last executing test programs: 8.190035237s ago: executing program 2 (id=229): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8c}, 0x0) bind$802154_raw(0xffffffffffffffff, 0x0, 0x5) sched_setscheduler(0x0, 0x1, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = syz_open_dev$MSR(&(0x7f0000000040), 0x0, 0x0) read$msr(r0, &(0x7f0000032680)=""/102384, 0x18ff0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000000)={0x8, &(0x7f0000000240)=[{0x1, 0x64, 0x3, 0xf78}, {0x5, 0x7f, 0x2, 0x6}, {0x0, 0x0, 0x9, 0x3}, {0xe20, 0x7, 0x9, 0x3}, {0x6, 0xb7, 0x7, 0x10000}, {0x9, 0x5, 0x6, 0x7fffffff}, {0x2, 0x2, 0x6, 0x3}, {0x8004, 0x57, 0x2, 0x4}]}) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB], 0x0, 0x52}, 0x28) r1 = syz_open_dev$video4linux(0x0, 0x73, 0x0) ioctl$VIDIOC_SUBDEV_G_CROP(r1, 0xc038563b, 0x0) socket$l2tp(0x2, 0x2, 0x73) openat$drirender128(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0) epoll_create(0x3) futex(&(0x7f0000000000)=0x1, 0x6, 0x2, 0x0, 0x0, 0x3) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) futex(&(0x7f000000cffc)=0x4, 0xb, 0x4, 0x0, 0x0, 0x0) futex(&(0x7f000000cffc), 0xc, 0x1, 0x0, &(0x7f0000048000)=0x1, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x180) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000cc0)={'syz1\x00', {0xfff9, 0x2, 0x248, 0x9b99}, 0x25, [0x9, 0x7, 0x2, 0x6, 0x8, 0x155f, 0x10000006, 0x4, 0x2dcd, 0x1, 0xb4, 0x8, 0xa2b9, 0x6, 0x7, 0xe1, 0x6, 0xfc000004, 0x403, 0xbbf, 0x3, 0xfffffffd, 0x101c0, 0xd, 0x0, 0x0, 0x6, 0x4, 0x100002, 0xc3, 0x5d6, 0x8001, 0x8a, 0x79, 0x2, 0x10080, 0x2, 0x91, 0x129, 0x4, 0x16, 0x5, 0x5, 0x401, 0x1, 0x405, 0xa7, 0x81, 0x9, 0xf9a2, 0xa9, 0xff, 0x0, 0x2, 0x2, 0x2, 0x7, 0x489, 0x7ff, 0x4, 0x4007f, 0xffffffff, 0x6, 0x4], [0x401, 0x3, 0x6, 0x9, 0x4, 0x8000c66, 0xa8a9, 0x2000006f, 0x8e, 0xd50, 0x7, 0xad, 0x2, 0x809, 0x40, 0xa7, 0x1000, 0x0, 0x200b398, 0x8001, 0x1, 0x4, 0x1c, 0x7, 0x1, 0xfffffffe, 0x3, 0x8, 0xffffff7f, 0x6, 0x6, 0x4c2336d3, 0x4, 0x0, 0xfffbfff8, 0x4, 0x46, 0xf1, 0x7, 0xab00060, 0x2, 0x9, 0xffffffff, 0x5, 0x3fe, 0x1ff, 0x1, 0x7fff, 0x67b2, 0x1cc, 0x9, 0x80000004, 0x6, 0x438, 0x2, 0x9, 0x2, 0x7fffffff, 0x4, 0xfffffff9, 0x18e, 0x1000, 0x2, 0x5], [0x2, 0xfffffffe, 0x9, 0xc, 0x2, 0x2e6bf783, 0x80000001, 0x5, 0x5, 0x491, 0x9, 0x200026, 0x7f, 0x400, 0x102, 0x1, 0x41, 0x6, 0xee4b, 0x2000004, 0x1, 0xc, 0x5, 0x9, 0x5, 0x3, 0x9, 0x3, 0xc7, 0xfff, 0x10000a, 0x2, 0x400, 0x8, 0x5, 0xd3, 0x8, 0x97f7, 0x3, 0x200000d, 0x3, 0x10010, 0x7, 0xdd81, 0x4, 0x7f, 0x9d27, 0x9, 0x1, 0x100, 0x2, 0x6, 0x7ffe, 0x28, 0x5, 0xd500, 0x1, 0x77, 0x9, 0x6, 0x10000, 0xfffffffd, 0x5, 0xfffffffe], [0xa772, 0x6, 0x5, 0x1af8, 0xbfc, 0x9, 0x5, 0x7f, 0x55, 0x7ff, 0xff, 0x1005, 0x10000001, 0x4, 0x21, 0x9, 0x81, 0x7, 0x9d87, 0x8, 0x8, 0x4, 0x140f1, 0x5396, 0x3, 0x6, 0x80008001, 0x7777, 0x1, 0x2, 0x100, 0xd8ce, 0x7fffffff, 0x100009, 0xc, 0x32d, 0x3, 0x1ff, 0x2000803, 0xffffffff, 0x10000, 0x0, 0x8004, 0x7fff, 0x3, 0x6, 0xf, 0xe, 0x8, 0x274, 0x6, 0xfffffff9, 0x4, 0x9, 0x9, 0x4, 0x463f, 0x4, 0xdab, 0x5, 0x8, 0x13fff, 0x8, 0x9]}, 0x45c) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="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"], 0x15c}}, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000240)={0x48, 0x0, &(0x7f0000000380)=[@register_looper, @transaction={0x40406300, {0x3, 0x0, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) sendmsg$NLBL_UNLABEL_C_STATICADD(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, 0x0}, 0x8004) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r4, 0x4090ae82, &(0x7f0000000000)={[0x35, 0xfff, 0xfffffffffffffffe, 0x40000000000180, 0x2, 0x7, 0xf2, 0xd, 0x7fffffffffffe, 0x7, 0x5, 0xb, 0x7, 0xfffffffffffffff8, 0x9, 0x8], 0x25000, 0x304}) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) 6.149861797s ago: executing program 2 (id=233): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x802, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000100)) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r2 = dup3(r1, r0, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) r4 = syz_io_uring_setup(0x34b9, &(0x7f0000000540)={0x0, 0x69ee, 0xc00, 0x5, 0x50}, &(0x7f0000000040)=0x0, &(0x7f0000000080)=0x0, &(0x7f0000000180)=0x0) syz_io_uring_submit(r5, r6, r7, &(0x7f0000000280)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0xa, 0x0, 0x2, 0x3, 0x0, 0x1000982, 0x0, 0x1}) io_uring_enter(r4, 0x1, 0x1, 0x1, 0x0, 0x0) io_uring_register$IORING_REGISTER_PBUF_RING(r4, 0x16, &(0x7f0000001900)={&(0x7f0000002000)={[{0x0, 0x0, 0x2}, {0x0, 0x0, 0x3}, {0x0, 0x0, 0x2}, {0x0}, {0x0, 0x0, 0x3}, {0x0, 0x0, 0x2}, {0x0}, {0x0, 0x0, 0x1}]}, 0x8, 0x0, 0x2}, 0x1) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r3, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000004a80)={0x73622a85, 0x100, 0x1}) syz_open_dev$usbmon(&(0x7f0000000000), 0x80000001, 0x82002) r8 = syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') mount$9p_fd(0x0, &(0x7f0000000100)='.\x00', &(0x7f0000000040), 0x0, &(0x7f0000000340)={'trans=fd,', {'rfdno', 0x3d, r8}, 0x2c, {'wfdno', 0x3d, r8}}) syz_open_dev$usbfs(&(0x7f0000000140), 0x77, 0x1501) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000004c0)={0x8, 0x0, &(0x7f0000000000)=[@acquire], 0x0, 0x0, 0x0}) r9 = socket(0x1e, 0x4, 0x0) connect$tipc(r9, &(0x7f0000000040)=@name={0x1e, 0x2, 0x0, {{0x1, 0x1}}}, 0x10) connect$bt_l2cap(r9, &(0x7f0000000380)={0x1f, 0x5, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x0, 0x2}, 0xe) sendmmsg$unix(r9, &(0x7f0000004400), 0x400000000000203, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000fc0)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000300)={@flat=@weak_binder={0x77622a85, 0x1000}, @flat=@weak_binder={0x77622a85, 0x1100, 0x3}, @flat=@weak_binder={0x77622a85, 0x1, 0x2}}, &(0x7f0000000200)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0}) 6.143799309s ago: executing program 0 (id=234): r0 = openat$vmci(0xffffffffffffff9c, 0x0, 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r0, 0x7a7, &(0x7f0000001040)=0xb0000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r0, 0x7a0, &(0x7f0000000000)={@local, 0x1}) ioctl$IOCTL_VMCI_DATAGRAM_SEND(r0, 0x7ab, &(0x7f0000001080)={&(0x7f0000001900)={{@local, 0x4e4f}, {@local, 0x3}, 0x400, "2ee7668f981d7d63c4423fb052f6d7d1e4f47b625168d80373ad34292aff31347deeaa6421e6696045ba749106ca1d1108721c77ee60696e169c5979d136df9b343c05274e81c31a4b3a233c6dcccebe8a6135892ffd1a00a229f6677c85cdc3d41ac5b0d8803051771e6b4177aef33a2d5966a4c718e6ea0858eecff221d0d38596424e03949dd4c517caf6f7cfa1009f08c488909bb1febcf2c64f817bc72a53925c0d6c07ca3e20278ca47b6601a206cd0adb73af3b3f4508c4617c6f1cc8da54c37aff1eb3c33c4c8056c8e66b993755f6d7b4a523a3c8792c496c7579f0f7953397be49488a942a387ff5e1d5bee5d04d926ee25bc20f6edeb20b776905e0b753428ae4427a1edaf3267db20dcc8dbd1c63e8c262f6fa43f75f7ba01317912ce36e5dd4ca8284879e738fe789ef3c80a33d7cc4ae3584fd95deee653f5fd07142992caf3447090eddcbaad8ca67ccf418c710046ed19ea000596f4e173efe289c4c9d9836a074b7e85f314a546c0308a3e70ee2fc5f3ebdbdbebc0dfda3a73765d758db156787a53f31444b5b42e3f8f2508097e2a5e68f5b47a218f37c957881eeab7f8a550318a6923ecc175892a3df26e8165edb8c927510b4a57e7a3ea4be568a61bc2af29f7094bb99bfcb2f40973bf7157a99e3b162cd916756b18205990378793f848ca3102829bb94883796dc54653e922bc21d3aef58e923c39f848a876de056d7fe111f20e78df637dbae7549f332007b262d6e8be0d028c53666f7cc8cd455a987506fbadd7c093fcd6ff09e3b0a907f89e18a5e459bbb612d53c22715307924f2cd6b3b6d913449cb284befb9683a3953321d8ad6e094f84f3383b0e58e683313dd5153504620fb32798bedb4769ba94ea8e0125e637fd25bad6cc5cd7a434119b24fc389da1e0615c4af5337c24a2c04e01e106824e6907ee91f40d143b12ddf09cbc81470d77dddca02b0ecc6802d7ffa8023170c90ec725854b7a61868d5f9f7d4edbea8e0abd4a548856e714bc582e16f62b68c6c4461728e9acf95e93fb0aea75a9d3268f5b9468d299f2977fb7753f292a4f0e5e81a93a3495c2f7db3524fc1b655598b2990aa5ffd37a9209cdfc2729b900355d08b9e287567a6f63cc7a68437714c69601b2d3eab72b0771e22b39adc2f576c01d50007aee8839425a9c161803f1a5aa1317ae5300a70f28893d18076b3d69614001f6ad5d4fbe2581446589a3de4ac21b66b966b73478463760a3dcdf3635db22716e8e8c27ef81f31ec1b70fae852bc53feebe88a7bafc83faf903d29c839ee77575ddb036c0a533ae2abc9e9328bb38497b02f45401450cee0633b172bafd5a679179f482267f4e46759b16e6c7893f4163f629aa378a692b6b690fabc4b87e23a7da16184d9d26ac112b3ad12ce4f3d53c20f32b13ad0cf0bf54a7391affd"}, 0x418, 0x40}) 6.081419686s ago: executing program 0 (id=235): r0 = syz_usb_connect(0x0, 0x3f, &(0x7f00000000c0)=ANY=[@ANYBLOB="11010000733336088dee1edb23610000000109022d0101100000000904000003fe03010009cd8d1f0002000000090505020000fcffff09058b1e20"], 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$devlink(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_NEW(r1, &(0x7f0000000640)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="2c020300", @ANYRES16=r2, @ANYBLOB="010028bd7000fedbdf254c0000000c00a70001010000000000000c00a6000900000000000000"], 0x2c}, 0x1, 0x0, 0x0, 0xd0}, 0x0) syz_usb_connect$uac1(0x5, 0x103, &(0x7f0000000100)=ANY=[@ANYBLOB="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"], &(0x7f0000000480)={0xa, &(0x7f0000000240)={0xa, 0x6, 0x300, 0xc, 0x2, 0x9, 0x20, 0x5}, 0x51, &(0x7f0000000280)=ANY=[@ANYBLOB="05000000030b100104100001955310032d100bd1f80bac63969d1386009c2281cd48992f8fc7bcac269e52bc330146ab9cb45ce3694ce9bc19a77b9b66141004056c3544baae12b65450"], 0x3, [{0x93, &(0x7f0000000700)=ANY=[@ANYBLOB="9303786a34a38e54601a2c68f68b578db0e3bbce82c97ab575b370248236e56b48ae46eeca00cc3608d690bb383ebb2ca3c2b8f2310067f6d99198533fd2f97cbff07a558f57566f2aa77ef0eada62c223b89430c1732b7e88ca62625bd9612e5acab5716e5f691f191d98c1f3d2bbc28d7e38853d40f7c2e1e21675ba99fb109db16ec092b029acd34b8f1ae201d3bcaa0a316d53c07eb13165b012b3a829dab585ef9c86718a82bbaf3356f0384a9ee875b37e1ad575c9e62268d886e3cc002222db23980b86b80fbe3d32789d8d9739a44805207f058857505f050767fd49a5f82f6e0c5ebe"]}, {0x72, &(0x7f00000003c0)=ANY=[@ANYBLOB="72036f79ed78e2dd5ad03cfcb91439150da19503e367d92ddd99967ed1fa664c5b63728180f79291318dafd2e344c0049a84b453423b2e3a3135dd18f21052bc33b4d88672d17d2cdf4434e21df3029875bca180563e8c7ecc64f5166774454a325c588acf1dc7d9146c6db3c68781eb912a"]}, {0x4, &(0x7f0000000440)=@lang_id={0x4, 0x3, 0x411}}]}) syz_usb_disconnect(0xffffffffffffffff) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = socket$pppl2tp(0x18, 0x1, 0x1) r5 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r4, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r5, {0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x10}}, 0x2}}, 0x2e) sendto(r4, 0x0, 0x0, 0x24004000, 0x0, 0x0) setsockopt$inet6_tcp_int(r3, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) clock_getres(0x2, 0x0) connect$inet6(r3, &(0x7f0000000200)={0xa, 0x4e20, 0x8, @remote, 0x4}, 0x1c) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_ULP(r6, 0x6, 0x1f, &(0x7f0000000680), 0xfffffffffffffe8c) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r3, 0x6, 0x14, &(0x7f0000000080)=0x1, 0x4) sendmsg$inet(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000006c0)=[{&(0x7f0000000b80)='n', 0x1}], 0x1}, 0x0) openat$null(0xffffffffffffff9c, &(0x7f0000000600), 0x1, 0x0) setsockopt$inet6_tcp_TCP_REPAIR_WINDOW(r3, 0x6, 0x1d, &(0x7f0000000040)={0x0, 0x9, 0x7a8, 0x6}, 0x14) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000004c0)) r7 = openat$dir(0xffffffffffffff9c, &(0x7f0000000340)='./file0/file0\x00', 0x2000, 0x100) openat2(r7, &(0x7f0000000540)='./file0\x00', &(0x7f00000005c0)={0x4cc141, 0x80, 0x2}, 0x18) setsockopt$inet6_tcp_TLS_TX(r3, 0x11a, 0x2, &(0x7f0000000140)=@gcm_128={{0x304}, "89e08e1a02fdcc6c", "8a5cdd27553974007c84da1fa7965433", "0dfb04a1", "9b5dcc2f33f23443"}, 0x28) setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000300)={@empty, 0x0, 0x0, 0x1, 0x0, 0x5, 0x4009}, 0x20) r8 = syz_open_dev$char_usb(0xc, 0xb4, 0x6) ioctl$EVIOCGMASK(r8, 0x5b02, 0x0) read$char_usb(r8, 0x0, 0x0) syz_usb_disconnect(r0) 5.938363481s ago: executing program 2 (id=236): bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="0c0000000400000008000000080000000000000046af33534b2a4e90b22e57ee5c7d5607363fe7dfca9253647f225d410ffb99", @ANYRES32, @ANYBLOB="0200"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x15, 0x22, &(0x7f00000009c0)=@raw=[@printk={@p, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0xfffffffd}}, @ldst={0x2, 0x0, 0x6, 0x1, 0x6, 0x40, 0xffffffffffffffff}, @map_idx_val={0x18, 0x6119a2ce29c53a5, 0x6, 0x0, 0x7, 0x0, 0x0, 0x0, 0x7}, @map_idx_val={0x18, 0x12, 0x6, 0x0, 0x4, 0x0, 0x0, 0x0, 0x8}, @tail_call={{0x18, 0x2, 0x1, 0x0, r0}}, @jmp={0x5, 0x0, 0xa, 0x1, 0x4, 0xfffffffffffffffc}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x1}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, r0}}, @cb_func={0x18, 0x5, 0x4, 0x0, 0xfffffffffffffffe}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, r0}}, @ldst={0x0, 0x1, 0x3, 0x4, 0x3, 0xfffffffffffffff0, 0xffffffffffffffff}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x4}, @btf_id={0x18, 0x3, 0x3, 0x0, 0x5}], 0x0, 0x0, 0x0, 0x0, 0x1e00, 0xa, '\x00', 0x0, @fallback=0x2c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000680)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="0300000004000000040000000a00000000000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000000000000000aceade58da000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00'/28], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000002c0)={{r4}, &(0x7f0000000280), &(0x7f0000000240)=r1}, 0x20) setsockopt$sock_attach_bpf(r2, 0x1, 0x32, &(0x7f00000000c0), 0x4) sendmsg$inet(r3, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$devlink(0x0, 0xffffffffffffffff) mkdirat(0xffffffffffffff9c, 0x0, 0x1ff) bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="230000000800000002000000ffff00f005"], 0x48) 5.752549616s ago: executing program 1 (id=239): syz_emit_ethernet(0x2a, &(0x7f0000000140)={@local, @random="ce3500590a7f", @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x2, 0x0, 0x11, 0x0, @empty, @empty}, {0x4e23, 0x0, 0x8}}}}}, 0x0) syz_fuse_handle_req(0xffffffffffffffff, &(0x7f0000008200)="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", 0x2000, &(0x7f0000000e80)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000880)={0x90, 0x0, 0x0, {0x4, 0x2, 0x663e, 0x8000, 0x40009, 0x7, {0x3, 0x80004, 0x3, 0x42a, 0x1, 0xfe, 0x5368, 0x3, 0x3, 0x6000, 0x11ac2fcb, 0x0, 0x0, 0x4, 0x8}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_emit_ethernet(0x2a, &(0x7f0000000280)={@broadcast, @random="67eaa8fce250", @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x2, 0x0, 0x1c, 0x0, 0xdffd, 0x3, 0x11, 0x0, @empty, @empty}, {0x4, 0x0, 0x8}}}}}, 0x0) 5.751188401s ago: executing program 2 (id=240): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0) r3 = syz_open_dev$usbfs(&(0x7f0000000100), 0x76, 0x101b01) openat$cuse(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r4 = syz_open_procfs(0x0, &(0x7f0000000040)='fdinfo/3\x00') pread64(r4, &(0x7f0000000080)=""/237, 0xed, 0x0) r5 = syz_open_dev$usbfs(&(0x7f0000000080), 0x206, 0x20182) ioctl$USBDEVFS_ALLOW_SUSPEND(r5, 0x5522) write(0xffffffffffffffff, 0x0, 0x0) mkdir(&(0x7f0000000080)='./file0\x00', 0x1ba) capset(&(0x7f0000000080)={0x20080522}, 0x0) mount$9p_tcp(&(0x7f0000000200), &(0x7f00000002c0)='./file0\x00', &(0x7f0000000300), 0x4000, &(0x7f0000000340)={'trans=tcp,', {'port', 0x3d, 0x4e24}, 0x2c, {[{@privport}]}}) ioctl$USBDEVFS_DISCONNECT_CLAIM(r3, 0x8108551b, 0x0) ioctl$USBDEVFS_ALLOW_SUSPEND(r3, 0x5522) ioctl$USBDEVFS_SETINTERFACE(r3, 0x80045510, &(0x7f0000000040)={0x0, 0x200000}) 5.670466347s ago: executing program 1 (id=242): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0) r3 = syz_open_dev$usbfs(&(0x7f0000000100), 0x76, 0x101b01) openat$cuse(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r4 = syz_open_procfs(0x0, &(0x7f0000000040)='fdinfo/3\x00') pread64(r4, &(0x7f0000000080)=""/237, 0xed, 0x0) r5 = syz_open_dev$usbfs(&(0x7f0000000080), 0x206, 0x20182) ioctl$USBDEVFS_ALLOW_SUSPEND(r5, 0x5522) write(0xffffffffffffffff, 0x0, 0x0) mkdir(&(0x7f0000000080)='./file0\x00', 0x1ba) capset(&(0x7f0000000080)={0x20080522}, 0x0) mount$9p_tcp(&(0x7f0000000200), &(0x7f00000002c0)='./file0\x00', &(0x7f0000000300), 0x4000, &(0x7f0000000340)={'trans=tcp,', {'port', 0x3d, 0x4e24}}) ioctl$USBDEVFS_DISCONNECT_CLAIM(r3, 0x8108551b, &(0x7f0000000140)={0x0, 0x2, "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"}) ioctl$USBDEVFS_ALLOW_SUSPEND(r3, 0x5522) ioctl$USBDEVFS_SETINTERFACE(r3, 0x80045510, &(0x7f0000000040)={0x0, 0x200000}) 3.618877061s ago: executing program 1 (id=245): r0 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r0, 0x7a7, 0x0) ioctl$IOCTL_VMCI_INIT_CONTEXT(r0, 0x7a0, &(0x7f0000000000)={@local, 0x1}) ioctl$IOCTL_VMCI_DATAGRAM_SEND(r0, 0x7ab, &(0x7f0000001080)={&(0x7f0000001900)={{@local, 0x4e4f}, {@local, 0x3}, 0x400, "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"}, 0x418, 0x40}) 3.617467344s ago: executing program 2 (id=246): prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x20800000000, 0xb, &(0x7f0000006680)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000540)=@updpolicy={0xfc, 0x19, 0x1, 0x0, 0x25dfdbfc, {{@in=@initdev={0xac, 0x1e, 0x0, 0x0}, @in6=@ipv4={'\x00', '\xff\xff', @multicast2}, 0x0, 0x0, 0x0, 0x0, 0x2}, {0x0, 0x4, 0x0, 0x100, 0x0, 0x2, 0x3}, {0x0, 0x3, 0x200000000000}, 0x7, 0x0, 0x1}, [@tmpl={0x44, 0x5, [{{@in6=@empty, 0x2, 0x2b}, 0x0, @in=@empty, 0x3503, 0x1, 0x0, 0x0, 0x0, 0xffffffff}]}]}, 0xfc}, 0x1, 0x0, 0x0, 0x20008000}, 0x80) r1 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r1, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) connect$inet(r1, &(0x7f0000000480)={0x2, 0x0, @multicast1}, 0x10) sendmmsg(r1, &(0x7f0000007fc0), 0x800001d, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) munlock(&(0x7f0000a5d000/0x1000)=nil, 0x1000) 3.522057935s ago: executing program 4 (id=247): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000002380), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000023c0)={'veth1_to_batadv\x00'}) sendmsg$ETHTOOL_MSG_FEATURES_SET(r0, &(0x7f0000002580)={0x0, 0x0, &(0x7f0000002540)={&(0x7f00000025c0)={0x2c, r1, 0x1, 0x0, 0x0, {}, [@ETHTOOL_A_FEATURES_WANTED={0x0, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_NOMASK, @ETHTOOL_A_BITSET_NOMASK, @ETHTOOL_A_BITSET_SIZE={0x0, 0x2, 0xf6}, @ETHTOOL_A_BITSET_VALUE={0x0, 0x4, "404c4bdb7aadc07d9caa5e6f7b0be19e4d0e17887583aca2a604f17f588a0eb88150393a35f6b5bff0a6055ed9f62722d026a62f568e08b3d9a8f6de95908d2e29deb312cd7d4189eea0d93bdd4c826c557fdca24a11e026a71a103eed69b73b71221750d4a5fc03272a84dab072b2af9b8e38e93116a3e13e935164bfbaf1d2f19c5c79b657ae1689f247e6615be295350df0acd815b8588755a26991ad0efc5b423e70fcb02f7ed161b5d697e8cda3f3b500a2e802fa122babc70619e6f685527ce31a44dd875e01c3565e793c828428ae2aeac54455239618f379a1806442b159882d1029c35a1cec29699903a12cbbcdc0f797"}, @ETHTOOL_A_BITSET_NOMASK, @ETHTOOL_A_BITSET_VALUE={0x0, 0x4, "da8e2819f590afd85f9edd81355f1091493d8021e84891228aaa1cfadf6c8f9c4a81c5896bbe3d87484a6285a3d60de2dbc1aa90d5661cca09ac6aa4eaea88f63624317f5311c17be323c95a50e15e75c229979a0f957d9e8ff92f18b7488d31e2501d569d9fb3a72fe6d05667c9c133b0e882a18b9572ed9b0e7e73f68ba5149c4b51973695a5ebebe07961ab80465f468f40f1cc4332199de1ae7eb22330f58f83cc3eba92ff5ccd3ee062fbd3c0ee12b969d19b7894b7ea6a5f417a467c1c9ed4bf96fa980645f02b894500d84d61b7cdd57bdedf1b24dbc60510fceba41ed12521833544aa9771"}, @ETHTOOL_A_BITSET_BITS={0x0, 0x3, 0x0, 0x1, [{}, {0x0, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x0, 0x2, '.&.