last executing test programs: 3.454493245s ago: executing program 3 (id=4): sched_setscheduler(0x0, 0x2, 0x0) r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000680)=ANY=[@ANYBLOB="380000000314010000000000000000000900020073797a3000000000080041007369770014003300776c616e3000"], 0x38}}, 0x4000080) r1 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_STAT_GET(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)=ANY=[@ANYBLOB="200000000414010000000000020000000800010000000000080003"], 0x20}}, 0x0) 2.915431166s ago: executing program 3 (id=7): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, &(0x7f00000003c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x48) bpf$BPF_PROG_DETACH(0x1c, &(0x7f0000000000)={@cgroup=r0, r0, 0x2e}, 0x20) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000018c0)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) close_range(r1, 0xffffffffffffffff, 0x0) 2.871207373s ago: executing program 0 (id=1): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)={0x4c, 0x2, 0x6, 0x3, 0x0, 0x0, {}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_TYPENAME={0x12, 0x3, 'hash:net,port\x00'}]}, 0x4c}, 0x1, 0x0, 0x0, 0x1}, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r1, 0x0, 0x40, &(0x7f0000000dc0)=@filter={'filter\x00', 0xe, 0x4, 0x288, 0xffffffff, 0x0, 0x98, 0x130, 0xffffffff, 0xffffffff, 0x0, 0x98, 0x1f0, 0xffffffff, 0x4, 0x0, {[{{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}, {{@uncond, 0x0, 0x98, 0xc0, 0x0, {}, [@common=@inet=@set1={{0x28}, {{0x0, 0x2, 0x1}}}]}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x2e8) r2 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$IP_VS_SO_SET_ADD(r2, 0x0, 0x482, &(0x7f00000000c0)={0x84, @dev={0xac, 0x14, 0x14, 0x8b}, 0x15, 0x3, 'fo\x00', 0x1, 0x400000, 0x4}, 0x2c) r3 = socket$kcm(0xa, 0x2, 0x0) r4 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$IP_VS_SO_SET_ADDDEST(r4, 0x0, 0x487, &(0x7f0000000000)={{0x84, @rand_addr=0x64010100, 0x4e24, 0x3, 'lc\x00', 0x8, 0x323b, 0x55}, {@rand_addr=0x64010100, 0x4e23, 0x2, 0x244, 0x12d5c, 0x12d5c}}, 0x44) sendmsg$sock(r3, &(0x7f0000000400)={&(0x7f0000000580)=@in6={0x2, 0x4e22, 0x0, @dev}, 0x80, 0x0, 0x0, &(0x7f0000000000)=[@mark={{0x14, 0x1, 0x24, 0x3}}], 0x18}, 0x0) 2.665466562s ago: executing program 3 (id=8): r0 = socket$inet_sctp(0x2, 0x5, 0x84) ioctl$sock_inet_SIOCADDRT(r0, 0x890b, &(0x7f0000000080)={0x0, {0x2, 0x4e24, @remote}, {0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0x2c}}, {0x2, 0x4e21, @broadcast}, 0xd1, 0x0, 0x0, 0x0, 0x2, 0x0, 0x2, 0x401, 0x6}) r1 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$IP_VS_SO_SET_ADD(r1, 0x0, 0x482, &(0x7f0000000080)={0x84, @local, 0x15, 0x3, 'wlc\x00', 0x0, 0x5, 0x72}, 0x2c) r2 = socket$kcm(0xa, 0x2, 0x0) r3 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f0000000100)='ip6tnl0\x00', 0x10) setsockopt$IP_VS_SO_SET_ADDDEST(r3, 0x0, 0x487, &(0x7f0000000000)={{0x84, @private=0xa010102, 0x4e24, 0x3, 'lc\x00', 0x5, 0x8, 0x77}, {@remote, 0x4e20, 0x10000, 0xc, 0x2}}, 0x44) sendmsg$sock(r2, &(0x7f0000000400)={&(0x7f0000000580)=@in6={0x2, 0x4e22, 0x0, @dev}, 0x80, 0x0, 0x0, &(0x7f0000000000)=[@mark={{0x14, 0x1, 0x24, 0x3}}], 0x18}, 0x0) 2.613666116s ago: executing program 0 (id=9): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x1}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000800)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000300)=@newtfilter={0x3c, 0x2c, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {0x1, 0xffff}, {0x0, 0xffff}, {0x8, 0x1}}, [@filter_kind_options=@f_flower={{0xb}, {0xc, 0x2, [@TCA_FLOWER_KEY_CT_ZONE={0x6, 0x5d, 0x3}]}}]}, 0x3c}}, 0x0) 2.470796063s ago: executing program 3 (id=10): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)={0x50, 0x2, 0x6, 0x5, 0x0, 0x0, {}, [@IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_TYPENAME={0x15, 0x3, 'hash:ip,port,net\x00'}]}, 0x50}}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000780)=ANY=[@ANYBLOB="74000000090601020000000000000000030000000900020073797a310000000005000100070000004c0007801800018014000240fe8000000000000000000000000000aa1800148014000240fc000000000000000000000000000000060004404e1f0000050007008400000006000540"], 0x74}, 0x1, 0x0, 0x0, 0x10040003}, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000080)=ANY=[@ANYBLOB="6c000000090601020000000000000000030000000900020073797a3100000000050001000700000044000780180001801400024000000000000000000000ffffac14143a180014801400024020010000000000000000000000000000060004404e1f0000050007"], 0x6c}, 0x1, 0x0, 0x0, 0x10040003}, 0x0) 2.266039058s ago: executing program 4 (id=11): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CAP_DIRTY_LOG_RING(r1, 0x4068aea3, &(0x7f0000001000)={0xc0, 0x0, 0x10000}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) mmap(&(0x7f0000002000/0x10000)=nil, 0x10000, 0x3, 0x11, r2, 0x40000) r3 = openat(0xffffffffffffff9c, &(0x7f0000003000)='./file0\x00', 0x42, 0x1ff) write(r3, &(0x7f0000004000)="020000", 0x3) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000fe7000/0x18000)=nil, &(0x7f0000000080)=[@text64={0x40, 0x0}], 0x1, 0x1, 0x0, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000380)='./file0\x00', 0x22801, 0x0) io_setup(0x202, &(0x7f0000000200)=0x0) io_submit(r5, 0x1, &(0x7f0000000700)=[&(0x7f0000000100)={0xfff0, 0x20000000, 0x4, 0x1, 0xc, r4, &(0x7f00000009c0)='1', 0x1, 0xf}]) pread64(r3, &(0x7f0000002000)=""/32, 0x20, 0x0) ioctl$KVM_RESET_DIRTY_RINGS(r1, 0xaec7) 2.134250638s ago: executing program 0 (id=12): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x500, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f0000000000)={0x1, 0x0, [{0x6a2, 0x0, 0xff}]}) 2.099680282s ago: executing program 2 (id=13): ioctl$USBDEVFS_SUBMITURB(0xffffffffffffffff, 0x8038550a, &(0x7f0000000000)=@urb_type_control={0x2, {}, 0xffffffff, 0x1, &(0x7f0000000300)={0x4b5a9da54893e123, 0x1, 0x6, 0x1}, 0x8, 0x0, 0x1000000, 0x0, 0x3, 0x0, 0x0}) 1.905374065s ago: executing program 2 (id=15): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000030c0)=ANY=[], 0xe8}, 0x1, 0x0, 0x0, 0x40}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f0000000100)='proc\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) write(r0, &(0x7f0000000000)='3', 0x4e) socket$nl_netfilter(0x10, 0x3, 0xc) r1 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000007c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r1, 0xaf01, 0x0) 1.86963055s ago: executing program 1 (id=16): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000bc0), r0) sendmsg$NLBL_CIPSOV4_C_ADD(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f00000001c0)={0x174, r1, 0x1, 0x0, 0x0, {}, [@NLBL_CIPSOV4_A_TAGLST={0x4}, @NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x1}, @NLBL_CIPSOV4_A_DOI={0x8}, @NLBL_CIPSOV4_A_MLSLVLLST={0x4}, @NLBL_CIPSOV4_A_MLSCATLST={0x18, 0xc, 0x0, 0x1, [{0x14, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8}, @NLBL_CIPSOV4_A_MLSCATREM={0x8}]}]}, @NLBL_CIPSOV4_A_MLSLVLLST={0x3c, 0x8, 0x0, 0x1, [{0x14, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x66}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xe}]}, {0x24, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x9e}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x73}, @NLBL_CIPSOV4_A_MLSLVLREM={0x5, 0x6, 0xdf}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xa8}]}]}, @NLBL_CIPSOV4_A_MLSCATLST={0x18, 0xc, 0x0, 0x1, [{0x14, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x24f1e800}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xf601}]}]}, @NLBL_CIPSOV4_A_MLSCATLST={0xd4, 0xc, 0x0, 0x1, [{0x44, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x745fe378}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x8cc5}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x7d12c3c3}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x6e06a59e}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x1e962e7}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x7c95a904}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x725b8c49}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x2c43}]}, {0xc, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0xd99fee0}]}, {0x3c, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x773fe339}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x2fc3cc9c}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x2426419}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x8594}, @NLBL_CIPSOV4_A_MLSCATLOC={0x0, 0x9, 