last executing test programs: 5.677657843s ago: executing program 3 (id=49): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x200, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0xf) ioctl$TCFLSH(r0, 0x400455c8, 0x0) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000080)={0x1, &(0x7f0000000040)=[{0x6}]}, 0x10) bind$bt_hci(r1, &(0x7f0000000140)={0x1f, 0xffff, 0x2}, 0x6) 3.532506473s ago: executing program 3 (id=78): r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_int(r0, 0x29, 0x38, &(0x7f0000000000)=0x8003, 0x4) bind$inet6(r0, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c) setsockopt$inet6_IPV6_DSTOPTS(r0, 0x29, 0x3b, &(0x7f0000000080)=ANY=[], 0x8) recvmmsg(r0, &(0x7f0000000040), 0x400000000000284, 0x2, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x0, &(0x7f0000000200)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c) 3.436150768s ago: executing program 3 (id=85): r0 = syz_usb_connect$hid(0x2, 0x3f, &(0x7f0000000400)=ANY=[@ANYBLOB="1201000000000020bc20005500000000000109022d00010000600209040000050301010009210000360122050009058103"], 0x0) syz_usb_disconnect(r0) r1 = syz_usb_connect(0x0, 0x24, &(0x7f0000000680)={{0x12, 0x1, 0x300, 0xc3, 0xfe, 0x5d, 0x8, 0x16c0, 0x5df, 0x6b16, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x7, 0x7, 0x20}}]}}, 0x0) syz_usb_control_io$printer(r1, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f00000006c0)={0x24, 0x0, 0x0, &(0x7f0000000040)={0x0, 0x22, 0x5, {[@main=@item_4={0x3, 0x0, 0xa, "217b8d97"}]}}, 0x0}, 0x0) syz_usb_control_io$uac1(r1, &(0x7f00000001c0)={0x14, &(0x7f0000000080)={0x20, 0x9, 0x2, {0x2, 0xb}}, &(0x7f0000000180)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x42c}}}, &(0x7f0000000440)={0x44, &(0x7f0000000200)={0x0, 0x11, 0x55, "46232f294e82798c368e50f8353aef052c0f9edf53eaaf5f62689f401e72162af131e5d5a3c96d7a71eb74a12d91c2137a5b593d82f8048aa330e148b3c946f42587b7329a5dee98c345b0bcae04351840bac7cff5"}, &(0x7f0000000280)={0x0, 0xa, 0x1, 0xb}, &(0x7f00000002c0)={0x0, 0x8, 0x1, 0x2}, &(0x7f0000000300)={0x20, 0x81, 0x3, "6254a9"}, &(0x7f0000000340)={0x20, 0x82, 0x1, "d2"}, 0xfffffffffffffffd, &(0x7f0000000380)={0x20, 0x84, 0x4, "3c712de6"}, &(0x7f00000003c0)={0x20, 0x85, 0x3, "f0b01a"}}) 553.919984ms ago: executing program 1 (id=138): r0 = getpgid(0x0) r1 = syz_pidfd_open(r0, 0x0) unshare(0x62020600) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) r2 = pidfd_getfd(r1, r1, 0x0) setns(r2, 0x66020000) 498.727106ms ago: executing program 1 (id=139): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeeb, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600722, 0x19) mremap(&(0x7f0000064000/0x3000)=nil, 0x3000, 0x600000, 0x3, &(0x7f0000a00000/0x600000)=nil) syz_kvm_setup_syzos_vm$x86(0xffffffffffffffff, &(0x7f0000c00000/0x400000)=nil) mmap(&(0x7f000095f000/0x3000)=nil, 0x3000, 0x0, 0x3032, 0xffffffffffffffff, 0x4000) munmap(&(0x7f00003fe000/0xc00000)=nil, 0xc00000) 496.210597ms ago: executing program 0 (id=141): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_int(r0, 0x29, 0x1a, &(0x7f0000000080)=0x2, 0x4) bind$inet6(r0, &(0x7f0000000540)={0xa, 0x4e22, 0x7, @empty, 0x1fc}, 0x1c) listen(r0, 0x0) r1 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r1, &(0x7f0000000080)=[{&(0x7f0000000200)="a10100001500add427323b470c45b45602067fffffff81004e22000d00ff0028925aa80020007b00090080000efffeffe809000000ff0000f03ac7100003ffffffffffffffffffffffe7ee00000000000000000200000000", 0x1a1}], 0x1) 465.537658ms ago: executing program 0 (id=142): r0 = fsopen(&(0x7f0000000100)='configfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x0, 0x0) fchdir(r1) r2 = openat$dir(0xffffffffffffff9c, &(0x7f0000000080)='.\x00', 0x0, 0x0) lseek(r2, 0x0, 0x1) 427.06454ms ago: executing program 0 (id=143): r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0xa2f01, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup(r1) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}) write$tun(r0, &(0x7f00000005c0)={@val={0xa, 0x8100}, @void, @eth={@multicast, @broadcast, @void, {@ipv6={0x86dd, @udp={0x4, 0x6, "f1e8a2", 0x9c, 0x11, 0xff, @private0={0xfc, 0x0, '\x00', 0x1}, @mcast1, {[], {0x4e23, 0x4e21, 0x9c, 0x0, @wg=@initiation={0x1, 0x3, "514555c8ea353ec43bd42ed6012538ec9d73f209fcb697b22a514c234027d99f", "6026e255507736306c938759746cbee7fe6d02ae33f3db042cca192dddc7cd0599ebb0fd64b1d9347e82d56f6581c8d0", "01e7349b58f9c57920246ff4793a44400aa9ca86137c006855d092f5", {"3929785a842f80b5e4e1efd7207f7098", "7331a6d1694179fd357a9a2cc54ea5bd"}}}}}}}}}, 0xd6) 373.230252ms ago: executing program 3 (id=144): r0 = openat$kvm(0x0, &(0x7f00000002c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CAP_SPLIT_IRQCHIP(r1, 0x4068aea3, &(0x7f00000000c0)={0x79, 0x0, 0x1}) ioctl$KVM_SET_GSI_ROUTING(r1, 0x4008ae6a, &(0x7f0000000440)={0x1, 0x0, [{0x4, 0x4, 0x0, 0x0, @msi={0x400, 0x8, 0x1c0, 0x4}}]}) r2 = eventfd2(0x7, 0x1) ioctl$KVM_IRQFD(r1, 0x4020ae76, &(0x7f0000000080)={r2, 0x4}) 322.536434ms ago: executing program 0 (id=146): rt_sigprocmask(0x0, &(0x7f0000000000)={[0xffffffed]}, 0x0, 0x8) r0 = gettid() r1 = getpid() rt_tgsigqueueinfo(r1, r0, 