 0x8, 0x4, 0xa}, @extension_unit={0x11, 0x24, 0xa, 0x6, 0x2, [0x0, 0x173ea21786b5b7df, 0x3]}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x30, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x2b0, 0xa, 0x5, 0xf8, {0xa, 0x25, 0x25, 0xffffffff, 0x7, 0x7}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x30, 0x0, {[@format_type_ii_ext={0xa, 0x24, 0x2, 0x2, 0x4, 0x2, 0x0, 0xd}, @format_type_i_discrete={0xa, 0x24, 0x2, 0x1, 0x0, 0x2, 0xf9, 0xe, '%Q'}, @format_type_i_continuous={0x9, 0x24, 0x2, 0x1, 0xb, 0x3, 0xd6, 0x2, "", "f6"}]}, {{0x9, 0x5, 0x82, 0x9, 0x400, 0x9, 0x2, 0x21, {0xa, 0x25, 0x25, 0x4, 0x2}}}}}}}}]}}, 0x0) 493.048085ms ago: executing program 0 (id=208): madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc\x00', 0x4) mount(0x0, &(0x7f0000000040)='./proc\x00', &(0x7f0000000080)='proc\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./proc/thread-self/fail-nth\x00', 0x2, 0x10b) write(r0, &(0x7f0000000240)='7', 0x1) mlock(&(0x7f0000ffb000/0x4000)=nil, 0x4018) bind$unix(0xffffffffffffffff, &(0x7f00000002c0)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) mkdirat(0xffffffffffffff9c, 0x0, 0x9a) openat(0xffffffffffffff9c, &(0x7f0000000640)='./file0\x00', 0x40, 0x1) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f00000001c0)={{'fd', 0x3d, r1}, 0x2c, {'rootmode', 0x3d, 0xa000}}) 119.220266ms ago: executing program 0 (id=209): r0 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_mreqn(r0, 0x0, 0x23, &(0x7f0000000040)={@multicast2, @loopback}, 0x40) r1 = socket$netlink(0x10, 0x3, 0x0) writev(r1, &(0x7f00000000c0)=[{&(0x7f0000000100)="390000001300034700bb65e1c3e4ffff0100000001000000560000002500007a190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) setsockopt$inet_mreqsrc(r0, 0x0, 0x24, &(0x7f00000002c0)={@multicast2, @loopback, @empty}, 0xc) 118.872656ms ago: executing program 0 (id=210): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc(&(0x7f0000000340), 0xffffffffffffffff) sendmsg$TIPC_CMD_ENABLE_BEARER(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000400)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000000000100000000000000014100000018001700000021000000004574683a64"], 0x34}, 0x1, 0xf0ff}, 0x0) 106.288206ms ago: executing program 0 (id=211): open(&(0x7f0000000040)='./file0\x00', 0x108843, 0x190) (async) r0 = open(&(0x7f0000000040)='./file0\x00', 0x108843, 0x190) fcntl$setlease(r0, 0x400, 0x0) r1 = open(&(0x7f0000000080)='./file0\x00', 0x108843, 0x98) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x103000, 0x0) ioctl$KVM_CAP_X86_APIC_BUS_CYCLES_NS(r0, 0x4068aea3, &(0x7f00000000c0)={0xed, 0x0, 0x6}) ioctl$KVM_CHECK_EXTENSION(r2, 0xae03, 0xbd) (async) ioctl$KVM_CHECK_EXTENSION(r2, 0xae03, 0xbd) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) 106.177106ms ago: executing program 2 (id=212): r0 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r0, &(0x7f0000000100), 0x10) sendmsg$can_bcm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)=ANY=[@ANYBLOB="0500", @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x2710, @ANYBLOB="0300000001000000040000000003000047b46543"], 0x48}, 0x1, 0x8000000, 0x0, 0x20000004}, 0x1) 93.537467ms ago: executing program 2 (id=213): sendmsg$NL80211_CMD_SET_MPATH(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000840)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="01002dbd7000fedbdf251600000008000300", @ANYRES32=0x0, @ANYBLOB="f0b08a540a53d0630da7e44a37f9d2a5c7432e0537c685a0fcd58f617c2e4f5a5e4bc6c4aa744ef17159dd5230c7356f457f24687d1ac7a877a5f7fc66bcc3ef9739d618f234a950041d0d75d69bac2783beacde"], 0x28}, 0x1, 0x0, 0x0, 0x4044091}, 0x40) r0 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$inet6_opts(r0, 0x29, 0x40, &(0x7f00000007c0)=ANY=[@ANYBLOB="000a000000000fd60730000000000a0000000000000000000000000000000000000000000000000000000d00000000000000000001ef60fc4bd8ecc4e3200000000006004dee00000000000032acaace3269d47147"], 0xd0060) 77.935907ms ago: executing program 3 (id=214): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) keyctl$setperm(0x5, 0x0, 0x6203000) (async) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000480)={@private1, 0x40, 0x2, 0x0, 0x0, 0x0, 0x3}, 0x20) (async) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x101200, 0x0) dup(r0) (async) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) (async) ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x400) r3 = socket(0x10, 0x3, 0x0) sendto$inet6(r3, &(0x7f0000000300)="9000000018001f2fb9409b52ffff65580200be04020c060560020b0243000f00ffffff9e00c8388827a685a168d0bf47d32345653602648dcaaf6c26c291214549935ade4a460c20b6ec0cff3959547f500f58ba86c902000f1d012e02000280160012000a000000000000000000000000080000000eceb6b362bb944cf2e70100aba4183b003e5fa424ac4d31c4f7a1", 0x90, 0x0, 0x0, 0x0) (async) r4 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r2, r4, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000000c0)=[@text32={0x20, &(0x7f0000000100)="d8df0f23b3b9ce000000b807000000ba000000000f301b8154fea900c1210680320000c4e28ddc8dcd000000c182fd3f0000c8b950020000b801000400b9a6080000b800000100265d7aeabbc900bbc9000f30300f272d9d53bf0000c4b9e16dc30101220f01c3", 0xfffffffffffffdab}], 0x1, 0x14, 0x0, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) (async) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x1, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) (async) setns(0xc9, 0x0) (async) r7 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r7, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000400)=[{&(0x7f0000000440)=ANY=[@ANYBLOB="1c000000120021030000000000bc61682a00968008001d001d"], 0x1c}], 0x1}, 0x4) openat(0xffffffffffffff9c, &(0x7f00000004c0)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x42, 0x0) (async, rerun: 64) r8 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0) (rerun: 64) openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x40, 0x0) (async) openat2$dir(0xffffffffffffff9c, &(0x7f0000000540)='./file0/../file0\x00', &(0x7f00000002c0)={0x0, 0x2d}, 0xfffffffffffffe4a) (async, rerun: 64) ioctl$KVM_GET_MSRS_cpu(r8, 0xc008ae88, &(0x7f0000000200)={0x1, 0x0, [{0x1c4, 0x0, 0x8000000000000000}]}) (rerun: 64) mount$tmpfs(0x0, &(0x7f0000000040)='./cgroup\x00', &(0x7f0000000080), 0x10, &(0x7f00000001c0)={[{@nr_inodes={'nr_inodes', 0x3d, [0x50]}}]}) 27.153499ms ago: executing program 0 (id=215): r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=ANY=[@ANYBLOB="3c0000004900010000000000000000000a2000000000000000000000140001800d2a79075827af5aa534d6815c2e93f10c0002"], 0x3c}}, 0x0) 27.070339ms ago: executing program 2 (id=216): mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./trace\x00', 0x1bf) mount(0x0, &(0x7f0000000380)='./trace\x00', &(0x7f00000003c0)='tracefs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000001700)='./trace/events/sched/sched_switch/trigger\x00', 0x121002, 0x0) write(r0, &(0x7f0000001740)='hist:keys=common_timestamp', 0x1a) (fail_nth: 30) 0s ago: executing program 0 (id=217): move_mount(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0xffffffffffffff9c, &(0x7f0000000040)='\x00', 0x175) mkdirat(0xffffffffffffff9c, &(0x7f0000001680)='./dev\x00', 0x1ff) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000003c0), 0x40000, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae03, 0x79) mount(0x0, &(0x7f00000016c0)='./dev\x00', &(0x7f0000001700)='devtmpfs\x00', 0x2, 0x0) r1 = syz_clone(0x100000, 0x0, 0x0, 0x0, 0x0, 0x0) process_vm_writev(r1, &(0x7f0000000440)=[{&(0x7f0000000480)=""/168, 0xa8}], 0x1, &(0x7f0000000540)=[{&(0x7f0000000580)=""/76, 0x4c}], 0x1, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000001740)='./mnt\x00', 0x1ff) mount(&(0x7f0000001780)=@filename='./dev/sda1\x00', &(0x7f00000017c0)='./mnt\x00', &(0x7f0000001800)='ext4\x00', 0x8410, 0x0) chdir(&(0x7f0000001840)='./mnt\x00') openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='.\x00', 0x0, 0x0) fsetxattr$system_posix_acl(r2, &(0x7f0000000200)='system.posix_acl_default\x00', &(0x7f0000000240)={{}, {0x1, 0x1}, [], {0x4, 0x5}, [], {0x10, 0x6}, {0x20, 0x1}}, 0x24, 0x3) mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x181) mkdirat(0xffffffffffffff9c, &(0x7f00000002c0)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f0000000300)='./bus\x00', &(0x7f0000000340), 0x8, &(0x7f0000000380)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './cgroup'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]}) r3 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r3, 0x0) r4 = openat(r3, 0x0, 0x40002, 0x21) r5 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=ANY=[@ANYBLOB="3c0000004800010000000000000000000a00806e0800000000000000140001800d2a79075827af5aa534d6815c2e", @ANYRES32], 0x3c}}, 0x0) ioctl$MON_IOCQ_URB_LEN(r2, 0x9201) ioctl$FS_IOC_SET_ENCRYPTION_POLICY(r4, 0x800c6613, &(0x7f00000018c0)=@v1={0x0, @aes256, 0x2, @desc1}) kernel console output (not intermixed with test programs): syzkaller syzkaller login: [ 14.746212][ T36] kauditd_printk_skb: 31 callbacks suppressed [ 14.746230][ T36] audit: type=1400 audit(1792724043.550:59): avc: denied { transition } for pid=232 comm="sshd-session" path="/bin/sh" dev="sda1" ino=90 scontext=system_u:system_r:sshd_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 14.750799][ T36] audit: type=1400 audit(1792724043.550:60): avc: denied { noatsecure } for pid=232 comm="sshd-session" scontext=system_u:system_r:sshd_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 14.755292][ T36] audit: type=1400 audit(1792724043.560:61): avc: denied { write } for pid=232 comm="sh" path="pipe:[2828]" dev="pipefs" ino=2828 scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:sshd_t tclass=fifo_file permissive=1 [ 14.758593][ T36] audit: type=1400 audit(1792724043.560:62): avc: denied { rlimitinh } for pid=232 comm="sh" scontext=system_u:system_r:sshd_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 14.761450][ T36] audit: type=1400 audit(1792724043.560:63): avc: denied { siginh } for pid=232 comm="sh" scontext=system_u:system_r:sshd_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 Warning: Permanently added '10.128.0.136' (ED25519) to the list of known hosts. [ 23.983216][ T36] audit: type=1400 audit(1792724052.790:64): avc: denied { mounton } for pid=286 comm="syz-executor" path="/syzcgroup/unified" dev="sda1" ino=2023 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1 [ 23.986876][ T286] cgroup: Unknown subsys name 'net' [ 24.005898][ T36] audit: type=1400 audit(1792724052.790:65): avc: denied { mount } for pid=286 comm="syz-executor" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 24.033415][ T36] audit: type=1400 audit(1792724052.820:66): avc: denied { unmount } for pid=286 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 24.033832][ T286] cgroup: Unknown subsys name 'devices' [ 24.152936][ T286] cgroup: Unknown subsys name 'hugetlb' [ 24.158597][ T286] cgroup: Unknown subsys name 'rlimit' [ 24.274137][ T36] audit: type=1400 audit(1792724053.080:67): avc: denied { setattr } for pid=286 comm="syz-executor" name="raw-gadget" dev="devtmpfs" ino=190 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 24.297348][ T36] audit: type=1400 audit(1792724053.080:68): avc: denied { mounton } for pid=286 comm="syz-executor" path="/proc/sys/fs/binfmt_misc" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=dir permissive=1 [ 24.322354][ T36] audit: type=1400 audit(1792724053.080:69): avc: denied { mount } for pid=286 comm="syz-executor" name="/" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=filesystem permissive=1 [ 24.346747][ T288] SELinux: Context root:object_r:swapfile_t is not valid (left unmapped). Setting up swapspace version 1, size = 127995904 bytes [ 24.355590][ T36] audit: type=1400 audit(1792724053.160:70): avc: denied { relabelto } for pid=288 comm="mkswap" name="swap-file" dev="sda1" ino=2026 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 24.381289][ T36] audit: type=1400 audit(1792724053.160:71): avc: denied { write } for pid=288 comm="mkswap" path="/root/swap-file" dev="sda1" ino=2026 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 24.415867][ T36] audit: type=1400 audit(1792724053.220:72): avc: denied { read } for pid=286 comm="syz-executor" name="swap-file" dev="sda1" ino=2026 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 24.441631][ T36] audit: type=1400 audit(1792724053.220:73): avc: denied { open } for pid=286 comm="syz-executor" path="/root/swap-file" dev="sda1" ino=2026 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 24.443652][ T286] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 25.347001][ T293] bridge0: port 1(bridge_slave_0) entered blocking state [ 25.354107][ T293] bridge0: port 1(bridge_slave_0) entered disabled state [ 25.361451][ T293] bridge_slave_0: entered allmulticast mode [ 25.367862][ T293] bridge_slave_0: entered promiscuous mode [ 25.376288][ T293] bridge0: port 2(bridge_slave_1) entered blocking state [ 25.383417][ T293] bridge0: port 2(bridge_slave_1) entered disabled state [ 25.390620][ T293] bridge_slave_1: entered allmulticast mode [ 25.396914][ T293] bridge_slave_1: entered promiscuous mode [ 25.403185][ T294] bridge0: port 1(bridge_slave_0) entered blocking state [ 25.410254][ T294] bridge0: port 1(bridge_slave_0) entered disabled state [ 25.417418][ T294] bridge_slave_0: entered allmulticast mode [ 25.423827][ T294] bridge_slave_0: entered promiscuous mode [ 25.431487][ T294] bridge0: port 2(bridge_slave_1) entered blocking state [ 25.438592][ T294] bridge0: port 2(bridge_slave_1) entered disabled state [ 25.445747][ T294] bridge_slave_1: entered allmulticast mode [ 25.452116][ T294] bridge_slave_1: entered promiscuous mode [ 25.517092][ T295] bridge0: port 1(bridge_slave_0) entered blocking state [ 25.524220][ T295] bridge0: port 1(bridge_slave_0) entered disabled state [ 25.531483][ T295] bridge_slave_0: entered allmulticast mode [ 25.537738][ T295] bridge_slave_0: entered promiscuous mode [ 25.547150][ T295] bridge0: port 2(bridge_slave_1) entered blocking state [ 25.554370][ T295] bridge0: port 2(bridge_slave_1) entered disabled state [ 25.561524][ T295] bridge_slave_1: entered allmulticast mode [ 25.567805][ T295] bridge_slave_1: entered promiscuous mode [ 25.594276][ T296] bridge0: port 1(bridge_slave_0) entered blocking state [ 25.601401][ T296] bridge0: port 1(bridge_slave_0) entered disabled state [ 25.608511][ T296] bridge_slave_0: entered allmulticast mode [ 25.614911][ T296] bridge_slave_0: entered promiscuous mode [ 25.621567][ T296] bridge0: port 2(bridge_slave_1) entered blocking state [ 25.628645][ T296] bridge0: port 2(bridge_slave_1) entered disabled state [ 25.635789][ T296] bridge_slave_1: entered allmulticast mode [ 25.642142][ T296] bridge_slave_1: entered promiscuous mode [ 25.774658][ T294] bridge0: port 2(bridge_slave_1) entered blocking state [ 25.781772][ T294] bridge0: port 2(bridge_slave_1) entered forwarding state [ 25.789091][ T294] bridge0: port 1(bridge_slave_0) entered blocking state [ 25.796180][ T294] bridge0: port 1(bridge_slave_0) entered forwarding state [ 25.807162][ T295] bridge0: port 2(bridge_slave_1) entered blocking state [ 25.814246][ T295] bridge0: port 2(bridge_slave_1) entered forwarding state [ 25.821583][ T295] bridge0: port 1(bridge_slave_0) entered blocking state [ 25.828637][ T295] bridge0: port 1(bridge_slave_0) entered forwarding state [ 25.836951][ T293] bridge0: port 2(bridge_slave_1) entered blocking state [ 25.844032][ T293] bridge0: port 2(bridge_slave_1) entered forwarding state [ 25.851401][ T293] bridge0: port 1(bridge_slave_0) entered blocking state [ 25.858447][ T293] bridge0: port 1(bridge_slave_0) entered forwarding state [ 25.872492][ T296] bridge0: port 2(bridge_slave_1) entered blocking state [ 25.879588][ T296] bridge0: port 2(bridge_slave_1) entered forwarding state [ 25.886919][ T296] bridge0: port 1(bridge_slave_0) entered blocking state [ 25.894213][ T296] bridge0: port 1(bridge_slave_0) entered forwarding state [ 25.942033][ T46] bridge0: port 1(bridge_slave_0) entered disabled state [ 25.949396][ T46] bridge0: port 1(bridge_slave_0) entered disabled state [ 25.957047][ T46] bridge0: port 2(bridge_slave_1) entered disabled state [ 25.965098][ T46] bridge0: port 2(bridge_slave_1) entered disabled state [ 25.972374][ T46] bridge0: port 1(bridge_slave_0) entered disabled state [ 25.979572][ T46] bridge0: port 2(bridge_slave_1) entered disabled state [ 25.987049][ T46] bridge0: port 1(bridge_slave_0) entered disabled state [ 25.994382][ T46] bridge0: port 2(bridge_slave_1) entered disabled state [ 26.012516][ T46] bridge0: port 1(bridge_slave_0) entered blocking state [ 26.019601][ T46] bridge0: port 1(bridge_slave_0) entered forwarding state [ 26.027369][ T46] bridge0: port 2(bridge_slave_1) entered blocking state [ 26.034437][ T46] bridge0: port 2(bridge_slave_1) entered forwarding state [ 26.052987][ T46] bridge0: port 1(bridge_slave_0) entered blocking state [ 26.060057][ T46] bridge0: port 1(bridge_slave_0) entered forwarding state [ 26.067790][ T46] bridge0: port 2(bridge_slave_1) entered blocking state [ 26.074850][ T46] bridge0: port 2(bridge_slave_1) entered forwarding state [ 26.097905][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 26.105011][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 26.120003][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 26.127107][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 26.152353][ T293] veth0_vlan: entered promiscuous mode [ 26.159788][ T46] bridge0: port 1(bridge_slave_0) entered blocking state [ 26.166895][ T46] bridge0: port 1(bridge_slave_0) entered forwarding state [ 26.178375][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 26.185508][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 26.198483][ T296] veth0_vlan: entered promiscuous mode [ 26.220917][ T293] veth1_macvtap: entered promiscuous mode [ 26.229465][ T296] veth1_macvtap: entered promiscuous mode [ 26.264451][ T295] veth0_vlan: entered promiscuous mode [ 26.286422][ T294] veth0_vlan: entered promiscuous mode [ 26.309259][ T296] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 26.318701][ T295] veth1_macvtap: entered promiscuous mode [ 26.346142][ T294] veth1_macvtap: entered promiscuous mode [ 26.375528][ T317] netlink: 'syz.0.1': attribute type 4 has an invalid length. [ 26.441895][ T330] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 26.467449][ T333] netlink: 104 bytes leftover after parsing attributes in process `syz.1.8'. [ 26.486319][ T330] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 26.503893][ T336] FAULT_INJECTION: forcing a failure. [ 26.503893][ T336] name failslab, interval 1, probability 0, space 0, times 1 [ 26.526611][ T336] CPU: 0 UID: 0 PID: 336 Comm: syz.0.6 Not tainted syzkaller #0 ae7936ebab52aae609823c9494ba9ebab2c98923 [ 26.526652][ T336] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 26.526677][ T336] Call Trace: [ 26.526685][ T336] [ 26.526694][ T336] __dump_stack+0x21/0x30 [ 26.526737][ T336] dump_stack_lvl+0x140/0x1c0 [ 26.526774][ T336] ? __cfi_dump_stack_lvl+0x10/0x10 [ 26.526814][ T336] dump_stack+0x19/0x20 [ 26.526849][ T336] should_fail_ex+0x3c2/0x510 [ 26.526872][ T336] ? security_prepare_creds+0x66/0x260 [ 26.526908][ T336] should_failslab+0xac/0x100 [ 26.526932][ T336] __kmalloc_noprof+0x69/0x510 [ 26.526965][ T336] ? kasan_save_alloc_info+0x3a/0x50 [ 26.526996][ T336] ? security_prepare_creds+0x66/0x260 [ 26.527030][ T336] ? __kasan_slab_alloc+0x73/0x90 [ 26.527055][ T336] security_prepare_creds+0x66/0x260 [ 26.527090][ T336] prepare_creds+0x46d/0x6b0 [ 26.527121][ T336] __sys_setresuid+0x61d/0xd90 [ 26.527155][ T336] __x64_sys_setresuid+0x7e/0x90 [ 26.527189][ T336] x64_sys_call+0x2728/0x2ee0 [ 26.527214][ T336] do_syscall_64+0x57/0xf0 [ 26.527239][ T336] ? clear_bhb_loop+0x50/0xa0 [ 26.527272][ T336] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 26.527304][ T336] RIP: 0033:0x7f648dd9f559 [ 26.527331][ T336] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 26.527351][ T336] RSP: 002b:00007f648ebaa028 EFLAGS: 00000246 ORIG_RAX: 0000000000000075 [ 26.527385][ T336] RAX: ffffffffffffffda RBX: 00007f648e026090 RCX: 00007f648dd9f559 [ 26.527404][ T336] RDX: 0000000000000000 RSI: 000000000000ee01 RDI: 0000000000000000 [ 26.527419][ T336] RBP: 00007f648de36b20 R08: 0000000000000000 R09: 0000000000000000 [ 26.527434][ T336] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 26.527449][ T336] R13: 00007f648e026128 R14: 00007f648e026090 R15: 00007ffd13fa8ee8 [ 26.527470][ T336] [ 26.750441][ T340] input: syz0 as /devices/virtual/input/input4 [ 26.790808][ T345] netlink: 'syz.1.11': attribute type 4 has an invalid length. [ 26.801279][ T345] netlink: 'syz.1.11': attribute type 4 has an invalid length. [ 26.811193][ T345] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=345 comm=syz.1.11 [ 26.880815][ T10] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 27.045086][ T10] usb 3-1: config 0 interface 0 altsetting 8 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 27.056310][ T10] usb 3-1: config 0 interface 0 altsetting 8 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 27.069703][ T10] usb 3-1: config 0 interface 0 has no altsetting 0 [ 27.076628][ T10] usb 3-1: New USB device found, idVendor=0eef, idProduct=72c4, bcdDevice= 0.00 [ 27.086058][ T9] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 27.093687][ T10] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 27.103569][ T10] usb 3-1: config 0 descriptor?? [ 27.260731][ T9] usb 2-1: Using ep0 maxpacket: 8 [ 27.269231][ T9] usb 2-1: New USB device found, idVendor=041e, idProduct=3000, bcdDevice= 0.40 [ 27.287563][ T9] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 27.296340][ T9] usb 2-1: Product: syz [ 27.300563][ T9] usb 2-1: Manufacturer: syz [ 27.311666][ T9] usb 2-1: SerialNumber: syz [ 27.360499][ T349] overlayfs: failed to resolve './cgroup': -2 [ 27.401559][ T352] FAULT_INJECTION: forcing a failure. [ 27.401559][ T352] name failslab, interval 1, probability 0, space 0, times 0 [ 27.434559][ T352] CPU: 0 UID: 0 PID: 352 Comm: syz.0.13 Not tainted syzkaller #0 ae7936ebab52aae609823c9494ba9ebab2c98923 [ 27.434598][ T352] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 27.434613][ T352] Call Trace: [ 27.434620][ T352] [ 27.434628][ T352] __dump_stack+0x21/0x30 [ 27.434668][ T352] dump_stack_lvl+0x140/0x1c0 [ 27.434703][ T352] ? __cfi_dump_stack_lvl+0x10/0x10 [ 27.434737][ T352] ? __cfi_vfs_write+0x10/0x10 [ 27.434771][ T352] dump_stack+0x19/0x20 [ 27.434803][ T352] should_fail_ex+0x3c2/0x510 [ 27.434827][ T352] should_failslab+0xac/0x100 [ 27.434849][ T352] kmem_cache_alloc_noprof+0x42/0x410 [ 27.434891][ T352] ? ksys_write+0x1f3/0x260 [ 27.434924][ T352] ? getname_flags+0xcc/0x6b0 [ 27.434959][ T352] getname_flags+0xcc/0x6b0 [ 27.434992][ T352] ? __kasan_check_read+0x15/0x20 [ 27.435023][ T352] __x64_sys_mkdirat+0x7e/0xa0 [ 27.435050][ T352] x64_sys_call+0x2ba8/0x2ee0 [ 27.435074][ T352] do_syscall_64+0x57/0xf0 [ 27.435097][ T352] ? clear_bhb_loop+0x50/0xa0 [ 27.435128][ T352] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 27.435166][ T352] RIP: 0033:0x7f648dd9f559 [ 27.435185][ T352] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 27.435204][ T352] RSP: 002b:00007f648ebcb028 EFLAGS: 00000246 ORIG_RAX: 0000000000000102 [ 27.435228][ T352] RAX: ffffffffffffffda RBX: 00007f648e025fa0 RCX: 00007f648dd9f559 [ 27.435245][ T352] RDX: 0000000000000181 RSI: 0000200000000280 RDI: ffffffffffffff9c [ 27.435261][ T352] RBP: 00007f648ebcb090 R08: 0000000000000000 R09: 0000000000000000 [ 27.435275][ T352] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 27.435289][ T352] R13: 00007f648e026038 R14: 00007f648e025fa0 R15: 00007ffd13fa8ee8 [ 27.435308][ T352] [ 27.501782][ T355] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 27.540403][ T10] hid-multitouch 0003:0EEF:72C4.0001: hidraw0: USB HID v0.00 Device [HID 0eef:72c4] on usb-dummy_hcd.2-1/input0 [ 27.679414][ T352] overlayfs: failed to resolve './cgroup': -2 [ 27.682674][ T9] usb 2-1: Unsupported UAC3 BADD profile [ 27.693731][ T9] snd-usb-audio 2-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 27.711999][ T9] usb 2-1: USB disconnect, device number 2 [ 27.728448][ T357] udevd[357]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 27.780404][ T363] overlayfs: failed to resolve './cgroup': -2 [ 27.831859][ T383] FAULT_INJECTION: forcing a failure. [ 27.831859][ T383] name fail_page_alloc, interval 1, probability 0, space 0, times 1 [ 27.860809][ T383] CPU: 1 UID: 0 PID: 383 Comm: syz.3.18 Not tainted syzkaller #0 ae7936ebab52aae609823c9494ba9ebab2c98923 [ 27.860844][ T383] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 27.860858][ T383] Call Trace: [ 27.860865][ T383] [ 27.860874][ T383] __dump_stack+0x21/0x30 [ 27.860912][ T383] dump_stack_lvl+0x140/0x1c0 [ 27.860946][ T383] ? __cfi_dump_stack_lvl+0x10/0x10 [ 27.860983][ T383] ? __alloc_pages_noprof+0x7e0/0x7e0 [ 27.861011][ T383] dump_stack+0x19/0x20 [ 27.861043][ T383] should_fail_ex+0x3c2/0x510 [ 27.861066][ T383] should_fail_alloc_page+0xec/0x110 [ 27.861090][ T383] __alloc_pages_noprof+0x1c0/0x7e0 [ 27.861116][ T383] ? __cfi___alloc_pages_noprof+0x10/0x10 [ 27.861146][ T383] ? tracing_map_array_alloc+0x215/0x7b0 [ 27.861182][ T383] get_zeroed_page_noprof+0x1f/0x50 [ 27.861209][ T383] tracing_map_array_alloc+0x28d/0x7b0 [ 27.861241][ T383] ? tracing_map_create+0x9c/0x350 [ 27.861275][ T383] tracing_map_create+0x183/0x350 [ 27.861308][ T383] event_hist_trigger_parse+0x4c67/0x5620 [ 27.861330][ T383] ? stack_depot_save_flags+0x399/0x800 [ 27.861358][ T383] ? __cfi_event_hist_trigger_parse+0x10/0x10 [ 27.861387][ T383] ? __kasan_check_write+0x18/0x20 [ 27.861417][ T383] ? mutex_lock+0x97/0x1d0 [ 27.861443][ T383] ? __cfi_mutex_lock+0x10/0x10 [ 27.861470][ T383] ? check_stack_object+0x81/0x150 [ 27.861501][ T383] ? __check_object_size+0x54c/0x870 [ 27.861534][ T383] trigger_process_regex+0x1e3/0x280 [ 27.861559][ T383] ? __cfi_trigger_process_regex+0x10/0x10 [ 27.861584][ T383] ? __kasan_check_write+0x18/0x20 [ 27.861615][ T383] ? strim+0x190/0x1d0 [ 27.861645][ T383] event_trigger_write+0x142/0x1e0 [ 27.861670][ T383] ? __cfi_event_trigger_write+0x10/0x10 [ 27.861694][ T383] vfs_write+0x3c4/0xfd0 [ 27.861727][ T383] ? __cfi_vfs_write+0x10/0x10 [ 27.861758][ T383] ? __kasan_check_write+0x18/0x20 [ 27.861788][ T383] ? mutex_lock+0x97/0x1d0 [ 27.861832][ T383] ? __cfi_mutex_lock+0x10/0x10 [ 27.861863][ T383] ksys_write+0x145/0x260 [ 27.861895][ T383] ? __cfi_ksys_write+0x10/0x10 [ 27.861927][ T383] ? __kasan_check_read+0x15/0x20 [ 27.861958][ T383] __x64_sys_write+0x7f/0x90 [ 27.861990][ T383] x64_sys_call+0x271c/0x2ee0 [ 27.862014][ T383] do_syscall_64+0x57/0xf0 [ 27.862037][ T383] ? clear_bhb_loop+0x50/0xa0 [ 27.862068][ T383] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 27.862097][ T383] RIP: 0033:0x7f7864b9f559 [ 27.862117][ T383] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 27.862135][ T383] RSP: 002b:00007f7865a4a028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 27.862160][ T383] RAX: ffffffffffffffda RBX: 00007f7864e25fa0 RCX: 00007f7864b9f559 [ 27.862177][ T383] RDX: 000000000000001a RSI: 0000200000001740 RDI: 0000000000000003 [ 27.862192][ T383] RBP: 00007f7865a4a090 R08: 0000000000000000 R09: 0000000000000000 [ 27.862206][ T383] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 27.862219][ T383] R13: 00007f7864e26038 R14: 00007f7864e25fa0 R15: 00007ffeb5223198 [ 27.862238][ T383] [ 28.257794][ T395] rust_binder: 392:395 BC_FREEZE_NOTIFICATION_DONE 000000007ffffffe not found [ 28.268665][ T397] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 28.282908][ T395] rust_binder: Write failure EINVAL in pid:15 [ 28.300060][ T10] rust_binder: 392: undelivered freeze notification, 0000000000000001 [ 28.402159][ T406] netlink: 'syz.1.24': attribute type 4 has an invalid length. [ 28.509405][ T412] overlayfs: failed to resolve './cgroup': -2 [ 28.546058][ T417] netlink: 104 bytes leftover after parsing attributes in process `syz.1.28'. [ 28.601286][ T419] netlink: 'syz.0.29': attribute type 4 has an invalid length. [ 28.624362][ T419] netlink: 'syz.0.29': attribute type 4 has an invalid length. [ 28.642695][ T312] kernel read not supported for file /kmsg (pid: 312 comm: kworker/1:3) [ 28.703690][ T426] overlayfs: failed to resolve './cgroup': -2 [ 28.760710][ T10] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 28.870214][ T435] overlayfs: failed to resolve './cgroup': -2 [ 28.880908][ T313] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 28.922454][ T10] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 28.933071][ T10] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 28.947502][ T10] usb 4-1: config 1 has no interface number 0 [ 28.958109][ T10] usb 4-1: config 1 interface 1 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 28.982648][ T10] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 28.992013][ T10] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 29.002529][ T10] usb 4-1: Product: syz [ 29.009000][ T10] usb 4-1: Manufacturer: syz [ 29.016970][ T10] usb 4-1: SerialNumber: syz [ 29.028769][ T10] usb 4-1: selecting invalid altsetting 1 [ 29.040026][ T438] FAULT_INJECTION: forcing a failure. [ 29.040026][ T438] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 29.070773][ T438] CPU: 1 UID: 0 PID: 438 Comm: syz.1.37 Not tainted syzkaller #0 ae7936ebab52aae609823c9494ba9ebab2c98923 [ 29.070810][ T438] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 29.070824][ T438] Call Trace: [ 29.070831][ T438] [ 29.070839][ T438] __dump_stack+0x21/0x30 [ 29.070876][ T438] dump_stack_lvl+0x140/0x1c0 [ 29.070909][ T438] ? __cfi_dump_stack_lvl+0x10/0x10 [ 29.070945][ T438] dump_stack+0x19/0x20 [ 29.070976][ T438] should_fail_ex+0x3c2/0x510 [ 29.071007][ T438] should_fail+0xf/0x20 [ 29.071027][ T438] should_fail_usercopy+0x1e/0x30 [ 29.071051][ T438] strncpy_from_user+0x29/0x280 [ 29.071073][ T438] getname_flags+0x106/0x6b0 [ 29.071106][ T438] ? __kasan_check_read+0x15/0x20 [ 29.071138][ T438] __x64_sys_mkdirat+0x7e/0xa0 [ 29.071164][ T438] x64_sys_call+0x2ba8/0x2ee0 [ 29.071186][ T438] do_syscall_64+0x57/0xf0 [ 29.071209][ T438] ? clear_bhb_loop+0x50/0xa0 [ 29.071238][ T438] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 29.071267][ T438] RIP: 0033:0x7f0d5919f559 [ 29.071286][ T438] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 29.071304][ T438] RSP: 002b:00007f0d5a04c028 EFLAGS: 00000246 ORIG_RAX: 0000000000000102 [ 29.071329][ T438] RAX: ffffffffffffffda RBX: 00007f0d59425fa0 RCX: 00007f0d5919f559 [ 29.071346][ T438] RDX: 0000000000000181 RSI: 0000200000000280 RDI: ffffffffffffff9c [ 29.071362][ T438] RBP: 00007f0d5a04c090 R08: 0000000000000000 R09: 0000000000000000 [ 29.071376][ T438] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 29.071390][ T438] R13: 00007f0d59426038 R14: 00007f0d59425fa0 R15: 00007fff40f0f658 [ 29.071410][ T438] [ 29.071697][ T438] overlayfs: failed to resolve './cgroup': -2 [ 29.231574][ T10] cdc_ncm 4-1:1.1: bind() failure [ 29.250809][ T313] usb 1-1: Using ep0 maxpacket: 8 [ 29.266054][ T313] usb 1-1: New USB device found, idVendor=041e, idProduct=3000, bcdDevice= 0.40 [ 29.279831][ T313] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 29.287060][ T10] usb 4-1: USB disconnect, device number 2 [ 29.289182][ T313] usb 1-1: Product: syz [ 29.310773][ T313] usb 1-1: Manufacturer: syz [ 29.315498][ T313] usb 1-1: SerialNumber: syz [ 29.456157][ T36] kauditd_printk_skb: 87 callbacks suppressed [ 29.456175][ T36] audit: type=1400 audit(1792724058.260:161): avc: denied { mount } for pid=444 comm="syz.2.39" name="/" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=filesystem permissive=1 [ 29.484945][ T9] usb 3-1: USB disconnect, device number 2 [ 29.485076][ T445] FAULT_INJECTION: forcing a failure. [ 29.485076][ T445] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 29.521235][ T445] CPU: 1 UID: 0 PID: 445 Comm: syz.2.39 Not tainted syzkaller #0 ae7936ebab52aae609823c9494ba9ebab2c98923 [ 29.521273][ T445] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 29.521288][ T445] Call Trace: [ 29.521295][ T445] [ 29.521304][ T445] __dump_stack+0x21/0x30 [ 29.521346][ T445] dump_stack_lvl+0x140/0x1c0 [ 29.521380][ T445] ? __cfi_dump_stack_lvl+0x10/0x10 [ 29.521415][ T445] ? __alloc_pages_noprof+0x7e0/0x7e0 [ 29.521442][ T445] dump_stack+0x19/0x20 [ 29.521475][ T445] should_fail_ex+0x3c2/0x510 [ 29.521498][ T445] should_fail_alloc_page+0xec/0x110 [ 29.521521][ T445] __alloc_pages_noprof+0x1c0/0x7e0 [ 29.521549][ T445] ? __cfi___alloc_pages_noprof+0x10/0x10 [ 29.521579][ T445] ? tracing_map_array_alloc+0x215/0x7b0 [ 29.521616][ T445] get_zeroed_page_noprof+0x1f/0x50 [ 29.521644][ T445] tracing_map_array_alloc+0x28d/0x7b0 [ 29.521678][ T445] ? tracing_map_create+0x9c/0x350 [ 29.521712][ T445] tracing_map_create+0x183/0x350 [ 29.521746][ T445] event_hist_trigger_parse+0x4c67/0x5620 [ 29.521771][ T445] ? stack_depot_save_flags+0x38/0x800 [ 29.521800][ T445] ? __cfi_event_hist_trigger_parse+0x10/0x10 [ 29.521828][ T445] ? __kasan_check_write+0x18/0x20 [ 29.521858][ T445] ? mutex_lock+0x97/0x1d0 [ 29.521886][ T445] ? __cfi_mutex_lock+0x10/0x10 [ 29.521913][ T445] ? check_stack_object+0x81/0x150 [ 29.521954][ T445] ? __check_object_size+0x54c/0x870 [ 29.521985][ T445] trigger_process_regex+0x1e3/0x280 [ 29.522010][ T445] ? __cfi_trigger_process_regex+0x10/0x10 [ 29.522033][ T445] ? __kasan_check_write+0x18/0x20 [ 29.522064][ T445] ? strim+0x190/0x1d0 [ 29.522094][ T445] event_trigger_write+0x142/0x1e0 [ 29.522118][ T445] ? __cfi_event_trigger_write+0x10/0x10 [ 29.522143][ T445] vfs_write+0x3c4/0xfd0 [ 29.522176][ T445] ? __cfi_vfs_write+0x10/0x10 [ 29.522207][ T445] ? __kasan_check_write+0x18/0x20 [ 29.522236][ T445] ? mutex_lock+0x97/0x1d0 [ 29.522264][ T445] ? __cfi_mutex_lock+0x10/0x10 [ 29.522295][ T445] ksys_write+0x145/0x260 [ 29.522327][ T445] ? __cfi_ksys_write+0x10/0x10 [ 29.522360][ T445] ? __kasan_check_read+0x15/0x20 [ 29.522390][ T445] __x64_sys_write+0x7f/0x90 [ 29.522422][ T445] x64_sys_call+0x271c/0x2ee0 [ 29.522446][ T445] do_syscall_64+0x57/0xf0 [ 29.522468][ T445] ? clear_bhb_loop+0x50/0xa0 [ 29.522499][ T445] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 29.522529][ T445] RIP: 0033:0x7ff5b239f559 [ 29.522549][ T445] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 29.522567][ T445] RSP: 002b:00007ff5b0df7028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 29.522597][ T445] RAX: ffffffffffffffda RBX: 00007ff5b2625fa0 RCX: 00007ff5b239f559 [ 29.522615][ T445] RDX: 000000000000001a RSI: 0000200000001740 RDI: 0000000000000003 [ 29.522629][ T445] RBP: 00007ff5b0df7090 R08: 0000000000000000 R09: 0000000000000000 [ 29.522644][ T445] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 29.522657][ T445] R13: 00007ff5b2626038 R14: 00007ff5b2625fa0 R15: 00007fff19995f78 [ 29.522677][ T445] [ 29.633061][ T347] usb 2-1: new full-speed USB device number 3 using dummy_hcd [ 29.649997][ T313] usb 1-1: Unsupported UAC3 BADD profile [ 29.663546][ T36] audit: type=1400 audit(1792724058.440:162): avc: denied { unmount } for pid=294 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=filesystem permissive=1 [ 29.795641][ T313] snd-usb-audio 1-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 29.941368][ T313] usb 1-1: USB disconnect, device number 2 [ 29.957568][ T356] udevd[356]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 29.981754][ T347] usb 2-1: unable to get BOS descriptor or descriptor too short [ 29.994035][ T36] audit: type=1400 audit(1792724058.800:163): avc: denied { read write } for pid=451 comm="syz.2.41" name="fuse" dev="devtmpfs" ino=23 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fuse_device_t tclass=chr_file permissive=1 [ 30.020729][ T347] usb 2-1: not running at top speed; connect to a high speed hub [ 30.028695][ T36] audit: type=1400 audit(1792724058.800:164): avc: denied { open } for pid=451 comm="syz.2.41" path="/dev/fuse" dev="devtmpfs" ino=23 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fuse_device_t tclass=chr_file permissive=1 [ 30.053555][ T347] usb 2-1: config 4 has an invalid interface number: 142 but max is 1 [ 30.061885][ T347] usb 2-1: config 4 has an invalid descriptor of length 56, skipping remainder of the config [ 30.081132][ T347] usb 2-1: config 4 has 1 interface, different from the descriptor's value: 2 [ 30.090162][ T347] usb 2-1: config 4 has no interface number 0 [ 30.100285][ T347] usb 2-1: config 4 interface 142 altsetting 17 has an endpoint descriptor with address 0xF5, changing to 0x85 [ 30.120725][ T347] usb 2-1: config 4 interface 142 has no altsetting 0 [ 30.129171][ T347] usb 2-1: New USB device found, idVendor=0ac8, idProduct=0328, bcdDevice=64.18 [ 30.148570][ T347] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 30.156676][ T347] usb 2-1: Product: syz [ 30.161289][ T347] usb 2-1: Manufacturer: syz [ 30.165941][ T347] usb 2-1: SerialNumber: syz [ 30.175972][ T36] audit: type=1400 audit(1792724058.980:165): avc: denied { unmount } for pid=451 comm="syz.2.41" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=filesystem permissive=1 [ 30.260697][ T312] usb 4-1: new low-speed USB device number 3 using dummy_hcd [ 30.331364][ T460] overlayfs: failed to resolve './cgroup': -2 [ 30.368956][ T463] netlink: 'syz.0.46': attribute type 4 has an invalid length. [ 30.390702][ T312] usb 4-1: device descriptor read/64, error -71 [ 30.419622][ T347] usb 2-1: USB disconnect, device number 3 [ 30.451269][ T468] netlink: 104 bytes leftover after parsing attributes in process `syz.2.49'. [ 30.471048][ T469] netlink: 72 bytes leftover after parsing attributes in process `syz.0.48'. [ 30.550417][ T36] audit: type=1400 audit(1792724059.350:166): avc: denied { write } for pid=472 comm="syz.2.51" name="001" dev="devtmpfs" ino=98 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 30.603752][ T36] audit: type=1400 audit(1792724059.410:167): avc: denied { unlink } for pid=472 comm="syz.2.51" name="#1" dev="tmpfs" ino=57 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 30.634032][ T36] audit: type=1400 audit(1792724059.410:168): avc: denied { mount } for pid=472 comm="syz.2.51" name="/" dev="overlay" ino=53 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 30.656214][ T312] usb 4-1: device descriptor read/64, error -71 [ 30.681554][ T36] audit: type=1400 audit(1792724059.490:169): avc: denied { unmount } for pid=294 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 30.742565][ T476] overlayfs: failed to resolve './cgroup': -2 [ 30.790841][ T479] netlink: 'syz.0.53': attribute type 4 has an invalid length. [ 30.810966][ T479] netlink: 'syz.0.53': attribute type 4 has an invalid length. [ 30.844728][ T482] overlayfs: failed to resolve './cgroup': -2 [ 30.900749][ T312] usb 4-1: new low-speed USB device number 4 using dummy_hcd [ 30.934380][ T491] FAULT_INJECTION: forcing a failure. [ 30.934380][ T491] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 30.947630][ T491] CPU: 1 UID: 0 PID: 491 Comm: syz.2.58 Not tainted syzkaller #0 ae7936ebab52aae609823c9494ba9ebab2c98923 [ 30.947664][ T491] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 30.947679][ T491] Call Trace: [ 30.947686][ T491] [ 30.947695][ T491] __dump_stack+0x21/0x30 [ 30.947733][ T491] dump_stack_lvl+0x140/0x1c0 [ 30.947767][ T491] ? __cfi_dump_stack_lvl+0x10/0x10 [ 30.947802][ T491] ? check_stack_object+0x138/0x150 [ 30.947835][ T491] dump_stack+0x19/0x20 [ 30.947868][ T491] should_fail_ex+0x3c2/0x510 [ 30.947901][ T491] should_fail+0xf/0x20 [ 30.947922][ T491] should_fail_usercopy+0x1e/0x30 [ 30.947946][ T491] _copy_to_user+0x24/0xa0 [ 30.947973][ T491] simple_read_from_buffer+0xed/0x160 [ 30.948002][ T491] proc_fail_nth_read+0x1aa/0x220 [ 30.948030][ T491] ? __cfi_proc_fail_nth_read+0x10/0x10 [ 30.948059][ T491] ? bpf_lsm_file_permission+0xd/0x20 [ 30.948082][ T491] ? __cfi_proc_fail_nth_read+0x10/0x10 [ 30.948109][ T491] vfs_read+0x28b/0xc70 [ 30.948141][ T491] ? __cfi_vfs_read+0x10/0x10 [ 30.948172][ T491] ? __kasan_check_write+0x18/0x20 [ 30.948203][ T491] ? mutex_lock+0x97/0x1d0 [ 30.948231][ T491] ? __cfi_mutex_lock+0x10/0x10 [ 30.948263][ T491] ksys_read+0x145/0x260 [ 30.948294][ T491] ? __cfi_ksys_read+0x10/0x10 [ 30.948325][ T491] ? __kasan_check_write+0x18/0x20 [ 30.948356][ T491] ? __kasan_check_read+0x15/0x20 [ 30.948387][ T491] __x64_sys_read+0x7f/0x90 [ 30.948419][ T491] x64_sys_call+0x2638/0x2ee0 [ 30.948442][ T491] do_syscall_64+0x57/0xf0 [ 30.948464][ T491] ? clear_bhb_loop+0x50/0xa0 [ 30.948495][ T491] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 30.948525][ T491] RIP: 0033:0x7ff5b235fd8e [ 30.948544][ T491] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 30.948562][ T491] RSP: 002b:00007ff5b0df6fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 30.948587][ T491] RAX: ffffffffffffffda RBX: 00007ff5b0df76c0 RCX: 00007ff5b235fd8e [ 30.948604][ T491] RDX: 000000000000000f RSI: 00007ff5b0df70a0 RDI: 