0x36843d30}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xb8a}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xddae}]}, {0x14, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x2b9810c8}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x68dc0f90}]}, {0xc, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x2f3b6b4c}]}, {0x24, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x8bab}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x4a0d7d0f}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x238c}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x5849}]}]}, @NLBL_CIPSOV4_A_DOI={0x8, 0x1, 0xffffffffffffffff}]}, 0x174}, 0x1, 0x0, 0x0, 0x4801}, 0x10) 1.706840999s ago: executing program 1 (id=17): r0 = syz_open_dev$dvb_frontend(&(0x7f0000000080), 0x0, 0x2) ioctl$FE_SET_FRONTEND(r0, 0x40246f4c, &(0x7f0000000000)={0xd, 0x1, @qam={0x5, 0x13, 0xe}}) 1.621515585s ago: executing program 2 (id=18): sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000001340)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000140)=@updsa={0xf0, 0x10, 0x1, 0x0, 0x200000, {{@in6=@dev={0xfe, 0x80, '\x00', 0x29}, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x32}, {@in6=@private1, 0x0, 0x32}, @in=@local, {0xfffffffffffffffd}, {}, {0xfffffffc, 0x0, 0xfffffffe}, 0x200, 0x8000000, 0xa}}, 0xf0}}, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r2, 0xc008ae88, &(0x7f0000000040)={0x10000000000000cf, 0x0, [{}]}) 1.451277962s ago: executing program 0 (id=19): r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000100)='/sys/power/resume', 0x88102, 0x0) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) write$cgroup_int(r0, &(0x7f0000000040)=0x700, 0xfdef) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000100), 0x40440, 0x0) 1.406026855s ago: executing program 4 (id=20): r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r0) ptrace$pokeuser(0x6, r0, 0x386, 0x100) 1.337435965s ago: executing program 1 (id=21): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000030c0)=ANY=[], 0xe8}, 0x1, 0x0, 0x0, 0x80}, 0x0) gettid() mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f0000000240)='proc\x00', 0x4000, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) write(r0, &(0x7f0000000000)='3', 0x4e) r1 = socket$pppl2tp(0x18, 0x1, 0x1) r2 = socket$inet_udp(0x2, 0x2, 0x0) connect$pppl2tp(r1, &(0x7f0000000240)=@pppol2tpin6={0x18, 0x1, {0x0, r2, 0x2, 0x0, 0x0, 0x0, {0xa, 0x0, 0x2, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}}}, 0x32) 1.172150292s ago: executing program 2 (id=22): r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) bind$bt_l2cap(r1, &(0x7f0000000100)={0x1f, 0x80, @any, 0x0, 0x1}, 0x10) listen(r1, 0x5) syz_emit_vhci(&(0x7f0000000340)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x0, 0x0, 0x12}, @l2cap_cid_le_signaling={{0xe}, @l2cap_ecred_conn_req={{0x17, 0x42, 0xa}, {0x80, 0x200, 0x200, 0xa, [0x40]}}}}, 0x17) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0xb}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x3000003, 0x4031, 0xffffffffffffffff, 0x0) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000140), 0x20000, 0x0) 1.081300724s ago: executing program 1 (id=23): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./sys\x00', &(0x7f0000000080)='sysfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000000100)='./dev\x00', &(0x7f0000000140)='devtmpfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./sys/module/md_mod/parameters/new_array\x00', 0x1, 0x0) bpf$BPF_GET_MAP_INFO(0xf, 0x0, 0x0) write(r0, &(0x7f0000000200)='md0\n\x00', 0x4) close(r0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./dev/md0\x00', 0x4002, 0x0) ioctl(r1, 0x40480923, &(0x7f0000000380)="000000000000000000000000000000000a00000000040000020000000200000000000000010000000000000000000000000000000000000000000000000000000201000000000100") ioctl(r1, 0x40140921, 0x0) mount$tmpfs(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x0, &(0x7f0000000200)=ANY=[]) syz_open_dev$usbfs(&(0x7f0000000040), 0x400000001ff, 0x101301) ioctl(r1, 0x40140921, &(0x7f0000000420)="010000000100000001000000010000000600") ioctl(r1, 0x400c0930, 0x0) ioctl(r1, 0x40140921, &(0x7f0000000440)="020000000100000002") 877.488491ms ago: executing program 4 (id=24): socket$nl_generic(0x10, 0x3, 0x10) openat(0xffffffffffffff9c, &(0x7f0000000500)='.\x00', 0x0, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x1) setns(0xc9, 0x0) r0 = socket(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=ANY=[@ANYBLOB="680000001000ffff25bd7000fddbdf2500000000", @ANYRES32=0x0, @ANYBLOB="1720000021200000400012800c0001006d6163766c616e0030000280080003000300000009000100100000001c0005800a000400aaaaaaaaaa2d00000a0004003426f7b68ed1000008000500", @ANYRES32=r1], 0x68}, 0x1, 0x0, 0x0, 0x1}, 0x8000002) sendmmsg(r0, &(0x7f0000000000), 0x4000000000001f2, 0xfc) 637.130432ms ago: executing program 1 (id=25): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x3}]}, 0x24}}, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000680)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000440)={0x44, r4, 0x1, 0x70bd28, 0x25dfdbfd, {{}, {@void, @val={0x8, 0x3, r5}, @val={0xc, 0x99, {0x7ff, 0x74}}}}, [@NL80211_ATTR_IFNAME={0x14, 0x4, 'syzkaller0\x00'}, @NL80211_ATTR_IFTYPE={0x8, 0x5, 0x4}]}, 0x44}, 0x1, 0x0, 0x0, 0x81}, 0x24044884) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r6) socket$nl_generic(0x10, 0x3, 0x10) ioctl$SIOCSIFHWADDR(r6, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local}) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_START_AP(r7, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000005c0)={0x88, r8, 0x205, 0x0, 0x0, {{}, {@val={0x8, 0x3, r9}, @void}}, [@beacon=[@NL80211_ATTR_BEACON_HEAD={0x53, 0xe, {{{0x0, 0x0, 0x8, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1}, {0x81}, @device_b, @device_b, @initial, {0x6}}, 0x9, @default, 0x1971, @val, @void, @val={0x3, 0x1, 0xb5}, @void, @val={0x6, 0x2, 0xe}, @void, @void, @val={0x2a, 0x1, {0x1, 0x1, 0x1}}, @val={0x3c, 0x4, {0x1, 0x9, 0x30, 0xb6}}, @void, @val={0x72, 0x6}, @val={0x71, 0x7, {0xffffffffffffffff, 0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x2, 0xb}}, @val={0x76, 0x6, {0x4, 0x2, 0x7, 0x5}}}}], @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}], @NL80211_ATTR_BEACON_INTERVAL={0x8}, @NL80211_ATTR_DTIM_PERIOD={0x8}]}, 0x88}}, 0x24000080) 526.246205ms ago: executing program 4 (id=26): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) setuid(0xee01) bind$bt_hci(r0, &(0x7f0000000280), 0x6) write$binfmt_misc(r0, &(0x7f0000000100), 0x6) 416.994137ms ago: executing program 3 (id=27): bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000002000000000000000000082295"], 0x0, 0x0, 0x0, 0x0, 0x1e00, 0x2c}, 0x94) socket$nl_route(0x10, 0x3, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty}, 0x1c) listen(r0, 0x9) r1 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r1, &(0x7f0000000000)={0x2, 0x4e22, @empty}, 0x10) r2 = accept(r0, 0x0, 0x0) sendmsg$TEAM_CMD_OPTIONS_SET(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[], 0xfffffdef}}, 0x0) recvfrom(r1, &(0x7f0000000180)=""/60, 0xfffffffffffffecb, 0x500, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x200000d, 0x4008031, 0xffffffffffffffff, 0x0) socket$unix(0x1, 0x5, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000012c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40001}, 0x10) 386.916062ms ago: executing program 2 (id=28): r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./dev/cpu/0/msr\x00', 0x2, 0x0) write$FUSE_INIT(r0, 0x0, 0x0) pwrite64(r0, 0x0, 0x0, 0x8) 381.900574ms ago: executing program 0 (id=29): r0 = add_key$user(&(0x7f0000000040), &(0x7f0000000080)={'syz', 0x3}, &(0x7f0000000940)=';', 0x1, 0xfffffffffffffffd) keyctl$KEYCTL_MOVE(0x1e, r0, 0x0, 0x0, 0x0) 248.431789ms ago: executing program 2 (id=30): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.cpu/test\x00', 0x777) r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./cgroup.cpu/test/memory.limit_in_bytes\x00', 0x2, 0x0) write(r0, &(0x7f0000000380)='100000', 0x6) r1 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./cgroup.cpu/test/memory.oom_control\x00', 0x2, 0x0) write(r1, &(0x7f0000000200)='1', 0x1) r2 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./cgroup.cpu/test/cgroup.procs\x00', 0x2, 0x0) write(r2, &(0x7f0000000280)='0', 0x1) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./tracing\x00', 0x1ff) socket$nl_netfilter(0x10, 0x3, 0xc) mount(0x0, &(0x7f00000002c0)='./tracing\x00', &(0x7f00000000c0)='tracefs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./gadget\x00', 0x1ff) mount(0x0, &(0x7f0000000100)='./gadget\x00', &(0x7f0000000200)='gadgetfs\x00', 0x0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./gadget/dummy_udc\x00', 0x2, 0x0) write(r3, &(0x7f0000000400)="0000000009020900010100803212010002000000402505a0a4000100000001", 