0x7, &(0x7f0000000000)={0x200c, 0x3, 0x4}) r2 = signalfd(0xffffffffffffffff, &(0x7f00007aeff8)={[0xfffffffffffffffc]}, 0x8) read(r2, &(0x7f0000000740)=""/377, 0x179) 288.026447ms ago: executing program 2 (id=147): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) close_range(r3, 0xffffffffffffffff, 0x0) 287.531696ms ago: executing program 0 (id=155): r0 = syz_open_dev$usbfs(&(0x7f00000000c0), 0x204, 0x2) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1000002, 0x11012, r0, 0x10c000) r1 = syz_open_dev$evdev(&(0x7f0000000080), 0x0, 0x882) ioctl$EVIOCGMASK(r1, 0x80104592, &(0x7f00000000c0)={0x1, 0xe4ff71c170d132d5, &(0x7f0000000400)="fccdccc6aefa"}) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) 254.000018ms ago: executing program 3 (id=148): r0 = socket$inet6(0x10, 0x3, 0x0) sendto$inet6(r0, &(0x7f0000000140)="1ba0000016001d0d89fdc5cbdd045798707bed4dca141a780f0f8e", 0xff3b, 0x0, 0x0, 0x0) recvfrom$inet6(r0, &(0x7f0000000000)=""/42, 0xffffffffffffff54, 0x0, 0x0, 0x0) writev(0xffffffffffffffff, &(0x7f00000002c0)=[{&(0x7f0000000000)="48050000150019", 0x7}], 0x1) r1 = socket$inet6(0x10, 0x3, 0x0) sendto$inet6(r1, &(0x7f0000000000)='s', 0x10a73, 0x800, 0x0, 0x4b6ae4f95a5de35b) 219.89346ms ago: executing program 3 (id=149): unshare(0x6020400) r0 = socket$inet6(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, 0x0, 0x0) syz_clone3(&(0x7f0000000080)={0xa690b000, &(0x7f0000000040)=0xffffffffffffffff, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) syz_usb_disconnect(0xffffffffffffffff) pidfd_getfd(r1, 0xffffffffffffffff, 0x0) 204.80632ms ago: executing program 1 (id=150): r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0xa2f01, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000300)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup(r1) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000100)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}) write$tun(r0, &(0x7f0000000140)=ANY=[@ANYBLOB="ffffffffffffaaaaaaaaaabb88a827008100100008060001081c060400"], 0x32) 156.526522ms ago: executing program 2 (id=151): r0 = socket$inet(0x2, 0x1, 0x0) setsockopt$inet_mreqn(r0, 0x0, 0x27, &(0x7f0000000000)={@multicast1, @dev={0xac, 0x14, 0x14, 0x32}}, 0xc) setsockopt$inet_mreqn(r0, 0x0, 0x27, &(0x7f0000000100)={@multicast2, @local}, 0xc) getpid() r1 = syz_open_procfs(0x0, &(0x7f0000002180)='net/mcfilter\x00') preadv(r1, &(0x7f0000003200)=[{&(0x7f0000001a40)=""/75, 0x4b}, {&(0x7f0000000140)=""/187, 0xbb}], 0x2, 0x3, 0x0) 136.422183ms ago: executing program 2 (id=152): r0 = socket$inet(0x2, 0x2, 0x1) bind$inet(r0, &(0x7f0000000000)={0x2, 0x6e24, @empty}, 0x10) r1 = socket$inet(0x2, 0x2, 0x1) bind$inet(r1, &(0x7f0000000000)={0x2, 0x6e24, @empty}, 0x10) r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0xe, 0x7fff0000}]}) close_range(r2, 0xffffffffffffffff, 0x0) 112.379684ms ago: executing program 2 (id=153): r0 = gettid() timer_create(0x0, &(0x7f0000000180)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)=0x0) timer_settime(r1, 0x1, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x3938700}}, 0x0) futex(&(0x7f000000cffc)=0x1, 0x86, 0x2, 0x0, 0x0, 0xfffffffc) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xa, 0x28011, r2, 0x0) 100.208655ms ago: executing program 1 (id=154): mkdir(&(0x7f0000000080)='./bus\x00', 0x0) r0 = openat$dir(0xffffffffffffff9c, &(0x7f00000000c0)='.\x00', 0x0, 0x2) chdir(&(0x7f00000003c0)='./bus\x00') unlinkat(r0, &(0x7f0000000040)='./bus\x00', 0x200) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000580)='.\x00', 0xa880, 0x97) getdents64(r1, 0x0, 0x0) 87.381925ms ago: executing program 1 (id=156): rt_sigprocmask(0x0, &(0x7f0000000000)={[0xffffffed]}, 0x0, 0x8) r0 = gettid() r1 = getpid() rt_tgsigqueueinfo(r1, r0, 0xb, &(0x7f0000000000)={0x2009, 0x3, 0x4}) r2 = signalfd(0xffffffffffffffff, &(0x7f00007aeff8)={[0xfffffffffffffffc]}, 0x8) read(r2, &(0x7f0000000740)=""/377, 0x179) 74.683617ms ago: executing program 1 (id=157): r0 = userfaultfd(0x801) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000140)={0xaa, 0x224}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x3}) syz_io_uring_setup(0x400048be, &(0x7f0000000340)={0x0, 0xfffffffb, 0x20, 0xfffffff7, 0x182}, &(0x7f0000000300), &(0x7f0000ff4000), 0x0) ioctl$UFFDIO_WRITEPROTECT(r0, 0xc018aa06, 0x0) ioctl$UFFDIO_ZEROPAGE(r0, 0xc020aa04, &(0x7f0000000040)={{&(0x7f0000470000/0x4000)=nil, 0x4000}}) 27.663638ms ago: executing program 2 (id=158): ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) setxattr$incfs_metadata(&(0x7f0000000000)='./cgroup.cpu/cpuset.cpus\x00', 0x0, 0x0, 0x0, 0x2) r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_MCAST_MSFILTER(r0, 0x0, 0x2a, &(0x7f0000000040)=ANY=[@ANYBLOB="020000000000000002000000e0"], 0x190) setsockopt$inet_MCAST_MSFILTER(r0, 0x0, 0x2a, &(0x7f0000000000)=ANY=[@ANYBLOB="020000000000000002000000e0"], 0x190) setsockopt$inet_MCAST_JOIN_GROUP(r0, 0x0, 0x2a, &(0x7f0000000080)={0x2, {{0x2, 0x0, @multicast2}}}, 0x88) 605.32µs ago: executing program 2 (id=159): r0 = socket$packet(0x11, 0x3, 0x300) ioctl$ifreq_SIOCGIFINDEX_wireguard(r0, 0x8933, &(0x7f0000000100)={'wg1\x00', 