last executing test programs: 2.316082283s ago: executing program 0 (id=1): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f00000021c0)={0x2, 0x4e20, @broadcast}, 0x10) sendto$inet(r0, &(0x7f0000002200), 0xffffffffffffff58, 0x20008005, &(0x7f0000002240)={0x2, 0x4e20}, 0x10) shutdown(r0, 0x0) recvfrom(r0, 0x0, 0x0, 0x3, 0x0, 0x0) 2.166495545s ago: executing program 4 (id=5): mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000200)='./proc\x00', &(0x7f0000000240)='proc\x00', 0x4000, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) write(r0, &(0x7f00000002c0)='27', 0x2) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) ioctl$XFS_IOC_FSGROWFSDATA(r0, 0x400c586e, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000380)) 1.857574172s ago: executing program 3 (id=4): r0 = syz_io_uring_setup(0x201, &(0x7f0000000180)={0x0, 0xc9f, 0x800, 0x3, 0x3}, &(0x7f0000000200)=0x0, &(0x7f0000000240)=0x0, &(0x7f0000000280)) syz_io_uring_modify_offsets$generic(r1, r2, 0x2c, 0x10000) io_uring_enter(r0, 0x1, 0x8000020, 0x1, 0x0, 0x0) io_uring_enter(r0, 0x6516, 0x6d93, 0x8, 0x0, 0x0) io_uring_enter(r0, 0x9ee, 0xa09a, 0x0, 0x0, 0x0) setsockopt$inet6_IPV6_RTHDRDSTOPTS(0xffffffffffffffff, 0x29, 0x37, 0x0, 0x0) 1.783644813s ago: executing program 4 (id=7): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0xffffffff, 0x2, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0xe4b, 0x11e41e7a, 0x20000000, 0x3, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{0x0, 0x0, 0x0, 0x0, 0x4}}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x2}}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x40844}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000380)=0x34) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x10000000000002) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_io_uring_setup(0x278, &(0x7f0000000340)={0x0, 0x0, 0x13580}, &(0x7f0000000100), 0x0, &(0x7f0000000000)) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'bond0\x00'}) mkdirat(0xffffffffffffff9c, &(0x7f00000001c0)='./trace\x00', 0x1ff) mount(0x0, &(0x7f0000000280)='./trace\x00', &(0x7f0000000300)='tracefs\x00', 0x0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f00000003c0)='trace/events/sched/sched_switch/filter\x00', 0x1, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000400)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000440)='./proc\x00', &(0x7f0000000480)='proc\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f00000004c0)='./proc/thread-self/fail-nth\x00', 0x2, 0x10b) getpid() write(r3, 0x0, 0x0) 1.752816494s ago: executing program 2 (id=3): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f00000000c0)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41100, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x39}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$ethtool(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKINFO_GET(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000300)={0x2c, r4, 0x1, 0x70bd2b, 0x25dfdbfc, {0x1a}, [@HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'dummy0\x00'}]}]}, 0x2c}, 0x1, 0x0, 0x0, 0x8081}, 0x0) ioctl$HCIINQUIRY(0xffffffffffffffff, 0x400448ca, 0x0) socket$can_bcm(0x1d, 0x2, 0x2) mkdirat(0xffffffffffffff9c, &(0x7f0000002000)='./file0\x00', 0x0) r5 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x404, &(0x7f0000002140)={{'fd', 0x3d, r5}, 0x2c, {'rootmode', 0x3d, 0x4000}}) read$FUSE(r5, &(0x7f00000021c0)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r5, &(0x7f0000001dc0)={0x50, 0x0, r6, {0x7, 0x2b, 0x0, 0x2b418842, 0x6}}, 0x50) statx(0xffffffffffffff9c, &(0x7f0000000640)='./file0/file1\x00', 0x1000, 0x100, 0x0) syz_fuse_handle_req(r5, &(0x7f0000004200)="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", 0x2000, &(0x7f0000000f40)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000540)={0x90, 0x0, 0x7, {0x5, 0x3, 0xdc, 0x8, 0x3, 0x1, {0x6, 0x638, 0xfffffffffffffff8, 0x8, 0x3, 0x79, 0xfffffffe, 0x7, 0x1, 0x4000, 0x4, r7, r8, 0x7, 0x5}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) 1.568536978s ago: executing program 3 (id=9): r0 = io_uring_setup(0x2a8d, &(0x7f0000000240)={0x0, 0x14da, 0x2, 0x3, 0x1fb}) r1 = syz_usb_connect(0x0, 0x3f, &(0x7f00000001c0)=ANY=[@ANYBLOB="11010000733336088dee1edb23610000000109022d0101100000000904000003fe03010009cd8d1f0002000000090505020000fcffff09058b1e20"], 0x0) syz_usb_control_io$printer(r1, 0x0, &(0x7f0000000200)={0x1c, &(0x7f00000003c0)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0}) syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_usb_disconnect(r1) close_range(r0, 0xffffffffffffffff, 0x0) 1.406075461s ago: executing program 0 (id=10): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000900), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000940)={'syzkaller1\x00', 0xc201}) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$unix(0x1, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000009c0)={'syzkaller1\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000a00)={0x0, 0x0, &(0x7f0000000a40)={&(0x7f0000000a80)=@newqdisc={0x30, 0x24, 0x601, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_ingress={0xc}]}, 0x30}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000ac0)={0x0, 0x0, &(0x7f0000000b00)={&(0x7f0000000b40)=@newtfilter={0x74, 0x2c, 0x601, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {0xb, 0x7}, {0x1, 0xffff}, {0x300}}, [@filter_kind_options=@f_basic={{0xa}, {0xffffffffffffff12, 0x2, [@TCA_BASIC_POLICE={0x40, 0x4, [@TCA_POLICE_TBF={0x3c, 0x1, {0x18a, 0x2, 0x1, 0x1, 0xfffff000, {0x4, 0x1, 0x8, 0x316, 0xd}, {0x9, 0x0, 0x7, 0x4, 0x7, 0x80}, 0x9, 0x5, 0xa86}}]}]}}]}, 0x74}}, 0x0) 1.078985608s ago: executing program 0 (id=11): mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./debug\x00', 0x1ff) mount(0x0, &(0x7f00000003c0)='./debug\x00', &(0x7f0000000400)='debugfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000440)='./debug/split_huge_pages\x00', 0x1, 0x0) write(r0, &(0x7f0000000480)='/,0x400000,0x4', 0xe) 997.957019ms ago: executing program 0 (id=12): r0 = syz_io_uring_setup(0xd00, &(0x7f0000000180)={0x0, 0xfffffffe, 0x2, 0x83, 0x3cd}, &(0x7f0000000200)=0x0, &(0x7f0000000240)=0x0, &(0x7f0000000280)) r3 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_TIMER_IOCTL_INFO(r3, 0x40585414, 0x0) syz_io_uring_modify_offsets$generic(r1, r2, 0x2c, 0x201000) r4 = io_uring_setup(0x1b56, &(0x7f00000002c0)={0x0, 0x1, 0x400, 0x3, 0x2c1}) close_range(r4, 0xffffffffffffffff, 0x0) io_uring_enter(r0, 0x7fffdfe, 0xb08b, 0xd, 0x0, 0x0) 997.582959ms ago: executing program 1 (id=13): r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e20, @empty}, 0x10) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101842, 0x1) write$FUSE_INIT(r1, &(0x7f0000000140)={0x50, 0x0, 0x0, {0x7, 0x2d, 0x7, 