last executing test programs: 8.212194423s ago: executing program 2 (id=220): r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) connect$inet6(r0, &(0x7f0000000980)={0xa, 0x0, 0x0, @mcast2, 0x9}, 0x1c) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r1, &(0x7f0000000300)=ANY=[], 0x32600) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r1, 0x0) write(r0, &(0x7f0000000a00)="8f2a0a65", 0x4) 8.212103653s ago: executing program 2 (id=221): iopl(0x3) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000018c0)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) r1 = syz_open_procfs(0x0, &(0x7f0000000000)='net/fib_triestat\x00') preadv(r1, 0x0, 0x0, 0xffffffff, 0x34) 8.212039833s ago: executing program 2 (id=222): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x40042, 0x1) mount$9p_fd(0x0, &(0x7f0000000280)='./file0\x00', &(0x7f00000002c0), 0x40, &(0x7f0000000300)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r1, @ANYBLOB=',wfdno=', @ANYRESHEX=r0]) 8.212002063s ago: executing program 2 (id=223): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) mount$bind(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x2125099, 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000100)='\x00', 0x9801) move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) umount2(&(0x7f0000000300)='./file0\x00', 0x9) 8.211963503s ago: executing program 2 (id=224): request_key(&(0x7f0000000380)='dns_resolver\x00', &(0x7f00000003c0)={'syz', 0x1}, &(0x7f0000000400)='\x00', 0xffffffffffffffff) 8.062468797s ago: executing program 2 (id=225): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$fou(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$FOU_CMD_ADD(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000002c0)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="01002abd7000fbdbdf250100000008000800ac141431050004000200000006000a004e"], 0x2c}, 0x1, 0x0, 0x0, 0x40688c4}, 0x10) 8.034736567s ago: executing program 32 (id=225): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$fou(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$FOU_CMD_ADD(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000002c0)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="01002abd7000fbdbdf250100000008000800ac141431050004000200000006000a004e"], 0x2c}, 0x1, 0x0, 0x0, 0x40688c4}, 0x10) 1.092035933s ago: executing program 1 (id=495): r0 = socket$inet6_icmp(0xa, 0x2, 0x3a) ioctl$NILFS_IOCTL_SET_SUINFO(r0, 0x40186e8d, 0x0) 1.084613814s ago: executing program 1 (id=496): sched_setscheduler(0x0, 0x2, 0x0) sched_setscheduler(0x0, 0x1, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r1, &(0x7f0000000240), 0x318, 0x0) recvmmsg(r0, 0x0, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$unix(r2, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000440)=[{&(0x7f0000000480)="c4", 0x1}], 0x1, &(0x7f00000004c0)=ANY=[@ANYBLOB="14000000000000000100000001"], 0x18}, 0xc800) setsockopt$sock_int(r3, 0x1, 0x2a, &(0x7f0000000500), 0x4) recvmmsg(r3, &(0x7f0000000540), 0x700, 0x2, 0x0) 300.224663ms ago: executing program 4 (id=526): r0 = socket$nl_route(0x10, 0x3, 0x0) write(r0, &(0x7f0000000880)="240000002a0001039900000000000000000000000100"/36, 0x24) 280.038403ms ago: executing program 4 (id=527): r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000200), 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000380)={{0x1, 0x0, 0x0, 0x3}}) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r0, 0x40505412, &(0x7f00000003c0)={0x6, 0x20000006, 0x0, 0x0, 0xd}) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x1, 0x401d031, 0xffffffffffffffff, 0x0) ioctl$SNDRV_TIMER_IOCTL_START(r0, 0x54a0) 278.768663ms ago: executing program 4 (id=528): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000400)=ANY=[@ANYBLOB="140000001000010000000000000000000200000a20000000000a01080000000000000000020000000900010073797a300000000064000000090a010400000000000000000200000008000a40000000010900020073797a31000000000900010073797a300000000008000540000000080800034000000084200009801c0002800c00018008000140000000040c0001800800014000000004540000000c0af9400000000000000000020000000900020073797a31000000000900010073797a30000000002800038024000080100001800c000100e7ffff7f0000000010000a800c0001"], 0x100}}, 0x0) 220.193715ms ago: executing program 4 (id=529): r0 = socket(0x10, 0x803, 0x0) write(r0, &(0x7f0000000940)="2600000022024780e8ff06006d00000078cc6f920a97c99f494e83cf3b21f84fcf47e2af0bf9", 0x26) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000980)=0x61, 0x4) sendto(r0, &(0x7f00000009c0)="120000001200e7ef007b00000000000000a1", 0x12, 0x20000090, 0x0, 0x0) recvmmsg(r0, &(0x7f0000000a00)=[{{0x0, 0x0, &(0x7f0000000a40)=[{&(0x7f0000000dc0)=""/4082, 0xff2}, {&(0x7f0000001dc0)=""/278, 0x116}, {&(0x7f0000001f00)=""/147, 0x93}, {&(0x7f0000001fc0)=""/173, 0xad}, {&(0x7f0000002080)=""/115, 0x73}, {&(0x7f0000002100)=""/123, 0x7b}, {&(0x7f0000002180)=""/160, 0xa0}, {&(0x7f0000002240)=""/238, 0xee}, {&(0x7f0000002340)=""/57, 0x39}, {&(0x7f0000002380)=""/86, 0x56}], 0xa}, 0x10001}], 0x40000000000009a, 0x40010160, 0x0) 220.038595ms ago: executing program 4 (id=532): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000f80)={0x0, 0x0, &(0x7f0000000fc0)={&(0x7f0000001000)=ANY=[@ANYBLOB="6c000000020603000000000000000000020000001c0007800800064000000001050015000200000008001240000040000500010006000000050005000200000005000400050000000900020073797a310000000015000300686173683a69702c706f7274"], 0x6c}, 0x1, 0x0, 0x0, 0x810}, 0x20004000) 215.394655ms ago: executing program 4 (id=533): socket$nl_xfrm(0x10, 0x3, 0x6) socket$key(0xf, 0x3, 0x2) socket$nl_route(0x10, 0x3, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socket(0x28, 0x5, 0x0) r0 = socket(0x28, 0x5, 0x0) bind$vsock_stream(r0, &(0x7f00000003c0)={0x28, 0x0, 0x0, @local}, 0x10) listen(r0, 0x4) accept4$unix(r0, 0x0, 0x0, 0x800) socket$inet_udp(0x2, 0x2, 0x0) socket$packet(0x11, 0x3, 0x300) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r1, 0x107, 0x14, &(0x7f0000000080)=0xfff, 0x4) socketpair(0x1, 0x100000005, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) getpeername$packet(r2, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000040)=0x14) sendmmsg(r1, &(0x7f0000000440)=[{{&(0x7f0000000700)=@xdp={0x2c, 0x0, r3}, 0x80, &(0x7f00000004c0)=[{&(0x7f0000000180)='O', 0x36}], 0x1}}], 0x1, 0x0) 160.163936ms ago: executing program 0 (id=535): r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$PIO_UNIMAP(r0, 0x4b52, &(0x7f00000002c0)={0xfffffffffffffe91, 0x0}) 160.052176ms ago: executing program 1 (id=536): r0 = socket$netlink(0x10, 0x3, 0x4) writev(r0, &(0x7f00000000c0)=[{&(0x7f00000002c0)="580000001400192340834b80040d8c560a067fbc45ff810500000000070058000b480400945f640094272d7061d328b92d0000000000008000f0fffeffe809000000fff5dd000000100001000b0808004149004001040800", 0x58}], 0x1) 159.969387ms ago: executing program 3 (id=537): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000540)={{0x14, 0x10, 0x1, 0x0, 0x0, {0xa}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x401, 0x0, 0x0, {0x1, 0x0, 0x8000}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x101, 0x0, 0x0, {0x1, 0x0, 0x1}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}]}, @NFT_MSG_NEWRULE={0x54, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_EXPRESSIONS={0x2c, 0x4, 0x0, 0x1, [{0x28, 0x1, 0x0, 0x1, @quota={{0xa}, @val={0x18, 0x2, 0x0, 0x1, [@NFTA_QUOTA_FLAGS={0x8}, @NFTA_QUOTA_BYTES={0xc}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x7}}}, 0xc8}}, 0x0) 159.942796ms ago: executing program 0 (id=538): mkdirat(0xffffffffffffff9c, &(0x7f0000000500)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000540)='./file0\x00', &(0x7f0000000580)='proc\x00', 0x1000451, 0x0) mount$9p_unix(&(0x7f00000005c0)='./file0\x00', &(0x7f0000000600)='./file0\x00', &(0x7f0000000640), 0x400000, &(0x7f0000000680)=ANY=[@ANYBLOB='trans=unix']) 143.735407ms ago: executing program 1 (id=539): r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_rx_ring(r0, 0x107, 0x5, &(0x7f0000000000)=@req3={0x1000, 0x3a, 0x1000, 0x3a, 0x9, 0x0, 0xffffffff}, 0x1c) close(r0) 139.810207ms ago: executing program 3 (id=540): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000680)={&(0x7f00000006c0)=ANY=[@ANYBLOB="88000000000101040000000000000000020000060800074000000007240002801400018008000100e000000108000200ac1414270c0002800500010000000000240001801400018008000100e000000108000200ac1414000c000280050001000000040024000e800c000280050001002100000014000180080001"], 0x88}, 0x1, 0x0, 0x0, 0x8000}, 0x0) 68.040609ms ago: executing program 1 (id=541): prctl$PR_SET_MM_MAP(0x23, 0xe, 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) r0 = gettid() timer_create(0x1, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) pipe(&(0x7f0000000440)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) splice(r2, 0x0, r1, 0x0, 0x10000008ebc, 0x0) close(0x3) 67.957609ms ago: executing program 0 (id=542): r0 = socket$inet(0x2, 0x2, 0x11) r1 