0x0}) bind$packet(r0, &(0x7f00000001c0)={0x11, 0x3, r1, 0x1, 0x0, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x60}}, 0x14) setsockopt$packet_tx_ring(r0, 0x107, 0xd, &(0x7f00000000c0)=@req={0x1000, 0x4, 0x800, 0x8}, 0x10) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x3, 0x11, r0, 0x0) write(r0, &(0x7f0000000000)="01", 0x1) 0s ago: executing program 0 (id=160): fsopen(&(0x7f0000000040)='configfs\x00', 0x0) r0 = landlock_create_ruleset(&(0x7f0000000240)={0xbfbb, 0x2, 0x3}, 0x18, 0x0) landlock_restrict_self(r0, 0x0) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) r1 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r1, &(0x7f0000000040)={0x2, 0x4e23, @remote}, 0x10) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.240' (ED25519) to the list of known hosts. [ 24.037867][ T36] audit: type=1400 audit(1790181304.200:64): avc: denied { mounton } for pid=287 comm="syz-executor" path="/syzcgroup/unified" dev="sda1" ino=2023 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1 [ 24.041662][ T287] cgroup: Unknown subsys name 'net' [ 24.060558][ T36] audit: type=1400 audit(1790181304.200:65): avc: denied { mount } for pid=287 comm="syz-executor" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 24.087904][ T36] audit: type=1400 audit(1790181304.230:66): avc: denied { unmount } for pid=287 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 24.088376][ T287] cgroup: Unknown subsys name 'devices' [ 24.211309][ T287] cgroup: Unknown subsys name 'hugetlb' [ 24.216970][ T287] cgroup: Unknown subsys name 'rlimit' [ 24.332516][ T36] audit: type=1400 audit(1790181304.500:67): avc: denied { setattr } for pid=287 comm="syz-executor" name="raw-gadget" dev="devtmpfs" ino=190 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 24.355738][ T36] audit: type=1400 audit(1790181304.500:68): avc: denied { mounton } for pid=287 comm="syz-executor" path="/proc/sys/fs/binfmt_misc" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=dir permissive=1 [ 24.380543][ T36] audit: type=1400 audit(1790181304.500:69): avc: denied { mount } for pid=287 comm="syz-executor" name="/" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=filesystem permissive=1 [ 24.410791][ T289] SELinux: Context root:object_r:swapfile_t is not valid (left unmapped). Setting up swapspace version 1, size = 127995904 bytes [ 24.419708][ T36] audit: type=1400 audit(1790181304.590:70): avc: denied { relabelto } for pid=289 comm="mkswap" name="swap-file" dev="sda1" ino=2026 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 24.445167][ T36] audit: type=1400 audit(1790181304.590:71): avc: denied { write } for pid=289 comm="mkswap" path="/root/swap-file" dev="sda1" ino=2026 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 24.448028][ T287] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 24.470861][ T36] audit: type=1400 audit(1790181304.610:72): avc: denied { read } for pid=287 comm="syz-executor" name="swap-file" dev="sda1" ino=2026 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 24.505032][ T36] audit: type=1400 audit(1790181304.610:73): avc: denied { open } for pid=287 comm="syz-executor" path="/root/swap-file" dev="sda1" ino=2026 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 25.260537][ T294] bridge0: port 1(bridge_slave_0) entered blocking state [ 25.267643][ T294] bridge0: port 1(bridge_slave_0) entered disabled state [ 25.288988][ T294] bridge_slave_0: entered allmulticast mode [ 25.295479][ T294] bridge_slave_0: entered promiscuous mode [ 25.302341][ T294] bridge0: port 2(bridge_slave_1) entered blocking state [ 25.309426][ T294] bridge0: port 2(bridge_slave_1) entered disabled state [ 25.316526][ T294] bridge_slave_1: entered allmulticast mode [ 25.322965][ T294] bridge_slave_1: entered promiscuous mode [ 25.478648][ T298] bridge0: port 1(bridge_slave_0) entered blocking state [ 25.485762][ T298] bridge0: port 1(bridge_slave_0) entered disabled state [ 25.493378][ T298] bridge_slave_0: entered allmulticast mode [ 25.499913][ T298] bridge_slave_0: entered promiscuous mode [ 25.506199][ T299] bridge0: port 1(bridge_slave_0) entered blocking state [ 25.513488][ T299] bridge0: port 1(bridge_slave_0) entered disabled state [ 25.520776][ T299] bridge_slave_0: entered allmulticast mode [ 25.527064][ T299] bridge_slave_0: entered promiscuous mode [ 25.535504][ T298] bridge0: port 2(bridge_slave_1) entered blocking state [ 25.542602][ T298] bridge0: port 2(bridge_slave_1) entered disabled state [ 25.549720][ T298] bridge_slave_1: entered allmulticast mode [ 25.556044][ T298] bridge_slave_1: entered promiscuous mode [ 25.562593][ T299] bridge0: port 2(bridge_slave_1) entered blocking state [ 25.569695][ T299] bridge0: port 2(bridge_slave_1) entered disabled state [ 25.576773][ T299] bridge_slave_1: entered allmulticast mode [ 25.583112][ T299] bridge_slave_1: entered promiscuous mode [ 25.608557][ T300] bridge0: port 1(bridge_slave_0) entered blocking state [ 25.615888][ T300] bridge0: port 1(bridge_slave_0) entered disabled state [ 25.623217][ T300] bridge_slave_0: entered allmulticast mode [ 