0xffffffff91020258, 0x200, 0x1, 0x4, 0x992, 0x0, 0x0, 0x124, 0x5}}, 0x50) ioctl$KVM_TDX_INIT_VM(r1, 0xc004aeba, &(0x7f00000004c0)={0x1, 0x0, &(0x7f0000000340)={0x0, 0x800e4, [0x2, 0x4, 0x1, 0x9, 0x9, 0x8], [0x7, 0x432, 0x0, 0x2, 0x3, 0x80000000], [0xb000000000000000, 0x4151, 0xd, 0x1000, 0x7ff, 0x3], '\x00', {0x2, 0x0, [{0xc0000001, 0x1, 0x2, 0xfffffffa, 0x1, 0x7, 0x10}, {0xc0000000, 0x2d5, 0x0, 0x37, 0xffffe2e4, 0x9, 0x2}]}}}) setsockopt$inet_int(r0, 0x0, 0x7, &(0x7f0000000040)=0x7, 0x4) syz_emit_ethernet(0x2a, &(0x7f0000000080)={@local, @random="fad1e048716e", @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e20, 0x8}}}}}, 0x0) setsockopt$inet_int(r0, 0x0, 0x14, &(0x7f00000000c0)=0x3f7, 0x4) recvmmsg(r0, &(0x7f0000000100), 0x400000000000354, 0x42, 0x0) r2 = openat$dm_control(0xffffff9c, &(0x7f00000001c0), 0x2, 0x0) ioctl$DM_DEV_CREATE(r2, 0xc138fd03, &(0x7f0000000200)={0x4, 0x0, 0x0, 0x138, 0x138, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, {'syz', 0x0, '1\x00'}}}) ioctl$DM_TABLE_LOAD(r2, 0xc138fd09, &(0x7f0000000840)={0x4, 0x0, 0x0, 0x1c8, 0x138, 0x1, 0x0, 0x0, 0x0, 0x0, @by_name={0x0, {'syz', 0x0, '1\x00'}}, [@crypt={0x0, 0x2000, 0x0, 0x90, 'crypt\x00', {'aes-xts-plain64', 0x20, @fixed='0123456789abcdef0123456789abcdef0123456789abcdef0123456789abcdef', 0x20, '0', 0x20, {@rnull={'/dev/syzrnull', 0x0}, 0x20, '0'}}}]}) ioctl$DM_DEV_SUSPEND(r2, 0xc138fd06, &(0x7f0000000500)={0x4, 0x0, 0x0, 0x138, 0x138, 0x0, 0x0, 0x0, 0x0, 0x0, @by_name={0x0, {'syz', 0x0, '1\x00'}}}) mknodat$dm(0xffffff9c, &(0x7f0000000640)='./dm0\x00', 0x6180, r3) r4 = openat$dm_dev(0xffffff9c, &(0x7f0000000680)='./dm0\x00', 0x2, 0x0) pwrite64(r4, &(0x7f00000006c0)="0102030405060708", 0x8, 0x0) ioctl$DM_DEV_REMOVE(r2, 0xc138fd04, &(0x7f0000000700)={0x4, 0x0, 0x0, 0x138, 0x138, 0x0, 0x0, 0x20000, 0x0, 0x0, @by_name={0x0, {'syz', 0x0, '1\x00'}}}) 982.89591ms ago: executing program 0 (id=14): mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000280)='./sys\x00', &(0x7f00000002c0)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./sys/class/tty/ttyS0/rx_trig_bytes\x00', 0x2, 0x0) read$FUSE(r0, &(0x7f0000002840)={0x2020}, 0x2020) 953.512841ms ago: executing program 0 (id=15): sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./dev_mnt\x00', 0x1ff) mount(0x0, &(0x7f0000000340)='./dev_mnt\x00', &(0x7f0000000380)='devtmpfs\x00', 0x0, 0x0) r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000003c0)=ANY=[@ANYBLOB="12010000000000407d1e5a2d00000000000109022400010000000009040000010301020009210000000122220009058103"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000400)={0x24, 0x0, 0x0, &(0x7f0000000440)={0x0, 0x22, 0x22, {[@global=@item_012={0x2, 0x1, 0x9, "2313"}, @global=@item_012={0x2, 0x1, 0x0, "e53f"}, @global=@item_4={0x3, 0x1, 0x0, '\f\x00'}, @local=@item_012={0x2, 0x2, 0x2, "9000"}, @global=@item_4={0x3, 0x1, 0x0, "0900be00"}, @main=@item_4={0x3, 0x0, 0x8}, @local=@item_4={0x3, 0x2, 0x0, "09007a15"}, @local=@item_4={0x3, 0x2, 0x0, "5d8c3dda"}]}}, 0x0}, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000480)='./dev_mnt/roccatsavu0\x00', 0x2, 0x0) mmap$IORING_OFF_SQES(0x0, 0x1000, 0x2, 0x109031, 0xffffffffffffffff, 0x10000000) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000500)={0x1, &(0x7f0000000540)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) close_range(r1, 0xffffffffffffffff, 0x0) 868.761622ms ago: executing program 1 (id=16): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = openat$uhid(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) write$UHID_CREATE2(r1, &(0x7f00000002c0)=ANY=[@ANYBLOB="0b00000073797a31000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000e000000000073797a3000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a30000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000150003000100000001000000010000000000000005010902a1010506092015002564750895018102c0"], 0x12d) close_range(r0, 0xffffffffffffffff, 0x0) 835.415473ms ago: executing program 2 (id=17): getrandom(0x0, 0x0, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000080)={0xa, 0x4e22, 0x0, @empty}, 0x1c) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0xa0380, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000100)={'syzkaller0\x00', 0x7101}) r3 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r3, 0x8914, &(0x7f0000000140)={'bridge_slave_0\x00', 0x1}) ioctl$sock_inet6_SIOCSIFADDR(r3, 0x8916, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, 0x0) sendmsg$nl_route_sched(r4, 0x0, 0x8000) syz_genetlink_get_family_id$ethtool(0x0, r1) socket$can_raw(0x1d, 0x3, 0x1) r5 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000180), 0x801, 0x0) write$rfkill(r5, &(0x7f00000001c0)={0x0, 0x1, 0x3, 0x3, 0xfd}, 0x8) r6 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) r7 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r7, 0x0, 0x0) bind$bt_l2cap(r6, &(0x7f0000000200), 0xe) setsockopt$bt_BT_DEFER_SETUP(r6, 0x112, 0xf, 0x0, 0x0) write$rfkill(r5, &(0x7f0000000240)={0x6, 0x0, 0x2, 0x0, 0x1}, 0x8) write$rfkill(r5, &(0x7f0000000280)={0x8, 0x1, 0x0, 0x1}, 0x8) listen(r0, 0x0) syz_usb_connect(0x0, 0x36, &(0x7f00000002c0)=ANY=[@ANYBLOB="1a0100005c6b4408070a64006e40010203030902240001a8230800090400bc6435fb4d00090503034d00ff99090805", @ANYRES32], &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x0, 0x0}]}) syz_open_dev$char_usb(0xc, 0xb4, 0x0) r8 = creat(&(0x7f0000000340)='./file0\x00', 0xecf86c37d53049cc) write$binfmt_script(r8, &(0x7f0000000380)={'#! ', './file0', [{0x20, '\x98\xe1Cvg\x9cO\x16\xc0TC\xe8\xb8\x91W\xb8\x84\xdf\xbe\xbd\x8f\x81!\xf2V[\x03V\xba/\xb9+\xd2\x95\xe0t\x0f<}T\v\x0f\xe8\xae\x89\xfa^\xce\xae[t/\x12\x1f\x02\x85\xbd\xbc\r(\xfd\xf2\xeeB\x12\xdc\x06\x1d\xd8\x86g\xcf\xb6\xde\xeb\xfc\xfc~A\x95\x8a6'}, {0x20, '5\xed\xe9\xe8\f\xcb\x82;\xc5\x98\"\x1c\x8d\xbb,X}\xec\x9f\xe5\xf0\x1f\x02\a\x0e\xe09\x17\xa9\xdbXP\x94}L\x17WT\xc0Rc\xe5\xd3\x9a\xcfGr3\xbaf\x8aS\xc6Q\x16\xf4\x9f\x02u.