last executing test programs: 7.77389482s ago: executing program 3 (id=80): bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x6, 0x13, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffff"], 0x0, 0xd, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) syz_usb_connect(0x2, 0x4e, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000200000040cd06350100010000000109023c0001010080320904000006ff0000000705810240000007050102400000070584"], &(0x7f0000000800)={0x0, 0x0, 0x0, 0x0}) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./dev\x00', 0x1ff) r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f0000002c80)="d800000018007b18e00212ba0d8105040a0a1100fe0f040b067c55a1bc0009001e0006990300000005000500fe800000000000000300014002000c0901ac04000bd67f6f94007100a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4b01602b2a10c11ce1b14d6d930dfe1d9d322fe04fb95cae8c9010000730d7a5025ccca262f3d40fad95667e04adcdf634c1f215ce3bb9ad8ffd5e1cace81ed0b7fece0b42a9ecbee5de6ccd40dd601edef3d93452a92307f00000e97031e9f05e9f16e9cb5", 0xd2}, {&(0x7f00000004c0)="f80ec2e2badd", 0x6}], 0x2, 0x0, 0x0, 0x2663}, 0x0) r1 = openat$null(0xffffffffffffff9c, &(0x7f0000000080), 0x400080, 0x0) recvmsg$can_j1939(r1, &(0x7f0000000900)={&(0x7f0000000140)=@pppoe={0x18, 0x0, {0x0, @local}}, 0x80, &(0x7f0000000740)=[{&(0x7f00000001c0)=""/179, 0xb3}, {&(0x7f0000000940)=""/202, 0xca}], 0x2, &(0x7f0000000840)=""/187, 0xbb}, 0x40000001) r2 = openat$autofs(0xffffffffffffff9c, &(0x7f00000000c0), 0x10000, 0x0) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r2, 0xc018937c, &(0x7f0000000280)={{0x1, 0x1, 0x18, r1, {0x2}}, './dev/ttyUSB0\x00'}) mount(0x0, &(0x7f0000000300)='./dev\x00', &(0x7f0000000400)='devtmpfs\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000600)='./dev/ttyUSB0\x00', 0x2, 0x0) 6.138973511s ago: executing program 3 (id=89): r0 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_INIT(r0, 0x0, 0xc8, &(0x7f0000000100), 0x4) socket$inet_icmp_raw(0x2, 0x3, 0x1) syz_open_dev$ttys(0xc, 0x2, 0x0) syz_open_dev$ptys(0xc, 0x3, 0x0) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000100)=[{0x6, 0x7, 0x0, 0x7fff0006}]}) close_range(r1, 0xffffffffffffffff, 0x0) 6.000457296s ago: executing program 3 (id=90): r0 = socket(0x10, 0x2, 0x0) r1 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r1, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) syz_usb_connect(0x0, 0x9e, &(0x7f0000000000)=ANY=[@ANYBLOB="12010002ffffff4082057d0000000000000109028c00040100c0000904000000ffffff000904000101ffffff000b2402010203180144ac00070501010002010904010000ffffff000904010101ffffff00"], 0x0) syz_usb_connect$cdc_ncm(0x5, 0x6e, &(0x7f0000000240)={{0x12, 0x1, 0x250, 0x2, 0x0, 0x0, 0x8, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5c, 0x2, 0x1, 0x0, 0x50, 0x3, "", {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x5}, {0x5, 0x24, 0x0, 0x2005}, {0xd, 0x24, 0xf, 0x1, 0xf, 0xffff, 0x2, 0x8}, {0x6, 0x24, 0x1a, 0x0, 0x35}}, {{0x9, 0x5, 0x81, 0x3, 0x40, 0xf5, 0x10, 0x5}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x8, 0x10, 0xc9, 0x99}}, {{0x9, 0x5, 0x3, 0x2, 0x40, 0x73}}}}}}}]}}, 0x0) epoll_pwait(r1, &(0x7f0000000180)=[{}], 0x1, 0x1, 0x0, 0x0) 5.074063942s ago: executing program 0 (id=100): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) r0 = fanotify_init(0x8, 0x40000) r1 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r1, &(0x7f0000000000)={0x18, 0x0, {0x1, @empty, 'lo\x00'}}, 0x1e) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) sendmmsg$inet6(r2, &(0x7f00000017c0)=[{{&(0x7f0000001a00)={0xa, 0x4e23, 0x10, @loopback, 0x8000000}, 0x1c, &(0x7f0000000640)=[{&(0x7f0000000280)="03", 0x1}], 0x1}}], 0x1, 0x0) setsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r2, 0x84, 0x6, &(0x7f0000000100)={0x0, @in6={{0xa, 0x4e23, 0x2, @loopback, 0xb}}}, 0x84) ioctl$PPPIOCGCHAN(r1, 0x80047437, &(0x7f0000000040)) r3 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl(r3, 0x40047438, &(0x7f0000000040)) close_range(r0, 0xffffffffffffffff, 0x0) mount(0x0, &(0x7f0000000040)='./sys\x00', &(0x7f0000000080)='sysfs\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f00000000c0)='./sys/module/usbcore/parameters/quirks\x00', 0x2, 0x0) r4 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0xa1300) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r4, 0x40605346, &(0x7f0000000600)={0x0, 0x0, {0x1, 0x2, 0x0, 0x0, 0x100000}, 0x1009}) 4.598746404s ago: executing program 0 (id=102): r0 = socket(0x840000000002, 0x3, 0x100) connect$inet(r0, &(0x7f0000000000)={0x2, 0x0, @local}, 0x10) sendmmsg$inet(r0, &(0x7f0000005ac0)=[{{0x0, 0x0, &(0x7f00000026c0)=[{&(0x7f0000000300)="6abf", 0x2}], 0x1}}], 0x1, 0xfffe) 4.49012999s ago: executing program 0 (id=103): getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(0xffffffffffffffff, 0x84, 0x7a, 0x0, 0x0) r0 = fsopen(&(0x7f0000000100)='ocfs2_dlmfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x0, 0x0) fchdir(r1) mkdirat(0xffffffffffffff9c, &(0x7f0000000300)='./file1\x00', 0x14) 4.488010389s ago: executing program 1 (id=104): prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x3, 0x6, &(0x7f0000006680)) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x5, 0x9, 0x6, 0x0, 0xb49, 0x9, 0x8, 0x2, 0x3}, 0x0) r0 = fsopen(&(0x7f0000000040)='afs\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f00000001c0)='source', &(0x7f0000000100)='%\xff:2\x82|\x9a\xe0\xadA\xde\xd5\x03\x00\x00\x00\xb7\xe5\xee:\xb5\x0e\xec\xe5\xdc\xe5\x8d?\x16BE\x8b\xe8)\xa9H\x99\x10\x02q\xf7\xd3\xc5*\x15\xdf_\xb2_`\x92|\x7f\xff9\xf7o$e&1\xfd\xea\xb0\xb0', 0x0) 4.276448552s ago: executing program 0 (id=106): prlimit64(0x0, 0xe, &(0x7f0000000200)={0x8, 0x8a}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) timer_create(0x0, 0x0, 0x0) fcntl$lock(0xffffffffffffffff, 0x24, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) r0 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) preadv(r0, &(0x7f00000014c0)=[{&(0x7f0000000100)=""/179, 0xb3}], 0x1, 0x7, 0x8) 4.170500021s ago: executing program 1 (id=107): iopl(0x3) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008e}, 0x0) iopl(0x3) recvmsg(0xffffffffffffffff, 0x0, 0x2000) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = syz_open_dev$usbfs(&(0x7f0000000240), 0xb, 0x101301) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0xa27}, 0x0) ioctl$USBDEVFS_BULK(r0, 0xc0185502, &(0x7f0000001600)={{{0xb}}, 0x5d9, 0x0, &(0x7f0000000600)="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"}) r1 = getpgrp(0x0) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, 0x0, 0x80) syz_emit_ethernet(0x4a, &(0x7f0000000000)=ANY=[], 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000080)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r4 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r4, 0x1, 0x0) r5 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r5, &(0x7f0000019440)=""/102400, 0x19000) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) io_uring_setup(0xfd2, 0x0) r6 = openat$ttyS3(0xffffffffffffff9c, &(0x7f00000003c0), 0x123e00, 0x0) ioctl$TCSBRKP(r6, 0x5425, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) socket(0x10, 0x3, 0x0) ioctl$USBDEVFS_CONTROL(0xffffffffffffffff, 0xc0105500, &(0x7f00000001c0)={0x0, 0xb, 0x303, 0xff7f, 0x0, 0x7, 0x0}) 3.22379363s ago: executing program 3 (id=109): r0 = socket$inet(0x2, 0x1, 0x0) setsockopt$sock_int(r0, 0x1, 0x2, &(0x7f0000000040)=0xffffffff, 0x4) bind$inet(r0, &(0x7f00000000c0)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x31}}, 0x10) r1 = socket$inet(0x2, 0x1, 0x0) setsockopt$sock_int(r1, 0x1, 0x2, &(0x7f0000000040)=0x7f, 0x4) bind$inet(r1, &(0x7f0000000080)={0x2, 0x4e20, @empty}, 0x10) listen(r1, 0x400) listen(r0, 0x207) 3.215859304s ago: executing program 1 (id=110): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$L2TP_CMD_TUNNEL_CREATE(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000001e00)=ANY=[@ANYBLOB='d\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="0100ffffffff0000400001000000050007000000000008000900000000101400200000000000000000000000ffff0000ffef08000a000000000014001f00000000000000000000000000000000000600020020"], 0x64}, 0x1, 0x620b}, 0x0) 3.166097104s ago: executing program 4 (id=111): bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0f000000040000000400000012"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0xe, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="18020000f0cd000000000000044e690085000000a000000095"], &(0x7f0000000000)='syzkaller\x00'}, 0x90) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_netfilter(0x10, 0x3, 0xc) socket$kcm(0x29, 0x2, 0x0) syz_open_dev$vim2m(&(0x7f0000000140), 0x2, 0x2) socket$inet_smc(0x2b, 0x1, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socket$netlink(0x10, 0x3, 0xc) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_route(0x10, 0x3, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) socket$netlink(0x10, 0x3, 0x0) r0 = openat$pidfd(0xffffffffffffff9c, &(0x7f00000002c0), 0x200000, 0x0) ioctl$sock_inet_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000000000)={0x4000000, {0x2, 0x4e22, @private=0xa0100ff}, {0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x36}}, {0x2, 0x4e24, @rand_addr=0x64010100}, 0x1d7, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x8, 0x8}) sendmsg$NL80211_CMD_CONNECT(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYRES32, @ANYRES16=0x0, @ANYRES8=r0], 0x1c}, 0x1, 0x0, 0x0, 0x20000844}, 0x48885) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1400000007"], 0x50) pwrite64(0xffffffffffffffff, &(0x7f0000000000)='L', 0x1, 0x7ffffffe) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r1, &(0x7f00000001c0)={0x1f, 0xffff, 0x3}, 0x6) write$binfmt_misc(r1, &(0x7f0000000000), 0xd) 3.165931703s ago: executing program 0 (id=112): socket$nl_route(0x10, 0x3, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) bind$alg(0xffffffffffffffff, 0x0, 0x0) r1 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000200), 0x140, 0x0) ioctl$RTC_AIE_ON(r1, 0x7001) 3.05481531s ago: executing program 4 (id=113): sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x0) r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'veth1_to_bridge\x00', 0x0}) ioctl$sock_inet6_SIOCADDRT(r0, 0x890b, &(0x7f0000000540)={@rand_addr=' \x01\x00', @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @private1, 0x0, 0x0, 0x0, 0x0, 0x7, 0x4400046, r1}) 2.927405849s ago: executing program 3 (id=114): socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000004c0)={0xffffffffffffffff}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x25104000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x0, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) writev(0xffffffffffffffff, 0x0, 0x0) ioctl$SIOCSIFHWADDR(r0, 0x8b26, &(0x7f0000000280)={'wlan1\x00'}) 2.082094106s ago: executing program 4 (id=116): connect$inet(0xffffffffffffffff, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x1b}}, 0x10) r0 = syz_open_dev$evdev(&(0x7f0000000000), 0x0, 0x0) syz_usb_disconnect(r0) syz_usb_connect$printer(0x4, 0x2d, &(0x7f0000000100)=ANY=[], 0x0) ioctl$EVIOCRMFF(r0, 0xc0085504, &(0x7f0000000180)=0x17) 1.989970412s ago: executing program 0 (id=117): socketpair$unix(0x1, 0x3, 0x0, 0x0) r0 = syz_usb_connect(0x3, 0x36, &(0x7f0000000400)=ANY=[@ANYBLOB="12010000b510f210950b2a7773820102030109022400010000000009042200028953950009050a02ff0300fa000905820250"], 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$lan78xx(r0, 0x0, &(0x7f00000005c0)={0x34, &(0x7f0000000600)=ANY=[@ANYBLOB="001606"], 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$rtl8150(r0, 0x0, &(0x7f0000000380)={0x2c, &(0x7f0000000180)={0x40, 0xf, 0x2, "e805"}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$lan78xx(r0, 0x0, &(0x7f0000000740)={0x34, &(0x7f0000000440)={0x40, 0x6, 0x2, "05ce"}, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$uac1(r0, 0x0, 0x0) 1.154316208s ago: executing program 3 (id=120): setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, &(0x7f0000000480)=@filter={'filter\x00', 0x42, 0x4, 0x410, 0xffffffff, 0x210, 0x2a8, 0x0, 0xffffffff, 0xffffffff, 0x378, 0x378, 0x378, 0xffffffff, 0x4, 0x0, {[{{@ip={@empty, @multicast2, 0xff000000, 0x0, 'veth0_to_batadv\x00', 'wlan0\x00', {}, {0xff}, 0x84, 0x2, 0x2}, 0x0, 0x1e8, 0x210, 0x0, {0x100000000000000}, [@common=@inet=@sctp={{0x148}, {[0x4e21, 0x4e20], [0x4e22, 0x4e24], [0x40, 0x3, 0x6, 0x8, 0x34, 0x0, 0x0, 0x5, 0x8000, 0x81, 0xfffffffd, 0xfffffffe, 0x8000, 0x7ff, 0x44, 0x58639972, 0x9, 0x10, 0x8, 0x3ff, 0xfffffff2, 0x91, 0x9, 0x1, 0x1ca8, 0xb96d, 0x100, 0x9, 0x80000000, 0x8, 0xe, 0x6, 0x26c, 0xb9ae, 0x80, 0x400, 0x99d8, 0x1, 0x10000, 0x7, 0x6, 0x3, 0x9, 0x5, 0xad3, 0x6, 0xff, 0x8, 0x8, 0x1, 0x0, 0x7, 0xb, 0xd, 0x6, 0xc, 0x5, 0x40000000, 0x10, 0x3, 0x3, 0x78, 0x9, 0x9], 0x0, [{0x0, 0x0, 0xd5}, {0x0, 0x51, 0x6}, {0x3, 0x3, 0xa}, {0x8, 0x80, 0x8}], 0xac, 0x4}}, @common=@unspec=@connmark={{0x30}}]}, @REJECT={0x28}}, {{@ip={@loopback, @broadcast, 0xffffff00, 0xff000000, 'geneve0\x00', 'macvlan0\x00', {0xff}, {}, 0x2, 0x0, 0x4}, 0x0, 0x70, 0x98}, @REJECT={0x28, 'REJECT\x00', 0x0, {0x8}}}, {{@ip={@private=0xa010103, @loopback, 0xff000000, 0xffffff00, 'bond0\x00', 'dvmrp0\x00', {}, {}, 0x62, 0x1, 0x1}, 0x0, 0x70, 0xd0}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x1, @local, 0xd, 0x8, [0x8, 0x27, 0x2a, 0xa, 0x13, 0xe, 0x2d, 0x21, 0x6, 0x31, 0x3f, 0x20, 0x28, 0x18, 0x22, 0x1e], 0x0, 0x0, 