25.629565][ T300] bridge_slave_0: entered promiscuous mode [ 25.642370][ T294] bridge0: port 2(bridge_slave_1) entered blocking state [ 25.649463][ T294] bridge0: port 2(bridge_slave_1) entered forwarding state [ 25.656844][ T294] bridge0: port 1(bridge_slave_0) entered blocking state [ 25.663935][ T294] bridge0: port 1(bridge_slave_0) entered forwarding state [ 25.672120][ T300] bridge0: port 2(bridge_slave_1) entered blocking state [ 25.679208][ T300] bridge0: port 2(bridge_slave_1) entered disabled state [ 25.686298][ T300] bridge_slave_1: entered allmulticast mode [ 25.692711][ T300] bridge_slave_1: entered promiscuous mode [ 25.818152][ T298] bridge0: port 2(bridge_slave_1) entered blocking state [ 25.825274][ T298] bridge0: port 2(bridge_slave_1) entered forwarding state [ 25.832621][ T298] bridge0: port 1(bridge_slave_0) entered blocking state [ 25.839680][ T298] bridge0: port 1(bridge_slave_0) entered forwarding state [ 25.853374][ T299] bridge0: port 2(bridge_slave_1) entered blocking state [ 25.860481][ T299] bridge0: port 2(bridge_slave_1) entered forwarding state [ 25.867786][ T299] bridge0: port 1(bridge_slave_0) entered blocking state [ 25.874859][ T299] bridge0: port 1(bridge_slave_0) entered forwarding state [ 25.883285][ T13] bridge0: port 1(bridge_slave_0) entered disabled state [ 25.890927][ T13] bridge0: port 2(bridge_slave_1) entered disabled state [ 25.898283][ T13] bridge0: port 1(bridge_slave_0) entered disabled state [ 25.905634][ T13] bridge0: port 1(bridge_slave_0) entered disabled state [ 25.913432][ T13] bridge0: port 2(bridge_slave_1) entered disabled state [ 25.920769][ T13] bridge0: port 2(bridge_slave_1) entered disabled state [ 25.944447][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 25.951551][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 25.961915][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 25.969021][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 26.008762][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 26.015894][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 26.030840][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 26.037905][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 26.064371][ T44] bridge0: port 1(bridge_slave_0) entered blocking state [ 26.071473][ T44] bridge0: port 1(bridge_slave_0) entered forwarding state [ 26.080587][ T44] bridge0: port 1(bridge_slave_0) entered blocking state [ 26.087654][ T44] bridge0: port 1(bridge_slave_0) entered forwarding state [ 26.101101][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 26.108169][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 26.119432][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 26.126507][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 26.142534][ T294] veth0_vlan: entered promiscuous mode [ 26.163092][ T294] veth1_macvtap: entered promiscuous mode [ 26.197876][ T298] veth0_vlan: entered promiscuous mode [ 26.213440][ T299] veth0_vlan: entered promiscuous mode [ 26.224625][ T298] veth1_macvtap: entered promiscuous mode [ 26.247880][ T300] veth0_vlan: entered promiscuous mode [ 26.258055][ T294] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 26.285469][ T299] veth1_macvtap: entered promiscuous mode [ 26.303752][ T300] veth1_macvtap: entered promiscuous mode [ 26.366169][ T319] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 26.573650][ T345] Bluetooth: hci0: sending frame failed (-49) [ 26.580118][ T54] Bluetooth: hci0: Opcode 0x1003 failed: -49 [ 26.616125][ T350] netlink: 68 bytes leftover after parsing attributes in process `syz.1.15'. [ 26.689554][ T358] FAULT_INJECTION: forcing a failure. [ 26.689554][ T358] name failslab, interval 1, probability 0, space 0, times 1 [ 26.703041][ T358] CPU: 0 UID: 0 PID: 358 Comm: syz.3.19 Not tainted syzkaller #0 b27277d6799ceeca3eb852bae8b5683c15874786 [ 26.703079][ T358] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 26.703105][ T358] Call Trace: [ 26.703113][ T358] [ 26.703121][ T358] __dump_stack+0x21/0x30 [ 26.703169][ T358] dump_stack_lvl+0x140/0x1c0 [ 26.703202][ T358] ? __cfi_dump_stack_lvl+0x10/0x10 [ 26.703236][ T358] dump_stack+0x19/0x20 [ 26.703267][ T358] should_fail_ex+0x3c2/0x510 [ 26.703295][ T358] ? anon_vma_name_alloc+0x5e/0x1a0 [ 26.703318][ T358] should_failslab+0xac/0x100 [ 26.703346][ T358] __kmalloc_noprof+0x69/0x510 [ 26.703371][ T358] ? anon_vma_name_alloc+0x5e/0x1a0 [ 26.703392][ T358] ? __kasan_check_write+0x18/0x20 [ 26.703416][ T358] ? _copy_from_user+0x87/0xa0 [ 26.703449][ T358] anon_vma_name_alloc+0x5e/0x1a0 [ 26.703471][ T358] prctl_set_vma+0x24d/0x590 [ 26.703496][ T358] ? prctl_get_mdwe+0x120/0x120 [ 26.703517][ T358] ? __kasan_check_read+0x15/0x20 [ 26.703538][ T358] ? static_key_count+0x45/0x70 [ 26.703566][ T358] ? security_task_prctl+0x2b4/0x2e0 [ 26.703594][ T358] __se_sys_prctl+0x4a9/0x1480 [ 26.703617][ T358] ? __x64_sys_prctl+0xf0/0xf0 [ 26.703639][ T358] ? __kasan_check_write+0x18/0x20 [ 26.703661][ T358] ? fpregs_restore_userregs+0x11c/0x260 [ 26.703689][ T358] __x64_sys_prctl+0xc3/0xf0 [ 26.703711][ T358] x64_sys_call+0x2614/0x2ee0 [ 26.703732][ T358] do_syscall_64+0x57/0xf0 [ 26.703753][ T358] ? clear_bhb_loop+0x50/0xa0 [ 26.703781][ T358] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 26.703818][ T358] RIP: 0033:0x7f0b14b9e159 [ 26.703844][ T358] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 26.703862][ T358] RSP: 002b:00007f0b15a13028 EFLAGS: 00000246 ORIG_RAX: 000000000000009d [ 26.703895][ T358] RAX: ffffffffffffffda RBX: 00007f0b14e25fa0 RCX: 00007f0b14b9e159 [ 26.703912][ T358] RDX: 0000200000ffc000 RSI: 0000000000000000 RDI: 0000000053564d41 [ 26.703927][ T358] RBP: 00007f0b14c3506b R08: 0000200000000b40 R09: 0000000000000000 [ 26.703942][ T358] R10: 0000000000001000 R11: 0000000000000246 R12: 0000000000000000 [ 26.703956][ T358] R13: 00007f0b14e26038 R14: 00007f0b14e25fa0 R15: 00007fff96b16548 [ 26.703976][ T358] [ 26.716809][ T360] netlink: 9 bytes leftover after parsing attributes in process `syz.0.20'. [ 26.951904][ T360] gretap0: entered promiscuous mode [ 27.036558][ T369] tipc: Started in network mode [ 27.045036][ T369] tipc: Node identity 1000001, cluster identity 4711 [ 27.053487][ T369] tipc: Node number set to 16777217 [ 27.218163][ T394] netlink: 1412 bytes leftover after parsing attributes in process `syz.2.36'. [ 27.251283][ T397] FAULT_INJECTION: forcing a failure. [ 27.251283][ T397] name failslab, interval 1, probability 0, space 0, times 0 [ 27.275826][ T397] CPU: 0 UID: 0 PID: 397 Comm: syz.2.37 Not tainted syzkaller #0 b27277d6799ceeca3eb852bae8b5683c15874786 [ 27.275864][ T397] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 27.275879][ T397] Call Trace: [ 27.275886][ T397] [ 27.275895][ T397] __dump_stack+0x21/0x30 [ 27.275934][ T397] dump_stack_lvl+0x140/0x1c0 [ 27.275967][ T397] ? __cfi_dump_stack_lvl+0x10/0x10 [ 27.275998][ T397] ? kernel_text_address+0xa9/0xe0 [ 27.276033][ T397] dump_stack+0x19/0x20 [ 27.276063][ T397] should_fail_ex+0x3c2/0x510 [ 27.276092][ T397] should_failslab+0xac/0x100 [ 27.276120][ T397] kmem_cache_alloc_lru_noprof+0x44/0x410 [ 27.276147][ T397] ? __d_alloc+0x42/0x8c0 [ 27.276171][ T397] ? stack_depot_save_flags+0x38/0x800 [ 27.276203][ T397] __d_alloc+0x42/0x8c0 [ 27.276225][ T397] d_alloc_parallel+0xe4/0x1370 [ 27.276249][ T397] ? security_file_alloc+0x49/0x220 [ 27.276270][ T397] ? init_file+0x9e/0x210 [ 27.276321][ T397] ? alloc_empty_file+0xd9/0x270 [ 27.276352][ T397] ? path_openat+0xf4/0x35a0 [ 27.276380][ T397] ? do_filp_open+0x1f2/0x440 [ 27.276410][ T397] ? do_sys_openat2+0x134/0x1d0 [ 27.276443][ T397] ? __x64_sys_openat+0x13a/0x170 [ 27.276476][ T397] ? x64_sys_call+0xe69/0x2ee0 [ 27.276497][ T397] ? do_syscall_64+0x57/0xf0 [ 27.276519][ T397] ? entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 27.276550][ T397] ? avc_has_perm_noaudit+0x26b/0x360 [ 27.276580][ T397] ? __asan_memcpy+0x5a/0x80 [ 27.276603][ T397] ? __cfi_d_alloc_parallel+0x10/0x10 [ 27.276628][ T397] ? __kasan_check_write+0x18/0x20 [ 27.276650][ T397] ? rwsem_read_trylock+0x275/0x5a0 [ 27.276694][ T397] ? downgrade_write+0x470/0x470 [ 27.276727][ T397] __lookup_slow+0x150/0x420 [ 27.276755][ T397] ? lookup_one_len+0x300/0x300 [ 27.276782][ T397] ? down_read+0x7f/0xe0 [ 27.276808][ T397] ? __cfi_kernfs_iop_permission+0x10/0x10 [ 27.276839][ T397] lookup_slow+0x57/0x80 [ 27.276868][ T397] link_path_walk+0x991/0xeb0 [ 27.276895][ T397] path_openat+0x298/0x35a0 [ 27.276927][ T397] ? schedule+0xc5/0x240 [ 27.276952][ T397] ? kasan_save_alloc_info+0x3a/0x50 [ 27.276974][ T397] ? __kasan_slab_alloc+0x73/0x90 [ 27.277002][ T397] ? getname+0x1b/0x30 [ 27.277026][ T397] ? x64_sys_call+0xe69/0x2ee0 [ 27.277047][ T397] ? do_syscall_64+0x57/0xf0 [ 27.277072][ T397] ? do_filp_open+0x440/0x440 [ 27.277104][ T397] do_filp_open+0x1f2/0x440 [ 27.277136][ T397] ? __cfi_do_filp_open+0x10/0x10 [ 27.277172][ T397] ? alloc_fd+0x4c1/0x570 [ 27.277201][ T397] do_sys_openat2+0x134/0x1d0 [ 27.277234][ T397] ? fput+0x1a4/0x230 [ 27.277262][ T397] ? do_sys_open+0x100/0x100 [ 27.277297][ T397] __x64_sys_openat+0x13a/0x170 [ 27.277331][ T397] x64_sys_call+0xe69/0x2ee0 [ 27.277352][ T397] do_syscall_64+0x57/0xf0 [ 27.277372][ T397] ? clear_bhb_loop+0x50/0xa0 [ 27.277401][ T397] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 27.277428][ T397] RIP: 0033:0x7f1ee139e159 [ 27.277447][ T397] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 27.277466][ T397] RSP: 002b:00007f1ee2316028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 27.277490][ T397] RAX: ffffffffffffffda RBX: 00007f1ee1625fa0 RCX: 00007f1ee139e159 [ 27.277507][ T397] RDX: 0000000000000002 RSI: 0000200000000680 RDI: ffffffffffffff9c [ 27.277523][ T397] RBP: 00007f1ee143506b R08: 0000000000000000 R09: 0000000000000000 [ 27.277538][ T397] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 27.277551][ T397] R13: 00007f1ee1626038 R14: 00007f1ee1625fa0 R15: 00007ffe239ab5a8 [ 27.277570][ T397] [ 27.660079][ T9] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 27.831393][ T9] usb 2-1: Using ep0 maxpacket: 16 [ 27.838081][ T9] usb 2-1: config 0 interface 0 altsetting 5 endpoint 0x81 has an invalid bInterval 128, changing