last executing test programs: 3.61868521s ago: executing program 2 (id=135): openat$ublk_ctrl(0xffffffffffffff9c, 0x0, 0x2, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000340)='./file0\x00', 0x101c42, 0x0) write$binfmt_aout(r0, &(0x7f0000000080)=ANY=[], 0xfffffee2) r1 = gettid() timer_create(0x1, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f0000000480)=0x0) timer_settime(r2, 0x1, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x3938700}}, 0x0) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_mgmt(0x0, r3) landlock_restrict_self(0xffffffffffffffff, 0xc) syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) 3.437448295s ago: executing program 2 (id=138): r0 = openat$sysfs(0xffffff9c, &(0x7f0000000040)='/sys/kernel/address_bits', 0x0, 0x0) read(r0, &(0x7f0000000080), 0x100) 3.318285798s ago: executing program 2 (id=139): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x200000}) madvise(&(0x7f0000000000/0x200000)=nil, 0x200000, 0xe) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./sys\x00', 0x1ff) r2 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./sys/kernel/mm/transparent_hugepage/enabled\x00', 0x2, 0x0) write(r2, &(0x7f0000000300)='always\x00', 0x7) 3.213556281s ago: executing program 2 (id=140): socket$inet_tcp(0x2, 0x1, 0x0) r0 = openat$ppp(0xffffffffffffff9c, &(0x7f00000001c0), 0x88802, 0x0) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f0000000140)) ioctl$PPPIOCSFLAGS1(r0, 0x40047459, &(0x7f00000000c0)=0x41) pwritev(r0, &(0x7f0000000040)=[{&(0x7f0000000000)="80fd02000000", 0x6}], 0x1, 0x0, 0x0) 2.984212436s ago: executing program 2 (id=144): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./sys\x00', 0x1ff) mount(&(0x7f0000000080)=@filename='none\x00', &(0x7f00000000c0)='./sys\x00', &(0x7f0000000100)='sysfs\x00', 0x0, 0x0) mount(&(0x7f0000000140)=@filename='none\x00', &(0x7f0000000180)='./sys/kernel/config\x00', &(0x7f00000001c0)='configfs\x00', 0x0, 0x0) 2.908833058s ago: executing program 2 (id=145): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ff) mount(&(0x7f0000000100)=@filename='none\x00', &(0x7f0000000200)='./config\x00', &(0x7f0000000300)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000400)='./config/usb_gadget/g1\x00', 0x1ff) r0 = openat(0xffffffffffffff9c, &(0x7f0000000500)='./config/usb_gadget/g1/idVendor\x00', 0x1, 0x0) write(r0, &(0x7f0000000600)='0x1d6b\x00', 0x7) close(r0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000700)='./config/usb_gadget/g1/idProduct\x00', 0x1, 0x0) write(r1, &(0x7f0000000800)='0x0104\x00', 0x7) close(r1) mkdirat(0xffffffffffffff9c, &(0x7f0000000900)='./config/usb_gadget/g1/strings/0x409\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000a00)='./config/usb_gadget/g1/functions/uac1.usb0\x00', 0x1ff) r2 = openat(0xffffffffffffff9c, &(0x7f0000001100)='./config/usb_gadget/g1/functions/uac1.usb0/c_chmask\x00', 0x1, 0x0) write(r2, &(0x7f0000001200)='3\x00', 0x2) close(r2) r3 = openat(0xffffffffffffff9c, &(0x7f0000001300)='./config/usb_gadget/g1/functions/uac1.usb0/c_srate\x00', 0x1, 0x0) write(r3, &(0x7f0000001400)='48000\x00', 0x6) close(r3) r4 = openat(0xffffffffffffff9c, &(0x7f0000001500)='./config/usb_gadget/g1/functions/uac1.usb0/c_ssize\x00', 0x1, 0x0) write(r4, &(0x7f0000001600)='2\x00', 0x2) close(r4) mkdirat(0xffffffffffffff9c, &(0x7f0000000b00)='./config/usb_gadget/g1/configs/c.1\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000c00)='./config/usb_gadget/g1/configs/c.1/strings/0x409\x00', 0x1ff) symlinkat(&(0x7f0000000d00)='./config/usb_gadget/g1/functions/uac1.usb0\x00', 0xffffffffffffff9c, &(0x7f0000000e00)='./config/usb_gadget/g1/configs/c.1/uac1.usb0\x00') r5 = openat(0xffffffffffffff9c, &(0x7f0000000f00)='./config/usb_gadget/g1/UDC\x00', 0x1, 0x0) write(r5, &(0x7f0000001000)='dummy_udc.0\x00', 0xc) nanosleep(&(0x7f0000000300)={0x0, 0x1dcd6500}, 0x0) 2.575837076s ago: executing program 0 (id=153): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./sys\x00', 0x777) mount(0x0, &(0x7f0000000100)='./sys\x00', &(0x7f0000000200)='sysfs\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./sys/devices/system/cpu/cpu1/online\x00', 0x1, 0x0) write(r1, &(0x7f0000000400)='0\x00', 0x1) r2 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./sys/devices/system/cpu/cpu1/online\x00', 0x1, 0x0) write(r2, &(0x7f0000000400)='1\x00', 0x1) 2.111380427s ago: executing program 0 (id=154): mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r0) ptrace$peeksig(0x4209, r0, &(0x7f0000000140), 0x0) 1.979681561s ago: executing program 0 (id=158): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000100)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./sys/bus/platform/drivers/dummy_hcd/unbind\x00', 0x1, 0x0) write(r0, &(0x7f0000000300)='dummy_hcd.0\x00', 0xc) 1.557420752s ago: executing program 0 (id=164): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000280)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_PMKSA(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000200)={0x44, r1, 0xf2473ed90fb552e1, 0x0, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_PMKID={0x14, 0x55, "7480687fd2c4dbf658cbed78fa8c1143"}, @NL80211_ATTR_PMK_REAUTH_THRESHOLD={0x5, 0x120, 0x9}, @NL80211_ATTR_MAC={0xa, 0x6, @from_mac=@device_b}]}, 0x44}, 0x1, 0x0, 0x0, 0x40004}, 0x0) 1.418288685s ago: executing program 0 (id=166): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = syz_kvm_setup_syzos_vm$x86(r1, &(0x7f0000c00000/0x400000)=nil) r3 = syz_kvm_add_vcpu$x86(r2, &(0x7f0000000040)={0x0, &(0x7f0000000080)=[@code={0xa, 0x12, {"f4"}}], 0x12}) ioctl$KVM_PRE_FAULT_MEMORY(r3, 0xc040aed5, &(0x7f0000000200)={0x0, 0x1000}) 1.057367804s ago: executing program 3 (id=167): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup(r1) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}) writev(r0, &(0x7f00000004c0)=[{&(0x7f0000000140)="2e1221b23bb601c477d3df163e75963d86ddf06712e9000d2f8db0049d90491c3248040000dbb8a10000", 0x2a}, {&(0x7f0000000200)="24f5bbd11cb3", 0x6}, {&(0x7f0000000240)="ee3b2ea560b8d504aab400008100", 0xe}], 0x3) 1.055274734s ago: executing program 1 (id=168): mkdir(&(0x7f0000000040)='./mount_sys\x00', 0x1ff) mount(0x0, &(0x7f00000000c0)='./mount_sys\x00', &(0x7f0000000100)='sysfs\x00', 0x0, 0x0) r0 = open(&(0x7f0000000240)='./mount_sys/fs/ocfs2/cluster_stack\x00', 0x1, 0x0) write(r0, &(0x7f0000000780)="7573657204", 0x5) 946.387496ms ago: executing program 1 (id=169): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x200000}) madvise(&(0x7f0000000000/0x200000)=nil, 0x200000, 0xe) mount(0x0, &(0x7f0000000200)='./sys\x00', &(0x7f0000000240)='sysfs\x00', 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./sys/kernel/mm/transparent_hugepage/enabled\x00', 0x2, 0x0) write(r2, &(0x7f0000000300)='always\x00', 0x7) 734.358462ms ago: executing program 1 (id=170): close(0x3) mkdir(&(0x7f0000000000)='config\x00', 0x1ff) mount(0x0, &(0x7f0000000100)='config\x00', &(0x7f0000000200)='configfs\x00', 0x0, 0x0) mkdir(&(0x7f0000000300)='config/usb_gadget/g1\x00', 0x1ff) mkdir(&(0x7f0000000500)='config/usb_gadget/g1/functions/uac2.usb0\x00', 0x1ff) r0 = openat(0xffffffffffffff9c, &(0x7f0000000600)='config/usb_gadget/g1/functions/uac2.usb0/c_srate\x00', 0x1, 0x0) write(r0, &(0x7f0000000700)='44100,48000,9', 0xd) syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') 726.585052ms ago: executing program 1 (id=171): mkdir(&(0x7f0000000000)='./my_configfs\x00', 0x1ff) mount(0x0, &(0x7f0000000100)='./my_configfs\x00', &(0x7f0000000200)='configfs\x00', 0x0, 0x0) mkdir(&(0x7f0000000300)='./my_sysfs\x00', 0x1ff) mount(0x0, &(0x7f0000000400)='./my_sysfs\x00', &(0x7f0000000500)='sysfs\x00', 0x0, 0x0) mkdir(&(0x7f0000000600)='./my_dev\x00', 0x1ff) mount(0x0, &(0x7f0000000700)='./my_dev\x00', &(0x7f0000000800)='devtmpfs\x00', 0x0, 0x0) mkdir(&(0x7f0000000900)='./my_configfs/dlm/cluster1\x00', 0x1ff) r0 = openat(0xffffffffffffff9c, &(0x7f0000000a00)='./my_configfs/dlm/cluster1/cluster_name\x00', 0x2, 0x0) write(r0, &(0x7f0000000b00)='cluster1\x00', 0x9) mkdir(&(0x7f0000000d00)='./my_configfs/dlm/cluster1/comms/1\x00', 0x1ff) r1 = openat(0xffffffffffffff9c, &(0x7f0000000e00)='./my_configfs/dlm/cluster1/comms/1/local\x00', 0x2, 0x0) write(r1, &(0x7f0000000f00)='1\x00', 0x2) r2 = openat(0xffffffffffffff9c, &(0x7f0000001000)='./my_configfs/dlm/cluster1/comms/1/addr\x00', 0x1, 0x0) write(r2, &(0x7f0000001100)="0200"/128, 0x80) 726.294472ms ago: executing program 0 (id=172): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000040)='sysfs\x00', 0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) mmap(&(0x7f0000000000/0x1000000)=nil, 0x1000000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x1000000, &(0x7f0000000000/0x1000000)=nil}) madvise(&(0x7f0000000000/0x1000000)=nil, 0x1000000, 0x17) madvise(&(0x7f0000000000/0x1000000)=nil, 0x1000000, 0xc) r2 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./sys/kernel/mm/ksm/sleep_millisecs\x00', 0x1, 0x0) write(r2, &(0x7f0000000400)='0\n\x00', 0x2) r3 = openat(0xffffffffffffff9c, &(0x7f0000000500)='./sys/kernel/mm/ksm/pages_to_scan\x00', 0x1, 0x0) write(r3, &(0x7f0000000600)='10000\n\x00', 0x6) r4 = openat(0xffffffffffffff9c, &(0x7f0000000700)='./sys/kernel/mm/ksm/run\x00', 0x1, 0x0) write(r4, &(0x7f0000000800)='1\n\x00', 0x2) nanosleep(&(0x7f0000000900)={0x1, 0x1dcd6500}, 0x0) 718.262342ms ago: executing program 3 (id=173): write$tun(0xffffffffffffffff, &(0x7f0000000080)=ANY=[@ANYRESOCT], 0xfdef) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) write$cgroup_devices(r1, &(0x7f0000000080)=ANY=[@ANYBLOB='b '], 0x47) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0) r3 = openat$cgroup_devices(r2, &(0x7f00000000c0)='devices.allow\x00', 0x2, 0x0) splice(r0, 0x0, r3, 0x0, 0xb9, 0x8) 618.275254ms ago: executing program 3 (id=174): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = eventfd2(0x0, 