last executing test programs: 2.190599872s ago: executing program 3 (id=440): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_WOL_GET(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000001c0)={0x20, r1, 0x1, 0x70bd2d, 0x0, {0x1b}, [@HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}]}, 0x20}}, 0x0) 2.125541565s ago: executing program 3 (id=441): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000400), 0xffffffffffffffff) sendmsg$TIPC_NL_MEDIA_SET(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)={0x2c, r1, 0x1, 0x703d28, 0x25dfdbfd, {}, [@TIPC_NLA_MEDIA={0x18, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}]}]}, 0x2c}, 0x1, 0x0, 0x0, 0x24000040}, 0x24004084) 2.025644455s ago: executing program 3 (id=445): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$int_in(r0, 0x5452, 0x0) poll(&(0x7f0000b2c000)=[{r1}], 0x2c, 0xffffffffffbffff8) r2 = dup2(r0, r1) syz_genetlink_get_family_id$devlink(&(0x7f00000001c0), r2) 1.283094967s ago: executing program 0 (id=476): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x80002, 0x0) ioctl$TCXONC(r0, 0x540a, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000080)=0xf) ioctl$TCXONC(r0, 0x540a, 0x3) 1.225607169s ago: executing program 0 (id=477): r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000280)={0x3fff}, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="140000001200010a0000003c3500000080"], 0x14}, 0x1, 0x0, 0x0, 0x20000005}, 0x0) 1.225536329s ago: executing program 0 (id=478): r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r0) ptrace$getregset(0x4204, r0, 0x1, &(0x7f00000001c0)={0x0}) 1.225498949s ago: executing program 0 (id=479): mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0) r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0x13, &(0x7f0000000080)=0x80000000, 0x4) 1.225417829s ago: executing program 0 (id=480): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) mknodat$loop(0xffffffffffffff9c, 0x0, 0x6004, 0x1) r1 = fsopen(&(0x7f00000001c0)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) r2 = fsmount(r1, 0x0, 0x0) fchdir(r2) r3 = open(&(0x7f0000000040)='./bus\x00', 0x143142, 0x61) r4 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./bus\x00', 0x1c1040, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000e80)='./bus\x00', 0x1c1002, 0x40) write(r5, &(0x7f0000004200)='t', 0x1) sendfile(r5, r4, 0x0, 0x7fffffff) ftruncate(r3, 0x2007ffb) sendfile(r3, r3, 0x0, 0x1000000201005) socket$nl_netfilter(0x10, 0x3, 0xc) writev(0xffffffffffffffff, 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @broadcast}) creat(&(0x7f00000000c0)='./bus\x00', 0x100) 1.213409901s ago: executing program 3 (id=481): bind$inet6(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000001500)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000001500)='./dev\x00', &(0x7f0000001600)='devtmpfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./mnt\x00', 0x1ff) mount(&(0x7f00000000c0)=@filename='./dev/sda1\x00', &(0x7f0000000140)='./mnt\x00', &(0x7f0000000100)='ext4\x00', 0x8410, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) chdir(&(0x7f0000000140)='./file0\x00') r0 = open(&(0x7f0000000040)='./bus\x00', 0x4c27e, 0x10) fallocate(r0, 0x0, 0x0, 0x1000f4) sendfile(r0, r0, 0x0, 0x40000000800) r1 = openat(0xffffffffffffff9c, 0x0, 0x80042, 0x4d) r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0) fallocate(r2, 0x0, 0xa20, 0x8000c64) fallocate(r1, 0x100000000000011, 0x2000, 0x2f93) 557.962205ms ago: executing program 1 (id=504): r0 = syz_open_dev$usbfs(&(0x7f0000000180), 0x205, 0x2181) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$USBDEVFS_SUBMITURB(r1, 0x8038550a, &(0x7f0000000000)=@urb_type_control={0x2, {}, 0x0, 0x0, &(0x7f0000000080)={0x80, 0x0, 0x0, 0x0, 0x7995}, 0xfff7, 0x0, 0x0, 0x48000000, 0x0, 0x0, 0x0}) 536.04419ms ago: executing program 2 (id=505): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000340), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_CHANNELS_GET(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000380)={0x2c, r1, 0x1, 0x70bd26, 0x25dfdbfe, {}, [@HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'netdevsim0\x00'}]}]}, 0x2c}, 0x1, 0x0, 0x0, 0x80}, 0x10) 481.577031ms ago: executing program 1 (id=506): r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_IPV6_HOPOPTS(r0, 0x29, 0x36, &(0x7f0000000180)=ANY=[], 0x8) connect$inet6(r0, &(0x7f00000004c0)={0xa, 0x0, 0x0, @mcast2, 0x7}, 0x1c) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000240)='batadv0\x00', 0xfc3d) sendto$inet6(r0, &(0x7f0000000500)="03bf3ac5", 0x4, 0x3b00, 0x0, 0x0) 481.481861ms ago: executing program 2 (id=507): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000030c0)=ANY=[], 0xe8}, 0x1, 0x0, 0x0, 0x80}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f0000000240)='proc\x00', 0x4000, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) write(r0, &(0x7f0000000000)='3', 0x4e) r1 = timerfd_create(0x0, 0x80800) socket$igmp6(0xa, 0x3, 0x2) timerfd_settime(r1, 0x1, &(0x7f0000000840)={{}, {0x0, 0x989680}}, &(0x7f0000000880)) openat$ptp0(0xffffffffffffff9c, &(0x7f0000000140), 0x481, 0x0) 481.431711ms ago: executing program 1 (id=508): r0 = syz_clone(0x100411, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r0) r1 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) setpgid(r1, r1) waitid(0x2, r1, 0x0, 0x6, 0x0) 146.20799ms ago: executing program 1 (id=509): close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = syz_open_dev$usbfs(&(0x7f0000000040), 0xfffffffffffffffb, 0x48b01) ioctl$USBDEVFS_SUBMITURB(r0, 0x8038550a, 0x0) 146.08969ms ago: executing program 2 (id=510): r0 = socket(0x40000000015, 0x5, 0x0) sendmsg$IPVS_CMD_SET_INFO(r0, &(0x7f0000000200)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000180)={0x0, 0x80}, 0x1, 0x0, 0x0, 0x80}, 0x4000000) 111.902877ms ago: executing program 1 (id=511): r0 = socket$inet(0x2, 0x3, 0x2) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r0, 0x89f0, &(0x7f0000000740)={'syztnl1\x00', &(0x7f00000006c0)={'ip_vti0\x00', 0x0, 0x10, 0x8, 0x8, 0x0, {{0x5, 0x4, 0x1, 0x9, 0x14, 0x65, 0x0, 0x0, 0x29, 0x0, @multicast1, @private=0xa010100}}}}) 56.187438ms ago: executing program 3 (id=512): r0 = syz_open_procfs(0x0, &(0x7f0000000000)='sessionid\x00') r1 = syz_open_procfs(0x0, &(0x7f0000000040)='mounts\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) mount$tmpfs(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), 0x0, 0x0) mount$9p_fd(0x0, &(0x7f0000000300)='.\x00', &(0x7f0000000180), 0x2000090, &(0x7f0000000280)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r0}}) 56.089608ms ago: executing program 2 (id=513): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000005c0)=@newsa={0x154, 0x10, 0x633, 0x70bd2c, 0x0, {{@in6=@ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}, @in=@empty, 0x0, 0x5, 0x0, 0xfffa, 0x0, 0x20, 0xa0, 0x3a}, {@in=@multicast2, 0xffffbffe, 0x32}, @in=@remote, {0x2000000000001, 0xffffffffffffffff, 0x9, 0x0, 0x10001, 0x0, 0x0, 0xfffffffffffffffc}, {0x9, 0x0, 0x5f, 0xa}, {0x6, 0xc0000000}, 0x100, 0x0, 0xa, 0x1, 0x0, 0x23}, [@algo_crypt={0x48, 0x2, {{'ecb(cipher_null)\x00'}}}, @encap={0x1c, 0x4, {0xfffffffffffffffd, 0x4e23, 0x4e22, @in=@loopback}}]}, 0x154}, 0x1, 0x0, 0x0, 0x20040}, 0x80) 55.936448ms ago: executing program 0 (id=514): r0 = signalfd4(0xffffffffffffffff, &(0x7f00000008c0), 0x8, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='.\x00', &(0x7f0000000040), 0x0, &(0x7f00000029c0)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r0]) r1 = signalfd4(0xffffffffffffffff, &(0x7f00000002c0)={[0xd]}, 0x8, 0x800) signalfd4(r1, &(0x7f0000000000)={[0xa5]}, 0x8, 0x0) 55.894338ms ago: executing program 1 (id=515): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc_mnt\x00', 0x1ed) mount(0x0, &(0x7f0000000080)='./proc_mnt\x00', &(0x7f00000000c0)='proc\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./proc_mnt/irq/12/smp_affinity\x00', 0x1, 0x6) write$cgroup_netprio_ifpriomap(r0, 0x0, 0xfffffffb) 55.845598ms ago: executing program 2 (id=516): sendmmsg$unix(0xffffffffffffffff, &(0x7f0000002f40)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000001580)=[@cred={{0x1c}}], 0x20, 0x40800}}], 0x1, 0x0) prctl$PR_SET_MM(0x23, 0x8, &(0x7f0000003000/0x2000)=nil) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='cmdline\x00') preadv(r0, &(0x7f0000000680)=[{&(0x7f0000001180)=""/4113, 0x1011}], 0x1, 0x16, 0xfffffff9) 103.22µs ago: executing program 3 (id=517): mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./sys\x00', &(0x7f00000000c0)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./sys/bus/serio/devices/serio0/drvctl\x00', 0x1, 0x0) write(r0, &(0x7f0000000040)='re', 0x2) r1 = openat(0xffffffffffffff9c, &(0x7f0000000700)='./sys/bus/serio/devices/serio1/drvctl\x00', 0x1, 0x0) write(r1, &(0x7f0000000800)='re', 0x2) 0s ago: executing program 2 (id=518): r0 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000300)='task\x00') fchdir(r1) mount(0x0, &(0x7f0000000080)='.\x00', &(0x7f0000000000)='proc\x00', 0x0, 0x0) r2 = syz_open_procfs$pagemap(r0, &(0x7f0000000040)) ioctl$PAGEMAP_SCAN(r2, 0xc0606610, &(0x7f0000000140)={0x60, 0x0, &(0x7f0000001000/0x3000)=nil, &(0x7f0000ffb000/0x4000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe4, 0x5c}) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.93' (ED25519) to the list of known hosts. [ 22.607872][ T36] audit: type=1400 audit(1790537583.280:64): avc: denied { mounton } for pid=286 comm="syz-executor" path="/syzcgroup/unified" dev="sda1" ino=2023 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1 [ 22.608988][ T286] cgroup: Unknown subsys name 'net' [ 22.630566][ T36] audit: type=1400 audit(1790537583.290:65): avc: denied { mount } for pid=286 comm="syz-executor" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 22.658213][ T36] audit: type=1400 audit(1790537583.310:66): avc: denied { unmount } for pid=286 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 22.658385][ T286] cgroup: Unknown subsys name 'devices' [ 22.780124][ T286] cgroup: Unknown subsys name 'hugetlb' [ 22.785764][ T286] cgroup: Unknown subsys name 'rlimit' [ 22.898065][ T36] audit: type=1400 audit(1790537583.580:67): avc: denied { setattr } for pid=286 comm="syz-executor" name="raw-gadget" dev="devtmpfs" ino=190 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 22.921469][ T36] audit: type=1400 audit(1790537583.580:68): avc: denied { mounton } for pid=286 comm="syz-executor" path="/proc/sys/fs/binfmt_misc" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=dir permissive=1 [ 22.930456][ T288] SELinux: Context root:object_r:swapfile_t is not valid (left unmapped). [ 22.946270][ T36] audit: type=1400 audit(1790537583.580:69): avc: denied { mount } for pid=286 comm="syz-executor" name="/" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=filesystem permissive=1 Setting up swapspace version 1, size = 127995904 bytes [ 22.978143][ T36] audit: type=1400 audit(1790537583.640:70): avc: denied { relabelto } for pid=288 comm="mkswap" name="swap-file" dev="sda1" ino=2026 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 23.003843][ T36] audit: type=1400 audit(1790537583.640:71): avc: denied { write } for pid=288 comm="mkswap" path="/root/swap-file" dev="sda1" ino=2026 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 23.037558][ T36] audit: type=1400 audit(1790537583.710:72): avc: denied { read } for pid=286 comm="syz-executor" name="swap-file" dev="sda1" ino=2026 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 23.064314][ T36] audit: type=1400 