last executing test programs: 144.524796ms ago: executing program 3 (id=4): r0 = inotify_init1(0x0) inotify_add_watch(r0, &(0x7f0000000440)='.\x00', 0x12000021) openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) memfd_create(&(0x7f0000000300)='\x9d#\x00\xe6Z\x00\xafq%\xa5\x83\xa6\xb5\x00\x83y\xf3\xb2\xe6b \x00\x00\x00\x00\x00\x00\x01\x00\x00\xf7\xffg\xf5\x12oP\xfe\xe6\xd2SLR\xa1\x00\x00\x17\x1f$^\xe1\x00\x00\x00\x00\x00\x00\a\xff;\xeb\xf1\xd0\xce\xe5\x19\x12\b\x01\xd9\xae>/\x05\x00\x00\x00\x15\x00\x00\x00\xa1\xa2\xe0g\x98\xbf*\xdcc\x12.\xb7\xbe`\'\xcb\xb6\xaf\xdc\xa0D\x93.\xf25\x957\xec\xfb\xe6|\\\xe4h\xfc\x14\x05\x00\xfd\xc7\x00\x00\x00\x00\x91\x98\x15\xec\xdb\xaa\t9\x11\xb4O$&0\xdd\x19\x86\x90\xbe\xd7\xdc\n\xcbC\x15\xfcp\x11\xdai\f{a?\xd0\xe1{\x84\xb5\x82q\x19\xacS\x88|\x99\xfd\x9eS\x80\xcb\x14G\xfa\xff\xff\xff\xff\xff\xff\xff\xcd\xf0%\x97!\xba\xe3J\xc2t\x96\xf8\xb1\xd2\x168\xbf`$\xbf\xca\xea\xa3\x83\x8e-k\x12\xdf\xb9\xb6Pr\xd4\xb5X\\\xdbD\n\x03G\x00\x04\x00\x00\xbc\xac\x18\xba\xce\xb3%QF\x03\b\x9dh\xcb)\xf4f\x12[\xf9\r\t\xef{h\xb0\xc0:\x8f|\x8f\x06\xf8T\x826`M\x11\x1c\xb0*8\v\x1e\xcf\x03\xd3\xe8,?P\xac\x86\x13b\xa8D\x0f\x93\xab\x1c\x11\x00\xc5\x8d\x82\x9c\xd6B[\xc9\x00\xf5]\x81\xf3\xfd\x06M\xbe\xf9\xba\x9em\xe9\"\x03\x933P\x9b\xcc\x9b\f\xa7\x8f9\x988\tgC\xbc\xe0\xc5\xf4\xe0E%\xd9\xd8w\x00k\x042Y\xd9\xc5\xe59\xa95\xd1m\xd8hCuZYi\x10D\xb9\xe6\xff\x04K%yH\xe5\xf4\x8b\x03Ca8\x1e\xe9\\#\xf8O\fw\xd9\xf5cF\xcc\x1a2ex\xb4\x0fi$\x97\x81.\x02\x04m\xfbT2\xd4\"\x1e\xf0\x16\x0f\x97\xe6j}J\xca\xb8)f\xd5\xfd>\x9bU\xb0\x03Zt0\xc0b\xad\xef@o\xc1\xd6\x17T\f\xc30\xe2\x89\xf6L\x1b1\x9c\x19\xa7\x80\x1b:\xbb\x04\xd7\xd1\x06\xa0\xe9\xbah\xb6\xb2\xea/{Q\xca\x14\x13\x9ajWt\xc9\xecd\r\xd5)\x1d\xaf\n\xc0\xc1\x1d}DY\x95&\xe7\xf4U\xff\xcd&\a\x9f\x1bg\xe5|~\xc1\xc5n\x12%ur\xa1\x9e`\xc2\x01\b,\x18\xaf\xccD\xdeag\xc6\xf3\xd6\x94\x9d\xae\x8bl\xee\x7fu\xe5bu\x84\x04\xb3@\xa1\xf7\xc6\x13\xf9I\xfa\x12\xfc\x96\",aT\xfd\"\x01\xcdSL\b\x7f\xfe\xab\xd7\x88\x87\x82\x9c:L\xd2\xb8\xfa5\x066\x82\xf3_LUr\xfa\xd2\x99d \x97c9G\x99\xe3\xcc$\x96cu\x97\xe7\xc7a\tm\xe8F\xc7j\xf8\x98\x81\xe7\xf7\xab3F\xf4u\xdaav\xd21\v\x99HG\xdfx\x1cPl\t#\xc1\x8e\xddW\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x0f\xa4\x83t\xdcyx', 0x8) r1 = socket$packet(0x11, 0x2, 0x300) r2 = open(&(0x7f00009e1000)='./file0\x00', 0x48141, 0x0) fcntl$setlease(r2, 0x400, 0x1) open(&(0x7f00000001c0)='./file0\x00', 0x0, 0x55) fcntl$getflags(r2, 0x401) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) setsockopt$packet_int(r1, 0x107, 0xc, &(0x7f0000000400)=0x5, 0x4) r3 = syz_clone(0x200, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r3) wait4(0x0, 0x0, 0x0, 0x0) r4 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) close_range(r4, 0xffffffffffffffff, 0x0) 126.114227ms ago: executing program 0 (id=1): r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) ioctl$SIOCGSTAMP(r0, 0x8906, 0x0) syz_usb_connect$uac3(0x0, 0x97, &(0x7f0000000000)={{0x12, 0x1, 0x110, 0x0, 0x0, 0x0, 0x10, 0x644, 0x800e, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x85, 0x3, 0x1, 0xff, 0xc0, 