%+\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x0, 0x1, 0x1}, @ETHTOOL_A_BITSET_BIT_NAME={0x0, 0x2, 'ethtool\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE, @ETHTOOL_A_BITSET_BIT_INDEX={0x0, 0x1, 0x6}, @ETHTOOL_A_BITSET_BIT_VALUE, @ETHTOOL_A_BITSET_BIT_VALUE, @ETHTOOL_A_BITSET_BIT_NAME={0x0, 0x2, '()\\!,\' \',/\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE, @ETHTOOL_A_BITSET_BIT_INDEX={0x0, 0x1, 0x1}, @ETHTOOL_A_BITSET_BIT_VALUE, @ETHTOOL_A_BITSET_BIT_VALUE]}, {0x0, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE, @ETHTOOL_A_BITSET_BIT_NAME={0x0, 0x2, 'veth1_to_batadv\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x0, 0x2, '%\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE, @ETHTOOL_A_BITSET_BIT_INDEX={0x0, 0x1, 0x10}]}, {0x0, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x0, 0x1, 0x10}]}, {0x0, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x0, 0x1, 0xb8}, @ETHTOOL_A_BITSET_BIT_INDEX={0x0, 0x1, 0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x0, 0x2, '%)\x00'}]}]}, @ETHTOOL_A_BITSET_VALUE={0x0, 0x4, "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"}, @ETHTOOL_A_BITSET_BITS={0x0, 0x3, 0x0, 0x1, [{0x0, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x0, 0x1, 0x7}, @ETHTOOL_A_BITSET_BIT_VALUE, @ETHTOOL_A_BITSET_BIT_NAME={0x0, 0x2, '}H\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x0, 0x1, 0x1000}, @ETHTOOL_A_BITSET_BIT_INDEX={0x0, 0x1, 0x3ff}, @ETHTOOL_A_BITSET_BIT_INDEX={0x0, 0x1, 0x6}, @ETHTOOL_A_BITSET_BIT_VALUE, @ETHTOOL_A_BITSET_BIT_NAME={0x0, 0x2, 'veth1_to_batadv\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE]}, {0x0, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE, @ETHTOOL_A_BITSET_BIT_NAME={0x0, 0x2, 'ethtool\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x0, 0x2, 'veth1_to_batadv\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x0, 0x1, 0x4}, @ETHTOOL_A_BITSET_BIT_VALUE]}]}]}, @ETHTOOL_A_FEATURES_WANTED={0xc, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0x40010}]}]}, 0x2c}}, 0x408c4) 3.485505822s ago: executing program 1 (id=248): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000500), 0x40, 0x0) socket$nl_generic(0x10, 0x3, 0x10) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000900)={&(0x7f0000000140)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd26, 0xffffffff, {0x0, 0x0, 0x0, r5, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xe}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_FSC={0x10, 0x2, {0x5, 0x7, 0xb3}}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000940)=@newqdisc={0x434, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xffffbddc, {0x0, 0x0, 0x0, r5, {0x10}, {}, {0xe, 0x1}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x408, 0x2, [@TCA_TBF_RTAB={0x404, 0x2, [0x9, 0x6, 0x2, 0x7, 0x8, 0x3, 0x80, 0x1, 0xef3, 0xfffffffb, 0x2, 0xffffff3c, 0x346c, 0x1000000, 0x4, 0x1, 0x1, 0x4e3, 0x6, 0x7fff, 0x19b1, 0x0, 0x2, 0xdc, 0x2, 0x3, 0x80000000, 0x4, 0x7, 0x5, 0x3, 0x9, 0x1, 0x2, 0x40, 0x4, 0x7212782e, 0x9, 0x800, 0xffffff01, 0xd, 0x10004, 0x2, 0x8000, 0x3, 0x1, 0x0, 0x800, 0x7, 0x2, 0x200, 0x8, 0x2, 0x0, 0x6, 0xb, 0x3, 0x400, 0x6, 0x80000001, 0xff, 0x6, 0x100, 0x7fffffff, 0x1fe, 0x4, 0xff, 0xfffc, 0xaf, 0x9, 0x7, 0xa120, 0x5ee, 0x5, 0x7, 0x33b, 0x45, 0x7, 0x3ff, 0x0, 0xc8f, 0x3, 0xfffff58a, 0x6, 0xffffff5b, 0x0, 0x3, 0x6, 0xe, 0x0, 0x2f5, 0x6, 0x16, 0x9, 0x2005a0a, 0x2, 0x5, 0x80000000, 0xc, 0x1, 0x800006, 0x9, 0x6, 0x0, 0x10, 0x3, 0x8, 0xfffffffc, 0x8000, 0x8, 0xfff, 0x9, 0x1ff, 0x8, 0x410, 0x2, 0x6, 0xfffff000, 0x6, 0xa3a5, 0xffff, 0x6, 0xbe, 0xfffffffa, 0x6, 0x2, 0x400, 0x9, 0x0, 0x68500930, 0xffffffff, 0x5b7, 0xfffff45b, 0x4, 0x1, 0x0, 0x0, 0x3, 0x3, 0x0, 0x4, 0x3, 0x0, 0xc22f, 0xe68, 0x3, 0xfffffffa, 0x4, 0xc, 0x60c, 0x8, 0x80, 0x9, 0x7, 0xc, 0xfffffffd, 0x2, 0x80000003, 0xffffffff, 0x67, 0x0, 0x7fffffff, 0x10, 0x8, 0x1, 0x10000, 0x44d, 0x1a, 0x3ff, 0x4a8d, 0x6, 0xfffffffc, 0x6, 0x2, 0x1, 0xf, 0x9, 0xf96, 0x2c268060, 0x200, 0xd7, 0x80000001, 0x6, 0xe, 0x2, 0x10001, 0x3b8, 0x60, 0x6, 0x2, 0x7, 0x6cbc, 0xdc1, 0x800, 0x3c6, 0x1000, 0x8, 0x1000, 0x101, 0x6, 0x6, 0x4004, 0x8, 0xe, 0x8, 0x10000, 0x4, 0x4, 0x6, 0x9, 0x4, 0x81, 0x400, 0x800, 0x6, 0x2, 0x661, 0x2, 0xbc, 0x78ff00, 0x10001, 0x63c, 0x2, 0xe, 0x8, 0x4, 0x8, 0x3, 0x9, 0x2, 0x1, 0x7, 0x5, 0x43, 0x3, 0x1, 0x2b9, 0x6, 0x4, 0xebc, 0x7, 0x7, 0x8520, 0x9a1, 0x1, 0x4, 0x53, 0x4, 0x2, 0x6a, 0x1, 0x3, 0x200, 0xfffff801, 0x9, 0x7f]}]}}]}, 0x434}, 0x1, 0x0, 0x0, 0x240c803a}, 0x4000) (fail_nth: 5) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r7 = socket$packet(0x11, 0x3, 0x300) sendto$packet(r7, &(0x7f0000000140)="bad330fbc9b5544972e7a5ea0756", 0xe, 0x40, &(0x7f00000001c0)={0x11, 0x1a, r6, 0x1, 0xd8, 0x6, @random="98c8ca7122df"}, 0x14) 3.244515609s ago: executing program 4 (id=249): r0 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_mreqn(r0, 0x0, 0x27, &(0x7f0000000740)={@multicast2, @loopback}, 0xc) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000000)={0x0, 0x18, 0xfa00, {0x3, &(0x7f00000000c0), 0x2, 0x9}}, 0x20) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000004c0), 0x2, 0x0) write$RDMA_USER_CM_CMD_RESOLVE_IP(r2, &(0x7f0000000180)={0x3, 0x40, 0xfa00, {{0xa, 0x4e23, 0x2, @loopback, 0x3}, {0xa, 0x4e23, 0x7, @ipv4={'\x00', '\xff\xff', @multicast1}, 0x5}, 0xffffffffffffffff, 0x1008}}, 0x48) r3 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r3, &(0x7f0000000200)={0x2, 0x4e20, @multicast2}, 0x10) (async, rerun: 32) timer_create(0x2, 0x0, &(0x7f0000000440)) (async, rerun: 32) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) (async) r4 = getpid() r5 = signalfd4(r3, &(0x7f0000000180)={[0x8]}, 0x8, 0x40000) setsockopt$packet_fanout(r5, 0x107, 0x12, &(0x7f0000000380)={0x1, 0x6}, 0x4) sched_setscheduler(r4, 0x1, &(0x7f0000000200)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r6, &(0x7f000057eff8)=@abs, 0x6e) (async) sendmmsg$unix(r7, &(0x7f0000000000), 0x651, 0x0) (async, rerun: 32) recvmmsg(r6, &(0x7f00000000c0), 0x10106, 0x2, 0x0) (rerun: 32) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) (async, rerun: 64) setsockopt$inet_tcp_int(r3, 0x6, 0x2, &(0x7f0000000040)=0xce, 0x4) (rerun: 64) listen(r6, 0x9) connect$inet(r3, &(0x7f00000001c0)={0x2, 0x4e20, @loopback}, 0x10) (async) sendmsg$inet(r3, &(0x7f00000015c0)={0x0, 0x12, &(0x7f0000001600)=[{&(0x7f0000000240)=' ', 0x100120}], 0x1}, 0x0) r8 = socket$netlink(0x10, 0x3, 0x0) writev(r8, &(0x7f00000003c0), 0x0) (async, rerun: 64) r9 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, 0x0, &(0x7f0000000c00)='GPL\x00'}, 0x94) (rerun: 64) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000940)={r9, 0xe0, &(0x7f0000000840)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, &(0x7f0000000340)=[0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x1, 0x4, &(0x7f0000000380)=[0x0], &(0x7f0000000440)=[0x0, 0x0, 0x0, 0x0], 0x0, 0x98, &(0x7f0000000480)=[{}, {}, {}, {}, {}], 0x28, 0x10, &(0x7f00000004c0), &(0x7f0000000500), 0x8, 0x3c, 0x8, 0x8, &(0x7f0000000540)}}, 0x10) sendmsg$nl_route_sched(r8, &(0x7f0000000a00)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f00000009c0)={&(0x7f0000000980)=@newtclass={0x3c, 0x28, 0x100, 0x70bd2d, 0x25dfdbfd, {0x0, 0x0, 0x0, r10, {0xffe0, 0x5}, {0x6, 0x10}, {0x0, 0xc}}, [@tclass_kind_options=@c_sfb={0x8}, @TCA_RATE={0x6, 0x5, {0xe, 0x1}}, @TCA_RATE={0x6, 0x5, {0xb, 0x4}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x20040080}, 0xa1) 2.957724571s ago: executing program 1 (id=250): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000300)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x1, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd25, 0x3, {0x0, 0x0, 0x0, r6, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x5, 0x8}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_USC={0x0, 0x3, {0x5, 0x2, 0x6}}}}]}, 0x64}, 0x1, 0x0, 0x0, 0x4000000}, 0x20000880) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000480)=@newqdisc={0x434, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdfc, {0x0, 0x0, 0x0, r9, {0x8}, {}, {0x5, 0x1}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x408, 0x2, [@TCA_TBF_RTAB={0x404, 0x2, [0x0, 0x62b9, 0x5, 0xfffffff7, 0x5, 0x3, 0xe1cb, 0x5, 0x1, 0x3, 0x0, 0x1, 0x2, 0x6, 0xacd, 0x0, 0x364, 0x1, 0x2, 0xffffff44, 0x3, 0x2, 0x8, 0x3, 0x6, 0xffffffc0, 0xb, 0x688, 0xffff, 0x0, 0x2, 0xfffffeff, 0x0, 0xb, 0x5, 0x0, 0x5, 0xffffadc0, 0x8001, 0xf, 0x1, 0x8d2a00, 0x8, 0xf, 0x4ba, 0x1, 0x80, 0xffff, 0x1, 0x7, 0x0, 0x400, 0xe5, 0x93, 0x2, 0x45a5, 0x8, 0x6, 0x4, 0x0, 0x59, 0x3, 0x80, 0x9, 0x5, 0x9, 0x5, 0x3, 0x9, 0x2, 0x3, 0x4, 0x7f, 0x101, 0xde, 0x10, 0x7, 0x6, 0x7f, 0xfff, 0x6, 0x9, 0xf7, 0x5, 0x2, 0x81, 0x0, 0x6, 0x7, 0x1, 0x437, 0x6, 0x3, 0x2, 0x7000000, 0x5, 0x9, 0xecc, 0x6, 0x4, 0x8, 0x400, 0x7a5, 0x9, 0x9, 0x0, 0x9, 0x8, 0x0, 0x3, 0x7ff, 0x5, 0x6, 0x4, 0x7, 0x10, 0x4001d1da, 0x8, 0xbdb, 0x1, 0x8, 0x8001, 0xe3c8, 0xffffffff, 0xd, 0x6, 0x4, 0x9, 0x7fffffff, 0x3, 0xb8b4, 0x723, 0x15, 0x9367, 0x81, 0x400000, 0x9, 0x6, 0x75, 0x1ff, 0xc695, 0x4, 0xf, 0x7, 0x3, 0x0, 0x3ff, 0x8000, 0xff, 0x4, 0x0, 0x6496, 0x7f, 0x3, 0x0, 0xf528, 0x6, 0x80000000, 0x6, 0x157b, 0x7, 0x40, 0x1, 0x10001, 0x3, 0x9, 0x2, 0x98de, 0x2450, 0x86d, 0x2, 0x7, 0x7, 0xfffffffa, 0x800, 0xfffffffb, 0x4, 0xb6, 0x5, 0x7fff, 0x9f4c, 0x1, 0x8, 0xe, 0x11d, 0x7fff, 0xf, 0x8, 0x3, 0xa, 0x9, 0x9, 0x2, 0x4, 0x2, 0x8, 0x5, 0x5, 0x401, 0x9, 0x4b8, 0xa78, 0xec8, 0x1, 0xfffffffa, 0x80020000, 0x0, 0x0, 0x7f, 0x8c1, 0x5, 0xfffffffa, 0x6, 0x175b, 0x7fffffff, 0x4, 0x4, 0xffff8001, 0x8001, 0x3, 0x5, 0x0, 0x401, 0x5, 0x10, 0x7fff, 0xffffff00, 0x3, 0x8, 0x9268, 0x80000000, 0x2, 0x7, 0x4, 0x3, 0x4, 0xced, 0x5, 0xa524, 0x7, 0x81f, 0x3, 0x10, 0x80, 0x1ff, 0x1109, 0x9, 0x1, 0x0, 0x2, 0x0, 0x8, 0x3, 0x3, 0x6, 0x4]}]}}]}, 0x434}, 0x1, 0x0, 0x0, 0x2004009c}, 0x0) r10 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r10, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000001c0)=@newqdisc={0x58, 0x28, 0x4ee4e6a52ff56541, 0x5001, 0xfffffdfc, {0x0, 0x0, 0x0, r11, {0x2}, {0x0, 0xfff1}, {0x4, 0xfff2}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0x0, 0xdb, 0x7ff, 0x2, 0x9, 0x6, 0x2, 0xfffffffb, 0xc00000}}}}]}, 0x58}, 0x1, 0x0, 0x0, 0x40098}, 0x4000000) bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0xc, 0xe, &(0x7f0000000b00)=ANY=[@ANYBLOB="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"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000080), 0x60, 0x10, &(0x7f0000000340), 0xfffffffffffffdef, 0x0, 0xffffffffffffffff, 0xfffffffffffffe96}, 0x42) 2.721811332s ago: executing program 3 (id=252): syz_emit_ethernet(0x2a, &(0x7f0000000140)={@local, @random="ce3500590a7f", @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x2, 0x0, 0x11, 0x0, @empty, @empty}, {0x4e23, 0x0, 0x8}}}}}, 0x0) syz_emit_ethernet(0x2a, &(0x7f0000000280)={@broadcast, @random="67eaa8fce250", @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x2, 0x0, 0x1c, 0x0, 0xdffd, 0x3, 0x11, 0x0, @empty, @empty}, {0x4, 0x0, 0x8}}}}}, 0x0) 2.181239409s ago: executing program 4 (id=253): r0 = socket$inet6(0xa, 0x5, 0x0) syz_io_uring_setup(0xf03, &(0x7f0000000400)={0x0, 0x5b5f, 0x10000, 0x0, 0x51}, &(0x7f0000000100), &(0x7f0000000000), &(0x7f0000000080)) ioctl(r0, 0x401, &(0x7f0000000040)="c3f4bce90627de869888e1bc6439a24ddfd2344f8ee60bd7f15bb729d3c86acd09172ab3bf7e0b67236436ead2ce32f5cf9158") r1 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./rpc_pipefs/gssd/clntXX/gssd\x00', 0x2, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x7fffffffffd, 0x5, &(0x7f0000006680)) r2 = creat(&(0x7f00000002c0)='./file0\x00', 0x0) open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) writev(r2, &(0x7f0000000100)=[{&(0x7f0000000180)="a1", 0x1}], 0x1) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000fe020010850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) write$char_usb(r2, &(0x7f00000001c0)="64e9", 0x2) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000005c0)={r3, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f0000000140)='./file0\x00', &(0x7f0000000700)=[0x2], 0x0, 0x0, 0x200000000000022f}}, 0x40) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) io_setup(0x8, 0x0) io_pgetevents(0x0, 0x180000000000000, 0x4, &(0x7f0000000240)=[{}, {}, {}, {}], 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r4, 0x8b26, &(0x7f0000000000)={'wlan1\x00', @random="f8ff00400400"}) write(r1, &(0x7f0000000480)="746573745f7061796c6f61640010126b9e09784ff4b1683ea303f52e37e013202a7eb6ed458b4bb62e239d5272c96f77fadb495b68ee5ad058c359eea871cb4e24b26862c033813ac615d49212b672d2e344bda8c4651d7dade87bdc0301ad550199fb791df9d12530d2bd010bd81fd337f0b9a4f540f65da97446dcc53d563c33fc926d65abed867a606d42b8830ba48032b5d2ddad7540b5f2a74abe25ceb67da028513d62997b9c9c763ccb0642c1b5cb12d47b98c3c64d6f452f15937f8335945fc69e7c6d901c1d98b1dfc8ef0b3b55e1b42d0fb0446ea50bb1ea65ac93ddedabd35c75f0058e9e500522a5d226cad0e791da71b1edd31cba347a2997e3bc5f2fe756", 0x105) r5 = socket$inet6(0xa, 0x2, 0x0) sendmsg$inet6(r5, &(0x7f0000001240)={&(0x7f0000000cc0)={0xa, 0x4e20, 0x1, @ipv4={'\x00', '\xff\xff', @local}, 0x50ca800}, 0x1c, 0x0, 0x0, &(0x7f0000000040)=ANY=[], 0x28}, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000), 0x9) io_uring_register$IORING_UNREGISTER_IOWQ_AFF(0xffffffffffffffff, 0x12, 0x0, 0x0) mmap$IORING_OFF_SQES(0x0, 0xeb, 0x1000001, 0x13, r1, 0x10000000) 2.170530824s ago: executing program 3 (id=254): r0 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r0, 0x7a7, &(0x7f0000000040)=0x90000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r0, 0x7a0, &(0x7f0000000000)={@local}) socket$rds(0x15, 0x5, 0x0) r1 = socket(0x2b, 0x1, 0x1) listen(r1, 0x5) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6) r3 = socket$inet6_udp(0xa, 0x2, 0x0) r4 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000200)={'lo\x00', 0x0}) ioctl$sock_inet6_SIOCDIFADDR(r3, 0x8936, &(0x7f0000000000)={@loopback, 0x80, r5}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r6, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r7, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r6, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r8 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r8) ptrace$setregs(0xd, r8, 0x0, &(0x7f00000003c0)="18607651149d7b10b4024fbbdc08899b8f589df2dbb5d7a8d1b36cfab675cb3976ee8100e2878c9cfa178cac130eb046eda93df39ed4b41924dc225ad4028dd63defb87d698be5c749450b350a789dcfc6b2d6a696b5026d1e52f19274566d1da0f353dd65e330ebf71c5e823f2753c5fd76724828ef31b353e71805205c3dceb44cc4c7b3664e29fb") ptrace$getregset(0x4205, r8, 0x2, &(0x7f0000000180)={&(0x7f0000000000)=""/120, 0x78}) accept4$vsock_stream(r1, 0x0, 0x0, 0x80800) timer_create(0x0, &(0x7f0000000240)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x25, &(0x7f0000000040)={0x0, 0x0, 0xfd8b, 0x5}) timer_settime(r9, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) 1.596566111s ago: executing program 1 (id=255): r0 = openat$cuse(0xffffffffffffff9c, &(0x7f00000004c0), 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000007d40)={'ip6_vti0\x00', &(0x7f00000002c0)={'ip6tnl0\x00', 0x0, 0x4, 0x9, 0x7, 0x4, 0x64, @loopback, @private1={0xfc, 0x1, '\x00', 0x1}, 0x7800, 0x8000, 0x3fb, 0xbfe}}) sendmmsg$inet(0xffffffffffffffff, &(0x7f00000001c0)=[{{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000640)="985e44efeabe001cabcf3d8673c3a254a9a2d3197970cb347b70a243bf77139a94bc3ae91684aaf7b7dff691deb8f8aef2d915fb3a0794a9a9b431a819bca6122c350637808dde804a048fd8696e524b2934126c443ce93d82e931eb9918e6c082", 0x61}], 0x1}}], 0x1, 0x2090) write$binfmt_register(0xffffffffffffffff, &(0x7f0000000300)={0x3a, 'syz3', 0x3a, 'M', 0x3a, 0x1, 0x3a, 'B\xd4GGI\x82\\4\xbb\xbb\xbb\xb3\xd4)\xed\x8f\xaa\xf4\xd2{\xc5\t\xa9\xed\xf8e\xaa\xb9\xf5\r\xe3T\x0e\x8a\xd6\x9a_?G\x05\x00\x00\x00\x00\x00\x00\x00\x1e\x9a\xce\xac&x3\x15\x14y\xbf\xc6)\xa8\b/\x01\x00\x00\f\x8e1\xc4\xa1\xb2]I\xa5\x13}9\x1b0x0}) sendto$packet(r1, &(0x7f00000002c0)="05031600d3fc142e00004788031c09102c", 0x11, 0x4, &(0x7f0000000140)={0x11, 0x86dd, r2, 0x1, 0x0, 0x6, @multicast}, 0x14) r3 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r3, &(0x7f0000000440), 0x10) listen(r3, 0x0) r4 = socket$vsock_stream(0x28, 0x1, 0x0) r5 = accept4$vsock_stream(r3, 0x0, 0x0, 0x0) connect$vsock_stream(r4, &(0x7f0000000000)={0x28, 0x0, 0x0, @local}, 0x10) connect$vsock_stream(r5, &(0x7f0000000340)={0x28, 0x0, 0x0, @hyper}, 0x10) socket(0x10, 0x3, 0x0) r6 = openat$autofs(0xffffffffffffff9c, 0x0, 0x20000, 0x0) r7 = accept4$x25(0xffffffffffffffff, 0x0, &(0x7f0000000000), 0x0) ioctl$SIOCX25SCUDMATCHLEN(r7, 0x89e7, &(0x7f0000000100)={0x29}) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r6, 0xc0189375, 0x0) 1.40543195s ago: executing program 2 (id=256): r0 = openat$cuse(0xffffffffffffff9c, &(0x7f00000004c0), 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000007d40)={'ip6_vti0\x00', &(0x7f00000002c0)={'ip6tnl0\x00', 0x0, 0x4, 0x9, 0x7, 0x4, 0x64, @loopback, @private1={0xfc, 0x1, '\x00', 0x1}, 0x7800, 0x8000, 0x3fb, 0xbfe}}) sendmmsg$inet(0xffffffffffffffff, &(0x7f00000001c0)=[{{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000640)="985e44efeabe001cabcf3d8673c3a254a9a2d3197970cb347b70a243bf77139a94bc3ae91684aaf7b7dff691deb8f8aef2d915fb3a0794a9a9b431a819bca6122c350637808dde804a048fd8696e524b2934126c443ce93d82e931eb9918e6c082", 0x61}], 0x1}}], 0x1, 0x2090) write$binfmt_register(0xffffffffffffffff, &(0x7f0000000300)={0x3a, 'syz3', 0x3a, 'M', 0x3a, 0x1, 0x3a, 'B\xd4GGI\x82\\4\xbb\xbb\xbb\xb3\xd4)\xed\x8f\xaa\xf4\xd2{\xc5\t\xa9\xed\xf8e\xaa\xb9\xf5\r\xe3T\x0e\x8a\xd6\x9a_?G\x05\x00\x00\x00\x00\x00\x00\x00\x1e\x9a\xce\xac&x3\x15\x14y\xbf\xc6)\xa8\b/\x01\x00\x00\f\x8e1\xc4\xa1\xb2]I\xa5\x13}9\x1b0x0}) sendto$packet(r1, &(0x7f00000002c0)="05031600d3fc142e00004788031c09102c", 0x11, 0x4, &(0x7f0000000140)={0x11, 0x86dd, r2, 0x1, 0x0, 0x6, @multicast}, 0x14) r3 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r3, &(0x7f0000000440), 0x10) listen(r3, 0x0) r4 = socket$vsock_stream(0x28, 0x1, 0x0) r5 = accept4$vsock_stream(r3, 0x0, 0x0, 0x0) connect$vsock_stream(r4, &(0x7f0000000000)={0x28, 0x0, 0x0, @local}, 0x10) connect$vsock_stream(r5, &(0x7f0000000340)={0x28, 0x0, 0x0, @hyper}, 0x10) socket(0x10, 0x3, 0x0) r6 = openat$autofs(0xffffffffffffff9c, 0x0, 0x20000, 0x0) r7 = accept4$x25(0xffffffffffffffff, 0x0, &(0x7f0000000000), 0x0) ioctl$SIOCX25SCUDMATCHLEN(r7, 0x89e7, 0x0) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r6, 0xc0189375, &(0x7f0000002600)={{0x1, 0x1, 0x18, r0}, './file0\x00'}) 1.257918485s ago: executing program 4 (id=257): r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000006bc0), 0x802, 0x0) ioctl$UI_GET_VERSION(r0, 0x8004552d, &(0x7f0000006c00)) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000002000000000000000000082295"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x1e00, 0x21}, 0x94) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@newlink={0x34, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x14080, 0x10000}, [@IFLA_XDP={0xc, 0x2b, 0x0, 0x1, [@IFLA_XDP_FD={0x8, 0x1, r1}]}, @IFLA_GROUP={0x8}]}, 0x34}, 0x1, 0x0, 0x0, 0x20000040}, 0x0) 1.255876042s ago: executing program 0 (id=258): r0 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r0, 0x7a7, 0x0) ioctl$IOCTL_VMCI_INIT_CONTEXT(r0, 0x7a0, &(0x7f0000000000)={@local, 0x1}) ioctl$IOCTL_VMCI_DATAGRAM_SEND(r0, 0x7ab, &(0x7f0000001080)={&(0x7f0000001900)={{@local, 0x4e4f}, {@local, 0x3}, 0x400, "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"}, 0x418, 0x40}) 1.250634229s ago: executing program 3 (id=259): syz_emit_ethernet(0x77, &(0x7f00000000c0)={@broadcast, @remote, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "120008", 0x41, 0x3a, 0xff, @remote, @mcast2, {[], @echo_request={0x80, 0x0, 0x0, 0x1, 0xfffc, "113ad0c24c0dc8fca388cb9c0c177539447499559f8dd635ba85ffb4f16db54e19bb37b073e5905fbc460213988503417298d729b2794e5dd7"}}}}}}, 0x0) sendto$inet6(0xffffffffffffffff, &(0x7f0000000080)="4c00000012001f15b9409b849ac00a00a5784002000000000000030038c88cc055c5ac27a6c5b068d0bf46d323452536005ad94a461cdbfee9bdb942352359a351d1", 0x42, 0x0, 0x0, 0x0) r0 = add_key$user(&(0x7f00000003c0), &(0x7f0000000440), &(0x7f00000000c0), 0xc9, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000800)={r0, r0, r0}, 0x0, 0x0, &(0x7f0000000280)={&(0x7f00000000c0)={'sha384\x00'}}) (fail_nth: 5) 1.196161437s ago: executing program 0 (id=260): r0 = socket(0xa, 0x5, 0x0) listen(r0, 0x100) sendmsg$inet_sctp(r0, &(0x7f00000000c0)={&(0x7f0000000000)=@in={0x2, 0x4e24, @loopback=0x7f00fffd}, 0x10, &(0x7f0000000080)=[{&(0x7f0000000300)="d9", 0x1}], 0x1, 0x0, 0x0, 0x48d5}, 0x8050) r1 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x82c1, 0x0) pwritev(r1, &(0x7f0000000040)=[{&(0x7f0000000800)="b5", 0x1}], 0x1, 0x7fffffffffffffff, 0x0) openat$ppp(0xffffffffffffff9c, 0x0, 0xc0802, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$BPF_GET_PROG_INFO(0xa, 0x0, 0x0) sendmsg$IPSET_CMD_ADD(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000780)=ANY=[], 0x74}, 0x1, 0x0, 0x0, 0x10040003}, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_LIST(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="1c00000007060108000000000000000008185bc096000000000500010006000000"], 0x1c}}, 0x0) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000000)) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000020)) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000030)) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000040)) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000050)) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000060)) socketpair$tipc(0x1e, 0x4, 0x0, &(0x7f0000000180)) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000080)) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000090)) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f00000000a0)) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f00000000b0)) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f00000000c0)) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f00000000e0)) r4 = socket$nl_sock_diag(0x10, 0x3, 0x4) write(r4, &(0x7f0000000200)="580000001400010300000000000000001e000000ffffffff00"/88, 0x58) close_range(r3, 0xffffffffffffffff, 0x0) 1.054181134s ago: executing program 0 (id=261): r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x42, 0x0) write$dsp(r0, &(0x7f00000001c0), 0x0) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup(r1) r3 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000018c0), 0x62d81) ioctl$SNDRV_SEQ_IOCTL_GET_NAMED_QUEUE(r3, 0xc08c5336, &(0x7f0000000000)={0x4, 0xffffffff, 0x0, 'queue0\x00', 0xd1b}) sendmsg$inet(r2, &(0x7f0000000780)={&(0x7f0000000100)={0x2, 0xffff, @multicast1}, 0x10, &(0x7f00000014c0)=[{&(0x7f0000000000)="be39", 0x2}, {0x0}], 0x2, &(0x7f0000000c80)}, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) newfstatat(0xffffffffffffff9c, &(0x7f00000000c0)='.