audit(1790537583.710:73): avc: denied { open } for pid=286 comm="syz-executor" path="/root/swap-file" dev="sda1" ino=2026 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 23.064566][ T286] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 23.828831][ T293] bridge0: port 1(bridge_slave_0) entered blocking state [ 23.836685][ T293] bridge0: port 1(bridge_slave_0) entered disabled state [ 23.847186][ T293] bridge_slave_0: entered allmulticast mode [ 23.854010][ T293] bridge_slave_0: entered promiscuous mode [ 23.860608][ T293] bridge0: port 2(bridge_slave_1) entered blocking state [ 23.867662][ T293] bridge0: port 2(bridge_slave_1) entered disabled state [ 23.874864][ T293] bridge_slave_1: entered allmulticast mode [ 23.881066][ T293] bridge_slave_1: entered promiscuous mode [ 24.019674][ T298] bridge0: port 1(bridge_slave_0) entered blocking state [ 24.026786][ T298] bridge0: port 1(bridge_slave_0) entered disabled state [ 24.034026][ T298] bridge_slave_0: entered allmulticast mode [ 24.040239][ T298] bridge_slave_0: entered promiscuous mode [ 24.051387][ T298] bridge0: port 2(bridge_slave_1) entered blocking state [ 24.058471][ T298] bridge0: port 2(bridge_slave_1) entered disabled state [ 24.065534][ T298] bridge_slave_1: entered allmulticast mode [ 24.071981][ T298] bridge_slave_1: entered promiscuous mode [ 24.089367][ T293] bridge0: port 2(bridge_slave_1) entered blocking state [ 24.096436][ T293] bridge0: port 2(bridge_slave_1) entered forwarding state [ 24.103764][ T293] bridge0: port 1(bridge_slave_0) entered blocking state [ 24.110817][ T293] bridge0: port 1(bridge_slave_0) entered forwarding state [ 24.137531][ T297] bridge0: port 1(bridge_slave_0) entered blocking state [ 24.144980][ T297] bridge0: port 1(bridge_slave_0) entered disabled state [ 24.152518][ T297] bridge_slave_0: entered allmulticast mode [ 24.159254][ T297] bridge_slave_0: entered promiscuous mode [ 24.165737][ T297] bridge0: port 2(bridge_slave_1) entered blocking state [ 24.172826][ T297] bridge0: port 2(bridge_slave_1) entered disabled state [ 24.179951][ T297] bridge_slave_1: entered allmulticast mode [ 24.186134][ T297] bridge_slave_1: entered promiscuous mode [ 24.195621][ T299] bridge0: port 1(bridge_slave_0) entered blocking state [ 24.202731][ T299] bridge0: port 1(bridge_slave_0) entered disabled state [ 24.209834][ T299] bridge_slave_0: entered allmulticast mode [ 24.216027][ T299] bridge_slave_0: entered promiscuous mode [ 24.225301][ T299] bridge0: port 2(bridge_slave_1) entered blocking state [ 24.232360][ T299] bridge0: port 2(bridge_slave_1) entered disabled state [ 24.239468][ T299] bridge_slave_1: entered allmulticast mode [ 24.245796][ T299] bridge_slave_1: entered promiscuous mode [ 24.373804][ T298] bridge0: port 2(bridge_slave_1) entered blocking state [ 24.380886][ T298] bridge0: port 2(bridge_slave_1) entered forwarding state [ 24.388178][ T298] bridge0: port 1(bridge_slave_0) entered blocking state [ 24.395200][ T298] bridge0: port 1(bridge_slave_0) entered forwarding state [ 24.412548][ T46] bridge0: port 1(bridge_slave_0) entered disabled state [ 24.419920][ T46] bridge0: port 2(bridge_slave_1) entered disabled state [ 24.427193][ T46] bridge0: port 1(bridge_slave_0) entered disabled state [ 24.434910][ T46] bridge0: port 2(bridge_slave_1) entered disabled state [ 24.452241][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 24.459341][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 24.470211][ T46] bridge0: port 2(bridge_slave_1) entered blocking state [ 24.477360][ T46] bridge0: port 2(bridge_slave_1) entered forwarding state [ 24.529335][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 24.536411][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 24.550903][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 24.557991][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 24.581951][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 24.589030][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 24.613522][ T293] veth0_vlan: entered promiscuous mode [ 24.623981][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 24.631062][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 24.642485][ T298] veth0_vlan: entered promiscuous mode [ 24.660458][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 24.667557][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 24.680426][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 24.687476][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 24.697692][ T298] veth1_macvtap: entered promiscuous mode [ 24.719101][ T297] veth0_vlan: entered promiscuous mode [ 24.735229][ T293] veth1_macvtap: entered promiscuous mode [ 24.756936][ T297] veth1_macvtap: entered promiscuous mode [ 24.775961][ T299] veth0_vlan: entered promiscuous mode [ 24.794583][ T299] veth1_macvtap: entered promiscuous mode [ 24.813154][ T298] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 24.884450][ T319] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 24.893438][ T320] ./dev/sda1: Can't lookup blockdev [ 24.943350][ T320] FAULT_INJECTION: forcing a failure. [ 24.943350][ T320] name fail_futex, interval 1, probability 0, space 0, times 1 [ 24.956268][ T320] CPU: 1 UID: 0 PID: 320 Comm: syz.0.1 Not tainted syzkaller #0 f6ed0fb9bb938319f6518c785cf37c2d863a58c7 [ 24.956302][ T320] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 24.956315][ T320] Call Trace: [ 24.956322][ T320] [ 24.956330][ T320] __dump_stack+0x21/0x30 [ 24.956366][ T320] dump_stack_lvl+0x140/0x1c0 [ 24.956397][ T320] ? __cfi_dump_stack_lvl+0x10/0x10 [ 24.956428][ T320] ? gup_fast_fallback+0x671/0x740 [ 24.956460][ T320] dump_stack+0x19/0x20 [ 24.956489][ T320] should_fail_ex+0x3c2/0x510 [ 24.956525][ T320] should_fail+0xf/0x20 [ 24.956548][ T320] should_fail_futex+0x3c/0x50 [ 24.956574][ T320] futex_lock_pi_atomic+0x14c/0xcb0 [ 24.956605][ T320] ? __cfi_futex_lock_pi_atomic+0x10/0x10 [ 24.956633][ T320] ? __cfi_futex_setup_timer+0x10/0x10 [ 24.956658][ T320] ? __cfi_get_futex_key+0x10/0x10 [ 24.956683][ T320] futex_lock_pi+0x2a7/0xa70 [ 24.956710][ T320] ? futex_unqueue+0x136/0x160 [ 24.956737][ T320] ? __cfi_futex_lock_pi+0x10/0x10 [ 24.956768][ T320] ? __cfi_futex_wake_mark+0x10/0x10 [ 24.956790][ T320] ? __cfi_futex_wake_mark+0x10/0x10 [ 24.956810][ T320] ? vfs_write+0xbcf/0xfd0 [ 24.956832][ T320] do_futex+0x2fc/0x510 [ 24.956858][ T320] ? __cfi_do_futex+0x10/0x10 [ 24.956886][ T320] ? mutex_unlock+0x90/0x240 [ 24.956914][ T320] __se_sys_futex+0x13c/0x320 [ 24.956940][ T320] ? fput+0x1a4/0x230 [ 24.956965][ T320] ? __x64_sys_futex+0x110/0x110 [ 24.956991][ T320] ? __kasan_check_write+0x18/0x20 [ 24.957012][ T320] __x64_sys_futex+0xe9/0x110 [ 24.957037][ T320] x64_sys_call+0x227f/0x2ee0 [ 24.957056][ T320] do_syscall_64+0x57/0xf0 [ 24.957075][ T320] ? clear_bhb_loop+0x50/0xa0 [ 24.957100][ T320] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 24.957123][ T320] RIP: 0033:0x7fdc41d9e159 [ 24.957142][ T320] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 24.957158][ T320] RSP: 002b:00007fdc42d24028 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 24.957181][ T320] RAX: ffffffffffffffda RBX: 00007fdc42025fa0 RCX: 00007fdc41d9e159 [ 24.957196][ T320] RDX: 0000000000000002 RSI: 0000000000000008 RDI: 00002000000000c0 [ 24.957209][ T320] RBP: 00007fdc41e3506b R08: 0000000000000000 R09: 0000000000000000 [ 24.957222][ T320] R10: 0000200000000180 R11: 0000000000000246 R12: 0000000000000000 [ 24.957236][ T320] R13: 00007fdc42026038 R14: 00007fdc42025fa0 R15: 00007ffe6726d3e8 [ 24.957252][ T320] [ 25.226406][ T320] input: syz1 as /devices/virtual/input/input4 [ 25.348862][ T330] pci 0000:00:05.0: vgaarb: VGA decodes changed: olddecodes=io+mem,decodes=io+mem:owns=io+mem [ 25.359261][ T9] usb 2-1: new full-speed USB device number 2 using dummy_hcd [ 25.364263][ T328] mmap: syz.0.6 (328) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 25.402937][ T332] Zero length message leads to an empty skb [ 25.432720][ T340] fuse: Unknown parameter 'root;' [ 25.493710][ T345] ./dev/sda1: Can't lookup blockdev [ 25.528347][ T9] usb 2-1: too many configurations: 33, using maximum allowed: 8 [ 25.547888][ T9] usb 2-1: unable to read config index 0 descriptor/start: -61 [ 25.555628][ T9] usb 2-1: can't read configurations, error -61 [ 25.572264][ T353] netlink: 12 bytes leftover after parsing attributes in process `syz.0.13'. [ 25.581455][ T356] process 'syz.2.12' launched './file0' with NULL argv: empty string added [ 25.598565][ T353] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=47 sclass=netlink_tcpdiag_socket pid=353 comm=syz.0.13 [ 25.612173][ T353] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=55 sclass=netlink_tcpdiag_socket pid=353 comm=syz.0.13 [ 25.627530][ T353] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=62 sclass=netlink_tcpdiag_socket pid=353 comm=syz.0.13 [ 25.640753][ T353] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=48 sclass=netlink_tcpdiag_socket pid=353 comm=syz.0.13 [ 25.698192][ T9] usb 2-1: new full-speed USB device number 3 using dummy_hcd [ 25.859712][ T9] usb 2-1: too many configurations: 33, using maximum allowed: 8 [ 25.871698][ T9] usb 2-1: unable to read config index 0 descriptor/start: -61 [ 25.879723][ T9] usb 2-1: can't read configurations, error -61 [ 25.886353][ T9] usb usb2-port1: attempt power cycle [ 25.927994][ T66] usb 1-1: new low-speed USB device number 2 using dummy_hcd [ 25.938148][ T31] usb 3-1: new full-speed USB device number 2 using dummy_hcd [ 26.099541][ T31] usb 3-1: unable to get BOS descriptor or descriptor too short [ 26.107667][ T31] usb 3-1: not running at top speed; connect to a high speed hub [ 26.107942][ T66] usb 1-1: Invalid ep0 maxpacket: 64 [ 26.116388][ T31] usb 3-1: config 4 has an invalid interface number: 246 but max is 0 [ 26.129292][ T31] usb 3-1: config 4 has no interface number 0 [ 26.135530][ T31] usb 3-1: config 4 interface 246 has no altsetting 0 [ 26.144114][ T31] usb 3-1: New USB device found, idVendor=0403, idProduct=f850, bcdDevice=d5.2c [ 26.153389][ T31] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 26.161487][ T31] usb 3-1: Product: syz [ 26.165879][ T31] usb 3-1: Manufacturer: syz [ 26.170554][ T31] usb 3-1: SerialNumber: syz [ 26.258010][ T66] usb 1-1: new low-speed USB device number 3 using dummy_hcd [ 26.265580][ T9] usb 2-1: new full-speed USB device number 4 using dummy_hcd [ 26.298903][ T9] usb 2-1: too many configurations: 33, using maximum allowed: 8 [ 26.318721][ T9] usb 2-1: unable to read config index 0 descriptor/start: -61 [ 26.326327][ T9] usb 2-1: can't read configurations, error -61 [ 26.381019][ T31] ftdi_sio 3-1:4.246: FTDI USB Serial Device converter detected [ 26.389330][ T31] ftdi_sio ttyUSB0: unknown device type: 0xd52c [ 26.396914][ T31] usb 3-1: USB disconnect, device number 2 [ 26.403649][ T31] ftdi_sio 3-1:4.246: device disconnected [ 26.447967][ T66] usb 1-1: Invalid ep0 maxpacket: 64 [ 26.458024][ T66] usb usb1-port1: attempt power cycle [ 26.487992][ T9] usb 2-1: new full-speed USB device number 5 using dummy_hcd [ 26.528713][ T9] usb 2-1: too many configurations: 33, using maximum allowed: 8 [ 26.549017][ T9] usb 2-1: unable to read config index 0 descriptor/start: -61 [ 26.556704][ T9] usb 2-1: can't read configurations, error -61 [ 26.563242][ T9] usb usb2-port1: unable to enumerate USB device [ 26.827999][ T66] usb 1-1: new low-speed USB device number 4 using dummy_hcd [ 26.858400][ T66] usb 1-1: Invalid ep0 maxpacket: 64 [ 26.998043][ T66] usb 1-1: new low-speed USB device number 5 using dummy_hcd [ 27.018432][ T66] usb 1-1: Invalid ep0 maxpacket: 64 [ 27.023932][ T66] usb usb1-port1: unable to enumerate USB device [ 27.147979][ T311] usb 3-1: new full-speed USB device number 3 using dummy_hcd [ 27.278002][ T311] usb 3-1: device descriptor read/64, error -71 [ 27.517996][ T311] usb 3-1: device descriptor read/64, error -71 [ 27.725836][ T36] kauditd_printk_skb: 87 callbacks suppressed [ 27.725856][ T36] audit: type=1400 audit(1790537588.400:161): avc: denied { create } for pid=412 comm="syz.3.29" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 27.757999][ T311] usb 3-1: new full-speed USB device number 4 using dummy_hcd [ 27.889893][ T311] usb 3-1: device descriptor read/64, error -71 [ 27.890846][ T36] audit: type=1400 audit(1790537588.570:162): avc: denied { bind } for pid=420 comm="syz.1.30" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 27.915326][ T36] audit: type=1400 audit(1790537588.570:163): avc: denied { setopt } for pid=420 comm="syz.1.30" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 27.926401][ T423] netlink: 316 bytes leftover after parsing attributes in process `syz.1.31'. [ 27.934608][ T36] audit: type=1400 audit(1790537588.600:164): avc: denied { create } for pid=422 comm="syz.1.31" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 27.962860][ T36] audit: type=1400 audit(1790537588.620:165): avc: denied { ioctl } for pid=422 comm="syz.1.31" path="/dev/vhost-vsock" dev="devtmpfs" ino=200 ioctlcmd=0xaf25 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 27.988131][ T36] audit: type=1400 audit(1790537588.630:166): avc: denied { create } for pid=422 comm="syz.1.31" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 28.007301][ T36] audit: type=1400 audit(1790537588.630:167): avc: denied { setopt } for pid=422 comm="syz.1.31" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 28.026950][ T36] audit: type=1400 audit(1790537588.640:168): avc: denied { bind } for pid=422 comm="syz.1.31" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 28.046125][ T36] audit: type=1400 audit(1790537588.640:169): avc: denied { setopt } for pid=422 comm="syz.1.31" lport=2 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 28.128030][ T311] usb 3-1: device descriptor read/64, error -71 [ 28.238079][ T311] usb usb3-port1: attempt power cycle [ 28.477381][ T429] capability: warning: `syz.1.32' uses 32-bit capabilities (legacy support in use) [ 28.578104][ T311] usb 3-1: new full-speed USB device number 5 using dummy_hcd [ 28.599011][ T311] usb 3-1: device descriptor read/8, error -71 [ 28.622619][ T36] audit: type=1400 audit(1790537589.300:170): avc: denied { listen } for pid=433 comm="syz.1.34" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 28.729054][ T311] usb 3-1: device descriptor read/8, error -71 [ 28.947974][ T9] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 28.967959][ T311] usb 3-1: new full-speed USB device number 6 using dummy_hcd [ 28.989120][ T311] usb 3-1: device descriptor read/8, error -71 [ 29.078056][ T9] usb 2-1: device descriptor read/64, error -71 [ 29.098006][ T31] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 29.119035][ T311] usb 3-1: device descriptor read/8, error -71 [ 29.238150][ T311] usb usb3-port1: unable to enumerate USB device [ 29.258043][ T31] usb 1-1: Using ep0 maxpacket: 8 [ 29.264258][ T31] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 29.274649][ T31] usb 1-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 29.283650][ T31] usb 1-1: config 1 interface 1 altsetting 1 endpoint 0x1 has invalid wMaxPacketSize 0 [ 29.294594][ T31] usb 1-1: New USB device found, idVendor=0582, idProduct=0025, bcdDevice= 0.40 [ 29.303856][ T31] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 29.311990][ T31] usb 1-1: Product: syz [ 29.316164][ T31] usb 1-1: Manufacturer: syz [ 29.321102][ T31] usb 1-1: SerialNumber: syz [ 29.338064][ T9] usb 2-1: device descriptor read/64, error -71 [ 29.577998][ T9] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 29.707977][ T9] usb 2-1: device descriptor read/64, error -71 [ 29.948038][ T9] usb 2-1: device descriptor read/64, error -71 [ 30.061866][ T9] usb usb2-port1: attempt power cycle [ 30.155273][ T31] usb 1-1: 1:1: cannot get freq (v2/v3): err -71 [ 30.161947][ T31] usb 1-1: uac_clock_source_is_valid(): cannot get clock validity for id 0 [ 30.173393][ T31] usb 1-1: USB disconnect, device number 6 [ 30.197376][ T376] udevd[376]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 30.367982][ T66] usb 3-1: new low-speed USB device number 7 using dummy_hcd [ 30.408001][ T9] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 30.429393][ T9] usb 2-1: device descriptor read/8, error -71 [ 30.519192][ T66] usb 3-1: No LPM exit latency info found, disabling LPM. [ 30.527104][ T66] usb 3-1: config 1 interface 0 altsetting 1 endpoint 0x82 is Bulk; changing to Interrupt [ 30.537152][ T66] usb 3-1: config 1 interface 0 altsetting 1 endpoint 0x3 is Bulk; changing to Interrupt [ 30.547123][ T66] usb 3-1: config 1 interface 0 has no altsetting 0 [ 30.555808][ T66] usb 3-1: string descriptor 0 read error: -22 [ 30.562069][ T66] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 30.571248][ T66] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 30.579970][ T9] usb 2-1: device descriptor read/8, error -71 [ 30.586912][ T459] raw-gadget.2 gadget.2: fail, usb_ep_enable returned -22 [ 30.594208][ T459] raw-gadget.2 gadget.2: fail, usb_ep_enable returned -22 [ 30.602189][ T66] cdc_ether 3-1:1.0: probe with driver cdc_ether failed with error -22 [ 30.720779][ T461] netlink: 80 bytes leftover after parsing attributes in process `syz.0.41'. [ 30.818177][ T9] usb 2-1: new high-speed USB device number 9 using dummy_hcd [ 30.839053][ T9] usb 2-1: device descriptor read/8, error -71 [ 30.969063][ T9] usb 2-1: device descriptor read/8, error -71 [ 30.988012][ T66] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 31.078096][ T9] usb usb2-port1: unable to enumerate USB device [ 31.137962][ T66] usb 4-1: Using ep0 maxpacket: 16 [ 31.144198][ T66] usb 4-1: config 0 interface 0 altsetting 16 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 31.155213][ T66] usb 4-1: config 0 interface 0 altsetting 16 endpoint 0x81 has invalid wMaxPacketSize 0 [ 31.165151][ T66] usb 4-1: config 0 interface 0 altsetting 16 has 1 endpoint descriptor, different from the interface descriptor's value: 28 [ 31.178121][ T66] usb 4-1: config 0 interface 0 has no altsetting 0 [ 31.184747][ T66] usb 4-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.00 [ 31.193809][ T66] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 31.202353][ T66] usb 4-1: config 0 descriptor?? [ 31.314388][ T469] netlink: 12 bytes leftover after parsing attributes in process `syz.0.44'. [ 31.323431][ T470] netlink: 12 bytes leftover after parsing attributes in process `syz.0.44'. [ 31.334836][ T469] netlink: 8 bytes leftover after parsing attributes in process `syz.0.44'. [ 31.414220][ T464] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 31.422791][ T464] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 31.587995][ T31] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 31.749061][ T31] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 31.759391][ T31] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x5 has an invalid bInterval 255, changing to 11 [ 31.770482][ T31] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 59391, setting to 1024 [ 31.783130][ T31] usb 1-1: New USB device found, idVendor=133e, idProduct=0815, bcdDevice= 0.40 [ 31.792230][ T31] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 31.800257][ T31] usb 1-1: Product: syz [ 31.804437][ T31] usb 1-1: Manufacturer: syz [ 31.809089][ T31] usb 1-1: SerialNumber: syz [ 31.814849][ T472] raw-gadget.3 gadget.0: fail, usb_ep_enable returned -22 [ 31.861722][ T66] usbhid 4-1:0.0: can't add hid device: -71 [ 31.868054][ T66] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 31.876810][ T66] usb 4-1: USB disconnect, device number 2 [ 32.025321][ T31] snd-usb-audio 1-1:1.0: probe with driver snd-usb-audio failed with error -71 [ 32.035240][ T31] usb 1-1: USB disconnect, device number 7 [ 32.364537][ T485] FAULT_INJECTION: forcing a failure. [ 32.364537][ T485] name failslab, interval 1, probability 0, space 0, times 1 [ 32.377327][ T485] CPU: 0 UID: 0 PID: 485 Comm: syz.1.49 Not tainted syzkaller #0 f6ed0fb9bb938319f6518c785cf37c2d863a58c7 [ 32.377362][ T485] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 32.377376][ T485] Call Trace: [ 32.377384][ T485] [ 32.377392][ T485] __dump_stack+0x21/0x30 [ 32.377430][ T485] dump_stack_lvl+0x140/0x1c0 [ 32.377461][ T485] ? __cfi_dump_stack_lvl+0x10/0x10 [ 32.377502][ T485] ? __kasan_kmalloc+0x96/0xb0 [ 32.377531][ T485] ? __kmalloc_node_noprof+0x252/0x500 [ 32.377556][ T485] dump_stack+0x19/0x20 [ 32.377586][ T485] should_fail_ex+0x3c2/0x510 [ 32.377613][ T485] should_failslab+0xac/0x100 [ 32.377641][ T485] __kmalloc_cache_noprof+0x41/0x470 [ 32.377664][ T485] ? __asan_memset+0x39/0x50 [ 32.377684][ T485] ? alloc_netdev_mqs+0xc3d/0x13d0 [ 32.377709][ T485] ? __xdp_rxq_info_reg+0x16c/0x2e0 [ 32.377739][ T485] alloc_netdev_mqs+0xc3d/0x13d0 [ 32.377765][ T485] ip6gre_tunnel_locate+0x23d/0x6b0 [ 32.377793][ T485] ? ip6gre_tnl_link_config+0x240/0x240 [ 32.377814][ T485] ? selinux_capable+0x38/0x50 [ 32.377845][ T485] ? ip6gre_changelink_common+0x4a0/0x4a0 [ 32.377868][ T485] ? ip6gre_tnl_parm_from_user+0x21d/0x420 [ 32.377892][ T485] ip6gre_tunnel_siocdevprivate+0x542/0x870 [ 32.377914][ T485] ? __cfi_ip6gre_tunnel_siocdevprivate+0x10/0x10 [ 32.377941][ T485] ? full_name_hash+0xa1/0xf0 [ 32.377968][ T485] dev_ifsioc+0x951/0xc10 [ 32.377995][ T485] dev_ioctl+0xa62/0x1000 [ 32.378022][ T485] sock_ioctl+0x74e/0x7e0 [ 32.378045][ T485] ? __cfi_sock_ioctl+0x10/0x10 [ 32.378066][ T485] ? __fget_files+0x2bc/0x330 [ 32.378093][ T485] ? bpf_lsm_file_ioctl+0xd/0x20 [ 32.378121][ T485] ? security_file_ioctl+0x3e/0x110 [ 32.378142][ T485] ? __cfi_sock_ioctl+0x10/0x10 [ 32.378163][ T485] __se_sys_ioctl+0x123/0x1b0 [ 32.378191][ T485] __x64_sys_ioctl+0x7f/0xa0 [ 32.378216][ T485] x64_sys_call+0x1878/0x2ee0 [ 32.378236][ T485] do_syscall_64+0x57/0xf0 [ 32.378256][ T485] ? clear_bhb_loop+0x50/0xa0 [ 32.378285][ T485] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 32.378311][ T485] RIP: 0033:0x7f340379e159 [ 32.378330][ T485] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 32.378349][ T485] RSP: 002b:00007f340472c028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 32.378374][ T485] RAX: ffffffffffffffda RBX: 00007f3403a25fa0 RCX: 00007f340379e159 [ 32.378391][ T485] RDX: 0000200000000340 RSI: 00000000000089f1 RDI: 0000000000000007 [ 32.378406][ T485] RBP: 00007f340383506b R08: 0000000000000000 R09: 0000000000000000 [ 32.378420][ T485] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 32.378434][ T485] R13: 00007f3403a26038 R14: 00007f3403a25fa0 R15: 00007ffd63e72878 [ 32.378453][ T485] [ 32.798043][ T446] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 33.057193][ T36] kauditd_printk_skb: 28 callbacks suppressed [ 33.057222][ T36] audit: type=1400 audit(1790537593.730:199): avc: denied { unmount } for pid=297 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 33.119667][ T36] audit: type=1400 audit(1790537593.790:200): avc: denied { mount } for pid=497 comm="syz.0.53" name="/" dev="ramfs" ino=6361 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ramfs_t tclass=filesystem permissive=1 [ 33.142594][ T36] audit: type=1400 audit(1790537593.790:201): avc: denied { mounton } for pid=497 comm="syz.0.53" path="/14/tracing" dev="ramfs" ino=6361 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:ramfs_t tclass=dir permissive=1 [ 33.165861][ T36] audit: type=1400 audit(1790537593.820:202): avc: denied { unmount } for pid=297 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ramfs_t tclass=filesystem permissive=1 [ 33.186240][ T36] audit: type=1400 audit(1790537593.860:203): avc: denied { read write } for pid=500 comm="syz.0.54" name="uhid" dev="devtmpfs" ino=199 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 33.209676][ T36] audit: type=1400 audit(1790537593.860:204): avc: denied { open } for pid=500 comm="syz.0.54" path="/dev/uhid" dev="devtmpfs" ino=199 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 33.236708][ T36] audit: type=1400 audit(1790537593.910:205): avc: denied { unmount } for pid=293 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=filesystem permissive=1 [ 33.248414][ T31] usb 3-1: USB disconnect, device number 7 [ 33.307108][ T36] audit: type=1400 audit(1790537593.980:206): avc: denied { write } for pid=508 comm="syz.3.57" path="socket:[5386]" dev="sockfs" ino=5386 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 33.330274][ T36] audit: type=1400 audit(1790537593.980:207): avc: denied { map } for pid=508 comm="syz.3.57" path="socket:[5386]" dev="sockfs" ino=5386 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 33.353446][ T36] audit: type=1400 audit(1790537593.980:208): avc: denied { read } for pid=508 comm="syz.3.57" path="socket:[5386]" dev="sockfs" ino=5386 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 33.471978][ T517] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=57107 sclass=netlink_route_socket pid=517 comm=syz.3.59 [ 33.608000][ T446] usb 1-1: new full-speed USB device number 9 using dummy_hcd [ 33.615572][ T31] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 33.769492][ T31] usb 3-1: unable to get BOS descriptor or descriptor too short [ 33.777412][ T446] usb 1-1: unable to get BOS descriptor or descriptor too short [ 33.785492][ T446] usb 1-1: not running at top speed; connect to a high speed hub [ 33.793728][ T31] usb 3-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 154, changing to 7 [ 33.805104][ T446] usb 1-1: config 8 has an invalid interface number: 43 but max is 1 [ 33.817606][ T31] usb 3-1: New USB device found, idVendor=0582, idProduct=0582, bcdDevice= 0.40 [ 33.829199][ T446] usb 1-1: config 8 has an invalid interface number: 35 but max is 1 [ 33.837390][ T31] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 33.850962][ T446] usb 1-1: config 8 has no interface number 0 [ 33.857091][ T446] usb 1-1: config 8 has no interface number 1 [ 33.863255][ T31] usb 3-1: Product: syz [ 33.867637][ T31] usb 3-1: Manufacturer: syz [ 33.880403][ T31] usb 3-1: SerialNumber: syz [ 33.890520][ T446] usb 1-1: config 8 interface 43 altsetting 17 has an endpoint descriptor with address 0xE5, changing to 0x85 [ 33.912255][ T446] usb 1-1: config 8 interface 43 has no altsetting 0 [ 33.919119][ T446] usb 1-1: config 8 interface 35 has no altsetting 0 [ 33.929372][ T446] usb 1-1: New USB device found, idVendor=0584, idProduct=0008, bcdDevice= 1.02 [ 33.938489][ T446] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 33.946688][ T446] usb 1-1: Product: syz [ 33.951083][ T446] usb 1-1: Manufacturer: syz [ 33.955715][ T446] usb 1-1: SerialNumber: syz [ 34.112940][ T31] usb 3-1: BAAD GENERIC IO: no channels? [ 34.121197][ T31] snd-usb-audio 3-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 34.136972][ T31] usb 3-1: USB disconnect, device number 8 [ 34.140906][ T312] udevd[312]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 34.163802][ T446] ums-alauda 1-1:8.43: USB Mass Storage device detected [ 34.181918][ T446] scsi host1: usb-storage 1-1:8.43 [ 34.190890][ T446] hub 1-1:8.35: Invalid hub with more than one config or interface [ 34.199049][ T446] hub 1-1:8.35: probe with driver hub failed with error -22 [ 34.206772][ T446] ums-alauda 1-1:8.35: USB Mass Storage device detected [ 34.269392][ T446] usb 1-1: USB disconnect, device number 9 [ 34.651888][ T608] ======================================================= [ 34.651888][ T608] WARNING: The mand mount option has been deprecated and [ 34.651888][ T608] and is ignored by this kernel. Remove the mand [ 34.651888][ T608] option from the mount to silence this warning. [ 34.651888][ T608] ======================================================= [ 35.204866][ T625] netlink: 12 bytes leftover after parsing attributes in process `syz.3.105'. [ 35.248813][ T631] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=41 sclass=netlink_xfrm_socket pid=631 comm=syz.3.108 [ 36.499673][ T670] FAULT_INJECTION: forcing a failure. [ 36.499673][ T670] name fail_futex, interval 1, probability 0, space 0, times 0 [ 36.512741][ T670] CPU: 1 UID: 0 PID: 670 Comm: syz.1.125 Not tainted syzkaller #0 f6ed0fb9bb938319f6518c785cf37c2d863a58c7 [ 36.512770][ T670] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 36.512779][ T670] Call Trace: [ 36.512784][ T670] [ 36.512790][ T670] __dump_stack+0x21/0x30 [ 36.512814][ T670] dump_stack_lvl+0x140/0x1c0 [ 36.512831][ T670] ? __cfi_dump_stack_lvl+0x10/0x10 [ 36.512849][ T670] ? __kasan_check_write+0x18/0x20 [ 36.512863][ T670] dump_stack+0x19/0x20 [ 36.512880][ T670] should_fail_ex+0x3c2/0x510 [ 36.512896][ T670] should_fail+0xf/0x20 [ 36.512910][ T670] get_futex_key+0x178/0x940 [ 36.512926][ T670] ? ttwu_queue_wakelist+0x30f/0x4d0 [ 36.512942][ T670] ? __cfi_get_futex_key+0x10/0x10 [ 36.512971][ T670] ? __smp_call_single_queue+0xd5/0x380 [ 36.512986][ T670] ? ttwu_do_activate+0x620/0x620 [ 36.512999][ T670] ? ttwu_queue_wakelist+0x30f/0x4d0 [ 36.513015][ T670] futex_wait_setup+0xae/0x260 [ 36.513036][ T670] ? __cfi_futex_wait_setup+0x10/0x10 [ 36.513059][ T670] ? __asan_memcpy+0x5a/0x80 [ 36.513080][ T670] __futex_wait+0x12c/0x3d0 [ 36.513100][ T670] ? __cfi___futex_wait+0x10/0x10 [ 36.513120][ T670] ? __cfi_futex_wake_mark+0x10/0x10 [ 36.513137][ T670] ? futex_wake+0x666/0x950 [ 36.513148][ T670] futex_wait+0x128/0x7c0 [ 36.513160][ T670] ? __cfi_futex_wait+0x10/0x10 [ 36.513173][ T670] ? exc_page_fault+0x65/0xc0 [ 36.513189][ T670] ? asm_exc_page_fault+0x2b/0x30 [ 36.513204][ T670] do_futex+0x32a/0x510 [ 36.513220][ T670] ? __cfi_do_futex+0x10/0x10 [ 36.513237][ T670] __se_sys_futex+0x13c/0x320 [ 36.513257][ T670] ? __cfi_do_sock_getsockopt+0x10/0x10 [ 36.513275][ T670] ? __x64_sys_futex+0x110/0x110 [ 36.513294][ T670] ? fput+0x1a4/0x230 [ 36.513310][ T670] __x64_sys_futex+0xe9/0x110 [ 36.513326][ T670] x64_sys_call+0x227f/0x2ee0 [ 36.513338][ T670] do_syscall_64+0x57/0xf0 [ 36.513350][ T670] ? clear_bhb_loop+0x50/0xa0 [ 36.513365][ T670] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 36.513381][ T670] RIP: 0033:0x7f340379e159 [ 36.513394][ T670] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 36.513405][ T670] RSP: 002b:00007f340472c0e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 36.513421][ T670] RAX: ffffffffffffffda RBX: 00007f3403a25fa8 RCX: 00007f340379e159 [ 36.513431][ T670] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007f3403a25fa8 [ 36.513440][ T670] RBP: 00007f3403a25fa0 R08: 0000000000000000 R09: 0000000000000000 [ 36.513449][ T670] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 36.513460][ T670] R13: 00007f3403a26038 R14: 00007ffd63e72790 R15: 00007ffd63e72878 [ 36.513470][ T670] [ 37.047073][ T712] netlink: 96 bytes leftover after parsing attributes in process `syz.3.145'. [ 37.079169][ T718] FAULT_INJECTION: forcing a failure. [ 37.079169][ T718] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 37.092361][ T718] CPU: 1 UID: 0 PID: 718 Comm: syz.1.147 Not tainted syzkaller #0 f6ed0fb9bb938319f6518c785cf37c2d863a58c7 [ 37.092396][ T718] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 37.092410][ T718] Call Trace: [ 37.092416][ T718] [ 37.092424][ T718] __dump_stack+0x21/0x30 [ 37.092461][ T718] dump_stack_lvl+0x140/0x1c0 [ 37.092491][ T718] ? __cfi_dump_stack_lvl+0x10/0x10 [ 37.092523][ T718] dump_stack+0x19/0x20 [ 37.092551][ T718] should_fail_ex+0x3c2/0x510 [ 37.092579][ T718] should_fail+0xf/0x20 [ 37.092603][ T718] should_fail_usercopy+0x1e/0x30 [ 37.092629][ T718] _copy_from_user+0x20/0xa0 [ 37.092659][ T718] do_seccomp+0x3b5/0xf20 [ 37.092686][ T718] ? __se_sys_futex+0x13c/0x320 [ 37.092714][ T718] ? prctl_set_seccomp+0x80/0x80 [ 37.092740][ T718] ? __cfi_ksys_write+0x10/0x10 [ 37.092763][ T718] ? __kasan_check_write+0x18/0x20 [ 37.092784][ T718] ? fpregs_restore_userregs+0x11c/0x260 [ 37.092811][ T718] __x64_sys_seccomp+0x7f/0x90 [ 37.092836][ T718] x64_sys_call+0x249b/0x2ee0 [ 37.092864][ T718] do_syscall_64+0x57/0xf0 [ 37.092884][ T718] ? clear_bhb_loop+0x50/0xa0 [ 37.092910][ T718] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 37.092935][ T718] RIP: 0033:0x7f340379e159 [ 37.092953][ T718] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 37.092972][ T718] RSP: 002b:00007f340472c028 EFLAGS: 00000246 ORIG_RAX: 000000000000013d [ 37.092999][ T718] RAX: ffffffffffffffda RBX: 00007f3403a25fa0 RCX: 00007f340379e159 [ 37.093015][ T718] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 0000000000000001 [ 37.093028][ T718] RBP: 00007f340383506b R08: 0000000000000000 R09: 0000000000000000 [ 37.093042][ T718] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 37.093054][ T718] R13: 00007f3403a26038 R14: 00007f3403a25fa0 R15: 00007ffd63e72878 [ 37.093072][ T718] [ 37.191102][ T724] FAULT_INJECTION: forcing a failure. [ 37.191102][ T724] name fail_page_alloc, interval 1, probability 0, space 0, times 1 [ 37.306610][ T724] CPU: 0 UID: 0 PID: 724 Comm: syz.3.151 Not tainted syzkaller #0 f6ed0fb9bb938319f6518c785cf37c2d863a58c7 [ 37.306646][ T724] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 37.306659][ T724] Call Trace: [ 37.306665][ T724] [ 37.306674][ T724] __dump_stack+0x21/0x30 [ 37.306711][ T724] dump_stack_lvl+0x140/0x1c0 [ 37.306740][ T724] ? __cfi_dump_stack_lvl+0x10/0x10 [ 37.306770][ T724] ? __cfi_cgroup_rstat_updated+0x10/0x10 [ 37.306793][ T724] dump_stack+0x19/0x20 [ 37.306819][ T724] should_fail_ex+0x3c2/0x510 [ 37.306843][ T724] should_fail_alloc_page+0xec/0x110 [ 37.306869][ T724] __alloc_pages_noprof+0x1c0/0x7e0 [ 37.306901][ T724] ? __cfi___alloc_pages_noprof+0x10/0x10 [ 37.306932][ T724] ? folio_add_lru+0x116/0x400 [ 37.306957][ T724] ? __cfi_folio_add_lru+0x10/0x10 [ 37.306983][ T724] __folio_alloc_noprof+0x14/0x80 [ 37.307011][ T724] folio_prealloc+0x46/0x220 [ 37.307037][ T724] do_wp_page+0x187e/0x2e80 [ 37.307061][ T724] ? sched_clock+0x44/0x60 [ 37.307088][ T724] ? __kasan_check_write+0x18/0x20 [ 37.307110][ T724] ? folio_put+0x90/0x90 [ 37.307133][ T724] ? __cfi__raw_spin_lock+0x10/0x10 [ 37.307154][ T724] ? pte_offset_map_rw_nolock+0x236/0x2c0 [ 37.307176][ T724] handle_mm_fault+0x1017/0x1ba0 [ 37.307203][ T724] ? __cfi_handle_mm_fault+0x10/0x10 [ 37.307229][ T724] ? find_vma+0xd3/0x120 [ 37.307252][ T724] ? lock_mm_and_find_vma+0xb8/0x390 [ 37.307280][ T724] do_user_addr_fault+0x4ee/0x1230 [ 37.307302][ T724] exc_page_fault+0x58/0xc0 [ 37.307329][ T724] asm_exc_page_fault+0x2b/0x30 [ 37.307355][ T724] RIP: 0010:rep_movs_alternative+0x4a/0xa0 [ 37.307385][ T724] Code: 75 f1 c3 cc cc cc cc 66 0f 1f 84 00 00 00 00 00 48 8b 06 48 89 07 48 83 c6 08 48 83 c7 08 83 e9 08 74 df 83 f9 08 73 e8 eb c9 a4 e9 3f 6d 03 00 48 8b 06 48 89 07 48 8d 47 08 48 83 e0 f8 48 [ 37.307403][ T724] RSP: 0018:ffffc9000e27f6f8 EFLAGS: 00050206 [ 37.307425][ T724] RAX: ffffffff82ad1701 RBX: ffff8881372200c8 RCX: 000000000000e5d0 [ 37.307453][ T724] RDX: 0000000000000000 RSI: ffff888137221cc8 RDI: 0000200000002000 [ 37.307468][ T724] RBP: ffffc9000e27f848 R08: ffff888137230297 R09: 1ffff11026e46052 [ 37.307485][ T724] R10: dffffc0000000000 R11: ffffed1026e46053 R12: 0000200000000400 [ 37.307502][ T724] R13: 00002000000105d0 R14: 1ffff92001c4ffc7 R15: 00000000000101d0 [ 37.307520][ T724] ? _copy_to_iter+0x161/0x1520 [ 37.307554][ T724] ? _copy_to_iter+0x215/0x1520 [ 37.307584][ T724] ? __cfi__copy_to_iter+0x10/0x10 [ 37.307611][ T724] ? __check_object_size+0x54c/0x870 [ 37.307639][ T724] ? __cfi___check_object_size+0x10/0x10 [ 37.307663][ T724] ? tipc_wait_for_rcvmsg+0x4ad/0x600 [ 37.307690][ T724] __skb_datagram_iter+0x103/0x940 [ 37.307717][ T724] ? tipc_sk_anc_data_recv+0xcf/0x6c0 [ 37.307741][ T724] ? tipc_sk_join+0x9f0/0x9f0 [ 37.307765][ T724] ? __cfi_simple_copy_to_iter+0x10/0x10 [ 37.307794][ T724] skb_copy_datagram_iter+0x44/0x160 [ 37.307822][ T724] tipc_recvstream+0x707/0xe80 [ 37.307848][ T724] ? __cfi_tipc_recvstream+0x10/0x10 [ 37.307872][ T724] sock_recvmsg+0x185/0x1e0 [ 37.307894][ T724] ____sys_recvmsg+0x1e7/0x4a0 [ 37.307923][ T724] ? __sys_recvmsg_sock+0x60/0x60 [ 37.307953][ T724] ? import_iovec+0x80/0xb0 [ 37.307972][ T724] ___sys_recvmsg+0x214/0x590 [ 37.308002][ T724] ? __sys_recvmsg+0x260/0x260 [ 37.308034][ T724] __x64_sys_recvmsg+0x1bb/0x2a0 [ 37.308064][ T724] ? __cfi___x64_sys_recvmsg+0x10/0x10 [ 37.308095][ T724] ? __kasan_check_write+0x18/0x20 [ 37.308117][ T724] ? fpregs_restore_userregs+0x11c/0x260 [ 37.308142][ T724] ? switch_fpu_return+0x12/0x20 [ 37.308168][ T724] x64_sys_call+0xdb5/0x2ee0 [ 37.308188][ T724] do_syscall_64+0x57/0xf0 [ 37.308206][ T724] ? clear_bhb_loop+0x50/0xa0 [ 37.308231][ T724] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 37.308254][ T724] RIP: 0033:0x7fd38d79e159 [ 37.308272][ T724] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 37.308289][ T724] RSP: 002b:00007fd38e57f028 EFLAGS: 00000246 ORIG_RAX: 000000000000002f [ 37.308312][ T724] RAX: ffffffffffffffda RBX: 00007fd38da25fa0 RCX: 00007fd38d79e159 [ 37.308327][ T724] RDX: 0000000000001f00 RSI: 0000200000000500 RDI: 0000000000000004 [ 37.308342][ T724] RBP: 00007fd38d83506b R08: 0000000000000000 R09: 0000000000000000 [ 37.308356][ T724] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 37.308368][ T724] R13: 00007fd38da26038 R14: 00007fd38da25fa0 R15: 00007ffd92741348 [ 37.308385][ T724] [ 37.801859][ T744] can: request_module (can-proto-6) failed. [ 37.817827][ T746] netlink: 12 bytes leftover after parsing attributes in process `syz.0.161'. [ 37.912186][ T765] netlink: 8 bytes leftover after parsing attributes in process `syz.0.169'. [ 38.460844][ T810] SELinux: Context #! ./cgroup/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa [ 38.620860][ T36] kauditd_printk_skb: 50 callbacks suppressed [ 38.620880][ T36] audit: type=1400 audit(1790537599.300:259): avc: denied { read write } for pid=298 comm="syz-executor" name="loop3" dev="devtmpfs" ino=52 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 38.743966][ T36] audit: type=1400 audit(1790537599.300:260): avc: denied { open } for pid=298 comm="syz-executor" path="/dev/loop3" dev="devtmpfs" ino=52 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 38.769625][ T36] audit: type=1400 audit(1790537599.300:261): avc: denied { ioctl } for pid=298 comm="syz-executor" path="/dev/loop3" dev="devtmpfs" ino=52 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 38.808670][ T36] audit: type=1400 audit(1790537599.340:262): avc: denied { create } for pid=827 comm="syz.3.198" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 38.834589][ T36] audit: type=1400 audit(1790537599.340:263): avc: denied { write } for pid=827 comm="syz.3.198" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 38.855875][ T36] audit: type=1400 audit(1790537599.340:264): avc: denied { nlmsg_write } for pid=827 comm="syz.3.198" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 38.909384][ T36] audit: type=1400 audit(1790537599.360:265): avc: denied { create } for pid=829 comm="syz.3.199" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 38.938016][ T36] audit: type=1400 audit(1790537599.360:266): avc: denied { mounton } for pid=829 comm="syz.3.199" path="/71/debug" dev="tmpfs" ino=406 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 38.968117][ T36] audit: type=1400 audit(1790537599.360:267): avc: denied { mount } for pid=829 comm="syz.3.199" name="/" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=filesystem permissive=1 [ 38.984502][ T852] FAULT_INJECTION: forcing a failure. [ 38.984502][ T852] name failslab, interval 1, probability 0, space 0, times 0 [ 38.994655][ T36] audit: type=1400 audit(1790537599.360:268): avc: denied { write } for pid=829 comm="syz.3.199" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 39.015795][ T852] CPU: 1 UID: 0 PID: 852 Comm: syz.1.209 Not tainted syzkaller #0 f6ed0fb9bb938319f6518c785cf37c2d863a58c7 [ 39.015839][ T852] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 39.015852][ T852] Call Trace: [ 39.015859][ T852] [ 39.015866][ T852] __dump_stack+0x21/0x30 [ 39.015901][ T852] dump_stack_lvl+0x140/0x1c0 [ 39.015928][ T852] ? __cfi_dump_stack_lvl+0x10/0x10 [ 39.015957][ T852] dump_stack+0x19/0x20 [ 39.015983][ T852] should_fail_ex+0x3c2/0x510 [ 39.016008][ T852] should_failslab+0xac/0x100 [ 39.016033][ T852] kmem_cache_alloc_noprof+0x42/0x410 [ 39.016055][ T852] ? __kasan_check_write+0x18/0x20 [ 39.016076][ T852] ? posix_lock_inode+0x258/0x4040 [ 39.016099][ T852] posix_lock_inode+0x258/0x4040 [ 39.016121][ T852] ? posix_lock_file+0x70/0x70 [ 39.016141][ T852] ? bpf_lsm_file_lock+0xd/0x20 [ 39.016167][ T852] fcntl_setlk+0x9ca/0x10a0 [ 39.016188][ T852] ? avc_has_perm_noaudit+0x26b/0x360 [ 39.016215][ T852] ? __cfi_fcntl_setlk+0x10/0x10 [ 39.016237][ T852] ? __cfi_avc_has_perm+0x10/0x10 [ 39.016261][ T852] ? __kasan_check_write+0x18/0x20 [ 39.016280][ T852] do_fcntl+0x8c2/0x1580 [ 39.016304][ T852] ? __cfi_selinux_file_fcntl+0x10/0x10 [ 39.016325][ T852] ? check_fcntl_cmd+0xb0/0xb0 [ 39.016350][ T852] ? bpf_lsm_file_fcntl+0xd/0x20 [ 39.016374][ T852] ? security_file_fcntl+0x3e/0x110 [ 39.016395][ T852] __se_sys_fcntl+0xe4/0x180 [ 39.016417][ T852] __x64_sys_fcntl+0x7f/0xa0 [ 39.016439][ T852] x64_sys_call+0x1cb3/0x2ee0 [ 39.016458][ T852] do_syscall_64+0x57/0xf0 [ 39.016477][ T852] ? clear_bhb_loop+0x50/0xa0 [ 39.016502][ T852] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 39.016524][ T852] RIP: 0033:0x7f340379e159 [ 39.016541][ T852] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 39.016557][ T852] RSP: 002b:00007f340472c028 EFLAGS: 00000246 ORIG_RAX: 0000000000000048 [ 39.016579][ T852] RAX: ffffffffffffffda RBX: 00007f3403a25fa0 RCX: 00007f340379e159 [ 39.016594][ T852] RDX: 0000200000000200 RSI: 0000000000000025 RDI: 0000000000000003 [ 39.016607][ T852] RBP: 00007f340383506b R08: 0000000000000000 R09: 0000000000000000 [ 39.016619][ T852] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 39.016632][ T852] R13: 00007f3403a26038 R14: 00007f3403a25fa0 R15: 00007ffd63e72878 [ 39.016649][ T852] [ 39.609528][ T928] netlink: 68 bytes leftover after parsing attributes in process `syz.3.246'. [ 39.618922][ T884] FAULT_INJECTION: forcing a failure. [ 39.618922][ T884] name failslab, interval 1, probability 0, space 0, times 0 [ 39.647773][ T884] CPU: 0 UID: 0 PID: 884 Comm: syz.2.224 Not tainted syzkaller #0 f6ed0fb9bb938319f6518c785cf37c2d863a58c7 [ 39.647812][ T884] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 39.647825][ T884] Call Trace: [ 39.647832][ T884] [ 39.647839][ T884] __dump_stack+0x21/0x30 [ 39.647877][ T884] dump_stack_lvl+0x140/0x1c0 [ 39.647911][ T884] ? __cfi_dump_stack_lvl+0x10/0x10 [ 39.647941][ T884] ? _raw_spin_lock+0x92/0x120 [ 39.647965][ T884] dump_stack+0x19/0x20 [ 39.647993][ T884] should_fail_ex+0x3c2/0x510 [ 39.648020][ T884] should_failslab+0xac/0x100 [ 39.648048][ T884] kmem_cache_alloc_noprof+0x42/0x410 [ 39.648071][ T884] ? __cfi_down_write+0x10/0x10 [ 39.648098][ T884] ? __kernfs_new_node+0xf1/0x740 [ 39.648127][ T884] __kernfs_new_node+0xf1/0x740 [ 39.648153][ T884] ? kernfs_activate+0x1ee/0x200 [ 39.648191][ T884] ? kernfs_new_node+0x280/0x280 [ 39.648220][ T884] ? kernfs_create_dir_ns+0x118/0x130 [ 39.648250][ T884] ? sysfs_create_dir_ns+0x15f/0x210 [ 39.648275][ T884] kernfs_new_node+0x154/0x280 [ 39.648303][ T884] __kernfs_create_file+0x52/0x280 [ 39.648336][ T884] sysfs_add_file_mode_ns+0x1d2/0x280 [ 39.648359][ T884] sysfs_create_file_ns+0x12c/0x1b0 [ 39.648387][ T884] ? __cfi_sysfs_create_file_ns+0x10/0x10 [ 39.648408][ T884] ? __dev_fwnode+0x54/0x90 [ 39.648438][ T884] device_add+0x495/0xbf0 [ 39.648457][ T884] input_register_device+0x9af/0x1080 [ 39.648485][ T884] atkbd_connect+0x6fa/0xa20 [ 39.648509][ T884] ? __cfi_atkbd_connect+0x10/0x10 [ 39.648533][ T884] ? device_release_driver_internal+0x7cc/0x830 [ 39.648555][ T884] drvctl_store+0xe61/0x1210 [ 39.648592][ T884] ? __cfi_drvctl_store+0x10/0x10 [ 39.648618][ T884] dev_attr_store+0x76/0xa0 [ 39.648642][ T884] ? __cfi_dev_attr_store+0x10/0x10 [ 39.648668][ T884] sysfs_kf_write+0x13e/0x160 [ 39.648690][ T884] ? __cfi_sysfs_kf_write+0x10/0x10 [ 39.648712][ T884] kernfs_fop_write_iter+0x316/0x510 [ 39.648746][ T884] vfs_write+0x75f/0xfd0 [ 39.648771][ T884] ? __cfi_vfs_write+0x10/0x10 [ 39.648794][ T884] ? __cfi_mutex_lock+0x10/0x10 [ 39.648822][ T884] ksys_write+0x145/0x260 [ 39.648844][ T884] ? xfd_validate_state+0x68/0x140 [ 39.648872][ T884] ? __cfi_ksys_write+0x10/0x10 [ 39.648895][ T884] ? __kasan_check_write+0x18/0x20 [ 39.648916][ T884] ? fpregs_restore_userregs+0x11c/0x260 [ 39.648940][ T884] __x64_sys_write+0x7f/0x90 [ 39.648962][ T884] x64_sys_call+0x271c/0x2ee0 [ 39.648981][ T884] do_syscall_64+0x57/0xf0 [ 39.648999][ T884] ? clear_bhb_loop+0x50/0xa0 [ 39.649026][ T884] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 39.649052][ T884] RIP: 0033:0x7fd7ee59e159 [ 39.649072][ T884] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 39.649090][ T884] RSP: 002b:00007fd7ef3f4028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 39.649116][ T884] RAX: ffffffffffffffda RBX: 00007fd7ee825fa0 RCX: 00007fd7ee59e159 [ 39.649145][ T884] RDX: 0000000000000005 RSI: 0000200000000200 RDI: 0000000000000004 [ 39.649160][ T884] RBP: 00007fd7ee63506b R08: 0000000000000000 R09: 0000000000000000 [ 39.649175][ T884] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 39.649190][ T884] R13: 00007fd7ee826038 R14: 00007fd7ee825fa0 R15: 00007ffe65216998 [ 39.649210][ T884] [ 39.736021][ T949] usb usb1: usbfs: process 949 (syz.3.256) did not claim interface 0 before use [ 40.099224][ T975] usb usb9: usbfs: process 975 (syz.3.268) did not claim interface 0 before use [ 40.100154][ T977] FAULT_INJECTION: forcing a failure. [ 40.100154][ T977] name failslab, interval 1, probability 0, space 0, times 0 [ 40.129778][ T981] FAULT_INJECTION: forcing a failure. [ 40.129778][ T981] name fail_futex, interval 1, probability 0, space 0, times 0 [ 40.131140][ T977] CPU: 1 UID: 0 PID: 977 Comm: syz.2.269 Not tainted syzkaller #0 f6ed0fb9bb938319f6518c785cf37c2d863a58c7 [ 40.131172][ T977] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 40.131184][ T977] Call Trace: [ 40.131190][ T977] [ 40.131198][ T977] __dump_stack+0x21/0x30 [ 40.131232][ T977] dump_stack_lvl+0x140/0x1c0 [ 40.131261][ T977] ? __cfi_dump_stack_lvl+0x10/0x10 [ 40.131290][ T977] dump_stack+0x19/0x20 [ 40.131316][ T977] should_fail_ex+0x3c2/0x510 [ 40.131342][ T977] should_failslab+0xac/0x100 [ 40.131367][ T977] kmem_cache_alloc_noprof+0x42/0x410 [ 40.131387][ T977] ? key_alloc+0x2ee/0x1060 [ 40.131414][ T977] ? key_user_lookup+0x263/0x4f0 [ 40.131441][ T977] key_alloc+0x2ee/0x1060 [ 40.131469][ T977] keyring_alloc+0x4b/0xc0 [ 40.131488][ T977] call_sbin_request_key+0x330/0xbf0 [ 40.131515][ T977] ? __cfi_call_sbin_request_key+0x10/0x10 [ 40.131541][ T977] ? __cfi_key_instantiate_and_link+0x10/0x10 [ 40.131573][ T977] ? __cfi_request_key_auth_new+0x10/0x10 [ 40.131599][ T977] ? mutex_unlock+0x90/0x240 [ 40.131624][ T977] ? refcount_dec_and_lock+0x29/0xb0 [ 40.131651][ T977] request_key_and_link+0xbb8/0x1230 [ 40.131677][ T977] ? key_task_permission+0x3be/0x500 [ 40.131701][ T977] ? __cfi_request_key_and_link+0x10/0x10 [ 40.131727][ T977] ? downgrade_write+0x470/0x470 [ 40.131756][ T977] ? __cfi_key_default_cmp+0x10/0x10 [ 40.131775][ T977] ? __cfi_keyring_search_iterator+0x10/0x10 [ 40.131796][ T977] __se_sys_request_key+0x29c/0x350 [ 40.131819][ T977] ? __x64_sys_request_key+0xc0/0xc0 [ 40.131841][ T977] ? __kasan_check_write+0x18/0x20 [ 40.131861][ T977] ? fpregs_restore_userregs+0x11c/0x260 [ 40.131894][ T977] __x64_sys_request_key+0x9f/0xc0 [ 40.131916][ T977] x64_sys_call+0x2b60/0x2ee0 [ 40.131934][ T977] do_syscall_64+0x57/0xf0 [ 40.131954][ T977] ? clear_bhb_loop+0x50/0xa0 [ 40.131979][ T977] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 40.132001][ T977] RIP: 0033:0x7fd7ee59e159 [ 40.132018][ T977] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 40.132034][ T977] RSP: 002b:00007fd7ef3f4028 EFLAGS: 00000246 ORIG_RAX: 00000000000000f9 [ 40.132057][ T977] RAX: ffffffffffffffda RBX: 00007fd7ee825fa0 RCX: 00007fd7ee59e159 [ 40.132073][ T977] RDX: 0000200000001fee RSI: 0000200000001ffb RDI: 0000200000000040 [ 40.132087][ T977] RBP: 00007fd7ee63506b R08: 0000000000000000 R09: 0000000000000000 [ 40.132101][ T977] R10: fffffffffffffffe R11: 0000000000000246 R12: 0000000000000000 [ 40.132115][ T977] R13: 00007fd7ee826038 R14: 00007fd7ee825fa0 R15: 00007ffe65216998 [ 40.132132][ T977] [ 40.162533][ T985] raw_sendmsg: syz.3.273 forgot to set AF_INET. Fix it! [ 40.185481][ T981] CPU: 0 UID: 0 PID: 981 Comm: syz.0.271 Not tainted syzkaller #0 f6ed0fb9bb938319f6518c785cf37c2d863a58c7 [ 40.185512][ T981] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 40.185524][ T981] Call Trace: [ 40.185530][ T981] [ 40.185538][ T981] __dump_stack+0x21/0x30 [ 40.185571][ T981] dump_stack_lvl+0x140/0x1c0 [ 40.185599][ T981] ? __cfi_dump_stack_lvl+0x10/0x10 [ 40.185627][ T981] ? stack_depot_save_flags+0x38/0x800 [ 40.185654][ T981] dump_stack+0x19/0x20 [ 40.185681][ T981] should_fail_ex+0x3c2/0x510 [ 40.185705][ T981] should_fail+0xf/0x20 [ 40.185728][ T981] get_futex_key+0x178/0x940 [ 40.185753][ T981] ? entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 40.185777][ T981] ? __cfi_get_futex_key+0x10/0x10 [ 40.185802][ T981] futex_wait_setup+0xae/0x260 [ 40.185820][ T981] ? __asan_memset+0x39/0x50 [ 40.185840][ T981] ? __cfi_futex_wait_setup+0x10/0x10 [ 40.185862][ T981] ? __asan_memcpy+0x5a/0x80 [ 40.185883][ T981] __futex_wait+0x12c/0x3d0 [ 40.185901][ T981] ? __cfi___futex_wait+0x10/0x10 [ 40.185920][ T981] ? __cfi_futex_wake_mark+0x10/0x10 [ 40.185938][ T981] ? __kasan_check_read+0x15/0x20 [ 40.185957][ T981] ? futex_wake+0x627/0x950 [ 40.185975][ T981] futex_wait+0x128/0x7c0 [ 40.185993][ T981] ? __cfi_futex_wait+0x10/0x10 [ 40.186010][ T981] ? selinux_socket_setsockopt+0x324/0x3d0 [ 40.186040][ T981] ? vfs_write+0xbcf/0xfd0 [ 40.186063][ T981] do_futex+0x32a/0x510 [ 40.186087][ T981] ? __cfi_do_futex+0x10/0x10 [ 40.186113][ T981] __se_sys_futex+0x13c/0x320 [ 40.186138][ T981] ? __cfi_do_sock_setsockopt+0x10/0x10 [ 40.186165][ T981] ? __x64_sys_futex+0x110/0x110 [ 40.186190][ T981] ? __kasan_check_write+0x18/0x20 [ 40.186211][ T981] __x64_sys_futex+0xe9/0x110 [ 40.186235][ T981] x64_sys_call+0x227f/0x2ee0 [ 40.186254][ T981] do_syscall_64+0x57/0xf0 [ 40.186272][ T981] ? clear_bhb_loop+0x50/0xa0 [ 40.186296][ T981] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 40.186318][ T981] RIP: 0033:0x7fdc41d9e159 [ 40.186335][ T981] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 40.186351][ T981] RSP: 002b:00007fdc42d240e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 40.186373][ T981] RAX: ffffffffffffffda RBX: 00007fdc42025fa8 RCX: 00007fdc41d9e159 [ 40.186395][ T981] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007fdc42025fa8 [ 40.186408][ T981] RBP: 00007fdc42025fa0 R08: 0000000000000000 R09: 0000000000000000 [ 40.186421][ T981] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 40.186433][ T981] R13: 00007fdc42026038 R14: 00007ffe6726d300 R15: 00007ffe6726d3e8 [ 40.186450][ T981] [ 40.740847][ T994] FAULT_INJECTION: forcing a failure. [ 40.740847][ T994] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 40.754202][ T994] CPU: 1 UID: 0 PID: 994 Comm: syz.1.279 Not tainted syzkaller #0 f6ed0fb9bb938319f6518c785cf37c2d863a58c7 [ 40.754236][ T994] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 40.754248][ T994] Call Trace: [ 40.754257][ T994] [ 40.754266][ T994] __dump_stack+0x21/0x30 [ 40.754304][ T994] dump_stack_lvl+0x140/0x1c0 [ 40.754335][ T994] ? __cfi_dump_stack_lvl+0x10/0x10 [ 40.754365][ T994] ? futex_wait+0x2b8/0x7c0 [ 40.754388][ T994] ? __cfi_futex_wait+0x10/0x10 [ 40.754409][ T994] dump_stack+0x19/0x20 [ 40.754438][ T994] should_fail_ex+0x3c2/0x510 [ 40.754467][ T994] should_fail_alloc_page+0xec/0x110 [ 40.754497][ T994] __alloc_pages_noprof+0x1c0/0x7e0 [ 40.754529][ T994] ? __cfi___alloc_pages_noprof+0x10/0x10 [ 40.754560][ T994] ? mutex_unlock+0x90/0x240 [ 40.754587][ T994] ? __se_sys_futex+0x13c/0x320 [ 40.754617][ T994] get_free_pages_noprof+0x14/0x40 [ 40.754648][ T994] __se_sys_mincore+0x13f/0xba0 [ 40.754678][ T994] ? __kasan_check_write+0x18/0x20 [ 40.754700][ T994] ? fpregs_restore_userregs+0x11c/0x260 [ 40.754728][ T994] __x64_sys_mincore+0x7f/0xa0 [ 40.754756][ T994] x64_sys_call+0x2b24/0x2ee0 [ 40.754776][ T994] do_syscall_64+0x57/0xf0 [ 40.754797][ T994] ? clear_bhb_loop+0x50/0xa0 [ 40.754825][ T994] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 40.754859][ T994] RIP: 0033:0x7f340379e159 [ 40.754878][ T994] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 40.754896][ T994] RSP: 002b:00007f340472c028 EFLAGS: 00000246 ORIG_RAX: 000000000000001b [ 40.754922][ T994] RAX: ffffffffffffffda RBX: 00007f3403a25fa0 RCX: 00007f340379e159 [ 40.754939][ T994] RDX: 0000000000000000 RSI: 0000000000004000 RDI: 0000200000ffa000 [ 40.754954][ T994] RBP: 00007f340383506b R08: 0000000000000000 R09: 0000000000000000 [ 40.754969][ T994] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 40.754983][ T994] R13: 00007f3403a26038 R14: 00007f3403a25fa0 R15: 00007ffd63e72878 [ 40.755001][ T994] [ 41.143027][ T1022] netlink: 20 bytes leftover after parsing attributes in process `syz.3.291'. [ 41.287264][ T1051] netlink: 16 bytes leftover after parsing attributes in process `syz.1.303'. [ 41.869377][ T1117] FAULT_INJECTION: forcing a failure. [ 41.869377][ T1117] name failslab, interval 1, probability 0, space 0, times 0 [ 41.882111][ T1117] CPU: 0 UID: 0 PID: 1117 Comm: syz.3.334 Not tainted syzkaller #0 f6ed0fb9bb938319f6518c785cf37c2d863a58c7 [ 41.882147][ T1117] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 41.882159][ T1117] Call Trace: [ 41.882167][ T1117] [ 41.882176][ T1117] __dump_stack+0x21/0x30 [ 41.882200][ T1117] dump_stack_lvl+0x140/0x1c0 [ 41.882219][ T1117] ? __cfi_dump_stack_lvl+0x10/0x10 [ 41.882237][ T1117] dump_stack+0x19/0x20 [ 41.882254][ T1117] should_fail_ex+0x3c2/0x510 [ 41.882270][ T1117] should_failslab+0xac/0x100 [ 41.882287][ T1117] kmem_cache_alloc_lru_noprof+0x44/0x410 [ 41.882303][ T1117] ? unwind_get_return_address+0x51/0x90 [ 41.882319][ T1117] ? __d_alloc+0x42/0x8c0 [ 41.882331][ T1117] __d_alloc+0x42/0x8c0 [ 41.882343][ T1117] ? number+0xc9d/0xf00 [ 41.882354][ T1117] d_alloc_parallel+0xe4/0x1370 [ 41.882371][ T1117] ? avc_has_perm_noaudit+0x26b/0x360 [ 41.882387][ T1117] ? __asan_memcpy+0x5a/0x80 [ 41.882401][ T1117] ? selinux_inode_permission+0x3f2/0x5d0 [ 41.882413][ T1117] ? __cfi_d_alloc_parallel+0x10/0x10 [ 41.882426][ T1117] ? __cfi_selinux_inode_permission+0x10/0x10 [ 41.882438][ T1117] ? pointer+0x8bd/0xe10 [ 41.882449][ T1117] ? make_vfsuid+0x4d/0xa0 [ 41.882461][ T1117] ? generic_permission+0x1ec/0x590 [ 41.882476][ T1117] __lookup_slow+0x150/0x420 [ 41.882490][ T1117] ? __d_lookup+0x4e8/0x550 [ 41.882504][ T1117] ? lookup_one_len+0x300/0x300 [ 41.882520][ T1117] ? lookup_one_common+0x320/0x470 [ 41.882536][ T1117] lookup_one_len+0x1a1/0x300 [ 41.882551][ T1117] ? __kasan_check_write+0x18/0x20 [ 41.882565][ T1117] ? __cfi_lookup_one_len+0x10/0x10 [ 41.882581][ T1117] ? simple_pin_fs+0x9c/0x160 [ 41.882598][ T1117] start_creating+0x173/0x310 [ 41.882616][ T1117] ? debugfs_create_dir+0x20/0x470 [ 41.882629][ T1117] debugfs_create_dir+0x2b/0x470 [ 41.882643][ T1117] ptp_open+0x336/0x530 [ 41.882655][ T1117] ? __cfi_ptp_open+0x10/0x10 [ 41.882666][ T1117] ? __kmalloc_cache_noprof+0x23c/0x470 [ 41.882680][ T1117] ? posix_clock_open+0xc9/0x2e0 [ 41.882692][ T1117] posix_clock_open+0x151/0x2e0 [ 41.882704][ T1117] ? selinux_file_open+0x46c/0x630 [ 41.882717][ T1117] chrdev_open+0x4e8/0x610 [ 41.882731][ T1117] ? __cfi_chrdev_open+0x10/0x10 [ 41.882745][ T1117] ? bpf_lsm_file_open+0xd/0x20 [ 41.882761][ T1117] ? __cfi_chrdev_open+0x10/0x10 [ 41.882774][ T1117] do_dentry_open+0x97f/0x1510 [ 41.882792][ T1117] vfs_open+0x86/0x240 [ 41.882808][ T1117] ? __cfi_vfs_open+0x10/0x10 [ 41.882824][ T1117] ? may_open+0x352/0x430 [ 41.882840][ T1117] path_openat+0x2c49/0x35a0 [ 41.882866][ T1117] ? kasan_save_alloc_info+0x3a/0x50 [ 41.882878][ T1117] ? getname+0x1b/0x30 [ 41.882891][ T1117] ? x64_sys_call+0xe69/0x2ee0 [ 41.882903][ T1117] ? do_syscall_64+0x57/0xf0 [ 41.882916][ T1117] ? do_filp_open+0x440/0x440 [ 41.882937][ T1117] do_filp_open+0x1f2/0x440 [ 41.882954][ T1117] ? __cfi_do_filp_open+0x10/0x10 [ 41.882973][ T1117] ? alloc_fd+0x4c1/0x570 [ 41.882989][ T1117] do_sys_openat2+0x134/0x1d0 [ 41.883007][ T1117] ? do_sys_open+0x100/0x100 [ 41.883026][ T1117] __x64_sys_openat+0x13a/0x170 [ 41.883045][ T1117] x64_sys_call+0xe69/0x2ee0 [ 41.883056][ T1117] do_syscall_64+0x57/0xf0 [ 41.883069][ T1117] ? clear_bhb_loop+0x50/0xa0 [ 41.883085][ T1117] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 41.883102][ T1117] RIP: 0033:0x7fd38d79e159 [ 41.883115][ T1117] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 41.883126][ T1117] RSP: 002b:00007fd38e57f028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 41.883141][ T1117] RAX: ffffffffffffffda RBX: 00007fd38da25fa0 RCX: 00007fd38d79e159 [ 41.883151][ T1117] RDX: 0000000000000481 RSI: 0000200000000140 RDI: ffffffffffffff9c [ 41.883160][ T1117] RBP: 00007fd38d83506b R08: 0000000000000000 R09: 0000000000000000 [ 41.883168][ T1117] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 41.883176][ T1117] R13: 00007fd38da26038 R14: 00007fd38da25fa0 R15: 00007ffd92741348 [ 41.883186][ T1117] [ 42.523840][ T1162] FAULT_INJECTION: forcing a failure. [ 42.523840][ T1162] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 42.537466][ T1162] CPU: 0 UID: 0 PID: 1162 Comm: syz.3.356 Not tainted syzkaller #0 f6ed0fb9bb938319f6518c785cf37c2d863a58c7 [ 42.537506][ T1162] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 42.537530][ T1162] Call Trace: [ 42.537538][ T1162] [ 42.537547][ T1162] __dump_stack+0x21/0x30 [ 42.537585][ T1162] dump_stack_lvl+0x140/0x1c0 [ 42.537615][ T1162] ? __cfi_dump_stack_lvl+0x10/0x10 [ 42.537645][ T1162] ? get_page_from_freelist+0x4aea/0x4ba0 [ 42.537678][ T1162] ? mas_wr_store_entry+0x2559/0x3120 [ 42.537705][ T1162] dump_stack+0x19/0x20 [ 42.537731][ T1162] should_fail_ex+0x3c2/0x510 [ 42.537757][ T1162] should_fail_alloc_page+0xec/0x110 [ 42.537784][ T1162] __alloc_pages_noprof+0x1c0/0x7e0 [ 42.537814][ T1162] ? __cfi___alloc_pages_noprof+0x10/0x10 [ 42.537846][ T1162] ? __alloc_pages_noprof+0x7e0/0x7e0 [ 42.537875][ T1162] ? gfp_to_alloc_flags_cma+0x96/0x1c0 [ 42.537904][ T1162] pte_alloc_one+0x92/0x530 [ 42.537926][ T1162] ? __cfi_pte_alloc_one+0x10/0x10 [ 42.537950][ T1162] ? __alloc_pages_noprof+0x35a/0x7e0 [ 42.537980][ T1162] ? vma_data_pages+0x105/0x140 [ 42.538003][ T1162] do_pte_missing+0x22a6/0x4440 [ 42.538031][ T1162] ? pte_marker_clear+0x1b0/0x1b0 [ 42.538056][ T1162] ? __thp_vma_allowable_orders+0x820/0x9a0 [ 42.538084][ T1162] ? __cfi___pmd_alloc+0x10/0x10 [ 42.538108][ T1162] ? update_curr+0xf1/0x9c0 [ 42.538129][ T1162] ? __cfi___thp_vma_allowable_orders+0x10/0x10 [ 42.538158][ T1162] handle_mm_fault+0x1189/0x1ba0 [ 42.538186][ T1162] ? __cfi_handle_mm_fault+0x10/0x10 [ 42.538212][ T1162] ? find_vma+0xd3/0x120 [ 42.538236][ T1162] ? lock_mm_and_find_vma+0xb8/0x390 [ 42.538262][ T1162] do_user_addr_fault+0x4ee/0x1230 [ 42.538285][ T1162] exc_page_fault+0x58/0xc0 [ 42.538313][ T1162] asm_exc_page_fault+0x2b/0x30 [ 42.538339][ T1162] RIP: 0010:rep_movs_alternative+0x13/0xa0 [ 42.538371][ T1162] Code: cc cc cc cc cc cc cc 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 48 83 f9 40 73 40 83 f9 08 73 21 85 c9 74 0f <8a> 06 88 07 48 ff c7 48 ff c6 48 ff c9 75 f1 c3 cc cc cc cc 66 0f [ 42.538390][ T1162] RSP: 0018:ffffc9000fbb7a90 EFLAGS: 00050202 [ 42.538413][ T1162] RAX: 00007ffffffff001 RBX: 0000000000000004 RCX: 0000000000000004 [ 42.538428][ T1162] RDX: 0000000000000001 RSI: 0000000000000000 RDI: ffffc9000fbb7bd0 [ 42.538441][ T1162] RBP: ffffc9000fbb7ab0 R08: 0000000000000003 R09: 0000000000000004 [ 42.538455][ T1162] R10: dffffc0000000000 R11: fffff52001f76f7a R12: 0000000000000000 [ 42.538470][ T1162] R13: dffffc0000000000 R14: ffffc9000fbb7bd0 R15: 0000000000000000 [ 42.538488][ T1162] ? _copy_from_user+0x6d/0xa0 [ 42.538530][ T1162] dev_ethtool+0xc1/0x19d0 [ 42.538563][ T1162] ? __cfi___request_module+0x10/0x10 [ 42.538594][ T1162] ? __cfi_dev_ethtool+0x10/0x10 [ 42.538624][ T1162] ? ioctl_has_perm+0x39a/0x500 [ 42.538647][ T1162] ? bpf_lsm_capable+0xd/0x20 [ 42.538676][ T1162] ? security_capable+0x44/0x130 [ 42.538702][ T1162] dev_ioctl+0x390/0x1000 [ 42.538729][ T1162] sock_do_ioctl+0x249/0x330 [ 42.538751][ T1162] ? sock_show_fdinfo+0xd0/0xd0 [ 42.538772][ T1162] ? errseq_sample+0x48/0x70 [ 42.538802][ T1162] ? file_init_path+0x434/0x590 [ 42.538830][ T1162] ? __cfi_do_futex+0x10/0x10 [ 42.538858][ T1162] sock_ioctl+0x568/0x7e0 [ 42.538880][ T1162] ? __cfi_sock_ioctl+0x10/0x10 [ 42.538902][ T1162] ? xfd_validate_state+0x68/0x140 [ 42.538932][ T1162] ? bpf_lsm_file_ioctl+0xd/0x20 [ 42.538960][ T1162] ? security_file_ioctl+0x3e/0x110 [ 42.538982][ T1162] ? __cfi_sock_ioctl+0x10/0x10 [ 42.539003][ T1162] __se_sys_ioctl+0x123/0x1b0 [ 42.539029][ T1162] __x64_sys_ioctl+0x7f/0xa0 [ 42.539056][ T1162] x64_sys_call+0x1878/0x2ee0 [ 42.539078][ T1162] do_syscall_64+0x57/0xf0 [ 42.539097][ T1162] ? clear_bhb_loop+0x50/0xa0 [ 42.539123][ T1162] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 42.539148][ T1162] RIP: 0033:0x7fd38d79e159 [ 42.539167][ T1162] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 42.539183][ T1162] RSP: 002b:00007fd38e57f028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 42.539207][ T1162] RAX: ffffffffffffffda RBX: 00007fd38da25fa0 RCX: 00007fd38d79e159 [ 42.539222][ T1162] RDX: 00002000000000c0 RSI: 0000000000008946 RDI: 0000000000000004 [ 42.539236][ T1162] RBP: 00007fd38d83506b R08: 0000000000000000 R09: 0000000000000000 [ 42.539250][ T1162] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 42.539264][ T1162] R13: 00007fd38da26038 R14: 00007fd38da25fa0 R15: 00007ffd92741348 [ 42.539282][ T1162] [ 43.011883][ T1175] FAULT_INJECTION: forcing a failure. [ 43.011883][ T1175] name failslab, interval 1, probability 0, space 0, times 0 [ 43.045100][ T1175] CPU: 1 UID: 0 PID: 1175 Comm: syz.1.358 Not tainted syzkaller #0 f6ed0fb9bb938319f6518c785cf37c2d863a58c7 [ 43.045137][ T1175] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 43.045151][ T1175] Call Trace: [ 43.045159][ T1175] [ 43.045168][ T1175] __dump_stack+0x21/0x30 [ 43.045204][ T1175] dump_stack_lvl+0x140/0x1c0 [ 43.045234][ T1175] ? __cfi_dump_stack_lvl+0x10/0x10 [ 43.045265][ T1175] dump_stack+0x19/0x20 [ 43.045293][ T1175] should_fail_ex+0x3c2/0x510 [ 43.045320][ T1175] should_failslab+0xac/0x100 [ 43.045346][ T1175] __kmalloc_node_track_caller_noprof+0x65/0x4f0 [ 43.045370][ T1175] ? key_alloc+0x338/0x1060 [ 43.045400][ T1175] ? kmem_cache_alloc_noprof+0x1e2/0x410 [ 43.045422][ T1175] kmemdup_noprof+0x31/0x80 [ 43.045442][ T1175] key_alloc+0x338/0x1060 [ 43.045473][ T1175] keyring_alloc+0x4b/0xc0 [ 43.045495][ T1175] lookup_user_key+0x485/0x1230 [ 43.045525][ T1175] ? __cfi_lookup_user_key+0x10/0x10 [ 43.045553][ T1175] ? __cfi_lookup_user_key_possessed+0x10/0x10 [ 43.045584][ T1175] ? memdup_user+0xb1/0x170 [ 43.045603][ T1175] ? strndup_user+0x40/0xd0 [ 43.045623][ T1175] __se_sys_add_key+0x317/0x4b0 [ 43.045647][ T1175] ? __x64_sys_add_key+0xf0/0xf0 [ 43.045671][ T1175] ? __kasan_check_write+0x18/0x20 [ 43.045692][ T1175] ? fpregs_restore_userregs+0x11c/0x260 [ 43.045719][ T1175] __x64_sys_add_key+0xc3/0xf0 [ 43.045742][ T1175] x64_sys_call+0x195f/0x2ee0 [ 43.045759][ T1175] do_syscall_64+0x57/0xf0 [ 43.045780][ T1175] ? clear_bhb_loop+0x50/0xa0 [ 43.045808][ T1175] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 43.045833][ T1175] RIP: 0033:0x7f340379e159 [ 43.045852][ T1175] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 43.045870][ T1175] RSP: 002b:00007f340472c028 EFLAGS: 00000246 ORIG_RAX: 00000000000000f8 [ 43.045895][ T1175] RAX: ffffffffffffffda RBX: 00007f3403a25fa0 RCX: 00007f340379e159 [ 43.045911][ T1175] RDX: 0000000000000000 RSI: 0000200000000040 RDI: 0000200000000000 [ 43.045937][ T1175] RBP: 00007f340383506b R08: ffffffffffffffff R09: 0000000000000000 [ 43.045952][ T1175] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 43.045965][ T1175] R13: 00007f3403a26038 R14: 00007f3403a25fa0 R15: 00007ffd63e72878 [ 43.045983][ T1175] [ 43.106063][ T1186] netlink: 80 bytes leftover after parsing attributes in process `syz.2.369'. [ 43.345394][ T1196] FAULT_INJECTION: forcing a failure. [ 43.345394][ T1196] name failslab, interval 1, probability 0, space 0, times 0 [ 43.359906][ T1196] CPU: 0 UID: 0 PID: 1196 Comm: syz.1.372 Not tainted syzkaller #0 f6ed0fb9bb938319f6518c785cf37c2d863a58c7 [ 43.359944][ T1196] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 43.359957][ T1196] Call Trace: [ 43.359965][ T1196] [ 43.359973][ T1196] __dump_stack+0x21/0x30 [ 43.360009][ T1196] dump_stack_lvl+0x140/0x1c0 [ 43.360038][ T1196] ? __cfi_dump_stack_lvl+0x10/0x10 [ 43.360068][ T1196] ? kernel_text_address+0xa9/0xe0 [ 43.360096][ T1196] ? unwind_get_return_address+0x51/0x90 [ 43.360123][ T1196] dump_stack+0x19/0x20 [ 43.360150][ T1196] should_fail_ex+0x3c2/0x510 [ 43.360176][ T1196] should_failslab+0xac/0x100 [ 43.360202][ T1196] __kmalloc_cache_noprof+0x41/0x470 [ 43.360225][ T1196] ? igmpv3_add_delrec+0xc7/0x650 [ 43.360251][ T1196] ? __kasan_check_write+0x18/0x20 [ 43.360270][ T1196] ? _raw_spin_lock_bh+0x96/0x130 [ 43.360303][ T1196] igmpv3_add_delrec+0xc7/0x650 [ 43.360329][ T1196] __igmp_group_dropped+0x678/0x880 [ 43.360355][ T1196] ? __kasan_check_write+0x18/0x20 [ 43.360377][ T1196] ? __ip_mc_dec_group+0x660/0x660 [ 43.360403][ T1196] ? __kasan_check_read+0x15/0x20 [ 43.360424][ T1196] __ip_mc_dec_group+0x2c3/0x660 [ 43.360450][ T1196] ip_mc_leave_group+0x4bf/0x5f0 [ 43.360477][ T1196] ip_mc_msfilter+0x49f/0xbd0 [ 43.360503][ T1196] ? __cfi_ip_mc_msfilter+0x10/0x10 [ 43.360529][ T1196] ? __kasan_check_write+0x18/0x20 [ 43.360551][ T1196] do_ip_setsockopt+0x2a89/0x2af0 [ 43.360581][ T1196] ? __cfi_do_ip_setsockopt+0x10/0x10 [ 43.360611][ T1196] ? selinux_socket_setsockopt+0x324/0x3d0 [ 43.360640][ T1196] ? __cfi_selinux_socket_setsockopt+0x10/0x10 [ 43.360670][ T1196] ? vfs_write+0xbcf/0xfd0 [ 43.360692][ T1196] ip_setsockopt+0x63/0x100 [ 43.360711][ T1196] udp_setsockopt+0xa3/0xc0 [ 43.360741][ T1196] sock_common_setsockopt+0xb8/0xd0 [ 43.360762][ T1196] ? __cfi_sock_common_setsockopt+0x10/0x10 [ 43.360784][ T1196] do_sock_setsockopt+0x27c/0x410 [ 43.360812][ T1196] ? __cfi_do_sock_setsockopt+0x10/0x10 [ 43.360840][ T1196] ? __fget_files+0x2bc/0x330 [ 43.360867][ T1196] __x64_sys_setsockopt+0x18c/0x220 [ 43.360895][ T1196] x64_sys_call+0x2adc/0x2ee0 [ 43.360915][ T1196] do_syscall_64+0x57/0xf0 [ 43.360935][ T1196] ? clear_bhb_loop+0x50/0xa0 [ 43.360970][ T1196] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 43.360996][ T1196] RIP: 0033:0x7f340379e159 [ 43.361016][ T1196] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 43.361033][ T1196] RSP: 002b:00007f340472c028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 43.361058][ T1196] RAX: ffffffffffffffda RBX: 00007f3403a25fa0 RCX: 00007f340379e159 [ 43.361075][ T1196] RDX: 0000000000000029 RSI: 0000000000000000 RDI: 0000000000000003 [ 43.361089][ T1196] RBP: 00007f340383506b R08: 0000000000000057 R09: 0000000000000000 [ 43.361103][ T1196] R10: 0000200000000040 R11: 0000000000000246 R12: 0000000000000000 [ 43.361115][ T1196] R13: 00007f3403a26038 R14: 00007f3403a25fa0 R15: 00007ffd63e72878 [ 43.361133][ T1196] [ 43.424790][ T1202] netlink: 'syz.0.375': attribute type 12 has an invalid length. [ 43.766782][ T36] kauditd_printk_skb: 95 callbacks suppressed [ 43.766801][ T36] audit: type=1400 audit(1790537604.440:364): avc: denied { create } for pid=1210 comm="syz.2.380" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 43.822887][ T36] audit: type=1400 audit(1790537604.500:365): avc: denied { create } for pid=1222 comm="syz.0.385" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 43.909168][ T36] audit: type=1400 audit(1790537604.590:366): avc: denied { name_bind } for pid=1234 comm="syz.1.391" src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=udp_socket permissive=1 [ 43.933331][ T1242] FAULT_INJECTION: forcing a failure. [ 43.933331][ T1242] name failslab, interval 1, probability 0, space 0, times 0 [ 43.946252][ T1242] CPU: 0 UID: 0 PID: 1242 Comm: syz.0.390 Not tainted syzkaller #0 f6ed0fb9bb938319f6518c785cf37c2d863a58c7 [ 43.946292][ T1242] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 43.946305][ T1242] Call Trace: [ 43.946312][ T1242] [ 43.946321][ T1242] __dump_stack+0x21/0x30 [ 43.946358][ T1242] dump_stack_lvl+0x140/0x1c0 [ 43.946388][ T1242] ? __cfi_dump_stack_lvl+0x10/0x10 [ 43.946430][ T1242] ? _raw_spin_lock_irqsave+0xc1/0x160 [ 43.946453][ T1242] ? __cfi__raw_spin_lock_irqsave+0x10/0x10 [ 43.946476][ T1242] dump_stack+0x19/0x20 [ 43.946505][ T1242] should_fail_ex+0x3c2/0x510 [ 43.946535][ T1242] should_failslab+0xac/0x100 [ 43.946561][ T1242] kmem_cache_alloc_lru_noprof+0x44/0x410 [ 43.946587][ T1242] ? __d_alloc+0x42/0x8c0 [ 43.946609][ T1242] ? expand_files+0xda/0x6f0 [ 43.946638][ T1242] __d_alloc+0x42/0x8c0 [ 43.946658][ T1242] d_alloc_pseudo+0x23/0xc0 [ 43.946680][ T1242] alloc_file_pseudo+0xde/0x1f0 [ 43.946710][ T1242] ? __cfi_alloc_file_pseudo+0x10/0x10 [ 43.946739][ T1242] ? _raw_spin_unlock+0x45/0x60 [ 43.946761][ T1242] sock_alloc_file+0xbe/0x2b0 [ 43.946784][ T1242] __sys_socket+0x14c/0x1c0 [ 43.946808][ T1242] __x64_sys_socket+0x7e/0x90 [ 43.946831][ T1242] x64_sys_call+0x2608/0x2ee0 [ 43.946851][ T1242] do_syscall_64+0x57/0xf0 [ 43.946871][ T1242] ? clear_bhb_loop+0x50/0xa0 [ 43.946897][ T1242] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 43.946922][ T1242] RIP: 0033:0x7fdc41d9e159 [ 43.946940][ T1242] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 43.946958][ T1242] RSP: 002b:00007fdc42d24028 EFLAGS: 00000246 ORIG_RAX: 0000000000000029 [ 43.946983][ T1242] RAX: ffffffffffffffda RBX: 00007fdc42025fa0 RCX: 00007fdc41d9e159 [ 43.947000][ T1242] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 000000000000000a [ 43.947015][ T1242] RBP: 00007fdc41e3506b R08: 0000000000000000 R09: 0000000000000000 [ 43.947029][ T1242] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 43.947042][ T1242] R13: 00007fdc42026038 R14: 00007fdc42025fa0 R15: 00007ffe6726d3e8 [ 43.947060][ T1242] [ 43.965634][ T36] audit: type=1400 audit(1790537604.610:367): avc: denied { write } for pid=1238 comm="syz.3.393" name="ppp" dev="devtmpfs" ino=86 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 44.108214][ T66] kernel write not supported for file /287/attr/keycreate (pid: 66 comm: kworker/0:2) [ 44.115142][ T36] audit: type=1400 audit(1790537604.660:368): avc: denied { block_suspend } for pid=1245 comm="syz.3.394" capability=36 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 44.221133][ T36] audit: type=1400 audit(1790537604.780:369): avc: denied { mount } for pid=1253 comm="syz.1.400" name="/" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=filesystem permissive=1 [ 44.264596][ T36] audit: type=1400 audit(1790537604.780:370): avc: denied { search } for pid=1253 comm="syz.1.400" name="/" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=dir permissive=1 [ 44.296107][ T36] audit: type=1400 audit(1790537604.780:371): avc: denied { read } for pid=1253 comm="syz.1.400" name="trace_pipe_raw" dev="tracefs" ino=1112 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=file permissive=1 [ 44.366188][ T36] audit: type=1400 audit(1790537604.780:372): avc: denied { open } for pid=1253 comm="syz.1.400" path="/126/tracing/per_cpu/cpu0/trace_pipe_raw" dev="tracefs" ino=1112 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=file permissive=1 [ 44.396394][ T36] audit: type=1400 audit(1790537604.830:373): avc: denied { unmount } for pid=293 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=filesystem permissive=1 [ 44.418099][ T1282] netlink: 'syz.1.413': attribute type 32 has an invalid length. [ 44.567945][ T446] usb 1-1: new high-speed USB device number 10 using dummy_hcd [ 44.714131][ T1302] tap0: tun_chr_ioctl cmd 35108 [ 44.719437][ T446] usb 1-1: Using ep0 maxpacket: 8 [ 44.727187][ T446] usb 1-1: unable to get BOS descriptor or descriptor too short [ 44.738027][ T446] usb 1-1: config 1 interface 0 altsetting 9 endpoint 0x81 has an invalid bInterval 22, changing to 8 [ 44.757979][ T446] usb 1-1: config 1 interface 0 has no altsetting 0 [ 44.769207][ T446] usb 1-1: New USB device found, idVendor=06cb, idProduct=73f5, bcdDevice= 0.40 [ 44.787979][ T446] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 44.802647][ T446] usb 1-1: Product: syz [ 44.810177][ T446] usb 1-1: Manufacturer: syz [ 44.817964][ T446] usb 1-1: SerialNumber: syz [ 45.274637][ T446] usbhid 1-1:1.0: can't add hid device: -71 [ 45.282925][ T446] usbhid 1-1:1.0: probe with driver usbhid failed with error -71 [ 45.311239][ T446] usb 1-1: USB disconnect, device number 10 [ 45.783524][ T1385] netlink: 32 bytes leftover after parsing attributes in process `syz.0.462'. [ 45.924027][ T1407] netlink: 104 bytes leftover after parsing attributes in process `syz.0.473'. [ 46.411483][ T1444] syz.2.488 uses obsolete (PF_INET,SOCK_PACKET) [ 46.578283][ T1455] netlink: 16 bytes leftover after parsing attributes in process `syz.2.493'. [ 46.625143][ T1459] netlink: 12 bytes leftover after parsing attributes in process `syz.2.495'. [ 46.883022][ T1483] FAULT_INJECTION: forcing a failure. [ 46.883022][ T1483] name failslab, interval 1, probability 0, space 0, times 0 [ 46.896320][ T1483] CPU: 1 UID: 0 PID: 1483 Comm: syz.2.507 Not tainted syzkaller #0 f6ed0fb9bb938319f6518c785cf37c2d863a58c7 [ 46.896359][ T1483] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 46.896374][ T1483] Call Trace: [ 46.896381][ T1483] [ 46.896389][ T1483] __dump_stack+0x21/0x30 [ 46.896426][ T1483] dump_stack_lvl+0x140/0x1c0 [ 46.896458][ T1483] ? __cfi_dump_stack_lvl+0x10/0x10 [ 46.896492][ T1483] dump_stack+0x19/0x20 [ 46.896522][ T1483] should_fail_ex+0x3c2/0x510 [ 46.896553][ T1483] ? bitmap_alloc+0x37/0xc0 [ 46.896577][ T1483] should_failslab+0xac/0x100 [ 46.896607][ T1483] __kmalloc_noprof+0x69/0x510 [ 46.896631][ T1483] ? __kasan_kmalloc+0x96/0xb0 [ 46.896659][ T1483] ? bitmap_alloc+0x37/0xc0 [ 46.896682][ T1483] ? __kmalloc_cache_noprof+0x23c/0x470 [ 46.896707][ T1483] bitmap_alloc+0x37/0xc0 [ 46.896732][ T1483] ptp_open+0x114/0x530 [ 46.896754][ T1483] ? __cfi_ptp_open+0x10/0x10 [ 46.896774][ T1483] ? __kmalloc_cache_noprof+0x23c/0x470 [ 46.896799][ T1483] ? posix_clock_open+0xc9/0x2e0 [ 46.896822][ T1483] posix_clock_open+0x151/0x2e0 [ 46.896841][ T1483] ? selinux_file_open+0x46c/0x630 [ 46.896866][ T1483] chrdev_open+0x4e8/0x610 [ 46.896917][ T1483] ? __cfi_chrdev_open+0x10/0x10 [ 46.896944][ T1483] ? bpf_lsm_file_open+0xd/0x20 [ 46.896975][ T1483] ? __cfi_chrdev_open+0x10/0x10 [ 46.897001][ T1483] do_dentry_open+0x97f/0x1510 [ 46.897036][ T1483] vfs_open+0x86/0x240 [ 46.897066][ T1483] ? __cfi_vfs_open+0x10/0x10 [ 46.897097][ T1483] ? may_open+0x352/0x430 [ 46.897130][ T1483] path_openat+0x2c49/0x35a0 [ 46.897161][ T1483] ? schedule+0xc5/0x240 [ 46.897188][ T1483] ? kasan_save_alloc_info+0x3a/0x50 [ 46.897210][ T1483] ? getname+0x1b/0x30 [ 46.897235][ T1483] ? x64_sys_call+0xe69/0x2ee0 [ 46.897256][ T1483] ? do_syscall_64+0x57/0xf0 [ 46.897279][ T1483] ? do_filp_open+0x440/0x440 [ 46.897317][ T1483] do_filp_open+0x1f2/0x440 [ 46.897347][ T1483] ? __cfi_do_filp_open+0x10/0x10 [ 46.897380][ T1483] ? alloc_fd+0x4c1/0x570 [ 46.897406][ T1483] do_sys_openat2+0x134/0x1d0 [ 46.897438][ T1483] ? do_sys_open+0x100/0x100 [ 46.897472][ T1483] __x64_sys_openat+0x13a/0x170 [ 46.897505][ T1483] x64_sys_call+0xe69/0x2ee0 [ 46.897526][ T1483] do_syscall_64+0x57/0xf0 [ 46.897546][ T1483] ? clear_bhb_loop+0x50/0xa0 [ 46.897575][ T1483] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 46.897603][ T1483] RIP: 0033:0x7fd7ee59e159 [ 46.897622][ T1483] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 46.897640][ T1483] RSP: 002b:00007fd7ef3f4028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 46.897665][ T1483] RAX: ffffffffffffffda RBX: 00007fd7ee825fa0 RCX: 00007fd7ee59e159 [ 46.897682][ T1483] RDX: 0000000000000481 RSI: 0000200000000140 RDI: ffffffffffffff9c [ 46.897698][ T1483] RBP: 00007fd7ee63506b R08: 0000000000000000 R09: 0000000000000000 [ 46.897713][ T1483] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 46.897727][ T1483] R13: 00007fd7ee826038 R14: 00007fd7ee825fa0 R15: 00007ffe65216998 [ 46.897746][ T1483] [ 47.302965][ T1501] ------------[ cut here ]------------ [ 47.308646][ T1501] WARNING: CPU: 1 PID: 1501 at mm/page_alloc.c:5286 __alloc_pages_noprof+0x109/0x7e0 [ 47.318370][ T1501] Modules linked in: [ 47.322374][ T1501] CPU: 1 UID: 0 PID: 1501 Comm: syz.1.515 Not tainted syzkaller #0 f6ed0fb9bb938319f6518c785cf37c2d863a58c7 [ 47.334052][ T1501] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 47.344267][ T1501] RIP: 0010:__alloc_pages_noprof+0x109/0x7e0 [ 47.350552][ T1501] Code: 00 0f 1f 44 00 00 83 fb 0b 72 28 b8 00 20 00 00 23 44 24 40 75 1d 80 3d f5 d6 0b 06 00 0f 85 c2 00 00 00 c6 05 e8 d6 0b 06 01 <0f> 0b 31 c0 e9 b4 00 00 00 83 fb 0a 0f 87 a9 00 00 00 44 8b 64 24 [ 47.370405][ T1501] RSP: 0018:ffffc9000f02f8c0 EFLAGS: 00010246 [ 47.376512][ T1501] RAX: 0000000000000000 RBX: 0000000000000013 RCX: 0000000000000000 [ 47.384779][ T1501] RDX: 0000000000000000 RSI: 0000000000000000 RDI: ffffc9000f02f978 [ 47.392923][ T1501] RBP: ffffc9000f02f9f0 R08: ffffc9000f02f977 R09: 0000000000000000 [ 47.400950][ T1501] R10: ffffc9000f02f960 R11: fffff52001e05f2f R12: ffffc9000f02f900 [ 47.408961][ T1501] R13: dffffc0000000000 R14: 1ffff92001e05f1c R15: 0000000000000000 [ 47.416946][ T1501] FS: 00007f340472c6c0(0000) GS:ffff8881f6f00000(0000) knlGS:0000000000000000 [ 47.425907][ T1501] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 47.432559][ T1501] CR2: 00007fd7ef358060 CR3: 0000000116c7a000 CR4: 00000000003526b0 [ 47.440560][ T1501] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 000000000000e3e4 [ 47.448564][ T1501] DR3: 0000000000000000 DR6: 00000000ffff0ff0 DR7: 0000000000000400 [ 47.456536][ T1501] Call Trace: [ 47.459899][ T1501] [ 47.462852][ T1501] ? __cfi___alloc_pages_noprof+0x10/0x10 [ 47.468649][ T1501] ? plist_add+0x4d4/0x570 [ 47.473105][ T1501] ? __futex_queue+0x19f/0x350 [ 47.477937][ T1501] ___kmalloc_large_node+0x81/0x220 [ 47.483155][ T1501] __kmalloc_large_node_noprof+0x1e/0xd0 [ 47.488936][ T1501] __kmalloc_node_track_caller_noprof+0x30d/0x4f0 [ 47.495378][ T1501] ? bitmap_parse_user+0x29/0x80 [ 47.500344][ T1501] memdup_user_nul+0x40/0x1a0 [ 47.505037][ T1501] ? bitmap_parse_user+0x1f/0x80 [ 47.510086][ T1501] bitmap_parse_user+0x29/0x80 [ 47.514862][ T1501] irq_affinity_proc_write+0x139/0x230 [ 47.520347][ T1501] ? __cfi_irq_affinity_proc_write+0x10/0x10 [ 47.526355][ T1501] ? futex_wait+0x2b8/0x7c0 [ 47.530892][ T1501] ? __cfi_irq_affinity_proc_write+0x10/0x10 [ 47.536912][ T1501] proc_reg_write+0x1fa/0x2f0 [ 47.541652][ T1501] ? __cfi_proc_reg_write+0x10/0x10 [ 47.546894][ T1501] vfs_write+0x3c1/0xfd0 [ 47.551199][ T1501] ? __cfi_vfs_write+0x10/0x10 [ 47.556056][ T1501] ? __kasan_check_write+0x18/0x20 [ 47.561262][ T1501] ? mutex_lock+0x97/0x1d0 [ 47.566032][ T1501] ? __cfi_mutex_lock+0x10/0x10 [ 47.571006][ T1501] ksys_write+0x145/0x260 [ 47.575396][ T1501] ? xfd_validate_state+0x68/0x140 [ 47.580891][ T1501] ? __cfi_ksys_write+0x10/0x10 [ 47.584772][ T1506] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input7 [ 47.585762][ T1501] ? __kasan_check_write+0x18/0x20 [ 47.585794][ T1501] ? fpregs_restore_userregs+0x11c/0x260 [ 47.606166][ T1501] __x64_sys_write+0x7f/0x90 [ 47.610846][ T1501] x64_sys_call+0x271c/0x2ee0 [ 47.615559][ T1501] do_syscall_64+0x57/0xf0 [ 47.620051][ T1501] ? clear_bhb_loop+0x50/0xa0 [ 47.624787][ T1501] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 47.630750][ T1501] RIP: 0033:0x7f340379e159 [ 47.635182][ T1501] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 47.654915][ T1501] RSP: 002b:00007f340472c028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 47.663389][ T1501] RAX: ffffffffffffffda RBX: 00007f3403a25fa0 RCX: 00007f340379e159 [ 47.671403][ T1501] RDX: 00000000fffffffb RSI: 0000000000000000 RDI: 0000000000000003 [ 47.679452][ T1501] RBP: 00007f340383506b R08: 0000000000000000 R09: 0000000000000000 [ 47.687446][ T1501] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 47.695444][ T1501] R13: 00007f3403a26038 R14: 00007f3403a25fa0 R15: 00007ffd63e72878 [ 47.703475][ T1501] [ 47.706607][ T1501] ---[ end trace 0000000000000000 ]---