\xaf\xf3\xb8\x0e\x85a8\x03\x02\xf4\xf1\\b\x1ew\xd4F\xf1\xf9I\xe4\xca\xb1\xa51Sk\xdf\xc7\xd2\x87.b\xb9|+\x9f3@\xdfs\xa0\x01\x8fV/0\x8bo\xccQ\x9c\x9e\xae!b\xa0 \xea\xa4(C\n\x96\xdf\xd2\xd6\x91\x90\x83 \xb2\xb4\xac{\x02\xde,Ff\x98\x84\x16\x1b\x96\xac\x9e\x17\xf0\x13\xfa\xd1+\xcc\x19\x81ZZ\xa0\xde\xeb\xf3`\x0e\x87:` \x1b\xec\xc81\xb7\x91\xfdcL\xdcH/0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x4e, &(0x7f0000000080)={&(0x7f00000001c0)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xf}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_FSC={0x10, 0x2, {0xa30e, 0x1, 0xfffffffa}}}}]}, 0x44}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000800)=@newtfilter={0x5c, 0x2c, 0xd3f, 0x70b524, 0x25dfdbfa, {0x0, 0x0, 0x0, r3, {0xfff3, 0xffe0}, {}, {0x7, 0xfff2}}, [@filter_kind_options=@f_flow={{0x9}, {0x2c, 0x2, [@TCA_FLOW_EMATCHES={0x20, 0xb, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x1}}, @TCA_EMATCH_TREE_LIST={0x14, 0x2, 0x0, 0x1, [@TCF_EM_NBYTE={0x10, 0x1, 0x0, 0x0, {{0x5, 0x2, 0x6}, {0x7, 0x0, 0x2}}}]}]}, @TCA_FLOW_KEYS={0x8, 0x1, 0x18d0b}]}}]}, 0x5c}, 0x1, 0x0, 0x0, 0x4008848}, 0xc884) 712.770625ms ago: executing program 1 (id=19): clock_adjtime(0x0, &(0x7f0000000000)={0x3fe, 0xf6d, 0x0, 0x4000000000001, 0x7ffffffe, 0x0, 0x4, 0x200000000000000, 0x0, 0x100, 0x80cf2c, 0x0, 0x9, 0x5, 0x3, 0xfffffffffffffff9, 0x0, 0x0, 0x1000, 0x3, 0xb, 0x3, 0x8a0, 0x3}) 683.137306ms ago: executing program 1 (id=20): timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2}, &(0x7f0000000140)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10000, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x3000002, 0x204031, 0xffffffffffffffff, 0xe60d3000) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./dev\x00', 0x17a) mount(0x0, &(0x7f0000000240)='./dev\x00', &(0x7f0000000280)='devtmpfs\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./dev/kmsg\x00', 0x60000, 0x0) lseek(r1, 0x0, 0x2) read(r1, 0x0, 0x0) 682.657566ms ago: executing program 4 (id=21): mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./debug\x00', 0x1ff) mount(0x0, &(0x7f0000000180)='./debug\x00', &(0x7f0000000200)='debugfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./debug/lru_gen\x00', 0x2, 0x0) write$binfmt_aout(r0, 0x0, 0xff2e) 615.575317ms ago: executing program 4 (id=22): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x8800) sendmsg$NFT_BATCH(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000840)={{0x14}, [@NFT_MSG_NEWRULE={0x44, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x18, 0x4, 0x0, 0x1, [{0x14, 0x1, 0x0, 0x1, @redir={{0xa}, @val={0x4}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x6c}}, 0x0) 615.415097ms ago: executing program 4 (id=23): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'syz_tun\x00'}) r1 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'syz_tun\x00', 0x0}) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x2, &(0x7f0000000140)=@raw=[@generic={0x85, 0x0, 0x0, 0x0, 0x7}, @generic={0x95}], &(0x7f00000002c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000380)={@ifindex=r2, r3, 0x2e, 0x0, 0x0, @void, @value=0x0}, 0x20) syz_usb_connect(0x0, 0x3f, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x3, 0x5, &(0x7f0000000440)=ANY=[@ANYBLOB="b702000000000000b703000000000000b70400000000000085"], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x60, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000340)={'syz_tun\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=@getchain={0x24, 0x11, 0x1, 0x70bd26, 0x0, {0x0, 0x0, 0x0, r4, {}, {0x5}, {0xfff3}}}, 0x24}}, 0x0) 615.346287ms ago: executing program 1 (id=24): r0 = syz_usb_connect(0x0, 0x3f, &(0x7f00000007c0)=ANY=[@ANYBLOB="11010000733336088dee1edb23610000000109022d0101100000000904000003fe03010009cd8d1f0002000000090505020000fcffff09058b1e20"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) ioctl$EVIOCGMASK(r1, 0x5b16, 0x0) 0s ago: executing program 4 (id=25): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000000000040ac054382408b0b00000109022400010000002009040000fd0301000009210000000122010009058103"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000040)={0x24, 0x0, 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="002281"], 0x0}, 0x0) syz_usb_control_io(r0, &(0x7f0000000240)={0x18, 0x0, &(0x7f0000000ac0)={0x0, 0x3, 0xb4, @string={0xb4, 0x3, "f18bdfcb9583acd54e00910163e1dbe654316f2a0a23ba246fddc966294bca23507bfa2adac642ebec636958fa6e3489f5128ad7e60a329b6329d919488d8dfdf95254db4f1e288bab62d305dd309dbf5fd236bad832c24edf40e0a71c603becb8676b3e2c69e44199946f96d67af1168c16031dea34afcc01d2e3d7b4b151e24852b20235cef3a0c881862c96061da90dfe5879a8a414f2041612841318c29ffee7d72d9bf3dfea7530abf39a62eaed9951"}}, 0x0, 0x0, 0x0}, 0x0) r1 = syz_open_dev$hiddev(&(0x7f0000000300), 0x0, 0x0) ioctl$HIDIOCSREPORT(r1, 0x81044804, &(0x7f0000000340)={0x1, 0x8d6c30f34124690b, 0x55f}) kernel console output (not intermixed with test programs): rocess permissive=1 [ 14.779277][ T28] audit: type=1400 audit(1792727932.556:63): avc: denied { siginh } for pid=225 comm="sh" scontext=system_u:system_r:sshd_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 Warning: Permanently added '10.128.0.16' (ED25519) to the list of known hosts. [ 22.470532][ T28] audit: type=1400 audit(1792727940.256:64): avc: denied { mounton } for pid=279 comm="syz-executor" path="/syzcgroup/unified" dev="sda1" ino=2023 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1 [ 22.474045][ T279] cgroup: Unknown subsys name 'net' [ 22.493336][ T28] audit: type=1400 audit(1792727940.256:65): avc: denied { mount } for pid=279 comm="syz-executor" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 22.520545][ T28] audit: type=1400 audit(1792727940.296:66): avc: denied { unmount } for pid=279 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 22.520933][ T279] cgroup: Unknown subsys name 'devices' [ 22.665535][ T279] cgroup: Unknown subsys name 'hugetlb' [ 22.671186][ T279] cgroup: Unknown subsys name 'rlimit' [ 22.806188][ T28] audit: type=1400 audit(1792727940.596:67): avc: denied { setattr } for pid=279 comm="syz-executor" name="raw-gadget" dev="devtmpfs" ino=258 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 22.829435][ T28] audit: type=1400 audit(1792727940.596:68): avc: denied { mounton } for pid=279 comm="syz-executor" path="/proc/sys/fs/binfmt_misc" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=dir permissive=1 [ 22.854261][ T28] audit: type=1400 audit(1792727940.596:69): avc: denied { mount } for pid=279 comm="syz-executor" name="/" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=filesystem permissive=1 [ 22.879337][ T281] SELinux: Context root:object_r:swapfile_t is not valid (left unmapped). Setting up swapspace version 1, size = 127995904 bytes [ 22.888202][ T28] audit: type=1400 audit(1792727940.676:70): avc: denied { relabelto } for pid=281 comm="mkswap" name="swap-file" dev="sda1" ino=2026 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 22.913637][ T28] audit: type=1400 audit(1792727940.676:71): avc: denied { write } for pid=281 comm="mkswap" path="/root/swap-file" dev="sda1" ino=2026 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 22.945211][ T28] audit: type=1400 audit(1792727940.736:72): avc: denied { read } for pid=279 comm="syz-executor" name="swap-file" dev="sda1" ino=2026 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 22.970860][ T28] audit: type=1400 audit(1792727940.736:73): avc: denied { open } for pid=279 comm="syz-executor" path="/root/swap-file" dev="sda1" ino=2026 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 22.971058][ T279] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 