\x00', &(0x7f0000000100), 0x0) ioctl$sock_inet_sctp_SIOCINQ(r2, 0x541b, &(0x7f0000000080)) 921.582409ms ago: executing program 3 (id=262): bpf$MAP_CREATE(0x0, 0x0, 0x48) 840.553381ms ago: executing program 3 (id=263): pipe(&(0x7f00000007c0)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r1, &(0x7f00000000c0)=[{&(0x7f0000000180)='w', 0x1}], 0x1, 0x1) close(r1) socket(0x1d, 0x80802, 0x6) splice(r0, 0x0, r1, 0x0, 0xfffd, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r2, &(0x7f0000000140)={0xa, 0x4e22}, 0x1c) listen(r2, 0x0) syz_emit_ethernet(0x4a, &(0x7f0000000180)={@local, @empty, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "0a8435", 0x14, 0x6, 0x0, @remote, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x2}}}}}}}, 0x0) syz_emit_ethernet(0x96, &(0x7f00000003c0)={@local, @empty, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "0a8435", 0x60, 0x6, 0x1, @remote, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x18, 0x4, 0x0, 0x0, 0x1, {[@timestamp={0x8, 0xa, 0x2, 0x98ca}, @sack_perm={0x4, 0x2}, @fastopen={0x22, 0x12, "51e18e0e3a253975f08df16caf2ef107"}, @sack={0x5, 0xe, [0x220, 0x130c, 0xabc]}, @md5sig={0x13, 0x12, "8098cf093cc9cd7b8ec814f9bcfdfea9"}, @sack={0x5, 0xe, [0x1, 0xfffffffe, 0x1000]}]}}}}}}}}, 0x0) 837.410309ms ago: executing program 4 (id=264): syz_emit_ethernet(0x0, 0x0, 0x0) syz_emit_ethernet(0x2a, &(0x7f0000000280)={@broadcast, @random="67eaa8fce250", @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x2, 0x0, 0x1c, 0x0, 0xdffd, 0x3, 0x11, 0x0, @empty, @empty}, {0x4, 0x0, 0x8}}}}}, 0x0) 708.895089ms ago: executing program 4 (id=265): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0) r3 = syz_open_dev$usbfs(&(0x7f0000000100), 0x76, 0x101b01) openat$cuse(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r4 = syz_open_procfs(0x0, &(0x7f0000000040)='fdinfo/3\x00') pread64(r4, &(0x7f0000000080)=""/237, 0xed, 0x0) r5 = syz_open_dev$usbfs(&(0x7f0000000080), 0x206, 0x20182) ioctl$USBDEVFS_ALLOW_SUSPEND(r5, 0x5522) write(0xffffffffffffffff, 0x0, 0x0) mkdir(&(0x7f0000000080)='./file0\x00', 0x1ba) capset(&(0x7f0000000080)={0x20080522}, 0x0) mount$9p_tcp(&(0x7f0000000200), &(0x7f00000002c0)='./file0\x00', &(0x7f0000000300), 0x4000, &(0x7f0000000340)={'trans=tcp,', {'port', 0x3d, 0x4e24}, 0x2c, {[{@privport}]}}) ioctl$USBDEVFS_DISCONNECT_CLAIM(r3, 0x8108551b, &(0x7f0000000140)={0x0, 0x2, "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"}) ioctl$USBDEVFS_ALLOW_SUSPEND(r3, 0x5522) ioctl$USBDEVFS_SETINTERFACE(r3, 0x80045510, &(0x7f0000000040)={0x0, 0x200000}) ioctl$NILFS_IOCTL_GET_BDESCS(r2, 0xc0186e87, &(0x7f0000000640)={0x0, 0x0, 0x28, 0x5, 0x3}) getpgid(r0) 680.932974ms ago: executing program 3 (id=266): io_setup(0xc, &(0x7f0000000040)=0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x400000000004, 0x7, &(0x7f0000006680)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x6a855000) prlimit64(0x0, 0xe, 0x0, 0x0) getpid() recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) syz_emit_vhci(&(0x7f0000000040)=ANY=[@ANYBLOB="02c990ff000c00050019030800bdff46ff00000d00"], 0x15) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cpuacct.usage_percpu_user\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000000), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x200000b, 0x28011, r1, 0x0) preadv(r1, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x1, 0x0, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(0xffffffffffffffff, 0xc04064a0, &(0x7f0000000200)={&(0x7f0000000000)=[0x0, 0x0, 0x0, 0x0], &(0x7f00000000c0)=[0x0, 0x0], &(0x7f0000000100)=[0x0, 0x0], &(0x7f0000000140)=[0x0], 0x4, 0x2, 0x2, 0x1}) ioctl$DRM_IOCTL_MODE_GETPLANE(0xffffffffffffffff, 0xc02064b6, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0, 0x7, &(0x7f0000000240)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) r4 = syz_open_dev$dri(0x0, 0x1, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r4, 0xc04064a0, &(0x7f0000000140)={0x0, &(0x7f0000000400)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_CURSOR2(r4, 0xc02464bb, &(0x7f00000003c0)={0x1, r5, 0x9, 0x4, 0xeb0, 0x0, 0x0, 0x40, 0xffffff4f}) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r1, 0xc01864c6, &(0x7f0000000300)={&(0x7f00000002c0)=[r2, r3, r5], 0x3, 0xc0000}) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) io_pgetevents(r0, 0x3, 0x3, &(0x7f0000000180)=[{}, {}, {}], &(0x7f0000000080)={0x0, 0x989680}, 0x0) 0s ago: executing program 0 (id=267): socket$inet_sctp(0x2, 0x5, 0x84) socketpair$unix(0x1, 0x5, 0x0, 0x0) pipe2(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80000) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, 0x0) socket$pppl2tp(0x18, 0x1, 0x1) socket$inet6_udp(0xa, 0x2, 0x0) mmap(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x0, 0x13, r1, 0x0) splice(r1, 0x0, r0, 0x0, 0x6, 0x1) timer_create(0x0, 0x0, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r2, 0x1, &(0x7f0000000040)={{0x77359400}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) r3 = openat(0xffffffffffffff9c, &(0x7f0000000580)='./file0\x00', 0x2c41, 0x0) flock(r3, 0x2) r4 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x40042, 0x1) flock(r4, 0x2) flock(r4, 0x1) pipe2(&(0x7f0000000040), 0x0) ioctl$FIONREAD(r0, 0x541b, &(0x7f00000002c0)) kernel console output (not intermixed with test programs): tclass=netlink_generic_socket permissive=1 [ 59.819291][ T29] audit: type=1400 audit(1786333646.632:135): avc: denied { read } for pid=5584 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 59.837532][ T5586] SELinux: Context root:object_r:swapfile_t is not valid (left unmapped). [ 59.839941][ T29] audit: type=1400 audit(1786333646.632:136): avc: denied { mounton } for pid=5584 comm="syz-executor" path="/proc/sys/fs/binfmt_misc" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=dir permissive=1 Setting up swapspace version 1, size = 127995904 bytes [ 59.873130][ T29] audit: type=1400 audit(1786333646.632:137): avc: denied { mount } for pid=5584 comm="syz-executor" name="/" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=filesystem permissive=1 [ 59.896505][ T29] audit: type=1400 audit(1786333646.762:138): avc: denied { relabelto } for pid=5586 comm="mkswap" name="swap-file" dev="sda1" ino=2026 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 60.797845][ T5584] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 62.939151][ T5612] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 62.947276][ T5612] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 62.952776][ T5613] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 62.955056][ T5612] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 62.967282][ T5614] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 62.972406][ T5613] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 62.975930][ T5612] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 62.983928][ T5613] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 62.990834][ T5614] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 62.997678][ T5613] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 63.004953][ T5614] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 63.011704][ T5613] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 63.018362][ T5612] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 63.026615][ T5613] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 63.032831][ T5614] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 63.039753][ T5613] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 63.046346][ T5612] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 63.057935][ T5616] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 63.060871][ T5614] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 63.066742][ T5616] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 63.075536][ T5614] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 63.088397][ T5614] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 63.102804][ T5608] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 63.110182][ T4917] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 63.120065][ T5608] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 64.313833][ T5596] bridge0: port 1(bridge_slave_0) entered blocking state [ 64.322305][ T5596] bridge0: port 1(bridge_slave_0) entered disabled state [ 64.329793][ T5596] bridge_slave_0: entered allmulticast mode [ 64.336675][ T5596] bridge_slave_0: entered promiscuous mode [ 64.362723][ T5596] bridge0: port 2(bridge_slave_1) entered blocking state [ 64.369870][ T5596] bridge0: port 2(bridge_slave_1) entered disabled state [ 64.377065][ T5596] bridge_slave_1: entered allmulticast mode [ 64.383777][ T5596] bridge_slave_1: entered promiscuous mode [ 64.457766][ T5595] bridge0: port 1(bridge_slave_0) entered blocking state [ 64.464957][ T5595] bridge0: port 1(bridge_slave_0) entered disabled state [ 64.472275][ T5595] bridge_slave_0: entered allmulticast mode [ 64.478872][ T5595] bridge_slave_0: entered promiscuous mode [ 64.491839][ T5596] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 64.501151][ T5597] bridge0: port 1(bridge_slave_0) entered blocking state [ 64.508205][ T5597] bridge0: port 1(bridge_slave_0) entered disabled state [ 64.515951][ T5597] bridge_slave_0: entered allmulticast mode [ 64.522697][ T5597] bridge_slave_0: entered promiscuous mode [ 64.535694][ T5595] bridge0: port 2(bridge_slave_1) entered blocking state [ 64.542917][ T5595] bridge0: port 2(bridge_slave_1) entered disabled state [ 64.550076][ T5595] bridge_slave_1: entered allmulticast mode [ 64.557076][ T5595] bridge_slave_1: entered promiscuous mode [ 64.568769][ T5596] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 64.584600][ T5597] bridge0: port 2(bridge_slave_1) entered blocking state [ 64.591750][ T5597] bridge0: port 2(bridge_slave_1) entered disabled state [ 64.598829][ T5597] bridge_slave_1: entered allmulticast mode [ 64.606150][ T5597] bridge_slave_1: entered promiscuous mode [ 64.644931][ T5599] bridge0: port 1(bridge_slave_0) entered blocking state [ 64.653118][ T5599] bridge0: port 1(bridge_slave_0) entered disabled state [ 64.660250][ T5599] bridge_slave_0: entered allmulticast mode [ 64.667170][ T5599] bridge_slave_0: entered promiscuous mode [ 64.687626][ T5596] team0: Port device team_slave_0 added [ 64.700278][ T5599] bridge0: port 2(bridge_slave_1) entered blocking state [ 64.707488][ T5599] bridge0: port 2(bridge_slave_1) entered disabled state [ 64.714737][ T5599] bridge_slave_1: entered allmulticast mode [ 64.721403][ T5599] bridge_slave_1: entered promiscuous mode [ 64.730196][ T5595] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 64.739677][ T5598] bridge0: port 1(bridge_slave_0) entered blocking state [ 64.746811][ T5598] bridge0: port 1(bridge_slave_0) entered disabled state [ 64.754448][ T5598] bridge_slave_0: entered allmulticast mode [ 64.761555][ T5598] bridge_slave_0: entered promiscuous mode [ 64.769581][ T5596] team0: Port device team_slave_1 added [ 64.776822][ T5597] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 64.794050][ T5595] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 64.803372][ T5598] bridge0: port 2(bridge_slave_1) entered blocking state [ 64.810637][ T5598] bridge0: port 2(bridge_slave_1) entered disabled state [ 64.817767][ T5598] bridge_slave_1: entered allmulticast mode [ 64.824646][ T5598] bridge_slave_1: entered promiscuous mode [ 64.838614][ T5597] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 64.882021][ T5599] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 64.904916][ T5596] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 64.912010][ T5596] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 64.938202][ T5596] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 64.957121][ T5599] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 64.967668][ T5595] team0: Port device team_slave_0 added [ 64.975276][ T5598] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 64.985210][ T5596] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 64.992183][ T5596] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 65.018142][ T5596] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 65.030218][ T5597] team0: Port device team_slave_0 added [ 65.043329][ T5595] team0: Port device team_slave_1 added [ 65.056555][ T5598] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 65.072090][ T5597] team0: Port device team_slave_1 added [ 65.111104][ T50] Bluetooth: hci2: command tx timeout [ 65.111106][ T5611] Bluetooth: hci3: command tx timeout [ 65.124025][ T5608] Bluetooth: hci0: command tx timeout [ 65.126344][ T5599] team0: Port device team_slave_0 added [ 65.135660][ T5595] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 65.142697][ T5595] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 65.168737][ T5595] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 65.187489][ T5598] team0: Port device team_slave_0 added [ 65.194861][ T5598] team0: Port device team_slave_1 added [ 65.201164][ T5611] Bluetooth: hci4: command tx timeout [ 65.201246][ T5597] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 65.207070][ T5608] Bluetooth: hci1: command tx timeout [ 65.213831][ T5597] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 65.245153][ T5597] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 65.257362][ T5599] team0: Port device team_slave_1 added [ 65.263444][ T5595] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 65.271459][ T5595] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 65.298024][ T5595] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 65.322077][ T5597] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 65.329085][ T5597] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 65.355044][ T5597] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 65.380929][ T5596] hsr_slave_0: entered promiscuous mode [ 65.387447][ T5596] hsr_slave_1: entered promiscuous mode [ 65.410867][ T5599] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 65.417831][ T5599] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 65.443958][ T5599] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 65.455878][ T5599] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 65.462839][ T5599] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 65.488736][ T5599] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 65.504538][ T5598] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 65.511515][ T5598] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 65.537538][ T5598] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 65.549512][ T5598] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 65.556500][ T5598] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 65.582369][ T5598] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 65.645841][ T5597] hsr_slave_0: entered promiscuous mode [ 65.652013][ T5597] hsr_slave_1: entered promiscuous mode [ 65.657834][ T5597] debugfs: 'hsr0' already exists in 'hsr' [ 65.663675][ T5597] Cannot create hsr debugfs directory [ 65.700067][ T5595] hsr_slave_0: entered promiscuous mode [ 65.706142][ T5595] hsr_slave_1: entered promiscuous mode [ 65.712384][ T5595] debugfs: 'hsr0' already exists in 'hsr' [ 65.718124][ T5595] Cannot create hsr debugfs directory [ 65.727542][ T5598] hsr_slave_0: entered promiscuous mode [ 65.733815][ T5598] hsr_slave_1: entered promiscuous mode [ 65.739695][ T5598] debugfs: 'hsr0' already exists in 'hsr' [ 65.745443][ T5598] Cannot create hsr debugfs directory [ 65.775980][ T5599] hsr_slave_0: entered promiscuous mode [ 65.782273][ T5599] hsr_slave_1: entered promiscuous mode [ 65.788181][ T5599] debugfs: 'hsr0' already exists in 'hsr' [ 65.793970][ T5599] Cannot create hsr debugfs directory [ 65.832901][ T1301] ieee802154 phy0 wpan0: encryption failed: -22 [ 65.839766][ T1301] ieee802154 phy1 wpan1: encryption failed: -22 [ 66.121190][ T5596] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 66.131888][ T5596] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 66.139761][ T5596] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 66.148771][ T5596] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 66.157097][ T5596] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 66.165989][ T5596] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 66.174076][ T5596] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 66.183184][ T5596] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 66.238077][ T5595] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 66.253964][ T5595] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 66.263984][ T5595] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 66.273155][ T5595] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 66.281767][ T5595] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 66.290968][ T5595] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 66.307759][ T5595] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 66.319243][ T5595] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 66.384635][ T5597] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 66.394395][ T5597] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 66.403278][ T5597] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 66.412435][ T5597] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 66.424125][ T5597] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 66.433600][ T5597] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 66.441797][ T5597] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 66.449998][ T5597] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 66.528965][ T5596] 8021q: adding VLAN 0 to HW filter on device bond0 [ 66.540004][ T5598] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 66.548920][ T5598] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 66.557106][ T5598] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 66.566513][ T5598] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 66.574213][ T5598] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 66.583083][ T5598] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 66.603170][ T5598] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 66.612757][ T5598] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 66.638252][ T5596] 8021q: adding VLAN 0 to HW filter on device team0 [ 66.668566][ T3338] bridge0: port 1(bridge_slave_0) entered blocking state [ 66.675911][ T3338] bridge0: port 1(bridge_slave_0) entered forwarding state [ 66.696834][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 66.703966][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 66.723284][ T5595] 8021q: adding VLAN 0 to HW filter on device bond0 [ 66.756410][ T5599] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 66.766813][ T5599] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 66.783977][ T5599] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 66.793699][ T5599] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 66.809248][ T5599] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 66.818397][ T5599] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 66.837191][ T5595] 8021q: adding VLAN 0 to HW filter on device team0 [ 66.844187][ T5599] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 66.853629][ T5599] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 66.887960][ T3362] bridge0: port 1(bridge_slave_0) entered blocking state [ 66.895104][ T3362] bridge0: port 1(bridge_slave_0) entered forwarding state [ 66.909763][ T5597] 8021q: adding VLAN 0 to HW filter on device bond0 [ 66.924335][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 66.931470][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 67.001833][ T5597] 8021q: adding VLAN 0 to HW filter on device team0 [ 67.014461][ T29] kauditd_printk_skb: 13 callbacks suppressed [ 67.014475][ T29] audit: type=1400 audit(1786333653.922:152): avc: denied { sys_module } for pid=5596 comm="syz-executor" capability=16 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 67.016109][ T5595] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 67.084242][ T3338] bridge0: port 1(bridge_slave_0) entered blocking state [ 67.091404][ T3338] bridge0: port 1(bridge_slave_0) entered forwarding state [ 67.160012][ T64] bridge0: port 2(bridge_slave_1) entered blocking state [ 67.167176][ T64] bridge0: port 2(bridge_slave_1) entered forwarding state [ 67.193164][ T5598] 8021q: adding VLAN 0 to HW filter on device bond0 [ 67.204257][ T5608] Bluetooth: hci2: command tx timeout [ 67.210113][ T5608] Bluetooth: hci0: command tx timeout [ 67.218315][ T5608] Bluetooth: hci3: command tx timeout [ 67.266197][ T5598] 8021q: adding VLAN 0 to HW filter on device team0 [ 67.280794][ T5608] Bluetooth: hci1: command tx timeout [ 67.281311][ T50] Bluetooth: hci4: command tx timeout [ 67.305082][ T64] bridge0: port 1(bridge_slave_0) entered blocking state [ 67.312254][ T64] bridge0: port 1(bridge_slave_0) entered forwarding state [ 67.355479][ T3312] bridge0: port 2(bridge_slave_1) entered blocking state [ 67.362654][ T3312] bridge0: port 2(bridge_slave_1) entered forwarding state [ 67.397212][ T5599] 8021q: adding VLAN 0 to HW filter on device bond0 [ 67.464714][ T5599] 8021q: adding VLAN 0 to HW filter on device team0 [ 67.501778][ T3324] bridge0: port 1(bridge_slave_0) entered blocking state [ 67.508921][ T3324] bridge0: port 1(bridge_slave_0) entered forwarding state [ 67.576723][ T3324] bridge0: port 2(bridge_slave_1) entered blocking state [ 67.583876][ T3324] bridge0: port 2(bridge_slave_1) entered forwarding state [ 67.640005][ T5596] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 67.735668][ T5595] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 67.755261][ T5596] veth0_vlan: entered promiscuous mode [ 67.799437][ T5596] veth1_vlan: entered promiscuous mode [ 67.908631][ T5596] veth0_macvtap: entered promiscuous mode [ 67.948178][ T5596] veth1_macvtap: entered promiscuous mode [ 67.965714][ T5595] veth0_vlan: entered promiscuous mode [ 67.995765][ T5595] veth1_vlan: entered promiscuous mode [ 68.032100][ T5596] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 68.054075][ T5596] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 68.127426][ T5597] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 68.176405][ T5595] veth0_macvtap: entered promiscuous mode [ 68.208761][ T5595] veth1_macvtap: entered promiscuous mode [ 68.251813][ T1030] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 68.328190][ T3362] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 68.345183][ T3362] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 68.355382][ T5595] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 68.366955][ T5598] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 68.382513][ T1030] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 68.402386][ T5599] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 68.410705][ T13] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 68.433486][ T5595] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 