0000000000000003 [ 30.948619][ T491] RBP: 00007ff5b0df7090 R08: 0000000000000000 R09: 0000000000000000 [ 30.948633][ T491] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 30.948646][ T491] R13: 00007ff5b2626038 R14: 00007ff5b2625fa0 R15: 00007fff19995f78 [ 30.948666][ T491] [ 31.070859][ T347] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 31.202813][ T36] audit: type=1400 audit(1792724060.010:170): avc: denied { mount } for pid=493 comm="syz.1.59" name="/" dev="ramfs" ino=4775 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ramfs_t tclass=filesystem permissive=1 [ 31.225483][ T312] usb 4-1: device descriptor read/64, error -71 [ 31.287322][ T502] FAULT_INJECTION: forcing a failure. [ 31.287322][ T502] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 31.300871][ T502] CPU: 0 UID: 0 PID: 502 Comm: syz.1.61 Not tainted syzkaller #0 ae7936ebab52aae609823c9494ba9ebab2c98923 [ 31.300907][ T502] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 31.300922][ T502] Call Trace: [ 31.300929][ T502] [ 31.300937][ T502] __dump_stack+0x21/0x30 [ 31.300976][ T502] dump_stack_lvl+0x140/0x1c0 [ 31.301010][ T502] ? __cfi_dump_stack_lvl+0x10/0x10 [ 31.301045][ T502] ? __alloc_pages_noprof+0x7e0/0x7e0 [ 31.301075][ T502] dump_stack+0x19/0x20 [ 31.301108][ T502] should_fail_ex+0x3c2/0x510 [ 31.301131][ T502] should_fail_alloc_page+0xec/0x110 [ 31.301154][ T502] __alloc_pages_noprof+0x1c0/0x7e0 [ 31.301182][ T502] ? __cfi___alloc_pages_noprof+0x10/0x10 [ 31.301213][ T502] ? tracing_map_array_alloc+0x215/0x7b0 [ 31.301249][ T502] get_zeroed_page_noprof+0x1f/0x50 [ 31.301278][ T502] tracing_map_array_alloc+0x28d/0x7b0 [ 31.301312][ T502] ? tracing_map_create+0x9c/0x350 [ 31.301347][ T502] tracing_map_create+0x183/0x350 [ 31.301391][ T502] event_hist_trigger_parse+0x4c67/0x5620 [ 31.301415][ T502] ? stack_depot_save_flags+0x38/0x800 [ 31.301445][ T502] ? __cfi_event_hist_trigger_parse+0x10/0x10 [ 31.301474][ T502] ? __kasan_check_write+0x18/0x20 [ 31.301505][ T502] ? mutex_lock+0x97/0x1d0 [ 31.301533][ T502] ? __cfi_mutex_lock+0x10/0x10 [ 31.301561][ T502] ? check_stack_object+0x81/0x150 [ 31.301594][ T502] ? __check_object_size+0x54c/0x870 [ 31.301626][ T502] trigger_process_regex+0x1e3/0x280 [ 31.301652][ T502] ? __cfi_trigger_process_regex+0x10/0x10 [ 31.301676][ T502] ? __kasan_check_write+0x18/0x20 [ 31.301708][ T502] ? strim+0x190/0x1d0 [ 31.301738][ T502] event_trigger_write+0x142/0x1e0 [ 31.301763][ T502] ? __cfi_event_trigger_write+0x10/0x10 [ 31.301788][ T502] vfs_write+0x3c4/0xfd0 [ 31.301821][ T502] ? __cfi_vfs_write+0x10/0x10 [ 31.301852][ T502] ? __kasan_check_write+0x18/0x20 [ 31.301883][ T502] ? mutex_lock+0x97/0x1d0 [ 31.301910][ T502] ? __cfi_mutex_lock+0x10/0x10 [ 31.301941][ T502] ksys_write+0x145/0x260 [ 31.301974][ T502] ? __cfi_ksys_write+0x10/0x10 [ 31.302006][ T502] ? __kasan_check_read+0x15/0x20 [ 31.302037][ T502] __x64_sys_write+0x7f/0x90 [ 31.302070][ T502] x64_sys_call+0x271c/0x2ee0 [ 31.302093][ T502] do_syscall_64+0x57/0xf0 [ 31.302115][ T502] ? clear_bhb_loop+0x50/0xa0 [ 31.302146][ T502] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 31.302176][ T502] RIP: 0033:0x7f0d5919f559 [ 31.302195][ T502] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 31.302213][ T502] RSP: 002b:00007f0d5a04c028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 31.302237][ T502] RAX: ffffffffffffffda RBX: 00007f0d59425fa0 RCX: 00007f0d5919f559 [ 31.302255][ T502] RDX: 000000000000001a RSI: 0000200000001740 RDI: 0000000000000003 [ 31.302270][ T502] RBP: 00007f0d5a04c090 R08: 0000000000000000 R09: 0000000000000000 [ 31.302284][ T502] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 31.302298][ T502] R13: 00007f0d59426038 R14: 00007f0d59425fa0 R15: 00007fff40f0f658 [ 31.302318][ T502] [ 31.562756][ T312] usb 4-1: device descriptor read/64, error -71 [ 31.647942][ T509] overlayfs: failed to resolve './cgroup': -2 [ 31.690800][ T347] usb 1-1: Using ep0 maxpacket: 8 [ 31.698398][ T347] usb 1-1: New USB device found, idVendor=041e, idProduct=3000, bcdDevice= 0.40 [ 31.707537][ T347] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 31.715593][ T347] usb 1-1: Product: syz [ 31.719784][ T347] usb 1-1: Manufacturer: syz [ 31.724447][ T347] usb 1-1: SerialNumber: syz [ 31.751162][ T312] usb usb4-port1: attempt power cycle [ 31.878859][ T521] netlink: 'syz.1.68': attribute type 4 has an invalid length. [ 31.931769][ T528] netlink: 104 bytes leftover after parsing attributes in process `syz.1.71'. [ 31.945994][ T347] usb 1-1: Unsupported UAC3 BADD profile [ 31.957622][ T347] snd-usb-audio 1-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 31.975345][ T356] udevd[356]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 31.993346][ T347] usb 1-1: USB disconnect, device number 3 [ 32.016044][ T531] overlayfs: failed to resolve './cgroup': -2 [ 32.052889][ T535] Zero length message leads to an empty skb [ 32.101218][ T312] usb 4-1: new low-speed USB device number 5 using dummy_hcd [ 32.144829][ T312] usb 4-1: device descriptor read/8, error -71 [ 32.210810][ T31] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 32.286007][ T312] usb 4-1: device descriptor read/8, error -71 [ 32.309406][ T549] FAULT_INJECTION: forcing a failure. [ 32.309406][ T549] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 32.330679][ T549] CPU: 0 UID: 0 PID: 549 Comm: syz.1.78 Not tainted syzkaller #0 ae7936ebab52aae609823c9494ba9ebab2c98923 [ 32.330715][ T549] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 32.330730][ T549] Call Trace: [ 32.330737][ T549] [ 32.330745][ T549] __dump_stack+0x21/0x30 [ 32.330786][ T549] dump_stack_lvl+0x140/0x1c0 [ 32.330820][ T549] ? __cfi_dump_stack_lvl+0x10/0x10 [ 32.330855][ T549] ? __alloc_pages_noprof+0x7e0/0x7e0 [ 32.330884][ T549] dump_stack+0x19/0x20 [ 32.330916][ T549] should_fail_ex+0x3c2/0x510 [ 32.330939][ T549] should_fail_alloc_page+0xec/0x110 [ 32.330962][ T549] __alloc_pages_noprof+0x1c0/0x7e0 [ 32.330987][ T549] ? __cfi___alloc_pages_noprof+0x10/0x10 [ 32.331016][ T549] ? tracing_map_array_alloc+0x215/0x7b0 [ 32.331051][ T549] get_zeroed_page_noprof+0x1f/0x50 [ 32.331079][ T549] tracing_map_array_alloc+0x28d/0x7b0 [ 32.331113][ T549] ? tracing_map_create+0x9c/0x350 [ 32.331148][ T549] tracing_map_create+0x183/0x350 [ 32.331191][ T549] event_hist_trigger_parse+0x4c67/0x5620 [ 32.331215][ T549] ? stack_depot_save_flags+0x38/0x800 [ 32.331244][ T549] ? __cfi_event_hist_trigger_parse+0x10/0x10 [ 32.331272][ T549] ? __kasan_check_write+0x18/0x20 [ 32.331301][ T549] ? mutex_lock+0x97/0x1d0 [ 32.331329][ T549] ? __cfi_mutex_lock+0x10/0x10 [ 32.331357][ T549] ? check_stack_object+0x81/0x150 [ 32.331389][ T549] ? __check_object_size+0x54c/0x870 [ 32.331422][ T549] trigger_process_regex+0x1e3/0x280 [ 32.331447][ T549] ? __cfi_trigger_process_regex+0x10/0x10 [ 32.331472][ T549] ? __kasan_check_write+0x18/0x20 [ 32.331502][ T549] ? strim+0x190/0x1d0 [ 32.331531][ T549] event_trigger_write+0x142/0x1e0 [ 32.331555][ T549] ? __cfi_event_trigger_write+0x10/0x10 [ 32.331579][ T549] vfs_write+0x3c4/0xfd0 [ 32.331612][ T549] ? __cfi_vfs_write+0x10/0x10 [ 32.331643][ T549] ? __kasan_check_write+0x18/0x20 [ 32.331673][ T549] ? mutex_lock+0x97/0x1d0 [ 32.331701][ T549] ? __cfi_mutex_lock+0x10/0x10 [ 32.331732][ T549] ksys_write+0x145/0x260 [ 32.331764][ T549] ? __cfi_ksys_write+0x10/0x10 [ 32.331795][ T549] ? __kasan_check_read+0x15/0x20 [ 32.331825][ T549] __x64_sys_write+0x7f/0x90 [ 32.331856][ T549] x64_sys_call+0x271c/0x2ee0 [ 32.331879][ T549] do_syscall_64+0x57/0xf0 [ 32.331901][ T549] ? clear_bhb_loop+0x50/0xa0 [ 32.331932][ T549] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 32.331962][ T549] RIP: 0033:0x7f0d5919f559 [ 32.331981][ T549] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 32.332000][ T549] RSP: 002b:00007f0d5a04c028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 32.332024][ T549] RAX: ffffffffffffffda RBX: 00007f0d59425fa0 RCX: 00007f0d5919f559 [ 32.332041][ T549] RDX: 000000000000001a RSI: 0000200000001740 RDI: 0000000000000003 [ 32.332056][ T549] RBP: 00007f0d5a04c090 R08: 0000000000000000 R09: 0000000000000000 [ 32.332070][ T549] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 32.332084][ T549] R13: 00007f0d59426038 R14: 00007f0d59425fa0 R15: 00007fff40f0f658 [ 32.332103][ T549] [ 32.404051][ T31] usb 3-1: Using ep0 maxpacket: 16 [ 32.711736][ T31] usb 3-1: unable to get BOS descriptor or descriptor too short [ 32.720203][ T31] usb 3-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 193, changing to 7 [ 32.732782][ T31] usb 3-1: New USB device found, idVendor=18d1, idProduct=2d04, bcdDevice= 0.40 [ 32.745773][ T31] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 32.753896][ T312] usb 4-1: new low-speed USB device number 6 using dummy_hcd [ 32.770706][ T31] usb 3-1: Product: syz [ 32.774933][ T31] usb 3-1: Manufacturer: syz [ 32.779581][ T31] usb 3-1: SerialNumber: syz [ 32.785275][ T312] usb 4-1: device descriptor read/8, error -71 [ 32.822190][ T556] overlayfs: failed to resolve './cgroup': -2 [ 32.931830][ T312] usb 4-1: device descriptor read/8, error -71 [ 33.040914][ T312] usb usb4-port1: unable to enumerate USB device [ 33.140035][ T575] netlink: 'syz.3.87': attribute type 4 has an invalid length. [ 33.468307][ T312] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 33.481363][ T578] netlink: 'syz.0.88': attribute type 4 has an invalid length. [ 33.524206][ T582] overlayfs: failed to resolve './cgroup': -2 [ 33.566242][ T585] syzkaller0: entered promiscuous mode [ 33.571842][ T585] syzkaller0: entered allmulticast mode [ 33.615201][ T585] fuse: Bad value for 'user_id' [ 33.620213][ T585] fuse: Bad value for 'user_id' [ 33.625202][ T312] usb 4-1: Using ep0 maxpacket: 8 [ 33.633097][ T312] usb 4-1: New USB device found, idVendor=041e, idProduct=3000, bcdDevice= 0.40 [ 33.642277][ T312] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 33.650299][ T312] usb 4-1: Product: syz [ 33.654555][ T312] usb 4-1: Manufacturer: syz [ 33.659179][ T312] usb 4-1: SerialNumber: syz [ 33.753697][ T587] netlink: 104 bytes leftover after parsing attributes in process `syz.1.92'. [ 33.856655][ T602] FAULT_INJECTION: forcing a failure. [ 33.856655][ T602] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 33.870034][ T602] CPU: 1 UID: 0 PID: 602 Comm: syz.1.98 Not tainted syzkaller #0 ae7936ebab52aae609823c9494ba9ebab2c98923 [ 33.870074][ T602] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 33.870090][ T602] Call Trace: [ 33.870100][ T602] [ 33.870114][ T602] __dump_stack+0x21/0x30 [ 33.870155][ T602] dump_stack_lvl+0x140/0x1c0 [ 33.870190][ T602] ? __cfi_dump_stack_lvl+0x10/0x10 [ 33.870242][ T602] ? __alloc_pages_noprof+0x7e0/0x7e0 [ 33.870270][ T602] dump_stack+0x19/0x20 [ 33.870301][ T602] should_fail_ex+0x3c2/0x510 [ 33.870324][ T602] should_fail_alloc_page+0xec/0x110 [ 33.870347][ T602] __alloc_pages_noprof+0x1c0/0x7e0 [ 33.870376][ T602] ? __cfi___alloc_pages_noprof+0x10/0x10 [ 33.870409][ T602] ? tracing_map_array_alloc+0x215/0x7b0 [ 33.870447][ T602] get_zeroed_page_noprof+0x1f/0x50 [ 33.870476][ T602] tracing_map_array_alloc+0x28d/0x7b0 [ 33.870512][ T602] ? tracing_map_create+0x9c/0x350 [ 33.870548][ T602] tracing_map_create+0x183/0x350 [ 33.870595][ T602] event_hist_trigger_parse+0x4c67/0x5620 [ 33.870624][ T602] ? stack_depot_save_flags+0x38/0x800 [ 33.870656][ T602] ? __cfi_event_hist_trigger_parse+0x10/0x10 [ 33.870687][ T602] ? __kasan_check_write+0x18/0x20 [ 33.870699][ T311] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 33.870721][ T602] ? mutex_lock+0x97/0x1d0 [ 33.870773][ T602] ? __cfi_mutex_lock+0x10/0x10 [ 33.870879][ T602] ? check_stack_object+0x81/0x150 [ 33.870994][ T602] ? __check_object_size+0x54c/0x870 [ 33.871071][ T602] trigger_process_regex+0x1e3/0x280 [ 33.871149][ T602] ? __cfi_trigger_process_regex+0x10/0x10 [ 33.871219][ T602] ? __kasan_check_write+0x18/0x20 [ 33.871305][ T602] ? strim+0x190/0x1d0 [ 33.871396][ T602] event_trigger_write+0x142/0x1e0 [ 33.871466][ T602] ? __cfi_event_trigger_write+0x10/0x10 [ 33.871535][ T602] vfs_write+0x3c4/0xfd0 [ 33.871639][ T602] ? __cfi_vfs_write+0x10/0x10 [ 33.871724][ T602] ? __kasan_check_write+0x18/0x20 [ 33.871807][ T602] ? mutex_lock+0x97/0x1d0 [ 33.871889][ T602] ? __cfi_mutex_lock+0x10/0x10 [ 33.871974][ T602] ksys_write+0x145/0x260 [ 33.872067][ T602] ? __cfi_ksys_write+0x10/0x10 [ 33.872145][ T602] ? __kasan_check_read+0x15/0x20 [ 33.872228][ T602] __x64_sys_write+0x7f/0x90 [ 33.872343][ T602] x64_sys_call+0x271c/0x2ee0 [ 33.872419][ T602] do_syscall_64+0x57/0xf0 [ 33.872479][ T602] ? clear_bhb_loop+0x50/0xa0 [ 33.872573][ T602] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 33.872657][ T602] RIP: 0033:0x7f0d5919f559 [ 33.872716][ T602] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 33.872765][ T602] RSP: 002b:00007f0d5a04c028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 33.872839][ T602] RAX: ffffffffffffffda RBX: 00007f0d59425fa0 RCX: 00007f0d5919f559 [ 33.872894][ T602] RDX: 000000000000001a RSI: 0000200000001740 RDI: 0000000000000003 [ 33.872932][ T602] RBP: 00007f0d5a04c090 R08: 0000000000000000 R09: 0000000000000000 [ 33.872975][ T602] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 33.873012][ T602] R13: 00007f0d59426038 R14: 00007f0d59425fa0 R15: 00007fff40f0f658 [ 33.873075][ T602] [ 33.883055][ T312] usb 4-1: Unsupported UAC3 BADD profile [ 34.060766][ T311] usb 1-1: Using ep0 maxpacket: 32 [ 34.071016][ T312] snd-usb-audio 4-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 34.080206][ T312] usb 4-1: USB disconnect, device number 7 [ 34.112773][ T311] usb 1-1: config 0 has no interfaces? [ 34.204794][ T357] udevd[357]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 34.213076][ T311] usb 1-1: New USB device found, idVendor=0582, idProduct=0025, bcdDevice= 0.40 [ 34.246939][ T311] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 34.255468][ T311] usb 1-1: Product: syz [ 34.259663][ T311] usb 1-1: Manufacturer: syz [ 34.264362][ T311] usb 1-1: SerialNumber: syz [ 34.270953][ T311] usb 1-1: config 0 descriptor?? [ 34.283842][ T606] overlayfs: failed to resolve './cgroup': -2 [ 34.376814][ T613] netlink: 'syz.1.103': attribute type 17 has an invalid length. [ 34.435959][ T615] FAULT_INJECTION: forcing a failure. [ 34.435959][ T615] name failslab, interval 1, probability 0, space 0, times 0 [ 34.448947][ T615] CPU: 1 UID: 0 PID: 615 Comm: syz.3.104 Not tainted syzkaller #0 ae7936ebab52aae609823c9494ba9ebab2c98923 [ 34.448986][ T615] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 34.449001][ T615] Call Trace: [ 34.449008][ T615] [ 34.449016][ T615] __dump_stack+0x21/0x30 [ 34.449064][ T615] dump_stack_lvl+0x140/0x1c0 [ 34.449099][ T615] ? __cfi_dump_stack_lvl+0x10/0x10 [ 34.449133][ T615] ? futex_wait+0x2b8/0x7c0 [ 34.449162][ T615] ? __cfi_futex_wait+0x10/0x10 [ 34.449191][ T615] dump_stack+0x19/0x20 [ 34.449223][ T615] should_fail_ex+0x3c2/0x510 [ 34.449246][ T615] should_failslab+0xac/0x100 [ 34.449269][ T615] kmem_cache_alloc_noprof+0x42/0x410 [ 34.449301][ T615] ? prepare_creds+0x47/0x6b0 [ 34.449330][ T615] ? __cfi___check_object_size+0x10/0x10 [ 34.449363][ T615] prepare_creds+0x47/0x6b0 [ 34.449390][ T615] ? __kasan_check_write+0x18/0x20 [ 34.449422][ T615] __se_sys_capset+0x2de/0x450 [ 34.449446][ T615] ? __x64_sys_capset+0x80/0x80 [ 34.449468][ T615] ? xfd_validate_state+0x68/0x140 [ 34.449504][ T615] ? __kasan_check_write+0x18/0x20 [ 34.449535][ T615] __x64_sys_capset+0x5f/0x80 [ 34.449558][ T615] x64_sys_call+0x259c/0x2ee0 [ 34.449581][ T615] do_syscall_64+0x57/0xf0 [ 34.449604][ T615] ? clear_bhb_loop+0x50/0xa0 [ 34.449634][ T615] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 34.449663][ T615] RIP: 0033:0x7f7864b9f559 [ 34.449682][ T615] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 34.449700][ T615] RSP: 002b:00007f7865a4a028 EFLAGS: 00000246 ORIG_RAX: 000000000000007e [ 34.449725][ T615] RAX: ffffffffffffffda RBX: 00007f7864e25fa0 RCX: 00007f7864b9f559 [ 34.449742][ T615] RDX: 0000000000000000 RSI: 0000200000000380 RDI: 0000200000000340 [ 34.449758][ T615] RBP: 00007f7864c36b20 R08: 0000000000000000 R09: 0000000000000000 [ 34.449773][ T615] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 34.449787][ T615] R13: 00007f7864e26038 R14: 00007f7864e25fa0 R15: 00007ffeb5223198 [ 34.449807][ T615] [ 34.723958][ T624] netlink: 'syz.3.106': attribute type 4 has an invalid length. [ 34.748758][ T628] tipc: Enabling of bearer rejected, media not registered [ 34.777229][ T630] overlayfs: failed to resolve './cgroup': -2 [ 34.799730][ T633] netlink: 104 bytes leftover after parsing attributes in process `syz.3.110'. [ 34.923353][ T31] usb 3-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 34.931063][ T31] usb 3-1: 2:1: invalid format type 0xb1 is detected, processed as PCM [ 34.939650][ T31] usb 3-1: 2:1 : invalid UAC_FORMAT_TYPE desc [ 34.957690][ T31] usb 3-1: USB disconnect, device number 3 [ 34.969894][ T638] netlink: 'syz.2.112': attribute type 4 has an invalid length. [ 34.979487][ T356] udevd[356]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 35.060747][ T311] usb 4-1: new full-speed USB device number 8 using dummy_hcd [ 35.211575][ T311] usb 4-1: not running at top speed; connect to a high speed hub [ 35.220183][ T311] usb 4-1: config 3 has an invalid interface number: 77 but max is 0 [ 35.228349][ T311] usb 4-1: config 3 has no interface number 0 [ 35.234597][ T311] usb 4-1: config 3 interface 77 altsetting 236 endpoint 0xD has invalid maxpacket 520, setting to 64 [ 35.245713][ T311] usb 4-1: config 3 interface 77 has no altsetting 0 [ 35.253970][ T311] usb 4-1: New USB device found, idVendor=2c7c, idProduct=0512, bcdDevice=9b.ef [ 35.263114][ T311] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 35.271168][ T311] usb 4-1: Product: syz [ 35.275357][ T311] usb 4-1: Manufacturer: syz [ 35.279949][ T311] usb 4-1: SerialNumber: syz [ 35.285737][ T635] raw-gadget.3 gadget.3: fail, usb_ep_enable returned -22 [ 35.311004][ T31] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 35.460706][ T31] usb 3-1: Using ep0 maxpacket: 8 [ 35.468836][ T31] usb 3-1: New USB device found, idVendor=041e, idProduct=3000, bcdDevice= 0.40 [ 35.478133][ T31] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 35.486292][ T31] usb 3-1: Product: syz [ 35.490482][ T31] usb 3-1: Manufacturer: syz [ 35.495320][ T31] usb 3-1: SerialNumber: syz [ 35.705816][ T31] usb 3-1: Unsupported UAC3 BADD profile [ 35.713889][ T31] snd-usb-audio 3-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 35.725015][ T31] usb 3-1: USB disconnect, device number 4 [ 35.738594][ T357] udevd[357]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 36.378675][ T653] FAULT_INJECTION: forcing a failure. [ 36.378675][ T653] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 36.392111][ T653] CPU: 0 UID: 0 PID: 653 Comm: syz.2.117 Not tainted syzkaller #0 ae7936ebab52aae609823c9494ba9ebab2c98923 [ 36.392147][ T653] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 36.392163][ T653] Call Trace: [ 36.392176][ T653] [ 36.392182][ T653] __dump_stack+0x21/0x30 [ 36.392211][ T653] dump_stack_lvl+0x140/0x1c0 [ 36.392239][ T653] ? __cfi_dump_stack_lvl+0x10/0x10 [ 36.392264][ T653] dump_stack+0x19/0x20 [ 36.392286][ T653] should_fail_ex+0x3c2/0x510 [ 36.392302][ T653] should_fail_alloc_page+0xec/0x110 [ 36.392318][ T653] __alloc_pages_noprof+0x1c0/0x7e0 [ 36.392337][ T653] ? __cfi___alloc_pages_noprof+0x10/0x10 [ 36.392358][ T653] ? tracing_map_array_alloc+0x215/0x7b0 [ 36.392383][ T653] get_zeroed_page_noprof+0x1f/0x50 [ 36.392402][ T653] tracing_map_array_alloc+0x28d/0x7b0 [ 36.392425][ T653] ? tracing_map_create+0x9c/0x350 [ 36.392449][ T653] tracing_map_create+0x183/0x350 [ 36.392473][ T653] event_hist_trigger_parse+0x4c67/0x5620 [ 36.392491][ T653] ? stack_depot_save_flags+0x38/0x800 [ 36.392511][ T653] ? __cfi_event_hist_trigger_parse+0x10/0x10 [ 36.392531][ T653] ? __kasan_check_write+0x18/0x20 [ 36.392553][ T653] ? mutex_lock+0x97/0x1d0 [ 36.392572][ T653] ? __cfi_mutex_lock+0x10/0x10 [ 36.392591][ T653] ? check_stack_object+0x81/0x150 [ 36.392614][ T653] ? __check_object_size+0x54c/0x870 [ 36.392636][ T653] trigger_process_regex+0x1e3/0x280 [ 36.392653][ T653] ? __cfi_trigger_process_regex+0x10/0x10 [ 36.392670][ T653] ? __kasan_check_write+0x18/0x20 [ 36.392692][ T653] ? strim+0x190/0x1d0 [ 36.392713][ T653] event_trigger_write+0x142/0x1e0 [ 36.392735][ T653] ? __cfi_event_trigger_write+0x10/0x10 [ 36.392751][ T653] vfs_write+0x3c4/0xfd0 [ 36.392774][ T653] ? __cfi_vfs_write+0x10/0x10 [ 36.392796][ T653] ? __kasan_check_write+0x18/0x20 [ 36.392816][ T653] ? mutex_lock+0x97/0x1d0 [ 36.392835][ T653] ? __cfi_mutex_lock+0x10/0x10 [ 36.392857][ T653] ksys_write+0x145/0x260 [ 36.392879][ T653] ? __cfi_ksys_write+0x10/0x10 [ 36.392902][ T653] ? __kasan_check_read+0x15/0x20 [ 36.392923][ T653] __x64_sys_write+0x7f/0x90 [ 36.392945][ T653] x64_sys_call+0x271c/0x2ee0 [ 36.392961][ T653] do_syscall_64+0x57/0xf0 [ 36.392977][ T653] ? clear_bhb_loop+0x50/0xa0 [ 36.392999][ T653] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 36.393019][ T653] RIP: 0033:0x7ff5b239f559 [ 36.393053][ T653] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 36.393072][ T653] RSP: 002b:00007ff5b0df7028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 36.393095][ T653] RAX: ffffffffffffffda RBX: 00007ff5b2625fa0 RCX: 00007ff5b239f559 [ 36.393117][ T653] RDX: 000000000000001a RSI: 0000200000001740 RDI: 0000000000000003 [ 36.393127][ T653] RBP: 00007ff5b0df7090 R08: 0000000000000000 R09: 0000000000000000 [ 36.393137][ T653] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 36.393146][ T653] R13: 00007ff5b2626038 R14: 00007ff5b2625fa0 R15: 00007fff19995f78 [ 36.393160][ T653] [ 36.430993][ T655] overlayfs: failed to resolve './cgroup': -2 [ 36.548968][ T347] usb 1-1: USB disconnect, device number 4 [ 36.730671][ T36] kauditd_printk_skb: 15 callbacks suppressed [ 36.730688][ T36] audit: type=1400 audit(1792724065.530:186): avc: denied { create } for pid=658 comm="syz.0.119" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 36.758576][ T36] audit: type=1400 audit(1792724065.540:187): avc: denied { append } for pid=658 comm="syz.0.119" name="kvm" dev="devtmpfs" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 37.060747][ T446] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 37.210748][ T446] usb 3-1: Using ep0 maxpacket: 8 [ 37.218501][ T446] usb 3-1: New USB device found, idVendor=041e, idProduct=3000, bcdDevice= 0.40 [ 37.227670][ T446] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 37.235801][ T446] usb 3-1: Product: syz [ 37.240024][ T446] usb 3-1: Manufacturer: syz [ 37.244801][ T446] usb 3-1: SerialNumber: syz [ 37.378491][ T36] audit: type=1400 audit(1792724066.180:188): avc: denied { bind } for pid=673 comm="syz.0.123" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 37.382148][ T674] tipc: Can't bind to reserved service type 0 [ 37.405393][ T36] audit: type=1400 audit(1792724066.210:189): avc: denied { setopt } for pid=673 comm="syz.0.123" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 37.424815][ T36] audit: type=1400 audit(1792724066.210:190): avc: denied { write } for pid=673 comm="syz.0.123" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 37.444068][ T36] audit: type=1400 audit(1792724066.210:191): avc: denied { read } for pid=673 comm="syz.0.123" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 37.464932][ T446] usb 3-1: Unsupported UAC3 BADD profile [ 37.474271][ T446] snd-usb-audio 3-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 37.485519][ T446] usb 3-1: USB disconnect, device number 5 [ 37.497765][ T357] udevd[357]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 37.768157][ T36] audit: type=1400 audit(1792724066.570:192): avc: denied { write } for pid=682 comm="syz.1.126" name="binder0" dev="binder" ino=10 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 37.791319][ T36] audit: type=1400 audit(1792724066.570:193): avc: denied { read } for pid=682 comm="syz.1.126" name="rtc0" dev="devtmpfs" ino=195 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 37.814275][ T36] audit: type=1400 audit(1792724066.570:194): avc: denied { open } for pid=682 comm="syz.1.126" path="/dev/rtc0" dev="devtmpfs" ino=195 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 37.837522][ T36] audit: type=1400 audit(1792724066.580:195): avc: denied { ioctl } for pid=682 comm="syz.1.126" path="/dev/rtc0" dev="devtmpfs" ino=195 ioctlcmd=0x700a scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 37.870720][ T347] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 37.889334][ T692] netlink: 'syz.1.127': attribute type 4 has an invalid length. [ 37.909326][ T311] usb 4-1: USB disconnect, device number 8 [ 37.923859][ T694] tipc: Enabling of bearer rejected, media not registered [ 37.937961][ T696] overlayfs: failed to resolve './cgroup': -2 [ 37.961176][ T701] netlink: 104 bytes leftover after parsing attributes in process `syz.3.131'. [ 38.010740][ T347] usb 1-1: device descriptor read/64, error -71 [ 38.018957][ T713] FAULT_INJECTION: forcing a failure. [ 38.018957][ T713] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 38.032640][ T713] CPU: 0 UID: 0 PID: 713 Comm: syz.3.137 Not tainted syzkaller #0 ae7936ebab52aae609823c9494ba9ebab2c98923 [ 38.032674][ T713] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 38.032688][ T713] Call Trace: [ 38.032695][ T713] [ 38.032703][ T713] __dump_stack+0x21/0x30 [ 38.032741][ T713] dump_stack_lvl+0x140/0x1c0 [ 38.032773][ T713] ? __cfi_dump_stack_lvl+0x10/0x10 [ 38.032806][ T713] ? __alloc_pages_noprof+0x7e0/0x7e0 [ 38.032833][ T713] dump_stack+0x19/0x20 [ 38.032864][ T713] should_fail_ex+0x3c2/0x510 [ 38.032887][ T713] should_fail_alloc_page+0xec/0x110 [ 38.032909][ T713] __alloc_pages_noprof+0x1c0/0x7e0 [ 38.032935][ T713] ? __cfi___alloc_pages_noprof+0x10/0x10 [ 38.032965][ T713] ? tracing_map_array_alloc+0x215/0x7b0 [ 38.033000][ T713] get_zeroed_page_noprof+0x1f/0x50 [ 38.033027][ T713] tracing_map_array_alloc+0x28d/0x7b0 [ 38.033059][ T713] ? tracing_map_create+0x9c/0x350 [ 38.033101][ T713] tracing_map_create+0x183/0x350 [ 38.033142][ T713] event_hist_trigger_parse+0x4c67/0x5620 [ 38.033167][ T713] ? stack_depot_save_flags+0x38/0x800 [ 38.033196][ T713] ? __cfi_event_hist_trigger_parse+0x10/0x10 [ 38.033224][ T713] ? __kasan_check_write+0x18/0x20 [ 38.033253][ T713] ? mutex_lock+0x97/0x1d0 [ 38.033280][ T713] ? __cfi_mutex_lock+0x10/0x10 [ 38.033306][ T713] ? check_stack_object+0x81/0x150 [ 38.033337][ T713] ? __check_object_size+0x54c/0x870 [ 38.033368][ T713] trigger_process_regex+0x1e3/0x280 [ 38.033392][ T713] ? __cfi_trigger_process_regex+0x10/0x10 [ 38.033416][ T713] ? __kasan_check_write+0x18/0x20 [ 38.033446][ T713] ? strim+0x190/0x1d0 [ 38.033476][ T713] event_trigger_write+0x142/0x1e0 [ 38.033499][ T713] ? __cfi_event_trigger_write+0x10/0x10 [ 38.033523][ T713] vfs_write+0x3c4/0xfd0 [ 38.033554][ T713] ? __cfi_vfs_write+0x10/0x10 [ 38.033585][ T713] ? __kasan_check_write+0x18/0x20 [ 38.033613][ T713] ? mutex_lock+0x97/0x1d0 [ 38.033640][ T713] ? __cfi_mutex_lock+0x10/0x10 [ 38.033671][ T713] ksys_write+0x145/0x260 [ 38.033703][ T713] ? __cfi_ksys_write+0x10/0x10 [ 38.033735][ T713] ? __kasan_check_read+0x15/0x20 [ 