0xc, {0x8, 0xb, 0x0, 0x2, 0x1, 0x1, 0x30, 0x7}, {{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x30, 0x0, {{0xa, 0x24, 0x1, 0x10, 0xa, 0x3ff}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x30, 0x0, {[@as_header={0x17, 0x24, 0x1, 0x3, 0x4, 0x7fff, 0x4, 0x7, 0x1, 0xfc00, 0x9}]}, {{0x9, 0x5, 0x1, 0x9, 0x20, 0x40, 0xd0, 0x4, {0xa, 0x25, 0x25, 0x7fff, 0x1, 0x4}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x30, 0x0, {}, {{0x9, 0x5, 0x82, 0x9, 0x8, 0xfa, 0x1a, 0x2, {0xa, 0x25, 0x25, 0x4, 0x5, 0x5d}}}}}}}}]}}, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$XFS_IOC_SCRUB_METADATA(r1, 0xc040583c, &(0x7f0000000080)={0xb, 0x2, 0x9, 0x6d, 0x7}) sendto$inet(r1, 0x0, 0x0, 0x0, &(0x7f0000000100)={0x2, 0x4e20, @rand_addr=0x64010102}, 0x10) recvfrom(r0, 0x0, 0x0, 0x0, 0x0, 0x0) epoll_pwait(0xffffffffffffffff, &(0x7f0000000000)=[{}, {}, {}], 0x3, 0x6, &(0x7f0000000040)={[0x3ff]}, 0x7) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt(r2, 0xff, 0x3, &(0x7f0000000000)="70c4600019", 0x5) 77.753378ms ago: executing program 2 (id=3): r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff) chdir(0x0) r1 = open(&(0x7f0000000100)='./bus\x00', 0x60440, 0x40) truncate(&(0x7f0000000300)='./bus\x00', 0x7) finit_module(r1, 0x0, 0x0) write$binfmt_elf64(r0, &(0x7f0000000180)=ANY=[@ANYBLOB="7f454c4604040b00010000000000000003003e0003000d009c0200100000000040000000000000006102000000000000000000002d8f38000100feff0200070003000000010000f80a00000000000000ffffff7f00000000ff0100000000000010"], 0x78) close(r0) execveat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x0, 0x0, 0x1000) 68.324018ms ago: executing program 1 (id=2): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000180)=0x100000001, 0x4) connect$inet6(r0, &(0x7f0000000300)={0xa, 0x4e22, 0x2, @loopback, 0x5}, 0x1c) (async) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000540), 0x3c) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000000)=@gcm_256={{0x304}, '\x00', "e8582491a0c4050000000000f6542a9b6800000000000000003967d2daa45b4e", "61241765", "9b1f80001b00"}, 0x38) (async) sendmsg$DEVLINK_CMD_TRAP_SET(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000002c0)=ANY=[], 0x14}, 0x1, 0x0, 0x0, 0x20040000}, 0x8000) (async) sendmsg$inet(r0, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="e400000000000000000000000700000094040000865400000003051005c3e45b3e088e6f722b0df22b3c00126eacb1ceb7f260dab33486c73af20b59020788c2fdffc9060c47629611bad4427b49310104076002042a03051106b63d39a9a516678325f283800b5d83237b00000000ac1414aaac1414bbe0000002ffffffff00000000ac14142de0000002890327440c7b302e7dc6a00000000807174bac1414aae00000027f0000017f000001ac1e10018317eaac1e0101ac1414aaffffffff64010101e0000001831b0b640101017f00000164010102ffffffffac1414aae0000001000000000014000000000000001a01000001"], 0x110}, 0x0) (async) mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) (async) write$FUSE_NOTIFY_RETRIEVE(0xffffffffffffffff, &(0x7f0000000100)={0x30, 0x5, 0x0, {0x0, 0x6, 0xf, 0x1}}, 0x30) (async) memfd_create(&(0x7f0000000000)='/dev/sda1\x00', 