0x0) ioctl$KVM_IOEVENTFD(r1, 0x4040ae79, &(0x7f0000000000)={0x0, 0x1000, 0x4, r2}) 617.989124ms ago: executing program 1 (id=175): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ff) mount(&(0x7f0000000100)=@filename='none\x00', &(0x7f0000000200)='./config\x00', &(0x7f0000000300)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000400)='./config/usb_gadget/g1\x00', 0x1ff) r0 = openat(0xffffffffffffff9c, &(0x7f0000000500)='./config/usb_gadget/g1/idVendor\x00', 0x1, 0x0) write(r0, &(0x7f0000000600)='0x1d6b\x00', 0x7) close(r0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000700)='./config/usb_gadget/g1/idProduct\x00', 0x1, 0x0) write(r1, &(0x7f0000000800)='0x0104\x00', 0x7) close(r1) mkdirat(0xffffffffffffff9c, &(0x7f0000000900)='./config/usb_gadget/g1/strings/0x409\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000a00)='./config/usb_gadget/g1/functions/uac1.usb0\x00', 0x1ff) r2 = openat(0xffffffffffffff9c, &(0x7f0000001100)='./config/usb_gadget/g1/functions/uac1.usb0/c_chmask\x00', 0x1, 0x0) write(r2, &(0x7f0000001200)='3\x00', 0x2) close(r2) r3 = openat(0xffffffffffffff9c, &(0x7f0000001300)='./config/usb_gadget/g1/functions/uac1.usb0/c_srate\x00', 0x1, 0x0) write(r3, &(0x7f0000001400)='48000\x00', 0x6) close(r3) r4 = openat(0xffffffffffffff9c, &(0x7f0000001500)='./config/usb_gadget/g1/functions/uac1.usb0/c_ssize\x00', 0x1, 0x0) write(r4, &(0x7f0000001600)='2\x00', 0x2) close(r4) mkdirat(0xffffffffffffff9c, &(0x7f0000000b00)='./config/usb_gadget/g1/configs/c.1\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000c00)='./config/usb_gadget/g1/configs/c.1/strings/0x409\x00', 0x1ff) symlinkat(&(0x7f0000000d00)='./config/usb_gadget/g1/functions/uac1.usb0\x00', 0xffffffffffffff9c, &(0x7f0000000e00)='./config/usb_gadget/g1/configs/c.1/uac1.usb0\x00') r5 = openat(0xffffffffffffff9c, &(0x7f0000000f00)='./config/usb_gadget/g1/UDC\x00', 0x1, 0x0) write(r5, &(0x7f0000001000)='dummy_udc.0\x00', 0xc) nanosleep(&(0x7f0000000300)={0x0, 0x1dcd6500}, 0x0) 538.545137ms ago: executing program 3 (id=176): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./myconfig\x00', 0x1ff) mount(0x0, &(0x7f0000000100)='./myconfig\x00', &(0x7f0000000200)='configfs\x00', 0x0, 0x0) symlinkat(&(0x7f0000000600)='./myconfig/usb_gadget/g1/functions/acm.usb0\x00', 0xffffffffffffff9c, &(0x7f0000000700)='./myconfig/usb_gadget/g1/configs/c.1/acm.usb0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000800)='./myconfig/usb_gadget/g1/max_speed\x00', 0x1, 0x0) write(r0, &(0x7f0000000900)='super-speed', 0xb) close(r0) write(0xffffffffffffffff, 0x0, 0x0) close(0xffffffffffffffff) mkdirat(0xffffffffffffff9c, &(0x7f0000002000)='./mydev\x00', 0x1ff) nanosleep(&(0x7f0000000c00)={0x0, 0x5f5e100}, 0x0) nanosleep(&(0x7f0000000c00)={0x0, 0x5f5e100}, 0x0) nanosleep(&(0x7f0000000c00)={0x0, 0x5f5e100}, 0x0) nanosleep(&(0x7f0000000c00)={0x0, 0x5f5e100}, 0x0) nanosleep(&(0x7f0000000c00)={0x0, 0x5f5e100}, 0x0) nanosleep(&(0x7f0000000c00)={0x0, 0x5f5e100}, 0x0) openat(0xffffffffffffff9c, &(0x7f0000002300)='./mydev/ttyACM0\x00', 0x802, 0x0) 139.177076ms ago: executing program 3 (id=177): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$wireguard(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$WG_CMD_SET_DEVICE(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000300)={0x74, r1, 0x1, 0x0, 0x0, {}, [@WGDEVICE_A_IFNAME={0x14, 0x2, 'wg2\x00'}, @WGDEVICE_A_PEERS={0x4c, 0x8, 0x0, 0x1, [{0x48, 0x0, 0x0, 0x1, [@WGPEER_A_PUBLIC_KEY={0x24, 0x1, @a_g}, @WGPEER_A_ENDPOINT6={0x20, 0x4, {0xa, 0x4e21, 0x0, @loopback, 0x100000}}]}]}]}, 0x74}}, 0x0) 30.340919ms ago: executing program 3 (id=178): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x200000}) madvise(&(0x7f0000000000/0x200000)=nil, 0x200000, 0xe) mount(0x0, &(0x7f0000000200)='./sys\x00', &(0x7f0000000240)='sysfs\x00', 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./sys/kernel/mm/transparent_hugepage/enabled\x00', 0x2, 0x0) write(r2, &(0x7f0000000300)='always\x00', 0x7) 0s ago: executing program 1 (id=179): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x1bd, @loopback}, 0x10) listen(r0, 0xa) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./mnt\x00', 0x1ff) mount(&(0x7f0000000200)=@filename='\\\\127.0.0.1\\share\x00', &(0x7f0000000300)='./mnt\x00', &(0x7f0000000400)='cifs\x00', 0x0, &(0x7f0000000500)='username=guest,password=guest,nodfs\x00') kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.1.82' (ED25519) to the list of known hosts. [ 30.008444][ T36] audit: type=1400 audit(1785409607.800:64): avc: denied { mounton } for pid=287 comm="syz-executor" path="/syzcgroup/unified" dev="sda1" ino=2023 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1 [ 30.012377][ T287] cgroup: Unknown subsys name 'net' [ 30.031143][ T36] audit: type=1400 audit(1785409607.800:65): avc: denied { mount } for pid=287 comm="syz-executor" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 30.058629][ T36] audit: type=1400 audit(1785409607.830:66): avc: denied { unmount } for pid=287 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 30.059250][ T287] cgroup: Unknown subsys name 'devices' [ 30.184707][ T287] cgroup: Unknown subsys name 'hugetlb' [ 30.190371][ T287] cgroup: Unknown subsys name 'rlimit' [ 30.287082][ T36] audit: type=1400 audit(1785409608.080:67): avc: denied { setattr } for pid=287 comm="syz-executor" name="raw-gadget" dev="devtmpfs" ino=190 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 30.310311][ T36] audit: type=1400 audit(1785409608.080:68): avc: denied { mounton } for pid=287 comm="syz-executor" path="/proc/sys/fs/binfmt_misc" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=dir permissive=1 [ 30.335101][ T36] audit: type=1400 audit(1785409608.080:69): avc: denied { mount } for pid=287 comm="syz-executor" name="/" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=filesystem permissive=1 [ 30.366774][ T289] SELinux: Context root:object_r:swapfile_t is not valid (left unmapped). Setting up swapspace version 1, size = 127995904 bytes [ 30.376062][ T36] audit: type=1400 audit(1785409608.170:70): avc: denied { relabelto } for pid=289 comm="mkswap" name="swap-file" dev="sda1" ino=2026 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 30.400205][ T287] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 30.401673][ T36] audit: type=1400 audit(1785409608.170:71): avc: denied { write } for pid=289 comm="mkswap" path="/root/swap-file" dev="sda1" ino=2026 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 30.436048][ T36] audit: type=1400 audit(1785409608.180:72): avc: denied { read } for pid=287 comm="syz-executor" name="swap-file" dev="sda1" ino=2026 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 30.461792][ T36] audit: type=1400 audit(1785409608.180:73): avc: denied { open } for pid=287 comm="syz-executor" path="/root/swap-file" dev="sda1" ino=2026 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 31.832118][ T294] bridge0: port 1(bridge_slave_0) entered blocking state [ 31.839518][ T294] bridge0: port 1(bridge_slave_0) entered disabled state [ 31.846834][ T294] bridge_slave_0: entered allmulticast mode [ 31.853249][ T294] bridge_slave_0: entered promiscuous mode [ 31.861432][ T294] bridge0: port 2(bridge_slave_1) entered blocking state [ 31.868762][ T294] bridge0: port 2(bridge_slave_1) entered disabled state [ 31.875935][ T294] bridge_slave_1: entered allmulticast mode [ 31.882374][ T294] bridge_slave_1: entered promiscuous mode [ 31.907123][ T295] bridge0: port 1(bridge_slave_0) entered blocking state [ 31.914222][ T295] bridge0: port 1(bridge_slave_0) entered disabled state [ 31.921334][ T295] bridge_slave_0: entered allmulticast mode [ 31.927894][ T295] bridge_slave_0: entered promiscuous mode [ 31.941003][ T295] bridge0: port 2(bridge_slave_1) entered blocking state [ 31.948196][ T295] bridge0: port 2(bridge_slave_1) entered disabled state [ 31.955324][ T295] bridge_slave_1: entered allmulticast mode [ 31.961620][ T295] bridge_slave_1: entered promiscuous mode [ 31.981692][ T297] bridge0: port 1(bridge_slave_0) entered blocking state [ 31.988963][ T297] bridge0: port 1(bridge_slave_0) entered disabled state [ 31.996127][ T297] bridge_slave_0: entered allmulticast mode [ 32.002653][ T297] bridge_slave_0: entered promiscuous mode [ 32.009353][ T297] bridge0: port 2(bridge_slave_1) entered blocking state [ 32.016575][ T297] bridge0: port 2(bridge_slave_1) entered disabled state [ 32.023865][ T297] bridge_slave_1: entered allmulticast mode [ 32.030252][ T297] bridge_slave_1: entered promiscuous mode [ 32.081672][ T296] bridge0: port 1(bridge_slave_0) entered blocking state [ 32.088812][ T296] bridge0: port 1(bridge_slave_0) entered disabled state [ 32.096149][ T296] bridge_slave_0: entered allmulticast mode [ 32.102955][ T296] bridge_slave_0: entered promiscuous mode [ 32.128944][ T296] bridge0: port 2(bridge_slave_1) entered blocking state [ 32.136229][ T296] bridge0: port 2(bridge_slave_1) entered disabled state [ 32.143456][ T296] bridge_slave_1: entered allmulticast mode [ 32.149769][ T296] bridge_slave_1: entered promiscuous mode [ 32.271277][ T295] bridge0: port 2(bridge_slave_1) entered blocking state [ 32.278410][ T295] bridge0: port 2(bridge_slave_1) entered forwarding state [ 32.285964][ T295] bridge0: port 1(bridge_slave_0) entered blocking state [ 32.293049][ T295] bridge0: port 1(bridge_slave_0) entered forwarding state [ 32.305457][ T294] bridge0: port 2(bridge_slave_1) entered blocking state [ 32.312582][ T294] bridge0: port 2(bridge_slave_1) entered forwarding state [ 32.319909][ T294] bridge0: port 1(bridge_slave_0) entered blocking state [ 32.327002][ T294] bridge0: port 1(bridge_slave_0) entered forwarding state [ 32.368281][ T297] bridge0: port 2(bridge_slave_1) entered blocking state [ 32.375404][ T297] bridge0: port 