38.033766][ T713] __x64_sys_write+0x7f/0x90 [ 38.033798][ T713] x64_sys_call+0x271c/0x2ee0 [ 38.033821][ T713] do_syscall_64+0x57/0xf0 [ 38.033843][ T713] ? clear_bhb_loop+0x50/0xa0 [ 38.033873][ T713] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 38.033903][ T713] RIP: 0033:0x7f7864b9f559 [ 38.033922][ T713] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 38.033940][ T713] RSP: 002b:00007f7865a4a028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 38.033964][ T713] RAX: ffffffffffffffda RBX: 00007f7864e25fa0 RCX: 00007f7864b9f559 [ 38.033981][ T713] RDX: 000000000000001a RSI: 0000200000001740 RDI: 0000000000000003 [ 38.033996][ T713] RBP: 00007f7865a4a090 R08: 0000000000000000 R09: 0000000000000000 [ 38.034011][ T713] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 38.034024][ T713] R13: 00007f7864e26038 R14: 00007f7864e25fa0 R15: 00007ffeb5223198 [ 38.034044][ T713] [ 38.385257][ T720] overlayfs: failed to resolve './cgroup': -2 [ 38.470699][ T9] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 38.480715][ T347] usb 1-1: device descriptor read/64, error -71 [ 38.600706][ T9] usb 3-1: device descriptor read/64, error -71 [ 38.690723][ T312] usb 4-1: new high-speed USB device number 9 using dummy_hcd [ 38.720712][ T347] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 38.840729][ T9] usb 3-1: device descriptor read/64, error -71 [ 38.860695][ T347] usb 1-1: device descriptor read/64, error -71 [ 38.870848][ T312] usb 4-1: Using ep0 maxpacket: 8 [ 38.884359][ T312] usb 4-1: New USB device found, idVendor=041e, idProduct=3000, bcdDevice= 0.40 [ 38.894914][ T312] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 38.910832][ T312] usb 4-1: Product: syz [ 38.920822][ T312] usb 4-1: Manufacturer: syz [ 38.930822][ T312] usb 4-1: SerialNumber: syz [ 39.080697][ T9] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 39.100699][ T347] usb 1-1: device descriptor read/64, error -71 [ 39.149087][ T312] usb 4-1: Unsupported UAC3 BADD profile [ 39.160415][ T312] snd-usb-audio 4-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 39.184283][ T312] usb 4-1: USB disconnect, device number 9 [ 39.198269][ T356] udevd[356]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 39.212401][ T347] usb usb1-port1: attempt power cycle [ 39.220697][ T9] usb 3-1: device descriptor read/64, error -71 [ 39.460753][ T9] usb 3-1: device descriptor read/64, error -71 [ 39.528826][ T740] netlink: 'syz.1.145': attribute type 4 has an invalid length. [ 39.547860][ T742] tipc: Enabling of bearer rejected, media not registered [ 39.555840][ T347] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 39.570818][ T9] usb usb3-port1: attempt power cycle [ 39.581993][ T347] usb 1-1: device descriptor read/8, error -71 [ 39.703870][ T761] netlink: 104 bytes leftover after parsing attributes in process `syz.1.149'. [ 39.713864][ T347] usb 1-1: device descriptor read/8, error -71 [ 39.749982][ T779] overlayfs: failed to resolve './cgroup': -2 [ 39.756704][ T779] netlink: 32 bytes leftover after parsing attributes in process `syz.1.150'. [ 39.861794][ T791] capability: warning: `syz.3.154' uses deprecated v2 capabilities in a way that may be insecure [ 39.910763][ T9] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 39.928137][ T794] FAULT_INJECTION: forcing a failure. [ 39.928137][ T794] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 39.932254][ T9] usb 3-1: device descriptor read/8, error -71 [ 39.946721][ T794] CPU: 1 UID: 0 PID: 794 Comm: syz.3.155 Not tainted syzkaller #0 ae7936ebab52aae609823c9494ba9ebab2c98923 [ 39.946808][ T794] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 39.946859][ T794] Call Trace: [ 39.946878][ T794] [ 39.946900][ T794] __dump_stack+0x21/0x30 [ 39.947003][ T794] dump_stack_lvl+0x140/0x1c0 [ 39.947096][ T794] ? __cfi_dump_stack_lvl+0x10/0x10 [ 39.947167][ T794] ? __alloc_pages_noprof+0x7e0/0x7e0 [ 39.947240][ T794] dump_stack+0x19/0x20 [ 39.947322][ T794] should_fail_ex+0x3c2/0x510 [ 39.947380][ T794] should_fail_alloc_page+0xec/0x110 [ 39.947441][ T794] __alloc_pages_noprof+0x1c0/0x7e0 [ 39.947510][ T794] ? __cfi___alloc_pages_noprof+0x10/0x10 [ 39.947584][ T794] ? tracing_map_array_alloc+0x215/0x7b0 [ 39.947657][ T794] get_zeroed_page_noprof+0x1f/0x50 [ 39.947742][ T794] tracing_map_array_alloc+0x28d/0x7b0 [ 39.947833][ T794] ? tracing_map_create+0x9c/0x350 [ 39.947925][ T794] tracing_map_create+0x183/0x350 [ 39.948009][ T794] event_hist_trigger_parse+0x4c67/0x5620 [ 39.948071][ T794] ? stack_depot_save_flags+0x38/0x800 [ 39.948145][ T794] ? __cfi_event_hist_trigger_parse+0x10/0x10 [ 39.948217][ T794] ? __kasan_check_write+0x18/0x20 [ 39.948292][ T794] ? mutex_lock+0x97/0x1d0 [ 39.948350][ T794] ? __cfi_mutex_lock+0x10/0x10 [ 39.948414][ T794] ? check_stack_object+0x81/0x150 [ 39.948488][ T794] ? __check_object_size+0x54c/0x870 [ 39.948568][ T794] trigger_process_regex+0x1e3/0x280 [ 39.948624][ T794] ? __cfi_trigger_process_regex+0x10/0x10 [ 39.948686][ T794] ? __kasan_check_write+0x18/0x20 [ 39.948761][ T794] ? strim+0x190/0x1d0 [ 39.948847][ T794] event_trigger_write+0x142/0x1e0 [ 39.948908][ T794] ? __cfi_event_trigger_write+0x10/0x10 [ 39.948972][ T794] vfs_write+0x3c4/0xfd0 [ 39.949047][ T794] ? __cfi_vfs_write+0x10/0x10 [ 39.949149][ T794] ? __kasan_check_write+0x18/0x20 [ 39.949236][ T794] ? mutex_lock+0x97/0x1d0 [ 39.949300][ T794] ? __cfi_mutex_lock+0x10/0x10 [ 39.949377][ T794] ksys_write+0x145/0x260 [ 39.949457][ T794] ? __cfi_ksys_write+0x10/0x10 [ 39.949539][ T794] ? __kasan_check_read+0x15/0x20 [ 39.949636][ T794] __x64_sys_write+0x7f/0x90 [ 39.949719][ T794] x64_sys_call+0x271c/0x2ee0 [ 39.949774][ T794] do_syscall_64+0x57/0xf0 [ 39.949827][ T794] ? clear_bhb_loop+0x50/0xa0 [ 39.949922][ T794] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 39.949995][ T794] RIP: 0033:0x7f7864b9f559 [ 39.950041][ T794] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 39.950091][ T794] RSP: 002b:00007f7865a4a028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 39.950146][ T794] RAX: ffffffffffffffda RBX: 00007f7864e25fa0 RCX: 00007f7864b9f559 [ 39.950188][ T794] RDX: 000000000000001a RSI: 0000200000001740 RDI: 0000000000000003 [ 39.950230][ T794] RBP: 00007f7865a4a090 R08: 0000000000000000 R09: 0000000000000000 [ 39.950269][ T794] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 39.950301][ T794] R13: 00007f7864e26038 R14: 00007f7864e25fa0 R15: 00007ffeb5223198 [ 39.950343][ T794] [ 40.258869][ T347] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 40.281721][ T347] usb 1-1: device descriptor read/8, error -71 [ 40.391790][ T9] usb 3-1: device descriptor read/8, error -71 [ 40.411812][ T347] usb 1-1: device descriptor read/8, error -71 [ 40.510728][ T312] usb 4-1: new high-speed USB device number 10 using dummy_hcd [ 40.520890][ T347] usb usb1-port1: unable to enumerate USB device [ 40.593780][ T802] kvm: vcpu 0: requested 128 ns lapic timer period limited to 200000 ns [ 40.630766][ T9] usb 3-1: new high-speed USB device number 9 using dummy_hcd [ 40.644167][ T804] overlayfs: failed to resolve './cgroup': -2 [ 40.651736][ T804] netlink: 32 bytes leftover after parsing attributes in process `syz.1.159'. [ 40.666617][ T9] usb 3-1: device descriptor read/8, error -71 [ 40.670860][ T312] usb 4-1: Using ep0 maxpacket: 8 [ 40.680584][ T312] usb 4-1: New USB device found, idVendor=041e, idProduct=3000, bcdDevice= 0.40 [ 40.694304][ T312] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 40.703358][ T312] usb 4-1: Product: syz [ 40.707600][ T312] usb 4-1: Manufacturer: syz [ 40.712647][ T312] usb 4-1: SerialNumber: syz [ 40.729845][ T809] netlink: 'syz.1.161': attribute type 4 has an invalid length. [ 40.774097][ T815] tipc: Enabling of bearer rejected, media not registered [ 40.806084][ T9] usb 3-1: device descriptor read/8, error -71 [ 40.906767][ T812] x86/PAT: syz.1.162:812 freeing invalid memtype [mem 0xfe004000-0xfe004fff] [ 40.928205][ T312] usb 4-1: Unsupported UAC3 BADD profile [ 40.937977][ T312] snd-usb-audio 4-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 40.941014][ T9] usb usb3-port1: unable to enumerate USB device [ 40.957420][ T312] usb 4-1: USB disconnect, device number 10 [ 40.982814][ T356] udevd[356]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 41.016859][ T828] overlayfs: failed to resolve './cgroup': -2 [ 41.032019][ T828] netlink: 32 bytes leftover after parsing attributes in process `syz.0.168'. [ 41.078950][ T835] FAULT_INJECTION: forcing a failure. [ 41.078950][ T835] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 41.092471][ T835] CPU: 0 UID: 0 PID: 835 Comm: syz.2.171 Not tainted syzkaller #0 ae7936ebab52aae609823c9494ba9ebab2c98923 [ 41.092506][ T835] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 41.092521][ T835] Call Trace: [ 41.092528][ T835] [ 41.092536][ T835] __dump_stack+0x21/0x30 [ 41.092577][ T835] dump_stack_lvl+0x140/0x1c0 [ 41.092611][ T835] ? __cfi_dump_stack_lvl+0x10/0x10 [ 41.092646][ T835] ? __alloc_pages_noprof+0x7e0/0x7e0 [ 41.092676][ T835] dump_stack+0x19/0x20 [ 41.092709][ T835] should_fail_ex+0x3c2/0x510 [ 41.092732][ T835] should_fail_alloc_page+0xec/0x110 [ 41.092756][ T835] __alloc_pages_noprof+0x1c0/0x7e0 [ 41.092784][ T835] ? __cfi___alloc_pages_noprof+0x10/0x10 [ 41.092815][ T835] ? tracing_map_array_alloc+0x215/0x7b0 [ 41.092851][ T835] get_zeroed_page_noprof+0x1f/0x50 [ 41.092880][ T835] tracing_map_array_alloc+0x28d/0x7b0 [ 41.092914][ T835] ? tracing_map_create+0x9c/0x350 [ 41.092951][ T835] tracing_map_create+0x183/0x350 [ 41.092986][ T835] event_hist_trigger_parse+0x4c67/0x5620 [ 41.093010][ T835] ? stack_depot_save_flags+0x38/0x800 [ 41.093038][ T835] ? __cfi_event_hist_trigger_parse+0x10/0x10 [ 41.093066][ T835] ? __kasan_check_write+0x18/0x20 [ 41.093096][ T835] ? mutex_lock+0x97/0x1d0 [ 41.093125][ T835] ? __cfi_mutex_lock+0x10/0x10 [ 41.093152][ T835] ? check_stack_object+0x81/0x150 [ 41.093192][ T835] ? __check_object_size+0x54c/0x870 [ 41.093233][ T835] trigger_process_regex+0x1e3/0x280 [ 41.093258][ T835] ? __cfi_trigger_process_regex+0x10/0x10 [ 41.093283][ T835] ? __kasan_check_write+0x18/0x20 [ 41.093314][ T835] ? strim+0x190/0x1d0 [ 41.093344][ T835] event_trigger_write+0x142/0x1e0 [ 41.093368][ T835] ? __cfi_event_trigger_write+0x10/0x10 [ 41.093393][ T835] vfs_write+0x3c4/0xfd0 [ 41.093425][ T835] ? __cfi_vfs_write+0x10/0x10 [ 41.093456][ T835] ? __kasan_check_write+0x18/0x20 [ 41.093486][ T835] ? mutex_lock+0x97/0x1d0 [ 41.093512][ T835] ? __cfi_mutex_lock+0x10/0x10 [ 41.093543][ T835] ksys_write+0x145/0x260 [ 41.093575][ T835] ? __cfi_ksys_write+0x10/0x10 [ 41.093608][ T835] ? __kasan_check_read+0x15/0x20 [ 41.093639][ T835] __x64_sys_write+0x7f/0x90 [ 41.093672][ T835] x64_sys_call+0x271c/0x2ee0 [ 41.093695][ T835] do_syscall_64+0x57/0xf0 [ 41.093718][ T835] ? clear_bhb_loop+0x50/0xa0 [ 41.093749][ T835] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 41.093780][ T835] RIP: 0033:0x7ff5b239f559 [ 41.093800][ T835] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 41.093820][ T835] RSP: 002b:00007ff5b0df7028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 41.093843][ T835] RAX: ffffffffffffffda RBX: 00007ff5b2625fa0 RCX: 00007ff5b239f559 [ 41.093858][ T835] RDX: 000000000000001a RSI: 0000200000001740 RDI: 0000000000000003 [ 41.093872][ T835] RBP: 00007ff5b0df7090 R08: 0000000000000000 R09: 0000000000000000 [ 41.093886][ T835] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 41.093899][ T835] R13: 00007ff5b2626038 R14: 00007ff5b2625fa0 R15: 00007fff19995f78 [ 41.093918][ T835] [ 41.454594][ T838] FAULT_INJECTION: forcing a failure. [ 41.454594][ T838] name failslab, interval 1, probability 0, space 0, times 0 [ 41.487633][ T838] CPU: 1 UID: 0 PID: 838 Comm: syz.0.172 Not tainted syzkaller #0 ae7936ebab52aae609823c9494ba9ebab2c98923 [ 41.487676][ T838] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 41.487703][ T838] Call Trace: [ 41.487711][ T838] [ 41.487721][ T838] __dump_stack+0x21/0x30 [ 41.487766][ T838] dump_stack_lvl+0x140/0x1c0 [ 41.487804][ T838] ? __cfi_dump_stack_lvl+0x10/0x10 [ 41.487844][ T838] dump_stack+0x19/0x20 [ 41.487880][ T838] should_fail_ex+0x3c2/0x510 [ 41.487905][ T838] should_failslab+0xac/0x100 [ 41.487930][ T838] kmem_cache_alloc_noprof+0x42/0x410 [ 41.487965][ T838] ? __cfi_stack_trace_consume_entry+0x10/0x10 [ 41.488003][ T838] ? alloc_empty_file+0xbf/0x270 [ 41.488030][ T838] ? arch_stack_walk+0x10a/0x170 [ 41.488058][ T838] alloc_empty_file+0xbf/0x270 [ 41.488085][ T838] path_openat+0xf4/0x35a0 [ 41.488111][ T838] ? stack_depot_save_flags+0x38/0x800 [ 41.488138][ T838] ? schedule+0xc5/0x240 [ 41.488167][ T838] ? kasan_save_track+0x4f/0x80 [ 41.488204][ T838] ? kasan_save_track+0x3e/0x80 [ 41.488240][ T838] ? kasan_save_alloc_info+0x3a/0x50 [ 41.488269][ T838] ? __kasan_slab_alloc+0x73/0x90 [ 41.488293][ T838] ? getname+0x1b/0x30 [ 41.488328][ T838] ? do_sys_openat2+0xda/0x1d0 [ 41.488356][ T838] ? __x64_sys_openat+0x13a/0x170 [ 41.488385][ T838] ? x64_sys_call+0xe69/0x2ee0 [ 41.488410][ T838] ? do_syscall_64+0x57/0xf0 [ 41.488437][ T838] ? do_filp_open+0x440/0x440 [ 41.488467][ T838] do_filp_open+0x1f2/0x440 [ 41.488494][ T838] ? __cfi_do_filp_open+0x10/0x10 [ 41.488525][ T838] ? alloc_fd+0x4c1/0x570 [ 41.488563][ T838] do_sys_openat2+0x134/0x1d0 [ 41.488592][ T838] ? do_sys_open+0x100/0x100 [ 41.488624][ T838] __x64_sys_openat+0x13a/0x170 [ 41.488655][ T838] x64_sys_call+0xe69/0x2ee0 [ 41.488687][ T838] do_syscall_64+0x57/0xf0 [ 41.488712][ T838] ? clear_bhb_loop+0x50/0xa0 [ 41.488746][ T838] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 41.488779][ T838] RIP: 0033:0x7f648dd9f559 [ 41.488800][ T838] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 41.488821][ T838] RSP: 002b:00007f648ebcb028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 41.488849][ T838] RAX: ffffffffffffffda RBX: 00007f648e025fa0 RCX: 00007f648dd9f559 [ 41.488868][ T838] RDX: 0000000000000101 RSI: 0000200000000540 RDI: ffffffffffffff9c [ 41.488886][ T838] RBP: 00007f648de36b20 R08: 0000000000000000 R09: 0000000000000000 [ 41.488903][ T838] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 41.488917][ T838] R13: 00007f648e026038 R14: 00007f648e025fa0 R15: 00007ffd13fa8ee8 [ 41.488940][ T838] [ 41.876217][ T36] kauditd_printk_skb: 13 callbacks suppressed [ 41.876238][ T36] audit: type=1400 audit(1792724070.680:209): avc: denied { execute } for pid=844 comm="syz.2.175" path="/selinux/policy" dev="selinuxfs" ino=20 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=file permissive=1 [ 41.936666][ T849] netlink: 'syz.0.177': attribute type 4 has an invalid length. [ 41.973320][ T851] overlayfs: failed to resolve './cgroup': -2 [ 41.980545][ T851] netlink: 12 bytes leftover after parsing attributes in process `syz.0.178'. [ 42.021398][ T858] tipc: Enabling of bearer rejected, media not registered [ 42.118195][ T36] audit: type=1400 audit(1792724070.920:210): avc: denied { write } for pid=862 comm="syz.3.182" name="ip6_tables_matches" dev="proc" ino=4026532576 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_net_t tclass=file permissive=1 [ 42.143399][ T36] audit: type=1400 audit(1792724070.950:211): avc: denied { name_bind } for pid=862 comm="syz.3.182" src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=tcp_socket permissive=1 [ 42.165132][ T36] audit: type=1400 audit(1792724070.950:212): avc: denied { node_bind } for pid=862 comm="syz.3.182" saddr=::1 src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=tcp_socket permissive=1 [ 42.320722][ T311] usb 1-1: new high-speed USB device number 9 using dummy_hcd [ 42.470690][ T311] usb 1-1: Using ep0 maxpacket: 32 [ 42.484555][ T311] usb 1-1: config 1 interface 0 altsetting 16 bulk endpoint 0x1 has invalid maxpacket 8 [ 42.505277][ T311] usb 1-1: config 1 interface 0 altsetting 16 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 42.530689][ T311] usb 1-1: config 1 interface 0 has no altsetting 0 [ 42.549771][ T311] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 42.569096][ T311] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 42.579200][ T311] usb 1-1: Product: syz [ 42.589328][ T311] usb 1-1: Manufacturer: syz [ 42.594040][ T311] usb 1-1: SerialNumber: syz [ 42.604458][ T855] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 42.701176][ T855] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 42.710368][ T855] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 42.783398][ T870] netlink: 'syz.2.185': attribute type 4 has an invalid length. [ 42.860401][ T873] FAULT_INJECTION: forcing a failure. [ 42.860401][ T873] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 42.873918][ T873] CPU: 1 UID: 0 PID: 873 Comm: syz.2.186 Not tainted syzkaller #0 ae7936ebab52aae609823c9494ba9ebab2c98923 [ 42.873954][ T873] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 42.873970][ T873] Call Trace: [ 42.873977][ T873] [ 42.873986][ T873] __dump_stack+0x21/0x30 [ 42.874025][ T873] dump_stack_lvl+0x140/0x1c0 [ 42.874058][ T873] ? __cfi_dump_stack_lvl+0x10/0x10 [ 42.874103][ T873] ? __alloc_pages_noprof+0x7e0/0x7e0 [ 42.874131][ T873] dump_stack+0x19/0x20 [ 42.874163][ T873] should_fail_ex+0x3c2/0x510 [ 42.874185][ T873] should_fail_alloc_page+0xec/0x110 [ 42.874207][ T873] __alloc_pages_noprof+0x1c0/0x7e0 [ 42.874233][ T873] ? __cfi___alloc_pages_noprof+0x10/0x10 [ 42.874262][ T873] ? tracing_map_array_alloc+0x215/0x7b0 [ 42.874298][ T873] get_zeroed_page_noprof+0x1f/0x50 [ 42.874325][ T873] tracing_map_array_alloc+0x28d/0x7b0 [ 42.874357][ T873] ? tracing_map_create+0x9c/0x350 [ 42.874390][ T873] tracing_map_create+0x183/0x350 [ 42.874424][ T873] event_hist_trigger_parse+0x4c67/0x5620 [ 42.874450][ T873] ? stack_depot_save_flags+0x38/0x800 [ 42.874479][ T873] ? __cfi_event_hist_trigger_parse+0x10/0x10 [ 42.874509][ T873] ? __kasan_check_write+0x18/0x20 [ 42.874539][ T873] ? mutex_lock+0x97/0x1d0 [ 42.874569][ T873] ? __cfi_mutex_lock+0x10/0x10 [ 42.874596][ T873] ? check_stack_object+0x81/0x150 [ 42.874629][ T873] ? __check_object_size+0x54c/0x870 [ 42.874662][ T873] trigger_process_regex+0x1e3/0x280 [ 42.874688][ T873] ? __cfi_trigger_process_regex+0x10/0x10 [ 42.874713][ T873] ? __kasan_check_write+0x18/0x20 [ 42.874745][ T873] ? strim+0x190/0x1d0 [ 42.874777][ T873] event_trigger_write+0x142/0x1e0 [ 42.874802][ T873] ? __cfi_event_trigger_write+0x10/0x10 [ 42.874828][ T873] vfs_write+0x3c4/0xfd0 [ 42.874861][ T873] ? __cfi_vfs_write+0x10/0x10 [ 42.874892][ T873] ? __kasan_check_write+0x18/0x20 [ 42.874927][ T873] ? mutex_lock+0x97/0x1d0 [ 42.874954][ T873] ? __cfi_mutex_lock+0x10/0x10 [ 42.874986][ T873] ksys_write+0x145/0x260 [ 42.875019][ T873] ? __cfi_ksys_write+0x10/0x10 [ 42.875052][ T873] ? __kasan_check_read+0x15/0x20 [ 42.875092][ T873] __x64_sys_write+0x7f/0x90 [ 42.875125][ T873] x64_sys_call+0x271c/0x2ee0 [ 42.875149][ T873] do_syscall_64+0x57/0xf0 [ 42.875172][ T873] ? clear_bhb_loop+0x50/0xa0 [ 42.875205][ T873] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 42.875236][ T873] RIP: 0033:0x7ff5b239f559 [ 42.875256][ T873] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 42.875276][ T873] RSP: 002b:00007ff5b0df7028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 42.875300][ T873] RAX: ffffffffffffffda RBX: 00007ff5b2625fa0 RCX: 00007ff5b239f559 [ 42.875318][ T873] RDX: 000000000000001a RSI: 0000200000001740 RDI: 0000000000000003 [ 42.875333][ T873] RBP: 00007ff5b0df7090 R08: 0000000000000000 R09: 0000000000000000 [ 42.875349][ T873] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 42.875364][ T873] R13: 00007ff5b2626038 R14: 00007ff5b2625fa0 R15: 00007fff19995f78 [ 42.875385][ T873] [ 43.206616][ T311] usb 1-1: USB disconnect, device number 9 [ 43.222265][ T875] overlayfs: failed to resolve './cgroup': -2 [ 43.237100][ T875] netlink: 12 bytes leftover after parsing attributes in process `syz.3.187'. [ 43.500739][ T347] usb 3-1: new high-speed USB device number 10 using dummy_hcd [ 43.508690][ T9] usb 4-1: new high-speed USB device number 11 using dummy_hcd [ 43.650809][ T347] usb 3-1: device descriptor read/64, error -71 [ 43.670766][ T9] usb 4-1: Using ep0 maxpacket: 8 [ 43.678747][ T9] usb 4-1: New USB device found, idVendor=041e, idProduct=3000, bcdDevice= 0.40 [ 43.688349][ T9] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 43.696693][ T9] usb 4-1: Product: syz [ 43.701156][ T9] usb 4-1: Manufacturer: syz [ 43.706952][ T9] usb 4-1: SerialNumber: syz [ 43.891816][ T882] FAULT_INJECTION: forcing a failure. [ 43.891816][ T882] name failslab, interval 1, probability 0, space 0, times 0 [ 43.905525][ T347] usb 3-1: device descriptor read/64, error -71 [ 43.912015][ T882] CPU: 0 UID: 0 PID: 882 Comm: syz.0.190 Not tainted syzkaller #0 ae7936ebab52aae609823c9494ba9ebab2c98923 [ 43.912054][ T882] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 43.912070][ T882] Call Trace: [ 43.912088][ T882] [ 43.912099][ T882] __dump_stack+0x21/0x30 [ 43.912147][ T882] dump_stack_lvl+0x140/0x1c0 [ 43.912191][ T882] ? __cfi_dump_stack_lvl+0x10/0x10 [ 43.912229][ T882] ? cgroup_addrm_files+0x775/0xac0 [ 43.912257][ T882] ? cgroup_addrm_files+0xa34/0xac0 [ 43.912285][ T882] dump_stack+0x19/0x20 [ 43.912320][ T882] should_fail_ex+0x3c2/0x510 [ 43.912345][ T882] should_failslab+0xac/0x100 [ 43.912371][ T882] __kmalloc_cache_noprof+0x41/0x470 [ 43.912404][ T882] ? blkcg_css_alloc+0x76/0xcd0 [ 43.912428][ T882] blkcg_css_alloc+0x76/0xcd0 [ 43.912452][ T882] cgroup_apply_control_enable+0x3af/0xce0 [ 43.912480][ T882] cgroup_mkdir+0x1274/0x1600 [ 43.912505][ T882] ? __cfi_cgroup_mkdir+0x10/0x10 [ 43.912527][ T882] kernfs_iop_mkdir+0x1bb/0x2d0 [ 43.912555][ T882] vfs_mkdir+0x58e/0x810 [ 43.912585][ T882] do_mkdirat+0x240/0x530 [ 43.912613][ T882] ? __cfi_do_mkdirat+0x10/0x10 [ 43.912641][ T882] ? __kasan_check_write+0x18/0x20 [ 43.912675][ T882] ? getname_flags+0x203/0x6b0 [ 43.912711][ T882] ? __kasan_check_write+0x18/0x20 [ 43.912744][ T882] __x64_sys_mkdirat+0x8b/0xa0 [ 43.912774][ T882] x64_sys_call+0x2ba8/0x2ee0 [ 43.912799][ T882] do_syscall_64+0x57/0xf0 [ 43.912824][ T882] ? clear_bhb_loop+0x50/0xa0 [ 43.912858][ T882] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 43.912890][ T882] RIP: 0033:0x7f648dd9f559 [ 43.912923][ T882] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 43.912945][ T882] RSP: 002b:00007f648ebcb028 EFLAGS: 00000246 ORIG_RAX: 0000000000000102 [ 43.912973][ T882] RAX: ffffffffffffffda RBX: 00007f648e025fa0 RCX: 00007f648dd9f559 [ 43.912993][ T882] RDX: 00000000000001ff RSI: 0000200000000000 RDI: ffffffffffffff9c [ 43.913011][ T882] RBP: 00007f648de36b20 R08: 0000000000000000 R09: 0000000000000000 [ 43.913028][ T882] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 43.913044][ T882] R13: 00007f648e026038 R14: 00007f648e025fa0 R15: 00007ffd13fa8ee8 [ 43.913065][ T882] [ 44.152654][ T9] usb 4-1: Unsupported UAC3 BADD profile [ 44.160834][ T9] snd-usb-audio 4-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 44.181387][ T356] udevd[356]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 44.201800][ T9] usb 4-1: USB disconnect, device number 11 [ 44.280725][ T347] usb 3-1: new high-speed USB device number 11 using dummy_hcd [ 44.323532][ T888] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 44.410773][ T347] usb 3-1: device descriptor read/64, error -71 [ 44.443206][ T892] netlink: 'syz.3.194': attribute type 4 has an invalid length. [ 44.468748][ T894] tipc: Enabling of bearer rejected, media not registered [ 44.494728][ T896] SELinux: failed to load policy [ 44.499834][ T36] audit: type=1400 audit(1792724073.300:213): avc: denied { load_policy } for pid=895 comm="syz.3.196" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security permissive=1 [ 44.565511][ T900] overlayfs: failed to resolve './cgroup': -2 [ 44.572347][ T900] netlink: 12 bytes leftover after parsing attributes in process `syz.3.198'. [ 44.614569][ T36] audit: type=1400 audit(1792724073.420:214): avc: denied { create } for pid=904 comm="syz.3.200" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 44.650740][ T347] usb 3-1: device descriptor read/64, error -71 [ 44.674959][ T909] FAULT_INJECTION: forcing a failure. [ 44.674959][ T909] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 44.688569][ T909] CPU: 1 UID: 0 PID: 909 Comm: syz.3.202 Not tainted syzkaller #0 ae7936ebab52aae609823c9494ba9ebab2c98923 [ 44.688609][ T909] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 44.688624][ T909] Call Trace: [ 44.688632][ T909] [ 44.688640][ T909] __dump_stack+0x21/0x30 [ 44.688681][ T909] dump_stack_lvl+0x140/0x1c0 [ 44.688716][ T909] ? __cfi_dump_stack_lvl+0x10/0x10 [ 44.688752][ T909] ? __alloc_pages_noprof+0x7e0/0x7e0 [ 44.688782][ T909] dump_stack+0x19/0x20 [ 44.688813][ T909] should_fail_ex+0x3c2/0x510 [ 44.688837][ T909] should_fail_alloc_page+0xec/0x110 [ 44.688861][ T909] __alloc_pages_noprof+0x1c0/0x7e0 [ 44.688889][ T909] ? __cfi___alloc_pages_noprof+0x10/0x10 [ 44.688929][ T909] ? tracing_map_array_alloc+0x215/0x7b0 [ 44.688967][ T909] get_zeroed_page_noprof+0x1f/0x50 [ 44.688995][ T909] tracing_map_array_alloc+0x28d/0x7b0 [ 44.689030][ T909] ? tracing_map_create+0x9c/0x350 [ 44.689080][ T909] tracing_map_create+0x183/0x350 [ 44.689116][ T909] event_hist_trigger_parse+0x4c67/0x5620 [ 44.689142][ T909] ? stack_depot_save_flags+0x38/0x800 [ 44.689171][ T909] ? __cfi_event_hist_trigger_parse+0x10/0x10 [ 44.689200][ T909] ? __kasan_check_write+0x18/0x20 [ 44.689232][ T909] ? mutex_lock+0x97/0x1d0 [ 44.689261][ T909] ? __cfi_mutex_lock+0x10/0x10 [ 44.689290][ T909] ? check_stack_object+0x81/0x150 [ 44.689323][ T909] ? __check_object_size+0x54c/0x870 [ 44.689357][ T909] trigger_process_regex+0x1e3/0x280 [ 44.689383][ T909] ? __cfi_trigger_process_regex+0x10/0x10 [ 44.689408][ T909] ? __kasan_check_write+0x18/0x20 [ 44.689440][ T909] ? strim+0x190/0x1d0 [ 44.689471][ T909] event_trigger_write+0x142/0x1e0 [ 44.689496][ T909] ? __cfi_event_trigger_write+0x10/0x10 [ 44.689520][ T909] vfs_write+0x3c4/0xfd0 [ 44.689554][ T909] ? __cfi_vfs_write+0x10/0x10 [ 44.689591][ T909] ? __kasan_check_write+0x18/0x20 [ 44.689622][ T909] ? mutex_lock+0x97/0x1d0 [ 44.689650][ T909] ? __cfi_mutex_lock+0x10/0x10 [ 44.689682][ T909] ksys_write+0x145/0x260 [ 44.689715][ T909] ? __cfi_ksys_write+0x10/0x10 [ 44.689748][ T909] ? __kasan_check_read+0x15/0x20 [ 44.689780][ T909] __x64_sys_write+0x7f/0x90 [ 44.689813][ T909] x64_sys_call+0x271c/0x2ee0 [ 44.689836][ T909] do_syscall_64+0x57/0xf0 [ 44.689858][ T909] ? clear_bhb_loop+0x50/0xa0 [ 44.689889][ T909] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 44.689929][ T909] RIP: 0033:0x7f7864b9f559 [ 44.689949][ T909] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 44.689969][ T909] RSP: 002b:00007f7865a4a028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 44.689995][ T909] RAX: ffffffffffffffda RBX: 00007f7864e25fa0 RCX: 00007f7864b9f559 [ 44.690013][ T909] RDX: 000000000000001a RSI: 0000200000001740 RDI: 0000000000000003 [ 44.690029][ T909] RBP: 00007f7865a4a090 R08: 0000000000000000 R09: 0000000000000000 [ 44.690044][ T909] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 44.690059][ T909] R13: 00007f7864e26038 R14: 00007f7864e25fa0 R15: 00007ffeb5223198 [ 44.690080][ T909] [ 44.761194][ T347] usb usb3-port1: attempt power cycle [ 45.256034][ T45] usb 4-1: new high-speed USB device