23.800867][ T290] bridge0: port 1(bridge_slave_0) entered blocking state [ 23.808063][ T290] bridge0: port 1(bridge_slave_0) entered disabled state [ 23.815698][ T290] device bridge_slave_0 entered promiscuous mode [ 23.835487][ T290] bridge0: port 2(bridge_slave_1) entered blocking state [ 23.842549][ T290] bridge0: port 2(bridge_slave_1) entered disabled state [ 23.850050][ T290] device bridge_slave_1 entered promiscuous mode [ 23.904054][ T287] bridge0: port 1(bridge_slave_0) entered blocking state [ 23.911128][ T287] bridge0: port 1(bridge_slave_0) entered disabled state [ 23.918587][ T287] device bridge_slave_0 entered promiscuous mode [ 23.928557][ T287] bridge0: port 2(bridge_slave_1) entered blocking state [ 23.935765][ T287] bridge0: port 2(bridge_slave_1) entered disabled state [ 23.943114][ T287] device bridge_slave_1 entered promiscuous mode [ 23.962573][ T288] bridge0: port 1(bridge_slave_0) entered blocking state [ 23.969658][ T288] bridge0: port 1(bridge_slave_0) entered disabled state [ 23.977136][ T288] device bridge_slave_0 entered promiscuous mode [ 23.983894][ T289] bridge0: port 1(bridge_slave_0) entered blocking state [ 23.990951][ T289] bridge0: port 1(bridge_slave_0) entered disabled state [ 23.998412][ T289] device bridge_slave_0 entered promiscuous mode [ 24.005526][ T289] bridge0: port 2(bridge_slave_1) entered blocking state [ 24.012579][ T289] bridge0: port 2(bridge_slave_1) entered disabled state [ 24.020094][ T289] device bridge_slave_1 entered promiscuous mode [ 24.032770][ T288] bridge0: port 2(bridge_slave_1) entered blocking state [ 24.039918][ T288] bridge0: port 2(bridge_slave_1) entered disabled state [ 24.047445][ T288] device bridge_slave_1 entered promiscuous mode [ 24.117664][ T291] bridge0: port 1(bridge_slave_0) entered blocking state [ 24.124780][ T291] bridge0: port 1(bridge_slave_0) entered disabled state [ 24.132254][ T291] device bridge_slave_0 entered promiscuous mode [ 24.142984][ T291] bridge0: port 2(bridge_slave_1) entered blocking state [ 24.150108][ T291] bridge0: port 2(bridge_slave_1) entered disabled state [ 24.157798][ T291] device bridge_slave_1 entered promiscuous mode [ 24.318080][ T291] bridge0: port 2(bridge_slave_1) entered blocking state [ 24.325190][ T291] bridge0: port 2(bridge_slave_1) entered forwarding state [ 24.332764][ T291] bridge0: port 1(bridge_slave_0) entered blocking state [ 24.339854][ T291] bridge0: port 1(bridge_slave_0) entered forwarding state [ 24.361194][ T288] bridge0: port 2(bridge_slave_1) entered blocking state [ 24.368297][ T288] bridge0: port 2(bridge_slave_1) entered forwarding state [ 24.375634][ T288] bridge0: port 1(bridge_slave_0) entered blocking state [ 24.382697][ T288] bridge0: port 1(bridge_slave_0) entered forwarding state [ 24.395176][ T289] bridge0: port 2(bridge_slave_1) entered blocking state [ 24.402245][ T289] bridge0: port 2(bridge_slave_1) entered forwarding state [ 24.409580][ T289] bridge0: port 1(bridge_slave_0) entered blocking state [ 24.416702][ T289] bridge0: port 1(bridge_slave_0) entered forwarding state [ 24.443215][ T8] bridge0: port 1(bridge_slave_0) entered disabled state [ 24.450789][ T8] bridge0: port 2(bridge_slave_1) entered disabled state [ 24.458333][ T8] bridge0: port 1(bridge_slave_0) entered disabled state [ 24.466510][ T8] bridge0: port 2(bridge_slave_1) entered disabled state [ 24.473739][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 24.481354][ T8] bridge0: port 1(bridge_slave_0) entered disabled state [ 24.488748][ T8] bridge0: port 2(bridge_slave_1) entered disabled state [ 24.517358][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 24.525703][ T8] bridge0: port 1(bridge_slave_0) entered blocking state [ 24.532731][ T8] bridge0: port 1(bridge_slave_0) entered forwarding state [ 24.540382][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 24.549065][ T8] bridge0: port 2(bridge_slave_1) entered blocking state [ 24.556142][ T8] bridge0: port 2(bridge_slave_1) entered forwarding state [ 24.592026][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 24.600010][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 24.607604][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 24.615473][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 24.623984][ T8] bridge0: port 1(bridge_slave_0) entered blocking state [ 24.631035][ T8] bridge0: port 1(bridge_slave_0) entered forwarding state [ 24.638516][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 24.646876][ T8] bridge0: port 2(bridge_slave_1) entered blocking state [ 24.653940][ T8] bridge0: port 2(bridge_slave_1) entered forwarding state [ 24.673510][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 24.681918][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 24.690081][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 24.698414][ T8] bridge0: port 1(bridge_slave_0) entered blocking state [ 24.705512][ T8] bridge0: port 1(bridge_slave_0) entered forwarding state [ 24.713236][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 24.721291][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 24.729479][ T8] bridge0: port 2(bridge_slave_1) entered blocking state [ 24.736538][ T8] bridge0: port 2(bridge_slave_1) entered forwarding state [ 24.766280][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 24.775329][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 24.783345][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 24.792492][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 24.800097][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 24.807778][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 24.816488][ T8] bridge0: port 1(bridge_slave_0) entered blocking state [ 24.823539][ T8] bridge0: port 1(bridge_slave_0) entered forwarding state [ 24.831006][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 24.839276][ T8] bridge0: port 2(bridge_slave_1) entered blocking state [ 24.846336][ T8] bridge0: port 2(bridge_slave_1) entered forwarding state [ 24.853899][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 24.861869][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 24.870123][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 24.878187][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 24.892463][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 24.900925][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 24.921923][ T289] device veth0_vlan entered promiscuous mode [ 24.933685][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 24.941980][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 24.950653][ T8] bridge0: port 1(bridge_slave_0) entered blocking state [ 24.957759][ T8] bridge0: port 1(bridge_slave_0) entered forwarding state [ 24.965571][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 24.973997][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 24.982119][ T8] bridge0: port 2(bridge_slave_1) entered blocking state [ 24.989206][ T8] bridge0: port 2(bridge_slave_1) entered forwarding state [ 24.996644][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 25.005200][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 25.013645][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 25.021515][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 25.029659][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 25.037896][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 25.046091][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 25.053846][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 25.061275][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 25.074598][ T288] device veth0_vlan entered promiscuous mode [ 25.083716][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 25.091887][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 25.100850][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 25.109353][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 25.121001][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 25.128742][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 25.137048][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 25.145418][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 25.154594][ T289] device veth1_macvtap entered promiscuous mode [ 25.163594][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 25.171291][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 25.179730][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 25.188864][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 25.197518][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 25.211333][ T288] device veth1_macvtap entered promiscuous mode [ 25.223933][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 25.232360][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 25.240781][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 25.248726][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 25.256714][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 25.265151][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 25.272652][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 25.295843][ T291] device veth0_vlan entered promiscuous mode [ 25.306563][ T287] device veth0_vlan entered promiscuous mode [ 25.314161][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 25.324541][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 25.334680][ T288] request_module fs-gadgetfs succeeded, but still no fs? [ 25.335270][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 25.350253][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 25.358784][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 25.367321][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 25.375913][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 25.384326][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 25.392644][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 25.400680][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 25.408902][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 25.416632][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 25.424187][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 25.431829][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 25.444881][ T290] device veth0_vlan entered promiscuous mode [ 25.458858][ T287] device veth1_macvtap entered promiscuous mode [ 25.465811][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 25.474897][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 25.484139][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 25.492496][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 25.501042][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 25.509471][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 25.517943][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 25.540244][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 25.548923][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 25.557626][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 25.567072][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 25.575723][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 25.584169][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 25.593252][ T290] device veth1_macvtap entered promiscuous mode [ 25.609457][ T291] device veth1_macvtap entered promiscuous mode [ 25.619207][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 25.628740][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 25.637090][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 25.641850][ T313] FAULT_INJECTION: forcing a failure. [ 25.641850][ T313] name failslab, interval 1, probability 0, space 0, times 1 [ 25.646774][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 25.660289][ T313] CPU: 0 PID: 313 Comm: syz.4.5 Not tainted syzkaller #0 [ 25.672213][ T313] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 25.682304][ T313] Call Trace: [ 25.685586][ T313] [ 25.688524][ T313] __dump_stack+0x21/0x24 [ 25.692886][ T313] dump_stack_lvl+0x110/0x170 [ 25.697557][ T313] ? __cfi_dump_stack_lvl+0x8/0x8 [ 25.702580][ T313] dump_stack+0x15/0x24 [ 25.706737][ T313] should_fail_ex+0x3bf/0x510 [ 25.711417][ T313] ? __alloc_file+0x28/0x2a0 [ 25.716017][ T313] __should_failslab+0xac/0xf0 [ 25.720787][ T313] should_failslab+0x9/0x20 [ 25.725286][ T313] kmem_cache_alloc+0x3b/0x320 [ 25.730053][ T313] ? __cfi__raw_spin_lock+0x10/0x10 [ 25.735248][ T313] __alloc_file+0x28/0x2a0 [ 25.739685][ T313] alloc_empty_file+0x97/0x180 [ 25.744453][ T313] alloc_file+0x59/0x600 [ 25.748701][ T313] ? _raw_spin_unlock+0x4c/0x70 [ 25.753667][ T313] alloc_file_pseudo+0x180/0x200 [ 25.758636][ T313] ? __cfi_alloc_file_pseudo+0x10/0x10 [ 25.764127][ T313] ? init_peercred+0x25b/0x2c0 [ 25.768915][ T313] sock_alloc_file+0xba/0x270 [ 25.773600][ T313] __sys_socketpair+0x2d5/0x5b0 [ 25.778465][ T313] __x64_sys_socketpair+0x9b/0xb0 [ 25.783498][ T313] x64_sys_call+0x6e/0x9a0 [ 25.787973][ T313] do_syscall_64+0x4c/0xa0 [ 25.792465][ T313] ? clear_bhb_loop+0x30/0x80 [ 25.797181][ T313] ? clear_bhb_loop+0x30/0x80 [ 25.801953][ T313] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 25.807850][ T313] RIP: 0033:0x7feb46d9f559 [ 25.812312][ T313] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 25.832006][ T313] RSP: 002b:00007feb47cd9028 EFLAGS: 00000246 ORIG_RAX: 0000000000000035 [ 25.840431][ T313] RAX: ffffffffffffffda RBX: 00007feb47025fa0 RCX: 00007feb46d9f559 [ 25.848405][ T313] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 0000000000000001 [ 25.856396][ T313] RBP: 00007feb46e36b20 R08: 