0x6}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x470) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x41, 0x0) socket$nl_route(0x10, 0x3, 0x0) syz_io_uring_setup(0x29d8, &(0x7f0000000540)={0x0, 0x8550, 0xc00, 0x1, 0xf}, &(0x7f0000000100), 0x0, &(0x7f0000000180)) write$binfmt_aout(r0, &(0x7f0000000000)=ANY=[], 0xff2e) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000dc0)={0x0, 0x800, 0x5, 0xd000, 0xe, "0062ba7d8200000016001b000200f705096604"}) r1 = syz_open_pts(r0, 0xa0200) r2 = dup3(r1, r0, 0x0) r3 = syz_usb_connect(0x0, 0x32, &(0x7f0000000000)=ANY=[@ANYBLOB="12010002ffffff40e80489680001010203010902200001010080fa0904000002ffff"], 0x0) syz_usb_ep_read(r3, 0x2, 0x0, 0x0) syz_usb_ep_write(r3, 0x81, 0x0, 0x0) syz_usb_ep_read(r3, 0x2, 0x0, 0x0) openat(0xffffffffffffff9c, 0x0, 0x42, 0x8) ioctl(0xffffffffffffffff, 0x8914, 0x0) ioctl$TCSETAF(r2, 0x5408, &(0x7f0000000040)={0x7, 0x4, 0x2, 0x3, 0x16, "e533991cd00ee11a"}) 1.15404609s ago: executing program 4 (id=122): prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x25104000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x72, 0x0, 0x7fff0000}]}) close_range(r3, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000006c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r5, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x4004000) recvmsg$unix(r4, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x100}, 0x0) 1.081862489s ago: executing program 2 (id=123): bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000feffff10850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe}, 0x94) r1 = bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000180)={r0, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f00000002c0)='./cgroup/cgroup.procs\x00', &(0x7f0000000300)=[0x0], 0x0, 0x0, 0x1}}, 0x40) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000003c0)=@newtaction={0xe68, 0x30, 0x871a15abc695fa3d, 0x70bd27, 0x0, {}, [{0xe54, 0x1, [@m_pedit={0xe50, 0x1, 0x0, 0x0, {{0xa}, {0xe24, 0x2, 0x0, 0x1, [@TCA_PEDIT_PARMS={0xe20, 0x2, {{{}, 0x93, 0xfc}, [{0x0, 0x0, 0x0, 0x0, 0xfffffffd}, {0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x3}, {0x1, 0x0, 0x0, 0x4000000, 0x7, 0x80000}, {0x8, 0x5, 0x0, 0xfffffffc, 0x5}, {0x0, 0x0, 0x3d, 0x0, 0x20000}, {0x0, 0x0, 0x0, 0x0, 0x6}, {0x0, 0xc3}, {0x6, 0x5}, {0x5, 0x0, 0x0, 0x0, 0xfffffffc}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, {0x0, 0x10}, {0x0, 0x404, 0x0, 0x8000000}, {0x0, 0xffffffff, 0x0, 0x0, 0xfffffffd, 0xf}, {0x42, 0x0, 0x400000, 0x0, 0x6}, {}, {0x0, 0x0, 0x80}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x800}, {0x0, 0x400, 0x0, 0x8000000}, {0x0, 0x2}, {0x0, 0x0, 0x0, 0x0, 0x20, 0xfffffffc}, {0xfffffffd}, {}, {0x0, 0x0, 0x0, 0xfffffffc}, {0x0, 0x2000}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, {0x0, 0x7, 0x0, 0x1, 0xffffffff}, {0x0, 0x0, 0x0, 0x2, 0x0, 0x3}, {0x0, 0xffffffff, 0x0, 0x0, 0x5, 0x40}, {0xffffffff, 0x10000000, 0x101}, {0x0, 0xfffffffc, 0x3}, {0x0, 0x0, 0xc, 0xfffffffe, 0x0, 0x6}, {0xffffffff}, {}, {0x0, 0x0, 0x4, 0x0, 0x0, 0x4}, {}, {0xffffffff, 0x0, 0x0, 0x0, 0x5}, {0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, {0x0, 0x29, 0x0, 0x0, 0x0, 0x3}, {}, {0x0, 0x0, 0x0, 0x1, 0x3}, {0x80}, {0x0, 0x28e, 0x0, 0x5}, {0x0, 0x0, 0x0, 0x6}, {0x0, 0x0, 0x8}, {0x0, 0x0, 0x0, 0x0, 0x9}, {0x100000, 0x0, 0x0, 0x0, 0x3}, {0x1000000}, {0x0, 0x6, 0x3}, {0x0, 0x15, 0x0, 0x48510}, {0x0, 0x0, 0x0, 0x0, 0x0, 0xcb}, {0x0, 0x0, 0x0, 0x0, 0x10000, 0x4000}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0xd, 0xffffffff}, {0x0, 0xfffffffe}, {}, {0x0, 0xfffefffd}, {0x0, 0x0, 0x0, 0x1}, {0x0, 0x2, 0x0, 0x88}, {0x5}, {0x0, 0x0, 0x800}, {0x0, 0xfffffffc, 0x0, 0x3ff, 0x40000000}, {0x0, 0x0, 0x0, 0xfffffffd}, {0x0, 0x7, 0x0, 0x0, 0x0, 0x400000}, {0x4, 0x0, 0x200, 0x0, 0x0, 0x4}, {}, {0x0, 0x0, 0x0, 0x0, 0xffffffff}, {0x5}, {}, {0x0, 0x0, 0xfffffffe, 0x4000, 0x0, 0xfb4}, {0x0, 0x54e4}, {0x0, 0x101, 0x0, 0x4, 0x0, 0xffffffff}, {}, {0x2f, 0x0, 0x0, 0x1}, {0x0, 0x0, 0x0, 0x4, 0x9}, {0xfffffffe}, {0x0, 0x0, 0x0, 0x0, 0x1}, {0x0, 0x2}, {}, {0x0, 0x0, 0xfffffffd, 0x80000, 0x3}, {}, {0x800000, 0x0, 0x0, 0x0, 0x0, 0x9}, {0x0, 0x0, 0x2}, {0x0, 0x0, 0x0, 0x2, 0x0, 0xffefffff}, {0x0, 0xfffffffe}, {0x0, 0x0, 0x6, 0x0, 0x4}, {0x0, 0x80}, {}, {0x0, 0xfffffffd}, {0x6, 0x0, 0x0, 0x0, 0x8}, {0x7f, 0x0, 0xfffffffe, 0xfffffffe}, {}, {}, {0xffffffff, 0x2, 0x0, 0x0, 0x0, 0xfffffffe}, {0x0, 0x0, 0x0, 0x0, 0x8}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, {0x2, 0x8, 0x20000000}, {}, {0x0, 0x7}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x292}, {0x0, 0x80000000, 0x0, 0x0, 0x0, 0x8}, {0x0, 0x0, 0x0, 0x0, 0x2000000}, {0x0, 0x80000000, 0x0, 0x0, 0x0, 0x101}, {0x5, 0x5, 0x0, 0x0, 0x1}, {0x0, 0x5}, {0x0, 0x0, 0x0, 0x0, 0x80}, {0x10000000, 0x0, 0x0, 0x0, 0x4}, {0x10000000, 0x2e9c, 0x0, 0x0, 0x7, 0x7f53}, {0x0, 0x0, 0x0, 0x0, 0x2}, {0x3}, {0xfffffffd, 0x0, 0x0, 0x0, 0x4, 0x7fffffff}, {}, {0x0, 0x2, 0x0, 0x8}, {}, {0x0, 0x1}, {}, {0xfffffffe, 0x0, 0x0, 0x0, 0x8000, 0x4}, {0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe}, {}, {}, {0x0, 0x8000}, {0x0, 0x0, 0x9, 0x4000000, 0xfffffffc, 0x2}, {0x0, 0x80000000, 0x2, 0x7dff800}, {0x3, 0x0, 0x0, 0x0, 0xffffffff}], [{}, {}, {}, {}, {}, {0x3}, {}, {0x3, 0x1}, {0x0, 0x1}, {}, {}, {0x1}, {0x4, 0x1}, {}, {}, {}, {0x0, 0x1}, {0x0, 0x1}, {0x0, 0x1}, {}, {}, {0x4}, {0x2, 0x1}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x4}, {}, {}, {}, {0x1}, {}, {0x0, 0x1}, {}, {0x0, 0x1}, {0x1, 0x1}, {}, {}, {}, {}, {}, {0x4}, {}, {0x4}, {0x1}, {0x0, 0x1}, {}, {}, {0x2}, {0x0, 0x1}, {}, {0x4, 0x1}, {}, {0x1}, {0x4}, {}, {}, {}, {}, {0x3}, {0x0, 0x1}, {0x0, 0x1}, {}, {}, {}, {}, {0x5}, {}, {}, {0x4}, {}, {0x3}, {0x0, 0x1}, {0x0, 0x1}, {}, {}, {}, {}, {0x0, 0x1}, {0x4}, {}, {}, {}, {}, {}, {0x0, 0x1}, {}, {0x0, 0x1}, {}, {}, {}, {}, {}, {0x1}, {}, {0x5}, {}, {0x3}, {}, {}, {}, {}, {0x6}, {0x2, 0x1}, {}, {}, {}, {0x3, 0x1}, {0x0, 0x1}, {}, {}, {0x2}, {0x2}, {0x3}, {0x0, 0x1}, {0x4}, {0x3}, {}, {0x0, 0x1}, {0x0, 0x1}, {0x2}, {0x0, 0x1}]}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xe68}}, 0x0) recvmsg$can_raw(0xffffffffffffffff, &(0x7f0000000600)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000540)=""/135}, 0x2042) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000680)={r1, 0x58, &(0x7f0000000600)}, 0x10) 927.774015ms ago: executing program 1 (id=124): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) ioctl$TUNSETQUEUE(r0, 0x400454d9, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x103702, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000080)={'syzkaller0\x00', 0xca58c30f81b6079f}) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$unix(0x1, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=@newlink={0x28, 0x10, 0x1, 0x70bd2a, 0x0, {0x0, 0x0, 0x0, r4, 0x2180}, [@IFLA_TXQLEN={0x8, 0xd, 0x80000}]}, 0x28}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) 927.390304ms ago: executing program 2 (id=125): connect$inet6(0xffffffffffffffff, &(0x7f0000000100)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x1b, &(0x7f00000000c0)={@loopback, 0x0, 0x0, 0x3}, 0x20) r0 = add_key$user(&(0x7f0000000380), &(0x7f0000000000), &(0x7f00000003c0)='X', 0x1, 0xfffffffffffffffe) r1 = add_key$user(&(0x7f0000000200), &(0x7f00000005c0), &(0x7f00000000c0), 0x390, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000100)={r0, r1, r1}, 0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)={'streebog512-generic\x00'}}) 677.485472ms ago: executing program 2 (id=126): socket$kcm(0x21, 0x2, 0xa) mmap(&(0x7f0000000000/0x95c000)=nil, 0x95c000, 0xb, 0x8c4b815a5465c2b1, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) r0 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'veth0_macvtap\x00'}) r1 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, 0x0, 0x20000000) ioctl$FS_IOC_RESVSP(0xffffffffffffffff, 0xc0189436, 0x0) r2 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r2, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty, 0x7}, 0x1c) listen(r2, 0xfffffffc) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB], 0x64}, 0x1, 0x0, 0x0, 0x4000850}, 0x24000000) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYRES32=0x0, @ANYBLOB], 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x4008050) socket$netlink(0x10, 0x3, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x11, 0x0, 0x0, &(0x7f0000001b00)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0xa, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800000}, 0x94) syz_genetlink_get_family_id$mptcp(0x0, 0xffffffffffffffff) r5 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r5, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r3, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f00000004c0)={0x30, r4, 0x1, 0x70bd2c, 0x1000000, {}, [@MPTCP_PM_ATTR_ADDR={0x1c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @dev={0xac, 0x14, 0x14, 0x37}}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x3}]}]}, 0x30}, 0x1, 0xff07}, 0x2000000) 354.819392ms ago: executing program 1 (id=127): mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x100000b, 0x204031, 0xffffffffffffffff, 0xb26f5000) r0 = syz_io_uring_setup(0x3, &(0x7f0000000580)={0x0, 0x3f7, 0x13500, 0x4, 0x163}, &(0x7f00000001c0), &(0x7f0000001880), &(0x7f0000000000)) unshare(0x22020400) io_uring_register$IORING_REGISTER_SEND_MSG_RING(0xffffffffffffffff, 0x1f, &(0x7f00000003c0)={0x28, 0x0, 0x0, r0, 0x0, 0x0, 0x8, 0x2, 0x1}, 0x1) 315.098008ms ago: executing program 4 (id=128): bind$inet(0xffffffffffffffff, 0x0, 0x0) r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000c00), 0xffffffffffffffff) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8b18, &(0x7f0000000000)={'wlan0\x00'}) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000300)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_ABORT_SCAN(r2, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000080)={0x1c, r0, 0xd9b2794f6a139537, 0x0, 0xe7030000, {{}, {@val={0x8, 0x3, r4}, @void}}}, 0x1c}}, 0x0) 259.144391ms ago: executing program 2 (id=129): syz_emit_ethernet(0x3e, &(0x7f0000000100)={@local, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x2d}, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x80, 0x1, 0x0, @rand_addr=0x64010102, @local}, @time_exceeded={0x3, 0x5, 0x0, 0x3, 0x0, 0x6, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x89, 0x0, @remote, @local}}}}}}, 0x0) 208.713821ms ago: executing program 4 (id=130): syz_init_net_socket$bt_sco(0x1f, 0x5, 0x8) r0 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000500), 0x2, 0x0) write(r0, &(0x7f0000000600)='dir ./f', 0x7) syz_io_uring_setup(0x264d, &(0x7f0000000180)={0x0, 0xcca7, 0x1, 0x2, 0x34a}, &(0x7f0000000080), &(0x7f0000000340), &(0x7f0000000000)) mkdir(&(0x7f00000002c0)='./sys\x00', 0x20) mount(0x0, &(0x7f0000000100)='./sys\x00', &(0x7f0000000200)='sysfs\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./sys/bus/platform/drivers/dummy_udc/unbind\x00', 0x1, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x5a) write(r1, &(0x7f0000000400)='dummy_udc.0', 0xb) 176.511191ms ago: executing program 1 (id=131): sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000280)=@newlink={0x20, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x503, 0x20000}}, 0x20}, 0x1, 0x0, 0x0, 0x8000}, 0x10) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ed) mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000040)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./sys/devices/system/cpu/cpu1/online\x00', 0x2, 0x0) pwrite64(r0, &(0x7f00000001c0)='n', 0x1, 0xb) 70.083661ms ago: executing program 2 (id=132): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x8080}, 0x20004450) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000000c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWRULE={0x44, 0x6, 0xa, 0x41f, 0x0, 0x0, {0xa, 0x0, 0x44}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_RULE_EXPRESSIONS={0x18, 0x4, 0x0, 0x1, [{0x14, 0x1, 0x0, 0x1, @payload={{0xc}, @val={0x4}}}]}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x5}}}, 0x6c}, 0x1, 0x0, 0x0, 0x200000c4}, 0x24000840) 0s ago: executing program 2 (id=133): mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0, 0x2) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x3000002, 0x200000005c832, 0xffffffffffffffff, 0x0) kernel console output (not intermixed with test programs): [ 54.606006][ T30] audit: type=1400 audit(1786477288.834:111): avc: denied { write } for pid=5447 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 54.659683][ T30] audit: type=1400 audit(1786477288.884:112): avc: denied { write } for pid=5458 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 55.088455][ T30] audit: type=1400 audit(1786477289.314:113): avc: denied { write } for pid=5461 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 55.130704][ T30] audit: type=1400 audit(1786477289.354:114): avc: denied { write } for pid=5472 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 55.306515][ T30] audit: type=1400 audit(1786477289.534:115): avc: denied { write } for pid=5475 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 55.355726][ T30] audit: type=1400 audit(1786477289.584:116): avc: denied { write } for pid=5486 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 55.525291][ T30] audit: type=1400 audit(1786477289.754:117): avc: denied { write } for pid=5489 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 55.589893][ T30] audit: type=1400 