to 11 [ 27.839268][ T418] rust_binder: 417:418 failed to claim space for a BINDER_TYPE_PTR (offset: 4240, limit: 4304, size: 18446744073709551607) [ 27.851157][ T9] usb 2-1: config 0 interface 0 altsetting 5 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 27.864146][ T418] rust_binder: 417:418 error while translating object: EINVAL [ 27.876912][ T9] usb 2-1: config 0 interface 0 has no altsetting 0 [ 27.883529][ T418] rust_binder: Failure in copy_transaction_data: EINVAL [ 27.889660][ T418] rust_binder: 417:418 transaction call to 417:0 failed EINVAL, code 0 size 120-24 [ 27.892007][ T9] usb 2-1: New USB device found, idVendor=172f, idProduct=0501, bcdDevice= 0.00 [ 27.915162][ T9] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 27.917188][ T312] rust_binder: 417: undelivered TRANSACTION_ERROR: 29201 [ 27.928086][ T9] usb 2-1: config 0 descriptor?? [ 28.345029][ T9] input: HID 172f:0501 as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/0003:172F:0501.0001/input/input4 [ 28.359731][ T9] waltop 0003:172F:0501.0001: input,hiddev96,hidraw0: USB HID v0.00 Device [HID 172f:0501] on usb-dummy_hcd.1-1/input0 [ 28.917282][ T465] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 28.926444][ T465] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 29.831339][ T36] kauditd_printk_skb: 81 callbacks suppressed [ 29.831359][ T36] audit: type=1400 audit(1790181310.000:155): avc: denied { read append } for pid=477 comm="syz.2.65" name="rnullb0" dev="devtmpfs" ino=31 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 29.862156][ T36] audit: type=1400 audit(1790181310.000:156): avc: denied { open } for pid=477 comm="syz.2.65" path="/dev/rnullb0" dev="devtmpfs" ino=31 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 29.885990][ T36] audit: type=1400 audit(1790181310.030:157): avc: denied { map } for pid=477 comm="syz.2.65" path="/dev/rnullb0" dev="devtmpfs" ino=31 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 30.055697][ T482] FAULT_INJECTION: forcing a failure. [ 30.055697][ T482] name failslab, interval 1, probability 0, space 0, times 0 [ 30.068716][ T482] CPU: 0 UID: 60929 PID: 482 Comm: syz.0.67 Not tainted syzkaller #0 b27277d6799ceeca3eb852bae8b5683c15874786 [ 30.068757][ T482] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 30.068771][ T482] Call Trace: [ 30.068783][ T482] [ 30.068791][ T482] __dump_stack+0x21/0x30 [ 30.068828][ T482] dump_stack_lvl+0x140/0x1c0 [ 30.068861][ T482] ? __cfi_dump_stack_lvl+0x10/0x10 [ 30.068895][ T482] dump_stack+0x19/0x20 [ 30.068925][ T482] should_fail_ex+0x3c2/0x510 [ 30.068952][ T482] should_failslab+0xac/0x100 [ 30.068985][ T482] __kmalloc_node_track_caller_noprof+0x65/0x4f0 [ 30.069013][ T482] ? key_alloc+0x338/0x1060 [ 30.069045][ T482] ? kmem_cache_alloc_noprof+0x1e2/0x410 [ 30.069071][ T482] kmemdup_noprof+0x31/0x80 [ 30.069092][ T482] key_alloc+0x338/0x1060 [ 30.069125][ T482] keyring_alloc+0x4b/0xc0 [ 30.069148][ T482] install_thread_keyring_to_cred+0xa0/0x130 [ 30.069179][ T482] __se_sys_keyctl+0xc69/0xe40 [ 30.069208][ T482] ? __x64_sys_keyctl+0xf0/0xf0 [ 30.069237][ T482] ? __cfi_do_futex+0x10/0x10 [ 30.069266][ T482] ? mutex_unlock+0x90/0x240 [ 30.069295][ T482] ? __se_sys_futex+0x13c/0x320 [ 30.069326][ T482] ? fput+0x1a4/0x230 [ 30.069356][ T482] ? xfd_validate_state+0x68/0x140 [ 30.069400][ T482] ? __kasan_check_write+0x18/0x20 [ 30.069424][ T482] ? fpregs_restore_userregs+0x11c/0x260 [ 30.069455][ T482] __x64_sys_keyctl+0xc3/0xf0 [ 30.069485][ T482] x64_sys_call+0x996/0x2ee0 [ 30.069507][ T482] do_syscall_64+0x57/0xf0 [ 30.069528][ T482] ? clear_bhb_loop+0x50/0xa0 [ 30.069557][ T482] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 30.069585][ T482] RIP: 0033:0x7fdf3b59e159 [ 30.069604][ T482] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 30.069623][ T482] RSP: 002b:00007fdf3c445028 EFLAGS: 00000246 ORIG_RAX: 00000000000000fa [ 30.069649][ T482] RAX: ffffffffffffffda RBX: 00007fdf3b825fa0 RCX: 00007fdf3b59e159 [ 30.069666][ T482] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 000000000000000e [ 30.069679][ T482] RBP: 00007fdf3b63506b R08: 0000000000000000 R09: 0000000000000000 [ 30.069693][ T482] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 30.069706][ T482] R13: 00007fdf3b826038 R14: 00007fdf3b825fa0 R15: 00007ffe97920538 [ 30.069725][ T482] [ 30.088105][ T312] usb 2-1: USB disconnect, device number 2 [ 30.255310][ T36] audit: type=1400 audit(1790181310.420:158): avc: denied { name_bind } for pid=486 comm="syz.1.70" src=20004 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=udp_socket permissive=1 [ 30.355366][ T36] audit: type=1400 audit(1790181310.520:159): avc: denied { create } for pid=489 comm="syz.0.68" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 30.404930][ T36] audit: type=1400 audit(1790181310.520:160): avc: denied { setopt } for pid=489 comm="syz.0.68" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 30.444010][ T36] audit: type=1400 audit(1790181310.520:161): avc: denied { ioctl } for pid=489 comm="syz.0.68" path="socket:[4762]" dev="sockfs" ino=4762 