0000000000000000 R09: 0000000000000000 [ 25.864379][ T313] R10: 0000200000000380 R11: 0000000000000246 R12: 0000000000000000 [ 25.872397][ T313] R13: 00007feb47026038 R14: 00007feb47025fa0 R15: 00007ffde7490208 [ 25.880377][ T313] [ 25.911603][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 25.928071][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 25.944559][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 25.953190][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 25.962694][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 25.971529][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 25.980525][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 25.991087][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 26.026730][ T323] FAULT_INJECTION: forcing a failure. [ 26.026730][ T323] name failslab, interval 1, probability 0, space 0, times 0 [ 26.042885][ T323] CPU: 0 PID: 323 Comm: syz.1.8 Not tainted syzkaller #0 [ 26.050072][ T323] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 26.060169][ T323] Call Trace: [ 26.063477][ T323] [ 26.066432][ T323] __dump_stack+0x21/0x24 [ 26.070796][ T323] dump_stack_lvl+0x110/0x170 [ 26.075507][ T323] ? __cfi_dump_stack_lvl+0x8/0x8 [ 26.080564][ T323] dump_stack+0x15/0x24 [ 26.084750][ T323] should_fail_ex+0x3bf/0x510 [ 26.089462][ T323] ? __kernfs_new_node+0xe1/0x670 [ 26.094534][ T323] __should_failslab+0xac/0xf0 [ 26.099330][ T323] should_failslab+0x9/0x20 [ 26.103861][ T323] kmem_cache_alloc+0x3b/0x320 [ 26.108674][ T323] __kernfs_new_node+0xe1/0x670 [ 26.113555][ T323] ? kernfs_new_node+0x260/0x260 [ 26.118553][ T323] ? ktime_get_real_ts64+0x253/0x2e0 [ 26.123880][ T323] ? kasan_save_alloc_info+0x1f/0x30 [ 26.129198][ T323] ? __kasan_check_write+0x14/0x20 [ 26.134334][ T323] ? mutex_unlock+0x8f/0x230 [ 26.138954][ T323] ? __cfi_mutex_unlock+0x10/0x10 [ 26.144022][ T323] kernfs_new_node+0x150/0x260 [ 26.148852][ T323] __kernfs_create_file+0x4e/0x270 [ 26.154001][ T323] cgroup_addrm_files+0x701/0xbb0 [ 26.159061][ T323] ? trace_raw_output_cgroup_event+0x1e0/0x1e0 [ 26.165255][ T323] ? kasan_save_alloc_info+0x1f/0x30 [ 26.170576][ T323] ? __kernfs_iattrs+0x97/0x2f0 [ 26.175463][ T323] ? __kernfs_iattrs+0x13c/0x2f0 [ 26.180428][ T323] css_populate_dir+0x1b4/0x370 [ 26.185307][ T323] cgroup_mkdir+0x12d8/0x1550 [ 26.190021][ T323] ? __cfi_cgroup_mkdir+0x10/0x10 [ 26.195111][ T323] ? up_read+0x56/0x1d0 [ 26.199313][ T323] ? __cfi_cgroup_mkdir+0x10/0x10 [ 26.204368][ T323] kernfs_iop_mkdir+0x1b1/0x2b0 [ 26.209254][ T323] vfs_mkdir+0x39c/0x580 [ 26.213542][ T323] do_mkdirat+0x174/0x4d0 [ 26.217919][ T323] __x64_sys_mkdirat+0x89/0xa0 [ 26.222726][ T323] x64_sys_call+0x73d/0x9a0 [ 26.227267][ T323] do_syscall_64+0x4c/0xa0 [ 26.231749][ T323] ? clear_bhb_loop+0x30/0x80 [ 26.236458][ T323] ? clear_bhb_loop+0x30/0x80 [ 26.241200][ T323] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 26.247130][ T323] RIP: 0033:0x7f4f68b9f559 [ 26.251585][ T323] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 26.271234][ T323] RSP: 002b:00007f4f69a72028 EFLAGS: 00000246 ORIG_RAX: 0000000000000102 [ 26.279689][ T323] RAX: ffffffffffffffda RBX: 00007f4f68e25fa0 RCX: 00007f4f68b9f559 [ 26.287704][ T323] RDX: 00000000000001ff RSI: 0000200000000000 RDI: ffffffffffffff9c [ 26.295714][ T323] RBP: 00007f4f68c36b20 R08: 0000000000000000 R09: 0000000000000000 [ 26.303724][ T323] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 26.311728][ T323] R13: 00007f4f68e26038 R14: 00007f4f68e25fa0 R15: 00007ffd6b3904d8 [ 26.319739][ T323] [ 26.357416][ T323] cgroup: cgroup_addrm_files: failed to add notify_on_release, err=-12 [ 26.379941][ T332] netlink: 68 bytes leftover after parsing attributes in process `syz.0.10'. [ 26.808087][ T347] device-mapper: table: 252:0: crypt: Device lookup failed (-ENODEV) [ 26.826475][ T347] device-mapper: ioctl: error adding target to table [ 26.853495][ T39] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 26.912259][ T6] hid-generic 0003:0001:0001.0001: No inputs registered, leaving [ 26.925370][ T6] hid-generic 0003:0001:0001.0001: hidraw0: USB HID v0.01 Mouse [syz1] on syz0 [ 27.036354][ T359] fido_id[359]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 27.123414][ T39] usb 4-1: Using ep0 maxpacket: 8 [ 27.130827][ T39] usb 4-1: config index 0 descriptor too short (expected 301, got 45) [ 27.139116][ T342] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 27.147192][ T39] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 27.157361][ T39] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 27.171689][ T39] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 27.172082][ T373] netlink: 4 bytes leftover after parsing attributes in process `syz.4.23'. [ 27.182043][ T39] usb 4-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 27.203560][ T39] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 27.212696][ T39] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 27.243415][ T60] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 27.334649][ T342] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 27.345714][ T342] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 27.355620][ T342] usb 1-1: New USB device found, idVendor=1e7d, idProduct=2d5a, bcdDevice= 0.00 [ 27.364868][ T342] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 27.373520][ T342] usb 1-1: config 0 descriptor?? [ 27.433481][ T39] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 27.441995][ T60] usb 3-1: Using ep0 maxpacket: 8 [ 27.448255][ T60] usb 3-1: config 168 descriptor has 1 excess byte, ignoring [ 27.455737][ T60] usb 3-1: too many endpoints for config 168 interface 0 altsetting 188: 100, using maximum allowed: 30 [ 27.467008][ T60] usb 3-1: config 168 interface 0 altsetting 188 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 27.478520][ T60] usb 3-1: config 168 interface 0 altsetting 188 has an invalid endpoint with address 0xFF, skipping [ 27.489597][ T60] usb 3-1: config 168 interface 0 altsetting 188 has 2 endpoint descriptors, different from the interface descriptor's value: 100 [ 27.503055][ T60] usb 3-1: config 168 interface 0 has no altsetting 0 [ 27.510631][ T60] usb 3-1: config 168 descriptor has 1 excess byte, ignoring [ 27.518147][ T60] usb 3-1: too many endpoints for config 168 interface 0 altsetting 188: 100, using maximum allowed: 30 [ 27.529429][ T60] usb 3-1: config 168 interface 0 altsetting 188 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 27.540909][ T60] usb 3-1: config 168 interface 0 altsetting 188 has an invalid endpoint with address 0xFF, skipping [ 27.551799][ T60] usb 3-1: config 168 interface 0 altsetting 188 has 2 endpoint descriptors, different from the interface descriptor's value: 100 [ 27.565216][ T60] usb 3-1: config 168 