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r1, &(0x7f0000000380)=@pppol2tp={0x18, 0x1, {0x0, r0, {0x2, 0x115c, @loopback}, 0x1, 0x0, 0x1}}, 0x26) mkdirat(0xffffffffffffff9c, &(0x7f00000003c0)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000400)='./proc\x00', &(0x7f0000000440)='proc\x00', 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000dc0)='./proc/net/pppol2tp\x00', 0x80, 0x0) read(r2, &(0x7f0000000e00), 0x1) r3 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r3, &(0x7f0000000e40)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x4e23, @multicast2}, 0x1, 0x4}}, 0x26) read(r2, &(0x7f0000000e80), 0x120) read(r2, &(0x7f0000000ec0), 0x1000) 67.919218ms ago: executing program 3 (id=543): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$devlink(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_SET(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000b40)={0x34, r1, 0x1, 0x70bd2a, 0x25dfdbfd, {}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x34}, 0x1, 0x0, 0x0, 0x48080}, 0x0) 67.823809ms ago: executing program 0 (id=544): r0 = socket(0x2b, 0x1, 0x1) sendmmsg$sock(r0, &(0x7f0000001280)=[{{&(0x7f0000000240)=@in6={0xa, 0x0, 0x0, @dev={0xfe, 0x80, '\x00', 0xff}, 0x5}, 0x80, 0x0}}], 0x1, 0x20000001) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x4}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r1, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) sendmmsg$unix(r0, &(0x7f0000007cc0)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000b40)=ANY=[@ANYBLOB="100000000000002301"], 0x10, 0x4008050}}], 0x1, 0x1) 67.780509ms ago: executing program 3 (id=545): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01010000000000000000010000000900010073797a30000000002c000000030a01020000000000000000010000000900010073797a30000000000900030073797a31f5ffffff38000000030a01040000000000000000010000010900030001007a32000000000c00024000000000000000010900010073797a300000000014000000110001"], 0xac}, 0x1, 0x0, 0x0, 0x4040}, 0x0) 63.708559ms ago: executing program 0 (id=546): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000400)=@newsa={0x150, 0x10, 0x413, 0x0, 0x25dfdbfb, {{@in6=@remote, @in6=@empty, 0x0, 0x0, 0x4e24, 0x0, 0x2, 0x0, 0x20, 0x0, 0x0, 0xee00}, {@in6=@ipv4={'\x00', '\xff\xff', @remote}, 0x4d4, 0x32}, @in=@dev, {0x0, 0x0, 0x0, 0x80000000000000, 0xffffffffffffffff, 0x0, 0x20000000008, 0xfffffffffffffffd}, {0x0, 0x1, 0xcc}, {0xf6}, 0x70bd2c, 0x0, 0xa, 0x1, 0x9, 0x4c}, [@algo_aead={0x5f, 0x12, {{'rfc4309(ccm(aes))\x00'}, 0x98, 0x80, "bed40c8022674b0ecf0153d786cfc67c1aa8a9"}}]}, 0x150}, 0x1, 0x0, 0x0, 0x80c0}, 0x0) 58.678749ms ago: executing program 3 (id=547): r0 = openat$selinux_attr(0xffffffffffffff9c, &(0x7f0000000100)='/proc/thread-self/attr/current\x00', 0x2, 0x0) write$selinux_attr(r0, &(0x7f0000000140)='system_u:object_r:hugetlbfs_t:s0\x00', 0x1d) 133.071µs ago: executing program 0 (id=548): r0 = socket(0xa, 0x1, 0x84) setsockopt$inet_group_source_req(r0, 0x0, 0x2e, &(0x7f0000000100)={0x1, {{0x2, 0x4e24, @multicast2}}, {{0x2, 0x4e23, @multicast2}}}, 0x108) setsockopt$inet_MCAST_MSFILTER(r0, 0x0, 0x30, &(0x7f0000000240)=ANY=[@ANYBLOB="010000000000000002004e20e0000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000200000002004e20e000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002"], 0x190) r1 = socket(0xa, 0x1, 0x84) setsockopt$inet_group_source_req(r1, 0x0, 0x2e, &(0x7f0000000380)={0x1, {{0x2, 0x4e24, @multicast2}}, {{0x2, 0x4e23, @multicast2}}}, 0x108) 54.911µs ago: executing program 3 (id=549): r0 = add_key(&(0x7f00000004c0)='asymmetric\x00', 0x0, &(0x7f0000000940)="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", 0x559, 0xfffffffffffffffd) keyctl$KEYCTL_PKEY_VERIFY(0x1c, &(0x7f0000000ec0)={r0}, &(0x7f0000000f00)={'enc=', 'pkcs1', ' hash=', {'sha256\x00'}}, 0x0, 0x0) 0s ago: executing program 1 (id=550): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000009c0)=ANY=[@ANYBLOB="50010000100001002cbc700000000008fc000000000000000000000000000001fe8800000000000000000000000000010000ecdf00005e332870000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="00000000000000000000ffffe0000001000000003200000000000000000000000000000000000000fefffffffffffffffeffffffffffffff030000000000000000000000000000000000000000000000fcffffffffffffff000000000000000009000000000000000100000000000000000840000000000009000000000000009202000000000000001000000000000000000000000000000735000002"], 0x150}}, 0x44050) kernel console output (not intermixed with test programs): [ 13.993216][ T36] audit: type=1400 audit(1791989217.040:62): avc: denied { rlimitinh } for pid=232 comm="sh" scontext=system_u:system_r:sshd_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 13.995867][ T36] audit: type=1400 audit(1791989217.040:63): avc: denied { siginh } for pid=232 comm="sh" scontext=system_u:system_r:sshd_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 Warning: Permanently added '10.128.1.6' (ED25519) to the list of known hosts. [ 20.926816][ T36] audit: type=1400 audit(1791989223.990:64): avc: denied { mounton } for pid=286 comm="syz-executor" path="/syzcgroup/unified" dev="sda1" ino=2023 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1 [ 20.928029][ T286] cgroup: Unknown subsys name 'net' [ 20.949546][ T36] audit: type=1400 audit(1791989223.990:65): avc: denied { mount } for pid=286 comm="syz-executor" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 20.976792][ T36] audit: type=1400 audit(1791989224.030:66): avc: denied { unmount } for pid=286 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 20.977022][ T286] cgroup: Unknown subsys name 'devices' [ 21.084334][ T286] cgroup: Unknown subsys name 'hugetlb' [ 21.089946][ T286] cgroup: Unknown subsys name 'rlimit' [ 21.202026][ T36] audit: type=1400 audit(1791989224.260:67): avc: denied { setattr } for pid=286 comm="syz-executor" name="raw-gadget" dev="devtmpfs" ino=190 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 21.225223][ T36] audit: type=1400 audit(1791989224.260:68): avc: denied { mounton } for pid=286 comm="syz-executor" path="/proc/sys/fs/binfmt_misc" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=dir permissive=1 [ 21.249937][ T36] audit: type=1400 audit(1791989224.270:69): avc: denied { mount } for pid=286 comm="syz-executor" name="/" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=filesystem permissive=1 [ 21.275771][ T288] SELinux: Context root:object_r:swapfile_t is not valid (left unmapped). Setting up swapspace version 1, size = 127995904 bytes [ 21.284549][ T36] audit: type=1400 audit(1791989224.350:70): avc: denied { relabelto } for pid=288 comm="mkswap" name="swap-file" dev="sda1" ino=2026 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 21.309956][ T36] audit: type=1400 audit(1791989224.350:71): avc: denied { write } for pid=288 comm="mkswap" path="/root/swap-file" dev="sda1" ino=2026 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 21.322555][ T286] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 21.335682][ T36] audit: type=1400 audit(1791989224.390:72): avc: denied { read } for pid=286 comm="syz-executor" name="swap-file" dev="sda1" ino=2026 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 21.369953][ T36] audit: type=1400 audit(1791989224.390:73): avc: denied { open } for pid=286 comm="syz-executor" path="/root/swap-file" dev="sda1" ino=2026 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 22.220250][ T296] bridge0: port 1(bridge_slave_0) entered blocking state [ 22.227453][ T296] bridge0: port 1(bridge_slave_0) entered disabled state [ 22.234744][ T296] bridge_slave_0: entered allmulticast mode [ 22.240969][ T296] bridge_slave_0: entered promiscuous mode [ 22.249993][ T296] bridge0: port 2(bridge_slave_1) entered blocking state [ 22.257151][ T296] bridge0: port 2(bridge_slave_1) entered disabled state [ 22.264315][ T296] bridge_slave_1: entered allmulticast mode [ 22.270572][ T296] bridge_slave_1: entered promiscuous mode [ 22.283445][ T295] bridge0: port 1(bridge_slave_0) entered blocking state [ 22.290496][ T295] bridge0: port 1(bridge_slave_0) entered disabled state [ 22.297605][ T295] bridge_slave_0: entered allmulticast mode [ 22.303792][ T295] bridge_slave_0: entered promiscuous mode [ 22.312905][ T295] bridge0: port 2(bridge_slave_1) entered blocking state [ 22.319997][ T295] bridge0: port 2(bridge_slave_1) entered disabled state [ 22.327348][ T295] bridge_slave_1: entered allmulticast mode [ 22.333639][ T295] bridge_slave_1: entered promiscuous mode [ 22.339659][ T294] bridge0: port 1(bridge_slave_0) entered blocking state [ 22.346745][ T294] bridge0: port 1(bridge_slave_0) entered disabled state [ 22.353850][ T294] bridge_slave_0: entered allmulticast mode [ 22.360014][ T294] bridge_slave_0: entered promiscuous mode [ 22.373959][ T294] bridge0: port 2(bridge_slave_1) entered blocking state [ 22.381007][ T294] bridge0: port 2(bridge_slave_1) entered disabled state [ 22.388121][ T294] bridge_slave_1: entered allmulticast mode [ 22.394323][ T294] bridge_slave_1: entered promiscuous mode [ 22.414005][ T293] bridge0: port 1(bridge_slave_0) entered blocking state [ 22.421058][ T293] bridge0: port 1(bridge_slave_0) entered disabled state [ 22.428155][ T293] bridge_slave_0: entered allmulticast mode [ 22.434446][ T293] bridge_slave_0: entered promiscuous mode [ 22.443561][ T293] bridge0: port 2(bridge_slave_1) entered blocking state [ 22.450612][ T293] bridge0: port 2(bridge_slave_1) entered disabled state [ 22.457744][ T293] bridge_slave_1: entered allmulticast mode [ 22.464055][ T293] bridge_slave_1: entered promiscuous mode [ 22.606585][ T295] bridge0: port 2(bridge_slave_1) entered blocking state [ 22.613665][ T295] bridge0: port 2(bridge_slave_1) entered forwarding state [ 22.620977][ T295] bridge0: port 1(bridge_slave_0) entered blocking state [ 22.628030][ T295] bridge0: port 1(bridge_slave_0) entered forwarding state [ 22.636377][ T296] bridge0: port 2(bridge_slave_1) entered blocking state [ 22.643442][ T296] bridge0: port 2(bridge_slave_1) entered forwarding state [ 22.650739][ T296] bridge0: port 1(bridge_slave_0) entered blocking state [ 22.657791][ T296] bridge0: port 1(bridge_slave_0) entered forwarding state [ 22.671542][ T294] bridge0: port 2(bridge_slave_1) entered blocking state [ 22.678660][ T294] bridge0: port 2(bridge_slave_1) entered forwarding state [ 22.685956][ T294] bridge0: port 1(bridge_slave_0) entered blocking state [ 22.692993][ T294] bridge0: port 1(bridge_slave_0) entered forwarding state [ 22.701916][ T293] bridge0: port 2(bridge_slave_1) entered blocking state [ 22.708985][ T293] bridge0: port 2(bridge_slave_1) entered forwarding state [ 22.716287][ T293] bridge0: port 1(bridge_slave_0) entered blocking state [ 22.723342][ T293] bridge0: port 1(bridge_slave_0) entered forwarding state [ 22.774622][ T46] bridge0: port 1(bridge_slave_0) entered disabled state [ 22.782075][ T46] bridge0: port 1(bridge_slave_0) entered disabled state [ 22.789402][ T46] bridge0: port 2(bridge_slave_1) entered disabled state [ 22.797830][ T46] bridge0: port 2(bridge_slave_1) entered disabled state [ 22.805115][ T46] bridge0: port 1(bridge_slave_0) entered disabled state [ 22.812567][ T46] bridge0: port 2(bridge_slave_1) entered disabled state [ 22.836113][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 22.843183][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 22.850790][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 22.857851][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 22.873887][ T46] bridge0: port 1(bridge_slave_0) entered blocking state [ 22.880977][ T46] bridge0: port 1(bridge_slave_0) entered forwarding state [ 22.893152][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 22.900223][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 22.914341][ T46] bridge0: port 1(bridge_slave_0) entered blocking state [ 22.921384][ T46] bridge0: port 1(bridge_slave_0) entered forwarding state [ 22.937163][ T46] bridge0: port 2(bridge_slave_1) entered blocking state [ 22.944340][ T46] bridge0: port 2(bridge_slave_1) entered forwarding state [ 22.970144][ T295] veth0_vlan: entered promiscuous mode [ 22.977968][ T294] veth0_vlan: entered promiscuous mode [ 22.998259][ T293] veth0_vlan: entered promiscuous mode [ 23.013900][ T294] veth1_macvtap: entered promiscuous mode [ 23.022976][ T295] veth1_macvtap: entered promiscuous mode [ 23.038974][ T293] veth1_macvtap: entered promiscuous mode [ 23.062174][ T296] veth0_vlan: entered promiscuous mode [ 23.090847][ T296] veth1_macvtap: entered promiscuous mode [ 23.097928][ T295] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 23.131698][ T314] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 23.143048][ T316] FAULT_INJECTION: forcing a failure. [ 23.143048][ T316] name fail_futex, interval 1, probability 0, space 0, times 1 [ 23.161672][ T316] CPU: 0 UID: 0 PID: 316 Comm: syz.0.1 Not tainted syzkaller #0 f0b22d33f268fdb17f8eb1bead78ca030d5a2cb1 [ 23.161699][ T316] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 23.161718][ T316] Call Trace: [ 23.161724][ T316] [ 23.161732][ T316] __dump_stack+0x21/0x30 [ 23.161764][ T316] dump_stack_lvl+0x140/0x1c0 [ 23.161796][ T316] ? __cfi_dump_stack_lvl+0x10/0x10 [ 23.161824][ T316] dump_stack+0x19/0x20 [ 23.161850][ T316] should_fail_ex+0x3c2/0x510 [ 23.161869][ T316] should_fail+0xf/0x20 [ 23.161886][ T316] should_fail_futex+0x3c/0x50 [ 23.161903][ T316] futex_lock_pi_atomic+0x11b/0xcb0 [ 23.161924][ T316] ? __cfi_futex_lock_pi_atomic+0x10/0x10 [ 23.161945][ T316] ? __cfi_futex_setup_timer+0x10/0x10 [ 23.161962][ T316] ? __cfi_get_futex_key+0x10/0x10 [ 23.161981][ T316] futex_lock_pi+0x2a7/0xa70 [ 23.161999][ T316] ? futex_unqueue+0x136/0x160 [ 23.162017][ T316] ? __cfi_futex_lock_pi+0x10/0x10 [ 23.162037][ T316] ? __cfi_futex_wake_mark+0x10/0x10 [ 23.162060][ T316] ? __cfi_futex_wake_mark+0x10/0x10 [ 23.162086][ T316] ? vfs_write+0xbcf/0xfd0 [ 23.162111][ T316] do_futex+0x270/0x510 [ 23.162130][ T316] ? __cfi_do_futex+0x10/0x10 [ 23.162147][ T316] ? mutex_unlock+0x90/0x240 [ 23.162170][ T316] __se_sys_futex+0x13c/0x320 [ 23.162188][ T316] ? fput+0x1a4/0x230 [ 23.162206][ T316] ? __x64_sys_futex+0x110/0x110 [ 23.162226][ T316] ? __kasan_check_write+0x18/0x20 [ 23.162251][ T316] __x64_sys_futex+0xe9/0x110 [ 23.162268][ T316] x64_sys_call+0x227f/0x2ee0 [ 23.162287][ T316] do_syscall_64+0x57/0xf0 [ 23.162305][ T316] ? clear_bhb_loop+0x50/0xa0 [ 23.162328][ T316] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 23.162350][ T316] RIP: 0033:0x7fe249f9e559 [ 23.162375][ T316] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 23.162392][ T316] RSP: 002b:00007fe24ae72028 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 23.162419][ T316] RAX: ffffffffffffffda RBX: 00007fe24a225fa0 RCX: 00007fe249f9e559 [ 23.162435][ T316] RDX: 0000000000000004 RSI: 0000000000000086 RDI: 0000200000000400 [ 23.162448][ T316] RBP: 00007fe24a0358b0 R08: 0000000000000000 R09: 0000000001000000 [ 23.162460][ T316] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 23.162472][ T316] R13: 00007fe24a226038 R14: 00007fe24a225fa0 R15: 00007ffe1ca5ace8 [ 23.162489][ T316] [ 23.276735][ T319] ======================================================= [ 23.276735][ T319] WARNING: The mand mount option has been deprecated and [ 23.276735][ T319] and is ignored by this kernel. Remove the mand [ 23.276735][ T319] option from the mount to silence this warning. [ 23.276735][ T319] ======================================================= [ 23.303867][ T321] Line length is too long: Should be less than 4094 [ 23.383753][ T318] overlayfs: missing 'lowerdir' [ 23.571605][ T334] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 23.612900][ T311] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 23.773549][ T311] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 23.783935][ T311] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 23.794780][ T311] usb 4-1: New USB device found, idVendor=046d, idProduct=0990, bcdDevice= 0.40 [ 23.804224][ T311] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 23.812467][ T311] usb 4-1: Product: syz [ 23.816798][ T311] usb 4-1: Manufacturer: syz [ 23.821472][ T311] usb 4-1: SerialNumber: syz [ 23.832310][ T310] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 24.002374][ T310] usb 2-1: Using ep0 maxpacket: 16 [ 24.013967][ T310] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 24.025433][ T310] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 24.036196][ T310] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 24.056200][ T321] netlink: 'syz.3.4': attribute type 12 has an invalid length. [ 24.063897][ T310] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 24.071922][ T310] usb 2-1: Product: syz [ 24.076612][ T310] usb 2-1: Manufacturer: syz [ 24.081315][ T310] usb 2-1: SerialNumber: syz [ 24.090923][ T311] usb 4-1: 0:1 : does not exist [ 24.096188][ T311] usb 4-1: unit 6 not found! [ 24.101335][ T311] usb 4-1: unit 2 not found! [ 24.112285][ T311] usb 4-1: USB disconnect, device number 2 [ 24.181048][ T341] netlink: 'syz.2.8': attribute type 4 has an invalid length. [ 24.192470][ T341] netlink: 17 bytes leftover after parsing attributes in process `syz.2.8'. [ 24.202198][ T341] FAULT_INJECTION: forcing a failure. [ 24.202198][ T341] name failslab, interval 1, probability 0, space 0, times 1 [ 24.215971][ T341] CPU: 1 UID: 0 PID: 341 Comm: syz.2.8 Not tainted syzkaller #0 f0b22d33f268fdb17f8eb1bead78ca030d5a2cb1 [ 24.216006][ T341] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 24.216019][ T341] Call Trace: [ 24.216026][ T341] [ 24.216033][ T341] __dump_stack+0x21/0x30 [ 24.216079][ T341] dump_stack_lvl+0x140/0x1c0 [ 24.216111][ T341] ? __cfi_dump_stack_lvl+0x10/0x10 [ 24.216138][ T341] ? resize+0x19fb/0x1e00 [ 24.216155][ T341] dump_stack+0x19/0x20 [ 24.216178][ T341] should_fail_ex+0x3c2/0x510 [ 24.216196][ T341] should_failslab+0xac/0x100 [ 24.216216][ T341] kmem_cache_alloc_noprof+0x42/0x410 [ 24.216243][ T341] ? leaf_walk_rcu+0x560/0x5a0 [ 24.216260][ T341] ? fib_trie_unmerge+0x233/0x1410 [ 24.216279][ T341] fib_trie_unmerge+0x233/0x1410 [ 24.216299][ T341] fib_unmerge+0xce/0x360 [ 24.216322][ T341] fib4_rule_configure+0x287/0xbb0 [ 24.216345][ T341] fib_nl_newrule+0x136a/0x1e50 [ 24.216373][ T341] ? __cfi_fib_nl_newrule+0x10/0x10 [ 24.216401][ T341] ? mutex_lock+0x97/0x1d0 [ 24.216422][ T341] ? __cfi_mutex_lock+0x10/0x10 [ 24.216440][ T341] ? ns_capable+0x90/0xf0 [ 24.216458][ T341] ? netlink_net_capable+0x129/0x160 [ 24.216478][ T341] ? __cfi_fib_nl_newrule+0x10/0x10 [ 24.216506][ T341] rtnetlink_rcv_msg+0x8c1/0xa40 [ 24.216525][ T341] ? __asan_memcpy+0x5a/0x80 [ 24.216550][ T341] ? __cfi_rtnetlink_rcv_msg+0x10/0x10 [ 24.216566][ T341] ? avc_has_perm+0x155/0x240 [ 24.216584][ T341] netlink_rcv_skb+0x24d/0x4e0 [ 24.216603][ T341] ? __cfi_rtnetlink_rcv_msg+0x10/0x10 [ 24.216617][ T341] ? __cfi_netlink_rcv_skb+0x10/0x10 [ 24.216637][ T341] ? selinux_netlink_send+0x7df/0x8b0 [ 24.216656][ T341] ? netlink_autobind+0x1c0/0x1c0 [ 24.216677][ T341] ? is_vmalloc_addr+0x11/0x40 [ 24.216695][ T341] rtnetlink_rcv+0x20/0x30 [ 24.216710][ T341] netlink_unicast+0x8bc/0xa70 [ 24.216731][ T341] netlink_sendmsg+0x7d1/0xad0 [ 24.216752][ T341] ? __cfi_netlink_sendmsg+0x10/0x10 [ 24.216773][ T341] ? __futex_queue+0x19f/0x350 [ 24.216791][ T341] ? bpf_lsm_socket_sendmsg+0xd/0x20 [ 24.216815][ T341] ? security_socket_sendmsg+0x3d/0x100 [ 24.216835][ T341] ____sys_sendmsg+0x9a1/0xa00 [ 24.216857][ T341] ? __import_iovec+0x5b9/0x7d0 [ 24.216880][ T341] ? __sys_sendmsg_sock+0x50/0x50 [ 24.216902][ T341] ? import_iovec+0x80/0xb0 [ 24.216923][ T341] ___sys_sendmsg+0x2a6/0x370 [ 24.216942][ T341] ? __kasan_check_read+0x15/0x20 [ 24.216965][ T341] ? __sys_sendmsg+0x260/0x260 [ 24.216984][ T341] ? __cfi_futex_wait+0x10/0x10 [ 24.217005][ T341] ? __fget_files+0x2bc/0x330 [ 24.217022][ T341] __x64_sys_sendmsg+0x1be/0x2a0 [ 24.217045][ T341] ? __cfi___x64_sys_sendmsg+0x10/0x10 [ 24.217079][ T341] ? __kasan_check_write+0x18/0x20 [ 24.217102][ T341] ? fpregs_restore_userregs+0x11c/0x260 [ 24.217126][ T341] ? switch_fpu_return+0x12/0x20 [ 24.217147][ T341] x64_sys_call+0x2a4c/0x2ee0 [ 24.217165][ T341] do_syscall_64+0x57/0xf0 [ 24.217180][ T341] ? clear_bhb_loop+0x50/0xa0 [ 24.217207][ T341] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 24.217227][ T341] RIP: 0033:0x7fdee319e559 [ 24.217243][ T341] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 24.217257][ T341] RSP: 002b:00007fdee411e028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 24.217279][ T341] RAX: ffffffffffffffda RBX: 00007fdee3425fa0 RCX: 00007fdee319e559 [ 24.217294][ T341] RDX: 0000000000004000 RSI: 0000200000000840 RDI: 0000000000000005 [ 24.217307][ T341] RBP: 00007fdee32358b0 R08: 0000000000000000 R09: 0000000000000000 [ 24.217319][ T341] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 24.217332][ T341] R13: 00007fdee3426038 R14: 00007fdee3425fa0 R15: 00007ffc91373018 [ 24.217348][ T341] [ 24.608749][ T345] Line length is too long: Should be less than 4094 [ 24.648945][ T310] usb 2-1: 0:2 : does not exist [ 24.656916][ T310] usb 2-1: 5:0: failed to get current value for ch 0 (-22) [ 24.668350][ T310] usb 2-1: USB disconnect, device number 2 [ 24.694067][ T350] udevd[350]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card1/controlC1/../uevent} for writing: No such file or directory [ 24.745903][ T368] loop8: detected capacity change from 0 to 16384 [ 24.765680][ T370] tipc: Started in network mode [ 24.770664][ T370] tipc: Node identity ac14140f, cluster identity 4711 [ 24.788491][ T370] tipc: New replicast peer: 223.255.255.255 [ 24.795441][ T370] tipc: Enabled bearer , priority 10 [ 24.932887][ T371] loop8: detected capacity change from 16384 to 16383 [ 24.943893][ T371] I/O error, dev loop8, sector 10768 op 0x1:(WRITE) flags 0x4800 phys_seg 128 prio class 2 [ 24.954295][ T371] Buffer I/O error on dev loop8, logical block 1346, lost async page write [ 24.963269][ T371] Buffer I/O error on dev loop8, logical block 1347, lost async page write [ 24.972145][ T371] Buffer I/O error on dev loop8, logical block 1348, lost async page write [ 24.981348][ T311] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 24.981631][ T371] Buffer I/O error on dev loop8, logical block 1349, lost async page write [ 24.997846][ T371] Buffer I/O error on dev loop8, logical block 1350, lost async page write [ 25.006591][ T371] Buffer I/O error on dev loop8, logical block 1351, lost async page write [ 25.015472][ T371] Buffer I/O error on dev loop8, logical block 1352, lost async page write [ 25.024290][ T371] Buffer I/O error on dev loop8, logical block 1353, lost async page write [ 25.034270][ T371] Buffer I/O error on dev loop8, logical block 1354, lost async page write [ 25.043833][ T371] Buffer I/O error on dev loop8, logical block 1355, lost async page write [ 25.055005][ T371] I/O error, dev loop8, sector 11792 op 0x1:(WRITE) flags 0x4800 phys_seg 128 prio class 2 [ 25.067447][ T371] I/O error, dev loop8, sector 12816 op 0x1:(WRITE) flags 0x4800 phys_seg 128 prio class 2 [ 25.080344][ T371] I/O error, dev loop8, sector 13840 op 0x1:(WRITE) flags 0x4800 phys_seg 128 prio class 2 [ 25.093594][ T371] I/O error, dev loop8, sector 14864 op 0x1:(WRITE) flags 0x4800 phys_seg 128 prio class 2 [ 25.105509][ T371] I/O error, dev loop8, sector 15888 op 0x1:(WRITE) flags 0x800 phys_seg 62 prio class 2 [ 25.121408][ T371] I/O error, dev loop8, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 25.130705][ T371] I/O error, dev loop8, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 25.140161][ T371] loop8: unable to read partition table [ 25.143567][ T311] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 25.151048][ T371] loop_reread_partitions: partition scan of loop8 (() failed (rc=-5) [ 25.158376][ T311] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 25.177382][ T311] usb 4-1: New USB device found, idVendor=046d, idProduct=0990, bcdDevice= 0.40 [ 25.188736][ T311] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 25.202753][ T311] usb 4-1: Product: syz [ 25.208738][ T311] usb 4-1: Manufacturer: syz [ 25.213780][ T311] usb 4-1: SerialNumber: syz [ 25.421476][ T345] netlink: 'syz.3.11': attribute type 12 has an invalid length. [ 25.431706][ T311] usb 4-1: 0:1 : does not exist [ 25.436696][ T311] usb 4-1: unit 6 not found! [ 25.441315][ T311] usb 4-1: unit 2 not found! [ 25.448601][ T311] usb 4-1: USB disconnect, device number 3 [ 25.459043][ T350] udevd[350]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 25.512324][ T66] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 25.663378][ T66] usb 1-1: config 1 interface 0 altsetting 127 bulk endpoint 0x81 has invalid maxpacket 64 [ 25.673493][ T66] usb 1-1: config 1 interface 0 altsetting 127 bulk endpoint 0x2 has invalid maxpacket 32 [ 25.683811][ T66] usb 1-1: config 1 interface 0 has no altsetting 0 [ 25.691862][ T66] usb 1-1: New USB device found, idVendor=0bda, idProduct=8150, bcdDevice= 0.40 [ 25.701092][ T66] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 25.709159][ T66] usb 1-1: Product: syz [ 25.713421][ T66] usb 1-1: Manufacturer: syz [ 25.718025][ T66] usb 1-1: SerialNumber: syz [ 25.723554][ T407] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 25.730738][ T407] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 25.912323][ T9] tipc: Node number set to 2886997007 [ 25.963613][ T66] rtl8150 1-1:1.0: couldn't reset the device [ 25.972396][ T66] rtl8150 1-1:1.0: probe with driver rtl8150 failed with error -5 [ 25.982828][ T66] usb 1-1: USB disconnect, device number 2 [ 26.064747][ T432] syzkaller0: entered promiscuous mode [ 26.070229][ T432] syzkaller0: entered allmulticast mode [ 26.077121][ T36] kauditd_printk_skb: 90 callbacks suppressed [ 26.077136][ T36] audit: type=1400 audit(1791989229.140:164): avc: denied { setopt } for pid=431 comm="syz.3.46" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 26.107567][ T36] audit: type=1400 audit(1791989229.140:165): avc: denied { ioctl } for pid=431 comm="syz.3.46" path="socket:[4388]" dev="sockfs" ino=4388 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 26.132906][ T36] audit: type=1400 audit(1791989229.140:166): avc: denied { write } for pid=431 comm="syz.3.46" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 26.166812][ T36] audit: type=1400 audit(1791989229.230:167): avc: denied { create } for pid=436 comm="syz.3.49" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 26.213690][ T36] audit: type=1400 audit(1791989229.280:168): avc: denied { connect } for pid=445 comm="syz.3.53" lport=60 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 26.247263][ T36] audit: type=1400 audit(1791989229.310:169): avc: denied { write } for pid=445 