audit(1786477289.814:118): avc: denied { write } for pid=5500 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 56.073495][ T30] audit: type=1400 audit(1786477290.304:119): avc: denied { write } for pid=5503 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 56.120313][ T30] audit: type=1400 audit(1786477290.344:120): avc: denied { write } for pid=5514 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 56.292515][ T30] audit: type=1400 audit(1786477290.524:121): avc: denied { write } for pid=5517 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 Warning: Permanently added '10.128.1.138' (ED25519) to the list of known hosts. [ 60.234945][ T30] kauditd_printk_skb: 7 callbacks suppressed [ 60.234960][ T30] audit: type=1400 audit(1786477294.464:129): avc: denied { mounton } for pid=5578 comm="syz-executor" path="/syzcgroup/unified" dev="sda1" ino=2023 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1 [ 60.264799][ T30] audit: type=1400 audit(1786477294.494:130): avc: denied { mount } for pid=5578 comm="syz-executor" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 60.267516][ T5578] cgroup: Unknown subsys name 'net' [ 60.294043][ T30] audit: type=1400 audit(1786477294.524:131): avc: denied { unmount } for pid=5578 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 60.395631][ T5578] cgroup: Unknown subsys name 'cpuset' [ 60.403624][ T5578] cgroup: Unknown subsys name 'rlimit' [ 60.513684][ T30] audit: type=1400 audit(1786477294.744:132): avc: denied { setattr } for pid=5578 comm="syz-executor" name="raw-gadget" dev="devtmpfs" ino=819 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 60.557898][ T30] audit: type=1400 audit(1786477294.744:133): avc: denied { create } for pid=5578 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 60.578543][ T30] audit: type=1400 audit(1786477294.744:134): avc: denied { write } for pid=5578 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 60.599100][ T30] audit: type=1400 audit(1786477294.744:135): avc: denied { read } for pid=5578 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 60.620207][ T30] audit: type=1400 audit(1786477294.754:136): avc: denied { mounton } for pid=5578 comm="syz-executor" path="/proc/sys/fs/binfmt_misc" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=dir permissive=1 [ 60.628865][ T5584] SELinux: Context root:object_r:swapfile_t is not valid (left unmapped). Setting up swapspace version 1, size = 127995904 bytes [ 60.654143][ T30] audit: type=1400 audit(1786477294.754:137): avc: denied { mount } for pid=5578 comm="syz-executor" name="/" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=filesystem permissive=1 [ 60.677729][ T30] audit: type=1400 audit(1786477294.884:138): avc: denied { relabelto } for pid=5584 comm="mkswap" name="swap-file" dev="sda1" ino=2026 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 61.643104][ T5578] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 63.684796][ T5594] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 63.698379][ T5600] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 63.707691][ T5600] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 63.717042][ T5601] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 63.725347][ T5600] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 63.733744][ T5600] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 63.742470][ T5600] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 63.749744][ T5600] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 63.754554][ T5610] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 63.758334][ T5600] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 63.764977][ T5610] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 63.771815][ T5600] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 63.784773][ T5611] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 63.787152][ T5600] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 63.793573][ T5611] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 63.800493][ T5600] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 63.808051][ T5610] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 63.815889][ T5600] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 63.821648][ T5611] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 63.828195][ T5600] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 63.836814][ T50] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 63.850009][ T5600] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 63.859830][ T50] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 63.862382][ T5600] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 63.870950][ T50] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 65.062062][ T5603] bridge0: port 1(bridge_slave_0) entered blocking state [ 65.069274][ T5603] bridge0: port 1(bridge_slave_0) entered disabled state [ 65.076676][ T5603] bridge_slave_0: entered allmulticast mode [ 65.083471][ T5603] bridge_slave_0: entered promiscuous mode [ 65.123167][ T5603] bridge0: port 2(bridge_slave_1) entered blocking state [ 65.130310][ T5603] bridge0: port 2(bridge_slave_1) entered disabled state [ 65.137852][ T5603] bridge_slave_1: entered allmulticast mode [ 65.144731][ T5603] bridge_slave_1: entered promiscuous mode [ 65.213939][ T5593] bridge0: port 1(bridge_slave_0) entered blocking state [ 65.221145][ T5593] bridge0: port 1(bridge_slave_0) entered disabled state [ 65.228324][ T5593] bridge_slave_0: entered allmulticast mode [ 65.235216][ T5593] bridge_slave_0: entered promiscuous mode [ 65.251681][ T5603] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 65.268197][ T5593] bridge0: port 2(bridge_slave_1) entered blocking state [ 65.275380][ T5593] bridge0: port 2(bridge_slave_1) entered disabled state [ 65.282628][ T5593] bridge_slave_1: entered allmulticast mode [ 65.289278][ T5593] bridge_slave_1: entered promiscuous mode [ 65.302975][ T5603] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 65.343270][ T5592] bridge0: port 1(bridge_slave_0) entered blocking state [ 65.350812][ T5592] bridge0: port 1(bridge_slave_0) entered disabled state [ 65.357982][ T5592] bridge_slave_0: entered allmulticast mode [ 65.364866][ T5592] bridge_slave_0: entered promiscuous mode [ 65.399435][ T5592] bridge0: port 2(bridge_slave_1) entered blocking state [ 65.406976][ T5592] bridge0: port 2(bridge_slave_1) entered disabled state [ 65.414296][ T5592] bridge_slave_1: entered allmulticast mode [ 65.420964][ T5592] bridge_slave_1: entered promiscuous mode [ 65.432570][ T5603] team0: Port device team_slave_0 added [ 65.438249][ T5608] bridge0: port 1(bridge_slave_0) entered blocking state [ 65.445492][ T5608] bridge0: port 1(bridge_slave_0) entered disabled state [ 65.452670][ T5608] bridge_slave_0: entered allmulticast mode [ 65.459271][ T5608] bridge_slave_0: entered promiscuous mode [ 65.468104][ T5593] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 65.489382][ T5603] team0: Port device team_slave_1 added [ 65.495281][ T5608] bridge0: port 2(bridge_slave_1) entered blocking state [ 65.502942][ T5608] bridge0: port 2(bridge_slave_1) entered disabled state [ 65.510046][ T5608] bridge_slave_1: entered allmulticast mode [ 65.517157][ T5608] bridge_slave_1: entered promiscuous mode [ 65.525156][ T5593] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 65.565811][ T5592] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 65.603229][ T5592] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 65.619404][ T5603] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 65.626577][ T5603] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 65.652875][ T5603] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 65.666378][ T5608] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 65.676843][ T5593] team0: Port device team_slave_0 added [ 65.689061][ T5605] bridge0: port 1(bridge_slave_0) entered blocking state [ 65.696242][ T5605] bridge0: port 1(bridge_slave_0) entered disabled state [ 65.703744][ T5605] bridge_slave_0: entered allmulticast mode [ 65.710428][ T5605] bridge_slave_0: entered promiscuous mode [ 65.717597][ T5603] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 65.724804][ T5603] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 65.751136][ T5603] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 65.763603][ T5608] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 65.774591][ T5593] team0: Port device team_slave_1 added [ 65.786553][ T5605] bridge0: port 2(bridge_slave_1) entered blocking state [ 65.793713][ T5605] bridge0: port 2(bridge_slave_1) entered disabled state [ 65.800815][ T5605] bridge_slave_1: entered allmulticast mode [ 65.807679][ T5605] bridge_slave_1: entered promiscuous mode [ 65.813277][ T1304] ieee802154 phy0 wpan0: encryption failed: -22 [ 65.822810][ T1304] ieee802154 phy1 wpan1: encryption failed: -22 [ 65.843176][ T5592] team0: Port device team_slave_0 added [ 65.873633][ T5592] team0: Port device team_slave_1 added [ 65.886655][ T5605] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 65.891903][ T50] Bluetooth: hci2: command tx timeout [ 65.896513][ T5601] Bluetooth: hci0: command tx timeout [ 65.901658][ T5600] Bluetooth: hci3: command tx timeout [ 65.907095][ T5601] Bluetooth: hci4: command tx timeout [ 65.912681][ T5604] Bluetooth: hci1: command tx timeout [ 65.922007][ T5605] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 65.941328][ T5608] team0: Port device team_slave_0 added [ 65.947381][ T5593] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 65.954402][ T5593] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 65.981284][ T5593] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 66.012380][ T5608] team0: Port device team_slave_1 added [ 66.018449][ T5593] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 66.025631][ T5593] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 66.051977][ T5593] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 66.067260][ T5592] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 66.074236][ T5592] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 66.100372][ T5592] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 66.118921][ T5605] team0: Port device team_slave_0 added [ 66.138304][ T5608] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 66.145323][ T5608] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 66.171405][ T5608] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 66.183046][ T5592] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 66.190068][ T5592] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 66.216158][ T5592] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 66.231389][ T5603] hsr_slave_0: entered promiscuous mode [ 66.237975][ T5603] hsr_slave_1: entered promiscuous mode [ 66.245644][ T5605] team0: Port device team_slave_1 added [ 66.264905][ T5608] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 66.272057][ T5608] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 66.298033][ T5608] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 66.322549][ T5605] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 66.329559][ T5605] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 66.355599][ T5605] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 66.390595][ T5605] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 66.397673][ T5605] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 66.423933][ T5605] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 66.456187][ T5593] hsr_slave_0: entered promiscuous mode [ 66.462981][ T5593] hsr_slave_1: entered promiscuous mode [ 66.468975][ T5593] debugfs: 'hsr0' already exists in 'hsr' [ 66.474933][ T5593] Cannot create hsr debugfs directory [ 66.499659][ T5592] hsr_slave_0: entered promiscuous mode [ 66.505906][ T5592] hsr_slave_1: entered promiscuous mode [ 66.511944][ T5592] debugfs: 'hsr0' already exists in 'hsr' [ 66.517667][ T5592] Cannot create hsr debugfs directory [ 66.568326][ T5608] hsr_slave_0: entered promiscuous mode [ 66.574618][ T5608] hsr_slave_1: entered promiscuous mode [ 66.580560][ T5608] debugfs: 'hsr0' already exists in 'hsr' [ 66.586493][ T5608] Cannot create hsr debugfs directory [ 66.613109][ T5605] hsr_slave_0: entered promiscuous mode [ 66.619157][ T5605] hsr_slave_1: entered promiscuous mode [ 66.625294][ T5605] debugfs: 'hsr0' already exists in 'hsr' [ 66.631004][ T5605] Cannot create hsr debugfs directory [ 66.952682][ T5603] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 66.963886][ T5603] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 66.972360][ T5603] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 66.982413][ T5603] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 66.991464][ T5603] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 67.000611][ T5603] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 67.008316][ T5603] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 67.019016][ T5603] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 67.076826][ T5593] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 67.085627][ T5593] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 67.094169][ T5593] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 67.104077][ T5593] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 67.112198][ T5593] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 67.120574][ T5593] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 67.128825][ T5593] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 67.137516][ T5593] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 67.207512][ T5608] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 67.219015][ T5608] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 67.227514][ T5608] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 67.236079][ T5608] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 67.244637][ T5608] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 67.254004][ T5608] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 67.261869][ T5608] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 67.270201][ T5608] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 67.343527][ T5603] 8021q: adding VLAN 0 to HW filter on device bond0 [ 67.363928][ T5592] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 67.372933][ T5592] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 67.387791][ T5592] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 67.396913][ T5592] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 67.405496][ T5592] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 67.414614][ T5592] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 67.433807][ T5592] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 67.443620][ T5592] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 67.457004][ T5603] 8021q: adding VLAN 0 to HW filter on device team0 [ 67.504927][ T36] bridge0: port 1(bridge_slave_0) entered blocking state [ 67.512360][ T36] bridge0: port 1(bridge_slave_0) entered forwarding state [ 67.547647][ T175] bridge0: port 2(bridge_slave_1) entered blocking state [ 67.554777][ T175] bridge0: port 2(bridge_slave_1) entered forwarding state [ 67.574880][ T5593] 8021q: adding VLAN 0 to HW filter on device bond0 [ 67.585021][ T5605] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 67.597015][ T5605] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 67.605588][ T5605] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 67.614692][ T5605] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 67.622790][ T5605] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 67.632046][ T5605] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 67.640146][ T5605] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 67.649254][ T5605] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 67.692114][ T5593] 8021q: adding VLAN 0 to HW filter on device team0 [ 67.710390][ T175] bridge0: port 1(bridge_slave_0) entered blocking state [ 67.717497][ T175] bridge0: port 1(bridge_slave_0) entered forwarding state [ 67.741751][ T175] bridge0: port 2(bridge_slave_1) entered blocking state [ 67.748855][ T175] bridge0: port 2(bridge_slave_1) entered forwarding state [ 67.768232][ T5608] 8021q: adding VLAN 0 to HW filter on device bond0 [ 67.849111][ T5608] 8021q: adding VLAN 0 to HW filter on device team0 [ 67.850055][ T30] kauditd_printk_skb: 13 callbacks suppressed [ 67.850066][ T30] audit: type=1400 audit(1786477302.074:152): avc: denied { sys_module } for pid=5603 comm="syz-executor" capability=16 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 67.886495][ T5592] 8021q: adding VLAN 0 to HW filter on device bond0 [ 67.905386][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 67.912548][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 67.944019][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 67.951170][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 67.981568][ T5604] Bluetooth: hci4: command tx timeout [ 67.981582][ T5600] Bluetooth: hci0: command tx timeout [ 67.981605][ T5600] Bluetooth: hci1: command tx timeout [ 67.986985][ T5604] Bluetooth: hci3: command tx timeout [ 67.992711][ T50] Bluetooth: hci2: command tx timeout [ 68.017558][ T5605] 8021q: adding VLAN 0 to HW filter on device bond0 [ 68.040617][ T5592] 8021q: adding VLAN 0 to HW filter on device team0 [ 68.074222][ T5605] 8021q: adding VLAN 0 to HW filter on device team0 [ 68.090315][ T175] bridge0: port 1(bridge_slave_0) entered blocking state [ 68.097495][ T175] bridge0: port 1(bridge_slave_0) entered forwarding state [ 68.116572][ T175] bridge0: port 1(bridge_slave_0) entered blocking state [ 68.123728][ T175] bridge0: port 1(bridge_slave_0) entered forwarding state [ 68.155645][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 68.162813][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 68.175676][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 68.182834][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 68.546437][ T5603] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 68.650785][ T5593] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 68.685863][ T5603] veth0_vlan: entered promiscuous mode [ 68.719262][ T5603] veth1_vlan: entered promiscuous mode [ 68.819210][ T5603] veth0_macvtap: entered promiscuous mode [ 68.848875][ T5603] veth1_macvtap: entered promiscuous mode [ 68.920935][ T5603] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 68.953633][ T5603] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 69.003093][ T1093] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 69.072927][ T5608] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 69.096191][ T36] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 69.236138][ T175] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 69.239017][ T5592] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 69.252385][ T175] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 69.278685][ T5605] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 69.302936][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 69.316075][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 69.321299][ T5593] veth0_vlan: entered promiscuous mode [ 69.350733][ T30] audit: type=1400 audit(1786477303.574:153): avc: denied { mounton } for pid=5603 comm="syz-executor" path="/root/syzkaller.d4qB6g/syz-tmp" dev="sda1" ino=2042 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_home_t tclass=dir permissive=1 [ 69.375099][ T48] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 69.384389][ T175] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 69.399540][ T30] audit: type=1400 audit(1786477303.574:154): avc: denied { mount } for pid=5603 comm="syz-executor" name="/" dev="tmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 69.400531][ T5593] veth1_vlan: entered promiscuous mode [ 69.425274][ T30] audit: type=1400 audit(1786477303.604:155): avc: denied { mounton } for pid=5603 comm="syz-executor" path="/root/syzkaller.d4qB6g/syz-tmp/newroot/dev" dev="tmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 69.434195][ T5608] veth0_vlan: entered promiscuous mode [ 69.461000][ T30] audit: type=1400 audit(1786477303.604:156): avc: denied { mount } for pid=5603 comm="syz-executor" name="/" dev="proc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 69.485362][ T30] audit: type=1400 audit(1786477303.604:157): avc: denied { mounton } for pid=5603 comm="syz-executor" path="/root/syzkaller.d4qB6g/syz-tmp/newroot/sys/kernel/debug" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=dir permissive=1 [ 69.495362][ T5608] veth1_vlan: entered promiscuous mode [ 69.520828][ T30] audit: type=1400 audit(1786477303.614:158): avc: denied { mounton } for pid=5603 comm="syz-executor" path="/root/syzkaller.d4qB6g/syz-tmp/newroot/proc/sys/fs/binfmt_misc" dev="proc" ino=6773 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysctl_fs_t tclass=dir permissive=1 [ 69.555333][ T5592] veth0_vlan: entered promiscuous mode [ 69.556019][ T30] audit: type=1400 audit(1786477303.624:159): avc: denied { unmount } for pid=5603 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 69.583058][ T30] audit: type=1400 audit(1786477303.684:160): avc: denied { mounton } for pid=5603 comm="syz-executor" path="/dev/gadgetfs" dev="devtmpfs" ino=2780 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:device_t tclass=dir permissive=1 [ 69.587040][ T5603] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 69.606703][ T30] audit: type=1400 audit(1786477303.684:161): avc: denied { mount } for pid=5603 comm="syz-executor" name="/" dev="gadgetfs" ino=6774 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfs_t tclass=filesystem permissive=1 [ 69.641518][ T5605] veth0_vlan: entered promiscuous mode [ 69.659265][ T5593] veth0_macvtap: entered promiscuous mode [ 69.675939][ T5592] veth1_vlan: entered promiscuous mode [ 69.693801][ T5605] veth1_vlan: entered promiscuous mode [ 69.700678][ T5593] veth1_macvtap: entered promiscuous mode [ 69.767471][ T5593] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 69.775542][ T5608] veth0_macvtap: entered promiscuous mode [ 69.795300][ T5593] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 69.805368][ T5608] veth1_macvtap: entered promiscuous mode [ 69.834774][ T5592] veth0_macvtap: entered promiscuous mode [ 69.844244][ T5592] veth1_macvtap: entered promiscuous mode [ 69.864807][ T5608] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 69.882816][ T12] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 69.899459][ T5605] veth0_macvtap: entered promiscuous mode [ 69.909426][ T5608] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 69.923357][ T5605] veth1_macvtap: entered promiscuous mode [ 69.936468][ T5592] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 69.961598][ T5592] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 69.973363][ T48] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 70.005492][ T5605] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 70.038063][ T1164] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 70.047499][ T1164] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 70.058026][ T50] Bluetooth: hci3: command tx timeout [ 70.062553][ T5600] Bluetooth: hci4: command tx timeout [ 70.064114][ T5611] Bluetooth: hci0: command tx timeout [ 70.069087][ T5604] Bluetooth: hci2: command tx timeout [ 70.075423][ T5611] Bluetooth: hci1: command tx timeout [ 70.090114][ T5605] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 70.146931][ T36] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 70.156653][ T36] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 70.237265][ T36] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 70.245986][ T36] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 70.293627][ T57] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 70.303836][ T12] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 70.305361][ T57] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 70.327016][ T12] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 70.369744][ T48] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 70.381106][ T1164] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 70.386192][ T48] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 70.394698][ T1164] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 70.406246][ T5791] xt_CHECKSUM: CHECKSUM should be avoided. If really needed, restrict with "-p udp" and only use in OUTPUT [ 70.406355][ T5791] x_tables: ip_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 70.451885][ T1093] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 70.469411][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 70.487716][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 70.533432][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 70.549243][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 70.594239][ T12] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 70.597332][ T1093] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 70.631279][ T1093] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 70.638736][ T12] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 70.703529][ T1093] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 70.840881][ T1164] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 70.986416][ T1164] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 71.264511][ T5804] netlink: 36 bytes leftover after parsing attributes in process `syz.4.7'. [ 71.313769][ T48] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 71.383182][ T5806] netlink: 8 bytes leftover after parsing attributes in process `syz.4.7'. [ 71.391894][ T5806] netlink: 8 bytes leftover after parsing attributes in process `syz.4.7'. [ 71.692826][ T5795] block nbd4: shutting down sockets [ 71.701745][ T1164] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 71.783752][ T1164] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 71.862707][ T1164] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.132184][ T5611] Bluetooth: hci1: command tx timeout [ 72.132743][ T5604] Bluetooth: hci2: command tx timeout [ 72.137637][ T50] Bluetooth: hci3: command tx timeout [ 72.143137][ T5601] Bluetooth: hci0: command tx timeout [ 72.157335][ T5600] Bluetooth: hci4: command tx timeout [ 72.388653][ T5826] xt_hashlimit: size too large, truncated to 1048576 [ 72.450601][ T5827] xt_hashlimit: size too large, truncated to 1048576 [ 72.471782][ T5812] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 72.549385][ T5819] syzkaller0: entered promiscuous mode [ 72.569492][ T5819] syzkaller0: entered allmulticast mode [ 72.666994][ T5823] iommufd_mock iommufd_mock1: Adding to iommu group 1 [ 73.140993][ T5839] CacheFiles: Failed to register: -2 [ 73.161373][ T5839] block nbd1: NBD_DISCONNECT [ 73.169103][ T30] kauditd_printk_skb: 45 callbacks suppressed [ 73.169134][ T30] audit: type=1400 audit(1786477307.354:207): avc: denied { create } for pid=5833 comm="syz.1.11" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 73.524499][ T30] audit: type=1400 audit(1786477307.354:208): avc: denied { connect } for pid=5833 comm="syz.1.11" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 73.544251][ T30] audit: type=1400 audit(1786477307.364:209): avc: denied { name_bind } for pid=5833 comm="syz.1.11" src=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:reserved_port_t tclass=tcp_socket permissive=1 [ 73.573843][ T30] audit: type=1400 audit(1786477307.364:210): avc: denied { node_bind } for pid=5833 comm="syz.1.11" saddr=::1 src=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=tcp_socket permissive=1 [ 73.598044][ T30] audit: type=1400 audit(1786477307.364:211): avc: denied { read write } for pid=5833 comm="syz.1.11" name="cachefiles" dev="devtmpfs" ino=4 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cachefiles_device_t tclass=chr_file permissive=1 [ 73.630469][ T30] audit: type=1400 audit(1786477307.364:212): avc: denied { open } for pid=5833 comm="syz.1.11" path="/dev/cachefiles" dev="devtmpfs" ino=4 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cachefiles_device_t tclass=chr_file permissive=1 [ 73.656548][ T30] audit: type=1400 audit(1786477307.384:213): avc: denied { append } for pid=5833 comm="syz.1.11" name="nbd1" dev="devtmpfs" ino=678 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 73.709824][ T30] audit: type=1400 audit(1786477307.934:214): avc: denied { read } for pid=5845 comm="syz.4.13" name="binder0" dev="binder" ino=7 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 74.395250][ T30] audit: type=1400 audit(1786477307.934:215): avc: denied { open } for pid=5845 comm="syz.4.13" path="/dev/binderfs/binder0" dev="binder" ino=7 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 74.419885][ T30] audit: type=1400 audit(1786477308.054:216): avc: denied { create } for pid=5845 comm="syz.4.13" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 75.661502][ T5692] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 75.767458][ T5900] CUSE: unknown device info "" [ 75.808160][ T5900] CUSE: unknown device info "Ö" [ 75.840093][ T5900] CUSE: unknown device info "" [ 75.881176][ T5900] CUSE: unknown device info "" [ 75.893236][ T5900] CUSE: unknown device info "" [ 75.910299][ T5900] CUSE: unknown device info "" [ 75.947327][ T5900] CUSE: unknown device info "ðÿÿÿ" [ 75.959151][ T5692] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 75.993612][ T5692] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 76.018682][ T5900] CUSE: unknown device info "" [ 76.027625][ T5692] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 76.057881][ T5692] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 76.071220][ T5900] CUSE: unknown device info "" [ 76.095166][ T5692] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 76.105986][ T5894] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 76.106923][ T5900] CUSE: unknown device info "" [ 76.136694][ T5692] usb 3-1: config 0 descriptor?? [ 76.146788][ T5900] CUSE: unknown device info "" [ 76.164488][ T5900] CUSE: unknown device info "r" [ 76.181752][ T5900] CUSE: unknown device info "ýÿÿÿÿÿÿÿ#Û" [ 76.190836][ T5900] CUSE: unknown device info "ÿÿÿÿ" [ 76.196226][ T5900] CUSE: unknown device info "" [ 76.201624][ T5900] CUSE: unknown device info "€" [ 76.206582][ T5900] CUSE: DEVNAME unspecified [ 76.637784][ T5692] plantronics 0003:047F:FFFF.0001: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.2-1/input0 [ 76.751112][ T5719] usb 2-1: new full-speed USB device number 2 using dummy_hcd [ 76.819501][ T5924] IPVS: sync thread started: state = MASTER, mcast_ifn = sit0, syncid = 4, id = 0 [ 76.923272][ T5719] usb 2-1: unable to get BOS descriptor or descriptor too short [ 76.945048][ T5719] usb 2-1: not running at top speed; connect to a high speed hub [ 76.963516][ T5719] usb 2-1: New USB device found, idVendor=04b4, idProduct=0384, bcdDevice= 0.40 [ 76.977876][ T5719] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 76.987839][ T5719] usb 2-1: Product: syz [ 76.993019][ T5719] usb 2-1: Manufacturer: syz [ 77.001187][ T5719] usb 2-1: SerialNumber: syz [ 77.040506][ T5719] usb 2-1: Audio class v2/v3 interfaces need an interface association [ 77.143712][ T5719] snd-usb-audio 2-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 77.234874][ T5719] snd-usb-hiface 2-1:1.0: probe with driver snd-usb-hiface failed with error -22 [ 77.337895][ T5930] faux_driver vgem: [drm] Unknown color mode 55359; guessing buffer size. [ 77.489211][ T5916] netlink: 'syz.1.21': attribute type 39 has an invalid length. [ 77.636366][ T5938] netlink: 36 bytes leftover after parsing attributes in process `syz.3.23'. [ 77.747164][ T5941] netlink: 8 bytes leftover after parsing attributes in process `syz.3.23'. [ 77.756632][ T5941] netlink: 8 bytes leftover after parsing attributes in process `syz.3.23'. [ 78.189722][ T5927] block nbd3: shutting down sockets [ 78.438695][ T5719] usb 2-1: can't set first interface for hiFace device. [ 78.461356][ T5719] snd-usb-hiface 2-1:1.1: probe with driver snd-usb-hiface failed with error -5 [ 78.525317][ T5719] usb 2-1: can't set first interface for hiFace device. [ 78.536831][ T30] kauditd_printk_skb: 16 callbacks suppressed [ 78.536846][ T30] audit: type=1400 audit(1786477312.764:233): avc: denied { create } for pid=5947 comm="syz.3.29" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 78.543495][ T5719] snd-usb-hiface 2-1:1.2: probe with driver snd-usb-hiface failed with error -5 [ 78.712228][ T5719] usb 2-1: USB disconnect, device number 2 [ 78.989454][ T5679] usb 3-1: USB disconnect, device number 2 [ 80.221640][ T30] audit: type=1400 audit(1786477314.114:234): avc: denied { create } for pid=5953 comm="syz.3.31" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 80.542899][ T5602] udevd[5602]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 80.599638][ T30] audit: type=1400 audit(1786477314.824:235): avc: denied { read } for pid=5975 comm="syz.2.34" name="rtc0" dev="devtmpfs" ino=920 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 80.643962][ T30] audit: type=1400 audit(1786477314.864:236): avc: denied { open } for pid=5975 comm="syz.2.34" path="/dev/rtc0" dev="devtmpfs" ino=920 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 80.777577][ T5979] syz.2.34: vmalloc error: size 9223372036854775807, exceeds total pages, mode:0xcc0(GFP_KERNEL), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 80.793464][ T5979] CPU: 0 UID: 0 PID: 5979 Comm: syz.2.34 Not tainted syzkaller #0 PREEMPT(full) [ 80.793492][ T5979] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 80.793501][ T5979] Call Trace: [ 80.793505][ T5979] [ 80.793512][ T5979] dump_stack_lvl+0x100/0x190 [ 80.793531][ T5979] warn_alloc.cold+0x94/0xa8 [ 80.793543][ T5979] ? __pfx_warn_alloc+0x10/0x10 [ 80.793561][ T5979] ? __pfx___schedule+0x10/0x10 [ 80.793578][ T5979] __vmalloc_node_range_noprof+0x136c/0x1630 [ 80.793598][ T5979] ? preempt_schedule_common+0x42/0xc0 [ 80.793612][ T5979] ? preempt_schedule_thunk+0x16/0x40 [ 80.793625][ T5979] ? dvb_dvr_do_ioctl+0x15d/0x270 [ 80.793644][ T5979] ? dvb_dvr_do_ioctl+0x7e/0x270 [ 80.793659][ T5979] ? find_held_lock+0x2b/0x80 [ 80.793672][ T5979] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 80.793689][ T5979] ? __pfx___mutex_lock+0x10/0x10 [ 80.793709][ T5979] ? dvb_dvr_do_ioctl+0x15d/0x270 [ 80.793725][ T5979] __vmalloc_node_noprof+0xad/0xf0 [ 80.793742][ T5979] ? dvb_dvr_do_ioctl+0x15d/0x270 [ 80.793760][ T5979] dvb_dvr_do_ioctl+0x15d/0x270 [ 80.793781][ T5979] dvb_usercopy+0x167/0x340 [ 80.793798][ T5979] ? __pfx_dvb_dvr_do_ioctl+0x10/0x10 [ 80.793817][ T5979] ? __pfx_dvb_usercopy+0x10/0x10 [ 80.793848][ T5979] ? selinux_file_ioctl+0x13b/0x290 [ 80.793872][ T5979] ? selinux_file_ioctl+0xb6/0x290 [ 80.793890][ T5979] dvb_dvr_ioctl+0x29/0x40 [ 80.793909][ T5979] ? __pfx_dvb_dvr_ioctl+0x10/0x10 [ 80.793925][ T5979] __x64_sys_ioctl+0x18e/0x210 [ 80.793944][ T5979] do_syscall_64+0x115/0x870 [ 80.793959][ T5979] ? clear_bhb_loop+0x70/0xc0 [ 80.793972][ T5979] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 80.793983][ T5979] RIP: 0033:0x7f243e39e0d9 [ 80.793995][ T5979] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 80.794005][ T5979] RSP: 002b:00007f243f1b0028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 80.794017][ T5979] RAX: ffffffffffffffda RBX: 00007f243e626090 RCX: 00007f243e39e0d9 [ 80.794025][ T5979] RDX: 7fffffffffffffff RSI: 0000000000006f2d RDI: 0000000000000005 [ 80.794031][ T5979] RBP: 00007f243e435024 R08: 0000000000000000 R09: 0000000000000000 [ 80.794037][ T5979] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 80.794043][ T5979] R13: 00007f243e626128 R14: 00007f243e626090 R15: 00007ffe2beaff88 [ 80.794056][ T5979] [ 80.794130][ T5979] Mem-Info: [ 80.907768][ T30] audit: type=1400 audit(1786477314.864:237): avc: denied { read } for pid=5975 comm="syz.2.34" name="dvr0" dev="devtmpfs" ino=929 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1 [ 80.921112][ T5979] active_anon:13137 inactive_anon:0 isolated_anon:0 [ 80.921112][ T5979] active_file:0 inactive_file:44086 isolated_file:0 [ 80.921112][ T5979] unevictable:0 dirty:2204 writeback:0 [ 80.921112][ T5979] slab_reclaimable:11168 slab_unreclaimable:96403 [ 80.921112][ T5979] mapped:41999 shmem:6265 pagetables:1201 [ 80.921112][ T5979] sec_pagetables:0 bounce:0 [ 80.921112][ T5979] kernel_misc_reclaimable:0 [ 80.921112][ T5979] free:1312081 free_pcp:13396 free_cma:0 [ 81.113803][ T5979] Node 0 active_anon:52548kB inactive_anon:0kB active_file:0kB inactive_file:176140kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:167996kB dirty:8808kB writeback:0kB shmem:25060kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:12628kB pagetables:4644kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 81.149837][ T5979] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:204kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:8kB writeback:0kB shmem:0kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:32kB pagetables:160kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 81.201648][ T5979] Node 0 DMA free:15360kB boost:0kB min:208kB low:260kB high:312kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 81.237225][ T5979] lowmem_reserve[]: 0 2472 2473 2473 2473 [ 81.243230][ T5979] Node 0 DMA32 free:1291280kB boost:0kB min:34012kB low:42512kB high:51012kB reserved_highatomic:0KB free_highatomic:0KB active_anon:52548kB inactive_anon:0kB active_file:0kB inactive_file:176140kB unevictable:0kB writepending:8808kB zspages:0kB present:3129332kB managed:2532244kB mlocked:0kB bounce:0kB free_pcp:53296kB local_pcp:21164kB free_cma:0kB [ 81.278772][ T5979] lowmem_reserve[]: 0 0 0 0 0 [ 81.283807][ T5979] Node 0 Normal free:0kB boost:0kB min:4kB low:4kB high:4kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:1048580kB managed:384kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 81.392756][ T30] audit: type=1400 audit(1786477314.864:238): avc: denied { open } for pid=5975 comm="syz.2.34" path="/dev/dvb/adapter0/dvr0" dev="devtmpfs" ino=929 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1 [ 81.535211][ T5979] lowmem_reserve[]: 0 0 0 0 0 [ 81.687039][ T5979] Node 1 Normal free:3941684kB boost:0kB min:55880kB low:69848kB high:83816kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:204kB unevictable:0kB writepending:8kB zspages:0kB present:4194300kB managed:4111100kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 81.718987][ T5979] lowmem_reserve[]: 0 0 0 0 0 [ 81.724167][ T5979] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 81.737865][ T5979] Node 0 DMA32: 561*4kB (UME) 218*8kB (UM) 42*16kB (UME) 19*32kB (UM) 3*64kB (U) 3*128kB (UM) 2*256kB (ME) 3*512kB (UM) 1*1024kB (M) 4*2048kB (UME) 311*4096kB (M) = 1290964kB [ 81.760186][ T5979] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 81.775069][ T5979] Node 1 Normal: 1*4kB (M) 2*8kB (UM) 6*16kB (UM) 10*32kB (UM) 6*64kB (UM) 4*128kB (UM) 2*256kB (M) 3*512kB (UM) 2*1024kB (UM) 2*2048kB (U) 960*4096kB (M) = 3941684kB [ 81.793021][ T5979] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 81.802771][ T5979] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 81.826189][ T5979] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 81.834858][ T30] audit: type=1400 audit(1786477315.004:239): avc: denied { ioctl } for pid=5975 comm="syz.2.34" path="/dev/dvb/adapter0/dvr0" dev="devtmpfs" ino=929 ioctlcmd=0x6f2d scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1 [ 81.862779][ T5979] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 81.872318][ T5979] 50418 total pagecache pages [ 81.877141][ T5979] 0 pages in swap cache [ 81.881623][ T5979] Free swap = 124996kB [ 81.885982][ T5979] Total swap = 124996kB [ 81.890242][ T5979] 2097051 pages RAM [ 81.894226][ T5979] 0 pages HighMem/MovableOnly [ 81.898971][ T5979] 432279 pages reserved [ 81.903327][ T5979] 0 pages cma reserved [ 82.097138][ T30] audit: type=1400 audit(1786477316.304:240): avc: denied { name_bind } for pid=6004 comm="syz.0.37" src=20001 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=tcp_socket permissive=1 [ 82.613205][ T6019] netlink: 