0x1) (async) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) (async) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$FIBMAP(r1, 0x5393, &(0x7f0000000100)=0x3) 211.66µs ago: executing program 1 (id=5): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x80102, 0x0) r1 = socket$inet6(0xa, 0x80002, 0x0) fsetxattr(r1, &(0x7f0000000000)=@known='com.apple.system.Security\x00', 0x0, 0x0, 0x2) r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) r3 = eventfd2(0x0, 0x801) ioctl$KVM_IRQFD(r2, 0x4020ae76, &(0x7f0000000240)={r3, 0x7, 0x2, r3}) 0s ago: executing program 2 (id=6): r0 = openat$selinux_load(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) r1 = socket(0x2, 0x2, 0x1) recvmmsg(r1, &(0x7f0000001600)=[{{0x0, 0x0, &(0x7f0000001580)=[{&(0x7f0000000140)=""/4092, 0xffc}], 0x1, 0x0, 0x0, 0xe88}, 0x8}], 0x1, 0x2100, 0x0) r2 = openat$selinux_policy(0xffffff9c, &(0x7f0000000300), 0x0, 0x0) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x13, 0x0, 0x0) socket$inet6(0xa, 0x1, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x100000a, 0x12, r2, 0x0) write$selinux_load(r0, &(0x7f0000000000)=ANY=[], 0x17fc) openat$selinux_load(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) (async) socket(0x2, 0x2, 0x1) (async) recvmmsg(r1, &(0x7f0000001600)=[{{0x0, 0x0, &(0x7f0000001580)=[{&(0x7f0000000140)=""/4092, 0xffc}], 0x1, 0x0, 0x0, 0xe88}, 0x8}], 0x1, 0x2100, 0x0) (async) openat$selinux_policy(0xffffff9c, &(0x7f0000000300), 0x0, 0x0) (async) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x13, 0x0, 0x0) (async) socket$inet6(0xa, 0x1, 0x0) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x100000a, 0x12, r2, 0x0) (async) write$selinux_load(r0, &(0x7f0000000000)=ANY=[], 0x17fc) (async) kernel console output (not intermixed with test programs): cess permissive=1 [ 13.012598][ T36] audit: type=1400 audit(1785731947.450:63): avc: denied { siginh } for pid=231 comm="sh" scontext=system_u:system_r:sshd_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 Warning: Permanently added '10.128.1.85' (ED25519) to the list of known hosts. [ 20.175493][ T36] audit: type=1400 audit(1785731954.610:64): avc: denied { mounton } for pid=272 comm="syz-executor" path="/syzcgroup/unified" dev="sda1" ino=2023 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1 [ 20.176618][ T272] cgroup: Unknown subsys name 'net' [ 20.198195][ T36] audit: type=1400 audit(1785731954.610:65): avc: denied { mount } for pid=272 comm="syz-executor" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 20.225633][ T36] audit: type=1400 audit(1785731954.650:66): avc: denied { unmount } for pid=272 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 20.225824][ T272] cgroup: Unknown subsys name 'devices' [ 20.351210][ T272] cgroup: Unknown subsys name 'hugetlb' [ 20.356925][ T272] cgroup: Unknown subsys name 'rlimit' [ 20.450115][ T36] audit: type=1400 audit(1785731954.890:67): avc: denied { setattr } for pid=272 comm="syz-executor" name="raw-gadget" dev="devtmpfs" ino=190 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 20.473412][ T36] audit: type=1400 audit(1785731954.890:68): avc: denied { mounton } for pid=272 comm="syz-executor" path="/proc/sys/fs/binfmt_misc" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=dir permissive=1 [ 20.482280][ T288] SELinux: Context root:object_r:swapfile_t is not valid (left unmapped). [ 20.498307][ T36] audit: type=1400 audit(1785731954.890:69): avc: denied { mount } for pid=272 comm="syz-executor" name="/" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=filesystem permissive=1 Setting up swapspace version 1, size = 127995904 bytes [ 20.529860][ T36] audit: type=1400 audit(1785731954.950:70): avc: denied { relabelto } for pid=288 comm="mkswap" name="swap-file" dev="sda1" ino=2026 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 20.555322][ T36] audit: type=1400 audit(1785731954.950:71): avc: denied { write } for pid=288 comm="mkswap" path="/root/swap-file" dev="sda1" ino=2026 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 20.589251][ T36] audit: type=1400 audit(1785731955.030:72): avc: denied { read } for pid=272 comm="syz-executor" name="swap-file" dev="sda1" ino=2026 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 20.614881][ T36] audit: type=1400 audit(1785731955.030:73): avc: denied { open } for pid=272 comm="syz-executor" path="/root/swap-file" dev="sda1" ino=2026 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 20.615120][ T272] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 21.430187][ T296] bridge0: port 1(bridge_slave_0) entered blocking state [ 21.437251][ T296] bridge0: port 1(bridge_slave_0) entered disabled state [ 21.444598][ T296] bridge_slave_0: entered allmulticast mode [ 21.450815][ T296] bridge_slave_0: entered promiscuous mode [ 21.458324][ T296] bridge0: port 2(bridge_slave_1) entered blocking state [ 21.465461][ T296] bridge0: port 2(bridge_slave_1) entered disabled state [ 21.472574][ T296] bridge_slave_1: entered allmulticast mode [ 21.478852][ T296] bridge_slave_1: entered promiscuous mode [ 21.530080][ T294] bridge0: port 1(bridge_slave_0) entered blocking state [ 21.537178][ T294] bridge0: port 1(bridge_slave_0) entered disabled state [ 21.544323][ T294] bridge_slave_0: entered allmulticast mode [ 21.550550][ T294] bridge_slave_0: entered promiscuous mode [ 21.559768][ T294] bridge0: port 2(bridge_slave_1) entered blocking state [ 21.566827][ T294] bridge0: port 2(bridge_slave_1) entered disabled state [ 21.573924][ T294] bridge_slave_1: entered allmulticast mode [ 21.580278][ T294] bridge_slave_1: entered promiscuous mode [ 21.600628][ T293] bridge0: port 1(bridge_slave_0) entered blocking state [ 21.607701][ T293] bridge0: port 1(bridge_slave_0) entered disabled state [ 21.614823][ T293] bridge_slave_0: entered allmulticast mode [ 21.621012][ T293] bridge_slave_0: entered promiscuous mode [ 21.635793][ T293] bridge0: port 2(bridge_slave_1) entered blocking state [ 21.642871][ T293] bridge0: port 2(bridge_slave_1) entered disabled state [ 21.649985][ T293] bridge_slave_1: entered allmulticast mode [ 21.656187][ T293] bridge_slave_1: entered promiscuous mode [ 21.682140][ T295] bridge0: port 1(bridge_slave_0) entered blocking state [ 21.689228][ T295] bridge0: port 1(bridge_slave_0) entered disabled state [ 21.696342][ T295] bridge_slave_0: entered allmulticast mode [ 21.702718][ T295] bridge_slave_0: entered promiscuous mode [ 21.731229][ T295] bridge0: port 2(bridge_slave_1) entered blocking state [ 21.738317][ T295] bridge0: port 2(bridge_slave_1) entered disabled state [ 21.745415][ T295] bridge_slave_1: entered allmulticast mode [ 21.751751][ T295] bridge_slave_1: entered promiscuous mode [ 21.841598][ T296] bridge0: port 2(bridge_slave_1) entered blocking state [ 21.848673][ T296] bridge0: port 2(bridge_slave_1) entered forwarding state [ 21.855977][ T296] bridge0: port 1(bridge_slave_0) entered blocking state [ 21.863110][ T296] bridge0: port 1(bridge_slave_0) entered forwarding state [ 21.889393][ T294] bridge0: port 2(bridge_slave_1) entered blocking state [ 21.896453][ T294] bridge0: port 2(bridge_slave_1) entered forwarding state [ 21.903758][ T294] bridge0: port 1(bridge_slave_0) entered blocking state [ 21.910831][ T294] bridge0: port 1(bridge_slave_0) entered forwarding state [ 21.946479][ T293] bridge0: port 2(bridge_slave_1) entered blocking state [ 21.953572][ T293] bridge0: port 2(bridge_slave_1) entered forwarding state [ 21.960863][ T293] bridge0: port 1(bridge_slave_0) entered blocking state [ 21.967887][ T293] bridge0: port 1(bridge_slave_0) entered forwarding state [ 21.977306][ T295] bridge0: port 2(bridge_slave_1) entered blocking state [ 21.984382][ T295] bridge0: port 2(bridge_slave_1) entered forwarding state [ 21.991790][ T295] bridge0: port 1(bridge_slave_0) entered blocking state [ 21.998916][ T295] bridge0: port 1(bridge_slave_0) entered forwarding state [ 22.043655][ T46] bridge0: port 2(bridge_slave_1) entered disabled state [ 22.051119][ T46] bridge0: port 1(bridge_slave_0) entered disabled state [ 22.058471][ T46] bridge0: port 2(bridge_slave_1) entered disabled state [ 22.066332][ T46] bridge0: port 1(bridge_slave_0) entered disabled state [ 22.073500][ T46] bridge0: port 2(bridge_slave_1) entered disabled state [ 22.081005][ T46] bridge0: port 1(bridge_slave_0) entered disabled state [ 22.088207][ T46] bridge0: port 2(bridge_slave_1) entered disabled state [ 22.115369][ T46] bridge0: port 2(bridge_slave_1) entered blocking state [ 22.122437][ T46] bridge0: port 2(bridge_slave_1) entered forwarding state [ 22.130036][ T46] bridge0: port 1(bridge_slave_0) entered blocking state [ 22.137081][ T46] bridge0: port 1(bridge_slave_0) entered forwarding state [ 22.145254][ T46] bridge0: port 2(bridge_slave_1) entered blocking state [ 22.152472][ T46] bridge0: port 2(bridge_slave_1) entered forwarding state [ 22.170186][ T46] bridge0: port 1(bridge_slave_0) entered blocking state [ 22.177428][ T46] bridge0: port 1(bridge_slave_0) entered forwarding state [ 22.187010][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 22.194094][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 22.210314][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 