comm="syz.3.53" path="socket:[3825]" dev="sockfs" ino=3825 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 26.276405][ T36] audit: type=1400 audit(1791989229.340:170): avc: denied { create } for pid=457 comm="syz.1.59" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 26.302368][ T36] audit: type=1400 audit(1791989229.370:171): avc: denied { getopt } for pid=457 comm="syz.1.59" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 26.325447][ T36] audit: type=1400 audit(1791989229.390:172): avc: denied { ioctl } for pid=460 comm="syz.3.61" path="socket:[3851]" dev="sockfs" ino=3851 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 26.350222][ T36] audit: type=1400 audit(1791989229.390:173): avc: denied { create } for pid=459 comm="syz.1.60" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 26.405353][ T468] pci 0000:00:00.0: [8086:1237] type 00 class 0x060000 conventional PCI endpoint [ 27.176909][ T504] Zero length message leads to an empty skb [ 27.303764][ T418] smpboot: CPU 1 is now offline [ 27.311434][ T537] smpboot: Booting Node 0 Processor 1 APIC 0x1 [ 27.522602][ T575] FAULT_INJECTION: forcing a failure. [ 27.522602][ T575] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 27.553561][ T575] CPU: 0 UID: 0 PID: 575 Comm: syz.1.111 Not tainted syzkaller #0 f0b22d33f268fdb17f8eb1bead78ca030d5a2cb1 [ 27.553596][ T575] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 27.553608][ T575] Call Trace: [ 27.553615][ T575] [ 27.553622][ T575] __dump_stack+0x21/0x30 [ 27.553656][ T575] dump_stack_lvl+0x140/0x1c0 [ 27.553687][ T575] ? __cfi_dump_stack_lvl+0x10/0x10 [ 27.553715][ T575] dump_stack+0x19/0x20 [ 27.553742][ T575] should_fail_ex+0x3c2/0x510 [ 27.553762][ T575] should_fail+0xf/0x20 [ 27.553778][ T575] should_fail_usercopy+0x1e/0x30 [ 27.553802][ T575] _copy_from_user+0x20/0xa0 [ 27.553824][ T575] do_seccomp+0x3b5/0xf20 [ 27.553843][ T575] ? __se_sys_futex+0x13c/0x320 [ 27.553863][ T575] ? prctl_set_seccomp+0x80/0x80 [ 27.553880][ T575] ? xfd_validate_state+0x68/0x140 [ 27.553907][ T575] ? __kasan_check_write+0x18/0x20 [ 27.553931][ T575] ? fpregs_restore_userregs+0x11c/0x260 [ 27.553956][ T575] __x64_sys_seccomp+0x7f/0x90 [ 27.553991][ T575] x64_sys_call+0x249b/0x2ee0 [ 27.554011][ T575] do_syscall_64+0x57/0xf0 [ 27.554029][ T575] ? clear_bhb_loop+0x50/0xa0 [ 27.554052][ T575] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 27.554074][ T575] RIP: 0033:0x7f3fc6d9e559 [ 27.554091][ T575] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 27.554106][ T575] RSP: 002b:00007f3fc7b90028 EFLAGS: 00000246 ORIG_RAX: 000000000000013d [ 27.554127][ T575] RAX: ffffffffffffffda RBX: 00007f3fc7025fa0 RCX: 00007f3fc6d9e559 [ 27.554142][ T575] RDX: 0000000000000000 RSI: 0000000000000008 RDI: 0000000000000001 [ 27.554154][ T575] RBP: 00007f3fc6e358b0 R08: 0000000000000000 R09: 0000000000000000 [ 27.554166][ T575] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 27.554178][ T575] R13: 00007f3fc7026038 R14: 00007f3fc7025fa0 R15: 00007fff43c63f08 [ 27.554194][ T575] [ 27.806819][ T596] FAULT_INJECTION: forcing a failure. [ 27.806819][ T596] name failslab, interval 1, probability 0, space 0, times 0 [ 27.819556][ T596] CPU: 0 UID: 0 PID: 596 Comm: syz.0.122 Not tainted syzkaller #0 f0b22d33f268fdb17f8eb1bead78ca030d5a2cb1 [ 27.819577][ T596] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 27.819584][ T596] Call Trace: [ 27.819589][ T596] [ 27.819594][ T596] __dump_stack+0x21/0x30 [ 27.819616][ T596] dump_stack_lvl+0x140/0x1c0 [ 27.819631][ T596] ? __cfi_dump_stack_lvl+0x10/0x10 [ 27.819647][ T596] ? kasan_save_track+0x4f/0x80 [ 27.819663][ T596] ? kasan_save_track+0x3e/0x80 [ 27.819677][ T596] ? kasan_save_alloc_info+0x3a/0x50 [ 27.819689][ T596] ? __kmalloc_cache_node_noprof+0x225/0x430 [ 27.819703][ T596] ? __get_vm_area_node+0x150/0x390 [ 27.819715][ T596] dump_stack+0x19/0x20 [ 27.819728][ T596] should_fail_ex+0x3c2/0x510 [ 27.819738][ T596] should_failslab+0xac/0x100 [ 27.819748][ T596] kmem_cache_alloc_node_noprof+0x45/0x420 [ 27.819761][ T596] ? alloc_vmap_area+0x230/0x26f0 [ 27.819772][ T596] alloc_vmap_area+0x230/0x26f0 [ 27.819784][ T596] ? kasan_save_alloc_info+0x3a/0x50 [ 27.819796][ T596] ? vm_map_ram+0xdd0/0xdd0 [ 27.819807][ T596] ? __kmalloc_cache_node_noprof+0x225/0x430 [ 27.819820][ T596] ? __get_vm_area_node+0x150/0x390 [ 27.819832][ T596] __get_vm_area_node+0x1f8/0x390 [ 27.819843][ T596] __vmalloc_node_range_noprof+0x340/0x1300 [ 27.819856][ T596] ? alloc_ldt_struct+0xbd/0x2f0 [ 27.819868][ T596] ? __se_sys_modify_ldt+0x70/0x2e0 [ 27.819880][ T596] ? __x64_sys_modify_ldt+0x7f/0xa0 [ 27.819892][ T596] ? x64_sys_call+0x143d/0x2ee0 [ 27.819905][ T596] ? do_syscall_64+0x57/0xf0 [ 27.819916][ T596] ? __cfi___vmalloc_node_range_noprof+0x10/0x10 [ 27.819929][ T596] ? alloc_ldt_struct+0xbd/0x2f0 [ 27.819941][ T596] __vmalloc_noprof+0x104/0x1d0 [ 27.819953][ T596] ? alloc_ldt_struct+0xbd/0x2f0 [ 27.819964][ T596] ? __kasan_kmalloc+0x96/0xb0 [ 27.819973][ T596] ? __cfi___vmalloc_noprof+0x10/0x10 [ 27.819985][ T596] ? __kmalloc_cache_noprof+0x23c/0x470 [ 27.819998][ T596] ? alloc_ldt_struct+0x7e/0x2f0 [ 27.820011][ T596] alloc_ldt_struct+0xbd/0x2f0 [ 27.820024][ T596] ? __kasan_check_write+0x18/0x20 [ 27.820037][ T596] write_ldt+0x43d/0x760 [ 27.820051][ T596] ? native_write_gdt_entry+0x40/0x40 [ 27.820063][ T596] ? xfd_validate_state+0x68/0x140 [ 27.820078][ T596] __se_sys_modify_ldt+0x70/0x2e0 [ 27.820090][ T596] __x64_sys_modify_ldt+0x7f/0xa0 [ 27.820102][ T596] x64_sys_call+0x143d/0x2ee0 [ 27.820112][ T596] do_syscall_64+0x57/0xf0 [ 27.820121][ T596] ? clear_bhb_loop+0x50/0xa0 [ 27.820133][ T596] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 27.820144][ T596] RIP: 0033:0x7fe249f9e559 [ 27.820154][ T596] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 27.820162][ T596] RSP: 002b:00007fe24ae72028 EFLAGS: 00000246 ORIG_RAX: 000000000000009a [ 27.820174][ T596] RAX: ffffffffffffffda RBX: 00007fe24a225fa0 RCX: 00007fe249f9e559 [ 27.820182][ T596] RDX: 0000000000000010 RSI: 0000200000000280 RDI: 0000000000000001 [ 27.820188][ T596] RBP: 00007fe24a0358b0 R08: 0000000000000000 R09: 0000000000000000 [ 27.820195][ T596] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 27.820201][ T596] R13: 00007fe24a226038 R14: 00007fe24a225fa0 R15: 00007ffe1ca5ace8 [ 27.820209][ T596] [ 27.820219][ T596] syz.0.122: vmalloc error: size 65536, vm_struct allocation failed, mode:0x400dc0(GFP_KERNEL_ACCOUNT|__GFP_ZERO), nodemask=(null),cpuset=syz0,mems_allowed=0 [ 28.283552][ T596] CPU: 0 UID: 0 PID: 596 Comm: syz.0.122 Not tainted syzkaller #0 f0b22d33f268fdb17f8eb1bead78ca030d5a2cb1 [ 28.283575][ T596] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 28.283583][ T596] Call Trace: [ 28.283586][ T596] [ 28.283590][ T596] __dump_stack+0x21/0x30 [ 28.283611][ T596] dump_stack_lvl+0x140/0x1c0 [ 28.283625][ T596] ? __cfi_dump_stack_lvl+0x10/0x10 [ 28.283640][ T596] ? _raw_spin_unlock_irqrestore+0x4a/0x70 [ 28.283651][ T596] dump_stack+0x19/0x20 [ 28.283664][ T596] warn_alloc+0x1e7/0x2c0 [ 28.283676][ T596] ? entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 28.283688][ T596] ? __cfi_warn_alloc+0x10/0x10 [ 28.283699][ T596] ? __get_vm_area_node+0x211/0x390 [ 28.283711][ T596] ? __get_vm_area_node+0x211/0x390 [ 28.283722][ T596] __vmalloc_node_range_noprof+0x365/0x1300 [ 28.283734][ T596] ? __se_sys_modify_ldt+0x70/0x2e0 [ 28.283748][ T596] ? __x64_sys_modify_ldt+0x7f/0xa0 [ 28.283760][ T596] ? x64_sys_call+0x143d/0x2ee0 [ 28.283770][ T596] ? do_syscall_64+0x57/0xf0 [ 28.283781][ T596] ? __cfi___vmalloc_node_range_noprof+0x10/0x10 [ 28.283795][ T596] ? alloc_ldt_struct+0xbd/0x2f0 [ 28.283807][ T596] __vmalloc_noprof+0x104/0x1d0 [ 28.283818][ T596] ? alloc_ldt_struct+0xbd/0x2f0 [ 28.283829][ T596] ? __kasan_kmalloc+0x96/0xb0 [ 28.283839][ T596] ? __cfi___vmalloc_noprof+0x10/0x10 [ 28.283851][ T596] ? __kmalloc_cache_noprof+0x23c/0x470 [ 28.283865][ T596] ? alloc_ldt_struct+0x7e/0x2f0 [ 28.283882][ T596] alloc_ldt_struct+0xbd/0x2f0 [ 28.283894][ T596] ? __kasan_check_write+0x18/0x20 [ 28.283908][ T596] write_ldt+0x43d/0x760 [ 28.283922][ T596] ? native_write_gdt_entry+0x40/0x40 [ 28.283935][ T596] ? xfd_validate_state+0x68/0x140 [ 28.283957][ T596] __se_sys_modify_ldt+0x70/0x2e0 [ 28.283969][ T596] __x64_sys_modify_ldt+0x7f/0xa0 [ 28.283982][ T596] x64_sys_call+0x143d/0x2ee0 [ 28.283992][ T596] do_syscall_64+0x57/0xf0 [ 28.284000][ T596] ? clear_bhb_loop+0x50/0xa0 [ 28.284012][ T596] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 28.284024][ T596] RIP: 0033:0x7fe249f9e559 [ 28.284034][ T596] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 28.284042][ T596] RSP: 002b:00007fe24ae72028 EFLAGS: 00000246 ORIG_RAX: 000000000000009a [ 28.284054][ T596] RAX: ffffffffffffffda RBX: 00007fe24a225fa0 RCX: 00007fe249f9e559 [ 28.284062][ T596] RDX: 0000000000000010 RSI: 0000200000000280 RDI: 0000000000000001 [ 28.284069][ T596] RBP: 