2(bridge_slave_1) entered forwarding state [ 32.382840][ T297] bridge0: port 1(bridge_slave_0) entered blocking state [ 32.390170][ T297] bridge0: port 1(bridge_slave_0) entered forwarding state [ 32.400608][ T296] bridge0: port 2(bridge_slave_1) entered blocking state [ 32.407752][ T296] bridge0: port 2(bridge_slave_1) entered forwarding state [ 32.415216][ T296] bridge0: port 1(bridge_slave_0) entered blocking state [ 32.422286][ T296] bridge0: port 1(bridge_slave_0) entered forwarding state [ 32.442743][ T44] bridge0: port 1(bridge_slave_0) entered disabled state [ 32.450149][ T44] bridge0: port 1(bridge_slave_0) entered disabled state [ 32.458460][ T44] bridge0: port 2(bridge_slave_1) entered disabled state [ 32.465936][ T44] bridge0: port 2(bridge_slave_1) entered disabled state [ 32.473751][ T44] bridge0: port 1(bridge_slave_0) entered disabled state [ 32.481100][ T44] bridge0: port 2(bridge_slave_1) entered disabled state [ 32.488598][ T44] bridge0: port 1(bridge_slave_0) entered disabled state [ 32.496076][ T44] bridge0: port 2(bridge_slave_1) entered disabled state [ 32.516956][ T44] bridge0: port 1(bridge_slave_0) entered blocking state [ 32.524074][ T44] bridge0: port 1(bridge_slave_0) entered forwarding state [ 32.531969][ T44] bridge0: port 2(bridge_slave_1) entered blocking state [ 32.539059][ T44] bridge0: port 2(bridge_slave_1) entered forwarding state [ 32.584368][ T44] bridge0: port 1(bridge_slave_0) entered blocking state [ 32.591470][ T44] bridge0: port 1(bridge_slave_0) entered forwarding state [ 32.600085][ T44] bridge0: port 2(bridge_slave_1) entered blocking state [ 32.607309][ T44] bridge0: port 2(bridge_slave_1) entered forwarding state [ 32.615964][ T44] bridge0: port 1(bridge_slave_0) entered blocking state [ 32.623049][ T44] bridge0: port 1(bridge_slave_0) entered forwarding state [ 32.644833][ T44] bridge0: port 2(bridge_slave_1) entered blocking state [ 32.651925][ T44] bridge0: port 2(bridge_slave_1) entered forwarding state [ 32.662374][ T44] bridge0: port 1(bridge_slave_0) entered blocking state [ 32.669465][ T44] bridge0: port 1(bridge_slave_0) entered forwarding state [ 32.682878][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 32.689951][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 32.724645][ T295] veth0_vlan: entered promiscuous mode [ 32.739769][ T297] veth0_vlan: entered promiscuous mode [ 32.753013][ T294] veth0_vlan: entered promiscuous mode [ 32.780356][ T295] veth1_macvtap: entered promiscuous mode [ 32.788897][ T297] veth1_macvtap: entered promiscuous mode [ 32.796235][ T296] veth0_vlan: entered promiscuous mode [ 32.806199][ T294] veth1_macvtap: entered promiscuous mode [ 32.840948][ T296] veth1_macvtap: entered promiscuous mode [ 32.861118][ T297] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 32.894082][ T313] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 32.999350][ T324] FAULT_INJECTION: forcing a failure. [ 32.999350][ T324] name fail_page_alloc, interval 1, probability 100, space 0, times 99 [ 33.003883][ T310] FAULT_INJECTION: forcing a failure. [ 33.003883][ T310] name fail_page_alloc, interval 1, probability 100, space 0, times 98 [ 33.015328][ T321] FAULT_INJECTION: forcing a failure. [ 33.015328][ T321] name fail_page_alloc, interval 1, probability 100, space 0, times 97 [ 33.029867][ T310] CPU: 1 UID: 0 PID: 310 Comm: kworker/u8:4 Not tainted syzkaller #0 0b31bef96cff8e44f9e14c4f768eb06c85e3b290 [ 33.029971][ T310] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 33.030004][ T310] Workqueue: ipv6_addrconf addrconf_dad_work [ 33.030115][ T310] Call Trace: [ 33.030135][ T310] [ 33.030156][ T310] __dump_stack+0x21/0x30 [ 33.030248][ T310] dump_stack_lvl+0x140/0x1c0 [ 33.030323][ T310] ? __cfi_dump_stack_lvl+0x10/0x10 [ 33.030409][ T310] ? __cfi_netif_skb_features+0x10/0x10 [ 33.030505][ T310] dump_stack+0x19/0x20 [ 33.030579][ T310] should_fail_ex+0x3c2/0x510 [ 33.030653][ T310] should_fail_alloc_page+0xec/0x110 [ 33.030734][ T310] __alloc_pages_noprof+0x1c0/0x7e0 [ 33.030812][ T310] ? __cfi___alloc_pages_noprof+0x10/0x10 [ 33.030905][ T310] ? __cfi_stack_trace_consume_entry+0x10/0x10 [ 33.031009][ T310] alloc_slab_page+0x6b/0x1e0 [ 33.031090][ T310] allocate_slab+0xed/0x430 [ 33.031156][ T310] ___slab_alloc+0x591/0x8c0 [ 33.031225][ T310] ? ___neigh_create+0x741/0x2100 [ 33.031300][ T310] ? ___neigh_create+0x741/0x2100 [ 33.031365][ T310] ? ___neigh_create+0x741/0x2100 [ 33.031436][ T310] __kmalloc_noprof+0x2fc/0x510 [ 33.031497][ T310] ? ___neigh_create+0x741/0x2100 [ 33.031571][ T310] ___neigh_create+0x741/0x2100 [ 33.031640][ T310] ? __kasan_check_read+0x15/0x20 [ 33.031703][ T310] ? selinux_ip_postroute+0x291/0xfe0 [ 33.031767][ T310] __neigh_create+0x72/0xb0 [ 33.031839][ T310] ip6_finish_output2+0xba2/0x1990 [ 33.031923][ T310] ? __cfi_ip6_finish_output2+0x10/0x10 [ 33.032008][ T310] ? __cfi_ip6table_mangle_hook+0x10/0x10 [ 33.032079][ T310] ip6_finish_output+0x535/0xaf0 [ 33.032154][ T310] ip6_output+0x1fe/0x420 [ 33.032228][ T310] ? __cfi_ip6_output+0x10/0x10 [ 33.032307][ T310] ? __cfi_ip6_finish_output+0x10/0x10 [ 33.032398][ T310] ? __cfi_ip6t_do_table+0x10/0x10 [ 33.032465][ T310] ? __cfi_ip6_output+0x10/0x10 [ 33.032537][ T310] ndisc_send_skb+0x777/0xca0 [ 33.032600][ T310] ? __cfi_ndisc_send_skb+0x10/0x10 [ 33.032661][ T310] ? __cfi_dst_output+0x10/0x10 [ 33.032713][ T310] ? ndisc_ns_create+0x6af/0x8d0 [ 33.032767][ T310] ? _raw_spin_unlock_irqrestore+0x4a/0x70 [ 33.032841][ T310] ndisc_send_ns+0xd8/0x160 [ 33.032902][ T310] ? __cfi_ndisc_send_ns+0x10/0x10 [ 33.032963][ T310] addrconf_dad_work+0xa0e/0x1550 [ 33.033030][ T310] ? __cfi_addrconf_dad_work+0x10/0x10 [ 33.033092][ T310] ? pwq_dec_nr_in_flight+0x943/0xba0 [ 33.033154][ T310] ? kick_pool+0xb9/0x540 [ 33.033227][ T310] process_scheduled_works+0x7f7/0x1060 [ 33.033292][ T310] worker_thread+0xc99/0x13f0 [ 33.033356][ T310] kthread+0x2c7/0x360 [ 33.033425][ T310] ? __cfi_worker_thread+0x10/0x10 [ 33.033488][ T310] ? __cfi_kthread+0x10/0x10 [ 33.033554][ T310] ret_from_fork+0x67/0xa0 [ 33.033645][ T310] ? __cfi_kthread+0x10/0x10 [ 33.033721][ T310] ret_from_fork_asm+0x1a/0x30 [ 33.033805][ T310] [ 33.035913][ T100] FAULT_INJECTION: forcing a failure. [ 33.035913][ T100] name fail_page_alloc, interval 1, probability 100, space 0, times 82 [ 33.062500][ T321] CPU: 0 UID: 0 PID: 321 Comm: syz.0.1 Not tainted syzkaller #0 0b31bef96cff8e44f9e14c4f768eb06c85e3b290 [ 33.062598][ T321] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 33.062640][ T321] Call Trace: [ 33.062661][ T321] [ 33.062690][ T321] __dump_stack+0x21/0x30 [ 33.062790][ T321] dump_stack_lvl+0x140/0x1c0 [ 33.062887][ T321] ? __cfi_dump_stack_lvl+0x10/0x10 [ 33.062984][ T321] ? selinux_socket_sock_rcv_skb+0x32f/0x8c0 [ 33.063078][ T321] dump_stack+0x19/0x20 [ 33.063157][ T321] should_fail_ex+0x3c2/0x510 [ 33.063231][ T321] should_fail_alloc_page+0xec/0x110 [ 33.063308][ T321] __alloc_pages_noprof+0x1c0/0x7e0 [ 33.063405][ T321] ? __asan_memcpy+0x5a/0x80 [ 33.063455][ T321] ? __cfi___alloc_pages_noprof+0x10/0x10 [ 33.063567][ T321] alloc_slab_page+0x6b/0x1e0 [ 33.063675][ T321] ? _raw_spin_lock_irqsave+0xc1/0x160 [ 33.063759][ T321] allocate_slab+0xed/0x430 [ 33.063833][ T321] ___slab_alloc+0x591/0x8c0 [ 33.063908][ T321] ? __alloc_skb+0x10c/0x360 [ 33.064014][ T321] kmem_cache_alloc_node_noprof+0x29b/0x420 [ 33.064078][ T321] ? __alloc_skb+0x10c/0x360 [ 33.064162][ T321] __alloc_skb+0x10c/0x360 [ 33.064247][ T321] pfkey_send_acquire+0x643/0x28c0 [ 33.064326][ T321] km_query+0x85/0x110 [ 33.064391][ T321] xfrm_state_find+0x3836/0x53d0 [ 33.064450][ T321] ? fib6_node_lookup+0x4ee/0x520 [ 33.064549][ T321] ? __cfi_xfrm_state_find+0x10/0x10 [ 33.064623][ T321] xfrm_resolve_and_create_bundle+0x790/0x3090 [ 33.064727][ T321] ? xfrm_lookup_with_ifid+0x2340/0x2340 [ 33.064804][ T321] ? __cfi_ip6table_mangle_hook+0x10/0x10 [ 33.064878][ T321] ? ip6_pol_route_output+0x55/0x80 [ 33.065002][ T321] ? fib6_rule_lookup+0x395/0x6d0 [ 33.065090][ T321] ? __cfi_ip6_pol_route_output+0x10/0x10 [ 33.065187][ T321] ? __cfi_fib6_rule_lookup+0x10/0x10 [ 33.065272][ T321] ? __cfi_ip6_output+0x10/0x10 [ 33.065346][ T321] ? __cfi_ip6t_do_table+0x10/0x10 [ 33.065409][ T321] ? xfrm_selector_match+0xbcf/0x10b0 [ 33.065478][ T321] xfrm_lookup_with_ifid+0xd26/0x2340 [ 33.065571][ T321] ? __cfi_xfrm_lookup_with_ifid+0x10/0x10 [ 33.065655][ T321] ? ip6_dst_lookup+0x80/0x80 [ 33.065743][ T321] ? __kasan_check_write+0x18/0x20 [ 33.065800][ T321] ? _raw_spin_lock_bh+0x96/0x130 [ 33.065865][ T321] ? __cfi__raw_spin_lock_bh+0x10/0x10 [ 33.066117][ T321] xfrm_lookup_route+0x40/0x190 [ 33.066417][ T321] ip6_dst_lookup_flow+0x9f/0xd0 [ 33.066527][ T321] rawv6_sendmsg+0xd78/0x1820 [ 33.066633][ T321] ? __cfi_avc_has_perm+0x10/0x10 [ 33.066701][ T321] ? __cfi_rawv6_sendmsg+0x10/0x10 [ 33.066797][ T321] ? selinux_socket_sendmsg+0x281/0x380 [ 33.066894][ T321] ? inet_send_prepare+0x64/0x4e0 [ 33.066978][ T321] ? __cfi_rawv6_sendmsg+0x10/0x10 [ 33.067067][ T321] inet_sendmsg+0x113/0x120 [ 33.067150][ T321] ____sys_sendmsg+0x822/0xa00 [ 33.067244][ T321] ? __import_iovec+0x3fa/0x7d0 [ 33.067340][ T321] ? __sys_sendmsg_sock+0x50/0x50 [ 33.067406][ T321] ? import_iovec+0x80/0xb0 [ 33.067502][ T321] ___sys_sendmsg+0x2a6/0x370 [ 33.067567][ T321] ? __sys_sendmsg+0x2a0/0x2a0 [ 33.067622][ T321] ? __futex_wait+0x330/0x3d0 [ 33.067687][ T321] ? __cfi___futex_wait+0x10/0x10 [ 33.067760][ T321] ? __kasan_check_read+0x15/0x20 [ 33.067927][ T321] ? futex_wake+0x627/0x950 [ 33.068030][ T321] ? __fget_files+0x2bc/0x330 [ 33.068112][ T321] __sys_sendmmsg+0x2b4/0x4e0 [ 33.068143][ T321] ? __cfi___sys_sendmmsg+0x10/0x10 [ 33.068173][ T321] ? __kasan_check_write+0x18/0x20 [ 33.068194][ T321] ? fpregs_restore_userregs+0x11c/0x260 [ 33.068281][ T321] __x64_sys_sendmmsg+0xa4/0xc0 [ 33.068360][ T321] x64_sys_call+0xfec/0x2ee0 [ 33.068441][ T321] do_syscall_64+0x57/0xf0 [ 33.068525][ T321] ? clear_bhb_loop+0x50/0xa0 [ 33.068630][ T321] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 33.068703][ T321] RIP: 0033:0x7fb79559df99 [ 33.068768][ T321] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 33.068823][ T321] RSP: 002b:00007fb7964c1028 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 33.068896][ T321] RAX: ffffffffffffffda RBX: 00007fb795825fa0 RCX: 00007fb79559df99 [ 33.068942][ T321] RDX: 00000000000002e9 RSI: 0000200000000480 RDI: 0000000000000007 [ 33.068992][ T321] RBP: 00007fb795634ec4 R08: 0000000000000000 R09: 0000000000000000 [ 33.069027][ T321] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 33.069068][ T321] R13: 00007fb795826038 R14: 00007fb795825fa0 R15: 00007ffe60cbb3a8 [ 33.069139][ T321] [ 33.080504][ T321] SLUB: Unable to allocate memory on CPU 0 (of node 0) on node -1, gfp=0x820(GFP_ATOMIC) [ 33.084596][ T324] CPU: 1 UID: 0 PID: 324 Comm: syz.2.5 Not tainted syzkaller #0 0b31bef96cff8e44f9e14c4f768eb06c85e3b290 [ 33.084701][ T324] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 33.084742][ T324] Call Trace: [ 33.084756][ T324] [ 33.084785][ T324] __dump_stack+0x21/0x30 [ 33.084890][ T324] dump_stack_lvl+0x140/0x1c0 [ 33.084982][ T324] ? __cfi_dump_stack_lvl+0x10/0x10 [ 33.085067][ T324] ? preempt_schedule+0xc5/0xe0 [ 33.085156][ T324] ? activate_task+0x43b/0x480 [ 33.085228][ T324] dump_stack+0x19/0x20 [ 33.085313][ T324] should_fail_ex+0x3c2/0x510 [ 33.085416][ T324] should_fail_alloc_page+0xec/0x110 [ 33.085505][ T324] __alloc_pages_noprof+0x1c0/0x7e0 [ 33.085620][ T324] ? __cfi___alloc_pages_noprof+0x10/0x10 [ 33.085713][ T324] ? plist_del+0x3f0/0x410 [ 33.085777][ T324] ? __kasan_check_write+0x18/0x20 [ 33.085832][ T324] ? wake_up_q+0x10a/0x1c0 [ 33.085894][ T324] alloc_slab_page+0x6b/0x1e0 [ 33.085969][ T324] allocate_slab+0xed/0x430 [ 33.086036][ T324] ? __cfi_futex_wake+0x10/0x10 [ 33.086090][ T324] ___slab_alloc+0x591/0x8c0 [ 33.086154][ T324] ? getname_flags+0xcc/0x6b0 [ 33.086225][ T324] kmem_cache_alloc_noprof+0x290/0x410 [ 33.086286][ T324] ? getname_flags+0xcc/0x6b0 [ 33.086357][ T324] getname_flags+0xcc/0x6b0 [ 33.086428][ T324] getname+0x1b/0x30 [ 33.086491][ T324] do_sys_openat2+0xda/0x1d0 [ 33.086586][ T324] ? fput+0x1a4/0x230 [ 33.086667][ T324] ? do_sys_open+0x100/0x100 [ 33.086782][ T324] __x64_sys_openat+0x13a/0x170 [ 33.086887][ T324] x64_sys_call+0xe69/0x2ee0 [ 33.086940][ T324] do_syscall_64+0x57/0xf0 [ 33.087010][ T324] ? clear_bhb_loop+0x50/0xa0 [ 33.087081][ T324] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 33.087163][ T324] RIP: 0033:0x7f11f679df99 [ 33.087218][ T324] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 33.087270][ T324] RSP: 002b:00007f11f759e028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 33.087333][ T324] RAX: ffffffffffffffda RBX: 00007f11f6a25fa0 RCX: 00007f11f679df99 [ 33.087377][ T324] RDX: 0000000000000001 RSI: 0000200000000180 RDI: ffffffffffffff9c [ 33.087419][ T324] RBP: 00007f11f6834ec4 R08: 0000000000000000 R09: 0000000000000000 [ 33.087468][ T324] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 33.087507][ T324] R13: 00007f11f6a26038 R14: 00007f11f6a25fa0 R15: 00007ffe95f75b78 [ 33.087559][ T324] [ 33.087621][ T324] SLUB: Unable to allocate memory on CPU 1 (of node 0) on node -1, gfp=0xcc0(GFP_KERNEL) [ 33.089057][ T321] cache: skbuff_head_cache, object size: 256, buffer size: 320, default order: 0, min order: 0 [ 33.094699][ T324] cache: names_cache, object size: 4096, buffer size: 4352, default order: 3, min order: 1 [ 33.098864][ T321] node 0: slabs: 1259, objs: 15108, free: 0 [ 33.103589][ T324] names_cache debugging increased min order, use slab_debug=O to disable. [ 33.103603][ T324] node 0: slabs: 3286, objs: 23002, free: 0 [ 33.106765][ T310] SLUB: Unable to allocate memory on CPU 1 (of node 0) on node -1, gfp=0x920(GFP_ATOMIC|__GFP_ZERO) [ 33.196756][ T100] CPU: 0 UID: 0 PID: 100 Comm: klogd Not tainted syzkaller #0 0b31bef96cff8e44f9e14c4f768eb06c85e3b290 [ 33.196853][ T100] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 33.196895][ T100] Call Trace: [ 33.196916][ T100] [ 33.196943][ T100] __dump_stack+0x21/0x30 [ 33.197045][ T100] dump_stack_lvl+0x140/0x1c0 [ 33.197092][ T100] ? __cfi_dump_stack_lvl+0x10/0x10 [ 33.197121][ T100] ? stack_trace_save+0xaa/0x100 [ 33.197172][ T100] ? mls_compute_sid+0x1e8/0xa20 [ 33.197268][ T100] dump_stack+0x19/0x20 [ 33.197353][ T100] should_fail_ex+0x3c2/0x510 [ 33.197418][ T100] should_fail_alloc_page+0xec/0x110 [ 33.197501][ T100] __alloc_pages_noprof+0x1c0/0x7e0 [ 33.197587][ T100] ? __cfi___alloc_pages_noprof+0x10/0x10 [ 33.197672][ T100] ? call_rcu_nocb+0x694/0xc60 [ 33.197750][ T100] ? security_transition_sid+0xa0/0xa0 [ 33.197839][ T100] alloc_slab_page+0x6b/0x1e0 [ 33.197906][ T100] allocate_slab+0xed/0x430 [ 33.198021][ T100] ___slab_alloc+0x591/0x8c0 [ 33.198087][ T100] ? sock_alloc_inode+0x48/0x150 [ 33.198172][ T100] kmem_cache_alloc_lru_noprof+0x295/0x410 [ 33.198229][ T100] ? sock_alloc_inode+0x48/0x150 [ 33.198304][ T100] sock_alloc_inode+0x48/0x150 [ 33.198378][ T100] ? __cfi_sock_alloc_inode+0x10/0x10 [ 33.198454][ T100] alloc_inode+0x7a/0x270 [ 33.198529][ T100] ? bpf_lsm_socket_create+0xd/0x20 [ 33.198602][ T100] new_inode_pseudo+0x19/0x40 [ 33.198707][ T100] __sock_create+0x130/0x810 [ 33.198793][ T100] __sys_socket+0xe1/0x1c0 [ 33.198868][ T100] __x64_sys_socket+0x7e/0x90 [ 33.198939][ T100] x64_sys_call+0x2608/0x2ee0 [ 33.198987][ T100] do_syscall_64+0x57/0xf0 [ 33.199052][ T100] ? clear_bhb_loop+0x50/0xa0 [ 33.199133][ T100] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 33.199201][ T100] RIP: 0033:0x7f75523e0707 [ 33.199253][ T100] Code: 54 24 0c e8 6b ac ff ff 83 f8 ff 74 04 8b 44 24 0c 48 83 c4 18 c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 00 b8 29 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 8b 0d c1 e6 0c 00 f7 d8 64 89 01 48 [ 33.199307][ T100] RSP: 002b:00007ffc016e1388 EFLAGS: 00000202 ORIG_RAX: 0000000000000029 [ 33.199371][ T100] RAX: ffffffffffffffda RBX: 0000000000000076 RCX: 00007f75523e0707 [ 33.199414][ T100] RDX: 0000000000000000 RSI: 0000000000080002 RDI: 0000000000000001 [ 33.199463][ T100] RBP: 00007f755246c560 R08: 0000000000000000 R09: 0000000000000000 [ 33.199504][ T100] R10: 0000000000000000 R11: 0000000000000202 R12: 0000000000000002 [ 33.199538][ T100] R13: 00007ffc016e14b0 R14: 000000000000005b R15: 00007ffc016e14b0 [ 33.199583][ T100] [ 33.199739][ T100] SLUB: Unable to allocate memory on CPU 0 (of node 0) on node -1, gfp=0xcc0(GFP_KERNEL) [ 33.202902][ T310] cache: kmalloc-512, object size: 512, buffer size: 1024, default order: 2, min order: 0 [ 33.202925][ T310] node 0: slabs: 339, objs: 5424, free: 0 [ 34.392671][ T100] cache: sock_inode_cache, object size: 832, buffer size: 960, default order: 2, min order: 0 [ 34.403170][ T100] node 0: slabs: 72, objs: 1224, free: 0 [ 34.409489][ T100] socket: no more sockets [ 34.462386][ T10] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 34.613598][ T10] usb 2-1: config index 0 descriptor too short (expected 32, got 18) [ 34.621775][ T10] usb 2-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 34.636398][ T10] usb 2-1: New USB device found, idVendor=0000, idProduct=0000, bcdDevice= 0.00 [ 34.652502][ T10] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 34.660663][ T10] usb 2-1: Product: syz [ 34.674030][ T10] usb 2-1: Manufacturer: syz [ 34.678752][ T10] usb 2-1: SerialNumber: syz [ 34.684693][ T344] FAULT_INJECTION: forcing a failure. [ 34.684693][ T344] name fail_futex, interval 1, probability 0, space 0, times 1 [ 34.699413][ T344] CPU: 1 UID: 0 PID: 344 Comm: syz.3.11 Not tainted syzkaller #0 0b31bef96cff8e44f9e14c4f768eb06c85e3b290 [ 34.699447][ T344] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 34.699461][ T344] Call Trace: [ 34.699468][ T344] [ 34.699477][ T344] __dump_stack+0x21/0x30 [ 34.699512][ T344] dump_stack_lvl+0x140/0x1c0 [ 34.699542][ T344] ? __cfi_dump_stack_lvl+0x10/0x10 [ 34.699587][ T344] dump_stack+0x19/0x20 [ 34.699617][ T344] should_fail_ex+0x3c2/0x510 [ 34.699644][ T344] should_fail+0xf/0x20 [ 34.699666][ T344] get_futex_key+0x178/0x940 [ 34.699696][ T344] ? __cfi_get_futex_key+0x10/0x10 [ 34.699723][ T344] ? timerqueue_del+0xd7/0x130 [ 34.699747][ T344] futex_wake+0x150/0x950 [ 34.699767][ T344] ? hrtimer_cancel+0x31/0x60 [ 34.699800][ T344] ? futex_wait+0x2c4/0x7c0 [ 34.699821][ T344] ? __cfi_futex_wake+0x10/0x10 [ 34.699845][ T344] do_futex+0x37d/0x510 [ 34.699872][ T344] ? __kasan_check_write+0x18/0x20 [ 34.699896][ T344] ? __cfi_do_futex+0x10/0x10 [ 34.699927][ T344] __se_sys_futex+0x13c/0x320 [ 34.699957][ T344] ? __x64_sys_futex+0x110/0x110 [ 34.699989][ T344] ? __kasan_check_write+0x18/0x20 [ 34.700012][ T344] __x64_sys_futex+0xe9/0x110 [ 34.700043][ T344] x64_sys_call+0x227f/0x2ee0 [ 34.700064][ T344] do_syscall_64+0x57/0xf0 [ 34.700090][ T344] ? clear_bhb_loop+0x50/0xa0 [ 34.700116][ T344] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 34.700141][ T344] RIP: 0033:0x7f58be99df99 [ 34.700159][ T344] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 34.700175][ T344] RSP: 002b:00007ffef700ab78 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 34.700195][ T344] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f58be99df99 [ 34.700209][ T344] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007f58bec25fa8 [ 34.700221][ T344] RBP: 0000000000000859 R08: 0000000000000013 R09: 0000000000000000 [ 34.700235][ T344] R10: 00007f58bec25fa0 R11: 0000000000000246 R12: 0000000000000000 [ 34.700249][ T344] R13: 00007f58bec25fac R14: 00007f58bec25fa8 R15: 00007f58bec25fa0 [ 34.700267][ T344] [ 34.973244][ T356] configfs-gadget.g1 gadget.0: HOST MAC 12:87:c1:27:68:ad [ 