68.444539][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 68.454736][ T3362] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 68.466043][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 68.477417][ T5597] veth0_vlan: entered promiscuous mode [ 68.491034][ T29] audit: type=1400 audit(1786333655.392:153): avc: denied { mounton } for pid=5596 comm="syz-executor" path="/root/syzkaller.5SQMHz/syz-tmp" dev="sda1" ino=2042 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_home_t tclass=dir permissive=1 [ 68.529005][ T29] audit: type=1400 audit(1786333655.392:154): avc: denied { mount } for pid=5596 comm="syz-executor" name="/" dev="tmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 68.568493][ T5597] veth1_vlan: entered promiscuous mode [ 68.574127][ T29] audit: type=1400 audit(1786333655.422:155): avc: denied { mounton } for pid=5596 comm="syz-executor" path="/root/syzkaller.5SQMHz/syz-tmp/newroot/dev" dev="tmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 68.599780][ T29] audit: type=1400 audit(1786333655.422:156): avc: denied { mount } for pid=5596 comm="syz-executor" name="/" dev="proc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 68.629324][ T29] audit: type=1400 audit(1786333655.432:157): avc: denied { mounton } for pid=5596 comm="syz-executor" path="/root/syzkaller.5SQMHz/syz-tmp/newroot/sys/kernel/debug" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=dir permissive=1 [ 68.660373][ T29] audit: type=1400 audit(1786333655.432:158): avc: denied { mounton } for pid=5596 comm="syz-executor" path="/root/syzkaller.5SQMHz/syz-tmp/newroot/proc/sys/fs/binfmt_misc" dev="proc" ino=6507 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysctl_fs_t tclass=dir permissive=1 [ 68.690012][ T29] audit: type=1400 audit(1786333655.432:159): avc: denied { unmount } for pid=5596 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 68.711320][ T29] audit: type=1400 audit(1786333655.482:160): avc: denied { mounton } for pid=5596 comm="syz-executor" path="/dev/gadgetfs" dev="devtmpfs" ino=2780 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:device_t tclass=dir permissive=1 [ 68.744246][ T5596] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 68.755009][ T5597] veth0_macvtap: entered promiscuous mode [ 68.767263][ T29] audit: type=1400 audit(1786333655.482:161): avc: denied { mount } for pid=5596 comm="syz-executor" name="/" dev="gadgetfs" ino=6545 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfs_t tclass=filesystem permissive=1 [ 68.803918][ T5597] veth1_macvtap: entered promiscuous mode [ 68.822463][ T5598] veth0_vlan: entered promiscuous mode [ 68.860262][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 68.871037][ T13] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 68.891728][ T1030] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 68.904818][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 68.939674][ T5598] veth1_vlan: entered promiscuous mode [ 68.957834][ T5597] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 68.997066][ T5597] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 69.020488][ T1030] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 69.034438][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 69.044641][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 69.050919][ T3362] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 69.073531][ T5598] veth0_macvtap: entered promiscuous mode [ 69.093286][ T5599] veth0_vlan: entered promiscuous mode [ 69.101185][ T12] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 69.113629][ T5598] veth1_macvtap: entered promiscuous mode [ 69.173958][ T5599] veth1_vlan: entered promiscuous mode [ 69.251510][ T3324] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 69.267437][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 69.279492][ T50] Bluetooth: hci0: command tx timeout [ 69.285252][ T50] Bluetooth: hci3: command tx timeout [ 69.293119][ T50] Bluetooth: hci2: command tx timeout [ 69.303709][ T3324] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 69.315531][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 69.322658][ T981] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 69.350869][ T5608] Bluetooth: hci4: command tx timeout [ 69.354681][ T50] Bluetooth: hci1: command tx timeout [ 69.373888][ T5598] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 69.396923][ T5599] veth0_macvtap: entered promiscuous mode [ 69.407684][ T5598] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 69.635248][ T981] usb 2-1: Using ep0 maxpacket: 8 [ 69.701158][ T981] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 69.734376][ T981] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 69.746095][ T981] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 69.788037][ T5599] veth1_macvtap: entered promiscuous mode [ 69.806095][ T5599] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 69.816284][ T1030] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 69.820147][ T5599] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 69.825469][ T981] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 69.833262][ T1030] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 69.854470][ T981] usb 2-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 69.868138][ T981] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 69.870671][ T12] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 69.982232][ T1030] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 70.129328][ T981] usb 2-1: GET_CAPABILITIES returned 0 [ 70.144625][ T3312] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 70.173173][ T3312] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 70.188588][ T981] usbtmc 2-1:16.0: can't read capabilities [ 70.254339][ T3324] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 70.681073][ T3362] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 70.704060][ T3362] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 70.704529][ T3338] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 70.821380][ T3362] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 70.917005][ T24] usb 2-1: USB disconnect, device number 2 [ 71.261926][ T3324] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 71.289864][ T3324] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 71.314260][ T3324] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 71.352990][ T50] Bluetooth: hci2: command tx timeout [ 71.353003][ T5608] Bluetooth: hci3: command tx timeout [ 71.359022][ T50] Bluetooth: hci0: command tx timeout [ 71.374946][ T1030] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 71.384447][ T3324] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 71.384464][ T1030] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 71.430820][ T5608] Bluetooth: hci4: command tx timeout [ 71.436583][ T50] Bluetooth: hci1: command tx timeout [ 71.584313][ T35] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 71.622675][ T35] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 72.054790][ T29] kauditd_printk_skb: 34 callbacks suppressed [ 72.054820][ T29] audit: type=1400 audit(1786333658.962:196): avc: denied { ioctl } for pid=5810 comm="syz.3.4" path="/dev/kvm" dev="devtmpfs" ino=84 ioctlcmd=0xae01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 72.172942][ T29] audit: type=1400 audit(1786333659.072:197): avc: denied { create } for pid=5810 comm="syz.3.4" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 72.219387][ T29] audit: type=1400 audit(1786333659.082:198): avc: denied { ioctl } for pid=5810 comm="syz.3.4" path="socket:[8921]" dev="sockfs" ino=8921 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 72.277183][ T29] audit: type=1400 audit(1786333659.082:199): avc: denied { bind } for pid=5810 comm="syz.3.4" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 72.302195][ T29] audit: type=1400 audit(1786333659.082:200): avc: denied { setopt } for pid=5810 comm="syz.3.4" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 72.453343][ T29] audit: type=1400 audit(1786333659.082:201): avc: denied { accept } for pid=5810 comm="syz.3.4" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 72.475480][ T29] audit: type=1400 audit(1786333659.082:202): avc: denied { write } for pid=5810 comm="syz.3.4" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 72.495840][ T29] audit: type=1400 audit(1786333659.122:203): avc: denied { read } for pid=5810 comm="syz.3.4" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 72.535966][ T5822] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5'. [ 72.556262][ T29] audit: type=1400 audit(1786333659.242:204): avc: denied { create } for pid=5815 comm="syz.1.9" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 72.599673][ T29] audit: type=1400 audit(1786333659.252:205): avc: denied { setopt } for pid=5815 comm="syz.1.9" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 74.231472][ T5838] Zero length message leads to an empty skb [ 74.284233][ T5838] netlink: 8 bytes leftover after parsing attributes in process `syz.0.13'. [ 74.293214][ T5838] netlink: 8 bytes leftover after parsing attributes in process `syz.0.13'. [ 74.327386][ T5603] usb 3-1: new full-speed USB device number 2 using dummy_hcd [ 75.302133][ T5603] usb 3-1: New USB device found, idVendor=17ef, idProduct=6085, bcdDevice= 0.00 [ 75.441395][ T50] Bluetooth: hci3: command tx timeout [ 75.516915][ T5603] usb 3-1: config 0 has an invalid descriptor of length 47, skipping remainder of the config [ 75.755402][ T5603] usb 3-1: config 0 interface 0 altsetting 9 has 0 endpoint descriptors, different from the interface descriptor's value: 3 [ 75.956756][ T5603] usb 3-1: config 0 interface 0 has no altsetting 0 [ 76.016607][ T5603] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 76.121400][ T5853] 9pnet_fd: p9_fd_create_tcp (5853): problem connecting socket to 127.0.0.1 [ 76.966801][ T5603] usb 3-1: config 0 descriptor?? [ 77.041597][ T5603] usb 3-1: can't set config #0, error -71 [ 77.056953][ T5603] usb 3-1: USB disconnect, device number 2 [ 77.078320][ T29] kauditd_printk_skb: 10 callbacks suppressed [ 77.078334][ T29] audit: type=1400 audit(1786333663.982:216): avc: denied { write } for pid=5857 comm="syz.1.19" name="snapshot" dev="devtmpfs" ino=92 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 77.102612][ T5859] random: crng reseeded on system resumption [ 77.110429][ T29] audit: type=1400 audit(1786333664.012:217): avc: denied { open } for pid=5857 comm="syz.1.19" path="/dev/snapshot" dev="devtmpfs" ino=92 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 77.140185][ T29] audit: type=1400 audit(1786333664.032:218): avc: denied { unmount } for pid=5595 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 77.177228][ T29] audit: type=1400 audit(1786333664.082:219): avc: denied { block_suspend } for pid=5858 comm="syz.0.18" capability=36 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 77.254470][ T5864] 9pnet_fd: p9_fd_create_tcp (5864): problem connecting socket to 127.0.0.1 [ 77.560707][ T29] audit: type=1400 audit(1786333664.452:220): avc: denied { read write } for pid=5858 comm="syz.0.18" name="fuse" dev="devtmpfs" ino=99 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fuse_device_t tclass=chr_file permissive=1 [ 77.645374][ T29] audit: type=1400 audit(1786333664.462:221): avc: denied { open } for pid=5858 comm="syz.0.18" path="/dev/fuse" dev="devtmpfs" ino=99 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fuse_device_t tclass=chr_file permissive=1 [ 77.679976][ T29] audit: type=1400 audit(1786333664.552:222): avc: denied { mounton } for pid=5858 comm="syz.0.18" path="/5/file0" dev="tmpfs" ino=56 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 77.732566][ T29] audit: type=1400 audit(1786333664.582:223): avc: denied { mount } for pid=5867 comm="syz.2.20" name="/" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=filesystem permissive=1 [ 77.766793][ T29] audit: type=1400 audit(1786333664.582:224): avc: denied { search } for pid=5867 comm="syz.2.20" name="/" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=dir permissive=1 [ 77.788552][ T29] audit: type=1400 audit(1786333664.582:225): avc: denied { search } for pid=5867 comm="syz.2.20" name="events" dev="tracefs" ino=1042 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=dir permissive=1 [ 77.956132][ T5872] bridge1: entered promiscuous mode [ 77.961670][ T5872] bridge1: entered allmulticast mode [ 77.962172][ T42] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 77.972206][ T5872] team0: Port device bridge1 added [ 77.992424][ T5872] bridge0: port 3(team0) entered blocking state [ 77.997558][ T5694] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 77.999024][ T5872] bridge0: port 3(team0) entered disabled state [ 78.018497][ T5872] team0: entered allmulticast mode [ 78.023713][ T5872] team_slave_0: entered allmulticast mode [ 78.030069][ T5872] team_slave_1: entered allmulticast mode [ 78.038975][ T5872] team0: entered promiscuous mode [ 78.044548][ T5872] team_slave_0: entered promiscuous mode [ 78.050836][ T5872] team_slave_1: entered promiscuous mode [ 78.057586][ T5872] bridge0: port 3(team0) entered blocking state [ 78.064344][ T5872] bridge0: port 3(team0) entered forwarding state [ 78.075346][ T5873] hfs: can't find a HFS filesystem on dev nullb0 [ 78.120433][ T42] usb 3-1: Using ep0 maxpacket: 32 [ 79.504967][ T5694] usb 2-1: New USB device found, idVendor=045e, idProduct=0775, bcdDevice= 1.00 [ 81.622618][ T10] cfg80211: failed to load regulatory.db [ 81.773332][ T42] usb 3-1: unable to get BOS descriptor or descriptor too short [ 81.781251][ T42] usb 3-1: New USB device found, idVendor=0582, idProduct=008d, bcdDevice= 0.40 [ 81.791624][ T42] usb 3-1: unable to read config index 0 descriptor/start: -71 [ 81.799680][ T42] usb 3-1: can't read configurations, error -71 [ 81.824106][ T5694] usb 2-1: unable to read config index 0 descriptor/start: -71 [ 81.835004][ T5694] usb 2-1: can't read configurations, error -71 [ 82.696918][ T5896] 9pnet_fd: p9_fd_create_tcp (5896): problem connecting socket to 127.0.0.1 [ 83.240326][ T29] kauditd_printk_skb: 12 callbacks suppressed [ 83.240343][ T29] audit: type=1400 audit(1786333670.142:238): avc: denied { create } for pid=5897 comm="syz.4.27" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 83.311857][ T29] audit: type=1400 audit(1786333670.182:239): avc: denied { connect } for pid=5897 comm="syz.4.27" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 83.384142][ T29] audit: type=1400 audit(1786333670.182:240): avc: denied { ioctl } for pid=5897 comm="syz.4.27" path="socket:[9058]" dev="sockfs" ino=9058 ioctlcmd=0x7437 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 84.338400][ T29] audit: type=1400 audit(1786333670.182:241): avc: denied { read write } for pid=5897 comm="syz.4.27" name="ppp" dev="devtmpfs" ino=708 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 84.362396][ T29] audit: type=1400 audit(1786333670.182:242): avc: denied { open } for pid=5897 comm="syz.4.27" path="/dev/ppp" dev="devtmpfs" ino=708 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 84.388866][ T29] audit: type=1400 audit(1786333670.202:243): avc: denied { ioctl } for pid=5897 comm="syz.4.27" path="/dev/ppp" dev="devtmpfs" ino=708 ioctlcmd=0x7438 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 84.416582][ T29] audit: type=1400 audit(1786333670.212:244): avc: denied { unmount } for pid=5595 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=filesystem permissive=1 [ 84.437821][ T29] audit: type=1400 audit(1786333670.212:245): avc: denied { setopt } for pid=5897 comm="syz.4.27" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 84.461059][ T29] audit: type=1400 audit(1786333670.242:246): avc: denied { read } for pid=5897 comm="syz.4.27" name="msr" dev="devtmpfs" ino=87 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 84.489447][ T5694] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 84.526481][ T29] audit: type=1400 audit(1786333670.242:247): avc: denied { open } for pid=5897 comm="syz.4.27" path="/dev/cpu/0/msr" dev="devtmpfs" ino=87 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 84.556858][ T5912] netlink: 8 bytes leftover after parsing attributes in process `syz.3.31'. [ 84.651438][ T5694] usb 5-1: device descriptor read/64, error -71 [ 84.718158][ T5915] netlink: 8 bytes leftover after parsing attributes in process `syz.3.33'. [ 84.741059][ T42] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 84.994024][ T42] usb 3-1: New USB device found, idVendor=0bda, idProduct=8150, bcdDevice= 0.00 [ 85.006159][ T42] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 85.014610][ T42] usb 3-1: Product: syz [ 85.018801][ T42] usb 3-1: Manufacturer: syz [ 85.023787][ T42] usb 3-1: SerialNumber: syz [ 85.060720][ T5694] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 85.620471][ T5694] usb 5-1: device descriptor read/64, error -71 [ 85.672692][ T5923] netlink: 8 bytes leftover after parsing attributes in process `syz.1.35'. [ 85.746691][ T5694] usb usb5-port1: attempt power cycle [ 85.805785][ T42] rtl8150 3-1:1.0: couldn't reset the device [ 85.818360][ T42] rtl8150 3-1:1.0: probe with driver rtl8150 failed with error -5 [ 85.837081][ T42] usb 3-1: USB disconnect, device number 5 [ 85.907079][ T5929] tmpfs: Bad value for 'usrquota_inode_hardlimit' [ 85.938150][ T5929] overlayfs: conflicting options: userxattr,redirect_dir=on [ 86.028206][ T5929] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 86.061205][ T5929] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 86.062642][ T5929] warning: `syz.1.37' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 86.225064][ T5937] 9pnet_fd: p9_fd_create_tcp (5937): problem connecting socket to 127.0.0.1 [ 87.563539][ T5945] 9pnet_fd: p9_fd_create_tcp (5945): problem connecting socket to 127.0.0.1 [ 87.893131][ T5788] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 89.921818][ T5947] netlink: 4 bytes leftover after parsing attributes in process `syz.3.42'. [ 89.940909][ T5788] usb 1-1: Using ep0 maxpacket: 16 [ 90.005968][ T5788] usb 1-1: device descriptor read/all, error -71 [ 90.024322][ T5947] netlink: 4 bytes leftover after parsing attributes in process `syz.3.42'. [ 90.075158][ T29] kauditd_printk_skb: 8 callbacks suppressed [ 90.075173][ T29] audit: type=1400 audit(1786333676.982:256): avc: denied { append } for pid=5957 comm="syz.2.45" name="cec2" dev="devtmpfs" ino=962 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 90.792445][ T5845] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 90.951135][ T5845] usb 4-1: Using ep0 maxpacket: 32 [ 90.967011][ T5845] usb 4-1: New USB device found, idVendor=08e4, idProduct=0163, bcdDevice= 0.40 [ 91.001889][ T5845] usb 4-1: config 1 has an invalid descriptor of length 125, skipping remainder of the config [ 91.023462][ T5845] usb 4-1: config 1 interface 0 altsetting 0 has an invalid endpoint descriptor of length 5, skipping [ 91.081663][ T5845] usb 4-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 91.195007][ T5845] usb 4-1: string descriptor 0 read error: -71 [ 91.744820][ T5845] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 91.759973][ T5845] usb 4-1: can't set config #1, error -71 [ 91.778522][ T5845] usb 4-1: USB disconnect, device number 2 [ 91.801172][ T5970] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 92.115688][ T29] audit: type=1400 audit(1786333679.022:257): avc: denied { name_bind } for pid=5975 comm="syz.0.52" src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=udp_socket permissive=1 [ 92.149518][ T5976] cgroup: Bad value for 'name' [ 93.334455][ T29] audit: type=1400 audit(1786333679.042:258): avc: denied { shutdown } for pid=5975 comm="syz.0.52" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 93.365112][ T5788] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 93.550469][ T5788] usb 2-1: Using ep0 maxpacket: 32 [ 93.556998][ T5788] usb 2-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 93.584253][ T5788] usb 2-1: config 0 has an invalid interface number: 67 but max is 0 [ 93.593371][ T5788] usb 2-1: config 0 has no interface number 0 [ 93.613398][ T5788] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 93.623791][ T5788] usb 2-1: Product: syz [ 93.635677][ T5788] usb 2-1: Manufacturer: syz [ 93.649394][ T5788] usb 2-1: SerialNumber: syz [ 93.664810][ T5788] usb 2-1: config 0 descriptor?? [ 93.677353][ T29] audit: type=1400 audit(1786333680.582:259): avc: denied { ioctl } for pid=5984 comm="syz.0.53" path="anon_inode:[userfaultfd]" dev="anon_inodefs" ino=9270 ioctlcmd=0xaa3f scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 93.766847][ T29] audit: type=1400 audit(1786333680.672:260): avc: denied { create } for pid=5986 comm="syz.4.54" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 93.795340][ T29] audit: type=1400 audit(1786333680.672:261): avc: denied { accept } for pid=5984 comm="syz.0.53" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 93.819061][ T5990] netlink: 64 bytes leftover after parsing attributes in process `syz.3.55'. [ 93.842685][ T29] audit: type=1400 audit(1786333680.682:262): avc: denied { create } for pid=5986 comm="syz.4.54" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 93.894102][ T29] audit: type=1400 audit(1786333680.682:263): avc: denied { listen } for pid=5986 comm="syz.4.54" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 94.060827][ T29] audit: type=1400 audit(1786333680.962:264): avc: denied { accept } for pid=5986 comm="syz.4.54" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 94.082778][ T29] audit: type=1400 audit(1786333680.982:265): avc: denied { setopt } for pid=5996 comm="syz.0.57" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 94.847290][ T6006] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 94.867511][ T6006] syz.4.58: vmalloc error: size 15032385536, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 94.882975][ T6006] CPU: 0 UID: 0 PID: 6006 Comm: syz.4.58 Not tainted syzkaller #0 PREEMPT(full) [ 94.883002][ T6006] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 94.883014][ T6006] Call Trace: [ 94.883021][ T6006] [ 94.883030][ T6006] dump_stack_lvl+0x100/0x190 [ 94.883062][ T6006] warn_alloc.cold+0x94/0xa8 [ 94.883084][ T6006] ? __pfx_warn_alloc+0x10/0x10 [ 94.883118][ T6006] ? __pfx___schedule+0x10/0x10 [ 94.883146][ T6006] __vmalloc_node_range_noprof+0x136c/0x1630 [ 94.883176][ T6006] ? irqentry_exit+0x24d/0xa00 [ 94.883201][ T6006] ? lockdep_hardirqs_on+0x78/0x100 [ 94.883233][ T6006] ? disksize_store+0x11a/0x4d0 [ 94.883265][ T6006] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 94.883299][ T6006] ? __pfx___might_resched+0x10/0x10 [ 94.883323][ T6006] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 94.883353][ T6006] ? disksize_store+0x11a/0x4d0 [ 94.883373][ T6006] __vmalloc_node_noprof+0xad/0xf0 [ 94.883401][ T6006] ? disksize_store+0x11a/0x4d0 [ 94.883424][ T6006] disksize_store+0x11a/0x4d0 [ 94.883445][ T6006] ? sysfs_file_kobj+0xe4/0x290 [ 94.883477][ T6006] ? __pfx_disksize_store+0x10/0x10 [ 94.883497][ T6006] dev_attr_store+0x58/0x80 [ 94.883523][ T6006] ? __pfx_dev_attr_store+0x10/0x10 [ 94.883549][ T6006] sysfs_kf_write+0xf2/0x150 [ 94.883569][ T6006] kernfs_fop_write_iter+0x3e0/0x5f0 [ 94.883594][ T6006] ? __pfx_sysfs_kf_write+0x10/0x10 [ 94.883615][ T6006] vfs_write+0x6ac/0x1050 [ 94.883640][ T6006] ? __pfx_kernfs_fop_write_iter+0x10/0x10 [ 94.883670][ T6006] ? __pfx_vfs_write+0x10/0x10 [ 94.883705][ T6006] ksys_write+0x12a/0x250 [ 94.883723][ T6006] ? __pfx_ksys_write+0x10/0x10 [ 94.883749][ T6006] do_syscall_64+0x115/0x870 [ 94.883774][ T6006] ? clear_bhb_loop+0x70/0xc0 [ 94.883798][ T6006] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 94.883817][ T6006] RIP: 0033:0x7f498a39e0d9 [ 94.883835][ T6006] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 94.883853][ T6006] RSP: 002b:00007f498b2c4028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 94.883871][ T6006] RAX: ffffffffffffffda RBX: 00007f498a626180 RCX: 00007f498a39e0d9 [ 94.883883][ T6006] RDX: 0000000000000003 RSI: 0000200000000340 RDI: 000000000000000a [ 94.883894][ T6006] RBP: 00007f498a435024 R08: 0000000000000000 R09: 0000000000000000 [ 94.883904][ T6006] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 94.883914][ T6006] R13: 00007f498a626218 R14: 00007f498a626180 R15: 00007ffc022b4728 [ 94.883941][ T6006] [ 94.883973][ T6006] Mem-Info: [ 95.143119][ T6006] active_anon:10474 inactive_anon:7 isolated_anon:0 [ 95.143119][ T6006] active_file:27 inactive_file:57983 isolated_file:0 [ 95.143119][ T6006] unevictable:0 dirty:374 writeback:0 [ 95.143119][ T6006] slab_reclaimable:11416 slab_unreclaimable:96159 [ 95.143119][ T6006] mapped:30052 shmem:3389 pagetables:1222 [ 95.143119][ T6006] sec_pagetables:0 bounce:0 [ 95.143119][ T6006] kernel_misc_reclaimable:0 [ 95.143119][ T6006] free:1281991 free_pcp:34548 free_cma:0 [ 95.188934][ T6006] Node 0 active_anon:41896kB inactive_anon:28kB active_file:108kB inactive_file:231728kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:120208kB dirty:1492kB writeback:0kB shmem:13556kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:12356kB pagetables:4728kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 95.223751][ T6006] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:204kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:4kB writeback:0kB shmem:0kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:64kB pagetables:160kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 95.256177][ T6006] Node 0 DMA free:15360kB boost:0kB min:208kB low:260kB high:312kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 95.288938][ T6006] lowmem_reserve[]: 0 2472 2473 2473 2473 [ 95.295764][ T6006] Node 0 DMA32 free:1166452kB boost:0kB min:34012kB low:42512kB high:51012kB reserved_highatomic:0KB free_highatomic:0KB active_anon:41896kB inactive_anon:28kB active_file:108kB inactive_file:231728kB unevictable:0kB writepending:1492kB zspages:0kB present:3129332kB managed:2532244kB mlocked:0kB bounce:0kB free_pcp:138108kB local_pcp:82836kB free_cma:0kB [ 95.329198][ T6006] lowmem_reserve[]: 0 0 0 0 0 [ 95.334346][ T6006] Node 0 Normal free:0kB boost:0kB min:4kB low:4kB high:4kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:1048580kB managed:384kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 95.364727][ T6006] lowmem_reserve[]: 0 0 0 0 0 [ 95.370432][ T6006] Node 1 Normal free:3946152kB boost:0kB min:55880kB low:69848kB high:83816kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:204kB unevictable:0kB writepending:4kB zspages:0kB present:4194300kB managed:4111100kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 95.403310][ T6006] lowmem_reserve[]: 0 0 0 0 0 [ 95.409160][ T6006] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 95.422880][ T6006] Node 0 DMA32: 1194*4kB (UME) 514*8kB (UM) 133*16kB (UM) 129*32kB (ME) 68*64kB (ME) 81*128kB (M) 16*256kB (M) 10*512kB (UME) 5*1024kB (ME) 4*2048kB (UM) 272*4096kB (M) = 1166504kB [ 95.443780][ T6006] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 95.457212][ T6006] Node 1 Normal: 0*4kB 5*8kB (UM) 6*16kB (UM) 9*32kB (UM) 4*64kB (UM) 2*128kB (UM) 3*256kB (UM) 4*512kB (UM) 2*1024kB (UM) 0*2048kB 962*4096kB (UM) = 3946152kB [ 95.474598][ T6006] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 95.657423][ T5788] smsc95xx 2-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -71 [ 95.675192][ T5788] smsc95xx 2-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 95.692549][ T5788] smsc95xx 2-1:0.67 (unnamed net_device) (uninitialized): Failed to write reg index 0x00000014: -71 [ 95.704587][ T5788] smsc95xx 2-1:0.67: probe with driver smsc95xx failed with error -71 [ 95.750808][ T29] kauditd_printk_skb: 7 callbacks suppressed [ 95.750824][ T29] audit: type=1400 audit(1786333682.632:273): avc: denied { ioctl } for pid=6009 comm="syz.3.60" path="socket:[9312]" dev="sockfs" ino=9312 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 95.754098][ T6010] audit: audit_lost=1 audit_rate_limit=0 audit_backlog_limit=64 [ 95.756975][ T29] audit: type=1400 audit(1786333682.662:274): avc: denied { bind } for pid=6009 comm="syz.3.60" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 95.809007][ T5788] usb 2-1: USB disconnect, device number 5 [ 95.874777][ T6010] audit: out of memory in audit_log_start [ 95.881176][ T6006] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 95.894657][ T6006] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 95.916986][ T29] audit: type=1400 audit(1786333682.822:275): avc: denied { connect } for pid=6013 comm="syz.2.62" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 95.936655][ T6006] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 95.952580][ T981] usb 1-1: new full-speed USB device number 4 using dummy_hcd [ 95.971765][ T6006] 62022 total pagecache pages [ 95.990856][ T6006] 2 pages in swap cache [ 95.996608][ T6006] Free swap = 124988kB [ 96.012117][ T6006] Total swap = 124996kB [ 96.021596][ T6006] 2097051 pages RAM [ 96.032794][ T6006] 0 pages HighMem/MovableOnly [ 96.037562][ T6006] 432279 pages reserved [ 96.100593][ T6006] 0 pages cma reserved [ 96.131651][ T981] usb 1-1: New USB device found, idVendor=0596, idProduct=0001, bcdDevice= 5.f5 [ 96.141748][ T981] usb 1-1: config 0 has an invalid interface number: 214 but max is 0 [ 96.149997][ T981] usb 1-1: config 0 has no interface number 0 [ 96.156329][ T981] usb 1-1: config 0 interface 214 altsetting 0 endpoint 0x83 has invalid wMaxPacketSize 0 [ 96.184474][ T981] usb 1-1: New USB device strings: Mfr=1, Product=0, SerialNumber=3 [ 96.193012][ T981] usb 1-1: Manufacturer: syz [ 96.198409][ T981] usb 1-1: SerialNumber: syz [ 96.213657][ T981] usb 1-1: config 0 descriptor?? [ 96.233076][ T29] audit: type=1400 audit(1786333683.142:276): avc: denied { unmount } for pid=5599 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=filesystem permissive=1 [ 96.311412][ T29] audit: type=1400 audit(1786333683.212:277): avc: denied { unmount } for pid=5599 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=filesystem permissive=1 [ 97.376456][ T6037] 9pnet_virtio: no channels available for device 127.0.0.1 [ 98.053019][ T29] audit: type=1400 audit(1786333684.962:278): avc: denied { bind } for pid=6043 comm="syz.3.71" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 98.133469][ T29] audit: type=1400 audit(1786333685.042:279): avc: denied { name_bind } for pid=6043 comm="syz.3.71" src=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=sctp_socket permissive=1 [ 98.165686][ T29] audit: type=1400 audit(1786333685.062:280): avc: denied { listen } for pid=6043 comm="syz.3.71" laddr=::1 lport=20003 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 98.280502][ T5845] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 98.484222][ T5845] usb 5-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 98.543658][ T5845] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 98.577132][ T5845] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 98.603433][ T5845] usb 5-1: config 0 descriptor?? [ 98.621992][ T5845] pwc: Askey VC010 type 2 USB webcam detected. [ 98.683875][ T981] usb 1-1: USB disconnect, device number 4 [ 98.958185][ T6049] syz.3.71 (6049) used greatest stack depth: 19752 bytes left [ 98.988738][ T6057] FAULT_INJECTION: forcing a failure. [ 98.988738][ T6057] name failslab, interval 1, probability 0, space 0, times 0 [ 99.022176][ T5845] pwc: recv_control_msg error -32 req 02 val 2b00 [ 99.034351][ T6057] CPU: 0 UID: 0 PID: 6057 Comm: syz.1.75 Not tainted syzkaller #0 PREEMPT(full) [ 99.034379][ T6057] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 99.034388][ T6057] Call Trace: [ 99.034394][ T6057] [ 99.034402][ T6057] dump_stack_lvl+0x100/0x190 [ 99.034430][ T6057] should_fail_ex.cold+0x5/0xa [ 99.034457][ T6057] ? __pfx_ref_tracker_alloc+0x10/0x10 [ 99.034485][ T6057] should_failslab+0xc2/0x120 [ 99.034509][ T6057] kmem_cache_alloc_noprof+0x91/0x6a0 [ 99.034531][ T6057] ? skb_clone+0x190/0x400 [ 99.034558][ T6057] skb_clone+0x190/0x400 [ 99.034581][ T6057] netlink_deliver_tap+0xaed/0xcc0 [ 99.034604][ T6057] netlink_unicast+0x62b/0x850 [ 99.034627][ T6057] ? __pfx_netlink_unicast+0x10/0x10 [ 99.034645][ T6057] ? __pfx_sock_has_perm+0x10/0x10 [ 99.034672][ T6057] netlink_sendmsg+0x8b0/0xda0 [ 99.034695][ T6057] ? __pfx_netlink_sendmsg+0x10/0x10 [ 99.034716][ T6057] ? selinux_socket_sendmsg+0x198/0x2f0 [ 99.034745][ T6057] ____sys_sendmsg+0xa4d/0xbe0 [ 99.034770][ T6057] ? __pfx_netlink_sendmsg+0x10/0x10 [ 99.034790][ T6057] ? __pfx_____sys_sendmsg+0x10/0x10 [ 99.034842][ T6057] ___sys_sendmsg+0x190/0x1e0 [ 99.034866][ T6057] ? __pfx____sys_sendmsg+0x10/0x10 [ 99.034882][ T6057] ? __lock_acquire+0x49f/0x1a40 [ 99.034904][ T6057] ? get_pid_task+0x106/0x250 [ 99.034949][ T6057] __sys_sendmsg+0x160/0x210 [ 99.034972][ T6057] ? __pfx___sys_sendmsg+0x10/0x10 [ 99.035008][ T6057] do_syscall_64+0x115/0x870 [ 99.035030][ T6057] ? clear_bhb_loop+0x70/0xc0 [ 99.035050][ T6057] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 99.035066][ T6057] RIP: 0033:0x7fa99f59e0d9 [ 99.035080][ T6057] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 99.035096][ T6057] RSP: 002b:00007fa9a03a1028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 99.035113][ T6057] RAX: ffffffffffffffda RBX: 00007fa99f825fa0 RCX: 00007fa99f59e0d9 [ 99.035123][ T6057] RDX: 0000000000000004 RSI: 0000200000000000 RDI: 0000000000000003 [ 99.035133][ T6057] RBP: 00007fa9a03a1090 R08: 0000000000000000 R09: 0000000000000000 [ 99.035143][ T6057] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 99.035153][ T6057] R13: 00007fa99f826038 R14: 00007fa99f825fa0 R15: 00007ffec7d22d78 [ 99.035177][ T6057] [ 99.036407][ T6044] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 99.279612][ T5845] pwc: recv_control_msg error -32 req 02 val 2700 [ 99.305372][ T6044] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 99.368019][ T5845] pwc: recv_control_msg error -32 req 02 val 2c00 [ 99.376486][ T5845] pwc: recv_control_msg error -32 req 04 val 1000 [ 99.389560][ T5845] pwc: recv_control_msg error -32 req 04 val 1300 [ 99.408901][ T6051] mmap: syz.2.73 (6051) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 99.430336][ T5845] pwc: recv_control_msg error -32 req 04 val 1400 [ 99.857225][ T5845] pwc: recv_control_msg error -71 req 04 val 1500 [ 99.865333][ T5845] pwc: recv_control_msg error -71 req 02 val 2500 [ 99.885544][ T5845] pwc: recv_control_msg error -71 req 02 val 2400 [ 99.900800][ T5845] pwc: recv_control_msg error -71 req 02 val 2600 [ 99.918544][ T5845] pwc: recv_control_msg error -71 req 02 val 2900 [ 99.927722][ T5845] pwc: recv_control_msg error -71 req 02 val 2800 [ 99.965203][ T5845] pwc: recv_control_msg error -71 req 04 val 1100 [ 100.058373][ T5845] pwc: recv_control_msg error -71 req 04 val 1200 [ 100.074853][ T5845] pwc: Registered as video103. [ 100.083702][ T5845] input: PWC snapshot button as /devices/platform/dummy_hcd.4/usb5/5-1/input/input5 [ 100.109959][ T5845] usb 5-1: USB disconnect, device number 5 [ 101.162907][ T29] kauditd_printk_skb: 8 callbacks suppressed [ 101.162923][ T29] audit: type=1400 audit(1786333688.072:289): avc: denied { setopt } for pid=6082 comm="syz.3.81" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 101.457489][ T29] audit: type=1400 audit(1786333688.122:290): avc: denied { getopt } for pid=6082 comm="syz.3.81" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 101.626848][ T29] audit: type=1400 audit(1786333688.162:291): avc: denied { create } for pid=6080 comm="syz.0.80" name="file5" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 101.660960][ T6093] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 101.700927][ T29] audit: type=1326 audit(1786333688.602:292): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6092 comm="syz.1.84" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fa99f59e0d9 code=0x0 [ 101.849555][ T29] audit: type=1400 audit(1786333688.732:293): avc: denied { unlink } for pid=5597 comm="syz-executor" name="file5" dev="tmpfs" ino=135 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 101.943377][ T29] audit: type=1400 audit(1786333688.842:294): avc: denied { ioctl } for pid=6098 comm="syz.0.86" path="/dev/binderfs/binder0" dev="binder" ino=10 ioctlcmd=0x620d scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 101.986183][ T6105] binder: 6098:6105 ioctl c0306201 200000000040 returned -14 [ 101.999590][ T6105] netlink: 12 bytes leftover after parsing attributes in process `syz.0.86'. [ 102.023437][ T29] audit: type=1400 audit(1786333688.882:295): avc: denied { set_context_mgr } for pid=6098 comm="syz.0.86" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=binder permissive=1 [ 102.064349][ T29] audit: type=1400 audit(1786333688.882:296): avc: denied { write } for pid=6098 comm="syz.0.86" name="binder0" dev="binder" ino=10 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 102.371377][ T6120] 9pnet_fd: p9_fd_create_tcp (6120): problem connecting socket to 127.0.0.1 [ 103.066749][ T6133] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 103.073875][ T6133] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 103.292249][ T5708] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 103.359416][ T6140] netlink: 8 bytes leftover after parsing attributes in process `syz.3.97'. [ 103.443810][ T6144] netlink: 28 bytes leftover after parsing attributes in process `syz.0.96'. [ 103.524849][ T29] audit: type=1400 audit(1786333690.372:297): avc: denied { create } for pid=6136 comm="syz.0.96" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 103.675950][ T29] audit: type=1400 audit(1786333690.382:298): avc: denied { ioctl } for pid=6136 comm="syz.0.96" path="socket:[10499]" dev="sockfs" ino=10499 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 103.768991][ T6140] FAULT_INJECTION: forcing a failure. [ 103.768991][ T6140] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 103.807509][ T5708] usb 2-1: New USB device found, idVendor=045e, idProduct=0775, bcdDevice= 1.00 [ 103.817192][ T6140] CPU: 1 UID: 0 PID: 6140 Comm: syz.3.97 Not tainted syzkaller #0 PREEMPT(full) [ 103.817216][ T6140] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 103.817226][ T6140] Call Trace: [ 103.817231][ T6140] [ 103.817237][ T6140] dump_stack_lvl+0x100/0x190 [ 103.817269][ T6140] should_fail_ex.cold+0x5/0xa [ 103.817291][ T6140] _copy_to_user+0x32/0xd0 [ 103.817320][ T6140] simple_read_from_buffer+0xcb/0x170 [ 103.817340][ T6140] proc_fail_nth_read+0x1af/0x230 [ 103.817367][ T6140] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 103.817397][ T6140] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 103.817424][ T6140] vfs_read+0x1e4/0xb40 [ 103.817453][ T6140] ? __pfx_vfs_read+0x10/0x10 [ 103.817486][ T6140] ? __fget_files+0x21f/0x3d0 [ 103.817511][ T6140] ksys_read+0x12a/0x250 [ 103.817525][ T6140] ? __pfx_ksys_read+0x10/0x10 [ 103.817547][ T6140] do_syscall_64+0x115/0x870 [ 103.817568][ T6140] ? clear_bhb_loop+0x70/0xc0 [ 103.817588][ T6140] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 103.817604][ T6140] RIP: 0033:0x7fb7e9b5e90e [ 103.817617][ T6140] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 103.817632][ T6140] RSP: 002b:00007fb7ea9c4fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 103.817648][ T6140] RAX: ffffffffffffffda RBX: 00007fb7ea9c56c0 RCX: 00007fb7e9b5e90e [ 103.817659][ T6140] RDX: 000000000000000f RSI: 00007fb7ea9c50a0 RDI: 0000000000000004 [ 103.817669][ T6140] RBP: 00007fb7ea9c5090 R08: 0000000000000000 R09: 0000000000000000 [ 103.817678][ T6140] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 103.817687][ T6140] R13: 00007fb7e9e26038 R14: 00007fb7e9e25fa0 R15: 00007ffc8309d748 [ 103.817711][ T6140] [ 104.031083][ T6149] vlan2: entered promiscuous mode [ 104.036209][ T6149] hsr0: entered promiscuous mode [ 104.041991][ T6149] vlan2: entered allmulticast mode [ 104.047141][ T6149] hsr0: entered allmulticast mode [ 104.052201][ T6149] hsr_slave_0: entered allmulticast mode [ 104.057859][ T6149] hsr_slave_1: entered allmulticast mode [ 104.081574][ T6149] netlink: 4 bytes leftover after parsing attributes in process `syz.4.98'. [ 104.108069][ T5708] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x86 has invalid maxpacket 8192, setting to 64 [ 104.144795][ T6149] hsr_slave_0: left promiscuous mode [ 104.145640][ T5708] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=0 [ 104.158616][ T6149] hsr_slave_1: left promiscuous mode [ 104.159109][ T5708] usb 2-1: Product: syz [ 104.245141][ T5708] usb 2-1: Manufacturer: syz [ 104.280090][ T5708] input: Samsung SUR40 as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/input/input6 [ 104.354513][ T6157] FAULT_INJECTION: forcing a failure. [ 104.354513][ T6157] name failslab, interval 1, probability 0, space 0, times 0 [ 104.380442][ T5788] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 104.400288][ T6157] CPU: 0 UID: 0 PID: 6157 Comm: syz.2.101 Not tainted syzkaller #0 PREEMPT(full) [ 104.400314][ T6157] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 104.400324][ T6157] Call Trace: [ 104.400330][ T6157] [ 104.400337][ T6157] dump_stack_lvl+0x100/0x190 [ 104.400368][ T6157] should_fail_ex.cold+0x5/0xa [ 104.400389][ T6157] should_failslab+0xc2/0x120 [ 104.400413][ T6157] __kmalloc_cache_noprof+0x91/0x6c0 [ 104.400432][ T6157] ? proc_self_get_link+0x189/0x1f0 [ 104.400457][ T6157] proc_self_get_link+0x189/0x1f0 [ 104.400477][ T6157] pick_link+0xac2/0x13c0 [ 104.400502][ T6157] ? selinux_inode_permission+0x14a/0x1130 [ 104.400523][ T6157] ? __pfx_proc_self_get_link+0x10/0x10 [ 104.400546][ T6157] step_into_slowpath+0x9ba/0xf90 [ 104.400579][ T6157] ? __pfx_step_into_slowpath+0x10/0x10 [ 104.400610][ T6157] ? lookup_fast+0x2da/0x600 [ 104.400633][ T6157] ? inode_permission+0x374/0x620 [ 104.400660][ T6157] link_path_walk+0xf28/0x1cc0 [ 104.400697][ T6157] path_openat+0x1c9/0x4280 [ 104.400715][ T6157] ? __kasan_slab_alloc+0x89/0x90 [ 104.400736][ T6157] ? kmem_cache_alloc_noprof+0x26b/0x6a0 [ 104.400756][ T6157] ? do_getname+0x35/0x390 [ 104.400782][ T6157] ? __x64_sys_openat+0x12d/0x210 [ 104.400813][ T6157] ? __pfx_path_openat+0x10/0x10 [ 104.400840][ T6157] do_file_open+0x20e/0x430 [ 104.400861][ T6157] ? __pfx_do_file_open+0x10/0x10 [ 104.400899][ T6157] ? alloc_fd+0x471/0x7a0 [ 104.400922][ T6157] ? do_getname+0x191/0x390 [ 104.400947][ T6157] do_sys_openat2+0x10f/0x1e0 [ 104.400969][ T6157] ? __pfx_do_sys_openat2+0x10/0x10 [ 104.400993][ T6157] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 104.401019][ T6157] ? __fget_files+0x21f/0x3d0 [ 104.401041][ T6157] __x64_sys_openat+0x12d/0x210 [ 104.401065][ T6157] ? __pfx___x64_sys_openat+0x10/0x10 [ 104.401086][ T6157] ? ksys_write+0x1ac/0x250 [ 104.401112][ T6157] do_syscall_64+0x115/0x870 [ 104.401135][ T6157] ? clear_bhb_loop+0x70/0xc0 [ 104.401157][ T6157] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 104.401175][ T6157] RIP: 0033:0x7f34cf35e90e [ 104.401191][ T6157] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 104.401207][ T6157] RSP: 002b:00007f34d01d7ec8 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 104.401225][ T6157] RAX: ffffffffffffffda RBX: 00007f34d01d86c0 RCX: 00007f34cf35e90e [ 104.401236][ T6157] RDX: 0000000000000002 RSI: 00007f34d01d7f90 RDI: ffffffffffffff9c [ 104.401247][ T6157] RBP: 00007f34d01d8090 R08: 0000000000000000 R09: 0000000000000000 [ 104.401257][ T6157] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 104.401266][ T6157] R13: 00007f34cf626128 R14: 00007f34cf626090 R15: 00007ffc62604b68 [ 104.401290][ T6157] [ 104.798727][ T6163] af_packet: tpacket_rcv: packet too big, clamped from 32 to 4294967272. macoff=96 [ 105.208353][ T5708] usb 2-1: USB disconnect, device number 6 [ 105.237280][ T5788] usb 5-1: New USB device found, idVendor=2c7c, idProduct=0125, bcdDevice= 0.00 [ 105.249538][ T5788] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x83 has invalid wMaxPacketSize 0 [ 105.263075][ T5788] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 105.446527][ T6176] netlink: 12 bytes leftover after parsing attributes in process `syz.3.105'. [ 105.527460][ T5788] qmi_wwan 5-1:1.0: probe with driver qmi_wwan failed with error -71 [ 105.635741][ T6181] 9pnet_fd: p9_fd_create_tcp (6181): problem connecting socket to 127.0.0.1 [ 105.873944][ T6182] netlink: 8 bytes leftover after parsing attributes in process `syz.3.107'. [ 106.008459][ T6182] netlink: 'syz.3.107': attribute type 30 has an invalid length. [ 106.085276][ T5788] usb 5-1: USB disconnect, device number 6 [ 106.096661][ T6183] netlink: 8 bytes leftover after parsing attributes in process `syz.3.107'. [ 106.105702][ T6183] netlink: 'syz.3.107': attribute type 30 has an invalid length. [ 106.126680][ T6182] vxlan0: entered promiscuous mode [ 106.143913][ T6182] vxlan0: entered allmulticast mode [ 106.158859][ T6186] netlink: 24 bytes leftover after parsing attributes in process `syz.3.107'. [ 106.173943][ T6183] vxlan1: entered promiscuous mode [ 106.179129][ T6183] vxlan1: entered allmulticast mode [ 106.186568][ T48] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 106.196385][ T48] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 106.206313][ T48] netdevsim netdevsim3 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 106.226817][ T48] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 106.270480][ T29] kauditd_printk_skb: 15 callbacks suppressed [ 106.270498][ T29] audit: type=1400 audit(1786333693.142:314): avc: denied { prog_run } for pid=6179 comm="syz.3.107" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 106.334684][ T29] audit: type=1400 audit(1786333693.162:315): avc: denied { ioctl } for pid=6179 comm="syz.3.107" path="socket:[9737]" dev="sockfs" ino=9737 ioctlcmd=0x8946 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 106.830429][ T29] audit: type=1400 audit(1786333693.242:316): avc: denied { map_create } for pid=6190 comm="syz.4.110" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 106.889203][ T29] audit: type=1400 audit(1786333693.242:317): avc: denied { map_read map_write } for pid=6190 comm="syz.4.110" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 106.909367][ T29] audit: type=1400 audit(1786333693.762:318): avc: denied { name_connect } for pid=6189 comm="syz.1.109" dest=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=sctp_socket permissive=1 [ 106.935805][ T6197] xt_HMARK: proto mask must be zero with L3 mode [ 106.975766][ T29] audit: type=1400 audit(1786333693.782:319): avc: denied { read } for pid=6189 comm="syz.1.109" lport=2 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 107.040685][ T6204] netlink: 20 bytes leftover after parsing attributes in process `syz.4.112'. [ 107.191563][ T6210] 9pnet_fd: p9_fd_create_tcp (6210): problem connecting socket to 127.0.0.1 [ 107.219764][ T42] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 107.392433][ T42] usb 4-1: device descriptor read/64, error -71 [ 107.682474][ T42] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 107.705886][ T6214] netlink: 32 bytes leftover after parsing attributes in process `syz.1.115'. [ 107.821441][ T42] usb 4-1: device descriptor read/64, error -71 [ 107.826596][ T29] audit: type=1400 audit(1786333694.732:320): avc: denied { ioctl } for pid=6218 comm="syz.4.118" path="socket:[10609]" dev="sockfs" ino=10609 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 107.882837][ T29] audit: type=1400 audit(1786333694.762:321): avc: denied { ioctl } for pid=6218 comm="syz.4.118" path="socket:[10608]" dev="sockfs" ino=10608 ioctlcmd=0x8916 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 107.939023][ T29] audit: type=1400 audit(1786333694.792:322): avc: denied { mount } for pid=6207 comm="syz.0.114" name="/" dev="devtmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=filesystem permissive=1 [ 107.963389][ T42] usb usb4-port1: attempt power cycle [ 108.031197][ T5694] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 108.121619][ T5708] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 108.210558][ T5694] usb 2-1: Using ep0 maxpacket: 32 [ 108.217883][ T5694] usb 2-1: New USB device found, idVendor=8086, idProduct=9500, bcdDevice=93.d8 [ 108.232639][ T5694] usb 2-1: config 0 has an invalid interface number: 1 but max is 0 [ 108.256981][ T6229] 9pnet_fd: p9_fd_create_tcp (6229): problem connecting socket to 127.0.0.1 [ 108.273321][ T24] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 108.294051][ T5694] usb 2-1: config 0 has no interface number 0 [ 108.313364][ T5694] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 108.323573][ T5708] usb 1-1: New USB device found, idVendor=065a, idProduct=0009, bcdDevice= 1.00 [ 108.345972][ T5694] usb 2-1: Product: syz [ 108.350633][ T42] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 108.369859][ T5708] usb 1-1: config 1 interface 0 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 64 [ 108.388067][ T5694] usb 2-1: Manufacturer: syz [ 108.397895][ T5694] usb 2-1: SerialNumber: syz [ 108.404989][ T42] usb 4-1: device descriptor read/8, error -71 [ 108.416782][ T5708] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 108.473670][ T24] usb 3-1: New USB device found, idVendor=045e, idProduct=0775, bcdDevice= 1.00 [ 108.513711][ T6208] raw-gadget.2 gadget.0: fail, usb_ep_enable returned -22 [ 108.529487][ T5694] usb 2-1: config 0 descriptor?? [ 108.554213][ T24] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x86 has invalid maxpacket 8192, setting to 64 [ 108.571251][ T5708] opticon 1-1:1.0: opticon converter detected [ 108.581248][ T24] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=0 [ 108.592908][ T5694] usb 2-1: dvb_usb_v2: found a 'Intel CE9500 reference design' in warm state [ 108.606763][ T24] usb 3-1: Product: syz [ 108.613843][ T5694] usb 2-1: selecting invalid altsetting 1 [ 108.622884][ T5708] usb 1-1: opticon converter now attached to ttyUSB0 [ 108.630232][ T24] usb 3-1: Manufacturer: syz [ 108.635523][ T5694] usb 2-1: dvb_usb_ce6230: usb_set_interface() failed=-22 [ 108.671466][ T24] input: Samsung SUR40 as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/input/input7 [ 108.685855][ T5694] usb 2-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 108.715086][ T5694] dvbdev: DVB: registering new adapter (Intel CE9500 reference design) [ 108.727496][ T5694] usb 2-1: media controller created [ 108.747671][ T5694] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 108.798162][ T6217] netlink: 24 bytes leftover after parsing attributes in process `syz.1.117'. [ 108.840335][ T29] audit: type=1400 audit(1786333695.742:323): avc: denied { read write } for pid=6234 comm="syz.3.124" name="rdma_cm" dev="devtmpfs" ino=1269 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:infiniband_device_t tclass=chr_file permissive=1 [ 109.027627][ T24] usb 3-1: USB disconnect, device number 6 [ 109.049603][ T6235] syz.3.124 uses obsolete (PF_INET,SOCK_PACKET) [ 109.152471][ T6240] netlink: 8 bytes leftover after parsing attributes in process `syz.4.125'. [ 109.292856][ T981] usb 1-1: USB disconnect, device number 5 [ 109.304656][ T981] opticon ttyUSB0: opticon converter now disconnected from ttyUSB0 [ 109.313303][ T981] opticon 1-1:1.0: device disconnected [ 109.400602][ T5708] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 109.525502][ T6243] faux_driver vgem: [drm] Unknown color mode 265; guessing buffer size. [ 109.554700][ T5708] usb 5-1: unable to get BOS descriptor or descriptor too short [ 109.562956][ T5708] usb 5-1: New USB device found, idVendor=1235, idProduct=0010, bcdDevice= 0.40 [ 109.573887][ T5708] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 109.584688][ T5708] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 109.598925][ T5708] usb 5-1: string descriptor 0 read error: -22 [ 109.606217][ T5708] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 109.625478][ T5708] usb 5-1: selecting invalid altsetting 1 [ 109.633711][ T5708] usb 5-1: unit 6 not found! [ 109.832315][ T5694] usb 2-1: dvb_usb_ce6230: usb_control_msg() failed=-110 [ 109.862369][ T5694] zl10353_read_register: readreg error (reg=127, ret==-110) [ 109.879407][ T5694] usb 2-1: dvb_usb_ce6230: usb_set_interface() failed=-71 [ 110.032679][ T5694] usb 2-1: USB disconnect, device number 7 [ 110.036373][ T6257] nbd: must specify at least one socket [ 110.217585][ T6263] IPv6: NLM_F_REPLACE set, but no existing node found! [ 110.394562][ T6271] 9pnet_fd: p9_fd_create_tcp (6271): problem connecting socket to 127.0.0.1 [ 110.807024][ T5708] usb 5-1: 2:0: failed to get current value for ch 0 (-71) [ 110.850446][ T5788] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 110.978408][ T5708] snd-usb-audio 5-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 110.997241][ T5708] usb 5-1: USB disconnect, device number 7 [ 111.013111][ T5788] usb 1-1: Using ep0 maxpacket: 32 [ 111.030965][ T5788] usb 1-1: New USB device found, idVendor=8086, idProduct=9500, bcdDevice=93.d8 [ 111.060693][ T5788] usb 1-1: config 0 has an invalid interface number: 1 but max is 0 [ 111.069460][ T5788] usb 1-1: config 0 has no interface number 0 [ 111.075684][ T10] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 111.087293][ T5788] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 111.095830][ T5788] usb 1-1: Product: syz [ 111.100019][ T5788] usb 1-1: Manufacturer: syz [ 111.110428][ T5788] usb 1-1: SerialNumber: syz [ 111.125024][ T5788] usb 1-1: config 0 descriptor?? [ 111.133802][ T5788] usb 1-1: dvb_usb_v2: found a 'Intel CE9500 reference design' in warm state [ 111.142755][ T5788] usb 1-1: selecting invalid altsetting 1 [ 111.158721][ T5788] usb 1-1: dvb_usb_ce6230: usb_set_interface() failed=-22 [ 111.194273][ T5788] usb 1-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 111.215286][ T5788] dvbdev: DVB: registering new adapter (Intel CE9500 reference design) [ 111.224355][ T5788] usb 1-1: media controller created [ 111.236958][ T10] usb 2-1: New USB device found, idVendor=045e, idProduct=0775, bcdDevice= 1.00 [ 111.261093][ T6290] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(4) [ 111.261345][ T10] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x86 has invalid maxpacket 8192, setting to 64 [ 111.267740][ T6290] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 111.280136][ T6290] vhci_hcd vhci_hcd.0: Device attached [ 111.289716][ T5788] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 111.321008][ T10] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=0 [ 111.335010][ T29] kauditd_printk_skb: 13 callbacks suppressed [ 111.335026][ T29] audit: type=1400 audit(1786333698.242:337): avc: denied { read write } for pid=6264 comm="syz.0.134" name="i2c-1" dev="devtmpfs" ino=2842 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 111.344932][ T10] usb 2-1: Product: syz [ 111.369657][ T10] usb 2-1: Manufacturer: syz [ 111.378085][ T29] audit: type=1400 audit(1786333698.242:338): avc: denied { ioctl open } for pid=6264 comm="syz.0.134" path="/dev/i2c-1" dev="devtmpfs" ino=2842 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 111.519927][ T10] input: Samsung SUR40 as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/input/input8 [ 111.530451][ T5708] usb 39-1: new low-speed USB device number 2 using vhci_hcd [ 111.563361][ T29] audit: type=1400 audit(1786333698.242:339): avc: denied { create } for pid=6264 comm="syz.0.134" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 112.390828][ T6265] usb 1-1: dvb_usb_ce6230: usb_control_msg() failed=-110 [ 112.610223][ T6291] vhci_hcd: connection reset by peer [ 112.660013][ T29] audit: type=1400 audit(1786333698.242:340): avc: denied { setopt } for pid=6264 comm="syz.0.134" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 112.765875][ T29] audit: type=1400 audit(1786333698.392:341): avc: denied { mmap_zero } for pid=6289 comm="syz.3.143" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=memprotect permissive=1 [ 112.856743][ T3312] vhci_hcd vhci_hcd.3: stop threads [ 112.869548][ T29] audit: type=1400 audit(1786333698.412:342): avc: denied { ioctl } for pid=6289 comm="syz.3.143" path="socket:[10849]" dev="sockfs" ino=10849 ioctlcmd=0x8914 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 112.910273][ T3312] vhci_hcd vhci_hcd.3: release socket [ 112.966523][ T3312] vhci_hcd vhci_hcd.3: disconnect device [ 113.078846][ T29] audit: type=1400 audit(1786333698.872:343): avc: denied { allowed } for pid=6297 comm="syz.4.145" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 113.132278][ C0] raw-gadget.1 gadget.0: ignoring, device is not running [ 113.158542][ T29] audit: type=1400 audit(1786333698.892:344): avc: denied { ioctl } for pid=6297 comm="syz.4.145" path="socket:[9935]" dev="sockfs" ino=9935 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 113.174170][ T5788] usb 1-1: dvb_usb_ce6230: usb_control_msg() failed=-32 [ 113.228218][ T29] audit: type=1400 audit(1786333698.962:345): avc: denied { mount } for pid=6297 comm="syz.4.145" name="/" dev="configfs" ino=1056 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=filesystem permissive=1 [ 113.319868][ T29] audit: type=1400 audit(1786333698.962:346): avc: denied { read } for pid=6297 comm="syz.4.145" name="/" dev="configfs" ino=1056 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 114.294462][ T5788] zl10353_read_register: readreg error (reg=127, ret==-32) [ 114.302366][ T5788] usb 1-1: dvb_usb_ce6230: usb_set_interface() failed=-71 [ 114.474087][ T6313] netlink: 4 bytes leftover after parsing attributes in process `syz.0.147'. [ 114.910970][ T6317] netlink: 4 bytes leftover after parsing attributes in process `syz.0.147'. [ 115.078407][ T10] usb 2-1: USB disconnect, device number 8 [ 115.155463][ T5788] usb 1-1: USB disconnect, device number 6 [ 115.429482][ T6348] dvb_demux: dvb_demux_feed_del: feed not in list (type=0 state=0 pid=ffff) [ 115.518985][ T6350] 9pnet_fd: p9_fd_create_tcp (6350): problem connecting socket to 127.0.0.1 [ 116.170516][ T10] usb 2-1: new high-speed USB device number 9 using dummy_hcd [ 116.228619][ T6356] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(4) [ 116.235174][ T6356] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 116.278137][ T6356] vhci_hcd vhci_hcd.0: Device attached [ 116.344737][ T10] usb 2-1: New USB device found, idVendor=18d1, idProduct=1eaf, bcdDevice= 0.00 [ 116.446732][ T10] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 116.547706][ T10] usb 2-1: config 1 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 0 [ 116.670414][ T10] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 116.763533][ T10] usb 2-1: Product: syz [ 116.807066][ T10] usb 2-1: Manufacturer: syz [ 116.860152][ T10] usb 2-1: SerialNumber: syz [ 117.115887][ T6357] vhci_hcd: connection reset by peer [ 117.163985][ T12] vhci_hcd vhci_hcd.3: stop threads [ 117.222757][ T12] vhci_hcd vhci_hcd.3: release socket [ 117.304080][ T12] vhci_hcd vhci_hcd.3: disconnect device [ 117.400521][ T5708] vhci_hcd vhci_hcd.3: vhci_device speed not set [ 117.611054][ T10] usb 2-1: Cannot retrieve CPort count: -110 [ 117.631600][ T5845] usb 5-1: new full-speed USB device number 8 using dummy_hcd [ 117.646332][ T10] usb 2-1: Cannot retrieve CPort count: -110 [ 117.694715][ T10] es2_ap_driver 2-1:1.0: probe with driver es2_ap_driver failed with error -110 [ 117.904175][ T5845] usb 5-1: New USB device found, idVendor=054c, idProduct=06c1, bcdDevice=c2.87 [ 117.923174][ T5845] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0xF has invalid maxpacket 33437, setting to 64 [ 117.950020][ T5845] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 118.422734][ T5845] usb 5-1: Product: syz [ 118.426960][ T5845] usb 5-1: Manufacturer: syz [ 118.431626][ T5845] usb 5-1: SerialNumber: syz [ 118.438832][ T5845] usb 5-1: config 0 descriptor?? [ 118.445642][ T6367] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 118.475977][ C0] port100 5-1:0.0: NFC: Urb failure (status -71) [ 118.480234][ T6381] netlink: 92 bytes leftover after parsing attributes in process `syz.3.162'. [ 118.522858][ T29] kauditd_printk_skb: 12 callbacks suppressed [ 118.522875][ T29] audit: type=1400 audit(1786333705.432:359): avc: denied { append } for pid=6336 comm="syz.1.151" name="btrfs-control" dev="devtmpfs" ino=1313 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:lvm_control_t tclass=chr_file permissive=1 [ 118.553201][ T29] audit: type=1400 audit(1786333705.432:360): avc: denied { open } for pid=6336 comm="syz.1.151" path="/dev/btrfs-control" dev="devtmpfs" ino=1313 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:lvm_control_t tclass=chr_file permissive=1 [ 118.583684][ T29] audit: type=1400 audit(1786333705.462:361): avc: denied { append } for pid=6336 comm="syz.1.151" name="nullb0" dev="devtmpfs" ino=694 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 118.748555][ C0] port100 5-1:0.0: NFC: Urb failure (status -71) [ 118.750083][ T29] audit: type=1800 audit(1786333705.652:362): pid=6387 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.0.164" name="SYSV00000000" dev="tmpfs" ino=0 res=0 errno=0 [ 118.777408][ T5845] port100 5-1:0.0: NFC: Could not get supported command types [ 118.797373][ T5845] usb 5-1: USB disconnect, device number 8 [ 118.870472][ T5603] usb 4-1: new full-speed USB device number 7 using dummy_hcd [ 119.042260][ T5603] usb 4-1: unable to get BOS descriptor or descriptor too short [ 119.050466][ T5603] usb 4-1: not running at top speed; connect to a high speed hub [ 119.058294][ T5603] usb 4-1: New USB device found, idVendor=200c, idProduct=1018, bcdDevice= 0.40 [ 119.068233][ T5603] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 119.078428][ T10] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 119.085921][ T5603] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 119.096801][ T5603] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 119.104847][ T5603] usb 4-1: Product: syz [ 119.108995][ T5603] usb 4-1: Manufacturer: syz [ 119.113603][ T5603] usb 4-1: SerialNumber: syz [ 119.240907][ T10] usb 3-1: New USB device found, idVendor=1235, idProduct=8201, bcdDevice= 1.00 [ 119.251717][ T10] usb 3-1: config index 0 descriptor too short (expected 69, got 51) [ 119.260069][ T10] usb 3-1: config 1 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 97, changing to 10 [ 119.271260][ T10] usb 3-1: config 1 interface 1 altsetting 0 endpoint 0x81 has invalid maxpacket 25466, setting to 1024 [ 119.285910][ T10] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 119.294172][ T10] usb 3-1: Product: syz [ 119.298392][ T10] usb 3-1: Manufacturer: syz [ 119.303078][ T10] usb 3-1: SerialNumber: syz [ 119.321636][ T10] usb 3-1: Focusrite Scarlett Gen 2 Mixer Driver enabled (pid=0x8201); report any issues to https://github.com/geoffreybennett/scarlett-gen2/issues [ 119.383203][ T6394] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 119.542528][ T6398] 9pnet_fd: p9_fd_create_tcp (6398): problem connecting socket to 127.0.0.1 [ 119.586664][ T6389] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 119.613487][ T6389] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 119.622578][ T29] audit: type=1400 audit(1786333706.442:363): avc: denied { write } for pid=6395 comm="syz.4.168" name="001" dev="devtmpfs" ino=746 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 119.920403][ T5708] usb 2-1: USB disconnect, device number 9 [ 120.327997][ T6403] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(4) [ 120.334576][ T6403] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 120.370085][ T6403] vhci_hcd vhci_hcd.0: Device attached [ 121.110436][ T6414] --map-set only usable from mangle table [ 121.260201][ T5845] usb 35-1: new low-speed USB device number 2 using vhci_hcd [ 121.449400][ T5788] usb 5-1: new high-speed USB device number 9 using dummy_hcd [ 121.537326][ T6404] vhci_hcd: connection closed [ 121.564978][ T48] vhci_hcd vhci_hcd.1: stop threads [ 121.680908][ T48] vhci_hcd vhci_hcd.1: release socket [ 121.731299][ T48] vhci_hcd vhci_hcd.1: disconnect device [ 121.977753][ T5845] usb 35-1: enqueue for inactive port 0 [ 122.042251][ T10] usb 3-1: Error initialising Scarlett Gen 2 Mixer Driver: -71 [ 122.056211][ T5845] vhci_hcd vhci_hcd.1: vhci_device speed not set [ 122.130997][ T5788] usb 5-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 122.147982][ T10] snd-usb-audio 3-1:1.0: probe with driver snd-usb-audio failed with error -71 [ 122.165015][ T5603] usb 4-1: 3:0: failed to get current value for ch 0 (-71) [ 122.181993][ T5788] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 122.194371][ T5788] usb 5-1: Product: syz [ 122.214376][ T5603] usb 4-1: 3:0: cannot get min/max values for control 2 (id 3) [ 122.222842][ T10] usb 3-1: USB disconnect, device number 7 [ 122.309588][ T6423] 9pnet_fd: p9_fd_create_tcp (6423): problem connecting socket to 127.0.0.1 [ 122.753682][ T5788] usb 5-1: Manufacturer: syz [ 122.758575][ T5603] usb 4-1: Warning! Unlikely small volume range (=1), linear volume or custom curve? [ 122.768128][ T5788] usb 5-1: SerialNumber: syz [ 123.168042][ T5603] usb 4-1: [3] FU [LFE