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 30.468429][ T36] audit: type=1400 audit(1790181310.520:162): avc: denied { bind } for pid=489 comm="syz.0.68" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 30.480264][ T54] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 30.488574][ T36] audit: type=1400 audit(1790181310.520:163): avc: denied { setopt } for pid=491 comm="syz.1.71" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 30.513271][ T36] audit: type=1400 audit(1790181310.620:164): avc: denied { mount } for pid=499 comm="syz.1.75" name="/" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=filesystem permissive=1 [ 30.592843][ T510] syzkaller0: refused to change device tx_queue_len [ 30.706465][ T530] syzkaller1: entered promiscuous mode [ 30.712047][ T530] syzkaller1: entered allmulticast mode [ 30.825441][ T538] netlink: 20 bytes leftover after parsing attributes in process `syz.2.93'. [ 30.855301][ T540] [ 30.878945][ T9] usb 4-1: new full-speed USB device number 2 using dummy_hcd [ 30.903444][ T547] syzkaller1: entered promiscuous mode [ 30.909005][ T547] syzkaller1: entered allmulticast mode [ 31.007676][ T557] syzkaller1: entered promiscuous mode [ 31.013326][ T557] syzkaller1: entered allmulticast mode [ 31.049979][ T9] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 31.061333][ T9] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 31.072371][ T9] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 31.082357][ T9] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 31.095214][ T9] usb 4-1: New USB device found, idVendor=20bc, idProduct=5500, bcdDevice= 0.00 [ 31.104391][ T9] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 31.113296][ T9] usb 4-1: config 0 descriptor?? [ 31.299004][ T312] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 31.329671][ T9] usbhid 4-1:0.0: can't add hid device: -71 [ 31.335778][ T9] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 31.344659][ T9] usb 4-1: USB disconnect, device number 2 [ 31.369063][ T46] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 31.448953][ T312] usb 1-1: Using ep0 maxpacket: 16 [ 31.455362][ T312] usb 1-1: config 0 has an invalid interface number: 34 but max is 0 [ 31.463562][ T312] usb 1-1: config 0 has no interface number 0 [ 31.469736][ T312] usb 1-1: config 0 interface 34 altsetting 0 bulk endpoint 0xA has invalid maxpacket 1023 [ 31.479809][ T312] usb 1-1: config 0 interface 34 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 80 [ 31.491278][ T312] usb 1-1: New USB device found, idVendor=0b95, idProduct=772a, bcdDevice=82.73 [ 31.500430][ T312] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 31.508490][ T312] usb 1-1: Product: syz [ 31.512783][ T312] usb 1-1: Manufacturer: syz [ 31.517506][ T312] usb 1-1: SerialNumber: syz [ 31.523350][ T312] usb 1-1: config 0 descriptor?? [ 31.528733][ T562] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 31.550916][ T46] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 31.554411][ T562] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 31.562701][ T46] usb 3-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 31.581205][ T46] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 31.604023][ T46] usb 3-1: config 0 descriptor?? [ 31.654237][ T570] ªªªªªª: renamed from vlan0 (while UP) [ 31.791077][ T562] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 31.798407][ T562] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 31.808935][ T9] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 31.958965][ T9] usb 4-1: Using ep0 maxpacket: 32 [ 31.965449][ T9] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 31.975614][ T9] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 31.986625][ T9] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 31.996416][ T9] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 32.009522][ T9] usb 4-1: New USB device found, idVendor=20bc, idProduct=5500, bcdDevice= 0.00 [ 32.010360][ T312] asix 1-1:0.34 (unnamed net_device) (uninitialized): invalid hw address, using random [ 32.018593][ T9] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 32.020911][ T9] usb 4-1: config 0 descriptor?? [ 32.038786][ T564] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 32.050136][ T564] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 32.059871][ T46] keytouch 0003:0926:3333.0002: fixing up Keytouch IEC report descriptor [ 32.070650][ T46] input: HID 0926:3333 as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/0003:0926:3333.0002/input/input5 [ 32.152490][ T46] keytouch 0003:0926:3333.0002: input,hidraw0: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.2-1/input0 [ 32.444493][ T9] betop 0003:20BC:5500.0003: unbalanced collection at end of report description [ 32.455345][ T9] betop 0003:20BC:5500.0003: parse failed [ 32.461310][ T9] betop 0003:20BC:5500.0003: probe with driver betop failed with error -22 [ 32.512411][ T614] syzkaller1: entered promiscuous mode [ 32.517978][ T614] syzkaller1: entered allmulticast mode [ 32.556058][ T9] usb 3-1: USB disconnect, device number 2 [ 32.831782][ T312] asix 