34.980442][ T356] configfs-gadget.g1 gadget.0: MAC 8e:77:80:ad:78:d7 [ 35.019550][ T36] kauditd_printk_skb: 59 callbacks suppressed [ 35.019569][ T36] audit: type=1400 audit(1785409612.760:133): avc: denied { create } for pid=352 comm="syz.0.15" name="ecm.usb0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:configfs_t tclass=lnk_file permissive=1 [ 35.047210][ T36] audit: type=1400 audit(1785409612.760:134): avc: denied { write } for pid=352 comm="syz.0.15" name="UDC" dev="configfs" ino=3834 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=file permissive=1 [ 35.100568][ T36] audit: type=1400 audit(1785409612.760:135): avc: denied { open } for pid=352 comm="syz.0.15" path="/6/config/usb_gadget/g1/UDC" dev="configfs" ino=3834 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=file permissive=1 [ 35.126097][ T36] audit: type=1400 audit(1785409612.770:136): avc: denied { read } for pid=150 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=1 [ 35.192438][ T36] audit: type=1400 audit(1785409612.810:137): avc: denied { unmount } for pid=297 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 35.212758][ T36] audit: type=1400 audit(1785409612.920:138): avc: denied { unmount } for pid=297 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=filesystem permissive=1 [ 35.342282][ T10] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 35.406152][ T36] audit: type=1400 audit(1785409613.200:139): avc: denied { write } for pid=385 comm="syz.3.23" name="kvm" dev="devtmpfs" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 35.489194][ T36] audit: type=1400 audit(1785409613.280:140): avc: denied { mmap_zero } for pid=387 comm="syz.2.22" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=memprotect permissive=1 [ 35.512917][ T10] usb 1-1: Dual-Role OTG device on HNP port [ 35.522498][ T10] usb 1-1: New USB device found, idVendor=0000, idProduct=0000, bcdDevice= 6.12 [ 35.531695][ T10] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 35.553432][ T10] cdc_ether 1-1:1.0 usb1: register 'cdc_ether' at usb-dummy_hcd.0-1, CDC Ethernet Device, 12:87:c1:27:68:ad [ 35.574394][ T36] audit: type=1400 audit(1785409613.370:141): avc: denied { create } for pid=390 comm="syz.3.24" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 35.608571][ T36] audit: type=1400 audit(1785409613.390:142): avc: denied { bind } for pid=390 comm="syz.3.24" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 36.034477][ T311] usb 2-1: USB disconnect, device number 2 [ 36.209690][ T431] FAULT_INJECTION: forcing a failure. [ 36.209690][ T431] name failslab, interval 1, probability 100, space 0, times 8 [ 36.213392][ T428] FAULT_INJECTION: forcing a failure. [ 36.213392][ T428] name failslab, interval 1, probability 100, space 0, times 7 [ 36.222950][ T432] FAULT_INJECTION: forcing a failure. [ 36.222950][ T432] name failslab, interval 1, probability 100, space 0, times 7 [ 36.248817][ T428] CPU: 1 UID: 0 PID: 428 Comm: syz.3.32 Not tainted syzkaller #0 0b31bef96cff8e44f9e14c4f768eb06c85e3b290 [ 36.248854][ T428] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 36.248869][ T428] Call Trace: [ 36.248877][ T428] [ 36.248887][ T428] __dump_stack+0x21/0x30 [ 36.248927][ T428] dump_stack_lvl+0x140/0x1c0 [ 36.248960][ T428] ? __cfi_dump_stack_lvl+0x10/0x10 [ 36.249003][ T428] dump_stack+0x19/0x20 [ 36.249034][ T428] should_fail_ex+0x3c2/0x510 [ 36.249062][ T428] should_failslab+0xac/0x100 [ 36.249093][ T428] kmem_cache_alloc_lru_noprof+0x44/0x410 [ 36.249119][ T428] ? xas_store+0xec/0x17f0 [ 36.249147][ T428] ? xas_nomem+0x165/0x2c0 [ 36.249176][ T428] xas_nomem+0x165/0x2c0 [ 36.249204][ T428] shmem_add_to_page_cache+0x7d2/0xab0 [ 36.249236][ T428] ? folio_put+0x90/0x90 [ 36.249260][ T428] ? __mem_cgroup_charge+0x1d1/0x420 [ 36.249286][ T428] shmem_alloc_and_add_folio+0x951/0x10b0 [ 36.249316][ T428] ? shmem_replace_folio+0x9b0/0x9b0 [ 36.249342][ T428] ? shmem_huge_global_enabled+0x2da/0x360 [ 36.249366][ T428] ? shmem_allowable_huge_orders+0x405/0x430 [ 36.249395][ T428] shmem_get_folio_gfp+0x5cd/0x12e0 [ 36.249420][ T428] ? shmem_get_folio+0xc0/0xc0 [ 36.249441][ T428] ? pte_alloc_one+0x1ed/0x530 [ 36.249464][ T428] ? __cfi_filemap_map_pages+0x10/0x10 [ 36.249495][ T428] ? folio_unlock+0x137/0x1b0 [ 36.249521][ T428] shmem_fault+0x17d/0x350 [ 36.249548][ T428] do_pte_missing+0x3649/0x4440 [ 36.249580][ T428] ? pte_marker_clear+0x1b0/0x1b0 [ 36.249605][ T428] ? __thp_vma_allowable_orders+0x814/0x9a0 [ 36.249635][ T428] ? __cfi_cgroup_rstat_updated+0x10/0x10 [ 36.249660][ T428] ? _raw_spin_lock+0x92/0x120 [ 36.249686][ T428] ? __cfi___thp_vma_allowable_orders+0x10/0x10 [ 36.249716][ T428] handle_mm_fault+0x1189/0x1ba0 [ 36.249743][ T428] ? __cfi_handle_mm_fault+0x10/0x10 [ 36.249783][ T428] ? follow_page_pte+0x8fb/0xba0 [ 36.249818][ T428] ? gup_must_unshare+0x1e0/0x1e0 [ 36.249847][ T428] ? __get_user_pages+0x56f/0x22d0 [ 36.249876][ T428] __get_user_pages+0x114b/0x22d0 [ 36.249913][ T428] ? populate_vma_page_range+0x220/0x220 [ 36.249944][ T428] ? down_read+0x7f/0xe0 [ 36.249978][ T428] ? __cfi_down_read+0x10/0x10 [ 36.250010][ T428] __mm_populate+0x300/0x440 [ 36.250034][ T428] vm_mmap_pgoff+0x426/0x4b0 [ 36.250053][ T428] ? __cfi_vm_mmap_pgoff+0x10/0x10 [ 36.250073][ T428] ksys_mmap_pgoff+0xfa/0x1e0 [ 36.250096][ T428] __x64_sys_mmap+0x121/0x140 [ 36.250116][ T428] x64_sys_call+0x13bf/0x2ee0 [ 36.250133][ T428] do_syscall_64+0x57/0xf0 [ 36.250153][ T428] ? clear_bhb_loop+0x50/0xa0 [ 36.250179][ T428] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 36.250203][ T428] RIP: 0033:0x7f58be99df99 [ 36.250220][ T428] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 36.250240][ T428] RSP: 002b:00007f58bf8b9028 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 36.250263][ T428] RAX: ffffffffffffffda RBX: 00007f58bec25fa0 RCX: 00007f58be99df99 [ 36.250277][ T428] RDX: b635773f06ebbeee RSI: 0000000000b36000 RDI: 0000200000000000 [ 36.250290][ T428] RBP: 00007f58bea34ec4 R08: ffffffffffffffff R09: 0000000000000000 [ 36.250303][ T428] R10: 0000000000008031 R11: 0000000000000246 R12: 0000000000000000 [ 36.250314][ T428] R13: 00007f58bec26038 R14: 00007f58bec25fa0 R15: 00007ffef700aa18 [ 36.250330][ T428] [ 36.250417][ T428] FAULT_INJECTION: forcing a failure. [ 36.250417][ T428] name failslab, interval 1, probability 100, space 0, times 5 [ 36.252508][ T431] CPU: 0 UID: 0 PID: 431 Comm: syz.0.34 Not tainted syzkaller #0 0b31bef96cff8e44f9e14c4f768eb06c85e3b290 [ 36.252592][ T431] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 36.252634][ T431] Call Trace: [ 36.252653][ T431] [ 36.252675][ T431] __dump_stack+0x21/0x30 [ 36.252759][ T431] dump_stack_lvl+0x140/0x1c0 [ 36.252841][ T431] ? __cfi_dump_stack_lvl+0x10/0x10 [ 36.252927][ T431] dump_stack+0x19/0x20 [ 36.253000][ T431] should_fail_ex+0x3c2/0x510 [ 36.253072][ T431] should_failslab+0xac/0x100 [ 36.253144][ T431] kmem_cache_alloc_noprof+0x42/0x410 [ 36.253198][ T431] ? __kasan_check_write+0x18/0x20 [ 36.253270][ T431] ? taskstats_exit+0x161/0xb50 [ 36.253367][ T431] ? acct_update_integrals+0x2e5/0x330 [ 36.253474][ T431] taskstats_exit+0x161/0xb50 [ 36.253555][ T431] ? _raw_spin_unlock_irq+0x45/0x70 [ 36.253621][ T431] do_exit+0x7f7/0x2850 [ 36.253696][ T431] ? __fput+0x71e/0xa30 [ 36.253781][ T431] ? __cfi_try_to_wake_up+0x10/0x10 [ 36.253845][ T431] ? __cfi_do_exit+0x10/0x10 [ 36.253918][ T431] ? __kasan_check_write+0x18/0x20 [ 36.253971][ T431] ? _raw_spin_lock_irq+0x93/0x120 [ 36.254036][ T431] ? zap_other_threads+0x32f/0x370 [ 36.254108][ T431] do_group_exit+0x21f/0x2f0 [ 36.254189][ T431] __x64_sys_exit_group+0x43/0x50 [ 36.254264][ T431] x64_sys_call+0x2ed2/0x2ee0 [ 36.254323][ T431] do_syscall_64+0x57/0xf0 [ 36.254386][ T431] ? clear_bhb_loop+0x50/0xa0 [ 36.254459][ T431] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 36.254535][ T431] RIP: 0033:0x7fb79559df99 [ 36.254588][ T431] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 36.254632][ T431] RSP: 002b:00007ffe60cbb6e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000e7 [ 36.254695][ T431] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007fb79559df99 [ 36.254744][ T431] RDX: 0000000000000064 RSI: 0000000000000000 RDI: 0000000000000000 [ 36.254786][ T431] RBP: 00007ffe60cbb74c R08: 0000000000000000 R09: 00000000000927c0 [ 36.254834][ T431] R10: 0000000000000001 R11: 0000000000000246 R12: 000000000000000c [ 36.254882][ T431] R13: 00000000000927c0 R14: 0000000000008d43 R15: 00007ffe60cbb7a0 [ 36.254926][ T431] [ 36.255218][ T432] CPU: 0 UID: 0 PID: 432 Comm: syz.0.34 Not tainted syzkaller #0 0b31bef96cff8e44f9e14c4f768eb06c85e3b290 [ 36.255347][ T432] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 36.255378][ T432] Call Trace: [ 36.255398][ T432] [ 36.255419][ T432] __dump_stack+0x21/0x30 [ 36.255502][ T432] dump_stack_lvl+0x140/0x1c0 [ 36.255578][ T432] ? __cfi_dump_stack_lvl+0x10/0x10 [ 36.255657][ T432] ? preempt_schedule+0xc5/0xe0 [ 36.255730][ T432] dump_stack+0x19/0x20 [ 36.255796][ T432] should_fail_ex+0x3c2/0x510 [ 36.255877][ T432] should_failslab+0xac/0x100 [ 36.255950][ T432] kmem_cache_alloc_noprof+0x42/0x410 [ 36.256011][ T432] ? __kasan_check_write+0x18/0x20 [ 36.256064][ T432] ? taskstats_exit+0x161/0xb50 [ 36.256159][ T432] ? acct_update_integrals+0x2e5/0x330 [ 36.256274][ T432] taskstats_exit+0x161/0xb50 [ 36.256350][ T432] ? __kasan_check_write+0x18/0x20 [ 36.256411][ T432] do_exit+0x7f7/0x2850 [ 36.256485][ T432] ? futex_wake+0x666/0x950 [ 36.256537][ T432] ? __cfi_do_exit+0x10/0x10 [ 36.256615][ T432] ? __cfi_futex_wake+0x10/0x10 [ 36.256668][ T432] ? __kasan_check_write+0x18/0x20 [ 36.256722][ T432] ? _raw_spin_lock_irq+0x93/0x120 [ 36.256765][ T432] do_group_exit+0x21f/0x2f0 [ 36.256826][ T432] ? __kasan_check_write+0x18/0x20 [ 36.256881][ T432] ? recalc_sigpending+0x16c/0x1d0 [ 36.256943][ T432] get_signal+0x134c/0x1490 [ 36.257026][ T432] arch_do_signal_or_restart+0xbc/0x700 [ 36.257089][ T432] ? _raw_spin_unlock_irqrestore+0x4a/0x70 [ 36.257155][ T432] ? __cfi_arch_do_signal_or_restart+0x10/0x10 [ 36.257221][ T432] syscall_exit_to_user_mode+0x57/0xb0 [ 36.257355][ T432] do_syscall_64+0x63/0xf0 [ 36.257420][ T432] ? clear_bhb_loop+0x50/0xa0 [ 36.257503][ T432] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 36.257606][ T432] RIP: 0033:0x7fb79559df99 [ 36.257657][ T432] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 36.257709][ T432] RSP: 002b:00007fb7964c10e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 36.257757][ T432] RAX: 0000000000000001 RBX: 00007fb795825fa8 RCX: 00007fb79559df99 [ 36.257791][ T432] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007fb795825fac [ 36.257833][ T432] RBP: 00007fb795825fa0 R08: 4000000000000000 R09: 0000000000000000 [ 36.257874][ T432] R10: ffffffffffffffff R11: 0000000000000246 R12: 0000000000000000 [ 36.257908][ T432] R13: 00007fb795826038 R14: 00007ffe60cbb2c0 R15: 00007ffe60cbb3a8 [ 36.257961][ T432] [ 36.272094][ C1] FAULT_INJECTION: forcing a failure. [ 36.272094][ C1] name failslab, interval 1, probability 100, space 0, times 2 [ 36.272132][ C1] CPU: 1 UID: 0 PID: 428 Comm: syz.3.32 Not tainted syzkaller #0 0b31bef96cff8e44f9e14c4f768eb06c85e3b290 [ 36.272164][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 36.272178][ C1] Call Trace: [ 36.272186][ C1] [ 36.272196][ C1] __dump_stack+0x21/0x30 [ 36.272239][ C1] dump_stack_lvl+0x140/0x1c0 [ 36.272277][ C1] ? __cfi_dump_stack_lvl+0x10/0x10 [ 36.272311][ C1] dump_stack+0x19/0x20 [ 36.272341][ C1] should_fail_ex+0x3c2/0x510 [ 36.272368][ C1] should_failslab+0xac/0x100 [ 36.272397][ C1] kmem_cache_alloc_node_noprof+0x45/0x420 [ 36.272423][ C1] ? __alloc_skb+0x10c/0x360 [ 36.272455][ C1] __alloc_skb+0x10c/0x360 [ 36.272486][ C1] ndisc_send_rs+0x322/0x880 [ 36.272509][ C1] ? ipv6_get_lladdr+0x1c2/0x200 [ 36.272543][ C1] addrconf_rs_timer+0x362/0x620 [ 36.272572][ C1] ? __cfi_addrconf_rs_timer+0x10/0x10 [ 36.272601][ C1] ? __cfi_addrconf_rs_timer+0x10/0x10 [ 36.272628][ C1] call_timer_fn+0x4c/0x300 [ 36.272659][ C1] ? __cfi_addrconf_rs_timer+0x10/0x10 [ 36.272687][ C1] __run_timer_base+0x6c0/0x9b0 [ 36.272718][ C1] ? timer_expire_remote+0xa0/0xa0 [ 36.272745][ C1] ? kvm_sched_clock_read+0x15/0x30 [ 36.272789][ C1] ? irqtime_account_irq+0x51/0x1c0 [ 36.272823][ C1] run_timer_softirq+0x35/0x70 [ 36.272852][ C1] handle_softirqs+0x1aa/0x620 [ 36.272877][ C1] __irq_exit_rcu+0x47/0xb0 [ 36.272899][ C1] irq_exit_rcu+0xd/0x30 [ 36.272920][ C1] sysvec_apic_timer_interrupt+0x82/0x90 [ 36.272953][ C1] [ 36.272961][ C1] [ 36.272969][ C1] asm_sysvec_apic_timer_interrupt+0x1f/0x30 [ 36.273001][ C1] RIP: 0010:console_flush_all+0x6fd/0xab0 [ 36.273037][ C1] Code: 89 de 48 81 e6 00 02 00 00 31 ff e8 2d 8f 1e 00 48 81 e3 00 02 00 00 75 07 e8 3f 8a 1e 00 eb 06 e8 38 8a 1e 00 fb 49 8d 5d 58 <48> 8b 44 24 28 42 80 3c 20 00 74 08 48 89 df e8 0f 4d 77 00 48 8b [ 36.273056][ C1] RSP: 0018:ffffc9000c226c20 EFLAGS: 00000246 [ 36.273078][ C1] RAX: ffffffff8168e788 RBX: ffffffff878f48b8 RCX: 0000000000080000 [ 36.273096][ C1] RDX: ffffc90001e23000 RSI: 000000000007ffff RDI: 0000000000080000 [ 36.273112][ C1] RBP: ffffc9000c226d50 R08: 0000000000000003 R09: 0000000000000004 [ 36.273128][ C1] R10: dffffc0000000000 R11: fffff52001844d74 R12: dffffc0000000000 [ 36.273145][ C1] R13: ffffffff878f4860 R14: ffffffff878f48b8 R15: 0000000000000001 [ 36.273163][ C1] ? console_flush_all+0x6f8/0xab0 [ 36.273197][ C1] ? console_flush_all+0x771/0xab0 [ 36.273230][ C1] ? __console_rewind_all+0x170/0x170 [ 36.273263][ C1] ? __kasan_check_read+0x15/0x20 [ 36.273285][ C1] ? is_printk_cpu_sync_owner+0x39/0x50 [ 36.273320][ C1] ? is_printk_legacy_deferred+0x5c/0x70 [ 36.273343][ C1] console_unlock+0xf8/0x2c0 [ 36.273372][ C1] ? _raw_spin_unlock_irqrestore+0x4a/0x70 [ 36.273400][ C1] ? __cfi_console_unlock+0x10/0x10 [ 36.273429][ C1] ? __printk_safe_exit+0xd/0x20 [ 36.273449][ C1] ? console_trylock+0x17e/0x220 [ 36.273478][ C1] ? __cfi_console_trylock+0x10/0x10 [ 36.273507][ C1] ? __kasan_check_read+0x15/0x20 [ 36.273529][ C1] ? is_printk_cpu_sync_owner+0x39/0x50 [ 36.273564][ C1] ? is_printk_legacy_deferred+0x5c/0x70 [ 36.273587][ C1] vprintk_emit+0x282/0x650 [ 36.273617][ C1] ? __cfi_vprintk_emit+0x10/0x10 [ 36.273646][ C1] ? __kasan_check_write+0x18/0x20 [ 36.273670][ C1] vprintk_default+0x2a/0x40 [ 36.273700][ C1] vprintk+0x93/0xa0 [ 36.273720][ C1] _printk+0xde/0x140 [ 36.273756][ C1] ? __cfi__printk+0x10/0x10 [ 36.273786][ C1] should_fail_ex+0x3a4/0x510 [ 36.273813][ C1] should_failslab+0xac/0x100 [ 36.273841][ C1] kmem_cache_alloc_lru_noprof+0x44/0x410 [ 36.273865][ C1] ? xas_store+0xec/0x17f0 [ 36.273892][ C1] ? xas_nomem+0x165/0x2c0 [ 36.273920][ C1] xas_nomem+0x165/0x2c0 [ 36.273947][ C1] shmem_add_to_page_cache+0x7d2/0xab0 [ 36.273977][ C1] ? folio_put+0x90/0x90 [ 36.274000][ C1] ? __mem_cgroup_charge+0x1d1/0x420 [ 36.274026][ C1] shmem_alloc_and_add_folio+0x951/0x10b0 [ 36.274062][ C1] ? shmem_replace_folio+0x9b0/0x9b0 [ 36.274099][ C1] ? shmem_huge_global_enabled+0x2da/0x360 [ 36.274127][ C1] ? shmem_allowable_huge_orders+0x405/0x430 [ 36.274155][ C1] shmem_get_folio_gfp+0x5cd/0x12e0 [ 36.274184][ C1] ? shmem_get_folio+0xc0/0xc0 [ 36.274208][ C1] ? pte_alloc_one+0x1ed/0x530 [ 36.274232][ C1] ? __cfi_filemap_map_pages+0x10/0x10 [ 36.274262][ C1] ? folio_unlock+0x137/0x1b0 [ 36.274289][ C1] shmem_fault+0x17d/0x350 [ 36.274317][ C1] do_pte_missing+0x3649/0x4440 [ 36.274350][ C1] ? pte_marker_clear+0x1b0/0x1b0 [ 36.274376][ C1] ? __thp_vma_allowable_orders+0x814/0x9a0 [ 36.274410][ C1] ? __cfi_cgroup_rstat_updated+0x10/0x10 [ 36.274434][ C1] ? __cfi___thp_vma_allowable_orders+0x10/0x10 [ 36.274466][ C1] handle_mm_fault+0x1189/0x1ba0 [ 36.274504][ C1] ? __cfi_handle_mm_fault+0x10/0x10 [ 36.274530][ C1] ? __kasan_check_write+0x18/0x20 [ 36.274553][ C1] ? folios_put_refs+0x746/0x860 [ 36.274587][ C1] ? __cfi_find_vma+0x10/0x10 [ 36.274609][ C1] ? lru_add+0x701/0x840 [ 36.274641][ C1] ? vma_is_secretmem+0x11/0x50 [ 36.274673][ C1] ? check_vma_flags+0x337/0x3a0 [ 36.274707][ C1] __get_user_pages+0x114b/0x22d0 [ 36.274738][ C1] ? __cfi_lru_add+0x10/0x10 [ 36.274777][ C1] ? populate_vma_page_range+0x220/0x220 [ 36.274806][ C1] ? down_read+0x7f/0xe0 [ 36.274844][ C1] ? __cfi_down_read+0x10/0x10 [ 36.274879][ C1] __mm_populate+0x300/0x440 [ 36.274909][ C1] vm_mmap_pgoff+0x426/0x4b0 [ 36.274932][ C1] ? __cfi_vm_mmap_pgoff+0x10/0x10 [ 36.274956][ C1] ksys_mmap_pgoff+0xfa/0x1e0 [ 36.274980][ C1] __x64_sys_mmap+0x121/0x140 [ 36.275002][ C1] x64_sys_call+0x13bf/0x2ee0 [ 36.275024][ C1] do_syscall_64+0x57/0xf0 [ 36.275048][ C1] ? clear_bhb_loop+0x50/0xa0 [ 36.275079][ C1] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 36.275108][ C1] RIP: 0033:0x7f58be99df99 [ 36.275127][ C1] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 36.275145][ C1] RSP: 002b:00007f58bf8b9028 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 36.275169][ C1] RAX: ffffffffffffffda RBX: 00007f58bec25fa0 RCX: 00007f58be99df99 [ 36.275186][ C1] RDX: b635773f06ebbeee RSI: 0000000000b36000 RDI: 0000200000000000 [ 36.275202][ C1] RBP: 00007f58bea34ec4 R08: ffffffffffffffff R09: 0000000000000000 [ 36.275217][ C1] R10: 0000000000008031 R11: 0000000000000246 R12: 0000000000000000 [ 36.275230][ C1] R13: 00007f58bec26038 R14: 00007f58bec25fa0 R15: 00007ffef700aa18 [ 36.275250][ C1] [ 36.962426][ T10] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 36.972680][ T428] CPU: 1 UID: 0 PID: 428 Comm: syz.3.32 Not tainted syzkaller #0 0b31bef96cff8e44f9e14c4f768eb06c85e3b290 [ 36.972781][ T428] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 36.972832][ T428] Call Trace: [ 36.972853][ T428] [ 36.972893][ T428] __dump_stack+0x21/0x30 [ 36.973010][ T428] dump_stack_lvl+0x140/0x1c0 [ 36.973095][ T428] ? __cfi_dump_stack_lvl+0x10/0x10 [ 36.973190][ T428] dump_stack+0x19/0x20 [ 36.973264][ T428] should_fail_ex+0x3c2/0x510 [ 36.973332][ T428] should_failslab+0xac/0x100 [ 36.973408][ T428] kmem_cache_alloc_lru_noprof+0x44/0x410 [ 36.973481][ T428] ? xas_store+0xec/0x17f0 [ 36.973546][ T428] ? xas_nomem+0x165/0x2c0 [ 36.973620][ T428] xas_nomem+0x165/0x2c0 [ 36.973694][ T428] shmem_add_to_page_cache+0x7d2/0xab0 [ 36.973790][ T428] ? folio_put+0x90/0x90 [ 36.973817][ T428] ? __mem_cgroup_charge+0x1d1/0x420 [ 36.973840][ T428] shmem_alloc_and_add_folio+0x951/0x10b0 [ 36.973869][ T428] ? shmem_replace_folio+0x9b0/0x9b0 [ 36.973896][ T428] ? shmem_huge_global_enabled+0x2da/0x360 [ 36.973922][ T428] ? shmem_allowable_huge_orders+0x405/0x430 [ 36.973975][ T428] shmem_get_folio_gfp+0x5cd/0x12e0 [ 36.974085][ T428] ? shmem_get_folio+0xc0/0xc0 [ 36.974163][ T428] ? pte_alloc_one+0x1ed/0x530 [ 36.974236][ T428] ? __cfi_filemap_map_pages+0x10/0x10 [ 36.974424][ T428] ? folio_unlock+0x137/0x1b0 [ 36.974540][ T428] shmem_fault+0x17d/0x350 [ 36.974642][ T428] do_pte_missing+0x3649/0x4440 [ 36.974735][ T428] ? pte_marker_clear+0x1b0/0x1b0 [ 36.974808][ T428] ? __thp_vma_allowable_orders+0x814/0x9a0 [ 36.974901][ T428] ? __cfi_cgroup_rstat_updated+0x10/0x10 [ 36.974976][ T428] ? __cfi___thp_vma_allowable_orders+0x10/0x10 [ 36.975070][ T428] handle_mm_fault+0x1189/0x1ba0 [ 36.975169][ T428] ? __cfi_handle_mm_fault+0x10/0x10 [ 36.975234][ T428] ? __kasan_check_write+0x18/0x20 [ 36.975294][ T428] ? folios_put_refs+0x746/0x860 [ 36.975380][ T428] ? __cfi_find_vma+0x10/0x10 [ 36.975462][ T428] ? lru_add+0x701/0x840 [ 36.975577][ T428] ? vma_is_secretmem+0x11/0x50 [ 36.975686][ T428] ? check_vma_flags+0x337/0x3a0 [ 36.975771][ T428] __get_user_pages+0x114b/0x22d0 [ 36.975860][ T428] ? __cfi_lru_add+0x10/0x10 [ 36.975935][ T428] ? populate_vma_page_range+0x220/0x220 [ 36.976022][ T428] ? down_read+0x7f/0xe0 [ 