152 bytes leftover after parsing attributes in process `syz.2.40'. [ 82.672555][ T30] audit: type=1400 audit(1786477316.894:241): avc: denied { write } for pid=6020 comm="syz.4.42" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 83.767957][ T30] audit: type=1400 audit(1786477316.934:242): avc: denied { create } for pid=6020 comm="syz.4.42" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 83.829563][ T6026] lo speed is unknown, defaulting to 1000 [ 83.838511][ T6026] lo speed is unknown, defaulting to 1000 [ 83.860794][ T6026] lo speed is unknown, defaulting to 1000 [ 83.916985][ T6026] smbdirect: ib_dev[syz2]: added: RNIC max_fast_reg_page_list_len=256 device_cap_flags=0x200000 kernel_cap_flags=0x10 page_size_cap=0x1000 [ 83.931800][ T6026] smbdirect: ib_dev[syz2]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=1 max_cqe=3276800 max_qp_wr=32768 max_send_sge=6 max_recv_sge=6 [ 83.949146][ T6026] smbdirect: ib_dev[syz2]PORT[1]: iwarp=1 ib=0 roce=0 v1=0 v2=0 core_cap_flags=0x400008 [ 83.980449][ T6026] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 84.037424][ T6026] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 84.056026][ T30] audit: type=1400 audit(1786477317.764:243): avc: denied { write } for pid=6022 comm="syz.3.41" name="001" dev="devtmpfs" ino=741 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 84.338577][ T6026] lo speed is unknown, defaulting to 1000 [ 84.403319][ T30] audit: type=1400 audit(1786477317.984:244): avc: denied { sqpoll } for pid=6018 comm="syz.2.40" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 84.692346][ T30] audit: type=1400 audit(1786477318.044:245): avc: denied { write } for pid=6018 comm="syz.2.40" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 84.956093][ T30] audit: type=1400 audit(1786477319.174:246): avc: denied { create } for pid=6031 comm="syz.0.45" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 85.047027][ T30] audit: type=1400 audit(1786477319.184:247): avc: denied { setopt } for pid=6031 comm="syz.0.45" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 85.123969][ T30] audit: type=1400 audit(1786477319.184:248): avc: denied { connect } for pid=6031 comm="syz.0.45" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 85.186211][ T30] audit: type=1400 audit(1786477319.184:249): avc: denied { write } for pid=6031 comm="syz.0.45" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 85.396737][ T6026] lo speed is unknown, defaulting to 1000 [ 85.621252][ T30] audit: type=1400 audit(1786477319.734:250): avc: denied { mmap_zero } for pid=6029 comm="syz.4.43" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=memprotect permissive=1 [ 85.831381][ T6026] lo speed is unknown, defaulting to 1000 [ 85.837878][ T6026] lo speed is unknown, defaulting to 1000 [ 85.883605][ T6026] lo speed is unknown, defaulting to 1000 [ 85.939767][ T6039] batman_adv: batadv0: Adding interface: dummy0 [ 85.951104][ T6039] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 86.016899][ T6039] batman_adv: batadv0: Interface activated: dummy0 [ 86.126032][ T6041] CUSE: unknown device info "" [ 86.138640][ T6041] CUSE: unknown device info "Ö" [ 86.167272][ T6041] CUSE: unknown device info "" [ 86.178744][ T6041] CUSE: unknown device info "" [ 86.193907][ T6041] CUSE: unknown device info "" [ 86.205490][ T6041] CUSE: unknown device info "" [ 86.220710][ T6041] CUSE: unknown device info "ðÿÿÿ" [ 86.235723][ T6041] CUSE: unknown device info "" [ 86.257969][ T6041] CUSE: unknown device info "" [ 86.271520][ T6041] CUSE: unknown device info "" [ 86.281314][ T6041] CUSE: unknown device info "" [ 86.292048][ T6041] CUSE: unknown device info "r" [ 86.301309][ T6041] CUSE: unknown device info "ýÿÿÿÿÿÿÿ#Û" [ 86.316100][ T6041] CUSE: unknown device info "ÿÿÿÿ" [ 86.326159][ T29] cfg80211: failed to load regulatory.db [ 86.351671][ T6041] CUSE: unknown device info "" [ 86.367676][ T6041] CUSE: unknown device info "€" [ 86.386081][ T6041] CUSE: DEVNAME unspecified [ 86.550425][ T6053] lo speed is unknown, defaulting to 1000 [ 86.563603][ T30] audit: type=1400 audit(1786477320.784:251): avc: denied { execute } for pid=6055 comm="syz.0.51" path="/9/file1" dev="tmpfs" ino=67 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 86.593569][ T5679] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 86.781085][ T5679] usb 2-1: Using ep0 maxpacket: 32 [ 86.793789][ T5679] usb 2-1: New USB device found, idVendor=06f8, idProduct=301b, bcdDevice=ad.39 [ 86.816220][ T5679] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 86.837917][ T5679] usb 2-1: New USB device strings: Mfr=1, Product=6, SerialNumber=0 [ 86.858707][ T5679] usb 2-1: Product: syz [ 86.870279][ T5679] usb 2-1: Manufacturer: syz [ 86.900025][ T5679] usb 2-1: config 0 descriptor?? [ 86.916297][ T5679] gspca_main: gspca_pac7302-2.14.0 probing 06f8:301b [ 87.052671][ T5599] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 87.238745][ T6046] wlan0 speed is unknown, defaulting to 1000 [ 87.256643][ T6046] wlan0 speed is unknown, defaulting to 1000 [ 87.270379][ T6046] wlan0 speed is unknown, defaulting to 1000 [ 87.284982][ T5599] usb 5-1: unable to get BOS descriptor or descriptor too short [ 87.312730][ T5599] usb 5-1: New USB device found, idVendor=1235, idProduct=0010, bcdDevice= 0.40 [ 87.322470][ T6046] smbdirect: ib_dev[syz0]: added: RNIC max_fast_reg_page_list_len=256 device_cap_flags=0x200000 kernel_cap_flags=0x10 page_size_cap=0x1000 [ 87.322520][ T6046] smbdirect: ib_dev[syz0]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=1 max_cqe=3276800 max_qp_wr=32768 max_send_sge=6 max_recv_sge=6 [ 87.354884][ T6046] smbdirect: ib_dev[syz0]PORT[1]: iwarp=1 ib=0 roce=0 v1=0 v2=0 core_cap_flags=0x400008 [ 87.383551][ T6065] lo speed is unknown, defaulting to 1000 [ 87.392770][ T5599] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 87.411936][ T5599] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 87.423535][ T6065] wlan0 speed is unknown, defaulting to 1000 [ 87.439897][ T5679] gspca_pac7302: reg_w() failed i: ff v: 01 error -110 [ 87.452092][ T5599] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 87.465284][ T5599] usb 5-1: Product: syz [ 87.470630][ T6046] infiniband syz0: RDMA CMA: cma_listen_on_dev, error -98 [ 87.473748][ T5599] usb 5-1: Manufacturer: syz [ 87.483762][ T5679] gspca_pac7302 2-1:0.0: probe with driver gspca_pac7302 failed with error -110 [ 87.491877][ T5599] usb 5-1: SerialNumber: syz [ 87.535758][ T5599] usb 5-1: selecting invalid altsetting 1 [ 87.577503][ T5599] usb 5-1: unit 6 not found! [ 87.596950][ T6046] wlan0 speed is unknown, defaulting to 1000 [ 87.607615][ T6046] wlan0 speed is unknown, defaulting to 1000 [ 87.656662][ T6046] wlan0 speed is unknown, defaulting to 1000 [ 87.683809][ T6046] wlan0 speed is unknown, defaulting to 1000 [ 87.691570][ T5699] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 87.712617][ T6046] wlan0 speed is unknown, defaulting to 1000 [ 87.753473][ T5765] usb 2-1: USB disconnect, device number 3 [ 87.861113][ T5699] usb 1-1: Using ep0 maxpacket: 16 [ 87.871145][ T5699] usb 1-1: New USB device found, idVendor=0db0, idProduct=5581, bcdDevice=f9.22 [ 87.883606][ T5699] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 87.893612][ T5699] usb 1-1: Product: syz [ 87.897899][ T5699] usb 1-1: Manufacturer: syz [ 87.903314][ T5699] usb 1-1: SerialNumber: syz [ 88.156043][ T5699] usb 1-1: dvb_usb_v2: found a 'MSI Mega Sky 55801 DVB-T USB2.0' in warm state [ 88.195065][ T5699] usb 1-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 88.209040][ T5699] dvbdev: DVB: registering new adapter (MSI Mega Sky 55801 DVB-T USB2.0) [ 88.232131][ T6074] netlink: Invalid conntrack timeout [ 88.239070][ T5699] usb 1-1: media controller created [ 88.289080][ T6074] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 88.326481][ T5699] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 88.388975][ T6076] openvswitch: netlink: Key type 62 is out of range max 32 [ 88.456506][ T5699] zl10353_read_register: readreg error (reg=127, ret==-32) [ 88.603677][ T5699] dvb_usb_gl861 1-1:157.0: probe with driver dvb_usb_gl861 failed with error -5 [ 88.642716][ T5765] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 88.720421][ T5699] usb 1-1: USB disconnect, device number 2 [ 88.801127][ T5765] usb 2-1: Using ep0 maxpacket: 16 [ 88.827241][ T5765] usb 2-1: New USB device found, idVendor=1e7d, idProduct=2d50, bcdDevice= 0.00 [ 88.857478][ T5765] usb 2-1: config 0 interface 0 altsetting 88 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 88.870346][ T5765] usb 2-1: config 0 interface 0 altsetting 88 endpoint 0x81 has invalid wMaxPacketSize 0 [ 88.888488][ T5765] usb 2-1: config 0 interface 0 altsetting 88 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 88.947289][ T5765] usb 2-1: config 0 interface 0 has no altsetting 0 [ 88.980804][ T5765] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 89.027587][ T6080] FAULT_INJECTION: forcing a failure. [ 89.027587][ T6080] name failslab, interval 1, probability 0, space 0, times 1 [ 89.044431][ T5765] usb 2-1: config 0 descriptor?? [ 89.101006][ T6080] CPU: 1 UID: 0 PID: 6080 Comm: syz.3.57 Not tainted syzkaller #0 PREEMPT(full) [ 89.101031][ T6080] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 89.101040][ T6080] Call Trace: [ 89.101046][ T6080] [ 89.101052][ T6080] dump_stack_lvl+0x100/0x190 [ 89.101080][ T6080] should_fail_ex.cold+0x5/0xa [ 89.101101][ T6080] should_failslab+0xc2/0x120 [ 89.101126][ T6080] __kmalloc_noprof+0xfc/0x820 [ 89.101145][ T6080] ? __pfx_dynamic_dname+0x10/0x10 [ 89.101170][ T6080] ? tomoyo_encode2+0xfb/0x3c0 [ 89.101191][ T6080] tomoyo_encode2+0xfb/0x3c0 [ 89.101211][ T6080] tomoyo_encode+0x29/0x50 [ 89.101226][ T6080] tomoyo_realpath_from_path+0x18c/0x690 [ 89.101250][ T6080] tomoyo_path_number_perm+0x23c/0x580 [ 89.101273][ T6080] ? tomoyo_path_number_perm+0x22e/0x580 [ 89.101298][ T6080] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 89.101322][ T6080] ? register_lock_class+0x40/0x560 [ 89.101349][ T6080] ? __lock_acquire+0x49f/0x1a40 [ 89.101376][ T6080] ? __pfx___might_resched+0x10/0x10 [ 89.101390][ T6080] ? find_held_lock+0x2b/0x80 [ 89.101400][ T6080] ? mnt_get_write_access+0x52/0x2f0 [ 89.101426][ T6080] ? down_write_killable+0x152/0x250 [ 89.101451][ T6080] ? __pfx_down_write_killable+0x10/0x10 [ 89.101478][ T6080] security_path_chmod+0x121/0x2c0 [ 89.101498][ T6080] chmod_common+0x19a/0x4d0 [ 89.101513][ T6080] ? __pfx_chmod_common+0x10/0x10 [ 89.101525][ T6080] ? find_held_lock+0x2b/0x80 [ 89.101535][ T6080] ? __fget_files+0x215/0x3d0 [ 89.101546][ T6080] ? __fget_files+0x215/0x3d0 [ 89.101576][ T6080] __x64_sys_fchmod+0x10e/0x1b0 [ 89.101596][ T6080] do_syscall_64+0x115/0x870 [ 89.101615][ T6080] ? clear_bhb_loop+0x70/0xc0 [ 89.101635][ T6080] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 89.101647][ T6080] RIP: 0033:0x7f3fbb39e0d9 [ 89.101657][ T6080] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 89.101667][ T6080] RSP: 002b:00007f3fbc276028 EFLAGS: 00000246 ORIG_RAX: 000000000000005b [ 89.101678][ T6080] RAX: ffffffffffffffda RBX: 00007f3fbb625fa0 RCX: 00007f3fbb39e0d9 [ 89.101690][ T6080] RDX: 0000000000000000 RSI: 00000000000001c7 RDI: 0000000000000003 [ 89.101699][ T6080] RBP: 00007f3fbc276090 R08: 0000000000000000 R09: 0000000000000000 [ 89.101708][ T6080] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 89.101718][ T6080] R13: 00007f3fbb626038 R14: 00007f3fbb625fa0 R15: 00007ffe003242f8 [ 89.101741][ T6080] [ 89.477092][ T6080] ERROR: Out of memory at tomoyo_realpath_from_path. [ 89.487537][ T30] kauditd_printk_skb: 57 callbacks suppressed [ 89.487550][ T30] audit: type=1400 audit(1786477323.714:309): avc: denied { setattr } for pid=6079 comm="syz.3.57" name="NETLINK" dev="sockfs" ino=8763 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 89.600112][ T6086] syzkaller0: entered promiscuous mode [ 89.610552][ T6086] syzkaller0: entered allmulticast mode [ 89.646777][ T6087] Zero length message leads to an empty skb [ 89.689609][ T30] audit: type=1400 audit(1786477323.914:310): avc: denied { name_bind } for pid=6075 comm="syz.1.56" src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=udp_socket permissive=1 [ 89.791082][ T30] audit: type=1400 audit(1786477323.954:311): avc: denied { create } for pid=6075 comm="syz.1.56" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 89.865349][ T30] audit: type=1400 audit(1786477323.954:312): avc: denied { write } for pid=6075 comm="syz.1.56" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 89.865881][ T5599] snd-usb-audio 5-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 89.951580][ T5599] usb 5-1: USB disconnect, device number 2 [ 89.970769][ T30] audit: type=1400 audit(1786477323.984:313): avc: denied { read } for pid=6075 comm="syz.1.56" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 90.112033][ T5602] udevd[5602]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 90.118034][ T30] audit: type=1400 audit(1786477324.084:314): avc: denied { mount } for pid=6075 comm="syz.1.56" name="/" dev="sysfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=filesystem permissive=1 [ 90.179331][ T5765] usbhid 2-1:0.0: can't add hid device: -71 [ 90.215703][ T5765] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 90.267987][ T5765] usb 2-1: USB disconnect, device number 4 [ 91.374929][ T30] audit: type=1400 audit(1786477324.144:315): avc: denied { write } for pid=6075 comm="syz.1.56" name="video3" dev="devtmpfs" ino=935 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1 [ 91.697727][ T30] audit: type=1400 audit(1786477324.474:316): avc: denied { connect } for pid=6083 comm="syz.0.59" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 92.094484][ T30] audit: type=1400 audit(1786477326.104:317): avc: denied { unmount } for pid=5608 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 92.881505][ T30] audit: type=1400 audit(1786477327.044:318): avc: denied { unmount } for pid=5608 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=filesystem permissive=1 [ 94.246619][ T6149] Cannot find add_set index 0 as target [ 94.328401][ T6149] pim6reg: entered allmulticast mode [ 94.336518][ T6148] lo speed is unknown, defaulting to 1000 [ 94.349770][ T6149] pim6reg: left allmulticast mode [ 94.435091][ T6148] wlan0 speed is unknown, defaulting to 1000 [ 94.491000][ T6162] tipc: Enabling of bearer rejected, failed to enable media [ 94.672469][ T30] kauditd_printk_skb: 6 callbacks suppressed [ 94.672485][ T30] audit: type=1400 audit(1786477328.904:325): avc: denied { create } for pid=6145 comm="syz.1.67" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 95.296619][ T30] audit: type=1400 audit(1786477329.444:326): avc: denied { connect } for pid=6145 comm="syz.1.67" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 95.358501][ T30] audit: type=1400 audit(1786477329.444:327): avc: denied { setopt } for pid=6145 comm="syz.1.67" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 95.492705][ T30] audit: type=1400 audit(1786477329.714:328): avc: denied { map } for pid=6176 comm="syz.0.74" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=8844 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 95.541829][ T6174] Illegal XDP return value 1021536728 on prog (id 9) dev N/A, expect packet loss! [ 95.770843][ T30] audit: type=1400 audit(1786477329.714:329): avc: denied { read write } for pid=6176 comm="syz.0.74" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=8844 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 96.011832][ T6183] netlink: 16 bytes leftover after parsing attributes in process `syz.2.73'. [ 96.028977][ T30] audit: type=1400 audit(1786477330.234:330): avc: denied { associate } for pid=6176 comm="syz.0.74" name="3" scontext=root:object_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 96.546184][ T6191] lo speed is unknown, defaulting to 1000 [ 96.565365][ T6191] wlan0 speed is unknown, defaulting to 1000 [ 96.639429][ T30] audit: type=1400 audit(1786477330.864:331): avc: denied { ioctl } for pid=6200 comm="syz.4.81" path="socket:[8867]" dev="sockfs" ino=8867 ioctlcmd=0x0 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 96.773066][ T29] usb 4-1: new full-speed USB device number 2 using dummy_hcd [ 96.790548][ T30] audit: type=1400 audit(1786477331.014:332): avc: denied { write } for pid=6200 comm="syz.4.81" name="usb_gadget" dev="configfs" ino=386 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 96.815282][ T30] audit: type=1400 audit(1786477331.024:333): avc: denied { write } for pid=6200 comm="syz.4.81" name="idProduct" dev="configfs" ino=8911 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=file permissive=1 [ 96.838526][ T30] audit: type=1400 audit(1786477331.024:334): avc: denied { open } for pid=6200 comm="syz.4.81" path="/16/config/usb_gadget/g1/idProduct" dev="configfs" ino=8911 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=file permissive=1 [ 96.921174][ T5679] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 96.946753][ T29] usb 4-1: not running at top speed; connect to a high speed hub [ 96.954792][ T29] usb 4-1: New USB device found, idVendor=06cd, idProduct=0135, bcdDevice= 1.00 [ 96.965898][ T29] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 96.979278][ T29] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x84 has an invalid bInterval 0, changing to 10 [ 96.992198][ T29] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x84 has invalid maxpacket 255, setting to 64 [ 97.005044][ T29] usb 4-1: config 1 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 6 [ 97.040511][ T29] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 97.072053][ T5679] usb 1-1: Using ep0 maxpacket: 16 [ 97.082465][ T6198] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 97.094072][ T5679] usb 1-1: New USB device found, idVendor=20f4, idProduct=e05a, bcdDevice=6c.6d [ 97.114431][ T29] keyspan 4-1:1.0: Keyspan 2 port adapter converter detected [ 97.129324][ T5679] usb 1-1: config 1 has an invalid interface number: 105 but max is 0 [ 97.149254][ T29] keyspan 4-1:1.0: found no endpoint descriptor for endpoint 2 [ 97.160674][ T5679] usb 1-1: config 1 has no interface number 0 [ 97.169008][ T5679] usb 1-1: config 1 interface 105 altsetting 2 bulk endpoint 0x4 has invalid maxpacket 16 [ 97.184230][ T5679] usb 1-1: config 1 interface 105 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 64 [ 97.194622][ T29] usb 4-1: Keyspan 2 port adapter converter now attached to ttyUSB0 [ 97.217541][ T29] keyspan 4-1:1.0: found no endpoint descriptor for endpoint 88 [ 97.232713][ T6209] netlink: 'syz.1.83': attribute type 10 has an invalid length. [ 97.240443][ T5679] usb 1-1: config 1 interface 105 has no altsetting 0 [ 97.248221][ T29] keyspan 4-1:1.0: found no endpoint descriptor for endpoint 6 [ 97.281776][ T5679] usb 1-1: New USB device strings: Mfr=1, Product=23, SerialNumber=3 [ 97.294973][ T29] usb 4-1: Keyspan 2 port adapter converter now attached to ttyUSB1 [ 97.307222][ T5679] usb 1-1: Product: syz [ 97.330753][ T5679] usb 1-1: Manufacturer: syz [ 97.349676][ T5679] usb 1-1: SerialNumber: syz [ 97.377999][ T6203] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 97.392843][ T6203] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 97.438315][ T6209] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 97.487722][ T6209] team0: Port device netdevsim1 added [ 97.510592][ T29] usb 4-1: USB disconnect, device number 2 [ 97.527668][ T29] keyspan_2 ttyUSB0: Keyspan 2 port adapter converter now disconnected from ttyUSB0 [ 97.556604][ T29] keyspan_2 ttyUSB1: Keyspan 2 port adapter converter now disconnected from ttyUSB1 [ 97.575142][ T29] keyspan 4-1:1.0: device disconnected [ 97.634846][ T6203] netlink: 40 bytes leftover after parsing attributes in process `syz.0.82'. [ 97.800724][ T6229] netlink: 4 bytes leftover after parsing attributes in process `syz.1.87'. [ 97.849327][ T6203] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 97.863868][ T6203] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 98.097343][ T6240] syz.1.88 uses obsolete (PF_INET,SOCK_PACKET) [ 98.136114][ T6240] syzkaller1: entered promiscuous mode [ 98.151159][ T6240] syzkaller1: entered allmulticast mode [ 98.283644][ T6203] smbdirect: ib_dev[syz2] renamed to [sy] [ 98.328616][ T5679] aqc111 1-1:1.105 (unnamed net_device) (uninitialized): Failed to read(0x1) reg index 0x0001: -71 [ 98.358333][ T5679] aqc111 1-1:1.105 (unnamed net_device) (uninitialized): Failed to read(0x1) reg index 0x0001: -71 [ 98.378072][ T5679] aqc111 1-1:1.105 (unnamed net_device) (uninitialized): Failed to read(0x1) reg index 0x0001: -71 [ 98.403180][ T5679] aqc111 1-1:1.105 eth1: register 'aqc111' at usb-dummy_hcd.0-1, USB-C 3.1 to 5GBASE-T Ethernet Adapter, 8e:ad:b0:b0:51:db [ 98.426536][ T5679] usb 1-1: USB disconnect, device number 3 [ 98.455001][ T5679] aqc111 1-1:1.105 eth1: unregister 'aqc111' usb-dummy_hcd.0-1, USB-C 3.1 to 5GBASE-T Ethernet Adapter [ 98.547045][ T5679] aqc111 1-1:1.105 eth1 (unregistered): Failed to write(0x1) reg index 0x0002: -19 [ 98.557884][ T6262] netlink: 'syz.1.93': attribute type 8 has an invalid length. [ 98.570838][ T5679] aqc111 1-1:1.105 eth1 (unregistered): Failed to write(0x1) reg index 0x0002: -19 [ 98.581853][ T5599] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 98.590072][ T5679] aqc111 1-1:1.105 eth1 (unregistered): Failed to write(0x61) reg index 0x0000: -19 [ 98.601254][ T5765] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 98.774806][ T5765] usb 4-1: New USB device found, idVendor=0582, idProduct=007d, bcdDevice= 0.00 [ 98.786637][ T5599] usb 5-1: unable to get BOS descriptor or descriptor too short [ 98.805603][ T5599] usb 5-1: New USB device found, idVendor=07c0, idProduct=158b, bcdDevice=d9.d2 [ 98.826427][ T5765] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 98.845026][ T5599] usb 5-1: config 64 has an invalid interface number: 44 but max is 0 [ 98.854419][ T5765] usb 4-1: config 1 has 2 interfaces, different from the descriptor's value: 4 [ 98.868204][ T5599] usb 5-1: config 64 has no interface number 0 [ 98.875008][ T6275] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 98.885759][ T5599] usb 5-1: config 64 interface 44 altsetting 7 endpoint 0x83 has an invalid bInterval 57, changing to 9 [ 98.885794][ T5599] usb 5-1: config 64 interface 44 has no altsetting 0 [ 98.885937][ T5765] usb 4-1: config 1 interface 1 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 98.885973][ T5765] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 98.889831][ T5599] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 98.959279][ T5765] usb 4-1: interface 2 not found [ 99.039678][ T5599] usb 5-1: Product: syz [ 99.048253][ T5599] usb 5-1: Manufacturer: syz [ 99.056285][ T6279] device-mapper: ioctl: ioctl interface mismatch: kernel(4.50.0), user(0.0.0), cmd(11) [ 99.066223][ T5599] usb 5-1: SerialNumber: syz [ 99.228412][ T6250] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 99.284449][ T6250] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 99.557258][ T5599] iowarrior 5-1:64.44: no interrupt-out endpoint found [ 99.569902][ T5765] usb 4-1: USB disconnect, device number 3 [ 99.598475][ T5599] usb 5-1: USB disconnect, device number 3 [ 99.718939][ T30] kauditd_printk_skb: 41 callbacks suppressed [ 99.718956][ T30] audit: type=1400 audit(1786477333.944:376): avc: denied { write } for pid=6292 comm="syz.0.103" name="/" dev="ocfs2_dlmfs" ino=9008 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 99.738973][ T6293] o2cb: This node has not been configured. [ 99.766839][ T30] audit: type=1400 audit(1786477333.954:377): avc: denied { add_name } for pid=6292 comm="syz.0.103" name="file1" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 99.789441][ T30] audit: type=1400 audit(1786477333.954:378): avc: denied { create } for pid=6292 comm="syz.0.103" name="file1" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=dir permissive=1 [ 99.793242][ T6293] o2cb: Cluster check failed. Fix errors before retrying. [ 99.829455][ T30] audit: type=1400 audit(1786477333.954:379): avc: denied { associate } for pid=6292 comm="syz.0.103" name="file1" scontext=root:object_r:unlabeled_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 99.886056][ T6293] (syz.0.103,6293,1):user_dlm_register:674 ERROR: status = -22 [ 99.901645][ T6293] (syz.0.103,6293,1):dlmfs_mkdir:437 ERROR: Error -22 could not register domain "file1" [ 99.953313][ T6295] kAFS: unable to lookup cell 'ÿ' [ 100.968435][ T30] audit: type=1400 audit(1786477334.724:380): avc: denied { allowed } for pid=6303 comm="syz.1.107" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 101.041511][ T30] audit: type=1400 audit(1786477335.274:381): avc: denied { map_create } for pid=6310 comm="syz.4.111" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 101.084451][ T6311] Bluetooth: MGMT ver 1.23 [ 101.102185][ T30] audit: type=1400 audit(1786477335.274:382): avc: denied { map_read map_write } for pid=6310 comm="syz.4.111" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 101.182627][ T30] audit: type=1400 audit(1786477335.294:383): avc: denied { prog_run } for pid=6310 comm="syz.4.111" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 102.047376][ T30] audit: type=1400 audit(1786477335.314:384): avc: denied { bind } for pid=6310 comm="syz.4.111" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 102.067904][ T30] audit: type=1400 audit(1786477335.314:385): avc: denied { write } for pid=6310 comm="syz.4.111" path="socket:[9061]" dev="sockfs" ino=9061 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 102.346280][ T6334] warning: `syz.3.114' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 102.681661][ T5699] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 102.751757][ T6336] netlink: 'syz.2.118': attribute type 32 has an invalid length. [ 102.760544][ T6336] netlink: 8 bytes leftover after parsing attributes in process `syz.2.118'. [ 102.795876][ T6336] bond1: option coupled_control: invalid value (10) [ 102.805611][ T6336] bond1 (unregistering): Released all slaves [ 102.891147][ T5699] usb 1-1: Using ep0 maxpacket: 16 [ 102.902320][ T5699] usb 1-1: New USB device found, idVendor=0b95, idProduct=772a, bcdDevice=82.73 [ 102.919939][ T5699] usb 1-1: config 0 has an invalid interface number: 34 but max is 0 [ 102.937837][ T5699] usb 1-1: config 0 has no interface number 0 [ 102.957681][ T5699] usb 1-1: config 0 interface 34 altsetting 0 bulk endpoint 0xA has invalid maxpacket 1023 [ 102.981317][ T5699] usb 1-1: config 0 interface 34 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 80 [ 103.003261][ T5699] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 103.040124][ T5699] usb 1-1: Product: syz [ 103.058575][ T5699] usb 1-1: Manufacturer: syz [ 103.088356][ T5699] usb 1-1: SerialNumber: syz [ 103.115870][ T5699] usb 1-1: config 0 descriptor?? [ 103.138848][ T6333] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 103.188973][ T6348] netlink: 8 bytes leftover after parsing attributes in process `syz.1.110'. [ 103.212093][ T6333] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 103.333267][ T6355] syzkaller0: entered promiscuous mode [ 103.433708][ T5765] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 103.531868][ T6333] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 103.575789][ T6333] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 103.675079][ T5765] usb 4-1: New USB device found, idVendor=04e8, idProduct=6889, bcdDevice= 1.00 [ 103.797268][ T5765] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 103.888819][ T5765] usb 4-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 103.890308][ T5699] asix 1-1:0.34 (unnamed net_device) (uninitialized): invalid hw address, using random [ 103.906411][ T5765] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 103.976160][ T5765] usb 4-1: Product: syz [ 103.984544][ T5765] usb 4-1: Manufacturer: syz [ 103.994347][ T5765] usb 4-1: SerialNumber: syz [ 104.138645][ T5699] asix 1-1:0.34 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71 [ 104.149114][ T5699] asix 1-1:0.34: probe with driver asix failed with error -71 [ 104.174496][ T6371] smpboot: CPU 1 is now offline [ 104.204887][ T5699] usb 1-1: USB disconnect, device number 4 [ 104.301847][ T6333] ================================================================== [ 104.309917][ T6333] BUG: KASAN: slab-use-after-free in string+0x471/0x4d0 [ 104.316835][ T6333] Read of size 1 at addr ffff88802bd7e660 by task syz.0.117/6333 [ 104.324518][ T6333] [ 104.326816][ T6333] CPU: 0 UID: 0 PID: 6333 Comm: syz.0.117 Not tainted syzkaller #0 PREEMPT(full) [ 104.326830][ T6333] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 104.326836][ T6333] Call Trace: [ 104.326841][ T6333] [ 104.326847][ T6333] dump_stack_lvl+0x100/0x190 [ 104.326863][ T6333] print_report+0x13d/0x4b0 [ 104.326879][ T6333] ? __virt_addr_valid+0x239/0x430 [ 104.326896][ T6333] ? string+0x471/0x4d0 [ 104.326909][ T6333] kasan_report+0xdf/0x1c0 [ 104.326924][ T6333] ? string+0x471/0x4d0 [ 104.326936][ T6333] string+0x471/0x4d0 [ 104.326948][ T6333] ? __pfx_string+0x10/0x10 [ 104.326966][ T6333] vsnprintf+0x422/0x1300 [ 104.326981][ T6333] ? __pfx_vsnprintf+0x10/0x10 [ 104.326994][ T6333] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 104.327006][ T6333] ? is_bpf_text_address+0x94/0x1a0 [ 104.327022][ T6333] ? kernel_text_address+0x8d/0x100 [ 104.327035][ T6333] snprintf+0xc7/0x100 [ 104.327048][ T6333] ? __pfx_snprintf+0x10/0x10 [ 104.327063][ T6333] ? stack_trace_save+0x8e/0xc0 [ 104.327076][ T6333] dev_vprintk_emit+0x375/0x3e0 [ 104.327090][ T6333] ? __pfx_dev_vprintk_emit+0x10/0x10 [ 104.327105][ T6333] ? __x64_sys_ioctl+0x18e/0x210 [ 104.327120][ T6333] ? do_syscall_64+0x115/0x870 [ 104.327134][ T6333] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 104.327147][ T6333] dev_printk_emit+0xd2/0x10d [ 104.327160][ T6333] ? __pfx_dev_printk_emit+0x10/0x10 [ 104.327176][ T6333] __dev_printk+0xcb/0x100 [ 104.327189][ T6333] _dev_err+0xef/0x127 [ 104.327201][ T6333] ? __pfx__dev_err+0x10/0x10 [ 104.327215][ T6333] ? dummy_queue+0x3ca/0xb00 [ 104.327232][ T6333] ? find_held_lock+0x2b/0x80 [ 104.327241][ T6333] ? raw_process_ep0_io+0x314/0x9c0 [ 104.327259][ T6333] raw_process_ep0_io.cold+0x65/0x7f [ 104.327276][ T6333] raw_ioctl+0x1369/0x2b80 [ 104.327293][ T6333] ? __pfx_raw_ioctl+0x10/0x10 [ 104.327310][ T6333] ? selinux_file_ioctl+0xb6/0x290 [ 104.327327][ T6333] ? __pfx_raw_ioctl+0x10/0x10 [ 104.327343][ T6333] __x64_sys_ioctl+0x18e/0x210 [ 104.327360][ T6333] do_syscall_64+0x115/0x870 [ 104.327374][ T6333] ? clear_bhb_loop+0x70/0xc0 [ 104.327386][ T6333] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 104.327397][ T6333] RIP: 0033:0x7f7d4e59dd6b [ 104.327408][ T6333] Code: 00 48 89 44 24 18 31 c0 48 8d 44 24 60 c7 04 24 10 00 00 00 48 89 44 24 08 48 8d 44 24 20 48 89 44 24 10 b8 10 00 00 00 0f 05 <89> c2 3d 00 f0 ff ff 77 1c 48 8b 44 24 18 64 48 2b 04 25 28 00 00 [ 104.327420][ T6333] RSP: 002b:00007f7d4f538f50 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 104.327431][ T6333] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00007f7d4e59dd6b [ 104.327438][ T6333] RDX: 00007f7d4f538fd0 RSI: 0000000040085503 RDI: 0000000000000003 [ 104.327444][ T6333] RBP: 00007f7d4f538fd0 R08: 0000000000000001 R09: 0000000000000000 [ 104.327451][ T6333] R10: 0000000000000003 R11: 0000000000000246 R12: 00007f7d4f538fd8 [ 104.327457][ T6333] R13: 0000000000000000 R14: 00007f7d4e825fa0 R15: 00007ffc8f4dcdb8 [ 104.327467][ T6333] [ 104.327471][ T6333] [ 104.611439][ T6333] Allocated by task 1: [ 104.615482][ T6333] kasan_save_stack+0x30/0x50 [ 104.620142][ T6333] kasan_save_track+0x14/0x30 [ 104.624788][ T6333] __kasan_kmalloc+0xaa/0xb0 [ 104.629359][ T6333] __kmalloc_node_track_caller_noprof+0x331/0x830 [ 104.635830][ T6333] kvasprintf+0xbc/0x150 [ 104.640048][ T6333] kvasprintf_const+0x66/0x1a0 [ 104.644795][ T6333] kobject_set_name_vargs+0x5a/0x140 [ 104.650053][ T6333] dev_set_name+0xc7/0x100 [ 104.654438][ T6333] usb_add_gadget+0x520/0x920 [ 104.659082][ T6333] usb_add_gadget_udc+0x26/0x70 [ 104.663899][ T6333] dummy_udc_probe+0x69e/0x960 [ 104.668650][ T6333] platform_probe+0x106/0x1d0 [ 104.673304][ T6333] really_probe+0x241/0xa60 [ 104.677779][ T6333] __driver_probe_device+0x20e/0x450 [ 104.683035][ T6333] driver_probe_device+0x4a/0x140 [ 104.688050][ T6333] __device_attach_driver+0x1df/0x320 [ 104.693400][ T6333] bus_for_each_drv+0x159/0x1e0 [ 104.698217][ T6333] __device_attach+0x1e4/0x4d0 [ 104.702965][ T6333] device_initial_probe+0xaf/0xd0 [ 104.708049][ T6333] bus_probe_device+0x64/0x160 [ 104.712809][ T6333] device_add+0x121d/0x1970 [ 104.717290][ T6333] platform_device_add+0x35a/0x800 [ 104.722370][ T6333] dummy_hcd_init+0x803/0xc00 [ 104.727024][ T6333] do_one_initcall+0x11d/0x700 [ 104.731760][ T6333] kernel_init_freeable+0x6ea/0x7b0 [ 104.736934][ T6333] kernel_init+0x1f/0x1e0 [ 104.741231][ T6333] ret_from_fork+0x72b/0xd50 [ 104.745795][ T6333] ret_from_fork_asm+0x1a/0x30 [ 104.750531][ T6333] [ 104.752830][ T6333] Freed by task 6367: [ 104.756782][ T6333] kasan_save_stack+0x30/0x50 [ 104.761455][ T6333] kasan_save_track+0x14/0x30 [ 104.766103][ T6333] kasan_save_free_info+0x3b/0x70 [ 104.771103][ T6333] __kasan_slab_free+0x5f/0x80 [ 104.775839][ T6333] kfree+0x22b/0x6c0 [ 104.779719][ T6333] kfree_const+0x5a/0x70 [ 104.783951][ T6333] kobject_put+0x218/0x640 [ 104.788368][ T6333] put_device+0x1f/0x30 [ 104.792508][ T6333] platform_remove+0x5f/0x80 [ 104.797180][ T6333] device_remove+0xcb/0x180 [ 104.801655][ T6333] device_release_driver_internal+0x44e/0x620 [ 104.807702][ T6333] unbind_store+0xf8/0x110 [ 104.812092][ T6333] drv_attr_store+0x74/0xb0 [ 104.816573][ T6333] sysfs_kf_write+0xf2/0x150 [ 104.821136][ T6333] kernfs_fop_write_iter+0x3e0/0x5f0 [ 104.826391][ T6333] vfs_write+0x6ac/0x1050 [ 104.830695][ T6333] ksys_write+0x12a/0x250 [ 104.835003][ T6333] do_syscall_64+0x115/0x870 [ 104.839575][ T6333] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 104.845434][ T6333] [ 104.847729][ T6333] The buggy address belongs to the object at ffff88802bd7e660 [ 104.847729][ T6333] which belongs to the cache kmalloc-16 of size 16 [ 104.861597][ T6333] The buggy address is located 0 bytes inside of [ 104.861597][ T6333] freed 16-byte region [ffff88802bd7e660, ffff88802bd7e670) [ 104.875121][ T6333] [ 104.877424][ T6333] The buggy address belongs to the physical page: [ 104.883804][ T6333] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x2bd7e [ 104.892604][ T6333] flags: 0xfff00000000000(node=0|zone=1|lastcpupid=0x7ff) [ 104.899701][ T6333] page_type: f5(slab) [ 104.903663][ T6333] raw: 00fff00000000000 ffff88813fe21640 dead000000000100 dead000000000122 [ 104.912214][ T6333] raw: 0000000000000000 0000000800800080 00000000f5000000 0000000000000000 [ 104.920762][ T6333] page dumped because: kasan: bad access detected [ 104.927140][ T6333] page_owner tracks the page as allocated [ 104.932820][ T6333] page last allocated via order 0, migratetype Unmovable, gfp_mask 0xd2cc0(GFP_KERNEL|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 1, tgid 1 (swapper/0), ts 9857607150, free_ts 0 [ 104.951798][ T6333] register_dummy_stack+0x74/0xb0 [ 104.956795][ T6333] init_page_owner+0x42/0xa10 [ 104.961440][ T6333] page_ext_init+0x71d/0x780 [ 104.966260][ T6333] mm_core_init+0x229/0x270 [ 104.970746][ T6333] page_owner free stack trace missing [ 104.976338][ T6333] [ 104.978639][ T6333] Memory state around the buggy address: [ 104.984254][ T6333] ffff88802bd7e500: 00 00 fc fc 00 00 fc fc 00 04 fc fc 00 04 fc fc [ 104.992315][ T6333] ffff88802bd7e580: 00 04 fc fc 00 04 fc fc 00 04 fc fc 00 04 fc fc [ 105.000369][ T6333] >ffff88802bd7e600: 00 04 fc fc 00 01 fc fc 00 01 fc fc fa fb fc fc [ 105.008512][ T6333] ^ [ 105.015701][ T6333] ffff88802bd7e680: 00 00 fc fc 00 04 fc fc 00 04 fc fc fa fb fc fc [ 105.023738][ T6333] ffff88802bd7e700: fa fb fc fc 00 04 fc fc 00 04 fc fc 00 00 fc fc [ 105.031767][ T6333] ================================================================== [ 105.237332][ T5765] usb 4-1: USB disconnect, device number 4 [ 105.269958][ T30] kauditd_printk_skb: 10 callbacks suppressed [ 105.269968][ T30] audit: type=1400 audit(1786477339.494:396): avc: denied { read } for pid=4947 comm="syslogd" name="log" dev="sda1" ino=2010 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:var_t tclass=lnk_file permissive=1 [ 105.300124][ T30] audit: type=1400 audit(1786477339.494:397): avc: denied { search } for pid=4947 comm="syslogd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 105.323616][ T6333] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 105.330821][ T6333] CPU: 0 UID: 0 PID: 6333 Comm: syz.0.117 Not tainted syzkaller #0 PREEMPT(full) [ 105.339998][ T6333] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 105.350023][ T6333] Call Trace: [ 105.353274][ T6333] [ 105.356183][ T6333] dump_stack_lvl+0x100/0x190 [ 105.360837][ T6333] vpanic+0x552/0x970 [ 105.364791][ T6333] ? __pfx_vpanic+0x10/0x10 [ 105.369272][ T6333] ? rcu_is_watching+0x12/0xc0 [ 105.374015][ T6333] ? string+0x471/0x4d0 [ 105.378142][ T6333] panic+0xd1/0xe0 [ 105.381832][ T6333] ? __pfx_panic+0x10/0x10 [ 105.386218][ T6333] ? string+0x471/0x4d0 [ 105.390345][ T6333] ? preempt_schedule_common+0x42/0xc0 [ 105.395784][ T6333] check_panic_on_warn.cold+0x19/0x34 [ 105.401129][ T6333] end_report.part.0+0x3a/0x90 [ 105.405869][ T6333] kasan_report.cold+0xe/0x18 [ 105.410528][ T6333] ? string+0x471/0x4d0 [ 105.414665][ T6333] string+0x471/0x4d0 [ 105.418620][ T6333] ? __pfx_string+0x10/0x10 [ 105.423102][ T6333] vsnprintf+0x422/0x1300 [ 105.427410][ T6333] ? __pfx_vsnprintf+0x10/0x10 [ 105.432152][ T6333] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 105.438277][ T6333] ? is_bpf_text_address+0x94/0x1a0 [ 105.443451][ T6333] ? kernel_text_address+0x8d/0x100 [ 105.448620][ T6333] snprintf+0xc7/0x100 [ 105.452661][ T6333] ? __pfx_snprintf+0x10/0x10 [ 105.457312][ T6333] ? stack_trace_save+0x8e/0xc0 [ 105.462132][ T6333] dev_vprintk_emit+0x375/0x3e0 [ 105.466966][ T6333] ? __pfx_dev_vprintk_emit+0x10/0x10 [ 105.472310][ T6333] ? __x64_sys_ioctl+0x18e/0x210 [ 105.477235][ T6333] ? do_syscall_64+0x115/0x870 [ 105.481994][ T6333] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 105.488059][ T6333] dev_printk_emit+0xd2/0x10d [ 105.492729][ T6333] ? __pfx_dev_printk_emit+0x10/0x10 [ 105.497996][ T6333] __dev_printk+0xcb/0x100 [ 105.502388][ T6333] _dev_err+0xef/0x127 [ 105.506431][ T6333] ? __pfx__dev_err+0x10/0x10 [ 105.511096][ T6333] ? dummy_queue+0x3ca/0xb00 [ 105.515665][ T6333] ? find_held_lock+0x2b/0x80 [ 105.520322][ T6333] ? raw_process_ep0_io+0x314/0x9c0 [ 105.525509][ T6333] raw_process_ep0_io.cold+0x65/0x7f [ 105.530784][ T6333] raw_ioctl+0x1369/0x2b80 [ 105.535179][ T6333] ? __pfx_raw_ioctl+0x10/0x10 [ 105.539920][ T6333] ? selinux_file_ioctl+0xb6/0x290 [ 105.545022][ T6333] ? __pfx_raw_ioctl+0x10/0x10 [ 105.549772][ T6333] __x64_sys_ioctl+0x18e/0x210 [ 105.554512][ T6333] do_syscall_64+0x115/0x870 [ 105.559090][ T6333] ? clear_bhb_loop+0x70/0xc0 [ 105.563743][ T6333] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 105.569614][ T6333] RIP: 0033:0x7f7d4e59dd6b [ 105.574004][ T6333] Code: 00 48 89 44 24 18 31 c0 48 8d 44 24 60 c7 04 24 10 00 00 00 48 89 44 24 08 48 8d 44 24 20 48 89 44 24 10 b8 10 00 00 00 0f 05 <89> c2 3d 00 f0 ff ff 77 1c 48 8b 44 24 18 64 48 2b 04 25 28 00 00 [ 105.593604][ T6333] RSP: 002b:00007f7d4f538f50 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 105.602017][ T6333] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00007f7d4e59dd6b [ 105.609971][ T6333] RDX: 00007f7d4f538fd0 RSI: 0000000040085503 RDI: 0000000000000003 [ 105.617916][ T6333] RBP: 00007f7d4f538fd0 R08: 0000000000000001 R09: 0000000000000000 [ 105.625887][ T6333] R10: 0000000000000003 R11: 0000000000000246 R12: 00007f7d4f538fd8 [ 105.633849][ T6333] R13: 0000000000000000 R14: 00007f7d4e825fa0 R15: 00007ffc8f4dcdb8 [ 105.641808][ T6333] [ 105.644856][ T6333] Kernel Offset: disabled [ 105.649155][ T6333] Rebooting in 86400 seconds..