1-1:0.34 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71 [ 32.842002][ T312] asix 1-1:0.34: probe with driver asix failed with error -71 [ 32.851502][ T312] usb 1-1: USB disconnect, device number 2 [ 33.358710][ T630] device-mapper: ioctl: Unable to interpret geometry settings. [ 33.686347][ T46] usb 4-1: USB disconnect, device number 3 [ 33.829342][ T670] netlink: 679 bytes leftover after parsing attributes in process `syz.3.148'. [ 34.070129][ T695] ------------[ cut here ]------------ [ 34.075679][ T695] skb_assert_len [ 34.079625][ T695] WARNING: CPU: 1 PID: 695 at include/linux/skbuff.h:2720 __dev_queue_xmit+0x1e1d/0x3780 [ 34.089569][ T695] Modules linked in: [ 34.093506][ T695] CPU: 1 UID: 0 PID: 695 Comm: syz.2.159 Not tainted syzkaller #0 b27277d6799ceeca3eb852bae8b5683c15874786 [ 34.104968][ T695] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 34.115101][ T695] RIP: 0010:__dev_queue_xmit+0x1e1d/0x3780 [ 34.121013][ T695] Code: 00 00 00 fc ff df e9 ea e6 ff ff e8 4d d0 04 fd c6 05 65 ba 62 03 01 48 c7 c7 a0 28 8b 86 48 c7 c6 2d bc 19 87 e8 e3 9f 81 fc <0f> 0b 80 3d 4a ba 62 03 01 0f 84 af e3 ff ff e8 1f d0 04 fd c6 05 [ 34.140706][ T695] RSP: 0018:ffffc9000dd77500 EFLAGS: 00010246 [ 34.146829][ T695] RAX: 8e4e176ae47f6d00 RBX: ffff8881208a5cf0 RCX: 0000000000080000 [ 34.154877][ T695] RDX: ffffc90001e73000 RSI: 00000000000019dc RDI: 00000000000019dd [ 34.162933][ T695] RBP: ffffc9000dd777e0 R08: 0000000000000003 R09: 0000000000000004 [ 34.171022][ T695] R10: dffffc0000000000 R11: fffffbfff0e9f334 R12: 1ffff11024114b92 [ 34.179090][ T695] R13: ffff8881208a5c80 R14: 0000000000000000 R15: dffffc0000000000 [ 34.187119][ T695] FS: 00007f1ee23166c0(0000) GS:ffff8881f6f00000(0000) knlGS:0000000000000000 [ 34.196116][ T695] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 34.202772][ T695] CR2: 000000110c2d8220 CR3: 000000011f962000 CR4: 00000000003526b0 [ 34.210842][ T695] Call Trace: [ 34.214175][ T695] [ 34.217216][ T695] ? __kasan_check_write+0x18/0x20 [ 34.222411][ T695] ? save_fpregs_to_fpstate+0x19d/0x230 [ 34.227996][ T695] ? alloc_skb_with_frags+0x80b/0x8b0 [ 34.233441][ T695] ? __cfi___dev_queue_xmit+0x10/0x10 [ 34.238852][ T695] ? __kasan_check_write+0x18/0x20 [ 34.244049][ T695] ? skb_set_owner_w+0x280/0x3d0 [ 34.249053][ T695] ? sock_alloc_send_pskb+0x8a1/0x9a0 [ 34.254470][ T695] ? packet_parse_headers+0x7f0/0xb10 [ 34.259913][ T695] ? packet_parse_headers+0x883/0xb10 [ 34.265318][ T695] ? __cfi_sock_alloc_send_pskb+0x10/0x10 [ 34.271118][ T695] ? skb_setup_tx_timestamp+0x210/0x210 [ 34.276704][ T695] packet_xmit+0x76/0x360 [ 34.281084][ T695] ? is_vmalloc_addr+0x11/0x40 [ 34.285889][ T695] packet_sendmsg+0x228b/0x56b0 [ 34.290839][ T695] ? avc_has_perm_noaudit+0x26b/0x360 [ 34.296256][ T695] ? __cfi_packet_sendmsg+0x10/0x10 [ 34.301559][ T695] ? avc_has_perm+0x155/0x240 [ 34.306274][ T695] ? mas_split_final_node+0x260/0x680 [ 34.311708][ T695] ? bpf_lsm_socket_sendmsg+0xd/0x20 [ 34.317030][ T695] ? security_socket_sendmsg+0x3d/0x100 [ 34.322649][ T695] ? __cfi_packet_sendmsg+0x10/0x10 [ 34.327886][ T695] sock_write_iter+0x445/0x490 [ 34.332700][ T695] ? __cfi_sock_write_iter+0x10/0x10 [ 34.338018][ T695] vfs_write+0x762/0xfd0 [ 34.342321][ T695] ? __cfi_vfs_write+0x10/0x10 [ 34.347178][ T695] ksys_write+0x145/0x260 [ 34.351585][ T695] ? xfd_validate_state+0x68/0x140 [ 34.356743][ T695] ? __cfi_ksys_write+0x10/0x10 [ 34.361666][ T695] ? __kasan_check_write+0x18/0x20 [ 34.366824][ T695] ? fpregs_restore_userregs+0x11c/0x260 [ 34.372519][ T695] __x64_sys_write+0x7f/0x90 [ 34.377169][ T695] x64_sys_call+0x271c/0x2ee0 [ 34.381920][ T695] do_syscall_64+0x57/0xf0 [ 34.386379][ T695] ? clear_bhb_loop+0x50/0xa0 [ 34.391133][ T695] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 34.397065][ T695] RIP: 0033:0x7f1ee139e159 [ 34.401570][ T695] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 34.421290][ T695] RSP: 002b:00007f1ee2316028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 34.429777][ T695] RAX: ffffffffffffffda RBX: 00007f1ee1625fa0 RCX: 00007f1ee139e159 [ 34.437809][ T695] RDX: 0000000000000001 RSI: 0000200000000000 RDI: 0000000000000003 [ 34.445838][ T695] RBP: 00007f1ee143506b R08: 0000000000000000 R09: 0000000000000000 [ 34.453855][ T695] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 34.461862][ T695] R13: 00007f1ee1626038 R14: 00007f1ee1625fa0 R15: 00007ffe239ab5a8 [ 34.469901][ T695] [ 34.472949][ T695] ---[ end trace 0000000000000000 ]--- [ 34.479770][ T695] skb len=0 headroom=144 headlen=0 tailroom=240 [ 34.479770][ T695] mac=(144,0) mac_len=0 net=(144,-1) trans=-1 [ 34.479770][ T695] shinfo(txflags=0 nr_frags=0 gso(size=0 type=0 segs=0)) [ 34.479770][ T695] csum(0x0 start=0 offset=0 ip_summed=0 complete_sw=0 valid=0 level=0) [ 34.479770][ T695] hash(0x0 sw=0 l4=0) proto=0x0000 pkttype=0 iif=0 [ 34.479770][ T695] priority=0x0 mark=0x0 alloc_cpu=1 vlan_all=0x0 [ 34.479770][ T695] encapsulation=0 inner(proto=0x0000, mac=0, net=0, trans=0) [ 34.527081][ T695] dev name=wg1 feat=0x00000106401d4829 [ 34.532651][ T695] sk family=17 type=3 proto=0