36.976131][ T428] ? __cfi_down_read+0x10/0x10 [ 36.976225][ T428] __mm_populate+0x300/0x440 [ 36.976311][ T428] vm_mmap_pgoff+0x426/0x4b0 [ 36.976376][ T428] ? __cfi_vm_mmap_pgoff+0x10/0x10 [ 36.976438][ T428] ksys_mmap_pgoff+0xfa/0x1e0 [ 36.976493][ T428] __x64_sys_mmap+0x121/0x140 [ 36.976563][ T428] x64_sys_call+0x13bf/0x2ee0 [ 36.976820][ T428] do_syscall_64+0x57/0xf0 [ 36.976975][ T428] ? clear_bhb_loop+0x50/0xa0 [ 36.977078][ T428] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 36.977197][ T428] RIP: 0033:0x7f58be99df99 [ 36.977237][ T428] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 36.977298][ T428] RSP: 002b:00007f58bf8b9028 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 36.977370][ T428] RAX: ffffffffffffffda RBX: 00007f58bec25fa0 RCX: 00007f58be99df99 [ 36.977429][ T428] RDX: b635773f06ebbeee RSI: 0000000000b36000 RDI: 0000200000000000 [ 36.977476][ T428] RBP: 00007f58bea34ec4 R08: ffffffffffffffff R09: 0000000000000000 [ 36.977523][ T428] R10: 0000000000008031 R11: 0000000000000246 R12: 0000000000000000 [ 36.977569][ T428] R13: 00007f58bec26038 R14: 00007f58bec25fa0 R15: 00007ffef700aa18 [ 36.977634][ T428] [ 38.322272][ T10] usb 2-1: Using ep0 maxpacket: 8 [ 38.328808][ T10] usb 2-1: config 0 has an invalid interface number: 143 but max is 0 [ 38.337127][ T10] usb 2-1: config 0 has no interface number 0 [ 38.343658][ T10] usb 2-1: New USB device found, idVendor=2058, idProduct=1005, bcdDevice=c1.9b [ 38.352810][ T10] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 38.363012][ T10] usb 2-1: config 0 descriptor?? [ 38.582432][ T10] usb 2-1: USB disconnect, device number 3 [ 39.062378][ T10] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 39.233429][ T10] usb 2-1: config index 0 descriptor too short (expected 45, got 18) [ 39.241648][ T10] usb 2-1: config 1 interface 0 altsetting 127 has 0 endpoint descriptors, different from the interface descriptor's value: 3 [ 39.255019][ T10] usb 2-1: config 1 interface 0 has no altsetting 0 [ 39.263451][ T10] usb 2-1: New USB device found, idVendor=9710, idProduct=7810, bcdDevice= 0.00 [ 39.272628][ T10] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 39.280680][ T10] usb 2-1: Product: syz [ 39.285295][ T10] usb 2-1: Manufacturer: syz [ 39.289975][ T10] usb 2-1: SerialNumber: syz [ 39.503620][ T10] usb 2-1: USB disconnect, device number 4 [ 40.123629][ T36] kauditd_printk_skb: 21 callbacks suppressed [ 40.123650][ T36] audit: type=1400 audit(1785409617.920:164): avc: denied { mounton } for pid=456 comm="syz.0.44" path="/15/file0" dev="tmpfs" ino=104 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 40.237151][ T36] audit: type=1400 audit(1785409618.030:165): avc: denied { mount } for pid=461 comm="syz.2.46" name="/" dev="devtmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=filesystem permissive=1 [ 40.349665][ T36] audit: type=1400 audit(1785409618.140:166): avc: denied { create } for pid=465 comm="syz.1.49" anonclass=[io_uring] scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 40.371990][ T36] audit: type=1400 audit(1785409618.140:167): avc: denied { map } for pid=465 comm="syz.1.49" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=5237 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 40.397471][ T36] audit: type=1400 audit(1785409618.140:168): avc: denied { read write } for pid=465 comm="syz.1.49" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=5237 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 40.446190][ T36] audit: type=1400 audit(1785409618.160:169): avc: denied { cmd } for pid=465 comm="syz.1.49" path="/dev/ublk-control" dev="devtmpfs" ino=82 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=io_uring permissive=1 [ 40.474267][ T311] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 40.500631][ T36] audit: type=1400 audit(1785409618.220:170): avc: denied { map } for pid=465 comm="syz.1.49" path="/dev/ublkc0" dev="devtmpfs" ino=446 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 40.532145][ T36] audit: type=1400 audit(1785409618.290:171): avc: denied { mount } for pid=470 comm="syz.1.50" name="/" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=filesystem permissive=1 [ 40.554980][ T36] audit: type=1400 audit(1785409618.330:172): avc: denied { unmount } for pid=296 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=filesystem permissive=1 [ 40.637697][ T311] usb 3-1: New USB device found, idVendor=0451, idProduct=505f, bcdDevice= 1.00 [ 40.648152][ T311] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 40.656447][ T311] usb 3-1: Product: syz [ 40.660801][ T311] usb 3-1: Manufacturer: syz [ 40.672043][ T311] usb 3-1: SerialNumber: syz [ 40.822291][ T334] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 40.972267][ T334] usb 4-1: Using ep0 maxpacket: 32 [ 40.978601][ T334] usb 4-1: too many endpoints for config 0 interface 0 altsetting 252: 223, using maximum allowed: 30 [ 40.989850][ T334] usb 4-1: config 0 interface 0 altsetting 252 has 1 endpoint descriptor, different from the interface descriptor's value: 223 [ 41.003268][ T334] usb 4-1: config 0 interface 0 has no altsetting 0 [ 41.010055][ T334] usb 4-1: New USB device found, idVendor=056a, idProduct=00c5, bcdDevice= 0.00 [ 41.019445][ T334] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 41.028428][ T334] usb 4-1: config 0 descriptor?? [ 41.394874][ T36] audit: type=1400 audit(1785409619.190:173): avc: denied { create } for pid=495 comm="syz.0.58" name="midi.usb0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:configfs_t tclass=lnk_file permissive=1 [ 42.009265][ T311] hid (null): bogus close delimiter [ 42.016148][ T311] hid-generic 0003:0000:0007.0001: bogus close delimiter [ 42.030896][ T311] hid-generic 0003:0000:0007.0001: item 0 0 2 10 parsing failed [ 42.049242][ T311] hid-generic 0003:0000:0007.0001: probe with driver hid-generic failed with error -22 [ 42.088981][ T510] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 42.100653][ T510] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 42.402299][ T311] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 42.553399][ T311] usb 2-1: New USB device found, idVendor=0403, idProduct=c631, bcdDevice= 1.00 [ 42.568320][ T311] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 43.252731][ T311] usb 3-1: USB disconnect, device number 2 [ 43.514883][ T334] usbhid 4-1:0.0: can't add hid device: -71 [ 43.562801][ T334] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 43.652424][ T334] usb 4-1: USB disconnect, device number 2 [ 44.001261][ T576] file system registered [ 44.007718][ T576] read descriptors [ 44.043579][ T295] ffs_data_put(): freeing [ 44.536665][ T613] ehci-pci 0000:00:01.0: Found HC with no IRQ. Check BIOS/PCI 0000:00:01.0 setup! [ 44.546637][ T613] ehci-pci 0000:00:01.0: init 0000:00:01.0 fail, -19 [ 44.712288][ T334] usb 3-1: new full-speed USB device number 3 using dummy_hcd [ 44.882675][ T334] usb 3-1: config 0 interface 0 altsetting 32 endpoint 0x8D has invalid maxpacket 200, setting to 64 [ 44.893655][ T334] usb 3-1: config 0 interface 0 altsetting 32 endpoint 0x5 has invalid wMaxPacketSize 0 [ 44.903641][ T334] usb 3-1: config 0 interface 0 altsetting 32 endpoint 0x8B has invalid maxpacket 24929, setting to 64 [ 44.914991][ T334] usb 3-1: config 0 interface 0 has no altsetting 0 [ 44.921659][ T334] usb 3-1: New USB device found, idVendor=05ac, idProduct=8215, bcdDevice=8f.58 [ 44.931001][ T334] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 44.940077][ T334] usb 3-1: config 0 descriptor?? [ 45.151363][ T334] usb 3-1: USB disconnect, device number 3 [ 45.169480][ T311] usb 2-1: USB disconnect, device number 5 [ 46.322356][ T9] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 46.348612][ T694] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 46.357443][ T694] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 46.473495][ T9] usb 2-1: config 1 interface 0 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 32 [ 46.483610][ T9] usb 2-1: config 1 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 32 [ 46.493902][ T9] usb 2-1: New USB device found, idVendor=0c4b, idProduct=0100, bcdDevice= 1.00 [ 46.503465][ T9] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 46.518168][ T679] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 46.528775][ T679] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 46.662317][ T55] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 46.662342][ T622] Bluetooth: hci0: command 0x1003 tx timeout [ 46.795092][ T36] kauditd_printk_skb: 17 callbacks suppressed [ 46.795113][ T36] audit: type=1400 audit(1785409624.590:191): avc: denied { create } for pid=704 comm="syz.3.133" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 46.843625][ T327] usb 2-1: USB disconnect, device number 6 [ 47.015190][ T36] audit: type=1400 audit(1785409624.810:192): avc: denied { create } for pid=708 comm="syz.2.135" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 47.358928][ T36] audit: type=1400 audit(1785409625.150:193): avc: denied { read write } for pid=720 comm="syz.2.140" name="ppp" dev="devtmpfs" ino=86 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 47.383660][ T36] audit: type=1400 audit(1785409625.150:194): avc: denied { open } for pid=720 comm="syz.2.140" path="/dev/ppp" dev="devtmpfs" ino=86 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 47.413778][ T36] audit: type=1400 audit(1785409625.150:195): avc: denied { ioctl } for pid=720 comm="syz.2.140" path="/dev/ppp" dev="devtmpfs" ino=86 ioctlcmd=0x743e scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 47.499284][ T36] audit: type=1400 audit(1785409625.290:196): avc: denied { read } for pid=724 comm="syz.1.142" name="binder0" dev="binder" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 47.523579][ T36] audit: type=1400 