22.217364][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 22.226519][ T46] bridge0: port 2(bridge_slave_1) entered blocking state [ 22.233598][ T46] bridge0: port 2(bridge_slave_1) entered forwarding state [ 22.248900][ T296] veth0_vlan: entered promiscuous mode [ 22.272073][ T294] veth0_vlan: entered promiscuous mode [ 22.283599][ T296] veth1_macvtap: entered promiscuous mode [ 22.298912][ T294] veth1_macvtap: entered promiscuous mode [ 22.335186][ T293] veth0_vlan: entered promiscuous mode [ 22.353785][ T295] veth0_vlan: entered promiscuous mode [ 22.365299][ T296] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 22.373735][ T295] veth1_macvtap: entered promiscuous mode [ 22.397562][ T293] veth1_macvtap: entered promiscuous mode [ 22.480586][ T323] Invalid ELF header len 7 [ 22.485742][ T323] process 'syz.2.3' launched './file1' with NULL argv: empty string added [ 22.501978][ T332] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 22.532813][ T334] SELinux: failed to load policy [ 22.541718][ T334] ------------[ cut here ]------------ [ 22.547244][ T334] WARNING: CPU: 1 PID: 334 at mm/page_alloc.c:5285 __alloc_pages_noprof+0x109/0x7e0 [ 22.556738][ T334] Modules linked in: [ 22.560734][ T334] CPU: 1 UID: 0 PID: 334 Comm: syz.2.6 Not tainted syzkaller #0 200dea8a17c83f35b0a1e1238c384757fc17b797 [ 22.572032][ T334] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 22.582166][ T334] RIP: 0010:__alloc_pages_noprof+0x109/0x7e0 [ 22.588266][ T334] Code: 00 0f 1f 44 00 00 83 fb 0b 72 28 b8 00 20 00 00 23 44 24 40 75 1d 80 3d 64 d2 0b 06 00 0f 85 c2 00 00 00 c6 05 57 d2 0b 06 01 <0f> 0b 31 c0 e9 b4 00 00 00 83 fb 0a 0f 87 a9 00 00 00 44 8b 64 24 [ 22.608009][ T334] RSP: 0018:ffffc9000b83f640 EFLAGS: 00010246 [ 22.614139][ T334] RAX: 0000000000000000 RBX: 0000000000000016 RCX: 0000000000000000 [ 22.622223][ T334] RDX: 0000000000000000 RSI: 0000000000000000 RDI: ffffc9000b83f6f8 [ 22.630383][ T334] RBP: ffffc9000b83f780 R08: ffffc9000b83f6f7 R09: 0000000000000000 [ 22.638383][ T334] R10: ffffc9000b83f6e0 R11: fffff52001707edf R12: ffffc9000b83f680 [ 22.646481][ T334] R13: dffffc0000000000 R14: 1ffff92001707ecc R15: 0000000000000000 [ 22.654520][ T334] FS: 00007fe6d91866c0(0000) GS:ffff8881f6f00000(0000) knlGS:0000000000000000 [ 22.663611][ T334] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 22.669326][ T64] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 22.670334][ T334] CR2: 00007fe6d6dd6d58 CR3: 00000001103b8000 CR4: 00000000003526b0 [ 22.685840][ T334] Call Trace: [ 22.689215][ T334] [ 22.692164][ T334] ? __cfi___alloc_pages_noprof+0x10/0x10 [ 22.697888][ T334] ? __kasan_slab_alloc+0x73/0x90 [ 22.702937][ T334] ? kmem_cache_alloc_noprof+0x1e2/0x410 [ 22.708588][ T334] ? hashtab_init+0xd6/0x1f0 [ 22.713265][ T334] ___kmalloc_large_node+0x81/0x220 [ 22.718494][ T334] ? hashtab_init+0xd6/0x1f0 [ 22.723153][ T334] __kmalloc_large_node_noprof+0x1e/0xd0 [ 22.728802][ T334] ? hashtab_init+0xd6/0x1f0 [ 22.733440][ T334] __kmalloc_noprof+0x326/0x510 [ 22.738308][ T334] ? __cfi_ebitmap_read+0x10/0x10 [ 22.743369][ T334] hashtab_init+0xd6/0x1f0 [ 22.747813][ T334] ? policydb_read+0x865/0x2860 [ 22.752767][ T334] symtab_init+0x44/0x70 [ 22.757048][ T334] policydb_read+0x8e1/0x2860 [ 22.761827][ T334] ? __kasan_kmalloc+0x96/0xb0 [ 22.766614][ T334] ? __cfi_policydb_read+0x10/0x10 [ 22.771786][ T334] ? security_load_policy+0x130/0x12d0 [ 22.777274][ T334] security_load_policy+0x16a/0x12d0 [ 22.782618][ T334] ? avc_has_perm_noaudit+0x289/0x360 [ 22.788016][ T334] ? _raw_spin_unlock+0x45/0x60 [ 22.792962][ T334] ? __kasan_check_write+0x18/0x20 [ 22.798101][ T334] ? mutex_lock+0x97/0x1d0 [ 22.802582][ T334] ? __cfi_security_load_policy+0x10/0x10 [ 22.808331][ T334] ? __kasan_check_write+0x18/0x20 [ 22.813501][ T334] sel_write_load+0x258/0x600 [ 22.818200][ T334] ? __cfi_sel_write_load+0x10/0x10 [ 22.819058][ T64] usb 1-1: Using ep0 maxpacket: 16 [ 22.823457][ T334] ? bpf_lsm_file_permission+0xd/0x20 [ 22.830359][ T64] usb 1-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 64, changing to 7 [ 22.833992][ T334] ? __cfi_sel_write_load+0x10/0x10 [ 22.845523][ T64] usb 1-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 250, changing to 7 [ 22.850080][ T334] vfs_write+0x3c1/0xfd0 [ 22.863392][ T64] usb 1-1: New USB device found, idVendor=0644, idProduct=800e, bcdDevice= 0.40 [ 22.865377][ T334] ? __cfi_vfs_write+0x10/0x10 [ 22.865406][ T334] ? __kasan_check_write+0x18/0x20 [ 22.875238][ T64] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 22.879327][ T334] ? mutex_lock+0x97/0x1d0 [ 22.884762][ T64] usb 1-1: Product: syz [ 22.892511][ T334] ? __cfi_mutex_lock+0x10/0x10 [ 22.892546][ T334] ksys_write+0x145/0x260 [ 22.892566][ T334] ? xfd_validate_state+0x68/0x140 [ 22.897407][ T64] usb 1-1: Manufacturer: syz [ 22.901241][ T334] ? __cfi_ksys_write+0x10/0x10 [ 22.901268][ T334] ? __kasan_check_write+0x18/0x20 [ 22.901287][ T334] ? fpregs_restore_userregs+0x11c/0x260 [ 22.906457][ T64] usb 1-1: SerialNumber: syz [ 22.910509][ T334] __x64_sys_write+0x7f/0x90 [ 22.945549][ T334] x64_sys_call+0x271c/0x2ee0 [ 22.950370][ T334] do_syscall_64+0x57/0xf0 [ 22.954809][ T334] ? clear_bhb_loop+0x50/0xa0 [ 22.959525][ T334] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 22.965441][ T334] RIP: 0033:0x7fe6d839e019 [ 22.969899][ T334] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 22.989556][ T334] RSP: 002b:00007fe6d9186028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 22.998410][ T334] RAX: ffffffffffffffda RBX: 00007fe6d8625fa0 RCX: 00007fe6d839e019 [ 23.006430][ T334] RDX: 00000000000017fc RSI: 0000200000000000 RDI: 0000000000000003 [ 23.014441][ T334] RBP: 00007fe6d843500c R08: 0000000000000000 R09: 0000000000000000 [ 23.022455][ T334] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 23.030632][ T334] R13: 00007fe6d8626038 R14: 00007fe6d8625fa0 R15: 00007fff7dabfeb8 [ 23.038635][ T334] [ 23.041699][ T334] ---[ end trace 0000000000000000 ]--- [ 23.047219][ T334] SELinux: failed to load policy [ 25.473445][ T64] usb 1-1: USB disconnect, device number 2 [ 25.509555][ T313] udevd[313]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory