last executing test programs: 8.062347251s ago: executing program 0 (id=887): r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000680)=@nat={'nat\x00', 0x670, 0x5, 0x358, 0x288, 0x0, 0xffffffff, 0x288, 0x330, 0x410, 0x410, 0xffffffff, 0x410, 0x160, 0x5, 0x0, {[{{@uncond, 0x0, 0x70, 0xb8, 0x48}, @unspec=@SNAT1={0x48, 'SNAT\x00', 0x1, {0x12, @ipv4=@initdev={0xac, 0x1e, 0x0, 0x0}, @ipv6=@rand_addr=' \x01\x00', @port=0x4e21, @icmp_id=0x68}}}, {{@uncond, 0x0, 0x70, 0xa8}, @SNAT0={0x38, 'SNAT\x00', 0x0, {0x1, {0x26, @dev={0xac, 0x14, 0x14, 0x42}, @dev={0xac, 0x14, 0x14, 0x1c}, @port=0x4e24, @port=0x4e24}}}}, {{@ip={@local, @remote, 0xff, 0x0, 'virt_wifi0\x00', 'batadv_slave_1\x00', {}, {}, 0x0, 0x3}, 0x0, 0x70, 0xa8}, @MASQUERADE={0x38, 'MASQUERADE\x00', 0x0, {0x1, {0x2, @local, @empty, @icmp_id=0x68, @port=0x4e22}}}}, {{@uncond, 0x0, 0x70, 0xb8}, @unspec=@SNAT1={0x48, 'SNAT\x00', 0x1, {0x2, @ipv4=@broadcast, @ipv4=@empty, @gre_key=0x3, @icmp_id=0x64}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x3b8) 7.064318569s ago: executing program 0 (id=893): r0 = socket$packet(0x11, 0x3, 0x300) r1 = fsopen(&(0x7f0000000980)='autofs\x00', 0x0) fsconfig$FSCONFIG_SET_FD(r1, 0x5, &(0x7f00000009c0)='fd', 0x0, r0) 6.949606413s ago: executing program 0 (id=896): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r0) openat$fault_inject(0xffffffffffffff9c, &(0x7f00000002c0)='/sys/kernel/debug/fail_iommufd/times\x00', 0x1, 0x0) r1 = socket(0x2, 0x80805, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r2 = getpgrp(0x0) sched_setaffinity(r2, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000000)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r4 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r4, 0x1, 0x0) r5 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r5, &(0x7f0000019680)=""/102392, 0x18ff8) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) sendmmsg$inet(r1, &(0x7f0000000440)=[{{0x0, 0x0, 0x0}}, {{&(0x7f0000000740)={0x2, 0x0, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10, 0x0}}], 0x2, 0x0) setsockopt$sock_int(r1, 0x1, 0x7, &(0x7f0000000000), 0x4) mkdirat(0xffffffffffffff9c, 0x0, 0x0) socket$inet6(0xa, 0x5, 0x4) mount(0x0, 0x0, 0x0, 0x1214040, 0x0) r6 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r6, 0x0, 0x0, 0x0, &(0x7f0000000580), 0x0, 0x4fd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x50) chroot(&(0x7f0000000100)='./file0\x00') setns(0xc9, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./mnt\x00', 0x1ff) mount$nfs4(0x0, &(0x7f00000000c0)='./mnt\x00', &(0x7f0000000100), 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="616464723d3132d22e30323034"]) mount$bind(&(0x7f0000000280)='.\x00', 0x0, 0x0, 0x3b09007, 0x0) 6.146829445s ago: executing program 0 (id=900): r0 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f00000002c0)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x93bdb000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000400)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000440)=@file={0x0, './file1\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f00000004c0), 0x651, 0x0) recvmmsg(r2, &(0x7f0000000500), 0x10106, 0x2, 0x0) sendto$inet6(0xffffffffffffffff, &(0x7f0000000600)='X', 0x34000, 0x0, &(0x7f0000000640)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000000)=0x50a2, 0x4) 3.552028562s ago: executing program 3 (id=919): socket$inet_udp(0x2, 0x2, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x8002) ioctl$SG_GET_VERSION_NUM(r0, 0x2282, &(0x7f0000000040)) 3.322187244s ago: executing program 3 (id=921): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000400)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x4000000) sendmsg$NFT_BATCH(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000500)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x2}}, [@NFT_MSG_NEWRULE={0x8d, 0x6, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x1}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_RULE_EXPRESSIONS={0x5c, 0x4, 0x0, 0x1, [{0x58, 0x1, 0x0, 0x1, @target={{0xb}, @val={0x48, 0x2, 0x0, 0x1, [@NFTA_TARGET_INFO={0x2c, 0x3, "9ac420002e2eafb9fdd672bad09dfb78c7699c74e891a0c700"/40}, @NFTA_TARGET_REV={0x8}, @NFTA_TARGET_NAME={0xe, 0x1, 'IDLETIMER\x00'}]}}}]}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0xb0}, 0x1, 0x0, 0x0, 0x4000850}, 0x20040040) 3.136320203s ago: executing program 3 (id=927): prlimit64(0x0, 0xe, &(0x7f00000000c0)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000200)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000080)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xd6d1c000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000015980)=""/102392, 0x18ff8) sched_setaffinity(r2, 0x47, &(0x7f000002e980)=0x7) r4 = userfaultfd(0x80001) ioctl$UFFDIO_API(r4, 0xc018aa3f, &(0x7f0000000000)={0xaa, 0x3a9}) ioctl$UFFDIO_REGISTER(r4, 0xc020aa00, &(0x7f0000000040)={{&(0x7f0000000000/0x400000)=nil, 0x400000}, 0x1}) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x18) close(r4) 2.068650195s ago: executing program 3 (id=931): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000300), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000340)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000400)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x3}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_START_AP(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000780)={0x8c, r1, 0x5, 0x0, 0x3, {{}, {@val={0x8, 0x3, r2}, @void}}, [@beacon=[@NL80211_ATTR_BEACON_HEAD={0x4d, 0xe, {{{}, {}, @device_a, @device_a, @from_mac=@device_b}, 0x0, @random=0xc9e, 0x1, @void, @void, @val={0x3, 0x1, 0x68}, @void, @val={0x6, 0x2, 0x8}, @val={0x5, 0x3, {0x2, 0x8e, 0xa2}}, @void, @void, @void, @void, @val={0x72, 0x6}, @val={0x71, 0x7, {0xffffffffffffffff, 0xffffffffffffffff, 0x1, 0x0, 0x1, 0x7, 0x48}}, @val={0x76, 0x6, {0x0, 0x6, 0x3f, 0x101}}}}, @NL80211_ATTR_BEACON_TAIL={0x7, 0xf, [@erp={0x2a, 0x1, {0x1, 0x1}}]}], @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}], @NL80211_ATTR_BEACON_INTERVAL={0x8}, @NL80211_ATTR_DTIM_PERIOD={0x8}]}, 0x8c}}, 0x39db77225c63fa4c) 845.98783ms ago: executing program 4 (id=937): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_RTOINFO(r0, 0x84, 0x0, &(0x7f0000000180)={0x0, 0x4, 0xffffffff}, 0x10) 668.227458ms ago: executing program 4 (id=939): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="23000000b200000002000000ffff000005"], 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000b80)={0x0, 0x0, 0x0, &(0x7f0000000c00), 0x7ff, r0}, 0x38) bpf$MAP_LOOKUP_BATCH(0x19, &(0x7f0000000c00)={0x0, 0x0, 0x0, 0x0, 0x6c, r0}, 0x38) 566.211569ms ago: executing program 2 (id=941): r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000019c0), 0xc0041, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000001a00)={'syzkaller1\x00', 0xc201}) r1 = socket$netlink(0x10, 0x3, 0x0) bind$netlink(r1, &(0x7f0000000100)={0x10, 0x0, 0x25dfdbfe, 0x2ffffffff}, 0xc) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x3, 0x8, &(0x7f0000000400)=ANY=[@ANYBLOB="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"], &(0x7f0000001480)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x48) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$unix(0x1, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000001640)={'syzkaller1\x00', 0x0}) sendmsg$nl_route_sched(r3, 0x0, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000001740)={0x0, 0x0, &(0x7f0000001780)={&(0x7f0000001880)=@newtfilter={0x44, 0x2c, 0x601, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {0xb, 0xfff7}, {0xfff1, 0xffff}, {0x300}}, [@filter_kind_options=@f_bpf={{0x8}, {0x18, 0x2, [@TCA_BPF_FD={0x8, 0x6, r2}, @TCA_BPF_NAME={0xc, 0x7, './file0\x00'}]}}]}, 0x44}}, 0x0) 514.479762ms ago: executing program 4 (id=943): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000480)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x401, 0x0, 0x0, {0x1, 0x0, 0x8003}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x101, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}]}, @NFT_MSG_NEWRULE={0x28, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1, 0x0, 0x4}, [@NFTA_RULE_CHAIN_ID={0x8, 0xb, 0x1, 0x0, 0x3}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x5}}}, 0x9c}}, 0x0) 350.289295ms ago: executing program 1 (id=945): r0 = syz_open_dev$vivid(&(0x7f00000001c0), 0x3, 0x2) ioctl$VIDIOC_QBUF(r0, 0xc058560f, &(0x7f0000000200)=@multiplanar_overlay={0x2, 0x9, 0x4, 0x20, 0x4, {0x77359400}, {0x1, 0x1, 0x40, 0xe0, 0x75, 0x4, "6172ed23"}, 0x3, 0x3, {&(0x7f0000000280)=[{0x3, 0xa2, {0x7}, 0x1}, {0xe2, 0x2, {0x1}, 0x8}]}, 0x3}) 349.892614ms ago: executing program 4 (id=946): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3) bind$bt_l2cap(r1, &(0x7f0000000040)={0x1f, 0x0, @none}, 0xe) bind$bt_l2cap(r0, &(0x7f0000000080)={0x1f, 0x0, @none}, 0xe) 349.740805ms ago: executing program 1 (id=947): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="230000000800000002000000ffff000005"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000001d80)={0x1, 0x8, &(0x7f0000001e40)=@framed={{}, [@map_fd={0x18, 0x1, 0x1, 0x0, r0}, @generic={0xbf, 0x2, 0xa}, @generic={0x7, 0x2, 0x0, 0x0, 0xfffffff8}, @generic={0x85, 0x0, 0x0, 0x0, 0x1}]}, &(0x7f0000001e80)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000001ec0)={r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000001, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 324.227772ms ago: executing program 3 (id=948): bpf$MAP_CREATE(0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="0a000000080000000200000004"], 0x50) bpf$MAP_CREATE(0x0, &(0x7f0000000040)=ANY=[], 0x50) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x14, &(0x7f0000000140)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007000000018110000", @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000280)={r0}, 0xc) 294.79984ms ago: executing program 1 (id=949): r0 = socket$rxrpc(0x21, 0x2, 0x2) bind$rxrpc(r0, &(0x7f00000001c0)=@in4={0x21, 0x1, 0x2, 0x10, {0x2, 0x1234, @loopback}}, 0x24) sendmsg(r0, &(0x7f0000000200)={&(0x7f0000000240)=@rxrpc=@in4={0x21, 0x1, 0x2, 0x10, {0x2, 0x1234, @loopback}}, 0x80, 0x0, 0x0, &(0x7f00000002c0)=[{0x18, 0x110, 0x1, 'd'}], 0x18}, 0x0) sendmsg(r0, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000340)=[{0x18, 0x110, 0x1, 'd'}], 0x18}, 0x0) 290.362391ms ago: executing program 2 (id=950): close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = syz_open_procfs$namespace(0x0, &(0x7f0000000380)='ns/pid_for_children\x00') ioctl$BTRFS_IOC_ENCODED_WRITE(r0, 0x8004b707, 0x0) 234.217552ms ago: executing program 0 (id=951): syz_open_dev$loop(&(0x7f0000000000), 0x0, 0x319100) r0 = syz_open_dev$ttys(0xc, 0x2, 0x0) ioctl$TIOCVHANGUP(r0, 0x5437, 0x0) r1 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/rt6_stats\x00') mount$9p_fd(0x0, &(0x7f0000000100)='./cgroup\x00', &(0x7f0000000140), 0x8401, &(0x7f0000000180)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r0}}) openat$khugepaged_scan(0xffffffffffffff9c, 0x0, 0x1, 0x0) r2 = syz_io_uring_setup(0x5015, &(0x7f0000000200)={0x0, 0xf2d6, 0xc00, 0x5, 0x4e}, &(0x7f00000002c0)=0x0, &(0x7f0000000300)=0x0, &(0x7f0000000340)=0x0) syz_io_uring_submit(r3, r4, r5, &(0x7f0000000380)=@IORING_OP_WRITE={0x17, 0x0, 0x6000, @fd_index=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x14, 0x0, {0x0, 0x0, 0x0, '\x00', 0x0}}) io_uring_enter(r2, 0x1, 0x1, 0x1, 0x0, 0x0) 233.975902ms ago: executing program 1 (id=952): ioctl$SNDCTL_SEQ_NRMIDIS(0xffffffffffffffff, 0xc0046d00, &(0x7f0000009f80)) 223.512748ms ago: executing program 4 (id=953): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="23000000b200000002000000ffff000005"], 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000b80)={0x0, 0x0, &(0x7f0000000bc0), 0x0, 0x7ff, r0}, 0x38) bpf$MAP_LOOKUP_BATCH(0x19, &(0x7f0000000c00)={0x0, 0x0, 0x0, 0x0, 0x6c, r0}, 0x38) 186.740916ms ago: executing program 2 (id=954): r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f00000010c0)={0x6, 0x10, &(0x7f0000001180)=ANY=[@ANYBLOB="b7010000000000007b1af8ff000000007b1af0ff000000007b1ae8ff000000007b1ae0ff000000007b1ad8ff00000000b701000050000000731af8ff00000000bfa100000000000007010000d8ffffffbfa200000000000007020000ecffffffb70300001400000085000000cd000000b70000000200000095"], &(0x7f0000001200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000001240)={r0, 0x2000000, 0x0, 0x0, 0x0, 0x0, 0x7ffd, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 114.145237ms ago: executing program 1 (id=955): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000740)={0x11, 0x3, &(0x7f0000000600)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2c}, 0x94) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000580)={r0, 0xe0, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001440)={r0, 0xe0, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000640)={0x6, 0x0, 0x0, &(0x7f0000000200)='syzkaller\x00', 0x1, 0x0, 0x0, 0x41000, 0x40, '\x00', r1}, 0x94) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000b40)=[{&(0x7f0000000100)={0x30, 0x10, 0x1, 0x0, 0x0, "", [@typed={0x8, 0x0, 0x0, 0x0, @fd=r2}, @typed={0x8, 0x0, 0x0, 0x0, @fd}, @nested={0x10, 0x2b, 0x0, 0x1, [@typed={0xc, 0x1, 0x0, 0x0, @u64=0x4}]}]}, 0x30}], 0x1, 0x0, 0x0, 0x8000}, 0x20000000) 113.773379ms ago: executing program 3 (id=956): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./sys\x00', &(0x7f0000001400)='sysfs\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000001440)='./sys/bus/usb/devices/usb5/bConfigurationValue\x00', 0x1, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') readv(r0, &(0x7f0000002480)=[{&(0x7f0000000100)=""/4096, 0x1000}], 0x1) 113.529225ms ago: executing program 0 (id=957): capset(&(0x7f00000000c0)={0x20080522}, &(0x7f0000000100)={0x200004, 0x200004, 0x3}) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0xa, 0x6, &(0x7f0000000380)=@framed={{0x5, 0x0, 0x0, 0x0, 0x0, 0x73, 0x11, 0x37}, [@func={0x85, 0x0, 0x1, 0x0, 0x2}, @call={0x85, 0x0, 0x0, 0x5}, @exit], {0x95, 0x0, 0x5a5}}, &(0x7f00000003c0)='GPL\x00', 0x5, 0x29e, &(0x7f0000000700)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x70) 98.461083ms ago: executing program 2 (id=958): r0 = openat$comedi(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$COMEDI_DEVCONFIG(r0, 0x40946400, &(0x7f0000000280)={'pcl812\x00', [0x300, 0x7, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2f00, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc]}) 47.952964ms ago: executing program 2 (id=959): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="230000000800000002000000ffff000005"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000001d80)={0x1, 0x8, &(0x7f0000001e40)=@framed={{}, [@map_fd={0x18, 0x1, 0x1, 0x0, r0}, @generic={0xbf, 0x2, 0xa}, @generic={0x7, 0x2, 0x0, 0x0, 0xfffffff8}, @generic={0x85, 0x0, 0x0, 0x0, 0x1}]}, &(0x7f0000001e80)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000001ec0)={r1, 0x0, 0x0, 0x0, &(0x7f0000001f40), 0x0, 0x4000001, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 41.485957ms ago: executing program 1 (id=960): ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f0000000800)={{0x1, 0x1, 0x18}, './file0\x00'}) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000640), 0x2, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000680)={'syzkaller1\x00', 0x5001}) ioctl$TUNSETVNETHDRSZ(r0, 0x400454d8, &(0x7f00000006c0)=0xc) r1 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000700)={'syzkaller1\x00', 0x0}) ioctl$sock_inet6_SIOCSIFADDR(r1, 0x8916, &(0x7f0000000740)={@dev={0xfe, 0x80, '\x00', 0x2}, 0x40, r2}) write$tun(r0, &(0x7f00000007c0)=ANY=[@ANYBLOB="0105300007002800060000006000000000308440fe800000000000000000300000000001fe800000000000000000000000000002"], 0x64) 762.786µs ago: executing program 2 (id=961): r0 = openat$dm_control(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) ioctl$DM_DEV_CREATE(r0, 0xc138fd03, &(0x7f00000003c0)={0x4, 0x0, 0x0, 0x138, 0x138, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, {'syz', 0x0, '2\x00'}}}) ioctl$BTRFS_IOC_SCRUB_CANCEL(r0, 0x941c, 0x0) ioctl$DM_TABLE_LOAD(r0, 0xc138fd09, &(0x7f0000000500)={0x4, 0x0, 0x0, 0x1b8, 0x138, 0x1, 0x0, 0x80000, 0x0, 0x0, @by_dev={r1}, [@snapshot={0x0, 0x440, 0x0, 0x80, 'snapshot\x00', {@ram_num={'1:', 0x0}, 0x20, @ram={'/dev/ram', 0x0}, 0x20, 'N', 0x20, '32', ' 2 discard_zeroes_cow discard_passdown_origin'}}]}) 0s ago: executing program 4 (id=962): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./config\x00', 0x1ff) mount(0x0, &(0x7f0000000100)='./config\x00', &(0x7f0000000180)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x1ff) r0 = openat(0xffffffffffffff9c, &(0x7f0000000540)='./config/nvmet/ports/1/addr_trtype\x00', 0x1, 0x0) write(r0, &(0x7f0000000580)='fc', 0x2) kernel console output (not intermixed with test programs): 9 > 2 [ 64.983185][ T30] audit: type=1400 audit(1792960650.812:153): avc: denied { sys_module } for pid=5630 comm="syz-executor" capability=16 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 65.415392][ T5626] rxe_eth0 speed is unknown, defaulting to 1000 [ 65.416095][ T5626] rxe_eth0 speed is unknown, defaulting to 1000 [ 65.419088][ T5626] rxe_eth0 speed is unknown, defaulting to 1000 [ 65.592659][ T5638] rdma_rxe: rxe_newlink: failed to add rxe_eth0 [ 65.607759][ T5621] rdma_rxe: rxe_newlink: failed to add rxe_eth0 [ 65.720107][ T5630] rdma_rxe: rxe_newlink: failed to add rxe_eth0 [ 65.727618][ T5620] rdma_rxe: rxe_newlink: failed to add rxe_eth0 [ 65.802762][ T5626] infiniband rxe0: set active [ 65.804687][ T5626] infiniband rxe0: added rxe_eth0 [ 65.824261][ T1315] ieee802154 phy0 wpan0: encryption failed: -22 [ 65.824316][ T1315] ieee802154 phy1 wpan1: encryption failed: -22 [ 65.828133][ T10] rxe_eth0 speed is unknown, defaulting to 1000 [ 65.828731][ T5626] smbdirect: ib_dev[rxe0]: added: IB_CA max_fast_reg_page_list_len=512 device_cap_flags=0x1c001223c76 kernel_cap_flags=0x14 page_size_cap=0xfffff000 [ 65.828759][ T5626] smbdirect: ib_dev[rxe0]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=32 max_cqe=32767 max_qp_wr=1048576 max_send_sge=32 max_recv_sge=32 [ 65.828794][ T5626] smbdirect: ib_dev[rxe0]PORT[1]: iwarp=0 ib=0 roce=1 v1=0 v2=1 core_cap_flags=0x803005 [ 65.892233][ T5626] RDS/IB: rxe0: added [ 65.892423][ T5626] smc: adding ib device rxe0 with port count 1 [ 65.892473][ T5626] smc: ib device rxe0 port 1 has no pnetid [ 65.903320][ T5630] rxe_eth0 speed is unknown, defaulting to 1000 [ 65.903983][ T3215] rxe_eth0 speed is unknown, defaulting to 1000 [ 66.108985][ T5626] rxe_eth0 speed is unknown, defaulting to 1000 [ 66.331116][ T5626] rxe_eth0 speed is unknown, defaulting to 1000 [ 66.358567][ T5638] bridge0: port 1(bridge_slave_0) entered blocking state [ 66.360013][ T5638] bridge0: port 1(bridge_slave_0) entered disabled state [ 66.360327][ T5638] bridge_slave_0: entered allmulticast mode [ 66.361628][ T5638] bridge_slave_0: entered promiscuous mode [ 66.364381][ T5638] bridge0: port 2(bridge_slave_1) entered blocking state [ 66.364444][ T5638] bridge0: port 2(bridge_slave_1) entered disabled state [ 66.364521][ T5638] bridge_slave_1: entered allmulticast mode [ 66.365627][ T5638] bridge_slave_1: entered promiscuous mode [ 66.392494][ T5638] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 66.454408][ T5638] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 66.515330][ T5638] team0: Port device team_slave_0 added [ 66.541949][ T5620] bridge0: port 1(bridge_slave_0) entered blocking state [ 66.542029][ T5620] bridge0: port 1(bridge_slave_0) entered disabled state [ 66.542124][ T5620] bridge_slave_0: entered allmulticast mode [ 66.543634][ T5620] bridge_slave_0: entered promiscuous mode [ 66.558631][ T5620] bridge0: port 2(bridge_slave_1) entered blocking state [ 66.558705][ T5620] bridge0: port 2(bridge_slave_1) entered disabled state [ 66.558955][ T5620] bridge_slave_1: entered allmulticast mode [ 66.560029][ T5620] bridge_slave_1: entered promiscuous mode [ 66.563402][ T5638] team0: Port device team_slave_1 added [ 66.571357][ T5621] bridge0: port 1(bridge_slave_0) entered blocking state [ 66.571420][ T5621] bridge0: port 1(bridge_slave_0) entered disabled state [ 66.571733][ T5621] bridge_slave_0: entered allmulticast mode [ 66.572798][ T5621] bridge_slave_0: entered promiscuous mode [ 66.574887][ T5621] bridge0: port 2(bridge_slave_1) entered blocking state [ 66.574957][ T5621] bridge0: port 2(bridge_slave_1) entered disabled state [ 66.575193][ T5621] bridge_slave_1: entered allmulticast mode [ 66.576252][ T5621] bridge_slave_1: entered promiscuous mode [ 66.624658][ T5626] rxe_eth0 speed is unknown, defaulting to 1000 [ 66.670807][ T5638] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 66.670821][ T5638] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 66.670841][ T5638] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 66.734321][ T5620] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 66.734830][ T5638] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 66.734840][ T5638] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 66.734861][ T5638] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 66.747213][ T5621] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 66.753348][ T5621] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 66.775126][ T5620] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 66.784532][ T4943] Bluetooth: hci2: command tx timeout [ 66.784533][ T53] Bluetooth: hci1: command tx timeout [ 66.816680][ T5620] team0: Port device team_slave_0 added [ 66.848612][ T5620] team0: Port device team_slave_1 added [ 66.861722][ T53] Bluetooth: hci4: command tx timeout [ 66.861740][ T4943] Bluetooth: hci0: command tx timeout [ 66.861871][ T53] Bluetooth: hci3: command tx timeout [ 66.865696][ T5638] hsr_slave_0: entered promiscuous mode [ 66.866437][ T5638] hsr_slave_1: entered promiscuous mode [ 66.904326][ T5621] team0: Port device team_slave_0 added [ 66.919630][ T5626] rxe_eth0 speed is unknown, defaulting to 1000 [ 66.925856][ T5621] team0: Port device team_slave_1 added [ 66.926524][ T5620] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 66.926533][ T5620] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 66.926550][ T5620] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 66.973137][ T5620] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 66.973149][ T5620] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 66.973167][ T5620] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 67.027603][ T5621] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 67.027616][ T5621] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 67.027637][ T5621] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 67.089766][ T5621] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 67.089779][ T5621] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 67.089799][ T5621] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 67.141002][ T5620] hsr_slave_0: entered promiscuous mode [ 67.142091][ T5620] hsr_slave_1: entered promiscuous mode [ 67.142631][ T5620] debugfs: 'hsr0' already exists in 'hsr' [ 67.142679][ T5620] Cannot create hsr debugfs directory [ 67.233766][ T5621] hsr_slave_0: entered promiscuous mode [ 67.234464][ T5621] hsr_slave_1: entered promiscuous mode [ 67.234746][ T5621] debugfs: 'hsr0' already exists in 'hsr' [ 67.234762][ T5621] Cannot create hsr debugfs directory [ 67.304755][ T5630] bridge0: port 1(bridge_slave_0) entered blocking state [ 67.304864][ T5630] bridge0: port 1(bridge_slave_0) entered disabled state [ 67.305125][ T5630] bridge_slave_0: entered allmulticast mode [ 67.306033][ T5630] bridge_slave_0: entered promiscuous mode [ 67.340327][ T5630] bridge0: port 2(bridge_slave_1) entered blocking state [ 67.340665][ T5630] bridge0: port 2(bridge_slave_1) entered disabled state [ 67.340753][ T5630] bridge_slave_1: entered allmulticast mode [ 67.341913][ T5630] bridge_slave_1: entered promiscuous mode [ 67.404121][ T5630] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 67.422166][ T5630] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 67.467352][ T5630] team0: Port device team_slave_0 added [ 67.487009][ T5630] team0: Port device team_slave_1 added [ 67.546391][ T5630] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 67.546404][ T5630] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 67.546420][ T5630] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 67.576219][ T5630] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 67.576231][ T5630] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 67.576248][ T5630] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 67.584015][ T5638] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 67.591067][ T5638] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 67.622574][ T5638] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 67.634861][ T5638] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 67.635415][ T5638] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 67.645791][ T5638] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 67.673211][ T5638] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 67.678640][ T5638] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 67.695678][ T5630] hsr_slave_0: entered promiscuous mode [ 67.699293][ T5630] hsr_slave_1: entered promiscuous mode [ 67.699730][ T5630] debugfs: 'hsr0' already exists in 'hsr' [ 67.699744][ T5630] Cannot create hsr debugfs directory [ 67.814381][ T5620] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 67.816377][ T5620] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 67.816839][ T5620] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 67.818960][ T5620] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 67.819430][ T5620] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 67.824840][ T5620] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 67.869840][ T5620] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 67.879132][ T5620] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 67.911935][ T5626] bridge0: port 1(bridge_slave_0) entered blocking state [ 67.912060][ T5626] bridge0: port 1(bridge_slave_0) entered disabled state [ 67.912154][ T5626] bridge_slave_0: entered allmulticast mode [ 67.912940][ T5626] bridge_slave_0: entered promiscuous mode [ 67.914401][ T5626] bridge0: port 2(bridge_slave_1) entered blocking state [ 67.914464][ T5626] bridge0: port 2(bridge_slave_1) entered disabled state [ 67.914706][ T5626] bridge_slave_1: entered allmulticast mode [ 67.915685][ T5626] bridge_slave_1: entered promiscuous mode [ 67.964671][ T5626] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 67.983569][ T5626] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 68.007067][ T5626] team0: Port device team_slave_0 added [ 68.020849][ T5626] team0: Port device team_slave_1 added [ 68.034856][ T5621] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 68.037236][ T5621] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 68.037696][ T5621] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 68.040719][ T5621] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 68.056014][ T5621] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 68.059859][ T5621] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 68.061212][ T5626] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 68.061222][ T5626] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 68.061239][ T5626] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 68.073343][ T5621] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 68.079517][ T5621] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 68.145754][ T5626] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 68.145769][ T5626] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 68.145788][ T5626] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 68.222924][ T5626] hsr_slave_0: entered promiscuous mode [ 68.223374][ T5626] hsr_slave_1: entered promiscuous mode [ 68.223657][ T5626] debugfs: 'hsr0' already exists in 'hsr' [ 68.223672][ T5626] Cannot create hsr debugfs directory [ 68.307133][ T5638] 8021q: adding VLAN 0 to HW filter on device bond0 [ 68.308274][ T5630] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 68.310460][ T5630] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 68.310997][ T5630] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 68.314695][ T5630] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 68.333501][ T5630] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 68.342101][ T5630] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 68.342610][ T5630] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 68.348346][ T5630] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 68.401047][ T5638] 8021q: adding VLAN 0 to HW filter on device team0 [ 68.415156][ T4217] bridge0: port 1(bridge_slave_0) entered blocking state [ 68.415258][ T4217] bridge0: port 1(bridge_slave_0) entered forwarding state [ 68.455325][ T608] bridge0: port 2(bridge_slave_1) entered blocking state [ 68.455377][ T608] bridge0: port 2(bridge_slave_1) entered forwarding state [ 68.503254][ T5626] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 68.505154][ T5626] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 68.505676][ T5626] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 68.507846][ T5626] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 68.508740][ T5626] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 68.511044][ T5626] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 68.518673][ T5620] 8021q: adding VLAN 0 to HW filter on device bond0 [ 68.544035][ T5638] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 68.544050][ T5638] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 68.555686][ T5626] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 68.597070][ T5626] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 68.646099][ T5620] 8021q: adding VLAN 0 to HW filter on device team0 [ 68.667289][ T62] bridge0: port 1(bridge_slave_0) entered blocking state [ 68.667353][ T62] bridge0: port 1(bridge_slave_0) entered forwarding state [ 68.669243][ T62] bridge0: port 2(bridge_slave_1) entered blocking state [ 68.669316][ T62] bridge0: port 2(bridge_slave_1) entered forwarding state [ 68.687284][ T5630] 8021q: adding VLAN 0 to HW filter on device bond0 [ 68.690233][ T5621] 8021q: adding VLAN 0 to HW filter on device bond0 [ 68.754237][ T5621] 8021q: adding VLAN 0 to HW filter on device team0 [ 68.755288][ T5630] 8021q: adding VLAN 0 to HW filter on device team0 [ 68.781180][ T5620] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 68.781198][ T5620] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 68.808540][ T62] bridge0: port 1(bridge_slave_0) entered blocking state [ 68.808619][ T62] bridge0: port 1(bridge_slave_0) entered forwarding state [ 68.810170][ T62] bridge0: port 2(bridge_slave_1) entered blocking state [ 68.810251][ T62] bridge0: port 2(bridge_slave_1) entered forwarding state [ 68.855947][ T62] bridge0: port 1(bridge_slave_0) entered blocking state [ 68.856023][ T62] bridge0: port 1(bridge_slave_0) entered forwarding state [ 68.861990][ T5627] Bluetooth: hci1: command tx timeout [ 68.876110][ T5627] Bluetooth: hci2: command tx timeout [ 68.890199][ T62] bridge0: port 2(bridge_slave_1) entered blocking state [ 68.890318][ T62] bridge0: port 2(bridge_slave_1) entered forwarding state [ 68.942344][ T53] Bluetooth: hci4: command tx timeout [ 68.942352][ T4943] Bluetooth: hci3: command tx timeout [ 68.942416][ T5627] Bluetooth: hci0: command tx timeout [ 69.008129][ T5626] 8021q: adding VLAN 0 to HW filter on device bond0 [ 69.087484][ T5626] 8021q: adding VLAN 0 to HW filter on device team0 [ 69.107920][ T51] bridge0: port 1(bridge_slave_0) entered blocking state [ 69.108000][ T51] bridge0: port 1(bridge_slave_0) entered forwarding state [ 69.131430][ T51] bridge0: port 2(bridge_slave_1) entered blocking state [ 69.131545][ T51] bridge0: port 2(bridge_slave_1) entered forwarding state [ 69.310996][ T5638] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 69.443280][ T5638] veth0_vlan: entered promiscuous mode [ 69.462642][ T5638] veth1_vlan: entered promiscuous mode [ 69.542027][ T5638] veth0_macvtap: entered promiscuous mode [ 69.548789][ T5638] veth1_macvtap: entered promiscuous mode [ 69.600954][ T5620] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 69.624754][ T5638] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 69.640783][ T5638] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 69.683734][ T4217] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 69.697898][ T5620] veth0_vlan: entered promiscuous mode [ 69.770098][ T5620] veth1_vlan: entered promiscuous mode [ 69.905723][ T4217] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 69.905742][ T4217] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 69.915485][ T5621] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 69.920783][ T5630] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 69.929845][ T5620] veth0_macvtap: entered promiscuous mode [ 69.948779][ T5620] veth1_macvtap: entered promiscuous mode [ 70.025234][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 70.025254][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 70.034503][ T5620] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 70.045466][ T5620] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 70.051125][ T30] kauditd_printk_skb: 3 callbacks suppressed [ 70.051136][ T30] audit: type=1400 audit(1792960655.872:157): avc: denied { mounton } for pid=5638 comm="syz-executor" path="/root/syzkaller.BFrwM0/syz-tmp" dev="sda1" ino=2042 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_home_t tclass=dir permissive=1 [ 70.059258][ T30] audit: type=1400 audit(1792960655.882:158): avc: denied { mount } for pid=5638 comm="syz-executor" name="/" dev="tmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 70.072503][ T30] audit: type=1400 audit(1792960655.902:159): avc: denied { mounton } for pid=5638 comm="syz-executor" path="/root/syzkaller.BFrwM0/syz-tmp/newroot/dev" dev="tmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 70.080459][ T51] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 70.084624][ T30] audit: type=1400 audit(1792960655.912:160): avc: denied { mount } for pid=5638 comm="syz-executor" name="/" dev="proc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 70.100958][ T30] audit: type=1400 audit(1792960655.922:161): avc: denied { mounton } for pid=5638 comm="syz-executor" path="/root/syzkaller.BFrwM0/syz-tmp/newroot/sys/kernel/debug" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=dir permissive=1 [ 70.112894][ T51] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 70.113818][ T30] audit: type=1400 audit(1792960655.942:162): avc: denied { mounton } for pid=5638 comm="syz-executor" path="/root/syzkaller.BFrwM0/syz-tmp/newroot/proc/sys/fs/binfmt_misc" dev="proc" ino=8115 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysctl_fs_t tclass=dir permissive=1 [ 70.134377][ T30] audit: type=1400 audit(1792960655.962:163): avc: denied { unmount } for pid=5638 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 70.144809][ T5630] veth0_vlan: entered promiscuous mode [ 70.156380][ T30] audit: type=1400 audit(1792960655.982:164): avc: denied { mounton } for pid=5638 comm="syz-executor" path="/dev/gadgetfs" dev="devtmpfs" ino=2784 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:device_t tclass=dir permissive=1 [ 70.163059][ T43] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 70.163657][ T43] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 70.163684][ T43] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 70.163710][ T43] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 70.163736][ T43] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 70.167132][ T30] audit: type=1400 audit(1792960655.992:165): avc: denied { mount } for pid=5638 comm="syz-executor" name="/" dev="gadgetfs" ino=8127 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfs_t tclass=filesystem permissive=1 [ 70.215760][ T5630] veth1_vlan: entered promiscuous mode [ 70.310543][ T5626] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 70.380192][ T102] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 70.380209][ T102] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 70.411030][ T5630] veth0_macvtap: entered promiscuous mode [ 70.437053][ T30] audit: type=1400 audit(1792960656.262:166): avc: denied { mounton } for pid=5638 comm="syz-executor" path="/sys/fs/fuse/connections" dev="fusectl" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=dir permissive=1 [ 70.437998][ T5630] veth1_macvtap: entered promiscuous mode [ 70.484982][ T5638] soft_limit_in_bytes is deprecated and will be removed. Writing any value to this file has no effect. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 70.493830][ T608] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 70.493844][ T608] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 70.520474][ T5630] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 70.548369][ T5630] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 70.596055][ T5626] veth0_vlan: entered promiscuous mode [ 70.644304][ T5626] veth1_vlan: entered promiscuous mode [ 70.653319][ T43] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 70.653924][ T43] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 70.653951][ T43] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 70.653976][ T43] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 70.734265][ T5621] veth0_vlan: entered promiscuous mode [ 70.774459][ T5621] veth1_vlan: entered promiscuous mode [ 70.778828][ T5824] netlink: 'syz.3.6': attribute type 2 has an invalid length. [ 70.799012][ T5824] : entered promiscuous mode [ 70.812752][ T4217] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 70.812766][ T4217] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 70.859619][ T5626] veth0_macvtap: entered promiscuous mode [ 70.885379][ T5626] veth1_macvtap: entered promiscuous mode [ 70.922245][ T608] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 70.922262][ T608] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 70.948760][ T5627] Bluetooth: hci2: command tx timeout [ 70.948785][ T5627] Bluetooth: hci1: command tx timeout [ 70.950070][ T5621] veth0_macvtap: entered promiscuous mode [ 70.956301][ T5626] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 70.970346][ T5626] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 70.976887][ T5621] veth1_macvtap: entered promiscuous mode [ 71.022286][ T53] Bluetooth: hci3: command tx timeout [ 71.022309][ T53] Bluetooth: hci0: command tx timeout [ 71.022327][ T53] Bluetooth: hci4: command tx timeout [ 71.062195][ T5621] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 71.096304][ T5621] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 71.155047][ T608] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 71.155138][ T608] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 71.155170][ T608] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 71.155183][ T608] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 71.155358][ T608] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 71.210560][ T5839] openvswitch: netlink: IP tunnel attribute has 4 unknown bytes. [ 71.233534][ T608] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 71.233789][ T608] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 71.233902][ T608] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 71.234013][ T608] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 71.234124][ T608] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 71.313793][ T975] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 71.313810][ T975] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 71.320865][ T5841] tipc: Enabling of bearer rejected, failed to enable media [ 71.394621][ T608] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 71.394636][ T608] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 71.505870][ T975] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 71.505886][ T975] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 72.894432][ T5892] syzkaller0: entered promiscuous mode [ 72.894453][ T5892] syzkaller0: entered allmulticast mode [ 72.914557][ T5897] fuse: Unknown parameter '0x0000000000000003' [ 73.021778][ T5627] Bluetooth: hci1: command tx timeout [ 73.021805][ T5627] Bluetooth: hci2: command tx timeout [ 73.102583][ T53] Bluetooth: hci4: command tx timeout [ 73.102611][ T53] Bluetooth: hci0: command tx timeout [ 73.102630][ T53] Bluetooth: hci3: command tx timeout [ 73.266734][ T5919] netlink: del zone limit has 8 unknown bytes [ 73.927658][ T5967] tipc: Enabling of bearer rejected, failed to enable media [ 74.239225][ T5983] syz.4.65 (5983) used greatest stack depth: 19192 bytes left [ 74.424521][ T6004] warning: `syz.1.74' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 74.472413][ T6009] netlink: 16 bytes leftover after parsing attributes in process `syz.4.78'. [ 74.512501][ T6009] FAULT_INJECTION: forcing a failure. [ 74.512501][ T6009] name fail_futex, interval 1, probability 0, space 0, times 1 [ 74.512529][ T6009] CPU: 0 UID: 0 PID: 6009 Comm: syz.4.78 Not tainted syzkaller #0 PREEMPT(full) [ 74.512549][ T6009] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/15/2026 [ 74.512559][ T6009] Call Trace: [ 74.512565][ T6009] [ 74.512571][ T6009] dump_stack_lvl+0x100/0x190 [ 74.512602][ T6009] should_fail_ex.cold+0x5/0xa [ 74.512629][ T6009] get_futex_key+0x1c9/0x13e0 [ 74.512662][ T6009] ? __pfx_get_futex_key+0x10/0x10 [ 74.512692][ T6009] ? putname+0xb1/0x110 [ 74.512708][ T6009] ? kasan_save_stack+0x3f/0x50 [ 74.512731][ T6009] ? kasan_save_stack+0x30/0x50 [ 74.512752][ T6009] ? kasan_save_track+0x14/0x30 [ 74.512778][ T6009] futex_wake+0xf4/0x5e0 [ 74.512805][ T6009] ? __pfx_futex_wake+0x10/0x10 [ 74.512841][ T6009] do_futex+0x2b2/0x440 [ 74.512861][ T6009] ? __pfx_do_futex+0x10/0x10 [ 74.512888][ T6009] __x64_sys_futex+0x34f/0x4d0 [ 74.512911][ T6009] ? __pfx___x64_sys_futex+0x10/0x10 [ 74.512932][ T6009] ? kmem_cache_free+0x127/0x6c0 [ 74.512962][ T6009] do_syscall_64+0x123/0x790 [ 74.512990][ T6009] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 74.513010][ T6009] RIP: 0033:0x7fee2139f559 [ 74.513025][ T6009] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 74.513042][ T6009] RSP: 002b:00007fee221bd0e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 74.513061][ T6009] RAX: ffffffffffffffda RBX: 00007fee21625fa8 RCX: 00007fee2139f559 [ 74.513074][ T6009] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007fee21625fac [ 74.513085][ T6009] RBP: 00007fee21625fa0 R08: 0000000000000001 R09: 0000000000000000 [ 74.513097][ T6009] R10: ffffffffffffffff R11: 0000000000000246 R12: 0000000000000000 [ 74.513108][ T6009] R13: 00007fee21626038 R14: 00007ffc643a7130 R15: 00007ffc643a7218 [ 74.513135][ T6009] [ 74.701822][ T6018] tipc: Enabling of bearer rejected, failed to enable media [ 74.826203][ T5848] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 74.985519][ T5848] usb 1-1: Using ep0 maxpacket: 16 [ 74.988821][ T5848] usb 1-1: New USB device found: idVendor=0763, idProduct=2001, bcdDevice=0.40 [ 75.022026][ T5848] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 75.022039][ T5848] usb 1-1: Product: syz [ 75.022047][ T5848] usb 1-1: Manufacturer: syz [ 75.022055][ T5848] usb 1-1: SerialNumber: syz [ 75.086968][ T30] kauditd_printk_skb: 57 callbacks suppressed [ 75.086981][ T30] audit: type=1400 audit(1792960660.912:224): avc: denied { setopt } for pid=6036 comm="syz.1.86" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 75.114176][ T30] audit: type=1400 audit(1792960660.922:225): avc: denied { write } for pid=6036 comm="syz.1.86" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 75.114211][ T30] audit: type=1400 audit(1792960660.922:226): avc: denied { connect } for pid=6036 comm="syz.1.86" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 75.114240][ T30] audit: type=1400 audit(1792960660.922:227): avc: denied { name_connect } for pid=6036 comm="syz.1.86" dest=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=sctp_socket permissive=1 [ 75.434692][ T30] audit: type=1400 audit(1792960661.262:228): avc: denied { allowed } for pid=6042 comm="syz.2.90" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 75.537202][ T6055] syzkaller0: entered promiscuous mode [ 75.537215][ T6055] syzkaller0: entered allmulticast mode [ 76.068960][ T29] cfg80211: failed to load regulatory.db [ 76.091879][ T24] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 76.232745][ T5848] usb 1-1: 1:1: invalid format type 0x1002 is detected, processed as PCM [ 76.232764][ T5848] usb 1-1: 1:1 : invalid UAC_FORMAT_TYPE desc [ 76.233509][ T5848] usb 1-1: 2:1 : UAC_AS_GENERAL descriptor not found [ 76.281512][ T24] usb 4-1: Using ep0 maxpacket: 16 [ 76.282086][ T24] usb 4-1: New USB device found: idVendor=054c, idProduct=03d5, bcdDevice=0.00 [ 76.283804][ T24] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 76.283821][ T24] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 76.283838][ T24] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 76.283858][ T24] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 76.352164][ T24] usb 4-1: config 0 descriptor?? [ 76.438279][ T5848] usb 1-1: USB disconnect, device number 2 [ 76.503562][ T5625] udevd[5625]: setting mode of /dev/bus/usb/001/002 to 020664 failed: No such file or directory [ 76.506264][ T5625] udevd[5625]: setting owner of /dev/bus/usb/001/002 to uid=0, gid=0 failed: No such file or directory [ 76.546296][ T5625] udevd[5625]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 76.983097][ T24] usbhid 4-1:0.0: can't add hid device: -71 [ 76.983165][ T24] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 76.991059][ T24] usb 4-1: USB disconnect, device number 2 [ 77.987391][ T30] audit: type=1400 audit(1792960663.812:229): avc: denied { setopt } for pid=6104 comm="syz.3.118" lport=2 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 78.007623][ T30] audit: type=1400 audit(1792960663.832:230): avc: denied { read } for pid=6104 comm="syz.3.118" name="msr" dev="devtmpfs" ino=87 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 78.007660][ T30] audit: type=1400 audit(1792960663.832:231): avc: denied { open } for pid=6104 comm="syz.3.118" path="/dev/cpu/0/msr" dev="devtmpfs" ino=87 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 78.102165][ T30] audit: type=1400 audit(1792960663.912:232): avc: denied { mmap_zero } for pid=6104 comm="syz.3.118" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=memprotect permissive=1 [ 78.476402][ T29] rxe_eth0 speed is unknown, defaulting to 1000 [ 78.585740][ T30] audit: type=1400 audit(1792960664.412:233): avc: denied { search } for pid=6113 comm="dhcpcd-run-hook" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 79.346895][ T6130] workqueue: name exceeds WQ_NAME_LEN. Truncating to: !ž¥&~MfF@!è³0´~…îz!7þ­A·O [ 79.835366][ T6153] fuse: Bad value for 'user_id' [ 79.835383][ T6153] fuse: Bad value for 'user_id' [ 80.111753][ T6160] netlink: 'syz.3.133': attribute type 70 has an invalid length. [ 80.244545][ T6166] dvmrp1: tun_chr_ioctl cmd 2147767521 [ 80.321701][ T30] kauditd_printk_skb: 11 callbacks suppressed [ 80.321718][ T30] audit: type=1400 audit(1792960666.152:245): avc: denied { setopt } for pid=6169 comm="syz.3.138" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 80.377879][ T30] audit: type=1400 audit(1792960666.202:246): avc: denied { create } for pid=6172 comm="syz.1.139" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 80.380483][ T30] audit: type=1400 audit(1792960666.202:247): avc: denied { write } for pid=6172 comm="syz.1.139" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 80.425878][ T6177] netlink: 20 bytes leftover after parsing attributes in process `syz.4.140'. [ 80.834948][ T30] audit: type=1400 audit(1792960666.662:248): avc: denied { read write } for pid=6196 comm="syz.1.151" name="nullb0" dev="devtmpfs" ino=694 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 80.836463][ T30] audit: type=1400 audit(1792960666.662:249): avc: denied { open } for pid=6196 comm="syz.1.151" path="/dev/nullb0" dev="devtmpfs" ino=694 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 81.302045][ T30] audit: type=1400 audit(1792960667.132:250): avc: denied { create } for pid=6230 comm="syz.3.167" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 81.398991][ T30] audit: type=1400 audit(1792960667.222:251): avc: denied { name_bind } for pid=6196 comm="syz.1.151" src=20006 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=tcp_socket permissive=1 [ 81.399621][ T30] audit: type=1400 audit(1792960667.222:252): avc: denied { node_bind } for pid=6196 comm="syz.1.151" saddr=fe80::aa src=20006 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=tcp_socket permissive=1 [ 81.502911][ T10] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 81.651879][ T10] usb 5-1: Using ep0 maxpacket: 16 [ 81.652449][ T10] usb 5-1: New USB device found: idVendor=054c, idProduct=03d5, bcdDevice=0.00 [ 81.655011][ T10] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 81.655037][ T10] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 81.655055][ T10] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 81.655079][ T10] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 81.659599][ T10] usb 5-1: config 0 descriptor?? [ 81.916994][ T6253] fuse: Bad value for 'fd' [ 82.066786][ T30] audit: type=1400 audit(1792960667.892:253): avc: denied { create } for pid=6260 comm="syz.1.182" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 82.093101][ T30] audit: type=1400 audit(1792960667.922:254): avc: denied { write } for pid=6260 comm="syz.1.182" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 82.220693][ T6268] netlink: 16 bytes leftover after parsing attributes in process `syz.0.184'. [ 82.284809][ T10] usbhid 5-1:0.0: can't add hid device: -71 [ 82.284887][ T10] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 82.298755][ T10] usb 5-1: USB disconnect, device number 2 [ 82.418292][ T6282] 9p: Bad value for 'rfdno' [ 82.614459][ T6301] fuse: Bad value for 'fd' [ 82.880724][ T6311] netlink: zone id is out of range [ 82.880736][ T6311] netlink: zone id is out of range [ 82.880743][ T6311] netlink: zone id is out of range [ 82.880748][ T6311] netlink: zone id is out of range [ 82.880754][ T6311] netlink: zone id is out of range [ 82.880759][ T6311] netlink: zone id is out of range [ 82.880836][ T6311] netlink: zone id is out of range [ 82.880843][ T6311] netlink: zone id is out of range [ 82.880849][ T6311] netlink: zone id is out of range [ 82.880855][ T6311] netlink: zone id is out of range [ 84.599452][ T6405] netlink: 8 bytes leftover after parsing attributes in process `syz.0.231'. [ 84.766953][ T6418] netlink: 32 bytes leftover after parsing attributes in process `syz.0.236'. [ 84.819406][ T6420] netlink: 'syz.3.238': attribute type 1 has an invalid length. [ 85.020073][ T6430] netlink: 128 bytes leftover after parsing attributes in process `syz.1.242'. [ 85.233602][ T6442] netlink: 4595 bytes leftover after parsing attributes in process `syz.0.247'. [ 85.236402][ T6442] netlink: 4595 bytes leftover after parsing attributes in process `syz.0.247'. [ 85.262414][ T5752] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 85.344987][ T30] kauditd_printk_skb: 92 callbacks suppressed [ 85.345002][ T30] audit: type=1326 audit(1792960671.172:347): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6421 comm="syz.2.239" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f3c16d9f1eb code=0x7ffc0000 [ 85.421561][ T5752] usb 3-1: Using ep0 maxpacket: 16 [ 85.422009][ T30] audit: type=1326 audit(1792960671.252:348): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6421 