audit(1785409625.290:197): avc: denied { open } for pid=724 comm="syz.1.142" path="/dev/binderfs/binder0" dev="binder" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 47.548039][ T36] audit: type=1400 audit(1785409625.320:198): avc: denied { ioctl } for pid=724 comm="syz.1.142" path="/dev/binderfs/binder0" dev="binder" ino=13 ioctlcmd=0x620d scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 47.574080][ T36] audit: type=1400 audit(1785409625.320:199): avc: denied { set_context_mgr } for pid=724 comm="syz.1.142" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=binder permissive=1 [ 47.599588][ T36] audit: type=1400 audit(1785409625.390:200): avc: denied { write } for pid=724 comm="syz.1.142" name="binder0" dev="binder" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 47.603365][ T725] rust_binder: validate_parent_fixup: new_min_offset=218, sg_entry.length=210 [ 47.623013][ T725] rust_binder: Error while translating object. [ 47.632017][ T725] rust_binder: Failure in copy_transaction_data: EINVAL [ 47.638514][ T725] rust_binder: 724:725 transaction to 724 failed: EINVAL [ 48.137692][ T9] smpboot: CPU 1 is now offline [ 48.332656][ T749] smpboot: Booting Node 0 Processor 1 APIC 0x1 [ 48.630976][ T773] dummy_hcd dummy_hcd.0: remove, state 1 [ 48.655617][ T773] usb usb1: USB disconnect, device number 1 [ 48.661646][ T773] usb 1-1: USB disconnect, device number 2 [ 48.705550][ T773] cdc_ether 1-1:1.0 usb1: unregister 'cdc_ether' usb-dummy_hcd.0-1, CDC Ethernet Device [ 48.903859][ T773] dummy_hcd dummy_hcd.0: stopped [ 48.939755][ T773] dummy_hcd dummy_hcd.0: USB bus 1 deregistered [ 50.605016][ T150] Oops: general protection fault, probably for non-canonical address 0xdffffc000000000a: 0000 [#1] PREEMPT SMP KASAN PTI [ 50.617775][ T150] KASAN: null-ptr-deref in range [0x0000000000000050-0x0000000000000057] [ 50.626227][ T150] CPU: 1 UID: 0 PID: 150 Comm: dhcpcd Not tainted syzkaller #0 0b31bef96cff8e44f9e14c4f768eb06c85e3b290 [ 50.637428][ T150] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 50.647634][ T150] RIP: 0010:dummy_queue+0x1c0/0x8e0 [ 50.652941][ T150] Code: fc ff df 80 3c 08 00 74 08 4c 89 e7 e8 79 a1 26 fe 4d 8b 24 24 49 83 c4 50 4c 89 e0 48 c1 e8 03 48 b9 00 00 00 00 00 fc ff df <0f> b6 04 08 84 c0 0f 85 f5 05 00 00 45 8b 24 24 44 89 e6 83 e6 02 [ 50.672783][ T150] RSP: 0018:ffffc90000e0ec28 EFLAGS: 00010206 [ 50.678916][ T150] RAX: 000000000000000a RBX: ffff8881143bc010 RCX: dffffc0000000000 [ 50.686955][ T150] RDX: ffff88811e9a0000 RSI: 0000000000000003 RDI: 0000000000000005 [ 50.694988][ T150] RBP: ffffc90000e0eca0 R08: 0000000000000003 R09: 0000000000000004 [ 50.703051][ T150] R10: 0000000000000000 R11: ffffffff83b99190 R12: 0000000000000050 [ 50.711087][ T150] R13: ffff8881143bc000 R14: 1ffff11022877800 R15: ffff88810ce88c90 [ 50.719115][ T150] FS: 00007fc1a373d740(0000) GS:ffff8881f6f00000(0000) knlGS:0000000000000000 [ 50.728107][ T150] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 50.734749][ T150] CR2: 00007ffdb18400d8 CR3: 000000011e8ee000 CR4: 00000000003526b0 [ 50.742784][ T150] Call Trace: [ 50.746101][ T150] [ 50.749068][ T150] ? __cfi__raw_spin_lock_irqsave+0x10/0x10 [ 50.755032][ T150] usb_ep_queue+0xe3/0x230 [ 50.759517][ T150] eth_start_xmit+0x9c1/0xf90 [ 50.764256][ T150] dev_hard_start_xmit+0x233/0x730 [ 50.769412][ T150] sch_direct_xmit+0x27d/0x9c0 [ 50.774207][ T150] ? __kasan_check_write+0x18/0x20 [ 50.779435][ T150] ? _raw_spin_trylock+0xb5/0x140 [ 50.784494][ T150] ? __cfi_sch_direct_xmit+0x10/0x10 [ 50.789806][ T150] ? netdev_core_pick_tx+0x1ff/0x370 [ 50.795129][ T150] ? __dev_queue_xmit+0x26c/0x3780 [ 50.800274][ T150] __dev_queue_xmit+0x1611/0x3780 [ 50.805768][ T150] ? __dev_queue_xmit+0x26c/0x3780 [ 50.810917][ T150] ? fib_rules_lookup+0x7c7/0xa20 [ 50.815977][ T150] ? __cfi_fib_rules_lookup+0x10/0x10 [ 50.821383][ T150] ? stack_depot_save_flags+0x38/0x800 [ 50.826872][ T150] ? __cfi___dev_queue_xmit+0x10/0x10 [ 50.832282][ T150] ? mroute6_is_socket+0x227/0x360 [ 50.837432][ T150] ? __virt_addr_valid+0x2a1/0x370 [ 50.842582][ T150] ? __cfi_mroute6_is_socket+0x10/0x10 [ 50.848081][ T150] ? __check_object_size+0x54c/0x870 [ 50.853405][ T150] ? __asan_memcpy+0x5a/0x80 [ 50.858027][ T150] ip6_finish_output2+0x16b2/0x1990 [ 50.863260][ T150] ? __cfi_ip6_finish_output2+0x10/0x10 [ 50.868847][ T150] ? __get_hash_from_flowi6+0x1e2/0x430 [ 50.874465][ T150] ? __cfi___get_hash_from_flowi6+0x10/0x10 [ 50.880396][ T150] ip6_finish_output+0x535/0xaf0 [ 50.885368][ T150] ip6_output+0x1fe/0x420 [ 50.889747][ T150] ? __cfi_ip6_output+0x10/0x10 [ 50.894618][ T150] ? __cfi_ip6_finish_output+0x10/0x10 [ 50.900100][ T150] ? __cfi_ip6_output+0x10/0x10 [ 50.904986][ T150] ip6_local_out+0x213/0x440 [ 50.909610][ T150] ? __cfi_ip6_local_out+0x10/0x10 [ 50.914743][ T150] ? __cfi_dst_output+0x10/0x10 [ 50.919617][ T150] ? skb_store_bits+0x5c0/0x860 [ 50.924485][ T150] ip6_push_pending_frames+0x181/0x2e0 [ 50.929970][ T150] rawv6_push_pending_frames+0x74d/0x940 [ 50.935635][ T150] ? raw6_getfrag+0x390/0x390 [ 50.940380][ T150] ? __cfi_raw6_getfrag+0x10/0x10 [ 50.945459][ T150] rawv6_sendmsg+0x12f2/0x1820 [ 50.950261][ T150] ? __cfi_avc_has_perm+0x10/0x10 [ 50.955312][ T150] ? __cfi_rawv6_sendmsg+0x10/0x10 [ 50.960467][ T150] ? selinux_socket_sendmsg+0x281/0x380 [ 50.966042][ T150] ? check_stack_object+0x81/0x150 [ 50.971182][ T150] ? inet_send_prepare+0x64/0x4e0 [ 50.976255][ T150] ? __cfi_rawv6_sendmsg+0x10/0x10 [ 50.981394][ T150] inet_sendmsg+0x113/0x120 [ 50.986032][ T150] ____sys_sendmsg+0x822/0xa00 [ 50.990822][ T150] ? __sys_sendmsg_sock+0x50/0x50 [ 50.995868][ T150] ? import_iovec+0x80/0xb0 [ 51.000397][ T150] ___sys_sendmsg+0x2a6/0x370 [ 51.005095][ T150] ? __sys_sendmsg+0x2a0/0x2a0 [ 51.009877][ T150] ? __kasan_check_write+0x18/0x20 [ 51.015007][ T150] ? recalc_sigpending+0x16c/0x1d0 [ 51.020230][ T150] ? __cfi_set_user_sigmask+0x10/0x10 [ 51.025629][ T150] ? __kasan_check_read+0x15/0x20 [ 51.030674][ T150] __x64_sys_sendmsg+0x206/0x2e0 [ 51.035634][ T150] ? __cfi___x64_sys_sendmsg+0x10/0x10 [ 51.041111][ T150] ? ksys_read+0x1e2/0x260 [ 51.045560][ T150] ? __kasan_check_read+0x15/0x20 [ 51.050633][ T150] x64_sys_call+0x2a4c/0x2ee0 [ 51.055332][ T150] do_syscall_64+0x57/0xf0 [ 51.059877][ T150] ? clear_bhb_loop+0x50/0xa0 [ 51.064581][ T150] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 51.070588][ T150] RIP: 0033:0x7fc1a37c7407 [ 51.075022][ T150] Code: 48 89 fa 4c 89 df e8 38 aa 00 00 8b 93 08 03 00 00 59 5e 48 83 f8 fc 74 1a 5b c3 0f 1f 84 00 00 00 00 00 48 8b 44 24 10 0f 05 <5b> c3 0f 1f 80 00 00 00 00 83 e2 39 83 fa 08 75 de e8 23 ff ff ff [ 51.094645][ T150] RSP: 002b:00007ffc68c6c6e0 EFLAGS: 00000202 ORIG_RAX: 000000000000002e [ 51.103081][ T150] RAX: ffffffffffffffda RBX: 00007fc1a373d740 RCX: 00007fc1a37c7407 [ 51.111070][ T150] RDX: 0000000000000000 RSI: 00007ffc68c7c890 RDI: 000000000000000d [ 51.119060][ T150] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 51.127133][ T150] R10: 0000000000000000 R11: 0000000000000202 R12: 00007ffc68c8cac0 [ 51.135124][ T150] R13: 0000000000000002 R14: 0000000000000010 R15: 00007ffc68c7c890 [ 51.143114][ T150] [ 51.146148][ T150] Modules linked in: [ 51.150132][ T150] ---[ end trace 0000000000000000 ]--- [ 51.155667][ T150] RIP: 0010:dummy_queue+0x1c0/0x8e0 [ 51.160928][ T150] Code: fc ff df 80 3c 08 00 74 08 4c 89 e7 e8 79 a1 26 fe 4d 8b 24 24 49 83 c4 50 4c 89 e0 48 c1 e8 03 48 b9 00 00 00 00 00 fc ff df <0f> b6 04 08 84 c0 0f 85 f5 05 00 00 45 8b 24 24 44 89 e6 83 e6 02 [ 51.180783][ T150] RSP: 0018:ffffc90000e0ec28 EFLAGS: 00010206 [ 51.186924][ T150] RAX: 000000000000000a RBX: ffff8881143bc010 RCX: dffffc0000000000 [ 51.187279][ T877] Oops: general protection fault, probably for non-canonical address 0xdffffc0000000000: 0000 [#2] PREEMPT SMP KASAN PTI [ 51.194950][ T150] RDX: ffff88811e9a0000 RSI: 0000000000000003 RDI: 0000000000000005 [ 51.207532][ T877] KASAN: null-ptr-deref in range [0x0000000000000000-0x0000000000000007] [ 51.207554][ T877] CPU: 0 UID: 0 PID: 877 Comm: syz.3.181 Tainted: G D syzkaller #0 0b31bef96cff8e44f9e14c4f768eb06c85e3b290 [ 51.215609][ T150] RBP: ffffc90000e0eca0 R08: 0000000000000003 R09: 0000000000000004 [ 51.223975][ T877] Tainted: [D]=DIE [ 51.223985][ T877] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 51.236906][ T150] R10: 0000000000000000 R11: ffffffff83b99190 R12: 0000000000000050 [ 51.244827][ T877] RIP: 0010:set_link_state+0x2a/0x1240 [ 51.248607][ T150] R13: ffff8881143bc000 R14: 1ffff11022877800 R15: ffff88810ce88c90 [ 51.258682][ T877] Code: 55 48 89 e5 41 57 41 56 41 55 41 54 53 48 83 ec 60 49 89 fd 48 bb 00 00 00 00 00 fc ff df e8 dd 01 ce fd 4c 89 e8 48 c1 e8 03 <80> 3c 18 00 74 08 4c 89 ef e8 b8 c4 26 fe 4d 8b 75 00 49 8d 95 93 [ 51.258703][ T877] RSP: 0018:ffffc9000dcff758 EFLAGS: 00010046 [ 51.266731][ T150] FS: 00007fc1a373d740(0000) GS:ffff8881f6f00000(0000) knlGS:0000000000000000 [ 51.272158][ T877] RAX: 0000000000000000 RBX: dffffc0000000000 RCX: 0000000000080000 [ 51.280205][ T150] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 51.299760][ T877] RDX: ffffc90001e23000 RSI: 0000000000000f8b RDI: 0000000000000f8c [ 51.299780][ T877] RBP: ffffc9000dcff7e0 R08: 0000000000000003 R09: 0000000000000004 [ 51.299797][ T877] R10: dffffc0000000000 R11: fffff52001b9fee8 R12: 0000000000000000 [ 51.305974][ T150] CR2: 00007ffdb18400d8 CR3: 000000011e8ee000 CR4: 00000000003526b0 [ 51.315060][ T877] R13: 0000000000000000 R14: 0000000000000000 R15: ffff88810ce88000 [ 51.315094][ T877] FS: 00007f58bf8b96c0(0000) GS:ffff8881f6e00000(0000) knlGS:0000000000000000 [ 51.323151][ T150] Kernel panic - not syncing: Fatal exception in interrupt [ 52.420768][ T150] Shutting down cpus with NMI [ 52.482163][ T150] Kernel Offset: disabled [ 52.486491][ T150] Rebooting in 86400 seconds..