0x1f) socket$inet6(0xa, 0x1, 0x0) r4 = fsopen(&(0x7f0000000000)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r4, 0x6, 0x0, 0x0, 0x0) r5 = fsmount(r4, 0x0, 0x0) r6 = openat$cgroup_pressure(r5, &(0x7f00000000c0)='memory.pressure\x00', 0x2, 0x0) read(r6, &(0x7f0000000100)=""/43, 0x2b) socket$inet_tcp(0x2, 0x1, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./tracing/instances/inst1\x00', 0x1ff) socket$inet_sctp(0x2, 0x5, 0x84) 248.104858ms ago: executing program 4 (id=31): ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) r0 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) ioctl$SIOCSIFHWADDR(r0, 0x8914, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x24044010) ioctl$KVM_CREATE_PIT2(0xffffffffffffffff, 0x4040ae77, &(0x7f0000000180)={0x1}) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000030c0)=ANY=[], 0xe8}, 0x1, 0x0, 0x0, 0x80}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f0000000240)='proc\x00', 0x4000, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) write(r1, &(0x7f0000000000)='3', 0x4e) r2 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$IP_VS_SO_SET_STARTDAEMON(r2, 0x0, 0x48b, &(0x7f0000000000)={0x2, 'bridge0\x00', 0x4}, 0x18) 243.502381ms ago: executing program 0 (id=32): r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f00000003c0), 0x88800, 0x0) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f0000000080)={0xc, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r0, 0x3ba0, &(0x7f00000002c0)={0x82, 0x2, r1}) ioctl$IOMMU_IOAS_MAP$PAGES(r0, 0x3b85, &(0x7f0000000400)={0x54, 0x2, r1, 0x0, &(0x7f0000003000/0x2000)=nil, 0x2000, 0x7ffffffe}) ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r0, 0x3ba0, &(0x7f0000000340)={0x48, 0x5, r1, 0x0, 0xffffffffffffffff, 0x1}) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/test\x00', 0x777) r3 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./cgroup.cpu/test/memory.limit_in_bytes\x00', 0x2, 0x0) write(r3, &(0x7f0000000180)='10000', 0x5) r4 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./cgroup.cpu/test/memory.oom_control\x00', 0x2, 0x0) write(r4, &(0x7f0000000200)='1', 0x1) r5 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./cgroup.cpu/test/cgroup.procs\x00', 0x2, 0x0) write(r5, &(0x7f0000000280)='0', 0x1) socket(0x2a, 0x800, 0x3) socket(0x10, 0x80000, 0x0) socket$vsock_stream(0x28, 0x1, 0x0) ioctl$IOMMU_TEST_OP_ACCESS_PAGES$syz(r0, 0x3ba0, &(0x7f0000000480)={0x48, 0x7, r2, 0x0, 0x10001, 0x0, 0x0, 0x1000, 0x26}) 59.459055ms ago: executing program 1 (id=33): r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_SETPLANE(r0, 0xc03064b7, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x1f1, 0x6, 0xfffffffb, 0x6, 0xffffffff, 0x8d, 0x66a, 0x371210b4, 0x3}) 0s ago: executing program 4 (id=34): r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x42, 0x0) ioctl$SOUND_MIXER_WRITE_RECSRC(r0, 0xc0044dff, &(0x7f0000000180)=0x4) kernel console output (not intermixed with test programs): [ 54.564504][ T30] audit: type=1400 audit(1788440830.306:111): avc: denied { write } for pid=5453 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 54.622122][ T30] audit: type=1400 audit(1788440830.356:112): avc: denied { write } for pid=5464 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 55.784625][ T30] audit: type=1400 audit(1788440831.526:113): avc: denied { write } for pid=5467 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 55.848584][ T30] audit: type=1400 audit(1788440831.586:114): avc: denied { write } for pid=5478 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 56.041671][ T30] audit: type=1400 audit(1788440831.776:115): avc: denied { write } for pid=5481 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 56.098131][ T30] audit: type=1400 audit(1788440831.836:116): avc: denied { write } for pid=5492 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 56.418061][ T30] audit: type=1400 audit(1788440832.156:117): avc: denied { write } for pid=5495 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 56.471320][ T30] audit: type=1400 audit(1788440832.206:118): avc: denied { write } for pid=5506 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 56.812164][ T30] audit: type=1400 audit(1788440832.546:119): avc: denied { write } for pid=5509 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 56.872816][ T30] audit: type=1400 audit(1788440832.616:120): avc: denied { write } for pid=5520 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 57.066095][ T30] audit: type=1400 audit(1788440832.806:121): avc: denied { write } for pid=5523 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 57.125782][ T30] audit: type=1400 audit(1788440832.866:122): avc: denied { write } for pid=5534 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 Warning: Permanently added '10.128.1.56' (ED25519) to the list of known hosts. [ 61.257690][ T30] kauditd_printk_skb: 6 callbacks suppressed [ 61.257994][ T30] audit: type=1400 audit(1788440836.996:129): avc: denied { mounton } for pid=5588 comm="syz-executor" path="/syzcgroup/unified" dev="sda1" ino=2023 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1 [ 61.265170][ T30] audit: type=1400 audit(1788440837.006:130): avc: denied { mount } for pid=5588 comm="syz-executor" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 61.268627][ T5588] cgroup: Unknown subsys name 'net' [ 61.270566][ T30] audit: type=1400 audit(1788440837.006:131): avc: denied { unmount } for pid=5588 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 61.455104][ T5588] cgroup: Unknown subsys name 'cpuset' [ 61.462160][ T5588] cgroup: Unknown subsys name 'rlimit' [ 61.585505][ T30] audit: type=1400 audit(1788440837.326:132): avc: denied { setattr } for pid=5588 comm="syz-executor" name="raw-gadget" dev="devtmpfs" ino=814 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 61.608985][ T30] audit: type=1400 audit(1788440837.326:133): avc: denied { create } for pid=5588 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 61.609028][ T30] audit: type=1400 audit(1788440837.326:134): avc: denied { write } for pid=5588 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 61.609062][ T30] audit: type=1400 audit(1788440837.326:135): avc: denied { read } for pid=5588 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 61.699485][ T5590] SELinux: Context root:object_r:swapfile_t is not valid (left unmapped). [ 61.700857][ T30] audit: type=1400 audit(1788440837.436:136): avc: denied { relabelto } for pid=5590 comm="mkswap" name="swap-file" dev="sda1" ino=2026 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" Setting up swapspace version 1, size = 127995904 bytes [ 61.702531][ T30] audit: type=1400 audit(1788440837.436:137): avc: denied { write } for pid=5590 comm="mkswap" path="/root/swap-file" dev="sda1" ino=2026 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 61.769303][ T30] audit: type=1400 audit(1788440837.506:138): avc: denied { read } for pid=5588 comm="syz-executor" name="swap-file" dev="sda1" ino=2026 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 62.697223][ T5588] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 66.006061][ T1306] ieee802154 phy0 wpan0: encryption failed: -22 [ 66.006141][ T1306] ieee802154 phy1 wpan1: encryption failed: -22 [ 66.122810][ T5600] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 66.130751][ T5600] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 66.138300][ T5600] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 66.146736][ T5600] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 66.155171][ T5600] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 66.219716][ T4919] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 66.220593][ T4919] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 66.221038][ T4919] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 66.221899][ T4919] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 66.222794][ T4919] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 66.249597][ T52] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 66.250489][ T52] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 66.250846][ T52] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 66.251783][ T52] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 66.252280][ T52] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 66.282767][ T5600] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 66.284005][ T5600] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 66.284526][ T5600] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 66.286664][ T5600] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 66.286859][ T5600] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 66.289159][ T5614] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 66.316769][ T5614] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 66.318277][ T30] kauditd_printk_skb: 10 callbacks suppressed [ 66.318291][ T30] audit: type=1400 audit(1788440842.066:149): avc: denied { sys_module } for pid=5598 comm="syz-executor" capability=16 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 66.362691][ T5614] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 66.363371][ T5614] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 66.363819][ T5614] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 67.632053][ T5604] bridge0: port 1(bridge_slave_0) entered blocking state [ 67.632944][ T5604] bridge0: port 1(bridge_slave_0) entered disabled state [ 67.633056][ T5604] bridge_slave_0: entered allmulticast mode [ 67.634501][ T5604] bridge_slave_0: entered promiscuous mode [ 67.638039][ T5604] bridge0: port 2(bridge_slave_1) entered blocking state [ 67.638116][ T5604] bridge0: port 2(bridge_slave_1) entered disabled state [ 67.638208][ T5604] bridge_slave_1: entered allmulticast mode [ 67.639661][ T5604] bridge_slave_1: entered promiscuous mode [ 67.706875][ T5604] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 67.743432][ T5604] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 67.837864][ T5604] team0: Port device team_slave_0 added [ 67.865655][ T5604] team0: Port device team_slave_1 added [ 67.904445][ T5598] bridge0: port 1(bridge_slave_0) entered blocking state [ 67.904568][ T5598] bridge0: port 1(bridge_slave_0) entered disabled state [ 67.904855][ T5598] bridge_slave_0: entered allmulticast mode [ 67.906252][ T5598] bridge_slave_0: entered promiscuous mode [ 67.909255][ T5598] bridge0: port 2(bridge_slave_1) entered blocking state [ 67.909341][ T5598] bridge0: port 2(bridge_slave_1) entered disabled state [ 67.909435][ T5598] bridge_slave_1: entered allmulticast mode [ 67.910977][ T5598] bridge_slave_1: entered promiscuous mode [ 67.926618][ T5604] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 67.926636][ T5604] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 67.926656][ T5604] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 67.929502][ T5604] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 67.929514][ T5604] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 67.929535][ T5604] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 67.930016][ T5606] bridge0: port 1(bridge_slave_0) entered blocking state [ 67.930094][ T5606] bridge0: port 1(bridge_slave_0) entered disabled state [ 67.930184][ T5606] bridge_slave_0: entered allmulticast mode [ 67.931872][ T5606] bridge_slave_0: entered promiscuous mode [ 67.935856][ T5606] bridge0: port 2(bridge_slave_1) entered blocking state [ 67.935934][ T5606] bridge0: port 2(bridge_slave_1) entered disabled state [ 67.936495][ T5606] bridge_slave_1: entered allmulticast mode [ 67.937921][ T5606] bridge_slave_1: entered promiscuous mode [ 67.950862][ T5607] bridge0: port 1(bridge_slave_0) entered blocking state [ 67.950941][ T5607] bridge0: port 1(bridge_slave_0) entered disabled state [ 67.951228][ T5607] bridge_slave_0: entered allmulticast mode [ 67.954090][ T5607] bridge_slave_0: entered promiscuous mode [ 68.020884][ T5607] bridge0: port 2(bridge_slave_1) entered blocking state [ 68.020970][ T5607] bridge0: port 2(bridge_slave_1) entered disabled state [ 68.021272][ T5607] bridge_slave_1: entered allmulticast mode [ 68.023991][ T5607] bridge_slave_1: entered promiscuous mode [ 68.084797][ T5606] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 68.099932][ T5607] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 68.103901][ T5598] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 68.125526][ T5606] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 68.127674][ T5607] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 68.129750][ T5598] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 68.215957][ T5604] hsr_slave_0: entered promiscuous mode [ 68.216853][ T5604] hsr_slave_1: entered promiscuous mode [ 68.219839][ T5606] team0: Port device team_slave_0 added [ 68.234377][ T5614] Bluetooth: hci0: command tx timeout [ 68.242009][ T5605] bridge0: port 1(bridge_slave_0) entered blocking state [ 68.243184][ T5605] bridge0: port 1(bridge_slave_0) entered disabled state [ 68.243294][ T5605] bridge_slave_0: entered allmulticast mode [ 68.244655][ T5605] bridge_slave_0: entered promiscuous mode [ 68.261733][ T5606] team0: Port device team_slave_1 added [ 68.275338][ T5607] team0: Port device team_slave_0 added [ 68.277737][ T5607] team0: Port device team_slave_1 added [ 68.289303][ T5598] team0: Port device team_slave_0 added [ 68.289741][ T5605] bridge0: port 2(bridge_slave_1) entered blocking state [ 68.289839][ T5605] bridge0: port 2(bridge_slave_1) entered disabled state [ 68.290130][ T5605] bridge_slave_1: entered allmulticast mode [ 68.292030][ T5605] bridge_slave_1: entered promiscuous mode [ 68.322986][ T5614] Bluetooth: hci4: command tx timeout [ 68.323016][ T4919] Bluetooth: hci2: command tx timeout [ 68.323258][ T52] Bluetooth: hci1: command tx timeout [ 68.354791][ T5598] team0: Port device team_slave_1 added [ 68.365566][ T5605] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 68.368511][ T5605] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 68.398256][ T5606] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 68.398276][ T5606] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 68.398299][ T5606] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 68.406455][ T5614] Bluetooth: hci3: command tx timeout [ 68.447733][ T5607] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 68.447749][ T5607] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 68.447769][ T5607] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 68.449685][ T5607] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 68.449696][ T5607] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 68.449718][ T5607] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 68.515666][ T5606] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 68.515682][ T5606] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 68.515704][ T5606] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 68.542696][ T5598] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 68.542712][ T5598] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 68.542732][ T5598] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 68.545757][ T5605] team0: Port device team_slave_0 added [ 68.590399][ T5598] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 68.590414][ T5598] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 68.590435][ T5598] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 68.603286][ T5605] team0: Port device team_slave_1 added [ 68.683701][ T5607] hsr_slave_0: entered promiscuous mode [ 68.684490][ T5607] hsr_slave_1: entered promiscuous mode [ 68.685113][ T5607] debugfs: 'hsr0' already exists in 'hsr' [ 68.685193][ T5607] Cannot create hsr debugfs directory [ 68.730427][ T5606] hsr_slave_0: entered promiscuous mode [ 68.731269][ T5606] hsr_slave_1: entered promiscuous mode [ 68.731782][ T5606] debugfs: 'hsr0' already exists in 'hsr' [ 68.731798][ T5606] Cannot create hsr debugfs directory [ 68.733559][ T5605] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 68.733571][ T5605] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 68.733592][ T5605] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 68.741697][ T5598] hsr_slave_0: entered promiscuous mode [ 68.743281][ T5598] hsr_slave_1: entered promiscuous mode [ 68.743842][ T5598] debugfs: 'hsr0' already exists in 'hsr' [ 68.743857][ T5598] Cannot create hsr debugfs directory [ 68.773088][ T5605] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 68.773102][ T5605] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 68.773124][ T5605] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 68.908931][ T5605] hsr_slave_0: entered promiscuous mode [ 68.909570][ T5605] hsr_slave_1: entered promiscuous mode [ 68.910134][ T5605] debugfs: 'hsr0' already exists in 'hsr' [ 68.910150][ T5605] Cannot create hsr debugfs directory [ 68.988806][ T5604] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 68.999316][ T5604] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 69.029321][ T5604] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 69.038628][ T5604] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 69.069636][ T5604] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 69.078396][ T5604] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 69.079093][ T5604] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 69.089855][ T5604] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 69.268156][ T5607] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 69.272976][ T5607] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 69.273635][ T5607] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 69.277965][ T5607] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 69.280367][ T5607] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 69.288684][ T5607] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 69.289339][ T5607] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 69.293466][ T5607] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 69.386516][ T5606] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 69.396156][ T5606] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 69.410773][ T5606] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 69.419270][ T5606] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 69.419904][ T5606] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 69.431333][ T5606] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 69.449830][ T5606] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 69.453914][ T5606] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 69.459259][ T5604] 8021q: adding VLAN 0 to HW filter on device bond0 [ 69.472027][ T5604] 8021q: adding VLAN 0 to HW filter on device team0 [ 69.506588][ T1472] bridge0: port 1(bridge_slave_0) entered blocking state [ 69.506715][ T1472] bridge0: port 1(bridge_slave_0) entered forwarding state [ 69.529163][ T1472] bridge0: port 2(bridge_slave_1) entered blocking state [ 69.529288][ T1472] bridge0: port 2(bridge_slave_1) entered forwarding state [ 69.581819][ T5605] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 69.589529][ T5605] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 69.605379][ T5605] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 69.616289][ T5605] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 69.619359][ T5605] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 69.627431][ T5605] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 69.640596][ T5605] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 69.649758][ T5605] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 69.656340][ T5607] 8021q: adding VLAN 0 to HW filter on device bond0 [ 69.681780][ T5607] 8021q: adding VLAN 0 to HW filter on device team0 [ 69.724135][ T3706] bridge0: port 1(bridge_slave_0) entered blocking state [ 69.724221][ T3706] bridge0: port 1(bridge_slave_0) entered forwarding state [ 69.751246][ T3706] bridge0: port 2(bridge_slave_1) entered blocking state [ 69.751573][ T3706] bridge0: port 2(bridge_slave_1) entered forwarding state [ 69.793622][ T5598] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 69.805617][ T5598] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 69.820221][ T5598] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 69.831868][ T5598] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 69.846532][ T5598] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 69.857298][ T5598] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 69.870536][ T5598] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 69.880954][ T5598] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 69.976205][ T5606] 8021q: adding VLAN 0 to HW filter on device bond0 [ 70.068364][ T5606] 8021q: adding VLAN 0 to HW filter on device team0 [ 70.089420][ T5605] 8021q: adding VLAN 0 to HW filter on device bond0 [ 70.100474][ T3706] bridge0: port 1(bridge_slave_0) entered blocking state [ 70.100570][ T3706] bridge0: port 1(bridge_slave_0) entered forwarding state [ 70.124392][ T3706] bridge0: port 2(bridge_slave_1) entered blocking state [ 70.124484][ T3706] bridge0: port 2(bridge_slave_1) entered forwarding state [ 70.158858][ T5605] 8021q: adding VLAN 0 to HW filter on device team0 [ 70.176960][ T1472] bridge0: port 1(bridge_slave_0) entered blocking state [ 70.177064][ T1472] bridge0: port 1(bridge_slave_0) entered forwarding state [ 70.195372][ T3706] bridge0: port 2(bridge_slave_1) entered blocking state [ 70.195513][ T3706] bridge0: port 2(bridge_slave_1) entered forwarding state [ 70.198725][ T5598] 8021q: adding VLAN 0 to HW filter on device bond0 [ 70.301178][ T5598] 8021q: adding VLAN 0 to HW filter on device team0 [ 70.312621][ T5614] Bluetooth: hci0: command tx timeout [ 70.347056][ T3706] bridge0: port 1(bridge_slave_0) entered blocking state [ 70.347161][ T3706] bridge0: port 1(bridge_slave_0) entered forwarding state [ 70.359609][ T3706] bridge0: port 2(bridge_slave_1) entered blocking state [ 70.359697][ T3706] bridge0: port 2(bridge_slave_1) entered forwarding state [ 70.393185][ T52] Bluetooth: hci2: command tx timeout [ 70.394339][ T4919] Bluetooth: hci1: command tx timeout [ 70.400621][ T5614] Bluetooth: hci4: command tx timeout [ 70.478456][ T5614] Bluetooth: hci3: command tx timeout [ 70.479185][ T5604] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 70.677521][ T5604] veth0_vlan: entered promiscuous mode [ 70.704929][ T5604] veth1_vlan: entered promiscuous mode [ 70.817946][ T5604] veth0_macvtap: entered promiscuous mode [ 70.837461][ T5604] veth1_macvtap: entered promiscuous mode [ 70.926432][ T5604] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 70.939502][ T5604] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 71.015302][ T5607] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 71.094740][ T59] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 71.096654][ T50] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 71.096691][ T50] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 71.096723][ T50] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 71.290289][ T59] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 71.290339][ T59] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 71.316654][ T5606] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 71.425231][ T59] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 71.425270][ T59] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 71.428712][ T5605] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 71.445666][ T30] audit: type=1400 audit(1788440847.186:150): avc: denied { mounton } for pid=5604 comm="syz-executor" path="/root/syzkaller.xDDqch/syz-tmp" dev="sda1" ino=2042 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_home_t tclass=dir permissive=1 [ 71.451005][ T30] audit: type=1400 audit(1788440847.186:151): avc: denied { mount } for pid=5604 comm="syz-executor" name="/" dev="tmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 71.458849][ T30] audit: type=1400 audit(1788440847.196:152): avc: denied { mounton } for pid=5604 comm="syz-executor" path="/root/syzkaller.xDDqch/syz-tmp/newroot/dev" dev="tmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 71.485282][ T30] audit: type=1400 audit(1788440847.226:153): avc: denied { mount } for pid=5604 comm="syz-executor" name="/" dev="proc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 71.540723][ T30] audit: type=1400 audit(1788440847.276:154): avc: denied { mounton } for pid=5604 comm="syz-executor" path="/root/syzkaller.xDDqch/syz-tmp/newroot/sys/kernel/debug" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=dir permissive=1 [ 71.545834][ T30] audit: type=1400 audit(1788440847.286:155): avc: denied { mounton } for pid=5604 comm="syz-executor" path="/root/syzkaller.xDDqch/syz-tmp/newroot/proc/sys/fs/binfmt_misc" dev="proc" ino=8217 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysctl_fs_t tclass=dir permissive=1 [ 71.581241][ T30] audit: type=1400 audit(1788440847.316:156): avc: denied { unmount } for pid=5604 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 71.607490][ T30] audit: type=1400 audit(1788440847.346:157): avc: denied { mounton } for pid=5604 comm="syz-executor" path="/dev/gadgetfs" dev="devtmpfs" ino=2780 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:device_t tclass=dir permissive=1 [ 71.621845][ T30] audit: type=1400 audit(1788440847.356:158): avc: denied { mount } for pid=5604 comm="syz-executor" name="/" dev="gadgetfs" ino=8233 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfs_t tclass=filesystem permissive=1 [ 71.636003][ T30] audit: type=1400 audit(1788440847.376:159): avc: denied { mount } for pid=5604 comm="syz-executor" name="/" dev="binder" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 71.659651][ T5606] veth0_vlan: entered promiscuous mode [ 71.713706][ T5605] veth0_vlan: entered promiscuous mode [ 