00007fe24a0358b0 R08: 0000000000000000 R09: 0000000000000000 [ 28.284075][ T596] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 28.284081][ T596] R13: 00007fe24a226038 R14: 00007fe24a225fa0 R15: 00007ffe1ca5ace8 [ 28.284089][ T596] [ 28.284625][ T596] Mem-Info: [ 28.584012][ T604] netlink: 44 bytes leftover after parsing attributes in process `syz.1.124'. [ 28.607377][ T596] active_anon:24058 inactive_anon:0 isolated_anon:0 [ 28.607377][ T596] active_file:7904 inactive_file:12515 isolated_file:0 [ 28.607377][ T596] unevictable:0 dirty:427 writeback:0 [ 28.607377][ T596] slab_reclaimable:4277 slab_unreclaimable:70875 [ 28.607377][ T596] mapped:24420 shmem:17101 pagetables:945 [ 28.607377][ T596] sec_pagetables:0 bounce:0 [ 28.607377][ T596] kernel_misc_reclaimable:0 [ 28.607377][ T596] free:1512978 free_pcp:2722 free_cma:0 [ 28.681754][ T596] Node 0 active_anon:96232kB inactive_anon:0kB active_file:31616kB inactive_file:50060kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:97780kB dirty:1708kB writeback:0kB shmem:68404kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:4324kB pagetables:3680kB sec_pagetables:0kB all_unreclaimable? no [ 28.718317][ T596] DMA32 free:2949972kB boost:0kB min:19052kB low:23812kB high:28572kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:3145324kB managed:2955048kB mlocked:0kB bounce:0kB free_pcp:5076kB local_pcp:5076kB free_cma:0kB [ 28.749021][ T596] lowmem_reserve[]: 0 3920 3920 [ 28.753969][ T596] Normal free:3100476kB boost:0kB min:26000kB low:32500kB high:39000kB reserved_highatomic:0KB free_highatomic:0KB active_anon:96232kB inactive_anon:0kB active_file:31616kB inactive_file:50060kB unevictable:0kB writepending:1708kB present:5242880kB managed:4014840kB mlocked:0kB bounce:0kB free_pcp:8520kB local_pcp:3576kB free_cma:0kB [ 28.799983][ T596] lowmem_reserve[]: 0 0 0 [ 28.804691][ T596] DMA32: 5*4kB (M) 2*8kB (M) 3*16kB (M) 6*32kB (M) 3*64kB (M) 5*128kB (M) 5*256kB (M) 5*512kB (M) 4*1024kB (UM) 4*2048kB (M) 716*4096kB (M) = 2949972kB [ 28.820243][ T596] Normal: 1*4kB (U) 3*8kB (UME) 3*16kB (UME) 2*32kB (UE) 3*64kB (UME) 8*128kB (UE) 21*256kB (UME) 21*512kB (UME) 22*1024kB (UME) 10*2048kB (UME) 742*4096kB (M) = 3099724kB [ 28.837569][ T596] 37515 total pagecache pages [ 28.842973][ T596] 0 pages in swap cache [ 28.847186][ T596] Free swap = 124996kB [ 28.852642][ T596] Total swap = 124996kB [ 28.856875][ T596] 2097051 pages RAM [ 28.860725][ T596] 0 pages HighMem/MovableOnly [ 28.865577][ T596] 354579 pages reserved [ 28.869811][ T596] 0 pages cma reserved [ 28.875099][ T596] Memory allocations: [ 28.879226][ T596] 0 B 0 init/main.c:1477 func:do_initcalls [ 28.887038][ T596] 0 B 0 init/do_mounts.c:186 func:mount_root_generic [ 28.895299][ T596] 0 B 0 init/do_mounts.c:158 func:do_mount_root [ 28.903200][ T596] 0 B 0 init/do_mounts.c:352 func:mount_nodev_root [ 28.911254][ T596] 0 B 0 init/do_mounts_rd.c:241 func:rd_load_image [ 28.919241][ T596] 0 B 0 init/do_mounts_rd.c:72 func:identify_ramdisk_image [ 28.928074][ T596] 0 B 0 init/initramfs.c:507 func:unpack_to_rootfs [ 28.936089][ T596] 0 B 0 init/initramfs.c:508 func:unpack_to_rootfs [ 28.944144][ T596] 0 B 0 init/initramfs.c:509 func:unpack_to_rootfs [ 28.952116][ T596] 0 B 0 init/initramfs.c:101 func:find_link [ 28.981918][ T629] SELinux: Context OPcǙ?s U^tQ`w& m [ 28.981918][ T629] %Z@L0NrL1X)ْijɒ%ؑfYjwLݍ8 bV:vi is not valid (left unmapped). [ 29.117824][ T651] netlink: 40 bytes leftover after parsing attributes in process `syz.3.146'. [ 29.181203][ T667] netlink: 132 bytes leftover after parsing attributes in process `syz.0.154'. [ 29.196207][ T669] FAULT_INJECTION: forcing a failure. [ 29.196207][ T669] name fail_futex, interval 1, probability 0, space 0, times 0 [ 29.219944][ T669] CPU: 0 UID: 0 PID: 669 Comm: syz.3.155 Not tainted syzkaller #0 f0b22d33f268fdb17f8eb1bead78ca030d5a2cb1 [ 29.219967][ T669] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 29.219975][ T669] Call Trace: [ 29.219979][ T669] [ 29.219983][ T669] __dump_stack+0x21/0x30 [ 29.220005][ T669] dump_stack_lvl+0x140/0x1c0 [ 29.220021][ T669] ? __cfi_dump_stack_lvl+0x10/0x10 [ 29.220036][ T669] dump_stack+0x19/0x20 [ 29.220051][ T669] should_fail_ex+0x3c2/0x510 [ 29.220061][ T669] should_fail+0xf/0x20 [ 29.220070][ T669] get_futex_key+0x178/0x940 [ 29.220080][ T669] ? __cfi___futex_wait+0x10/0x10 [ 29.220091][ T669] ? __cfi_get_futex_key+0x10/0x10 [ 29.220100][ T669] ? __cfi_futex_wake_mark+0x10/0x10 [ 29.220112][ T669] futex_wake+0x150/0x950 [ 29.220123][ T669] ? futex_wait+0x2b8/0x7c0 [ 29.220134][ T669] ? __cfi_futex_wake+0x10/0x10 [ 29.220147][ T669] ? vfs_write+0xbcf/0xfd0 [ 29.220162][ T669] do_futex+0x37d/0x510 [ 29.220171][ T669] ? __cfi_do_futex+0x10/0x10 [ 29.220181][ T669] ? mutex_unlock+0x90/0x240 [ 29.220192][ T669] __se_sys_futex+0x13c/0x320 [ 29.220202][ T669] ? fput+0x1a4/0x230 [ 29.220212][ T669] ? __x64_sys_futex+0x110/0x110 [ 29.220223][ T669] __x64_sys_futex+0xe9/0x110 [ 29.220233][ T669] x64_sys_call+0x227f/0x2ee0 [ 29.220243][ T669] do_syscall_64+0x57/0xf0 [ 29.220252][ T669] ? clear_bhb_loop+0x50/0xa0 [ 29.220263][ T669] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 29.220275][ T669] RIP: 0033:0x7fb48bf9e559 [ 29.220284][ T669] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 29.220293][ T669] RSP: 002b:00007fb48ce0d0e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 29.220305][ T669] RAX: ffffffffffffffda RBX: 00007fb48c225fa8 RCX: 00007fb48bf9e559 [ 29.220321][ T669] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007fb48c225fac [ 29.220328][ T669] RBP: 00007fb48c225fa0 R08: 4000000000000000 R09: 0000000000000000 [ 29.220335][ T669] R10: ffffffffffffffff R11: 0000000000000246 R12: 0000000000000000 [ 29.220343][ T669] R13: 00007fb48c226038 R14: 00007ffca40097b0 R15: 00007ffca4009898 [ 29.220352][ T669] [ 29.948762][ T771] FAULT_INJECTION: forcing a failure. [ 29.948762][ T771] name failslab, interval 1, probability 0, space 0, times 0 [ 29.982857][ T771] CPU: 0 UID: 0 PID: 771 Comm: syz.2.202 Not tainted syzkaller #0 f0b22d33f268fdb17f8eb1bead78ca030d5a2cb1 [ 29.982879][ T771] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 29.982887][ T771] Call Trace: [ 29.982891][ T771] [ 29.982895][ T771] __dump_stack+0x21/0x30 [ 29.982916][ T771] dump_stack_lvl+0x140/0x1c0 [ 29.982932][ T771] ? __cfi_dump_stack_lvl+0x10/0x10 [ 29.982950][ T771] dump_stack+0x19/0x20 [ 29.982964][ T771] should_fail_ex+0x3c2/0x510 [ 29.982975][ T771] ? security_sk_alloc+0x65/0x260 [ 29.982986][ T771] should_failslab+0xac/0x100 [ 29.982996][ T771] __kmalloc_noprof+0x69/0x510 [ 29.983011][ T771] ? kasan_save_alloc_info+0x3a/0x50 [ 29.983025][ T771] ? security_sk_alloc+0x65/0x260 [ 29.983037][ T771] ? __kasan_slab_alloc+0x73/0x90 [ 29.983048][ T771] security_sk_alloc+0x65/0x260 [ 29.983060][ T771] sk_prot_alloc+0x123/0x3a0 [ 29.983072][ T771] sk_alloc+0x40/0x590 [ 29.983082][ T771] ? bpf_lsm_inode_alloc_security+0xd/0x20 [ 29.983097][ T771] unix_create1+0xb7/0x760 [ 29.983108][ T771] ? inode_init_always_gfp+0x76e/0x9e0 [ 29.983118][ T771] unix_create+0x15a/0x220 [ 29.983128][ T771] __sock_create+0x3a5/0x810 [ 29.983138][ T771] __sys_socketpair+0x221/0x5c0 [ 29.983150][ T771] __x64_sys_socketpair+0x9f/0xc0 [ 29.983162][ T771] x64_sys_call+0x2081/0x2ee0 [ 29.983172][ T771] do_syscall_64+0x57/0xf0 [ 29.983181][ T771] ? clear_bhb_loop+0x50/0xa0 [ 29.983193][ T771] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 29.983204][ T771] RIP: 0033:0x7fdee319e559 [ 29.983214][ T771] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 29.983222][ T771] RSP: 002b:00007fdee411e028 EFLAGS: 00000246 ORIG_RAX: 0000000000000035 [ 29.983234][ T771] RAX: ffffffffffffffda RBX: 00007fdee3425fa0 RCX: 00007fdee319e559 [ 29.983242][ T771] RDX: 0000000000000000 RSI: 0000000000000002 RDI: 0000000000000001 [ 29.983248][ T771] RBP: 00007fdee32358b0 R08: 0000000000000000 R09: 0000000000000000 [ 29.983254][ T771] R10: 0000200000000280 R11: 0000000000000246 R12: 0000000000000000 [ 29.983261][ T771] R13: 00007fdee3426038 R14: 00007fdee3425fa0 R15: 00007ffc91373018 [ 29.983269][ T771] [ 30.225507][ T779] random: crng reseeded on system resumption [ 30.415238][ T46] bridge_slave_1: left allmulticast mode [ 30.420922][ T46] bridge_slave_1: left promiscuous mode [ 30.426803][ T46] bridge0: port 2(bridge_slave_1) entered disabled state [ 30.451985][ T46] bridge_slave_0: left allmulticast mode [ 30.458611][ T46] bridge_slave_0: left promiscuous mode [ 30.464778][ T46] bridge0: port 1(bridge_slave_0) entered disabled state [ 30.574214][ T46] tipc: Disabling bearer [ 30.579477][ T46] tipc: Left network mode [ 30.585726][ T46] veth1_macvtap: left promiscuous mode [ 30.591373][ T46] veth0_vlan: left promiscuous mode [ 30.668281][ T818] bridge0: port 1(bridge_slave_0) entered blocking state [ 30.675585][ T818] bridge0: port 1(bridge_slave_0) entered disabled state [ 30.682744][ T818] bridge_slave_0: entered allmulticast mode [ 30.689147][ T818] bridge_slave_0: entered promiscuous mode [ 30.696026][ T818] bridge0: port 2(bridge_slave_1) entered blocking state [ 30.703270][ T818] bridge0: port 2(bridge_slave_1) entered disabled state [ 30.713944][ T818] bridge_slave_1: entered allmulticast mode [ 30.718355][ T66] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 30.720278][ T818] bridge_slave_1: entered promiscuous mode [ 30.783864][ T818] bridge0: port 2(bridge_slave_1) entered blocking state [ 30.790933][ T818] bridge0: port 2(bridge_slave_1) entered forwarding state [ 30.798241][ T818] bridge0: port 1(bridge_slave_0) entered blocking state [ 30.805397][ T818] bridge0: port 1(bridge_slave_0) entered forwarding state [ 30.829209][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 30.843122][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 30.852915][ T312] bridge0: port 1(bridge_slave_0) entered blocking state [ 30.859967][ T312] bridge0: port 1(bridge_slave_0) entered forwarding state [ 30.882603][ T66] usb 1-1: device descriptor read/64, error -71 [ 30.890076][ T312] bridge0: port 2(bridge_slave_1) entered blocking state [ 30.897158][ T312] bridge0: port 2(bridge_slave_1) entered forwarding state [ 30.913877][ T818] veth0_vlan: entered promiscuous mode [ 30.927005][ T818] veth1_macvtap: entered promiscuous mode [ 31.003217][ T867] UDC core: g1: couldn't find an available UDC or it's busy [ 31.057571][ T872] netlink: 8 bytes leftover after parsing attributes in process `syz.4.250'. [ 31.132347][ T66] usb 1-1: device descriptor read/64, error -71 [ 31.196415][ T36] kauditd_printk_skb: 86 callbacks suppressed [ 31.196431][ T36] audit: type=1400 audit(1791989234.260:260): avc: denied { sqpoll } for pid=875 comm="syz.4.252" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 31.372317][ T66] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 31.512353][ T66] usb 1-1: device descriptor read/64, error -71 [ 31.762336][ T66] usb 1-1: device descriptor read/64, error -71 [ 31.789946][ T902] netlink: 12 bytes leftover after parsing attributes in process `syz.3.264'. [ 31.812969][ T36] audit: type=1400 audit(1791989234.880:261): avc: denied { create } for pid=905 comm="syz.3.266" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 31.832383][ T36] audit: type=1400 audit(1791989234.880:262): avc: denied { setopt } for pid=905 comm="syz.3.266" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 31.853145][ T36] audit: type=1400 audit(1791989234.880:263): avc: denied { bind } for pid=905 comm="syz.3.266" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 31.882835][ T66] usb usb1-port1: attempt power cycle [ 31.957686][ T36] audit: type=1400 audit(1791989235.020:264): avc: denied { write } for pid=930 comm="syz.3.278" name="event0" dev="devtmpfs" ino=192 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 32.009040][ T36] audit: type=1400 audit(1791989235.070:265): avc: denied { create } for pid=942 comm="syz.3.284" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1 [ 32.232368][ T66] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 32.253847][ T66] usb 1-1: device descriptor read/8, error -71 [ 32.383514][ T66] usb 1-1: device descriptor read/8, error -71 [ 32.482341][ T9] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 32.534709][ T36] audit: type=1400 audit(1791989235.600:266): avc: denied { setattr } for pid=975 comm="syz.4.299" name="/" dev="configfs" ino=1142 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 32.682368][ T66] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 32.689922][ T9] usb 4-1: device descriptor read/64, error -71 [ 32.713289][ T66] usb 1-1: device descriptor read/8, error -71 [ 32.840338][ T36] audit: type=1400 audit(1791989235.900:267): avc: denied { write } for pid=982 comm="syz.1.301" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 32.843284][ T66] usb 1-1: device descriptor read/8, error -71 [ 32.871968][ T36] audit: type=1400 audit(1791989235.940:268): avc: denied { block_suspend } for pid=984 comm="syz.1.302" capability=36 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 32.952338][ T9] usb 4-1: device descriptor read/64, error -71 [ 32.973241][ T36] audit: type=1400 audit(1791989236.040:269): avc: denied { getopt } for pid=994 comm="syz.1.307" lport=1 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 33.003220][ T66] usb usb1-port1: unable to enumerate USB device [ 33.202514][ T9] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 33.332291][ T9] usb 4-1: device descriptor read/64, error -71 [ 33.498598][ T1067] netlink: 44 bytes leftover after parsing attributes in process `syz.4.340'. [ 33.622292][ T9] usb 4-1: device descriptor read/64, error -71 [ 33.742479][ T9] usb usb4-port1: attempt power cycle [ 34.302287][ T9] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 34.343340][ T9] usb 4-1: device descriptor read/8, error -71 [ 34.483192][ T9] usb 4-1: device descriptor read/8, error -71 [ 34.818665][ T9] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 34.853466][ T9] usb 4-1: device descriptor read/8, error -71 [ 34.914431][ T1214] 9pnet: Could not find request transport: rdma [ 34.993516][ T9] usb 4-1: device descriptor read/8, error -71 [ 35.103195][ T9] usb usb4-port1: unable to enumerate USB device [ 35.332469][ T9] hid-generic 0003:046D:0000.0001: unknown main item tag 0x0 [ 35.358505][ T9] hid-generic 0003:046D:0000.0001: unknown main item tag 0x0 [ 35.387382][ T9] hid-generic 0003:046D:0000.0001: unknown main item tag 0x0 [ 35.412801][ T9] hid-generic 0003:046D:0000.0001: unknown main item tag 0x0 [ 35.438492][ T9] hid-generic 0003:046D:0000.0001: unknown main item tag 0x0 [ 35.582295][ T9] hid-generic 0003:046D:0000.0001: unknown main item tag 0x0 [ 35.604276][ T9] hid-generic 0003:046D:0000.0001: unknown main item tag 0x0 [ 35.611792][ T9] hid-generic 0003:046D:0000.0001: unknown main item tag 0x0 [ 35.635407][ T1228] netlink: 12 bytes leftover after parsing attributes in process `syz.1.413'. [ 35.648811][ T9] hid-generic 0003:046D:0000.0001: unknown main item tag 0x0 [ 35.667883][ T9] hid-generic 0003:046D:0000.0001: unknown main item tag 0x0 [ 35.691667][ T9] hid-generic 0003:046D:0000.0001: unknown main item tag 0x0 [ 35.715507][ T9] hid-generic 0003:046D:0000.0001: unknown main item tag 0x0 [ 35.738450][ T9] hid-generic 0003:046D:0000.0001: unknown main item tag 0x0 [ 35.760335][ T9] hid-generic 0003:046D:0000.0001: unknown main item tag 0x0 [ 35.806398][ T9] hid-generic 0003:046D:0000.0001: unknown main item tag 0x0 [ 35.827726][ T9] hid-generic 0003:046D:0000.0001: unknown main item tag 0x0 [ 35.852306][ T9] hid-generic 0003:046D:0000.0001: unknown main item tag 0x0 [ 35.880224][ C0] Scheduler tracepoints stat_sleep, stat_iowait, stat_blocked and stat_runtime require the kernel parameter schedstats=enable or kernel.sched_schedstats=1 [ 35.882276][ C1] Scheduler tracepoints stat_sleep, stat_iowait, stat_blocked and stat_runtime require the kernel parameter schedstats=enable or kernel.sched_schedstats=1 [ 36.154827][ T9] hid-generic 0003:046D:0000.0001: unknown main item tag 0x0 [ 36.173870][ T9] hid-generic 0003:046D:0000.0001: unknown main item tag 0x0 [ 36.193646][ T9] hid-generic 0003:046D:0000.0001: unknown main item tag 0x0 [ 36.201107][ T9] hid-generic 0003:046D:0000.0001: unknown main item tag 0x0 [ 36.234543][ T9] hid-generic 0003:046D:0000.0001: unknown main item tag 0x0 [ 36.252530][ T9] hid-generic 0003:046D:0000.0001: unknown main item tag 0x0 [ 36.271807][ T9] hid-generic 0003:046D:0000.0001: unknown main item tag 0x0 [ 36.293062][ T9] hid-generic 0003:046D:0000.0001: unknown main item tag 0x0 [ 36.311437][ T9] hid-generic 0003:046D:0000.0001: unknown main item tag 0x0 [ 36.329399][ T9] hid-generic 0003:046D:0000.0001: unknown main item tag 0x0 [ 36.348543][ T9] hid-generic 0003:046D:0000.0001: unknown main item tag 0x0 [ 36.366955][ T9] hid-generic 0003:046D:0000.0001: unknown main item tag 0x0 [ 36.384920][ T9] hid-generic 0003:046D:0000.0001: unknown main item tag 0x0 [ 36.403928][ T9] hid-generic 0003:046D:0000.0001: unknown main item tag 0x0 [ 36.419845][ T9] hid-generic 0003:046D:0000.0001: unknown main item tag 0x0 [ 36.436354][ T9] hid-generic 0003:046D:0000.0001: unknown main item tag 0x0 [ 36.466341][ T9] hid-generic 0003:046D:0000.0001: unknown main item tag 0x0 [ 36.478730][ T1269] netlink: 24 bytes leftover after parsing attributes in process `syz.1.431'. [ 36.494549][ T9] hid-generic 0003:046D:0000.0001: unknown main item tag 0x0 [ 36.515577][ T9] hid-generic 0003:046D:0000.0001: unknown main item tag 0x0 [ 36.538056][ T9] hid-generic 0003:046D:0000.0001: hidraw0: USB HID v0.00 Device [syz0] on syz0 [ 36.590920][ T36] kauditd_printk_skb: 27 callbacks suppressed [ 36.590939][ T36] audit: type=1400 audit(1791989239.650:297): avc: denied { bind } for pid=1284 comm="syz.4.440" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 36.625787][ T1276] fido_id[1276]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 36.688367][ T1298] ./mnt: Can't lookup blockdev [ 36.707117][ T1304] netlink: 'syz.4.451': attribute type 12 has an invalid length. [ 36.747576][ T36] audit: type=1400 audit(1791989239.810:298): avc: denied { view } for pid=1310 comm="syz.0.453" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=key permissive=1 [ 36.796118][ T36] audit: type=1400 audit(1791989239.850:299): avc: denied { bpf } for pid=1317 comm="syz.0.457" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 36.828575][ T1322] serio: Serial port ptm0 [ 37.084552][ T36] audit: type=1400 audit(1791989240.150:300): avc: denied { create } for pid=1355 comm="syz.1.475" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:hugetlbfs_t tclass=udp_socket permissive=1 [ 37.121167][ T36] audit: type=1400 audit(1791989240.160:301): avc: denied { watch watch_reads } for pid=1358 comm="syz.3.477" path="/" dev="ramfs" ino=8395 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:ramfs_t tclass=dir permissive=1 [ 37.294982][ T1378] device-mapper: ioctl: Invalid ioctl structure: name my, dev fc00 [ 37.377188][ T1392] netlink: 104 bytes leftover after parsing attributes in process `syz.1.491'. [ 37.438481][ T36] audit: type=1400 audit(1791989240.500:302): avc: denied { write } for pid=1395 comm="syz.1.493" name="functions" dev="configfs" ino=6128 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 37.461364][ T36] audit: type=1400 audit(1791989240.500:303): avc: denied { add_name } for pid=1395 comm="syz.1.493" name="tcm.usb0" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 37.713534][ T36] audit: type=1326 audit(1791989240.780:304): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1417 comm="syz.4.502" exe="/root/ci2-android-6-12-rust/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff9f539e559 code=0x7ffc0000 [ 37.767953][ T36] audit: type=1326 audit(1791989240.800:305): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1417 comm="syz.4.502" exe="/root/ci2-android-6-12-rust/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff9f539e559 code=0x7ffc0000 [ 37.798079][ T1422] FAULT_INJECTION: forcing a failure. [ 37.798079][ T1422] name failslab, interval 1, probability 0, space 0, times 0 [ 37.811604][ T1422] CPU: 1 UID: 0 PID: 1422 Comm: syz.4.504 Not tainted syzkaller #0 f0b22d33f268fdb17f8eb1bead78ca030d5a2cb1 [ 37.811639][ T1422] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 37.811655][ T1422] Call Trace: [ 37.811663][ T1422] [ 37.811673][ T1422] __dump_stack+0x21/0x30 [ 37.811710][ T1422] dump_stack_lvl+0x140/0x1c0 [ 37.811741][ T1422] ? __cfi_dump_stack_lvl+0x10/0x10 [ 37.811784][ T1422] ? security_file_alloc+0x49/0x220 [ 37.811814][ T1422] dump_stack+0x19/0x20 [ 37.811847][ T1422] should_fail_ex+0x3c2/0x510 [ 37.811868][ T1422] should_failslab+0xac/0x100 [ 37.811891][ T1422] kmem_cache_alloc_noprof+0x42/0x410 [ 37.811921][ T1422] ? alloc_file_pseudo+0x191/0x1f0 [ 37.811945][ T1422] ? alloc_empty_file+0xbf/0x270 [ 37.811969][ T1422] alloc_empty_file+0xbf/0x270 [ 37.811991][ T1422] ? __mutex_init+0xa6/0x1a0 [ 37.812014][ T1422] alloc_file_clone+0x5a/0xe0 [ 37.812037][ T1422] create_pipe_files+0x3bf/0x6c0 [ 37.812064][ T1422] __do_pipe_flags+0x50/0x2f0 [ 37.812090][ T1422] do_pipe2+0xab/0x190 [ 37.812117][ T1422] ? pipe_fcntl+0x520/0x520 [ 37.812146][ T1422] __x64_sys_pipe2+0x5e/0x70 [ 37.812173][ T1422] x64_sys_call+0x8be/0x2ee0 [ 37.812195][ T1422] do_syscall_64+0x57/0xf0 [ 37.812214][ T1422] ? clear_bhb_loop+0x50/0xa0 [ 37.812241][ T1422] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 37.812263][ T1422] RIP: 0033:0x7ff9f539e559 [ 37.812279][ T1422] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 37.812296][ T1422] RSP: 002b:00007ff9f62b8028 EFLAGS: 00000246 ORIG_RAX: 0000000000000125 [ 37.812320][ T1422] RAX: ffffffffffffffda RBX: 00007ff9f5625fa0 RCX: 00007ff9f539e559 [ 37.812338][ T1422] RDX: 0000000000000000 RSI: 0000000000000800 RDI: 0000000000000000 [ 37.812352][ T1422] RBP: 00007ff9f54358b0 R08: 0000000000000000 R09: 0000000000000000 [ 37.812368][ T1422] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 37.812382][ T1422] R13: 00007ff9f5626038 R14: 00007ff9f5625fa0 R15: 00007ffe5e74c968 [ 37.812402][ T1422] [ 38.020545][ T36] audit: type=1326 audit(1791989240.800:306): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1417 comm="syz.4.502" exe="/root/ci2-android-6-12-rust/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff9f539e559 code=0x7ffc0000 [ 38.336618][ T1475] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=546 sclass=netlink_route_socket pid=1475 comm=syz.4.529 [ 38.439866][ T1492] 9pnet_fd: p9_fd_create_unix (1492): problem connecting socket: ./file0: -30 [ 38.461436][ T1497] netlink: 8 bytes leftover after parsing attributes in process `syz.3.540'. [ 38.573790][ T1516] ------------[ cut here ]------------ [ 38.579294][ T1516] WARNING: CPU: 0 PID: 1516 at crypto/rsa-pkcs1pad.c:560 pkcs1pad_verify+0x4e4/0x700 [ 38.588845][ T1516] Modules linked in: [ 38.592797][ T1516] CPU: 0 UID: 0 PID: 1516 Comm: syz.3.549 Not tainted syzkaller #0 f0b22d33f268fdb17f8eb1bead78ca030d5a2cb1 [ 38.604353][ T1516] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 38.614464][ T1516] RIP: 0010:pkcs1pad_verify+0x4e4/0x700 [ 38.620035][ T1516] Code: 11 00 00 48 83 c4 20 5b 41 5c 41 5d 41 5e 41 5f 5d c3 cc cc cc cc cc e8 3a 8a 05 ff 0f 0b b8 ea ff ff ff eb de e8 2c 8a 05 ff <0f> 0b b8 ea ff ff ff eb d0 89 f9 80 e1 07 80 c1 03 38 c1 0f 8c 5d [ 38.640318][ T1516] RSP: 0018:ffffc90000edf728 EFLAGS: 00010287 [ 38.646455][ T1516] RAX: ffffffff8283c294 RBX: ffff88810da4c000 RCX: 0000000000080000 [ 38.654480][ T1516] RDX: ffffc90001e53000 RSI: 0000000000000b2d RDI: 0000000000000b2e [ 38.662511][ T1516] RBP: ffffc90000edf770 R08: ffffc90000edf82f R09: 0000000000000000 [ 38.670941][ T1516] R10: 0000000000000000 R11: ffffffff8283bdb0 R12: ffff888100a42e88 [ 38.679011][ T1516] R13: 0000000000000000 R14: dffffc0000000000 R15: ffff88810da4c038 [ 38.687068][ T1516] FS: 00007fb48ce0d6c0(0000) GS:ffff8881f6c00000(0000) knlGS:0000000000000000 [ 38.696051][ T1516] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 38.702695][ T1516] CR2: 0000001b2f423ffc CR3: 000000013c58a000 CR4: 00000000003526b0 [ 38.710722][ T1516] Call Trace: [ 38.714096][ T1516] [ 38.717044][ T1516] ? __asan_memcpy+0x5a/0x80 [ 38.721638][ T1516] crypto_sig_verify+0x1d0/0x260 [ 38.726685][ T1516] ? __cfi_crypto_sig_verify+0x10/0x10 [ 38.732199][ T1516] ? crypto_sig_set_pubkey+0x9d/0xb0 [ 38.737592][ T1516] public_key_verify_signature+0x654/0xa40 [ 38.743469][ T1516] ? __cfi_public_key_verify_signature+0x10/0x10 [ 38.749822][ T1516] ? keyctl_pkey_params_get+0x3b8/0x4c0 [ 38.755438][ T1516] ? __cfi_trace_clock_local+0x10/0x10 [ 38.760946][ T1516] ? __cfi_public_key_verify_signature_2+0x10/0x10 [ 38.767532][ T1516] public_key_verify_signature_2+0x47/0x60 [ 38.773498][ T1516] verify_signature+0xf3/0x120 [ 38.778316][ T1516] asymmetric_key_verify_signature+0x160/0x200 [ 38.784632][ T1516] ? __cfi_asymmetric_key_verify_signature+0x10/0x10 [ 38.791347][ T1516] ? should_fail+0xf/0x20 [ 38.795763][ T1516] ? __kasan_check_write+0x18/0x20 [ 38.800907][ T1516] ? _copy_from_user+0x87/0xa0 [ 38.805920][ T1516] ? memdup_user+0xb1/0x170 [ 38.810446][ T1516] keyctl_pkey_verify+0x203/0x290 [ 38.815569][ T1516] ? __cfi_keyctl_pkey_verify+0x10/0x10 [ 38.821153][ T1516] ? __kasan_check_read+0x15/0x20 [ 38.826276][ T1516] __se_sys_keyctl+0x743/0xe40 [ 38.831052][ T1516] ? __x64_sys_keyctl+0xf0/0xf0 [ 38.835949][ T1516] ? __kasan_check_read+0x15/0x20 [ 38.840997][ T1516] ? ring_buffer_unlock_commit+0x473/0x5e0 [ 38.846856][ T1516] ? trace_buffer_unlock_commit_regs+0x14a/0x600 [ 38.853261][ T1516] ? trace_event_buffer_commit+0x256/0x8f0 [ 38.859080][ T1516] ? trace_event_raw_event_sys_enter+0xf5/0x130 [ 38.865381][ T1516] __x64_sys_keyctl+0xc3/0xf0 [ 38.870075][ T1516] x64_sys_call+0x996/0x2ee0 [ 38.874710][ T1516] do_syscall_64+0x57/0xf0 [ 38.879169][ T1516] ? clear_bhb_loop+0x50/0xa0 [ 38.883936][ T1516] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 38.889857][ T1516] RIP: 0033:0x7fb48bf9e559 [ 38.894342][ T1516] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 38.914112][ T1516] RSP: 002b:00007fb48ce0d028 EFLAGS: 00000246 ORIG_RAX: 00000000000000fa [ 38.922575][ T1516] RAX: ffffffffffffffda RBX: 00007fb48c225fa0 RCX: 00007fb48bf9e559 [ 38.930561][ T1516] RDX: 0000200000000f00 RSI: 0000200000000ec0 RDI: 000000000000001c [ 38.938586][ T1516] RBP: 00007fb48c0358b0 R08: 0000000000000000 R09: 0000000000000000 [ 38.946638][ T1516] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 38.954661][ T1516] R13: 00007fb48c226038 R14: 00007fb48c225fa0 R15: 00007ffca4009898 [ 38.962698][ T1516] [ 38.965760][ T1516] ---[ end trace 0000000000000000 ]--- [ 38.982197][ T1518] netlink: 96 bytes leftover after parsing attributes in process `syz.1.550'.