Playback Volume] ch = 1, val = 0/1/1 [ 123.177078][ T5603] usb 4-1: 3:0: cannot get min/max values for control 3 (id 3) [ 123.189360][ T5603] usb 4-1: 3:0: cannot get min/max values for control 4 (id 3) [ 123.189930][ T5886] udevd[5886]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 123.205142][ T5603] usb 4-1: 3:0: cannot get min/max values for control 5 (id 3) [ 123.235494][ T5603] usb 4-1: 3:0: failed to get current value for ch 0 (-71) [ 123.260544][ T5603] usb 4-1: 3:0: cannot get min/max values for control 8 (id 3) [ 123.423107][ T5788] lan78xx 5-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -EPROTO [ 123.436838][ T5788] lan78xx 5-1:1.0 (unnamed net_device) (uninitialized): lan78xx_setup_irq_domain() failed : -71 [ 123.453105][ T5788] lan78xx 5-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 123.473518][ T5603] usb 4-1: 3:0: cannot get min/max values for control 3 (id 3) [ 123.485192][ T5788] lan78xx 5-1:1.0: probe with driver lan78xx failed with error -71 [ 123.498056][ T5603] usb 4-1: 3:0: cannot get min/max values for control 5 (id 3) [ 123.898774][ T29] audit: type=1400 audit(1786333710.802:364): avc: denied { getopt } for pid=6442 comm="syz.3.179" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 123.917094][ T5788] usb 5-1: USB disconnect, device number 9 [ 123.994160][ T5603] usb 4-1: USB disconnect, device number 7 [ 124.040443][ T10] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 124.093122][ T29] audit: type=1400 audit(1786333710.992:365): avc: denied { getopt } for pid=6454 comm="syz.4.180" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 124.146965][ T29] audit: type=1400 audit(1786333711.002:366): avc: denied { watch } for pid=6454 comm="syz.4.180" path="/29" dev="tmpfs" ino=179 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 124.253442][ T10] usb 3-1: New USB device found, idVendor=045e, idProduct=0775, bcdDevice= 1.00 [ 124.255072][ T6308] udevd[6308]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 124.275490][ T10] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x86 has invalid maxpacket 8192, setting to 64 [ 124.296703][ T6458] FAULT_INJECTION: forcing a failure. [ 124.296703][ T6458] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 124.319552][ T6458] CPU: 0 UID: 0 PID: 6458 Comm: syz.0.181 Not tainted syzkaller #0 PREEMPT(full) [ 124.319575][ T6458] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 124.319584][ T6458] Call Trace: [ 124.319590][ T6458] [ 124.319596][ T6458] dump_stack_lvl+0x100/0x190 [ 124.319623][ T6458] should_fail_ex.cold+0x5/0xa [ 124.319646][ T6458] _copy_from_user+0x2e/0xd0 [ 124.319670][ T6458] copy_from_sockptr_offset.constprop.0+0x12c/0x150 [ 124.319697][ T6458] ? __pfx_copy_from_sockptr_offset.constprop.0+0x10/0x10 [ 124.319729][ T6458] do_sock_getsockopt+0x530/0x6e0 [ 124.319753][ T6458] ? __lock_acquire+0x49f/0x1a40 [ 124.319776][ T6458] ? __pfx_do_sock_getsockopt+0x10/0x10 [ 124.319800][ T6458] ? rcu_read_lock_any_held+0x6a/0xa0 [ 124.319823][ T6458] ? find_held_lock+0x2b/0x80 [ 124.319844][ T6458] ? __fget_files+0x21f/0x3d0 [ 124.319868][ T6458] __sys_getsockopt+0x148/0x260 [ 124.319894][ T6458] ? __x64_sys_getsockopt+0xbd/0x160 [ 124.319913][ T6458] __x64_sys_getsockopt+0xbd/0x160 [ 124.319932][ T6458] ? do_syscall_64+0x90/0x870 [ 124.319953][ T6458] ? lockdep_hardirqs_on+0x78/0x100 [ 124.319973][ T6458] do_syscall_64+0x115/0x870 [ 124.319993][ T6458] ? clear_bhb_loop+0x70/0xc0 [ 124.320012][ T6458] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 124.320029][ T6458] RIP: 0033:0x7f57fcf9e0d9 [ 124.320044][ T6458] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 124.320058][ T6458] RSP: 002b:00007f57fdec5028 EFLAGS: 00000246 ORIG_RAX: 0000000000000037 [ 124.320074][ T6458] RAX: ffffffffffffffda RBX: 00007f57fd225fa0 RCX: 00007f57fcf9e0d9 [ 124.320084][ T6458] RDX: 0000000000000063 RSI: 0000000000000000 RDI: 0000000000000003 [ 124.320093][ T6458] RBP: 00007f57fdec5090 R08: 0000200000000100 R09: 0000000000000000 [ 124.320102][ T6458] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000001 [ 124.320112][ T6458] R13: 00007f57fd226038 R14: 00007f57fd225fa0 R15: 00007ffc3b9344e8 [ 124.320133][ T6458] [ 124.584609][ T6464] 9pnet_fd: p9_fd_create_tcp (6464): problem connecting socket to 127.0.0.1 [ 124.600131][ T5694] usb 2-1: new full-speed USB device number 10 using dummy_hcd [ 124.772590][ T5694] usb 2-1: New USB device found, idVendor=1a86, idProduct=e092, bcdDevice=53.3f [ 124.787686][ T5694] usb 2-1: config 2 has an invalid descriptor of length 0, skipping remainder of the config [ 124.816384][ T5694] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 124.825305][ T5694] usb 2-1: Product: syz [ 124.844657][ T5694] usb 2-1: Manufacturer: syz [ 124.877153][ T5694] usb 2-1: SerialNumber: syz [ 124.985075][ T10] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=0 [ 124.993473][ T10] usb 3-1: Product: syz [ 124.998131][ T10] usb 3-1: Manufacturer: syz [ 125.012226][ T5694] ch9200 2-1:2.0: probe with driver ch9200 failed with error -22 [ 125.022235][ T10] input: Samsung SUR40 as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/input/input9 [ 125.050447][ T5788] usb 5-1: new high-speed USB device number 10 using dummy_hcd [ 125.180476][ T29] audit: type=1400 audit(1786333712.072:367): avc: denied { cmd } for pid=6470 comm="syz.0.184" path="socket:[11098]" dev="sockfs" ino=11098 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 125.203567][ T5788] usb 5-1: Using ep0 maxpacket: 32 [ 125.207782][ T5788] usb 5-1: New USB device found, idVendor=0572, idProduct=58a5, bcdDevice=27.0a [ 125.231979][ T5788] usb 5-1: config 0 has an invalid interface number: 1 but max is 0 [ 125.256062][ T5788] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 125.267432][ T5788] usb 5-1: config 0 has no interface number 0 [ 125.276912][ T5788] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 125.287630][ T5788] usb 5-1: Product: syz [ 125.304712][ T5788] usb 5-1: Manufacturer: syz [ 125.305903][ T6434] 8021q: VLANs not supported on sit0 [ 125.309602][ T29] audit: type=1400 audit(1786333712.212:368): avc: denied { ioctl } for pid=6433 comm="syz.1.177" path="socket:[11395]" dev="sockfs" ino=11395 ioctlcmd=0x8983 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 125.313873][ T5788] usb 5-1: SerialNumber: syz [ 125.347673][ T5694] usb 2-1: USB disconnect, device number 10 [ 125.359257][ T5788] usb 5-1: config 0 descriptor?? [ 125.369077][ T5788] cx231xx 5-1:0.1: New device syz syz @ 480 Mbps (0572:58a5) with 1 interfaces [ 125.379650][ T5788] cx231xx 5-1:0.1: Not found matching IAD interface [ 125.393502][ T10] usb 3-1: USB disconnect, device number 8 [ 125.400485][ T5603] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 125.551825][ T5603] usb 1-1: New USB device found, idVendor=0af0, idProduct=7a05, bcdDevice=f6.00 [ 125.577240][ T5603] usb 1-1: New USB device strings: Mfr=0, Product=2, SerialNumber=3 [ 125.599006][ T6455] Invalid source name [ 125.599349][ T5603] usb 1-1: Product: syz [ 125.612957][ T5788] usb 5-1: USB disconnect, device number 10 [ 125.629768][ T5603] usb 1-1: SerialNumber: syz [ 125.641531][ T5603] usb 1-1: config 0 descriptor?? [ 126.262914][ T5788] usb 1-1: USB disconnect, device number 7 [ 127.040894][ T6501] FAULT_INJECTION: forcing a failure. [ 127.040894][ T6501] name failslab, interval 1, probability 0, space 0, times 0 [ 127.060598][ T6501] CPU: 1 UID: 0 PID: 6501 Comm: syz.0.194 Not tainted syzkaller #0 PREEMPT(full) [ 127.060622][ T6501] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 127.060630][ T6501] Call Trace: [ 127.060635][ T6501] [ 127.060640][ T6501] dump_stack_lvl+0x100/0x190 [ 127.060664][ T6501] should_fail_ex.cold+0x5/0xa [ 127.060687][ T6501] should_failslab+0xc2/0x120 [ 127.060708][ T6501] __kmalloc_noprof+0xfc/0x820 [ 127.060725][ T6501] ? rcu_is_watching+0x12/0xc0 [ 127.060748][ T6501] ? tomoyo_realpath_from_path+0xb6/0x690 [ 127.060769][ T6501] tomoyo_realpath_from_path+0xb6/0x690 [ 127.060790][ T6501] tomoyo_path_number_perm+0x23c/0x580 [ 127.060811][ T6501] ? tomoyo_path_number_perm+0x22e/0x580 [ 127.060836][ T6501] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 127.060882][ T6501] ? find_held_lock+0x2b/0x80 [ 127.060895][ T6501] ? __fget_files+0x215/0x3d0 [ 127.060910][ T6501] ? hook_file_ioctl_common+0x140/0x440 [ 127.060926][ T6501] ? __fget_files+0x215/0x3d0 [ 127.060944][ T6501] ? __fget_files+0x21f/0x3d0 [ 127.060963][ T6501] security_file_ioctl+0xd3/0x230 [ 127.060987][ T6501] __x64_sys_ioctl+0xb7/0x210 [ 127.061010][ T6501] do_syscall_64+0x115/0x870 [ 127.061030][ T6501] ? clear_bhb_loop+0x70/0xc0 [ 127.061048][ T6501] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 127.061064][ T6501] RIP: 0033:0x7f57fcf9e0d9 [ 127.061079][ T6501] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 127.061094][ T6501] RSP: 002b:00007f57fdec5028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 127.061110][ T6501] RAX: ffffffffffffffda RBX: 00007f57fd225fa0 RCX: 00007f57fcf9e0d9 [ 127.061120][ T6501] RDX: 0000200000000000 RSI: 0000000000008b26 RDI: 000000000000000a [ 127.061130][ T6501] RBP: 00007f57fdec5090 R08: 0000000000000000 R09: 0000000000000000 [ 127.061139][ T6501] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 127.061148][ T6501] R13: 00007f57fd226038 R14: 00007f57fd225fa0 R15: 00007ffc3b9344e8 [ 127.061171][ T6501] [ 127.065400][ T6501] ERROR: Out of memory at tomoyo_realpath_from_path. [ 127.073531][ T5788] usb 3-1: new high-speed USB device number 9 using dummy_hcd [ 127.379204][ T6509] 9pnet_fd: p9_fd_create_tcp (6509): problem connecting socket to 127.0.0.1 [ 127.431426][ T1301] ieee802154 phy0 wpan0: encryption failed: -22 [ 127.437855][ T1301] ieee802154 phy1 wpan1: encryption failed: -22 [ 127.949567][ T6514] tipc: Started in network mode [ 127.962676][ T5788] usb 3-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 127.975062][ T6514] tipc: Node identity 9effd1a78bb9, cluster identity 4711 [ 128.002982][ T5788] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 128.016288][ T6514] tipc: Enabled bearer , priority 0 [ 128.025126][ T6514] netlink: 8 bytes leftover after parsing attributes in process `syz.4.196'. [ 128.035291][ T5788] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 128.173763][ T5788] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 128.185081][ T5788] usb 3-1: config 0 descriptor?? [ 128.521639][ T5603] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 128.691034][ T5603] usb 1-1: New USB device found, idVendor=045e, idProduct=0775, bcdDevice= 1.00 [ 128.700437][ T24] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 128.701483][ T5603] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x86 has invalid maxpacket 8192, setting to 64 [ 128.720506][ T5603] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=0 [ 128.728554][ T5603] usb 1-1: Product: syz [ 128.732760][ T5603] usb 1-1: Manufacturer: syz [ 128.753431][ T6513] tipc: Disabling bearer [ 128.766029][ T5603] input: Samsung SUR40 as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/input/input10 [ 128.860569][ T24] usb 4-1: Using ep0 maxpacket: 8 [ 128.874487][ T24] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 128.888579][ T24] usb 4-1: config index 0 descriptor too short (expected 301, got 45) [ 128.936733][ T24] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 128.943336][ T5788] usb 3-1: language id specifier not provided by device, defaulting to English [ 128.965402][ T24] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 128.975930][ T24] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 128.986230][ T24] usb 4-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 129.005741][ T24] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 129.057733][ T6531] netlink: 8 bytes leftover after parsing attributes in process `syz.1.203'. [ 129.073150][ T5603] usb 1-1: USB disconnect, device number 8 [ 129.294090][ T24] usb 4-1: usb_control_msg returned -32 [ 129.305409][ T24] usbtmc 4-1:16.0: can't read capabilities [ 129.340497][ T29] audit: type=1400 audit(1786333716.202:369): avc: denied { search } for pid=6522 comm="syz.3.201" name="/" dev="configfs" ino=1056 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 129.370589][ T29] audit: type=1400 audit(1786333716.202:370): avc: denied { search } for pid=6522 comm="syz.3.201" name="usb_gadget" dev="configfs" ino=211 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 129.663301][ T6496] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 129.758136][ T6496] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 129.790285][ T29] audit: type=1400 audit(1786333716.692:371): avc: denied { read write } for pid=6495 comm="syz.2.192" name="usbmon7" dev="devtmpfs" ino=741 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 129.820060][ T6523] syzkaller0: entered promiscuous mode [ 129.844579][ T6523] syzkaller0: entered allmulticast mode [ 129.860167][ T29] audit: type=1400 audit(1786333716.692:372): avc: denied { open } for pid=6495 comm="syz.2.192" path="/dev/usbmon7" dev="devtmpfs" ino=741 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 129.985917][ T5788] uclogic 0003:256C:006D.0001: v1 frame probing failed: -71 [ 130.012803][ T5788] uclogic 0003:256C:006D.0001: failed probing parameters: -71 [ 130.024205][ T6546] netlink: 20 bytes leftover after parsing attributes in process `syz.0.206'. [ 130.118508][ T5845] usb 4-1: USB disconnect, device number 8 [ 130.145078][ T5788] uclogic 0003:256C:006D.0001: probe with driver uclogic failed with error -71 [ 130.196399][ T5788] usb 3-1: USB disconnect, device number 9 [ 130.341768][ T29] audit: type=1400 audit(1786333717.242:373): avc: denied { write } for pid=6547 comm="syz.4.207" path="socket:[12291]" dev="sockfs" ino=12291 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 130.378287][ T6552] netlink: 8 bytes leftover after parsing attributes in process `syz.1.209'. [ 130.492407][ T6558] 9pnet_fd: p9_fd_create_tcp (6558): problem connecting socket to 127.0.0.1 [ 131.012297][ T6561] netlink: 4 bytes leftover after parsing attributes in process `syz.2.213'. [ 131.021959][ T6561] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 131.087140][ T6563] tipc: Started in network mode [ 131.092180][ T6563] tipc: Node identity 8a22df661c9e, cluster identity 4711 [ 131.099755][ T6563] tipc: Enabled bearer , priority 0 [ 131.108102][ T5845] usb 5-1: new high-speed USB device number 11 using dummy_hcd [ 131.135233][ T6563] netlink: 8 bytes leftover after parsing attributes in process `syz.1.212'. [ 131.187777][ T29] audit: type=1400 audit(1786333718.092:374): avc: denied { read write } for pid=6569 comm="syz.3.216" name="sg0" dev="devtmpfs" ino=717 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 131.241157][ T29] audit: type=1400 audit(1786333718.092:375): avc: denied { open } for pid=6569 comm="syz.3.216" path="/dev/sg0" dev="devtmpfs" ino=717 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 131.283554][ T5845] usb 5-1: New USB device found, idVendor=174c, idProduct=55aa, bcdDevice= 1.00 [ 131.313244][ T29] audit: type=1400 audit(1786333718.092:376): avc: denied { ioctl } for pid=6569 comm="syz.3.216" path="/dev/sg0" dev="devtmpfs" ino=717 ioctlcmd=0x227b scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 131.351386][ T5845] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 131.359482][ T5845] usb 5-1: Product: syz [ 131.363967][ T5845] usb 5-1: Manufacturer: syz [ 131.368618][ T5845] usb 5-1: SerialNumber: syz [ 131.397051][ T5845] usb 5-1: UAS is ignored for this device, using usb-storage instead [ 131.411154][ T5845] usb 5-1: UAS is ignored for this device, using usb-storage instead [ 131.420782][ T5845] usb-storage 5-1:1.0: USB Mass Storage device detected [ 131.438097][ T5845] usb-storage 5-1:1.0: Quirks match for vid 174c pid 55aa: 400000 [ 131.448074][ T5845] scsi host1: usb-storage 5-1:1.0 [ 131.475024][ T29] audit: type=1400 audit(1786333718.382:377): avc: denied { bind } for pid=6573 comm="syz.0.217" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 131.480083][ T6579] binder: 6573:6579 ioctl 4018620d 0 returned -22 [ 131.650676][ T42] usb 5-1: USB disconnect, device number 11 [ 131.862103][ T6562] tipc: Disabling bearer [ 132.443241][ T6574] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 132.654528][ T6600] FAULT_INJECTION: forcing a failure. [ 132.654528][ T6600] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 132.674129][ T6600] CPU: 1 UID: 0 PID: 6600 Comm: syz.1.223 Not tainted syzkaller #0 PREEMPT(full) [ 132.674154][ T6600] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 132.674164][ T6600] Call Trace: [ 132.674170][ T6600] [ 132.674177][ T6600] dump_stack_lvl+0x100/0x190 [ 132.674204][ T6600] should_fail_ex.cold+0x5/0xa [ 132.674244][ T6600] _copy_to_user+0x32/0xd0 [ 132.674278][ T6600] simple_read_from_buffer+0xcb/0x170 [ 132.674299][ T6600] proc_fail_nth_read+0x1af/0x230 [ 132.674329][ T6600] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 132.674358][ T6600] ? rw_verify_area+0xce/0x6d0 [ 132.674382][ T6600] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 132.674409][ T6600] vfs_read+0x1e4/0xb40 [ 132.674439][ T6600] ? __pfx_vfs_read+0x10/0x10 [ 132.674464][ T6600] ? __fget_files+0x215/0x3d0 [ 132.674489][ T6600] ? __fget_files+0x21f/0x3d0 [ 132.674514][ T6600] ksys_read+0x12a/0x250 [ 132.674529][ T6600] ? __pfx_ksys_read+0x10/0x10 [ 132.674552][ T6600] do_syscall_64+0x115/0x870 [ 132.674574][ T6600] ? clear_bhb_loop+0x70/0xc0 [ 132.674596][ T6600] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 132.674614][ T6600] RIP: 0033:0x7fa99f55e90e [ 132.674629][ T6600] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 132.674645][ T6600] RSP: 002b:00007fa9a03a0fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 132.674662][ T6600] RAX: ffffffffffffffda RBX: 00007fa9a03a16c0 RCX: 00007fa99f55e90e [ 132.674673][ T6600] RDX: 000000000000000f RSI: 00007fa9a03a10a0 RDI: 0000000000000004 [ 132.674683][ T6600] RBP: 00007fa9a03a1090 R08: 0000000000000000 R09: 0000000000000000 [ 132.674692][ T6600] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 132.674702][ T6600] R13: 00007fa99f826038 R14: 00007fa99f825fa0 R15: 00007ffec7d22d78 [ 132.674727][ T6600] [ 132.915876][ T6604] netlink: 'syz.2.221': attribute type 12 has an invalid length. [ 132.969996][ T6606] netlink: 8 bytes leftover after parsing attributes in process `syz.1.226'. [ 133.005762][ T6606] netlink: 8 bytes leftover after parsing attributes in process `syz.1.226'. [ 133.037229][ T29] audit: type=1400 audit(1786333719.942:378): avc: denied { read } for pid=6611 comm="syz.4.225" name="event2" dev="devtmpfs" ino=921 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 133.140089][ T6615] 9pnet_fd: p9_fd_create_tcp (6615): problem connecting socket to 127.0.0.1 [ 133.529122][ T5694] usb 5-1: new high-speed USB device number 12 using dummy_hcd [ 133.690528][ T5694] usb 5-1: Using ep0 maxpacket: 8 [ 133.707963][ T5694] usb 5-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2e.04 [ 133.749513][ T5694] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 133.758486][ T5694] usb 5-1: Product: syz [ 133.764306][ T5694] usb 5-1: Manufacturer: syz [ 133.772955][ T5694] usb 5-1: SerialNumber: syz [ 133.827521][ T5694] usb 5-1: config 0 descriptor?? [ 134.119926][ T5694] usb 5-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 134.155032][ T6626] tipc: Started in network mode [ 134.160102][ T6626] tipc: Node identity 26141ad0acdf, cluster identity 4711 [ 134.168253][ T6626] tipc: Enabled bearer , priority 0 [ 134.176823][ T6626] netlink: 8 bytes leftover after parsing attributes in process `syz.3.230'. [ 134.438097][ T5694] dvb_usb_rtl28xxu 5-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71 [ 134.463287][ T5694] usb 5-1: USB disconnect, device number 12 [ 135.136138][ T6625] tipc: Disabling bearer [ 135.151546][ T29] kauditd_printk_skb: 4 callbacks suppressed [ 135.151561][ T29] audit: type=1400 audit(1786333722.062:383): avc: denied { map } for pid=6635 comm="syz.2.233" path="/dev/binderfs/binder0" dev="binder" ino=7 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 135.204661][ T29] audit: type=1400 audit(1786333722.092:384): avc: denied { append } for pid=6635 comm="syz.2.233" name="001" dev="devtmpfs" ino=749 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 135.229111][ T29] audit: type=1400 audit(1786333722.092:385): avc: denied { connect } for pid=6635 comm="syz.2.233" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 135.252226][ T29] audit: type=1400 audit(1786333722.092:386): avc: denied { write } for pid=6635 comm="syz.2.233" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 135.280752][ T29] audit: type=1400 audit(1786333722.102:387): avc: denied { call } for pid=6635 comm="syz.2.233" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=binder permissive=1 [ 135.300543][ T29] audit: type=1400 audit(1786333722.102:388): avc: denied { transfer } for pid=6635 comm="syz.2.233" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=binder permissive=1 [ 135.510486][ T5845] usb 1-1: new high-speed USB device number 9 using dummy_hcd [ 136.570424][ T5845] usb 1-1: Using ep0 maxpacket: 8 [ 136.586098][ T5845] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 136.599936][ T5845] usb 1-1: config index 0 descriptor too short (expected 301, got 45) [ 137.233555][ T6664] 9pnet_fd: p9_fd_create_tcp (6664): problem connecting socket to 127.0.0.1 [ 137.561825][ T5845] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 137.573003][ T5845] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 137.582802][ T5845] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 137.584463][ T6662] 