interface 0 has no altsetting 0 [ 27.573269][ T60] usb 3-1: config 168 descriptor has 1 excess byte, ignoring [ 27.580729][ T60] usb 3-1: too many endpoints for config 168 interface 0 altsetting 188: 100, using maximum allowed: 30 [ 27.592058][ T60] usb 3-1: config 168 interface 0 altsetting 188 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 27.603651][ T60] usb 3-1: config 168 interface 0 altsetting 188 has an invalid endpoint with address 0xFF, skipping [ 27.614706][ T60] usb 3-1: config 168 interface 0 altsetting 188 has 2 endpoint descriptors, different from the interface descriptor's value: 100 [ 27.628181][ T60] usb 3-1: config 168 interface 0 has no altsetting 0 [ 27.637344][ T60] usb 3-1: string descriptor 0 read error: -22 [ 27.643647][ T39] usb 2-1: Using ep0 maxpacket: 8 [ 27.648782][ T60] usb 3-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 27.657886][ T60] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 27.666744][ T39] usb 2-1: config index 0 descriptor too short (expected 301, got 45) [ 27.675338][ T39] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 27.685229][ T39] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 27.696676][ T39] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 27.706709][ T39] usb 2-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 27.719785][ T39] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 27.728954][ T39] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 27.794323][ T342] savu 0003:1E7D:2D5A.0002: hidraw0: USB HID v0.00 Device [HID 1e7d:2d5a] on usb-dummy_hcd.0-1/input0 [ 27.898030][ T39] usb 3-1: USB disconnect, device number 2 [ 28.013603][ T19] usb 4-1: USB disconnect, device number 2 [ 28.043442][ T342] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 28.052246][ T28] kauditd_printk_skb: 74 callbacks suppressed [ 28.052259][ T28] audit: type=1400 audit(1792727945.836:148): avc: denied { mmap_zero } for pid=353 comm="syz.0.15" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=memprotect permissive=1 [ 28.082573][ T6] usb 1-1: USB disconnect, device number 2 [ 28.089533][ T6] ================================================================== [ 28.097639][ T6] BUG: KASAN: use-after-free in roccat_disconnect+0x22d/0x240 [ 28.105105][ T6] Read of size 4 at addr ffff888136001008 by task kworker/0:0/6 [ 28.112747][ T6] [ 28.115077][ T6] CPU: 0 PID: 6 Comm: kworker/0:0 Not tainted syzkaller #0 [ 28.122273][ T6] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 28.132347][ T6] Workqueue: usb_hub_wq hub_event [ 28.137384][ T6] Call Trace: [ 28.140659][ T6] [ 28.143587][ T6] __dump_stack+0x21/0x24 [ 28.147920][ T6] dump_stack_lvl+0x110/0x170 [ 28.152619][ T6] ? __cfi_dump_stack_lvl+0x8/0x8 [ 28.157641][ T6] ? __cfi__printk+0x8/0x8 [ 28.162079][ T6] ? kfree_const+0x39/0x40 [ 28.166499][ T6] ? roccat_disconnect+0x22d/0x240 [ 28.171639][ T6] print_address_description+0x71/0x200 [ 28.177214][ T6] print_report+0x4a/0x60 [ 28.181549][ T6] kasan_report+0x122/0x150 [ 28.186058][ T6] ? roccat_disconnect+0x22d/0x240 [ 28.191175][ T6] __asan_report_load4_noabort+0x14/0x20 [ 28.196819][ T6] roccat_disconnect+0x22d/0x240 [ 28.201772][ T6] savu_remove+0xec/0x170 [ 28.206099][ T6] ? __cfi_savu_remove+0x10/0x10 [ 28.211088][ T6] hid_device_remove+0x292/0x3c0 [ 28.216036][ T6] ? __cfi_hid_device_remove+0x10/0x10 [ 28.221524][ T6] device_release_driver_internal+0x486/0x7e0 [ 28.225088][ T342] usb 5-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 28.227600][ T6] device_release_driver+0x19/0x20 [ 28.239063][ T342] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 28.243482][ T6] bus_remove_device+0x2f0/0x350 [ 28.243507][ T6] device_del+0x63c/0xe50 [ 28.258281][ T342] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 28.259287][ T6] ? __cfi_device_del+0x10/0x10 [ 28.264139][ T342] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 28.273385][ T6] ? __kasan_check_write+0x14/0x20 [ 28.273413][ T6] ? _raw_spin_lock_irq+0x95/0xf0 [ 28.273434][ T6] ? __cfi__raw_spin_lock_irq+0x10/0x10 [ 28.273472][ T6] hid_destroy_device+0x6a/0x110 [ 28.280747][ T342] usb 5-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40 [ 28.291266][ T6] usbhid_disconnect+0x9f/0xc0 [ 28.291301][ T6] usb_unbind_interface+0x223/0x8b0 [ 28.291330][ T6] ? kernfs_remove_by_name_ns+0x120/0x160 [ 28.298788][ T342] usb 5-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0 [ 28.301523][ T6] ? __cfi_usb_unbind_interface+0x10/0x10 [ 28.307868][ T342] usb 5-1: Manufacturer: syz [ 28.312062][ T6] device_release_driver_internal+0x4e4/0x7e0 [ 28.312105][ T6] device_release_driver+0x19/0x20 [ 28.341272][ T342] usb 5-1: config 0 descriptor?? [ 28.344895][ T6] bus_remove_device+0x2f0/0x350 [ 28.344925][ T6] device_del+0x63c/0xe50 [ 28.344953][ T6] ? __cfi_device_del+0x10/0x10 [ 28.385542][ T6] ? device_unregister+0x27/0x40 [ 28.390512][ T6] usb_disable_device+0x3a8/0x750 [ 28.395544][ T6] usb_disconnect+0x32d/0x880 [ 28.400241][ T6] hub_event+0x1a66/0x4310 [ 28.404736][ T6] ? kthread_data+0x50/0xc0 [ 28.409250][ T6] ? __cfi_hub_event+0x10/0x10 [ 28.414053][ T6] ? __schedule+0xcbb/0x1700 [ 28.418663][ T6] process_one_work+0x717/0xc30 [ 28.423543][ T6] worker_thread+0xa4d/0x11d0 [ 28.428293][ T6] kthread+0x281/0x320 [ 28.432388][ T6] ? __cfi_worker_thread+0x10/0x10 [ 28.437605][ T6] ? __cfi_kthread+0x10/0x10 [ 28.442229][ T6] ret_from_fork+0x1f/0x30 [ 28.446665][ T6] [ 28.449701][ T6] [ 28.452032][ T6] Allocated by task 342: [ 28.456278][ T6] kasan_set_track+0x4b/0x70 [ 28.460885][ T6] kasan_save_alloc_info+0x1f/0x30 [ 28.466002][ T6] __kasan_kmalloc+0x95/0xb0 [ 28.470605][ T6] kmalloc_trace+0x40/0xb0 [ 28.475033][ T6] roccat_connect+0x5c/0x4b0 [ 28.479653][ T6] savu_probe+0x1ba/0x360 [ 28.484007][ T6] hid_device_probe+0x267/0x3a0 [ 28.488875][ T6] really_probe+0x2d7/0x9a0 [ 28.493420][ T6] __driver_probe_device+0x193/0x270 [ 28.498720][ T6] driver_probe_device+0x54/0x3e0 [ 28.503763][ T6] __device_attach_driver+0x2e9/0x4a0 [ 28.509148][ T6] bus_for_each_drv+0x192/0x220 [ 28.514076][ T6] __device_attach+0x2b0/0x420 [ 28.518872][ T6] device_initial_probe+0x1a/0x20 [ 28.523959][ T6] bus_probe_device+0xc0/0x1f0 [ 28.528749][ T6] device_add+0xb0b/0xec0 [ 28.533091][ T6] hid_add_device+0x3b8/0x580 [ 28.537783][ T6] usbhid_probe+0xc12/0xff0 [ 28.542302][ T6] usb_probe_interface+0x621/0xb30 [ 28.547447][ T6] really_probe+0x2d7/0x9a0 [ 28.551974][ T6] __driver_probe_device+0x193/0x270 [ 28.557281][ T6] driver_probe_device+0x54/0x3e0 [ 28.562323][ T6] __device_attach_driver+0x2e9/0x4a0 [ 28.567718][ T6] bus_for_each_drv+0x192/0x220 [ 28.572639][ T6] __device_attach+0x2b0/0x420 [ 28.577440][ T6] device_initial_probe+0x1a/0x20 [ 28.582496][ T6] bus_probe_device+0xc0/0x1f0 [ 28.587266][ T6] device_add+0xb0b/0xec0 [ 28.591632][ T6] usb_set_configuration+0x1a01/0x1f70 [ 28.597108][ T6] usb_generic_driver_probe+0x91/0x150 [ 28.602573][ T6] usb_probe_device+0x154/0x260 [ 28.607439][ T6] really_probe+0x2d7/0x9a0 [ 28.611961][ T6] __driver_probe_device+0x193/0x270 [ 28.617253][ T6] driver_probe_device+0x54/0x3e0 [ 28.622310][ T6] __device_attach_driver+0x2e9/0x4a0 [ 28.627705][ T6] bus_for_each_drv+0x192/0x220 [ 28.632569][ T6] __device_attach+0x2b0/0x420 [ 28.637372][ T6] device_initial_probe+0x1a/0x20 [ 28.642417][ T6] bus_probe_device+0xc0/0x1f0 [ 28.647191][ T6] device_add+0xb0b/0xec0 [ 28.651535][ T6] usb_new_device+0x9f4/0x1500 [ 28.656315][ T6] hub_event+0x27fb/0x4310 [ 28.660785][ T6] process_one_work+0x717/0xc30 [ 28.665664][ T6] worker_thread+0xa4d/0x11d0 [ 28.670372][ T6] kthread+0x281/0x320 [ 28.674452][ T6] ret_from_fork+0x1f/0x30 [ 28.678883][ T6] [ 28.681233][ T6] Freed by task 353: [ 28.685128][ T6] kasan_set_track+0x4b/0x70 [ 28.689735][ T6] kasan_save_free_info+0x2b/0x40 [ 28.694773][ T6] ____kasan_slab_free+0x132/0x180 [ 28.699898][ T6] __kasan_slab_free+0x11/0x20 [ 28.704672][ T6] slab_free_freelist_hook+0xc2/0x190 [ 28.710052][ T6] __kmem_cache_free+0xb7/0x1b0 [ 28.714923][ T6] kfree+0x6f/0xf0 [ 28.718654][ T6] roccat_release+0x2bc/0x380 [ 28.723342][ T6] __fput+0x1fd/0x8f0 [ 28.727384][ T6] ____fput+0x15/0x20 [ 28.731393][ T6] task_work_run+0x1e1/0x250 [ 28.735996][ T6] exit_to_user_mode_loop+0x9b/0xb0 [ 28.741217][ T6] exit_to_user_mode_prepare+0x87/0xd0 [ 28.746692][ T6] syscall_exit_to_user_mode+0x1a/0x30 [ 28.752166][ T6] do_syscall_64+0x58/0xa0 [ 28.756612][ T6] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 28.762525][ T6] [ 28.764854][ T6] The buggy address belongs to the object at ffff888136001000 [ 28.764854][ T6] which belongs to the cache kmalloc-512 of size 512 [ 28.778921][ T6] The buggy address is located 8 bytes inside of [ 28.778921][ T6] 512-byte region [ffff888136001000, ffff888136001200) [ 28.792031][ T6] [ 28.794370][ T6] The buggy address belongs to the physical page: [ 28.800783][ T6] page:ffffea0004d80000 refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x136000 [ 28.811047][ T6] head:ffffea0004d80000 order:2 compound_mapcount:0 compound_pincount:0 [ 28.819382][ T6] flags: 0x4000000000010200(slab|head|zone=1) [ 28.825481][ T6] raw: 4000000000010200 0000000000000000 dead000000000122 ffff888100042f00 [ 28.834077][ T6] raw: 0000000000000000 0000000000100010 00000001ffffffff 0000000000000000 [ 28.842660][ T6] page dumped because: kasan: bad access detected [ 28.849110][ T6] page_owner tracks the page as allocated [ 28.854832][ T6] page last allocated via order 2, migratetype Unmovable, gfp_mask 0x1d2a20(GFP_ATOMIC|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC|__GFP_HARDWALL), pid 60, tgid 60 (kworker/1:2), ts 27754075142, free_ts 27695111262 [ 28.876562][ T6] post_alloc_hook+0x1f5/0x210 [ 28.881380][ T6] prep_new_page+0x1c/0x110 [ 28.885932][ T6] get_page_from_freelist+0x2ca9/0x2d20 [ 28.891493][ T6] __alloc_pages+0x1fa/0x610 [ 28.896101][ T6] alloc_slab_page+0x6e/0xf0 [ 28.900701][ T6] new_slab+0x98/0x3e0 [ 28.904787][ T6] ___slab_alloc+0x70f/0xb70 [ 28.909400][ T6] __slab_alloc+0x5e/0xa0 [ 28.913736][ T6] __kmem_cache_alloc_node+0x204/0x2d0 [ 28.919211][ T6] __kmalloc_node_track_caller+0xa1/0x1e0 [ 28.924939][ T6] __alloc_skb+0x226/0x4a0 [ 28.929397][ T6] ndisc_send_rs+0x31d/0x870 [ 28.934010][ T6] addrconf_dad_completed+0x958/0xe80 [ 28.939404][ T6] addrconf_dad_work+0xc1b/0x14a0 [ 28.944448][ T6] process_one_work+0x717/0xc30 [ 28.949304][ T6] worker_thread+0xa4d/0x11d0 [ 28.953995][ T6] page last free stack trace: [ 28.958668][ T6] free_unref_page_prepare+0x81b/0x820 [ 28.964147][ T6] free_unref_page+0x93/0x530 [ 28.968849][ T6] __free_pages+0x67/0x100 [ 28.973292][ T6] free_pages+0x82/0x90 [ 28.977497][ T6] __stack_depot_save+0x45f/0x490 [ 28.982542][ T6] kasan_set_track+0x60/0x70 [ 28.987144][ T6] kasan_save_free_info+0x2b/0x40 [ 28.992177][ T6] ____kasan_slab_free+0x132/0x180 [ 28.997298][ T6] __kasan_slab_free+0x11/0x20 [ 29.002081][ T6] slab_free_freelist_hook+0xc2/0x190 [ 29.007463][ T6] __kmem_cache_free+0xb7/0x1b0 [ 29.012334][ T6] kfree+0x6f/0xf0 [ 29.016065][ T6] usb_cache_string+0xfa/0x130 [ 29.020845][ T6] usb_set_configuration+0x18bb/0x1f70 [ 29.026317][ T6] usb_generic_driver_probe+0x91/0x150 [ 29.031793][ T6] usb_probe_device+0x154/0x260 [ 29.036660][ T6] [ 29.038994][ T6] Memory state around the buggy address: [ 29.044634][ T6] ffff888136000f00: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 29.052706][ T6] ffff888136000f80: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 29.060859][ T6] >ffff888136001000: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 29.068920][ T6] ^ [ 29.073255][ T6] ffff888136001080: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 29.081324][ T6] ffff888136001100: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 29.089394][ T6] ================================================================== [ 29.103303][ T28] audit: type=1400 audit(1792727946.886:149): avc: denied { read } for pid=85 comm="syslogd" name="log" dev="sda1" ino=2010 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:var_t tclass=lnk_file permissive=1 [ 29.104072][ T6] Disabling lock debugging due to kernel taint [ 29.132039][ T28] audit: type=1400 audit(1792727946.886:150): avc: denied { search } for pid=85 comm="syslogd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 29.156258][ T28] audit: type=1400 audit(1792727946.886:151): avc: denied { write } for pid=85 comm="syslogd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 29.177608][ T28] audit: type=1400 audit(1792727946.886:152): avc: denied { add_name } for pid=85 comm="syslogd" name="messages" scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 29.198407][ T28] audit: type=1400 audit(1792727946.886:153): avc: denied { create } for pid=85 comm="syslogd" name="messages" scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 29.223447][ T28] audit: type=1400 audit(1792727946.886:154): avc: denied { append open } for pid=85 comm="syslogd" path="/tmp/messages" dev="tmpfs" ino=5 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 29.246675][ T28] audit: type=1400 audit(1792727946.886:155): avc: denied { getattr } for pid=85 comm="syslogd" path="/tmp/messages" dev="tmpfs" ino=5 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 29.355221][ T342] appleir 0003:05AC:8243.0003: unknown main item tag 0x0 [ 29.362536][ T342] appleir 0003:05AC:8243.0003: No inputs registered, leaving [ 29.371636][ T342] appleir 0003:05AC:8243.0003: hiddev96,hidraw0: USB HID v0.00 Device [syz] on usb-dummy_hcd.4-1/input0 [ 30.173652][ T6] usb 2-1: USB disconnect, device number 2 [ 30.176068][ T342] usb 5-1: USB disconnect, device number 2