number 12 using dummy_hcd [ 45.360713][ T347] usb 3-1: new high-speed USB device number 12 using dummy_hcd [ 45.396187][ T347] usb 3-1: device descriptor read/8, error -71 [ 45.440731][ T45] usb 4-1: Using ep0 maxpacket: 8 [ 45.448354][ T45] usb 4-1: New USB device found, idVendor=041e, idProduct=3000, bcdDevice= 0.40 [ 45.463540][ T45] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 45.482482][ T45] usb 4-1: Product: syz [ 45.486982][ T45] usb 4-1: Manufacturer: syz [ 45.500712][ T45] usb 4-1: SerialNumber: syz [ 45.541758][ T347] usb 3-1: device descriptor read/8, error -71 [ 45.713998][ T45] usb 4-1: Unsupported UAC3 BADD profile [ 45.751057][ T45] snd-usb-audio 4-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 45.765652][ T36] audit: type=1400 audit(1792724074.570:215): avc: denied { unmount } for pid=293 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 45.780931][ T347] usb 3-1: new high-speed USB device number 13 using dummy_hcd [ 45.794364][ T45] usb 4-1: USB disconnect, device number 12 [ 45.833005][ T347] usb 3-1: device descriptor read/8, error -71 [ 45.841999][ T356] udevd[356]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 45.870548][ T922] overlayfs: failed to resolve './cgroup': -2 [ 45.877350][ T922] netlink: 12 bytes leftover after parsing attributes in process `syz.0.207'. [ 45.905966][ T925] FAULT_INJECTION: forcing a failure. [ 45.905966][ T925] name failslab, interval 1, probability 0, space 0, times 0 [ 45.918809][ T925] CPU: 1 UID: 0 PID: 925 Comm: syz.0.208 Not tainted syzkaller #0 ae7936ebab52aae609823c9494ba9ebab2c98923 [ 45.918851][ T925] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 45.918867][ T925] Call Trace: [ 45.918874][ T925] [ 45.918884][ T925] __dump_stack+0x21/0x30 [ 45.918924][ T925] dump_stack_lvl+0x140/0x1c0 [ 45.918958][ T925] ? __cfi_dump_stack_lvl+0x10/0x10 [ 45.918991][ T925] ? __lruvec_stat_mod_folio+0x13f/0x1a0 [ 45.919017][ T925] dump_stack+0x19/0x20 [ 45.919051][ T925] should_fail_ex+0x3c2/0x510 [ 45.919074][ T925] should_failslab+0xac/0x100 [ 45.919096][ T925] kmem_cache_alloc_noprof+0x42/0x410 [ 45.919132][ T925] ? __pte_alloc+0x1ae/0x440 [ 45.919165][ T925] ? __anon_vma_prepare+0xa5/0x590 [ 45.919200][ T925] __anon_vma_prepare+0xa5/0x590 [ 45.919235][ T925] do_pte_missing+0x2bbf/0x4440 [ 45.919265][ T925] ? pte_marker_clear+0x1b0/0x1b0 [ 45.919290][ T925] ? mas_next_slot+0xefa/0xfd0 [ 45.919325][ T925] ? walk_pgd_range+0x1b54/0x1c20 [ 45.919358][ T925] handle_mm_fault+0x1189/0x1ba0 [ 45.919393][ T925] ? __cfi_handle_mm_fault+0x10/0x10 [ 45.919419][ T925] ? __cfi_find_vma+0x10/0x10 [ 45.919455][ T925] ? vma_is_secretmem+0x11/0x50 [ 45.919485][ T925] ? check_vma_flags+0x36d/0x3a0 [ 45.919515][ T925] __get_user_pages+0x114b/0x22d0 [ 45.919548][ T925] ? populate_vma_page_range+0x220/0x220 [ 45.919574][ T925] ? down_read+0x7f/0xe0 [ 45.919606][ T925] ? __cfi_down_read+0x10/0x10 [ 45.919641][ T925] __mm_populate+0x300/0x440 [ 45.919668][ T925] do_mlock+0x7f3/0xa10 [ 45.919698][ T925] ? fput+0x1a4/0x230 [ 45.919722][ T925] ? lru_gen_add_folio+0x880/0x880 [ 45.919752][ T925] ? xfd_validate_state+0x68/0x140 [ 45.919792][ T925] ? __kasan_check_write+0x18/0x20 [ 45.919826][ T925] __x64_sys_mlock+0x64/0x80 [ 45.919852][ T925] x64_sys_call+0x670/0x2ee0 [ 45.919877][ T925] do_syscall_64+0x57/0xf0 [ 45.919901][ T925] ? clear_bhb_loop+0x50/0xa0 [ 45.919934][ T925] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 45.919967][ T925] RIP: 0033:0x7f648dd9f559 [ 45.919988][ T925] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 45.920010][ T925] RSP: 002b:00007f648ebcb028 EFLAGS: 00000246 ORIG_RAX: 0000000000000095 [ 45.920038][ T925] RAX: ffffffffffffffda RBX: 00007f648e025fa0 RCX: 00007f648dd9f559 [ 45.920057][ T925] RDX: 0000000000000000 RSI: 0000000000004018 RDI: 0000200000ffb000 [ 45.920074][ T925] RBP: 00007f648de36b20 R08: 0000000000000000 R09: 0000000000000000 [ 45.920091][ T925] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 45.920106][ T925] R13: 00007f648e026038 R14: 00007f648e025fa0 R15: 00007ffd13fa8ee8 [ 45.920128][ T925] [ 46.052242][ T347] usb 3-1: device descriptor read/8, error -71 [ 46.227940][ T927] netlink: 'syz.0.209': attribute type 4 has an invalid length. [ 46.262568][ T929] tipc: Enabling of bearer rejected, media not registered [ 46.321058][ T347] usb usb3-port1: unable to enumerate USB device [ 46.342081][ T937] netlink: 'syz.3.214': attribute type 15 has an invalid length. [ 46.349872][ T937] netlink: 24 bytes leftover after parsing attributes in process `syz.3.214'. [ 46.373552][ T943] FAULT_INJECTION: forcing a failure. [ 46.373552][ T943] name failslab, interval 1, probability 0, space 0, times 0 [ 46.393861][ T943] CPU: 1 UID: 0 PID: 943 Comm: syz.2.216 Not tainted syzkaller #0 ae7936ebab52aae609823c9494ba9ebab2c98923 [ 46.393897][ T943] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 46.393912][ T943] Call Trace: [ 46.393919][ T943] [ 46.393928][ T943] __dump_stack+0x21/0x30 [ 46.393966][ T943] dump_stack_lvl+0x140/0x1c0 [ 46.393999][ T943] ? __cfi_dump_stack_lvl+0x10/0x10 [ 46.394034][ T943] dump_stack+0x19/0x20 [ 46.394066][ T943] should_fail_ex+0x3c2/0x510 [ 46.394089][ T943] should_failslab+0xac/0x100 [ 46.394112][ T943] __kmalloc_cache_noprof+0x41/0x470 [ 46.394145][ T943] ? tracing_map_array_alloc+0x49a/0x7b0 [ 46.394181][ T943] ? trigger_data_alloc+0xaa/0x280 [ 46.394206][ T943] ? __cfi_tracing_map_cmp_u64+0x10/0x10 [ 46.394241][ T943] trigger_data_alloc+0xaa/0x280 [ 46.394266][ T943] event_hist_trigger_parse+0x3b0a/0x5620 [ 46.394291][ T943] ? stack_depot_save_flags+0x38/0x800 [ 46.394322][ T943] ? __cfi_event_hist_trigger_parse+0x10/0x10 [ 46.394352][ T943] ? __kasan_check_write+0x18/0x20 [ 46.394383][ T943] ? mutex_lock+0x97/0x1d0 [ 46.394413][ T943] ? __cfi_mutex_lock+0x10/0x10 [ 46.394441][ T943] ? check_stack_object+0x81/0x150 [ 46.394474][ T943] ? __check_object_size+0x54c/0x870 [ 46.394507][ T943] trigger_process_regex+0x1e3/0x280 [ 46.394533][ T943] ? __cfi_trigger_process_regex+0x10/0x10 [ 46.394559][ T943] ? __kasan_check_write+0x18/0x20 [ 46.394589][ T943] ? strim+0x190/0x1d0 [ 46.394620][ T943] event_trigger_write+0x142/0x1e0 [ 46.394645][ T943] ? __cfi_event_trigger_write+0x10/0x10 [ 46.394670][ T943] vfs_write+0x3c4/0xfd0 [ 46.394704][ T943] ? __cfi_vfs_write+0x10/0x10 [ 46.394735][ T943] ? __kasan_check_write+0x18/0x20 [ 46.394775][ T943] ? mutex_lock+0x97/0x1d0 [ 46.394804][ T943] ? __cfi_mutex_lock+0x10/0x10 [ 46.394835][ T943] ksys_write+0x145/0x260 [ 46.394868][ T943] ? __cfi_ksys_write+0x10/0x10 [ 46.394902][ T943] ? __kasan_check_read+0x15/0x20 [ 46.394933][ T943] __x64_sys_write+0x7f/0x90 [ 46.394966][ T943] x64_sys_call+0x271c/0x2ee0 [ 46.394990][ T943] do_syscall_64+0x57/0xf0 [ 46.395013][ T943] ? clear_bhb_loop+0x50/0xa0 [ 46.395045][ T943] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 46.395075][ T943] RIP: 0033:0x7ff5b239f559 [ 46.395094][ T943] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 46.395114][ T943] RSP: 002b:00007ff5b0df7028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 46.395140][ T943] RAX: ffffffffffffffda RBX: 00007ff5b2625fa0 RCX: 00007ff5b239f559 [ 46.395159][ T943] RDX: 000000000000001a RSI: 0000200000001740 RDI: 0000000000000003 [ 46.395174][ T943] RBP: 00007ff5b0df7090 R08: 0000000000000000 R09: 0000000000000000 [ 46.395190][ T943] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 46.395205][ T943] R13: 00007ff5b2626038 R14: 00007ff5b2625fa0 R15: 00007fff19995f78 [ 46.395226][ T943] [ 46.396211][ T943] Oops: general protection fault, probably for non-canonical address 0xdffffc0000000004: 0000 [#1] PREEMPT SMP KASAN PTI [ 46.504602][ T937] kvm: kvm [935]: vcpu0, guest rIP: 0x9114 Unhandled WRMSR(0xc2) = 0x9d00 [ 46.505246][ T943] KASAN: null-ptr-deref in range [0x0000000000000020-0x0000000000000027] [ 46.510538][ T937] kvm: kvm [935]: vcpu0, guest rIP: 0x9114 Unhandled WRMSR(0xc1) = 0x9d00 [ 46.515332][ T943] CPU: 1 UID: 0 PID: 943 Comm: syz.2.216 Not tainted syzkaller #0 ae7936ebab52aae609823c9494ba9ebab2c98923 [ 46.515361][ T943] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 46.515374][ T943] RIP: 0010:set_trigger_filter+0x1b2/0x540 [ 46.515408][ T943] Code: 28 f6 ff b8 ea ff ff ff e9 c5 01 00 00 e8 06 28 f6 ff c7 44 24 0c ea ff ff ff 48 8b 44 24 10 4c 8d 78 20 4d 89 fe 49 c1 ee 03 <43> 80 3c 26 00 74 08 4c 89 ff e8 df af 4f 00 4d 8b 27 4c 8b 6c 24 [ 46.591978][ T36] audit: type=1400 audit(1792724075.360:216): avc: denied { mounton } for pid=935 comm="syz.3.214" path="/syzcgroup/unified/syz3" dev="cgroup2" ino=29 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=dir permissive=1 [ 46.594781][ T943] RSP: 0018:ffffc9000edf77a0 EFLAGS: 00010202 [ 46.690844][ T36] audit: type=1400 audit(1792724075.490:217): avc: denied { read } for pid=92 comm="syslogd" name="log" dev="sda1" ino=2010 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:var_t tclass=lnk_file permissive=1 [ 46.702700][ T943] [ 46.702710][ T943] RAX: 0000000000000000 RBX: 1ffff92001dbeef8 RCX: ffff88811039a780 [ 46.702728][ T943] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 46.702742][ T943] RBP: ffffc9000edf7870 R08: 0000000000000100 R09: 1ffffffff0fd7642 [ 46.702758][ T943] R10: 0000000000000000 R11: ffffffff81932560 R12: dffffc0000000000 [ 46.717175][ T36] audit: type=1400 audit(1792724075.490:218): avc: denied { search } for pid=92 comm="syslogd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 46.719683][ T943] R13: 0000000000000000 R14: 0000000000000004 R15: 0000000000000020 [ 46.719702][ T943] FS: 00007ff5b0df76c0(0000) GS:ffff8881f6d00000(0000) knlGS:0000000000000000 [ 46.899847][ T943] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 46.902176][ T945] overlayfs: failed to resolve './cgroup': -2 [ 46.906474][ T943] CR2: 0000200000001682 CR3: 0000000115726000 CR4: 00000000003526b0 [ 46.906500][ T943] Call Trace: [ 46.906508][ T943] [ 46.926909][ T943] ? __kasan_kmalloc+0x28/0xb0 [ 46.931716][ T943] ? __cfi_set_trigger_filter+0x10/0x10 [ 46.937318][ T943] ? tracing_map_array_alloc+0x49a/0x7b0 [ 46.943009][ T943] ? trigger_data_alloc+0xaa/0x280 [ 46.948188][ T943] ? __cfi_tracing_map_cmp_u64+0x10/0x10 [ 46.953881][ T943] ? __cfi_set_trigger_filter+0x10/0x10 [ 46.959474][ T943] event_trigger_reset_filter+0x64/0x80 [ 46.961181][ T951] netlink: 12 bytes leftover after parsing attributes in process `syz.0.217'. [ 46.965064][ T943] event_hist_trigger_parse+0x3f14/0x5620 [ 46.979842][ T943] ? stack_depot_save_flags+0x38/0x800 [ 46.985362][ T943] ? __cfi_event_hist_trigger_parse+0x10/0x10 [ 46.991481][ T943] ? __kasan_check_write+0x18/0x20 [ 46.996649][ T943] ? mutex_lock+0x97/0x1d0 [ 47.001112][ T943] ? __cfi_mutex_lock+0x10/0x10 [ 47.006006][ T943] ? check_stack_object+0x81/0x150 [ 47.011177][ T943] ? __check_object_size+0x54c/0x870 [ 47.016956][ T943] trigger_process_regex+0x1e3/0x280 [ 47.022384][ T943] ? __cfi_trigger_process_regex+0x10/0x10 [ 47.028241][ T943] ? __kasan_check_write+0x18/0x20 [ 47.033418][ T943] ? strim+0x190/0x1d0 [ 47.037803][ T943] event_trigger_write+0x142/0x1e0 [ 47.042966][ T943] ? __cfi_event_trigger_write+0x10/0x10 [ 47.048864][ T943] vfs_write+0x3c4/0xfd0 [ 47.053176][ T943] ? __cfi_vfs_write+0x10/0x10 [ 47.058008][ T943] ? __kasan_check_write+0x18/0x20 [ 47.063178][ T943] ? mutex_lock+0x97/0x1d0 [ 47.067647][ T943] ? __cfi_mutex_lock+0x10/0x10 [ 47.072555][ T943] ksys_write+0x145/0x260 [ 47.076959][ T943] ? __cfi_ksys_write+0x10/0x10 [ 47.081913][ T943] ? __kasan_check_read+0x15/0x20 [ 47.086997][ T943] __x64_sys_write+0x7f/0x90 [ 47.091648][ T943] x64_sys_call+0x271c/0x2ee0 [ 47.096473][ T943] do_syscall_64+0x57/0xf0 [ 47.100940][ T943] ? clear_bhb_loop+0x50/0xa0 [ 47.105676][ T943] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 47.111620][ T943] RIP: 0033:0x7ff5b239f559 [ 47.116087][ T943] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 47.135916][ T943] RSP: 002b:00007ff5b0df7028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 47.144467][ T943] RAX: ffffffffffffffda RBX: 00007ff5b2625fa0 RCX: 00007ff5b239f559 [ 47.152511][ T943] RDX: 000000000000001a RSI: 0000200000001740 RDI: 0000000000000003 [ 47.160545][ T943] RBP: 00007ff5b0df7090 R08: 0000000000000000 R09: 0000000000000000 [ 47.168607][ T943] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 47.176624][ T943] R13: 00007ff5b2626038 R14: 00007ff5b2625fa0 R15: 00007fff19995f78 [ 47.184829][ T943] [ 47.187906][ T943] Modules linked in: [ 47.192047][ T943] ---[ end trace 0000000000000000 ]--- [ 47.201769][ T943] RIP: 0010:set_trigger_filter+0x1b2/0x540 [ 47.207758][ T943] Code: 28 f6 ff b8 ea ff ff ff e9 c5 01 00 00 e8 06 28 f6 ff c7 44 24 0c ea ff ff ff 48 8b 44 24 10 4c 8d 78 20 4d 89 fe 49 c1 ee 03 <43> 80 3c 26 00 74 08 4c 89 ff e8 df af 4f 00 4d 8b 27 4c 8b 6c 24 [ 47.238701][ T943] RSP: 0018:ffffc9000edf77a0 EFLAGS: 00010202 [ 47.251608][ T943] RAX: 0000000000000000 RBX: 1ffff92001dbeef8 RCX: ffff88811039a780 [ 47.259893][ T943] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 47.268205][ T943] RBP: ffffc9000edf7870 R08: 0000000000000100 R09: 1ffffffff0fd7642 [ 47.276473][ T943] R10: 0000000000000000 R11: ffffffff81932560 R12: dffffc0000000000 [ 47.284811][ T943] R13: 0000000000000000 R14: 0000000000000004 R15: 0000000000000020 [ 47.293038][ T943] FS: 00007ff5b0df76c0(0000) GS:ffff8881f6c00000(0000) knlGS:0000000000000000 [ 47.302237][ T943] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 47.310035][ T943] CR2: 00007f648dff62f8 CR3: 0000000115726000 CR4: 00000000003526b0 [ 47.327581][ T943] Kernel panic - not syncing: Fatal exception [ 47.334360][ T943] Kernel Offset: disabled [ 47.338723][ T943] Rebooting in 86400 seconds..