comm="syz.2.239" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f3c16d9f1eb code=0x7ffc0000 [ 85.424235][ T30] audit: type=1326 audit(1792960671.252:349): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6421 comm="syz.2.239" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f3c16d9f1eb code=0x7ffc0000 [ 85.424414][ T5752] usb 3-1: New USB device found: idVendor=0763, idProduct=2001, bcdDevice=0.40 [ 85.425855][ T30] audit: type=1326 audit(1792960671.252:350): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6421 comm="syz.2.239" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f3c16d9f1eb code=0x7ffc0000 [ 85.426544][ T30] audit: type=1326 audit(1792960671.252:351): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6421 comm="syz.2.239" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f3c16d9f1eb code=0x7ffc0000 [ 85.428411][ T30] audit: type=1326 audit(1792960671.252:352): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6421 comm="syz.2.239" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f3c16d9f1eb code=0x7ffc0000 [ 85.429723][ T30] audit: type=1326 audit(1792960671.252:353): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6421 comm="syz.2.239" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f3c16d9f1eb code=0x7ffc0000 [ 85.430053][ T30] audit: type=1326 audit(1792960671.252:354): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6421 comm="syz.2.239" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f3c16d9f1eb code=0x7ffc0000 [ 85.498872][ T30] audit: type=1326 audit(1792960671.322:355): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6421 comm="syz.2.239" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f3c16d9f1eb code=0x7ffc0000 [ 85.533895][ T30] audit: type=1326 audit(1792960671.362:356): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6421 comm="syz.2.239" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f3c16d9f1eb code=0x7ffc0000 [ 85.641943][ T5752] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 85.641967][ T5752] usb 3-1: Product: syz [ 85.641981][ T5752] usb 3-1: Manufacturer: syz [ 85.641996][ T5752] usb 3-1: SerialNumber: syz [ 85.864026][ T6465] tipc: Started in network mode [ 85.864051][ T6465] tipc: Node identity 82541b772f4d, cluster identity 4711 [ 85.864653][ T6465] tipc: Enabled bearer , priority 0 [ 85.869724][ T6465] syzkaller0: entered promiscuous mode [ 85.869745][ T6465] syzkaller0: entered allmulticast mode [ 85.882321][ T6465] tipc: Resetting bearer [ 85.892237][ T6463] tipc: Resetting bearer [ 85.915437][ T6463] tipc: Disabling bearer [ 85.968341][ T6472] netlink: 28 bytes leftover after parsing attributes in process `syz.1.262'. [ 86.105833][ T6477] netlink: 'syz.0.265': attribute type 1 has an invalid length. [ 86.322559][ T6488] 9p: Bad value for 'rfdno' [ 86.652353][ T6501] netlink: 8 bytes leftover after parsing attributes in process `syz.3.275'. [ 86.735968][ T5752] usb 3-1: 1:1: invalid format type 0x1002 is detected, processed as PCM [ 86.735995][ T5752] usb 3-1: 1:1 : invalid UAC_FORMAT_TYPE desc [ 86.737871][ T5752] usb 3-1: 2:1 : UAC_AS_GENERAL descriptor not found [ 86.800989][ T5752] usb 3-1: USB disconnect, device number 2 [ 86.878552][ T5625] udevd[5625]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 87.361502][ T5751] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 87.427310][ T6539] netlink: 32 bytes leftover after parsing attributes in process `syz.1.293'. [ 87.511503][ T5751] usb 1-1: Using ep0 maxpacket: 32 [ 87.519345][ T5751] usb 1-1: unable to get BOS descriptor or descriptor too short [ 87.519385][ T5751] usb 1-1: New USB device found: idVendor=0694, idProduct=0001, bcdDevice=78.13 [ 87.520240][ T5751] usb 1-1: config 14 has an invalid interface number: 57 but max is 1 [ 87.520261][ T5751] usb 1-1: config 14 has an invalid interface number: 228 but max is 1 [ 87.520278][ T5751] usb 1-1: config 14 has no interface number 0 [ 87.520293][ T5751] usb 1-1: config 14 has no interface number 1 [ 87.520344][ T5751] usb 1-1: config 14 interface 228 altsetting 5 has a duplicate endpoint with address 0x8, skipping [ 87.520364][ T5751] usb 1-1: config 14 interface 228 altsetting 5 has an endpoint descriptor with address 0xD1, changing to 0x81 [ 87.520385][ T5751] usb 1-1: config 14 interface 228 altsetting 5 endpoint 0x81 has an invalid bInterval 109, changing to 10 [ 87.520407][ T5751] usb 1-1: config 14 interface 228 altsetting 5 endpoint 0x81 has invalid maxpacket 57993, setting to 1024 [ 87.520431][ T5751] usb 1-1: config 14 interface 228 altsetting 5 endpoint 0x9 has an invalid bInterval 122, changing to 10 [ 87.520453][ T5751] usb 1-1: config 14 interface 228 altsetting 5 has 4 endpoint descriptors, different from the interface descriptor's value: 3 [ 87.520474][ T5751] usb 1-1: config 14 interface 57 has no altsetting 0 [ 87.520489][ T5751] usb 1-1: config 14 interface 228 has no altsetting 0 [ 87.530212][ T5751] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 87.530231][ T5751] usb 1-1: Product: syz [ 87.530242][ T5751] usb 1-1: Manufacturer: syz [ 87.530253][ T5751] usb 1-1: SerialNumber: syz [ 87.616965][ T6544] smc: removing ib device rxe0 [ 87.760364][ T6544] smbdirect: ib_dev[rxe0] removed [ 87.970875][ T6558] netlink: 16 bytes leftover after parsing attributes in process `syz.2.303'. [ 87.975982][ T5751] legousbtower 1-1:14.57: interrupt endpoints not found [ 88.009859][ T6558] FAULT_INJECTION: forcing a failure. [ 88.009859][ T6558] name failslab, interval 1, probability 0, space 0, times 1 [ 88.009906][ T6558] CPU: 0 UID: 60928 PID: 6558 Comm: syz.2.303 Not tainted syzkaller #0 PREEMPT(full) [ 88.009926][ T6558] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/15/2026 [ 88.009936][ T6558] Call Trace: [ 88.009942][ T6558] [ 88.009950][ T6558] dump_stack_lvl+0x100/0x190 [ 88.009982][ T6558] should_fail_ex.cold+0x5/0xa [ 88.010009][ T6558] should_failslab+0xc2/0x120 [ 88.010039][ T6558] kmem_cache_alloc_noprof+0x92/0x6a0 [ 88.010062][ T6558] ? cred_alloc_blank+0x1c/0xa0 [ 88.010087][ T6558] cred_alloc_blank+0x1c/0xa0 [ 88.010105][ T6558] keyctl_session_to_parent+0x55/0xae0 [ 88.010135][ T6558] __do_sys_keyctl+0x2b1/0x5a0 [ 88.010162][ T6558] do_syscall_64+0x123/0x790 [ 88.010190][ T6558] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 88.010210][ T6558] RIP: 0033:0x7f3c16d9f559 [ 88.010225][ T6558] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 88.010242][ T6558] RSP: 002b:00007f3c17c52028 EFLAGS: 00000246 ORIG_RAX: 00000000000000fa [ 88.010261][ T6558] RAX: ffffffffffffffda RBX: 00007f3c17025fa0 RCX: 00007f3c16d9f559 [ 88.010273][ T6558] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000012 [ 88.010283][ T6558] RBP: 00007f3c16e36b20 R08: 0000000000000000 R09: 0000000000000000 [ 88.010294][ T6558] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 88.010305][ T6558] R13: 00007f3c17026038 R14: 00007f3c17025fa0 R15: 00007fff86033708 [ 88.010330][ T6558] [ 89.158892][ T5751] legousbtower 1-1:14.228: get version request failed: -121 [ 89.159081][ T5751] legousbtower 1-1:14.228: probe with driver legousbtower failed with error -121 [ 89.491521][ T24] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 89.641504][ T24] usb 2-1: Using ep0 maxpacket: 16 [ 89.644105][ T24] usb 2-1: New USB device found: idVendor=0763, idProduct=2001, bcdDevice=0.40 [ 89.684735][ T24] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 89.684758][ T24] usb 2-1: Product: syz [ 89.684771][ T24] usb 2-1: Manufacturer: syz [ 89.684785][ T24] usb 2-1: SerialNumber: syz [ 89.987551][ T6592] FAULT_INJECTION: forcing a failure. [ 89.987551][ T6592] name failslab, interval 1, probability 0, space 0, times 0 [ 89.987571][ T6592] CPU: 0 UID: 60928 PID: 6592 Comm: syz.4.315 Not tainted syzkaller #0 PREEMPT(full) [ 89.987583][ T6592] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/15/2026 [ 89.987589][ T6592] Call Trace: [ 89.987593][ T6592] [ 89.987598][ T6592] dump_stack_lvl+0x100/0x190 [ 89.987622][ T6592] should_fail_ex.cold+0x5/0xa [ 89.987650][ T6592] should_failslab+0xc2/0x120 [ 89.987675][ T6592] kmem_cache_alloc_noprof+0x92/0x6a0 [ 89.987696][ T6592] ? security_file_alloc+0x34/0x2c0 [ 89.987709][ T6592] security_file_alloc+0x34/0x2c0 [ 89.987719][ T6592] init_file+0x95/0x480 [ 89.987737][ T6592] alloc_empty_file+0x79/0x1c0 [ 89.987748][ T6592] alloc_file_pseudo+0x17e/0x290 [ 89.987762][ T6592] ? __pfx_alloc_file_pseudo+0x10/0x10 [ 89.987786][ T6592] create_pipe_files+0x33a/0x930 [ 89.987816][ T6592] do_pipe2+0xbd/0x1e0 [ 89.987842][ T6592] ? __pfx_do_pipe2+0x10/0x10 [ 89.987857][ T6592] ? xfd_validate_state+0x129/0x190 [ 89.987873][ T6592] __x64_sys_pipe2+0x54/0x80 [ 89.987889][ T6592] do_syscall_64+0x123/0x790 [ 89.987908][ T6592] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 89.987926][ T6592] RIP: 0033:0x7fee2139f559 [ 89.987941][ T6592] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 89.987956][ T6592] RSP: 002b:00007fee221bd028 EFLAGS: 00000246 ORIG_RAX: 0000000000000125 [ 89.987973][ T6592] RAX: ffffffffffffffda RBX: 00007fee21625fa0 RCX: 00007fee2139f559 [ 89.987983][ T6592] RDX: 0000000000000000 RSI: 0000000000000800 RDI: 0000200000000680 [ 89.987991][ T6592] RBP: 00007fee21436b20 R08: 0000000000000000 R09: 0000000000000000 [ 89.988001][ T6592] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 89.988011][ T6592] R13: 00007fee21626038 R14: 00007fee21625fa0 R15: 00007ffc643a7218 [ 89.988035][ T6592] [ 90.132041][ T6594] tipc: Enabling of bearer rejected, failed to enable media [ 90.219884][ T5751] usb 1-1: USB disconnect, device number 3 [ 90.262270][ T24] usb 2-1: 1:1: invalid format type 0x1002 is detected, processed as PCM [ 90.262294][ T24] usb 2-1: 1:1 : invalid UAC_FORMAT_TYPE desc [ 90.262926][ T24] usb 2-1: 2:1 : UAC_AS_GENERAL descriptor not found [ 90.363984][ T30] kauditd_printk_skb: 529 callbacks suppressed [ 90.363999][ T30] audit: type=1326 audit(1792960676.192:886): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6564 comm="syz.1.306" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f8bc435fd8e code=0x7ffc0000 [ 90.369816][ T24] usb 2-1: USB disconnect, device number 2 [ 90.470425][ T30] audit: type=1326 audit(1792960676.292:887): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6564 comm="syz.1.306" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f8bc435fd8e code=0x7ffc0000 [ 90.537773][ T5625] udevd[5625]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 90.573850][ T30] audit: type=1326 audit(1792960676.402:888): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6564 comm="syz.1.306" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f8bc435fd8e code=0x7ffc0000 [ 90.640880][ T6612] net_ratelimit: 166 callbacks suppressed [ 90.640896][ T6612] openvswitch: netlink: Flow set message rejected, Key attribute missing. [ 90.673714][ T30] audit: type=1326 audit(1792960676.502:889): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6564 comm="syz.1.306" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=231 compat=0 ip=0x7f8bc439f559 code=0x7ffc0000 [ 90.743680][ T6615] openvswitch: netlink: IP tunnel attribute has 24 unknown bytes. [ 91.246492][ T30] audit: type=1400 audit(1792960677.072:890): avc: denied { create } for pid=6631 comm="syz.2.330" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 91.255845][ T30] audit: type=1400 audit(1792960677.082:891): avc: denied { bind } for pid=6631 comm="syz.2.330" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 91.260933][ T30] audit: type=1400 audit(1792960677.082:892): avc: denied { connect } for pid=6631 comm="syz.2.330" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 91.267820][ T30] audit: type=1400 audit(1792960677.092:893): avc: denied { write } for pid=6631 comm="syz.2.330" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 91.294801][ T6635] tipc: Started in network mode [ 91.294821][ T6635] tipc: Node identity 460b97ca9d64, cluster identity 4711 [ 91.294953][ T6635] tipc: Enabled bearer , priority 0 [ 91.296795][ T6635] syzkaller0: entered promiscuous mode [ 91.296808][ T6635] syzkaller0: entered allmulticast mode [ 91.302583][ T6635] tipc: Resetting bearer [ 91.371731][ T6633] tipc: Resetting bearer [ 91.412505][ T6633] tipc: Disabling bearer [ 91.641658][ T6646] FAULT_INJECTION: forcing a failure. [ 91.641658][ T6646] name fail_futex, interval 1, probability 0, space 0, times 0 [ 91.641688][ T6646] CPU: 1 UID: 60928 PID: 6646 Comm: syz.3.335 Not tainted syzkaller #0 PREEMPT(full) [ 91.641708][ T6646] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/15/2026 [ 91.641718][ T6646] Call Trace: [ 91.641725][ T6646] [ 91.641732][ T6646] dump_stack_lvl+0x100/0x190 [ 91.641764][ T6646] should_fail_ex.cold+0x5/0xa [ 91.641792][ T6646] get_futex_key+0x1c9/0x13e0 [ 91.641825][ T6646] ? __pfx_get_futex_key+0x10/0x10 [ 91.641853][ T6646] ? putname+0xb1/0x110 [ 91.641869][ T6646] ? kasan_save_stack+0x3f/0x50 [ 91.641889][ T6646] ? kasan_save_stack+0x30/0x50 [ 91.641910][ T6646] ? kasan_save_track+0x14/0x30 [ 91.641935][ T6646] futex_wake+0xf4/0x5e0 [ 91.641962][ T6646] ? __pfx_futex_wake+0x10/0x10 [ 91.641994][ T6646] do_futex+0x2b2/0x440 [ 91.642015][ T6646] ? __pfx_do_futex+0x10/0x10 [ 91.642041][ T6646] __x64_sys_futex+0x34f/0x4d0 [ 91.642064][ T6646] ? __pfx___x64_sys_futex+0x10/0x10 [ 91.642082][ T6646] ? kmem_cache_free+0x127/0x6c0 [ 91.642111][ T6646] do_syscall_64+0x123/0x790 [ 91.642140][ T6646] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 91.642166][ T6646] RIP: 0033:0x7f10f619f559 [ 91.642184][ T6646] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 91.642202][ T6646] RSP: 002b:00007f10f70480e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 91.642221][ T6646] RAX: ffffffffffffffda RBX: 00007f10f6425fa8 RCX: 00007f10f619f559 [ 91.642234][ T6646] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007f10f6425fac [ 91.642246][ T6646] RBP: 00007f10f6425fa0 R08: 0000000000000001 R09: 0000000000000000 [ 91.642258][ T6646] R10: ffffffffffffffff R11: 0000000000000246 R12: 0000000000000000 [ 91.642269][ T6646] R13: 00007f10f6426038 R14: 00007fff79c679c0 R15: 00007fff79c67aa8 [ 91.642295][ T6646] [ 91.965923][ T6652] 9pnet_fd: Insufficient options for proto=fd [ 92.513703][ T6680] netlink: 16 bytes leftover after parsing attributes in process `syz.0.349'. [ 92.544199][ T6680] FAULT_INJECTION: forcing a failure. [ 92.544199][ T6680] name failslab, interval 1, probability 0, space 0, times 0 [ 92.544229][ T6680] CPU: 0 UID: 60928 PID: 6680 Comm: syz.0.349 Not tainted syzkaller #0 PREEMPT(full) [ 92.544250][ T6680] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/15/2026 [ 92.544260][ T6680] Call Trace: [ 92.544266][ T6680] [ 92.544274][ T6680] dump_stack_lvl+0x100/0x190 [ 92.544308][ T6680] should_fail_ex.cold+0x5/0xa [ 92.544336][ T6680] should_failslab+0xc2/0x120 [ 92.544363][ T6680] kmem_cache_alloc_noprof+0x92/0x6a0 [ 92.544385][ T6680] ? __pfx_map_id_range_down+0x10/0x10 [ 92.544413][ T6680] ? security_inode_alloc+0x3b/0x2c0 [ 92.544445][ T6680] security_inode_alloc+0x3b/0x2c0 [ 92.544472][ T6680] inode_init_always_gfp+0xc6f/0xfb0 [ 92.544506][ T6680] alloc_inode+0x8e/0x250 [ 92.544528][ T6680] create_pipe_files+0x4c/0x930 [ 92.544561][ T6680] do_pipe2+0xbd/0x1e0 [ 92.544589][ T6680] ? __pfx_do_pipe2+0x10/0x10 [ 92.544616][ T6680] ? xfd_validate_state+0x129/0x190 [ 92.544647][ T6680] __x64_sys_pipe2+0x54/0x80 [ 92.544674][ T6680] do_syscall_64+0x123/0x790 [ 92.544703][ T6680] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 92.544722][ T6680] RIP: 0033:0x7f141d99f559 [ 92.544738][ T6680] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 92.544755][ T6680] RSP: 002b:00007f141e846028 EFLAGS: 00000246 ORIG_RAX: 0000000000000125 [ 92.544774][ T6680] RAX: ffffffffffffffda RBX: 00007f141dc25fa0 RCX: 00007f141d99f559 [ 92.544786][ T6680] RDX: 0000000000000000 RSI: 0000000000000800 RDI: 0000200000000680 [ 92.544797][ T6680] RBP: 00007f141da36b20 R08: 0000000000000000 R09: 0000000000000000 [ 92.544808][ T6680] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 92.544819][ T6680] R13: 00007f141dc26038 R14: 00007f141dc25fa0 R15: 00007ffeb26f3748 [ 92.544848][ T6680] [ 92.767320][ T6686] openvswitch: netlink: Flow set message rejected, Key attribute missing. [ 92.876926][ T6690] netlink: 8 bytes leftover after parsing attributes in process `syz.1.354'. [ 93.036908][ T6700] tipc: Enabled bearer , priority 0 [ 93.038481][ T6700] syzkaller0: entered promiscuous mode [ 93.038497][ T6700] syzkaller0: entered allmulticast mode [ 93.046656][ T6700] tipc: Resetting bearer [ 93.064389][ T6699] tipc: Resetting bearer [ 93.106625][ T6699] tipc: Disabling bearer [ 93.139841][ T6708] netlink: 16 bytes leftover after parsing attributes in process `syz.2.363'. [ 93.154747][ T6708] FAULT_INJECTION: forcing a failure. [ 93.154747][ T6708] name failslab, interval 1, probability 0, space 0, times 0 [ 93.154773][ T6708] CPU: 1 UID: 60928 PID: 6708 Comm: syz.2.363 Not tainted syzkaller #0 PREEMPT(full) [ 93.154793][ T6708] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/15/2026 [ 93.154804][ T6708] Call Trace: [ 93.154810][ T6708] [ 93.154817][ T6708] dump_stack_lvl+0x100/0x190 [ 93.154850][ T6708] should_fail_ex.cold+0x5/0xa [ 93.154877][ T6708] should_failslab+0xc2/0x120 [ 93.154902][ T6708] kmem_cache_alloc_noprof+0x92/0x6a0 [ 93.154923][ T6708] ? __pfx_map_id_range_down+0x10/0x10 [ 93.154949][ T6708] ? security_inode_alloc+0x3b/0x2c0 [ 93.154978][ T6708] security_inode_alloc+0x3b/0x2c0 [ 93.155005][ T6708] inode_init_always_gfp+0xc6f/0xfb0 [ 93.155037][ T6708] alloc_inode+0x8e/0x250 [ 93.155060][ T6708] create_pipe_files+0x4c/0x930 [ 93.155090][ T6708] do_pipe2+0xbd/0x1e0 [ 93.155115][ T6708] ? __pfx_do_pipe2+0x10/0x10 [ 93.155141][ T6708] ? xfd_validate_state+0x129/0x190 [ 93.155169][ T6708] __x64_sys_pipe2+0x54/0x80 [ 93.155196][ T6708] do_syscall_64+0x123/0x790 [ 93.155226][ T6708] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 93.155245][ T6708] RIP: 0033:0x7f3c16d9f559 [ 93.155260][ T6708] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 93.155278][ T6708] RSP: 002b:00007f3c17c52028 EFLAGS: 00000246 ORIG_RAX: 0000000000000125 [ 93.155295][ T6708] RAX: ffffffffffffffda RBX: 00007f3c17025fa0 RCX: 00007f3c16d9f559 [ 93.155307][ T6708] RDX: 0000000000000000 RSI: 0000000000000800 RDI: 0000200000000680 [ 93.155317][ T6708] RBP: 00007f3c16e36b20 R08: 0000000000000000 R09: 0000000000000000 [ 93.155328][ T6708] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 93.155338][ T6708] R13: 00007f3c17026038 R14: 00007f3c17025fa0 R15: 00007fff86033708 [ 93.155362][ T6708] [ 93.570224][ T30] audit: type=1400 audit(1792960679.392:894): avc: denied { mount } for pid=6710 comm="syz.2.365" name="/" dev="devtmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=filesystem permissive=1 [ 93.571174][ T30] audit: type=1400 audit(1792960679.392:895): avc: denied { read } for pid=6710 comm="syz.2.365" name="control" dev="devtmpfs" ino=1266 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:lvm_control_t tclass=chr_file permissive=1 [ 93.585094][ T6711] tipc: Enabling of bearer rejected, failed to enable media [ 93.906770][ T6739] netlink: 16 bytes leftover after parsing attributes in process `syz.2.374'. [ 93.918623][ T6739] FAULT_INJECTION: forcing a failure. [ 93.918623][ T6739] name failslab, interval 1, probability 0, space 0, times 0 [ 93.918698][ T6739] CPU: 0 UID: 60928 PID: 6739 Comm: syz.2.374 Not tainted syzkaller #0 PREEMPT(full) [ 93.918721][ T6739] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/15/2026 [ 93.918732][ T6739] Call Trace: [ 93.918739][ T6739] [ 93.918747][ T6739] dump_stack_lvl+0x100/0x190 [ 93.918780][ T6739] should_fail_ex.cold+0x5/0xa [ 93.918810][ T6739] should_failslab+0xc2/0x120 [ 93.918836][ T6739] kmem_cache_alloc_noprof+0x92/0x6a0 [ 93.918859][ T6739] ? d_instantiate+0x8a/0xb0 [ 93.918879][ T6739] ? alloc_empty_file+0x5b/0x1c0 [ 93.918902][ T6739] alloc_empty_file+0x5b/0x1c0 [ 93.918921][ T6739] alloc_file_pseudo+0x17e/0x290 [ 93.918942][ T6739] ? __pfx_alloc_file_pseudo+0x10/0x10 [ 93.918969][ T6739] create_pipe_files+0x33a/0x930 [ 93.919001][ T6739] do_pipe2+0xbd/0x1e0 [ 93.919029][ T6739] ? __pfx_do_pipe2+0x10/0x10 [ 93.919057][ T6739] ? xfd_validate_state+0x129/0x190 [ 93.919090][ T6739] __x64_sys_pipe2+0x54/0x80 [ 93.919118][ T6739] do_syscall_64+0x123/0x790 [ 93.919154][ T6739] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 93.919177][ T6739] RIP: 0033:0x7f3c16d9f559 [ 93.919196][ T6739] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 93.919215][ T6739] RSP: 002b:00007f3c17c52028 EFLAGS: 00000246 ORIG_RAX: 0000000000000125 [ 93.919235][ T6739] RAX: ffffffffffffffda RBX: 00007f3c17025fa0 RCX: 00007f3c16d9f559 [ 93.919247][ T6739] RDX: 0000000000000000 RSI: 0000000000000800 RDI: 0000200000000680 [ 93.919258][ T6739] RBP: 00007f3c16e36b20 R08: 0000000000000000 R09: 0000000000000000 [ 93.919268][ T6739] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 93.919280][ T6739] R13: 00007f3c17026038 R14: 00007f3c17025fa0 R15: 00007fff86033708 [ 93.919307][ T6739] [ 93.950706][ T6741] tipc: Enabled bearer , priority 0 [ 93.954736][ T6741] syzkaller0: entered promiscuous mode [ 93.954749][ T6741] syzkaller0: entered allmulticast mode [ 93.967049][ T6741] tipc: Resetting bearer [ 93.988103][ T6740] tipc: Resetting bearer [ 94.037277][ T6740] tipc: Disabling bearer [ 94.389820][ T6765] tipc: Enabling of bearer rejected, failed to enable media [ 94.440269][ T6768] netlink: 16 bytes leftover after parsing attributes in process `syz.1.388'. [ 94.458383][ T6768] FAULT_INJECTION: forcing a failure. [ 94.458383][ T6768] name failslab, interval 1, probability 0, space 0, times 0 [ 94.458417][ T6768] CPU: 0 UID: 60928 PID: 6768 Comm: syz.1.388 Not tainted syzkaller #0 PREEMPT(full) [ 94.458441][ T6768] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/15/2026 [ 94.458452][ T6768] Call Trace: [ 94.458459][ T6768] [ 94.458467][ T6768] dump_stack_lvl+0x100/0x190 [ 94.458502][ T6768] should_fail_ex.cold+0x5/0xa [ 94.458533][ T6768] should_failslab+0xc2/0x120 [ 94.458562][ T6768] __kmalloc_cache_noprof+0x91/0x6d0 [ 94.458584][ T6768] ? alloc_pipe_info+0x109/0x590 [ 94.458620][ T6768] alloc_pipe_info+0x109/0x590 [ 94.458652][ T6768] create_pipe_files+0x8c/0x930 [ 94.458686][ T6768] do_pipe2+0xbd/0x1e0 [ 94.458716][ T6768] ? __pfx_do_pipe2+0x10/0x10 [ 94.458746][ T6768] ? xfd_validate_state+0x129/0x190 [ 94.458779][ T6768] __x64_sys_pipe2+0x54/0x80 [ 94.458810][ T6768] do_syscall_64+0x123/0x790 [ 94.458841][ T6768] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 94.458862][ T6768] RIP: 0033:0x7f8bc439f559 [ 94.458881][ T6768] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 94.458900][ T6768] RSP: 002b:00007f8bc525a028 EFLAGS: 00000246 ORIG_RAX: 0000000000000125 [ 94.458919][ T6768] RAX: ffffffffffffffda RBX: 00007f8bc4625fa0 RCX: 00007f8bc439f559 [ 94.458933][ T6768] RDX: 0000000000000000 RSI: 0000000000000800 RDI: 0000200000000680 [ 94.458945][ T6768] RBP: 00007f8bc4436b20 R08: 0000000000000000 R09: 0000000000000000 [ 94.458957][ T6768] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 94.458969][ T6768] R13: 00007f8bc4626038 R14: 00007f8bc4625fa0 R15: 00007ffc0b6e8f88 [ 94.458997][ T6768] [ 94.850156][ T6788] 9p: Bad value for 'rfdno' [ 95.130887][ T6798] netlink: 12 bytes leftover after parsing attributes in process `syz.4.398'. [ 95.186059][ T6803] netlink: 'syz.1.402': attribute type 1 has an invalid length. [ 95.299721][ T24] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 95.316279][ T24] hid-generic 0000:0000:0000.0001: hidraw0: HID v0.00 Device [syz1] on syz0 [ 95.374478][ T30] kauditd_printk_skb: 8 callbacks suppressed [ 95.374491][ T30] audit: type=1326 audit(1792960681.202:904): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6822 comm="syz.0.408" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f141d99f559 code=0x7ffc0000 [ 95.378005][ T30] audit: type=1326 audit(1792960681.202:905): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6822 comm="syz.0.408" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f141d99f559 code=0x7ffc0000 [ 95.388893][ T30] audit: type=1326 audit(1792960681.212:906): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6822 comm="syz.0.408" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f141d99f559 code=0x7ffc0000 [ 95.388931][ T30] audit: type=1326 audit(1792960681.212:907): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6822 comm="syz.0.408" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f141d99f559 code=0x7ffc0000 [ 95.415472][ T30] audit: type=1326 audit(1792960681.212:908): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6822 comm="syz.0.408" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=424 compat=0 ip=0x7f141d99f559 code=0x7ffc0000 [ 95.415514][ T30] audit: type=1326 audit(1792960681.212:909): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6822 comm="syz.0.408" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f141d99f559 code=0x7ffc0000 [ 95.415550][ T30] audit: type=1326 audit(1792960681.212:910): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6822 comm="syz.0.408" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f141d99f559 code=0x7ffc0000 [ 95.415586][ T30] audit: type=1326 audit(1792960681.212:911): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6822 comm="syz.0.408" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7f141d99f559 code=0x7ffc0000 [ 95.415621][ T30] audit: type=1326 audit(1792960681.212:912): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6822 comm="syz.0.408" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=231 compat=0 ip=0x7f141d99f559 code=0x7ffc0000 [ 95.457176][ T6826] netlink: 8 bytes leftover after parsing attributes in process `syz.3.411'. [ 95.553782][ T30] audit: type=1400 audit(1792960681.352:913): avc: denied { prog_load } for pid=6828 comm="syz.0.412" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 95.689923][ T6820] fido_id[6820]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 95.913532][ T6852] syz_tun: entered allmulticast mode [ 95.952944][ T6856] netlink: 'syz.1.422': attribute type 21 has an invalid length. [ 96.214623][ T6874] FAULT_INJECTION: forcing a failure. [ 96.214623][ T6874] name failslab, interval 1, probability 0, space 0, times 0 [ 96.214653][ T6874] CPU: 0 UID: 0 PID: 6874 Comm: syz.2.432 Not tainted syzkaller #0 PREEMPT(full) [ 96.214676][ T6874] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/15/2026 [ 96.214687][ T6874] Call Trace: [ 96.214694][ T6874] [ 96.214702][ T6874] dump_stack_lvl+0x100/0x190 [ 96.214735][ T6874] should_fail_ex.cold+0x5/0xa [ 96.214764][ T6874] should_failslab+0xc2/0x120 [ 96.214792][ T6874] kmem_cache_alloc_node_noprof+0x94/0x6e0 [ 96.214816][ T6874] ? __alloc_skb+0x140/0x710 [ 96.214846][ T6874] __alloc_skb+0x140/0x710 [ 96.214873][ T6874] ? __alloc_skb+0x5b7/0x710 [ 96.214900][ T6874] ? __pfx___alloc_skb+0x10/0x10 [ 96.214931][ T6874] _sctp_make_chunk+0x51/0x270 [ 96.214947][ T6874] sctp_make_datafrag_empty+0x14e/0x230 [ 96.214963][ T6874] ? __pfx_sctp_make_datafrag_empty+0x10/0x10 [ 96.214978][ T6874] ? __kmalloc_cache_noprof+0x2f8/0x6d0 [ 96.214998][ T6874] sctp_datamsg_from_user+0x5ea/0x1360 [ 96.215031][ T6874] sctp_sendmsg_to_asoc+0x95a/0x1b60 [ 96.215058][ T6874] ? __pfx_sctp_sendmsg_to_asoc+0x10/0x10 [ 96.215075][ T6874] ? sctp_connect_new_asoc+0x41e/0x770 [ 96.215098][ T6874] ? __pfx_sctp_connect_new_asoc+0x10/0x10 [ 96.215127][ T6874] sctp_sendmsg+0x1144/0x22e0 [ 96.215155][ T6874] ? __pfx_sctp_sendmsg+0x10/0x10 [ 96.215177][ T6874] ? __pfx_sock_has_perm+0x10/0x10 [ 96.215209][ T6874] ? __might_fault+0xc5/0x140 [ 96.215236][ T6874] ? __pfx_sctp_sendmsg+0x10/0x10 [ 96.215258][ T6874] inet_sendmsg+0x11c/0x140 [ 96.215274][ T6874] __sys_sendto+0x470/0x4e0 [ 96.215294][ T6874] ? __pfx_inet_sendmsg+0x10/0x10 [ 96.215309][ T6874] ? __pfx___sys_sendto+0x10/0x10 [ 96.215334][ T6874] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 96.215363][ T6874] ? xfd_validate_state+0x129/0x190 [ 96.215385][ T6874] __x64_sys_sendto+0xe0/0x1c0 [ 96.215403][ T6874] ? do_syscall_64+0xae/0x790 [ 96.215421][ T6874] ? lockdep_hardirqs_on+0x7d/0x110 [ 96.215439][ T6874] do_syscall_64+0x123/0x790 [ 96.215460][ T6874] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 96.215475][ T6874] RIP: 0033:0x7f3c16d9f559 [ 96.215487][ T6874] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 96.215500][ T6874] RSP: 002b:00007f3c17c52028 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 96.215514][ T6874] RAX: ffffffffffffffda RBX: 00007f3c17025fa0 RCX: 00007f3c16d9f559 [ 96.215523][ T6874] RDX: 0000000000034000 RSI: 0000200000000440 RDI: 0000000000000003 [ 96.215531][ T6874] RBP: 00007f3c16e36b20 R08: 0000200000000480 R09: 000000000000001c [ 96.215539][ T6874] R10: 0000000000044004 R11: 0000000000000246 R12: 0000000000000000 [ 96.215548][ T6874] R13: 00007f3c17026038 R14: 00007f3c17025fa0 R15: 00007fff86033708 [ 96.215568][ T6874] [ 96.439501][ T5752] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 96.453881][ T6881] netlink: 5748 bytes leftover after parsing attributes in process `syz.4.435'. [ 96.462376][ T5752] hid-generic 0000:0000:0000.0002: hidraw0: HID v0.00 Device [syz1] on syz0 [ 96.675014][ T6887] netlink: 24 bytes leftover after parsing attributes in process `syz.4.439'. [ 96.675034][ T6887] netlink: 24 bytes leftover after parsing attributes in process `syz.4.439'. [ 97.525006][ T6914] FAULT_INJECTION: forcing a failure. [ 97.525006][ T6914] name failslab, interval 1, probability 0, space 0, times 0 [ 97.525034][ T6914] CPU: 1 UID: 0 PID: 6914 Comm: syz.0.452 Not tainted syzkaller #0 PREEMPT(full) [ 97.525055][ T6914] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/15/2026 [ 97.525065][ T6914] Call Trace: [ 97.525072][ T6914] [ 97.525079][ T6914] dump_stack_lvl+0x100/0x190 [ 97.525111][ T6914] should_fail_ex.cold+0x5/0xa [ 97.525138][ T6914] should_failslab+0xc2/0x120 [ 97.525165][ T6914] kmem_cache_alloc_noprof+0x92/0x6a0 [ 97.525187][ T6914] ? anon_vma_clone+0x2b3/0xca0 [ 97.525218][ T6914] anon_vma_clone+0x2b3/0xca0 [ 97.525251][ T6914] dup_anon_vma+0x1c5/0x2f0 [ 97.525280][ T6914] vma_modify+0xd5c/0x29b0 [ 97.525310][ T6914] ? __pfx_vma_modify+0x10/0x10 [ 97.525347][ T6914] ? lock_acquire+0x1d1/0x380 [ 97.525380][ T6914] vma_modify_flags+0x2c3/0x460 [ 97.525400][ T6914] ? __pfx_vma_modify_flags+0x10/0x10 [ 97.525432][ T6914] ? __pfx_futex_wake_mark+0x10/0x10 [ 97.525464][ T6914] mlock_fixup+0x4a8/0xc60 [ 97.525497][ T6914] ? __pfx_mlock_fixup+0x10/0x10 [ 97.525540][ T6914] apply_mlockall_flags.isra.0+0x3b8/0x640 [ 97.525574][ T6914] ? __pfx_apply_mlockall_flags.isra.0+0x10/0x10 [ 97.525615][ T6914] ? __pfx___might_resched+0x10/0x10 [ 97.525643][ T6914] ? down_write_killable+0x14d/0x240 [ 97.525687][ T6914] __do_sys_munlockall+0xc7/0x270 [ 97.525709][ T6914] do_syscall_64+0x123/0x790 [ 97.525738][ T6914] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 97.525757][ T6914] RIP: 0033:0x7f141d99f559 [ 97.525773][ T6914] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 97.525790][ T6914] RSP: 002b:00007f141e846028 EFLAGS: 00000246 ORIG_RAX: 0000000000000098 [ 97.525808][ T6914] RAX: ffffffffffffffda RBX: 00007f141dc25fa0 RCX: 00007f141d99f559 [ 97.525820][ T6914] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 97.525830][ T6914] RBP: 00007f141dc25fa0 R08: 0000000000000000 R09: 0000000000000000 [ 97.525841][ T6914] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 97.525851][ T6914] R13: 00007f141dc26038 R14: 00007f141dc25fa0 R15: 00007ffeb26f3748 [ 97.525878][ T6914] [ 97.929283][ T6932] program syz.3.457 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 98.159214][ T6943] __nla_validate_parse: 1 callbacks suppressed [ 98.159231][ T6943] netlink: 28 bytes leftover after parsing attributes in process `syz.4.463'. [ 98.196538][ T6945] Zero length message leads to an empty skb [ 98.503900][ T6972] fuse: Unknown parameter '0x0000000000000003' [ 98.643765][ T6977] smc: smcd device lo applied user defined pnetid SYZ0 [ 98.695436][ T6981] netlink: 'syz.4.480': attribute type 1 has an invalid length. [ 98.805524][ T6989] netlink: 5740 bytes leftover after parsing attributes in process `syz.4.483'. [ 99.272382][ T7016] netlink: 'syz.2.494': attribute type 1 has an invalid length. [ 99.387435][ T7020] FAULT_INJECTION: forcing a failure. [ 99.387435][ T7020] name failslab, interval 1, probability 0, space 0, times 0 [ 99.387463][ T7020] CPU: 1 UID: 0 PID: 7020 Comm: syz.3.500 Not tainted syzkaller #0 PREEMPT(full) [ 99.387484][ T7020] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/15/2026 [ 99.387495][ T7020] Call Trace: [ 99.387501][ T7020] [ 99.387509][ T7020] dump_stack_lvl+0x100/0x190 [ 99.387542][ T7020] should_fail_ex.cold+0x5/0xa [ 99.387569][ T7020] should_failslab+0xc2/0x120 [ 99.387593][ T7020] kmem_cache_alloc_noprof+0x92/0x6a0 [ 99.387616][ T7020] ? sk_prot_alloc+0x60/0x2a0 [ 99.387641][ T7020] sk_prot_alloc+0x60/0x2a0 [ 99.387664][ T7020] sk_alloc+0x36/0xe80 [ 99.387692][ T7020] inet6_create+0x385/0x12b0 [ 99.387716][ T7020] ? inet6_create+0x7f/0x12b0 [ 99.387739][ T7020] __sock_create+0x339/0x860 [ 99.387766][ T7020] inet_ctl_sock_create+0x94/0x230 [ 99.387795][ T7020] ? __pfx_inet_ctl_sock_create+0x10/0x10 [ 99.387825][ T7020] ? neigh_table_register+0xd30/0x11b0 [ 99.387854][ T7020] ndisc_net_init+0x1a1/0x3e0 [ 99.387878][ T7020] ? __pfx_ndisc_net_init+0x10/0x10 [ 99.387904][ T7020] ? ac6_proc_init+0x5f/0x80 [ 99.387926][ T7020] ? inet6_net_init+0x76d/0xa20 [ 99.387947][ T7020] ? __pfx_ndisc_net_init+0x10/0x10 [ 99.387973][ T7020] ops_init+0x1e2/0x5f0 [ 99.387994][ T7020] setup_net+0x118/0x3a0 [ 99.388013][ T7020] ? __pfx_setup_net+0x10/0x10 [ 99.388033][ T7020] ? bpf_lsm_namespace_init+0x9/0x10 [ 99.388066][ T7020] copy_net_ns+0x340/0x7a0 [ 99.388096][ T7020] create_new_namespaces+0x3ea/0xac0 [ 99.388123][ T7020] unshare_nsproxy_namespaces+0xf6/0x210 [ 99.388145][ T7020] ksys_unshare+0x44f/0x980 [ 99.388163][ T7020] ? __pfx_ksys_unshare+0x10/0x10 [ 99.388192][ T7020] __x64_sys_unshare+0x31/0x40 [ 99.388209][ T7020] do_syscall_64+0x123/0x790 [ 99.388231][ T7020] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 99.388247][ T7020] RIP: 0033:0x7f10f619f559 [ 99.388263][ T7020] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 99.388281][ T7020] RSP: 002b:00007f10f7048028 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 99.388300][ T7020] RAX: ffffffffffffffda RBX: 00007f10f6425fa0 RCX: 00007f10f619f559 [ 99.388312][ T7020] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000040000000 [ 99.388323][ T7020] RBP: 00007f10f6236b20 R08: 0000000000000000 R09: 0000000000000000 [ 99.388333][ T7020] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 99.388343][ T7020] R13: 00007f10f6426038 R14: 00007f10f6425fa0 R15: 00007fff79c67aa8 [ 99.388369][ T7020] [ 99.389790][ T7020] ICMPv6: NDISC: Failed to initialize the control socket (err -105) [ 99.915210][ T7044] netlink: 'syz.3.508': attribute type 1 has an invalid length. [ 100.051715][ T7048] fuse: Unknown parameter '0x0000000000000003' [ 100.226008][ T7060] netlink: 16 bytes leftover after parsing attributes in process `syz.3.514'. [ 100.247173][ T7059] netlink: 8 bytes leftover after parsing attributes in process `syz.1.516'. [ 100.328697][ T7067] netlink: 'syz.2.521': attribute type 1 has an invalid length. [ 100.368756][ T7071] process 'syz.3.519' launched './file0' with NULL argv: empty string added [ 100.393972][ T30] kauditd_printk_skb: 19 callbacks suppressed [ 100.393985][ T30] audit: type=1400 audit(1792960686.222:933): avc: denied { entrypoint } for pid=7068 comm="syz.3.519" path="/123/file0" dev="tmpfs" ino=650 scontext=system_u:object_r:hugetlbfs_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 100.426259][ T30] audit: type=1400 audit(1792960686.252:934): avc: denied { noatsecure } for pid=7068 comm="syz.3.519" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:hugetlbfs_t tclass=process permissive=1 [ 100.547596][ T30] audit: type=1326 audit(1792960686.372:935): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7080 comm="syz.4.525" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fee2139f559 code=0x7ffc0000 [ 100.547706][ T30] audit: type=1326 audit(1792960686.372:936): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7080 comm="syz.4.525" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fee2139f559 code=0x7ffc0000 [ 100.548709][ T30] audit: type=1326 audit(1792960686.372:937): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7080 comm="syz.4.525" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fee2139f559 code=0x7ffc0000 [ 100.548885][ T30] audit: type=1326 audit(1792960686.372:938): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7080 comm="syz.4.525" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fee2139f559 code=0x7ffc0000 [ 100.550082][ T30] audit: type=1326 audit(1792960686.372:939): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7080 comm="syz.4.525" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=157 compat=0 ip=0x7fee2139f559 code=0x7ffc0000 [ 100.550191][ T30] audit: type=1326 audit(1792960686.372:940): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7080 comm="syz.4.525" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fee2139f559 code=0x7ffc0000 [ 100.550346][ T30] audit: type=1326 audit(1792960686.372:941): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7080 comm="syz.4.525" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fee2139f559 code=0x7ffc0000 [ 100.581538][ T30] audit: type=1326 audit(1792960686.382:942): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7080 comm="syz.4.525" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fee2139f559 code=0x7ffc0000 [ 100.860840][ T7083] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1001 sclass=netlink_route_socket pid=7083 comm=syz.4.525 [ 100.935384][ T7100] netlink: 4 bytes leftover after parsing attributes in process `syz.2.533'. [ 100.951119][ T7100] batadv0: entered promiscuous mode [ 100.957765][ T7100] macvtap1: entered promiscuous mode [ 100.966258][ T7100] 8021q: adding VLAN 0 to HW filter on device macvtap1 [ 100.985447][ T7100] batadv0: left promiscuous mode [ 101.121503][ T5848] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 101.271567][ T5848] usb 5-1: Using ep0 maxpacket: 16 [ 101.273842][ T5848] usb 5-1: New USB device found: idVendor=0763, idProduct=2001, bcdDevice=0.40 [ 101.320122][ T5848] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 101.320137][ T5848] usb 5-1: Product: syz [ 101.320145][ T5848] usb 5-1: Manufacturer: syz [ 101.320154][ T5848] usb 5-1: SerialNumber: syz [ 102.422792][ T7131] netlink: 176 bytes leftover after parsing attributes in process `syz.2.546'. [ 102.480028][ T62] IPVS: starting estimator thread 0... [ 102.573982][ T7135] IPVS: using max 74 ests per chain, 177600 per kthread [ 103.552787][ T7176] bond1: option arp_validate: mode dependency failed, not supported in mode balance-alb(6) [ 103.584413][ T7176] bond1 (unregistering): Released all slaves [ 103.596895][ T5848] usb 5-1: 1:1: invalid format type 0x1002 is detected, processed as PCM [ 103.596917][ T5848] usb 5-1: 1:1 : invalid UAC_FORMAT_TYPE desc [ 103.598164][ T5848] usb 5-1: 2:1 : UAC_AS_GENERAL descriptor not found [ 103.726077][ T5848] usb 5-1: USB disconnect, device number 3 [ 103.832927][ T6813] udevd[6813]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 104.089157][ T7196] netlink: 44 bytes leftover after parsing attributes in process `syz.0.574'. [ 106.278382][ T7263] netlink: 96 bytes leftover after parsing attributes in process `syz.1.603'. [ 106.305800][ T7261] loop7: detected capacity change from 0 to 16384 [ 106.547787][ T30] kauditd_printk_skb: 489 callbacks suppressed [ 106.547816][ T30] audit: type=1400 audit(1792960692.362:1432): avc: denied { read } for pid=7275 comm="syz.4.608" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 106.589627][ T7278] syz.0.609 uses obsolete (PF_INET,SOCK_PACKET) [ 106.839418][ T7270] loop7: detected capacity change from 16384 to 0 [ 106.979945][ T7291] openvswitch: netlink: IP tunnel dst address not specified [ 107.361097][ T30] audit: type=1400 audit(1792960693.182:1433): avc: denied { create } for pid=7306 comm="syz.2.621" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 107.363828][ T30] audit: type=1400 audit(1792960693.192:1434): avc: denied { connect } for pid=7306 comm="syz.2.621" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 107.364596][ T30] audit: type=1400 audit(1792960693.192:1435): avc: denied { write } for pid=7306 comm="syz.2.621" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 107.460578][ T7309] syzkaller0: entered promiscuous mode [ 107.460599][ T7309] syzkaller0: entered allmulticast mode [ 107.581603][ T5751] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 107.712488][ T5751] usb 5-1: device descriptor read/64, error -71 [ 107.753359][ T30] audit: type=1400 audit(1792960693.582:1436): avc: denied { bind } for pid=7318 comm="syz.1.627" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 107.795044][ T7322] netlink: 4 bytes leftover after parsing attributes in process `syz.3.628'. [ 107.847025][ T30] audit: type=1400 audit(1792960693.672:1437): avc: denied { create } for pid=7326 comm="syz.3.631" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 107.854203][ T30] audit: type=1400 audit(1792960693.672:1438): avc: denied { ioctl } for pid=7326 comm="syz.3.631" path="socket:[14141]" dev="sockfs" ino=14141 ioctlcmd=0x8914 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 107.953001][ T5751] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 108.026871][ T30] audit: type=1400 audit(1792960693.852:1439): avc: denied { append } for pid=7335 comm="syz.3.633" name="001" dev="devtmpfs" ino=738 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 108.081693][ T5751] usb 5-1: device descriptor read/64, error -71 [ 108.178691][ T30] audit: type=1400 audit(1792960694.002:1440): avc: denied { read } for pid=7346 comm="syz.1.637" name="sg0" dev="devtmpfs" ino=860 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 108.193504][ T5751] usb usb5-port1: attempt power cycle [ 108.218398][ T30] audit: type=1400 audit(1792960694.042:1441): avc: denied { ioctl } for pid=7346 comm="syz.1.637" path="/dev/sg0" dev="devtmpfs" ino=860 ioctlcmd=0xc0605345 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 108.542510][ T5751] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 108.562118][ T5751] usb 5-1: device descriptor read/8, error -71 [ 108.677254][ T7370] netlink: 12 bytes leftover after parsing attributes in process `syz.1.645'. [ 108.814075][ T5751] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 108.837769][ T5751] usb 5-1: device descriptor read/8, error -71 [ 108.943398][ T5751] usb usb5-port1: unable to enumerate USB device [ 109.268981][ T7400] netlink: 8 bytes leftover after parsing attributes in process `syz.0.653'. [ 110.002925][ T7447] netlink: 96 bytes leftover after parsing attributes in process `syz.2.667'. [ 110.313459][ T7456] netlink: 4 bytes leftover after parsing attributes in process `syz.4.671'. [ 110.313485][ T7456] netlink: 5740 bytes leftover after parsing attributes in process `syz.4.671'. [ 110.313512][ T7456] netlink: 4 bytes leftover after parsing attributes in process `syz.4.671'. [ 110.919985][ T7489] netlink: 8 bytes leftover after parsing attributes in process `syz.1.685'. [ 110.921275][ T7482] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 110.939196][ T7485] sctp: [Deprecated]: syz.2.682 (pid 7485) Use of int in maxseg socket option. [ 110.939196][ T7485] Use struct sctp_assoc_value instead [ 111.508944][ T7482] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 111.572199][ T7482] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 111.649953][ T7482] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 111.709464][ T7504] key id 00000001 not found [ 111.723592][ T102] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 111.801990][ T4217] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 111.811745][ T4238] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 111.812329][ T4238] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 111.937087][ T30] kauditd_printk_skb: 19 callbacks suppressed [ 111.937105][ T30] audit: type=1400 audit(1792960697.762:1461): avc: denied { mount } for pid=7515 comm="syz.4.695" name="/" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=filesystem permissive=1 [ 111.969533][ T30] audit: type=1400 audit(1792960697.792:1462): avc: denied { setattr } for pid=7515 comm="syz.4.695" name="/" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=dir permissive=1 [ 112.014477][ T30] audit: type=1400 audit(1792960697.842:1463): avc: denied { read write } for pid=7517 comm="syz.3.697" name="event1" dev="devtmpfs" ino=918 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 112.014706][ T30] audit: type=1400 audit(1792960697.842:1464): avc: denied { open } for pid=7517 comm="syz.3.697" path="/dev/input/event1" dev="devtmpfs" ino=918 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 112.016612][ T30] audit: type=1400 audit(1792960697.842:1465): avc: denied { ioctl } for pid=7517 comm="syz.3.697" path="/dev/input/event1" dev="devtmpfs" ino=918 ioctlcmd=0x40044590 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 112.144765][ T30] audit: type=1400 audit(1792960697.962:1466): avc: denied { unmount } for pid=5621 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=filesystem permissive=1 [ 112.784372][ T7514] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 113.030405][ T7543] netlink: 8 bytes leftover after parsing attributes in process `syz.1.707'. [ 113.030426][ T7543] netlink: 4 bytes leftover after parsing attributes in process `syz.1.707'. [ 113.043338][ T5751] dummy0: entered promiscuous mode [ 113.045548][ T7543] macvtap1: entered allmulticast mode [ 113.045562][ T7543] dummy0: entered allmulticast mode [ 113.111327][ T7547] netlink: 1024 bytes leftover after parsing attributes in process `syz.2.709'. [ 113.269523][ T30] audit: type=1400 audit(1792960699.092:1467): avc: denied { setopt } for pid=7533 comm="syz.0.703" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 113.302792][ T7563] netlink: 100 bytes leftover after parsing attributes in process `syz.3.716'. [ 113.497535][ T7574] FAULT_INJECTION: forcing a failure. [ 113.497535][ T7574] name failslab, interval 1, probability 0, space 0, times 0 [ 113.497566][ T7574] CPU: 0 UID: 0 PID: 7574 Comm: syz.1.720 Not tainted syzkaller #0 PREEMPT(full) [ 113.497587][ T7574] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/15/2026 [ 113.497598][ T7574] Call Trace: [ 113.497604][ T7574] [ 113.497612][ T7574] dump_stack_lvl+0x100/0x190 [ 113.497644][ T7574] should_fail_ex.cold+0x5/0xa [ 113.497672][ T7574] should_failslab+0xc2/0x120 [ 113.497698][ T7574] __kmalloc_cache_noprof+0x91/0x6d0 [ 113.497718][ T7574] ? copy_net_ns+0x130/0x7a0 [ 113.497744][ T7574] copy_net_ns+0x130/0x7a0 [ 113.497763][ T7574] ? copy_cgroup_ns+0x64/0x970 [ 113.497783][ T7574] create_new_namespaces+0x3ea/0xac0 [ 113.497814][ T7574] unshare_nsproxy_namespaces+0xf6/0x210 [ 113.497840][ T7574] ksys_unshare+0x44f/0x980 [ 113.497862][ T7574] ? __pfx_ksys_unshare+0x10/0x10 [ 113.497897][ T7574] __x64_sys_unshare+0x31/0x40 [ 113.497918][ T7574] do_syscall_64+0x123/0x790 [ 113.497945][ T7574] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 113.497965][ T7574] RIP: 0033:0x7f8bc439f559 [ 113.497981][ T7574] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 113.498000][ T7574] RSP: 002b:00007f8bc525a028 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 113.498019][ T7574] RAX: ffffffffffffffda RBX: 00007f8bc4625fa0 RCX: 00007f8bc439f559 [ 113.498032][ T7574] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000040000000 [ 113.498044][ T7574] RBP: 00007f8bc4436b20 R08: 0000000000000000 R09: 0000000000000000 [ 113.498056][ T7574] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 113.498067][ T7574] R13: 00007f8bc4626038 R14: 00007f8bc4625fa0 R15: 00007ffc0b6e8f88 [ 113.498093][ T7574] [ 113.581784][ T30] audit: type=1326 audit(1792960699.402:1468): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7579 comm="syz.4.721" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fee2139f559 code=0x7ffc0000 [ 113.581823][ T30] audit: type=1326 audit(1792960699.402:1469): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7579 comm="syz.4.721" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fee2139f559 code=0x7ffc0000 [ 113.581854][ T30] audit: type=1326 audit(1792960699.402:1470): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7579 comm="syz.4.721" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fee2139f559 code=0x7ffc0000 [ 113.853229][ T7581] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1001 sclass=netlink_route_socket pid=7581 comm=syz.4.721 [ 113.941313][ T7596] bridge: RTM_NEWNEIGH with invalid ether address [ 114.101586][ T5763] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 114.251847][ T5763] usb 5-1: Using ep0 maxpacket: 16 [ 114.254301][ T5763] usb 5-1: New USB device found: idVendor=0763, idProduct=2001, bcdDevice=0.40 [ 114.289640][ T5763] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 114.289662][ T5763] usb 5-1: Product: syz [ 114.289676][ T5763] usb 5-1: Manufacturer: syz [ 114.289689][ T5763] usb 5-1: SerialNumber: syz [ 114.993703][ T7638] netlink: 'syz.0.744': attribute type 1 has an invalid length. [ 115.125933][ T7603] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 115.125983][ T7603] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 115.155975][ T7603] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 115.176835][ T7603] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 115.176946][ T7603] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 115.181330][ T7603] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 115.205766][ T7603] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 115.206496][ T7603] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 115.218533][ T7603] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 115.235164][ T7603] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 115.235528][ T7603] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 115.242781][ T7603] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 115.264925][ T7603] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 115.265011][ T7603] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 115.270844][ T7603] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 115.455526][ T7655] __nla_validate_parse: 1 callbacks suppressed [ 115.455543][ T7655] netlink: 12 bytes leftover after parsing attributes in process `syz.1.750'. [ 115.587489][ T7665] FAULT_INJECTION: forcing a failure. [ 115.587489][ T7665] name fail_futex, interval 1, probability 0, space 0, times 0 [ 115.587518][ T7665] CPU: 0 UID: 0 PID: 7665 Comm: syz.2.757 Not tainted syzkaller #0 PREEMPT(full) [ 115.587539][ T7665] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/15/2026 [ 115.587549][ T7665] Call Trace: [ 115.587555][ T7665] [ 115.587562][ T7665] dump_stack_lvl+0x100/0x190 [ 115.587596][ T7665] should_fail_ex.cold+0x5/0xa [ 115.587624][ T7665] get_futex_key+0x1c9/0x13e0 [ 115.587659][ T7665] ? __pfx_get_futex_key+0x10/0x10 [ 115.587685][ T7665] ? trace_kmem_cache_alloc+0xdd/0x100 [ 115.587712][ T7665] ? kmem_cache_alloc_noprof+0x2d5/0x6a0 [ 115.587740][ T7665] futex_wake+0xf4/0x5e0 [ 115.587766][ T7665] ? __pfx_futex_wake+0x10/0x10 [ 115.587792][ T7665] ? alloc_file_pseudo+0x1e9/0x290 [ 115.587817][ T7665] do_futex+0x2b2/0x440 [ 115.587837][ T7665] ? __pfx_do_futex+0x10/0x10 [ 115.587864][ T7665] __x64_sys_futex+0x34f/0x4d0 [ 115.587887][ T7665] ? __pfx___x64_sys_futex+0x10/0x10 [ 115.587905][ T7665] ? ksys_write+0x1ac/0x250 [ 115.587928][ T7665] ? __pfx___x64_sys_signalfd4+0x10/0x10 [ 115.587962][ T7665] do_syscall_64+0x123/0x790 [ 115.587988][ T7665] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 115.588006][ T7665] RIP: 0033:0x7f3c16d9f559 [ 115.588021][ T7665] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 115.588037][ T7665] RSP: 002b:00007f3c17c520e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 115.588063][ T7665] RAX: ffffffffffffffda RBX: 00007f3c17025fa8 RCX: 00007f3c16d9f559 [ 115.588076][ T7665] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007f3c17025fac [ 115.588088][ T7665] RBP: 00007f3c17025fa0 R08: 0000000000000001 R09: 0000000000000000 [ 115.588099][ T7665] R10: 0000000000000004 R11: 0000000000000246 R12: 0000000000000000 [ 115.588111][ T7665] R13: 00007f3c17026038 R14: 00007fff86033620 R15: 00007fff86033708 [ 115.588138][ T7665] [ 115.684059][ T7671] serial 00:03: in use; can't configure [ 115.764181][ T5763] usb 5-1: 1:1: invalid format type 0x1002 is detected, processed as PCM [ 115.764204][ T5763] usb 5-1: 1:1 : invalid UAC_FORMAT_TYPE desc [ 115.768019][ T5763] usb 5-1: 2:1 : UAC_AS_GENERAL descriptor not found [ 115.926681][ T5763] usb 5-1: USB disconnect, device number 8 [ 115.967330][ T7595] udevd[7595]: setting mode of /dev/bus/usb/005/008 to 020664 failed: No such file or directory [ 115.967428][ T7595] udevd[7595]: setting owner of /dev/bus/usb/005/008 to uid=0, gid=0 failed: No such file or directory [ 116.003170][ T7674] udevd[7674]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 116.155001][ T7684] netlink: 40 bytes leftover after parsing attributes in process `syz.1.766'. [ 116.155020][ T7684] netlink: 508 bytes leftover after parsing attributes in process `syz.1.766'. [ 116.155033][ T7684] netlink: 40 bytes leftover after parsing attributes in process `syz.1.766'. [ 116.221733][ T5627] Bluetooth: hci0: command 0x0c1a tx timeout [ 117.024886][ T30] kauditd_printk_skb: 410 callbacks suppressed [ 117.024902][ T30] audit: type=1400 audit(1792960702.842:1881): avc: denied { connect } for pid=7691 comm="syz.1.768" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 117.110443][ T7713] netlink: 'syz.0.777': attribute type 1 has an invalid length. [ 117.206744][ T5627] Bluetooth: hci1: command 0x0c1a tx timeout [ 117.240273][ T30] audit: type=1400 audit(1792960703.062:1882): avc: denied { name_connect } for pid=7716 comm="syz.2.778" dest=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:reserved_port_t tclass=sctp_socket permissive=1 [ 117.261654][ T53] Bluetooth: hci2: command 0x0c1a tx timeout [ 117.261712][ T5627] Bluetooth: hci3: command 0x0c1a tx timeout [ 117.299357][ T30] audit: type=1326 audit(1792960703.122:1883): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7718 comm="syz.1.781" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8bc439f559 code=0x7ffc0000 [ 117.299484][ T30] audit: type=1326 audit(1792960703.122:1884): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7718 comm="syz.1.781" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8bc439f559 code=0x7ffc0000 [ 117.313750][ T30] audit: type=1326 audit(1792960703.142:1885): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7718 comm="syz.1.781" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f8bc439f559 code=0x7ffc0000 [ 117.313788][ T30] audit: type=1326 audit(1792960703.142:1886): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7718 comm="syz.1.781" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8bc439f559 code=0x7ffc0000 [ 117.313819][ T30] audit: type=1326 audit(1792960703.142:1887): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7718 comm="syz.1.781" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8bc439f559 code=0x7ffc0000 [ 117.315714][ T30] audit: type=1326 audit(1792960703.142:1888): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7718 comm="syz.1.781" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=270 compat=0 ip=0x7f8bc439f559 code=0x7ffc0000 [ 117.316030][ T30] audit: type=1326 audit(1792960703.142:1889): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7718 comm="syz.1.781" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8bc439f559 code=0x7ffc0000 [ 117.342486][ T5627] Bluetooth: hci4: command 0x0c1a tx timeout [ 117.570477][ T30] audit: type=1400 audit(1792960703.392:1890): avc: denied { write } for pid=7730 comm="syz.0.786" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 117.747075][ T7742] ip_tables: iptables: counters copy to user failed while replacing table [ 117.869910][ T7748] netlink: 16 bytes leftover after parsing attributes in process `syz.0.795'. [ 118.442416][ T5627] Bluetooth: hci0: command 0x0c1a tx timeout [ 118.680026][ T7773] FAULT_INJECTION: forcing a failure. [ 118.680026][ T7773] name failslab, interval 1, probability 0, space 0, times 0 [ 118.680055][ T7773] CPU: 1 UID: 60928 PID: 7773 Comm: syz.1.804 Not tainted syzkaller #0 PREEMPT(full) [ 118.680076][ T7773] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/15/2026 [ 118.680087][ T7773] Call Trace: [ 118.680093][ T7773] [ 118.680101][ T7773] dump_stack_lvl+0x100/0x190 [ 118.680131][ T7773] should_fail_ex.cold+0x5/0xa [ 118.680159][ T7773] should_failslab+0xc2/0x120 [ 118.680185][ T7773] __kmalloc_cache_noprof+0x91/0x6d0 [ 118.680204][ T7773] ? alloc_pipe_info+0x109/0x590 [ 118.680239][ T7773] alloc_pipe_info+0x109/0x590 [ 118.680270][ T7773] create_pipe_files+0x8c/0x930 [ 118.680298][ T7773] do_pipe2+0xbd/0x1e0 [ 118.680323][ T7773] ? __pfx_do_pipe2+0x10/0x10 [ 118.680348][ T7773] ? xfd_validate_state+0x129/0x190 [ 118.680376][ T7773] __x64_sys_pipe2+0x54/0x80 [ 118.680402][ T7773] do_syscall_64+0x123/0x790 [ 118.680438][ T7773] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 118.680457][ T7773] RIP: 0033:0x7f8bc439f559 [ 118.680472][ T7773] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 118.680489][ T7773] RSP: 002b:00007f8bc525a028 EFLAGS: 00000246 ORIG_RAX: 0000000000000125 [ 118.680507][ T7773] RAX: ffffffffffffffda RBX: 00007f8bc4625fa0 RCX: 00007f8bc439f559 [ 118.680518][ T7773] RDX: 0000000000000000 RSI: 0000000000000800 RDI: 0000200000000680 [ 118.680529][ T7773] RBP: 00007f8bc4436b20 R08: 0000000000000000 R09: 0000000000000000 [ 118.680540][ T7773] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 118.680550][ T7773] R13: 00007f8bc4626038 R14: 00007f8bc4625fa0 R15: 00007ffc0b6e8f88 [ 118.680574][ T7773] [ 118.810939][ T7772] syzkaller0: Number of in use tx queues changed invalidating tc mappings. Priority traffic classification disabled! [ 119.312530][ T5627] Bluetooth: hci1: command 0x0c1a tx timeout [ 119.341770][ T5627] Bluetooth: hci3: command 0x0c1a tx timeout [ 119.341780][ T53] Bluetooth: hci2: command 0x0c1a tx timeout [ 119.960160][ T5627] Bluetooth: hci4: command 0x0c1a tx timeout [ 120.252531][ T7791] netlink: 16 bytes leftover after parsing attributes in process `syz.2.809'. [ 120.372508][ T7797] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x57e00 [ 120.372533][ T7797] head: order:7 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 120.372548][ T7797] flags: 0xfff00000000040(head|node=0|zone=1|lastcpupid=0x7ff) [ 120.372566][ T7797] page_type: f8(unknown) [ 120.372583][ T7797] raw: 00fff00000000040 0000000000000000 dead000000000122 0000000000000000 [ 120.372599][ T7797] raw: 0000000000000000 0000000000000000 00000000f8000000 0000000000000000 [ 120.372616][ T7797] head: 00fff00000000040 0000000000000000 dead000000000122 0000000000000000 [ 120.372632][ T7797] head: 0000000000000000 0000000000000000 00000000f8000000 0000000000000000 [ 120.372648][ T7797] head: 00fff00000000007 ffffffffffffe001 00000000ffffffff 00000000ffffffff [ 120.372664][ T7797] head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000080 [ 120.372674][ T7797] page dumped because: unmovable page [ 120.372683][ T7797] page_owner tracks the page as allocated [ 120.372689][ T7797] page last allocated via order 7, migratetype Unmovable, gfp_mask 0x429c0(GFP_NOWAIT|__GFP_IO|__GFP_FS|__GFP_ZERO|__GFP_COMP), pid 5630, tgid 5630 (syz-executor), ts 70820339709 [ 120.372717][ T7797] post_alloc_hook+0xfd/0x120 [ 120.372748][ T7797] get_page_from_freelist+0x1113/0x35e0 [ 120.372767][ T7797] __alloc_frozen_pages_noprof+0x2f6/0x3190 [ 120.372786][ T7797] alloc_pages_mpol+0x201/0x560 [ 120.372813][ T7797] ___kmalloc_large_node+0x103/0x170 [ 120.372838][ T7797] __kmalloc_large_node_noprof+0x1c/0x70 [ 120.372877][ T7797] __kvmalloc_node_noprof+0x5d9/0x9b0 [ 120.372899][ T7797] ieee80211_txq_setup_flows+0x1a6/0xdf0 [ 120.372926][ T7797] ieee80211_register_hw+0x23ea/0x45c0 [ 120.372949][ T7797] mac80211_hwsim_new_radio+0x2b01/0x66f0 [ 120.372974][ T7797] hwsim_new_radio_nl+0xc6b/0x13f0 [ 120.372999][ T7797] genl_family_rcv_msg_doit+0x214/0x300 [ 120.373020][ T7797] genl_rcv_msg+0x560/0x800 [ 120.373039][ T7797] netlink_rcv_skb+0x159/0x420 [ 120.373055][ T7797] genl_rcv+0x28/0x40 [ 120.373072][ T7797] netlink_unicast+0x668/0x950 [ 120.373089][ T7797] page last free pid 1 tgid 1 ts 14890773325 stack trace: [ 120.373101][ T7797] free_pages_prepare+0x586/0xe00 [ 120.373127][ T7797] __free_contig_range_common+0x14f/0x250 [ 120.373155][ T7797] destroy_args+0xa8/0x7a0 [ 120.373181][ T7797] debug_vm_pgtable+0x1d69/0x3490 [ 120.373204][ T7797] do_one_initcall+0x11c/0x6f0 [ 120.373223][ T7797] kernel_init_freeable+0x6ea/0x7b0 [ 120.373247][ T7797] kernel_init+0x21/0x1d0 [ 120.373263][ T7797] ret_from_fork+0x730/0xd60 [ 120.373284][ T7797] ret_from_fork_asm+0x1a/0x30 [ 120.437380][ T7805] jffs2: notice: (7805) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 120.461664][ T5627] Bluetooth: hci0: command 0x0c1a tx timeout [ 120.770389][ T7812] FAULT_INJECTION: forcing a failure. [ 120.770389][ T7812] name failslab, interval 1, probability 0, space 0, times 0 [ 120.770435][ T7812] CPU: 1 UID: 60928 PID: 7812 Comm: syz.1.818 Not tainted syzkaller #0 PREEMPT(full) [ 120.770458][ T7812] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/15/2026 [ 120.770469][ T7812] Call Trace: [ 120.770475][ T7812] [ 120.770483][ T7812] dump_stack_lvl+0x100/0x190 [ 120.770517][ T7812] should_fail_ex.cold+0x5/0xa [ 120.770545][ T7812] should_failslab+0xc2/0x120 [ 120.770571][ T7812] kmem_cache_alloc_lru_noprof+0x8e/0x6a0 [ 120.770594][ T7812] ? __pfx_inode_set_ctime_to_ts+0x10/0x10 [ 120.770614][ T7812] ? __d_alloc+0x34/0xad0 [ 120.770636][ T7812] __d_alloc+0x34/0xad0 [ 120.770659][ T7812] d_alloc_pseudo+0x1c/0xc0 [ 120.770683][ T7812] alloc_file_pseudo+0x118/0x290 [ 120.770704][ T7812] ? __pfx_alloc_file_pseudo+0x10/0x10 [ 120.770731][ T7812] create_pipe_files+0x33a/0x930 [ 120.770762][ T7812] do_pipe2+0xbd/0x1e0 [ 120.770789][ T7812] ? __pfx_do_pipe2+0x10/0x10 [ 120.770816][ T7812] ? xfd_validate_state+0x129/0x190 [ 120.770846][ T7812] __x64_sys_pipe2+0x54/0x80 [ 120.770874][ T7812] do_syscall_64+0x123/0x790 [ 120.770902][ T7812] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 120.770922][ T7812] RIP: 0033:0x7f8bc439f559 [ 120.770938][ T7812] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 120.770955][ T7812] RSP: 002b:00007f8bc525a028 EFLAGS: 00000246 ORIG_RAX: 0000000000000125 [ 120.770974][ T7812] RAX: ffffffffffffffda RBX: 00007f8bc4625fa0 RCX: 00007f8bc439f559 [ 120.770988][ T7812] RDX: 0000000000000000 RSI: 0000000000000800 RDI: 0000200000000680 [ 120.770999][ T7812] RBP: 00007f8bc4436b20 R08: 0000000000000000 R09: 0000000000000000 [ 120.771011][ T7812] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 120.771021][ T7812] R13: 00007f8bc4626038 R14: 00007f8bc4625fa0 R15: 00007ffc0b6e8f88 [ 120.771048][ T7812] [ 121.167433][ T7822] jffs2: notice: (7822) jffs2_build_xattr_subsystem: complete building xattr subsystem, 1 of xdatum (0 unchecked, 0 orphan) and 1 of xref (0 dead, 0 orphan) found. [ 121.372714][ T5627] Bluetooth: hci1: command 0x0c1a tx timeout [ 121.422701][ T53] Bluetooth: hci3: command 0x0c1a tx timeout [ 121.423161][ T5627] Bluetooth: hci2: command 0x0c1a tx timeout [ 121.796652][ T7835] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x57e00 [ 121.796676][ T7835] head: order:7 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 121.796691][ T7835] flags: 0xfff00000000040(head|node=0|zone=1|lastcpupid=0x7ff) [ 121.796708][ T7835] page_type: f8(unknown) [ 121.796726][ T7835] raw: 00fff00000000040 0000000000000000 dead000000000122 0000000000000000 [ 121.796744][ T7835] raw: 0000000000000000 0000000000000000 00000000f8000000 0000000000000000 [ 121.796761][ T7835] head: 00fff00000000040 0000000000000000 dead000000000122 0000000000000000 [ 121.796778][ T7835] head: 0000000000000000 0000000000000000 00000000f8000000 0000000000000000 [ 121.796796][ T7835] head: 00fff00000000007 ffffffffffffe001 00000000ffffffff 00000000ffffffff [ 121.796811][ T7835] head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000080 [ 121.796821][ T7835] page dumped because: unmovable page [ 121.796829][ T7835] page_owner tracks the page as allocated [ 121.796836][ T7835] page last allocated via order 7, migratetype Unmovable, gfp_mask 0x429c0(GFP_NOWAIT|__GFP_IO|__GFP_FS|__GFP_ZERO|__GFP_COMP), pid 5630, tgid 5630 (syz-executor), ts 70820339709 [ 121.796873][ T7835] post_alloc_hook+0xfd/0x120 [ 121.796906][ T7835] get_page_from_freelist+0x1113/0x35e0 [ 121.796925][ T7835] __alloc_frozen_pages_noprof+0x2f6/0x3190 [ 121.796945][ T7835] alloc_pages_mpol+0x201/0x560 [ 121.796969][ T7835] ___kmalloc_large_node+0x103/0x170 [ 121.796992][ T7835] __kmalloc_large_node_noprof+0x1c/0x70 [ 121.797014][ T7835] __kvmalloc_node_noprof+0x5d9/0x9b0 [ 121.797035][ T7835] ieee80211_txq_setup_flows+0x1a6/0xdf0 [ 121.797059][ T7835] ieee80211_register_hw+0x23ea/0x45c0 [ 121.797083][ T7835] mac80211_hwsim_new_radio+0x2b01/0x66f0 [ 121.797109][ T7835] hwsim_new_radio_nl+0xc6b/0x13f0 [ 121.797131][ T7835] genl_family_rcv_msg_doit+0x214/0x300 [ 121.797150][ T7835] genl_rcv_msg+0x560/0x800 [ 121.797167][ T7835] netlink_rcv_skb+0x159/0x420 [ 121.797184][ T7835] genl_rcv+0x28/0x40 [ 121.797201][ T7835] netlink_unicast+0x668/0x950 [ 121.797216][ T7835] page last free pid 1 tgid 1 ts 14890773325 stack trace: [ 121.797228][ T7835] free_pages_prepare+0x586/0xe00 [ 121.797253][ T7835] __free_contig_range_common+0x14f/0x250 [ 121.797280][ T7835] destroy_args+0xa8/0x7a0 [ 121.797307][ T7835] debug_vm_pgtable+0x1d69/0x3490 [ 121.797335][ T7835] do_one_initcall+0x11c/0x6f0 [ 121.797353][ T7835] kernel_init_freeable+0x6ea/0x7b0 [ 121.797380][ T7835] kernel_init+0x21/0x1d0 [ 121.797397][ T7835] ret_from_fork+0x730/0xd60 [ 121.797419][ T7835] ret_from_fork_asm+0x1a/0x30 [ 122.010564][ T5627] Bluetooth: hci4: command 0x0c1a tx timeout [ 122.103827][ T7851] fuse: fd is not a fuse device [ 122.104120][ T30] kauditd_printk_skb: 21 callbacks suppressed [ 122.104132][ T30] audit: type=1400 audit(1792960707.932:1912): avc: denied { mounton } for pid=7850 comm="syz.0.834" path="/160/file0" dev="tmpfs" ino=841 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 122.109005][ T7849] netlink: 24 bytes leftover after parsing attributes in process `syz.4.833'. [ 122.872325][ T7855] netlink: 12 bytes leftover after parsing attributes in process `syz.2.836'. [ 123.391690][ T30] audit: type=1326 audit(1792960709.212:1913): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7862 comm="syz.1.840" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8bc439f559 code=0x7ffc0000 [ 123.421795][ T30] audit: type=1326 audit(1792960709.242:1914): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7862 comm="syz.1.840" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8bc439f559 code=0x7ffc0000 [ 123.444551][ T30] audit: type=1326 audit(1792960709.272:1915): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7862 comm="syz.1.840" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=2 compat=0 ip=0x7f8bc439f559 code=0x7ffc0000 [ 123.448239][ T30] audit: type=1326 audit(1792960709.272:1916): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7862 comm="syz.1.840" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8bc439f559 code=0x7ffc0000 [ 123.454072][ T30] audit: type=1326 audit(1792960709.272:1917): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7862 comm="syz.1.840" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8bc439f559 code=0x7ffc0000 [ 123.456515][ T30] audit: type=1326 audit(1792960709.282:1918): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7862 comm="syz.1.840" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=93 compat=0 ip=0x7f8bc439f559 code=0x7ffc0000 [ 123.470691][ T30] audit: type=1326 audit(1792960709.292:1919): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7862 comm="syz.1.840" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8bc439f559 code=0x7ffc0000 [ 123.476102][ T30] audit: type=1326 audit(1792960709.302:1920): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7862 comm="syz.1.840" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8bc439f559 code=0x7ffc0000 [ 123.945609][ T30] audit: type=1400 audit(1792960709.772:1921): avc: denied { ioctl } for pid=7872 comm="syz.1.845" path="socket:[16320]" dev="sockfs" ino=16320 ioctlcmd=0x40189429 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 124.023025][ T7877] netlink: 'syz.2.844': attribute type 1 has an invalid length. [ 124.194008][ T7885] netlink: 12 bytes leftover after parsing attributes in process `syz.2.849'. [ 125.244336][ T7912] netlink: 