9pnet_fd: p9_fd_create_tcp (6662): problem connecting socket to 127.0.0.1 [ 137.593869][ T5845] usb 1-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 137.615480][ T5845] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 137.822322][ T6675] netlink: 24 bytes leftover after parsing attributes in process `syz.4.247'. [ 137.855386][ T6677] FAULT_INJECTION: forcing a failure. [ 137.855386][ T6677] name failslab, interval 1, probability 0, space 0, times 0 [ 137.888707][ T5845] usb 1-1: usb_control_msg returned -32 [ 137.895789][ T6677] CPU: 1 UID: 0 PID: 6677 Comm: syz.1.248 Not tainted syzkaller #0 PREEMPT(full) [ 137.895814][ T6677] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 137.895824][ T6677] Call Trace: [ 137.895830][ T6677] [ 137.895837][ T6677] dump_stack_lvl+0x100/0x190 [ 137.895865][ T6677] should_fail_ex.cold+0x5/0xa [ 137.895885][ T6677] ? __pfx_ref_tracker_alloc+0x10/0x10 [ 137.895913][ T6677] should_failslab+0xc2/0x120 [ 137.895938][ T6677] kmem_cache_alloc_noprof+0x91/0x6a0 [ 137.895961][ T6677] ? skb_clone+0x190/0x400 [ 137.895989][ T6677] skb_clone+0x190/0x400 [ 137.896012][ T6677] netlink_deliver_tap+0xaed/0xcc0 [ 137.896037][ T6677] netlink_unicast+0x62b/0x850 [ 137.896061][ T6677] ? __pfx_netlink_unicast+0x10/0x10 [ 137.896080][ T6677] ? __pfx_sock_has_perm+0x10/0x10 [ 137.896109][ T6677] netlink_sendmsg+0x8b0/0xda0 [ 137.896137][ T6677] ? __pfx_netlink_sendmsg+0x10/0x10 [ 137.896159][ T6677] ? selinux_socket_sendmsg+0x198/0x2f0 [ 137.896189][ T6677] ____sys_sendmsg+0xa4d/0xbe0 [ 137.896215][ T6677] ? __pfx_netlink_sendmsg+0x10/0x10 [ 137.896236][ T6677] ? __pfx_____sys_sendmsg+0x10/0x10 [ 137.896276][ T6677] ___sys_sendmsg+0x190/0x1e0 [ 137.896295][ T6677] ? __pfx____sys_sendmsg+0x10/0x10 [ 137.896311][ T6677] ? __lock_acquire+0x49f/0x1a40 [ 137.896334][ T6677] ? get_pid_task+0x106/0x250 [ 137.896379][ T6677] __sys_sendmsg+0x160/0x210 [ 137.896403][ T6677] ? __pfx___sys_sendmsg+0x10/0x10 [ 137.896436][ T6677] do_syscall_64+0x115/0x870 [ 137.896458][ T6677] ? clear_bhb_loop+0x70/0xc0 [ 137.896477][ T6677] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 137.896493][ T6677] RIP: 0033:0x7fa99f59e0d9 [ 137.896509][ T6677] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 137.896525][ T6677] RSP: 002b:00007fa9a03a1028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 137.896541][ T6677] RAX: ffffffffffffffda RBX: 00007fa99f825fa0 RCX: 00007fa99f59e0d9 [ 137.896552][ T6677] RDX: 0000000000004000 RSI: 0000200000000200 RDI: 0000000000000007 [ 137.896561][ T6677] RBP: 00007fa9a03a1090 R08: 0000000000000000 R09: 0000000000000000 [ 137.896572][ T6677] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 137.896581][ T6677] R13: 00007fa99f826038 R14: 00007fa99f825fa0 R15: 00007ffec7d22d78 [ 137.896603][ T6677] [ 137.897263][ T6641] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 138.140343][ T5845] usbtmc 1-1:16.0: can't read capabilities [ 138.142045][ T6641] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 138.472986][ T29] audit: type=1400 audit(1786333725.382:389): avc: denied { create } for pid=6640 comm="syz.0.235" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 138.517189][ T29] audit: type=1400 audit(1786333725.412:390): avc: denied { connect } for pid=6640 comm="syz.0.235" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 138.537463][ T29] audit: type=1400 audit(1786333725.422:391): avc: denied { write } for pid=6640 comm="syz.0.235" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 138.979286][ T981] usb 1-1: USB disconnect, device number 9 [ 140.011340][ T29] audit: type=1400 audit(1786333726.892:392): avc: denied { write } for pid=6708 comm="syz.4.257" name="uinput" dev="devtmpfs" ino=919 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 140.075102][ T6713] FAULT_INJECTION: forcing a failure. [ 140.075102][ T6713] name failslab, interval 1, probability 0, space 0, times 0 [ 140.112202][ T6713] CPU: 1 UID: 0 PID: 6713 Comm: syz.3.259 Not tainted syzkaller #0 PREEMPT(full) [ 140.112227][ T6713] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 140.112237][ T6713] Call Trace: [ 140.112242][ T6713] [ 140.112248][ T6713] dump_stack_lvl+0x100/0x190 [ 140.112274][ T6713] should_fail_ex.cold+0x5/0xa [ 140.112294][ T6713] should_failslab+0xc2/0x120 [ 140.112317][ T6713] __kmalloc_node_noprof+0x101/0x830 [ 140.112338][ T6713] ? crypto_create_tfm_node+0x8d/0x3b0 [ 140.112364][ T6713] crypto_create_tfm_node+0x8d/0x3b0 [ 140.112387][ T6713] crypto_alloc_tfm_node+0x102/0x260 [ 140.112411][ T6713] __keyctl_dh_compute+0x2b7/0x10d0 [ 140.112429][ T6713] ? find_held_lock+0x2b/0x80 [ 140.112444][ T6713] ? get_pid_task+0xfc/0x250 [ 140.112458][ T6713] ? get_pid_task+0xfc/0x250 [ 140.112475][ T6713] ? __pfx___keyctl_dh_compute+0x10/0x10 [ 140.112493][ T6713] ? __lock_acquire+0x49f/0x1a40 [ 140.112513][ T6713] ? proc_fail_nth_write+0x9f/0x220 [ 140.112553][ T6713] keyctl_dh_compute+0xd9/0x140 [ 140.112570][ T6713] ? __pfx_keyctl_dh_compute+0x10/0x10 [ 140.112600][ T6713] ? ksys_write+0x1ac/0x250 [ 140.112615][ T6713] ? __pfx_ksys_write+0x10/0x10 [ 140.112633][ T6713] __do_sys_keyctl+0x464/0x5a0 [ 140.112656][ T6713] do_syscall_64+0x115/0x870 [ 140.112678][ T6713] ? clear_bhb_loop+0x70/0xc0 [ 140.112697][ T6713] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 140.112717][ T6713] RIP: 0033:0x7fb7e9b9e0d9 [ 140.112732][ T6713] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 140.112748][ T6713] RSP: 002b:00007fb7ea9c5028 EFLAGS: 00000246 ORIG_RAX: 00000000000000fa [ 140.112765][ T6713] RAX: ffffffffffffffda RBX: 00007fb7e9e25fa0 RCX: 00007fb7e9b9e0d9 [ 140.112776][ T6713] RDX: 0000000000000000 RSI: 0000200000000800 RDI: 0000000000000017 [ 140.112787][ T6713] RBP: 00007fb7ea9c5090 R08: 0000200000000280 R09: 0000000000000000 [ 140.112797][ T6713] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 140.112807][ T6713] R13: 00007fb7e9e26038 R14: 00007fb7e9e25fa0 R15: 00007ffc8309d748 [ 140.112829][ T6713] [ 140.112846][ T6713] could not allocate digest TFM handle sha384 [ 140.117502][ T6715] netlink: 8 bytes leftover after parsing attributes in process `syz.0.260'. [ 140.123479][ T6709] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 140.362241][ T981] usb 2-1: new high-speed USB device number 11 using dummy_hcd [ 140.481635][ T29] kauditd_printk_skb: 1 callbacks suppressed [ 140.481651][ T29] audit: type=1400 audit(1786333727.392:394): avc: denied { create } for pid=6720 comm="syz.3.263" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 140.507024][ T5708] usb 3-1: new high-speed USB device number 10 using dummy_hcd [ 140.509087][ T29] audit: type=1400 audit(1786333727.392:395): avc: denied { write } for pid=6720 comm="syz.3.263" path="socket:[11892]" dev="sockfs" ino=11892 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 140.530929][ T981] usb 2-1: New USB device found, idVendor=045e, idProduct=0775, bcdDevice= 1.00 [ 140.564161][ T981] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x86 has invalid maxpacket 8192, setting to 64 [ 140.597089][ T981] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=0 [ 140.616581][ T981] usb 2-1: Product: syz [ 140.620848][ T981] usb 2-1: Manufacturer: syz [ 140.645944][ T981] input: Samsung SUR40 as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/input/input12 [ 140.671973][ T5708] usb 3-1: New USB device found, idVendor=045e, idProduct=0775, bcdDevice= 1.00 [ 140.705560][ T5708] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x86 has invalid maxpacket 8192, setting to 64 [ 140.730504][ T6730] 9pnet_fd: p9_fd_create_tcp (6730): problem connecting socket to 127.0.0.1 [ 140.770946][ T5708] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=0 [ 140.779737][ T5708] usb 3-1: Product: syz [ 140.785776][ T5708] usb 3-1: Manufacturer: syz [ 141.131854][ T5708] input: Samsung SUR40 as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/input/input13 [ 141.161055][ T981] usb 2-1: USB disconnect, device number 11 [ 141.195772][ T5708] videodev: could not get a free minor [ 141.210457][ T5708] sur40 3-1:1.0: Unable to register video subdevice. [ 141.243787][ T5708] sur40 3-1:1.0: probe with driver sur40 failed with error -23 [ 141.294028][ T5708] usb 3-1: USB disconnect, device number 10 [ 141.342767][ T5886] ================================================================== [ 141.350864][ T5886] BUG: KASAN: slab-use-after-free in sur40_open+0x46c/0x500 [ 141.358156][ T5886] Read of size 8 at addr ffff888022356000 by task udevd/5886 [ 141.365522][ T5886] [ 141.367840][ T5886] CPU: 1 UID: 0 PID: 5886 Comm: udevd Not tainted syzkaller #0 PREEMPT(full) [ 141.367861][ T5886] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 141.367871][ T5886] Call Trace: [ 141.367876][ T5886] [ 141.367882][ T5886] dump_stack_lvl+0x100/0x190 [ 141.367906][ T5886] print_report+0x13d/0x4b0 [ 141.367930][ T5886] ? __virt_addr_valid+0x239/0x430 [ 141.367952][ T5886] ? sur40_open+0x46c/0x500 [ 141.367970][ T5886] kasan_report+0xdf/0x1c0 [ 141.367993][ T5886] ? sur40_open+0x46c/0x500 [ 141.368013][ T5886] ? __pfx_sur40_open+0x10/0x10 [ 141.368031][ T5886] sur40_open+0x46c/0x500 [ 141.368049][ T5886] input_open_device+0x24c/0x3d0 [ 141.368073][ T5886] evdev_open+0x52f/0x690 [ 141.368097][ T5886] ? __pfx_evdev_open+0x10/0x10 [ 141.368119][ T5886] chrdev_open+0x234/0x6a0 [ 141.368137][ T5886] ? __pfx_chrdev_open+0x10/0x10 [ 141.368155][ T5886] ? fsnotify_open_perm_and_set_mode+0x17a/0xa80 [ 141.368180][ T5886] do_dentry_open+0x6ab/0x14d0 [ 141.368195][ T5886] ? __pfx_chrdev_open+0x10/0x10 [ 141.368213][ T5886] vfs_open+0x82/0x3f0 [ 141.368234][ T5886] path_openat+0x2873/0x4280 [ 141.368257][ T5886] ? __pfx_path_openat+0x10/0x10 [ 141.368278][ T5886] do_file_open+0x20e/0x430 [ 141.368296][ T5886] ? __pfx_do_file_open+0x10/0x10 [ 141.368320][ T5886] ? alloc_fd+0x471/0x7a0 [ 141.368340][ T5886] ? do_getname+0x191/0x390 [ 141.368363][ T5886] do_sys_openat2+0x10f/0x1e0 [ 141.368384][ T5886] ? __pfx_do_sys_openat2+0x10/0x10 [ 141.368407][ T5886] __x64_sys_openat+0x12d/0x210 [ 141.368428][ T5886] ? __pfx___x64_sys_openat+0x10/0x10 [ 141.368453][ T5886] do_syscall_64+0x115/0x870 [ 141.368475][ T5886] ? clear_bhb_loop+0x70/0xc0 [ 141.368494][ T5886] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 141.368510][ T5886] RIP: 0033:0x7f4510ea7407 [ 141.368524][ T5886] Code: 48 89 fa 4c 89 df e8 38 aa 00 00 8b 93 08 03 00 00 59 5e 48 83 f8 fc 74 1a 5b c3 0f 1f 84 00 00 00 00 00 48 8b 44 24 10 0f 05 <5b> c3 0f 1f 80 00 00 00 00 83 e2 39 83 fa 08 75 de e8 23 ff ff ff [ 141.368541][ T5886] RSP: 002b:00007ffdd13cc960 EFLAGS: 00000202 ORIG_RAX: 0000000000000101 [ 141.368558][ T5886] RAX: ffffffffffffffda RBX: 00007f4511583880 RCX: 00007f4510ea7407 [ 141.368569][ T5886] RDX: 0000000000080000 RSI: 000055a3534611b0 RDI: ffffffffffffff9c [ 141.368579][ T5886] RBP: 000055a3534640c0 R08: 0000000000000000 R09: 0000000000000000 [ 141.368589][ T5886] R10: 0000000000000000 R11: 0000000000000202 R12: 000055a337c100c8 [ 141.368599][ T5886] R13: 000055a337c100ce R14: 00007ffdd13ccf60 R15: 000055a337c16bcc [ 141.368616][ T5886] [ 141.368623][ T5886] [ 141.613541][ T5886] Allocated by task 5708: [ 141.617846][ T5886] kasan_save_stack+0x30/0x50 [ 141.622518][ T5886] kasan_save_track+0x14/0x30 [ 141.627176][ T5886] __kasan_kmalloc+0xaa/0xb0 [ 141.631758][ T5886] __kmalloc_cache_noprof+0x2e5/0x6c0 [ 141.637111][ T5886] sur40_probe+0x1a8/0x1580 [ 141.641604][ T5886] usb_probe_interface+0x303/0x8f0 [ 141.646711][ T5886] really_probe+0x241/0xa60 [ 141.651208][ T5886] __driver_probe_device+0x20e/0x450 [ 141.656474][ T5886] driver_probe_device+0x4a/0x140 [ 141.661490][ T5886] __device_attach_driver+0x1df/0x320 [ 141.666845][ T5886] bus_for_each_drv+0x159/0x1e0 [ 141.671672][ T5886] __device_attach+0x1e4/0x4d0 [ 141.676415][ T5886] device_initial_probe+0xaf/0xd0 [ 141.681422][ T5886] bus_probe_device+0x64/0x160 [ 141.686166][ T5886] device_add+0x121d/0x1970 [ 141.690651][ T5886] usb_set_configuration+0xd97/0x1c60 [ 141.696004][ T5886] usb_generic_driver_probe+0xa1/0xe0 [ 141.701353][ T5886] usb_probe_device+0xef/0x400 [ 141.706098][ T5886] really_probe+0x241/0xa60 [ 141.710579][ T5886] __driver_probe_device+0x20e/0x450 [ 141.715845][ T5886] driver_probe_device+0x4a/0x140 [ 141.720863][ T5886] __device_attach_driver+0x1df/0x320 [ 141.726217][ T5886] bus_for_each_drv+0x159/0x1e0 [ 141.731045][ T5886] __device_attach+0x1e4/0x4d0 [ 141.735980][ T5886] device_initial_probe+0xaf/0xd0 [ 141.740986][ T5886] bus_probe_device+0x64/0x160 [ 141.745729][ T5886] device_add+0x121d/0x1970 [ 141.750230][ T5886] usb_new_device.part.0+0xcc2/0x1686 [ 141.755582][ T5886] hub_event.cold+0x1e3/0xe90 [ 141.760256][ T5886] process_one_work+0xa23/0x1940 [ 141.765174][ T5886] worker_thread+0x5ef/0xe50 [ 141.769742][ T5886] kthread+0x370/0x450 [ 141.773788][ T5886] ret_from_fork+0x72b/0xd50 [ 141.778361][ T5886] ret_from_fork_asm+0x1a/0x30 [ 141.783109][ T5886] [ 141.785411][ T5886] Freed by task 5708: [ 141.789375][ T5886] kasan_save_stack+0x30/0x50 [ 141.794049][ T5886] kasan_save_track+0x14/0x30 [ 141.798725][ T5886] kasan_save_free_info+0x3b/0x70 [ 141.803724][ T5886] __kasan_slab_free+0x5f/0x80 [ 141.808469][ T5886] kfree+0x22b/0x6c0 [ 141.812338][ T5886] sur40_probe+0xc36/0x1580 [ 141.816820][ T5886] usb_probe_interface+0x303/0x8f0 [ 141.821915][ T5886] really_probe+0x241/0xa60 [ 141.826398][ T5886] __driver_probe_device+0x20e/0x450 [ 141.831664][ T5886] driver_probe_device+0x4a/0x140 [ 141.836670][ T5886] __device_attach_driver+0x1df/0x320 [ 141.842023][ T5886] bus_for_each_drv+0x159/0x1e0 [ 141.846855][ T5886] __device_attach+0x1e4/0x4d0 [ 141.851598][ T5886] device_initial_probe+0xaf/0xd0 [ 141.856607][ T5886] bus_probe_device+0x64/0x160 [ 141.861349][ T5886] device_add+0x121d/0x1970 [ 141.865837][ T5886] usb_set_configuration+0xd97/0x1c60 [ 141.871189][ T5886] usb_generic_driver_probe+0xa1/0xe0 [ 141.876538][ T5886] usb_probe_device+0xef/0x400 [ 141.881282][ T5886] really_probe+0x241/0xa60 [ 141.885765][ T5886] __driver_probe_device+0x20e/0x450 [ 141.891029][ T5886] driver_probe_device+0x4a/0x140 [ 141.896038][ T5886] __device_attach_driver+0x1df/0x320 [ 141.901406][ T5886] bus_for_each_drv+0x159/0x1e0 [ 141.906233][ T5886] __device_attach+0x1e4/0x4d0 [ 141.910976][ T5886] device_initial_probe+0xaf/0xd0 [ 141.915999][ T5886] bus_probe_device+0x64/0x160 [ 141.920741][ T5886] device_add+0x121d/0x1970 [ 141.925238][ T5886] usb_new_device.part.0+0xcc2/0x1686 [ 141.930592][ T5886] hub_event.cold+0x1e3/0xe90 [ 141.935252][ T5886] process_one_work+0xa23/0x1940 [ 141.940186][ T5886] worker_thread+0x5ef/0xe50 [ 141.944755][ T5886] kthread+0x370/0x450 [ 141.948801][ T5886] ret_from_fork+0x72b/0xd50 [ 141.953375][ T5886] ret_from_fork_asm+0x1a/0x30 [ 141.958138][ T5886] [ 141.960441][ T5886] The buggy address belongs to the object at ffff888022356000 [ 141.960441][ T5886] which belongs to the cache kmalloc-4k of size 4096 [ 141.974470][ T5886] The buggy address is located 0 bytes inside of [ 141.974470][ T5886] freed 4096-byte region [ffff888022356000, ffff888022357000) [ 141.988156][ T5886] [ 141.990460][ T5886] The buggy address belongs to the physical page: [ 141.996845][ T5886] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x22350 [ 142.005595][ T5886] head: order:3 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 142.014087][ T5886] flags: 0xfff00000000040(head|node=0|zone=1|lastcpupid=0x7ff) [ 142.021625][ T5886] page_type: f5(slab) [ 142.025602][ T5886] raw: 00fff00000000040 ffff88813fe22140 dead000000000100 dead000000000122 [ 142.034177][ T5886] raw: 0000000000000000 0000000800040004 00000000f5000000 0000000000000000 [ 142.042740][ T5886] head: 00fff00000000040 ffff88813fe22140 dead000000000100 dead000000000122 [ 142.051388][ T5886] head: 0000000000000000 0000000800040004 00000000f5000000 0000000000000000 [ 142.060038][ T5886] head: 00fff00000000003 fffffffffffffe01 00000000ffffffff 00000000ffffffff [ 142.068691][ T5886] head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000008 [ 142.077333][ T5886] page dumped because: kasan: bad access detected [ 142.083720][ T5886] page_owner tracks the page as allocated [ 142.089408][ T5886] page last allocated via order 3, migratetype Unmovable, gfp_mask 0xd2820(GFP_ATOMIC|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 13, tgid 13 (kworker/u8:1), ts 98121082376, free_ts 98059601248 [ 142.109787][ T5886] post_alloc_hook+0xfd/0x120 [ 142.114445][ T5886] get_page_from_freelist+0xf48/0x3530 [ 142.119883][ T5886] __alloc_frozen_pages_noprof+0x299/0x2dc0 [ 142.125755][ T5886] new_slab+0xa2/0x640 [ 142.129799][ T5886] refill_objects+0xe3/0x410 [ 142.134365][ T5886] __pcs_replace_empty_main+0x376/0x680 [ 142.139889][ T5886] __kmalloc_node_track_caller_noprof+0x679/0x830 [ 142.146282][ T5886] kmalloc_reserve+0xe8/0x350 [ 142.150946][ T5886] __alloc_skb+0x185/0x710 [ 142.155355][ T5886] nsim_dev_trap_report_work+0x2af/0xd20 [ 142.160971][ T5886] process_one_work+0xa23/0x1940 [ 142.165887][ T5886] worker_thread+0x5ef/0xe50 [ 142.170457][ T5886] kthread+0x370/0x450 [ 142.174503][ T5886] ret_from_fork+0x72b/0xd50 [ 142.179080][ T5886] ret_from_fork_asm+0x1a/0x30 [ 142.183830][ T5886] page last free pid 5890 tgid 5890 stack trace: [ 142.190131][ T5886] __free_frozen_pages+0x79f/0x1090 [ 142.195314][ T5886] qlist_free_all+0x47/0xf0 [ 142.199795][ T5886] kasan_quarantine_reduce+0x1a0/0x1f0 [ 142.205235][ T5886] __kasan_slab_alloc+0x69/0x90 [ 142.210067][ T5886] __kmalloc_cache_noprof+0x265/0x6c0 [ 142.215415][ T5886] kernfs_fop_open+0x23d/0xd50 [ 142.220163][ T5886] do_dentry_open+0x6ab/0x14d0 [ 142.224905][ T5886] vfs_open+0x82/0x3f0 [ 142.228957][ T5886] path_openat+0x2873/0x4280 [ 142.233526][ T5886] do_file_open+0x20e/0x430 [ 142.238007][ T5886] do_sys_openat2+0x10f/0x1e0 [ 142.242665][ T5886] __x64_sys_openat+0x12d/0x210 [ 142.247498][ T5886] do_syscall_64+0x115/0x870 [ 142.252072][ T5886] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 142.257959][ T5886] [ 142.260262][ T5886] Memory state around the buggy address: [ 142.265868][ T5886] ffff888022355f00: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 142.273908][ T5886] ffff888022355f80: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 142.281947][ T5886] >ffff888022356000: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 142.289994][ T5886] ^ [ 142.294042][ T5886] ffff888022356080: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 142.302084][ T5886] ffff888022356100: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 142.310120][ T5886] ================================================================== [ 142.342358][ T5886] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 142.349586][ T5886] CPU: 0 UID: 0 PID: 5886 Comm: udevd Not tainted syzkaller #0 PREEMPT(full) [ 142.358431][ T5886] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 142.368486][ T5886] Call Trace: [ 142.371752][ T5886] [ 142.374663][ T5886] dump_stack_lvl+0x100/0x190 [ 142.379330][ T5886] vpanic+0x552/0x970 [ 142.383294][ T5886] ? __pfx_vpanic+0x10/0x10 [ 142.387778][ T5886] ? mark_held_locks+0x40/0x70 [ 142.392526][ T5886] ? sur40_open+0x46c/0x500 [ 142.397015][ T5886] panic+0xd1/0xe0 [ 142.400716][ T5886] ? __pfx_panic+0x10/0x10 [ 142.405125][ T5886] ? sur40_open+0x46c/0x500 [ 142.409608][ T5886] ? preempt_schedule_common+0x42/0xc0 [ 142.415053][ T5886] ? check_panic_on_warn+0x1f/0x90 [ 142.420148][ T5886] check_panic_on_warn.cold+0x19/0x34 [ 142.425499][ T5886] end_report.part.0+0x3a/0x90 [ 142.430249][ T5886] kasan_report.cold+0xe/0x18 [ 142.434912][ T5886] ? sur40_open+0x46c/0x500 [ 142.439400][ T5886] ? __pfx_sur40_open+0x10/0x10 [ 142.444229][ T5886] sur40_open+0x46c/0x500 [ 142.448543][ T5886] input_open_device+0x24c/0x3d0 [ 142.453463][ T5886] evdev_open+0x52f/0x690 [ 142.457778][ T5886] ? __pfx_evdev_open+0x10/0x10 [ 142.462613][ T5886] chrdev_open+0x234/0x6a0 [ 142.467012][ T5886] ? __pfx_chrdev_open+0x10/0x10 [ 142.471931][ T5886] ? fsnotify_open_perm_and_set_mode+0x17a/0xa80 [ 142.478245][ T5886] do_dentry_open+0x6ab/0x14d0 [ 142.482989][ T5886] ? __pfx_chrdev_open+0x10/0x10 [ 142.487926][ T5886] vfs_open+0x82/0x3f0 [ 142.491979][ T5886] path_openat+0x2873/0x4280 [ 142.496558][ T5886] ? __pfx_path_openat+0x10/0x10 [ 142.501480][ T5886] do_file_open+0x20e/0x430 [ 142.505966][ T5886] ? __pfx_do_file_open+0x10/0x10 [ 142.510976][ T5886] ? alloc_fd+0x471/0x7a0 [ 142.515287][ T5886] ? do_getname+0x191/0x390 [ 142.519776][ T5886] do_sys_openat2+0x10f/0x1e0 [ 142.524437][ T5886] ? __pfx_do_sys_openat2+0x10/0x10 [ 142.529633][ T5886] __x64_sys_openat+0x12d/0x210 [ 142.534480][ T5886] ? __pfx___x64_sys_openat+0x10/0x10 [ 142.539840][ T5886] do_syscall_64+0x115/0x870 [ 142.544417][ T5886] ? clear_bhb_loop+0x70/0xc0 [ 142.549077][ T5886] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 142.554949][ T5886] RIP: 0033:0x7f4510ea7407 [ 142.559344][ T5886] Code: 48 89 fa 4c 89 df e8 38 aa 00 00 8b 93 08 03 00 00 59 5e 48 83 f8 fc 74 1a 5b c3 0f 1f 84 00 00 00 00 00 48 8b 44 24 10 0f 05 <5b> c3 0f 1f 80 00 00 00 00 83 e2 39 83 fa 08 75 de e8 23 ff ff ff [ 142.578938][ T5886] RSP: 002b:00007ffdd13cc960 EFLAGS: 00000202 ORIG_RAX: 0000000000000101 [ 142.587331][ T5886] RAX: ffffffffffffffda RBX: 00007f4511583880 RCX: 00007f4510ea7407 [ 142.595282][ T5886] RDX: 0000000000080000 RSI: 000055a3534611b0 RDI: ffffffffffffff9c [ 142.603249][ T5886] RBP: 000055a3534640c0 R08: 0000000000000000 R09: 0000000000000000 [ 142.611199][ T5886] R10: 0000000000000000 R11: 0000000000000202 R12: 000055a337c100c8 [ 142.619163][ T5886] R13: 000055a337c100ce R14: 00007ffdd13ccf60 R15: 000055a337c16bcc [ 142.627117][ T5886] [ 142.630307][ T5886] Kernel Offset: disabled [ 142.634606][ T5886] Rebooting in 86400 seconds..