71.723063][ T5606] veth1_vlan: entered promiscuous mode [ 71.760888][ T5605] veth1_vlan: entered promiscuous mode [ 71.762038][ T5604] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 71.781657][ T5598] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 71.877334][ T5606] veth0_macvtap: entered promiscuous mode [ 71.897756][ T5606] veth1_macvtap: entered promiscuous mode [ 71.925003][ T5605] veth0_macvtap: entered promiscuous mode [ 71.929517][ T5605] veth1_macvtap: entered promiscuous mode [ 71.950535][ T5605] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 71.959896][ T5598] veth0_vlan: entered promiscuous mode [ 71.984828][ T5606] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 71.991937][ T5605] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 71.998450][ T5598] veth1_vlan: entered promiscuous mode [ 72.012122][ T5607] veth0_vlan: entered promiscuous mode [ 72.021424][ T5606] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 72.048668][ T5607] veth1_vlan: entered promiscuous mode [ 72.089495][ T5598] veth0_macvtap: entered promiscuous mode [ 72.104904][ T3786] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.105983][ T3786] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.106020][ T3786] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.106052][ T3786] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.106084][ T3786] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.106115][ T3786] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.106146][ T3786] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.106178][ T3786] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.110349][ T5598] veth1_macvtap: entered promiscuous mode [ 72.137821][ T5598] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 72.144345][ T5598] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 72.156350][ T5710] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 72.257930][ T3752] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 72.257958][ T3752] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 72.283502][ T5607] veth0_macvtap: entered promiscuous mode [ 72.302628][ T1472] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.302755][ T1472] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 72.302772][ T1472] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 72.302939][ T1472] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.303882][ T1472] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.303930][ T1472] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.311952][ T5710] usb 2-1: Using ep0 maxpacket: 8 [ 72.327609][ T5607] veth1_macvtap: entered promiscuous mode [ 72.350083][ T5710] usb 2-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 72.384531][ T5710] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 72.396223][ T5710] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 72.402741][ T5614] Bluetooth: hci0: command tx timeout [ 72.408616][ T3786] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 72.408632][ T3786] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 72.436131][ T5710] usb 2-1: config 0 descriptor?? [ 72.473037][ T52] Bluetooth: hci2: command tx timeout [ 72.473711][ T52] Bluetooth: hci1: command tx timeout [ 72.473829][ T5614] Bluetooth: hci4: command tx timeout [ 72.493261][ T5607] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 72.507655][ T1472] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 72.507688][ T1472] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 72.518869][ T5607] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 72.553467][ T5614] Bluetooth: hci3: command tx timeout [ 72.640739][ T5788] wlan0 speed is unknown, defaulting to 1000 [ 72.641754][ T5788] wlan0 speed is unknown, defaulting to 1000 [ 72.647432][ T3752] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 72.647449][ T3752] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 72.680709][ T5710] iowarrior 2-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0 [ 72.698785][ T5788] wlan0 speed is unknown, defaulting to 1000 [ 72.710587][ T5788] smbdirect: ib_dev[syz0]: added: RNIC max_fast_reg_page_list_len=256 device_cap_flags=0x200000 kernel_cap_flags=0x10 page_size_cap=0x1000 [ 72.710641][ T5788] smbdirect: ib_dev[syz0]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=1 max_cqe=3276800 max_qp_wr=32768 max_send_sge=6 max_recv_sge=6 [ 72.710698][ T5788] smbdirect: ib_dev[syz0]PORT[1]: iwarp=1 ib=0 roce=0 v1=0 v2=0 core_cap_flags=0x400008 [ 72.717894][ T5788] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 72.730903][ T5788] infiniband syz0: RDMA CMA: cma_listen_on_dev, error -98 [ 72.838087][ T5788] wlan0 speed is unknown, defaulting to 1000 [ 72.863784][ T5788] wlan0 speed is unknown, defaulting to 1000 [ 72.868358][ T198] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 72.868384][ T198] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 72.910872][ T5788] wlan0 speed is unknown, defaulting to 1000 [ 72.922684][ T1472] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.922742][ T1472] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.922770][ T1472] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.922801][ T1472] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.955288][ T5788] wlan0 speed is unknown, defaulting to 1000 [ 72.970059][ T5788] wlan0 speed is unknown, defaulting to 1000 [ 73.011016][ T5795] oom_control is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 73.027798][ C0] iowarrior 2-1:0.0: iowarrior_callback - usb_submit_urb failed with result -19 [ 73.027867][ T5792] usb 2-1: USB disconnect, device number 2 [ 73.068008][ T5785] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 73.095526][ T1472] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 73.095562][ T1472] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 73.250895][ T5798] ip_tables: iptables: counters copy to user failed while replacing table [ 73.270360][ T1472] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 73.270395][ T1472] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 73.275978][ T198] IPVS: starting estimator thread 0... [ 73.364217][ T5801] IPVS: using max 41 ests per chain, 98400 per kthread [ 73.473325][ T198] IPVS: starting estimator thread 0... [ 73.562321][ T5805] IPVS: using max 46 ests per chain, 110400 per kthread [ 74.216481][ T5828] FAULT_INJECTION: forcing a failure. [ 74.216481][ T5828] name failslab, interval 1, probability 0, space 0, times 1 [ 74.216552][ T5828] CPU: 0 UID: 0 PID: 5828 Comm: syz.2.15 Not tainted syzkaller #0 PREEMPT(full) [ 74.216575][ T5828] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 74.216592][ T5828] Call Trace: [ 74.216600][ T5828] [ 74.216608][ T5828] dump_stack_lvl+0x100/0x190 [ 74.216647][ T5828] should_fail_ex.cold+0x5/0xa [ 74.216674][ T5828] should_failslab+0xc2/0x120 [ 74.216702][ T5828] __kmalloc_node_track_caller_noprof+0xfa/0x870 [ 74.216723][ T5828] ? sidtab_sid2str_get+0x84/0x670 [ 74.216746][ T5828] ? sidtab_sid2str_get+0x17a/0x670 [ 74.216773][ T5828] kmemdup_noprof+0x29/0x60 [ 74.216803][ T5828] sidtab_sid2str_get+0x17a/0x670 [ 74.216828][ T5828] security_sid_to_context_core+0x373/0x700 [ 74.216865][ T5828] avc_audit_post_callback+0x109/0x910 [ 74.216893][ T5828] ? __pfx_avc_audit_post_callback+0x10/0x10 [ 74.216914][ T5828] ? skb_put+0x138/0x180 [ 74.216939][ T5828] ? audit_log_n_string+0x2a3/0x5a0 [ 74.216978][ T5828] ? __pfx_avc_audit_post_callback+0x10/0x10 [ 74.217000][ T5828] common_lsm_audit+0x23f/0x2b0 [ 74.217021][ T5828] ? __pfx_common_lsm_audit+0x10/0x10 [ 74.217039][ T5828] ? find_held_lock+0x2b/0x80 [ 74.217068][ T5828] ? rcu_is_watching+0x13/0xc0 [ 74.217097][ T5828] slow_avc_audit+0x186/0x210 [ 74.217121][ T5828] ? __pfx_slow_avc_audit+0x10/0x10 [ 74.217152][ T5828] ? find_held_lock+0x2b/0x80 [ 74.217178][ T5828] ? avc_has_extended_perms+0x33a/0x1080 [ 74.217202][ T5828] ? avc_has_extended_perms+0x33a/0x1080 [ 74.217230][ T5828] avc_has_extended_perms+0x9b7/0x1080 [ 74.217264][ T5828] ? __pfx_avc_has_extended_perms+0x10/0x10 [ 74.217300][ T5828] ? kasan_quarantine_put+0x104/0x240 [ 74.217325][ T5828] ? find_held_lock+0x2b/0x80 [ 74.217348][ T5828] ? tomoyo_path_number_perm+0x28f/0x580 [ 74.217382][ T5828] ? tomoyo_path_number_perm+0x188/0x580 [ 74.217415][ T5828] ? __pfx_futex_wait+0x10/0x10 [ 74.217451][ T5828] ? __lock_acquire+0x4c5/0x1ec0 [ 74.217477][ T5828] ioctl_has_perm.constprop.0.isra.0+0x376/0x540 [ 74.217512][ T5828] ? __pfx_ioctl_has_perm.constprop.0.isra.0+0x10/0x10 [ 74.217546][ T5828] ? __fget_files+0x34/0x3d0 [ 74.217579][ T5828] ? selinux_file_ioctl+0x13b/0x290 [ 74.217605][ T5828] selinux_file_ioctl+0x13b/0x290 [ 74.217636][ T5828] security_file_ioctl+0xfb/0x230 [ 74.217666][ T5828] __x64_sys_ioctl+0xb7/0x210 [ 74.217699][ T5828] do_syscall_64+0x123/0x790 [ 74.217726][ T5828] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 74.217748][ T5828] RIP: 0033:0x7fbdf9b9e159 [ 74.217766][ T5828] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 74.217795][ T5828] RSP: 002b:00007fbdfab26028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 74.217819][ T5828] RAX: ffffffffffffffda RBX: 00007fbdf9e25fa0 RCX: 00007fbdf9b9e159 [ 74.217834][ T5828] RDX: 0000000000000000 RSI: 000000000000af01 RDI: 0000000000000005 [ 74.217847][ T5828] RBP: 00007fbdf9c35024 R08: 0000000000000000 R09: 0000000000000000 [ 74.217860][ T5828] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 74.217873][ T5828] R13: 00007fbdf9e26038 R14: 00007fbdf9e25fa0 R15: 00007ffc069d5048 [ 74.217901][ T5828] [ 74.231453][ T5830] netlink: 'syz.1.16': attribute type 6 has an invalid length. [ 74.500213][ T5614] Bluetooth: hci0: command tx timeout [ 74.565790][ T5614] Bluetooth: hci4: command tx timeout [ 74.565819][ T5614] Bluetooth: hci1: command tx timeout [ 74.565839][ T5614] Bluetooth: hci2: command tx timeout [ 74.634021][ T4919] Bluetooth: hci3: command tx timeout [ 74.783795][ T5845] FAULT_INJECTION: forcing a failure. [ 74.783795][ T5845] name fail_futex, interval 1, probability 0, space 0, times 1 [ 74.783844][ T5845] CPU: 0 UID: 0 PID: 5845 Comm: syz.1.21 Not tainted syzkaller #0 PREEMPT(full) [ 74.783867][ T5845] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 74.783877][ T5845] Call Trace: [ 74.783883][ T5845] [ 74.783891][ T5845] dump_stack_lvl+0x100/0x190 [ 74.783924][ T5845] should_fail_ex.cold+0x5/0xa [ 74.783952][ T5845] get_futex_key+0x1d0/0x14f0 [ 74.783981][ T5845] ? __pfx_get_futex_key+0x10/0x10 [ 74.784002][ T5845] ? wakeup_preempt_fair+0x5c3/0xdc0 [ 74.784032][ T5845] futex_wait_setup+0x91/0x540 [ 74.784071][ T5845] __futex_wait+0x19f/0x300 [ 74.784102][ T5845] ? __pfx___futex_wait+0x10/0x10 [ 74.784128][ T5845] ? __pfx_try_to_wake_up+0x10/0x10 [ 74.784149][ T5845] ? futex_hash+0x311/0x400 [ 74.784174][ T5845] ? __pfx_futex_wake_mark+0x10/0x10 [ 74.784209][ T5845] ? find_held_lock+0x2b/0x80 [ 74.784243][ T5845] ? futex_wake+0x4ea/0x5e0 [ 74.784279][ T5845] futex_wait+0xe6/0x370 [ 74.784311][ T5845] ? __pfx_futex_wait+0x10/0x10 [ 74.784347][ T5845] ? percpu_counter_add_batch+0xb9/0x230 [ 74.784379][ T5845] ? errseq_sample+0x51/0x70 [ 74.784406][ T5845] ? file_init_path+0x48e/0x670 [ 74.784433][ T5845] do_futex+0x265/0x440 [ 74.784458][ T5845] ? __pfx_do_futex+0x10/0x10 [ 74.784483][ T5845] ? fd_install+0x223/0x580 [ 74.784509][ T5845] __x64_sys_futex+0x34f/0x4d0 [ 74.784534][ T5845] ? __sys_socket+0xac/0x260 [ 74.784560][ T5845] ? __pfx___x64_sys_futex+0x10/0x10 [ 74.784595][ T5845] do_syscall_64+0x123/0x790 [ 74.784620][ T5845] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 74.784640][ T5845] RIP: 0033:0x7f61d2d9e159 [ 74.784657][ T5845] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 74.784675][ T5845] RSP: 002b:00007f61d3bd20e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 74.784693][ T5845] RAX: ffffffffffffffda RBX: 00007f61d3025fa8 RCX: 00007f61d2d9e159 [ 74.784706][ T5845] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007f61d3025fa8 [ 74.784719][ T5845] RBP: 00007f61d3025fa0 R08: 0000000000000000 R09: 0000000000000000 [ 74.784730][ T5845] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 74.784742][ T5845] R13: 00007f61d3026038 R14: 00007fff6d4d8bb0 R15: 00007fff6d4d8c98 [ 74.784767][ T5845] [ 75.080079][ T5840] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 75.080263][ T5840] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 75.183596][ T5840] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 75.202116][ T5840] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 75.209056][ T5840] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 75.250309][ T5853] netlink: 'syz.4.24': attribute type 1 has an invalid length. [ 75.262035][ T5851] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 75.281693][ T5840] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 75.301044][ T5855] netlink: 'syz.4.24': attribute type 1 has an invalid length. [ 75.311894][ T5840] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 75.318023][ T5840] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 75.331442][ T5840] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 75.345897][ T5840] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 75.352169][ T5840] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 75.378302][ T5855] Zero length message leads to an empty skb [ 75.394539][ T5840] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 75.504846][ T5840] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 75.504944][ T5840] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 75.528522][ T5840] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 75.906448][ T5880] IPVS: sync thread started: state = BACKUP, mcast_ifn = bridge0, syncid = 4, id = 0 [ 75.953339][ T5879] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 75.963807][ T5872] udc dummy_udc.0: failed to start USB Gadget filesystem: -12 [ 75.973386][ T5872] gadgetfs gadget.0: probe with driver gadgetfs failed with error -12 [ 76.012665][ T5872] udc dummy_udc.1: failed to start USB Gadget filesystem: -12 [ 76.012705][ T5872] gadgetfs gadget.1: probe with driver gadgetfs failed with error -12 [ 76.012924][ T5872] ================================================================== [ 76.012938][ T5872] BUG: KASAN: slab-use-after-free in gadgetfs_bind+0x82e/0x890 [ 76.012967][ T5872] Write of size 8 at addr ffff8880582318c0 by task syz.2.30/5872 [ 76.012980][ T5872] [ 76.012989][ T5872] CPU: 0 UID: 0 PID: 5872 Comm: syz.2.30 Not tainted syzkaller #0 PREEMPT(full) [ 76.013010][ T5872] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 76.013022][ T5872] Call Trace: [ 76.013027][ T5872] [ 76.013034][ T5872] dump_stack_lvl+0x100/0x190 [ 76.013061][ T5872] print_report+0x13d/0x4b0 [ 76.013088][ T5872] ? __virt ** replaying previous printk message ** [ 76.013088][ T5872] ? __virt_addr_valid+0x239/0x430 [ 76.013108][ T5872] ? gadgetfs_bind+0x82e/0x890 [ 76.013138][ T5872] kasan_report+0xdf/0x1c0 [ 76.013162][ T5872] ? gadgetfs_bind+0x82e/0x890 [ 76.013188][ T5872] gadgetfs_bind+0x82e/0x890 [ 76.013210][ T5872] ? kernfs_create_link+0x1bd/0x240 [ 76.013233][ T5872] gadget_bind_driver+0x28c/0xbf0 [ 76.013262][ T5872] ? __pfx_dummy_udc_set_speed+0x10/0x10 [ 76.013288][ T5872] ? __pfx_gadget_bind_driver+0x10/0x10 [ 76.013316][ T5872] really_probe+0x241/0xa60 [ 76.013334][ T5872] __driver_probe_device+0x210/0x460 [ 76.013350][ T5872] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 76.013371][ T5872] driver_probe_device+0x4a/0x140 [ 76.013389][ T5872] __driver_attach+0x21f/0x5b0 [ 76.013405][ T5872] ? __pfx___driver_attach+0x10/0x10 [ 76.013425][ T5872] bus_for_each_dev+0x13e/0x1d0 [ 76.013446][ T5872] ? __pfx_bus_for_each_dev+0x10/0x10 [ 76.013464][ T5872] ? bus_add_driver+0x2b5/0x5b0 [ 76.013487][ T5872] bus_add_driver+0x305/0x5b0 [ 76.013509][ T5872] driver_register+0x1e2/0x360 [ 76.013526][ T5872] usb_gadget_register_driver_owner+0x132/0x210 [ 76.013552][ T5872] dev_config+0xdce/0x1610 [ 76.013574][ T5872] ? ksys_write+0xc0/0x250 [ 76.013592][ T5872] ? __pfx_dev_config+0x10/0x10 [ 76.013615][ T5872] vfs_write+0x2aa/0x1050 [ 76.013640][ T5872] ? __pfx_dev_config+0x10/0x10 [ 76.013660][ T5872] ? lock_acquire+0x1d1/0x380 [ 76.013677][ T5872] ? __fget_files+0x34/0x3d0 [ 76.013697][ T5872] ? __pfx_vfs_write+0x10/0x10 [ 76.013722][ T5872] ? find_held_lock+0x2b/0x80 [ 76.013744][ T5872] ? __fget_files+0x215/0x3d0 [ 76.013764][ T5872] ? __fget_files+0x21f/0x3d0 [ 76.013786][ T5872] ksys_write+0x12a/0x250 [ 76.013803][ T5872] ? __pfx_ksys_write+0x10/0x10 [ 76.013823][ T5872] do_syscall_64+0x123/0x790 [ 76.013842][ T5872] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 76.013858][ T5872] RIP: 0033:0x7fbdf9b9e159 [ 76.013872][ T5872] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 76.013888][ T5872] RSP: 002b:00007fbdfab26028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 76.013905][ T5872] RAX: ffffffffffffffda RBX: 00007fbdf9e25fa0 RCX: 00007fbdf9b9e159 [ 76.013918][ T5872] RDX: 000000000000001f RSI: 0000200000000400 RDI: 0000000000000007 [ 76.013929][ T5872] RBP: 00007fbdf9c35024 R08: 0000000000000000 R09: 0000000000000000 [ 76.013940][ T5872] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 76.013950][ T5872] R13: 00007fbdf9e26038 R14: 00007fbdf9e25fa0 R15: 00007ffc069d5048 [ 76.013969][ T5872] [ 76.013974][ T5872] [ 76.013978][ T5872] Allocated by task 5604: [ 76.013995][ T5872] kasan_save_stack+0x30/0x50 [ 76.014014][ T5872] kasan_save_track+0x14/0x30 [ 76.014029][ T5872] __kasan_kmalloc+0xaa/0xb0 [ 76.014044][ T5872] __kmalloc_cache_noprof+0x2f8/0x6d0 [ 76.014065][ T5872] gadgetfs_fill_super+0x1da/0x430 [ 76.014082][ T5872] get_tree_single+0xe2/0x190 [ 76.014095][ T5872] vfs_get_tree+0x92/0x320 [ 76.014114][ T5872] path_mount+0x7d0/0x24c0 [ 76.014142][ T5872] __x64_sys_mount+0x293/0x310 [ 76.014162][ T5872] do_syscall_64+0x123/0x790 [ 76.014180][ T5872] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 76.014196][ T5872] [ 76.014200][ T5872] Freed by task 5872: [ 76.014208][ T5872] kasan_save_stack+0x30/0x50 [ 76.014223][ T5872] kasan_save_track+0x14/0x30 [ 76.014237][ T5872] kasan_save_free_info+0x3b/0x70 [ 76.014260][ T5872] __kasan_slab_free+0x5f/0x80 [ 76.014276][ T5872] kfree+0x22b/0x6d0 [ 76.014296][ T5872] put_dev+0xb4/0xd0 [ 76.014314][ T5872] gadgetfs_bind+0x6bc/0x890 [ 76.014332][ T5872] gadget_bind_driver+0x28c/0xbf0 [ 76.014358][ T5872] really_probe+0x241/0xa60 [ 76.014374][ T5872] __driver_probe_device+0x210/0x460 [ 76.014390][ T5872] driver_probe_device+0x4a/0x140 [ 76.014405][ T5872] __driver_attach+0x21f/0x5b0 [ 76.014419][ T5872] bus_for_each_dev+0x13e/0x1d0 [ 76.014439][ T5872] bus_add_driver+0x305/0x5b0 [ 76.014462][ T5872] driver_register+0x1e2/0x360 [ 76.014479][ T5872] usb_gadget_register_driver_owner+0x132/0x210 [ 76.014504][ T5872] dev_config+0xdce/0x1610 [ 76.014524][ T5872] vfs_write+0x2aa/0x1050 [ 76.014548][ T5872] ksys_write+0x12a/0x250 [ 76.014563][ T5872] do_syscall_64+0x123/0x790 [ 76.014579][ T5872] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 76.014596][ T5872] [ 76.014601][ T5872] The buggy address belongs to the object at ffff888058231800 [ 76.014601][ T5872] which belongs to the cache kmalloc-1k of size 1024 [ 76.014615][ T5872] The buggy address is located 192 bytes inside of [ 76.014615][ T5872] freed 1024-byte region [ffff888058231800, ffff888058231c00) [ 76.014632][ T5872] [ 76.014636][ T5872] The buggy address belongs to the physical page: [ 76.014651][ T5872] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x58230 [ 76.014671][ T5872] head: order:3 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 76.014685][ T5872] flags: 0xfff00000000040(head|node=0|zone=1|lastcpupid=0x7ff) [ 76.014705][ T5872] page_type: f5(slab) [ 76.014720][ T5872] raw: 00fff00000000040 ffff88801c02edc0 dead000000000100 dead000000000122 [ 76.014741][ T5872] raw: 0000000000000000 0000000000100010 00000000f5000000 0000000000000000 [ 76.014757][ T5872] head: 00fff00000000040 ffff88801c02edc0 dead000000000100 dead000000000122 [ 76.014773][ T5872] head: 0000000000000000 0000000000100010 00000000f5000000 0000000000000000 [ 76.014789][ T5872] head: 00fff00000000003 fffffffffffffe01 00000000ffffffff 00000000ffffffff [ 76.014806][ T5872] head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000008 [ 76.014816][ T5872] page dumped because: kasan: bad access detected [ 76.014839][ T5872] page_owner tracks the page as allocated [ 76.014846][ T5872] page last allocated via order 3, migratetype Unmovable, gfp_mask 0xd20c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 984, tgid 984 (kworker/1:2), ts 71565951249 [ 76.014876][ T5872] post_alloc_hook+0xfd/0x120 [ 76.014901][ T5872] get_page_from_freelist+0x110d/0x35d0 [ 76.014927][ T5872] __alloc_frozen_pages_noprof+0x2eb/0x3300 [ 76.014953][ T5872] new_slab+0xa9/0x6e0 [ 76.014976][ T5872] refill_objects+0xe3/0x410 [ 76.015000][ T5872] __pcs_replace_empty_main+0x35e/0x650 [ 76.015025][ T5872] __kmalloc_node_noprof+0x6ad/0x880 [ 76.015042][ T5872] qdisc_alloc+0xbb/0xb30 [ 76.015061][ T5872] qdisc_create_dflt+0x93/0x490 [ 76.015078][ T5872] dev_activate+0x64f/0xce0 [ 76.015097][ T5872] __dev_open+0x490/0x8f0 [ 76.015117][ T5872] __dev_change_flags+0x596/0x850 [ 76.015149][ T5872] netif_change_flags+0x8d/0x160 [ 76.015173][ T5872] vlan_dev_work+0x58d/0x5e0 [ 76.015197][ T5872] netdev_work_proc+0x5e9/0x880 [ 76.015216][ T5872] process_one_work+0xac7/0x1b10 [ 76.015242][ T5872] page last free pid 1 tgid 1 ts 18638674847 stack trace: [ 76.015254][ T5872] free_pages_prepare+0x586/0xe00 [ 76.015274][ T5872] __free_contig_range_common+0x14f/0x250 [ 76.015295][ T5872] destroy_args+0xa8/0x7a0 [ 76.015312][ T5872] debug_vm_pgtable+0x1d69/0x3490 [ 76.015328][ T5872] do_one_initcall+0x11c/0x6f0 [ 76.015344][ T5872] kernel_init_freeable+0x6ea/0x7b0 [ 76.015367][ T5872] kernel_init+0x21/0x1e0 [ 76.015388][ T5872] ret_from_fork+0x730/0xd60 [ 76.015406][ T5872] ret_from_fork_asm+0x1a/0x30 [ 76.015424][ T5872] [ 76.015429][ T5872] Memory state around the buggy address: [ 76.015444][ T5872] ffff888058231780: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 76.015457][ T5872] ffff888058231800: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 76.015470][ T5872] >ffff888058231880: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 76.015480][ T5872] ^ [ 76.015490][ T5872] ffff888058231900: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 76.015503][ T5872] ffff888058231980: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 76.015513][ T5872] ================================================================== [ 76.094574][ T5872] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 76.863386][ T5872] CPU: 1 UID: 0 PID: 5872 Comm: syz.2.30 Not tainted syzkaller #0 PREEMPT(full) [ 76.872563][ T5872] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 76.882598][ T5872] Call Trace: [ 76.885857][ T5872] [ 76.888768][ T5872] dump_stack_lvl+0x100/0x190 [ 76.893438][ T5872] vpanic+0x553/0x970 [ 76.897409][ T5872] ? __pfx_vpanic+0x10/0x10 [ 76.901898][ T5872] ? mark_held_locks+0x40/0x70 [ 76.906644][ T5872] ? gadgetfs_bind+0x82e/0x890 [ 76.911390][ T5872] panic+0xd1/0xe0 [ 76.915091][ T5872] ? __pfx_panic+0x10/0x10 [ 76.919485][ T5872] ? gadgetfs_bind+0x82e/0x890 [ 76.924230][ T5872] ? preempt_schedule_common+0x3c/0xb0 [ 76.929670][ T5872] check_panic_on_warn.cold+0x19/0x34 [ 76.935026][ T5872] end_report.part.0+0x3a/0x90 [ 76.939782][ T5872] kasan_report.cold+0xe/0x18 [ 76.944444][ T5872] ? gadgetfs_bind+0x82e/0x890 [ 76.949196][ T5872] gadgetfs_bind+0x82e/0x890 [ 76.953773][ T5872] ? kernfs_create_link+0x1bd/0x240 [ 76.958954][ T5872] gadget_bind_driver+0x28c/0xbf0 [ 76.963967][ T5872] ? __pfx_dummy_udc_set_speed+0x10/0x10 [ 76.969582][ T5872] ? __pfx_gadget_bind_driver+0x10/0x10 [ 76.975111][ T5872] really_probe+0x241/0xa60 [ 76.979596][ T5872] __driver_probe_device+0x210/0x460 [ 76.984861][ T5872] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 76.990650][ T5872] driver_probe_device+0x4a/0x140 [ 76.995653][ T5872] __driver_attach+0x21f/0x5b0 [ 77.000399][ T5872] ? __pfx___driver_attach+0x10/0x10 [ 77.005662][ T5872] bus_for_each_dev+0x13e/0x1d0 [ 77.010498][ T5872] ? __pfx_bus_for_each_dev+0x10/0x10 [ 77.015856][ T5872] ? bus_add_driver+0x2b5/0x5b0 [ 77.020695][ T5872] bus_add_driver+0x305/0x5b0 [ 77.025356][ T5872] driver_register+0x1e2/0x360 [ 77.030101][ T5872] usb_gadget_register_driver_owner+0x132/0x210 [ 77.036333][ T5872] dev_config+0xdce/0x1610 [ 77.040739][ T5872] ? ksys_write+0xc0/0x250 [ 77.045138][ T5872] ? __pfx_dev_config+0x10/0x10 [ 77.049980][ T5872] vfs_write+0x2aa/0x1050 [ 77.054300][ T5872] ? __pfx_dev_config+0x10/0x10 [ 77.059137][ T5872] ? lock_acquire+0x1d1/0x380 [ 77.063795][ T5872] ? __fget_files+0x34/0x3d0 [ 77.068377][ T5872] ? __pfx_vfs_write+0x10/0x10 [ 77.073136][ T5872] ? find_held_lock+0x2b/0x80 [ 77.077802][ T5872] ? __fget_files+0x215/0x3d0 [ 77.082465][ T5872] ? __fget_files+0x21f/0x3d0 [ 77.087128][ T5872] ksys_write+0x12a/0x250 [ 77.091439][ T5872] ? __pfx_ksys_write+0x10/0x10 [ 77.096274][ T5872] do_syscall_64+0x123/0x790 [ 77.100853][ T5872] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 77.106728][ T5872] RIP: 0033:0x7fbdf9b9e159 [ 77.111127][ T5872] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 77.130717][ T5872] RSP: 002b:00007fbdfab26028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 77.139115][ T5872] RAX: ffffffffffffffda RBX: 00007fbdf9e25fa0 RCX: 00007fbdf9b9e159 [ 77.147068][ T5872] RDX: 000000000000001f RSI: 0000200000000400 RDI: 0000000000000007 [ 77.155021][ T5872] RBP: 00007fbdf9c35024 R08: 0000000000000000 R09: 0000000000000000 [ 77.162975][ T5872] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 77.170929][ T5872] R13: 00007fbdf9e26038 R14: 00007fbdf9e25fa0 R15: 00007ffc069d5048 [ 77.178886][ T5872] [ 77.182105][ T5872] Kernel Offset: disabled [ 77.186410][ T5872] Rebooting in 86400 seconds..