12 bytes leftover after parsing attributes in process `syz.1.862'. [ 126.782459][ T7932] netlink: 8 bytes leftover after parsing attributes in process `syz.2.866'. [ 126.958830][ T7943] netlink: 12 bytes leftover after parsing attributes in process `syz.1.874'. [ 127.140059][ T30] kauditd_printk_skb: 5 callbacks suppressed [ 127.140076][ T30] audit: type=1400 audit(1792960712.962:1927): avc: denied { bind } for pid=7948 comm="syz.1.877" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 127.150012][ T30] audit: type=1400 audit(1792960712.972:1928): avc: denied { write } for pid=7948 comm="syz.1.877" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 127.256722][ T30] audit: type=1400 audit(1792960713.082:1929): avc: denied { shutdown } for pid=7955 comm="syz.2.880" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 127.280615][ T1315] ieee802154 phy0 wpan0: encryption failed: -22 [ 127.280660][ T1315] ieee802154 phy1 wpan1: encryption failed: -22 [ 127.797275][ T30] audit: type=1400 audit(1792960713.152:1930): avc: denied { ioctl } for pid=7944 comm="syz.4.875" path="socket:[16591]" dev="sockfs" ino=16591 ioctlcmd=0x8946 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 128.045869][ T7968] netlink: 12 bytes leftover after parsing attributes in process `syz.3.883'. [ 128.421557][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 130.283533][ T30] audit: type=1400 audit(1792960716.112:1931): avc: denied { create } for pid=8011 comm="syz.2.903" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 130.287222][ T8012] FAULT_INJECTION: forcing a failure. [ 130.287222][ T8012] name fail_futex, interval 1, probability 0, space 0, times 0 [ 130.287249][ T8012] CPU: 0 UID: 0 PID: 8012 Comm: syz.2.903 Not tainted syzkaller #0 PREEMPT(full) [ 130.287269][ T8012] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/15/2026 [ 130.287280][ T8012] Call Trace: [ 130.287285][ T8012] [ 130.287293][ T8012] dump_stack_lvl+0x100/0x190 [ 130.287329][ T8012] should_fail_ex.cold+0x5/0xa [ 130.287357][ T8012] get_futex_key+0x1c9/0x13e0 [ 130.287391][ T8012] ? __pfx_get_futex_key+0x10/0x10 [ 130.287419][ T8012] ? wakeup_preempt_fair+0x4fc/0xf60 [ 130.287447][ T8012] ? tracing_record_taskinfo_sched_switch+0xac/0x560 [ 130.287482][ T8012] futex_wait_setup+0x91/0x540 [ 130.287513][ T8012] __futex_wait+0x19f/0x360 [ 130.287539][ T8012] ? __pfx___futex_wait+0x10/0x10 [ 130.287560][ T8012] ? __pfx_try_to_wake_up+0x10/0x10 [ 130.287583][ T8012] ? futex_hash+0x311/0x400 [ 130.287614][ T8012] ? __pfx_futex_wake_mark+0x10/0x10 [ 130.287642][ T8012] ? find_held_lock+0x2b/0x80 [ 130.287659][ T8012] ? futex_wake+0x4ea/0x5e0 [ 130.287688][ T8012] futex_wait+0xe6/0x370 [ 130.287712][ T8012] ? __pfx_futex_wait+0x10/0x10 [ 130.287741][ T8012] ? alg_get_type+0xbc/0x150 [ 130.287776][ T8012] do_futex+0x265/0x440 [ 130.287798][ T8012] ? __pfx_do_futex+0x10/0x10 [ 130.287819][ T8012] ? __sys_bind+0x1c7/0x260 [ 130.287850][ T8012] __x64_sys_futex+0x34f/0x4d0 [ 130.287872][ T8012] ? __pfx___x64_sys_futex+0x10/0x10 [ 130.287904][ T8012] do_syscall_64+0x123/0x790 [ 130.287934][ T8012] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 130.287955][ T8012] RIP: 0033:0x7f3c16d9f559 [ 130.287970][ T8012] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 130.287988][ T8012] RSP: 002b:00007f3c17c520e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 130.288007][ T8012] RAX: ffffffffffffffda RBX: 00007f3c17025fa8 RCX: 00007f3c16d9f559 [ 130.288019][ T8012] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007f3c17025fa8 [ 130.288030][ T8012] RBP: 00007f3c17025fa0 R08: 0000000000000000 R09: 0000000000000000 [ 130.288042][ T8012] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 130.288053][ T8012] R13: 00007f3c17026038 R14: 00007fff86033620 R15: 00007fff86033708 [ 130.288080][ T8012] [ 130.288118][ T30] audit: type=1400 audit(1792960716.112:1932): avc: denied { bind } for pid=8011 comm="syz.2.903" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 130.298716][ T30] audit: type=1400 audit(1792960716.122:1933): avc: denied { setopt } for pid=8011 comm="syz.2.903" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 130.796853][ T30] audit: type=1400 audit(1792960716.622:1934): avc: denied { write } for pid=8025 comm="syz.2.908" name="rpc" dev="proc" ino=4026533148 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysctl_rpc_t tclass=dir permissive=1 [ 130.797317][ T30] audit: type=1400 audit(1792960716.622:1935): avc: denied { add_name } for pid=8025 comm="syz.2.908" name="use-gss-proxy" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysctl_rpc_t tclass=dir permissive=1 [ 130.800983][ T30] audit: type=1400 audit(1792960716.622:1936): avc: denied { create } for pid=8025 comm="syz.2.908" name="use-gss-proxy" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysctl_rpc_t tclass=file permissive=1 [ 131.911859][ T8036] syzkaller0: entered promiscuous mode [ 131.911880][ T8036] syzkaller0: entered allmulticast mode [ 132.360090][ T30] kauditd_printk_skb: 3 callbacks suppressed [ 132.360107][ T30] audit: type=1400 audit(1792960718.182:1940): avc: denied { write } for pid=8043 comm="syz.3.916" name="001" dev="devtmpfs" ino=720 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 132.658712][ T30] audit: type=1400 audit(1792960718.482:1941): avc: denied { write } for pid=8048 comm="syz.3.919" name="sg0" dev="devtmpfs" ino=860 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 132.892861][ T8057] netlink: 5 bytes leftover after parsing attributes in process `syz.3.921'. [ 133.090501][ T8069] syzkaller0: entered promiscuous mode [ 133.090522][ T8069] syzkaller0: entered allmulticast mode [ 133.951441][ T0] NOHZ tick-stop error: local softirq work is pending, handler #42!!! [ 134.108954][ T30] audit: type=1400 audit(1792960719.932:1942): avc: denied { listen } for pid=8077 comm="syz.4.930" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 135.143094][ T8082] wg1 speed is unknown, defaulting to 1000 [ 135.143149][ T8082] wg1 speed is unknown, defaulting to 1000 [ 135.144110][ T8082] wg1 speed is unknown, defaulting to 1000 [ 135.172047][ T8082] smbdirect: ib_dev[syz2]: added: RNIC max_fast_reg_page_list_len=256 device_cap_flags=0x200000 kernel_cap_flags=0x10 page_size_cap=0x1000 [ 135.172081][ T8082] smbdirect: ib_dev[syz2]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=1 max_cqe=3276800 max_qp_wr=32768 max_send_sge=6 max_recv_sge=6 [ 135.172119][ T8082] smbdirect: ib_dev[syz2]PORT[1]: iwarp=1 ib=0 roce=0 v1=0 v2=0 core_cap_flags=0x400008 [ 135.186308][ T8089] Bluetooth: MGMT ver 1.23 [ 135.294904][ T8082] wg1 speed is unknown, defaulting to 1000 [ 135.302213][ T8082] wg1 speed is unknown, defaulting to 1000 [ 135.307914][ T8082] wg1 speed is unknown, defaulting to 1000 [ 135.312486][ T8082] wg1 speed is unknown, defaulting to 1000 [ 135.328166][ T8082] wg1 speed is unknown, defaulting to 1000 [ 135.625879][ T30] audit: type=1400 audit(1792960721.452:1943): avc: denied { ioctl } for pid=8105 comm="syz.3.931" path="socket:[17815]" dev="sockfs" ino=17815 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 135.904594][ T30] audit: type=1400 audit(1792960721.732:1944): avc: denied { ioctl } for pid=8124 comm="syz.2.950" path="pid:[4026532779]" dev="nsfs" ino=4026532779 ioctlcmd=0x8004b707 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 136.021798][ T8133] netlink: 'syz.1.955': attribute type 1 has an invalid length. [ 136.151464][ T8145] ================================================================== [ 136.151479][ T8145] BUG: KASAN: slab-use-after-free in snapshot_ctr+0x1c20/0x1fd0 [ 136.151506][ T8145] Read of size 8 at addr ffff888037805698 by task syz.2.961/8145 [ 136.151521][ T8145] [ 136.151529][ T8145] CPU: 1 UID: 0 PID: 8145 Comm: syz.2.961 Not tainted syzkaller #0 PREEMPT(full) [ 136.151549][ T8145] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/15/2026 [ 136.151559][ T8145] Call Trace: [ 136.151565][ T8145] [ 136.151572][ T8145] dump_stack_lvl+0x100/0x190 [ 136.151600][ T8145] print_report+0x13d/0x4b0 [ 136.151629][ T8145] ? __virt_addr_valid+0x239/0x430 [ 136.151652][ T8145] ? snapshot_ctr+0x1c20/0x1fd0 [ 136.151673][ T8145] kasan_report+0xdf/0x1c0 [ 136.151700][ T8145] ? snapshot_ctr+0x1c20/0x1fd0 [ 136.151731][ T8145] snapshot_ctr+0x1c20/0x1fd0 [ 136.151756][ T8145] ? kasan_save_track+0x14/0x30 [ 136.151779][ T8145] ? __pfx_snapshot_ctr+0x10/0x10 [ 136.151803][ T8145] ? dm_split_args+0xc1/0x570 [ 136.151827][ T8145] ? rcu_is_watching+0x13/0xc0 [ 136.151844][ T8145] ? dm_split_args+0xc1/0x570 [ 136.151866][ T8145] ? kfree+0x1e5/0x6d0 [ 136.151883][ T8145] ? skip_spaces+0xee/0x130 [ 136.151909][ T8145] dm_table_add_target+0x58b/0xee0 [ 136.151936][ T8145] ? __pfx_dm_table_add_target+0x10/0x10 [ 136.151964][ T8145] ? dm_table_create+0x2d3/0x3d0 [ 136.151990][ T8145] table_load+0x3b9/0x7b0 [ 136.152014][ T8145] ? __pfx_table_load+0x10/0x10 [ 136.152035][ T8145] ? __might_fault+0xc5/0x140 [ 136.152063][ T8145] ? __might_fault+0xc5/0x140 [ 136.152095][ T8145] ctl_ioctl+0x4d2/0xcc0 [ 136.152114][ T8145] ? __pfx_table_load+0x10/0x10 [ 136.152136][ T8145] ? __pfx_ctl_ioctl+0x10/0x10 [ 136.152169][ T8145] ? selinux_file_ioctl+0x1e0/0x290 [ 136.152197][ T8145] dm_ctl_ioctl+0x22/0x30 [ 136.152212][ T8145] ? __pfx_dm_ctl_ioctl+0x10/0x10 [ 136.152227][ T8145] __x64_sys_ioctl+0x18e/0x210 [ 136.152245][ T8145] do_syscall_64+0x123/0x790 [ 136.152266][ T8145] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 136.152280][ T8145] RIP: 0033:0x7f3c16d9f559 [ 136.152292][ T8145] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 136.152306][ T8145] RSP: 002b:00007f3c17c52028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 136.152322][ T8145] RAX: ffffffffffffffda RBX: 00007f3c17025fa0 RCX: 00007f3c16d9f559 [ 136.152333][ T8145] RDX: 0000200000000500 RSI: 00000000c138fd09 RDI: 0000000000000003 [ 136.152343][ T8145] RBP: 00007f3c16e36b20 R08: 0000000000000000 R09: 0000000000000000 [ 136.152353][ T8145] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 136.152362][ T8145] R13: 00007f3c17026038 R14: 00007f3c17025fa0 R15: 00007fff86033708 [ 136.152377][ T8145] [ 136.152382][ T8145] [ 136.152385][ T8145] Allocated by task 8145: [ 136.152391][ T8145] kasan_save_stack+0x30/0x50 [ 136.152409][ T8145] kasan_save_track+0x14/0x30 [ 136.152426][ T8145] __kasan_kmalloc+0xaa/0xb0 [ 136.152442][ T8145] __kmalloc_cache_node_noprof+0x30c/0x710 [ 136.152458][ T8145] dm_get_table_device+0x2fc/0x820 [ 136.152471][ T8145] dm_get_device+0x525/0x7e0 [ 136.152487][ T8145] snapshot_ctr+0x201/0x1fd0 [ 136.152501][ T8145] dm_table_add_target+0x58b/0xee0 [ 136.152518][ T8145] table_load+0x3b9/0x7b0 [ 136.152533][ T8145] ctl_ioctl+0x4d2/0xcc0 [ 136.152545][ T8145] dm_ctl_ioctl+0x22/0x30 [ 136.152558][ T8145] __x64_sys_ioctl+0x18e/0x210 [ 136.152573][ T8145] do_syscall_64+0x123/0x790 [ 136.152589][ T8145] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 136.152602][ T8145] [ 136.152605][ T8145] Freed by task 8145: [ 136.152610][ T8145] kasan_save_stack+0x30/0x50 [ 136.152625][ T8145] kasan_save_track+0x14/0x30 [ 136.152640][ T8145] kasan_save_free_info+0x3b/0x70 [ 136.152652][ T8145] __kasan_slab_free+0x5f/0x80 [ 136.152669][ T8145] kfree+0x22b/0x6d0 [ 136.152692][ T8145] dm_put_table_device+0x2bf/0x380 [ 136.152709][ T8145] dm_get_device+0x3f1/0x7e0 [ 136.152728][ T8145] snapshot_ctr+0x326/0x1fd0 [ 136.152743][ T8145] dm_table_add_target+0x58b/0xee0 [ 136.152760][ T8145] table_load+0x3b9/0x7b0 [ 136.152774][ T8145] ctl_ioctl+0x4d2/0xcc0 [ 136.152788][ T8145] dm_ctl_ioctl+0x22/0x30 [ 136.152801][ T8145] __x64_sys_ioctl+0x18e/0x210 [ 136.152817][ T8145] do_syscall_64+0x123/0x790 [ 136.152835][ T8145] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 136.152848][ T8145] [ 136.152850][ T8145] The buggy address belongs to the object at ffff888037805680 [ 136.152850][ T8145] which belongs to the cache kmalloc-96 of size 96 [ 136.152861][ T8145] The buggy address is located 24 bytes inside of [ 136.152861][ T8145] freed 96-byte region [ffff888037805680, ffff8880378056e0) [ 136.152876][ T8145] [ 136.152880][ T8145] The buggy address belongs to the physical page: [ 136.152886][ T8145] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x37805 [ 136.152898][ T8145] flags: 0xfff00000000000(node=0|zone=1|lastcpupid=0x7ff) [ 136.152910][ T8145] page_type: f5(slab) [ 136.152922][ T8145] raw: 00fff00000000000 ffff88813ff08280 dead000000000100 dead000000000122 [ 136.152934][ T8145] raw: 0000000000000000 0000000000200020 00000000f5000000 0000000000000000 [ 136.152941][ T8145] page dumped because: kasan: bad access detected [ 136.152948][ T8145] page_owner tracks the page as allocated [ 136.152952][ T8145] page last allocated via order 0, migratetype Unmovable, gfp_mask 0xd2cc0(GFP_KERNEL|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 1, tgid 1 (swapper/0), ts 13370338896 [ 136.152973][ T8145] post_alloc_hook+0xfd/0x120 [ 136.152994][ T8145] get_page_from_freelist+0x1113/0x35e0 [ 136.153007][ T8145] __alloc_frozen_pages_noprof+0x2f6/0x3190 [ 136.153021][ T8145] new_slab+0xb1/0x6d0 [ 136.153035][ T8145] refill_objects+0xe3/0x410 [ 136.153049][ T8145] __pcs_replace_empty_main+0x35e/0x650 [ 136.153064][ T8145] __kmalloc_node_track_caller_noprof+0x6a3/0x870 [ 136.153083][ T8145] krealloc_node_align_noprof+0x1f9/0x3e0 [ 136.153103][ T8145] add_sysfs_param+0x196/0x970 [ 136.153122][ T8145] param_sysfs_builtin_init+0x310/0x3f0 [ 136.153144][ T8145] do_one_initcall+0x11c/0x6f0 [ 136.153161][ T8145] kernel_init_freeable+0x6ea/0x7b0 [ 136.153185][ T8145] kernel_init+0x21/0x1d0 [ 136.153199][ T8145] ret_from_fork+0x730/0xd60 [ 136.153216][ T8145] ret_from_fork_asm+0x1a/0x30 [ 136.153234][ T8145] page_owner free stack trace missing [ 136.153240][ T8145] [ 136.153244][ T8145] Memory state around the buggy address: [ 136.153252][ T8145] ffff888037805580: fa fb fb fb fb fb fb fb fb fb fb fb fc fc fc fc [ 136.153265][ T8145] ffff888037805600: fa fb fb fb fb fb fb fb fb fb fb fb fc fc fc fc [ 136.153278][ T8145] >ffff888037805680: fa fb fb fb fb fb fb fb fb fb fb fb fc fc fc fc [ 136.153288][ T8145] ^ [ 136.153297][ T8145] ffff888037805700: fa fb fb fb fb fb fb fb fb fb fb fb fc fc fc fc [ 136.153310][ T8145] ffff888037805780: 00 00 00 00 00 00 00 00 00 00 fc fc fc fc fc fc [ 136.153319][ T8145] ================================================================== [ 136.154887][ T8145] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 136.827411][ T8145] CPU: 1 UID: 0 PID: 8145 Comm: syz.2.961 Not tainted syzkaller #0 PREEMPT(full) [ 136.836588][ T8145] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/15/2026 [ 136.846619][ T8145] Call Trace: [ 136.849876][ T8145] [ 136.852785][ T8145] dump_stack_lvl+0x100/0x190 [ 136.857450][ T8145] vpanic+0x553/0x970 [ 136.861407][ T8145] ? __pfx_vpanic+0x10/0x10 [ 136.865895][ T8145] ? mark_held_locks+0x40/0x70 [ 136.870642][ T8145] ? snapshot_ctr+0x1c20/0x1fd0 [ 136.875471][ T8145] panic+0xd1/0xe0 [ 136.879170][ T8145] ? __pfx_panic+0x10/0x10 [ 136.883561][ T8145] ? snapshot_ctr+0x1c20/0x1fd0 [ 136.888389][ T8145] ? preempt_schedule+0x57/0xd0 [ 136.893223][ T8145] check_panic_on_warn.cold+0x19/0x34 [ 136.898575][ T8145] end_report.part.0+0x3a/0x90 [ 136.903323][ T8145] kasan_report.cold+0xe/0x18 [ 136.907983][ T8145] ? snapshot_ctr+0x1c20/0x1fd0 [ 136.912813][ T8145] snapshot_ctr+0x1c20/0x1fd0 [ 136.917471][ T8145] ? kasan_save_track+0x14/0x30 [ 136.922303][ T8145] ? __pfx_snapshot_ctr+0x10/0x10 [ 136.927306][ T8145] ? dm_split_args+0xc1/0x570 [ 136.931973][ T8145] ? rcu_is_watching+0x13/0xc0 [ 136.936729][ T8145] ? dm_split_args+0xc1/0x570 [ 136.941394][ T8145] ? kfree+0x1e5/0x6d0 [ 136.945448][ T8145] ? skip_spaces+0xee/0x130 [ 136.949958][ T8145] dm_table_add_target+0x58b/0xee0 [ 136.955064][ T8145] ? __pfx_dm_table_add_target+0x10/0x10 [ 136.960689][ T8145] ? dm_table_create+0x2d3/0x3d0 [ 136.965614][ T8145] table_load+0x3b9/0x7b0 [ 136.969928][ T8145] ? __pfx_table_load+0x10/0x10 [ 136.974761][ T8145] ? __might_fault+0xc5/0x140 [ 136.979424][ T8145] ? __might_fault+0xc5/0x140 [ 136.984088][ T8145] ctl_ioctl+0x4d2/0xcc0 [ 136.988312][ T8145] ? __pfx_table_load+0x10/0x10 [ 136.993147][ T8145] ? __pfx_ctl_ioctl+0x10/0x10 [ 136.997905][ T8145] ? selinux_file_ioctl+0x1e0/0x290 [ 137.003090][ T8145] dm_ctl_ioctl+0x22/0x30 [ 137.007397][ T8145] ? __pfx_dm_ctl_ioctl+0x10/0x10 [ 137.012407][ T8145] __x64_sys_ioctl+0x18e/0x210 [ 137.017162][ T8145] do_syscall_64+0x123/0x790 [ 137.021740][ T8145] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 137.027616][ T8145] RIP: 0033:0x7f3c16d9f559 [ 137.032012][ T8145] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 137.051600][ T8145] RSP: 002b:00007f3c17c52028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 137.059998][ T8145] RAX: ffffffffffffffda RBX: 00007f3c17025fa0 RCX: 00007f3c16d9f559 [ 137.067953][ T8145] RDX: 0000200000000500 RSI: 00000000c138fd09 RDI: 0000000000000003 [ 137.075902][ T8145] RBP: 00007f3c16e36b20 R08: 0000000000000000 R09: 0000000000000000 [ 137.083852][ T8145] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 137.092238][ T8145] R13: 00007f3c17026038 R14: 00007f3c17025fa0 R15: 00007fff86033708 [ 137.100196][ T8145] [ 137.103379][ T8145] Kernel Offset: disabled [ 137.107678][ T8145] Rebooting in 86400 seconds..